Driver intelligenceVulnerableVerified

netfilter2.sys

Confirmed vulnerable driver from Microsoft Block List

UUID / 5ad8a3b6-6d20-4c95-8fa7-9a507167ba3cADDED / 2023-07-22AUTHOR / Michael Haag

Known samples 25

0 recorded TRUE · 25 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

netfilter2.sysSample 1 · HVCI FALSE

MD5: 0c1a4b584106cca4edce5d04c89eef67
SHA1: 916fb0eb154d7db937cbf91078ad7925cc9f5698
SHA256: f1718a005232d1261894b798a60c73d971416359b70d0e545d7e7a40ed742b71
Imphash: e8ab88dbb86b32acd650b5e269135ad9
Authentihash MD5: b2d0111f81238f6e6e6513cf7625a19f
Authentihash SHA1: 8a50e81d6e6c45410bf13f95b1a67cada8c82221
Authentihash SHA256: 5b9623da9ba8e5c80c49473f40ffe7ad315dcadffc3230afdc9d9226d60a715a
Machine: I386
Version: 1.5.7.8
Publisher: 宏图无忧

Download vulnerable sample View on VirusTotal

netfilter2.sysSample 2 · HVCI FALSE

MD5: 724c7d404a7c182084c6f6c2d20e9e05
SHA1: ac056610db0b5f616aafacdc565d9b9f95870e60
SHA256: 71701c5c569ef67391c995a12b21ca06935b7799ed211d978f7877115c58dce0
Imphash: c3658b106f146a18ba9b6e5c7bacfe9b
Authentihash MD5: 3361957860d2b65c0368778ca088946f
Authentihash SHA1: 6a784d45517142c11d5cca3ff9956b2ed6eaf4c9
Authentihash SHA256: e94e8a87459db56837d1c58f9854794aa99f36566a9ded9b398be9d4d3a2c2af
Machine: AMD64
Version: 1.5.9.7
Publisher: Windows (R) Win 7 DDK provider

Download vulnerable sample View on VirusTotal

netfilter2.sysSample 3 · HVCI FALSE

MD5: c6dcf97b669be21dffd4e96aecec3066
SHA1: 06b52ba103412f4ab49fac7129129c10570fd6fd
SHA256: 47e35f474f259314c588af35e88561a015801b52db523eb75fc7eccff8b3be4d
Imphash: fc1af6fcd96ae15019c6cbe9015709d3
Authentihash MD5: 6d4517e6348130fe55f11bfd630d857f
Authentihash SHA1: 60a632e4b838731aad553650d6bc8af3d3d80b26
Authentihash SHA256: 8168304169a2453c0c3e0a285c2a07d3b3b83433e0342f6b33400c371af86221
Machine: I386
Version: 1.5.9.7 built by: WinDDK
Publisher: Windows (R) Win 7 DDK provider

Download vulnerable sample View on VirusTotal

netfilter2.sysSample 4 · HVCI FALSE

MD5: e9e4b27f98eb15dcfc01837e7816ad67
SHA1: a3698922e9850404da1888beebb3f70ae3f8d62e
SHA256: 0eace788e09c8d3f793a1fad94d35bcfd233f0777873412cd0c8172865562eec
Imphash: fc1af6fcd96ae15019c6cbe9015709d3
Authentihash MD5: 6d4517e6348130fe55f11bfd630d857f
Authentihash SHA1: 60a632e4b838731aad553650d6bc8af3d3d80b26
Authentihash SHA256: 8168304169a2453c0c3e0a285c2a07d3b3b83433e0342f6b33400c371af86221
Machine: I386
Version: 1.5.9.7 built by: WinDDK
Publisher: Windows (R) Win 7 DDK provider

Download vulnerable sample View on VirusTotal

netfilter2.sysSample 5 · HVCI FALSE

MD5: 6088826a0114f777e486ff093a8d4150
SHA1: abce61b428d48fabdb8ddfff4d61d2f1edac0128
SHA256: 18b923b169b2c3c7db5cbfda0db0999f04adb2cf6c917e5b1fb2ff04714ecac1
Imphash: 55ef49522fb4f4b2667521ff4804a19a
Authentihash MD5: ddbb824860937add7c0f86c5df993d3a
Authentihash SHA1: 03f0dd3124ec3a4bb6d30865a488f54e74ded699
Authentihash SHA256: dfaefd06b680f9ea837e7815fc1cc7d1f4cc375641ac850667ab20739f46ad22
Machine: AMD64
Version: 1.4.9.5 built by: WinDDK
Publisher: 宏图无忧

Download vulnerable sample View on VirusTotal

netfilter2.sysSample 6 · HVCI FALSE

MD5: c56a3a74019e2304af8c19e8e17dd9d3
SHA1: 91f693850d7e42ae135e07eae6940e0f58dc4de7
SHA256: edc6e32e3545f859e5b49ece1cabd13623122c1f03a2f7454a61034b3ff577ed
Imphash: 55ef49522fb4f4b2667521ff4804a19a
Authentihash MD5: ddbb824860937add7c0f86c5df993d3a
Authentihash SHA1: 03f0dd3124ec3a4bb6d30865a488f54e74ded699
Authentihash SHA256: dfaefd06b680f9ea837e7815fc1cc7d1f4cc375641ac850667ab20739f46ad22
Machine: AMD64
Version: 1.4.9.5 built by: WinDDK
Publisher: 宏图无忧

Download vulnerable sample View on VirusTotal

netfilter2.sysSample 7 · HVCI FALSE

MD5: e3b79b124fe408b971d18fd3a25b5ba0
SHA1: 5d1338b06e52a2dd3afda4dd0374a80e91cbf333
SHA256: 2fa78c2988f9580b0c18822b117d065fb419f9c476f4cfa43925ba6cd2dffac3
Imphash: dc1fe38f597362ae167fd4212146aa60
Authentihash MD5: b42afd5a5225094c7943185e769bc995
Authentihash SHA1: 22c5e127e7e7c567d8624607a6f8f5809deacb55
Authentihash SHA256: de6bf572d39e2611773e7a01f0388f84fb25da6cba2f1f8b9b36ffba467de6fa
Machine: I386
Version: 1.4.9.5 built by: WinDDK
Publisher: 宏图无忧

Download vulnerable sample View on VirusTotal

netfilter2.sysSample 8 · HVCI FALSE

MD5: e1190b7a0bd3b8cc3a819d471ede264f
SHA1: 1ea5d1bad9b01a38aa20b2cc2fcd90b3adcb1700
SHA256: 65a3e69854c729659281d2c5f8a4c8274ad3606befdcd9e1b79d3262f260bfa1
Imphash: 79c0d702a9da102f56d81f4efe802fbf
Authentihash MD5: 52cef25aecab8b66f05e29df206d6375
Authentihash SHA1: 4e5e719362cd48bb323803c1d00afde11d4b9d4c
Authentihash SHA256: 44a0599defea351314663582dbc61069b3a095a4ddad571bb17dd0d8b21e7ff2
Machine: I386
Version: 1.5.9.7
Publisher: Windows (R) Win 7 DDK provider

Download vulnerable sample View on VirusTotal

netfilter2.sysSample 9 · HVCI FALSE

MD5: 3a53fe6598d2b9bc3b81d3dd6bc5d843
SHA1: 8fbe153c1059a7fce265d5f6e6d8836c3aebe39e
SHA256: f488500be4eaafba74b644be95d4c0523297770fb9bb78c449f643ab8d4a05d9
Imphash: fc1af6fcd96ae15019c6cbe9015709d3
Authentihash MD5: 6d4517e6348130fe55f11bfd630d857f
Authentihash SHA1: 60a632e4b838731aad553650d6bc8af3d3d80b26
Authentihash SHA256: 8168304169a2453c0c3e0a285c2a07d3b3b83433e0342f6b33400c371af86221
Machine: I386
Version: 1.5.9.7 built by: WinDDK
Publisher: Windows (R) Win 7 DDK provider

Download vulnerable sample View on VirusTotal

netfilter2.sysSample 10 · HVCI FALSE

MD5: 837b27efec864ae45d89cfffc1e635f0
SHA1: f03a9bb8c6943c3db7532ccc39cc1905a62f27be
SHA256: 0f3e7bf7b103613844a38afb574817ddaecd00e4d206d891660dbb0e5dfee04e
Imphash: c3658b106f146a18ba9b6e5c7bacfe9b
Authentihash MD5: 3361957860d2b65c0368778ca088946f
Authentihash SHA1: 6a784d45517142c11d5cca3ff9956b2ed6eaf4c9
Authentihash SHA256: e94e8a87459db56837d1c58f9854794aa99f36566a9ded9b398be9d4d3a2c2af
Machine: AMD64
Version: 1.5.9.7
Publisher: Windows (R) Win 7 DDK provider

Download vulnerable sample View on VirusTotal

netfilter2.sysSample 11 · HVCI FALSE

MD5: 5035359be554444dde135903e4a07b28
SHA1: 5686bec46dedcea3a8724bb042a1d24ddd6f4c81
SHA256: 12656fc113b178fa3e6bfffc6473897766c44120082483eb8059ebff29b5d2df
Imphash: 8e0e7a2f5025b047a8ebd12a87d503fe
Authentihash MD5: fd8b9266dc98e0af514babcbba122265
Authentihash SHA1: dc38cc55b84a1a7c0846fb5509b43b4ff97a9be6
Authentihash SHA256: fafa1bb36f0ac34b762a10e9f327dcab2152a6d0b16a19697362d49a31e7f566
Machine: AMD64
Version: 1.5.7.8 built by: WinDDK
Publisher: 宏图无忧

Download vulnerable sample View on VirusTotal

netfilter2.sysSample 12 · HVCI FALSE

MD5: 5c7d08cafbb96b0812a90ce4de52869a
SHA1: eff9b9458f4eb611478a0c959f156f3dc7e62c08
SHA256: 79e7165e626c7bde546cd1bea4b9ec206de8bed7821479856bdb0a2adc3e3617
Imphash: 55ef49522fb4f4b2667521ff4804a19a
Authentihash MD5: ddbb824860937add7c0f86c5df993d3a
Authentihash SHA1: 03f0dd3124ec3a4bb6d30865a488f54e74ded699
Authentihash SHA256: dfaefd06b680f9ea837e7815fc1cc7d1f4cc375641ac850667ab20739f46ad22
Machine: AMD64
Version: 1.4.9.5 built by: WinDDK
Publisher: 宏图无忧

Download vulnerable sample View on VirusTotal

netfilter2.sysSample 13 · HVCI FALSE

MD5: 546107a0f37686b2417f1be2e05305f6
SHA1: b06af934021f48fa31db5759fa1eafa1927fc7e5
SHA256: 6a234a2b8eb3844f7b5831ee048f88e8a76e9d38e753cc82f61b234c79fe1660
Imphash: dc1fe38f597362ae167fd4212146aa60
Authentihash MD5: b42afd5a5225094c7943185e769bc995
Authentihash SHA1: 22c5e127e7e7c567d8624607a6f8f5809deacb55
Authentihash SHA256: de6bf572d39e2611773e7a01f0388f84fb25da6cba2f1f8b9b36ffba467de6fa
Machine: I386
Version: 1.4.9.5 built by: WinDDK
Publisher: 宏图无忧

Download vulnerable sample View on VirusTotal

netfilter2.sysSample 14 · HVCI FALSE

MD5: dc83a482d5900f19c0b92b9d183449ed
SHA1: d219edc08fb789817c264b164f3034543b6a2e08
SHA256: 5c54a5cd3386ac14725a07962562e9fdcefbb7be0d19803f9d71de24573de1e3
Imphash: 578e11377270c1acacba47b17ef7b169
Authentihash MD5: 0d76526227d593a8967ed866b5991e10
Authentihash SHA1: 3ae56ab63230d6d9552360845b4a37b5801cc5ea
Authentihash SHA256: e9b433a33dc72eb2622947b41f01d04a48cd71beac775a88f3f1e4c838090ee8
Machine: AMD64
Version: 1.5.9.7 built by: WinDDK
Publisher: Windows (R) Win 7 DDK provider

Download vulnerable sample View on VirusTotal

netfilter2.sysSample 15 · HVCI FALSE

MD5: 1b54c047e17f0319a6202b579a850c54
SHA1: d1178492ba5e23927141fa49edb9aa29640f20f8
SHA256: 8017e618b5a7aa608cc4bce16e4defd6b4e99138c4ba1bdd6ad78e39f035cf59
Imphash: fc1af6fcd96ae15019c6cbe9015709d3
Authentihash MD5: 6d4517e6348130fe55f11bfd630d857f
Authentihash SHA1: 60a632e4b838731aad553650d6bc8af3d3d80b26
Authentihash SHA256: 8168304169a2453c0c3e0a285c2a07d3b3b83433e0342f6b33400c371af86221
Machine: I386
Version: 1.5.9.7 built by: WinDDK
Publisher: Windows (R) Win 7 DDK provider

Download vulnerable sample View on VirusTotal

netfilter2.sysSample 16 · HVCI FALSE

MD5: 14acd57bd9fa8093c46fdd5e9f271b70
SHA1: b0cb07e84261626a384e74020735be0cace7a3bd
SHA256: 639ff79f13e40d47b90ecd709699edd10e740cb41451acb95590a68b6352de2b
Imphash: 578e11377270c1acacba47b17ef7b169
Authentihash MD5: 0d76526227d593a8967ed866b5991e10
Authentihash SHA1: 3ae56ab63230d6d9552360845b4a37b5801cc5ea
Authentihash SHA256: e9b433a33dc72eb2622947b41f01d04a48cd71beac775a88f3f1e4c838090ee8
Machine: AMD64
Version: 1.5.9.7 built by: WinDDK
Publisher: Windows (R) Win 7 DDK provider

Download vulnerable sample View on VirusTotal

netfilter2.sysSample 17 · HVCI FALSE

MD5: 303d0cc0864955eb20fe820104713d5f
SHA1: 22314679389c9db6e7e99ca991a597055100f50b
SHA256: 9dbc2a37f53507296cc912e7d354dab4e55541ba821561aa84f74d1bd8346be2
Imphash: c3658b106f146a18ba9b6e5c7bacfe9b
Authentihash MD5: 3361957860d2b65c0368778ca088946f
Authentihash SHA1: 6a784d45517142c11d5cca3ff9956b2ed6eaf4c9
Authentihash SHA256: e94e8a87459db56837d1c58f9854794aa99f36566a9ded9b398be9d4d3a2c2af
Machine: AMD64
Version: 1.5.9.7
Publisher: Windows (R) Win 7 DDK provider

Download vulnerable sample View on VirusTotal

netfilter2.sysSample 18 · HVCI FALSE

MD5: 173779a1a53b6ac06dcf045bc78eed62
SHA1: c46e469d45ecc08a5b13a6d9d9b7f9c5a9fae008
SHA256: 26d67d479dafe6b33c980bd1eed0b6d749f43d05d001c5dcaaf5fcddb9b899fe
Imphash: dc1fe38f597362ae167fd4212146aa60
Authentihash MD5: b42afd5a5225094c7943185e769bc995
Authentihash SHA1: 22c5e127e7e7c567d8624607a6f8f5809deacb55
Authentihash SHA256: de6bf572d39e2611773e7a01f0388f84fb25da6cba2f1f8b9b36ffba467de6fa
Machine: I386
Version: 1.4.9.5 built by: WinDDK
Publisher: 宏图无忧

Download vulnerable sample View on VirusTotal

netfilter2.sysSample 19 · HVCI FALSE

MD5: 15cfb6e9841d553926aace5114fa8475
SHA1: 16211fd7b3dd8fd09181a7f4ed20e629e374c00b
SHA256: 6703400b490b35bcde6e41ce1640920251855e6d94171170ae7ea22cdd0938c0
Imphash: fc1af6fcd96ae15019c6cbe9015709d3
Authentihash MD5: 6d4517e6348130fe55f11bfd630d857f
Authentihash SHA1: 60a632e4b838731aad553650d6bc8af3d3d80b26
Authentihash SHA256: 8168304169a2453c0c3e0a285c2a07d3b3b83433e0342f6b33400c371af86221
Machine: I386
Version: 1.5.9.7 built by: WinDDK
Publisher: Windows (R) Win 7 DDK provider

Download vulnerable sample View on VirusTotal

netfilter2.sysSample 20 · HVCI FALSE

MD5: b04685112a0a8f7689c8d827bfcfe158
SHA1: c7e40abaae9aeff135fe313fb0283381e8cced4d
SHA256: db1dbb09d437d3e8bed08c88ca43769b4fe8728f68b78ff6f9c8d2557e28d2b1
Imphash: 578e11377270c1acacba47b17ef7b169
Authentihash MD5: 0d76526227d593a8967ed866b5991e10
Authentihash SHA1: 3ae56ab63230d6d9552360845b4a37b5801cc5ea
Authentihash SHA256: e9b433a33dc72eb2622947b41f01d04a48cd71beac775a88f3f1e4c838090ee8
Machine: AMD64
Version: 1.5.9.7 built by: WinDDK
Publisher: Windows (R) Win 7 DDK provider

Download vulnerable sample View on VirusTotal

netfilter2.sysSample 21 · HVCI FALSE

MD5: e5df31054a60be8aa858a28a8fe0f73e
SHA1: 48559c488bc304d39f87855b2225f8c0f7d74b59
SHA256: 81bcd8a3f8c17ac6dc4bad750ad3417914db10aa15485094eef0951a3f72bdbd
Imphash: 79c0d702a9da102f56d81f4efe802fbf
Authentihash MD5: 52cef25aecab8b66f05e29df206d6375
Authentihash SHA1: 4e5e719362cd48bb323803c1d00afde11d4b9d4c
Authentihash SHA256: 44a0599defea351314663582dbc61069b3a095a4ddad571bb17dd0d8b21e7ff2
Machine: I386
Version: 1.5.9.7
Publisher: Windows (R) Win 7 DDK provider

Download vulnerable sample View on VirusTotal

netfilter2.sysSample 22 · HVCI FALSE

MD5: c3e397dc9fb61a75521548048458a018
SHA1: 708c327256e1aea27572cdfc07ab44c22eb19aae
SHA256: 7ff8fe4c220cf6416984b70a7e272006a018e5662da3cedc2a88efeb6411b4a4
Imphash: 8e0e7a2f5025b047a8ebd12a87d503fe
Authentihash MD5: fd8b9266dc98e0af514babcbba122265
Authentihash SHA1: dc38cc55b84a1a7c0846fb5509b43b4ff97a9be6
Authentihash SHA256: fafa1bb36f0ac34b762a10e9f327dcab2152a6d0b16a19697362d49a31e7f566
Machine: AMD64
Version: 1.5.7.8 built by: WinDDK
Publisher: 宏图无忧

Download vulnerable sample View on VirusTotal

netfilter2.sysSample 23 · HVCI FALSE

MD5: 305b05de211be69446444284923bd676
SHA1: 4d8a4115826eef6d9acd2487b141facf5b87a257
SHA256: 1a0f57a4d7c8137baf24c65d542729547b876979273df7a245aaeea87280c090
Imphash: c3658b106f146a18ba9b6e5c7bacfe9b
Authentihash MD5: 3361957860d2b65c0368778ca088946f
Authentihash SHA1: 6a784d45517142c11d5cca3ff9956b2ed6eaf4c9
Authentihash SHA256: e94e8a87459db56837d1c58f9854794aa99f36566a9ded9b398be9d4d3a2c2af
Machine: AMD64
Version: 1.5.9.7
Publisher: Windows (R) Win 7 DDK provider

Download vulnerable sample View on VirusTotal

netfilter2.sysSample 24 · HVCI FALSE

MD5: 3e5c04eced0e89aa8bfc279323c3544e
SHA1: 49f47fcb67f510b2d2ea891e1b1a50a95e0702ad
SHA256: 62b14bb308c99132d90646e85bc7d6eb593f38e225c8232f69f24b74a019c176
Imphash: 79c0d702a9da102f56d81f4efe802fbf
Authentihash MD5: 52cef25aecab8b66f05e29df206d6375
Authentihash SHA1: 4e5e719362cd48bb323803c1d00afde11d4b9d4c
Authentihash SHA256: 44a0599defea351314663582dbc61069b3a095a4ddad571bb17dd0d8b21e7ff2
Machine: I386
Version: 1.5.9.7
Publisher: Windows (R) Win 7 DDK provider

Download vulnerable sample View on VirusTotal

netfilter2.sysSample 25 · HVCI FALSE

MD5: 48357f3a359fa9c18f370f177c70298e
SHA1: 31ba5cc32a59e1915031b1363b7699116dfb1230
SHA256: 1cd75de5f54b799b60789696587b56a4a793cf60775b81f236f0e65189d863af
Imphash: 8e0e7a2f5025b047a8ebd12a87d503fe
Authentihash MD5: fd8b9266dc98e0af514babcbba122265
Authentihash SHA1: dc38cc55b84a1a7c0846fb5509b43b4ff97a9be6
Authentihash SHA256: fafa1bb36f0ac34b762a10e9f327dcab2152a6d0b16a19697362d49a31e7f566
Machine: AMD64
Version: 1.5.7.8 built by: WinDDK
Publisher: 宏图无忧

Download vulnerable sample View on VirusTotal

Research & references

https://gist.github.com/mgraeber-rc/1bde6a2a83237f17b463d051d32e802c