D
DioProcess

Driver Installation

Load the DioProcess kernel driver to enable Ring 0 and Ring -1 features.

Prerequisites Required

Before installing the kernel driver, you MUST complete all prerequisite steps. Failure to do so will result in installation failure or system instability.

Prerequisites

Step 1

Disable Hyper-V

The bundled hypervisor conflicts with Hyper-V. Disable it and reboot.

bcdedit /set hypervisorlaunchtype off
# Reboot required after this command
Step 2

Disable Secure Boot

Access your BIOS/UEFI settings during boot and disable Secure Boot. The exact steps vary by manufacturer.

Step 3

Disable Driver Protections

  • Driver Signature Enforcement: Enable test signing mode
    bcdedit /set testsigning on
    # Reboot required
  • Vulnerable Driver Blocklist: Windows Security → Device Security → Core Isolation → Disable
  • Memory Integrity (HVCI): Disable if enabled in Core Isolation settings

Installation Methods

Signed Driver (Recommended)

Default

Use the title bar "Install Driver" button. This downloads and installs a signed driver that works without test signing mode.

Manual Installation (sc.exe)

For development or custom builds, use the Service Control Manager:

:: Create the driver service
sc create DioProcess type= kernel binPath= "C:\path\to\DioProcess.sys"

:: Start the driver
sc start DioProcess

:: Stop the driver
sc stop DioProcess

:: Delete the service
sc delete DioProcess

KDU / KDMapper

-alldrv flag

With the -alldrv CLI flag, additional installation methods are available that use vulnerable driver exploits. These are for advanced users only.

Verification

After installation, verify the driver is loaded:

  • • The UI title bar will show driver status (green indicator)
  • • Kernel features in context menus will be enabled (not grayed out)
  • • The Hypervisor tab will show "Running" status
# Check if driver is loaded
sc query DioProcess

# Expected output when running:
# STATE: 4  RUNNING

Troubleshooting

Driver fails to start

  • • Check that Hyper-V is disabled: bcdedit | findstr hypervisor
  • • Verify test signing is enabled: bcdedit | findstr testsigning
  • • Check install log: %LOCALAPPDATA%\DioProcess\install.log

Access denied errors

  • • Run DioProcess as Administrator
  • • Check that the driver service was created successfully

System instability

  • • Stop the driver: sc stop DioProcess
  • • Delete the service: sc delete DioProcess
  • • Reboot if necessary

Debug Logging

The driver logs operations via KdPrint(). Use DbgView (SysInternals) to capture debug output:

DioProcess: Windows Build: 10.0 (Build 26100)
DioProcess: Driver loaded successfully
DioProcess: Hypervisor initialized
DioProcess: Device \\Device\\DioProcess created