Driver intelligenceVulnerableVerified

VBoxDrv.sys

Description not recorded.

UUID / 79542852-3a0c-43bc-bfa3-3eeb0e1d7fd2ADDED / 2023-05-06AUTHOR / Nasreddine Bencherchali

Known samples 7

5 recorded TRUE · 2 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

VBoxDrv.sysSample 1 · HVCI TRUE

MD5: b1b8e6b85dd03c7f1290b1a071fc79c1
SHA1: a22dead5cdf05bd2f79a4d0066ffcf01c7d303ec
SHA256: 26f41e4268be59f5de07552b51fa52d18d88be94f8895eb4a16de0f3940cf712
Imphash: 9470f56376e665fb981a35b303436041
Authentihash MD5: 6837b5fe3a3a100c88c7cf4f0408f528
Authentihash SHA1: d679aadb2844462deaaf069d48e7d0fc76979741
Authentihash SHA256: 7dcd81140dc57d1d412c39940643ea923a1925815097f83788d840c1a7b57d25
Machine: AMD64
Version: 1.2.0.119230
Publisher: Vektor T13 Security Service

VBoxDrv.sysSample 2 · HVCI TRUE

MD5: 02a1d77ef13bd41cad04abcce896d0b9
SHA1: 59c0fa0d61576d9eb839c9c7e15d57047ee7fe29
SHA256: 3724b39e97936bb20ada51c6119aded04530ed86f6b8d6b45fbfb2f3b9a4114b
Imphash: 9470f56376e665fb981a35b303436041
Authentihash MD5: 49f3b147b53aa5ebce9ddce9a20fe9ff
Authentihash SHA1: 46064d1e248e2c9d24950d6a5dcf68a2c12aeb9d
Authentihash SHA256: 7e5abe4530eff3838d44516f95c15d8b3ec6cec44ca7b67998e50641c939d12a
Machine: AMD64
Version: 1.4.2.119230
Publisher: Vektor T13 Security Service

VBoxDrv.sysSample 3 · HVCI FALSE

MD5: 962a33a191dbe56915fd196e3a868cf0
SHA1: 449ff4f5ce2fdddac05a6c82e45a7e802b1c1305
SHA256: 7539157df91923d4575f7f57c8eb8b0fd87f064c919c1db85e73eebb2910b60c
Imphash: fd133033a24971502ff0b2f189215c56
Authentihash MD5: 5491106d0dc46b737e07072122359638
Authentihash SHA1: 2fa597885c165e354736143e9645570e3637b57b
Authentihash SHA256: c62bf9d0cc1edfffc15f3f002cd7f51efe3372320ec89d9dc96011000915c186
Machine: AMD64
Version: 3.0.0.r49315
Publisher: Sun Microsystems, Inc.

VBoxDrv.sysSample 4 · HVCI TRUE

MD5: 3e87e3346441539d3a90278a120766df
SHA1: ce5681896e7631b6e83cccb7aa056a33e72a1bbe
SHA256: 9dab4b6fddc8e1ec0a186aa8382b184a5d52cfcabaaf04ff9e3767021eb09cf4
Imphash: 2a20cc9578bb34a4bb10b87b49b24982
Authentihash MD5: d8e8d4c6d5dd6ba5ca58979f569cba95
Authentihash SHA1: c9027b3e1c731d0a16acd94c947f446df1a23318
Authentihash SHA256: 681de794238060ec929aa5cf6c4701069f113a8524d31fb2f411648968ca17de
Machine: AMD64
Version: 1.2.0.137904
Publisher: Pinduoduo Ltd Corp

VBoxDrv.sysSample 5 · HVCI TRUE

MD5: e3bdb307b32b13b8f7e621e8d5cc8cd3
SHA1: 58fe23f1bb9d4bcc1b07b102222a7d776cc90f6c
SHA256: c26b51b4c37330800cff8519252e110116c3aaade94ceb9894ec5bfb1b8f9924
Imphash: 6723b1d5bd0f1fc13216cb44541e619e
Authentihash MD5: eb532e54636f61b9af61f97d46ca8cae
Authentihash SHA1: 018d626382f2453ef584b732e1e03ceab51e84db
Authentihash SHA256: 6ab14c5c89759695dbb4b310b7cad68d9ec2007277e3b4f3abb883bd05ef557c
Machine: AMD64
Version: 2.2.0.r45846
Publisher: Sun Microsystems, Inc.

VBoxDrv.sysSample 6 · HVCI FALSE

MD5: 443689645455987cb347154b391f734d
SHA1: 2fed7eddd63f10ed4649d9425b94f86140f91385
SHA256: c8940e2e9b069ec94f9f711150b313b437f8429f78d522810601b6ee8b52bada
Imphash: 6723b1d5bd0f1fc13216cb44541e619e
Authentihash MD5: ed53ea124ed4c30df39c29a4f5b01182
Authentihash SHA1: 2903352a4e038c68c044a48edebd118af7e80098
Authentihash SHA256: 79e3b14b68f1fcf805ccfe7bc2dc81b98346d2e83a6335816b276970e2e2691a
Machine: AMD64
Version: 2.2.4.r47978
Publisher: Sun Microsystems, Inc.

VBoxDrv.sysSample 7 · HVCI TRUE

MD5: 6beb1d8146f5a4aaa2f7b8c0c9bced30
SHA1: 07f62d9b6321bed0008e106e9ce4240cb3f76da2
SHA256: cfb7af8ac67a379e7869289aeee21837c448ea6f8ab6c93988e7aa423653bd40
Imphash: 9470f56376e665fb981a35b303436041
Authentihash MD5: 71bbd7b5164d35bc41d5a7f61a2d81f0
Authentihash SHA1: eec7692de436743eed432729fb620c5da3d5318f
Authentihash SHA256: 1c9c86ba5ae540bb5729626cdaec89ca421f8129e4bbf6e1ea49c532b44ea0c9
Machine: AMD64
Version: 1.4.0.119230
Publisher: Vektor T13 Security Service

sc.exe create VBoxDrv.sys binPath=C:\windows\temp\VBoxDrv.sys type=kernel && sc.exe start VBoxDrv.sys

Elevate privileges · Privileges: kernel · OS: Windows 10