CbFlt.sys

Malicious Microsoft Windows Hardware Compatibility Publisher 2021-10-09 03:22 VT 8/72

Driver Name: CbFlt.sys
MD5: d7ed30806ae2c640a3886e9b1d062a0c
SHA1: 8c20624dabbcddc288268d86591a3fb1b52c1cf1
SHA256: eb8c60370a3d12664628e8f74d669cfa7e0094f99f246f008820a6147b91fcaa
Imphash: d5cede0e4a7aef1f15b9dbc8c27a28bc
Vhash: 017076651d751655151iz49xz
Authentihash: 06112f253c44a61810f4bd29532a17a914fe23866fb192901684034ae4c2a823
Rich PE header hash: e3e8ebe62a528f9d677650628a9824e7
SSDEEP: 196608:zZ9BxfU1ckTMYyoPK+NHzzF5cBDXUFYpJcYBsvDlxz1Z6I1zeZXB1Oh:tW1c2M2PK+NHQAGpKm4LG2z0u
TLSH: T173A623EAA15C375CC01EC930C423EC55B2F2161D5BE686AA76D6FED03F9B8359602F06
Signer: Microsoft Windows Hardware Compatibility Publisher
Signing date: 2021-10-09 03:22
SpcSpOpusInfo: 广州极智信息科技有限公司
VT detections: 8/72
Compilation time: 2021-10-08
PDB path: N/A
Country submitter: United States, Australia
Flag: Malicious

Description

A kernel injector that will inject an embedded module inside the winlogon.exe process.