CmdID

CmdID / Files

driver_ef9d653a.sys

Driver on Windows LOLDrivers malicious

A known malicious driver

from LOLDrivers
T1068Exploitation for Privilege Escalation

1 known sample

its entry

ef9d653aaa2e629b211cd367a32c381eba694ba85682b987497c287d7dbc0082

From LOLDrivers (Apache 2.0). A driver is known by its hash: a sample under another name is the same driver. In Ceplin, "<sha256>".whatis() says which sample a hash is.