← Back to driver explorer
Driver intelligenceVulnerableVerified

WiseUnlo.sys

Description not recorded.

UUID / b28cc2ee-d4a2-4fe4-9acb-a7a61cad20c6ADDED / 2023-01-09AUTHOR / Michael Haag

Known samples 7

3 recorded TRUE · 4 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

WiseUnlo.sysSample 1 · HVCI FALSE
MD5
33b3842172f21ba22982bfb6bffbda27
SHA1
c201d5d0ab945095c3b1a356b3b228af1aa652fc
SHA256
9d530642aeb6524691d06b9e02a84e3487c9cdd86c264b105035d925c984823a
Imphash
d658b06ec1ce39670b02a2dd83e29d03
Authentihash MD5
8df54f216312cc14d959dcb858702b01
Authentihash SHA1
7f921e6701f0cc33c6852ab7f79455b9ad9c8eac
Authentihash SHA256
c10c70be4e36fa9c98a4796c2b03db86398e2b07018550b7f0d58edabc553ad2
Machine
AMD64
Version
1.0.1.12
Publisher
WiseCleaner.com
WiseUnlo.sysSample 2 · HVCI TRUE
MD5
e626956c883c7ff3aeb0414570135a58
SHA1
70bb3b831880e058524735b14f2a0f1a72916a4c
SHA256
786f0ba14567a7e19192645ad4e40bee6df259abf2fbdfda35b6a38f8493d6cc
Imphash
7bc998aaa9fe4b4fd5e133554f42d913
Authentihash MD5
4e4d97955557f085f4e1fe4cbba82321
Authentihash SHA1
131a7703dbaf36bcf7034e8690a7046e9eb52d2b
Authentihash SHA256
8a844a8d993db0ee1159b096aee959e32bb9155edd9167b1e6aad2e4019202dd
Machine
I386
Version
1.0.2.13
Publisher
WiseCleaner.com
WiseUnlo.sysSample 3 · HVCI FALSE
MD5
9e0af1fe4d6dd2ca4721810ed1c930d6
SHA1
5b4619596c89ed17ccbe92fd5c0a823033f2f1e1
SHA256
48b1344e45e4de4dfb74ef918af5e0e403001c9061018e703261bbd72dc30548
Imphash
d5bc15465b63888cc8b98ecc63a81517
Authentihash MD5
6d1e6e5682f9a5e8a64dc8d2ec6ddfac
Authentihash SHA1
49fb554b77c8d533e4a1ff30bbc60ef7f80b7055
Authentihash SHA256
c36ace67f4e25f391e8709776348397e4fd3930e641b32c1b0da398e59199ca7
Machine
AMD64
Version
1.0.2.13
Publisher
WiseCleaner.com
WiseUnlo.sysSample 4 · HVCI FALSE
MD5
da8437200af5f3f790e301b9958993d2
SHA1
ce31292b05c0ae1dc639a6ee95bb3bc7350f2aaf
SHA256
87aae726bf7104aac8c8f566ea98f2b51a2bfb6097b6fc8aa1f70adeb4681e1b
Imphash
7bc998aaa9fe4b4fd5e133554f42d913
Authentihash MD5
4e4d97955557f085f4e1fe4cbba82321
Authentihash SHA1
131a7703dbaf36bcf7034e8690a7046e9eb52d2b
Authentihash SHA256
8a844a8d993db0ee1159b096aee959e32bb9155edd9167b1e6aad2e4019202dd
Machine
I386
Version
1.0.2.13
Publisher
WiseCleaner.com
WiseUnlo.sysSample 5 · HVCI FALSE
MD5
4cee9945f9a3e8f2433f5aa8c58671fb
SHA1
b314742af197a786218c6dd704b438469445eefa
SHA256
5e27fe26110d2b9f6c2bad407d3d0611356576b531564f75ff96f9f72d5fcae4
Imphash
05fbe4619edf747787879d9323951439
Authentihash MD5
42d1a185325fed53f39a49a1cbf5ef51
Authentihash SHA1
0d258e0459c2a6754b7dfb69e12a2c44805ca8d8
Authentihash SHA256
36861bb32abd5ba7955aa69269d27772f75d0306485d10ed045125816422c423
Machine
I386
Version
1.0.1.12
Publisher
WiseCleaner.com
WiseUnlo.sysSample 6 · HVCI TRUE
MD5
1762105b28eb90d19e9ab3acde16ead6
SHA1
20cf02c95e329cf2fd4563cddcbd434aad81ccb4
SHA256
daf549a7080d384ba99d1b5bd2383dbb1aa640f7ea3a216df1f08981508155f5
Imphash
d5bc15465b63888cc8b98ecc63a81517
Authentihash MD5
6d1e6e5682f9a5e8a64dc8d2ec6ddfac
Authentihash SHA1
49fb554b77c8d533e4a1ff30bbc60ef7f80b7055
Authentihash SHA256
c36ace67f4e25f391e8709776348397e4fd3930e641b32c1b0da398e59199ca7
Machine
AMD64
Version
1.0.2.13
Publisher
WiseCleaner.com
WiseUnlo.sysSample 7 · HVCI TRUE
MD5
356bda2bf0f6899a2c08b2da3ec69f13
SHA1
b9807b8840327c6d7fbdde45fc27de921f1f1a82
SHA256
358ac54be252673841a1d65bfc2fb6d549c1a4c877fa7f5e1bfa188f30375d69
Imphash
d5bc15465b63888cc8b98ecc63a81517
Authentihash MD5
6d1e6e5682f9a5e8a64dc8d2ec6ddfac
Authentihash SHA1
49fb554b77c8d533e4a1ff30bbc60ef7f80b7055
Authentihash SHA256
c36ace67f4e25f391e8709776348397e4fd3930e641b32c1b0da398e59199ca7
Machine
AMD64
Version
1.0.2.13
Publisher
WiseCleaner.com

Recorded command

sc.exe create WiseUnlo.sys binPath=C:\windows\temp\WiseUnlo.sys type=kernel && sc.exe start WiseUnlo.sys

Elevate privileges · Privileges: kernel · OS: Windows 10

Research & references