pvipvmkg.sys

Microsoft Malware Protection

Microsoft Corporation

It runs as a Windows 64-bit kernel mode device driver named “pvipvmkg”.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft Malware Protection

Description:
Boot Time Removal Tool

Version:
1.1.0036.0

MD5:
adcfdb071d98de433842d54a6566724c

SHA-1:
2dd2f5bc5e185b1e87bf7f0d5a3aee6f280d5ca0

SHA-256:
466395e00d2652367e60bd98af386d80f7faa278ab549f06b4ee86ece9c4ec0d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/25/2024 9:34:41 AM UTC  (today)

File size:
53.8 KB (55,104 bytes)

Product version:
1.1.0036.0

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
BTR.sys

File type:
Driver (Win64 SYS)

Language:
English (United States)

Common path:
C:\Windows\System32\drivers\pvipvmkg.sys

Digital Signature
Authority:
Microsoft Corporation

Valid from:
5/16/2013 8:48:57 PM

Valid to:
8/16/2014 8:48:57 PM

Subject:
CN=Microsoft Windows Hardware Compatibility Publisher, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Windows Hardware Compatibility PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
330000000B19302C31B264785D00010000000B

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
768:lQVIdAhl7hLKNBGPPI2mLZnYuQoeaElvboOdW0t3SfDXD482w:lQVSEVLKNImLZnYNoXrFD482w

Driver
Display name:
pvipvmkg

Type:
Kernel device driver (KernelDriver)