LOLDriversTHE DRIVER THREAT CATALOG
GitHub ↗
← Back to driver explorer
Driver intelligenceVulnerableUnverified

dbutil.sys

Description not recorded.

UUID / 8d14d798-338f-471e-bacb-6d9371c0f529ADDED / 2023-01-09AUTHOR / Michael Haag

The project has not confirmed this driver's sample hashes.

Known samples 4

0 recorded TRUE · 4 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

dbutil.sysSample 1 · HVCI FALSE
Authentihash SHA1
485c0b9710a196c7177b99ee95e5ddb35b26ddd1
Authentihash SHA256
96ee751f7c38731e97773e07e0f13f4dd361af9aaa1d30b41652c2e6efc3fb3e
Machine
Not recorded
Version
Not recorded
Publisher
Not recorded
dbutil.sysSample 2 · HVCI FALSE
Authentihash SHA1
485c0b9710a196c7177b99ee95e5ddb35b26ddd1
Authentihash SHA256
96ee751f7c38731e97773e07e0f13f4dd361af9aaa1d30b41652c2e6efc3fb3e
Machine
Not recorded
Version
Not recorded
Publisher
Not recorded
dbutil.sysSample 3 · HVCI FALSE
Authentihash SHA1
e3c1dd569aa4758552566b0213ee4d1fe6382c4b
Authentihash SHA256
fe4270a61dbed978c28b2915fcc2826d011148dcb7533fa8bd072ddce5944cef
Machine
Not recorded
Version
Not recorded
Publisher
Not recorded
dbutil.sysSample 4 · HVCI FALSE
Authentihash SHA1
e3c1dd569aa4758552566b0213ee4d1fe6382c4b
Authentihash SHA256
fe4270a61dbed978c28b2915fcc2826d011148dcb7533fa8bd072ddce5944cef
Machine
Not recorded
Version
Not recorded
Publisher
Not recorded

Recorded command

sc.exe create dbutil.sys binPath=C:\windows\temp\dbutil.sys type=kernel && sc.exe start dbutil.sys

Elevate privileges · Privileges: kernel · OS: Windows 10

Research & references