CmdID / Files

AsusBSItf.sys

ASUS BIOS Flash Driver file version info

Driver on Windows LOLDrivers vulnerable driver

A known vulnerable driver

from LOLDrivers

T1068Exploitation for Privilege Escalation

Its entryhttps://www.loldrivers.io/drivers/9905c737-83ad-4801-a573-8267f3aea924/

1 known sample

3.2.12.0 · its entry

c82377f2c1b75afd1503bb494e1b23fc45a4a6b81c7678e4e6cf391ce023ccbb

From LOLDrivers (Apache 2.0). A driver is known by its hash: a sample under another name is the same driver. In Ceplin, "<sha256>".whatis() says which sample a hash is.

Is it the real AsusBSItf.sys?

file version info and known copies

ProductASUS BIOS Flash Driver, ASUSTeK COMPUTER INC.

DescriptionASUS BIOS Flash Driver

From the file’s version info, as recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look.