LOLDriversTHE DRIVER THREAT CATALOG
← Back to driver explorer
Driver intelligenceVulnerableVerified

iomem64.sys

Description not recorded.

UUID / 04d377f9-36e0-42a4-8d47-62232163dc68ADDED / 2023-01-09AUTHOR / Michael Haag

Known samples 2

0 recorded TRUE · 2 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

iomem64.sysSample 1 · HVCI FALSE
MD5
0898af0888d8f7a9544ef56e5e16354e
SHA1
4b009e91bae8d27b160dc195f10c095f8a2441e1
SHA256
3d23bdbaf9905259d858df5bf991eb23d2dc9f4ecda7f9f77839691acef1b8c4
Imphash
679eba16ab2d51543b7007708838ef7c
Authentihash MD5
9b6609bd5d9d8de37273fe2d355ae349
Authentihash SHA1
4bf9ce7ffca224020572af6c13e866d8d41ad5bf
Authentihash SHA256
46ffe559f5a8f6bd611ac5a9264edf92d8449d8d31b2ddf6b2add5971e309c56
Machine
AMD64
Version
2.3.0.0
Publisher
DT Research, Inc.
Download vulnerable sampleView on VirusTotal
iomem64.sysSample 2 · HVCI FALSE
MD5
f1e054333cc40f79cfa78e5fbf3b54c2
SHA1
6003184788cd3d2fc624ca801df291ccc4e225ee
SHA256
dd4a1253d47de14ef83f1bc8b40816a86ccf90d1e624c5adf9203ae9d51d4097
Imphash
679eba16ab2d51543b7007708838ef7c
Authentihash MD5
91896c53af5ab967f7f131285354e4ac
Authentihash SHA1
7eec42b3027252dea4c777bbdbd47560bc179986
Authentihash SHA256
57d36936fbf8785380536b03e5d9be172e5dd5c3bf435e19875a80aa96f97e1f
Machine
AMD64
Version
2.2.0.0
Publisher
DT Research, Inc.
Download vulnerable sampleView on VirusTotal

Recorded command

sc.exe create iomem64.sys binPath=C:\windows\temp\iomem64.sys type=kernel && sc.exe start iomem64.sys

Elevate privileges · Privileges: kernel · OS: Windows 10

Research & references