Driver intelligenceVulnerableVerified

amsdk.sys

Vulnerable driver found in https://github.com/hfiref0x/KDU.

UUID / a285591e-ad3c-46a3-a648-c58589ff5efcADDED / 2023-05-22AUTHOR / Michael Haag

Known samples 1

0 recorded TRUE · 1 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

amsdk.sysSample 1 · HVCI FALSE

MD5: eb525d99a31eb4fff09814e83593a494
SHA1: 290d6376658cf0f8182de0fae40b503098fa09fd
SHA256: 6f55c148bb27c14408cf0f16f344abcd63539174ac855e510a42d78cfaec451c
Imphash: ad0cdf3bab32983050527655bce40f96
Authentihash MD5: 89627ebd29f4ae929d7f40fd4dabead3
Authentihash SHA1: 084553447bdbc056bbe49bad8acfaf25eb83462a
Authentihash SHA256: 60571dbcaec96d9517e0d116d066e70ae747aa4396d7857b2eea0f4c1a5a70b4
Machine: AMD64
Version: 3.0.0.000
Publisher: Copyright 2018.

sc.exe create amsdk.sys binPath=C:\windows\temp\amsdk.sys type=kernel && sc.exe start amsdk.sys

Elevate privileges · Privileges: kernel · OS: Windows 10

Acknowledgement: hfiref0x hfiref0x