← Back to driver explorer
Driver intelligenceVulnerableVerified

NTIOLib.sys

Description not recorded.

UUID / 7f9842a0-8118-462e-8860-227265ff4379ADDED / 2023-05-06AUTHOR / Nasreddine Bencherchali

Known samples 5

0 recorded TRUE · 5 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

NTIOLib.sysSample 1 · HVCI FALSE
MD5
4d99d02f49e027332a0a9c31c674e13b
SHA1
39e57a0bb3b349c70ad5f11592f9282860bbcc0a
SHA256
18776682fcc0c6863147143759a8d4050a4115a8ede0136e49a7cf885c8a4805
Imphash
a1d29a3af6402793ec9d23883512938a
Authentihash MD5
eed041909fbbbe05f6cc68006d541b0d
Authentihash SHA1
d3809c4439f7828a4a76aef68627eb1e6e703d43
Authentihash SHA256
c84806a49da944c20a01e7dba7721e88859a5f65ec338ddb5da3a0d6895e7268
Machine
I386
Version
1.0.0.0
Publisher
MSI
NTIOLib.sysSample 2 · HVCI FALSE
MD5
2e5f016ff9378be41fe98fa62f99b12d
SHA1
4518758452af35d593e0cae80d9841a86af6d3de
SHA256
7893307df2fdde25371645a924f0333e1b2de31b6bc839d8e2a908d7830c6504
Imphash
a1d29a3af6402793ec9d23883512938a
Authentihash MD5
dbca419735abe58370b336d8d3da5ad8
Authentihash SHA1
2986d3251738a29bd73f2938545cd3ffc8e2aadc
Authentihash SHA256
c0fc1c1c1ff39ea9a695996482ab31cb65c74aaf9f20cba21e9ff34ef054a008
Machine
I386
Version
1.0.0.0
Publisher
MSI
NTIOLib.sysSample 3 · HVCI FALSE
MD5
6d97ee5b3300d0f7fa359f2712834c40
SHA1
8dc2097a90eb7e9d6ee31a7c7a95e7a0b2093b89
SHA256
952199c28332bc90cfd74530a77ee237967ed32b3c71322559c59f7a42187dc4
Imphash
d6f977640d4810a784d152e4d3c63a6b
Authentihash MD5
2f6cff8603866aad75277f79179ca16e
Authentihash SHA1
55df6777d508865628b433631b8faaaa38dc0908
Authentihash SHA256
2018ad5f3695295599f756caf556722291485cd67eb9c3f7ec701b206cca4e00
Machine
AMD64
Version
1.0.0.0
Publisher
MSI
NTIOLib.sysSample 4 · HVCI FALSE
MD5
2f1ebc14bd8a29b89896737ca4076002
SHA1
6bfeac43be3ebd8d95a5eba963e18d97d76d2b05
SHA256
c2a4ddcc9c3b339d752c48925d62fc4cc5adbf6fae8fedef74cdd47e88da01f8
Imphash
a1d29a3af6402793ec9d23883512938a
Authentihash MD5
00f93b0c0de351b93a4c71c3595e968e
Authentihash SHA1
02a53e837651d224f3c91aaf37a3067e81d2f6ac
Authentihash SHA256
ee15f36881b84a2da82fee37e8ad65e47f1224e64d1d6fe43f7a5ad2efe92f5d
Machine
I386
Version
1.0.0.0
Publisher
MSI
NTIOLib.sysSample 5 · HVCI FALSE
MD5
1c4acf27317a2b5eaedff3ce6094794d
SHA1
4a7324ca485973d514fd087699f6d759ff32743b
SHA256
e3936d3356573ce2e472495cd3ce769f49a613e453b010433dafce5ea498ddc2
Imphash
a1d29a3af6402793ec9d23883512938a
Authentihash MD5
fc7eef91aa6574643560ad954e800138
Authentihash SHA1
cc9c3d9b69f4a4be1f2c3dc33ab7441f41e47a55
Authentihash SHA256
1f5e9fc579028d5cae916743528891aa39a4eecb3f573ea522eeb8da97f95953
Machine
I386
Version
1.0.0.0
Publisher
MSI

Recorded command

sc.exe create NTIOLib.sys binPath=C:\windows\temp\NTIOLib.sys type=kernel && sc.exe start NTIOLib.sys

Elevate privileges · Privileges: kernel · OS: Windows 10