← Back to driver explorer
Driver intelligenceVulnerableVerified

viragt.sys

Description not recorded.

UUID / 39742f99-2180-46d7-8538-56667c935cc3ADDED / 2023-01-09AUTHOR / Michael Haag

Known samples 2

0 recorded TRUE · 2 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

viragt.sysSample 1 · HVCI FALSE
MD5
e79c91c27df3eaf82fb7bd1280172517
SHA1
cb22723faa5ae2809476e5c5e9b9a597b26cab9b
SHA256
e05eeb2b8c18ad2cb2d1038c043d770a0d51b96b748bc34be3e7fc6f3790ce53
Imphash
0b663530751cc11f34273fee7921c431
Authentihash MD5
333822355a23fbdfb2599a909b3bbc60
Authentihash SHA1
72886a692656ebe64592a43273d3f59432cfbf9a
Authentihash SHA256
9f86fc8a6eaa3b38f33be4a0d552c184e575afa50a60df7383c06a394e3926d8
Machine
I386
Version
1, 72, 0, 0
Publisher
TG Soft S.a.s.
viragt.sysSample 2 · HVCI FALSE
MD5
ab7b28b532beba6a6c0217bc406b80ee
SHA1
f7b3457a6fd008656e7216b1f09db2ff062f1ca4
SHA256
a2096b460e31451659b0dde752264c362f47254c8191930bc921ff16a4311641
Imphash
85fd19df117fbc21efbcb1d587063e12
Authentihash MD5
b6d013002983064089233685b9bde66b
Authentihash SHA1
6db4ed2d751cc8ae376f2dd69e702e9e469ad8c9
Authentihash SHA256
554bf34bde5e7c86fc463496d19a4369d911ccad90e3c684855192cd677641c4
Machine
AMD64
Version
1, 0, 0, 5
Publisher
TG Soft S.a.s.

Recorded command

sc.exe create viragt.sys binPath=C:\windows\temp\viragt.sys type=kernel && sc.exe start viragt.sys

Elevate privileges · Privileges: kernel · OS: Windows 10

Research & references