← Back to driver explorer
Driver intelligenceVulnerableVerified

UCOREW64.SYS

Description not recorded.

UUID / a338a9fc-9fe3-400c-9fe4-69bb7892602dADDED / 2023-01-09AUTHOR / Michael Haag

Known samples 1

0 recorded TRUE · 1 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

UCOREW64.SYSSample 1 · HVCI FALSE
MD5
a17c58c0582ee560c72f60764ed63224
SHA1
bbc0b9fd67c8f4cefa3d76fcb29ff3cef996b825
SHA256
a7c8f4faf3cbb088cac7753d81f8ec4c38ccb97cd9da817741f49272e8d01200
Imphash
0dcd262801389f839ce909cb173448e2
Authentihash MD5
6957cb828dd243621e2e67c948171264
Authentihash SHA1
c55173b926235b8678bddb9b49a1a8b9a92a1ada
Authentihash SHA256
f9c290ffc007e94fb61aecff42d267c1e626ec7939025b1a7d7285441d1c490d
Machine
AMD64
Version
Not recorded
Publisher
Not recorded

Recorded command

sc.exe create UCOREW64.SYS binPath=C:\windows\temp\UCOREW64.SYS type=kernel && sc.exe start UCOREW64.SYS

Elevate privileges · Privileges: kernel · OS: Windows 10

Research & references