Driver intelligenceVulnerableVerified

driver7-x86-withoutdbg.sys

Description not recorded.

UUID / d9f2c3d6-160c-4eb3-8547-894fcf810342ADDED / 2023-01-09AUTHOR / Michael Haag

Known samples 1

0 recorded TRUE · 1 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

driver7-x86-withoutdbg.sysSample 1 · HVCI FALSE

MD5: 4f191abc652d8f7442ca2636725e1ed6
SHA1: 4243dbbf6e5719d723f24d0f862afd0fcb40bc35
SHA256: 927c2a580d51a598177fa54c65e9d2610f5f212f1b6cb2fbf2740b64368f010a
Imphash: 10cb3185e13390f8931a50a131448cdf
Authentihash MD5: 7776703e27df791bf1d4af2acb94115d
Authentihash SHA1: 8c08885be9ec2ad64537038f6dca6654e475106a
Authentihash SHA256: baa89ffd5255e5c72112ed57937353ae48a050c9af423cbde6b380978ecc235c
Machine: I386
Version: 2.5.0.2
Publisher: ASUStek

Download vulnerable sample View on VirusTotal

Recorded command

sc.exe create driver7-x86-withoutdbg.sys binPath=C:\windows\temp\driver7-x86-withoutdbg.sys     type=kernel && sc.exe start driver7-x86-withoutdbg.sys

Elevate privileges · Privileges: kernel · OS: Windows 10

Research & references

https://github.com/Chigusa0w0/AsusDriversPrivEscala