N/A

Malicious Microsoft Windows Hardware Compatibility Publisher 2021-12-23 14:01 VT 7/73

Driver Name: N/A
MD5: d20bcf11bb2962ca5c8cb6d50321d4d3
SHA1: c5c23bf99bf8b03b49c2b427d46d7d2e6a8b54c3
SHA256: 9c8776815d17ff6b4edb09e47aedc57f67a216afc206cb4500f675bad991aaf1
Imphash: b3e1e30af20d1c4684b2b415284fb34f
Vhash: 054056551d151e1iz3yz
Authentihash: a86b7dd1e7de58f01da993518a47e16c9d1adef1fa5585dec8c5115d644d3b51
Rich PE header hash: b1ae9ee6feb895303186b1a73d07c2f3
SSDEEP: 768:V1tmFZSQwC3dhkSqBZvRqEwve2kCzJ6IkoVeohN0ei7pwI19b30o:VWFZSo7qBZvMcCzJkoZ0eMZ19bZ
TLSH: T17433E787E5F6A0D8C4BBE0744762B22B7DB2786D43345BDF56429A120B72BE0E63D740
Signer: Microsoft Windows Hardware Compatibility Publisher
Signing date: 2021-12-23 14:01
SpcSpOpusInfo: 江苏莫凡软件科技有限公司
VT detections: 7/73
Compilation time: 2021-12-22
PDB path: f:\lsptool\tdi_proxy\tdi_proxy\objchk_win7_amd64\amd64\tdi_proxy.pdb
Country submitter: France
Flag: Malicious

Description

A TDI filter that attaches \Device\TcpFlt and \Device\UdpFlt over the system TCP/UDP transports and transparently reroutes outbound TCP connections and UDP datagrams through a user-supplied SOCKS proxy