Driver intelligenceVulnerableVerified

WinFlash64.sys

Description not recorded.

UUID / 7b893f79-b5b0-4373-9d29-c53a21fe6fc3ADDED / 2023-05-06AUTHOR / Nasreddine Bencherchali

Known samples 3

0 recorded TRUE · 3 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

WinFlash64.sysSample 1 · HVCI FALSE

MD5: a216803d691d92acc44ac77d981aa767
SHA1: 48be0ec2e8cb90cac2be49ef71e44390a0f648ce
SHA256: 316a27e2bdb86222bc7c8af4e5472166b02aec7f3f526901ce939094e5861f6d
Imphash: 7a4a0df0bde1f8da6547a580d5bee7c3
Authentihash MD5: 62fecd37b50c9973478b3c1a02838c22
Authentihash SHA1: a1e4fbc16c0fc98a4c2256f2b0b45c1ece8f8f0b
Authentihash SHA256: ad6360cee0b1b293be38348f0f9deb7221e205516524f437aaf8f468b308cb4e
Machine: AMD64
Version: Not recorded
Publisher: Not recorded

WinFlash64.sysSample 2 · HVCI FALSE

MD5: bf2a954160cb155df0df433929e9102b
SHA1: 7a1689cde189378e7db84456212b0e438f9bf90a
SHA256: 8797d9afc7a6bb0933f100a8acbb5d0666ec691779d522ac66c66817155b1c0d
Imphash: e4f1a9234e4ea105321909d4c0e597ae
Authentihash MD5: 066fa975190d01fa5a8e99b0d5f3a5ae
Authentihash SHA1: 0086ddd495c6c89c9b7732f2a2b58c06a82f31bc
Authentihash SHA256: 63041a13d1658e22fecc34706e98ab08b54b94e7d028bf2b1308ff85995a01c3
Machine: AMD64
Version: Not recorded
Publisher: Not recorded

WinFlash64.sysSample 3 · HVCI FALSE

MD5: bc6ff00fb3a14437c94b37ac9a2101d4
SHA1: d5326fea00bcde2ef7155acf3285c245c9fb4ece
SHA256: 8bda0108de82ebeae82f43108046c5feb6f042e312fa0115475a9e32274fae59
Imphash: 8c3af6c25ab40c4daefb4f836d12e1c8
Authentihash MD5: 32c5590f86eda2c188d19fa91107e3b7
Authentihash SHA1: d3bc762eaebf1ea4f291aeb614dd7e1d3c027a39
Authentihash SHA256: bddf1750dc00725c1384b34740e798b4f5f70218ab71ac62a5a96773b377df5a
Machine: AMD64
Version: Not recorded
Publisher: Not recorded

sc.exe create WinFlash64.sys binPath=C:\windows\temp\WinFlash64.sys type=kernel && sc.exe start WinFlash64.sys

Elevate privileges · Privileges: kernel · OS: Windows 10