← Back to driver explorer
Driver intelligenceMaliciousVerified

Sense5Ext.sys

Driver categorized as POORTRY by Mandiant.

UUID / 70acea34-7ed2-42d5-885c-eca3c2de640cADDED / 2023-03-04AUTHOR / Michael Haag, Guus Verbeek

Known samples 2

0 recorded TRUE · 2 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

Sense5Ext.sysSample 1 · HVCI FALSE
MD5
f9844524fb0009e5b784c21c7bad4220
SHA1
e6765d8866cad6193df1507c18f31fa7f723ca3e
SHA256
7f4555a940ce1156c9bcea9a2a0b801f9a5e44ec9400b61b14a7b1a6404ffdf6
Imphash
c214aac08575c139e48d04f5aee21585
Authentihash MD5
0b2ce413f69677a0bf78a40ed0d081a7
Authentihash SHA1
af83d2f800c68099976dcf75ee31681708d32ed9
Authentihash SHA256
13cd99ff2120d9fd651814d826b6c8481d549f684a8fbfb2d8775c9faa1c27f5
Machine
AMD64
Version
2.6.0.0
Publisher
Sense5 CORP
Sense5Ext.sysSample 2 · HVCI FALSE
MD5
4e1f656001af3677856f664e96282a6f
SHA1
bc62fe2b38008f154fc9ea65d851947581b52f49
SHA256
42b22faa489b5de936db33f12184f6233198bdf851a18264d31210207827ba25
Imphash
c214aac08575c139e48d04f5aee21585
Authentihash MD5
2855f88dffa0bb68f988d5c116b336fb
Authentihash SHA1
169b81ce8a74d3a404384ad3e90ac3b053323d50
Authentihash SHA256
dcfab3c5f99c15cbb7df17c59914af551b90e0ed3c1dc040bad9927b12b67125
Machine
AMD64
Version
2.5.0.0
Publisher
Sense5 CORP

Recorded command

sc.exe create Sense5Ext.sys binPath=C:\windows\temp\Sense5Ext.sys type=kernel && sc.exe start Sense5Ext.sys

Elevate privileges · Privileges: kernel · OS: Windows 10

Research & references