msagent.sys Rootkit Driver
msagent.sys is a signed Windows kernel-mode driver used by the latest CoolClient variant. It provides stealth by hiding processes, files, registry keys,…
Tag: Kernel Driver
AFD.sys: Windows Kernel Driver Targeted by Exploit
AFD.sys is a Windows kernel driver that provides Winsock functionality. It contains the privilege escalation vulnerability CVE-2026-68820, which was exploited by Lazarus…