https://www.loldrivers.io/ LOLDrivers Logo * [ ] * About * GitHub Repo * [ ] Living Off The Land Drivers Living Off The Land Drivers is a curated list of Windows drivers used by adversaries to bypass security controls and carry out attacks. The project helps security professionals stay informed and mitigate potential threats. Feel free to open a PR, raise an issue(s) or request new driver(s) be added. You can also get the malicious driver list via API using CSV or JSON. Sysmon users check out the pre-built config. There is a Sigma rule for SIEMs. If you've found this project valuable, you'll absolutely love our sister projects, LOLBAS and GTFOBins, check them out! Top Products [ ] Name Author Created Command sc.exe create LenovoDiagnosticsDriver.sys LenovoDiagnosticsDriver.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag LenovoDiagnosticsDriver.sys type=kernel sc.exe start LenovoDiagnosticsDriver.sys sc.exe create WinRing0x64.sys binPath=C:\ WinRing0x64.sys Michael 2023-01-09 windows\temp\ Haag WinRing0x64.sys type=kernel sc.exe start WinRing0x64.sys sc.exe create daxin_blank5.sys binPath=C: daxin_blank5.sys Michael 2023-02-28 \windows\temp\ Haag daxin_blank5.sys type= kernel sc.exe start daxin_blank5.sys sc.exe create cpuz141.sys cpuz141.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag cpuz141.sys type=kernel sc.exe start cpuz141.sys sc.exe create AsrAutoChkUpdDrv.sys AsrAutoChkUpdDrv.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag AsrAutoChkUpdDrv.sys type= kernel sc.exe start AsrAutoChkUpdDrv.sys sc.exe create driver7-x64.sys binPath=C:\ driver7-x64.sys Michael 2023-01-09 windows\temp\ Haag driver7-x64.sys type=kernel sc.exe start driver7-x64.sys sc.exe create CorsairLLAccess64.sys CorsairLLAccess64.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag CorsairLLAccess64.sys type= kernel sc.exe start CorsairLLAccess64.sys Michael sc.exe create 4.sys binPath 4.sys Haag 2023-03-04 =C:\windows\temp\4.sys type =kernel sc.exe start 4.sys sc.exe create fiddrv.sys fiddrv.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag fiddrv.sys type=kernel sc.exe start fiddrv.sys sc.exe create BSMEMx64.sys BSMEMx64.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag BSMEMx64.sys type=kernel sc.exe start BSMEMx64.sys sc.exe create Lurker.sys Lurker.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag Lurker.sys type=kernel sc.exe start Lurker.sys sc.exe create AsrDrv106.sys AsrDrv106.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag AsrDrv106.sys type=kernel sc.exe start AsrDrv106.sys sc.exe create inpoutx64.sys inpoutx64.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag inpoutx64.sys type=kernel sc.exe start inpoutx64.sys sc.exe create AsIO64.sys AsIO64.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag AsIO64.sys type=kernel sc.exe start AsIO64.sys sc.exe create piddrv.sys piddrv.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag piddrv.sys type=kernel sc.exe start piddrv.sys sc.exe create Se64a.sys Se64a.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag Se64a.sys type=kernel sc.exe start Se64a.sys sc.exe create iomem64.sys iomem64.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag iomem64.sys type=kernel sc.exe start iomem64.sys sc.exe create NetFlt.sys NetFlt.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag NetFlt.sys type=kernel sc.exe start NetFlt.sys sc.exe create viraglt64.sys viraglt64.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag viraglt64.sys type=kernel sc.exe start viraglt64.sys sc.exe create AsIO.sys AsIO.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag AsIO.sys type=kernel sc.exe start AsIO.sys sc.exe create ndislan.sys ndislan.sys Michael 2023-02-28 binPath=C:\windows\temp\ Haag ndislan.sys type=kernel sc.exe start ndislan.sys sc.exe create d2.sys d2.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag d2.sys type=kernel sc.exe start d2.sys sc.exe create MsIo64.sys MsIo64.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag MsIo64.sys type=kernel sc.exe start MsIo64.sys sc.exe create ntbios_2.sys ntbios_2.sys Michael 2023-02-28 binPath=C:\windows\temp\ Haag ntbios_2.sys type=kernel sc.exe start ntbios_2.sys sc.exe create DirectIo.sys DirectIo.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag DirectIo.sys type=kernel sc.exe start DirectIo.sys sc.exe create WinIo64B.sys WinIo64B.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag WinIo64B.sys type=kernel sc.exe start WinIo64B.sys sc.exe create mydrivers.sys mydrivers.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag mydrivers.sys type=kernel sc.exe start mydrivers.sys sc.exe create PanMonFlt.sys PanMonFlt.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag PanMonFlt.sys type=kernel sc.exe start PanMonFlt.sys sc.exe create AMDRyzenMasterDriver.sys AMDRyzenMasterDriver.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag AMDRyzenMasterDriver.sys type=kernel sc.exe start AMDRyzenMasterDriver.sys sc.exe create winio64.sys winio64.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag winio64.sys type=kernel sc.exe start winio64.sys sc.exe create HOSTNT.sys HOSTNT.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag HOSTNT.sys type=kernel sc.exe start HOSTNT.sys sc.exe create Michael BS_Flash64.sys binPath=C:\ BS_Flash64.sys Haag 2023-01-09 windows\temp\BS_Flash64.sys type=kernel sc.exe start BS_Flash64.sys sc.exe create kEvP64.sys kEvP64.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag kEvP64.sys type=kernel sc.exe start kEvP64.sys sc.exe create atillk64.sys atillk64.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag atillk64.sys type=kernel sc.exe start atillk64.sys sc.exe create NalDrv.sys NalDrv.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag NalDrv.sys type=kernel sc.exe start NalDrv.sys sc.exe create nvflash.sys nvflash.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag nvflash.sys type=kernel sc.exe start nvflash.sys sc.exe create AsrRapidStartDrv.sys AsrRapidStartDrv.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag AsrRapidStartDrv.sys type= kernel sc.exe start AsrRapidStartDrv.sys sc.exe create HwRwDrv.sys HwRwDrv.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag HwRwDrv.sys type=kernel sc.exe start HwRwDrv.sys sc.exe create ProtectS.sys ProtectS.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag ProtectS.sys type=kernel sc.exe start ProtectS.sys sc.exe create b3.sys b3.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag b3.sys type=kernel sc.exe start b3.sys sc.exe create NCHGBIOS2x64.SYS binPath=C: NCHGBIOS2x64.SYS Michael 2023-01-09 \windows\temp\ Haag NCHGBIOS2x64.SYS type= kernel sc.exe start NCHGBIOS2x64.SYS sc.exe create PanIOx64.sys PanIOx64.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag PanIOx64.sys type=kernel sc.exe start PanIOx64.sys sc.exe create 81.sys 81.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag 81.sys type=kernel sc.exe start 81.sys sc.exe create UCOREW64.SYS UCOREW64.SYS Michael 2023-01-09 binPath=C:\windows\temp\ Haag UCOREW64.SYS type=kernel sc.exe start UCOREW64.SYS sc.exe create Proxy32.sys Proxy32.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag Proxy32.sys type=kernel sc.exe start Proxy32.sys sc.exe create Black.sys Black.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag Black.sys type=kernel sc.exe start Black.sys sc.exe create nscm.sys nscm.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag nscm.sys type=kernel sc.exe start nscm.sys sc.exe create EneIo64.sys EneIo64.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag EneIo64.sys type=kernel sc.exe start EneIo64.sys sc.exe create wantd_3.sys wantd_3.sys Michael 2023-02-28 binPath=C:\windows\temp\ Haag wantd_3.sys type=kernel sc.exe start wantd_3.sys sc.exe create netfilterdrv.sys binPath=C: netfilterdrv.sys Michael 2023-01-09 \windows\temp\ Haag netfilterdrv.sys type= kernel sc.exe start netfilterdrv.sys sc.exe create POORTRY.sys POORTRY.sys Michael 2023-03-04 binPath=C:\windows\temp\ Haag POORTRY.sys type=kernel sc.exe start POORTRY.sys sc.exe create Sense5Ext.sys Sense5Ext.sys Michael 2023-03-04 binPath=C:\windows\temp\ Haag Sense5Ext.sys type=kernel sc.exe start Sense5Ext.sys sc.exe create dbutil.sys dbutil.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag dbutil.sys type=kernel sc.exe start dbutil.sys sc.exe create Michael OpenLibSys.sys binPath=C:\ OpenLibSys.sys Haag 2023-01-09 windows\temp\OpenLibSys.sys type=kernel sc.exe start OpenLibSys.sys sc.exe create daxin_blank.sys binPath=C:\ daxin_blank.sys Michael 2023-02-28 windows\temp\ Haag daxin_blank.sys type=kernel sc.exe start daxin_blank.sys sc.exe create Mhyprot2.sys Mhyprot2.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag Mhyprot2.sys type=kernel sc.exe start Mhyprot2.sys sc.exe create segwindrvx64.sys binPath=C: segwindrvx64.sys Michael 2023-01-09 \windows\temp\ Haag segwindrvx64.sys type= kernel sc.exe start segwindrvx64.sys sc.exe create cpuz_x64.sys cpuz_x64.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag cpuz_x64.sys type=kernel sc.exe start cpuz_x64.sys sc.exe create magdrvamd64.sys binPath=C:\ magdrvamd64.sys Michael 2023-01-09 windows\temp\ Haag magdrvamd64.sys type=kernel sc.exe start magdrvamd64.sys sc.exe create t7.sys t7.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag t7.sys type=kernel sc.exe start t7.sys sc.exe create cpuz.sys cpuz.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag cpuz.sys type=kernel sc.exe start cpuz.sys sc.exe create asmmap64.sys asmmap64.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag asmmap64.sys type=kernel sc.exe start asmmap64.sys sc.exe create BS_I2c64.sys BS_I2c64.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag BS_I2c64.sys type=kernel sc.exe start BS_I2c64.sys sc.exe create windows7-32.sys binPath=C:\ windows7-32.sys Michael 2023-01-09 windows\temp\ Haag windows7-32.sys type=kernel sc.exe start windows7-32.sys sc.exe create PcieCubed.sys PcieCubed.sys Michael 2023-03-04 binPath=C:\windows\temp\ Haag PcieCubed.sys type=kernel sc.exe start PcieCubed.sys sc.exe create daxin_blank3.sys binPath=C: daxin_blank3.sys Michael 2023-02-28 \windows\temp\ Haag daxin_blank3.sys type= kernel sc.exe start daxin_blank3.sys sc.exe create wantd_5.sys wantd_5.sys Michael 2023-02-28 binPath=C:\windows\temp\ Haag wantd_5.sys type=kernel sc.exe start wantd_5.sys sc.exe create d3.sys d3.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag d3.sys type=kernel sc.exe start d3.sys sc.exe create Michael WinFlash64.sys binPath=C:\ WinFlash64.sys Haag 2023-01-09 windows\temp\WinFlash64.sys type=kernel sc.exe start WinFlash64.sys sc.exe create WYProxy32.sys WYProxy32.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag WYProxy32.sys type=kernel sc.exe start WYProxy32.sys sc.exe create GLCKIO2.sys GLCKIO2.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag GLCKIO2.sys type=kernel sc.exe start GLCKIO2.sys sc.exe create ncpl.sys ncpl.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag ncpl.sys type=kernel sc.exe start ncpl.sys sc.exe create piddrv64.sys piddrv64.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag piddrv64.sys type=kernel sc.exe start piddrv64.sys sc.exe create kbdcap64.sys kbdcap64.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag kbdcap64.sys type=kernel sc.exe start kbdcap64.sys sc.exe create amp.sys amp.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag amp.sys type=kernel sc.exe start amp.sys sc.exe create HwOs2Ec7x64.sys binPath=C:\ HwOs2Ec7x64.sys Michael 2023-01-09 windows\temp\ Haag HwOs2Ec7x64.sys type=kernel sc.exe start HwOs2Ec7x64.sys sc.exe create b1.sys b1.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag b1.sys type=kernel sc.exe start b1.sys sc.exe create WinRing0.sys WinRing0.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag WinRing0.sys type=kernel sc.exe start WinRing0.sys sc.exe create NBIOLib_X64.sys binPath=C:\ NBIOLib_X64.sys Michael 2023-01-09 windows\temp\ Haag NBIOLib_X64.sys type=kernel sc.exe start NBIOLib_X64.sys sc.exe create dbk64.sys dbk64.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag dbk64.sys type=kernel sc.exe start dbk64.sys sc.exe create viragt.sys viragt.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag viragt.sys type=kernel sc.exe start viragt.sys sc.exe create bandai.sys bandai.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag bandai.sys type=kernel sc.exe start bandai.sys sc.exe create WinIo64C.sys WinIo64C.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag WinIo64C.sys type=kernel sc.exe start WinIo64C.sys Michael sc.exe create 2.sys binPath 2.sys Haag 2023-03-04 =C:\windows\temp\2.sys type =kernel sc.exe start 2.sys sc.exe create MsIo32.sys MsIo32.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag MsIo32.sys type=kernel sc.exe start MsIo32.sys sc.exe create WinIo64A.sys WinIo64A.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag WinIo64A.sys type=kernel sc.exe start WinIo64A.sys sc.exe create PhlashNT.sys PhlashNT.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag PhlashNT.sys type=kernel sc.exe start PhlashNT.sys sc.exe create daxin_blank1.sys binPath=C: daxin_blank1.sys Michael 2023-02-28 \windows\temp\ Haag daxin_blank1.sys type= kernel sc.exe start daxin_blank1.sys sc.exe create CITMDRV_IA64.sys binPath=C: CITMDRV_IA64.sys Michael 2023-01-09 \windows\temp\ Haag CITMDRV_IA64.sys type= kernel sc.exe start CITMDRV_IA64.sys sc.exe create rtkiow10x64.sys binPath=C:\ rtkiow10x64.sys Michael 2023-01-09 windows\temp\ Haag rtkiow10x64.sys type=kernel sc.exe start rtkiow10x64.sys sc.exe create nvflsh64.sys nvflsh64.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag nvflsh64.sys type=kernel sc.exe start nvflsh64.sys sc.exe create PCHunter.sys PCHunter.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag PCHunter.sys type=kernel sc.exe start PCHunter.sys sc.exe create physmem.sys physmem.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag physmem.sys type=kernel sc.exe start physmem.sys sc.exe create Michael amifldrv64.sys binPath=C:\ amifldrv64.sys Haag 2023-01-09 windows\temp\amifldrv64.sys type=kernel sc.exe start amifldrv64.sys sc.exe create ADV64DRV.sys ADV64DRV.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag ADV64DRV.sys type=kernel sc.exe start ADV64DRV.sys sc.exe create BS_RCIO.sys BS_RCIO.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag BS_RCIO.sys type=kernel sc.exe start BS_RCIO.sys sc.exe create ni.sys ni.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag ni.sys type=kernel sc.exe start ni.sys sc.exe create Monitor_win10_x64.sys Monitor_win10_x64.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag Monitor_win10_x64.sys type= kernel sc.exe start Monitor_win10_x64.sys sc.exe create WYProxy64.sys WYProxy64.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag WYProxy64.sys type=kernel sc.exe start WYProxy64.sys sc.exe create b4.sys b4.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag b4.sys type=kernel sc.exe start b4.sys sc.exe create gameink.sys gameink.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag gameink.sys type=kernel sc.exe start gameink.sys sc.exe create goad.sys goad.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag goad.sys type=kernel sc.exe start goad.sys sc.exe create zam64.sys zam64.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag zam64.sys type=kernel sc.exe start zam64.sys sc.exe create POORTRY2.sys POORTRY2.sys Michael 2023-03-04 binPath=C:\windows\temp\ Haag POORTRY2.sys type=kernel sc.exe start POORTRY2.sys sc.exe create asrdrv104.sys asrdrv104.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag asrdrv104.sys type=kernel sc.exe start asrdrv104.sys sc.exe create AsrSetupDrv103.sys binPath= AsrSetupDrv103.sys Michael 2023-01-09 C:\windows\temp\ Haag AsrSetupDrv103.sys type= kernel sc.exe start AsrSetupDrv103.sys sc.exe create nicm.sys nicm.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag nicm.sys type=kernel sc.exe start nicm.sys sc.exe create mhyprot.sys mhyprot.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag mhyprot.sys type=kernel sc.exe start mhyprot.sys sc.exe create BS_HWMIO64_W10.sys binPath= BS_HWMIO64_W10.sys Michael 2023-01-09 C:\windows\temp\ Haag BS_HWMIO64_W10.sys type= kernel sc.exe start BS_HWMIO64_W10.sys sc.exe create PanMonFltX64.sys binPath=C: PanMonFltX64.sys Michael 2023-01-09 \windows\temp\ Haag PanMonFltX64.sys type= kernel sc.exe start PanMonFltX64.sys sc.exe create PanIO.sys PanIO.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag PanIO.sys type=kernel sc.exe start PanIO.sys sc.exe create krpocesshacker.sys binPath= krpocesshacker.sys Michael 2023-01-09 C:\windows\temp\ Haag krpocesshacker.sys type= kernel sc.exe start krpocesshacker.sys sc.exe create daxin_blank2.sys binPath=C: daxin_blank2.sys Michael 2023-02-28 \windows\temp\ Haag daxin_blank2.sys type= kernel sc.exe start daxin_blank2.sys sc.exe create AMDPowerProfiler.sys AMDPowerProfiler.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag AMDPowerProfiler.sys type= kernel sc.exe start AMDPowerProfiler.sys sc.exe create nt2.sys nt2.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag nt2.sys type=kernel sc.exe start nt2.sys sc.exe create GVCIDrv64.sys GVCIDrv64.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag GVCIDrv64.sys type=kernel sc.exe start GVCIDrv64.sys sc.exe create d4.sys d4.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag d4.sys type=kernel sc.exe start d4.sys sc.exe create ASIO32.sys ASIO32.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag ASIO32.sys type=kernel sc.exe start ASIO32.sys sc.exe create SysInfo.sys SysInfo.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag SysInfo.sys type=kernel sc.exe start SysInfo.sys sc.exe create AsrDrv10.sys AsrDrv10.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag AsrDrv10.sys type=kernel sc.exe start AsrDrv10.sys sc.exe create bwrsh.sys bwrsh.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag bwrsh.sys type=kernel sc.exe start bwrsh.sys sc.exe create superbmc.sys superbmc.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag superbmc.sys type=kernel sc.exe start superbmc.sys sc.exe create TGSafe.sys TGSafe.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag TGSafe.sys type=kernel sc.exe start TGSafe.sys sc.exe create fidpcidrv64.sys binPath=C:\ fidpcidrv64.sys Michael 2023-01-09 windows\temp\ Haag fidpcidrv64.sys type=kernel sc.exe start fidpcidrv64.sys sc.exe create windows8-10-32.sys binPath= windows8-10-32.sys Michael 2023-01-09 C:\windows\temp\ Haag windows8-10-32.sys type= kernel sc.exe start windows8-10-32.sys sc.exe create rtkio.sys rtkio.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag rtkio.sys type=kernel sc.exe start rtkio.sys sc.exe create Michael dbutil_2_3.sys binPath=C:\ dbutil_2_3.sys Haag 2023-01-09 windows\temp\dbutil_2_3.sys type=kernel sc.exe start dbutil_2_3.sys sc.exe create Michael smep_namco.sys binPath=C:\ smep_namco.sys Haag 2023-01-09 windows\temp\smep_namco.sys type=kernel sc.exe start smep_namco.sys sc.exe create ALSysIO64.sys ALSysIO64.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag ALSysIO64.sys type=kernel sc.exe start ALSysIO64.sys sc.exe create BSMIXP64.sys BSMIXP64.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag BSMIXP64.sys type=kernel sc.exe start BSMIXP64.sys sc.exe create sandra.sys sandra.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag sandra.sys type=kernel sc.exe start sandra.sys sc.exe create daxin_blank6.sys binPath=C: daxin_blank6.sys Michael 2023-02-28 \windows\temp\ Haag daxin_blank6.sys type= kernel sc.exe start daxin_blank6.sys sc.exe create TestBone.sys TestBone.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag TestBone.sys type=kernel sc.exe start TestBone.sys Michael sc.exe create 7.sys binPath 7.sys Haag 2023-03-04 =C:\windows\temp\7.sys type =kernel sc.exe start 7.sys Michael sc.exe create t.sys binPath t.sys Haag 2023-01-09 =C:\windows\temp\t.sys type =kernel sc.exe start t.sys sc.exe create iqvw64e.sys iqvw64e.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag iqvw64e.sys type=kernel sc.exe start iqvw64e.sys sc.exe create Air_SYSTEM10.sys binPath=C: Air_SYSTEM10.sys Michael 2023-03-03 \windows\temp\ Haag Air_SYSTEM10.sys type= kernel sc.exe start Air_SYSTEM10.sys sc.exe create mhyprot3.sys mhyprot3.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag mhyprot3.sys type=kernel sc.exe start mhyprot3.sys sc.exe create HpPortIox64.sys binPath=C:\ HpPortIox64.sys Michael 2023-01-09 windows\temp\ Haag HpPortIox64.sys type=kernel sc.exe start HpPortIox64.sys sc.exe create WinIO32B.sys WinIO32B.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag WinIO32B.sys type=kernel sc.exe start WinIO32B.sys sc.exe create NetProxyDriver.sys binPath= NetProxyDriver.sys Michael 2023-01-09 C:\windows\temp\ Haag NetProxyDriver.sys type= kernel sc.exe start NetProxyDriver.sys sc.exe create WinIO32.sys WinIO32.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag WinIO32.sys type=kernel sc.exe start WinIO32.sys sc.exe create speedfan.sys speedfan.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag speedfan.sys type=kernel sc.exe start speedfan.sys sc.exe create wantd_4.sys wantd_4.sys Michael 2023-02-28 binPath=C:\windows\temp\ Haag wantd_4.sys type=kernel sc.exe start wantd_4.sys sc.exe create Michael zamguard64.sys binPath=C:\ zamguard64.sys Haag 2023-01-09 windows\temp\zamguard64.sys type=kernel sc.exe start zamguard64.sys sc.exe create AsrDrv102.sys AsrDrv102.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag AsrDrv102.sys type=kernel sc.exe start AsrDrv102.sys sc.exe create vmdrv.sys vmdrv.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag vmdrv.sys type=kernel sc.exe start vmdrv.sys sc.exe create rtkio64.sys rtkio64.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag rtkio64.sys type=kernel sc.exe start rtkio64.sys Michael sc.exe create 1.sys binPath 1.sys Haag 2023-01-09 =C:\windows\temp\1.sys type =kernel sc.exe start 1.sys sc.exe create BlackBoneDrv10.sys binPath= BlackBoneDrv10.sys Michael 2023-01-09 C:\windows\temp\ Haag BlackBoneDrv10.sys type= kernel sc.exe start BlackBoneDrv10.sys sc.exe create HwOs2Ec10x64.sys binPath=C: HwOs2Ec10x64.sys Michael 2023-01-09 \windows\temp\ Haag HwOs2Ec10x64.sys type= kernel sc.exe start HwOs2Ec10x64.sys sc.exe create vboxdrv.sys vboxdrv.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag vboxdrv.sys type=kernel sc.exe start vboxdrv.sys sc.exe create wantd.sys wantd.sys Michael 2023-02-28 binPath=C:\windows\temp\ Haag wantd.sys type=kernel sc.exe start wantd.sys sc.exe create fiddrv64.sys fiddrv64.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag fiddrv64.sys type=kernel sc.exe start fiddrv64.sys sc.exe create VProEventMonitor.sys VProEventMonitor.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag VProEventMonitor.sys type= kernel sc.exe start VProEventMonitor.sys sc.exe create Dh_Kernel.sys Dh_Kernel.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag Dh_Kernel.sys type=kernel sc.exe start Dh_Kernel.sys sc.exe create LcTkA.sys LcTkA.sys Michael 2023-03-04 binPath=C:\windows\temp\ Haag LcTkA.sys type=kernel sc.exe start LcTkA.sys sc.exe create libnicm.sys libnicm.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag libnicm.sys type=kernel sc.exe start libnicm.sys sc.exe create elbycdio.sys elbycdio.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag elbycdio.sys type=kernel sc.exe start elbycdio.sys sc.exe create Agent64.sys Agent64.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag Agent64.sys type=kernel sc.exe start Agent64.sys sc.exe create nstr.sys nstr.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag nstr.sys type=kernel sc.exe start nstr.sys sc.exe create Michael NodeDriver.sys binPath=C:\ NodeDriver.sys Haag 2023-03-02 windows\temp\NodeDriver.sys type=kernel sc.exe start NodeDriver.sys sc.exe create aswVmm.sys aswVmm.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag aswVmm.sys type=kernel sc.exe start aswVmm.sys sc.exe create viragt64.sys viragt64.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag viragt64.sys type=kernel sc.exe start viragt64.sys sc.exe create AsrIbDrv.sys AsrIbDrv.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag AsrIbDrv.sys type=kernel sc.exe start AsrIbDrv.sys sc.exe create ntbios.sys ntbios.sys Michael 2023-02-28 binPath=C:\windows\temp\ Haag ntbios.sys type=kernel sc.exe start ntbios.sys sc.exe create kprocesshacker.sys binPath= kprocesshacker.sys Michael 2023-01-09 C:\windows\temp\ Haag kprocesshacker.sys type= kernel sc.exe start kprocesshacker.sys sc.exe create nt3.sys nt3.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag nt3.sys type=kernel sc.exe start nt3.sys sc.exe create NTIOLib_X64.sys binPath=C:\ NTIOLib_X64.sys Michael 2023-01-09 windows\temp\ Haag NTIOLib_X64.sys type=kernel sc.exe start NTIOLib_X64.sys sc.exe create Dh_Kernel_10.sys binPath=C: Dh_Kernel_10.sys Michael 2023-01-09 \windows\temp\ Haag Dh_Kernel_10.sys type= kernel sc.exe start Dh_Kernel_10.sys sc.exe create Phymemx64.sys Phymemx64.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag Phymemx64.sys type=kernel sc.exe start Phymemx64.sys sc.exe create IOMap64.sys IOMap64.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag IOMap64.sys type=kernel sc.exe start IOMap64.sys sc.exe create WiseUnlo.sys WiseUnlo.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag WiseUnlo.sys type=kernel sc.exe start WiseUnlo.sys sc.exe create phymem64.sys phymem64.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag phymem64.sys type=kernel sc.exe start phymem64.sys sc.exe create Proxy64.sys Proxy64.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag Proxy64.sys type=kernel sc.exe start Proxy64.sys sc.exe create AsrDrv101.sys AsrDrv101.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag AsrDrv101.sys type=kernel sc.exe start AsrDrv101.sys sc.exe create fidpcidrv.sys fidpcidrv.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag fidpcidrv.sys type=kernel sc.exe start fidpcidrv.sys sc.exe create RTCore64.sys RTCore64.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag RTCore64.sys type=kernel sc.exe start RTCore64.sys sc.exe create My.sys My.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag My.sys type=kernel sc.exe start My.sys sc.exe create ATSZIO64.sys ATSZIO64.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag ATSZIO64.sys type=kernel sc.exe start ATSZIO64.sys sc.exe create Lv561av.sys Lv561av.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag Lv561av.sys type=kernel sc.exe start Lv561av.sys sc.exe create AsrSmartConnectDrv.sys AsrSmartConnectDrv.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag AsrSmartConnectDrv.sys type =kernel sc.exe start AsrSmartConnectDrv.sys sc.exe create rzpnk.sys rzpnk.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag rzpnk.sys type=kernel sc.exe start rzpnk.sys sc.exe create BS_I2cIo.sys BS_I2cIo.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag BS_I2cIo.sys type=kernel sc.exe start BS_I2cIo.sys sc.exe create smep_capcom.sys binPath=C:\ smep_capcom.sys Michael 2023-01-09 windows\temp\ Haag smep_capcom.sys type=kernel sc.exe start smep_capcom.sys sc.exe create semav6msr64.sys binPath=C:\ semav6msr64.sys Michael 2023-01-09 windows\temp\ Haag semav6msr64.sys type=kernel sc.exe start semav6msr64.sys sc.exe create nstrwsk.sys nstrwsk.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag nstrwsk.sys type=kernel sc.exe start nstrwsk.sys sc.exe create AsUpIO.sys AsUpIO.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag AsUpIO.sys type=kernel sc.exe start AsUpIO.sys sc.exe create NTIOLib.sys NTIOLib.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag NTIOLib.sys type=kernel sc.exe start NTIOLib.sys sc.exe create msrhook.sys msrhook.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag msrhook.sys type=kernel sc.exe start msrhook.sys sc.exe create Michael DBUtilDrv2.sys binPath=C:\ DBUtilDrv2.sys Haag 2023-01-09 windows\temp\DBUtilDrv2.sys type=kernel sc.exe start DBUtilDrv2.sys sc.exe create Michael FairplayKD.sys binPath=C:\ FairplayKD.sys Haag 2023-01-09 windows\temp\FairplayKD.sys type=kernel sc.exe start FairplayKD.sys sc.exe create Michael rtkiow8x64.sys binPath=C:\ rtkiow8x64.sys Haag 2023-01-09 windows\temp\rtkiow8x64.sys type=kernel sc.exe start rtkiow8x64.sys sc.exe create POORTRY1.sys POORTRY1.sys Michael 2023-03-04 binPath=C:\windows\temp\ Haag POORTRY1.sys type=kernel sc.exe start POORTRY1.sys sc.exe create AsrOmgDrv.sys AsrOmgDrv.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag AsrOmgDrv.sys type=kernel sc.exe start AsrOmgDrv.sys Michael sc.exe create d.sys binPath d.sys Haag 2023-01-09 =C:\windows\temp\d.sys type =kernel sc.exe start d.sys sc.exe create BSMI.sys BSMI.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag BSMI.sys type=kernel sc.exe start BSMI.sys sc.exe create hw_sys hw_sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag hw_sys type=kernel sc.exe start hw_sys sc.exe create EneTechIo64.sys binPath=C:\ EneTechIo64.sys Michael 2023-01-09 windows\temp\ Haag EneTechIo64.sys type=kernel sc.exe start EneTechIo64.sys sc.exe create BSMIx64.sys BSMIx64.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag BSMIx64.sys type=kernel sc.exe start BSMIx64.sys sc.exe create WCPU.sys WCPU.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag WCPU.sys type=kernel sc.exe start WCPU.sys sc.exe create aswArPot.sys aswArPot.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag aswArPot.sys type=kernel sc.exe start aswArPot.sys sc.exe create otipcibus.sys otipcibus.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag otipcibus.sys type=kernel sc.exe start otipcibus.sys sc.exe create elrawdsk.sys elrawdsk.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag elrawdsk.sys type=kernel sc.exe start elrawdsk.sys sc.exe create AsUpIO64.sys AsUpIO64.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag AsUpIO64.sys type=kernel sc.exe start AsUpIO64.sys sc.exe create Michael LgDCatcher.sys binPath=C:\ LgDCatcher.sys Haag 2023-01-09 windows\temp\LgDCatcher.sys type=kernel sc.exe start LgDCatcher.sys Michael sc.exe create gdrv.sys gdrv.sys Haag, 2023-01-09 binPath=C:\windows\temp\ rasta-mouse gdrv.sys type=kernel sc.exe start gdrv.sys sc.exe create daxin_blank4.sys binPath=C: daxin_blank4.sys Michael 2023-02-28 \windows\temp\ Haag daxin_blank4.sys type= kernel sc.exe start daxin_blank4.sys sc.exe create procexp.Sys procexp.Sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag procexp.Sys type=kernel sc.exe start procexp.Sys sc.exe create BS_Def64.sys BS_Def64.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag BS_Def64.sys type=kernel sc.exe start BS_Def64.sys sc.exe create nt4.sys nt4.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag nt4.sys type=kernel sc.exe start nt4.sys sc.exe create AsrDrv103.sys AsrDrv103.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag AsrDrv103.sys type=kernel sc.exe start AsrDrv103.sys sc.exe create bw.sys bw.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag bw.sys type=kernel sc.exe start bw.sys sc.exe create capcom.sys capcom.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag capcom.sys type=kernel sc.exe start capcom.sys sc.exe create wantd_2.sys wantd_2.sys Michael 2023-02-28 binPath=C:\windows\temp\ Haag wantd_2.sys type=kernel sc.exe start wantd_2.sys sc.exe create driver7-x86.sys binPath=C:\ driver7-x86.sys Michael 2023-01-09 windows\temp\ Haag driver7-x86.sys type=kernel sc.exe start driver7-x86.sys sc.exe create GameTerSafe.sys binPath=C:\ GameTerSafe.sys Michael 2023-01-09 windows\temp\ Haag GameTerSafe.sys type=kernel sc.exe start GameTerSafe.sys sc.exe create driver7-x86-withoutdbg.sys driver7-x86-withoutdbg.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag driver7-x86-withoutdbg.sys type=kernel sc.exe start driver7-x86-withoutdbg.sys sc.exe create IObitUnlocker.sys binPath= IObitUnlocker.sys Michael 2023-01-09 C:\windows\temp\ Haag IObitUnlocker.sys type= kernel sc.exe start IObitUnlocker.sys sc.exe create ATSZIO.sys ATSZIO.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag ATSZIO.sys type=kernel sc.exe start ATSZIO.sys sc.exe create wantd_6.sys wantd_6.sys Michael 2023-02-28 binPath=C:\windows\temp\ Haag wantd_6.sys type=kernel sc.exe start wantd_6.sys sc.exe create windows-xp-64.sys binPath= windows-xp-64.sys Michael 2023-01-09 C:\windows\temp\ Haag windows-xp-64.sys type= kernel sc.exe start windows-xp-64.sys sc.exe create bwrs.sys bwrs.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag bwrs.sys type=kernel sc.exe start bwrs.sys sc.exe create nt6.sys nt6.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag nt6.sys type=kernel sc.exe start nt6.sys sc.exe create t8.sys t8.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag t8.sys type=kernel sc.exe start t8.sys sc.exe create WinIO32A.sys WinIO32A.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag WinIO32A.sys type=kernel sc.exe start WinIO32A.sys Michael sc.exe create b.sys binPath b.sys Haag 2023-01-09 =C:\windows\temp\b.sys type =kernel sc.exe start b.sys sc.exe create mtcBSv64.sys mtcBSv64.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag mtcBSv64.sys type=kernel sc.exe start mtcBSv64.sys sc.exe create full.sys full.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag full.sys type=kernel sc.exe start full.sys sc.exe create WINIODrv.sys WINIODrv.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag WINIODrv.sys type=kernel sc.exe start WINIODrv.sys sc.exe create rwdrv.sys rwdrv.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag rwdrv.sys type=kernel sc.exe start rwdrv.sys sc.exe create BS_RCIO64.sys BS_RCIO64.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag BS_RCIO64.sys type=kernel sc.exe start BS_RCIO64.sys sc.exe create t3.sys t3.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag t3.sys type=kernel sc.exe start t3.sys sc.exe create cpupress.sys cpupress.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag cpupress.sys type=kernel sc.exe start cpupress.sys sc.exe create nt5.sys nt5.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag nt5.sys type=kernel sc.exe start nt5.sys sc.exe create Michael BS_HWMIo64.sys binPath=C:\ BS_HWMIo64.sys Haag 2023-01-09 windows\temp\BS_HWMIo64.sys type=kernel sc.exe start BS_HWMIo64.sys sc.exe create blacklotus_driver.sys blacklotus_driver.sys Michael 2023-04-05 binPath=C:\windows\temp\ Haag blacklotus_driver.sys type= kernel sc.exe start blacklotus_driver.sys sc.exe create semav6msr.sys semav6msr.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag semav6msr.sys type=kernel sc.exe start semav6msr.sys sc.exe create LHA.sys LHA.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag LHA.sys type=kernel sc.exe start LHA.sys sc.exe create gftkyj64.sys gftkyj64.sys Michael 2023-03-04 binPath=C:\windows\temp\ Haag gftkyj64.sys type=kernel sc.exe start gftkyj64.sys sc.exe create Bs_Def.sys Bs_Def.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag Bs_Def.sys type=kernel sc.exe start Bs_Def.sys Michael sc.exe create c.sys binPath c.sys Haag 2023-01-09 =C:\windows\temp\c.sys type =kernel sc.exe start c.sys sc.exe create CITMDRV_AMD64.sys binPath= CITMDRV_AMD64.sys Michael 2023-01-09 C:\windows\temp\ Haag CITMDRV_AMD64.sys type= kernel sc.exe start CITMDRV_AMD64.sys sc.exe create 80.sys 80.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag 80.sys type=kernel sc.exe start 80.sys sc.exe create TmComm.sys TmComm.sys Michael 2023-01-09 binPath=C:\windows\temp\ Haag TmComm.sys type=kernel sc.exe start TmComm.sys (c) 2023 With [?] from Magicsword