x4641259.sys

DriverStudio

XINGCHEN ELECTRONICS TECHNOLOGY

It runs as a Windows 64-bit kernel mode device driver named “DragonRise HID3331 AMD64 Driver”.
Publisher:
Compuware Corporation  (signed by XINGCHEN ELECTRONICS TECHNOLOGY)

Product:
DriverStudio

Description:
Sample USB Filter Driver

Version:
3.10

MD5:
db1be8ec7b1f6adc1438af45523768e9

SHA-1:
81ee8de33580f9d9c7c417f2ed794d5a3a7e1c93

SHA-256:
3f530483a725c8409d1a3c009f16deb8956eae1d7bba427016ee4497b5842708

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/13/2016 3:22:23 AM UTC  (ten months ago)

File size:
63.4 KB (64,960 bytes)

Product version:
3.10

Copyright:
Copyright (C) 2003 Compuware Corporation

Original file name:
usbfilt.sys

File type:
Driver (Win64 SYS)

Common path:
C:\Windows\System32\drivers\x4641259.sys

Digital Signature
Authority:
VeriSign, Inc.

Valid from:
8/1/2011 8:00:00 AM

Valid to:
8/1/2013 7:59:59 AM

Subject:
CN=XINGCHEN ELECTRONICS TECHNOLOGY, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=XINGCHEN ELECTRONICS TECHNOLOGY, L=ShenZhen, S=guangdong, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
5BF1C0AD9450BAD62E43AB03CEE59ADC

File PE Metadata
Compilation timestamp:
5/9/2012 1:10:53 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Native (none required)

Linker version:
8.0

CTPH (ssdeep):
768:x1PB31re0A6oiXCGEwRjFiBSef+SOiKE7OvR4x1lbXDYVLzHGLFmB:x1RNeX6pX1bKFmmiJ4xfCvGoB

Entry address:
0xCEA0

Entry point:
48, 8B, 05, 69, DA, FF, FF, 49, B9, 32, A2, DF, 2D, 99, 2B, 00, 00, 48, 85, C0, 74, 05, 49, 3B, C1, 75, 2F, 4C, 8D, 05, 4E, DA, FF, FF, 48, B8, 20, 03, 00, 00, 80, F7, FF, FF, 48, 8B, 00, 49, 33, C0, 49, B8, FF, FF, FF, FF, FF, FF, 00, 00, 49, 23, C0, 49, 0F, 44, C1, 48, 89, 05, 26, DA, FF, FF, 48, F7, D0, 48, 89, 05, 14, DA, FF, FF, E9, E7, FD, FF, FF, CC, CC, CC, CC, CC, CC, CC, 43, 00, 6C, 00, 61, 00, 73, 00, 73, 00, 00, 00, 38, CF, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 5C, D1, 00, 00, 00, 83, 00, 00...
 
[+]

Entropy:
6.1217

Code size:
38.5 KB (39,424 bytes)

Driver
Display name:
DragonRise HID3331 AMD64 Driver

Service name:
x4641259

Type:
Kernel device driver (KernelDriver)

Group:
extended base


Scan x4641259.sys - Powered by Reason Core Security