← Back to driver explorer
Driver intelligenceMaliciousVerified
KApcHelper_x64.sys
Vulnerable driving using the stolen Nvidia Certificate.
Known samples 1
1 recorded TRUE · 0 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.
KApcHelper_x64.sysSample 1 · HVCI TRUE
- MD5
0f16a43f7989034641fd2de3eb268bf1- SHA1
cc65bf60600b64feece5575f21ab89e03a728332- SHA256
d7c81b0f3c14844f6424e8bdd31a128e773cb96cccef6d05cbff473f0ccb9f9c- Imphash
4c7cc13a110ccdbb932bb9d7d42efdf4- Authentihash MD5
adb7de0467bd3f92fce34819ec656658- Authentihash SHA1
2c1bc3f623fd9bfdf2ecbe5403da1849c85b8433- Authentihash SHA256
2a30ad675142cf411e7e5f5c53c6423de570a398295b0956130a7a7d77383103- Machine
- AMD64
- Version
- Not recorded
- Publisher
- Not recorded
Recorded command
sc.exe create KApcHelper_x64.sys binPath=C:\windows\temp\KApcHelper_x64.sys type=kernel && sc.exe start KApcHelper_x64.sysElevate privileges · Privileges: kernel · OS: Windows 10