← Back to driver explorer
Driver intelligenceVulnerableVerified
elrawdsk.sys
Description not recorded.
Known samples 2
2 recorded TRUE · 0 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.
elrawdsk.sysSample 1 · HVCI TRUE
- MD5
1493d342e7a36553c56b2adea150949e- SHA1
ce549714a11bd43b52be709581c6e144957136ec- SHA256
4744df6ac02ff0a3f9ad0bf47b15854bbebb73c936dd02f7c79293a2828406f6- Imphash
c94e5ad0f33374535392364a5a193253- Authentihash MD5
20f14b58e9548b6ea99b35006f631197- Authentihash SHA1
174bd2e0965b996cff4a26ac511e551788fbc894- Authentihash SHA256
98a55dc61046f4509d2465cbc373a9391c07125e5f4a242d2f475f14f32e5430- Machine
- I386
- Version
- 2, 1, 27, 106
- Publisher
- EldoS Corporation
elrawdsk.sysSample 2 · HVCI TRUE
- MD5
76c643ab29d497317085e5db8c799960- SHA1
1292c7dd60214d96a71e7705e519006b9de7968f- SHA256
5a826b4fa10891cf63aae832fc645ce680a483b915c608ca26cedbb173b1b80a- Imphash
0cba56fa162378bc4ee09e94a4e2fe33- Authentihash MD5
c1afcba807a13aa25a0b363a22c760d6- Authentihash SHA1
8422fb53e48b27a42cc7595ca7c7ae0597168db6- Authentihash SHA256
29a2ae6439381ea2aa3116df7025cbb5c6c7c07cc8d19508e6021e4d6177a565- Machine
- AMD64
- Version
- 2, 1, 27, 106
- Publisher
- EldoS Corporation
Recorded command
sc.exe create elrawdsk.sys binPath=C:\windows\temp\elrawdsk.sys type=kernel && sc.exe start elrawdsk.sysElevate privileges · Privileges: kernel · OS: Windows 10