← Back to driver explorer
Driver intelligenceVulnerableVerified
asmmap64.sys
ASUS asmmap64 is a memory-mapping driver that exposes physical-memory mapping to user mode. A privileged caller can abuse the interface to read or modify kernel and physical memory.
Known samples 4
0 recorded TRUE · 2 recorded FALSE · 2 unknown for loading despite HVCI. Results apply to individual samples.
asmmap64.sysSample 1 · HVCI FALSE
- MD5
4c016fd76ed5c05e84ca8cab77993961- SHA1
00a442a4305c62cefa8105c0b4c4a9a5f4d1e93b- SHA256
025e7be9fcefd6a83f4471bba0c11f1c11bd5047047d26626da24ee9a419cdc4- Imphash
228bac53e82887d1ed92f51a667a8231- Authentihash MD5
882ef4da71bcb67204bdec731afe1c94- Authentihash SHA1
734f215383ef61350c2da97dea53589ede21a3d2- Authentihash SHA256
ab300e7e0d5d540900dbe11495b8d6788039d1cffb22e2dc2304b730a71eec97- Machine
- AMD64
- Version
- 1, 0, 9, 1
- Publisher
- ASUSTeK Computer Inc.
ASMMAP64.sysSample 2 · HVCI unknown
- MD5
2db34edd17d3a8da7105a19c95a3dd68- SHA1
4efee961c334f659284ca301de8bdc09343fb196- SHA256
5f76c140118b181427969237e364fd70b14fa36533061fd4d8eb2f4751706739- Imphash
895dbf8cfd612cae72c8b48a7b2753c6- Machine
- AMD64
- Version
- 1.1.7.123 built by: WinDDK
- Publisher
- ASUSTeK Computer Inc.
ASMMAP.sysSample 3 · HVCI unknown
- MD5
7b4d08d2017ac06689d422e06c43f0aa- SHA1
aae977dd479514bb5954bc2ae7695bfbb4921e2d- SHA256
42baccea0fceb60b79f78098163147a8dd1ded24cb2f0dbb93edc07dab66135c- Imphash
1385e5e01080290e46e448ba2bbb3087- Machine
- I386
- Version
- 1.1.7.123 built by: WinDDK
- Publisher
- ASUSTeK Computer Inc.
asmmap64.sysSample 4 · HVCI FALSE
- MD5
116dd55eef8843d7c526eb17a932822f- SHA1
d45b60ddcea1ad4c85dabeb604acf5786fbb7068- SHA256
003326a58256a5bf9912a0b4f6f39295c2909596b33c3837a0c85c7ba7523e14- Imphash
228bac53e82887d1ed92f51a667a8231- Authentihash MD5
882ef4da71bcb67204bdec731afe1c94- Authentihash SHA1
734f215383ef61350c2da97dea53589ede21a3d2- Authentihash SHA256
ab300e7e0d5d540900dbe11495b8d6788039d1cffb22e2dc2304b730a71eec97- Machine
- AMD64
- Version
- 1, 0, 9, 1
- Publisher
- ASUS
Recorded command
sc.exe create asmmap64.sys binPath=C:\windows\temp\asmmap64.sys type=kernel && sc.exe start asmmap64.sysElevate privileges · Privileges: kernel · OS: Windows 10
Research & references
Acknowledgement: fluffycats31 @fluffycats31