Driver intelligenceVulnerableVerified

msrhook.sys

Description not recorded.

UUID / 1a1cf88a-96d0-46cd-a24d-1535e4a5f6e3ADDED / 2023-01-09AUTHOR / Michael Haag

Known samples 1

1 recorded TRUE · 0 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

msrhook.sysSample 1 · HVCI TRUE

MD5: c49a1956a6a25ffc25ad97d6762b0989
SHA1: 89909fa481ff67d7449ee90d24c167b17b0612f1
SHA256: 6de84caa2ca18673e01b91af58220c60aecd5cccf269725ec3c7f226b2167492
Imphash: 1429d5c551f71d3ce6a7cc54c9348e95
Authentihash MD5: 172df59ed493cc10ccca27239ff3b4e3
Authentihash SHA1: ccce82f52142229c88746b06b198ea5c5e058961
Authentihash SHA256: 37e33b54de1bbe4cf86fa58aeec39084afb35e0cbe5f69c763ecaec1d352daa0
Machine: AMD64
Version: Not recorded
Publisher: Not recorded

sc.exe create msrhook.sys binPath=C:\windows\temp\msrhook.sys type=kernel && sc.exe start msrhook.sys

Elevate privileges · Privileges: kernel · OS: Windows 10