Driver intelligenceVulnerableVerified

iobios64.sys

iobios64.sys is a vulnerable kernel driver from the KeServiceDescriptorTable/vulnerable-drivers repository. The driver exposes dangerous kernel primitives to usermode.

UUID / 00755879-eeb3-4a70-9df6-c4e8ff561cdcADDED / 2026-04-17AUTHOR / Michael Haag

Known samples 1

0 recorded TRUE · 1 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

iobios64.sysSample 1 · HVCI FALSE

MD5: d49368296a3cd000ec0cea88c4bf7edd
SHA1: fbd6c739b86afa550187cc80aa6dc139c0790cef
SHA256: 314a51fcf6e37eb8550a826df085d5c88c43eb1438682f3a6c33632d36956136
Imphash: 0dcd262801389f839ce909cb173448e2
Authentihash MD5: f83efae9f61dabd3a823bbcb0bb1dbe8
Authentihash SHA1: 1f86df471708bba4ae012174307c326e97cd00f2
Authentihash SHA256: d73c3cac633b3a6b36ddeb4244f52e625ea6cf63df6cb41176b505342353350b
Machine: AMD64
Version: Not recorded
Publisher: Not recorded

Download vulnerable sample View on VirusTotal

Recorded command

sc.exe create iobios64 binPath=C:\windows\temp\iobios64.sys type=kernel && sc.exe start iobios64

Elevate privileges · Privileges: kernel · OS: Windows 10

Research & references

Acknowledgement: @rainbowdynamix, @DbgPrint