← Back to driver explorer
Driver intelligenceVulnerableVerified
vsapint.sys
A vulnerable kernel driver that can be used to disable Code Integrity
Known samples 1
0 recorded TRUE · 0 recorded FALSE · 1 unknown for loading despite HVCI. Results apply to individual samples.
vsapint.sysSample 1 · HVCI unknown
- MD5
3e62bffd59054488001977738bb917c6- SHA1
109f48aad567df4dbb5a2b33b1baa5db0fa9e422- SHA256
0e674d7e96e2e2e33ca96a5537cd4dd9db247249131ac91c44ebe9764efbfffe- Imphash
78945e44f49de050f1aa5477c5f78ab8- Authentihash MD5
46f3e2fe2824a0283fe717c0fe89b567- Authentihash SHA1
5ecef80a764c8e52ca66ad0febbce6e09aa2c1ea- Authentihash SHA256
7e748ee7c0caaacbded97da7d2dd307de6520004a32bd96980e39523a19f744b- Machine
- AMD64
- Version
- Not recorded
- Publisher
- Not recorded
Recorded command
sc.exe create vsapint binPath=C:\windows\temp\vsapint.sys type=kernel && sc.exe start vsapintElevate privileges · Privileges: kernel · OS: Windows 10
Research & references
Acknowledgement: Andrea Monzani, Davide Netti, Antonio Parata