Driver intelligenceVulnerableVerified

NetworkLocker_x64.sys

NetworkLocker_x64.sys is a vulnerable kernel driver from the KeServiceDescriptorTable/vulnerable-drivers repository. The driver exposes dangerous kernel primitives to usermode.

UUID / 0e114b5b-7ec1-4fa3-ac93-e505f986547fADDED / 2026-04-17AUTHOR / Michael Haag

Known samples 1

0 recorded TRUE · 1 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

NetworkLocker_x64.sysSample 1 · HVCI FALSE

MD5: a982993a68f4aa8789386cedcc1e5b03
SHA1: 354f89e4fe21c1a1e213c933793e41a7008f2bd1
SHA256: ff0892697771f1a9968423793faa34008cfa0041fee48d5b52b25314f7a6a7b4
Imphash: 6e4ddf452e921db2a3cb4d3cbf2a8404
Authentihash MD5: 321ad3d45863544d7e8f5a7a17591950
Authentihash SHA1: d6b80b4396af7e49c9d80da574f229f8e348cf03
Authentihash SHA256: 6621a547783013c1ea29da6c5e96ddacf72b9bf339fc48ae85ad3f089b87e1f3
Machine: AMD64
Version: Not recorded
Publisher: Not recorded

Download vulnerable sample View on VirusTotal

Recorded command

sc.exe create NetworkLocker_x64 binPath=C:\windows\temp\NetworkLocker_x64.sys type=kernel && sc.exe start NetworkLocker_x64

Elevate privileges · Privileges: kernel · OS: Windows 10

Research & references

Acknowledgement: @rainbowdynamix, @DbgPrint