Driver intelligenceMaliciousVerified

2.sys

Driver categorized as POORTRY by Mandiant.

UUID / 0c0198a3-5c63-4a9b-abe9-88a810602329ADDED / 2023-03-04AUTHOR / Michael Haag

Known samples 1

0 recorded TRUE · 1 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

2.sysSample 1 · HVCI FALSE

MD5: bd25be845c151370ff177509d95d5add
SHA1: 10115219e3595b93204c70eec6db3e68a93f3144
SHA256: 88076e98d45ed3adf0c5355411fe8ca793eb7cec1a1c61f5e1ec337eae267463
Imphash: 3fd33d5b3b52e2db91983ac4b1d7a3c4
Authentihash MD5: 887c566bdc8ed5231f45a37845d5ee89
Authentihash SHA1: e6ab2bbad89502d8985381b33d7351eb97cb2b78
Authentihash SHA256: 565733b6e6d8f7b9661f04a3b4f29372f5dec080512551204b92ac4916a144cb
Machine: AMD64
Version: Not recorded
Publisher: Not recorded

sc.exe create 2.sys binPath=C:\windows\temp\2.sys type=kernel && sc.exe start 2.sys

Elevate privileges · Privileges: kernel · OS: Windows 10