Driver intelligenceVulnerableVerified

sfdrvx64.sys

Confirmed vulnerable driver from Microsoft Block List

UUID / 5a03dc5a-115d-4d6f-b5b5-685f4c014a69ADDED / 2023-07-22AUTHOR / Michael Haag

Known samples 3

2 recorded TRUE · 1 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

sfdrvx64.sysSample 1 · HVCI TRUE

MD5: 12583af6cbe0050651eaf2723b3ad7b3
SHA1: 74bb900754636b5f2d519a41a3b5505bc6201789
SHA256: 965d4f981b54669a96c5ab02d09bf0a9850d13862425b8981f1a9271350f28bb
Imphash: 9833f7dab4a59d51b04d2cf31656a0f6
Authentihash MD5: 3997557bc6175c3a3fa6e7a3abcd9161
Authentihash SHA1: 7151719fbc8bc69bcbd601fc7f06f0965cc50d82
Authentihash SHA256: 8f8956abdeb2a52be2cc514790a737a0ad39a9e698a77c1f358e77f1bf9f180b
Machine: AMD64
Version: X2.01.07
Publisher: Almico Software

sfdrvx64.sysSample 2 · HVCI TRUE

MD5: 7455ed832a33fef453407f5411c3342d
SHA1: a5d7ea909df5ad14a0e6241c4036c1c97ec30aa9
SHA256: 88fb0a846f52c3b680c695cd349bf56151a53a75a07b8b0b4fe026ab8aa0a9af
Imphash: 0b19304edb04d5b178dd763d7cd04167
Authentihash MD5: 94749793f16989a1c2cc24a75f1559ac
Authentihash SHA1: e26a1a3cd82ce6e58fb4252a0da2cc86236618b1
Authentihash SHA256: d8ff25255202321bd00f7aa792800e1fb7aab506dca771a4a8e2cc1af265fa15
Machine: AMD64
Version: X4.43.04
Publisher: Almico Software

sfdrvx64.sysSample 3 · HVCI FALSE

MD5: 0ffe35f0b0cd5a324bbe22f02569ae3b
SHA1: 25789f290feba14f53d48f4d1a5003ec130f7d95
SHA256: f4ee803eefdb4eaeedb3024c3516f1f9a202c77f4870d6b74356bbde32b3b560
Imphash: 9833f7dab4a59d51b04d2cf31656a0f6
Authentihash MD5: 79680d213f9c7a85a512b3d90e3f2e36
Authentihash SHA1: 8fe08faea7bb2a8ba69014dd49ee44a3f8a2985c
Authentihash SHA256: c09dfc18959fe51d3e5ca1500a94ab74faf0eb72040930e89cdbac653df9e816
Machine: AMD64
Version: X2.03.11
Publisher: Almico Software