home

h647906.sys

DriverStudio

Shenzhen Dragon Rise Micro Technology Co., Ltd

It runs as a Windows 64-bit kernel mode device driver named “DragonRise HID7906 AMD64 Driver”.
Publisher:
Compuware Corporation  (signed by Shenzhen Dragon Rise Micro Technology Co., Ltd)

Product:
DriverStudio

Description:
Sample USB Filter Driver

Version:
3.10

MD5:
d2ad67fef5b09d408be5d8438ed1e369

SHA-1:
7b3351f827577c2a041a338d71632718a34e20b0

SHA-256:
315dd24bc9ca7d773821cdb06f7a5eb1858ee14133ed25ca804e71765433bf6e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 11:58:21 PM UTC  (a few moments ago)

File size:
65.8 KB (67,336 bytes)

Product version:
3.10

Copyright:
Copyright (C) 2003 Compuware Corporation

Original file name:
usbfilt.sys

File type:
Driver (Win64 SYS)

Common path:
C:\Windows\System32\drivers\h647906.sys

Digital Signature
Signed by:
Shenzhen Dragon Rise Micro Technology Co., Ltd

Authority:
VeriSign, Inc.

Valid from:
1/26/2010 8:00:00 AM

Valid to:
1/27/2011 7:59:59 AM

Subject:
CN="Shenzhen Dragon Rise Micro Technology Co., Ltd", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Shenzhen Dragon Rise Micro Technology Co., Ltd", L=Shenzhen, S=Guangdong, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
7B1A4DDCD121E2644B9B2FEB4D7C0DF6

File PE Metadata
Compilation timestamp:
7/27/2010 5:58:52 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Native (none required)

Linker version:
8.0

CTPH (ssdeep):
1536:R4A8f7kkkkkkUoHC7QklgjMLitz4MZ7aDHCtS:R10kkkkkkUoHCkkGjqitzlZ+j

Entry address:
0xDE20

Entry point:
48, 8B, 05, E9, DA, FF, FF, 49, B9, 32, A2, DF, 2D, 99, 2B, 00, 00, 48, 85, C0, 74, 05, 49, 3B, C1, 75, 2F, 4C, 8D, 05, CE, DA, FF, FF, 48, B8, 20, 03, 00, 00, 80, F7, FF, FF, 48, 8B, 00, 49, 33, C0, 49, B8, FF, FF, FF, FF, FF, FF, 00, 00, 49, 23, C0, 49, 0F, 44, C1, 48, 89, 05, A6, DA, FF, FF, 48, F7, D0, 48, 89, 05, 94, DA, FF, FF, E9, E7, FD, FF, FF, CC, CC, CC, CC, CC, CC, CC, 43, 00, 6C, 00, 61, 00, 73, 00, 73, 00, 00, 00, C8, DE, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 12, E1, 00, 00, 80, 94, 00, 00...
 
[+]

Entropy:
6.0842

Code size:
42.8 KB (43,776 bytes)

Driver
Display name:
DragonRise HID7906 AMD64 Driver

Service name:
h647906

Type:
Kernel device driver (KernelDriver)

Group:
extended base


Scan h647906.sys - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.