home

wdfcoinstaller01005.dll

MCCI Internal Testing Software

Publisher:
MCCI Internal Testing Software  (signed and verified)

MD5:
96b9bd93d2ffd86ee9877a293c8d21b9

SHA-1:
b0407fa889b42f8a7dfc0ae6d96f85f41958b4e7

SHA-256:
02cfaea65c702245d2d549245d31d4b0114c8ea9a26a30648e1e70dbee453c60

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 2:39:36 PM UTC  (today)

File size:
1.8 MB (1,917,416 bytes)

File type:
Dynamic link library (Win64 DLL)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\usb drivers\16_shrewsbury\amd64\wdfcoinstaller01005.dll

Digital Signature
Signed by:
MCCI Internal Testing Software

Authority:
VeriSign, Inc.

Valid from:
3/16/2010 5:30:00 AM

Valid to:
4/5/2012 5:29:59 AM

Subject:
CN=MCCI Internal Testing Software, OU=MCCI Corp. Internal Use Only-DO NOT TRUST-Contact cert@mcci.com, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=MCCI Internal Testing Software, L=Ithaca, S=New York, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
358132284E8C11DB295BEBC2A46EA540

File PE Metadata
Compilation timestamp:
11/2/2006 3:12:08 PM

OS version:
6.0

OS bitness:
Win64

Subsystem:
Windows Console

Linker version:
8.0

Entry address:
0xC18C

Entry point:
49, 3B, C2, 75, 05, 41, 8D, 40, 0C, C3, 48, 8B, 50, 38, 44, 38, 90, 6A, 02, 00, 00, 75, 20, 48, 8B, 82, E8, 01, 00, 00, 49, 3B, C2, 74, 14, 0F, B7, 08, 8B, 92, 08, 01, 00, 00, 03, C9, 2B, D1, 44, 3B, CA, 45, 0F, 42, C2, 41, 8B, C0, C3, CC, CC, CC, CC, CC, CC, CC, CC, CC, 48, 89, 5C, 24, 08, 57, 48, 83, EC, 20, 48, 8B, 41, 40, 48, 8B, D9, 48, 8B, 78, 38, 48, 8D, 8F, 08, 02, 00, 00, FF, 15, E6, 1E, 01, 00, 48, 8B, 4B, 40, E8, 2D, 0A, 00, 00, 85, C0, 78, 07, C6, 87, 44, 02, 00, 00, 01, 48, 8B, 5C, 24, 30, 48...
 
[+]

Entropy:
7.9847  (probably packed)

Code size:
50.5 KB (51,712 bytes)

Scan wdfcoinstaller01005.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.