CmdID

CmdID / Files

XiaoH.sys

Driver on Windows LOLDrivers malicious

A known malicious driver

from LOLDrivers
T1068Exploitation for Privilege Escalation
Its entryhttps://www.loldrivers.io/drivers/2703d3dd-05f0-4ae2-83a2-2ad0939467d0/

1 known sample

its entry

83c4f9abe074d426fc5b08b57058208e4c184bfbe481e7847b67aeb87b04cd4a

From LOLDrivers (Apache 2.0). A driver is known by its hash: a sample under another name is the same driver. In Ceplin, "<sha256>".whatis() says which sample a hash is.