mhyprotrpg.sys
Driver on Windows LOLDrivers vulnerable driver
A known vulnerable driver
T1068Exploitation for Privilege Escalation
Its entrieshttps://www.loldrivers.io/drivers/181b89e5-4bdd-4e95-b1bc-a294a4adfb29/
https://www.loldrivers.io/drivers/ebdde780-e142-44e7-a998-504c516f4695/
https://www.loldrivers.io/drivers/ebdde780-e142-44e7-a998-504c516f4695/
2 known samples
8bf84bed9b5fa4576182c84d2f31679dc472acd0f83c9813498e9f71ed9fef3ef7d72d22cd4ad3e44fd617bdb4c90b9a884f4eb045688c0e3fb64dd33e033eaaFrom LOLDrivers (Apache 2.0). A driver is known by its hash: a sample under another name is the same driver. In Ceplin, "<sha256>".whatis() says which sample a hash is.