← Back to driver explorer
Driver intelligenceVulnerableVerified

PhlashNT.sys

Description not recorded.

UUID / be3e49ea-095e-4fdb-9529-f4c2dbb9a9fcADDED / 2023-01-09AUTHOR / Michael Haag

Known samples 1

0 recorded TRUE · 1 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

PhlashNT.sysSample 1 · HVCI FALSE
MD5
e9e786bdba458b8b4f9e93d034f73d00
SHA1
c6d349823bbb1f5b44bae91357895dba653c5861
SHA256
65db1b259e305a52042e07e111f4fa4af16542c8bacd33655f753ef642228890
Imphash
b1336b0cb67918ed39f1f88c354910d0
Authentihash MD5
5cf72ecb15ffea87586783893b02c43d
Authentihash SHA1
ef2d7210b761f158a0832083a8407b3ec2f99db9
Authentihash SHA256
cde02c7db90626bcfbfbbc1315d4ce18d4f15667fa57c16b9ac2b060507c62ad
Machine
AMD64
Version
1.6.1.0
Publisher
Phoenix Technologies, Ltd.

Recorded command

sc.exe create PhlashNT.sys binPath=C:\windows\temp\PhlashNT.sys type=kernel && sc.exe start PhlashNT.sys

Elevate privileges · Privileges: kernel · OS: Windows 10

Research & references