{"Id":"920e3326-e5dc-446a-9993-6ec05266e0e0","Tags":["ASIO32.sys"],"Verified":"FALSE","Author":"Michael Haag","Created":"2023-01-09","MitreID":"T1068","Category":"vulnerable driver","Commands":{"Command":"sc.exe create ASIO32.sys binPath=C:\\windows\\temp\\ASIO32.sys type=kernel && sc.exe start ASIO32.sys","Description":"","OperatingSystem":"Windows 10","Privileges":"kernel","Usecase":"Elevate privileges"},"Resources":["https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules"],"Detection":[],"Acknowledgement":{"Handle":"","Person":""},"KnownVulnerableSamples":[{"Company":"","Date":"","Description":"","FileVersion":"","Filename":"ASIO32.sys","MachineType":"","OriginalFilename":"","Product":"","ProductVersion":"","Publisher":"","SHA1":"","Signature":[],"LoadsDespiteHVCI":"FALSE","Authentihash":{"MD5":"","SHA1":"d569d4bab86e70efbcdfdac9d822139d6f477b7c","SHA256":"c1b41d6b91448e2409bb2f4fbf4aeb952adf373d0decc9d052277b89ba401407"}},{"Company":"","Date":"","Description":"","FileVersion":"","Filename":"ASIO32.sys","MachineType":"","OriginalFilename":"","Product":"","ProductVersion":"","Publisher":"","SHA1":"","Signature":[],"LoadsDespiteHVCI":"FALSE","Authentihash":{"MD5":"","SHA1":"55ab7e27412eca433d76513edc7e6e03bcdd7eda","SHA256":"c1b41d6b91448e2409bb2f4fbf4aeb952adf373d0decc9d052277b89ba401407"}},{"Company":"","Date":"","Description":"","FileVersion":"","Filename":"ASIO32.sys","MachineType":"","OriginalFilename":"","Product":"","ProductVersion":"","Publisher":"","SHA1":"","Signature":[],"LoadsDespiteHVCI":"FALSE","Authentihash":{"MD5":"","SHA1":"5a7dd0da0aee0bdedc14c1b7831b9ce9178a0346","SHA256":"c1b41d6b91448e2409bb2f4fbf4aeb952adf373d0decc9d052277b89ba401407"}},{"Company":"","Date":"","Description":"","FileVersion":"","Filename":"ASIO32.sys","MachineType":"","OriginalFilename":"","Product":"","ProductVersion":"","Publisher":"","SHA1":"","Signature":[],"LoadsDespiteHVCI":"FALSE","Authentihash":{"MD5":"","SHA1":"55ab7e27412eca433d76513edc7e6e03bcdd7eda","SHA256":"c1b41d6b91448e2409bb2f4fbf4aeb952adf373d0decc9d052277b89ba401407"}},{"Company":"","Date":"","Description":"","FileVersion":"","Filename":"ASIO32.sys","MachineType":"","OriginalFilename":"","Product":"","ProductVersion":"","Publisher":"","SHA1":"","Signature":[],"LoadsDespiteHVCI":"FALSE","Authentihash":{"MD5":"","SHA1":"55ab7e27412eca433d76513edc7e6e03bcdd7eda","SHA256":"c1b41d6b91448e2409bb2f4fbf4aeb952adf373d0decc9d052277b89ba401407"}},{"Company":"","Date":"","Description":"","FileVersion":"","Filename":"ASIO32.sys","MachineType":"","OriginalFilename":"","Product":"","ProductVersion":"","Publisher":"","SHA1":"","Signature":[],"LoadsDespiteHVCI":"FALSE","Authentihash":{"MD5":"","SHA1":"55ab7e27412eca433d76513edc7e6e03bcdd7eda","SHA256":"c1b41d6b91448e2409bb2f4fbf4aeb952adf373d0decc9d052277b89ba401407"}}]}