← Back to driver explorer
Driver intelligenceVulnerableUnverified

TfSysMon.sys

Description not recorded.

UUID / bd9f084e-b235-4978-bf2a-5f1dc02937dfADDED / 2024-08-15AUTHOR / rahulwt

The project has not confirmed this driver's sample hashes.

Known samples 2

0 recorded TRUE · 1 recorded FALSE · 1 unknown for loading despite HVCI. Results apply to individual samples.

TfSysMon.sysSample 1 · HVCI FALSE
MD5
761f2e2b759389a472bd3d94141742b9
SHA1
c881f43c7fe94a6f056a84da8e9a32fe56d8dd9c
SHA256
1c1a4ca2cbac9fe5954763a20aeb82da9b10d028824f42fff071503dcbe15856
Imphash
9e7c36ff0dc8862002283773ace05f9e
Authentihash MD5
bf20ffaec0c931ba26ba3b4fa1168b8a
Authentihash SHA1
4e572da2a16b1588b2140f6739dc1dbd82cc1292
Authentihash SHA256
39f5d351878f7216a69d0330c40e5b2793c6d4d3ee72f0673cf7555ea9dbe86a
Machine
AMD64
Version
4.10.2.1
Publisher
PC Tools
amdi2c.sysSample 2 · HVCI unknown
MD5
b4eaacce30f51eaf2a36cea680b45a66
SHA1
94493d7739c5ee7346da31d9523404d62682b195
SHA256
15e84d040c2756b2d1b6c3f99d5a1079dc8854844d3c24d740fafd8c668e5fb9
Imphash
9e7c36ff0dc8862002283773ace05f9e
Authentihash MD5
5dc807d139dd6bfaa485cc32b65c5677
Authentihash SHA1
47e517f8a5cf5259f3a35c7c4000d4cf07f288d5
Authentihash SHA256
37d07c39dc10ae82a9d292c74f7c5f93c7bc133a0225402dafc21f664af079b6
Machine
AMD64
Version
1.2.0.124
Publisher
Advanced Micro Devices, Inc

Recorded command

sc.exe create TfSysMon.sys binPath=C:\windows\temp\TfSysMon.sys type=kernel && sc.exe start TfSysMon.sys

Elevate privileges · Privileges: kernel · OS: Windows 10

Research & references