LOLDriversTHE DRIVER THREAT CATALOG
← Back to driver explorer
Driver intelligenceVulnerableVerified

nvflsh64.sys

Description not recorded.

UUID / d4664202-d1b9-44d4-97cc-fee2150082dbADDED / 2023-01-09AUTHOR / Michael Haag

Known samples 15

1 recorded TRUE · 14 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

nvflsh64.sysSample 1 · HVCI TRUE
MD5
d3e40644a91327da2b1a7241606fe559
SHA1
7667b72471689151e176baeba4e1cd9cd006a09a
SHA256
a899b659b08fbae30b182443be8ffb6a6471c1d0497b52293061754886a937a3
Imphash
96861132665e8d66c0a91e6c02cc6639
Authentihash MD5
c3a003ae7b48dcd1dac8bced7cf93f28
Authentihash SHA1
118cbd8cae88dc0dfb0d6a24df9161c90b916b90
Authentihash SHA256
372c6118541efaa800bcba6e0c1780f9beb8cab6f2176bcc5fe3664ea19379e4
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
nvflsh64.sysSample 2 · HVCI FALSE
MD5
7644bed8b74dc294ac77bf406df8ad77
SHA1
a32232a426c552667f710d2dcbd2fb9f9c50331d
SHA256
fe2fb5d6cfcd64aeb62e6bf5b71fd2b2a87886eb97ab59e5353ba740da9f5db5
Imphash
96861132665e8d66c0a91e6c02cc6639
Authentihash MD5
cccc614ee68ad25b5927f9e240439fce
Authentihash SHA1
28de9cad03c6f3f335b3b600666b6056a15e44bd
Authentihash SHA256
a00b50cc1d95abc3ada635f331c5911d1aaf9ae8b86d359db6fc7f6fc5eb0c94
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
nvflsh64.sysSample 3 · HVCI FALSE
MD5
01f092be2a36a5574005e25368426ad2
SHA1
a2167b723dfb24bf8565cbe2de0ecce77307fb9e
SHA256
7ef8949637cb947f1a4e1d4e68d31d1385a600d1b1054b53e7417767461fafa7
Imphash
96861132665e8d66c0a91e6c02cc6639
Authentihash MD5
93a900bd3c7c1be841556d9d58a27bc4
Authentihash SHA1
7bd52fad60a897b26b0d447f7a84e5d00808b3b3
Authentihash SHA256
48567fa742841208d4f93f54031218703241baec6f59b1e4ab8a71c26de1cf85
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
nvflsh64.sysSample 4 · HVCI FALSE
MD5
0e51d96a3b878b396708535f49a6d7cb
SHA1
a9ea84ee976c66977bb7497aa374bba4f0dd2b27
SHA256
c188b36f258f38193ace21a7d254f0aec36b59ad7e3f9bcb9c2958108effebad
Imphash
96861132665e8d66c0a91e6c02cc6639
Authentihash MD5
97b3a03083142169f3ed78c064262c4f
Authentihash SHA1
c75bbd7f612b0ba6daedf6d399fb4e3405d70fce
Authentihash SHA256
6a95f3c5cec52da45f9b74660b81226b4314ec18e761490140173998500ae015
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
nvflsh64.sysSample 5 · HVCI FALSE
MD5
be54aabf09c3fa4671b6efacafa389e3
SHA1
2027e5e8f2cfdfbd9081f99b65af4921626d77f9
SHA256
eef68fdc5df91660410fb9bed005ed08c258c44d66349192faf5bb5f09f5fa90
Imphash
96861132665e8d66c0a91e6c02cc6639
Authentihash MD5
756dd53ae9d6061a440cef458beb89e6
Authentihash SHA1
d299f3e02e924746763838b6fbe37ebab64ce698
Authentihash SHA256
b1b708dd7b10616693fd6b56e0b47d9fa6b90f9db28cbf3893b815222e2fa2e5
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
nvflsh64.sysSample 6 · HVCI FALSE
MD5
2e48c3b8042fdcef0ed435562407bd21
SHA1
2f86a4828ba86034f0c043db3e3db33aa2cf5da5
SHA256
ffd1aef19646ffed09b56a2ace4fc8cdf5b2f714fcca1e7ffb82256264c94b18
Imphash
96861132665e8d66c0a91e6c02cc6639
Authentihash MD5
4dccef1e5f250b75954189afb0240d8e
Authentihash SHA1
7b16f47dac151d8ff54b249f930a37b72cd7094c
Authentihash SHA256
157ce9ae0d09766cfa3e5be8f90e2ac510f0ce3a0bb7cd97e3a5f9aa20c76661
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
nvflsh64.sysSample 7 · HVCI FALSE
MD5
7bdf418a65ec33ec8ff47e7de705a4e1
SHA1
4dba2ac32ed58ead57dd36b18d1cb30cc1c7b9aa
SHA256
50aa2b3a762abb1306fa003c60de3c78e89ea5d29aab8a9c6479792d2be3c2d7
Imphash
96861132665e8d66c0a91e6c02cc6639
Authentihash MD5
5e4355461b14f9d55215a176071d4cc8
Authentihash SHA1
c905edb291eca91790fec309cbc00e8a6ce0534d
Authentihash SHA256
057e6a58e3515e56eab85ccb8ec5086552b7de98c886c37f6a5284c002615565
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
nvflsh64.sysSample 8 · HVCI FALSE
MD5
697bbd86ee1d386ae1e99759b1e38919
SHA1
1e959d6ae22c4d9fa5613c3a9d3b6e1b472be05d
SHA256
e2d6cdc3d8960a50d9f292bb337b3235956a61e4e8b16cf158cb979b777f42aa
Imphash
96861132665e8d66c0a91e6c02cc6639
Authentihash MD5
71f51c78315024afb9112595b54be422
Authentihash SHA1
1989e7db7ce6b29f674bff8e7efa7056dd2711aa
Authentihash SHA256
e69bba9f8aae090226841a02e6207fb37f784b83c6641ea15bd20e7bd3418d87
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
nvflsh64.sysSample 9 · HVCI FALSE
MD5
c60a4bc4fec820d88113afb1da6e4db3
SHA1
cb25d537f4e2872e5fcbd893da8ce3807137df80
SHA256
0e9072759433abf3304667b332354e0c635964ff930de034294bf13d40da2a6f
Imphash
96861132665e8d66c0a91e6c02cc6639
Authentihash MD5
3efb557f699b3d5ae069b5863c744ac2
Authentihash SHA1
b76b53a72b66938bb3e9c787d0e075260f3e821c
Authentihash SHA256
3cee638c546efe5bd23880da9fa2b90e8dd0fd4a228fb0ad96f6c11d47a52593
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
nvflsh64.sysSample 10 · HVCI FALSE
MD5
db2fc89098ac722dabe3c37ed23de340
SHA1
1a01f3bdbfae4f8111674068a001aaf3363f21ea
SHA256
20dd9542d30174585f2623642c7fbbda84e2347e4365e804e3f3d81f530c4ece
Imphash
96861132665e8d66c0a91e6c02cc6639
Authentihash MD5
c907da5820cfab62231ad45c6c761800
Authentihash SHA1
5087f7ed135db66d4b58beaf09f1245e65171466
Authentihash SHA256
cc041a5c21339d62c9ea05215c2c42697f73a3820c83133eb6c6fa574a095384
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
nvflsh64.sysSample 11 · HVCI FALSE
MD5
9ade14e58996a6abbfe2409d6cddba6a
SHA1
81a319685d0b6112edee4bc25d14d6236f4e12da
SHA256
747a4dc50915053649c499a508853a42d9e325a5eec22e586571e338c6d32465
Imphash
96861132665e8d66c0a91e6c02cc6639
Authentihash MD5
e8d2b5097e7fecf435927385bc6e526d
Authentihash SHA1
30de853698f8dbf7063e647f6c6c50759ce233de
Authentihash SHA256
dcef3c2fe44a68992d2344a8ec129e9d35e7790f4317e9bd7bca6bf217252d91
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
nvflsh64.sysSample 12 · HVCI FALSE
MD5
05bf59560656c8a9a3191812b0e1235b
SHA1
e840904ce12cc2f94eb1ec16b0b89e2822c24805
SHA256
f583cfb8aab7d084dc052dbd0b9d56693308cbb26bd1b607c2aedf8ee2b25e44
Imphash
96861132665e8d66c0a91e6c02cc6639
Authentihash MD5
a56d1e854f91d1e76663b72d5ddb1cc5
Authentihash SHA1
e127c3a0f3cf3a30a1a82f558b2bdcd995657b0c
Authentihash SHA256
46cb4aabe49917be885f2c42ade92aceda6b9d0b7739cf0e7c3c6d93820b67c3
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
nvflsh64.sysSample 13 · HVCI FALSE
MD5
02fc655279b8ea3ef37237c488b675cc
SHA1
5622caf22032e5cbef52f48077cfbcbbbe85e961
SHA256
f2a4ddc38e68efd2eac27b2562529926f5ade93575a82e8d3e0abb2b37347257
Imphash
96861132665e8d66c0a91e6c02cc6639
Authentihash MD5
988c23aed10d8bdd1c41dd05249e1385
Authentihash SHA1
3b45a3e4c8bc157c97de9d010feea486c8263cca
Authentihash SHA256
e5a6fe0d0a3894f55b7ba9b4d5a03022f6146544f1f874ae1ef32c29450535b7
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
nvflsh64.sysSample 14 · HVCI FALSE
MD5
547971da89a47b6ad6459cd7d7854e12
SHA1
970af806aa5e9a57d42298ab5ffa6e0d0e46deda
SHA256
1ce9e4600859293c59d884ea721e9b20b2410f6ef80699f8a78a6b9fad505dfc
Imphash
96861132665e8d66c0a91e6c02cc6639
Authentihash MD5
c951c775c02cc9243a6feb863c36bae0
Authentihash SHA1
2ae5a1f9c96f3935d58830d2fdf00b4517dacfd9
Authentihash SHA256
51dbf446deb54beb8aef1de11e0f868ac062a9db0c31d0e16eff99203aec86a9
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
nvflsh64.sysSample 15 · HVCI FALSE
MD5
87982977500b93330df08bf372435641
SHA1
343ec3073fc84968e40a145dc9260a403966bcb4
SHA256
7c933f5d07ccb4bd715666cd6eb35a774b266ddd8d212849535a54192a44f667
Imphash
96861132665e8d66c0a91e6c02cc6639
Authentihash MD5
5db877819ab673a0f2abea7867e6bf98
Authentihash SHA1
2060f97a7138f29dfeeef3258ecfe5256da8ae87
Authentihash SHA256
6694435663bf283a3d5f20e9c90cf1bc4d3687e381b32e1a004a9d24471eb95b
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal

Recorded command

sc.exe create nvflsh64.sys binPath=C:\windows\temp \n \n \n  vflsh64.sys type=kernel && sc.exe start nvflsh64.sys

Elevate privileges · Privileges: kernel · OS: Windows 10

Research & references