← Back to driver explorer
Driver intelligenceVulnerableVerified
tboflhelper.sys
Northwave Cyber Security contributed this driver based on in-house research. The driver has a CVSSv3 score of 8.8, indicating a privelege escalation impact. This vulnerability could potentially be exploited for privilege escalation or other malicious activities.
Known samples 1
1 recorded TRUE · 0 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.
tboflhelper.sysSample 1 · HVCI TRUE
- MD5
6d810fbf251792ec3bfb5aeef2462914- SHA1
a7bd1f9db3bf90d2c9e55b344a0b60de1598ec21- SHA256
aa20aa2316cd6d203146bd2bc5b7466ba7b83a8500654a688172bcafa82ab168- Imphash
d93807b520bd3b5df509f43a0e8cda9e- Authentihash MD5
4298f516b4ad74f5c188b243a2e9c3ff- Authentihash SHA1
3e13f30ded63436eae8d27fc21db4bddd756742e- Authentihash SHA256
ae095718a860962d213622b719f8dbcde190e4bedc2cd92e3865efaede65380f- Machine
- AMD64
- Version
- 1.00
- Publisher
- TeraByte, Inc.
Recorded command
sc.exe create tboflhelper binPath=C:\windows\temp\tboflhelper.sys type=kernel && sc.exe start tboflhelperElevate privileges · Privileges: kernel · OS: Windows 10
Research & references
Acknowledgement: Northwave Cyber Security