CmdID

CmdID / Files

d39DuiY9sxtDSiu4LSvS.sys

Driver on Windows LOLDrivers malicious

A known malicious driver

from LOLDrivers
T1547.006Boot or Logon Autostart Execution: Kernel Modules and Extensions
Its entryhttps://www.loldrivers.io/drivers/3207f14b-a66c-4d5e-a5d5-2467ffd58265/

1 known sample

its entry

00833dd6f61e768ec3cfdf2bdc5ef074df07f2df8921558e4c5e5a32e97b4080

From LOLDrivers (Apache 2.0). A driver is known by its hash: a sample under another name is the same driver. In Ceplin, "<sha256>".whatis() says which sample a hash is.