Windows_CPU_Temperature_Component.sys
seewo - Windows CPU Temperature Component file version info
Driver on Windows LOLDrivers vulnerable driver
A known vulnerable driver
T1068Exploitation for Privilege Escalation
2 known samples
0.0.1.6 · its entry
3e4c9190b8c1b00e7d53f92cef0b66c16594cc26773ba8d5d682a5468ea86e000.0.1.6 · its entry
4cea52c32579869d0209f18ced0b9cc9ad8f86cac29e0fb63b3d60eb64801bdaFrom LOLDrivers (Apache 2.0). A driver is known by its hash: a sample under another name is the same driver. In Ceplin, "<sha256>".whatis() says which sample a hash is.
Is it the real Windows_CPU_Temperature_Component.sys?
ProductWindows CPU Temperature Component, Guangzhou Shirui Electronics
Descriptionseewo - Windows CPU Temperature Component
From the file’s version info, as recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look.