rentdrv_x64.sys

Malicious Hangzhou Shunwang Technology Co.,Ltd 2020-02-19 03:11 VT 5/72

Driver Name: rentdrv_x64.sys
MD5: 3a65d89d693d3dea16b2146d590878bc
SHA1: 48401c1dfb02d4067cdf44c6f1ab3b0b6a4449bb
SHA256: 3de2d065032ad588861203f170c982f188e58435cb919ecc93de93b6f9491f4d
Imphash: 6cb22a29493c0228f115b3d6f710f4f7
Vhash: 134056555d051e1iz37xz
Authentihash: cbe04bbb4cfd0266eda514ab9147fa5c182c597489a7d01ee82cbeaf396d1169
Rich PE header hash: 00a02bb10ebc3db7058d97987a0faf25
SSDEEP: 768:OUAE9sYCNwLw8pmbjNwMubDGZEp23+zjm:PG1jf7j0m
TLSH: T11BF27D13CB5D24E2E9DAC93AE0D4D9277EF1B140375995DF4029C0A6AF01BD27B7C22A
Signer: Hangzhou Shunwang Technology Co.,Ltd
Signing date: 2020-02-19 03:11
SpcSpOpusInfo: N/A
VT detections: 5/72
Compilation time: 2020-02-19
PDB path: D:\slave\workspace\rentdrv-64\bin\pdb\renter\rentdrv_x64.pdb
Country submitter: China, United States, Hong Kong
Flag: Malicious

Description

re-signed RentDrv Vulnerable driver