CmdID

CmdID / Files

SvIoCtrlx64.sys

API Driver for Seavo System Device file version info

Driver on Windows LOLDrivers vulnerable driver

A known vulnerable driver

from LOLDrivers
T1068Exploitation for Privilege Escalation
Its entryhttps://www.loldrivers.io/drivers/8d2f15a5-e71a-47ba-a391-55d1a1962368/

1 known sample

1.0.0.0 · its entry

9ade632e54c3f5e8c75eaf636f2910bad3a8a07d6f078e48c9641d3af1fe811c

From LOLDrivers (Apache 2.0). A driver is known by its hash: a sample under another name is the same driver. In Ceplin, "<sha256>".whatis() says which sample a hash is.

Is it the real SvIoCtrlx64.sys?

file version info and known copies
ProductSeavo API Driver, www.seavo.com
DescriptionAPI Driver for Seavo System Device

From the file’s version info, as recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look.