← Back to driver explorer
Driver intelligenceVulnerableVerified
kEvP64.sys
Description not recorded.
Known samples 7
0 recorded TRUE · 7 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.
kEvP64.sysSample 1 · HVCI FALSE
- MD5
3ae11bde32cdbd8637124ada866a5a7e- SHA1
4a2e034d2702aba6bca5d9405ba533ed1274ff0c- SHA256
7462b7ae48ae9469474222d4df2f0c4f72cdef7f3a69a524d4fccc5ed0fd343f- Imphash
021fd02a8adad420116496b6f2759960- Authentihash MD5
dd340bd4626e61ca6b85d8be496cf474- Authentihash SHA1
2890346c9be7683fe8c111c0a9ccef8f8734f05c- Authentihash SHA256
7a1dfe962c0c714c35827f7cf19bbca693bb1e769037b06b5f86d7f33b723f72- Machine
- AMD64
- Version
- 1.0.1.0 built by: WinDDK
- Publisher
- PowerTool
kEvP64.sysSample 2 · HVCI FALSE
- MD5
1c9001dcd34b4db414f0c54242fedf49- SHA1
56af49e030eb85528e82849d7d1b6147f3c4973e- SHA256
2a4f4400402cdc475d39389645ca825bb0e775c3ecb7c527e30c5be44e24af7d- Imphash
f5030145594c486434040aa2636a5dde- Authentihash MD5
f921aff2b09e5b82787b7f84c0d57e2d- Authentihash SHA1
1f046fae17d77909883f4dcfd13459e1db2768eb- Authentihash SHA256
be690e8bbc4b0ba4b37c1a331294655dff0c73be530428a447e318c06ec06d57- Machine
- AMD64
- Version
- 1.0.1.0 built by: WinDDK
- Publisher
- PowerTool
kEvP64.sysSample 3 · HVCI FALSE
- MD5
23b807c09b9b6ea85ed5c508aab200b7- SHA1
e5114fd50904c7fb75d8c86367b9a2dd4f79dfb1- SHA256
97363f377aaf3c01641ac04a15714acbec978afb1219ac8f22c7e5df7f2b2d56- Imphash
f5030145594c486434040aa2636a5dde- Authentihash MD5
bd0b58bcd07ce5e3de35a47317c751e0- Authentihash SHA1
5c9e742280da8bd96a5ff6cbfb70641f8d29e179- Authentihash SHA256
340ab79ca0f9f2c2448e936621ffe937fb200270c2f7f5197b4a669dcdd69c7b- Machine
- AMD64
- Version
- 1.0.1.0 built by: WinDDK
- Publisher
- PowerTool
kEvP64.sysSample 4 · HVCI FALSE
- MD5
2c1045bb133b7c9f5115e7f2b20c267a- SHA1
a380aeb3ffaecc53ca48bb1d4d622c46f1de7962- SHA256
e61004335dfe7349f2b2252baa1e111fb47c0f2d6c78a060502b6fcc92f801e4- Imphash
f5030145594c486434040aa2636a5dde- Authentihash MD5
1b48e3ebf24bc8c648e7eca9219d1484- Authentihash SHA1
ae06eb14cd837b37a02c066e7892802900b4ecc4- Authentihash SHA256
ecd1412340d618be39c4ac26d442ed66c0fd1ff6a7641cda404e970fb6c48bad- Machine
- AMD64
- Version
- 1.0.1.0 built by: WinDDK
- Publisher
- PowerTool
kEvP64.sysSample 5 · HVCI FALSE
- MD5
20125794b807116617d43f02b616e092- SHA1
f3db629cfe37a73144d5258e64d9dd8b38084cf4- SHA256
1aaa9aef39cb3c0a854ecb4ca7d3b213458f302025e0ec5bfbdef973cca9111c- Imphash
a1603fe7f02448c6b33687ddb9304c7f- Authentihash MD5
89184d56336f62fecc67f644b1ec4219- Authentihash SHA1
cd773a4b5aef78bda651069b9304e4d5e2033cb9- Authentihash SHA256
c7ba2720675aada538c47fa9e8950a81b6df23f63fa181680e6232651abffbef- Machine
- AMD64
- Version
- 1.0.1.0 built by: WinDDK
- Publisher
- PowerTool
kEvP64.sysSample 6 · HVCI FALSE
- MD5
81b72492d45982cd7a4a138676329fd6- SHA1
569f4605c65c2a217b28aefeb8570f9ea663e4b7- SHA256
d9500af86bf129d06b47bcfbc4b23fcc724cfbd2af58b03cdb13b26f8f50d65e- Imphash
4fb27d2712ef4afdb67e0921d64a5f1e- Authentihash MD5
f9ec21687228b70cfe92917d228b5c89- Authentihash SHA1
693b84a12ac160d492f50b7dc261aa081224313d- Authentihash SHA256
15d44fa77f8d922b5cf03425116c394eefc20ae9a082d3d7f10e68b832be36e7- Machine
- AMD64
- Version
- 1.0.1.0 built by: WinDDK
- Publisher
- PowerTool
kEvP64.sysSample 7 · HVCI FALSE
- MD5
2a5ccd95292f03f0dd4899d18b55b428- SHA1
4927d843577bada119a17b249ff4e7f5e9983a92- SHA256
7c0f77d103015fc29379ba75d133dc3450d557b0ba1f7495c6b43447abdae230- Imphash
f5030145594c486434040aa2636a5dde- Authentihash MD5
6450bc1b911cd59bdc4a3c8643b98d39- Authentihash SHA1
84b16f661e1899c09a2e3f3fe98b55c5f41e53bd- Authentihash SHA256
36238dc2e5236fca63e81a81855e46218f5bc52591bb4f74996a2aaeadc581a1- Machine
- AMD64
- Version
- 1.0.1.0 built by: WinDDK
- Publisher
- PowerTool
Recorded command
sc.exe create kEvP64.sys binPath=C:\windows\temp\kEvP64.sys type=kernel && sc.exe start kEvP64.sysElevate privileges · Privileges: kernel · OS: Windows 10