← Back to driver explorer
Driver intelligenceVulnerableVerified
AMDRyzenMasterDriver.sys
AMD Ryzen Master drivers affected by CVE-2023-20564 insufficiently validate IOCTL input buffers. A privileged caller can read or write memory through the exposed interface, potentially enabling arbitrary kernel execution.
Known samples 11
0 recorded TRUE · 10 recorded FALSE · 1 unknown for loading despite HVCI. Results apply to individual samples.
AMDRyzenMasterDriver.sysSample 1 · HVCI FALSE
- MD5
f16b44cca74d3c3645e4c0a6bb5c0cb9- SHA1
eceb51233f013e04406da11482324d45e70281c7- SHA256
7e81beae78e1ddbf6c150e15667e1f18783f9b0ab7fbe52c7ab63e754135948d- Imphash
8bbc742eaed888736a715757f0584fb6- Authentihash MD5
56d3a74361bd38be9c8ee476f0063f16- Authentihash SHA1
8facd7c1efbfb3b44cde04cc1b9a1f24d171c2b8- Authentihash SHA256
ab1c74ed1ea4fc7a613aa22fd87ee4251ede260862fdebde2d7d2f00c0f23371- Machine
- AMD64
- Version
- 1.3.0.0
- Publisher
- Advanced Micro Devices
AMDRyzenMasterDriver.sysSample 2 · HVCI unknown
- MD5
130c5aec46bdec8d534df7222d160fdb- SHA1
fac870d438bf62ecd5d5c8c58cc9bfda6f246b8b- SHA256
909de5f21837ea2b13fdc4e5763589e6bdedb903f7c04e1d0b08776639774880- Authentihash MD5
baad4335bf64311b512e159d47cfb3c7- Authentihash SHA1
dbfd5f346b6117941139006b9c7d88a4d9a6b04f- Authentihash SHA256
679de7449908838c031db59234cb4f482fbf5d27d7e02d0c30d5ad9d2f36495f- Machine
- AMD64
- Version
- 1.5.0.0
- Publisher
- Advanced Micro Devices
AMDRyzenMasterDriver.sysSample 3 · HVCI FALSE
- MD5
c1ae820c7add8e4a11d3ff5e112d2662- SHA1
0b7176dbf2f5fce864d4b8adcf03a91c005454fa- SHA256
5c655642fd64e51581d2880cc1a517331b376463e3a85e21ec6e3ed147494a26- Imphash
bb437241f56020db0fcbf8f8629bdb07- Authentihash MD5
e1fa08499730b2697a7c68a9740ee476- Authentihash SHA1
42e77161a86482703d57f910fe555d08d15e19de- Authentihash SHA256
bd417be8b4db16ca9ea564120798d5af4e665bdefb6bbc753822fbf80267ff9c- Machine
- AMD64
- Version
- 1.0.0
- Publisher
- Advanced Micro Devices
AMDRyzenMasterDriver.sysSample 4 · HVCI FALSE
- MD5
013719e840e955c2e4cd9d18c94a2625- SHA1
b74338c91c6effabc02ae0ced180428ab1024c7d- SHA256
9b1ac756e35f795dd91adbc841e78db23cb7165280f8d4a01df663128b66d194- Imphash
bb437241f56020db0fcbf8f8629bdb07- Authentihash MD5
008ebc7b97c6e3c036bc3d51e4166027- Authentihash SHA1
f0a89a5719eff19884d6674bd60c1249876e71b9- Authentihash SHA256
ddc5ff33a19baf1630a92723b5d0103fcc9ca58ee2a548526b9439eec3c97fe8- Machine
- AMD64
- Version
- 1.1.0.0
- Publisher
- Advanced Micro Devices
AMDRyzenMasterDriver.sysSample 5 · HVCI FALSE
- MD5
aa12c1cb47c443c6108bfe7fc1a34d98- SHA1
88d00eff21221f95a0307da229bc9fe1afb6861b- SHA256
af1011c76a22af7be97a0b3e0ce11aca0509820c59fa7c8eeaaa1b2c0225f75a- Imphash
bb437241f56020db0fcbf8f8629bdb07- Authentihash MD5
daaff8865677433e85f79ac4ceb6be54- Authentihash SHA1
588d359fa0e976507d2bad89a24de2d3dab34b64- Authentihash SHA256
0ad2d2fe1b16e42f43788dae1f0f45031b5025ef6bcc52360e18812820682f04- Machine
- AMD64
- Version
- 1.0.0
- Publisher
- Advanced Micro Devices
AMDRyzenMasterDriver.sysSample 6 · HVCI FALSE
- MD5
0490f5961e0980792f5cb5aedf081dd7- SHA1
4786253daac6c60ffc0d2871fdd68023ec93dfb3- SHA256
f6cd7353cb6e86e98d387473ed6340f9b44241867508e209e944f548b9db1d5f- Imphash
32b632f6379bfaac9f4f3a030a694f55- Authentihash MD5
74e9ae3f89ff8fcf94f0407f7b94f680- Authentihash SHA1
4fce761086a78302bf6409d4be2c057e3389210d- Authentihash SHA256
192a27335de23a008c05efe24ea1fa0f633dd8ddc68d904466e4e2741a0bb645- Machine
- AMD64
- Version
- 1.2.0.0
- Publisher
- Advanced Micro Devices
AMDRyzenMasterDriver.sysSample 7 · HVCI FALSE
- MD5
0be5c6476dd58072c93af4fca62ee4b3- SHA1
5f8ae70b25b664433c6942d5963acadf2042cfe8- SHA256
ff9623317287358440ec67da9ba79994d9b17b99ffdd709ec836478fe1fc22a5- Imphash
8bbc742eaed888736a715757f0584fb6- Authentihash MD5
85f5af5f7200c76440823c16a70b2093- Authentihash SHA1
2f550bc5f89e2291f669b8a2d1910086bbea7532- Authentihash SHA256
207b6cea0c9f7e94a912b388d5e9f7ace3b6405114f64bcc425042a09170fcac- Machine
- AMD64
- Version
- 1.4.0.0
- Publisher
- Advanced Micro Devices
AMDRyzenMasterDriver.sysSample 8 · HVCI FALSE
- MD5
13ee349c15ee5d6cf640b3d0111ffc0e- SHA1
4f7a8e26a97980544be634b26899afbefb0a833c- SHA256
a13054f349b7baa8c8a3fcbd31789807a493cc52224bbff5e412eb2bd52a6433- Imphash
8bbc742eaed888736a715757f0584fb6- Authentihash MD5
aa6e3970343cb83f7c924e98aeaf0c85- Authentihash SHA1
c29a625c02bf49f3f055db90b280a1f201c59975- Authentihash SHA256
001cd8b2ce1932d1a8c32bc2d643ee4fa6f67626d1b6895beea916285450566c- Machine
- AMD64
- Version
- 1.3.0.0
- Publisher
- Advanced Micro Devices
AMDRyzenMasterDriver.sysSample 9 · HVCI FALSE
- MD5
91717a70db6c7beabbc004bbd9544ae6- SHA1
8f1623af2bb00cb5e75e4a4134244e6e1b5ad83c- SHA256
4a0d0034f6deabb9369f553d4d9f3a7aa6f87fa8f2292be576d7b42897c686bb- Imphash
3152fa00add1f466d28c7e78ed54fdea- Authentihash MD5
7961069ec3254ffe292120e3746bddf4- Authentihash SHA1
07417968cd500098780bf72547817d2ee724e5b6- Authentihash SHA256
45799bfaea64e065a9b0c97f9f10f42c830d26e55fdcb354e39179d0993e9c7d- Machine
- AMD64
- Version
- 1.7.0.0
- Publisher
- Advanced Micro Devices
AMDRyzenMasterDriver.sysSample 10 · HVCI FALSE
- MD5
c0cb42e6a0c353e92408ea97924b88e7- SHA1
7a008c8966304b858bf6dfaa29f787d3678419a0- SHA256
fac8f441eb645a7572c569eb4150f9b897c71173185e9369a9f7e0bd4bee6cf2- Imphash
3152fa00add1f466d28c7e78ed54fdea- Authentihash MD5
7961069ec3254ffe292120e3746bddf4- Authentihash SHA1
07417968cd500098780bf72547817d2ee724e5b6- Authentihash SHA256
45799bfaea64e065a9b0c97f9f10f42c830d26e55fdcb354e39179d0993e9c7d- Machine
- AMD64
- Version
- 1.7.0.0
- Publisher
- Advanced Micro Devices
AMDRyzenMasterDriver.sysSample 11 · HVCI FALSE
- MD5
678609bad75014aa3bac03a8fcc9ba2e- SHA1
a33df19b5763d5bfd648a77c6027f33fc28c38ea- SHA256
28a5194e1fe92850a0d90e5afaeec5ed57efd3827e2ce99da3803502bc5f4c8d- Imphash
8bbc742eaed888736a715757f0584fb6- Authentihash MD5
85f5af5f7200c76440823c16a70b2093- Authentihash SHA1
2f550bc5f89e2291f669b8a2d1910086bbea7532- Authentihash SHA256
207b6cea0c9f7e94a912b388d5e9f7ace3b6405114f64bcc425042a09170fcac- Machine
- AMD64
- Version
- 1.4.0.0
- Publisher
- Advanced Micro Devices
Recorded command
sc.exe create AMDRyzenMasterDriver.sys binPath=C:\windows\temp\AMDRyzenMasterDriver.sys type=kernel && sc.exe start AMDRyzenMasterDriver.sysElevate privileges · Privileges: kernel · OS: Windows 10
Research & references
Acknowledgement: fluffycats31 @fluffycats31