CmdID / Files

SparkIO.sys

Driver on Windows LOLDrivers vulnerable driver

A known vulnerable driver

from LOLDrivers

T1068Exploitation for Privilege Escalation

Its entryhttps://www.loldrivers.io/drivers/2a9193cc-4e7e-4c8d-9cb4-040723e81841/

1 known sample

its entry

5a40ee54b975ec19b40dcc0b75f86fd403c829b043a20ac67b7345a6b967c4b3

From LOLDrivers (Apache 2.0). A driver is known by its hash: a sample under another name is the same driver. In Ceplin, "<sha256>".whatis() says which sample a hash is.