CmdID / Files

otipcibus64.sys

Hardware Access Driver file version info

Driver on Windows LOLDrivers vulnerable driver

A known vulnerable driver

from LOLDrivers

T1068Exploitation for Privilege Escalation

Its entryhttps://www.loldrivers.io/drivers/17cf4fac-88f1-467d-9f62-481d33accc5b/

1 known sample

1.1000.0.1 · its entry

4e3eb5b9bce2fd9f6878ae36288211f0997f6149aa8c290ed91228ba4cdfae80

From LOLDrivers (Apache 2.0). A driver is known by its hash: a sample under another name is the same driver. In Ceplin, "<sha256>".whatis() says which sample a hash is.

Is it the real otipcibus64.sys?

file version info and known copies

ProductKernel Mode Driver To Access Physical Memory And Ports, OTi

DescriptionHardware Access Driver

From the file’s version info, as recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look.