← Back to driver explorer
Driver intelligenceVulnerableVerified

WCPU.sys

Description not recorded.

UUID / 7f645b95-4374-47ae-be1a-e4415308b550ADDED / 2023-01-09AUTHOR / Michael Haag

Known samples 1

0 recorded TRUE · 1 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

WCPU.sysSample 1 · HVCI FALSE
MD5
c1d063c9422a19944cdaa6714623f2ec
SHA1
f36a47edfacd85e0c6d4d22133dd386aee4eec15
SHA256
159e7c5a12157af92e0d14a0d3ea116f91c09e21a9831486e6dc592c93c10980
Imphash
d169b0949781ca2a6efea5a106266a02
Authentihash MD5
1a77777592eb402fe56bcb43d618d02e
Authentihash SHA1
81e3e81048e0f323eee8d04aa9b291d77caa21e0
Authentihash SHA256
54bc506b2f0cf66d12d4a2415ab743c2b2a1f3079089e3e0c0c1f3f49dd7335e
Machine
AMD64
Version
6.0.6000.16386 built by: WinDDK
Publisher
Windows (R) Codename Longhorn DDK provider
View on VirusTotal

Recorded command

sc.exe create WCPU.sys binPath=C:\windows\temp\WCPU.sys type=kernel && sc.exe start WCPU.sys

Elevate privileges · Privileges: kernel · OS: Windows 10

Research & references