LOLDriversTHE DRIVER THREAT CATALOG
← Back to driver explorer
Driver intelligenceVulnerableVerified

winio64.sys

Description not recorded.

UUID / 1ff757df-9a40-4f78-a28a-64830440abf7ADDED / 2023-05-06AUTHOR / Nasreddine Bencherchali

Known samples 2

2 recorded TRUE · 0 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

winio64.sysSample 1 · HVCI TRUE
MD5
8fc6cafd4e63a3271edf6a1897a892ae
SHA1
f8d7369527cc6976283cc73cd761f93bd1cec49d
SHA256
15fb486b6b8c2a2f1b067f48fba10c2f164638fe5e6cee618fb84463578ecac9
Imphash
9e15ce38f071c916bea830247f1241bb
Authentihash MD5
241252e4ebe7b4fdf6fd5a34ece5b127
Authentihash SHA1
eaba3ed3a83a8ef75db88c1f0def5160c3835a8c
Authentihash SHA256
cb5ebba562c33ef2ed93558913792726c8c2e5898531923589122ae31db64ebb
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
WinIo64.sysSample 2 · HVCI TRUE
MD5
7c0b186d1912686cfcb8cd9cdebabe58
SHA1
6bb68e1894bfbc1ac86bcdc048f7fe7743de2f92
SHA256
dbe9f17313e1164f06401234b875fbc7f71d41dc7271de643865af1358841fef
Imphash
9e15ce38f071c916bea830247f1241bb
Authentihash MD5
241252e4ebe7b4fdf6fd5a34ece5b127
Authentihash SHA1
eaba3ed3a83a8ef75db88c1f0def5160c3835a8c
Authentihash SHA256
cb5ebba562c33ef2ed93558913792726c8c2e5898531923589122ae31db64ebb
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal

Recorded command

sc.exe create winio64.sys binPath=C:\windows\temp\winio64.sys type=kernel && sc.exe start winio64.sys

Elevate privileges · Privileges: kernel · OS: Windows 10