LOLDriversTHE DRIVER THREAT CATALOG
← Back to driver explorer
Driver intelligenceVulnerableVerified

Phymemx64.sys

Description not recorded.

UUID / 268e87ba-ad44-4f3c-986f-26712cac68daADDED / 2023-01-09AUTHOR / Michael Haag

Known samples 2

0 recorded TRUE · 2 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

Phymemx64.sysSample 1 · HVCI FALSE
MD5
715572dfe6fb10b16f980bfa242f3fa5
SHA1
f42f28d164205d9f6dab9317c9fecad54c38d5d2
SHA256
19a212e6fc324f4cb9ee5eba60f5c1fc0191799a4432265cbeaa3307c76a7fc0
Imphash
9e15ce38f071c916bea830247f1241bb
Authentihash MD5
4325af5c85aa7bb0339389cf54d78817
Authentihash SHA1
3c9f40ac72b0202cb40627fdeb7298079187193a
Authentihash SHA256
a6ae7364fd188c10d6b5a729a7ff58a3eb11e7feb0d107d18f9133655c11fb66
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
Phymemx64.sysSample 2 · HVCI FALSE
MD5
e7ab83a655b0cd934a19d94ac81e4eec
SHA1
6ecfc7ccc4843812bfccfb7e91594c018f0a0ff9
SHA256
88df37ede18bea511f1782c1a6c4915690b29591cf2c1bf5f52201fbbb4fa2b9
Imphash
9e15ce38f071c916bea830247f1241bb
Authentihash MD5
4325af5c85aa7bb0339389cf54d78817
Authentihash SHA1
3c9f40ac72b0202cb40627fdeb7298079187193a
Authentihash SHA256
a6ae7364fd188c10d6b5a729a7ff58a3eb11e7feb0d107d18f9133655c11fb66
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal

Recorded command

sc.exe create Phymemx64.sys binPath=C:\windows\temp\Phymemx64.sys type=kernel && sc.exe start Phymemx64.sys

Elevate privileges · Privileges: kernel · OS: Windows 10

Research & references