← Back to driver explorer
Driver intelligenceVulnerableVerified

netfilterdrv.sys

Description not recorded.

UUID / f1dcb0e4-aa53-4e62-ab09-fb7b4a356916ADDED / 2023-01-09AUTHOR / Michael Haag

Known samples 7

0 recorded TRUE · 7 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

netfilterdrv.sysSample 1 · HVCI FALSE
SHA1
e74b6dda8bc53bc687fc21218bd34062a78d8467
Machine
Not recorded
Version
Not recorded
Publisher
Not recorded
netfilterdrv.sysSample 2 · HVCI FALSE
SHA1
2c27abbbbcf10dfb75ad79557e30ace5ed314df8
Machine
Not recorded
Version
Not recorded
Publisher
Not recorded
netfilterdrv.sysSample 3 · HVCI FALSE
MD5
6133e1008f8c6fc32d4b1a60941bab85
SHA1
108439a4c4508e8dca659905128a4633d8851fd9
SHA256
5bdba1561ec5b23b1d56ea8cee411147d1526595f03a9281166a563b3641fa2a
Imphash
d14ea0e632fc8485d77e7eba3c4d4537
Authentihash MD5
66257018e5d6ab9266c67b93110b62d6
Authentihash SHA1
fd8a340cd071bc98e6eeac9bbd4ac8a78688bc17
Authentihash SHA256
84df20b1d9d87e305c92e5ffae21b10b325609d59d835a954dbd8750ef5dabf4
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
netfilterdrv.sysSample 4 · HVCI FALSE
MD5
e04ff937f6fd273b774f23aed5dd8c13
SHA1
655a9487d7a935322e19bb92d2465849055d029d
SHA256
c8926e31be2d1355e542793af8ff9ccc4d1d60cae40c9564b2400dd4e1090bda
Imphash
518e77c070ae21af7c558962cd1854a3
Authentihash MD5
e03a070a426b0c2de53ea23bfc76086b
Authentihash SHA1
202d5a05e546740037f9a4dc2b21f71680c39d3b
Authentihash SHA256
0391107305d76eb9ddf1a5b3b3c50da361e8ab35b573dbd19bf9383436b9303e
Machine
I386
Version
Not recorded
Publisher
Not recorded
netfilterdrv.sysSample 5 · HVCI FALSE
MD5
e65fa439efa9e5ad1d2c9aee40c7238e
SHA1
1c3f2579310ddd7ae09ce9ca1cc537a771b83c9f
SHA256
70b63dfc3ed2b89a4eb8a0aa6c26885f460e5686d21c9d32413df0cdc5f962c7
Imphash
9321f9c47129fbc728ead2710e22f1a5
Authentihash MD5
9ade8d34c15a3b675fbdb13522fb3607
Authentihash SHA1
e5a152bb57060c2b27e825258698bd7ff67907ff
Authentihash SHA256
7113dee11925b346192f6ee5441974db7d1fe9b5be1497a6b295c06930fdd264
Machine
I386
Version
Not recorded
Publisher
Not recorded
netfilterdrv.sysSample 6 · HVCI FALSE
MD5
9258e3cb20e24a93d4afdee9f5a0299c
SHA1
0cca79962d9af574169f5dec12b1f4ca8e5e1868
SHA256
1aa8ba45f9524847e2a36c0dc6fd80162923e88dc1be217dde2fb5894c65ff43
Imphash
eac62dd0c27ed557fa4b641fa4050d04
Authentihash MD5
1abe3c9e3bf2b93b6674b79f3ebabe7f
Authentihash SHA1
61258963d900c2a39408ef4b51f69f405f55e407
Authentihash SHA256
455bc98ba32adab8b47d2d89bdbadca4910f91c182ab2fc3211ba07d3784537b
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
netfilterdrv.sysSample 7 · HVCI FALSE
MD5
916ba55fc004b85939ee0cc86a5191c5
SHA1
8788f4b39cbf037270904bdb8118c8b037ee6562
SHA256
115034373fc0ec8f75fb075b7a7011b603259ecc0aca271445e559b5404a1406
Imphash
e938b727f5a033818337f7ba0584500f
Authentihash MD5
c57bf5199b7e785e6d1ad348a5dda6b9
Authentihash SHA1
e74b6dda8bc53bc687fc21218bd34062a78d8467
Authentihash SHA256
12a636449a491ef3dc8688c5d25be9ebf785874f9c4573667eefd42139201aa4
Machine
AMD64
Version
Not recorded
Publisher
Not recorded

Recorded command

sc.exe create netfilterdrv.sys binPath=C:\windows\temp \n \n \n  etfilterdrv.sys     type=kernel type=kernel && sc.exe start netfilterdrv.sys

Elevate privileges · Privileges: kernel · OS: Windows 10

Research & references