← Back to driver explorer
Driver intelligenceVulnerableVerified

OpenLibSys.sys

Description not recorded.

UUID / 2e4fedb0-30ed-400d-b4e1-b2b2004c1607ADDED / 2023-01-09AUTHOR / Michael Haag

Known samples 2

0 recorded TRUE · 2 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

OpenLibSys.sysSample 1 · HVCI FALSE
MD5
ccf523b951afaa0147f22e2a7aae4976
SHA1
ac600a2bc06b312d92e649b7b55e3e91e9d63451
SHA256
91314768da140999e682d2a290d48b78bb25a35525ea12c1b1f9634d14602b2c
Imphash
d6f977640d4810a784d152e4d3c63a6b
Authentihash MD5
1244664c7917f03f2b43b30e132f64b5
Authentihash SHA1
d6f015693e56a3ebba725a6591cc07443d0e1661
Authentihash SHA256
db68a9cbe22b22cba782592eef76e63e080ee8d30943be6da694701f44b6c33e
Machine
AMD64
Version
1.0.0.2
Publisher
OpenLibSys.org
OpenLibSys.sysSample 2 · HVCI FALSE
MD5
96421b56dbda73e9b965f027a3bda7ba
SHA1
da9cea92f996f938f699902482ac5313d5e8b28e
SHA256
f0605dda1def240dc7e14efa73927d6c6d89988c01ea8647b671667b2b167008
Imphash
d6f977640d4810a784d152e4d3c63a6b
Authentihash MD5
bd94d3a0abc78f87147bf8ea41aad734
Authentihash SHA1
7ecbd5098c4161b95dd7e674003dd53069374f3e
Authentihash SHA256
6f3937451f0170a0aec3033cadceeb86ab30ee3c67add3926e116ccc20c0d9a7
Machine
AMD64
Version
1.0.1.3
Publisher
OpenLibSys.org

Recorded command

sc.exe create OpenLibSys.sys binPath=C:\windows\temp\OpenLibSys.sys type=kernel && sc.exe start OpenLibSys.sys

Elevate privileges · Privileges: kernel · OS: Windows 10

Research & references