kobjexp.sys

kobjexp.sys is the 'Kernel Object Explorer' helper driver from System Explorer, an open-source Windows internals tool written by Pavel Yosifovich, a well-known author on Windows internals. The driver lets the tool enumerate kernel objects that user-mode APIs do not expose. The file carries no version or vendor metadata of its own, which is why some scanners list it as unattributed even though it is signed.

It is on the public LOLDrivers list on capability grounds, the same as other diagnostic kernel helpers: the access that makes it useful for inspection is the access an attacker would want. No CVE is assigned and no named incident is tied to it.

This is a developer and research tool, not something a typical gamer would have. If it is on your machine and you did not run a Windows internals utility, identify what placed it. Microsoft's Vulnerable Driver Blocklist blocks known-bad builds from loading.

kobjexp.sys is listed as a known-vulnerable driver on the public LOLDrivers project. 2 distinct binary hashes matching this filename are on record, meaning multiple versions of the file have been observed.