Driver intelligenceVulnerableVerified

Amd_RPMC_BiosToolCommonDriver.sys

Amd_RPMC_BiosToolCommonDriver.sys is a vulnerable kernel driver from the KeServiceDescriptorTable/vulnerable-drivers repository. The driver exposes dangerous kernel primitives to usermode.

UUID / 8dbd8d1c-aa4a-418c-9bbe-0730d37d9bb5ADDED / 2026-04-17AUTHOR / Michael Haag

Known samples 1

0 recorded TRUE · 1 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

Amd_RPMC_BiosToolCommonDriver.sysSample 1 · HVCI FALSE

MD5: eda194abb7d4d0ab3a52ac6147c56402
SHA1: c769d4c56e4835c6ddf1d141bc245d411a20f591
SHA256: 4e913a99b38abea038202c95c6bc5d8d866a6e2869101a14a05079235346d9a1
Imphash: e3c915c62d33052b715b0a50dfa2d89d
Authentihash MD5: 51ee76bfbd488aaf03873ff97c322512
Authentihash SHA1: 319e63ba1122a2908275e60a50b9f33e0b292fcb
Authentihash SHA256: 9f5d946c292111b2112702c696d379943207abc502cb18123a84531cce72124f
Machine: AMD64
Version: 1.0.1.72
Publisher: Advanced Micro Devices

Download vulnerable sample View on VirusTotal

Recorded command

sc.exe create Amd_RPMC_BiosToolCommonDriver binPath=C:\windows\temp\Amd_RPMC_BiosToolCommonDriver.sys type=kernel && sc.exe start Amd_RPMC_BiosToolCommonDriver

Elevate privileges · Privileges: kernel · OS: Windows 10

Research & references

Acknowledgement: @rainbowdynamix, @DbgPrint