bsitf.sys

13 known samples

Show the 13 samples’ SHA-256 hashes

3.2.12.0 · its entry

16f25dcae1da288989bfcd43af7a7508550c9c3995f611a576f653e3dbb2b188

3.2.12.0 · its entry

41f604cfc56b101cafba8d12ee7f30409457deb13684091262571f1a6c1ddd07

3.2.12.0 · its entry

74adbc40526354d688e199a29bc84f72416b7d65a88f4cec925a3e1bbb2fde45

3.2.12.0 · its entry

7d9bb305a98d49658a625f6f12f1c95e291c4fe3aa2ba150fef094b3be6337e3

3.2.12.0 · its entry

87db5659f019a5d909f2310ae09c2cd089f3feee57d1eae3d302fe59eea53c70

3.2.12.0 · its entry

91c9b881a5c1a5aadac1751c7957fcaa2b94691093875048729a551dab65e3df

3.2.12.0 · its entry

fecfa23abf0d2a7dcf96eed620d8c5c614d61e483c44b3f5d7fccf5cd6498efd

3.2.11.0 · its entry

084645f99cdb6103ae779228b138e960ce57e21e1e9680d708883278f367350d

3.2.11.0 · its entry

506c8a63ad44737e893385c6ee70e05b30725ec52752c9134842906cf9d14fee

3.2.11.0 · its entry

602bef923ddbf2ea7967cedf56866b9db10fb43f0e90a9681cd021f1cddc05c9

3.2.11.0 · its entry

663b248cae58cc25b7dbe32fd3162689244055da5f64f2cb56b00b31bcc04cbb

3.2.11.0 · its entry

f21bb1d8cf4ffc60d3ee1435f305a0997bd70fcc3dabf56e9bab2f9a396f2e2d

3.2.11.0 · its entry

f743bec7528848f6ae893eff849be21463dc78d2decfd7bcf50f165d2e03f1dd

From LOLDrivers (Apache 2.0). A driver is known by its hash: a sample under another name is the same driver. In Ceplin, "<sha256>".whatis() says which sample a hash is.

From the file’s version info, as recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look.