← Back to driver explorer
Driver intelligenceVulnerableVerified
psmounterex.sys
Northwave Cyber Security contributed this driver based on in-house research. The driver has a CVSSv3 score of 8.8, indicating a privelege escalation impact. This vulnerability could potentially be exploited for privilege escalation or other malicious activities.
Known samples 1
1 recorded TRUE · 0 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.
psmounterex.sysSample 1 · HVCI TRUE
- MD5
2a9cf32ba325f394ae1cfb1e70f38b6e- SHA1
f4d3743b764d2b781c19ce1645965f3eb61b2ad1- SHA256
4e99d454a56845bb0e622cfd68b895b7868ef7e8a43424e5b7b803f5a2d25eca- Imphash
a9db39c4efc090afa23bc17ffdb6fdc3- Authentihash MD5
78f367a992e85d134e864abb6dbdfbc2- Authentihash SHA1
9e80ef26b432c64950e6f465f5469307d0b71359- Authentihash SHA256
92f9341304bfb77158d29397d1b9695dee0d001ab5f119a8b49f49fa15e0cd98- Machine
- AMD64
- Version
- v7.2.4058
- Publisher
- Windows (R) Win 7 DDK provider
Recorded command
sc.exe create psmounterex binPath=C:\windows\temp\psmounterex.sys type=kernel && sc.exe start psmounterexElevate privileges · Privileges: kernel · OS: Windows 10
Research & references
Acknowledgement: Northwave Cyber Security