CmdID / Files

rksafe.sys

Driver on Windows LOLDrivers malicious

A known malicious driver

from LOLDrivers

T1014Rootkit

Its entryhttps://www.loldrivers.io/drivers/5cbb1918-f7ac-4de8-b334-0bb4824a516b/

1 known sample

its entry

81fbcacbc28001909391dbdafd9854ca997befa38dee4f2d9e8fbdbd00bc3723

From LOLDrivers (Apache 2.0). A driver is known by its hash: a sample under another name is the same driver. In Ceplin, "<sha256>".whatis() says which sample a hash is.