Driver intelligenceVulnerableVerified

BS_Def64.sys

Description not recorded.

UUID / 4a80da66-f8f1-4af9-ba56-696cfe6c1e10ADDED / 2023-01-09AUTHOR / Michael Haag

Known samples 3

0 recorded TRUE · 3 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

BS_Def64.sysSample 1 · HVCI FALSE

MD5: 8abbb12e61045984eda19e2dc77b235e
SHA1: 609fa1efcf61e26d64a5ceb13b044175ab2b3a13
SHA256: 0040153302b88bee27eb4f1eca6855039e1a057370f5e8c615724fa5215bada3
Imphash: 3aa0ceb8fcd07cf2514d1cb0b9bccf4b
Authentihash MD5: 5c40712c0a854396aa9e8776763f3340
Authentihash SHA1: 45cae96b31928bc5f93381edf6b978534fa24f59
Authentihash SHA256: 57e9de67e908186b3cb8180caa2e5c5d7b6bb31969557b8bd5710d79089e8868
Machine: AMD64
Version: 1.24 built by: WinDDK
Publisher: ASUSTeK Computer Inc.

BS_Def64.sysSample 2 · HVCI FALSE

MD5: c9a293762319d73c8ee84bcaaf81b7b3
SHA1: 7d7c03e22049a725ace2a9812c72b53a66c2548b
SHA256: 3326e2d32bbabd69feb6024809afc56c7e39241ebe70a53728c77e80995422a5
Imphash: 3aa0ceb8fcd07cf2514d1cb0b9bccf4b
Authentihash MD5: 7aa4c54af2ef8f71eb5c7976ab741fa3
Authentihash SHA1: c95b6a13289b6538c7f4b68f791758bda1036cbe
Authentihash SHA256: 3171d7af852e8b6be4651c415ea9490568475c45ecaa02a33dda9babb1643b07
Machine: AMD64
Version: 1.24 built by: WinDDK
Publisher: ASUSTeK Computer Inc.

BS_Def64.sysSample 3 · HVCI FALSE

MD5: 120b5bbb9d2eb35ff4f62d79507ea63a
SHA1: f9519d033d75e1ab6b82b2e156eafe9607edbcfb
SHA256: 36b9e31240ab0341873c7092b63e2e0f2cab2962ebf9b25271c3a1216b7669eb
Imphash: 3aa0ceb8fcd07cf2514d1cb0b9bccf4b
Authentihash MD5: 034aa8df77d5a2815c8f4cf9f1399fd3
Authentihash SHA1: e62d0712ddfd9fbaf9014cf43e49e2087a3f1ed2
Authentihash SHA256: eb11a4270a6980a97ea8775422dacbd1e763b7e5898f0a80c71c91449fff7ab4
Machine: AMD64
Version: 1.24 built by: WinDDK
Publisher: ASUSTeK Computer Inc.

sc.exe create BS_Def64.sys binPath=C:\windows\temp\BS_Def64.sys type=kernel && sc.exe start BS_Def64.sys

Elevate privileges · Privileges: kernel · OS: Windows 10