CmdID

CmdID / Files

PlugPlayService.sys

Driver on Windows LOLDrivers malicious

A known malicious driver

from LOLDrivers
T1014Rootkit
Its entryhttps://www.loldrivers.io/drivers/03d1a3a2-e76c-4fd5-a134-55ec983fdc4c/

1 known sample

its entry

8f6d843cdec4d3477867225cf0804850e4901a541e095c01feab5634c3f3de99

From LOLDrivers (Apache 2.0). A driver is known by its hash: a sample under another name is the same driver. In Ceplin, "<sha256>".whatis() says which sample a hash is.