Driver intelligenceVulnerableVerified

vmdrv.sys

Description not recorded.

UUID / fdf4f85b-47f4-4c98-a0d5-a6583463f565ADDED / 2023-01-09AUTHOR / Michael Haag

Known samples 1

1 recorded TRUE · 0 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

vmdrv.sysSample 1 · HVCI TRUE

MD5: d5db81974ffda566fa821400419f59be
SHA1: 4c18754dca481f107f0923fb8ef5e149d128525d
SHA256: 32cccc4f249499061c0afa18f534c825d01034a1f6815f5506bf4c4ff55d1351
Imphash: 7c24141cdcfc23f5eb0e2b6792d80740
Authentihash MD5: 681bb8e9713477839a1ee8d87b498630
Authentihash SHA1: 68cdcd073e57f650c5d6173cd79af3a3526052f6
Authentihash SHA256: 99ddeba6bcdc79e52e3ff8afc63dbe4b299161cf0f5558a2d7630c2a18daf2c6
Machine: AMD64
Version: 10.0.10011.16384
Publisher: Windows (R) Win 7 DDK provider

sc.exe create vmdrv.sys binPath=C:\windows\temp\vmdrv.sys type=kernel && sc.exe start vmdrv.sys

Elevate privileges · Privileges: kernel · OS: Windows 10