← Back to driver explorer
Driver intelligenceMaliciousVerified

kavservice.bin

Description not recorded.

UUID / 77157886-00f9-4f6e-b217-d896813b630fADDED / 2024-01-24AUTHOR / Antonio Parata, Andrea Monzani

Known samples 1

0 recorded TRUE · 0 recorded FALSE · 1 unknown for loading despite HVCI. Results apply to individual samples.

kavservice.binSample 1 · HVCI unknown
MD5
c419d7a8bc1cd5fe0af3ce4637c4d8a3
SHA1
be80f4d2a669f60354703a21daffb7b2128de190
SHA256
e055fdfb914e3da936eb7745acb665f50346df9abac597cf43d487262a6a12d5
Imphash
2b12d7329b1917ae49f22618cc3316ec
Authentihash MD5
4f50406d33aaa18c233879b4941c9749
Authentihash SHA1
3ffd37d423f0088186a1741f42e5b11d07a96111
Authentihash SHA256
d590ee21ef889c847c8c80efe07f91cae4390d5663e6dc7a81077efce3737249
Machine
AMD64
Version
Not recorded
Publisher
Not recorded

Recorded command

sc.exe create kavservice.sys binPath=C:\windows\temp\kavservice.sys type=kernel && sc.exe start kavservice.sys

EDR Kill · Privileges: Admin privileges · OS: Windows 10

Research & references