← writing
vulnerable drivers
A live index of publicly known vulnerable Windows kernel drivers, cross-referenced against Microsoft's Vulnerable Driver Block List. Two questions matter operationally: which drivers Microsoft now blocks by default, and which vulnerable drivers can still load even with HVCI (memory integrity) enabled.
661 public vulnerable drivers
479 samples bypass HVCI
1385 samples in MS block list
145 MS-blocked driver families
sources: LOLDrivers · Microsoft block list (v10.0.29545.0) · 2213 samples · generated 2026-08-21
all publicly known vulnerable drivers
The headline numbers above are LOLDrivers' sample-level stats (they match loldrivers.io exactly).
In the table below, 87 drivers appear on Microsoft's block list by name and
230 have at least one sample flagged LoadsDespiteHVCI — i.e. they
can still load even when HVCI is on. Filter below.
| driver | category | ref | HVCI | MS block | |
|---|---|---|---|---|---|
| _xyzxbqvb.rdu_GFAC_Sys_x64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| 1.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| 1109.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| 1fc7aeeff3ab19004d2e53eae8160ab1.sys | malicious | T1014 | loads | — | ref ↗ |
| 2.sys | malicious | T1068 | stopped | blocked | ref ↗ |
| 2.sys | malicious | T1068 | stopped | blocked | ref ↗ |
| 360hvm64.sys | vulnerable driver | T1562.001 | stopped | — | ref ↗ |
| 360netmon_wfp.sys, 360netmon.sys | vulnerable driver | T1562.001 | stopped | — | ref ↗ |
| 4.sys | malicious | T1068 | stopped | — | ref ↗ |
| 4118b86e490aed091b1a219dba45f332.sys | malicious | T1014 | loads | — | ref ↗ |
| 4748696211bd56c2d93c21cab91e82a5.sys | malicious | T1014 | loads | — | ref ↗ |
| 5a4fe297c7d42539303137b6d75b150d.sys | malicious | T1014 | loads | — | ref ↗ |
| 6771b13a53b9c7449d4891e427735ea2.sys | malicious | T1014 | loads | — | ref ↗ |
| 6c8a.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| 7.sys | malicious | T1068 | stopped | — | ref ↗ |
| 80.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| 81.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| 834761775.sys | malicious | T1068 | loads | — | ref ↗ |
| 8492937_2_Driver.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| 927e3aef03a8355d236230cace376b3023480a40c5ac08453c07dab343dd1f11 | vulnerable driver | T1068 | stopped | — | ref ↗ |
| a236e7d654cd932b7d11cb604629a2d0.sys | malicious | T1014 | loads | — | ref ↗ |
| a26363e7b02b13f2b8d697abb90cd5c3.sys | malicious | T1014 | loads | — | ref ↗ |
| a9df5964635ef8bd567ae487c3d214c4.sys | malicious | T1014 | loads | — | ref ↗ |
| AccelLid.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| ACE-BASE.sys CVE-2024-22830 | vulnerable driver | T1068 | loads | — | ref ↗ |
| ACPIx86.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| ADRMDRVSYS.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| ADV64DRV.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| AdvCare.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| Afd.sys CVE-2023-21768 +1 | vulnerable driver | T1068 | loads | — | ref ↗ |
| Agent64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| AIDA64Driver.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| Air_SYSTEM10.sys | malicious | T1068 | stopped | — | ref ↗ |
| ALSysIO64.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| Amd_RPMC_BiosToolCommonDriver.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| AMDPowerProfiler.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| AMDRyzenMasterDriver.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| amifldrv64.sys, amifldrv.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| amigendrv64.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| amp.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| ampa.sys | vulnerable driver | T1068 | loads | — | — |
| amsdk.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| amsdk.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| AODDriver.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| AppShopDrv103.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| AppVkgr.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| ardrv.sys CVE-2026-36425 | vulnerable driver | T1068 | loads | — | ref ↗ |
| ArgusMonitor.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| asas.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| asio.sys, AsIO32.sys, AsIO3.sys, AsIO3_64.sys, AsIO2.sys | vulnerable driver | T1068 | loads | blocked | ref ↗ |
| ASIO32.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| AsmIo64.sys | vulnerable driver | T1542, T1068 | loads | — | ref ↗ |
| asmmap64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| AsrAutoChkUpdDrv_1_0_32.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| AsrAutoChkUpdDrv.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| AsrCDDrv.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| AsrDrv.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| AsrDrv10.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| AsrDrv101.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| AsrDrv102.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| AsrDrv103.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| asrdrv104.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| AsrDrv106.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| AsrDrv107.sys, AsrDrv107n.sys CVE-2020-15368 | vulnerable driver | T1068 | stopped | — | ref ↗ |
| AsrIbDrv.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| AsrOmgDrv.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| AsrRapidStartDrv.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| AsrSetupDrv103.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| AsrSmartConnectDrv.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| Astra64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| AsUpIO.sys, AsUpIO64.sys | vulnerable driver | T1068 | loads | blocked | ref ↗ |
| aswArPot.sys CVE-2022-26522 +1 | vulnerable driver | T1068 | stopped | — | ref ↗ |
| aswArPot.sys, avgArPot.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| aswVmm.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| athpexnt.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| atillk64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| atillk64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| atlAccess.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| atomicredteamcapcom.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| ATSZIO.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| ATSZIO.sys, ATSZIO64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| avalueio.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| avkiller.sys | malicious | T1068 | loads | — | ref ↗ |
| b.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| b1.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| b3.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| b4.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| bandai.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| BdApiUtil.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| BdApiUtil.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| BdApiUtil64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| be6318413160e589080df02bb3ca6e6a.sys | malicious | T1014 | loads | — | ref ↗ |
| bedaisy.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| bin_intigua_driver64.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| BioNTdrv.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| BiosToolCommonDriver.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| Black.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| Blackbone.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| BlackBoneDrv10.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| blacklotus_driver.sys | malicious | T1068 | loads | — | ref ↗ |
| bootrepair.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| Bs_Def.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| BS_Def64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| BS_Flash64.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| BS_HWMIO64_W10.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| bs_hwmio64.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| BS_HWMIo64.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| BS_I2c64.sys, BS_I2cIo.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| BS_I2cIo.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| BS_RCIO.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| bs_rcio64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| BS_RCIO64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| BS_RCIOW1064.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| BS_RVSIO64.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| bsitf.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| BSMEMx64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| BSMI.sys, BSMIXP64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| BSMIx64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| burntcigar.sys | malicious | T1068 | stopped | — | ref ↗ |
| bw.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| bwrs.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| bwrsh.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| c.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| c94f405c5929cfcccc8ad00b42c95083.sys | malicious | T1014 | loads | — | ref ↗ |
| capcom.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| capcom2.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| CardIo64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| CcProtect.sys | vulnerable driver | T1562.001 | stopped | — | ref ↗ |
| cg6kwin2k.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| changsha | malicious | T1068 | stopped | — | ref ↗ |
| Chaos-Rootkit.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| Chaos-Rootkit.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| chinese_cheat_driver.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| CITMDRV_AMD64.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| CITMDRV_IA64.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| CmUpx.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| Cndom6.sys, XiaoH.sys, rwdriver.sys | malicious | T1068 | stopped | — | ref ↗ |
| ComputerZ.Sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| ControlCenter.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| CorMem.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| CorsairLLAccess64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| CorsairLLAccess64.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| CP2X72C.SYS | vulnerable driver | T1068 | stopped | — | ref ↗ |
| cpqsysio64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| cpupress.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| cpuz_x64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| cpuz.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| cpuz.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| cpuz141.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| CSAgent.sys | malicious | T1014 | stopped | — | ref ↗ |
| CSAgent.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| CSAgent.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| CSAgent.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| CSC.sys CVE-2024-26229 | vulnerable driver | T1068 | loads | — | ref ↗ |
| CtiIo64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| CupFixerx64.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| cyvrlpc.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| d.sys | vulnerable driver | T1068 | loads | blocked | ref ↗ |
| d2.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| d3.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| d4.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| d591004.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| daxin_blank.sys | malicious | T1068 | loads | — | ref ↗ |
| daxin_blank1.sys | malicious | T1068 | loads | — | ref ↗ |
| daxin_blank2.sys | malicious | T1068 | loads | — | ref ↗ |
| daxin_blank3.sys | malicious | T1068 | loads | — | ref ↗ |
| daxin_blank4.sys | malicious | T1068 | loads | — | ref ↗ |
| daxin_blank5.sys | malicious | T1068 | loads | — | ref ↗ |
| daxin_blank6.sys | malicious | T1068 | loads | — | ref ↗ |
| dbk64.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| dbutil_2_3.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| dbutil.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| DBUtilDrv2.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| DcProtect.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| dcr.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| DDDriver.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| dddriver64Dcsa.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| dellbios.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| dellinstrumentation.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| deresute64.sys, andappsvc2_64.sys, usrdrv018064.sys, usrdrv017764.sys, usrdrv017864.sys, wfs64.sys, usrdrv118064.sys, Umamusume64_2.sys | vulnerable driver | T1562.001 | loads | — | ref ↗ |
| devhost.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| devMemDrv.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| Dh_Kernel_10.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| Dh_Kernel.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| directio.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| DirectIo.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| DirectIo.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| directio32_legacy.sys, DirectIo32.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| DirectIo32.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| directio64.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| directio64.sys, utiA2D4.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| ditpio64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| dkrTK.sys | malicious | T1068 | loads | — | ref ↗ |
| DNDrv.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| dpmemio.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| driver_090d409f.sys | malicious | T1068 | loads | — | ref ↗ |
| driver_099ef491.sys | malicious | T1068 | loads | — | ref ↗ |
| driver_0a636606.sys | malicious | T1068 | loads | — | ref ↗ |
| driver_0ffb4081.sys | malicious | T1068 | loads | — | ref ↗ |
| driver_146b8f4f.sys | malicious | T1068 | loads | — | ref ↗ |
| driver_16773074.sys | malicious | T1068 | loads | — | ref ↗ |
| driver_1a74c2bd.sys | malicious | T1068 | loads | — | ref ↗ |
| driver_1afc1d06.sys | malicious | T1068 | loads | — | ref ↗ |
| driver_206006a1.sys | malicious | T1068 | loads | — | ref ↗ |
| driver_290bc782.sys | malicious | T1068 | loads | — | ref ↗ |
| driver_312c83a9.sys | malicious | T1068 | loads | — | ref ↗ |
| driver_4d8bc539.sys | malicious | T1068 | loads | — | ref ↗ |
| driver_4f9b5a2f.sys | malicious | T1068 | loads | — | ref ↗ |
| driver_4fc254af.sys | malicious | T1068 | loads | — | ref ↗ |
| driver_5c308aed.sys | malicious | T1068 | loads | — | ref ↗ |
| driver_5d61e4ea.sys | malicious | T1068 | loads | — | ref ↗ |
| driver_668c5bea.sys | malicious | T1068 | loads | — | ref ↗ |
| driver_77225a99.sys | malicious | T1068 | loads | — | ref ↗ |
| driver_82d928c5.sys | malicious | T1068 | loads | — | ref ↗ |
| driver_85ca0dcd.sys | malicious | T1068 | loads | — | ref ↗ |
| driver_89036534.sys | malicious | T1068 | loads | — | ref ↗ |
| driver_930da474.sys | malicious | T1068 | loads | — | ref ↗ |
| driver_981d03e1.sys | malicious | T1068 | loads | — | ref ↗ |
| driver_a6deeea6.sys | malicious | T1068 | loads | — | ref ↗ |
| driver_ab811ca5.sys | malicious | T1068 | loads | — | ref ↗ |
| driver_b4f33ffe.sys | malicious | T1068 | loads | — | ref ↗ |
| driver_bfcbc010.sys | malicious | T1068 | loads | — | ref ↗ |
| driver_c3d48ddd.sys | malicious | T1068 | loads | — | ref ↗ |
| driver_d1ea9e16.sys | malicious | T1068 | loads | — | ref ↗ |
| driver_d9f15d91.sys | malicious | T1068 | loads | — | ref ↗ |
| driver_e1123b59.sys | malicious | T1068 | loads | — | ref ↗ |
| driver_ef9d653a.sys | malicious | T1068 | loads | — | ref ↗ |
| driver_fdd16a94.sys | malicious | T1068 | loads | — | ref ↗ |
| Driver_win10.sys, Filter.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| driver7-x64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| driver7-x86-withoutdbg.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| driver7-x86.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| Driver7.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| DriversCloud_amd64.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| DsArk64.sys, DsArk.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| dtr_ec.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| dXIw8eZ9aYxQYzgm.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| e29f6311ae87542b3d693c1f38e4e3ad.sys | malicious | T1014 | loads | — | ref ↗ |
| e939448b28a4edc81f1f974cebf6e7d2.sys | malicious | T1014 | loads | — | ref ↗ |
| echo_driver.sys | vulnerable driver | T1134 | stopped | — | ref ↗ |
| ecsiodriverx64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| ef0e1725aaf0c6c972593f860531a2ea.sys | malicious | T1014 | loads | — | ref ↗ |
| EIO.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| elbycdio.sys CVE-2009-0824 | vulnerable driver | T1068 | loads | — | ref ↗ |
| ElbyCDIO.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| elrawdsk.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| ene.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| eneio64.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| EneIo64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| energydriver.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| EneTechIo64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| EnPortv.sys | vulnerable driver | T1562.001 | stopped | — | ref ↗ |
| etdsupp.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| evga_kernel_driver-x64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| f.sys | malicious | T1068 | loads | — | ref ↗ |
| FairplayKD.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| fastdumpx64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| fd3b7234419fafc9bdd533f48896ed73_b816c5cd.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| FDMCJHJYXZITI.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| fgme.sys | malicious | T1068 | loads | — | ref ↗ |
| FH-EtherCAT_DIO.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| fiddrv.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| fiddrv64.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| fidpcidrv.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| fidpcidrv64.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| fildds.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| filnk.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| filwfp.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| fjfwupgd.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| FoxKeDriver64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| FPCIE2COM.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| full.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| fur.sys | malicious | T1068 | stopped | — | ref ↗ |
| GameDriverX64.sys, KSophon_x64.sys CVE-2025-61155 | vulnerable driver | T1068 | stopped | — | ref ↗ |
| gameink.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| gametersafe.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| GameTerSafe.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| gdrv.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| gdrv.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| GEDevDrv.SYS | vulnerable driver | T1068 | stopped | — | ref ↗ |
| gftkyj64.sys, deame.sys | malicious | T1068 | loads | — | ref ↗ |
| GGProtect64.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| gibepext.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| GLCKIO2.sys | vulnerable driver | T1068 | loads | blocked | ref ↗ |
| GLCKIO2.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| GlobalVistaVentures_v3.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| gmer64.sys, superman.sys | malicious | T1068 | stopped | — | ref ↗ |
| goad.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| GoFly64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| gpcidrv64.sys | vulnerable driver | T1542 | stopped | — | ref ↗ |
| GPU-Z.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| GtcKmdfBs.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| gvcidrv64.sys | vulnerable driver | T1068 | loads | blocked | ref ↗ |
| GVCIDrv64.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| HardwareMon-x86.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| hlpdrv.sys | malicious | T1068 | stopped | — | ref ↗ |
| HOSTNT.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| hp64vision.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| HpPortIox64.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| HpPortIox64.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| hw.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| hw.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| HW.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| HWAuidoOs2Ec.sys, havoc.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| hwdetectng.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| HWiNFO32.SYS | vulnerable driver | T1068 | stopped | — | ref ↗ |
| HWiNFO64I.SYS | vulnerable driver | T1068 | stopped | — | ref ↗ |
| HwOs2Ec10x64.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| HwOs2Ec7x64.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| HwRwDrv.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| HwRwDrv.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| idmtdi.sys | malicious | T1068 | loads | — | ref ↗ |
| IMFForceDelete, IMFForceDelete.sys, ForceDelete.sys CVE-2019-6494 | vulnerable driver | T1562.001 | stopped | — | ref ↗ |
| ImmunetUtilDriver.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| inetcache.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| inpout32.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| inpoutx64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| IoAccess.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| iobios64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| iobitunlocker.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| iOCdrv.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| IoManager.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| IOMap64.sys CVE-2024-41498 | vulnerable driver | T1068 | stopped | — | ref ↗ |
| iomem64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| ipctype.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| iQVW64.SYS | vulnerable driver | T1068 | stopped | — | ref ↗ |
| iqvw64e.sys, iQVW64.SYS, IQVW32.sys, NalDrv.sys CVE-2015-2291 | vulnerable driver | T1068 | stopped | — | ref ↗ |
| irec.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| iscflashx64.sys | vulnerable driver | T1542 | loads | — | ref ↗ |
| isodrivep64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| isodrivep64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| IUForceDelete.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| jnprva.sys, neofltr.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| jokercontroller.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| K7RKScan.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| K7RKScan.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| KApcHelper_x64.sys | malicious | T1068 | loads | — | ref ↗ |
| kavservice.bin | malicious | T1562 | stopped | — | ref ↗ |
| kbdcap64.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| kdhacker64_ev.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| kdriver.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| kerneld.amd64 | vulnerable driver | T1068 | loads | — | ref ↗ |
| kEvP64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| kEvP64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| KExplore.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| KfeCo10X64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| KfeCo11X64.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| Khwmon.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| Kinkajou.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| KKYUM.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| KmWpsMs.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| KObjExp.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| kprocesshacker.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| KRegExp.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| ksapi.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| ksapi.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| KslD.sys, MpKslDrv.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| kt2.sys | malicious | T1068 | loads | — | ref ↗ |
| ktapi.sys | vulnerable driver | T1562.001 | stopped | — | ref ↗ |
| ktes.sys | malicious | T1068 | loads | — | ref ↗ |
| ktgn.sys | malicious | T1068 | loads | — | ref ↗ |
| ktmutil7ODM.sys | malicious | T1068 | loads | — | ref ↗ |
| l1malwarebits.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| Lallamon.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| LcTkA.sys | malicious | T1068 | stopped | — | ref ↗ |
| LECOMAx64.sys, LECOMAx.SYS | vulnerable driver | T1068 | stopped | — | ref ↗ |
| LenovoDiagnosticsDriver.sys CVE-2022-3699 | vulnerable driver | T1068 | stopped | — | ref ↗ |
| LgCoreTemp.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| LgDataCatcher.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| LgDCatcher.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| LHA.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| LHA.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| libnicm.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| libnicm.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| LMIinfo.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| LnvMSRIO.sys CVE-2025-8061 | vulnerable driver | T1068 | stopped | — | ref ↗ |
| lsigetwin_SliffDriver.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| Lurker.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| Lv561av.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| magdrvamd64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| malicious.sys | malicious | T1068 | loads | — | ref ↗ |
| mapmom.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| MemCtl.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| Mhyprot2.sys, mhyprot.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| mhyprot3.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| mhyprotect.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| mhyprotnap.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| mhyprotrpg.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| mhyprotrpg.Sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| mimidrv.sys | malicious | T1068 | loads | — | ref ↗ |
| mimikatz.sys | malicious | T1068 | stopped | — | ref ↗ |
| mJj0ge.sys | malicious | T1068 | loads | — | ref ↗ |
| mlgbbiicaihflrnh.sys | malicious | T1068 | stopped | — | ref ↗ |
| Mnemosyne.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| Monitor_win10_x64.sys CVE-2018-16712 | vulnerable driver | T1068 | stopped | — | ref ↗ |
| MonProcessEX.sys | vulnerable driver | T1562.001 | stopped | — | ref ↗ |
| msio32.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| MsIo32.sys CVE-2019-18845 | vulnerable driver | T1068 | stopped | — | ref ↗ |
| MsIo64.sys CVE-2020-17382 | vulnerable driver | T1068 | stopped | — | ref ↗ |
| MsIo64.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| MSqPq.sys | malicious | T1068 | loads | — | ref ↗ |
| msr.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| msrhook.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| mst.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| mtcBSv64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| mtxC9CB.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| mtxmem.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| My.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| mydrivers.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| MyPortIO_x64.sys, MyPortIO_x86.sys, MyPortIO0 | vulnerable driver | T1068 | stopped | — | ref ↗ |
| NBIOLib_X64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| NCHGBIOS2x64.SYS | vulnerable driver | T1068 | stopped | — | ref ↗ |
| ncpl.sys CVE-2013-3956 | vulnerable driver | T1068 | stopped | — | ref ↗ |
| ndislan.sys | malicious | T1068 | loads | — | ref ↗ |
| NeacSafe64.sys, OWNeacSafePort CVE-2025-45737 | vulnerable driver | T1068 | stopped | — | ref ↗ |
| Netfilter.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| netfilter2.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| netfilterdrv.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| netflt.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| NetFlt.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| NetProxyDriver.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| NetworkLocker_x64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| ngiodriver.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| NGStar.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| ni.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| nicm.sys CVE-2013-3956 | vulnerable driver | T1068 | stopped | — | ref ↗ |
| NICM.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| NICM.SYS | vulnerable driver | T1068 | loads | — | ref ↗ |
| nipalk.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| NlsLexicons0024UvN.sys | malicious | T1068 | loads | — | ref ↗ |
| NodeDriver.sys | malicious | T1068 | stopped | — | ref ↗ |
| Novawave_Novabench_NovabenchDriverWin10.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| NPR0.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| NQrmq.sys | malicious | T1068 | loads | — | ref ↗ |
| nscm.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| nscm.sys CVE-2013-3956 | vulnerable driver | T1068 | loads | — | ref ↗ |
| NSecKrnl.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| nstr.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| nstrwsk.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| nt2.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| nt3.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| nt4.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| nt5.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| nt6.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| ntbios_2.sys | malicious | T1068 | loads | — | ref ↗ |
| ntbios.sys | malicious | T1068 | loads | — | ref ↗ |
| NTIOLib_X64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| NTIOLib.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| NTIOLib.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| nvaudio.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| nvflash.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| nvflash.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| nvflsh32.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| nvflsh64.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| nvoclock.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| nxeng.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| OAToolx64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| OpenLibSys.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| otipcibus.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| p2KGhmzsARY1.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| PanIO.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| PanIOx64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| PanMonFlt.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| PanMonFltX64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| pcdsrvc_x64.sys CVE-2019-12280 | vulnerable driver | T1068 | stopped | — | ref ↗ |
| pchunter.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| PCHunter.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| PcieCubed.sys | malicious | T1068 | stopped | — | ref ↗ |
| PCTcore64.sys, PCTCore64.sys CVE-2026-8501 | vulnerable driver | T1562.001 | stopped | — | ref ↗ |
| PDFWKRNL.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| PDFWKRNL.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| PGRHostControl.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| PhlashNT.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| phydmaccx64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| phydmaccx86.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| phymem_ext64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| phymem64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| Phymemx64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| physmem.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| piddrv.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| piddrv64.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| PMAD.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| pmxdrv64.sys, pmxdrv.sys, PMxDrv | vulnerable driver | T1068 | stopped | — | ref ↗ |
| PoisonX.sys, G11.sys, PoisonX10.sys, PoisonX11.sys, PoisonX12.sys, PoisonX13.sys, PoisonX14.sys, PoisonX15.sys, PoisonX16.sys, PoisonX17.sys, PoisonX18.sys, PoisonX2.sys, PoisonX3.sys, PoisonX4.sys, PoisonX5.sys, PoisonX6.sys, PoisonX7.sys, PoisonX8.sys, PoisonX9.sys | vulnerable driver | T1562 | stopped | — | ref ↗ |
| POORTRY.sys | malicious | T1068 | stopped | — | ref ↗ |
| POORTRY1.sys | malicious | T1068 | stopped | — | ref ↗ |
| POORTRY2.sys | malicious | T1068 | stopped | — | ref ↗ |
| portwell.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| ppa_x64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| probmon.sys CVE-2024-26506 | vulnerable driver | T1562 | stopped | — | ref ↗ |
| ProcessCtr.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| procexp.Sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| ProcObsrvesx.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| prokiller64.sys | malicious | T1068 | loads | — | ref ↗ |
| ProtectS.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| Proxy32.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| Proxy64.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| ProxyDrv.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| psmounterex.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| pstrip64.sys CVE-2026-29923 | vulnerable driver | T1068 | stopped | — | ref ↗ |
| pxitrig64.sys | vulnerable driver | T1068 | stopped | — | — |
| QIOMem.sys CVE-2026-56129 | vulnerable driver | T1068 | stopped | — | ref ↗ |
| qu829.sys | malicious | T1068 | stopped | — | ref ↗ |
| RadHwMgr.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| Realtime Driver.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| reddriver.sys | malicious | T1068 | loads | — | ref ↗ |
| RootLaser.sys, TrueSight.sys | vulnerable driver | T1562.001 | stopped | — | ref ↗ |
| rspot.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| RTCore64.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| RTCore64.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| rtcoremini64.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| rtif.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| rtkio.sys, rtkio64.sys, rtkiow8x64.sys, rtkiow10x64.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| rtkiow8x64.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| rtport.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| RtsPer.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| RtsTpx.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| RtsUer.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| rwdrv.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| RwDrv.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| rzpnk.sys CVE-2017-9769 | vulnerable driver | T1068 | stopped | — | ref ↗ |
| sandra.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| SANDRA.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| SBIOSIO64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| sdrv_win_sliff.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| Se64a.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| SeasunProtect.sys | vulnerable driver | T1068 | loads | — | — |
| segwindrvx64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| semav6msr.sys, semav6msr64.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| Sense5Ext.sys | malicious | T1068 | stopped | — | ref ↗ |
| sepdrv3_1.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| sfdrvx32.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| sfdrvx32.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| sfdrvx64.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| shield.sys, shield-async.sys, shieldwp.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| shimano32.sys, shimano64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| signeddrv.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| SIOCTL.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| SIVX64.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| skill.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| SMARTEIO64.SYS | vulnerable driver | T1068 | stopped | — | ref ↗ |
| smep_capcom.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| smep_namco.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| SmSerl64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| SONiXDDRx64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| SparkIO.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| speedfan.sys CVE-2007-5633 | vulnerable driver | T1068 | stopped | — | ref ↗ |
| spf.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| spwizimgVT.sys | malicious | T1068 | loads | — | ref ↗ |
| srswdrv.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| SSPORT.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| stdcdrv64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| stdcdrvws64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| STProcessMonitor.sys, ProcessMonitorDriver.sys, STProcessMonitor_v114.sys | vulnerable driver | T1562.001 | stopped | — | ref ↗ |
| superbmc.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| SvIoCtrlx64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| sysconp.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| SysDrv3S.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| SysFile_X64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| SysInfo.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| SysInfoDetectorX64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| SysInfoX64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| szkg64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| t.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| t3.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| t7.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| t8.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| tboflhelper.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| TBT_Force_Power_Control_Access64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| TcIo.sys, TcRouter.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| tdeio64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| tdevflt.sys, ABYSSWORKER | malicious | T1562.001 | stopped | — | ref ↗ |
| TdkLib64.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| telephonuAfY.sys | malicious | T1068 | loads | — | ref ↗ |
| termdd.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| test2.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| TestBone.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| tfbfs3ped.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| TfSysMon.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| TGSafe.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| thelper.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| throttlestop.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| titidrv.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| tm_filter.sys, tmfsdrv2.sys | vulnerable driver | T1056.001 | stopped | — | ref ↗ |
| TmComm.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| TmComm.sys | vulnerable driver | T1068 | loads | blocked | ref ↗ |
| Tmel.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| TPwSav.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| TRIXX.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| truesight.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| TSDRVX64.sys | vulnerable driver | T1068 | stopped | — | — |
| TVicPort64.sys CVE-PENDING | vulnerable driver | T1068 | stopped | — | ref ↗ |
| typelibdE.sys | malicious | T1068 | loads | — | ref ↗ |
| UCOREW64.SYS | vulnerable driver | T1068 | stopped | — | ref ↗ |
| UDDB2B6.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| unknown.sys | vulnerable driver | T1562.001 | stopped | — | ref ↗ |
| vboxdrv.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| VBoxDrv.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| vboxguest.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| VBoxMouseNT.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| VBoxTAP.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| VBoxUSB.Sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| VBoxUSB.Sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| VBoxUSBMon.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| VdBSv64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| viraglt64.sys, viragt64.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| viragt.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| viragt64.sys | vulnerable driver | T1068 | loads | blocked | ref ↗ |
| ViveRRAudio.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| vmdrv.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| vmdrv.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| VProEventMonitor.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| vsdatant.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| wamsdk.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| wantd_2.sys | malicious | T1068 | loads | — | ref ↗ |
| wantd_3.sys | malicious | T1068 | loads | — | ref ↗ |
| wantd_4.sys | malicious | T1068 | loads | — | ref ↗ |
| wantd_5.sys | malicious | T1068 | loads | — | ref ↗ |
| wantd_6.sys | malicious | T1068 | loads | — | ref ↗ |
| wantd.sys | malicious | T1068 | loads | — | ref ↗ |
| watabe.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| WCPU.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| wdisvhost.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| WDTKernel.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| wfshbr64.sys, wfshbr32.sys CVE-2022-42046 | malicious | T1068 | stopped | — | ref ↗ |
| whql.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| windbg.sys | malicious | T1068 | loads | — | ref ↗ |
| windbg.sys | malicious | T1068 | loads | — | ref ↗ |
| windivert.sys | malicious | T1068 | loads | — | ref ↗ |
| Windows_CPU_Temperature_Component.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| Windows-Memory-Informer.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| windows-xp-64.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| windows7-32.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| windows8-10-32.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| WinFlash64.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| WinFlash64.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| WinIO32.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| WinIO32A.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| WinIO32B.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| winio64.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| winio64.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| WinIo64.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| WinIo64A.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| WinIo64B.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| WinIo64C.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| WINIODrv.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| WinRing0.sys, WinRing0x64, OpenHardwareMonitorLib.sys | vulnerable driver | T1068 | loads | blocked | ref ↗ |
| WinTapix.sys, SRVNET2.SYS | malicious | T1068 | loads | — | ref ↗ |
| WiRwaDrv.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| WiseUnlo.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| wnbios.sys | vulnerable driver | T1068 | loads | — | ref ↗ |
| wsdkd.sys CVE-2023-1453 | vulnerable driver | T1068 | loads | — | ref ↗ |
| wsftprm.sys CVE-2023-52271 | vulnerable driver | T1068 | loads | — | ref ↗ |
| WYProxy64.sys, WYProxy32.sys | vulnerable driver | T1068 | stopped | blocked | ref ↗ |
| xhunter1.sys CVE-2026-3609 | vulnerable driver | T1562.001 | stopped | — | ref ↗ |
| xjokercontroller.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| xkpsm.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| XLHA.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| yyprotect64.sys | vulnerable driver | T1068 | stopped | — | ref ↗ |
| zam64.sys, zamguard32.sys, zamguard64.sys CVE-2018-5713 | vulnerable driver | T1068 | loads | — | ref ↗ |
| ZYArKit.sys | vulnerable driver | T1562.001 | stopped | — | ref ↗ |
no drivers match the current filter — try clearing the search or switching tabs.
Microsoft vulnerable driver block list
The raw block list Microsoft ships (ELAM / HVCI policy), version 10.0.29545.0: 250 named driver families below (LOLDrivers' curated filename count is 145). 1385 of 2213 LOLDrivers samples overlap it. This view is not limited to drivers LOLDrivers tracks.
| blocked driver | deny rules (hashes) |
|---|---|
| passmark directio.sys | 42 |
| netfilterdrv.sys | 22 |
| asio32.sys | 12 |
| asio64.sys | 12 |
| gameink.sys | 8 |
| lgdcatcher.sys | 8 |
| msio.sys | 8 |
| 81.sys | 6 |
| 05f052_4045ae_694848_8cb62c_b1d962 | 4 |
| 32-bit dell dbutil.sys | 4 |
| 64-bit dell dbutil.sys | 4 |
| 6c6a4d07e95ab4212c2afefcb0ce37dc485fa56120b0419b636bd8bd326038c1.sys | 4 |
| asrdrv10.sys | 4 |
| asrdrv101.sys | 4 |
| asrdrv102.sys | 4 |
| asrdrv103.sys | 4 |
| asupio64.sys | 4 |
| bs_flash64.sys | 4 |
| bs_hwmio64.sys | 4 |
| capcom.sys | 4 |
| fiddrv.sys | 4 |
| fiddrv64.sys | 4 |
| fidpcidrv.sys | 4 |
| fidpcidrv64.sys | 4 |
| glckio2.sys | 4 |
| gvcidrv64.sys | 4 |
| irec32--1.sys | 4 |
| irec32--10.sys | 4 |
| irec32--11.sys | 4 |
| irec32--2.sys | 4 |
| irec32--3.sys | 4 |
| irec32--5.sys | 4 |
| irec32--7.sys | 4 |
| irec32--8.sys | 4 |
| irec32--9.sys | 4 |
| irec64--16.sys | 4 |
| irec64--17.sys | 4 |
| irec64--18.sys | 4 |
| irec64--19.sys | 4 |
| irec64--21.sys | 4 |
| irec64--23.sys | 4 |
| irec64--24.sys | 4 |
| irec64--25.sys | 4 |
| irec64--26.sys | 4 |
| irec64--27.sys | 4 |
| irec64--28.sys | 4 |
| irecarm64--45.sys | 4 |
| phymemx64 | 4 |
| piddrv.sys | 4 |
| piddrv64.sys | 4 |
| protects.sys | 4 |
| semav6msr64.sys | 4 |
| winflash64.sys | 4 |
| winring0.sys | 4 |
| 1.sys | 2 |
| 2.sys | 2 |
| 80.sys | 2 |
| b.sys | 2 |
| b1.sys | 2 |
| b3.sys | 2 |
| b4.sys | 2 |
| black.sys | 2 |
| blackbonedrv10.sys | 2 |
| bw.sys | 2 |
| bwrs.sys | 2 |
| bwrsh.sys | 2 |
| c.sys | 2 |
| cpupress.sys | 2 |
| d.sys | 2 |
| d2.sys | 2 |
| d3.sys | 2 |
| d4.sys | 2 |
| full.sys | 2 |
| gametersafe.sys | 2 |
| kbdcap64.sys | 2 |
| lurker.sys | 2 |
| my.sys | 2 |
| netflt.sys | 2 |
| netproxydriver.sys | 2 |
| ni.sys | 2 |
| nstr.sys | 2 |
| nstrwsk.sys | 2 |
| nt2.sys | 2 |
| nt3.sys | 2 |
| nt4.sys | 2 |
| nt5.sys | 2 |
| nt6.sys | 2 |
| proxy32.sys | 2 |
| proxy64.sys | 2 |
| t.sys | 2 |
| t3.sys | 2 |
| t7.sys | 2 |
| t8.sys | 2 |
| testbone.sys | 2 |
| tgsafe.sys | 2 |
| windows-xp-64.sys | 2 |
| windows7-32.sys | 2 |
| windows8-10-32.sys | 2 |
| wyproxy32.sys | 2 |
| wyproxy64.sys | 2 |
| hp ssport.sys | 1 |
| 000547560fea0dd4b477eb28bf781ea67bf83c748945ce8923f90fdd14eb7a4b fileattribute | 0 |
| 001e3ecc4c3294712b8a80ad21b6ba952acfdd9f8297eb7dda3ac1d932eaa15e fileattribute | 0 |
| 0025d232ed0ff9a572f8004094cfe21f62070db832398345425554334e036da6 fileattribute | 0 |
| 006e089d3e53a5d3cd55ea7dd7b629e4aae3fbd96ee236b88306ab78236c36ee fileattribute | 0 |
| 0083e0e95bd2960f983516c0aac7cb8878c6906fc6a1ed1a751bc2ce12f79b3b fileattribute | 0 |
| 00c3e86952eebb113d91d118629077b3370ebc41eeacb419762d2de30a43c09c fileattribute | 0 |
| 0184b8314b3ddb11dd929b3ad9e4302f8246e99027077e42d7fc14b25d799428 fileattribute | 0 |
| 01af9b2e49907308312be623a125a4cd71da9e626a54dfa746336e5d69c0a70a fileattribute | 0 |
| 021badff5a3c84ee422d9fa40a842f89b1c60e0164eabd58da7374327ea99d3c fileattribute | 0 |
| 023d722cbbdd04e3db77de7e6e3cfeabcef21ba5b2f04c3f3a33691801dd45eb fileattribute | 0 |
| 02bf867ca3f4bd7f3d2829f4eaf0ad10a32e67e7c976f80ef0d1009c2d9cdf25 fileattribute | 0 |
| 02fa3060a8319f0f691547345863679d750bfea0974798ffcd379ee965bce83d fileattribute | 0 |
| 030ec373e4eb92592cbfc5e590ddbcbc5ece2d43809b141bb3fffceb0e01f72e fileattribute | 0 |
| 036c1151a30a9c25afc961d7305c58cbf8f68e5e5c1e726565c9a8168c2f3cdb fileattribute | 0 |
| 04e9a85d89a5119ff2dd2342719f6129d42627e3083559c88d4f3be607dd1f06 fileattribute | 0 |
| 053b5bc1d35c76f2e9574f8403c2f5ce07b9a44d00495ce546662d4c0476fd2d fileattribute | 0 |
| 05c15a75d183301382a082f6d76bf3ab4c520bf158abca4433d9881134461686 fileattribute | 0 |
| 05f7419335418b1eb5c983860a8a68e73147508b31e7cb1341a9dbeeb81f96b4 fileattribute | 0 |
| 061d9e1cbb06bee5bad025bbc190de1d83bc8298610a6eb525102d9600cfd683 fileattribute | 0 |
| 06508aacb4ed0a1398a2b0da5fa2dbf7da435b56da76fd83c759a50a51c75caf fileattribute | 0 |
| 06a5d8632ecdd64da4e44ddf3495a62657b513b1139cb8a3a78f641d4e31bf95 fileattribute | 0 |
| 070ff602cccaaef9e2b094e03983fd7f1bf0c0326612eb76593eabbf1bda9103 fileattribute | 0 |
| 07d0090c76155318e78a676e2f8af1500c20aaa1e84f047c674d5f990f5a09c8 fileattribute | 0 |
| 083ff41609e2c0402f20cc00da1110a0cb80c515ca1c2f551606ecc94986cff9 fileattribute | 0 |
| 08675796b8712e0e4ccbdf7831450b907bb94c2e3e85560d9aba1b24931f0d55 fileattribute | 0 |
| 0997b76ab0fc63f2d7056cb0da1ae55d076cda74b973826008c69d6dab49987f fileattribute | 0 |
| 0aa79d4c5c3baca0aee095bdbdfddfe70fad495c791066c416bd732eaec2d965 fileattribute | 0 |
| 0b57569aaa0f4789d9642dd2189b0a82466b80ad32ff35f88127210ed105fe57 fileattribute | 0 |
| 0bd1523a68900b80ed1bccb967643525cca55d4ff4622d0128913690e6bb619e fileattribute | 0 |
| 0be8483c2ea42f1ce4c90e84ac474a4e7017bc6d682e06f96dc1e31922a07b10 fileattribute | 0 |
| 0c003e038173bfa30069b09f99712780a293328abbc91633b07751246c0ef149 fileattribute | 0 |
| 0d133ced666c798ea63b6d8026ec507d429e834daa7c74e4e091e462e5815180 fileattribute | 0 |
| 0d383e469d0e27ebb713770f01f7f1a57068a7d30478221e6f2276125048d1c9 fileattribute | 0 |
| 0dd9daf0852a5b1b436199e9f2bf318f641f43173ab0dc22ad8c7e9cbaee9ad3 fileattribute | 0 |
| 1072beb3ff6b191b3df1a339e3a8c87a8dc5eae727f2b993ea51b448e837636a fileattribute | 0 |
| 11832c345e9898c4f74d3bf8f126cf84b4b1a66ad36135e15d103dbf2ac17359 fileattribute | 0 |
| 12b3d8bc5cc1ea6e2acd741d8a80f56cf2a0a7ebfa0998e3f0743fcf83fabb9e fileattribute | 0 |
| 159e7c5a12157af92e0d14a0d3ea116f91c09e21a9831486e6dc592c93c10980 fileattribute | 0 |
| 15ffa1952b4018e4c07a5caf53d650a792b4872fa806deb8e22ccce69e6def6e fileattribute | 0 |
| 174c8d771d31d70fc95448e961a395f5ceb7658f0cc381a718fb3b854cde4efe fileattribute | 0 |
| 17927b93b2d6ab4271c158f039cae2d60591d6a14458f5a5690aec86f5d54229 fileattribute | 0 |
| 17942865680bd3d6e6633c90cc4bd692ae0951a8589dbe103c1e293b3067344d fileattribute | 0 |
| 1beb15c90dcf7a5234ed077833a0a3e900969b60be1d04fcebce0a9f8994bdbb fileattribute | 0 |
| 1dccd1e13da17bd541a66b48d62e914df390818c15f5f599c636d42c05996ace fileattribute | 0 |
| 1e24c45ce2672ee403db34077c88e8b7d7797d113c6fd161906dce3784da627d fileattribute | 0 |
| 1fac3fab8ea2137a7e81a26de121187bf72e7d16ffa3e9aec3886e2376d3c718 fileattribute | 0 |
| 223f61c3f443c5047d1aeb905b0551005a426f084b7a50384905e7e4ecb761a1 fileattribute | 0 |
| 24342de3b93a06b4e4534140b13cd0726e8e8f4665866a9dcbcceb5685b83cf3 fileattribute | 0 |
| 265259015d4fda3e9d14b7740b8153b9097ab054cf6873b46f9fefdc97266d35 fileattribute | 0 |
| 270547552060c6f4f5b2ebd57a636d5e71d5f8a9d4305c2b0fe5db0aa2f389cc fileattribute | 0 |
| 29f449fca0a41deccef5b0dccd22af18259222f69ed6f389beafe8d5168c59e36 fileattribute | 0 |
| 2aa1b08f47fbb1e2bd2e4a492f5d616968e703e1359a921f62b38b8e4662f0c4 fileattribute | 0 |
| 2b34ca35bd4f61d8e1d62b6129bef0a64c4655e80d6d39da06cb27c08e6996a3 fileattribute | 0 |
| 2b507e0ad4515d9d47fb7f0bfa1f1eb11de25db4fca49fc1417ea991dc33b6bf fileattribute | 0 |
| 2f8b68de1e541093f2d4525a0d02f36d361cd69ee8b1db18e6dd064af3856f4f fileattribute | 0 |
| 33a73e36499d4a33f9321c5ac40a4e34c029a2d7ea26205a245592df78195776.sys fileattribute | 0 |
| 37022838c4327e2a5805e8479330d8ff6f8cd3495079905e867811906c98ea20 fileattribute | 0 |
| 37507cdb5df5669862f0213feb521dc82a3c87b85c5489bbffdaedd1c43da132 fileattribute | 0 |
| 3807e9a1bc159b9e8fc0c7caad10d7213ff8ed8ad1cea9ea552b093c81bf624b fileattribute | 0 |
| 3c0a36990f7eef89b2d5f454b6452b6df1304609903f31f475502e4050241dd8 fileattribute | 0 |
| 3c11dec1571253594d64619d8efc8c0212897be84a75a8646c578e665f58bf5d fileattribute | 0 |
| 40b62ba97ba2edd3e01ed62d26ae8c09f36144ab33db18b42e5f1ccf82db1754 fileattribute | 0 |
| 455ff5274fbdd19ce1da6fc6725a00752761998759c6bacb9713081f613c1752 fileattribute | 0 |
| 45e5977b8d5baec776eb2e62a84981a8e46f6ce17947c9a76fa1f955dc547271.sys fileattribute | 0 |
| 4880f40f2e557cff38100620b9aa1a3a753cb693af16cd3d95841583edcb57a8 fileattribute | 0 |
| 4ae42c1f11a98dee07a0d7199f611699511f1fb95120fabc4c3c349c485467fe fileattribute | 0 |
| 507b07b0dc0e638b65b4a4d11a462b35439c746d42337b9888927bf994176102 fileattribute | 0 |
| 530d9223ec7e4123532a403abef96dfd1af5291eb49497392ff5d14d18fccfbb fileattribute | 0 |
| 5b0ebf255769224b95d23ff0511014ae80ad8778737d6aaa071aeb794012b058 fileattribute | 0 |
| 68ca1b5151181a98cd6da55d6dfd6ef0c94f0cf9379be37a8f86dd996d677946 fileattribute | 0 |
| 6b830ea0db6546a044c9900d3f335e7820c2a80e147b0751641899d1a5aa8f74 fileattribute | 0 |
| 70afdc0e11db840d5367afe53c35d9642c1cf616c7832ab283781d085988e505 fileattribute | 0 |
| 770ab79212b08cd13864d6cfd9b97180d7b3f084d1d44aec09c8314d9466039e fileattribute | 0 |
| 7c6f16af074c3f1c74fc69734f1c8b8a03b0594ac2085d5a0c582fc8cc378858 fileattribute | 0 |
| 7e0124fcc7c95fdc34408cf154cb41e654dade8b898c71ad587b2090b1da30d7 fileattribute | 0 |
| 87ece1b3b8446517dd9696a1b2c62f82a80220956618485efbdf5671f2676616 fileattribute | 0 |
| 8dba0ab11ce9f9df5c8fb9fff18bbe9c8c654864053c8b0c4f175ec7203a2e51 fileattribute | 0 |
| 8ec9a4c4ec2b73440c591bc91543d0f685ffa1c3658926b25b06d929c5b6feed fileattribute | 0 |
| 91314768da140999e682d2a290d48b78bb25a35525ea12c1b1f9634d14602b2c fileattribute | 0 |
| a3908b3fa59c0fc7600ff8887a87861a4f8566ca0a3bdcf2371bb9f36745db91 fileattribute | 0 |
| a5a4a3c3d3d5a79f3ed703fc56d45011c21f9913001fcbcc43a3f7572cff44ec fileattribute | 0 |
| agnitum sandbox fileattribute | 0 |
| amdpowerprofiler.sys fileattribute | 0 |
| amdryzenmaster.sys | 0 |
| asus ashitio_drv fileattribute | 0 |
| asus memory mapping driver | 0 |
| atillk64 fileattribute | 0 |
| atszio.sys fileattribute | 0 |
| avast aswarpot fileattribute | 0 |
| avast aswelam/avgelam overpermissive elam fileattribute | 0 |
| b80bea4c09dafb0bfd2ca067130a7ead64faba8f78599dad4d4291a4a29f3a23 fileattribute | 0 |
| bs_def fileattribute | 0 |
| bs_def64 fileattribute | 0 |
| bsmem64_w10 fileattribute | 0 |
| c02eabc2e096f00e6e46fb3b5cf0062db5e1b9d92877b701d2ea0bf27cd82cbe fileattribute | 0 |
| c3a2dade7d95085d5af4bf9dc218c97f802440b6c1bd2fdac520cb1a376b7e84 fileattribute | 0 |
| cheat engine driver | 0 |
| creative tech msio32.sys fileattribute | 0 |
| d205286bffdf09bc033c09e95c519c1c267b40c2ee8bab703c6a2d86741ccd3e fileattribute | 0 |
| d8fc8e3a1348393c5d7c3a84bcbae383d85a4721a751ad7afac5428e5e579b4e fileattribute | 0 |
| deny fairplaykd.sys mta san andreas versions 367.* | 0 |
| ef55a5a3be73d5bfc5aa2a2b3f0cc574b824d96a129a67931a1667e770d5d938 fileattribute | 0 |
| eset eelam overpermissive elam fileattribute | 0 |
| f596e64f4c5d7c37a00493728d8756b243cfdc11e3372d6d6dfeffc13c9ab960 fileattribute | 0 |
| fileattribute | 0 |
| gdrv.sys | 0 |
| gmerek gmer64 fileattribute | 0 |
| haxm.sys fileattribute | 0 |
| hpportiox64.sys | 0 |
| hwrwdrv fileattribute | 0 |
| iobit monitor.sys fileattribute | 0 |
| iobitunlocker fileattribute | 0 |
| iqvw64.sys fileattribute | 0 |
| kaspersky klmd.sys filerule | 0 |
| kevp64.sys fileattribute | 0 |
| kingsoft ksapi.sys fileattribute | 0 |
| kprocesshacker.sys filerule | 0 |
| lenovodiagnosticsdriver fileattribute | 0 |
| lha.sys fileattribute | 0 |
| lv561v64 logitech fileattribute | 0 |
| ms windows appid.sys 21h1 fileattribute | 0 |
| ms windows appid.sys 21h2 fileattribute | 0 |
| ms windows appid.sys 22h2 fileattribute | 0 |
| ms windows appid.sys 23h2 fileattribute | 0 |
| ms windows appid.sys ws2019 fileattribute | 0 |
| ms windows appid.sys ws2022 fileattribute | 0 |
| ms windows appid.sys ws23h2 fileattribute | 0 |
| mtcbsv64.sys fileattribute | 0 |
| mydrivers.sys fileattribute | 0 |
| nvidia nvflash fileattribute | 0 |
| pchunter driver | 0 |
| phymem fileattribute | 0 |
| phymemx64 memory mapping driver | 0 |
| physmem.sys fileattribute | 0 |
| razer rzpnk.sys fileattribute | 0 |
| realix_hwinfo32 fileattribute | 0 |
| realix_hwinfo64a fileattribute | 0 |
| realix_hwinfo64i fileattribute | 0 |
| segwindrvx64.sys fileattribute | 0 |
| signers of known vulnerable or malicious drivers | 0 |
| superbmc fileattribute | 0 |
| sysinternals process explorer fileattribute | 0 |
| system mechanic cve-2018-5701 | 0 |
| tmcomm.sys | 0 |
| trendmicro tmel overpermissive elam fileattribute | 0 |
| viragt.sys 32-bit | 0 |
| viragt64.sys | 0 |
| vmdrv.sys fileattribute | 0 |
| wiseunlo fileattribute | 0 |
no blocked driver families match the current filter — try clearing the search.