← Back to driver explorer
Driver intelligenceVulnerableVerified

asio.sys

ASUS AsIO hardware-access drivers expose physical-memory mapping and I/O-port operations to user mode. These primitives can be abused to read or modify privileged system state and execute code in kernel context.

UUID / 2651f5c4-d9e1-4b06-92be-e9e7313f87c4ADDED / 2023-01-09AUTHOR / Nasreddine Bencherchali, Michael Haag

Known samples 37

14 recorded TRUE · 23 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

asio.sysSample 1 · HVCI FALSE
MD5
bedc99bbcedaf89e2ee1aa574c5a2fa4
SHA1
160a237295a9e5cbb64ca686a84e47553a14f71d
SHA256
0ee5067ce48883701824c5b1ad91695998916a3702cf8086962fbe58af74b2d6
Imphash
d7de998e454f947f62d4a6b66490563b
Authentihash MD5
7bb2dcc29ba50372d08fea800c190f09
Authentihash SHA1
e5c090903a20744ba3583a8ea684d035e8cecc34
Authentihash SHA256
9dcfd796e244d0687cc35eac9538f209f76c6df12de166f19dbc7d2c47fb16b3
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
AsIO32.sysSample 2 · HVCI FALSE
MD5
2ca1044a04cb2f0ce5bd0a5832981e04
SHA1
8b86c99328e4eb542663164685c6926e7e54ac20
SHA256
1afa03118f87b62c59a97617e595ebb26dde8dbdd16ee47ef3ddd1097c30ef6a
Imphash
2699b7ae36fcadd71425ebafd231d0d1
Authentihash MD5
3824dd56459d29ffc5d4bb51d7123778
Authentihash SHA1
5a7dd0da0aee0bdedc14c1b7831b9ce9178a0346
Authentihash SHA256
92edd48dfac025d4069eb6491b9730d9d131b77cceaa480af9b3c32bc8c5e3a9
Machine
I386
Version
Not recorded
Publisher
Not recorded
AsIO3.sysSample 3 · HVCI TRUE
MD5
40f39a98fb513411dacdfc5b2d972206
SHA1
fe02ae340dc7fe08e4ad26dab9de418924e21603
SHA256
26453afb1f808f64bec87a2532a9361b696c0ed501d6b973a1f1b5ae152a4d40
Imphash
f5ebade1d3a6d3bde264b0c7f9f639e7
Authentihash MD5
8c33214968ec9043fa1c6abf1911e06d
Authentihash SHA1
3075f1fc419a62544b291d02e9067783cb0fd1f3
Authentihash SHA256
5aa7a47c7abaf13453b8ab309ef16bdd80ceaf7407e67fa27932d4591f025d67
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
AsIO3.sysSample 4 · HVCI TRUE
MD5
19f32bf24b725f103f49dc3fa2f4f0bd
SHA1
e40ea8d498328b90c4afbb0bb0e8b91b826f688e
SHA256
2d195cd4400754cc6f6c3f8ab1fe31627932c3c1bf8d5d0507c292232d1a2396
Imphash
b3e26c5e0de2d01597dca208ef27cc38
Authentihash MD5
cf61dd8f9a187de6219f930866defcbd
Authentihash SHA1
80bb26a2ef12a3d9d77fe5dd6059d5955b690b2e
Authentihash SHA256
a7bb08f99a9701482ce693d71e95559b10a247c4e8f50deba8097b0d3f191532
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
asio.sysSample 5 · HVCI FALSE
MD5
bfe96411cf67edb3cee2b9894b910cd5
SHA1
67dfd415c729705396ce54166bd70faf09ac7f10
SHA256
48891874441c6fa69e5518d98c53d83b723573e280c6c65ccfbde9039a6458c9
Imphash
2699b7ae36fcadd71425ebafd231d0d1
Authentihash MD5
3824dd56459d29ffc5d4bb51d7123778
Authentihash SHA1
5a7dd0da0aee0bdedc14c1b7831b9ce9178a0346
Authentihash SHA256
92edd48dfac025d4069eb6491b9730d9d131b77cceaa480af9b3c32bc8c5e3a9
Machine
I386
Version
Not recorded
Publisher
Not recorded
asio.sysSample 6 · HVCI FALSE
MD5
ea14899d1bfba397bc731770765768d1
SHA1
c775ca665ed4858acc3f7e75e025cbbda1f8c687
SHA256
506f953bbb285aeb8af0549eb24f52f3b7af36afe740afa36735bac70573ce28
Imphash
b4b90c1b054ebe273bff4b2fd6927990
Authentihash MD5
9fd03554246c6c74c232919c680d7be8
Authentihash SHA1
b25550309c902a21b03367ae27694c5a29b891b5
Authentihash SHA256
c3e3719ca592ba65a67f594ec1a08d0d7ad724b088be77d48cb33627c56f4614
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
AsIO2.sysSample 7 · HVCI TRUE
MD5
09672532194b4bff5e0f7a7d782c7bf2
SHA1
aa2ea973bb248b18973e57339307cfb8d309f687
SHA256
5ae23f1fcf3fb735fcf1fa27f27e610d9945d668a149c7b7b0c84ffd6409d99a
Imphash
81e2eb25e24938b90806de865630a2b2
Authentihash MD5
9387de920b7da0bd65f15323feed6a18
Authentihash SHA1
92fee95e32a727d135f1f46ca98c201fffbf6950
Authentihash SHA256
9c7ad854f6670452d7da064d4b429eb90c42155b6f7eaa52ee471d9ee8b61e6f
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
AsIO3.sysSample 8 · HVCI TRUE
MD5
ba23266992ad964eff6d358d946b76bd
SHA1
d1670bd08cfd376fc2b70c6193f3099078f1d72f
SHA256
71ff60722231c7641ad593756108cf6779dbaad21c7b08065fb1d4e225eab14d
Imphash
f5ebade1d3a6d3bde264b0c7f9f639e7
Authentihash MD5
ace2d8ea30005bce12b1421f431bc39c
Authentihash SHA1
f084b6ba134b23e06f5867e650ba4eb9d1007231
Authentihash SHA256
12af7c39519e16307c2c62a84ca40017b43acf7fa90ec97c182701ffcffa1b61
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
AsIO2.sysSample 9 · HVCI TRUE
MD5
f4e1997192d5a95a38965c9e15c687fc
SHA1
d3b23a0b70d6d279abd8db109f08a8b0721ce327
SHA256
72322fa8bba20df6966acbcf41e83747893fd173cd29de99b5ad1a5d3bf8f2de
Imphash
f74aa24adc713dbb957ccb18f3c16a71
Authentihash MD5
00222ac0100839199b77ebb2c911eda5
Authentihash SHA1
bb4bff7156e15818a9e6344bad411587f3dcc0a1
Authentihash SHA256
0e955e57f078a2c0de7d113e85859bb3e0fcac772a5a1b9b9709a90a86ef4cd5
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
AsIO3_64.sysSample 10 · HVCI TRUE
MD5
07efb8259b42975d502a058db8a3fd21
SHA1
9f22ebcd2915471e7526f30aa53c24b557a689f5
SHA256
7236c8ff33c0e5cfa956778aa7303f1979f3bf709c361399fa1ce101b7e355b8
Imphash
b3e26c5e0de2d01597dca208ef27cc38
Authentihash MD5
9a476899b3d01439880bcc7ae9991d47
Authentihash SHA1
ac07c5670916f6c3949a49036460ac08ec43a582
Authentihash SHA256
54231728c29f2d2003ec575729760369bb72be7b656b52b4f02ec198f4ee4dfd
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
AsIO3.sysSample 11 · HVCI TRUE
MD5
1414629b1ee93d2652ff49b2eb829940
SHA1
df58f9b193c6916aaec7606c0de5eba70c8ec665
SHA256
7b0f442ac0bb183906700097d65aed0b4b9d8678f9a01aca864854189fe368e7
Imphash
b3e26c5e0de2d01597dca208ef27cc38
Authentihash MD5
cf61dd8f9a187de6219f930866defcbd
Authentihash SHA1
80bb26a2ef12a3d9d77fe5dd6059d5955b690b2e
Authentihash SHA256
a7bb08f99a9701482ce693d71e95559b10a247c4e8f50deba8097b0d3f191532
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
AsIO3.sysSample 12 · HVCI TRUE
MD5
67e03f83c503c3f11843942df32efe5a
SHA1
b0c7ec472abf544c5524b644a7114cba0505951e
SHA256
7e3b0b8d3e430074109d85729201d7c34bc5b918c0bcb9f64ce88c5e37e1a456
Imphash
f5ebade1d3a6d3bde264b0c7f9f639e7
Authentihash MD5
a41fc38c2ffe9e5097c8d781a89bbbe9
Authentihash SHA1
a248637b54b10942743e0caf8698ce8b84559f79
Authentihash SHA256
9512115b60e67fa268a7463119add2404150842bb3dffa41124b12dd9cb580a2
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
AsIO64.sysSample 13 · HVCI FALSE
MD5
85b756463ab0c000f816260d49923cde
SHA1
de0c16e3812924212f04e15caa09763ae4770403
SHA256
841335eeb6af68dce5b8b24151776281a751b95056a894991b23afae80e9f33b
Imphash
ccdeab2a83fbf2fef2e418cccd133ec1
Authentihash MD5
e0f8fb00de2a72c7808c94223cea5145
Authentihash SHA1
cbe317096adb8eba45f7e8b22830257ff8625514
Authentihash SHA256
e304e5d70d3f986f623fad7f4355d5218d8c1681e423b02db0946cbe1503eb76
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
AsIO3_64.sysSample 14 · HVCI TRUE
MD5
598f8fb2317350e5f90b7bd16baf5738
SHA1
a8be6203c5a87ecc3ae1c452b7b6dbdf3a9f82ae
SHA256
910479467ef17b9591d8d42305e7f6f247ad41c60ec890a1ffbe331f495ed135
Imphash
f5ebade1d3a6d3bde264b0c7f9f639e7
Authentihash MD5
ace2d8ea30005bce12b1421f431bc39c
Authentihash SHA1
f084b6ba134b23e06f5867e650ba4eb9d1007231
Authentihash SHA256
12af7c39519e16307c2c62a84ca40017b43acf7fa90ec97c182701ffcffa1b61
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
asio.sysSample 15 · HVCI FALSE
MD5
2b4e66fac6503494a2c6f32bb6ab3826
SHA1
ed219d966a6e74275895cc0b975b79397760ea9f
SHA256
923ebbe8111e73d5b8ecc2db10f8ea2629a3264c3a535d01c3c118a3b4c91782
Imphash
f4c5b0399665885a7dd34f7cdbbc586f
Authentihash MD5
1b20fb8ed378500e83656fd527ac48c4
Authentihash SHA1
e471ba6d1327d1026eb2c6a905e2bad3952dabbd
Authentihash SHA256
ed302ea33feb557b879f64c4b7835947a9ca31054573e1487f5bbc38449753ff
Machine
I386
Version
Not recorded
Publisher
Not recorded
AsIO2.sysSample 16 · HVCI TRUE
MD5
79329e2917623181888605bc5b302711
SHA1
844d2345bde50bf8ee7e86117cf7b8c6e6f00be4
SHA256
a7860e110f7a292d621006b7208a634504fb5be417fd71e219060381b9a891e6
Imphash
d6d76f43ccc3872b879b0df583364c78
Authentihash MD5
220f8ab33b94d37e06e465825c05a867
Authentihash SHA1
06dd63bd069498a712cdfe3d9ac27bfbf5d661f5
Authentihash SHA256
7ebc5906d7fd9c606dc6ef9b49f3e57b63af838f5807fcdcdd5ff47b5b05e39c
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
AsIO3.sysSample 17 · HVCI TRUE
MD5
1ce19950e23c975f677b80ff59d04fae
SHA1
4f30f64b5dfcdc889f4a5e25b039c93dd8551c71
SHA256
b6fd51e1f57a03006953e84fd56cc2821cc19e7c77c0474e1110aabaacaf03df
Imphash
b3e26c5e0de2d01597dca208ef27cc38
Authentihash MD5
cf61dd8f9a187de6219f930866defcbd
Authentihash SHA1
80bb26a2ef12a3d9d77fe5dd6059d5955b690b2e
Authentihash SHA256
a7bb08f99a9701482ce693d71e95559b10a247c4e8f50deba8097b0d3f191532
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
AsIO3.sysSample 18 · HVCI TRUE
MD5
370a4ca29a7cf1d6bc0744afc12b236c
SHA1
cfa85a19d9a2f7f687b0decdc4a5480b6e30cb8c
SHA256
c344e92a6d06155a217a9af7b4b35e6653665eec6569292e7b2e70f3a3027646
Imphash
f0cd7cce1d03cf9df1b8266701f92b46
Authentihash MD5
2f131a8ffb55f70edd90f4cda9e4f84e
Authentihash SHA1
4bfc51e23494f7eaf27560f92cd6fbced2ffa4f6
Authentihash SHA256
9b1af050481bda270a08ae873224a142c8b2119eeda59d3a04b1f6d66715a8c8
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
asio.sysSample 19 · HVCI FALSE
MD5
68726474c69b738eac3a62e06b33addc
SHA1
8453fc3198349cf0561c87efc329c81e7240c3da
SHA256
c470c9db58840149ce002f3e6003382ecf740884a683bae8f9d10831be218fa2
Imphash
12befc0a82dcb0585359d335ed47af19
Authentihash MD5
9f79edf758e219929902ec7564e0f435
Authentihash SHA1
c92148d0666f2235500805975be79738b84e48c2
Authentihash SHA256
19c74ea0e0baf04820e5642bd2fa224158801ed966be1041539e3c55bd65c471
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
AsIO3_64.sysSample 20 · HVCI TRUE
MD5
d5556c54c474cf0bff25804bfbe788d3
SHA1
c71597c89bd8e937886e3390bc8ac4f17cdeae7c
SHA256
fa875178ae2d7604d027510b0d0a7e2d9d675e10a4c9dda2d927ee891e0bcb91
Imphash
b3e26c5e0de2d01597dca208ef27cc38
Authentihash MD5
d9af966d89c5f045997042d35b9a7b91
Authentihash SHA1
b6f1e92a8452c2aec22aaa7657e92d2aa48b3055
Authentihash SHA256
26b8e689a13d3434951559cff24fcfe55edeb7b78c7cc16db1a273c90aa694c1
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
AsIO.sysSample 21 · HVCI FALSE
MD5
1dc94a6a82697c62a04e461d7a94d0b0
SHA1
b97a8d506be2e7eaa4385f70c009b22adbd071ba
SHA256
2da330a2088409efc351118445a824f11edbe51cf3d653b298053785097fe40e
Imphash
b4b90c1b054ebe273bff4b2fd6927990
Authentihash MD5
9fd03554246c6c74c232919c680d7be8
Authentihash SHA1
b25550309c902a21b03367ae27694c5a29b891b5
Authentihash SHA256
c3e3719ca592ba65a67f594ec1a08d0d7ad724b088be77d48cb33627c56f4614
Machine
AMD64
Version
Not recorded
Publisher
ASUSTeK Computer Inc.
AsIO.sysSample 22 · HVCI FALSE
MD5
798de15f187c1f013095bbbeb6fb6197
SHA1
92f251358b3fe86fd5e7aa9b17330afa0d64a705
SHA256
436ccab6f62fa2d29827916e054ade7acae485b3de1d3e5c6c62d3debf1480e7
Imphash
d7de998e454f947f62d4a6b66490563b
Authentihash MD5
7bb2dcc29ba50372d08fea800c190f09
Authentihash SHA1
e5c090903a20744ba3583a8ea684d035e8cecc34
Authentihash SHA256
9dcfd796e244d0687cc35eac9538f209f76c6df12de166f19dbc7d2c47fb16b3
Machine
AMD64
Version
Not recorded
Publisher
ASUSTeK Computer Inc.
AsIO.sysSample 23 · HVCI FALSE
MD5
1392b92179b07b672720763d9b1028a5
SHA1
8b6aa5b2bff44766ef7afbe095966a71bc4183fa
SHA256
b4d47ea790920a4531e3df5a4b4b0721b7fea6b49a35679f0652f1e590422602
Imphash
b4b90c1b054ebe273bff4b2fd6927990
Authentihash MD5
1e97ead4c5049f8fefe2b72edd5fa90e
Authentihash SHA1
2a95f882dd9bafcc57f144a2708a7ec67dd7844c
Authentihash SHA256
7f75d91844b0c162eeb24d14bcf63b7f230e111daa7b0a26eaa489eeb22d9057
Machine
AMD64
Version
Not recorded
Publisher
ASUSTeK Computer Inc.
AsIO.sysSample 24 · HVCI TRUE
MD5
fef9dd9ea587f8886ade43c1befbdafe
SHA1
af6e1f2cfb230907476e8b2d676129b6d6657124
SHA256
dde6f28b3f7f2abbee59d4864435108791631e9cb4cdfb1f178e5aa9859956d8
Imphash
b4b90c1b054ebe273bff4b2fd6927990
Authentihash MD5
9e7fb1f3c75f1f5e6769813c545643fc
Authentihash SHA1
86f07797273b7f0e0805d2add8c1a0be116eb88c
Authentihash SHA256
191689c53195dbe828f406b206cb167dcd4671ecdab32b80e01c885f706a6baf
Machine
AMD64
Version
Not recorded
Publisher
ASUSTeK Computer Inc.
asio.sysSample 25 · HVCI FALSE
MD5
517d484bdbad4637188ec7a908335b86
SHA1
2207cdee7deaba1492ae2349392864f19eb4dfaf
SHA256
db73b0fa032be22405fa0b52fbfe3b30e56ac4787e620e4854c32668ae43bc33
Imphash
12befc0a82dcb0585359d335ed47af19
Authentihash MD5
9f79edf758e219929902ec7564e0f435
Authentihash SHA1
c92148d0666f2235500805975be79738b84e48c2
Authentihash SHA256
19c74ea0e0baf04820e5642bd2fa224158801ed966be1041539e3c55bd65c471
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
asio.sysSample 26 · HVCI FALSE
MD5
b2e4e588ce7b993cc31c18a0721d904d
SHA1
a714a2a045fa8f46d0165b78fe3eecf129c1de3a
SHA256
707b4b5f5c4585156d8a4d8c39cf26729f5ad05d7f77b17f48e670e808e3e6a0
Imphash
d7de998e454f947f62d4a6b66490563b
Authentihash MD5
7bb2dcc29ba50372d08fea800c190f09
Authentihash SHA1
e5c090903a20744ba3583a8ea684d035e8cecc34
Authentihash SHA256
9dcfd796e244d0687cc35eac9538f209f76c6df12de166f19dbc7d2c47fb16b3
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
asio.sysSample 27 · HVCI FALSE
MD5
9d8cb58b9a9e177ddd599791a58a654d
SHA1
e4e40032376279e29487afc18527804dce792883
SHA256
b3e645e8817696fa5d5e2255f9328f3b6a2e5fce91737f4d654ff155dc9851e5
Imphash
b0e74761cced2dde5173ae05ec562085
Authentihash MD5
5b13f61ef5173aaea45b31d934fa2b37
Authentihash SHA1
55ab7e27412eca433d76513edc7e6e03bcdd7eda
Authentihash SHA256
c1b41d6b91448e2409bb2f4fbf4aeb952adf373d0decc9d052277b89ba401407
Machine
I386
Version
Not recorded
Publisher
Not recorded
asio.sysSample 28 · HVCI FALSE
MD5
663f2fb92608073824ee3106886120f3
SHA1
470633a3a1e1b1f13c3f6c5192ce881efd206d7c
SHA256
41765151df57125286b398cc107ff8007972f4653527f876d133dac1548865d6
Imphash
f4c5b0399665885a7dd34f7cdbbc586f
Authentihash MD5
4fcf3854e63dee328f9deefa6ce069cb
Authentihash SHA1
d569d4bab86e70efbcdfdac9d822139d6f477b7c
Authentihash SHA256
80599708ce61ec5d6dcfc5977208a2a0be2252820a88d9ba260d8cdf5dc7fbe4
Machine
I386
Version
Not recorded
Publisher
Not recorded
asio.sysSample 29 · HVCI FALSE
MD5
a82c01606dc27d05d9d3bfb6bb807e32
SHA1
1951ae94c6ee63fa801208771b5784f021c70c60
SHA256
ce231637422709d927fb6fa0c4f2215b9c0e3ebbd951fb2fa97b8e64da479b96
Imphash
12befc0a82dcb0585359d335ed47af19
Authentihash MD5
09e04d9a1ba63e4db9e4b55a00d5050d
Authentihash SHA1
61e1b497a5df0797527d6d465a8f315a82ad35eb
Authentihash SHA256
739c11fdb8673ab5b78f1a874daf5ba3faddb7910a6d4e0cc49abd8b8537333f
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
asio.sysSample 30 · HVCI FALSE
MD5
94cdf2cf363be5a8749670bea4db65cd
SHA1
96523f72e4283f9816d3da8f2270690dd1dd263e
SHA256
20e52e0d7f579dc6884cc6e80266fddceda69ea5fdd0b095c0874b0d877e48a2
Imphash
d7de998e454f947f62d4a6b66490563b
Authentihash MD5
7bb2dcc29ba50372d08fea800c190f09
Authentihash SHA1
e5c090903a20744ba3583a8ea684d035e8cecc34
Authentihash SHA256
9dcfd796e244d0687cc35eac9538f209f76c6df12de166f19dbc7d2c47fb16b3
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
asio.sysSample 31 · HVCI FALSE
MD5
272446de15c63095940a3dad0b426f21
SHA1
7eb34cc1fcffb4fdb5cb7e97184dd64a65cb9371
SHA256
52a90fd1546c068b92add52c29fbb8a87d472a57e609146bbcb34862f9dcec15
Imphash
2699b7ae36fcadd71425ebafd231d0d1
Authentihash MD5
3824dd56459d29ffc5d4bb51d7123778
Authentihash SHA1
5a7dd0da0aee0bdedc14c1b7831b9ce9178a0346
Authentihash SHA256
92edd48dfac025d4069eb6491b9730d9d131b77cceaa480af9b3c32bc8c5e3a9
Machine
I386
Version
Not recorded
Publisher
Not recorded
asio.sysSample 32 · HVCI FALSE
MD5
f701ddcc7c51919413ddadd351ad2fef
SHA1
ca47bab2bea62ff58caea4741bcfbd7f3abb6c5f
SHA256
2d36642135166bbb296624dca878925963c7da785e42e940f02d01beb7c477d5
Imphash
d7de998e454f947f62d4a6b66490563b
Authentihash MD5
7bb2dcc29ba50372d08fea800c190f09
Authentihash SHA1
e5c090903a20744ba3583a8ea684d035e8cecc34
Authentihash SHA256
9dcfd796e244d0687cc35eac9538f209f76c6df12de166f19dbc7d2c47fb16b3
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
AsIO64.sysSample 33 · HVCI FALSE
MD5
8065a7659562005127673ac52898675f
SHA1
fcde5275ee1913509927ce5f0f85e6681064c9d2
SHA256
b48a309ee0960da3caaaaf1e794e8c409993aeb3a2b64809f36b97aac8a1e62a
Imphash
5662b51943d85b7ca47a99cac81af985
Authentihash MD5
d593aec08f96fe410f7a6b53e49551a0
Authentihash SHA1
2ea631bfe3fd765e3a03b3165790faf8fdd8286b
Authentihash SHA256
906d8412b357379db9512e3f584fcda1f788acc1337e5b4d4eff5e6fa59324a6
Machine
AMD64
Version
Not recorded
Publisher
ASUSTeK Computer Inc.
AsIO3.sysSample 34 · HVCI FALSE
MD5
f8ccfbd55e9fcf655e5ac0cbe62cf5b0
SHA1
e495405d5e3b6b3fa8275a0aecd9339a869df9e7
SHA256
69dc4782060178762305b17c353efc1508a2a6edd9baf124286f380f51f5daed
Imphash
f0cd7cce1d03cf9df1b8266701f92b46
Authentihash MD5
cf99ab62c8f196f5ba745162adfeade8
Authentihash SHA1
5acb42939e09d6b34911be49cfcd09d6916e5650
Authentihash SHA256
24af16a81cc820f3c44efc1733754205faffd637899b706f423500ded5f2bfc7
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
AsIO3.sysSample 35 · HVCI FALSE
MD5
336350017860735c40e8c1d10c70d70d
SHA1
fb10e2451c6b4baee6e9f0a94dccf8eb32e000c9
SHA256
383df3b803ea69e16de314c82c2099283e746a6865cc4488ac927510ab5ada9c
Imphash
9df353ef17794136c2e3d4c454c105c6
Authentihash MD5
600e5dfffea543a1d986cad5df29560b
Authentihash SHA1
8f518b3501faf58d42875b5a00eb1a62fa6ba0e9
Authentihash SHA256
ad0370586555ffc34b633aea8b5e4f42e85a4ff6051982362ff371e3972b23ef
Machine
AMD64
Version
1.02.28
Publisher
Asustek Computer Inc.
AsIO3.sysSample 36 · HVCI FALSE
MD5
6a10758eca7544ed9c23fc3027fdd147
SHA1
9b0f47e15bbeae5db5b777ff17490e3ad3077b4b
SHA256
cc442919294d81400674bb9e1b68ce8f9e5aafed7f45d548862ce167d487d59f
Imphash
3c673848e3f6709859633dbc1e94e692
Authentihash MD5
549a20328bb9ccc83242548b79b1802f
Authentihash SHA1
667e808d66a9caf9d4d57688a2f5eed85ea1dc3b
Authentihash SHA256
0cab01269e7f3af351add0ac19ca9cc781da658cbf078499ccc3e699f8eac5dd
Machine
AMD64
Version
1.02.12
Publisher
Asustek Computer Inc.
asio.sysSample 37 · HVCI FALSE
MD5
0f0ffd1d5eed08cce0eee756b3dfc8b9
SHA1
53b7fce428d49ef24d2500b2fdc42c7a223f91ab
SHA256
d374f143dcfc1817fce11226a30653aa2bb7bf9d36ff58d289ff8c0199e4fc3f
Imphash
d7de998e454f947f62d4a6b66490563b
Authentihash MD5
7bb2dcc29ba50372d08fea800c190f09
Authentihash SHA1
e5c090903a20744ba3583a8ea684d035e8cecc34
Authentihash SHA256
9dcfd796e244d0687cc35eac9538f209f76c6df12de166f19dbc7d2c47fb16b3
Machine
AMD64
Version
Not recorded
Publisher
Not recorded

Recorded command

sc.exe create asio.sys binPath=C:\windows\temp\asio.sys type=kernel && sc.exe start asio.sys

Elevate privileges · Privileges: kernel · OS: Windows 10

Research & references

Acknowledgement: fluffycats31 @fluffycats31