← Back to driver explorer
Driver intelligenceVulnerableVerified

LgDCatcher.sys

Description not recorded.

UUID / a8e999ee-746f-4788-9102-c1d3d2914f56ADDED / 2023-01-09AUTHOR / Michael Haag

Known samples 3

0 recorded TRUE · 3 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

LgDCatcher.sysSample 1 · HVCI FALSE
MD5
ed6348707f177629739df73b97ba1b6e
SHA1
806832983bb8cb1e26001e60ea3b7c3ade4d3471
SHA256
58c071cfe72e9ee867bba85cbd0abe72eb223d27978d6f0650d0103553839b59
Imphash
391ffad95759bc4bac2b737d0d0eaa84
Authentihash MD5
0011ec462e11bd6288e1dc38def9be06
Authentihash SHA1
c6f2e631f12737a5fa96db2e18c8ebf950d64eb6
Authentihash SHA256
3ba724dd78864cd527a99673fde1bf7f9f85f2415c91708e7380fbe5e2c085dd
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
LgDCatcher.sysSample 2 · HVCI FALSE
MD5
c8c6fadcb7cb85f197ab77e6a7b67aa9
SHA1
f86ae53eb61d3c7c316effe86395a4c0376b06db
SHA256
ae5cc99f3c61c86c7624b064fd188262e0160645c1676d231516bf4e716a22d3
Imphash
0ebf1214948a636eba076b14cd8f72d5
Authentihash MD5
befaf31ebd0bbedb364214fca5dd9799
Authentihash SHA1
c58bebef6a92f5a5b37be0394695e8e18a42867f
Authentihash SHA256
350e15bf24dcfdc052db117718329a03e930c17ac8c835e51d001e74bad784e4
Machine
AMD64
Version
Not recorded
Publisher
Not recorded
LgDCatcher.sysSample 3 · HVCI FALSE
MD5
ad6d5177656dfc5b43def5d13d32f9f6
SHA1
a01c42a5be7950adbc7228a9612255ac3a06b904
SHA256
0c42fe45ffa9a9c36c87a7f01510a077da6340ffd86bf8509f02c6939da133c5
Imphash
835e364e2175338d970c2aaee365f3dc
Authentihash MD5
e7902722f707f386ff95d67bfd989be0
Authentihash SHA1
4604a20cae2dfe42320fe8f6aed000ec204efa7e
Authentihash SHA256
13b82d81d6eac1a8b2e4655504dabecbd70673cdf45c244702a02f3397fdff9a
Machine
I386
Version
1.4.9.8 built by: WinDDK
Publisher
NetFilterSDK.com

Recorded command

sc.exe create LgDCatcher.sys binPath=C:\windows\temp\LgDCatcher.sys type=kernel && sc.exe start LgDCatcher.sys

Elevate privileges · Privileges: kernel · OS: Windows 10

Research & references