Driver intelligenceVulnerableVerified

evga_kernel_driver-x64.sys

evga_kernel_driver-x64.sys is a vulnerable kernel driver from the KeServiceDescriptorTable/vulnerable-drivers repository. The driver exposes dangerous kernel primitives to usermode.

UUID / 02bbc006-a4a4-438f-9b6c-4382303f6b45ADDED / 2026-04-17AUTHOR / Michael Haag

Known samples 1

0 recorded TRUE · 1 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

evga_kernel_driver-x64.sysSample 1 · HVCI FALSE

MD5: 8dc9504fb5eda1a354971bacffe61ccc
SHA1: da66b66dca5ea8689db903ec23e98f2c881de6f8
SHA256: 33da2ce240b4559cc6e847d56c5fbeaa3d644ec160841920ea0a098dcee28d0e
Imphash: 71893549487f7704e76dc8929aa437a0
Authentihash MD5: e69a79ab53de2dfc3db057f9a4196fc2
Authentihash SHA1: a8d16fed8999033126d60c656a3ba359dfaa559f
Authentihash SHA256: 5cb98f5d5ebd97fa1d2d6ed7d0d1ed28eced93ef5ceaa2005243eeaf3f4d6f9d
Machine: AMD64
Version: 1.0.0.0
Publisher: Not recorded

Download vulnerable sample View on VirusTotal

Recorded command

sc.exe create evga_kernel_driver-x64 binPath=C:\windows\temp\evga_kernel_driver-x64.sys type=kernel && sc.exe start evga_kernel_driver-x64

Elevate privileges · Privileges: kernel · OS: Windows 10

Research & references

Acknowledgement: @rainbowdynamix, @DbgPrint