home

ewusbfake.sys

Huawei Technologies Co., Ltd. USB Modem/Serial Device Driver

Huawei Technologies Co., Ltd.

It runs as a Windows 64-bit kernel mode device driver named “Huawei DataCard USB Fake”.
Publisher:
Huawei Technologies Co., Ltd.

Product:
Huawei Technologies Co., Ltd. USB Modem/Serial Device Driver

Description:
USB Modem/Serial Device Driver

Version:
1. 0. 0. 6

MD5:
460b1945c3e6b0419a76e1b507b90b71

SHA-1:
0a57e11bb78e64f3aad8fc2018f9f58c421492a3

SHA-256:
c78b32abb98abaff647500cd70afa78c9848a4978e79eee83d654e69f51d5f93

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/16/2024 4:46:30 PM UTC  (today)

File size:
98.4 KB (100,736 bytes)

Product version:
1. 0. 0. 6. SP00

Copyright:
Copyright (C) Huawei Technologies Co., Ltd. 2004-2006. All rights reserved.

Original file name:
ewusbdev.sys

File type:
Driver (Win64 SYS)

Common path:
C:\Windows\System32\drivers\ewusbfake.sys

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
1536:BLA1m2+H+B5v2vuQn5R7InuQrIVsRoIov/mewYjjQhTWxUd9:2m2D5v2vBXIndr+zIo/T1fQhTWxU

Entry point:
8B, FF, 55, 8B, EC, A1, A8, 5F, 02, 00, 85, C0, B9, 4E, E6, 40, BB, 74, 04, 3B, C1, 75, 1E, 8B, 15, 4C, 5C, 02, 00, B8, A8, 5F, 02, 00, C1, E8, 08, 33, 02, A3, A8, 5F, 02, 00, 75, 07, 8B, C1, A3, A8, 5F, 02, 00, F7, D0, A3, AC, 5F, 02, 00, 5D, E9, CF, B1, FE, FF, CC, AC, 63, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 4A, 6C, 01, 00, 00, 5B, 01, 00, D4, 63, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 52, 6C, 01, 00, 28, 5B, 01, 00, BC, 63, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, B6, 6C, 01, 00, 10, 5B, 01, 00, C8...
 
[+]

2 Drivers
Display name:
Huawei DataCard USB Fake

Service name:
hwusbfake

Type:
Kernel device driver (KernelDriver)

Display name:
Huawei DataCard USB PNP Device

Service name:
hwusbdev

Type:
Kernel device driver (KernelDriver)


Scan ewusbfake.sys - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.