Driver intelligenceVulnerableVerified

kEvP64.sys

Description not recorded.

UUID / 73196456-40ae-4b6d-8562-07cf99458a7dADDED / 2023-05-06AUTHOR / Nasreddine Bencherchali

Known samples 2

0 recorded TRUE · 2 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

kEvP64.sysSample 1 · HVCI FALSE

MD5: 4ff880566f22919ed94ffae215d39da5
SHA1: 755349d56cdd668ca22eebc4fc89f0cccef47327
SHA256: 09b0e07af8b17db1d896b78da4dd3f55db76738ee1f4ced083a97d737334a184
Imphash: f5030145594c486434040aa2636a5dde
Authentihash MD5: 99efb8e481f1832bba9f4c16a09722b0
Authentihash SHA1: 74747434945444864206dad33d5d5cb80c21d142
Authentihash SHA256: af7b9e3dca8fd4f9eb548bd06cf9f14dbce9f947fc375064aa90b47e7ee8940c
Machine: AMD64
Version: 1.0.1.0 built by: WinDDK
Publisher: PowerTool

kEvP64.sysSample 2 · HVCI FALSE

MD5: 7e7e3f5532b6af24dcc252ac4b240311
SHA1: 3ccf1f3ac636a5e21b39ede48ff49fa23e05413f
SHA256: 8e6363a6393eb4234667c6f614b2072e33512866b3204f8395bbe01530d63f2f
Imphash: f5030145594c486434040aa2636a5dde
Authentihash MD5: c1e7d7652812e872d65dae145650a273
Authentihash SHA1: 80377b08aee1125170652757852eaacae5c2a62a
Authentihash SHA256: 23ab90e1990b4c5250f7bacbc7ff90e989583a2ccacf4ba333255f1d385d0ad8
Machine: AMD64
Version: 1.0.1.0 built by: WinDDK
Publisher: PowerTool

sc.exe create kEvP64.sys binPath=C:\windows\temp\kEvP64.sys type=kernel && sc.exe start kEvP64.sys

Elevate privileges · Privileges: kernel · OS: Windows 10