LOLDriversTHE DRIVER THREAT CATALOG
← Back to driver explorer
Driver intelligenceVulnerableVerified

bedaisy.sys

BattlEye Anti-Cheat BEDAISY.SYS PPL privesc.

UUID / db666d40-c9fa-4039-bfac-a5d7afd61b67ADDED / 2023-04-22AUTHOR / Wack0

Known samples 34

0 recorded TRUE · 34 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

BEDAISY.SYSSample 1 · HVCI FALSE
MD5
7475bfea6ea1cd54029208ed59b96c6b
SHA1
fff7ee0febb8c93539220ca49d4206616e15c666
SHA256
2b120de80a5462f8395cfb7153c86dfd44f29f0776ea156ec4a34fa64e5c4797
Imphash
e38cca61999fb8a0308c0eb798b07989
Authentihash MD5
85751ed97dcd3096b4b5ee6f66109551
Authentihash SHA1
7131f7da22882656c5e22ec033bb95e29273f182
Authentihash SHA256
35a12d81f7062a22644b500d91b1603b4f97756ad165c3ea571e7fef55c24162
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
bedaisy.sysSample 2 · HVCI FALSE
MD5
8aa9d47ec9a0713c56b6dec3d601d105
SHA1
f42aa04b69a2e2241958b972ef24b65f91c3af12
SHA256
a0e583bd88eb198558442f69a8bbfc96f4c5c297befea295138cfd2070f745c5
Imphash
e38cca61999fb8a0308c0eb798b07989
Authentihash MD5
3673f3a2d07f53d16a2f5680c355ed11
Authentihash SHA1
40f77890fc527c559f222acd91f3d1013ff82df9
Authentihash SHA256
bdf49774a13d717c1f0b84bf82f4d9ec652994a475f0b8a0a3ab685cd5fd74a4
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
bedaisy.sysSample 3 · HVCI FALSE
MD5
eb4de413782193e824773723d790cfc4
SHA1
3e406325a717d7163ca31e81beae822d03cbe3d8
SHA256
ffd03584246730397e231eb8d16c1449aef2c3bc79bf9da3ebf8400a21b20ae7
Imphash
e38cca61999fb8a0308c0eb798b07989
Authentihash MD5
4c08353501d5d65fde7a04f134186087
Authentihash SHA1
6a0fc9c1b6267bd2fb1c71d7eee45caf1f4e7b83
Authentihash SHA256
b1ad1af005bd78e1ea1d1eef5041c2bdb46f60a9baa60f4b7be21f9603f99df0
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
bedaisy.sysSample 4 · HVCI FALSE
MD5
0797bb21d7a0210fedf4f3533ee82494
SHA1
4044e5da1f16441fe7eb27cff7a76887a1aa7fec
SHA256
c8ff7c9f510f7a2ed88d9b336d8c9339698d5e1ee14bfb91aa89703ec06dce42
Imphash
e38cca61999fb8a0308c0eb798b07989
Authentihash MD5
c595d64014770bdb47a49a237c89feea
Authentihash SHA1
5ad637dcdb85221e5bbd23ae7c13745bc19d2f50
Authentihash SHA256
f4222e186d23160c29fe2bdf163d29561139eae8484d081457e7278872d7e9e2
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
bedaisy.sysSample 5 · HVCI FALSE
MD5
0ccc4e9396e0be9c4639faec53715831
SHA1
d126c6974a21e9c5fdd7ff1ca60bcc37c9353b47
SHA256
b7bba82777c9912e6a728c3e873c5a8fd3546982e0d5fa88e64b3e2122f9bc3b
Imphash
e38cca61999fb8a0308c0eb798b07989
Authentihash MD5
42e75fe3c1e87568679be91d37a82620
Authentihash SHA1
2c7ac53b0d5f48fea6816b561ccf1b925d878476
Authentihash SHA256
7509d30b279e30893db7851a2912a5ffb29ec7e839220890d76de8e3a57b4872
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
bedaisy.sysSample 6 · HVCI FALSE
MD5
f670d1570c75ab1d8e870c1c6e3baba1
SHA1
e40182c106f6f09fd79494686329b95477d6beb5
SHA256
0a9b608461d55815e99700607a52fbdb7d598f968126d38e10cc4293ac4b1ad8
Imphash
e38cca61999fb8a0308c0eb798b07989
Authentihash MD5
c289a81988145dfebed1199b1e9eb921
Authentihash SHA1
9f49c6de4ff1375d8e0369d8ffb6935e37cfc365
Authentihash SHA256
d27af8f0bed1e4f4aeb2b20da89d0ffa1b7b5f7f14148cdf09e6444a0aa5bb1b
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
bedaisy.sysSample 7 · HVCI FALSE
MD5
8bf290b5eda99fc2697373a87f4e1927
SHA1
9360774a37906e3b3c9fab39721cb9400dd31c46
SHA256
bceaf970b60b4457eca3c181f649a1c67f4602778171e53d9bdc9b97a09603ca
Imphash
e38cca61999fb8a0308c0eb798b07989
Authentihash MD5
98a34f93ea5e94a71b6b798a85d93f13
Authentihash SHA1
01a89dbc757ada8b800c05e190ab5e527220d855
Authentihash SHA256
d7cc798804f07ba04cb1ed9233c5852d147b56df612117c54667cf3ebba975de
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
bedaisy.sysSample 8 · HVCI FALSE
MD5
86bec99cd121b0386a5acc1c368a9d49
SHA1
45e8f87afa41143e0c5850f9e054d18ec9c8a6c0
SHA256
9bd8b0289955a6eb791f45c3203f08a64cbd457fd1b9d598a6fbbca5d0372e36
Imphash
e38cca61999fb8a0308c0eb798b07989
Authentihash MD5
b9821174225ea0d99a279e446c279bd5
Authentihash SHA1
faecbf954a50e1198b45635994baee4c72f08dba
Authentihash SHA256
dcb8df13141708f0dd470b5411c065f8ad21688daf424bd05c94eb6e63dd08aa
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
bedaisy.sysSample 9 · HVCI FALSE
MD5
def0da6c95d14f7020e533028224250e
SHA1
88839168e50a4739dd4193f2d8f93a30cd1f14d8
SHA256
e89afd283d5789b8064d5487e04b97e2cd3fc0c711a8cec230543ebdf9ffc534
Imphash
e38cca61999fb8a0308c0eb798b07989
Authentihash MD5
ea4ee6a954883c3a6134076cf27dc0fc
Authentihash SHA1
48360c28ffa27e0316856c5d392a251add2a83b8
Authentihash SHA256
74f9975737dd078c75048bb01549e7678eb61c065d1f50294b80caeb65cbd65e
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
bedaisy.sysSample 10 · HVCI FALSE
MD5
e4b50e44d1f12a47e18259b41074f126
SHA1
619413b5a6d6aeb4d58c409d54fe4a981dd7e4d9
SHA256
3b19a7207a55d752db1b366b1dea2fd2c7620a825a3f0dcffca10af76611118c
Imphash
e38cca61999fb8a0308c0eb798b07989
Authentihash MD5
4e3fad5e7756d873a4854c0aaea4ce16
Authentihash SHA1
06dafe91fd89a1d1f88501ba04649e70770d04a4
Authentihash SHA256
8be482157bdb504cc35f1126e31f240e0faf6890790c65c58ec3328f58c780d8
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
bedaisy.sysSample 11 · HVCI FALSE
MD5
57cd52ed992b634e74d2ddf9853a73b3
SHA1
5c2262f9e160047b9f4dee53bbfd958ec27ec22e
SHA256
c0ae3349ebaac9a99c47ec55d5f7de00dc03bd7c5cd15799bc00646d642aa8de
Imphash
e38cca61999fb8a0308c0eb798b07989
Authentihash MD5
24b6bd1e14bebf28ec2b10d9f745fcdc
Authentihash SHA1
604d6b46e39d0a635fdc853c8260c4dd003baabc
Authentihash SHA256
9f742d827a2e203a4c9d8fccb1daf2e85d451761fc9c0acb962dd6c447ef10ca
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
bedaisy.sysSample 12 · HVCI FALSE
MD5
9945823e9846724c70d2f8d66a403300
SHA1
4c16dcc7e6d7dd29a5f6600e50fc01a272c940e1
SHA256
fa21e3d2bfb9fafddec0488852377fbb2dbdd6c066ca05bb5c4b6aa840fb7879
Imphash
e38cca61999fb8a0308c0eb798b07989
Authentihash MD5
96d64636bf6a8d855ee56021e9bf2ca3
Authentihash SHA1
344bcc6e97ec8026c1684bb97c58fa37973176a0
Authentihash SHA256
facc577070cf72cb8d9247e36054fcb30c60a35ae056cffac7411648c513e642
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
bedaisy.sysSample 13 · HVCI FALSE
MD5
5eabc87416f59e894adfde065d0405fa
SHA1
928b9b180ff5deb9f9dd3a38c4758bcf09298c47
SHA256
5d7bfe05792189eaf7193bee85f0c792c33315cfcb40b2e62cc7baef6cafbc5c
Imphash
e38cca61999fb8a0308c0eb798b07989
Authentihash MD5
8073baae1a8124bd231f1ee431e78ee4
Authentihash SHA1
b72d85f73296f5ef58082050db39ca5f80b932c0
Authentihash SHA256
c29e726448ad3e6452b5d186afb4668e6fcc942be512fe25ed72cfa1b73a6007
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
bedaisy.sysSample 14 · HVCI FALSE
MD5
eba6b88bc7bca21658bda9533f0bbff8
SHA1
c8674fe95460a37819e06d9df304254931033ca7
SHA256
7c830ed39c9de8fe711632bf44846615f84b10db383f47b7d7c9db29a2bd829a
Imphash
e38cca61999fb8a0308c0eb798b07989
Authentihash MD5
3dad3438a45b30a52d10447f2bed9dbf
Authentihash SHA1
8b20c1ee70505588cdf27f5b1cf4bf1ce2ef3dd6
Authentihash SHA256
8483c5dc2323306d4ee3685b7e90a4c11e11b01d04cb607e0bc5aad368fd3c6e
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
bedaisy.sysSample 15 · HVCI FALSE
MD5
a5deee418b7b580ca89db8a871dc1645
SHA1
a38aac44ee232fb50a6abf145e8dd921ca3e7d78
SHA256
773999db2f07c50aad70e50c1983fa95804369d25a5b4f10bd610f864c27f2fc
Imphash
e38cca61999fb8a0308c0eb798b07989
Authentihash MD5
2cc0df9191b874e7821a7d7bf292800f
Authentihash SHA1
6a6529fbb133c9535692d92148629418e2bc315e
Authentihash SHA256
b5603b60137fed0dfcc95ec10563b0d5fa2e033944019ba5f338f7f7bd2aa45b
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
bedaisy.sysSample 16 · HVCI FALSE
MD5
6917ef5d483ed30be14f8085eaef521b
SHA1
d8adf4f02513367c2b273abb0bc02f7eb3a5ef19
SHA256
4ba224af60a50cad10d0091c89134c72fc021da8d34a6f25c4827184dc6ca5c7
Imphash
e38cca61999fb8a0308c0eb798b07989
Authentihash MD5
b56b5360b0e294d26c840bf3ad8c6ad4
Authentihash SHA1
489cb134ee754835a6a9c0d202e67e05434d8b95
Authentihash SHA256
fc7d726e0e803bb38c0f9e910d91970c3dd7444ace1c071381e2e06939616205
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
bedaisy.sysSample 17 · HVCI FALSE
MD5
c9cb486b4f652c9cfb8411803f8ed5f0
SHA1
f2ce790bf47b01a7e1ef5291d8fa341d5f66883a
SHA256
f2ed6c1906663016123559d9f3407bc67f64e0d235fa6f10810a3fa7bb322967
Imphash
e38cca61999fb8a0308c0eb798b07989
Authentihash MD5
89210e34f569d4a83649220f95cf14bd
Authentihash SHA1
427ddaccca98cfda7f6778da1e7ff824c9b49ff8
Authentihash SHA256
1933f27ebebde55942291381219497019077548a074e8dcdb120c94df1a2489e
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
bedaisy.sysSample 18 · HVCI FALSE
MD5
e6eaee1b3e41f404c289e22df66ef66b
SHA1
a23a0627297a71a4414193e12a8c074e7bbb8a2e
SHA256
7108613244f16c2279c3c917aa49cef8acf0b92fdaa9ace19bf5cf634360d727
Imphash
e38cca61999fb8a0308c0eb798b07989
Authentihash MD5
043864883d69e1ff2c94a9e6a700c5f3
Authentihash SHA1
28f9f951c83666c0a84493e2646693bfa0d227bb
Authentihash SHA256
55f736e288a101c08b7245ccafe158f5a2e6f0a581f49a87d24e5cbbde8961e1
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
bedaisy.sysSample 19 · HVCI FALSE
MD5
be5f46fd1056f02a7a241e052fa5888f
SHA1
b34fc245d561905c06a8058753d25244aaecbb61
SHA256
8ae383546761069b26826dfbf2ac0233169d155bca6a94160488092b4e70b222
Imphash
e38cca61999fb8a0308c0eb798b07989
Authentihash MD5
9c10517dc293a376373a7b1e711e4faa
Authentihash SHA1
2090e9738915845d1171561cb01d15cd043e80cf
Authentihash SHA256
93f787e33a663311a6a553db1c7d7e5b3f4cd20b0b7725b35dbd0dd67308cef4
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
bedaisy.sysSample 20 · HVCI FALSE
MD5
5e9d5c59ba1f1060f53909c129df3355
SHA1
ca4d2bd6022f71e1a48b08728c0ac83c68e91281
SHA256
0bd164da36bd637bb76ca66602d732af912bd9299cb3d520d26db528cb54826d
Imphash
e38cca61999fb8a0308c0eb798b07989
Authentihash MD5
1a22dcc55fa79a2c8255a529f7e55d94
Authentihash SHA1
0cf32234e257819204c2881fa579f16f29df7984
Authentihash SHA256
fb467e8c9edf1ac9ddabbc666cd48fc37b05e9d9390bb347504c899e15bce4d8
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
bedaisy.sysSample 21 · HVCI FALSE
MD5
2315a8919cfb167e718d8c788ed3ceca
SHA1
40abf7edb4c76fb3f22418f03198151c5363f1cb
SHA256
9e2622d8e7a0ec136ba1fff639833f05137f8a1ff03e7a93b9a4aea25e7abb8d
Imphash
e38cca61999fb8a0308c0eb798b07989
Authentihash MD5
d9b5ead8e8216d9dfa63835428e99038
Authentihash SHA1
bd3558fb46fcb2165f4965f3ba08a0640e9259ef
Authentihash SHA256
ac76256f8ca6608abe84ca194d46bc581706ecc6813e1abe5fa2b6cc3b4bdade
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
bedaisy.sysSample 22 · HVCI FALSE
MD5
b17fb1ad5e880467cf7e61b1ee8e3448
SHA1
0634878c3f6048a38ec82869d7c6df2f69f3e210
SHA256
c35f3a9da8e81e75642af20103240618b641d39724f9df438bf0f361122876b0
Imphash
e38cca61999fb8a0308c0eb798b07989
Authentihash MD5
6c1ab3f6531a440ad85b7e7d8717bac8
Authentihash SHA1
b52b9bec86703af89322ebbc412dc499fa9ca13e
Authentihash SHA256
df101558cf68e3f50fb468248699e6f3938be7a893680bd4803fc2afe20bfd78
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
bedaisy.sysSample 23 · HVCI FALSE
MD5
f7edd110de10f9a50c2922f1450819aa
SHA1
8d6d6745a2adc9e5aa025c38875554ae6440d1ad
SHA256
eba14a2b4cefd74edaf38d963775352dc3618977e30261aab52be682a76b536f
Imphash
e38cca61999fb8a0308c0eb798b07989
Authentihash MD5
bad68e0a55b3e8acab4f2886d3be875b
Authentihash SHA1
36ed967bc3b6973b695aa18c57f5b3be5e20bb6a
Authentihash SHA256
9fb474b921371c4679582df8484932b832345693de94e3c4a158638b4d75a19c
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
bedaisy.sysSample 24 · HVCI FALSE
MD5
100fe0bc0c183d16e1f08d1a2ad624a8
SHA1
1f84d89dd0ae5008c827ce274848d551aff3fc33
SHA256
854bc946b557ed78c7d40547eb39e293e83942a693c94d0e798d1c4fbde7efa9
Imphash
e38cca61999fb8a0308c0eb798b07989
Authentihash MD5
0546bd323c625b7418791623dc8baec1
Authentihash SHA1
95ee60eef4d011ed8e748bbc0b531b21ce95c66c
Authentihash SHA256
7823833a22e11345c69d0c9687b3b75e0043492ed9546d6300a3f63017384538
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
bedaisy.sysSample 25 · HVCI FALSE
MD5
0420fa6704fd0590c5ce7176fdada650
SHA1
fde6ab389a6e0a9b2ef1713df9d43cca5f1f3da8
SHA256
d2e843d9729da9b19d6085edf69b90b057c890a74142f5202707057ee9c0b568
Imphash
e38cca61999fb8a0308c0eb798b07989
Authentihash MD5
c98adcc1e66228fb22bb7c579bc9c5f1
Authentihash SHA1
60ff2c96436f6cf2a1e0db1c3dbb203f1f6c93a6
Authentihash SHA256
761ca3aee052d4a34f500dee578ef55a4e481b1d6096eb3573f3f828ecfe4f89
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
bedaisy.sysSample 26 · HVCI FALSE
MD5
c607c37af638fa4eac751976a6afbaa6
SHA1
6679cb0907ade366cf577d55be07eabc9fb83861
SHA256
cf66fcbcb8b2ea7fb4398f398b7480c50f6a451b51367718c36330182c1bb496
Imphash
e38cca61999fb8a0308c0eb798b07989
Authentihash MD5
c21a5342e4fdb719935f8a9c45ddd16e
Authentihash SHA1
72f17ffb8a9676a099207ddd28bc616e018173b4
Authentihash SHA256
4ad2df1ae0c1ffaa2492de91bbe24ff6bf2b2beb18a62366207dfb4257ed5c60
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
bedaisy.sysSample 27 · HVCI FALSE
MD5
c5d1f8ed329ebb86ddd01e414a6a1718
SHA1
6887668eb41637bbbab285d41a36093c6b17a8fa
SHA256
3d8cfc9abea6d83dfea6da03260ff81be3b7b304321274f696ff0fdb9920c645
Imphash
e38cca61999fb8a0308c0eb798b07989
Authentihash MD5
2cb93b2245caed99ebf25ba4de80f923
Authentihash SHA1
e52946d26810573ce95df496337d68246dbe0c47
Authentihash SHA256
0cf72a6d8c4add613209a1af41c6b09013fa688c9841210b5ff1d2908d99bf00
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
bedaisy.sysSample 28 · HVCI FALSE
MD5
d3026938514218766cb6d3b36ccfa322
SHA1
49174d56cce618c77ae4013fe28861c80bf5ba97
SHA256
a19fc837ca342d2db43ee8ad7290df48a1b8b85996c58a19ca3530101862a804
Imphash
e38cca61999fb8a0308c0eb798b07989
Authentihash MD5
8502ba895dd1127a4cdefc6cf470a748
Authentihash SHA1
2b195297ae70b4858ba8db425f1c807e996f10bf
Authentihash SHA256
425406152227f499013a6c3fbcf7700d98351a30e7813a30f0003f48eceb08ec
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
bedaisy.sysSample 29 · HVCI FALSE
MD5
1b2e3b7f2966f2f6e6a1bb89f97228e5
SHA1
15f16fe63105b8f9cc0ef2bc8f97cfa5deb40662
SHA256
8bf01cd6d55502838853851703eb297ec71361fa9a0b088a30c2434f4d2bf9c6
Imphash
e38cca61999fb8a0308c0eb798b07989
Authentihash MD5
d3b4ebfa52d807a0772e3c870b870c24
Authentihash SHA1
aabd3742ab7e0d8568acbe964ef32fa7b85672b7
Authentihash SHA256
0a2d4815a03365d40b2b22981d4d8bee81bfbd983db1af30ce497fcdf77f83c9
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
bedaisy.sysSample 30 · HVCI FALSE
MD5
00685003005b0b437af929f0499545e4
SHA1
3adea4a3a91504dc2e3c5e9247c6427cd5c73bab
SHA256
edfc38f91b5e198f3bf80ef6dcaebb5e86963936bcd2e5280088ca90d6998b8c
Imphash
e38cca61999fb8a0308c0eb798b07989
Authentihash MD5
51d7485ae8861a772916e0c6ca290128
Authentihash SHA1
7ecbe0821f670b243837f7a98c08e3229f301339
Authentihash SHA256
f8aeb50a115b4d35f15f876eb1a6e5ee5f3a142de12eec50b6bdf81196ffbea4
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
bedaisy.sysSample 31 · HVCI FALSE
MD5
daf11013cf4c879a54ed6a86a05bee3c
SHA1
cf664e30f8bd548444458eef6d56d5c2e2713e2a
SHA256
c640930c29ea3610a3a5cebee573235ec70267ed223b79b9fa45a80081e686a4
Imphash
e38cca61999fb8a0308c0eb798b07989
Authentihash MD5
a8025a82a6bb9f60e76fff45df7a0e13
Authentihash SHA1
5cb6613e446fa2d17036f6a63de658c90bfb0070
Authentihash SHA256
6ae4d36cf42a3bd1ddf9dd98794b401cd995bc519a12ffbde63e63b03a2424b3
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
bedaisy.sysSample 32 · HVCI FALSE
MD5
2a2867e1f323320fdeef40c1da578a9a
SHA1
4818d7517054d5cba38b679bdf7f8495fd152729
SHA256
af298d940b186f922464d2ef19ccfc129c77126a4f337ecf357b4fe5162a477c
Imphash
e38cca61999fb8a0308c0eb798b07989
Authentihash MD5
d9f7f6af0eab15b131532a887860459c
Authentihash SHA1
aa98203bb8c6fb612712a5e44dd118beea49b1ab
Authentihash SHA256
e330de98db81f9b183ef37d31e111301da669f1fc572e87acf8b8c2fe4e602b5
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
bedaisy.sysSample 33 · HVCI FALSE
MD5
729afa54490443da66c2685bd77cb1f0
SHA1
55d84fd3e5db4bdbd3fb6c56a84b6b8a320c7c58
SHA256
dbebf6d463c2dbf61836b3eba09b643e1d79a02652a32482ca58894703b9addb
Imphash
e38cca61999fb8a0308c0eb798b07989
Authentihash MD5
cbd39d71071c7b0d4fbb59c3b8a33048
Authentihash SHA1
0ba998452dde334262e0fe1c8fec365805c8b199
Authentihash SHA256
5db0fe4b16744f14b4ab1d255a4d3c63710d0073417bae9bb3bfeef4a09d38e0
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
bedaisy.sysSample 34 · HVCI FALSE
MD5
644d687c9f96c82ea2974ccacd8cd549
SHA1
e71caa502d0fe3a7383ce26285a6022e63acda97
SHA256
b9ed73af3aef69dc1fb91731d6d0a649e93f83d0f07ddb9729d71c2d00ed0801
Imphash
e38cca61999fb8a0308c0eb798b07989
Authentihash MD5
917e4e62a46f9c176a641372dc3c7f0b
Authentihash SHA1
e647041e015042f8542cc042a07d0b0ac1d2f39f
Authentihash SHA256
7128d13dc4269de832723d4a3a6cfd7e6553576a9e96464583eb8bb5c2f243aa
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal

Recorded command

sc.exe create BEDaisy.sys binPath=C:\windows\temp\BEDaisy.sys type=kernel && sc.exe start BEDaisy.sys

Elevate privileges · Privileges: kernel · OS: Windows 10

Research & references

Acknowledgement: Wack0 Wack0