IOMap.sys
ASUS Kernel Mode Driver for NT file version info
Driver on Windows LOLDrivers vulnerable driver
A known vulnerable driver
T1068Exploitation for Privilege Escalation
2 known samples
2.50 · its entry
e62d0c1353a3d913497e6016d0f48d7cf9ef99e4026b94ccd873d6c7a9a545651.00 · its entry
ea85bbe63d6f66f7efee7007e770af820d57f914c7f179c5fee3ef2845f19c41From LOLDrivers (Apache 2.0). A driver is known by its hash: a sample under another name is the same driver. In Ceplin, "<sha256>".whatis() says which sample a hash is.
Is it the real IOMap.sys?
ProductASUS Kernel Mode Driver for NT, ASUSTeK Computer Inc.
DescriptionASUS Kernel Mode Driver for NT
From the file’s version info, as recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look.