Driver intelligenceVulnerableVerified

vmdrv.sys

Description not recorded.

UUID / 2ea12acc-95b6-4f91-afb7-8ded7a2fe9d9ADDED / 2023-05-06AUTHOR / Nasreddine Bencherchali

Known samples 2

0 recorded TRUE · 2 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

vmdrv.sysSample 1 · HVCI FALSE

MD5: 6d67da13cf84f15f6797ed929dd8cf5d
SHA1: 1a17cc64e47d3db7085a4dc365049a2d4552dc8a
SHA256: 5c0b429e5935814457934fa9c10ac7a88e19068fa1bd152879e4e9b89c103921
Imphash: 02a27dc9a48b694b7df4b821eb65178c
Authentihash MD5: 9ee5190f4bd124445626451cc09d49ce
Authentihash SHA1: b73a1aae1e15b9a7e2cc0d486449e132671aebec
Authentihash SHA256: fabe94809d90ade89dad012b22243e3fb755a131800140f8f8b30c989c371301
Machine: AMD64
Version: 10.0.10011.16384
Publisher: Windows (R) Win 7 DDK provider

vmdrv.sysSample 2 · HVCI FALSE

MD5: 0e625b7a7c3f75524e307b160f8db337
SHA1: 5088c71a740ef7c4156dcaa31e543052fe226e1c
SHA256: d884ca8cc4ef1826ca3ab03eb3c2d8f356ba25f2d20db0a7d9fc251c565be7f3
Imphash: 7c24141cdcfc23f5eb0e2b6792d80740
Authentihash MD5: b402effbea875040846c88d9b8b08b36
Authentihash SHA1: 08e1ee43f0e00155730448f017a4616efa2afdf0
Authentihash SHA256: 57ae8d2d962cdde554831415725583fcf4ae5fc844c19983a7c37e31b12109a3
Machine: AMD64
Version: 10.0.10011.16384
Publisher: Windows (R) Win 7 DDK provider

sc.exe create vmdrv.sys binPath=C:\windows\temp\vmdrv.sys type=kernel && sc.exe start vmdrv.sys

Elevate privileges · Privileges: kernel · OS: Windows 10