LOLDriversTHE DRIVER THREAT CATALOG
← Back to driver explorer
Driver intelligenceVulnerableVerified

DirectIo.sys

Description not recorded.

UUID / 62e2a967-1f03-4225-a325-122b109208f3ADDED / 2023-05-06AUTHOR / Nasreddine Bencherchali

Known samples 6

2 recorded TRUE · 4 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

DirectIo.sysSample 1 · HVCI FALSE
MD5
d77fb9fb256b0c2ec0258c39b80dc513
SHA1
bdfb1a2b08d823009c912808425b357d22480ecc
SHA256
2b186926ed815d87eaf72759a69095a11274f5d13c33b8cc2b8700a1f020be1d
Imphash
fce118020e70919e5c8c629687f89e56
Authentihash MD5
79f811fc9166bce5a871174b384370a7
Authentihash SHA1
79f909fb1ffe781e45351fc683e7cece43cfe465
Authentihash SHA256
d166b6ffd164dbea53f0f588a979f4c5f1f2a1793fc10cda84a4530b7b22fd0c
Machine
I386
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
DirectIo.sysSample 2 · HVCI TRUE
MD5
590875a0b2eeb171403fc7d0f5110cb2
SHA1
4f94789cffb23c301f93d6913b594748684abf6a
SHA256
31f4140c12ac31f5729a8de4dc051d3acd07783564604df831a2a6722c979192
Imphash
be2d638c3933fc3f5a96e539f9910c5f
Authentihash MD5
92d24cb91b1cdc8139614ac03a00af5c
Authentihash SHA1
562695a1b80864b303b234fa801f064d7546b4f8
Authentihash SHA256
f5c267770f18d720313eedc7ff363989b04b21394e7c0179088d74b4d0fb2630
Machine
I386
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
DirectIo.sysSample 3 · HVCI TRUE
MD5
392d7180653b0ca77a78bdf15953d865
SHA1
3e917f0986802d47c0ffe4d6f5944998987c4160
SHA256
673b63b67345773cd6d66f6adcf2c753e2d949232bff818d5bb6e05786538d92
Imphash
67f975f0734a5b0598223fbe00b3367e
Authentihash MD5
a905e5bba9e716972e78843a7de4d30e
Authentihash SHA1
08de981cec441bf0bc18a90a44e13941ba4e781d
Authentihash SHA256
15cf3ce2a0ee32488de26222492842a378d6b8af6924578b35dac89fb0c7cb5c
Machine
I386
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
DirectIo.sysSample 4 · HVCI FALSE
MD5
e3fda6120dfa016a76d975fdab7954f6
SHA1
e2e7a2b2550b889235aafd9ffd1966ccd20badfe
SHA256
83f7be0a13c1fccf024c31da5c68c0ea1decf4f48fc39d6e4fd324bbe789ae8a
Imphash
77ec8b2c372741f12098f084a13a56a8
Authentihash MD5
4235df36aa97725d3a17e653dd5e1524
Authentihash SHA1
9fa6e7d69545a0f7b82c01e9bec2c8f19d1ab65b
Authentihash SHA256
2b03a8bad9ecfcacc8e8a21ee310ce359e1382d7a5d5ce5284b32ecc2bcc4b8a
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
DirectIo.sysSample 5 · HVCI FALSE
MD5
a17c403c4b74d4fa920c3887066daeb2
SHA1
30c6e1da8745c3d53df696af407ef095a8398273
SHA256
94be67c319a67de75ebed050d5537cfaa795d72bba52f3d8cf349e7bd075410e
Imphash
fce118020e70919e5c8c629687f89e56
Authentihash MD5
9377db4b59048af79f44c26fc34298a5
Authentihash SHA1
d0559503988daa407fcc11e59079560cb456bb84
Authentihash SHA256
eb6f186c9bf73b0efd227d99e09659c321f0414bda568e99ee9a3863dc1a380d
Machine
I386
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
DirectIo.sysSample 6 · HVCI FALSE
MD5
7056549baa6da18910151b08121e2c94
SHA1
84d44e166072bccf1f8e1e9eb51880ffa065a274
SHA256
bb68552936a6b0a68fb53ce864a6387d2698332aac10a7adfdd5a48b97027ce3
Imphash
be2d638c3933fc3f5a96e539f9910c5f
Authentihash MD5
92d24cb91b1cdc8139614ac03a00af5c
Authentihash SHA1
562695a1b80864b303b234fa801f064d7546b4f8
Authentihash SHA256
f5c267770f18d720313eedc7ff363989b04b21394e7c0179088d74b4d0fb2630
Machine
I386
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal

Recorded command

sc.exe create DirectIo.sys binPath=C:\windows\temp\DirectIo.sys type=kernel && sc.exe start DirectIo.sys

Elevate privileges · Privileges: kernel · OS: Windows 10