Driver intelligenceMaliciousVerified

Air_SYSTEM10.sys

Driver categorized as POORTRY by Mandiant.

UUID / 0eb5f4ce-12a7-4b45-b021-42b995de07c5ADDED / 2023-03-03AUTHOR / Michael Haag

Known samples 1

0 recorded TRUE · 1 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

Air_SYSTEM10.sysSample 1 · HVCI FALSE

MD5: 1f2888e57fdd6aee466962c25ba7d62d
SHA1: c23eeb6f18f626ce1fd840227f351fa7543bb167
SHA256: f461414a2596555cece5cfee65a3c22648db0082ca211f6238af8230e41b3212
Imphash: 41113a3a832353963112b94f4635a383
Authentihash MD5: 6f562fc03c72abd6ff33c6df23df0219
Authentihash SHA1: 7435b3f4c67217bfcdcfa9d940b12e5d5d6a22da
Authentihash SHA256: 9c31a9fbf833b732b5f3f06c31e200994a65ce187260e66eff62278660dba4ef
Machine: AMD64
Version: Not recorded
Publisher: Not recorded

sc.exe create Air_SYSTEM10.sys binPath=C:\windows\temp\Air_SYSTEM10.sys     type=kernel && sc.exe start Air_SYSTEM10.sys

Elevate privileges · Privileges: kernel · OS: Windows 10