# Driver_Hide_And_Camouflage


Due to the use of a large number of Windows unexported functions, Need to modify InitAllOffSet() at Kernel_PDB.c


Win10 and Win11 tested for 40+hours without being detected by patchguard



## Hide:

Driver loaded( Test_Drv.sys ),But ARK Not found:

![](https://github.com/IcEy-999/Drv_Hide_And_Camouflage/blob/main/picture/ARKHide.png)



## Camouflage:

1:Test_Drv.sys -----> 360AntiHacker64.sys

Unsigned driver disguised as 360 driver

![](https://github.com/IcEy-999/Drv_Hide_And_Camouflage/blob/main/picture/Ark.png)

Look at the device name, this is my driver and device

![](https://github.com/IcEy-999/Drv_Hide_And_Camouflage/blob/main/picture/HRJ.png)


2: Test_Drv.sys -----> EasyAntiCheat.sys


![](https://github.com/IcEy-999/Drv_Hide_And_Camouflage/blob/main/picture/eac2.png)