CmdID

CmdID / Files

IQVW32.sys

Intel(R) Network Adapter Diagnostic Driver file version info

Driver on Windows LOLDrivers vulnerable driver

A known vulnerable driver

from LOLDrivers
T1068Exploitation for Privilege Escalation

From LOLDrivers (Apache 2.0). A driver is known by its hash: a sample under another name is the same driver. In Ceplin, "<sha256>".whatis() says which sample a hash is.

Is it the real IQVW32.sys?

file version info and known copies
ProductIntel(R) iQVW64.SYS, Intel Corporation
DescriptionIntel(R) Network Adapter Diagnostic Driver

From the file’s version info, as recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look.