← Back to driver explorer
Driver intelligenceVulnerableVerified

pxitrig64.sys

Northwave Cyber Security contributed this driver based on in-house research. The driver has a CVSSv3 score of 5.5, indicating a local dos impact. This vulnerability could potentially be exploited for privilege escalation or other malicious activities.

UUID / c8619f49-8e23-489b-9878-53d27533da15ADDED / 2024-09-11AUTHOR / Northwave Cyber Security

Known samples 1

0 recorded TRUE · 1 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

pxitrig64.sysSample 1 · HVCI FALSE
MD5
1ed1fe48caba92583b9ceef503af330f
SHA1
4f0037ca1926e5b325643c99127f8b69cfd3f301
SHA256
56ece6b6b1d2da18458c9d8edc586bd2b9f7c4b092a9745fbed659238b2b3157
Imphash
b929e534993a16951c472a00a009d096
Authentihash MD5
7696550508de828f0897e5887a1b312c
Authentihash SHA1
4786ade09f2c05eeedfc6cbd92aea052a4a8c0d8
Authentihash SHA256
131e84e32dae6954247fc0699d5ba52bf2936b5a782c795ae9e708829a5c26d6
Machine
AMD64
Version
3.9.301.2023
Publisher
ADLink

Recorded command

sc.exe create pxitrig64 binPath=C:\windows\temp\pxitrig64.sys type=kernel && sc.exe start pxitrig64

Elevate privileges · Privileges: kernel · OS: Windows 10

Acknowledgement: Northwave Cyber Security