LOLDriversTHE DRIVER THREAT CATALOG
← Back to driver explorer
Driver intelligenceVulnerableVerified

ComputerZ.Sys

The Carbon Black Threat Analysis Unit (TAU) discovered 34 unique vulnerable drivers (237 file hashes) accepting firmware access. Six allow kernel memory access. All give full control of the devices to non-admin users. By exploiting the vulnerable drivers, an attacker without the system privilege may erase/alter firmware, and/or elevate privileges. As of the time of writing in October 2023, the filenames of the vulnerable drivers have not been made public until now.

UUID / 9bf033e4-7295-4b63-8772-638b76851741ADDED / 2023-11-02AUTHOR / Takahiro Haruyama

Known samples 50

10 recorded TRUE · 40 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

ComputerZ.SysSample 1 · HVCI FALSE
MD5
1f01257d9730f805b2a1d69099ef891d
SHA1
f10ec1b88c3a383c2a0c03362d31960836e3fb5f
SHA256
00d9781d0823ab49505ef9c877aa6fa674e19ecc8b02c39ee2728f298bc92b03
Imphash
f9b9487f25a2c1e08c02f391387c5323
Authentihash MD5
a8a3d4946e4a02ac7127d878704da757
Authentihash SHA1
eae3b3c7e6b4e1dcb6ed1b2378a633fb2ff72fb4
Authentihash SHA256
06c40abdf980ea22c8c4c50d9599db95d586354a8177e2cd670124e46a22a1f1
Machine
I386
Version
1.6.14.1023
Publisher
360.cn
Download vulnerable sampleView on VirusTotal
ComputerZ.SysSample 2 · HVCI FALSE
MD5
5b6c21e8366220f7511e6904ffeeced9
SHA1
c32dfdb0ee859de618484f3ab7a43ee1d9a25d1c
SHA256
03680068ec41bbe725e1ed2042b63b82391f792e8e21e45dc114618641611d5d
Imphash
a53b095a8d7366075d445892070cde51
Authentihash MD5
e0a6c9b07aeb96edf04da906f206e11d
Authentihash SHA1
cae3a4dc81504e2892510a6ff90bff711092514b
Authentihash SHA256
df813922fcebbcaae99314cc207ec95111a6599ec7fb2d723f6bb1052c493c8a
Machine
I386
Version
1.6.16.1015
Publisher
ludashi.com
Download vulnerable sampleView on VirusTotal
ComputerZ.SysSample 3 · HVCI FALSE
MD5
4429f85e2415742c7cf8c9f54905c4b9
SHA1
ddd36f96f5a509855f55eed9eb4cba9758d6339a
SHA256
07d0090c76155318e78a676e2f8af1500c20aaa1e84f047c674d5f990f5a09c8
Imphash
223a76f59831e1a59980b603f81c271d
Authentihash MD5
e3bed503df0bb23e0c81b317278b62ee
Authentihash SHA1
0dc3a20a5b85e67735b6356da876a8dbe44a5b18
Authentihash SHA256
e160fc9d1990bc1e7ffa556d6ada19db0d2c5c7aeb23a491704b37854a666480
Machine
AMD64
Version
1.3.10.831
Publisher
鲁大师
Download vulnerable sampleView on VirusTotal
ComputerZ.SysSample 4 · HVCI FALSE
MD5
006d9d615cdcc105f642ab599b66f94e
SHA1
ea58d72db03df85b04d1412a9b90d88ba68ab43d
SHA256
0fc3bc6e81b04dcaa349f59f04d6c85c55a2fea5db8fa0ba53d3096a040ce5a7
Imphash
fffbca93e6322995552b841c7d65b033
Authentihash MD5
717682508e2f11589885b9d155679c04
Authentihash SHA1
10bc411d5414c73e2f19cd654ea23349ecc55878
Authentihash SHA256
58d81ddb4104c37284b15fca0d90b4388e430a34d93823df1a3514962dbcddb5
Machine
AMD64
Version
1.6.14.1022
Publisher
360.cn
Download vulnerable sampleView on VirusTotal
ComputerZ.SysSample 5 · HVCI FALSE
MD5
dab9142dc12480bb39f25c9911df6c6c
SHA1
1f26424eaf046dbf800ae2ac52d9bb38494d061a
SHA256
13ae3081393f8100cc491ebb88ba58f0491b3550787cf3fd25a73aa7ca0290d9
Imphash
fbfa302bf7eb5d615d0968541ee49ce4
Authentihash MD5
98a39fd9543c26e95548235dbed6f6ee
Authentihash SHA1
55a83548224d9dc156e1ba4b4bd1400cad060009
Authentihash SHA256
aac9c11490da2ad5316469aa91943b42d019b51ff6f1d9d9767260abd075bb8f
Machine
AMD64
Version
1.6.15.1045
Publisher
ludashi.com
Download vulnerable sampleView on VirusTotal
ComputerZ.SysSample 6 · HVCI FALSE
MD5
0cd2504a2e0a8ad81d9a3a6a1fad7306
SHA1
441f87633ee6fbea5dee1268d1b9b936a596464d
SHA256
182bbdb9ecd3932e0f0c986b779c2b2b3997a7ca9375caa2ec59b4b08f4e9714
Imphash
f9b9487f25a2c1e08c02f391387c5323
Authentihash MD5
e7a9db31f57baffaa58807394be333df
Authentihash SHA1
9fe5d0b19514ee8c335e63b2fbce6a0564b8e5cc
Authentihash SHA256
e1a34446a3d8b2875a505b109a1c78177f9fa887472699ec9db5147b1074e42f
Machine
I386
Version
1.6.14.1021
Publisher
360.cn
Download vulnerable sampleView on VirusTotal
ComputerZ.SysSample 7 · HVCI FALSE
MD5
f7745b42882dec947f6629ab9b7c39b7
SHA1
2bb68b195f66f53f90f17b364928929d5b2883b5
SHA256
26ecd3cea139218120a9f168c8c0c3b856e0dd8fb2205c2a4bcb398f5f35d8dd
Imphash
fffbca93e6322995552b841c7d65b033
Authentihash MD5
462a9cd6018292c641c537c08b5a2602
Authentihash SHA1
ed9ed937052bc96ec57886d5bbc3edaaf7145451
Authentihash SHA256
9acd27f9b7b3075e5d5273ae285de33844aafe0477782ecd4ae573ed282f863a
Machine
AMD64
Version
1.6.12.302
Publisher
360.cn
Download vulnerable sampleView on VirusTotal
ComputerZ.SysSample 8 · HVCI FALSE
MD5
ca7b41ce335051bf9dd7fa4a55581296
SHA1
ddec18909571a9d5992f93636628756b7aa9b9a2
SHA256
31ffc8218a52c3276bece1e5bac7fcb638dca0bc95c2d385511958abdbe4e4a5
Imphash
fffbca93e6322995552b841c7d65b033
Authentihash MD5
b791f732161b03fc3fbddbdea0ec3f52
Authentihash SHA1
cef9b850a6967a79f5db4e6cb721af2762a90a88
Authentihash SHA256
4d16e1f28bae42b72cad2b1511ec59968d0659a6913cce8056b4572c20303822
Machine
AMD64
Version
1.6.12.1018
Publisher
360.cn
Download vulnerable sampleView on VirusTotal
ComputerZ.SysSample 9 · HVCI FALSE
MD5
159f89d9870e208abd8b912c3d1d3ae9
SHA1
5cfec6aa4842e5bafff23937f5efca71f21cf7ca
SHA256
348dc502ac57d7362c7f222e656c52e630c90bef92217a3bd20e49193b5a69f1
Imphash
fffbca93e6322995552b841c7d65b033
Authentihash MD5
2f2350f631202a79acea24c65290c114
Authentihash SHA1
bcd6c1d912830061824d423ffa8d07421433215a
Authentihash SHA256
11e76c3f091b3771d881e82f7171e72228bd43877aeea9008d7de4bda184aec2
Machine
AMD64
Version
1.6.11.1129
Publisher
360.cn
Download vulnerable sampleView on VirusTotal
ComputerZ.SysSample 10 · HVCI TRUE
MD5
6ba221afb17342a3c81245a4958516a2
SHA1
7c996d9ef7e47a3b197ff69798333dc29a04cc8a
SHA256
37d999df20c1a0b8ffaef9484c213a97b9987ed308b4ba07316a6013fbd31c60
Imphash
1427c5f0f4fb100e26a3911f8209504b
Authentihash MD5
245ccd9242dcc0ff7a8defc7a496bfd2
Authentihash SHA1
66b24de401ff03030585a778bb4665338e87494c
Authentihash SHA256
1f4647364210b9ec997483f9a707a733c4e1b59263c1046301dee90890273f34
Machine
AMD64
Version
1.1020.1030.1217
Publisher
ludashi.com
Download vulnerable sampleView on VirusTotal
ComputerZ.SysSample 11 · HVCI FALSE
MD5
f3f5c518bc3715492cb0b7c59e94c357
SHA1
8278db134d3b505c735306393fdf104d014fb3bf
SHA256
386745d23a841e1c768b5bdf052e0c79bb47245f9713ee64e2a63f330697f0c8
Imphash
b142d772a67c40535c8d8fabb6861748
Authentihash MD5
66b4187e1b01819b2eecffaf79b0d5ce
Authentihash SHA1
9411830260a6fe79dcbe1854ea5338f0da2b9d42
Authentihash SHA256
8cc23f39380a590d822d9c064a064c274554d814b651ae4b2f0560d8b016f105
Machine
I386
Version
1.3.10.802
Publisher
鲁大师
Download vulnerable sampleView on VirusTotal
ComputerZ.SysSample 12 · HVCI TRUE
MD5
ee3b74cdfed959782dff84153e3d5a6e
SHA1
53a194e1a30ed9b2d3acd87c2752cfa6645eea76
SHA256
39134750f909987f6ebb46cf37519bb80707be0ca2017f3735018bac795a3f8d
Imphash
f9b9487f25a2c1e08c02f391387c5323
Authentihash MD5
ff44341db8793b06163bd7443d7a2fb7
Authentihash SHA1
5f4f4071df9b391fd8f93d6124f802fa8b4b61d8
Authentihash SHA256
c2898d715a1806b6cb574bff1dcd4bb2fd026ac624a2fbe71b7f17a64d0a9451
Machine
I386
Version
1.6.11.415
Publisher
360.cn
Download vulnerable sampleView on VirusTotal
ComputerZ.SysSample 13 · HVCI FALSE
MD5
7d87a9c54e49943bf18574c6f02788ee
SHA1
92befb8b3d17bd3f510d09d464ec0131f8a43b8f
SHA256
3e758221506628b116e88c14e71be99940894663013df3cf1a9e0b6fb18852b9
Imphash
f9b9487f25a2c1e08c02f391387c5323
Authentihash MD5
ff44341db8793b06163bd7443d7a2fb7
Authentihash SHA1
5f4f4071df9b391fd8f93d6124f802fa8b4b61d8
Authentihash SHA256
c2898d715a1806b6cb574bff1dcd4bb2fd026ac624a2fbe71b7f17a64d0a9451
Machine
I386
Version
1.6.11.415
Publisher
360.cn
Download vulnerable sampleView on VirusTotal
ComputerZ.SysSample 14 · HVCI TRUE
MD5
8a973be665923e9708974e72228f9805
SHA1
34b2986f1ff5146f7145433f1ef5dfe6210131d0
SHA256
3f3684a37b2645fa6827943d9812ffc2d83e89e962935b29874bec7c3714a06f
Imphash
050d389675730da0d9d75367659cd53b
Authentihash MD5
98e90e61976ed80c2d4db4e949ccb4dd
Authentihash SHA1
c8b1dcdb8c29435c60b5c1e7ebaa399637c880a7
Authentihash SHA256
e4f90ded38e11860497b9d0290bcf93a6bcb48e836b334010894a2de865b148c
Machine
I386
Version
1.1020.1030.1217
Publisher
ludashi.com
Download vulnerable sampleView on VirusTotal
ComputerZ.SysSample 15 · HVCI FALSE
MD5
0d123be07e2dfd2b2ade49ad2a905a5b
SHA1
c74f6293be68533995e4b95469e6dddedd1c3905
SHA256
40eef1f52c7b81750cee2b74b5d2f4155d4e58bdde5e18ea612ab09ed0864554
Imphash
f9b9487f25a2c1e08c02f391387c5323
Authentihash MD5
91540db08dc5242983241c8cd8979178
Authentihash SHA1
8db33a31ff39917a4dbd0ed5a2b785cf751ec862
Authentihash SHA256
811f82960814c21949534fc1808e341a5b22caf52a094e5e427dac3aa6c7aa73
Machine
I386
Version
1.6.14.1022
Publisher
360.cn
Download vulnerable sampleView on VirusTotal
ComputerZ.SysSample 16 · HVCI FALSE
MD5
2751c7fd7f09479fa2b15168695adebc
SHA1
229716e61f74db821d5065bac533469efb54867b
SHA256
423f052690b6b523502931151dfcc63530e3bd9d79680f9b5ac033b23b5c6f18
Imphash
a53b095a8d7366075d445892070cde51
Authentihash MD5
9e942fef50fc9b5d806b205e5f58fd52
Authentihash SHA1
dc05788d55803c417369bf42491f78bad6fdb139
Authentihash SHA256
10576dad4928b01c21ecd2ed9914abba8bf4edae964d5d9d3c0d64ec7657f3d3
Machine
I386
Version
1.6.16.1005
Publisher
ludashi.com
Download vulnerable sampleView on VirusTotal
ComputerZ.SysSample 17 · HVCI FALSE
MD5
15dd3ef7df34f9b464e9b38c2deb0793
SHA1
88811e1a542f33431b9f8b74cb8bf27209b27f17
SHA256
468b087a0901d7bd971ab564b03ded48c508840b1f9e5d233a7916d1da6d9bd5
Imphash
60e068470635cf20cc19b7f8e8cbfc5f
Authentihash MD5
a816b0ae3be265e0c94cb5c327d8b8b0
Authentihash SHA1
21f2c89ddef3f65f13275052865ae1fc07d0d938
Authentihash SHA256
448048bafeb3796bfce954dd78e1b90f5849d9b3459c51750f210da8bafb8753
Machine
I386
Version
1.6.16.1000
Publisher
ludashi.com
Download vulnerable sampleView on VirusTotal
ComputerZ.SysSample 18 · HVCI FALSE
MD5
0fbf893691a376b168d8cdf427b89945
SHA1
98600e919b8579d89e232a253d7277355b652750
SHA256
47c490cc83a17ff36a1a92e08d63e76edffba49c9577865315a6c9be6ba80a7d
Imphash
fffbca93e6322995552b841c7d65b033
Authentihash MD5
8289ff20bf4f317bec672811f31b301a
Authentihash SHA1
ae373bd5efa1d240b8a0a9c02dd9aa28313e39e5
Authentihash SHA256
da99d80082f3492080cd036d121d6d017b9e8d09edcd59e099b1755aa7e9be16
Machine
AMD64
Version
1.6.11.1008
Publisher
360.cn
Download vulnerable sampleView on VirusTotal
ComputerZ.SysSample 19 · HVCI FALSE
MD5
4f963d716a60737e5b59299f00daf285
SHA1
879b32fcf78044cbc74b57717ab3ae18e77bc2fb
SHA256
5aee1bae73d056960b3a2d2e24ea07c44358dc7bc3f8ac58cc015cccc8f8d89c
Imphash
223a76f59831e1a59980b603f81c271d
Authentihash MD5
774176c8bcad0347dc02365e2992cb35
Authentihash SHA1
2691b12459cd8daecd942385ca64d8313ea78332
Authentihash SHA256
fb3176deae54472750747167287284c3cda5e14248ee10844305f322adcb81cd
Machine
AMD64
Version
1.3.10.802
Publisher
鲁大师
Download vulnerable sampleView on VirusTotal
ComputerZ.SysSample 20 · HVCI FALSE
MD5
931d4f01b5a88027ef86437f1b862000
SHA1
a14d96b65d3968181d57b57ee60c533cb621b707
SHA256
5c80dc051c4b0c62b9284211f71e5567c0c0187e466591eacb93e7dc10e4b9ab
Imphash
27db67ffa112f866f1d34c32226e09cf
Authentihash MD5
3b253d28bd35fc413cf6f32fcf2b991d
Authentihash SHA1
d45c92707664f70a1f537833187dd42cb381470d
Authentihash SHA256
28bac5dbcdd887f35f8fef454d5df1f53c18a90c51d8222636f487a0f351f725
Machine
AMD64
Version
1.3.10.1110
Publisher
鲁大师
Download vulnerable sampleView on VirusTotal
ComputerZ.SysSample 21 · HVCI TRUE
MD5
35493772986f610753be29121cd68234
SHA1
b2b01c728e0e8ef7b2e9040d6db9828bd4a5b48d
SHA256
5c9e257c9740561b5744812e1343815e7972c362c8993d972b96a56e18c712f3
Imphash
a53b095a8d7366075d445892070cde51
Authentihash MD5
55f05d6f7d05be2f6570b52ee06507e1
Authentihash SHA1
9a861ad1b13314a3637e16b286911d54db02a4bc
Authentihash SHA256
bcf3c0762d6600506ff3b2f13ac6d978041b0b50131b3a564a558611dd3b96df
Machine
I386
Version
1.6.15.1045
Publisher
ludashi.com
Download vulnerable sampleView on VirusTotal
ComputerZ.SysSample 22 · HVCI FALSE
MD5
eaec88a63db9cf9cee53471263afe6fb
SHA1
5eed0ce6487d0b8d0a6989044c4fcab1bd845d9e
SHA256
61e7f9a91ef25529d85b22c39e830078b96f40b94d00756595dded9d1a8f6629
Imphash
d16f507665603095c26147a7adcb93b8
Authentihash MD5
282fdadf7dd256c658f7524fcd42012b
Authentihash SHA1
46aa43b01c9150dbeb70d0647aef3b0970326b2a
Authentihash SHA256
0c66ca63774f8aa697fe172233283af90db88902204524294a4df212f9f0b949
Machine
AMD64
Version
1.1.9.416
Publisher
Z武器
Download vulnerable sampleView on VirusTotal
ComputerZ.SysSample 23 · HVCI TRUE
MD5
cb0c5d3639fcd810cde94b7b990aa51c
SHA1
db3debacd5f6152abd7a457d7910a0ec4457c0d7
SHA256
61f3b1c026d203ce94fab514e3d15090222c0eedc2a768cc2d073ec658671874
Imphash
60a2fba979aaa0d0ccd09c12ca3d9e57
Authentihash MD5
c31945f05d392cb9eea988f1c427b5a9
Authentihash SHA1
992b8f204b5ddb6bf0f51e34a7c423336b5fb7c2
Authentihash SHA256
b6d91487921478891e5570663f23a473b1b0490f8cf75bdeb7ab00111999fb9b
Machine
I386
Version
1.0.8.818
Publisher
ComputerZ
Download vulnerable sampleView on VirusTotal
ComputerZ.SysSample 24 · HVCI TRUE
MD5
e432956d19714c65723f9c407ffea0c5
SHA1
1a53902327bac3ab323ee63ed215234b735c64da
SHA256
64dddd5ac53fe2c9de2b317c09034d1bccaf21d6c03ccfde3518e5aa3623dd66
Imphash
27365d8741d23e179699f1f11a619c7d
Authentihash MD5
4ba59b6b5b50688e0a7f0a418cdd9fb5
Authentihash SHA1
928670cee224e0f69b1d827e7f278e00c254c130
Authentihash SHA256
de8a750317ff44704c0b03c374f5cbc37c9ef5c067a33628aa7c51a5b11db383
Machine
I386
Version
1.1019.1025.918
Publisher
ludashi.com
Download vulnerable sampleView on VirusTotal
ComputerZ.SysSample 25 · HVCI FALSE
MD5
5fade7137c14a94b323f3b7886fba2a9
SHA1
0b77242d4e920f2fcb2b506502cfe3985381defc
SHA256
66f851b309bada6d3e4b211baa23b534165b29ba16b5cbf5e8f44eaeb3ca86ea
Imphash
fbfa302bf7eb5d615d0968541ee49ce4
Authentihash MD5
0e7572ee69004b9c65c842eae1175b48
Authentihash SHA1
f646f70354ed77ed8e896e254a8985ec00d3dc53
Authentihash SHA256
0a1d5ba96cde7e8485077763e34738bf9c2734c81440ecab82ff63606a50dfb2
Machine
AMD64
Version
1.6.16.1015
Publisher
ludashi.com
Download vulnerable sampleView on VirusTotal
ComputerZ.SysSample 26 · HVCI FALSE
MD5
4ecfb46fcdce95623f994bd29bbe59cb
SHA1
d452fc8541ed5e97a6cbc93d08892c82991cdaad
SHA256
6d2cc7e1d95bb752d79613d0ea287ea48a63fb643dcb88c12b516055da56a11d
Imphash
f9b9487f25a2c1e08c02f391387c5323
Authentihash MD5
1bc96d2e740a8a9ed500f96ec8ec0b80
Authentihash SHA1
6270f0d0907d7ef842cd65e5e3be8c0f66f8ebb3
Authentihash SHA256
db58973c75b7cb94ffb31ad46fddf2f16f19075a99a69a7de20f8c0e42d96ba0
Machine
I386
Version
1.6.13.1019
Publisher
360.cn
Download vulnerable sampleView on VirusTotal
ComputerZ.SysSample 27 · HVCI TRUE
MD5
94d45bb36b13f4e936badb382fc133fe
SHA1
850d7df29256b4f537eddafe95cfea59fb118fe2
SHA256
71c0ce3d33352ba6a0fb26e274d0fa87dc756d2473e104e0f5a7d57fab8a5713
Imphash
a53b095a8d7366075d445892070cde51
Authentihash MD5
55f05d6f7d05be2f6570b52ee06507e1
Authentihash SHA1
9a861ad1b13314a3637e16b286911d54db02a4bc
Authentihash SHA256
bcf3c0762d6600506ff3b2f13ac6d978041b0b50131b3a564a558611dd3b96df
Machine
I386
Version
1.6.15.1045
Publisher
ludashi.com
Download vulnerable sampleView on VirusTotal
ComputerZ.SysSample 28 · HVCI TRUE
MD5
dbde0572d702d0a05c0d509d5624a4d7
SHA1
0e030cf5e5996f0778452567e144f75936dc278f
SHA256
7553c76b006bd2c75af4e4ee00a02279d3f1f5d691e7dbdc955eac46fd3614c3
Imphash
45acfe4a83f61d872fb904a1f08ef991
Authentihash MD5
cc904107340f6a24999ea4e8c3717933
Authentihash SHA1
3f4b83ed3a3029d901279b2dd3b122f3837f9791
Authentihash SHA256
00b3ac33836f15ea53e81746ffa7c2888dc3c98492b59a97ba5a0a64166900d0
Machine
AMD64
Version
1.1019.1025.918
Publisher
ludashi.com
Download vulnerable sampleView on VirusTotal
ComputerZ.SysSample 29 · HVCI FALSE
MD5
e0528f756bbb2ab83c60f9fd6f541e42
SHA1
c4b6e2351a72311a6e8f71186b218951a27fb97f
SHA256
767ef5c831f92d92f2bfc3e6ea7fd76d11999eeea24cb464fd62e73132ed564b
Imphash
8605f70bcc472025c2e78082388ed00b
Authentihash MD5
a7035f3985620574571ad276844d7970
Authentihash SHA1
45e94d477a543e200db0d33e9dc4dfd8e93eb585
Authentihash SHA256
df1fa63048807a9372a9b29baa712ef3c448ae28fc2c7da559714e40b1321a4d
Machine
AMD64
Version
1.6.14.1024
Publisher
360.cn
Download vulnerable sampleView on VirusTotal
ComputerZ.SysSample 30 · HVCI FALSE
MD5
d76b56b79b1c95e8dcd7ee88cb0d25ab
SHA1
97941faf575e43e59fe8ee167de457c2cf75c9eb
SHA256
8047859a7a886bcf4e666494bd03a6be9ce18e20dc72df0e5b418d180efef250
Imphash
fffbca93e6322995552b841c7d65b033
Authentihash MD5
50a21ac6e74c060dd86734ecab8979c2
Authentihash SHA1
2e1ffe5098066ba2e3a62e000081eceb21b70b69
Authentihash SHA256
665512fdf31d81504e6540e94d8f1b39f3e56932054a9b83aa4a45360e1c5477
Machine
AMD64
Version
1.6.13.1019
Publisher
360.cn
Download vulnerable sampleView on VirusTotal
ComputerZ.SysSample 31 · HVCI TRUE
MD5
a71020c6d6d42c5000e9993425247e06
SHA1
ec0c3c61a293a90f36db5f8ed91cbf33c2b14a19
SHA256
8781589c77df2330a0085866a455d3ef64e4771eb574a211849784fdfa765040
Imphash
fbfa302bf7eb5d615d0968541ee49ce4
Authentihash MD5
98a39fd9543c26e95548235dbed6f6ee
Authentihash SHA1
55a83548224d9dc156e1ba4b4bd1400cad060009
Authentihash SHA256
aac9c11490da2ad5316469aa91943b42d019b51ff6f1d9d9767260abd075bb8f
Machine
AMD64
Version
1.6.15.1045
Publisher
ludashi.com
Download vulnerable sampleView on VirusTotal
ComputerZ.SysSample 32 · HVCI FALSE
MD5
7c983b4e66c4697ad3ce7efc9166b505
SHA1
c9522cf7f6d6637aaff096b4b16b0d81f6ee1c37
SHA256
898e07cf276ec2090b3e7ca7c192cc0fa10d6f13d989ef1cb5826ca9ce25b289
Imphash
b142d772a67c40535c8d8fabb6861748
Authentihash MD5
0409d64beac16333feb5bf09a356c1d7
Authentihash SHA1
d9482598bd5adb287f06a8ff3d755060e9dab4fc
Authentihash SHA256
aea066ef46a44a082e437c0fd68671ad77ee626f5864a0c2060e8fb970493635
Machine
I386
Version
1.3.10.831
Publisher
鲁大师
Download vulnerable sampleView on VirusTotal
ComputerZ.SysSample 33 · HVCI FALSE
MD5
2c47725db0c5eb5c2ecc32ff208bceb6
SHA1
55777e18eb95b6c9c3e6df903f0ac36056fa83da
SHA256
8d3347c93dff62eecdde22ccc6ba3ce8c0446874738488527ea76d0645341409
Imphash
f9b9487f25a2c1e08c02f391387c5323
Authentihash MD5
354edd67437778970468a5bdd16186f7
Authentihash SHA1
9122dd6d5a86c5324768bd68b02770a39d591e8e
Authentihash SHA256
665b45ff2a2054ffdb3ea55031802c1d7fd3db843ecbcf74b227e0200b37cd56
Machine
I386
Version
1.6.12.1018
Publisher
360.cn
Download vulnerable sampleView on VirusTotal
ComputerZ.SysSample 34 · HVCI FALSE
MD5
44499d3cab387aa78a4a6eca2ac181fb
SHA1
db3ce886a47027c09bb668c7049362ab86c82ceb
SHA256
a34e45e5bbec861e937aefb3cbb7c8818f72df2082029e43264c2b361424cbb1
Imphash
fffbca93e6322995552b841c7d65b033
Authentihash MD5
2ed9b1d5cc2f688a6b836c4be1a64981
Authentihash SHA1
970b6f1cc81ce6cb7fb2e2f5d9f3b159dce86c10
Authentihash SHA256
19f89530b8caf720c91c82977132bb1fb2afe695b426b51a1ae1b35570805f32
Machine
AMD64
Version
1.6.11.415
Publisher
360.cn
Download vulnerable sampleView on VirusTotal
ComputerZ.SysSample 35 · HVCI FALSE
MD5
637f2708da54e792c27f1141d5bb09cd
SHA1
dc393d30453daa1f853f47797e48c142ac77a37b
SHA256
a97b404aae301048e0600693457c3320d33f395e9312938831bc5a0e808f2e67
Imphash
f9b9487f25a2c1e08c02f391387c5323
Authentihash MD5
0a03c413e989714fc0d43f4174cb29c7
Authentihash SHA1
6777ce9e28ffe884bec45588db510295995c3eb7
Authentihash SHA256
87279855c17e3924ebfa07f51c1312d0e107f990f4ae174807ac4814da6179ac
Machine
I386
Version
1.6.11.1008
Publisher
360.cn
Download vulnerable sampleView on VirusTotal
ComputerZ.SysSample 36 · HVCI FALSE
MD5
3f29f651a3c4ff5ce16d61deccf46618
SHA1
cb0bc86d437ab78c1fbefdaf1af965522ebdd65d
SHA256
bc453d428fc224960fa8cbbaf90c86ce9b4c8c30916ad56e525ab19b6516424e
Imphash
fffbca93e6322995552b841c7d65b033
Authentihash MD5
8537ac04b83bb2ce5905e04cbbabe409
Authentihash SHA1
d5c80e72827bea03340b9f23c46c8a00fe9d20f8
Authentihash SHA256
a4c9fdd68c1f70df223d50d849fb83d11b1abc2256b8916e195f32360bb647ad
Machine
AMD64
Version
1.6.14.1021
Publisher
360.cn
Download vulnerable sampleView on VirusTotal
ComputerZ.SysSample 37 · HVCI FALSE
MD5
639252292bb40b3f10f8a6842aee3cd4
SHA1
283c7dc5b029dbc41027df16716ec12761a53df8
SHA256
c186967cc4f2a0cb853c9796d3ea416d233e48e735f02b1bb013967964e89778
Imphash
f9b9487f25a2c1e08c02f391387c5323
Authentihash MD5
f178294b652c780d5966a83b20fc39fe
Authentihash SHA1
a039b1b3f9bc2f71a37fb0270076d17f03e9a73a
Authentihash SHA256
a787df19468ba5fce5de825983251507867c6d3ff72d93e19466f2201013bab9
Machine
I386
Version
1.6.11.1129
Publisher
360.cn
Download vulnerable sampleView on VirusTotal
ComputerZ.SysSample 38 · HVCI FALSE
MD5
fc90bcc43daa48882be359a17b71abf7
SHA1
fd87b70f94674b02d62bb01ae6e62d75c618f5c8
SHA256
c586befc3fd561fcbf1cf706214ae2adaa43ce9ba760efd548d581f60deafc65
Imphash
aa01c534155ce919d797860feb531eae
Authentihash MD5
feae6741229e64efb2889fcd6d6bc131
Authentihash SHA1
ff8da3c092493ef21ee39716a235017983c4613a
Authentihash SHA256
91e5f702691772cd1291ffbd2b645f06fda3b7b2c31c04ca28a3f4d728875cc6
Machine
I386
Version
1.3.9.1105
Publisher
鲁大师
Download vulnerable sampleView on VirusTotal
ComputerZ.SysSample 39 · HVCI FALSE
MD5
b3f132ce34207b7be899f4978276b66d
SHA1
64ab599d34c26f53afe076a84c54db7ba1a53def
SHA256
c6a5663f20e5cee2c92dee43a0f2868fb0af299f842410f4473dcde7abcb6413
Imphash
8605f70bcc472025c2e78082388ed00b
Authentihash MD5
7d373fafa023e5b902445344dd3d77a7
Authentihash SHA1
cd7bada894ae8d5f33743aae9dbd8bfe9a2a174c
Authentihash SHA256
72805e13777a39b440ef381720c0491e6091f9cb6c7b387be33ca5491fcfbfbd
Machine
AMD64
Version
1.6.15.1040
Publisher
ludashi.com
Download vulnerable sampleView on VirusTotal
ComputerZ.SysSample 40 · HVCI FALSE
MD5
ce952204558ea66ec1a9632dcbdde8bd
SHA1
c01caaa74439af49ca81cb5b200a167e7d32343c
SHA256
d474ea066d416ded9ed8501c285ca6b1c26a1d1c813c8f6bd5523eeb66c5d01e
Imphash
acdf419d1d03923be256205b9c33eec8
Authentihash MD5
0c383d55d6fa8e2617b6576fc6c26f83
Authentihash SHA1
bbf5d261f70a96bfed808c1525c91ca82680c4fa
Authentihash SHA256
0bfed811a8ae3fa634372f74f0d70de1e0183612e91f56ae034486571b55b88b
Machine
I386
Version
1.3.10.1110
Publisher
鲁大师
Download vulnerable sampleView on VirusTotal
ComputerZ.SysSample 41 · HVCI FALSE
MD5
bdfe1f0346c066971e1f3d96f7fdaa2c
SHA1
d06d119579156b1ec732c50f0f64358762eb631a
SHA256
d6801e845d380c809d0da8c7a5d3cd2faa382875ae72f5f7af667a34df25fbf7
Imphash
acdf419d1d03923be256205b9c33eec8
Authentihash MD5
7e3a7e0aa2a05e6977102c6eabd8fef4
Authentihash SHA1
73f7e600c871a9ff1ad6854a0f4c183233c34e6a
Authentihash SHA256
b4341b5814bf1b0291739f00c359f9dc1e3b8a66dede099086f9760f7f4e0885
Machine
I386
Version
1.3.10.1110
Publisher
鲁大师
Download vulnerable sampleView on VirusTotal
ComputerZ.SysSample 42 · HVCI FALSE
MD5
0e2fc7e7f85c980eb698b9e468c20366
SHA1
8e64c32bcfd70361956674f45964a8b0c8aa6388
SHA256
d9a73df5ac5c68ef5b37a67e5e649332da0f649c3bb6828f70b65c0a2e7d3a23
Imphash
6e7cd05c0da9f82449a8b3795418ee00
Authentihash MD5
8b71320c51bc83ac75e151f50945e118
Authentihash SHA1
560de162671236fd597968e7dddb41fc6a8c4f58
Authentihash SHA256
a9b98a8234d3e560feef5ec88f35960f631d111351d7085c011e055dfec7d3ce
Machine
I386
Version
1.6.14.1024
Publisher
360.cn
Download vulnerable sampleView on VirusTotal
ComputerZ.SysSample 43 · HVCI FALSE
MD5
88aada8325a3659736b3a7201c825664
SHA1
8ab7e9ba3c26bcd5d6d0646c6d2b2693e22aac1c
SHA256
dda2a604bb94a274e23f0005f0aa330d45ca1ea25111746fb46fa5ef6d155b1d
Imphash
27db67ffa112f866f1d34c32226e09cf
Authentihash MD5
a25d690f609d1b0e5dd2da02616e0a2b
Authentihash SHA1
0c668a995df9692dec2d59ef26753f29acd5e297
Authentihash SHA256
6b2f669c6fb1e839ba146b416021ddfb7bf4785558113e11ac2c8a0e3399f338
Machine
AMD64
Version
1.3.9.1105
Publisher
鲁大师
Download vulnerable sampleView on VirusTotal
ComputerZ.SysSample 44 · HVCI FALSE
MD5
6e1faeee0ebfcb384208772410fe1e86
SHA1
a55b709cec2288384b12eafa8be4930e7c075ec9
SHA256
dee384604d2d0018473941acbefe553711ded7344a4932daeffb876fe2fa0233
Imphash
f9b9487f25a2c1e08c02f391387c5323
Authentihash MD5
229ae045b7af8ec1e5e1352c9064f6b0
Authentihash SHA1
d336748cf32abb5b1ff6ee2a7ffc8435e77a232f
Authentihash SHA256
7436cb59411572a6194bfffad9f9e5194107da417457d4e20a6ef1d58491e3c9
Machine
I386
Version
1.6.12.302
Publisher
360.cn
Download vulnerable sampleView on VirusTotal
ComputerZ.SysSample 45 · HVCI FALSE
MD5
65ad6a7c43f8d566afd5676f9447b6c1
SHA1
24aafe3c727c6a3bd1942db78327ada8fcb8c084
SHA256
e502c2736825ea0380dd42effaa48105a201d4146e79de00713b8d3aaa98cd65
Imphash
27db67ffa112f866f1d34c32226e09cf
Authentihash MD5
1d350d0940bb74230d092af7a3869c5e
Authentihash SHA1
3e8ead037c4e891f9fa2905be2f803c34daaca6d
Authentihash SHA256
f025ad896e6048a329aecb506503a79bc4d2717350f2c0bb7aec8fa52d31ba93
Machine
AMD64
Version
1.3.10.1110
Publisher
鲁大师
Download vulnerable sampleView on VirusTotal
ComputerZ.SysSample 46 · HVCI FALSE
MD5
7671bbf15b7a8c8f59a0c42a1765136a
SHA1
9f5453c36aa03760d935e062ac9e1f548d14e894
SHA256
e642d82c5cde2bc40a204736b5b8d6578e8e2b893877ae0508cfa3371fc254dc
Imphash
a53b095a8d7366075d445892070cde51
Authentihash MD5
55f05d6f7d05be2f6570b52ee06507e1
Authentihash SHA1
9a861ad1b13314a3637e16b286911d54db02a4bc
Authentihash SHA256
bcf3c0762d6600506ff3b2f13ac6d978041b0b50131b3a564a558611dd3b96df
Machine
I386
Version
1.6.15.1045
Publisher
ludashi.com
Download vulnerable sampleView on VirusTotal
ComputerZ.SysSample 47 · HVCI TRUE
MD5
aa2ef08d48b66bd814280976614468a7
SHA1
59aead65b240a163ad47b2d1cf33cdb330608317
SHA256
ed3448152bcacf20d7c33e9194c89d5304dee3fba16034dd0cc03a3374e63c91
Imphash
fbfa302bf7eb5d615d0968541ee49ce4
Authentihash MD5
98a39fd9543c26e95548235dbed6f6ee
Authentihash SHA1
55a83548224d9dc156e1ba4b4bd1400cad060009
Authentihash SHA256
aac9c11490da2ad5316469aa91943b42d019b51ff6f1d9d9767260abd075bb8f
Machine
AMD64
Version
1.6.15.1045
Publisher
ludashi.com
Download vulnerable sampleView on VirusTotal
ComputerZ.SysSample 48 · HVCI FALSE
MD5
2399e6f7f868d05623be03a616b4811e
SHA1
3b1f1e96fc8a7eb93b14b1213f797f164a313cee
SHA256
f14da8aa5c8eea8df63cf935481d673fdf3847f5701c310abf4023f9d80ad57d
Imphash
6e7cd05c0da9f82449a8b3795418ee00
Authentihash MD5
7f772e4bc503225174de47d826f34529
Authentihash SHA1
769f3d19d1d1fad58ef06c23e7958b03222a2166
Authentihash SHA256
bbb894950dc19c804c44a7dce8fe9a7267311e992421faffa8912f8b8b4dc09e
Machine
I386
Version
1.6.15.1040
Publisher
ludashi.com
Download vulnerable sampleView on VirusTotal
ComputerZ.SysSample 49 · HVCI FALSE
MD5
88d2143ae62878dada3aa0a6d8f7cea8
SHA1
195b91a1a43de8bfb52a4869fbf53d7a226a6559
SHA256
f93e0d776481c4ded177d5e4aebb27f30f0d47dcb4a1448aee8b66099ac686e1
Imphash
fbfa302bf7eb5d615d0968541ee49ce4
Authentihash MD5
319150f8644a8a012bc781ef949912f4
Authentihash SHA1
04513e47cd38886aaa7d7f044e95d6f96b481779
Authentihash SHA256
3eea0723a9007f5a85382cd2e92d9f9cc94bb9e2f7fbb6d99a7c70c8527caa5a
Machine
AMD64
Version
1.6.16.1000
Publisher
ludashi.com
Download vulnerable sampleView on VirusTotal
ComputerZ.SysSample 50 · HVCI FALSE
MD5
0ac31915ec9a6b7d4d4bba8fe6d60ff7
SHA1
5c88d9fcc491c7f1078c224e1d6c9f5bda8f3d8a
SHA256
fa77a472e95c4d0a2271e5d7253a85af25c07719df26941b39082cfc0733071a
Imphash
fbfa302bf7eb5d615d0968541ee49ce4
Authentihash MD5
8ab57a309eded5eb8ccfc7fd6712ee47
Authentihash SHA1
fe0db53751edd272612f58bd8afc8ee844f65937
Authentihash SHA256
694385b46b72e65604afd251fba3c8febb42225343d38feecec3f424ce45f2c3
Machine
AMD64
Version
1.6.16.1005
Publisher
ludashi.com
Download vulnerable sampleView on VirusTotal

Recorded command

sc.exe create ComputerZSys binPath= C:\windows\temp\ComputerZSys.sys type=kernel && sc.exe start ComputerZSys

Elevate privileges · Privileges: kernel · OS: Windows 10

Research & references