← Back to driver explorer
Driver intelligenceVulnerableVerified

HwRwDrv.sys

Description not recorded.

UUID / e4609b54-cb25-4433-a75a-7a17f43cec00ADDED / 2023-01-09AUTHOR / Michael Haag

Known samples 1

0 recorded TRUE · 1 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

HwRwDrv.sysSample 1 · HVCI FALSE
MD5
dbc415304403be25ac83047c170b0ec2
SHA1
2b0bb408ff0e66bcdf6574f1ca52cbf4015b257b
SHA256
21ccdd306b5183c00ecfd0475b3152e7d94b921e858e59b68a03e925d1715f21
Imphash
d6f977640d4810a784d152e4d3c63a6b
Authentihash MD5
62d9c8a109afc08e2858d98df9776850
Authentihash SHA1
7beb26c59b8d1b9540c6fae7c05c2b1cc2537e54
Authentihash SHA256
d852810a7319e3249077a1b9f1317f6f4157a19bb99b90063d118c30c2c84ac2
Machine
AMD64
Version
1.0.5.0
Publisher
Shuttle Inc.

Recorded command

sc.exe create HwRwDrv.sys binPath=C:\windows\temp\HwRwDrv.sys type=kernel && sc.exe start HwRwDrv.sys

Elevate privileges · Privileges: kernel · OS: Windows 10

Research & references