← Back to driver explorer
Driver intelligenceMaliciousVerified

prokiller64.sys

Signed POORTRY Samples

UUID / 6fe10a55-7fb8-4a9d-9ebc-1b27b6e5b833ADDED / 2023-05-07AUTHOR / Guus Verbeek

Known samples 1

1 recorded TRUE · 0 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

prokiller64.sysSample 1 · HVCI TRUE
MD5
10f3679384a03cb487bda9621ceb5f90
SHA1
31cc8718894d6e6ce8c132f68b8caaba39b5ba7a
SHA256
0440ef40c46fdd2b5d86e7feef8577a8591de862cfd7928cdbcc8f47b8fa3ffc
Imphash
832219eb71b8bdb771f1d29d27b0acf4
Authentihash MD5
4252d83e18ad41f0cea7ac168218d95b
Authentihash SHA1
cf9cb05c9b725efca68c4b7d6f53c8e233217ac4
Authentihash SHA256
cd66e893300e7e59a749fe4e1b1706f8ccb5ae140254def9f5a614648e2da36f
Machine
AMD64
Version
Not recorded
Publisher
Not recorded

Recorded command

sc.exe create prokiller64.sys binPath=C:\windows\temp\prokiller64.sys type=kernel && sc.exe start prokiller64.sys

Elevate privileges · Privileges: kernel · OS: Windows 10

Research & references