Skip to content

other

Alinubx.sys

Signed Windows kernel-mode driver used to terminate antivirus and EDR processes, also containing file and registry hiding, DLL injection, traffic manipulation and port redirection code.

Known aliases

  • NvFsFilter
  • nvfsflt64.sys

Relationships

No evidence-backed relationships are recorded.

Current clusters