LOLDriversTHE DRIVER THREAT CATALOG
← Back to driver explorer
Driver intelligenceVulnerableVerified

ElbyCDIO.sys

Description not recorded.

UUID / 7a722cd5-69ec-4680-9f20-9387f249a891ADDED / 2023-05-06AUTHOR / Nasreddine Bencherchali

Known samples 10

0 recorded TRUE · 10 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

ElbyCDIO.sysSample 1 · HVCI FALSE
MD5
702d5606cf2199e0edea6f0e0d27cd10
SHA1
879e327292616c56bd4aafc279fbda6cc393b74d
SHA256
238046cfe126a1f8ab96d8b62f6aa5ec97bab830e2bae5b1b6ab2d31894c79e4
Imphash
959dce366573a7aae10b74a08931722a
Authentihash MD5
350ab25a105b2fee583f1b903d48788e
Authentihash SHA1
23a6345ab41ff68e31cef025de23cc8c81c90725
Authentihash SHA256
86236392bb2cc77100bd83d34a30e3fb60aa727d0b11c147a838d9a205bae80e
Machine
AMD64
Version
6, 0, 3, 2
Publisher
Elaborate Bytes AG
Download vulnerable sampleView on VirusTotal
ElbyCDIO.sysSample 2 · HVCI FALSE
MD5
945ef111161bae49075107e5bc11a23f
SHA1
ea37a4241fa4d92c168d052c4e095ccd22a83080
SHA256
2fbbc276737047cb9b3ba5396756d28c1737342d89dce1b64c23a9c4513ae445
Imphash
b91054cdc4c8b3169cfe6c157f6d9f07
Authentihash MD5
5560e048b895a592a481f9340852e3cd
Authentihash SHA1
1e73dbe3d0bed9def62c1f76a0c58aa6c61e8f74
Authentihash SHA256
d378162a47648bed192270ab4ddd67c99b4ebe8093a267fa1fe1e092559504b0
Machine
I386
Version
6, 0, 0, 2
Publisher
Elaborate Bytes AG
Download vulnerable sampleView on VirusTotal
ElbyCDIO.sysSample 3 · HVCI FALSE
MD5
24fe18891c173a7c76426d08d2b0630e
SHA1
f640c94e71921479cc48d06b59aba41ffa50a769
SHA256
5cfad3d473961763306d72c12bd5ae14183a1a5778325c9acacca764b79ca185
Imphash
3a4e0bc46866ca54459753f62c879b62
Authentihash MD5
46eca1eab6ab83208b56787f55ed4117
Authentihash SHA1
1b62759087cbe7f5f9a82477bc2f2b19bb51f41d
Authentihash SHA256
e35d09a903d76810830aff2fc87bb3071026d982a334b3ee4c68f66cba865109
Machine
I386
Version
6, 0, 1, 1
Publisher
Elaborate Bytes AG
Download vulnerable sampleView on VirusTotal
ElbyCDIO.sysSample 4 · HVCI FALSE
MD5
aaa8999a169e39fb8b48ae49cd6ac30a
SHA1
2eeab9786dac3f5f69e642f6e29f4e4819038551
SHA256
8137ce22d0d0fc5ea5b174d6ad3506a4949506477b1325da2ccb76511f4c4f60
Imphash
f4b8d579fbdb32eabd01954394f5bf3a
Authentihash MD5
efa9728ff65fc5bd690400a9a6252642
Authentihash SHA1
b827692fe57b0b51f7671d55c0a5dd6446342acd
Authentihash SHA256
911541d26b605a97ba099563b9eb7e027c102f139dba5884a57df5a13cf3dcef
Machine
I386
Version
6, 0, 1, 0
Publisher
Elaborate Bytes AG
Download vulnerable sampleView on VirusTotal
ElbyCDIO.sysSample 5 · HVCI FALSE
MD5
d21fba3d09e5b060bd08796916166218
SHA1
caa0cb48368542a54949be18475d45b342fb76e5
SHA256
82fbcb371d53b8a76a25fbbafaae31147c0d1f6b9f26b3ea45262c2267386989
Imphash
0265c50548889ffd5c2d3a2539885efe
Authentihash MD5
2b8c47b3e15625119ef7576646fdefda
Authentihash SHA1
5ad820b5cac4e44ded1534169631e7d3fc8547d1
Authentihash SHA256
8907c476440abdd7f71feb068443a7c9736aa6bf625dfb8b6931c46341aa4abf
Machine
I386
Version
6, 0, 0, 7
Publisher
Elaborate Bytes AG
Download vulnerable sampleView on VirusTotal
ElbyCDIO.sysSample 6 · HVCI FALSE
MD5
b5326548762bfaae7a42d5b0898dfeac
SHA1
f3029dba668285aac04117273599ac12a94a3564
SHA256
8f68ca89910ebe9da3d02ec82d935de1814d79c44f36cd30ea02fa49ae488f00
Imphash
b91054cdc4c8b3169cfe6c157f6d9f07
Authentihash MD5
fc16498ddf3716e03fdd527c456ea80b
Authentihash SHA1
7436e16cf348558015593cbf5ab9c117d97738cc
Authentihash SHA256
a3cf1a6edd205e04653b4338c077072ee753cde0a692490ecaf7afde27df5f0b
Machine
I386
Version
6, 0, 0, 1
Publisher
Elaborate Bytes AG
Download vulnerable sampleView on VirusTotal
ElbyCDIO.sysSample 7 · HVCI FALSE
MD5
e9ccb6bac8715918a2ac35d8f0b4e1e6
SHA1
9feacc95d30107ce3e1e9a491e2c12d73eef2979
SHA256
9679758455c69877fce866267d60c39d108b495dca183954e4af869902965b3d
Imphash
e804d4ee2c20f3eb1d3c955e38a2fe11
Authentihash MD5
b5cb05a635b6932ea1f7c0ee35592e37
Authentihash SHA1
e8dc3aa48d494fb2bc096523e11859afdd18b10a
Authentihash SHA256
e85d36ca271c4d65abc1cdfff0e629dc5d14edb5bf97669badbb40d2715c1d47
Machine
AMD64
Version
6, 0, 1, 1
Publisher
Elaborate Bytes AG
Download vulnerable sampleView on VirusTotal
ElbyCDIO.sysSample 8 · HVCI FALSE
MD5
28cb0b64134ad62c2acf77db8501a619
SHA1
5742ad3d30bd34c0c26c466ac6475a2b832ad59e
SHA256
ada4e42bf5ef58ef1aad94435441003b1cc1fcaa5d38bfdbe1a3d736dc451d47
Imphash
751c6b5c201f8c52f5512350cad88ddc
Authentihash MD5
47a02497d57e9ffa7ab2490d15a0bf90
Authentihash SHA1
da00f69b9d1e4a997094651f4af2c0faad653a10
Authentihash SHA256
c1bbe628f79528417ea741dfad2f589fc4e5c62152e632a89ed080da029d5384
Machine
I386
Version
6, 0, 1, 2
Publisher
Elaborate Bytes AG
Download vulnerable sampleView on VirusTotal
ElbyCDIO.sysSample 9 · HVCI FALSE
MD5
f141db170bb4c6e088f30ddc58404ad3
SHA1
34b0f1b2038a1572ee6381022a24333357b033c4
SHA256
c8eaa5e6d3230b93c126d2d58e32409e4aeeb23ccf0dd047a17f1ef552f92fe9
Imphash
b91054cdc4c8b3169cfe6c157f6d9f07
Authentihash MD5
fc16498ddf3716e03fdd527c456ea80b
Authentihash SHA1
7436e16cf348558015593cbf5ab9c117d97738cc
Authentihash SHA256
a3cf1a6edd205e04653b4338c077072ee753cde0a692490ecaf7afde27df5f0b
Machine
I386
Version
6, 0, 0, 1
Publisher
Elaborate Bytes AG
Download vulnerable sampleView on VirusTotal
ElbyCDIO.sysSample 10 · HVCI FALSE
MD5
0634299fc837b47b531e4762d946b2ae
SHA1
0a19a9c4c9185b80188da529ec9c9f45cbe73186
SHA256
f85eb576acb5db0d2f48e5f09a7244165a876fa1ca8697ebb773e4d7071d4439
Imphash
bc44fdc145156a15d0a803d18877b218
Authentihash MD5
c18c29b48a4e04a3cd761dc733cfda55
Authentihash SHA1
f43590d096d3ed0bbcfd2b0e41a327ba365bd9ec
Authentihash SHA256
262268f21c789c2bdaf1950b556456a9a5114ed5759d806200b0cec107bf76d7
Machine
I386
Version
6, 0, 0, 4
Publisher
Elaborate Bytes AG
Download vulnerable sampleView on VirusTotal

Recorded command

sc.exe create ElbyCDIO.sys binPath=C:\windows\temp\ElbyCDIO.sys type=kernel && sc.exe start ElbyCDIO.sys

Elevate privileges · Privileges: kernel · OS: Windows 10