driver_ef9d653a.sys
Driver on Windows LOLDrivers malicious
A known malicious driver
T1068Exploitation for Privilege Escalation
1 known sample
ef9d653aaa2e629b211cd367a32c381eba694ba85682b987497c287d7dbc0082From LOLDrivers (Apache 2.0). A driver is known by its hash: a sample under another name is the same driver. In Ceplin, "<sha256>".whatis() says which sample a hash is.