CmdID

CmdID / Files

f.sys

Driver on Windows LOLDrivers malicious

A known malicious driver

from LOLDrivers
T1068Exploitation for Privilege Escalation

1 known sample

its entry

54942b92790dc0b84c56d4a00f3ac419b0a506344ca7e9f1fb666a86dbc4117f

From LOLDrivers (Apache 2.0). A driver is known by its hash: a sample under another name is the same driver. In Ceplin, "<sha256>".whatis() says which sample a hash is.