Driver Installation
Load the DioProcess kernel driver to enable Ring 0 and Ring -1 features.
Prerequisites Required
Before installing the kernel driver, you MUST complete all prerequisite steps. Failure to do so will result in installation failure or system instability.
Prerequisites
Step 1
Disable Hyper-V
The bundled hypervisor conflicts with Hyper-V. Disable it and reboot.
bcdedit /set hypervisorlaunchtype off
# Reboot required after this commandStep 2
Disable Secure Boot
Access your BIOS/UEFI settings during boot and disable Secure Boot. The exact steps vary by manufacturer.
Step 3
Disable Driver Protections
- Driver Signature Enforcement: Enable test signing mode
bcdedit /set testsigning on # Reboot required - Vulnerable Driver Blocklist: Windows Security → Device Security → Core Isolation → Disable
- Memory Integrity (HVCI): Disable if enabled in Core Isolation settings
Installation Methods
Signed Driver (Recommended)
DefaultUse the title bar "Install Driver" button. This downloads and installs a signed driver that works without test signing mode.
Manual Installation (sc.exe)
For development or custom builds, use the Service Control Manager:
:: Create the driver service
sc create DioProcess type= kernel binPath= "C:\path\to\DioProcess.sys"
:: Start the driver
sc start DioProcess
:: Stop the driver
sc stop DioProcess
:: Delete the service
sc delete DioProcessKDU / KDMapper
-alldrv flagWith the -alldrv CLI flag, additional installation methods are available that use vulnerable driver exploits. These are for advanced users only.
Verification
After installation, verify the driver is loaded:
- • The UI title bar will show driver status (green indicator)
- • Kernel features in context menus will be enabled (not grayed out)
- • The Hypervisor tab will show "Running" status
# Check if driver is loaded
sc query DioProcess
# Expected output when running:
# STATE: 4 RUNNINGTroubleshooting
Driver fails to start
- • Check that Hyper-V is disabled:
bcdedit | findstr hypervisor - • Verify test signing is enabled:
bcdedit | findstr testsigning - • Check install log:
%LOCALAPPDATA%\DioProcess\install.log
Access denied errors
- • Run DioProcess as Administrator
- • Check that the driver service was created successfully
System instability
- • Stop the driver:
sc stop DioProcess - • Delete the service:
sc delete DioProcess - • Reboot if necessary
Debug Logging
The driver logs operations via KdPrint(). Use DbgView (SysInternals) to capture debug output:
DioProcess: Windows Build: 10.0 (Build 26100)
DioProcess: Driver loaded successfully
DioProcess: Hypervisor initialized
DioProcess: Device \\Device\\DioProcess created