Driver intelligenceVulnerableVerified

Netfilter.sys

Confirmed vulnerable driver from Microsoft Block List

UUID / 9454a752-233e-4ba2-b585-8da242bf8f31ADDED / 2023-07-22AUTHOR / Michael Haag

Known samples 16

0 recorded TRUE · 16 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

Netfilter.sysSample 1 · HVCI FALSE

MD5: 1e9f5515bff6f29d06694be4cd95a21c
SHA1: 919b22b086fb2718648e61274e7ae9535efa9a99
SHA256: 22da5a055b7b17c69def9f5af54e257c751507e7b6b9a835fcf6245ab90ae750
Imphash: b5403fb8687d7afd40fd8cf3b4dfe29b
Authentihash MD5: d28a2c907981a32d7855fbf5e8e61c48
Authentihash SHA1: 05ac1c64ca16ab0517fe85d4499d08199e63df26
Authentihash SHA256: b430d3a0bdb837a5d6625d3b1cef07abd1953f969869ff6cf7ba398ae605431a
Machine: I386
Version: Not recorded
Publisher: Not recorded

Download vulnerable sample View on VirusTotal

Netfilter.sysSample 2 · HVCI FALSE

MD5: 4fbf95520d372ed081a16e1ccfb3c154
SHA1: 45f68dd09d129264abed173fcdd5c56e1147a977
SHA256: 23115b5b1d5511d59cdad75f863d65893304dc098848dcb149b69492f51b31f6
Imphash: b5403fb8687d7afd40fd8cf3b4dfe29b
Authentihash MD5: 5064073c3f84f1569377081c4ad33867
Authentihash SHA1: aca8e53483b40a06dfdee81bb364b1622f9156fe
Authentihash SHA256: 3d31118a2e92377ecb632bd722132c04af4e65e24ff87743796c75eb07cfcd71
Machine: I386
Version: Not recorded
Publisher: Not recorded

Download vulnerable sample View on VirusTotal

Netfilter.sysSample 3 · HVCI FALSE

MD5: 46e5dfe28aeccc39ea893975d54e3d3b
SHA1: 0df5e8599b332a7927bd0a9d87ad9d6b5ad332fe
SHA256: f3efcf47681d9f96afcbc843a241c21a643b173c48270446f6fe634991a57847
Imphash: 650fb6bf48d8b35397597d970226ca12
Authentihash MD5: 13e6bd0963191685d86aa909a5769b3f
Authentihash SHA1: 3c20bb896fd16b5c698185fb176e820a448997b3
Authentihash SHA256: cc383ad11e9d06047a1558ed343f389492da3ac2b84b71462aee502a2fa616c8
Machine: AMD64
Version: Not recorded
Publisher: Not recorded

Download vulnerable sample View on VirusTotal

Netfilter.sysSample 4 · HVCI FALSE

MD5: a01abca106a37eb4e7f96b1c4be38712
SHA1: 0f45c274b86bdcffba8d09a3cdfce974b10e3bfe
SHA256: cfe2dd2cf1eb8b79d3b4ae980cda6fd933979d47c837fda77256a24a41316468
Imphash: b5403fb8687d7afd40fd8cf3b4dfe29b
Authentihash MD5: 8c667904b9db9e69a637c55ae50decbd
Authentihash SHA1: bc2f3850c7b858340d7ed27b90e63b036881fd6c
Authentihash SHA256: f08ebddc11aefcb46082c239f8d97ceea247d846e22c4bcdd72af75c1cbc6b0b
Machine: I386
Version: Not recorded
Publisher: Not recorded

Download vulnerable sample View on VirusTotal

Netfilter.sysSample 5 · HVCI FALSE

MD5: 530f12f8058199964d0b41f1856185ec
SHA1: 8b04023990d18dcd5cc4c5538b332b017f3962fc
SHA256: bbc58fd69ce5fed6691dd8d2084e9b728add808ffd5ea8b42ac284b686f77d9a
Imphash: d252001e327cf09463aba69fb4de2125
Authentihash MD5: 086a664c2a188f4a1db40a1684597517
Authentihash SHA1: 8241c9a5755a740811c8e8d2739b33146acd3e6d
Authentihash SHA256: c56536f99207915e5a1f7d4f014ab942bd820e64ff7f371ad0462ef26ed27242
Machine: AMD64
Version: Not recorded
Publisher: Not recorded

Download vulnerable sample View on VirusTotal

Netfilter.sysSample 6 · HVCI FALSE

MD5: 3ce1153adde6ca1fa17679d9f00b4de0
SHA1: 56086ede8efe41322b829aaec81df6ef317809e7
SHA256: 16e68d2fa75a4e04872be42e2b54c041e43ab3409096741690520417e3368aa6
Imphash: d252001e327cf09463aba69fb4de2125
Authentihash MD5: 086a664c2a188f4a1db40a1684597517
Authentihash SHA1: 8241c9a5755a740811c8e8d2739b33146acd3e6d
Authentihash SHA256: c56536f99207915e5a1f7d4f014ab942bd820e64ff7f371ad0462ef26ed27242
Machine: AMD64
Version: Not recorded
Publisher: Not recorded

Download vulnerable sample View on VirusTotal

Netfilter.sysSample 7 · HVCI FALSE

MD5: 2ff65eaca2ace4d13d0c7db521120e51
SHA1: a9c16b188132cdf9e9d02ddda7727a241dc43ce2
SHA256: 04a269dd0a03e32e5b2a1c8ab0768791962e040d080d44dc44dab01dd7954f2b
Imphash: 40758fe0a03b654da35a5f035d0343c5
Authentihash MD5: 952d13ef24460cf6d9f7ce78005bc918
Authentihash SHA1: 3debe170b5a113407f9e86ee6ed9ae00c3d82c9f
Authentihash SHA256: 221dfbc74bbb255b0879360ccc71a74b756b2e0f16e9386b38a9ce9d4e2e34f9
Machine: AMD64
Version: Not recorded
Publisher: Not recorded

Download vulnerable sample View on VirusTotal

Netfilter.sysSample 8 · HVCI FALSE

MD5: e3fb0f73f17f1fe04ae8fa9448d2f92b
SHA1: 4656f21f4093a72864b12ad6783a640ec9d4adff
SHA256: 40c45c9b1c764777096b59f99ae524cbd25b88c805187e615c3ed6840f3d4c15
Imphash: e938b727f5a033818337f7ba0584500f
Authentihash MD5: 8ed8507c953e60b61f022350417236fa
Authentihash SHA1: 2c27abbbbcf10dfb75ad79557e30ace5ed314df8
Authentihash SHA256: 7f1772bdf7dd81cb00d30159d19d4eb9160b54d7609b36f781d08ca3afbd29a7
Machine: AMD64
Version: Not recorded
Publisher: Not recorded

Download vulnerable sample View on VirusTotal

Netfilter.sysSample 9 · HVCI FALSE

MD5: a57e4e3a3fa46bbdbc9d803283af3479
SHA1: 4ede7f018c317ddc6a5f8f935f917621668cb1ec
SHA256: f83c357106a7d1d055b5cb75c8414aa3219354deb16ae9ee7efe8ee4c8c670ca
Imphash: d252001e327cf09463aba69fb4de2125
Authentihash MD5: 1f5f357f730b5852b34876b01fb1d44e
Authentihash SHA1: 4b8c0445075f09aeef542ab1c86e5de6b06e91a3
Authentihash SHA256: 0988d366572a57b3015d875b60704517d05115580678e8f2e126f771eda28f7b
Machine: AMD64
Version: Not recorded
Publisher: Not recorded

Download vulnerable sample View on VirusTotal

Netfilter.sysSample 10 · HVCI FALSE

MD5: 9c46269615ae06f912463ddc28319157
SHA1: 6d6f71e858ce0fad35f4dc6e7ddb72dd0574a497
SHA256: 24ea733bae1b8722841fb4c6cead93c4c4f0b1248ca9a21601b1ce6b95b06864
Imphash: 9321f9c47129fbc728ead2710e22f1a5
Authentihash MD5: ace17016bb2aba11a9f8f73b2fc98642
Authentihash SHA1: e014c6bebfda944ce3a58ab9fe055d4f9367d49c
Authentihash SHA256: 651ffa0c7aff7b4a7695dddd209dc3e7f68156e29a14d3fcc17aef4f2a205dcc
Machine: I386
Version: Not recorded
Publisher: Not recorded

Download vulnerable sample View on VirusTotal

Netfilter.sysSample 11 · HVCI FALSE

MD5: 0e2d4679f68796e9dd0d663137cb9e12
SHA1: 7cb3ea53660dbc1b4fe12e0c03c7bfea0a3c92a2
SHA256: 8249e9c0ac0840a36d9a5b9ff3e217198a2f533159acd4bf3d9b0132cc079870
Imphash: b5403fb8687d7afd40fd8cf3b4dfe29b
Authentihash MD5: 8c667904b9db9e69a637c55ae50decbd
Authentihash SHA1: bc2f3850c7b858340d7ed27b90e63b036881fd6c
Authentihash SHA256: f08ebddc11aefcb46082c239f8d97ceea247d846e22c4bcdd72af75c1cbc6b0b
Machine: I386
Version: Not recorded
Publisher: Not recorded

Download vulnerable sample View on VirusTotal

Netfilter.sysSample 12 · HVCI FALSE

MD5: f783cf9084f1cefa87e9e5a302d4d18a
SHA1: c1e63efa1447b68a870962334c61cedd04db379b
SHA256: 93d99a5fbfc888c0a40a18946933121ae110229dcf206b4d17116a57e7cf4dc9
Imphash: b679ac08daf4b4ce8a58d85a8e0904ac
Authentihash MD5: 038cbc948ff5ba06ac0b54ca31401fe4
Authentihash SHA1: 83660d245fe618ecafe4900ac1e2ad0292c2da2a
Authentihash SHA256: 72b99147839bcfb062d29014ec09fe20a8f261748b5925b00171ef3cb849a4c1
Machine: AMD64
Version: Not recorded
Publisher: Not recorded

Download vulnerable sample View on VirusTotal

Netfilter.sysSample 13 · HVCI FALSE

MD5: 1814c4b16c8c3e746a185daaa5099ebc
SHA1: 9065b63f7d1b7eac160c10d6f30a097613c29f12
SHA256: 0123c7f12dd7530d55aee49949ff1fee911c9689bd04591684aa641882589785
Imphash: d252001e327cf09463aba69fb4de2125
Authentihash MD5: 9c6ee2cfa1e9a7cf7a847c6d4b20f10e
Authentihash SHA1: faa870b0cb15c9ac2b9bba5d0470bd501ccd4326
Authentihash SHA256: 5c206b569b7059b7c32eb5fc36922cb435c2b16c8d96de1038c8bd298ed498fe
Machine: AMD64
Version: Not recorded
Publisher: Not recorded

Download vulnerable sample View on VirusTotal

Netfilter.sysSample 14 · HVCI FALSE

MD5: 0bd3b9f55a2d3a13f506d9d8b970e0de
SHA1: f023177aca17f6dc90fdd9588240cb16c70a9fe2
SHA256: 63d61549030fcf46ff1dc138122580b4364f0fe99e6b068bc6a3d6903656aff0
Imphash: d252001e327cf09463aba69fb4de2125
Authentihash MD5: 9c6ee2cfa1e9a7cf7a847c6d4b20f10e
Authentihash SHA1: faa870b0cb15c9ac2b9bba5d0470bd501ccd4326
Authentihash SHA256: 5c206b569b7059b7c32eb5fc36922cb435c2b16c8d96de1038c8bd298ed498fe
Machine: AMD64
Version: Not recorded
Publisher: Not recorded

Download vulnerable sample View on VirusTotal

Netfilter.sysSample 15 · HVCI FALSE

MD5: a07f5f368deb3569ec3129fa55da4041
SHA1: a10ce0c717bfe0163eda2459964ad637d634de27
SHA256: 16b6be03495a4f4cf394194566bb02061fba2256cc04dcbde5aa6a17e41b7650
Imphash: 518e77c070ae21af7c558962cd1854a3
Authentihash MD5: e03a070a426b0c2de53ea23bfc76086b
Authentihash SHA1: 202d5a05e546740037f9a4dc2b21f71680c39d3b
Authentihash SHA256: 0391107305d76eb9ddf1a5b3b3c50da361e8ab35b573dbd19bf9383436b9303e
Machine: I386
Version: Not recorded
Publisher: Not recorded

Download vulnerable sample View on VirusTotal

Netfilter.sysSample 16 · HVCI FALSE

MD5: cb34374f1b5fb771076872c6b14b7501
SHA1: 118f688c30a2f6c2d1feb955f53ce4acf3086b3b
SHA256: e0afb8b937a5907fbe55a1d1cc7574e9304007ef33fa80ff3896e997a1beaf37
Imphash: b5403fb8687d7afd40fd8cf3b4dfe29b
Authentihash MD5: 5064073c3f84f1569377081c4ad33867
Authentihash SHA1: aca8e53483b40a06dfdee81bb364b1622f9156fe
Authentihash SHA256: 3d31118a2e92377ecb632bd722132c04af4e65e24ff87743796c75eb07cfcd71
Machine: I386
Version: Not recorded
Publisher: Not recorded

Download vulnerable sample View on VirusTotal

Research & references

https://gist.github.com/mgraeber-rc/1bde6a2a83237f17b463d051d32e802c