netfilter2.sys

NetFilter SDK

Dolphin Technology Kft

It runs as a Windows kernel mode device driver named “netfilter2”.
Publisher:
NetFilterSDK.com  (signed by Dolphin Technology Kft)

Product:
NetFilter SDK

Description:
NetFilter SDK TDI Hook Driver (WPP)

Version:
1.3.8.5 built by: WinDDK

MD5:
e2058565c75d2cf06b636271b9835e5b

SHA-1:
d80581fb10499215984bb5e5c241b5a536b2a5ea

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/28/2018 2:50:57 AM UTC  (today)

File size:
48.1 KB (49,216 bytes)

Product version:
1.3.8.5

Copyright:
Copyright © 2010 NetFilterSDK.com

Original file name:
netfilter2.sys

File type:
Driver (Win32 SYS)

Language:
English (United States)

Common path:
C:\Windows\System32\drivers\netfilter2.sys

Digital Signature
Authority:
GlobalSign nv-sa

Valid from:
7/16/2012 1:04:19 PM

Valid to:
8/25/2013 1:30:41 PM

Subject:
E=info@dolphintechnology.info, CN=Dolphin Technology Kft, O=Dolphin Technology Kft, L=Telki, S=Budapest Metropolitan Area, C=HU

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112152074229429659FC9695EA5AF900722C

File PE Metadata
Compilation timestamp:
6/16/2010 2:00:08 PM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Native (none required)

Linker version:
8.0

CTPH (ssdeep):
768:s/fguQmTibrtZ2nhdkzqwlpFdzIY+cCWO6gMQuJOKY1t2ii1v:s/fguQmTiH2h0qGpzz/46gNtlKiQ

Entry address:
0x9805

Entry point:
8B, FF, 55, 8B, EC, A1, 00, 84, 01, 00, 85, C0, B9, 4E, E6, 40, BB, 74, 04, 3B, C1, 75, 1E, 8B, 15, 00, 83, 01, 00, B8, 00, 84, 01, 00, C1, E8, 08, 33, 02, A3, 00, 84, 01, 00, 75, 07, 8B, C1, A3, 00, 84, 01, 00, F7, D0, A3, 04, 84, 01, 00, 5D, E9, FB, E7, FF, FF, CC, AC, 98, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, EE, 9B, 00, 00, 94, 82, 00, 00, 98, 98, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 24, 9C, 00, 00, 80, 82, 00, 00, A4, 98, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 40, 9C, 00, 00, 8C, 82, 00, 00, 00...
 
[+]

Code size:
32.6 KB (33,408 bytes)

Driver
Display name:
netfilter2

Type:
Kernel device driver (KernelDriver)

Group:
PNP_TDI


Scan netfilter2.sys - Powered by Reason Core Security