← Back to driver explorer
Driver intelligenceVulnerableVerified

VProEventMonitor.sys

Description not recorded.

UUID / 4db827b1-325b-444d-9f23-171285a4d12fADDED / 2023-01-09AUTHOR / Michael Haag

Known samples 1

1 recorded TRUE · 0 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

VProEventMonitor.sysSample 1 · HVCI TRUE
MD5
cd9f0fcecf1664facb3671c0130dc8bb
SHA1
0c26ab1299adcd9a385b541ef1653728270aa23e
SHA256
7877c1b0e7429453b750218ca491c2825dae684ad9616642eff7b41715c70aca
Imphash
c7f08aed5725fe6a53a62ebe354ff135
Authentihash MD5
ed01170d94a5e21d04b6d7212b53c994
Authentihash SHA1
cbaa70aac878a389c8213a5bc0df830b1d5b4e04
Authentihash SHA256
9994990c02c37472625cc7b2255044feef9b73c08ca3a70c06861b7d26b27a25
Machine
AMD64
Version
1.0.0.45708
Publisher
Symantec Corporation

Recorded command

sc.exe create VProEventMonitor.sys binPath=C:\windows\temp\VProEventMonitor.sys     type=kernel && sc.exe start VProEventMonitor.sys

Elevate privileges · Privileges: kernel · OS: Windows 10

Research & references