← Back to driver explorer
Driver intelligenceVulnerableVerified
jnprva.sys
Northwave Cyber Security contributed this driver based on in-house research. The driver has a CVSSv3 score of 8.8, indicating a privilege escalation impact. This vulnerability could potentially be exploited for privilege escalation or other malicious activities.
Known samples 1
1 recorded TRUE · 0 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.
jnprva.sysSample 1 · HVCI TRUE
- MD5
7da16447a3d200c8c3ed056828a62e1e- SHA1
ea23c9bfc0ea0bfc5a915e1e11fc5ecfbdd7d078- SHA256
8dbc28fefb8cf9377be55a7c6062988df5a24f0ff475f6dd65cf07fe5173f51d- Imphash
0263ef6f9d53671b4c652941a4446af0- Authentihash MD5
ea34afe10c540f4acca9afaead35175b- Authentihash SHA1
7faba76dc01e669d8f763fab0e5e668707f8b89c- Authentihash SHA256
9d06688123a9251aeb76ac8dad2af956566e2f1051550988611c7623dbebb3d3- Machine
- AMD64
- Version
- 8,3,3,1350
- Publisher
- Pulse Secure, LLC
Recorded command
sc.exe create jnprva binPath=C:\windows\temp\jnprva.sys type=kernel && sc.exe start jnprvaElevate privileges · Privileges: kernel · OS: Windows 10
Research & references
Acknowledgement: Northwave Cyber Security