CmdID

CmdID / Files

AsIO2.sys

AsIO3 Driver file version info

Driver on Windows LOLDrivers vulnerable driver

A known vulnerable driver

from LOLDrivers
T1068Exploitation for Privilege Escalation

3 known samples

its entry

5ae23f1fcf3fb735fcf1fa27f27e610d9945d668a149c7b7b0c84ffd6409d99a

its entry

72322fa8bba20df6966acbcf41e83747893fd173cd29de99b5ad1a5d3bf8f2de

its entry

a7860e110f7a292d621006b7208a634504fb5be417fd71e219060381b9a891e6

From LOLDrivers (Apache 2.0). A driver is known by its hash: a sample under another name is the same driver. In Ceplin, "<sha256>".whatis() says which sample a hash is.

Is it the real AsIO2.sys?

file version info and known copies
ProductAsIO3, Asustek Computer Inc.
DescriptionAsIO3 Driver

From the file’s version info, as recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look.