d9e9fab2-6b64-4c14-b1ec-7af1923c0773

AccelLid.sys :inline :inline

Description

Northwave Cyber Security contributed this driver based on in-house research. The driver has a CVSSv3 score of 5.5, indicating a localdos impact. This vulnerability could potentially be exploited for privilege escalation or other malicious activities.

  • UUID: d9e9fab2-6b64-4c14-b1ec-7af1923c0773
  • Created: 2024-09-11
  • Author: Northwave Cyber Security
  • Acknowledgement: Northwave Cyber Security |

DownloadBlock

Commands

sc.exe create AccelLid.sys binPath=C:\windows\temp\AccelLid.sys type=kernel && sc.exe start AccelLid.sys
Use CasePrivilegesOperating System
Elevate privilegeskernelWindows 10

Detections

YARA 🏹

Expand

Sigma 🛡️

Expand

Names

detects loading using name only

Hashes

detects loading using hashes only

Sysmon 🔎

Expand

Block

on hashes

Alert

on hashes

Resources



Known Vulnerable Samples

PropertyValue
FilenameAccelLid.sys
Creation Timestamp
MD5833becd0e4abc9cfff8c835694694f80
SHA1
SHA256

Download

Imports

Expand

Imported Functions

Expand

Exported Functions

Expand

Sections

Expand

Signature

Expand

source

last_updated: 2025-08-28