← Back to driver explorer
Driver intelligenceVulnerableVerified
CSC.sys
Improper Address Validation in IOCTL with METHOD_NEITHER I/O Control Code in the csc.sys driver
Known samples 1
1 recorded TRUE · 0 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.
CSC.sysSample 1 · HVCI TRUE
- MD5
e7a3db3fe70e8b0c4aaa1c5e9de8da5a- SHA1
6bf3a21428eb51ecb84e41e9c1e0ac9105fd3079- SHA256
828c54cfecb2a08863319544ac716aee3898dfe78a87d7757a0e92f1b1f1daf1- Imphash
71686eb45898fe5283b523ecbc867eb5- Authentihash MD5
49d296e369fdb0311b7cfa16553641b1- Authentihash SHA1
29e642e49d553532fa34059a11fcf53458ae56b7- Authentihash SHA256
88f36fda7dcc6d5af2bcbef29d14fd4032247d4b45f5299944be31441ab53bc1- Machine
- AMD64
- Version
- 10.0.22621.1 (WinBuild.160101.0800)
- Publisher
- Microsoft Corporation
Recorded command
sc.exe create CSC.sys binPath=C:\windows\temp\CSC.sys type=kernel && sc.exe start CSC.sysElevate privileges · Privileges: kernel · OS: Windows 10