Driver intelligenceVulnerableVerified

filnk.sys

Twister Antivirus, fildds.sys, DoS2 CVE-2023-1444 From IoControlCode 0x8011206B, a normal user can cause DoS due to writing into null address.

UUID / ba91bce3-2cf9-4c44-bbd8-1170a44d23dbADDED / 2024-06-20AUTHOR / VirarK

Known samples 1

1 recorded TRUE · 0 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

filnk.sysSample 1 · HVCI TRUE

MD5: 4b22e494ad2ac90c42f02dcca0328b7c
SHA1: 116decf4442c23766953d68f05a20c74924ca22e
SHA256: ae55a0e93e5ef3948adecf20fa55b0f555dcf40589917a5bfbaa732075f0cc12
Imphash: cd5186f6f0e55f9acedd31a5a6ce3e1c
Authentihash MD5: 5ee751959a9768cc62bbb6f4b8f4ad7e
Authentihash SHA1: 8453c3915cf9bd5ca9ac4339bd592dbac85b51a2
Authentihash SHA256: 2fa50ee8ed9d5c91d3375950613132497c44f468193bce9fe8e51c918a9498b5
Machine: AMD64
Version: 2, 0, 0, 19353
Publisher: Filseclab Corporation

sc.exe create filnk.sys binPath=C:\windows\temp\filnk.sys type=kernel && sc.exe start filnk.sys

Elevate privileges · Privileges: kernel · OS: Windows 10