LOLDriversTHE DRIVER THREAT CATALOG
← Back to driver explorer
Driver intelligenceVulnerableVerified

AsUpIO.sys

Description not recorded.

UUID / 8d97bb7f-e009-4dc7-ab9d-fde293e679dcADDED / 2023-05-06AUTHOR / Michael Haag, Nasreddine Bencherchali

Known samples 4

3 recorded TRUE · 1 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

AsUpIO.sysSample 1 · HVCI TRUE
MD5
9ba7c30177d2897bb3f7b3dc2f95ae0a
SHA1
7115929de6fc6b9f09142a878d1a1bf358af5f24
SHA256
8f23313adb35782adb0ba97fefbfbb8bbc5fc40ae272e07f6d4629a5305a3fa2
Imphash
e0813a780309a0af84b605d95bd194e4
Authentihash MD5
a0bb761aa5957303141a7186d0ae717b
Authentihash SHA1
44638264cb1804ae17757f1336c19613de2f6e20
Authentihash SHA256
d12acedc9a2702a18499b77dc8ae9e6b2d1eb557eb08c8a14b2ab3a984edec01
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
AsUpIO.sysSample 2 · HVCI TRUE
MD5
f8dce1eb0f9fcaf07f68fe290aa629e4
SHA1
d697a3f4993e7cb15efdeda3b1a798ae25a2d0e9
SHA256
bdcacee3695583a0ca38b9a786b9f7334bf2a9a3387e4069c8e6ca378b2791d0
Imphash
51780bba04121d6be13f69de08721445
Authentihash MD5
62c8f650e44fbd061ce3bc90a011758c
Authentihash SHA1
d5f525a3f525aa2dc3459781c249896468e576ed
Authentihash SHA256
a7c6f397f1fb230627bb537e1cf59283be04d17d050a384661e00aba6877b145
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal
AsUpIO.sysSample 3 · HVCI TRUE
MD5
6d4159694e1754f262e326b52a3b305a
SHA1
d5fd9fe10405c4f90235e583526164cd0902ed86
SHA256
b9a4e40a5d80fedd1037eaed958f9f9efed41eb01ada73d51b5dcd86e27e0cbf
Imphash
9d5a58052468c8e07ff3d5bd730e5d00
Authentihash MD5
3e6db96f242c0c3115075add7d7847a0
Authentihash SHA1
c5da546e0af6119f033a5d4ed79e7f5d90c004ff
Authentihash SHA256
70870e20f563899e4f05be2d0049cb495552b409ca7f4729a335bcbfffc3f47c
Machine
AMD64
Version
Not recorded
Publisher
ASUSTeK Computer Inc.
Download vulnerable sampleView on VirusTotal
AsUpIO64.sysSample 4 · HVCI FALSE
MD5
1392b92179b07b672720763d9b1028a5
SHA1
8b6aa5b2bff44766ef7afbe095966a71bc4183fa
SHA256
b4d47ea790920a4531e3df5a4b4b0721b7fea6b49a35679f0652f1e590422602
Imphash
b4b90c1b054ebe273bff4b2fd6927990
Authentihash MD5
1e97ead4c5049f8fefe2b72edd5fa90e
Authentihash SHA1
2a95f882dd9bafcc57f144a2708a7ec67dd7844c
Authentihash SHA256
7f75d91844b0c162eeb24d14bcf63b7f230e111daa7b0a26eaa489eeb22d9057
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal

Recorded command

sc.exe create AsUpIO.sys binPath=C:\windows\temp\AsUpIO.sys type=kernel && sc.exe start AsUpIO.sys

Elevate privileges · Privileges: kernel · OS: Windows 10

Research & references