DCRCVDrv.sys

Named by 2 kept items in this workspace.

1 items name it under affected products and 1 under classification.key entities.

Search every workspace for DCRCVDrv.sys. It matches the name as written, so it can find other things that share it.

The items that name it 2

DeathShotXD/0xCr0ssCrush
repoas classification.key entities2026-09-14
ClearFake WebDAV infection chain delivers Amatera stealer, ZigCryptoStealer, and NetSupport Manager
writeupas affected products2026-09-08It is written here as DCRCVDrv.sys (MOCOMSYS / DCRC DCRCV_U Driver).
Signed vulnerable driver abused as BYOVD to terminate EDR/security processes via IOCTL 0x2205c0

All technologies in this workspace.