Driver intelligenceVulnerableVerified

piddrv64.sys

Description not recorded.

UUID / aaa92ef1-5728-4e15-9fca-b054b02f0fb0ADDED / 2023-01-09AUTHOR / Michael Haag

Known samples 1

0 recorded TRUE · 1 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

piddrv64.sysSample 1 · HVCI FALSE

MD5: fd7de498a72b2daf89f321d23948c3c4
SHA1: c4ed28fdfba7b8a8dfe39e591006f25d39990f07
SHA256: b03f26009de2e8eabfcf6152f49b02a55c5e5d0f73e01d48f5a745f93ce93a29
Imphash: e80eeed7225a880bbde0d038a5fe1af4
Authentihash MD5: a6200c0995103391120e3561971560a6
Authentihash SHA1: 0c2599d738d01a82ec91725f499acebbcfb47cc9
Authentihash SHA256: b97f870c501714fa453cf18ae8a30c87d08ff1e6d784afdbb0121aea3da2dc28
Machine: AMD64
Version: Not recorded
Publisher: Not recorded

sc.exe create piddrv64.sys binPath=C:\windows\temp\piddrv64.sys type=kernel && sc.exe start piddrv64.sys

Elevate privileges · Privileges: kernel · OS: Windows 10