CmdID / Files

Windows-Memory-Informer.sys

Driver on Windows LOLDrivers vulnerable driver

A known vulnerable driver

from LOLDrivers

T1068Exploitation for Privilege Escalation

Its entryhttps://www.loldrivers.io/drivers/e354b869-e817-4f9f-8027-a3d5bfb3689b/

1 known sample

its entry

4cdae25483cb73a7a75dadc2d22c0115dece7e1a3c0162ae810e229faace5a44

From LOLDrivers (Apache 2.0). A driver is known by its hash: a sample under another name is the same driver. In Ceplin, "<sha256>".whatis() says which sample a hash is.