← Back to driver explorer
Driver intelligenceVulnerableVerified
rzpnk.sys
A vulnerability exists in the latest version of Razer Synapse (v2.20.15.1104 as of the day of disclosure) which can be leveraged locally by a malicious application to elevate its privileges to those of NT_AUTHORITY\SYSTEM. The vulnerability lies in a specific IOCTL handler in the rzpnk.sys driver that passes a PID specified by the user to ZwOpenProcess. CVE-2017-9769.
Known samples 22
0 recorded TRUE · 22 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.
rzpnk.sysSample 1 · HVCI FALSE
- MD5
4cc3ddd5ae268d9a154a426af2c23ef9- SHA1
684786de4b3b3f53816eae9df5f943a22c89601f- SHA256
93d873cdf23d5edc622b74f9544cac7fe247d7a68e1e2a7bf2879fad97a3ae63- Imphash
700a9350ac8b218ab9fc62cf25337ad3- Authentihash MD5
76934be6e996e801ea4d68c504d427c3- Authentihash SHA1
b2e03d9e602a6026f45c08b686c6810abd43bfac- Authentihash SHA256
982ad43111d8b7a7900df652c8873eeb6aa485bb429dee6c2ad44acf598bb5e6- Machine
- I386
- Version
- 1.0.12.10155
- Publisher
- Razer, Inc.
rzpnk.sysSample 2 · HVCI FALSE
- MD5
2e7d824a49d731da9fc96262a29c85ce- SHA1
a4e2e227f984f344d48f4bf088ca9d020c63db4e- SHA256
2665d3127ddd9411af38a255787a4e2483d720aa021be8d6418e071da52ed266- Imphash
700a9350ac8b218ab9fc62cf25337ad3- Authentihash MD5
76934be6e996e801ea4d68c504d427c3- Authentihash SHA1
b2e03d9e602a6026f45c08b686c6810abd43bfac- Authentihash SHA256
982ad43111d8b7a7900df652c8873eeb6aa485bb429dee6c2ad44acf598bb5e6- Machine
- I386
- Version
- 1.0.12.10155
- Publisher
- Razer, Inc.
rzpnk.sysSample 3 · HVCI FALSE
- MD5
3fda3d414c31ad73efd8ccceeaa3bdc2- SHA1
537923c633d8fc94d9ae45ad9d89e5346f581f17- SHA256
f15962354d37089884abba417f58e9dbd521569b4f69037a24a37cfc2a490672- Imphash
74081c86ad3e9771011f162c107927de- Authentihash MD5
64c80e12a495fb117c5db8f0ab70dc91- Authentihash SHA1
39c687c1c70ea61e122ef145364fa123ddeb3383- Authentihash SHA256
3e28142ad02a1ac63ab86f97834321f30bb28e19d5c997bb0a13807ddb414c0e- Machine
- AMD64
- Version
- 1.0.12.10177
- Publisher
- Razer, Inc.
rzpnk.sysSample 4 · HVCI FALSE
- MD5
560069dc51d3cc7f9cf1f4e940f93cae- SHA1
1a83c8b63d675c940aaec10f70c0c7698e9b0165- SHA256
16e2b071991b470a76dff4b6312d3c7e2133ad9ac4b6a62dda4e32281952fb23- Imphash
805e4a267f9495e7c0c430d92b78f8bd- Authentihash MD5
43ffd546261cc9a839107caae118b47e- Authentihash SHA1
cd5db11f0d5aa7c13242e424463266d9cfd7be44- Authentihash SHA256
30d737a6da29ad2fe035c0a5f1f7a423a8cd96b8f3dc9885fe95ef3333478dd7- Machine
- I386
- Version
- 1.0.12.3137
- Publisher
- Razer, Inc.
rzpnk.sysSample 5 · HVCI FALSE
- MD5
8de7dcade65a1f51605a076c1d2b3456- SHA1
a95a126b539989e29e68969bfab16df291e7fa8a- SHA256
dafa4459d88a8ab738b003b70953e0780f6b8f09344ce3cd631af70c78310b53- Imphash
5192bc7311bdeb1f3977bdc0d2e943e4- Authentihash MD5
151f2aa65417bbb3563e02d1f60484dc- Authentihash SHA1
970bd6388867c86b786d4e218d1a6967d7304ee4- Authentihash SHA256
9d61963c098b07fa7ee6dba40f476fc5d2f16301d79a3e8554319d66c69404a9- Machine
- AMD64
- Version
- 1.0.12.10201
- Publisher
- Razer, Inc.
rzpnk.sysSample 6 · HVCI FALSE
- MD5
4e92f1c677e08fd09b57032c5b47ca46- SHA1
6e191d72b980c8f08a0f60efa01f0b5bf3b34afb- SHA256
ad8fd8300ed375e22463cea8767f68857d9a3b0ff8585fbeb60acef89bf4a7d7- Imphash
42e3f2ffa29901e572f2df03cb872159- Authentihash MD5
700c4e80369a63127263fb1702bbe07b- Authentihash SHA1
d6729e750660410644fb73361bc7113523a70c05- Authentihash SHA256
7070ee6dd615538ca6a701e7bdc2c23a19b84ae8ca5f9edc6307fef47eb05abb- Machine
- I386
- Version
- 1.0.12.9986
- Publisher
- Razer, Inc.
rzpnk.sysSample 7 · HVCI FALSE
- MD5
288471f132c7249f598032d03575f083- SHA1
3fbe337b6ed1a1a63ae8b4240c01bd68ed531674- SHA256
9e3430d5e0e93bc4a5dccc985053912065e65722bfc2eaf431bc1da91410434c- Imphash
dd7c5c0c762169d40ee01280e4ac74fc- Authentihash MD5
78276d9e5e7111419e997b4ea0dc0bcc- Authentihash SHA1
876a391320ff8b3e545c53bb933d6afd8ace66e6- Authentihash SHA256
a9e0f35da47fe91d887a28a0670d8e79ceef7c61ff6d9af3d0568a9737fe0673- Machine
- AMD64
- Version
- 1.0.12.6087
- Publisher
- Razer, Inc.
rzpnk.sysSample 8 · HVCI FALSE
- MD5
f5e6ef0dcbb3d4a608e9e0bba4d80d0a- SHA1
58ebfb7de214ee09f6bf71c8cc9c139dd4c8b016- SHA256
46d1dc89cc5fa327e7adf3e3d6d498657240772b85548c17d2e356aac193dd28- Imphash
d67b7c7501e5261df5e66b3219fa52ee- Authentihash MD5
13d7aa7733e7db4e391dba54f3f4b61f- Authentihash SHA1
d466b8fa00d2fdd9834d5d3bafdf8cbc0ccf139c- Authentihash SHA256
bedb1e28fd1cdf391edc859c58cb318a9ab686f254195246909b245e7aaf7669- Machine
- I386
- Version
- 1.0.12.10201
- Publisher
- Razer, Inc.
rzpnk.sysSample 9 · HVCI FALSE
- MD5
36527fdb70ed6f74b70a98129f82ad62- SHA1
986c1fdfe7c9731f4de15680a475a72cf2245121- SHA256
9fa120bda98633e30480d8475c9ac6637470c4ca7c63763560bf869138091b01- Imphash
7fb9382c0d754d5aac897d7a3e72b10c- Authentihash MD5
49143ee3e5fc7193b0826428979792c8- Authentihash SHA1
2fa99a65d8992e07ac5af3a935861b493669d870- Authentihash SHA256
e269b4cb9df863c31ae13012429f67a0f3cd81481025d35ce6531b33b63b5976- Machine
- I386
- Version
- 1.0.12.10177
- Publisher
- Razer, Inc.
rzpnk.sysSample 10 · HVCI FALSE
- MD5
935a7df222f19ac532e831e6bf9e8e45- SHA1
a6aa7926aa46beaf9882a93053536b75ef2c7536- SHA256
567809308cfb72d59b89364a6475f34a912d03889aa50866803ac3d0bf2c3270- Imphash
6b7d4c6283b9b951b7b2f47a0c5be8c7- Authentihash MD5
3b53b1da67c8917786be48c57c6a2db1- Authentihash SHA1
b2aac760470a4575bc0f6508179ed32d7c37a5d9- Authentihash SHA256
39789a159c1196255f1b6d83e23af4082fd4cffe2662e40b71631b4e2e4bc05d- Machine
- AMD64
- Version
- 1.0.12.10155
- Publisher
- Razer, Inc.
rzpnk.sysSample 11 · HVCI FALSE
- MD5
2229d5a9a92b62df4df9cf51f48436f7- SHA1
63cf021c8662fa23ce3e4075a4f849431e473058- SHA256
0507d893e3fd2917c81c1dc13ccb22ae5402ab6ca9fb8d89485010838050d08d- Imphash
e1ecbd956bd016618b07e7dddcaf6e60- Authentihash MD5
428e1d8063028ac66be9501b5bccb038- Authentihash SHA1
e4e33d2ad37a0e7edf98f9384d0167dfaa540e77- Authentihash SHA256
af9c600edb134fb8f21d585bbf7d0a4d3f1b792b6dd104c10d38f220f47671f8- Machine
- AMD64
- Version
- 1.0.12.9986
- Publisher
- Razer, Inc.
rzpnk.sysSample 12 · HVCI FALSE
- MD5
1c9d2a993e99054050b596d88b307d95- SHA1
6293ff11805cd33bccbcca9f0132bff3ae2e2534- SHA256
9eba5d1545fdbf37cf053ac3f3ba45bcb651b8abb7805cbfdfb5f91ea294fb95- Imphash
7fb9382c0d754d5aac897d7a3e72b10c- Authentihash MD5
49143ee3e5fc7193b0826428979792c8- Authentihash SHA1
2fa99a65d8992e07ac5af3a935861b493669d870- Authentihash SHA256
e269b4cb9df863c31ae13012429f67a0f3cd81481025d35ce6531b33b63b5976- Machine
- I386
- Version
- 1.0.12.10177
- Publisher
- Razer, Inc.
rzpnk.sysSample 13 · HVCI FALSE
- MD5
b4598c05d5440250633e25933fff42b0- SHA1
f999709e5b00a68a0f4fa912619fe6548ad0c42d- SHA256
a66d2fb7ef7350ea74d4290c57fb62bc59c6ea93f759d4ca93c3febca7aeb512- Imphash
e1ecbd956bd016618b07e7dddcaf6e60- Authentihash MD5
4b6d5f6c61c9820aaf6dd10acbcc8385- Authentihash SHA1
1ac31466261a6da69fbeb8e99d0b7b772071ac7f- Authentihash SHA256
d2e10e17bca5e85e6b84345b47aab14adf45d98c672db6acf90479a7faf20b5a- Machine
- AMD64
- Version
- 1.0.12.7465
- Publisher
- Razer, Inc.
rzpnk.sysSample 14 · HVCI FALSE
- MD5
0d8daf471d871deb90225d2953c0eb95- SHA1
f0d6b0bcd5f47b41d3c3192e244314d99d1df409- SHA256
9724488ca2ba4c787640c49131f4d1daae5bd47d6b2e7e5f9e8918b1d6f655be- Imphash
cc335217d6f7ab7a53dcfa55cbda5fb0- Authentihash MD5
870f5888401c299ad7b0cacabd53edc2- Authentihash SHA1
fb21a2be31b336ac5da2f69c93c4ff4f8fe30a42- Authentihash SHA256
def61560c0650717cb1da923f0d674b363b8f2051247719b34f06744bbb79000- Machine
- I386
- Version
- 1.0.12.7465
- Publisher
- Razer, Inc.
rzpnk.sysSample 15 · HVCI FALSE
- MD5
3c1f92a1386fa6cf1ba51bae5e9a98dd- SHA1
d083e69055556a36df7c6e02115cbbf90726f35c- SHA256
4c2d2122ef7a100e1651f2ec50528c0d1a2b8a71c075461f0dc58a1aca36bc61- Imphash
d67b7c7501e5261df5e66b3219fa52ee- Authentihash MD5
13d7aa7733e7db4e391dba54f3f4b61f- Authentihash SHA1
d466b8fa00d2fdd9834d5d3bafdf8cbc0ccf139c- Authentihash SHA256
bedb1e28fd1cdf391edc859c58cb318a9ab686f254195246909b245e7aaf7669- Machine
- I386
- Version
- 1.0.12.10201
- Publisher
- Razer, Inc.
rzpnk.sysSample 16 · HVCI FALSE
- MD5
2e7d824a49d731da9fc96262a29c85ce- SHA1
a4e2e227f984f344d48f4bf088ca9d020c63db4e- SHA256
2665d3127ddd9411af38a255787a4e2483d720aa021be8d6418e071da52ed266- Imphash
700a9350ac8b218ab9fc62cf25337ad3- Authentihash MD5
76934be6e996e801ea4d68c504d427c3- Authentihash SHA1
b2e03d9e602a6026f45c08b686c6810abd43bfac- Authentihash SHA256
982ad43111d8b7a7900df652c8873eeb6aa485bb429dee6c2ad44acf598bb5e6- Machine
- I386
- Version
- 1.0.12.10155
- Publisher
- Razer, Inc.
rzpnk.sysSample 17 · HVCI FALSE
- MD5
f8a13d4413a93dd005fad116cbd6b6f7- SHA1
8edcd4b35f5ae88d14e83252390659c6fc79eae3- SHA256
8ed0c00920ce76e832701d45117ed00b12e20588cb6fe8039fbccdfef9841047- Imphash
e1ecbd956bd016618b07e7dddcaf6e60- Authentihash MD5
4b6d5f6c61c9820aaf6dd10acbcc8385- Authentihash SHA1
1ac31466261a6da69fbeb8e99d0b7b772071ac7f- Authentihash SHA256
d2e10e17bca5e85e6b84345b47aab14adf45d98c672db6acf90479a7faf20b5a- Machine
- AMD64
- Version
- 1.0.12.7465
- Publisher
- Razer, Inc.
rzpnk.sysSample 18 · HVCI FALSE
- MD5
d4a299c595d35264b5cfd12490a138dc- SHA1
64df813dc0774ef57d21141dcb38d08059fd8660- SHA256
d7b743c3f98662c955c616e0d1bb0800c9602e5b6f2385336a72623037bfd6dd- Imphash
6b7d4c6283b9b951b7b2f47a0c5be8c7- Authentihash MD5
3b53b1da67c8917786be48c57c6a2db1- Authentihash SHA1
b2aac760470a4575bc0f6508179ed32d7c37a5d9- Authentihash SHA256
39789a159c1196255f1b6d83e23af4082fd4cffe2662e40b71631b4e2e4bc05d- Machine
- AMD64
- Version
- 1.0.12.10155
- Publisher
- Razer, Inc.
rzpnk.sysSample 19 · HVCI FALSE
- MD5
f758e7d53184faab5bc51f751937fa36- SHA1
7e900b0370a1d3cb8a3ea5394d7d094f95ec5dc0- SHA256
d59cc3765a2a9fa510273dded5a9f9ac5190f1edf24a00ffd6a1bbd1cb34c757- Imphash
5192bc7311bdeb1f3977bdc0d2e943e4- Authentihash MD5
151f2aa65417bbb3563e02d1f60484dc- Authentihash SHA1
970bd6388867c86b786d4e218d1a6967d7304ee4- Authentihash SHA256
9d61963c098b07fa7ee6dba40f476fc5d2f16301d79a3e8554319d66c69404a9- Machine
- AMD64
- Version
- 1.0.12.10201
- Publisher
- Razer, Inc.
rzpnk.sysSample 20 · HVCI FALSE
- MD5
05a6f843c43d75fbce8e885bb8656aa4- SHA1
d72de7e8f0118153dd5cf784f724e725865fc523- SHA256
e77786b21dbe73e9619ac9aac5e7e92989333d559aa22b4b65c97f0a42ff2e21- Imphash
cc335217d6f7ab7a53dcfa55cbda5fb0- Authentihash MD5
870f5888401c299ad7b0cacabd53edc2- Authentihash SHA1
fb21a2be31b336ac5da2f69c93c4ff4f8fe30a42- Authentihash SHA256
def61560c0650717cb1da923f0d674b363b8f2051247719b34f06744bbb79000- Machine
- I386
- Version
- 1.0.12.7465
- Publisher
- Razer, Inc.
rzpnk.sysSample 21 · HVCI FALSE
- MD5
fef60a37301e1f5a3020fa3487fb2cd7- SHA1
838823f25436cadc9a145ddac076dce3e0b84d96- SHA256
0c925468c3376458d0e1ec65e097bd1a81a03901035c0195e8f6ef904ef3f901- Imphash
dd7c5c0c762169d40ee01280e4ac74fc- Authentihash MD5
049d38cee6bf9975ca33274d57bb4666- Authentihash SHA1
1d96772942225757522ddd38d52e9616089377b2- Authentihash SHA256
fec1c641c7151e931aeb0d1ac59a97d6d3b486c482c1df8794e6424e75e6da1a- Machine
- AMD64
- Version
- 1.0.12.3137
- Publisher
- Razer, Inc.
rzpnk.sysSample 22 · HVCI FALSE
- MD5
6846c2035b4c56b488d2ce2c69a57261- SHA1
e41808b022656befb7dc42bbeceaf867e2fec6b2- SHA256
0b547368c03e0a584ae3c5e62af3728426c68b316a15f3290316844d193ad182- Imphash
74081c86ad3e9771011f162c107927de- Authentihash MD5
64c80e12a495fb117c5db8f0ab70dc91- Authentihash SHA1
39c687c1c70ea61e122ef145364fa123ddeb3383- Authentihash SHA256
3e28142ad02a1ac63ab86f97834321f30bb28e19d5c997bb0a13807ddb414c0e- Machine
- AMD64
- Version
- 1.0.12.10177
- Publisher
- Razer, Inc.
Recorded command
sc.exe create rzpnk.sys binPath=C:\windows\temp\rzpnk.sys type=kernel && sc.exe start rzpnk.sysElevate privileges · Privileges: kernel · OS: Windows 10