← Back to driver explorer
Driver intelligenceVulnerableVerified
FPCIE2COM.sys
FINTEK FPCIE2COM exposes FILE_ANY_ACCESS IOCTLs through \DosDevices\FPCIE2COM that map caller-selected physical addresses for byte reads and writes. It also permits raw PCI configuration access through I/O ports 0xCF8 and 0xCFC, creating privileged hardware-control primitives suitable for kernel or firmware tampering.
Known samples 6
2 recorded TRUE · 4 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.
FPCIE2COM.sysSample 1 · HVCI FALSE
- MD5
c552dae8eaadd708a38704e8d62cf64d- SHA1
59b0b8e3478f3d21213a8afda84181c4ed0a79a7- SHA256
17942865680bd3d6e6633c90cc4bd692ae0951a8589dbe103c1e293b3067344d- Imphash
3ca448454c33a5c72ad5e774de47930a- Authentihash MD5
3145cb38dd53aca44d7e050667782858- Authentihash SHA1
532b0d04fe8f2302932988a4161f7fb327d46e46- Authentihash SHA256
65cf1a886b3e3ec8070bde31cb8e254cd623de1e8c7dd71248b84e6de77a08e6- Machine
- I386
- Version
- 1, 0, 0, 0
- Publisher
- Fintek Corp.
FPCIE2COM.sysSample 2 · HVCI FALSE
- MD5
ecccbf1e7c727f923c9d709707800e6c- SHA1
cfcecf6207d16aeb0af29aac8a4a2f104483018e- SHA256
32bd0edb9daa60175b1dc054f30e28e8dbfa293a32e6c86bfd06bc046eaa2f9e- Imphash
8d616e68080def2200312de80392efa7- Authentihash MD5
f31b7135682f2657dbe7dfffd065ff53- Authentihash SHA1
bcb3a8484cf837a1874c5eca94d05fa4c295d9ee- Authentihash SHA256
4ea2a3a6edb3c772f9d358a720f9106260ef22d339bd3c7895e7b5cda03e424d- Machine
- AMD64
- Version
- 1, 0, 0, 0
- Publisher
- Fintek Corp.
FPCIE2COM.sysSample 3 · HVCI TRUE
- MD5
cafbf85b902f189ba35f3d7823aad195- SHA1
f70eb454c0e9ea67a18c625faf7a666665801035- SHA256
81fbc9d02ef9e05602ea9c0804d423043d0ea5a06393c7ece3be03459f76a41d- Imphash
799c9c020c6fcfd11a4172bc861f74af- Authentihash MD5
6c193ad2e2b576f5c410cc4cf75475c0- Authentihash SHA1
772d1324df82b2fcf33a86d96d1267854695c962- Authentihash SHA256
1970400679c3ae7000f1ba3e0f12c2d5443df7fbb8947cabe45c7ae977806efb- Machine
- I386
- Version
- 22,12,5,0
- Publisher
- Feature Integration Technology Inc.
FPCIE2COM.sysSample 4 · HVCI FALSE
- MD5
5bc9bb759e9e42f07a8dabca324a222a- SHA1
cd08e0585488b257da2e9cfa23207c13a8d43180- SHA256
faa7aaec1df5ef6b43d45a9f465a09c3a7fd0264f1e77415a63f9d1ea3dfaa34- Imphash
9e04ba004454cfe96be0247acec3a634- Authentihash MD5
911f85895b7099755dbd459cbcd54d4e- Authentihash SHA1
c4d186c4b50451da5967756c9c32d685a2404671- Authentihash SHA256
0327ed69df7cb167b411f199c43bd4d69c341328b979d4d157a1537bab57aa2f- Machine
- AMD64
- Version
- 17.9.27.1
- Publisher
- Feature Integration Technology Inc.
FPCIE2COM.sysSample 5 · HVCI FALSE
- MD5
9fdcd543574a712a80d62da8bfd8331c- SHA1
a0c7c913d7b5724a46581b6e00dd72c26c37794d- SHA256
b1920889466cd5054e3ab6433a618e76c6671c3e806af8b3084c77c0e7648cbe- Imphash
ecf8495ba751a7e38d6be4c5c80f2bef- Authentihash MD5
fb1ece9e1203b6e2edd8a86e6c26f912- Authentihash SHA1
b86c9e4c3d4f1e6be76f0a35351416854dd3f180- Authentihash SHA256
3f36bc2327a34da59c59e3fd4cb920a26f2db1c6a5f8eb17b00dc6e2a4ff71dc- Machine
- I386
- Version
- 1, 0, 0, 0
- Publisher
- Fintek Corp.
FPCIE2COM.sysSample 6 · HVCI TRUE
- MD5
05369fa594a033e48b7921018b3263fb- SHA1
340ce5d8859f923222bea5917f40c4259cce1bbc- SHA256
ebf0e56a1941e3a6583aab4a735f1b04d4750228c18666925945ed9d7c9007e1- Imphash
c91146dfe120f6e8fbed2150d9e020ca- Authentihash MD5
34d9b3d02be97274e320bc946b0084cb- Authentihash SHA1
833a2dd7ac07ea34332173a2ca402d062af3a7b1- Authentihash SHA256
52478f3ddd3d0b9eb098e66049d132cc5c7e05720bfc78b6550ce5a40306d993- Machine
- AMD64
- Version
- 22,12,5,0
- Publisher
- Feature Integration Technology Inc.
Recorded command
sc.exe create FPCIE2COMsys binPath= C:\windows\temp\FPCIE2COMsys.sys type=kernel && sc.exe start FPCIE2COMsysElevate privileges · Privileges: kernel · OS: Windows 10
Research & references
Acknowledgement: fluffycats31 @fluffycats31