LOLDriversTHE DRIVER THREAT CATALOG
← Back to driver explorer
Driver intelligenceVulnerableVerified

gvcidrv64.sys

Description not recorded.

UUID / 56cdac8e-d87d-49c8-b281-6e096c2390d1ADDED / 2023-05-06AUTHOR / Nasreddine Bencherchali

Known samples 2

1 recorded TRUE · 1 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

gvcidrv64.sysSample 1 · HVCI FALSE
MD5
1a22a85489a94db6ff68cd624ef43bad
SHA1
d302ae7f016299af323a3542d840004888ab91ff
SHA256
a2353030d4ea3ad9e874a0f7ff35bbfa10562c98c949d88cabab27102bbb8e48
Imphash
ad374977f06fefefbb9c77155f7a0733
Authentihash MD5
ad8e307b0233a1b6548414390c31f9af
Authentihash SHA1
4a04ad93f7f4dccca551dc0fea7b9b22f557e39b
Authentihash SHA256
dc8a1cf5402f95d61662531507b12b04e16922eb89108eb751d1c634d475ef67
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
GVCIDrv64.sysSample 2 · HVCI TRUE
MD5
acd221ff7cf10b6117fd609929cde395
SHA1
1586f121d38cc42e5d04fe2f56091e91c6cdd8fa
SHA256
f85784fa8e7a7ec86cb3fe76435802f6bb82256e1824ed7b5d61bf075f054573
Imphash
ad374977f06fefefbb9c77155f7a0733
Authentihash MD5
ad8e307b0233a1b6548414390c31f9af
Authentihash SHA1
4a04ad93f7f4dccca551dc0fea7b9b22f557e39b
Authentihash SHA256
dc8a1cf5402f95d61662531507b12b04e16922eb89108eb751d1c634d475ef67
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal

Recorded command

sc.exe create gvcidrv64.sys binPath=C:\windows\temp\gvcidrv64.sys type=kernel && sc.exe start gvcidrv64.sys

Elevate privileges · Privileges: kernel · OS: Windows 10