← Back to driver explorer
Driver intelligenceVulnerableVerified
SeasunProtect.sys
Northwave Cyber Security contributed this driver based on in-house research. The driver has a CVSSv3 score of 8.8, indicating a privilege escalation impact. This vulnerability could potentially be exploited for privilege escalation or other malicious activities.
Known samples 1
1 recorded TRUE · 0 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.
SeasunProtect.sysSample 1 · HVCI TRUE
- MD5
a360ec883ef5383157080b2e185802ef- SHA1
ba42182630cf033a1737af6ffee87b018fda0b91- SHA256
507b07b0dc0e638b65b4a4d11a462b35439c746d42337b9888927bf994176102- Imphash
e48d3385e8828a97aa6fa76d9fc4a9f1- Authentihash MD5
de6d51b3ddeef7764df31692de1b5f7c- Authentihash SHA1
0e91b087a250d7e91c2cb0431e6980ce4da59e51- Authentihash SHA256
fdf15402013191f701086e188d88041481f1562aa43e4ca8a21f4d489e791a36- Machine
- AMD64
- Version
- 1.2.6.1
- Publisher
- Chengdu Westhouse Interactive Entertainment Ltd.
Recorded command
sc.exe create SeasunProtect binPath=C:\windows\temp\SeasunProtect.sys type=kernel && sc.exe start SeasunProtectElevate privileges · Privileges: kernel · OS: Windows 10
Acknowledgement: Northwave Cyber Security