← Back to driver explorer
Driver intelligenceVulnerableVerified

K7RKScan.sys

Driver can be used to load unsigned drivers

UUID / bd580aba-a804-4afc-adb3-b8ce342c78f6ADDED / 2025-09-18AUTHOR / Michael Haag

Known samples 1

0 recorded TRUE · 0 recorded FALSE · 1 unknown for loading despite HVCI. Results apply to individual samples.

b16e217cdca19e00c1b68bdfb28ead53b20adeabd6edcd91542f9fbf48942877Sample 1 · HVCI unknown
MD5
9b04a93e05ccff94667f04bffa7af600
SHA1
468121e7d6952799f92940677268937c4c5f92ed
SHA256
b16e217cdca19e00c1b68bdfb28ead53b20adeabd6edcd91542f9fbf48942877
Imphash
1398f66d7e712e0d8ec9238cbb4a30da
Authentihash MD5
07f6aceaf0ebe5f41d9c118b42e3ecdd
Authentihash SHA1
a3cc953a0335009bc090b23cd0afd51cb932e97a
Authentihash SHA256
80c6fe45459a08cb5ac7485c23ee3b015fade4c580923baf69e3d5f704cde258
Machine
AMD64
Version
15.1.0.6
Publisher
K7 Computing Pvt. Ltd.

Recorded command

sc.exe create K7RKScan.sys binPath=C:\windows\temp\K7RKScan.sys type=kernel && sc.exe start K7RKScan.sys

Elevate privileges · Privileges: kernel · OS: Windows 10

Research & references