fc8399dffa47df75ced5e1aeb16d0e3bd04d4a9c.bin

Malicious Microsoft Windows Hardware Compatibility Publisher 2021-11-11 08:34 VT 7/72

Driver Name: fc8399dffa47df75ced5e1aeb16d0e3bd04d4a9c.bin
MD5: ce455358bf71c88b45fcb5789100969a
SHA1: fc8399dffa47df75ced5e1aeb16d0e3bd04d4a9c
SHA256: 5c06963d40c0d7fc7b6a4bf11a90a08265a5dfc3b6ade9545409d2e3c4d7af71
Imphash: 4fefb7e1c82a64cd72ff863f6ca9268a
Vhash: 054056551d151e1iz3yz
Authentihash: 095ad0b795dffd27fcb463ed8d670dc817a2a1872f5abe557163e05557f7a51c
Rich PE header hash: a781830fa27509ad6a89f67aff1d0922
SSDEEP: 768:0NtOVPgbArteMdquK0vDfwnA+/8oTFHlZEP3eSTWRTLIuUt3dm:0mVPggquK0v+RzXZEP3QVcuUtU
TLSH: T12443C686E6F6A0E8C4B7E0344661B12B7CB2786D47341BEF9646DB160B727E0E63D740
Signer: Microsoft Windows Hardware Compatibility Publisher
Signing date: 2021-11-11 08:34
SpcSpOpusInfo: 江苏莫凡软件科技有限公司
VT detections: 7/72
Compilation time: 2021-11-11
PDB path: f:\lsptool\tdi_proxy\tdi_proxy\objchk_win7_amd64\amd64\tdi_proxy.pdb
Country submitter: YE, Russia, Italy, France
Flag: Malicious

Description

A TDI filter that attaches \Device\TcpFlt and \Device\UdpFlt over the system TCP/UDP transports and transparently reroutes outbound TCP connections and UDP datagrams through a user-supplied SOCKS proxy