Driver intelligenceVulnerableVerified

wnbios.sys

Utilized in RealBlindingEDR.

UUID / baa168cd-eba2-42e4-95e9-47cb4b2f9094ADDED / 2024-06-20AUTHOR / goosvorbook

Known samples 1

1 recorded TRUE · 0 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

wnbios.sysSample 1 · HVCI TRUE

MD5: a55bcd596643362ddb2ee558aa238baf
SHA1: aec96520e85330594d3165c86cb92eac34c1e095
SHA256: 530d9223ec7e4123532a403abef96dfd1af5291eb49497392ff5d14d18fccfbb
Imphash: 72374a1c4c0e0db4efcb1386f470a2f3
Authentihash MD5: 760cdf1bc9ef54fd4673fb79e8bbc62b
Authentihash SHA1: a7179d7cf5ee58276c3c42a16195a0b733f31b53
Authentihash SHA256: f6a5ef968bd0e47e1ca9433f8e8d0b9bed0aa0a3baf982fdc27b1cc3b4b857b8
Machine: AMD64
Version: 1.2.0.0 built by: WinDDK
Publisher: Windows (R) Win 7 DDK provider

sc.exe create wnbios.sys binPath=C:\windows\temp\wnbios.sys type=kernel && sc.exe start wnbios.sys

Elevate privileges · Privileges: kernel · OS: Windows 11