Huawei-HG630-Hotspot-v1.0.zip
- SHA256 03349d9f980709b7a24bb20d7d330b103c73da58ef4f2da340fb4d6176de7122
Overview
overview
8Static
static
3Huawei-HG6...ig.ps1
windows10-2004-x64
3Huawei-HG6...ig.ps1
windows11-ltsc_2024-x64
3Huawei-HG6...ct.bat
windows10-2004-x64
6Huawei-HG6...ct.bat
windows11-ltsc_2024-x64
6Huawei-HG6...x.html
windows10-2004-x64
3Huawei-HG6...x.html
windows11-ltsc_2024-x64
3Huawei-HG6...l.html
windows10-2004-x64
3Huawei-HG6...l.html
windows11-ltsc_2024-x64
3Huawei-HG6...ne.ps1
windows10-2004-x64
3Huawei-HG6...ne.ps1
windows11-ltsc_2024-x64
3Huawei-HG6...ll.bat
windows10-2004-x64
3Huawei-HG6...ll.bat
windows11-ltsc_2024-x64
3Huawei-HG6...sk.ps1
windows10-2004-x64
8Huawei-HG6...sk.ps1
windows11-ltsc_2024-x64
8Huawei-HG6...er.ps1
windows10-2004-x64
3Huawei-HG6...er.ps1
windows11-ltsc_2024-x64
3Huawei-HG6...pe.ps1
windows10-2004-x64
3Huawei-HG6...pe.ps1
windows11-ltsc_2024-x64
3Huawei-HG6...at.ps1
windows10-2004-x64
6Huawei-HG6...at.ps1
windows11-ltsc_2024-x64
6Huawei-HG6...ot.bat
windows10-2004-x64
8Huawei-HG6...ot.bat
windows11-ltsc_2024-x64
8Huawei-HG6...ne.ps1
windows10-2004-x64
3Huawei-HG6...ne.ps1
windows11-ltsc_2024-x64
3Huawei-HG6...rt.dll
windows10-2004-x64
1Huawei-HG6...rt.dll
windows11-ltsc_2024-x64
1Huawei-HG6...32.sys
windows10-2004-x64
3Huawei-HG6...64.sys
windows10-2004-x64
3Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Huawei-HG630-Hotspot\Apply_Upgraded_Config.ps1
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Huawei-HG630-Hotspot\Apply_Upgraded_Config.ps1
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
Huawei-HG630-Hotspot\Fix_Internet_Conflict.bat
Resource
win10v2004-20260911-en
windows10-2004-x64
6 signatures
150 seconds
Behavioral task
behavioral4
Sample
Huawei-HG630-Hotspot\Fix_Internet_Conflict.bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
6 signatures
150 seconds
Behavioral task
behavioral5
Sample
Huawei-HG630-Hotspot\Huawei_Arabic_System\index.html
Resource
win10v2004-20260911-en
windows10-2004-x64
10 signatures
150 seconds
Behavioral task
behavioral6
Sample
Huawei-HG630-Hotspot\Huawei_Arabic_System\index.html
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
9 signatures
150 seconds
Behavioral task
behavioral7
Sample
Huawei-HG630-Hotspot\Huawei_Arabic_System\portal.html
Resource
win10v2004-20260911-en
windows10-2004-x64
10 signatures
150 seconds
Behavioral task
behavioral8
Sample
Huawei-HG630-Hotspot\Huawei_Arabic_System\portal.html
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
9 signatures
150 seconds
Behavioral task
behavioral9
Sample
Huawei-HG630-Hotspot\Huawei_Config_Engine.ps1
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral10
Sample
Huawei-HG630-Hotspot\Huawei_Config_Engine.ps1
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral11
Sample
Huawei-HG630-Hotspot\Install.bat
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral12
Sample
Huawei-HG630-Hotspot\Install.bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral13
Sample
Huawei-HG630-Hotspot\Install_Engine_Task.ps1
Resource
win10v2004-20260911-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral14
Sample
Huawei-HG630-Hotspot\Install_Engine_Task.ps1
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
5 signatures
150 seconds
Behavioral task
behavioral15
Sample
Huawei-HG630-Hotspot\Live_Router_Server.ps1
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral16
Sample
Huawei-HG630-Hotspot\Live_Router_Server.ps1
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral17
Sample
Huawei-HG630-Hotspot\Monthly_Storage_Wipe.ps1
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral18
Sample
Huawei-HG630-Hotspot\Monthly_Storage_Wipe.ps1
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral19
Sample
Huawei-HG630-Hotspot\Setup_Gateway_Nat.ps1
Resource
win10v2004-20260911-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral20
Sample
Huawei-HG630-Hotspot\Setup_Gateway_Nat.ps1
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral21
Sample
Huawei-HG630-Hotspot\Start_Hotspot.bat
Resource
win10v2004-20260911-en
windows10-2004-x64
16 signatures
150 seconds
Behavioral task
behavioral22
Sample
Huawei-HG630-Hotspot\Start_Hotspot.bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
14 signatures
150 seconds
Behavioral task
behavioral23
Sample
Huawei-HG630-Hotspot\engine\Gateway_Engine.ps1
Resource
win10v2004-20260911-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral24
Sample
Huawei-HG630-Hotspot\engine\Gateway_Engine.ps1
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
5 signatures
150 seconds
Behavioral task
behavioral25
Sample
Huawei-HG630-Hotspot\engine\wd\WinDivert.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral26
Sample
Huawei-HG630-Hotspot\engine\wd\WinDivert.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral27
Sample
Huawei-HG630-Hotspot\engine\wd\WinDivert32.sys
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral28
Sample
Huawei-HG630-Hotspot\engine\wd\WinDivert64.sys
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
General
- Target Huawei-HG630-Hotspot-v1.0.zip
- Size 636KB
- Sample261102-s8x34svvhs
- SHA256 03349d9f980709b7a24bb20d7d330b103c73da58ef4f2da340fb4d6176de7122
- MD5 9a2e7f79ff69540fd04e19442ca0471a
- SHA1 4660d663f3027e7c3281408557b9610f20e8bb48
- SHA512 b73885316fa69eb033f1b0ddedafe33f574b1020d526cb489bc7383cc37f7af15f5b275a393772a625751038fbd6c09bd85d23b268db86fa32544c37d9852492
- SSDEEP 12288:9/e6vjcTmKwInUuxCogdR/21xiYJnxoIDyGR9KImpjOUmnnY6AmkH:9PvjhRoC21xiIxU6j/97fkH
- TLSH T176D42335707E8E67D8310FBDA45A4DC8987E2DDBDF08299817CD8098CA006AFAFD546D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Huawei-HG630-Hotspot\engine\wd\WinDivert.dll
File Explorer
-
Huawei-HG630-Hotspot-v1.0.zip.zip 636KB
-
Huawei-HG630-Hotspot\.gitignore233B
-
Huawei-HG630-Hotspot\Apply_Upgraded_Config.ps1.ps1 5KB
-
Huawei-HG630-Hotspot\Fix_Internet_Conflict.bat911B
-
Huawei-HG630-Hotspot\Huawei_Arabic_System\data\db.json1KB
-
Huawei-HG630-Hotspot\Huawei_Arabic_System\data\db.sample.json1KB
-
Huawei-HG630-Hotspot\Huawei_Arabic_System\index.html.html 417KB
-
Huawei-HG630-Hotspot\Huawei_Arabic_System\portal.html.html 294KB
-
Huawei-HG630-Hotspot\Huawei_Config_Engine.ps1.ps1 19KB
-
Huawei-HG630-Hotspot\Install.bat.bat .ps1 3KB
-
Huawei-HG630-Hotspot\Install_Engine_Task.ps1.ps1 2KB
-
Huawei-HG630-Hotspot\Live_Router_Server.ps1.ps1 27KB
-
Huawei-HG630-Hotspot\Monthly_Storage_Wipe.ps1.ps1 1KB
-
Huawei-HG630-Hotspot\README.md7KB
-
Huawei-HG630-Hotspot\Setup_Gateway_Nat.ps1.ps1 3KB
-
Huawei-HG630-Hotspot\Start_Hotspot.bat.bat .ps1 447B
-
Huawei-HG630-Hotspot\backups\curcfg_backup_original.conf6KB
-
Huawei-HG630-Hotspot\backups\curcfg_upgraded_signed.conf6KB
-
Huawei-HG630-Hotspot\engine\Gateway_Engine.ps1.ps1 28KB
-
Huawei-HG630-Hotspot\engine\wd\LICENSE59KB
-
Huawei-HG630-Hotspot\engine\wd\WinDivert.dll.dll 46KB
-
Huawei-HG630-Hotspot\engine\wd\WinDivert32.sys.sys 77KB
-
Huawei-HG630-Hotspot\engine\wd\WinDivert64.sys.sys 91KB
Huawei-HG630-Hotspot\.gitignore
- SHA256 9fc11271ecf4fb60f79bf4270da12e783cdde748389fcf1e1ff8cb1718ad23c1
- MD5 a5623145b513d7ed60ffd09ed8c8eee0
- SHA1 e9b875a158196a8cbf69032296adb13aeaf2ea54
- SHA512 fd34615de2b58f3679bc807ddff746db9e9cf45f8ccb08c66b9fd1b2445d16e8c2342b510b3fb802bd41e6eac4f9d390157cccd9c4c94d601922a4b164dcd3c8
- TLSH T134D09B2A39275437D854E6D5A45380C4E6716BB6083CF7D93DF160918C1681CB617417
- MD5 SHA1 SHA512 TLSH
Huawei-HG630-Hotspot\Apply_Upgraded_Config.ps1
- SHA256 4f216b0971778e9d565acc977cac8bef77200d53fa4ff29a06bc191cf1e0de97
- MD5 ce0ec4b53ec53ba026a0b2b51794fa04
- SHA1 8c5ca1e13be2ed3d602f330a8039acd3c6f9a7c2
- SHA512 a189dde882e5e15fc31dcaf644ebbf32cb896645f330c69fbfbfb5a28f848127067804607054653f0043772bc1a772932c0d233e726c14fb27427555f278c1ae
- SSDEEP 96:A3+nD/GU49X0LLwrJLkTDwyDOpEvAPvCWT20i2XLwRJzED7pYQemTXgQcm5eh:AunDugvAhIw97P1gJ+pYQfTXgQcmYh
- TLSH T16BB194315916970501A5F0B4CC72EB18BA365223B0095E3A37DCF9DCABE7CAC51AD497
- MD5 SHA1 SHA512 SSDEEP TLSH
Huawei-HG630-Hotspot\Fix_Internet_Conflict.bat
- SHA256 4312c48306a018cc18c36f7d92b51a30a830f2423c6203d83f478a5ccf58c47c
- MD5 71f8e14a7d5ce8773abaab77be24c7f4
- SHA1 6c906a5c5fb18710160c72b8b535ae33a0d2908f
- SHA512 14632e0ad36b8a6a37e6b66348d6552bcabd1f3afc89d8afa244c15736833c08d55053d7d7a63d9914ec81035afeb0719192e574aecdac16dc3850add3012e26
- TLSH T10511D013AA1830B144426E0A5DDAC8716E5C10BA896749BF322E650F53CBFE6B21E766
- MD5 SHA1 SHA512 TLSH
Huawei-HG630-Hotspot\Huawei_Arabic_System\data\db.json
- SHA256 8a2c9c82fb66db66a7750be5a24b78ed8853194bf808feaeeda6aee469d7adbf
- MD5 38a395eaa4daa46dcb35081906e50cc8
- SHA1 a3d55efac5e4e59675b1e4dc60476ecbbd884a6e
- SHA512 60132a8e7c2de72164bced5ce358d6d02395dc6044608674ce2be88ec0304ec85669c1a4f29d7373a35d811024f69ea2aee86cdd4eb0c2b7773587e2c743cfcb
- TLSH T1A8215C630571057F21B8A765A4711616F8D0EF2B60A81A27B5FAC8D9CDB3E37900C679
- MD5 SHA1 SHA512 TLSH
Huawei-HG630-Hotspot\Huawei_Arabic_System\data\db.sample.json
- SHA256 8a2c9c82fb66db66a7750be5a24b78ed8853194bf808feaeeda6aee469d7adbf
- MD5 38a395eaa4daa46dcb35081906e50cc8
- SHA1 a3d55efac5e4e59675b1e4dc60476ecbbd884a6e
- SHA512 60132a8e7c2de72164bced5ce358d6d02395dc6044608674ce2be88ec0304ec85669c1a4f29d7373a35d811024f69ea2aee86cdd4eb0c2b7773587e2c743cfcb
- TLSH T1A8215C630571057F21B8A765A4711616F8D0EF2B60A81A27B5FAC8D9CDB3E37900C679
- MD5 SHA1 SHA512 TLSH
Huawei-HG630-Hotspot\Huawei_Arabic_System\index.html
- SHA256 c8889265fd8922dc4354a918f3bc3b8a10e13e05f2346cf677a754b36b2e1944
- MD5 152c9a414570e9affba915bdbe45367b
- SHA1 c90697705ad45045d06d5c165eec1b887a5d73df
- SHA512 e4d6858b58c490e040b5c6474f7dd93bda2f0aeb1591f6516d4d2b4f31e76cbb3930536eba06cdf0b6d7a903507d4f9320d9b951498f7a94af756b245bee49ce
- SSDEEP 6144:sbtaTHfQxrNib+lFFphsAxSzlBAf0d3J7b5KDJp5hKEv+0Y14XOwLV1+MK9WE:6G/QvibQnXxSzlCy7b5gftlY
- TLSH T11F94D02020E06831817390D6C7A35A4AFFB9C51397469A54F6EC5B930FF3C60D66BEAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Huawei-HG630-Hotspot\Huawei_Arabic_System\portal.html
- SHA256 b6c7a17124a854b735355d358b1a5984516fb334450ee02a9e5b434d9f94e844
- MD5 8667c543981b85c67f3ed564d4425f29
- SHA1 217214b0b6a2b1c343d1bd4db309637d71a8fbc8
- SHA512 c70c1b4180cd0a0aba68b7f735cba389b883a5d01584d7ba1450c624ba62ec834db8716087408180b149f5401d7d94ac8bd73cb36ad540ca4c8e4cd824bbbbf9
- SSDEEP 6144:4btaTHfQxrNib+lFFphsAxSzlBAf0d3J7b5KDJp5hKEv+0m:uG/QvibQnXxSzlCy7b5gftlm
- TLSH T15D541270597819B8E171D465F2AD6A03FF948813944A6A90F3ED3B838FFB501A14FF98
- MD5 SHA1 SHA512 SSDEEP TLSH
Huawei-HG630-Hotspot\Huawei_Config_Engine.ps1
- SHA256 14b165409997497dd8d0318f9d347501934187c80208bd7ccee14bb1b5f6862d
- MD5 bd94706bb8d1779d2889f03986488703
- SHA1 81cf19b58fb217f4b96e421d3ce3c34bf3099583
- SHA512 201c935c3582996f3b8595d2bca1d9c3ef2e58c31ced70d1695a5f2727f99508676fae07d0976579756b22bb847df5fac012226c2e30e236d3c4257cbcc7a78a
- SSDEEP 384:meLkw8o9c46rek5xuyFUIC3tsA9qi/eC53b2dFPlwX70JsSsAGJmCVTfnvZjvi8d:mHekrRKz4wAP+X7cyfnvt
- TLSH T18D92C5057305DAA8038750B0A5A9ED442A24C113808D2C69BFBED1DC4B9ADADE7DCCFF
- MD5 SHA1 SHA512 SSDEEP TLSH
Huawei-HG630-Hotspot\Install.bat
- SHA256 46bf8e3b532e9fc062f3a77c8de9a6a7c0120f04475da667a73301f815655688
- MD5 db2b282c1fa974adbdfd562f752c3e5e
- SHA1 c3dcc5dc0ddf551e654e05b4e528d9647d5819fa
- SHA512 d1a50ce4a0efc888154696c670f102c598d09605bcc959bc3cc533d32c64725d85e32dfa7968bee2249f4df98e7d7b88010deae92c9abc3aa19dfdeaed170ad8
- TLSH T1C56175123619D13357DA8E2FC0E166E0FC795D67421AEDC131EB95382E813EEE3AC029
- MD5 SHA1 SHA512 TLSH
Huawei-HG630-Hotspot\Install_Engine_Task.ps1
- SHA256 b46d5888e4f76458cbf07aa64fe16ad142609740980a8fb785fb78274bacab83
- MD5 a5eca0f6c1f7c80534a870a76b7db0bb
- SHA1 e1c7af9da4c2762ad2b857b7740e964162924f75
- SHA512 5f8a059b0c7d25bffdd996e7315e70cb38addde7dd95e9c8703da93b0852702a1aeaee19554ba2471f3b700ac2be88331ed0ddd79dda62eab26d16ba0bc81ccd
- TLSH T1354195792B00A257EDEB0729D0A363C6343F5027033BD92031ECD198BBA646EE37741A
- MD5 SHA1 SHA512 TLSH
Huawei-HG630-Hotspot\Live_Router_Server.ps1
- SHA256 a30b869e77d0b1eed7ac3b8f138f435ca8fefb3fd6cb55dabc60260903e37063
- MD5 39f0ca34d6853e57f3cb24ac1345a59e
- SHA1 05b7d046c729d2f0239d009eb38bcbec81ab987f
- SHA512 a592511acfc4365d0965798c03bcf1182897a0e3f311ca094e54f435ff2baf33693dc7d4e5bc7e8fda4d8efa1aa7b9fb53567039b0f521de0f98f9de2848e983
- SSDEEP 384:mwAHmmtETd3G/7nhmGbSAXZWdfyNkNnicQvws5ue6:m/mm8C7nhmGbLpWpyNFvwse
- TLSH T1A0D2A5713A92E5650387E2359C5ED9407630A067220D9D247BDCE3E86FD28BCCBFD686
- MD5 SHA1 SHA512 SSDEEP TLSH
Huawei-HG630-Hotspot\Monthly_Storage_Wipe.ps1
- SHA256 b5d0b1cc3301431f2749eccd2e3d3694d05dabf4a3e31cc6fd2c7a54b5ae1996
- MD5 06e9a3372ba4e8891b78971a50ed16ad
- SHA1 bc7cdc3e69fa293357b0381d10ec7b2edd6c147e
- SHA512 65fc8c3cd2d255de2fbc003b73c32ab33729b952ff119716c4aaecc65b5c41c7fa14c98bae57514a7596ba1b4813120472e733ed4a8357506e376046b14587ea
- TLSH T13B41C6263E0123660FDB01BED9C2E0843C21112B20611D06B16F52A87FD493FA37E2DA
- MD5 SHA1 SHA512 TLSH
Huawei-HG630-Hotspot\README.md
- SHA256 fcee8895948ace4584de942043c432c31333720696ba8b2b283dd242c2578e5a
- MD5 49666f9d2a90918781061eecc77eaad0
- SHA1 02c4bd3951642f6ebbe49c557d1066f9cd5f61fd
- SHA512 35a8d11779cdf5d7e4bfc6f6c222b66502572d0d2a950911f54ec6e6a181c19bacb1ab7dc5673ac2cd42f2934bafbab6827e0136d1344656f2f3347626864e08
- SSDEEP 192:HTPDc+FjcsaBchcFuWO/boykKYrNkzaAchcDef17+j1n+uTQuha:HTDc+FjcsaBchcFu9/boyktpkzaAchc2
- TLSH T105F1ACE32F25947247968E2FC0D27568F975AE339746FD30348747208A8B923F65E238
- MD5 SHA1 SHA512 SSDEEP TLSH
Huawei-HG630-Hotspot\Setup_Gateway_Nat.ps1
- SHA256 a434bee1b993d468b7a30be6ad8093d5d46119954101c6e784b8e420abf51216
- MD5 b5cb2863e0d4383e41f6cbbbc791e39e
- SHA1 f56d8fddcd5156e1aa0b4674095dcf1f7123da01
- SHA512 dec6eff6af9440838222813d63156fffe22db9e3ed7b267841a84a3692fe0406aea6ed9fff36445c5ee1ac14328daacc06bc62066aae76c4478a9234575eb052
- TLSH T1DF818406F54526B7B28B4D1BE8C3E28C793D059B012A66157B1DE3490FEDE2C8B154A6
- MD5 SHA1 SHA512 TLSH
Huawei-HG630-Hotspot\Start_Hotspot.bat
- SHA256 21b32853bf7f10badb0d2784ae8ce54b4307ca697eb77ea1e7f984a5699b1cae
- MD5 71aca0906e49c021036cb708d1123a04
- SHA1 d41121e70c00d83e369a2cb4ac1d0cba38b21026
- SHA512 fa029341ca8f3aeaad29ad6c2834f9bdac5116b731044a6072872290e4c8bc23dc1c9c93a5fabca0125edc5bde97bac8a6c6c9cee159bd04faafe4edfe15d4a2
- TLSH T187F0DC02018822969BCBCB20A2D3B3E27A0F600950201B813624E5187CDA0FAD3EB0C2
- MD5 SHA1 SHA512 TLSH
Huawei-HG630-Hotspot\backups\curcfg_backup_original.conf
- SHA256 909b41613e5f947855f93464b76485d6ea4794c7db46cff7c24a3905950ac35c
- MD5 06ad96f4e0c234c71a3cc77f0a1eb4ff
- SHA1 afe2867663f7f3a0371927667116844fec95a762
- SHA512 11b7abde652d7356e3117186303d900baaa41cb8fa7cfb140579ec28212435fe18fb6c05c9852d1406628744a0d33e626eaa72e7bd760c86a095817ee2fb6434
- SSDEEP 96:6GecJ8QL/XvM105quxckTNRnwM+AqLtYcYco86Zy5R1XuEaSgJD6AzStWAdyzJWH:bB/XvM105fTvwMd5UR/WJGAzSkyyzJO
- TLSH T17BE1AE83E5AABE0FACD6A90FD39811FC944FD151EF8478C3868D51840B023DA4725B2F
- MD5 SHA1 SHA512 SSDEEP TLSH
Huawei-HG630-Hotspot\backups\curcfg_upgraded_signed.conf
- SHA256 5afb59feed787720ebd10af2bac8be1142a1c28540b664f9e014434de4836f3a
- MD5 85e0b8ae9750f70c9a218203ad92f2ac
- SHA1 6a87d278adbfe292a82966ef872271db0ea153ad
- SHA512 840cb65c4e8f700b32286f3f217aa3a9286a0ae3ce5d3ac95f5f1bc665e7de6b88e1952b901386dd49b8f9ea79bbacbac42e82e974f9b96b8f826767793198be
- SSDEEP 192:ghMPa3PRyhU12Ccohhem1ZZxHjV4SokyJ9GU4vNIasN41LLR:Na3uU3hbemFhuzkyTGUmOTN6HR
- TLSH T1E2E1AE5A2E762392BC0703AFA83664A46DE0D1EC77962F8FE66DD70ECD3816444B640C
- MD5 SHA1 SHA512 SSDEEP TLSH
Huawei-HG630-Hotspot\engine\Gateway_Engine.ps1
- SHA256 e708aeea5ea3989f8104146230e8d1d105f5cd8a59ffdc097464cf180211f868
- MD5 e83cffa4ca208c8dde34a836318380a8
- SHA1 a720cfca0d547b71ea1cf5ece45657df384793ac
- SHA512 180adf6d2141289e769cf2f175e21c137e8e0756cc9db049c1e07f26708df6a65dfdd0fd97e9fc3be0776bf2becc61d06568db42ca02ef02f7d92addec8c1391
- SSDEEP 384:ctWzNmZP7sdtddCMBypNZCLlL9Bvg7kB05nlYOdUQjdYCIY0XYCf+8:cYm7sdt2M88Ljlg75dvYCIY0Xi8
- TLSH T113D2C70A7F45997E15B3D33AECE2956CFF27002BA1640954B6DCC2C82F716A4D26CE4E
- MD5 SHA1 SHA512 SSDEEP TLSH
Huawei-HG630-Hotspot\engine\wd\LICENSE
- SHA256 14a0cb5214d536e4fdae6aa3f5696f981eeda106cd026e9794bba489ee79d628
- MD5 bbd7a5894dfb29429e01764c2b3e6265
- SHA1 9c587dc1b47c857528368ca72d24ca57f7087e26
- SHA512 300bdb513fecc9f3d212e99ed4daa34c24973a3703afb9f1c6b884e18d79f38d2611c07b9752a1823f673dffe87d294f86602c3a120df28de370c420a0277dd5
- SSDEEP 768:uBv5Oe47gvUo1acy3LTB2VsrHG/OfvMmnBCtLmJ9A7MmFWixMFzMdm7jUS:uBhOL7gvUhcycsrfrnouRFBzMU
- TLSH T18B53852F774413B201C206A16A8F68DEE32AD079726A4464785DC15D27A7F3483BFBED
- MD5 SHA1 SHA512 SSDEEP TLSH
Huawei-HG630-Hotspot\engine\wd\WinDivert.dll
- IMPHASH 0b649f8e17494bb31b47f6e959a1769c
- SHA256 c1e060ee19444a259b2162f8af0f3fe8c4428a1c6f694dce20de194ac8d7d9a2
- MD5 b2014d33ee645112d5dc16fe9d9fcbff
- SHA1 aa69498562d350f2de06954b133e59fac1e57002
- SHA512 37014a018b9cd91b2eaeeccc7c5af3838fcae4d4fe6bb50c7ae32cd5c99423965a3e3efb29499324f6885b8f0c2ee2952cb75ab73db4e8960811abcb46801f15
- SSDEEP 768:Qjf2rf/kxpxI+JEw2VWHDDjQSQX4zTtllgwBqWocwTicI:YuT/CXHDvVQatonTic
- TLSH T17423D803F74151B7C429C27083AED352AE22FCC56354F9EF82DEB7952D85E42DB1A606
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
31496
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
PDB paths
advapi32
CloseServiceHandle
CreateServiceW
DeleteService
OpenSCManagerW
OpenServiceW
RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegSetValueExW
StartServiceW
kernel32
CloseHandle
CreateEventW
CreateFileW
CreateMutexW
DeviceIoControl
GetLastError
GetModuleFileNameW
GetOverlappedResult
HeapAlloc
HeapCreate
HeapDestroy
ReleaseMutex
SetLastError
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WaitForSingleObject
WinDivertClose
WinDivertGetParam
WinDivertHelperCalcChecksums
WinDivertHelperCompileFilter
WinDivertHelperDecrementTTL
WinDivertHelperEvalFilter
WinDivertHelperFormatFilter
WinDivertHelperFormatIPv4Address
WinDivertHelperFormatIPv6Address
WinDivertHelperHashPacket
WinDivertHelperHtonIPv6Address
WinDivertHelperHtonIpv6Address
WinDivertHelperHtonl
WinDivertHelperHtonll
WinDivertHelperHtons
WinDivertHelperNtohIPv6Address
WinDivertHelperNtohIpv6Address
WinDivertHelperNtohl
WinDivertHelperNtohll
WinDivertHelperNtohs
WinDivertHelperParseIPv4Address
WinDivertHelperParseIPv6Address
WinDivertHelperParsePacket
WinDivertOpen
WinDivertRecv
WinDivertRecvEx
WinDivertSend
WinDivertSendEx
WinDivertSetParam
WinDivertShutdown
Name
.text
Size
30KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
32B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
1024B
Virtual Size
840B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
1024B
Virtual Size
800B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
240B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
Huawei-HG630-Hotspot\engine\wd\WinDivert32.sys
- IMPHASH 7e59afc2d9906fae8fc85f4522426cb3
- SHA256 2f43f4251be4d72dd56c91bf6cce475d379eb9ba6c4dda2be3022ea633d5e807
- MD5 451ec31152318d1249f41aed387dd262
- SHA1 d821fa0c9186a5f863528dc6a3e87b3ff40a1ac5
- SHA512 e0e79b48cffc283aff86191be6c4939f739c3c47a3bd1bdae0eec28cd69e7535d67d708ea96566fa687404b899ebe9dc6eb336432a04d96e41df60234aa59e45
- SSDEEP 1536:XolJ1odRmHh4zQFZnYrU4dou8D6lqJixJx4FdpawzM:YlodRmfFBYpdou8DeqJox4daww
- TLSH T1FE736B1673D11109FAE259B02EB9B3856C35BFE28732D9CF06C02C5E4976BDAA570327
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d3:5b:c5:1a:ca:fa:b8:93:69:8e:60:64:d2:86:54:19:18:a7:89:ac:7c:06:a6:44:2b:f4:35:1d:de:84:27:77
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Sep 20, 2022
CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Digest
d3:5b:c5:1a:ca:fa:b8:93:69:8e:60:64:d2:86:54:19:18:a7:89:ac:7c:06:a6:44:2b:f4:35:1d:de:84:27:77
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=91510107MA7E8Y2876,CN=成都密思听科技有限公司,O=成都密思听科技有限公司,ST=四川省,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Chains
Sep 20, 2022
SERIALNUMBER=91510107MA7E8Y2876,CN=成都密思听科技有限公司,O=成都密思听科技有限公司,ST=四川省,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302434e
CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
SERIALNUMBER=91510107MA7E8Y2876,CN=成都密思听科技有限公司,O=成都密思听科技有限公司,ST=四川省,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302434e
CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
01
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jan 1, 2004 - Dec 31, 2028
Subject
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Serial Number
48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 25, 2021 - Dec 31, 2028
Subject
CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB
Serial Number
33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6e
Issuer
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 2, 2019 - Jan 18, 2038
Subject
CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Issuer
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 11, 2022 - Aug 10, 2033
Subject
SERIALNUMBER=91510107MA7E8Y2876,CN=成都密思听科技有限公司,O=成都密思听科技有限公司,ST=四川省,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Serial Number
61:50:19:91:b1:8f:32:38:04:52:51:37:dc:25:00:5a
Issuer
CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 25, 2022 - May 25, 2023
Subject
CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:57:ee:4d:65:9a:92:3e:7c:10:00:00:00:00:00:57
Issuer
CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jun 7, 2022 - Jun 1, 2023
Subject
CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:0d:69:0d:5d:78:93:d0:76:df:00:00:00:00:00:0d
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Oct 15, 2014 - Oct 15, 2029
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:EACE-E316-C91D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9a:c0:75:a2:c4:21:6d:3e:85:00:01:00:00:01:9a
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
10
Entry point
4381
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\WinDivert-2.2.2\install\MSVC\i386\WinDivert32.pdb
ntoskrnl.exe
MmMapLockedPagesSpecifyCache
IoAllocateErrorLogEntry
IoAllocateMdl
IoFreeMdl
IoGetCurrentProcess
IoWriteErrorLogEntry
ObfReferenceObject
ObfDereferenceObject
RtlCopyUnicodeString
ExUuidCreate
PsGetProcessId
IoGetRequestorProcess
_alldiv
KeBugCheckEx
memset
memcpy
_allmul
MmBuildMdlForNonPagedPool
ExFreePoolWithTag
ExAllocatePoolWithTag
RtlGetVersion
RtlIntegerToUnicodeString
hal
KeReleaseInStackQueuedSpinLock
KeQueryPerformanceCounter
KeAcquireInStackQueuedSpinLock
ndis.sys
NdisAllocateNetBufferPool
NdisFreeNetBufferPool
NdisAdvanceNetBufferDataStart
NdisRetreatNetBufferDataStart
NdisFreeNetBufferListPool
NdisAllocateNetBufferListPool
NdisGetDataBuffer
fwpkclnt.sys
FwpsAllocateNetBufferAndNetBufferList0
FwpmFilterDeleteByKey0
FwpmFilterAdd0
FwpmCalloutDeleteByKey0
FwpmCalloutAdd0
FwpmSubLayerDeleteByKey0
FwpmSubLayerAdd0
FwpmProviderDeleteByKey0
FwpmProviderAdd0
FwpmTransactionAbort0
FwpmTransactionCommit0
FwpmTransactionBegin0
FwpmEngineClose0
FwpmEngineOpen0
FwpsQueryPacketInjectionState0
FwpsInjectNetworkReceiveAsync0
FwpsInjectForwardAsync0
FwpsInjectNetworkSendAsync0
FwpsCalloutRegister0
FwpsCalloutUnregisterByKey0
FwpsFlowAssociateContext0
FwpsFlowRemoveContext0
FwpsInjectionHandleCreate0
FwpsInjectionHandleDestroy0
FwpsFreeNetBufferList0
wdfldr.sys
WdfVersionBind
WdfVersionBindClass
WdfVersionUnbindClass
WdfVersionUnbind
Name
.text
Size
36KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
13KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
INIT
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=262, version=24610,
count=3, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=61, id=1, productName=Unmarked objects,
count=9, id=257, version=24610,
count=5, id=260, version=24610,
count=1, id=260, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
Huawei-HG630-Hotspot\engine\wd\WinDivert64.sys
- IMPHASH db584dd0570594898805dd67d7ff391c
- SHA256 8da085332782708d8767bcace5327a6ec7283c17cfb85e40b03cd2323a90ddc2
- MD5 89ed5be7ea83c01d0de33d3519944aa5
- SHA1 4c9b9c74529399abacc2284de1dead5f2332ee9b
- SHA512 be6530fa0e26441441028b530cd6fc4f900448916e137f92613a1f886c16399d415ddd17f7f8847258cc19c63b1510f2f3068942203c50486e48eed838f9f138
- SSDEEP 1536:AsmCCzg4Klt7jh//NiRMwoGK0tmdsAXixJz48dJ/zuXR:Atzilt/iR5ojGmdsAXoz4k/8R
- TLSH T12E935B46B2E240C5F9F6C97895F59253EE31FA90A721C7DF11E0981E4F21BE1AD78322
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
5a:de:d7:5d:6b:eb:31:58:49:f6:98:a7:8f:80:33:de:26:eb:15:19:55:a1:cb:c0:1e:30:37:32:0e:2a:0e:b6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Sep 20, 2022
CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Digest
5a:de:d7:5d:6b:eb:31:58:49:f6:98:a7:8f:80:33:de:26:eb:15:19:55:a1:cb:c0:1e:30:37:32:0e:2a:0e:b6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=91510107MA7E8Y2876,CN=成都密思听科技有限公司,O=成都密思听科技有限公司,ST=四川省,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Chains
Sep 20, 2022
SERIALNUMBER=91510107MA7E8Y2876,CN=成都密思听科技有限公司,O=成都密思听科技有限公司,ST=四川省,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302434e
CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
SERIALNUMBER=91510107MA7E8Y2876,CN=成都密思听科技有限公司,O=成都密思听科技有限公司,ST=四川省,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302434e
CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
01
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jan 1, 2004 - Dec 31, 2028
Subject
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Serial Number
48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 25, 2021 - Dec 31, 2028
Subject
CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB
Serial Number
33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6e
Issuer
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 2, 2019 - Jan 18, 2038
Subject
CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Issuer
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 11, 2022 - Aug 10, 2033
Subject
SERIALNUMBER=91510107MA7E8Y2876,CN=成都密思听科技有限公司,O=成都密思听科技有限公司,ST=四川省,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Serial Number
61:50:19:91:b1:8f:32:38:04:52:51:37:dc:25:00:5a
Issuer
CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 25, 2022 - May 25, 2023
Subject
CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:57:ee:4d:65:9a:92:3e:7c:10:00:00:00:00:00:57
Issuer
CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jun 7, 2022 - Jun 1, 2023
Subject
CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:0d:69:0d:5d:78:93:d0:76:df:00:00:00:00:00:0d
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Oct 15, 2014 - Oct 15, 2029
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:0A56-E329-4D4D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a7:35:bb:2e:c2:64:85:50:29:00:01:00:00:01:a7
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
10
Entry point
4484
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\WinDivert-2.2.2\install\MSVC\amd64\WinDivert64.pdb
ntoskrnl.exe
RtlCopyUnicodeString
KeBugCheckEx
IoGetRequestorProcess
PsGetProcessId
ExUuidCreate
ObfDereferenceObject
ObfReferenceObject
IoWriteErrorLogEntry
IoGetCurrentProcess
IoFreeMdl
IoAllocateMdl
IoAllocateErrorLogEntry
MmMapLockedPagesSpecifyCache
MmBuildMdlForNonPagedPool
ExFreePoolWithTag
ExAllocatePoolWithTag
KeReleaseInStackQueuedSpinLock
KeAcquireInStackQueuedSpinLock
RtlGetVersion
RtlIntegerToUnicodeString
hal
KeQueryPerformanceCounter
ndis.sys
NdisAllocateNetBufferPool
NdisFreeNetBufferPool
NdisAllocateNetBufferListPool
NdisGetDataBuffer
NdisAdvanceNetBufferDataStart
NdisRetreatNetBufferDataStart
NdisFreeNetBufferListPool
fwpkclnt.sys
FwpmTransactionAbort0
FwpmTransactionBegin0
FwpmEngineClose0
FwpmEngineOpen0
FwpsQueryPacketInjectionState0
FwpmProviderAdd0
FwpmProviderDeleteByKey0
FwpsInjectNetworkReceiveAsync0
FwpmSubLayerAdd0
FwpmSubLayerDeleteByKey0
FwpmCalloutAdd0
FwpmCalloutDeleteByKey0
FwpmFilterAdd0
FwpmFilterDeleteByKey0
FwpmTransactionCommit0
FwpsCalloutRegister0
FwpsCalloutUnregisterByKey0
FwpsFlowAssociateContext0
FwpsFlowRemoveContext0
FwpsInjectionHandleCreate0
FwpsInjectionHandleDestroy0
FwpsAllocateNetBufferAndNetBufferList0
FwpsFreeNetBufferList0
FwpsInjectNetworkSendAsync0
FwpsInjectForwardAsync0
wdfldr.sys
WdfVersionBindClass
WdfVersionUnbindClass
WdfVersionBind
WdfVersionUnbind
Name
.text
Size
45KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gfids
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
INIT
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
420B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=262, version=24610,
count=3, id=136, version=30729,
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=57, id=1, productName=Unmarked objects,
count=9, id=257, version=24610,
count=5, id=259, version=24610,
count=5, id=260, version=24610,
count=1, id=260, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,