CmdID

CmdID / Files

rwdriver.sys

Driver on Windows LOLDrivers malicious

A known malicious driver

from LOLDrivers
T1068Exploitation for Privilege Escalation

1 known sample

its entry

1c763af41b74c7502d70093763723939a8025199e0ac7e39c04b5cf992f9e273

From LOLDrivers (Apache 2.0). A driver is known by its hash: a sample under another name is the same driver. In Ceplin, "<sha256>".whatis() says which sample a hash is.