CmdID / Files

MemLoaderCustomize.sys

Driver on Windows LOLDrivers malicious

A known malicious driver

from LOLDrivers

T1014Rootkit

Its entryhttps://www.loldrivers.io/drivers/e69e3427-97cd-43bb-aeda-f1fbbeaa75f6/

2 known samples

its entry

7b267455854a4353320b13306da18f9d784b8b3db2ca0912e2b62f95a791a32b

its entry

c6825f94cda9050a12fa629768fda150affc36473a1a333c364b3478b2e02891

From LOLDrivers (Apache 2.0). A driver is known by its hash: a sample under another name is the same driver. In Ceplin, "<sha256>".whatis() says which sample a hash is.