← Back to driver explorer
Driver intelligenceVulnerableVerified

amp.sys

Description not recorded.

UUID / ca768fc5-9b5c-4ced-90ab-fd6be9a70199ADDED / 2023-01-09AUTHOR / Michael Haag

Known samples 1

0 recorded TRUE · 1 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

amp.sysSample 1 · HVCI FALSE
MD5
c533d6d64b474ffc3169a0e0fc0a701a
SHA1
3f223581409492172a1e875f130f3485b90fbe5f
SHA256
cbb8239a765bf5b2c1b6a5c8832d2cab8fef5deacadfb65d8ed43ef56d291ab6
Imphash
d8752c1d5954bea175ac00df5acebb09
Authentihash MD5
74ee74d20c3afc42d7722a88aacf3671
Authentihash SHA1
87a84133f5e4c12d2d4a42fcc3be84b43a6202b5
Authentihash SHA256
a37371c4e62f106e7da03fd5bdd6f12ecdf7fcaf1195dbf9fb7ef6eb456a7506
Machine
AMD64
Version
5.4.11.1
Publisher
CYREN Inc.

Recorded command

sc.exe create amp.sys binPath=C:\windows\temp\amp.sys type=kernel && sc.exe start amp.sys

Elevate privileges · Privileges: kernel · OS: Windows 10

Research & references