LOLDriversTHE DRIVER THREAT CATALOG
← Back to driver explorer
Driver intelligenceVulnerableVerified

amifldrv64.sys

Description not recorded.

UUID / 34fa6ba4-dc7c-4fd6-b947-8a0bb8ebd031ADDED / 2023-01-09AUTHOR / Michael Haag, Nasreddine Bencherchali

Known samples 24

7 recorded TRUE · 17 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

amifldrv64.sysSample 1 · HVCI TRUE
MD5
0dff47f3b14fb1c1bad47cc517f0581a
SHA1
db3538f324f9e52defaba7be1ab991008e43d012
SHA256
20f11a64bc4548f4edb47e3d3418da0f6d54a83158224b71662a6292bf45b5fb
Imphash
4fbdc03e4487f98fb59360ea5b3e640d
Authentihash MD5
d63561be67c8adae1db28b0e503b3ba1
Authentihash SHA1
8e67628743959e8b73d82ae5b9ee7a387a51925d
Authentihash SHA256
6999caca67b37860abb5e6d95420d1b0d04966bc6674aac3bfde4e2394ad37fd
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
amifldrv64.sysSample 2 · HVCI FALSE
MD5
ee57cbe6ec6a703678eaa6c59542ff57
SHA1
c614ab686e844c7a7d2b20bc7061ab15290e2cfd
SHA256
2f60536b25ba8c9014e4a57d7a9a681bd3189fa414eea88c256d029750e15cae
Imphash
363922cc73591e60f2af113182414230
Authentihash MD5
05c371cbcccf828fd3c9251ba2f61442
Authentihash SHA1
73265b25f043d2520b81a68ad0342baaff30e7cf
Authentihash SHA256
bee62b69023212a5a964d323f60e5858d7cbd767a39f3d5ef87cacb080b1dbf2
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
amifldrv64.sysSample 3 · HVCI TRUE
MD5
df5f8e118a97d1b38833fcdf7127ab29
SHA1
5fece994f2409810a0ad050b3ca9b633c93919e4
SHA256
36aafa127736c7226c50061ea065f71e14f64ec60321f705bc52686d24117e0d
Imphash
4fbdc03e4487f98fb59360ea5b3e640d
Authentihash MD5
28f8b0bdf1fc0b1d065ed3236931fab3
Authentihash SHA1
b7b33ed598425c008e51ff90cf28b288f7250cdd
Authentihash SHA256
a4e850e7847499e7d4c2754f8a4973fc5b4adeb728e1e142d1d35d519edf3274
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
amifldrv64.sysSample 4 · HVCI TRUE
MD5
785045f8b25cd2e937ddc6b09debe01a
SHA1
029c678674f482ababe8bbfdb93152392457109d
SHA256
37073e42ffa0322500f90cd7e3c8d02c4cdd695d31c77e81560abec20bfb68ba
Imphash
363922cc73591e60f2af113182414230
Authentihash MD5
51219fe8395e9ac49d271ccf7fde2512
Authentihash SHA1
6aeb587edcd01289abc84316ae88959c235663fe
Authentihash SHA256
af20c1b4eb703083979e6f4e211327495f7a0a27ace9a52bd22dd3737be7a8b1
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
amifldrv.sysSample 5 · HVCI TRUE
MD5
119f0656ab4bb872f79ee5d421e2b9f9
SHA1
e35969966769e7760094cbcffb294d0d04a09db6
SHA256
38d87b51f4b69ba2dae1477684a1415f1a3b578eee5e1126673b1beaefee9a20
Imphash
f9141c3df8f7ec7b3f2d46265a3b5528
Authentihash MD5
973ff01a8901563e12119ca09b427e8e
Authentihash SHA1
9f8870ec272933ee6f4e1eda975a6d5db5f9fbde
Authentihash SHA256
4f35cf1f2e0fb87a2728303091ee505a0bc546cf63dcd38178adf48477ec0f91
Machine
AMD64
Version
10.0.10011.16384
Publisher
Windows (R) Win 7 DDK provider
Download vulnerable sampleView on VirusTotal
amifldrv64.sysSample 6 · HVCI FALSE
MD5
530feb1e37831302f58b7c219be6b844
SHA1
1e09f3dd6ba9386fa9126f0116e49c2371401e01
SHA256
3cb75429944e60f6c820c7638adbf688883ad44951bca3f8912428afe72bc134
Imphash
4199ed50502e00f57d9b66e9305450f5
Authentihash MD5
aefe7422cfe20a6f576092d04a592311
Authentihash SHA1
943a16dde2e44f7bae629f62cf937cceb10ec1b4
Authentihash SHA256
7e8e7bc080b4c32ce703b3e8b3cc7e13fa9ef2422dc6f370a2c2b82496564aae
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
amifldrv64.sysSample 7 · HVCI TRUE
MD5
c098f8aeb67eeb2262dbf681690a9306
SHA1
7e8efd93a1dad02385ec56c8f3b1cfd23aa47977
SHA256
5f487829527802983d5c120e3b99f3cf89333ca14f5e49ac32df0798cfb1f7aa
Imphash
4c304943af1b07b15a5efa80f17d9b89
Authentihash MD5
f2a4fd2aae63ffe766a7a8d2d775a59e
Authentihash SHA1
52008f007e84756ba84dacb7cbb465e592dfe260
Authentihash SHA256
d259e9b1d04b5fa966094f15f8edbaeba5da2a14bf34bf0a5490a0e308c025d7
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
amifldrv64.sysSample 8 · HVCI FALSE
MD5
f22740ba54a400fd2be7690bb204aa08
SHA1
5812387783d61c6ab5702213bb968590a18065e3
SHA256
65c26276cadda7a36f8977d1d01120edb5c3418be2317d501761092d5f9916c9
Imphash
b05ee5c816a30bc52378c759486af0b9
Authentihash MD5
4bb9654a5a20bc189b000d4a2fba5856
Authentihash SHA1
444ce1608768884d1e9742f80ccf4f53e0aa709d
Authentihash SHA256
d052299252f0f0bd70b5e7c46b9ca71a99a052b47f693582becb6f0d567e8245
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
amifldrv64.sysSample 9 · HVCI FALSE
MD5
24156523b923fd9dcfdd0ac684dcdb20
SHA1
ff9048c451644c9c5ff2ba1408b194a0970b49e6
SHA256
6c64688444d3e004da77dcfb769d064bb38afceeef7ff915dfc71e60e19ff18a
Imphash
bd607d71fdc1444aa96dc431591c5c44
Authentihash MD5
229a8958720d362fab81a2b527e717a2
Authentihash SHA1
2cea31932e00c69e6f1bb0b0bf6b16b8c72dc3f6
Authentihash SHA256
aef3985caa213c9e5e0a0d5e75a9a7918a92c08690b5a04a6b14d6372c2dd71c
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
amifldrv64.sysSample 10 · HVCI FALSE
MD5
7331720a5522d5cd972623326cf87a3f
SHA1
456a1acacaa02664517c2f2fb854216e8e967f9d
SHA256
b95b2d9b29bd25659f1c7ba5a187f8d23cde01162d9b5b1a2c4aea8f64b38441
Imphash
4c304943af1b07b15a5efa80f17d9b89
Authentihash MD5
d5816277859ccb21e901e3ce39f6e929
Authentihash SHA1
d240db93654ce2685d3b903db809edcc82322dfc
Authentihash SHA256
05e2d2f2b58da5391598d30d7f5f33ae38cfeb0d9b9ae19b4312de39c678f301
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
amifldrv64.sysSample 11 · HVCI FALSE
MD5
2971d4ee95f640d2818e38d8877c8984
SHA1
28fa0e9429af24197134306b6c7189263e939136
SHA256
bc7ebd191e0991fd0865a5c956a92e63792a0bb2ff888af43f7a63bb65a22248
Imphash
4c304943af1b07b15a5efa80f17d9b89
Authentihash MD5
fac2590714168b1e586ff99a1f2322de
Authentihash SHA1
2d6cd59a2df6883bfec777ddfe7d10c50555e2cb
Authentihash SHA256
846cc7c9bf2eab3400e66481568a010fb0dfbac01416a99258a4baabf1e10d35
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
amifldrv64.sysSample 12 · HVCI FALSE
MD5
2503c4cf31588f0b011eb992ca3ee7ff
SHA1
e700fcfae0582275dbaee740f4f44b081703d20d
SHA256
c2fcc0fec64d5647813b84b9049d430406c4c6a7b9f8b725da21bcae2ff12247
Imphash
b05ee5c816a30bc52378c759486af0b9
Authentihash MD5
b1ea291940f1ae17794e05b8275fd130
Authentihash SHA1
dc0d3d244d27b85e10135fff8d34a76c17022ee1
Authentihash SHA256
96cb847fab0befab75a6f39080dd444d022d4bec73017c9d7187fe6282a0faa1
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
amifldrv64.sysSample 13 · HVCI TRUE
MD5
e5e8ecb20bc5630414707295327d755e
SHA1
06ecf73790f0277b8e27c8138e2c9ad0fc876438
SHA256
e7cbfb16261de1c7f009431d374d90e9eb049ba78246e38bc4c8b9e06f324b6f
Imphash
4fbdc03e4487f98fb59360ea5b3e640d
Authentihash MD5
83a8c462f323e93e725875f6e96c8727
Authentihash SHA1
c42feaa6c9788b7161b765f725070204f7b5e3ec
Authentihash SHA256
709ab95302bb44c7a7dafaf342ca933422ea03ed7b492be204a319161feb350e
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
amifldrv64.sysSample 14 · HVCI FALSE
MD5
1f7b2a00fe0c55d17d1b04c5e0507970
SHA1
eb1ecad3d37bb980f908bf1a912415cff32e79e6
SHA256
fc22977ff721b3d718b71c42440ee2d8a144f3fbc7755e4331ddd5bcc65158d2
Imphash
4c304943af1b07b15a5efa80f17d9b89
Authentihash MD5
9e725819820804fbf377917e9e7a3333
Authentihash SHA1
b0ec7d971da8ae84c0ed8f88a5d46b23996e636c
Authentihash SHA256
038f39558035292f1d794b7cf49f8e751e8633daec31454fe85cccbea83ba3fb
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
amifldrv.sysSample 15 · HVCI TRUE
MD5
7b9717c608a5f5a1c816128a609e9575
SHA1
ec457a53ea03287cbbd1edcd5f27835a518ef144
SHA256
ffc72f0bde21ba20aa97bee99d9e96870e5aa40cce9884e44c612757f939494f
Imphash
07a42e80559d960b176c0fc8fd309bfe
Authentihash MD5
08cac606d72411c22b1400d755a2b6e3
Authentihash SHA1
6055dbc453c111e57c85ec8cfad9e6e11421c8d4
Authentihash SHA256
5167b33a95b4db0a1244cb3b95d4024587d9a5a95222babb033210e6b111d2fb
Machine
AMD64
Version
10.0.10011.16384
Publisher
Windows (R) Win 7 DDK provider
Download vulnerable sampleView on VirusTotal
amifldrv64.sysSample 16 · HVCI FALSE
MD5
6ab7b8ef0c44e7d2d5909fdb58d37fa5
SHA1
bb962c9a8dda93e94fef504c4159de881e4706fe
SHA256
42579a759f3f95f20a2c51d5ac2047a2662a2675b3fb9f46c1ed7f23393a0f00
Imphash
4c0161f638d5acafe23fcee3c5e86f15
Authentihash MD5
fc9e48051c2b957ed1cc7b69a29a66c8
Authentihash SHA1
716bce2ce697883eba0c051ed487de6304d73cd3
Authentihash SHA256
d7841ee6dac956cc0923368d6722063a19c9fa131e55c6f3b7484cce78d826f0
Machine
AMD64
Version
Not recorded
Publisher
"American Megatrends, Inc."
Download vulnerable sampleView on VirusTotal
amifldrv64.sysSample 17 · HVCI FALSE
MD5
f41f65189b796534d8ef6bf9caa06853
SHA1
4d7d514b13de9bd3e9753bf058958e7f03f36983
SHA256
5e238d351e16d4909ca394f1db0326a60d33c9ac7b4d78aefcf17a6d9cc72be9
Imphash
4c304943af1b07b15a5efa80f17d9b89
Authentihash MD5
9e725819820804fbf377917e9e7a3333
Authentihash SHA1
b0ec7d971da8ae84c0ed8f88a5d46b23996e636c
Authentihash SHA256
038f39558035292f1d794b7cf49f8e751e8633daec31454fe85cccbea83ba3fb
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
amifldrv64.sysSample 18 · HVCI FALSE
MD5
304f7b25251e688516aa452411c0d439
SHA1
3a2e9523fa861714f1acf76009c2b024aa78ad03
SHA256
f06fdfe50ebc8d1d2daf5811b66288563f26a09a2ec9c2a21e2a71ff19756062
Imphash
363922cc73591e60f2af113182414230
Authentihash MD5
ea34e232fa33735e7ec30ffecd39e9b7
Authentihash SHA1
89817cfa2603b582c1e9f7f66db5847ec6661b36
Authentihash SHA256
df4566edea7c02e29d7dc56ff3f7da6c1ef846e1063b2805a5180bb0d6db37e8
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
amifldrv64.sysSample 19 · HVCI FALSE
MD5
cb6173824b31a721e5cf332c75bb2473
SHA1
41f2d0f9863bce8920c207b1ef5d3d32b603edef
SHA256
fda506e2aa85dc41a4cbc23d3ecc71ab34e06f1def736e58862dc449acbc2330
Imphash
4c304943af1b07b15a5efa80f17d9b89
Authentihash MD5
055ae7ceb7439b6f8de45c1143b8d84b
Authentihash SHA1
e91ea7fece914edc7f398a05bec3fcfb765328bb
Authentihash SHA256
2ee914c20b3e4a321bcd2ea2f0f437cda6da09dc0819cd6f06960c0567f4cb19
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
amifldrv64.sysSample 20 · HVCI FALSE
MD5
73fc2954829a49fc8eb178b000d10120
SHA1
4040f6974119ff2486f9a0cbd749ce240cbee2aa
SHA256
26ba58c9af9c8a7aebf222f491f786daa0626be44d34f170fea3623d92828e63
Imphash
9943d029b8ce940ac6c9a8ab0737bf35
Authentihash MD5
f7b9cfa7e07f5c516f65bbe9f7976634
Authentihash SHA1
40603c7230d74ff33524a11c0b09f9459e7afe91
Authentihash SHA256
8b4cbd2bc16071a1868597ec86857dba1140f981e3e943b0857341daffff4e69
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
amifldrv64.sysSample 21 · HVCI FALSE
MD5
28463a6a70f9a686a45934f6559b9b17
SHA1
27661f6a951a7fa031644bdf014e864c4ee6ec76
SHA256
990165725debccea7ca15aa4ed7a0e3a2a25b4a72cb309a27c899bd0e4b5148f
Imphash
4c304943af1b07b15a5efa80f17d9b89
Authentihash MD5
8d9eae0e8d075f0ddfaac56869fb4b12
Authentihash SHA1
a6d2266a4e27c71666ce5964570e87a8b0227e91
Authentihash SHA256
9022cdd52aa3420757d5c16fe61a4fd4d538fe74981ddf3f29de00eb7a3be849
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
amifldrv64.sysSample 22 · HVCI FALSE
MD5
b15a6de1b4a01c73a16f158c2b6b979f
SHA1
a0e95166bb6f80ef56cd645717d93174e47b750a
SHA256
7c942801884999057aabdc01707570371afdb077979ee2f318c05276123b78e7
Imphash
4c304943af1b07b15a5efa80f17d9b89
Authentihash MD5
87f85bfe34bc87a88c131a034dc171ba
Authentihash SHA1
169d8790ec6c0415b111411faf36c9e2626c3e98
Authentihash SHA256
7ccc32e11372896cc01d7780e1176ed6fedd17f846001bc3bf78699e4448105f
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
amifldrv64.sysSample 23 · HVCI FALSE
MD5
6b53c79248a6699da703c4c3ff9d4a7e
SHA1
61ec6cb5de378948ef036ff627c87c32f7308bad
SHA256
3972159a58fd04da06f648c3828648cf394d3eb6af89538166cae8e6184c3eb6
Imphash
9943d029b8ce940ac6c9a8ab0737bf35
Authentihash MD5
f7b9cfa7e07f5c516f65bbe9f7976634
Authentihash SHA1
40603c7230d74ff33524a11c0b09f9459e7afe91
Authentihash SHA256
8b4cbd2bc16071a1868597ec86857dba1140f981e3e943b0857341daffff4e69
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
amifldrv64.sysSample 24 · HVCI FALSE
MD5
5f463e27d90035be365077d1d1ebb3d7
SHA1
7019169a8348050774aa49a0e31c3670ee867277
SHA256
3482f671cb1b6414e43ab2c9bccc94c1fba67ceac6e9831249f18f31ad68880c
Imphash
4c304943af1b07b15a5efa80f17d9b89
Authentihash MD5
9e725819820804fbf377917e9e7a3333
Authentihash SHA1
b0ec7d971da8ae84c0ed8f88a5d46b23996e636c
Authentihash SHA256
038f39558035292f1d794b7cf49f8e751e8633daec31454fe85cccbea83ba3fb
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal

Recorded command

sc.exe create amifldrv64.sys binPath=C:\windows\temp\amifldrv64.sys type=kernel && sc.exe start amifldrv64.sys

Elevate privileges · Privileges: kernel · OS: Windows 10

Research & references