home

wdfcoinstaller01009.dll

WDF Coinstaller

Microsoft Corporation

Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft® Windows® Operating System

Description:
WDF Coinstaller

Version:
1.9.7600.16385 (win7_rtm.090713-1255)

MD5:
a9970042be512c7981b36e689c5f3f9f

SHA-1:
b0ba0de22ade0ee5324eaa82e179f41d2c67b63e

SHA-256:
7a6bf1f950684381205c717a51af2d9c81b203cb1f3db0006a4602e2df675c77

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
11/16/2024 8:37:55 AM UTC  (today)

File size:
1.4 MB (1,461,992 bytes)

Product version:
1.9.7600.16385

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
WdfCoInstaller.dll

File type:
Dynamic link library (Win32 DLL)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\drivers\ondemand\32\xp\ztemf195e\x86\wdfcoinstaller01009.dll

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
4/11/2009 7:58:19 AM

Valid to:
4/26/2010 9:00:00 AM

Subject:
CN=Microsoft Windows Component Publisher, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Windows Verification Intermediate PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
6102A4E9000000000009

File PE Metadata
Compilation timestamp:
7/14/2009 1:49:43 AM

OS version:
6.1

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
9.0

CTPH (ssdeep):
24576:GjG90oN2lj11mk/22yYzGrarZRm4X5Uh6rVh5LdfBwOyCSQM1fFhSWRA2+:iGtN2h1120R7m4XShYVxfBwrC21fXSz

Entry address:
0xDE43

Entry point:
8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 0E, 05, 00, 00, 5D, E9, 89, FD, FF, FF, CC, CC, CC, CC, CC, 3B, 0D, 10, 00, 01, 02, 75, 03, C2, 00, 00, E9, 89, 05, 00, 00, CC, CC, CC, CC, CC, CC, FF, 25, AC, 11, 00, 02, CC, CC, CC, CC, CC, CC, FF, 25, A8, 11, 00, 02, CC, CC, CC, CC, CC, CC, 68, EA, DE, 00, 02, 64, FF, 35, 00, 00, 00, 00, 8B, 44, 24, 10, 89, 6C, 24, 10, 8D, 6C, 24, 10, 2B, E0, 53, 56, 57, A1, 10, 00, 01, 02, 31, 45, FC, 33, C5, 50, 89, 65, E8, FF, 75, F8, 8B, 45, FC, C7, 45, FC, FE, FF, FF...
 
[+]

Code size:
57 KB (58,368 bytes)

The file wdfcoinstaller01009.dll has been seen being distributed by the following 12 URLs.

ftp://182.73.167.34/Omkar/GX/gx/GX USB Driver Windows 7/Driver/USB1-2 Driver gxusb2_drv_win7_or_srv2008r2_32&64 bits/gxusb2_drv_win7_or_srv2008r2_32&64 bits/.../WDFCOI~1.DLL

https://mega.nz/persistent/.../thl3mBzT

ftp://192.168.88.248/Nika/პირადი ფაილები/New Folder/Intel(R)_USB_3.0_eXtensible_Host_Controller_Driver/Drivers/HCSwitch/.../WdfCoInstaller01009.dll

ftp://swftp.gigabyte.com.tw/LiveUpdate/3TB Unlock/.../WdfCoInstaller01009.dll

ftp://ftp.pinelabs.com/PAD Controller (1.29.07.15)/USB Cable Driver CD/USB Cable Drivers WinXP_Win7/.../WdfCoInstaller01009.dll

http://omronpliki.pl/oprogramowanie/Sysmac Studio/USB Drivers/Controller/7/.../WdfCoInstaller01009.dll

http://174.120.45.27/.../?dir=x86&dl=WdfCoInstaller01009.dll

http://61.143.38.50/eStudio/phoenixsuit/phoenixsuit1008/Drivers/ADB_Driver/.../WdfCoInstaller01009.dll

ftp://ftp.pinelabs.com/Central EDC Application/Silicon Drivers/.../WdfCoInstaller01009.dll

https://mega.nz/temporary/.../thl3mBzT

https://mega.nz/temporary/.../HNgBnTKY

https://unzip-online.com/en/zip/.../eezDkOw==

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.