Driver intelligenceVulnerableVerified

AsrOmgDrv.sys

Description not recorded.

UUID / 3f39af20-802a-4909-a5de-7f6fe7aab350ADDED / 2023-01-09AUTHOR / Michael Haag

Known samples 1

1 recorded TRUE · 0 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

AsrOmgDrv.sysSample 1 · HVCI TRUE

MD5: 4f27c09cc8680e06b04d6a9c34ca1e08
SHA1: 400f833dcc2ef0a122dd0e0b1ec4ec929340d90e
SHA256: 950a4c0c772021cee26011a92194f0e58d61588f77f2873aa0599dff52a160c9
Imphash: 9d7183c1d8107495354c4fad9dae3452
Authentihash MD5: b39f71ca0eb035173a7f6c3dc7a43620
Authentihash SHA1: 045818bc05faf8fb2b7ccc60623f5a6f185d68c7
Authentihash SHA256: 6c9dc878d9605070921338d09c6dbecbe11dec50c03fc69a0462884a07c2c442
Machine: AMD64
Version: 1.00.00.0000 built by: WinDDK
Publisher: ASROCK Incorporation

sc.exe create AsrOmgDrv.sys binPath=C:\windows\temp\AsrOmgDrv.sys type=kernel && sc.exe start AsrOmgDrv.sys

Elevate privileges · Privileges: kernel · OS: Windows 10