A custom loader initiated the vulnerable driver, located targeted endpoint detection services then issued kernel-level ...