other

Microsoft Windows Hardware Compatibility Publisher

The Microsoft signing identity applied to third-party drivers that pass its attestation and compatibility pipeline, which Windows treats as a trusted publisher at load time.

Known aliases

WHCP

Relationships

No evidence-backed relationships are recorded.

Current clusters

build1 publisher

A Microsoft-signed driver in a fake LastPass installer kills 145 security processes from the kernel

Alinubx.sys terminates security agents from kernel mode under a Microsoft Windows Hardware Compatibility Publisher signature dated March 2023, and nothing in the driver has to be exploited for that to work.

Publishers:dev.to

Reality

Evidence62
Adoption40
Hype gap+8
Incentives55
Confidence55