LOLDriversTHE DRIVER THREAT CATALOG
← Back to driver explorer
Driver intelligenceVulnerableVerified

dbutil_2_3.sys

Description not recorded.

UUID / a4eabc75-edf6-4b74-9a24-6a26187adabfADDED / 2023-01-09AUTHOR / Michael Haag

Known samples 4

1 recorded TRUE · 3 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

dbutil_2_3.sysSample 1 · HVCI FALSE
MD5
c996d7971c49252c582171d9380360f2
SHA1
c948ae14761095e4d76b55d9de86412258be7afd
SHA256
0296e2ce999e67c76352613a718e11516fe1b0efc3ffdb8918fc999dd76a73a5
Imphash
473c3773ca11aa7371dbf350919c5724
Authentihash MD5
e593dd14a41fd9a6cb42fdae324c3092
Authentihash SHA1
e3c1dd569aa4758552566b0213ee4d1fe6382c4b
Authentihash SHA256
fe4270a61dbed978c28b2915fcc2826d011148dcb7533fa8bd072ddce5944cef
Machine
AMD64
Version
Not recorded
Publisher
Dell Inc.
Download vulnerable sampleView on VirusTotal
dbutil_2_3.sysSample 2 · HVCI FALSE
MD5
c996d7971c49252c582171d9380360f2
SHA1
c948ae14761095e4d76b55d9de86412258be7afd
SHA256
0296e2ce999e67c76352613a718e11516fe1b0efc3ffdb8918fc999dd76a73a5
Imphash
473c3773ca11aa7371dbf350919c5724
Authentihash MD5
e593dd14a41fd9a6cb42fdae324c3092
Authentihash SHA1
e3c1dd569aa4758552566b0213ee4d1fe6382c4b
Authentihash SHA256
fe4270a61dbed978c28b2915fcc2826d011148dcb7533fa8bd072ddce5944cef
Machine
AMD64
Version
Not recorded
Publisher
Dell Inc.
Download vulnerable sampleView on VirusTotal
dbutil_2_3.sysSample 3 · HVCI FALSE
MD5
084bd27e151fef55b5d80025c3114d35
SHA1
c6920171fa6dff2c17eb83befb5fd28e8dddf5f0
SHA256
87e38e7aeaaaa96efe1a74f59fca8371de93544b7af22862eb0e574cec49c7c3
Imphash
7e1327419d10a7eeece5579526f75d9f
Authentihash MD5
5a1c888607ae9844ed843b06c8d689ea
Authentihash SHA1
485c0b9710a196c7177b99ee95e5ddb35b26ddd1
Authentihash SHA256
96ee751f7c38731e97773e07e0f13f4dd361af9aaa1d30b41652c2e6efc3fb3e
Machine
I386
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
dbutil_2_3.sysSample 4 · HVCI TRUE
MD5
d2fd132ab7bbc6bbb87a84f026fa0244
SHA1
10b30bdee43b3a2ec4aa63375577ade650269d25
SHA256
ddbf5ecca5c8086afde1fb4f551e9e6400e94f4428fe7fb5559da5cffa654cc1
Authentihash MD5
3a15f75c672fd3f26510ee4c42785cbd
Authentihash SHA1
71307f712022732585b78afe1ba655a6d4892d1f
Authentihash SHA256
56c6977777763d72cd82b3327d97bb05b13c2424d886d87f9ffbb07ead628142
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal

Recorded command

sc.exe create dbutil_2_3.sys binPath=C:\windows\temp\dbutil_2_3.sys type=kernel && sc.exe start dbutil_2_3.sys

Elevate privileges · Privileges: kernel · OS: Windows 10

Research & references