Driver intelligenceVulnerableVerified

winio64.sys

Description not recorded.

UUID / 94eb0694-29ba-4f8e-b763-86c6371db6ccADDED / 2023-01-09AUTHOR / Michael Haag

Known samples 2

1 recorded TRUE · 1 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

winio64.sysSample 1 · HVCI TRUE

MD5: 97221e16e7a99a00592ca278c49ffbfc
SHA1: 943593e880b4d340f2548548e6e673ef6f61eed3
SHA256: e1980c6592e6d2d92c1a65acad8f1071b6a404097bb6fcce494f3c8ac31385cf
Imphash: 9e15ce38f071c916bea830247f1241bb
Authentihash MD5: 241252e4ebe7b4fdf6fd5a34ece5b127
Authentihash SHA1: eaba3ed3a83a8ef75db88c1f0def5160c3835a8c
Authentihash SHA256: cb5ebba562c33ef2ed93558913792726c8c2e5898531923589122ae31db64ebb
Machine: AMD64
Version: Not recorded
Publisher: Not recorded

winio64.sysSample 2 · HVCI FALSE

MD5: 11fb599312cb1cf43ca5e879ed6fb71e
SHA1: b4d014b5edd6e19ce0e8395a64faedf49688ecb5
SHA256: 9fc29480407e5179aa8ea41682409b4ea33f1a42026277613d6484e5419de374
Imphash: 85f86c7c8ce81a78e84efa545d7edc65
Authentihash MD5: 198111fd73515aa7fe4387612f027f0f
Authentihash SHA1: 651b953cb03928e41424ad59f21d4978d6f4952e
Authentihash SHA256: ebbaa44277a3ec6e20ad3f6aef5399fdc398306eb4c13aa96e45c9a281820a12
Machine: AMD64
Version: Not recorded
Publisher: Not recorded

sc.exe create winio64.sys binPath=C:\windows\temp\winio64.sys type=kernel && sc.exe start winio64.sys

Elevate privileges · Privileges: kernel · OS: Windows 10