← Back to driver explorer
Driver intelligenceVulnerableVerified
TSDRVX64.sys
Northwave Cyber Security identified TSDRVX64 as a local privilege-escalation vulnerability with a CVSSv3 score of 8.8. Successful exploitation provides kernel-level impact and may enable an attacker to disable security controls or tamper with the operating system.
Known samples 2
0 recorded TRUE · 2 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.
TSDRVX64.sysSample 1 · HVCI FALSE
- MD5
0412e9fd6ff7d41f599e878b22b8a9b7- SHA1
fce89640ba51d0e53aea0540d6a18aca0cb8e3a3- SHA256
9bf84b41789b3d5d5622732b5c4f5630da189ede2098b0ce166fcae331178377- Imphash
c730a86e18ca21521b50355afd4c7cf7- Authentihash MD5
e6336afeb4d186c8e69350f56aaab04d- Authentihash SHA1
22a4dc4c8c6a47603d119d1749a7e31b8282c175- Authentihash SHA256
f4f0357629e12ff599ad2f0179ac0f4eaec35044b7498037c2d91282dff9e592- Machine
- AMD64
- Version
- 1, 1, 5
- Publisher
- ToolHouse Entwicklungs-KG
TSDRVX64.SYSSample 2 · HVCI FALSE
- MD5
099b9428dd0f854dad836d18e2091e5f- SHA1
486d9b1b20e1507f14db964f7957200c2d79c75c- SHA256
15ffa1952b4018e4c07a5caf53d650a792b4872fa806deb8e22ccce69e6def6e- Imphash
c730a86e18ca21521b50355afd4c7cf7- Authentihash MD5
82c05189948173044cc7a635989a20a1- Authentihash SHA1
d89013770222fdabaa40b90d1c30ecb2c163c648- Authentihash SHA256
cd6153fdb448c7914a172053ad9e33819501145bf7c10f5c572152bee99a5896- Machine
- AMD64
- Version
- 1, 1, 6
- Publisher
- ToolHouse Entwicklungs-KG
Recorded command
sc.exe create TSDRVX64 binPath=C:\windows\temp\TSDRVX64.sys type=kernel && sc.exe start TSDRVX64Elevate privileges · Privileges: kernel · OS: Windows 10
Research & references
Acknowledgement: Northwave Cyber Security, fluffycats31 @fluffycats31