CmdID

CmdID / Files

tmfsdrv2.sys

Driver on Windows LOLDrivers vulnerable driver

A known vulnerable driver

from LOLDrivers
T1056.001Input Capture: Keylogging

1 known sample

its entry

2cea1a8d5d23a5ed2c2ac2a0c7c0d95da516aa355224cc707f86de8ade5880ef

From LOLDrivers (Apache 2.0). A driver is known by its hash: a sample under another name is the same driver. In Ceplin, "<sha256>".whatis() says which sample a hash is.