ccekrnl.sys
COMODO Cleaning Essentials Driver file version info
Driver on Windows LOLDrivers vulnerable driver
A known vulnerable driver
1 known sample
12, 2, 2, 8012 built by: WinDDK · its entry
bf0c3dde6b66a1ee7a43f7d9efef2a22334ad727bee2d4a72d7a8e82d3a781e5From LOLDrivers (Apache 2.0). A driver is known by its hash: a sample under another name is the same driver. In Ceplin, "<sha256>".whatis() says which sample a hash is.
Is it the real ccekrnl.sys?
ProductCOMODO Cleaning Essentials Driver, COMODO
DescriptionCOMODO Cleaning Essentials Driver
From the file’s version info, as recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look.