Driver intelligenceVulnerableVerified

WINIODrv.sys

Description not recorded.

UUID / b745b5da-9cd6-4b3a-badf-fbe487497705ADDED / 2023-01-09AUTHOR / Michael Haag

Known samples 3

0 recorded TRUE · 3 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

WINIODrv.sysSample 1 · HVCI FALSE

MD5: a86150f2e29b35369afa2cafd7aa9764
SHA1: 460008b1ffd31792a6deadfa6280fb2a30c8a5d2
SHA256: 3243aab18e273a9b9c4280a57aecef278e10bfff19abb260d7a7820e41739099
Imphash: 392aa6863da8d7c14ad7386026e93b58
Authentihash MD5: 83510d09c4d0f9f56c0d6caf40ee63cb
Authentihash SHA1: 40cc2318ffffd458023c8cd1e285a5ad51adf538
Authentihash SHA256: b3cbb2b364a494f096e68dc48cca89799ed27e6b97b17633036e363a98fd4421
Machine: AMD64
Version: Not recorded
Publisher: Not recorded

WINIODrv.sysSample 2 · HVCI FALSE

MD5: ad22a7b010de6f9c6f39c350a471a440
SHA1: 738b7918d85e5cb4395df9e3f6fc94ddad90e939
SHA256: 7cfa5e10dff8a99a5d544b011f676bc383991274c693e21e3af40cf6982adb8c
Imphash: 392aa6863da8d7c14ad7386026e93b58
Authentihash MD5: 792b743c370ad28281edd4801b22a31e
Authentihash SHA1: 80ca9c9cce4b5e6afb92a56b5bfd954eca0ff690
Authentihash SHA256: 9199979b9f3ea2108299d028373a6effcc41c81a46eecb430cc6653211d2913d
Machine: AMD64
Version: Not recorded
Publisher: Not recorded

WINIODrv.sysSample 3 · HVCI FALSE

MD5: 0761c357aed5f591142edaefdf0c89c8
SHA1: 43419df1f9a07430a18c5f3b3cc74de621be0f8e
SHA256: c9b49b52b493b53cd49c12c3fa9553e57c5394555b64e32d1208f5b96a5b8c6e
Imphash: 392aa6863da8d7c14ad7386026e93b58
Authentihash MD5: b2fc995c9a92965a53437c30b53d7096
Authentihash SHA1: c21043466942961203e751c9cebcd159e661fa1a
Authentihash SHA256: 961012d06eeaabd9eff9b36173e566bf148a5c8f743f3329c70d8918eba26093
Machine: AMD64
Version: Not recorded
Publisher: Not recorded

sc.exe create WINIODrv.sys binPath=C:\windows\temp\WINIODrv.sys type=kernel && sc.exe start WINIODrv.sys

Elevate privileges · Privileges: kernel · OS: Windows 10