CmdID / Files

andappsvc2_64.sys

Driver on Windows LOLDrivers vulnerable driver

A known vulnerable driver

from LOLDrivers

T1562.001

Its entryhttps://www.loldrivers.io/drivers/dbd78de7-f5ab-4fb7-a246-39cbcca4678c/

1 known sample

1.1.0.0 · its entry

09a5ca7673f3734f8987b2b4d69255ffaa05cd2e77cf2d6f72a2d6a3c91139fb

From LOLDrivers (Apache 2.0). A driver is known by its hash: a sample under another name is the same driver. In Ceplin, "<sha256>".whatis() says which sample a hash is.