AV/EDR-killer utility abused via vulnerable-driver loading in ransomware intrusions.
Read the full analysis on IntelFusions