LOLDriversTHE DRIVER THREAT CATALOG
GitHub ↗
← Back to driver explorer
Driver intelligenceVulnerableVerified

gdrv.sys

Description not recorded.

UUID / 613b8509-18c0-4720-b489-736776b6713eADDED / 2023-05-06AUTHOR / Nasreddine Bencherchali

Known samples 10

0 recorded TRUE · 10 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

gdrv.sysSample 1 · HVCI FALSE
MD5
b0954711c133d284a171dd560c8f492a
SHA1
4f0d9122f57f4f8df41f3c3950359eb1284b9ab5
SHA256
092d04284fdeb6762e65e6ac5b813920d6c69a5e99d110769c5c1a78e11c5ba0
Imphash
59b3f3fa2775e407721c2491ddb2890b
Authentihash MD5
f4a434113ef1b0bfed60b8a5bcd4fa9c
Authentihash SHA1
bffa9edada9f48685c5178f247c416029b423834
Authentihash SHA256
1bd6a40e294f4f74f9baf172f5a3e21dad3b7e31b5757d91bda309bd54a72fbe
Machine
I386
Version
1.0.1.1
Publisher
GIGA-BYTE TECHNOLOGY CO., LTD.
Download vulnerable sample ↗View on VirusTotal ↗
gdrv.sysSample 2 · HVCI FALSE
MD5
043d5a1fc66662a3f91b8a9c027f9be9
SHA1
3d8cc9123be74b31c597b0014c2a72090f0c44ef
SHA256
0ce40a2cdd3f45c7632b858e8089ddfdd12d9acb286f2015a4b1b0c0346a572c
Imphash
f7d07bcaa23837d219dcb64e76290252
Authentihash MD5
5029d92e78dd56446eae97c8acd56926
Authentihash SHA1
00e5f35b31d5bfd2745bb04909f1faf26abfcec0
Authentihash SHA256
12ae98c0f1d7209cffe3bc8be5b76aa1f4faba40af99a6dd299462cdd3820c94
Machine
AMD64
Version
1.0.1.1
Publisher
GIGA-BYTE TECHNOLOGY CO., LTD.
Download vulnerable sample ↗View on VirusTotal ↗
gdrv.sysSample 3 · HVCI FALSE
MD5
3c55092900343d3d28564e2d34e7be2c
SHA1
1a56614ea7d335c844b7fc6edd5feb59b8df7b55
SHA256
133e542842656197c5d22429bd56d57aa33c9522897fdf29853a6d321033c743
Imphash
d6dc99d60798b2647006ddba21671160
Authentihash MD5
b661326f2405e4947bf879cc97f13438
Authentihash SHA1
c7e06ef18efee6d133c5014ef45d6657e1e36b90
Authentihash SHA256
c92d943a465e20f50bae8d46ea38b635d2da85ae4e34f0170fd6f451890c76d7
Machine
AMD64
Version
1.0.1.3
Publisher
GIGA-BYTE TECHNOLOGY CO., LTD.
Download vulnerable sample ↗View on VirusTotal ↗
gdrv.sysSample 4 · HVCI FALSE
MD5
7907e14f9bcf3a4689c9a74a1a873cb6
SHA1
b9b72a5be3871ddc0446bae35548ea176c4ea613
SHA256
17927b93b2d6ab4271c158f039cae2d60591d6a14458f5a5690aec86f5d54229
Imphash
6816dabcee7b7d027bfbb93a16297afa
Authentihash MD5
b4709bbd5e329d55130e0db781afc89c
Authentihash SHA1
b483cdd20bb24ed9a20f4168628b7053b04ebb93
Authentihash SHA256
bb0063e65c44da66d705d25121af09b641070219c174f5d83e288ba8fe59e46f
Machine
AMD64
Version
5.2.3790.1830 built by: WinDDK
Publisher
Windows (R) Server 2003 DDK provider
Download vulnerable sample ↗View on VirusTotal ↗
gdrv.sysSample 5 · HVCI FALSE
MD5
a72e10ecea2fdeb8b9d4f45d0294086b
SHA1
4692730f6b56eeb0399460c72ade8a15ddd43a62
SHA256
26c28746e947389856543837aa59a5b1f4697e5721a04d00aa28151a2659b097
Imphash
d6dc99d60798b2647006ddba21671160
Authentihash MD5
8e9f3d61eaa5d5df8ac92c3c89eb7347
Authentihash SHA1
c1b7be5e37f29ee8114b701f88d68748f196c530
Authentihash SHA256
b213524b22aadcc273142c4b8afc2a6219d6b8b7cab4b41adf9944efb8f46005
Machine
AMD64
Version
1.0.0.5
Publisher
GIGA-BYTE TECHNOLOGY CO., LTD.
Download vulnerable sample ↗View on VirusTotal ↗
gdrv.sysSample 6 · HVCI FALSE
MD5
31f34de4374a6ed0e70a022a0efa2570
SHA1
c70989ed7a6ad9d7cd40ae970e90f3c3f2f84860
SHA256
6f1fc8287dd8d724972d7a165683f2b2ad6837e16f09fe292714e8e38ecd1e38
Imphash
cc81a908891587ccac8059435eda4c66
Authentihash MD5
b18b1bff521337695d2d6a0768340252
Authentihash SHA1
0f5034fcf5b34be22a72d2ecc29e348e93b6f00f
Authentihash SHA256
9c0e80958b907c8df345ec2f8d711acefb4951ee3e6e84892ecd429f5e1f3acb
Machine
AMD64
Version
5.2.3790.1830 built by: WinDDK
Publisher
Windows (R) Server 2003 DDK provider
Download vulnerable sample ↗View on VirusTotal ↗
gdrv.sysSample 7 · HVCI FALSE
MD5
4e093256b034925ecd6b29473ff16858
SHA1
eba5483bb47ec6ff51d91a9bdf1eee3b6344493d
SHA256
81aafae4c4158d0b9a6431aff0410745a0f6a43fb20a9ab316ffeb8c2e2ccac0
Imphash
81acb4bb89ef49c4e7f30513b4750e53
Authentihash MD5
ce38d9daee9b1de9c5fbaac0e6932ed3
Authentihash SHA1
025656c5696aa4834b4d32149a93176cf0322854
Authentihash SHA256
35b1fdfa5cc9bb4a0d6e148140d59351447fa35c5c899e95da5f62a6b054af56
Machine
AMD64
Version
1.1.0.1
Publisher
GIGA-BYTE TECHNOLOGY CO., LTD.
Download vulnerable sample ↗View on VirusTotal ↗
gdrv.sysSample 8 · HVCI FALSE
MD5
1549e6cbce408acaddeb4d24796f2eaf
SHA1
18f09ec53f0b7d2b1ab64949157e0e84628d0f0a
SHA256
8b92cdb91a2e2fab3881d54f5862e723826b759749f837a11c9e9d85d52095a2
Imphash
f7d07bcaa23837d219dcb64e76290252
Authentihash MD5
9524a8cc0f1ce8a124e88f31c917c89d
Authentihash SHA1
8d6286e5d3e1558f6870bf1c4343da8a1d77aef3
Authentihash SHA256
3ede3c99d8a049232cd6baae9d44518a73c19d93230a1d320407a3fc2f506569
Machine
AMD64
Version
1.0.0.1
Publisher
GIGA-BYTE TECHNOLOGY CO., LTD.
Download vulnerable sample ↗View on VirusTotal ↗
gdrv.sysSample 9 · HVCI FALSE
MD5
c832a4313ff082258240b61b88efa025
SHA1
1f1ce28c10453acbc9d3844b4604c59c0ab0ad46
SHA256
cfc5c585dd4e592dd1a08887ded28b92d9a5820587b6f4f8fa4f56d60289259b
Imphash
45f8f347e3fb919f3164a4a3278f1c71
Authentihash MD5
1c0c9b05800e86e0e1d158e0b44d4b99
Authentihash SHA1
a2c4f33de0b2ebb8a505f97697d550ccb3f7b114
Authentihash SHA256
b5433ec27586bdd8d2ef606f9212d8ed75ae3ae2e201a1acaf325d9b12239df8
Machine
I386
Version
5.00.2195.1620
Publisher
Windows (R) 2000 DDK provider
Download vulnerable sample ↗View on VirusTotal ↗
gdrv.sysSample 10 · HVCI FALSE
MD5
d556cb79967e92b5cc69686d16c1d846
SHA1
de2b56ef7a30a4697e9c4cdcae0fc215d45d061d
SHA256
f4ff679066269392f6b7c3ba6257fc60dd609e4f9c491b00e1a16e4c405b0b9b
Imphash
b4c857bd3a7b1d8125c0f62aec45401e
Authentihash MD5
906258ee90744ed1307ba969a1c8722e
Authentihash SHA1
2b94ace70d946caa1fed6c8f97f2fafdb45d6c54
Authentihash SHA256
1251eef40b877fd379c175c02bb83e230fa5acd30020e54acc0718ab326818b3
Machine
I386
Version
5.00.2195.1620
Publisher
Windows (R) 2000 DDK provider
Download vulnerable sample ↗View on VirusTotal ↗

Recorded command

sc.exe create gdrv.sys binPath=C:\windows\temp\gdrv.sys type=kernel && sc.exe start gdrv.sys

Elevate privileges · Privileges: kernel · OS: Windows 10