LOLDriversTHE DRIVER THREAT CATALOG
← Back to driver explorer
Driver intelligenceVulnerableVerified

directio64.sys

Description not recorded.

UUID / afed9dff-245e-4875-a156-3c5584beed03ADDED / 2023-05-06AUTHOR / Nasreddine Bencherchali

Known samples 10

2 recorded TRUE · 8 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

directio64.sysSample 1 · HVCI FALSE
MD5
537e2c3020b1d48b125da593e66508ec
SHA1
e702221d059b86d49ed11395adffa82ef32a1bce
SHA256
092349aebdac28294dbad1656759d8461f362d1a36b01054dccf861d97beadf0
Imphash
cae90f82e91b9a60af9a0e36c1f73be4
Authentihash MD5
e9ded101dac8161f1c3625da578d390d
Authentihash SHA1
e8f7e20061f9cc20583dcab3b16054d106b8aa83
Authentihash SHA256
b8bf3bd441ebc5814c5d39d053fdcb263e8e58476cbdee4b1226903305f547b6
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
DirectIo64.sysSample 2 · HVCI FALSE
MD5
8fbb1ffc6f13f9d5ee8480b36baffc52
SHA1
3c9c86c0b215ecbab0eeb4479c204dba65258b8e
SHA256
0bc3685b0b8adc97931b5d31348da235cd7581a67edf6d79913e6a5709866135
Imphash
aa274f6b4b15691fd725d7044f98bf36
Authentihash MD5
fc4afd4ae9e72a9f117067d3b76be36c
Authentihash SHA1
b74246c8cb77b0364b7cece38bff5f462eec983c
Authentihash SHA256
40e624bf557b51775af1ca17062c4eca3693322e250b257aec7dc579e626ef07
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
DirectIo64.sysSample 3 · HVCI FALSE
MD5
76d1d4d285f74059f32b8ad19a146d0c
SHA1
3f338ab65bac9550b8749bb1208edb0f7d7bcb81
SHA256
4324f3d1e4007f6499a3d0f0102cd92ed9f554332bc0b633305cd7b957ff16c8
Imphash
9521d8684357766840dbcac2b4cee67d
Authentihash MD5
333bdf3d4b1fcc9038db0cacb89b9bab
Authentihash SHA1
8b86e08d610bcc9ab7b7750f036dbb568f733be0
Authentihash SHA256
841f965977f33d621d126412032c47dd6118251623c380e5572f7553b620b0e1
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
DirectIo64.sysSample 4 · HVCI FALSE
MD5
f41eea88057d3dd1a56027c4174eed22
SHA1
13572d36428ef32cfed3af7a8bb011ee756302b0
SHA256
72c0d2d699d0440db17cb7cbbc06a253eaafd21465f14bb0fed8b85ae73153d1
Imphash
9521d8684357766840dbcac2b4cee67d
Authentihash MD5
598c5fa89cbf0dbcdf6b252cac71aecd
Authentihash SHA1
02a7e085631ecfe031b76afa883a266c850ed61b
Authentihash SHA256
fb5e65aec819c5a91ef0ce0fec0a957826b5e1ac9bac559a1b4201a3870462a3
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
DirectIo64.sysSample 5 · HVCI FALSE
MD5
c4f5619ce04d4bee38024d08513c77fd
SHA1
4c6ec22bc10947d089167b19d83a26bdd69f0dd1
SHA256
79e87b93fbed84ec09261b3a0145c935f7dfe4d4805edfb563b2f971a0d51463
Imphash
9521d8684357766840dbcac2b4cee67d
Authentihash MD5
060c97a44e53086add25404d8694d094
Authentihash SHA1
66941573dafd7259cba113c0fa9eaccd347355fd
Authentihash SHA256
a520ff5c754a1fb62ba88399a313d0c0fb99145ba2d3d91dbf4282388b77fa84
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
DirectIo64.sysSample 6 · HVCI FALSE
MD5
5093f38d597532d59d4df9018056f0d1
SHA1
0904b8fa4654197eefd6380c81bbb2149ffe0634
SHA256
8939116df1d6c8fd0ebd14b2d37b3dec38a8820aa666ecd487bc1bb794f2a587
Imphash
832f0fb3579a07b1c4bec82b4478306b
Authentihash MD5
5789f4f652c129f3cfa28290ffad8672
Authentihash SHA1
706686f2a1ef4738a1856d01ab10eb730fc7b327
Authentihash SHA256
9996b31234ba736fc2c6f2b75f641e25d156f19d6ac84cf85283fde08a714842
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
DirectIo64.sysSample 7 · HVCI FALSE
MD5
790ccca8341919bb8bb49262a21fca0e
SHA1
61f5904e9ff0d7e83ad89f0e7a3741e7f2fbf799
SHA256
9778136d2441439dc470861d15d96fa21dc9f16225232cd05b76791a5e0fde6f
Imphash
9521d8684357766840dbcac2b4cee67d
Authentihash MD5
7b9da0ee121248056b6ff192abd03ccb
Authentihash SHA1
8ec43d1def8bb20354aeba49a9084bacd2c02817
Authentihash SHA256
ad44cfd9c6262a6ff36ee9d03e59ba4b0524ef87f6b980ce15abb10a35d39f88
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
DirectIo64.sysSample 8 · HVCI FALSE
MD5
7978d858168fadd05c17779da5f4695a
SHA1
2db49bdf8029fdcda0a2f722219ae744eae918b0
SHA256
ac63c26ca43701dddaa7fb1aea535d42190f88752900a03040fd5aaa24991e25
Imphash
cef6a450f196b28e634aa3c0655d8eda
Authentihash MD5
4f19a1d2166d52af3e3590d9748e91bc
Authentihash SHA1
f1bdd3236f43338a119d74eca730f0d464ded973
Authentihash SHA256
96a5b3cd7c1a6dda5b6f402e6c35ba535270467f56addc7448dbe4aa78428411
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
DirectIo64.sysSample 9 · HVCI TRUE
MD5
d660fc7255646d5014d45c3bca9c6e20
SHA1
01b95ae502aa09aabc69a0482fcc8198f7765950
SHA256
b2ba6efeff1860614b150916a77c9278f19d51e459e67a069ccd15f985cbc0e1
Imphash
7863a0f25a0647ed7d52641222bd709a
Authentihash MD5
21853c3ceffa008b53f1144772a6750e
Authentihash SHA1
4aea4fbb9a732d57643f61f1bf3b82cebb18ab72
Authentihash SHA256
21a8aa12aa944658f05694243e4d7b9ba07ea24447b539d40977e9b7fa19fed1
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
DirectIo64.sysSample 10 · HVCI TRUE
MD5
b3424a229d845a88340045c29327c529
SHA1
ffabdf33635bdc1ed1714bc8bbfd7b73ef78a37c
SHA256
bda99629ec6c522c3efcbcc9ca33688d31903146f05b37d0d3b43db81bfb3961
Imphash
7863a0f25a0647ed7d52641222bd709a
Authentihash MD5
21853c3ceffa008b53f1144772a6750e
Authentihash SHA1
4aea4fbb9a732d57643f61f1bf3b82cebb18ab72
Authentihash SHA256
21a8aa12aa944658f05694243e4d7b9ba07ea24447b539d40977e9b7fa19fed1
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal

Recorded command

sc.exe create directio64.sys binPath=C:\windows\temp\directio64.sys type=kernel && sc.exe start directio64.sys

Elevate privileges · Privileges: kernel · OS: Windows 10