CmdID

CmdID / Files

driver_fdd16a94.sys

Driver on Windows LOLDrivers malicious

A known malicious driver

from LOLDrivers
T1068Exploitation for Privilege Escalation
Its entryhttps://www.loldrivers.io/drivers/da066835-f37c-40bf-86bb-d77ad45c7f30/

1 known sample

its entry

SHA-256fdd16a94a71644a8bb52c4e0fbfecb93f04cfe37bd91bac599cf9abfb822762fSHA-1ffe5611f1f905f2caa4e846a51f31ef8856c95a2MD5154f30d81f67dcb5b855d4db6f26c8a6

From LOLDrivers (Apache 2.0). A driver is known by its hash: a sample under another name is the same driver. In Ceplin, "<hash>".whatis() says which sample an MD5, SHA-1 or SHA-256 is.