Driver intelligenceVulnerableVerified

Windows_CPU_Temperature_Component.sys

Windows_CPU_Temperature_Component.sys is a vulnerable kernel driver from the KeServiceDescriptorTable/vulnerable-drivers repository. The driver exposes dangerous kernel primitives to usermode.

UUID / 52955eb1-8cf4-41f3-b998-5e2e6d3aa258ADDED / 2026-04-17AUTHOR / Michael Haag

Known samples 2

0 recorded TRUE · 2 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

Windows_CPU_Temperature_Component.sysSample 1 · HVCI FALSE

MD5: 3215e7615124e528f039bc02872789e9
SHA1: 0a642db605ce0d393dadc945afb11609e407f8d2
SHA256: 4cea52c32579869d0209f18ced0b9cc9ad8f86cac29e0fb63b3d60eb64801bda
Imphash: 8434fd924f47e8af731cc83bc34000ea
Authentihash MD5: 94a672ff56b28d340a26a985a1f56ea6
Authentihash SHA1: f4963744672fd85f4cae30ef1f1d3c9bef317a27
Authentihash SHA256: 590822bd1b935237555d2d03e0535e835cfac71c0cf9dbbc4b0c8061e4106049
Machine: AMD64
Version: 0.0.1.6
Publisher: Guangzhou Shirui Electronics

Download vulnerable sample View on VirusTotal

Windows_CPU_Temperature_Component.sysSample 2 · HVCI FALSE

MD5: 877227519255e3dce43b479651242875
SHA1: dc68f8d3648e95c5b75d4938b47e5b90d52d874f
SHA256: 3e4c9190b8c1b00e7d53f92cef0b66c16594cc26773ba8d5d682a5468ea86e00
Imphash: 8434fd924f47e8af731cc83bc34000ea
Authentihash MD5: 94a672ff56b28d340a26a985a1f56ea6
Authentihash SHA1: f4963744672fd85f4cae30ef1f1d3c9bef317a27
Authentihash SHA256: 590822bd1b935237555d2d03e0535e835cfac71c0cf9dbbc4b0c8061e4106049
Machine: AMD64
Version: 0.0.1.6
Publisher: Guangzhou Shirui Electronics

Download vulnerable sample View on VirusTotal

Recorded command

sc.exe create Windows_CPU_Temperature_Component binPath=C:\windows\temp\Windows_CPU_Temperature_Component.sys type=kernel && sc.exe start Windows_CPU_Temperature_Component

Elevate privileges · Privileges: kernel · OS: Windows 10

Research & references

Acknowledgement: fluffycats31 @rainbowdynamix, @DbgPrint, @fluffycats31