← Back to driver explorer
Driver intelligenceVulnerableVerified
ProtectS.sys
Description not recorded.
Known samples 4
0 recorded TRUE · 4 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.
ProtectS.sysSample 1 · HVCI FALSE
- Authentihash SHA1
67650bc9cdf0716bc7b5664723c38fc5327ec662- Authentihash SHA256
9d58f640c7295952b71bdcb456cae37213baccdcd3032c1e3aeb54e79081f395- Machine
- Not recorded
- Version
- Not recorded
- Publisher
- Not recorded
ProtectS.sysSample 2 · HVCI FALSE
- Authentihash SHA1
67650bc9cdf0716bc7b5664723c38fc5327ec662- Authentihash SHA256
4a9093e8dbcb867e1b97a0a67ce99a8511900658f5201c34ffb8035881f2dbbe- Machine
- Not recorded
- Version
- Not recorded
- Publisher
- Not recorded
ProtectS.sysSample 3 · HVCI FALSE
- MD5
3db2afc15e7cc78bd11f4c726060db5c- SHA1
5a7bcb1864d1e8ecde0b58d21b98518ca4b2f1f2- SHA256
c7079033659ac9459b3b7ab2510805832db2e2a70fe9beb1a6e13c1f51890d88- Imphash
8b6c1a09e11200591663b880a94a8d18- Authentihash MD5
d490f971f9503765a947997d7c54a4c7- Authentihash SHA1
67650bc9cdf0716bc7b5664723c38fc5327ec662- Authentihash SHA256
4a9093e8dbcb867e1b97a0a67ce99a8511900658f5201c34ffb8035881f2dbbe- Machine
- AMD64
- Version
- Not recorded
- Publisher
- Not recorded
ProtectS.sysSample 4 · HVCI FALSE
- MD5
986f083e5fd01eea4ec3b2575a110a95- SHA1
ebced350ea447df8e10ebb080e3a3e5b32aca348- SHA256
082d4d4d4ba1bda5e1599bd24e930ae9f000e7d12b00f7021cca90a4600ea470- Imphash
8b6c1a09e11200591663b880a94a8d18- Authentihash MD5
d490f971f9503765a947997d7c54a4c7- Authentihash SHA1
67650bc9cdf0716bc7b5664723c38fc5327ec662- Authentihash SHA256
4a9093e8dbcb867e1b97a0a67ce99a8511900658f5201c34ffb8035881f2dbbe- Machine
- AMD64
- Version
- Not recorded
- Publisher
- Not recorded
Recorded command
sc.exe create ProtectS.sys binPath=C:\windows\temp\ProtectS.sys type=kernel && sc.exe start ProtectS.sysElevate privileges · Privileges: kernel · OS: Windows 10