Driver intelligenceVulnerableVerified

BdApiUtil64.sys

Driver can be used to load unsigned drivers

UUID / f8ed41ef-18f0-441c-99b8-def062214d0eADDED / 2025-09-18AUTHOR / Michael Haag

Known samples 2

0 recorded TRUE · 0 recorded FALSE · 2 unknown for loading despite HVCI. Results apply to individual samples.

47ec51b5f0ede1e70bd66f3f0152f9eb536d534565dbb7fcc3a05f542dbe4428Sample 1 · HVCI unknown

MD5: ced47b89212f3260ebeb41682a4b95ec
SHA1: 148c0cde4f2ef807aea77d7368f00f4c519f47ef
SHA256: 47ec51b5f0ede1e70bd66f3f0152f9eb536d534565dbb7fcc3a05f542dbe4428
Imphash: 1b38467bccadb1f8182353cca9fee8ea
Authentihash MD5: a9f56cafe8128c3e792ab5d072757001
Authentihash SHA1: b1fa8dd82cdfbd05845e2eb0f10714b4e058ace4
Authentihash SHA256: 78ccae1341d6546c9d238e824a2261a961bd9a843f6d951d649fbc09ad0e01a0
Machine: AMD64
Version: 5,0,3,84333
Publisher: Baidu, Inc.

googleApiUtil64.sysSample 2 · HVCI unknown

MD5: 5f8df2c0389ead04ce2e69d632edcdbd
SHA1: ec296f9501ad71e430810cb5cdc38d954d4ba536
SHA256: f6ee01303cf1d68015eee49f7dc7f26151a04ae642a47e49c70806931ce652d3
Imphash: 7f0cfc7ad79e21e810f2f8b940b85130
Authentihash MD5: e36fc4ce8e1c5c462228886bcc11147e
Authentihash SHA1: a7a0e8fa40e2579ac338abe3ddeb34973c4eceea
Authentihash SHA256: a62a024b4db990e938d5ae7d83c2f2bf419ff1236e53adad216b8b0fb96257bd
Machine: AMD64
Version: 5,4,3,125107
Publisher: Baidu, Inc.

sc.exe create BdApiUtil64.sys binPath=C:\windows\temp\BdApiUtil64.sys type=kernel && sc.exe start BdApiUtil64.sys

Elevate privileges · Privileges: kernel · OS: Windows 10