Driver intelligenceVulnerableVerified

RTCore64.sys

Description not recorded.

UUID / 275c80c5-a67c-4536-b29e-4e481242cb01ADDED / 2023-05-06AUTHOR / Nasreddine Bencherchali

Known samples 33

2 recorded TRUE · 31 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

RTCore64.sysSample 1 · HVCI FALSE

MD5: 3ecd3ca61ffc54b0d93f8b19161b83da
SHA1: 4f376b1d1439477a426ef3c52e8c1c69c2cb5305
SHA256: 03e0581432f5c8cc727a8aa387f5b69ff84d38d0df6f1226c19c6e960a81e1e9
Imphash: 543f80399f79401471523d335ea61642
Authentihash MD5: a17d227444e090ff69e24fcb6d43162b
Authentihash SHA1: 43d3a3c1f7b14cfcc051cae2534dbbbb4c7fc120
Authentihash SHA256: b8eb26b6f79020ae988e4fb752dc06e1b6779749bf4f8df2872fc2b92bab8020
Machine: AMD64
Version: Not recorded
Publisher: Not recorded

Download vulnerable sample View on VirusTotal

RTCore64.sysSample 2 · HVCI FALSE

MD5: 925ee3f3227c3b63e141ba16bd83f024
SHA1: 57ea07ab767f11c81c6468b1f8a3d5f4618b800b
SHA256: 0466dac557ee161503f5dfbd3549f81ec760c3d6c7c4363a21a03e7a3f66aca8
Imphash: 690a0fb27a0c47c785d6bbbfc2e56501
Authentihash MD5: 55466195f0b2f4afc4243b43a806e6d9
Authentihash SHA1: 38b353d8480885de5dcf299deca99ce4f26a1d20
Authentihash SHA256: 5182caf10de9cec0740ecde5a081c21cdc100d7eb328ffe6f3f63183889fec6b
Machine: AMD64
Version: Not recorded
Publisher: Not recorded

Download vulnerable sample View on VirusTotal

rtcore64.sysSample 3 · HVCI FALSE

MD5: 483abeee17e4e30a760ec8c0d6d31d6d
SHA1: f56fec3f2012cd7fc4528626debc590909ed74b6
SHA256: 077aa8ff5e01747723b6d24cc8af460a7a00f30cd3bc80e41cc245ceb8305356
Imphash: b0356152212dc6e33752847235064fb0
Authentihash MD5: 5860da7a094c5f2ff2787476c37b4b35
Authentihash SHA1: da1bd3ad4a8fe1e28c1de28a7bf66ad82da0dd29
Authentihash SHA256: 61a1f530a5d47339275657d7883911d64f64909569cf13d2e6868df01a2a72cb
Machine: AMD64
Version: Not recorded
Publisher: Not recorded

Download vulnerable sample View on VirusTotal

RTCore64.sysSample 4 · HVCI FALSE

MD5: c508d28487121828c3a1c2b57acb05be
SHA1: 7c43d43d95232e37aa09c5e2bcd3a7699d6b7479
SHA256: 0cf6c6c2d231eaf67dfc87561cc9a56ecef89ab50baafee5a67962748d51faf3
Imphash: 690a0fb27a0c47c785d6bbbfc2e56501
Authentihash MD5: 55466195f0b2f4afc4243b43a806e6d9
Authentihash SHA1: 38b353d8480885de5dcf299deca99ce4f26a1d20
Authentihash SHA256: 5182caf10de9cec0740ecde5a081c21cdc100d7eb328ffe6f3f63183889fec6b
Machine: AMD64
Version: Not recorded
Publisher: Not recorded

Download vulnerable sample View on VirusTotal

RTCore64.sysSample 5 · HVCI FALSE

MD5: 08c1bce6627764c9f8c79439555c5636
SHA1: 4d4535c111c7b568cb8a3bece27a97d738512a6b
SHA256: 1766fd66f846d9a21e648d649ad35d1ff94f8ca17a40a9a738444d6b8e07aacb
Imphash: cde9174249f04dad0f79890c976c0792
Authentihash MD5: cfe667280acf69d4b5d0e2dbc76510e4
Authentihash SHA1: b3249bacda6e43aa2c46c2af802c9ee0b7e2fd7b
Authentihash SHA256: 3c9829a16eb85272b0e1a2917feffaab8ddb23e633b168b389669339a0cee0b5
Machine: AMD64
Version: Not recorded
Publisher: Not recorded

Download vulnerable sample View on VirusTotal

RTCore64.sysSample 6 · HVCI FALSE

MD5: 2d91d45cd09dfc3f8e89da1c261fd1ac
SHA1: 634b1e9d0aafac1ec4373291cefb52c121e8d265
SHA256: 18712a063574bfec315d58577dfe413ab45b650e54747d1e18a56c3c7337a12c
Imphash: 543f80399f79401471523d335ea61642
Authentihash MD5: a17d227444e090ff69e24fcb6d43162b
Authentihash SHA1: 43d3a3c1f7b14cfcc051cae2534dbbbb4c7fc120
Authentihash SHA256: b8eb26b6f79020ae988e4fb752dc06e1b6779749bf4f8df2872fc2b92bab8020
Machine: AMD64
Version: Not recorded
Publisher: Not recorded

Download vulnerable sample View on VirusTotal

RTCore64.sysSample 7 · HVCI FALSE

MD5: bcd60bf152fdec05cd40562b466be252
SHA1: 6ce0094a9aacdc050ff568935014607b8f23ff00
SHA256: 3c5d7069f85ec1d6f58147431f88c4d7c48df73baf94ffdefd664f2606baf09c
Imphash: b0356152212dc6e33752847235064fb0
Authentihash MD5: 5860da7a094c5f2ff2787476c37b4b35
Authentihash SHA1: da1bd3ad4a8fe1e28c1de28a7bf66ad82da0dd29
Authentihash SHA256: 61a1f530a5d47339275657d7883911d64f64909569cf13d2e6868df01a2a72cb
Machine: AMD64
Version: Not recorded
Publisher: Not recorded

Download vulnerable sample View on VirusTotal

RTCore64.sysSample 8 · HVCI FALSE

MD5: 69ac6165912cb263a656497cc70155e6
SHA1: 722aa0fa468b63c5d7ea308d77230ae3169d5f83
SHA256: 3ff50c67d51553c08dcb7c98342f68a0f54ad6658c5346c428bdcd1f185569f6
Imphash: cde9174249f04dad0f79890c976c0792
Authentihash MD5: cfe667280acf69d4b5d0e2dbc76510e4
Authentihash SHA1: b3249bacda6e43aa2c46c2af802c9ee0b7e2fd7b
Authentihash SHA256: 3c9829a16eb85272b0e1a2917feffaab8ddb23e633b168b389669339a0cee0b5
Machine: AMD64
Version: Not recorded
Publisher: Not recorded

Download vulnerable sample View on VirusTotal

RTCore64.sysSample 9 · HVCI TRUE

MD5: 4eb4069c230a5dc40cd5d60d2cb3e0d0
SHA1: cc3e5e45aca5b670035dfb008f0a88cecfd91cf7
SHA256: 40061b30b1243be76d5283cbc8abfe007e148097d4de7337670ff1536c4c7ba1
Imphash: 37f7c6238c9ce110408e01ae1bc45635
Authentihash MD5: bcd9f192e2f9321ed549c722f30206e5
Authentihash SHA1: 8498265d4ca81b83ec1454d9ec013d7a9c0c87bf
Authentihash SHA256: 606beced7746cdb684d3a44f41e48713c6bbe5bfb1486c52b5cca815e99d31b4
Machine: AMD64
Version: Not recorded
Publisher: Not recorded

Download vulnerable sample View on VirusTotal

RTCore64.sysSample 10 · HVCI FALSE

MD5: 680dcb5c39c1ec40ac3897bb3e9f27b9
SHA1: 431550db5c160b56e801f220ceeb515dc16e68d2
SHA256: 4b4c925c3b8285aeeab9b954e8b2a0773b4d2d0e18d07d4a9d268f4be90f6cae
Imphash: 543f80399f79401471523d335ea61642
Authentihash MD5: a17d227444e090ff69e24fcb6d43162b
Authentihash SHA1: 43d3a3c1f7b14cfcc051cae2534dbbbb4c7fc120
Authentihash SHA256: b8eb26b6f79020ae988e4fb752dc06e1b6779749bf4f8df2872fc2b92bab8020
Machine: AMD64
Version: Not recorded
Publisher: Not recorded

Download vulnerable sample View on VirusTotal

RTCore64.sysSample 11 · HVCI FALSE

MD5: f8fe655b7d63dbdc53b0983a0d143028
SHA1: d9c1913a6c76b883568910094dfa1d67aad80c84
SHA256: 53eaefba7e7dca9ab74e385abf18762f9f1aa51594e7f7db5ba612d6c787dd7e
Imphash: 690a0fb27a0c47c785d6bbbfc2e56501
Authentihash MD5: 55466195f0b2f4afc4243b43a806e6d9
Authentihash SHA1: 38b353d8480885de5dcf299deca99ce4f26a1d20
Authentihash SHA256: 5182caf10de9cec0740ecde5a081c21cdc100d7eb328ffe6f3f63183889fec6b
Machine: AMD64
Version: Not recorded
Publisher: Not recorded

Download vulnerable sample View on VirusTotal

RTCore64.sysSample 12 · HVCI FALSE

MD5: 880611326b768c4922e9da8a8effc582
SHA1: 96323381a98790b8ffac1654cb65e12dbbe6aff1
SHA256: 5f20541f859f21b3106e12d37182b1ea39bb75ffcfcddb2ece4f6edd42c0bab2
Imphash: cde9174249f04dad0f79890c976c0792
Authentihash MD5: cfe667280acf69d4b5d0e2dbc76510e4
Authentihash SHA1: b3249bacda6e43aa2c46c2af802c9ee0b7e2fd7b
Authentihash SHA256: 3c9829a16eb85272b0e1a2917feffaab8ddb23e633b168b389669339a0cee0b5
Machine: AMD64
Version: Not recorded
Publisher: Not recorded

Download vulnerable sample View on VirusTotal

RTCore64.sysSample 13 · HVCI FALSE

MD5: 515c75d77c64909690c18c08ef3fc310
SHA1: 7877bd7da617ec92a5c47f0da1f0abcf6484d905
SHA256: 5f7e47d728ac3301eb47b409801a0f4726a435f78f1ed02c30d2a926259c71f3
Imphash: 690a0fb27a0c47c785d6bbbfc2e56501
Authentihash MD5: 55466195f0b2f4afc4243b43a806e6d9
Authentihash SHA1: 38b353d8480885de5dcf299deca99ce4f26a1d20
Authentihash SHA256: 5182caf10de9cec0740ecde5a081c21cdc100d7eb328ffe6f3f63183889fec6b
Machine: AMD64
Version: Not recorded
Publisher: Not recorded

Download vulnerable sample View on VirusTotal

RTCore64.sysSample 14 · HVCI FALSE

MD5: 6fa271b6816affaef640808fc51ac8af
SHA1: 5291b17205accf847433388fe17553e96ad434ec
SHA256: 696679114f6a106ec94c21e2a33fe17af86368bcf9a796aaea37ea6e8748ad6a
Imphash: 690a0fb27a0c47c785d6bbbfc2e56501
Authentihash MD5: 55466195f0b2f4afc4243b43a806e6d9
Authentihash SHA1: 38b353d8480885de5dcf299deca99ce4f26a1d20
Authentihash SHA256: 5182caf10de9cec0740ecde5a081c21cdc100d7eb328ffe6f3f63183889fec6b
Machine: AMD64
Version: Not recorded
Publisher: Not recorded

Download vulnerable sample View on VirusTotal

RTCore64.sysSample 15 · HVCI FALSE

MD5: d63c9c1a427a134461258b7b8742858f
SHA1: ef0504dd90eb451f51d2c4f987fb7833c91c755b
SHA256: 6cb6e23ba516570bbd158c32f7c7c99f19b24ca4437340ecb39253662afe4293
Imphash: 690a0fb27a0c47c785d6bbbfc2e56501
Authentihash MD5: 55466195f0b2f4afc4243b43a806e6d9
Authentihash SHA1: 38b353d8480885de5dcf299deca99ce4f26a1d20
Authentihash SHA256: 5182caf10de9cec0740ecde5a081c21cdc100d7eb328ffe6f3f63183889fec6b
Machine: AMD64
Version: Not recorded
Publisher: Not recorded

Download vulnerable sample View on VirusTotal

RTCore64.sysSample 16 · HVCI FALSE

MD5: 3a7c69293fcd5688cc398691093ec06a
SHA1: aadebbcbde0e7edd35e29d98871289a75e744aad
SHA256: 7da6113183328d4fddf6937c0c85ef65ba69bfe133b1146193a25bcf6ae1f9dd
Imphash: 543f80399f79401471523d335ea61642
Authentihash MD5: a17d227444e090ff69e24fcb6d43162b
Authentihash SHA1: 43d3a3c1f7b14cfcc051cae2534dbbbb4c7fc120
Authentihash SHA256: b8eb26b6f79020ae988e4fb752dc06e1b6779749bf4f8df2872fc2b92bab8020
Machine: AMD64
Version: Not recorded
Publisher: Not recorded

Download vulnerable sample View on VirusTotal

RTCore64.sysSample 17 · HVCI FALSE

MD5: d5e76d125d624f8025d534f49e3c4162
SHA1: 8a23735d9a143ad526bf73c6553e36e8a8d2e561
SHA256: 7f5dc63e5742096e4accaca39ae77a2a2142b438c10f97860dee4054b51d3b35
Imphash: 543f80399f79401471523d335ea61642
Authentihash MD5: a17d227444e090ff69e24fcb6d43162b
Authentihash SHA1: 43d3a3c1f7b14cfcc051cae2534dbbbb4c7fc120
Authentihash SHA256: b8eb26b6f79020ae988e4fb752dc06e1b6779749bf4f8df2872fc2b92bab8020
Machine: AMD64
Version: Not recorded
Publisher: Not recorded

Download vulnerable sample View on VirusTotal

rtcore64.sysSample 18 · HVCI FALSE

MD5: ecdc79141b7002b246770d01606504f2
SHA1: 4d14d25b540bf8623d09c06107b8ca7bb7625c30
SHA256: 8399e5afd8e3e97139dffb1a9fb00db2186321b427f164403282217cab067c38
Imphash: 690a0fb27a0c47c785d6bbbfc2e56501
Authentihash MD5: 55466195f0b2f4afc4243b43a806e6d9
Authentihash SHA1: 38b353d8480885de5dcf299deca99ce4f26a1d20
Authentihash SHA256: 5182caf10de9cec0740ecde5a081c21cdc100d7eb328ffe6f3f63183889fec6b
Machine: AMD64
Version: Not recorded
Publisher: Not recorded

Download vulnerable sample View on VirusTotal

RTCore64.sysSample 19 · HVCI FALSE

MD5: 3aacaa62758fa6d178043d78ba89bebc
SHA1: f77413ec3bd9ed3f31fc53a4c755dc4123e0068f
SHA256: 862d0ff27bb086145a33b9261142838651b0d2e1403be321145e197600eb5015
Imphash: 690a0fb27a0c47c785d6bbbfc2e56501
Authentihash MD5: 936e49d3eec0a2f433e9d0115a38a2b6
Authentihash SHA1: 5717bf3e520accfff5ad9943e53a3b118fb67f2e
Authentihash SHA256: 918d2e68a724b58d37443aea159e70bf8b1b5ebb089c395cad1d62745ecdaa19
Machine: AMD64
Version: Not recorded
Publisher: Not recorded

Download vulnerable sample View on VirusTotal

rtcore64.sysSample 20 · HVCI FALSE

MD5: 4e4b9bdcc6b8d97828ae1972d750a08d
SHA1: 82034032b30bbb78d634d6f52c7d7770a73b1b3c
SHA256: 9f1025601d17945c3a47026814bdec353ee363966e62dba7fe2673da5ce50def
Imphash: 690a0fb27a0c47c785d6bbbfc2e56501
Authentihash MD5: 936e49d3eec0a2f433e9d0115a38a2b6
Authentihash SHA1: 5717bf3e520accfff5ad9943e53a3b118fb67f2e
Authentihash SHA256: 918d2e68a724b58d37443aea159e70bf8b1b5ebb089c395cad1d62745ecdaa19
Machine: AMD64
Version: Not recorded
Publisher: Not recorded

Download vulnerable sample View on VirusTotal

RTCore64.sysSample 21 · HVCI FALSE

MD5: 821adf5ba68fd8cc7f4f1bc915fe47de
SHA1: eb0021e29488c97a0e42a084a4fe5a0695eccb7b
SHA256: aafb95a443911e4c67d4e45ffa83cca103c91b42915b81100534dc439bec0c1b
Imphash: 690a0fb27a0c47c785d6bbbfc2e56501
Authentihash MD5: 936e49d3eec0a2f433e9d0115a38a2b6
Authentihash SHA1: 5717bf3e520accfff5ad9943e53a3b118fb67f2e
Authentihash SHA256: 918d2e68a724b58d37443aea159e70bf8b1b5ebb089c395cad1d62745ecdaa19
Machine: AMD64
Version: Not recorded
Publisher: Not recorded

Download vulnerable sample View on VirusTotal

RTCore64.sysSample 22 · HVCI FALSE

MD5: 0d5774527af6e30905317839686b449d
SHA1: 75d0b9bdfa79e5d43ec8b4c0996f559075723de7
SHA256: ae6fb53e4d8122dba3a65e5fa59185b36c3ac9df46e82fcfb6731ab55c6395aa
Imphash: 690a0fb27a0c47c785d6bbbfc2e56501
Authentihash MD5: 936e49d3eec0a2f433e9d0115a38a2b6
Authentihash SHA1: 5717bf3e520accfff5ad9943e53a3b118fb67f2e
Authentihash SHA256: 918d2e68a724b58d37443aea159e70bf8b1b5ebb089c395cad1d62745ecdaa19
Machine: AMD64
Version: Not recorded
Publisher: Not recorded

Download vulnerable sample View on VirusTotal

RTCore64.sysSample 23 · HVCI FALSE

MD5: 18439fe2aaeddfd355ef88091cb6c15f
SHA1: 52d9bbe41eea0b60507c469f7810d80343c03c2b
SHA256: b1867d13a4cab66a76f4d4448824ca0cb3a176064626f9618c0c103ee3cb4f47
Imphash: 690a0fb27a0c47c785d6bbbfc2e56501
Authentihash MD5: 936e49d3eec0a2f433e9d0115a38a2b6
Authentihash SHA1: 5717bf3e520accfff5ad9943e53a3b118fb67f2e
Authentihash SHA256: 918d2e68a724b58d37443aea159e70bf8b1b5ebb089c395cad1d62745ecdaa19
Machine: AMD64
Version: Not recorded
Publisher: Not recorded

Download vulnerable sample View on VirusTotal

RTCore64.sysSample 24 · HVCI FALSE

MD5: 4b60ef388071e0baf299496e3d6590ae
SHA1: cf9b4d606467108e4b845ecb8ede2f5865bd6c33
SHA256: b61869b7945be062630f1dd4bae919aecee8927f7e1bc3954a21ff763f4c0867
Imphash: 690a0fb27a0c47c785d6bbbfc2e56501
Authentihash MD5: 55466195f0b2f4afc4243b43a806e6d9
Authentihash SHA1: 38b353d8480885de5dcf299deca99ce4f26a1d20
Authentihash SHA256: 5182caf10de9cec0740ecde5a081c21cdc100d7eb328ffe6f3f63183889fec6b
Machine: AMD64
Version: Not recorded
Publisher: Not recorded

Download vulnerable sample View on VirusTotal

RTCore64.sysSample 25 · HVCI FALSE

MD5: aa9adcf64008e13d7e68b56fdd307ead
SHA1: 562368c390b0dadf2356b8b3c747357ecef2dfc8
SHA256: bc13adeb6bf62b1e10ef41205ef92382e6c18d6a20669d288a0b11058e533d63
Imphash: 7363079b9aae7d58bd33c691a613c83c
Authentihash MD5: 538e5e595c61d2ea8defb7b047784734
Authentihash SHA1: 4a68c2d7a4c471e062a32c83a36eedb45a619683
Authentihash SHA256: 478c36f8af7844a80e24c1822507beef6314519185717ec7ae224a0e04b2f330
Machine: AMD64
Version: Not recorded
Publisher: Not recorded

Download vulnerable sample View on VirusTotal

RTCore64.sysSample 26 · HVCI FALSE

MD5: 6a094d8e4b00dd1d93eb494099e98478
SHA1: fdf4a0af89f0c8276ad6d540c75beece380703ab
SHA256: d7ddf874304556f8a10942a29b3d387cb5155a7419f87813557fe728cb14806d
Imphash: 7363079b9aae7d58bd33c691a613c83c
Authentihash MD5: 538e5e595c61d2ea8defb7b047784734
Authentihash SHA1: 4a68c2d7a4c471e062a32c83a36eedb45a619683
Authentihash SHA256: 478c36f8af7844a80e24c1822507beef6314519185717ec7ae224a0e04b2f330
Machine: AMD64
Version: Not recorded
Publisher: Not recorded

Download vulnerable sample View on VirusTotal

RTCore64.sysSample 27 · HVCI FALSE

MD5: 0fc2653b1c45f08ca0abd1eb7772e3c0
SHA1: 94144619920bd086028bb5647b1649a35438028c
SHA256: df0cc4e5c9802f8edaefeb130e375cad56b2c5490d8ebd77d8dbdcc6fdc7ecb6
Imphash: 690a0fb27a0c47c785d6bbbfc2e56501
Authentihash MD5: 55466195f0b2f4afc4243b43a806e6d9
Authentihash SHA1: 38b353d8480885de5dcf299deca99ce4f26a1d20
Authentihash SHA256: 5182caf10de9cec0740ecde5a081c21cdc100d7eb328ffe6f3f63183889fec6b
Machine: AMD64
Version: Not recorded
Publisher: Not recorded

Download vulnerable sample View on VirusTotal

RTCore64.sysSample 28 · HVCI FALSE

MD5: d424f369f7e010249619f0ecbe5f3805
SHA1: 5e4b93591f905854fb870011464291c3508aff44
SHA256: e2d8dd5dacc24051709f55a35184f5f99aef957a83bd358b0608b4479e1ec24f
Imphash: 690a0fb27a0c47c785d6bbbfc2e56501
Authentihash MD5: 55466195f0b2f4afc4243b43a806e6d9
Authentihash SHA1: 38b353d8480885de5dcf299deca99ce4f26a1d20
Authentihash SHA256: 5182caf10de9cec0740ecde5a081c21cdc100d7eb328ffe6f3f63183889fec6b
Machine: AMD64
Version: Not recorded
Publisher: Not recorded

Download vulnerable sample View on VirusTotal

RTCore64.sysSample 29 · HVCI FALSE

MD5: 9d884ecd3b6c3f2509851ea15ffefbef
SHA1: e11f48631c6e0277e21a8bdf9be513651305f0d5
SHA256: e50b25d94c1771937b2f632e10eea875ac6b19c57da703d52e23ad2b6299f0ae
Imphash: 690a0fb27a0c47c785d6bbbfc2e56501
Authentihash MD5: 55466195f0b2f4afc4243b43a806e6d9
Authentihash SHA1: 38b353d8480885de5dcf299deca99ce4f26a1d20
Authentihash SHA256: 5182caf10de9cec0740ecde5a081c21cdc100d7eb328ffe6f3f63183889fec6b
Machine: AMD64
Version: Not recorded
Publisher: Not recorded

Download vulnerable sample View on VirusTotal

rtcore64.sysSample 30 · HVCI FALSE

MD5: 5b1e1a9dade81f1e80fdc0a2d3f9006e
SHA1: 9b8c7eda28bfad07ffe5f84a892299bc7e118442
SHA256: f37d609ea1f06660d970415dd3916c4c153bb5940bf7d2beb47fa34e8a8ffbfc
Imphash: 543f80399f79401471523d335ea61642
Authentihash MD5: a17d227444e090ff69e24fcb6d43162b
Authentihash SHA1: 43d3a3c1f7b14cfcc051cae2534dbbbb4c7fc120
Authentihash SHA256: b8eb26b6f79020ae988e4fb752dc06e1b6779749bf4f8df2872fc2b92bab8020
Machine: AMD64
Version: Not recorded
Publisher: Not recorded

Download vulnerable sample View on VirusTotal

RTCore64.sysSample 31 · HVCI FALSE

MD5: 24061b0958874c1cb2a5a8e9d25482d4
SHA1: 282fca60f0c37eb6d76400bca24567945e43c6d8
SHA256: f84f8173242b95f9f3c4fea99b5555b33f9ce37ca8188b643871d261cb081496
Imphash: cde9174249f04dad0f79890c976c0792
Authentihash MD5: cfe667280acf69d4b5d0e2dbc76510e4
Authentihash SHA1: b3249bacda6e43aa2c46c2af802c9ee0b7e2fd7b
Authentihash SHA256: 3c9829a16eb85272b0e1a2917feffaab8ddb23e633b168b389669339a0cee0b5
Machine: AMD64
Version: Not recorded
Publisher: Not recorded

Download vulnerable sample View on VirusTotal

RTCore64.sysSample 32 · HVCI TRUE

MD5: 70196d88c03f2ea557281b24dad85de5
SHA1: 55015f64783ddd148674a74d8137bcd6ccd6231d
SHA256: f9895458e73d4b0ef01eda347fb695bb00e6598d9f5e2506161b70ad96bb7298
Imphash: 7363079b9aae7d58bd33c691a613c83c
Authentihash MD5: 538e5e595c61d2ea8defb7b047784734
Authentihash SHA1: 4a68c2d7a4c471e062a32c83a36eedb45a619683
Authentihash SHA256: 478c36f8af7844a80e24c1822507beef6314519185717ec7ae224a0e04b2f330
Machine: AMD64
Version: Not recorded
Publisher: Not recorded

Download vulnerable sample View on VirusTotal

RTCore64.sysSample 33 · HVCI FALSE

MD5: d78a29306f42d42cd48ad6bc6c6a7602
SHA1: 4d516b1c9b7a81de2836ab24ba6b880c11807255
SHA256: bb0742036c82709e02f25f98a9ff37c36a8c228bcaa98e40629fac8cde95b421
Imphash: 690a0fb27a0c47c785d6bbbfc2e56501
Authentihash MD5: 55466195f0b2f4afc4243b43a806e6d9
Authentihash SHA1: 38b353d8480885de5dcf299deca99ce4f26a1d20
Authentihash SHA256: 5182caf10de9cec0740ecde5a081c21cdc100d7eb328ffe6f3f63183889fec6b
Machine: AMD64
Version: Not recorded
Publisher: Not recorded

Download vulnerable sample View on VirusTotal

Recorded command

sc.exe create RTCore64.sys binPath=C:\windows\temp\RTCore64.sys type=kernel && sc.exe start RTCore64.sys

Elevate privileges · Privileges: kernel · OS: Windows 10