CmUpx.sys
CmUpx driver for Realtek USB device file version info
Driver on Windows LOLDrivers vulnerable driver
A known vulnerable driver
T1068Exploitation for Privilege Escalation
1 known sample
1.13.0.0 · its entry
cdf38928a13dfe0e6de054f0229945b9f7db9f88eb7269ecefdceb4b5fab4bfaFrom LOLDrivers (Apache 2.0). A driver is known by its hash: a sample under another name is the same driver. In Ceplin, "<sha256>".whatis() says which sample a hash is.
Is it the real CmUpx.sys?
ProductCmUpx driver for Realtek USB device, Realtek Semiconductor Corp.
DescriptionCmUpx driver for Realtek USB device
From the file’s version info, as recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look.