Driver intelligenceVulnerableVerified

SysDrv3S.sys

Vulnerable driver found in https://github.com/hfiref0x/KDU.

UUID / cf49f43c-d7b4-4c1a-a40d-1be36ea64bffADDED / 2023-05-22AUTHOR / Michael Haag

Known samples 1

0 recorded TRUE · 1 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

SysDrv3S.sysSample 1 · HVCI FALSE

MD5: 31eca8c0b32135850d5a50aee11fec87
SHA1: e1069365cb580e3525090f2fa28efd4127223588
SHA256: 0e53b58415fa68552928622118d5b8a3a851b2fc512709a90b63ba46acda8b6b
Imphash: 1e6875beefe8571686d3e8530f8c4bfb
Authentihash MD5: 0ef111dc998659cbc37f0d9845cdd2df
Authentihash SHA1: 432b5809d84935d15574de8d64b22e06682ff715
Authentihash SHA256: 97cada65b735f3eece349c7b7021c4469d5a9fb3cf8b5e2ac187006469ffbc98
Machine: AMD64
Version: 3,5,6,0
Publisher: 3S-Smart Software Solutions GmbH

sc.exe create SysDrv3S.sys binPath=C:\windows\temp\SysDrv3S.sys type=kernel && sc.exe start SysDrv3S.sys

Elevate privileges · Privileges: kernel · OS: Windows 10

Acknowledgement: hfiref0x hfiref0x