LOLDriversTHE DRIVER THREAT CATALOG
← Back to driver explorer
Driver intelligenceVulnerableVerified

ALSysIO64.sys

Description not recorded.

UUID / 4d365dd0-34c3-492e-a2bd-c16266796ae5ADDED / 2023-01-09AUTHOR / Michael Haag

Known samples 4

1 recorded TRUE · 3 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

ALSysIO64.sysSample 1 · HVCI FALSE
MD5
d9aafc513be1c4c57b9f9827e986039c
SHA1
2c688a6e881d35df958cb8ff2e2bd8e21b8461bc
SHA256
7a20ca8f9361eb892257b3693095ffeee61457dc4e22d9b119e3a9f3a1507069
Imphash
3a277d9c3f9238195ba009d38793f1c9
Authentihash MD5
6d94a4291a06775ebb473f592e3fb55a
Authentihash SHA1
3134c9c6f13a5694831121ae9c4b7e1e3adae7cc
Authentihash SHA256
d3966edd6b2291aad8ce21f35f85ea18a60e5c382891809bf4d4e07d0b0c61a8
Machine
AMD64
Version
2.1.0.0
Publisher
Arthur Liberman
Download vulnerable sampleView on VirusTotal
ALSysIO64.sysSample 2 · HVCI FALSE
MD5
13dda15ef67eb265869fc371c72d6ef0
SHA1
2f991435a6f58e25c103a657d24ed892b99690b8
SHA256
7196187fb1ef8d108b380d37b2af8efdeb3ca1f6eefd37b5dc114c609147216d
Imphash
82f5b92ccd99d13f4dd6ed6aaf0441bc
Authentihash MD5
86be5dbedcfcd517b9b602436cd985eb
Authentihash SHA1
7a9981f1bca18e2f624fe806c753a14dfd970c4e
Authentihash SHA256
ca829178d01990c8d1d6a681dee074a53f0dd873fd8eef6f6161c682449ec8c5
Machine
AMD64
Version
2.0.8.0
Publisher
Artur Liberman
Download vulnerable sampleView on VirusTotal
ALSysIO64.sysSample 3 · HVCI FALSE
MD5
ba5f0f6347780c2ed911bbf888e75bef
SHA1
f02af84393e9627ba808d4159841854a6601cf80
SHA256
7f375639a0df7fe51e5518cf87c3f513c55bc117db47d28da8c615642eb18bfa
Imphash
82f5b92ccd99d13f4dd6ed6aaf0441bc
Authentihash MD5
966e1c16e1aa07044b733c5589f40fd7
Authentihash SHA1
7027b399daf84a7c24dd010c2806bf6048a230bd
Authentihash SHA256
ac22a7cce3795e58c974056a86a06444e831d52185f9f37db88c65e14cd5bb75
Machine
AMD64
Version
2.0.9.0
Publisher
Artur Liberman
Download vulnerable sampleView on VirusTotal
ALSysIO64.sysSample 4 · HVCI TRUE
MD5
afc2448b4080f695e76e059a96958cab
SHA1
256d285347acd715ed8920e41e5ec928ae9201a8
SHA256
119c48b79735fda0ecd973d77d9bdc6b329960caed09b38ab454236ca039d280
Imphash
2f7ea575cf15da16c8f117eee37046d8
Authentihash MD5
7b9763c297936ce055a04790362cc75f
Authentihash SHA1
530dd2863a09dc57801d62551c48eb9e48476fe8
Authentihash SHA256
1c55b6620216c195ce24ef21e6ab7e181146fccf17c06606c4cd419fe3e45bd7
Machine
AMD64
Version
2.0.11.0
Publisher
Arthur Liberman
Download vulnerable sampleView on VirusTotal

Recorded command

sc.exe create ALSysIO64.sys binPath=C:\windows\temp\ALSysIO64.sys type=kernel && sc.exe start ALSysIO64.sys

Elevate privileges · Privileges: kernel · OS: Windows 10

Research & references