LOLDriversTHE DRIVER THREAT CATALOG
← Back to driver explorer
Driver intelligenceVulnerableVerified

fiddrv64.sys

Description not recorded.

UUID / 64f3d4b0-6d2b-4275-b3d4-15d092af4092ADDED / 2023-01-09AUTHOR / Michael Haag

Known samples 3

0 recorded TRUE · 3 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

fiddrv64.sysSample 1 · HVCI FALSE
SHA1
10e15ba8ff8ed926ddd3636cec66a0f08c9860a4
Machine
Not recorded
Version
Not recorded
Publisher
Not recorded
fiddrv64.sysSample 2 · HVCI FALSE
SHA1
e4436c8c42ba5ffabd58a3b2256f6e86ccc907ab
Machine
Not recorded
Version
Not recorded
Publisher
Not recorded
fiddrv64.sysSample 3 · HVCI FALSE
MD5
bd067efb8cafd971142bc964b4f85df1
SHA1
0d8a832b9383fcdc23e83487b188ddd30963ca82
SHA256
4bf4cced4209c73aa37a9e2bf9ff27d458d8d7201eefa6f6ad4849ee276ad158
Imphash
840e656bdb2987fa422092ec9d588895
Authentihash MD5
6f12156b03f79cac857e541cc10b7366
Authentihash SHA1
10e15ba8ff8ed926ddd3636cec66a0f08c9860a4
Authentihash SHA256
feef191064d18b6fb63b7299415d1b1e2ec8fcdd742854aa96268d0ec4a0f7b6
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal

Recorded command

sc.exe create fiddrv64.sys binPath=C:\windows\temp\fiddrv64.sys type=kernel && sc.exe start fiddrv64.sys

Elevate privileges · Privileges: kernel · OS: Windows 10

Research & references