← Back to driver explorer
Driver intelligenceVulnerableVerified

dbk64.sys

Description not recorded.

UUID / 1524a54d-520d-4fa4-a7d5-aaaa066fbfc4ADDED / 2023-01-09AUTHOR / Michael Haag

Known samples 2

1 recorded TRUE · 1 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

dbk64.sysSample 1 · HVCI FALSE
MD5
1c294146fc77565030603878fd0106f9
SHA1
6053d258096bccb07cb0057d700fe05233ab1fbb
SHA256
18e1707b319c279c7e0204074088cc39286007a1cf6cb6e269d5067d8d0628c6
Imphash
5759d90322a7311eaccf4f0ab2c2a7c4
Authentihash MD5
50dadd183094b8711a4f00a198972e6b
Authentihash SHA1
d7512b033d7332edd747631f9d1ccc9276dadbe4
Authentihash SHA256
71dc8d678e0749599d3db144c93741f64def1b8b0efb98bef963d2215ebb4992
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
dbk64.sysSample 2 · HVCI TRUE
MD5
3a48f0e4297947663fbb11702aa1d728
SHA1
a54ae1793e9d77e61416e0d9fb81269a4bc8f8a2
SHA256
626fae47811450d080d08c3d9fd890aa64bfecdc45eacd42a40850c1833c8763
Imphash
105b74485670215ab231a942c9101ccf
Authentihash MD5
8950c65d305c42ada6cf31188f526674
Authentihash SHA1
1be4ba36ba9ce5b10d90137c08cc21f823379841
Authentihash SHA256
d041654d8cbf189c29919733fd40184ceaf0050295fc7a7e6e3f4cda45b5e090
Machine
AMD64
Version
Not recorded
Publisher
Not recorded

Recorded command

sc.exe create dbk64.sys binPath=C:\windows\temp\dbk64.sys type=kernel && sc.exe start dbk64.sys

Elevate privileges · Privileges: kernel · OS: Windows 10

Research & references