dokanx.sys

Ole Stauning

It runs as a Windows file system device driver named “Dokan”.
Publisher:
Ole Stauning  (signed and verified)

MD5:
3e60cc62b83c267ea99d38bda5ff9804

SHA-1:
d7864e4871b7f2c8d0666fb69648e2791d2bcb54

SHA-256:
8d557035bfc246359222e3c93fb13485a5d4d954b2e4bd376ec0726f880c5b34

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 2:23:49 AM UTC  (today)

File size:
42.8 KB (43,848 bytes)

File type:
Driver (Win32 SYS)

Common path:
C:\Windows\System32\drivers\dokanx.sys

Digital Signature
Signed by:

Authority:
GlobalSign nv-sa

Valid from:
4/13/2013 1:07:44 PM

Valid to:
3/15/2016 2:47:41 PM

Subject:
CN=Ole Stauning, C=DK

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112167DA5AB1B0AB7BF38F1828CA72FB1D84

File PE Metadata
Compilation timestamp:
1/20/2015 4:25:46 PM

OS version:
6.3

OS bitness:
Win32

Subsystem:
Native (none required)

Linker version:
12.0

CTPH (ssdeep):
768:sRJnFQ6p3C1jG8kJpMQreBQYxRkgTxSoFbG2hBb+Ibt:sRd3Cg8kYUeBQY5G2m0

Entry address:
0x5BE4

Entry point:
8B, FF, 55, 8B, EC, E8, 98, 45, 00, 00, 5D, E9, 00, 00, 00, 00, 8B, FF, 55, 8B, EC, 56, 8B, 75, 08, 85, F6, 75, 0E, FF, 75, 0C, 56, E8, F6, 43, 00, 00, E9, AE, 00, 00, 00, 53, 57, FF, 75, 0C, BF, D8, 7A, 40, 00, 89, 35, C4, 78, 40, 00, 57, C7, 05, D8, 7A, 40, 00, 00, 00, 08, 02, C7, 05, DC, 7A, 40, 00, D0, 78, 40, 00, FF, 15, 88, 61, 40, 00, 68, C0, 78, 40, 00, BB, 98, 71, 40, 00, 53, 57, 56, E8, A2, 01, 00, 00, 85, C0, 78, 6B, 53, E8, E6, 00, 00, 00, 8B, F8, 85, FF, 78, 58, E8, 8D, 00, 00, 00, 8B, F8, 85...
 
[+]

Entropy:
6.6178

Code size:
29.5 KB (30,208 bytes)

Driver
Display name:
Dokan

Type:
File system 'filter' driver (FileSystemDriver)


Scan dokanx.sys - Powered by Reason Core Security