Driver intelligenceVulnerableVerified

Agent64.sys

Description not recorded.

UUID / 5943b267-64f3-40d4-8669-354f23dec122ADDED / 2023-01-09AUTHOR / Michael Haag

Known samples 6

0 recorded TRUE · 6 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

Agent64.sysSample 1 · HVCI FALSE

MD5: 8407ddfab85ae664e507c30314090385
SHA1: 8db869c0674221a2d3280143cbb0807fac08e0cc
SHA256: 05f052c64d192cf69a462a5ec16dda0d43ca5d0245900c9fcb9201685a2e7748
Imphash: 08c7f29f5cb29ba70e49879da2e8ddce
Authentihash MD5: d86884546c97e614b73d16c600cfb2df
Authentihash SHA1: 94f7575a6bb378d0cf85b3dc65941c95415e7a80
Authentihash SHA256: 3bc0cec99dce687304dad8f7a6daf772e695cbd0169d346d03ae12500361a1e8
Machine: AMD64
Version: 6.0
Publisher: "eSupport.com, Inc.", Phoenix Technologies Ltd, "eSupport.com, Inc"

Agent64.sysSample 2 · HVCI FALSE

MD5: 1ed08a6264c5c92099d6d1dae5e8f530
SHA1: 27d3ebea7655a72e6e8b95053753a25db944ec0f
SHA256: 4045ae77859b1dbf13972451972eaaf6f3c97bea423e9e78f1c2f14330cd47ca
Imphash: 08c7f29f5cb29ba70e49879da2e8ddce
Authentihash MD5: d86884546c97e614b73d16c600cfb2df
Authentihash SHA1: 94f7575a6bb378d0cf85b3dc65941c95415e7a80
Authentihash SHA256: 3bc0cec99dce687304dad8f7a6daf772e695cbd0169d346d03ae12500361a1e8
Machine: AMD64
Version: 6.0
Publisher: "eSupport.com, Inc.", Phoenix Technologies Ltd, "eSupport.com, Inc"

Agent64.sysSample 3 · HVCI FALSE

MD5: ddc2ffe0ab3fcd48db898ab13c38d88d
SHA1: 33cdab3bbc8b3adce4067a1b042778607dce2acd
SHA256: 6948480954137987a0be626c24cf594390960242cd75f094cd6aaa5c2e7a54fa
Imphash: 08c7f29f5cb29ba70e49879da2e8ddce
Authentihash MD5: d86884546c97e614b73d16c600cfb2df
Authentihash SHA1: 94f7575a6bb378d0cf85b3dc65941c95415e7a80
Authentihash SHA256: 3bc0cec99dce687304dad8f7a6daf772e695cbd0169d346d03ae12500361a1e8
Machine: AMD64
Version: 6.0
Publisher: "eSupport.com, Inc.", Phoenix Technologies Ltd, "eSupport.com, Inc"

Agent64.sysSample 4 · HVCI FALSE

MD5: 29ccff428e5eb70ae429c3da8968e1ec
SHA1: 21e6c104fe9731c874fab5c9560c929b2857b918
SHA256: 8cb62c5d41148de416014f80bd1fd033fd4d2bd504cb05b90eeb6992a382d58f
Imphash: 08c7f29f5cb29ba70e49879da2e8ddce
Authentihash MD5: d86884546c97e614b73d16c600cfb2df
Authentihash SHA1: 94f7575a6bb378d0cf85b3dc65941c95415e7a80
Authentihash SHA256: 3bc0cec99dce687304dad8f7a6daf772e695cbd0169d346d03ae12500361a1e8
Machine: AMD64
Version: 6.0
Publisher: "eSupport.com, Inc.", Phoenix Technologies Ltd, "eSupport.com, Inc"

Agent64.sysSample 5 · HVCI FALSE

MD5: a57b47489febc552515778dd0fd1e51c
SHA1: d979353d04bf65cc92ad3412605bc81edbb75ec2
SHA256: b1d96233235a62dbb21b8dbe2d1ae333199669f67664b107bff1ad49b41d9414
Imphash: 08c7f29f5cb29ba70e49879da2e8ddce
Authentihash MD5: d86884546c97e614b73d16c600cfb2df
Authentihash SHA1: 94f7575a6bb378d0cf85b3dc65941c95415e7a80
Authentihash SHA256: 3bc0cec99dce687304dad8f7a6daf772e695cbd0169d346d03ae12500361a1e8
Machine: AMD64
Version: 6.0
Publisher: "eSupport.com, Inc.", Phoenix Technologies Ltd, "eSupport.com, Inc"

Agent64.sysSample 6 · HVCI FALSE

MD5: fe71c99a5830f94d77a8792741d6e6c7
SHA1: acb5d7e182a108ee02c5cb879fc94e0d6db7dd68
SHA256: 4db1e0fdc9e6cefeb1d588668ea6161a977c372d841e7b87098cf90aa679abfb
Imphash: 08c7f29f5cb29ba70e49879da2e8ddce
Authentihash MD5: d86884546c97e614b73d16c600cfb2df
Authentihash SHA1: 94f7575a6bb378d0cf85b3dc65941c95415e7a80
Authentihash SHA256: 3bc0cec99dce687304dad8f7a6daf772e695cbd0169d346d03ae12500361a1e8
Machine: AMD64
Version: 6.0
Publisher: Phoenix Technologies

sc.exe create Agent64.sys binPath=C:\windows\temp\Agent64.sys type=kernel && sc.exe start Agent64.sys

Elevate privileges · Privileges: kernel · OS: Windows 10