← Back to driver explorer
Driver intelligenceVulnerableVerified

kbdcap64.sys

Description not recorded.

UUID / 6a7d882b-3d9d-4334-be5f-2e29c6bf9ff8ADDED / 2023-01-09AUTHOR / Michael Haag

Known samples 3

0 recorded TRUE · 3 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

kbdcap64.sysSample 1 · HVCI FALSE
Authentihash SHA1
83660d245fe618ecafe4900ac1e2ad0292c2da2a
Authentihash SHA256
72b99147839bcfb062d29014ec09fe20a8f261748b5925b00171ef3cb849a4c1
Machine
Not recorded
Version
Not recorded
Publisher
Not recorded
kbdcap64.sysSample 2 · HVCI FALSE
MD5
13bd61916343d94ebefc9a7911d7bf88
SHA1
44a3a00394a6d233a27189482852babf070ffebe
SHA256
97030f3c81906334429afebbf365a89b66804ed890cd74038815ca18823d626c
Imphash
b679ac08daf4b4ce8a58d85a8e0904ac
Authentihash MD5
038cbc948ff5ba06ac0b54ca31401fe4
Authentihash SHA1
83660d245fe618ecafe4900ac1e2ad0292c2da2a
Authentihash SHA256
72b99147839bcfb062d29014ec09fe20a8f261748b5925b00171ef3cb849a4c1
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
kbdcap64.sysSample 3 · HVCI FALSE
MD5
91203acddac81511d17a68a030d063a8
SHA1
f5293ac70d75cdfe580ff6a9edcc83236012eaf1
SHA256
0b8887921e4a22e24fd058ba5ac40061b4bb569ac7207b9548168af9d6995e7c
Imphash
b679ac08daf4b4ce8a58d85a8e0904ac
Authentihash MD5
038cbc948ff5ba06ac0b54ca31401fe4
Authentihash SHA1
83660d245fe618ecafe4900ac1e2ad0292c2da2a
Authentihash SHA256
72b99147839bcfb062d29014ec09fe20a8f261748b5925b00171ef3cb849a4c1
Machine
AMD64
Version
Not recorded
Publisher
Not recorded

Recorded command

sc.exe create kbdcap64.sys binPath=C:\windows\temp\kbdcap64.sys type=kernel && sc.exe start kbdcap64.sys

Elevate privileges · Privileges: kernel · OS: Windows 10

Research & references