← Back to driver explorer
Driver intelligenceVulnerableVerified
atidsmxx.sys
AMD's ATI DSM Dynamic Driver exposes hardware-control IOCTLs through \Device\AtiDCM. The interface accepts caller-controlled MSR indexes for RDMSR operations and exposes PCI/device I/O and physical-address mapping paths. These privileged primitives can disclose hardware state and support kernel-level tampering when the device is accessible from user mode.
Known samples 1
0 recorded TRUE · 1 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.
atidsmxx.sysSample 1 · HVCI FALSE
- MD5
9702a1ab730d888ce85654f6d8a5f076- SHA1
5b459db252e99e626da011a0ead5579d7dada95f- SHA256
1c188041dc8e425a1fff057a3f1433ea306085483337aafeaf24980eb6fc0ac9- Imphash
15e037217aef44031a149b9acfdd6400- Authentihash MD5
265e9050128f2e088b9cc15028ce7ceb- Authentihash SHA1
67b89c3e2b1bc32484c19b414e5dd14b2c1da903- Authentihash SHA256
9e8c7a03ba40396c048e00420b59bfbcc0b318b787bbb3be8cf3f04ce032e901- Machine
- AMD64
- Version
- 9.0.000.4
- Publisher
- Advanced Micro Devices, Inc.
Recorded command
sc.exe create atidsmxx binPath=C:\windows\temp\atidsmxx.sys type=kernel && sc.exe start atidsmxxElevate privileges · Privileges: kernel · OS: Windows 10
Research & references
Acknowledgement: fluffycats31 @fluffycats31