Hash values for Agent Containment Driver files

To make sure that Arctic Wolf® services operate correctly, add hash values to the allowlist of your Endpoint Detection and Response (EDR) solution. Update your allowlist each time a new version of Arctic Wolf Agent is released. If you have additional questions or feedback, contact your Concierge Security® Team (CST) at security@arcticwolf.com.

For more information about generating hash values, see Generate Agent Containment Driver hash values.

Windows version 1.3.51

arcticwolfagent-containment-v1.3.51-branch-x86-win8.msi

File name SHA256 SHA1 MD5
AwnAgentService.exe B7557C077CE08635446D58E61FDBE3AD87CA5EF1F905EA15DCA53566E33A6E76 E25EAA49309C18D1234A6836CF84A6A88B532036 C245B3748854561FF1ECDB41F800744A
AwnWfpCallouts.cat C0289F02E3F9DBFB72414CC71218C6391E06EE5350C73453098C69BAF0D48100 4A7E3BEE3A1D362ACCE2EEE2E5BF2252C9A76BA3 D949A81F0D54B863A2B94F8F1CD9FF25
AwnWfpCallouts.sys 7C1D938A74E1C19C007FB497C06B95FB41F46DF9AD2B1ACAF4C31156D9E86FA1 888531FB0BF9DC28447627919A08CC0993BEF34E FAAE675E4EB5BFD811BDA163A3B7C09A

arcticwolfagent-containment-v1.3.51-branch-x64-win8.msi

File name File path SHA256 SHA1 MD5
AwnAgentService.exe C:\Program Files (x86)\Arctic Wolf Networks\Agent\modules\containment\AwnAgentService.exe 8746129395A94562698505B79C89AC2305E3B626BE645F4D5F31BB65DAFCB66E 35B8F437AFC916E89A200B29D61656D5E5DF985B 9B26FB362E3471C2478E616F1CFC4EB9
Awnfpcallouts.cat C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\AwnWfpCallouts.cat 33F9AE1BC89A1B9CF3A5654871609E762CD7F0BBDE42CA4E1C4ECDD6E53200D2 5FED8FB42619C8BA8A276B4A113F877B6B38447A EAC2AA3A67A65338E708830231A4A816
Awnfpcallouts.sys C:\Windows\System32\drivers\AwnWfpCallouts.sys FAEDD255E2B4CBB94CF21F5032E64430BE61A689EA8AA076B9C664E498966CD7 6B5B02F8B3B41B6FB49DB8B61FA1E432636EA979 318492E8C93A4E2B9E2F690E1DF4ED6D

arcticwolfagent-containment-v1.3.51-branch-x86-win10.msi

File name File path SHA256 SHA1 MD5
AwnAgentService.exe C:\Program Files\Arctic Wolf Networks\Agent\modules\containment\AwnAgentService.exe B7557C077CE08635446D58E61FDBE3AD87CA5EF1F905EA15DCA53566E33A6E76 E25EAA49309C18D1234A6836CF84A6A88B532036 C245B3748854561FF1ECDB41F800744A
Awnfpcallouts.cat C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\AwnWfpCallouts.cat 5CF7ECF079FAC337C2730EE6324EB1767F901591D64317FED88A8ED48F9B404C 5302AAE531C4CE0A7BC56F41C69754A86D7066EA 2AB7D0BD2543E7112E38F405B42BDA00
Awnfpcallouts.sys C:\Windows\System32\drivers\AwnWfpCallouts.sys 7855B8E389F3E77383F71BFD36FC2AC1C68DBDDB6832ADDCFF502CA3D36CB860 AA22D946DDA7635CEC27411970F53DD69F4C33A3 891CEE37EAFA642A16B5F53F0588AFAF

arcticwolfagent-containment-v1.3.51-branch-x64-win10.msi

File name File path SHA256 SHA1 MD5
AwnAgentService.exe C:\Program Files (x86)\Arctic Wolf Networks\Agent\modules\containment\AwnAgentService.exe 8746129395A94562698505B79C89AC2305E3B626BE645F4D5F31BB65DAFCB66E 35B8F437AFC916E89A200B29D61656D5E5DF985B 9B26FB362E3471C2478E616F1CFC4EB9
Awnfpcallouts.cat C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\AwnWfpCallouts.cat 64260A46049B96A0E577C203D6787334BF9D7ED0659639B0C42D669ABDBEEE80 6CA2202E31A8BCF1ACD7D09A7552DCD3571B3171 D148234DF13527C6D28AAAE8A6FA439B
Awnfpcallouts.sys C:\Windows\System32\drivers\AwnWfpCallouts.sys FE1B8183683955972C683AD14FD752B1DB3785EC333B70D3146EB04D2EBB26B3 A52B2A12A5328489FEA3F109928BDA8E4414628C 566F0C7C70057105CCA9914095B5D036

Windows version 1.2.17

arcticwolfagent-containment-v1.2.17-branch-x86-win8.msi

File name File path SHA256 SHA1 MD5
AwnAgentService.exe C:\Program Files\Arctic Wolf Networks\Agent\modules\containment\AwnAgentService.exe 57113D16379343AA8C30ADBBEF089EB730EE32F28419E9B39A19B8BE422C415E D73A3F428CB5EB0AB690688580FF1B3B3E3C1BF8 B257518968DFEA1AA6A9032180EED5FB
AwnWfpCallouts.cat C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\AwnWfpCallouts.cat C0289F02E3F9DBFB72414CC71218C6391E06EE5350C73453098C69BAF0D48100 4A7E3BEE3A1D362ACCE2EEE2E5BF2252C9A76BA3 D949A81F0D54B863A2B94F8F1CD9FF25
AwnWfpCallouts.sys C:\Windows\System32\drivers\AwnWfpCallouts.sys 7C1D938A74E1C19C007FB497C06B95FB41F46DF9AD2B1ACAF4C31156D9E86FA1 888531FB0BF9DC28447627919A08CC0993BEF34E FAAE675E4EB5BFD811BDA163A3B7C09A

arcticwolfagent-containment-v1.2.17-branch-x64-win8.msi

File name File path SHA256 SHA1 MD5
AwnAgentService.exe C:\Program Files (x86)\Arctic Wolf Networks\Agent\modules\containment\AwnAgentService.exe 046B2D24DB9B5B190D205F9DCE26F5427AFF2245E0726437C357FF46BBE382A4 0D8E586DCD835E46C4D01DA423A252A949BDAA69 820B01432A02D87CD85EF97CB84BF9EC
Awnfpcallouts.cat C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\AwnWfpCallouts.cat 33F9AE1BC89A1B9CF3A5654871609E762CD7F0BBDE42CA4E1C4ECDD6E53200D2 5FED8FB42619C8BA8A276B4A113F877B6B38447A EAC2AA3A67A65338E708830231A4A816
Awnfpcallouts.sys C:\Windows\System32\drivers\AwnWfpCallouts.sys FAEDD255E2B4CBB94CF21F5032E64430BE61A689EA8AA076B9C664E498966CD7 6B5B02F8B3B41B6FB49DB8B61FA1E432636EA979 318492E8C93A4E2B9E2F690E1DF4ED6D

arcticwolfagent-containment-v1.2.17-branch-x86-win10.msi

File name File path SHA256 SHA1 MD5
AwnAgentService.exe C:\Program Files\Arctic Wolf Networks\Agent\modules\containment\AwnAgentService.exe 57113D16379343AA8C30ADBBEF089EB730EE32F28419E9B39A19B8BE422C415E D73A3F428CB5EB0AB690688580FF1B3B3E3C1BF8 B257518968DFEA1AA6A9032180EED5FB
Awnfpcallouts.cat C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\AwnWfpCallouts.cat 5CF7ECF079FAC337C2730EE6324EB1767F901591D64317FED88A8ED48F9B404C 5302AAE531C4CE0A7BC56F41C69754A86D7066EA 2AB7D0BD2543E7112E38F405B42BDA00
Awnfpcallouts.sys C:\Windows\System32\drivers\AwnWfpCallouts.sys 7855B8E389F3E77383F71BFD36FC2AC1C68DBDDB6832ADDCFF502CA3D36CB860 AA22D946DDA7635CEC27411970F53DD69F4C33A3 891CEE37EAFA642A16B5F53F0588AFAF

arcticwolfagent-containment-v1.2.17-branch-x64-win10.msi

File name File path SHA256 SHA1 MD5
AwnAgentService.exe C:\Program Files (x86)\Arctic Wolf Networks\Agent\modules\containment\AwnAgentService.exe 046B2D24DB9B5B190D205F9DCE26F5427AFF2245E0726437C357FF46BBE382A4 0D8E586DCD835E46C4D01DA423A252A949BDAA69 820B01432A02D87CD85EF97CB84BF9EC
Awnfpcallouts.cat C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\AwnWfpCallouts.cat 64260A46049B96A0E577C203D6787334BF9D7ED0659639B0C42D669ABDBEEE80 6CA2202E31A8BCF1ACD7D09A7552DCD3571B3171 D148234DF13527C6D28AAAE8A6FA439B
Awnfpcallouts.sys C:\Windows\System32\drivers\AwnWfpCallouts.sys FE1B8183683955972C683AD14FD752B1DB3785EC333B70D3146EB04D2EBB26B3 A52B2A12A5328489FEA3F109928BDA8E4414628C 566F0C7C70057105CCA9914095B5D036

Windows version v1.2.5

File name File path SHA256 SHA1 MD5
AwnAgentService.exe for 32-bit versions of Windows C:\Program Files\Arctic Wolf Networks\Agent\modules\containment\AwnAgentService.exe 42815032bb248e81b647f357373c0da4907bfd470dfc79ac6d20a1329ce41d2f 9a4e7ff9cc79a6864762f6c1a3bf317456533ede 0e70e86803952b071bbe5bfb1cc742b4
AwnAgentService.exe 64-bit versions of Windows C:\Program Files (x86)\Arctic Wolf Networks\Agent\modules\containment\AwnAgentService.ex 459ba6415716f97b269213b2ad058c434e81945bf01226d1038511970ac9a32d 653720c78469873a7e51ed37721a96edda0fd3be 97ea737c9ef486ac78fec487925c429f