mhyprotect.sys
Driver on Windows LOLDrivers vulnerable driver
A known vulnerable driver
T1068Exploitation for Privilege Escalation
2 known samples
8bdcf7457c2caf7fa0386571f972d7f5220d385ad686e2c3536f4c67ba4333e6edeb35e4341034b2de389017c4884b081a821f34349a620897a2a845c84cb09eFrom LOLDrivers (Apache 2.0). A driver is known by its hash: a sample under another name is the same driver. In Ceplin, "<sha256>".whatis() says which sample a hash is.