home

vpcnfltr.sys

Virtual PC Network Filter Driver

Microsoft Corporation

It runs as a Windows kernel mode device driver named “Virtual PC Network Filter Driver”.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Virtual PC Network Filter Driver

 
Part of the Windows Operating System

Version:
6.1.7234.0 (winmain_wtr_vpc(wmbla).090706-0228)

MD5:
fd6c1b04417d551b10ed562f9fc88548

SHA-1:
907f6fe2392b5091a29c13825160598628145383

SHA-256:
0cd3c93ba7b8e0b2978fb976c6432aa35b7ab80258bc861f27547b4aba084e72

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
11/16/2024 9:44:21 AM UTC  (today)

File size:
53.8 KB (55,040 bytes)

Product version:
6.1.7234.0

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
vpcnfltr.sys.mui

File type:
Driver (Win32 SYS)

Common path:
C:\Windows\System32\drivers\vpcnfltr.sys

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
10/23/2008 2:41:38 AM

Valid to:
1/23/2010 2:51:38 AM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
61044C4B000000000024

File PE Metadata
Compilation timestamp:
7/6/2009 1:31:59 PM

OS version:
6.1

OS bitness:
Win32

Subsystem:
Native (none required)

Linker version:
9.0

CTPH (ssdeep):
768:M7mWQfMSpUYStqcOQlwdm9Io4er1V0lFDoXp3iCwfLii04N+7+FArY:YRQvUlvadm9EeRSlFDyp3iPfGi0wSY

Entry address:
0xD394

Entry point:
8B, FF, 55, 8B, EC, E8, BD, FF, FF, FF, 5D, E9, 62, FC, FF, FF, 4A, 75, 6C, 20, 20, 36, 20, 32, 30, 30, 39, 00, 30, 32, 3A, 33, 31, 3A, 35, 36, 00, CC, 7B, 00, 34, 00, 43, 00, 34, 00, 46, 00, 38, 00, 42, 00, 33, 00, 37, 00, 2D, 00, 45, 00, 31, 00, 45, 00, 32, 00, 2D, 00, 34, 00, 33, 00, 35, 00, 37, 00, 2D, 00, 39, 00, 34, 00, 37, 00, 33, 00, 2D, 00, 37, 00, 43, 00, 37, 00, 37, 00, 46, 00, 34, 00, 44, 00, 35, 00, 38, 00, 30, 00, 44, 00, 43, 00, 7D, 00, 00, 00, 56, 00, 69, 00, 72, 00, 74, 00, 75, 00, 61, 00...
 
[+]

Code size:
40 KB (40,960 bytes)

Driver
Display name:
Virtual PC Network Filter Driver

Service name:
vpcnfltr

Type:
Kernel device driver (KernelDriver)

Group:
NDIS


herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.