CmdID / Files

AsusSAIO.sys

ASUSSAIO(asus1000) file version info

Driver on Windows LOLDrivers vulnerable driver

A known vulnerable driver

from LOLDrivers

T1068Exploitation for Privilege Escalation

Its entryhttps://www.loldrivers.io/drivers/207b30f5-e3da-4eb2-829f-54b946eb526a/

31 known samples

Show the 31 samples’ SHA-256 hashes

1.0.9.0 · its entry

14a38b6141aadda612097690c6a4d50855836dd753d6c1d41a5fd51b304ecfa6

1.0.9.0 · its entry

47c93f7a7a3c465899f69175d6360df41fc39687790985080cbc84741b83f9c8

1.0.9.0 · its entry

4f57decda52c2122b199edbcc88b94abeb34e49df4337e51da45b304b8ade266

1.0.9.0 · its entry

571a731f01fad422643a2242dd5b6287d75d42f558d0a65906503e661c262be2

1.0.9.0 · its entry

5760f65ec8b41d28c7771a39ac7d15900df0f503f5781278dd5e06b2609acec4

1.0.9.0 · its entry

65438a64ffd3177f3ea172d9a24eb9730e00abb35165fba793e7e6a1cb08473c

1.0.7.0 · its entry

0288a3e8ba6ad0075bd071e65b86617c889e7d0f7cde40231f6e8d87febdda27

1.0.7.0 · its entry

1ec7eb6aba695fabaa0c4e52e22346f4c8fb2187c93005f0183f67c35fc8533c

1.0.7.0 · its entry

203fbc6e29534239f541e79847b027e417087ea435ab52784fb35683be60963d

1.0.7.0 · its entry

58fe50105ffc848154c6f6510a544c0097de300b4a7800335b1561696fe01b32

1.0.7.0 · its entry

5ea091a22cc41793e47290abd8f139da47598ccee5e45dad51b15844c0e5664b

1.0.7.0 · its entry

68dde5bfb0f18e8bd662a25cd9f7dfebb8b944220b25c55e7b3732a0a47b3390

1.0.7.0 · its entry

809b6d2db04a627ecba4d898cbafec0d17cbb1055ddaf793cd0e38c7c7eabba2

1.0.7.0 · its entry

9b500aca1801246fea82217b3dd2efd54f38b18c9a05fc2d2d63ae3eec42aa9b

1.0.7.0 · its entry

a78e9a8bddb042d09eb211461836f7831651016e5ea1c917c0ddf513c061fee4

1.0.7.0 · its entry

cfed2978ebfb9511a61f2e7d2e49967f4663be9075db9a2bc14c78f0188f6feb

1.0.7.0 · its entry

d8215b0b4eb572259c6dd0e1b414e99492da84e3bf1e6f57dd05dbff3385110a

1.0.7.0 · its entry

f0663d6c18c77544c3c417ddd4075ba1c1dcf429f5f4c4c7f6ce36f08329bde2

1.0.7.0 · its entry

f43a60428e253c7e7f1cd62638c8c68fbcdb01f89214b458a3a736835e179b81

1.0.7.0 · its entry

fbe45d300cd313637cf4fe876edb5e402f3c2520a7db7e1baf78635a452844e4

1.0.6.0 · its entry

0f839f99ed8119668b0ed146932c3c041f4fdd7a4f055ef7a307ae585a6901a1

1.0.6.0 · its entry

1d3c1ff96c56052709fdeddfc4090907e9c9b1bfbb37feb06090311be767a516

1.0.6.0 · its entry

5899928ef15b45bcf4abd15628ae47e3f5fbeeffff704f2b818e7eaca9836366

1.0.6.0 · its entry

692c018316b30e5e8301aa8bcd3240e965cf0c407de1ee401266b9b14c890353

1.0.6.0 · its entry

6b89ba6551c56eb781a0bb6e5dcfc35b9cbcbd587bd301663a7f16b80e49ace5

1.0.6.0 · its entry

72783aa2433090d3b284d8fe18615928c25fd67416f5522146127b6d5a280cd6

1.0.6.0 · its entry

8ed37651221dc0990d1db9c9b31e79bb3e25a77299a7be8b48fcdbae4e2a2053

1.0.4.0 · its entry

0b9f24731bd6e6a8439474576d1c2e80aa461f343571659e528fa3b76aac9af1

1.0.3.0 · its entry

2c452dfec5f153c9f6f6fb3e9a997b3e6358eaf969c3f1027a9d9de42a455c9f

1.0.2.0 · its entry

30950a3d0371727c318e06cd80690c0095372a82d7e4852d7f612037891ea2c0

1.0.2.0 · its entry

80b18c3883c52d9e15e3cfb1c0227c2d6172a57d639055842187823275db7dad

From LOLDrivers (Apache 2.0). A driver is known by its hash: a sample under another name is the same driver. In Ceplin, "<sha256>".whatis() says which sample a hash is.

Is it the real AsusSAIO.sys?

file version info and known copies

ProductASUSSAIO(asus1000), ASUSTeK COMPUTER INC.

DescriptionASUSSAIO(asus1000)

From the file’s version info, as recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look.