Now have a RING0 hidden driver and injects its x64 dll payload into running process to talk back to the c2 using APC to talk back to RING3, ..