Driver intelligenceVulnerableVerified

EIO.sys

This is a vulnerable driver per Microsoft.

UUID / f654ad84-c61d-477c-a0b2-d153b927dfccADDED / 2023-05-20AUTHOR / Michael Haag

Known samples 4

0 recorded TRUE · 4 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

EIO.sysSample 1 · HVCI FALSE

MD5: be9eeea2a8cac5f6cd92c97f234e2fe1
SHA1: 585df373a9c56072ab6074afee8f1ec3778d70f8
SHA256: b17507a3246020fa0052a172485d7b3567e0161747927f2edf27c40e310852e0
Imphash: b8302791cd2edfe6dd562c4854ea495f
Authentihash MD5: ff6c5b1f92372186d4f9879e00e42fcf
Authentihash SHA1: 200be5a696990ee97b4c3176234cde46c3ebc2ce
Authentihash SHA256: 72b36c64f0b349d7816c8e5e2d1a7f59807de0c87d3f071a04dbc56bec9c00db
Machine: AMD64
Version: 1.96
Publisher: ASUSTeK Computer Inc.

EIO.sysSample 2 · HVCI FALSE

MD5: 343ada10d948db29251f2d9c809af204
SHA1: 3f17ff83dc8a5f875fb1b3a5d3b9fcbe407a99f0
SHA256: cf69704755ec2643dfd245ae1d4e15d77f306aeb1a576ffa159453de1a7345cb
Imphash: a96a02cf5f7896a9a9f045d1986bd83c
Authentihash MD5: 5af6b25eec77fec510803a229944c8ad
Authentihash SHA1: ed54e23998978f8124bd1f97c265f708ddba1de0
Authentihash SHA256: d4e7335a177e47688d68ad89940c272f82728c882623f1630e7fd2e03e16f003
Machine: AMD64
Version: 1.97
Publisher: ASUSTeK Computer Inc.

EIO.sysSample 3 · HVCI FALSE

MD5: 00143c457c8885fd935fc5d5a6ba07a4
SHA1: a92207062fb72e6e173b2ffdb12c76834455f5d3
SHA256: 1fac3fab8ea2137a7e81a26de121187bf72e7d16ffa3e9aec3886e2376d3c718
Imphash: 6a47c957830ccce7ef43ed96aacf7c2c
Authentihash MD5: 3fc7ad198c185c20a883e902a02b80f1
Authentihash SHA1: 30a48418d07561c8df8aa4219734f0ded791e430
Authentihash SHA256: 047c1d5bb80826a6f66c182fc8b5f66f59609a71e734117f20a4f98b9866bde5
Machine: I386
Version: 1.97
Publisher: ASUSTeK Computer Inc.

EIO.sysSample 4 · HVCI FALSE

MD5: 6dd82d91f981893be57ff90101a7f7f1
SHA1: 21ce232de0f306a162d6407fe1826aff435b2a04
SHA256: f4c7e94a7c2e49b130671b573a9e4ff4527a777978f371c659c3f97c14d126de
Imphash: a96a02cf5f7896a9a9f045d1986bd83c
Authentihash MD5: 5af6b25eec77fec510803a229944c8ad
Authentihash SHA1: ed54e23998978f8124bd1f97c265f708ddba1de0
Authentihash SHA256: d4e7335a177e47688d68ad89940c272f82728c882623f1630e7fd2e03e16f003
Machine: AMD64
Version: 1.97
Publisher: ASUSTeK Computer Inc.

sc.exe create EIO.sys binPath=C:\windows\temp\EIO.sys type=kernel && sc.exe start EIO.sys

Elevate privileges · Privileges: kernel · OS: Windows 10