LOLDriversTHE DRIVER THREAT CATALOG
Living Off The Land Drivers

Know the driver.
Understand the risk.

Explore vulnerable and malicious Windows drivers. Find the hashes, examine the evidence, and put detections to work.

Find a driverGet detectionsExplore tools
Recently added

IoDrv.sys

IoDrv.sys is a hardware I/O driver with an embedded TOPSTAR OVERSEAS ELECTRONICS Co.,Ltd signature. Beazley Security identified this exact sample, renamed Redacted.sys, in an INC…

VulnerableExamine driver

The catalog at a glance

Full catalog · all known samples

Known samples

2,401

Across 698 driver entries

Driver entries over time

Cumulative driver entries over time197 entries in Jan 2023, growing to 698 in Sep 2026. Monthly totals based on the creation dates of current catalog entries.0350700Jan 2023Nov 2024Sep 2026
Sep 2026 · 698 entries+16 added

Cumulative entries · by creation date

Use the arrow keys to explore monthly totals and additions.

Driver explorer / THE CATALOG

JSONCSV
/
698 driver entries
Driver / publisherClassificationHVCI TRUESamplesAdded
IoDrv.sysTOPSTAR OVERSEAS ELECTRONICS Co.,LtdVulnerableUnknown12026-09-28
AToolsKrnl64.sysAntiy LabsVulnerableUnknown12026-09-23
BS_LED64.sysBIOSTAR GroupVulnerableUnknown12026-09-21
AmdTools64.sysAMDVulnerableUnknown12026-09-18
mbamchameleon.sysMalwarebytesVulnerableUnknown12026-09-18
pskmad.sysPanda Security, S.L.U.VulnerableUnknown12026-09-18
pwdrvio.sysPublisher not recordedVulnerableUnknown12026-09-18
pxscan.sysPrevxVulnerableUnknown12026-09-18
SakDriver.sysPublisher not recordedMaliciousUnknown12026-09-16
kgameprotect.sysPublisher not recordedVulnerableUnknown12026-09-11
fortimon3.sysFortinet IncVulnerableUnknown12026-09-09
ampg.sysMicrosoft CorporationMaliciousUnknown12026-09-08

Put the intelligence to work.

From a driver finding to your existing security workflow.