Driver intelligenceVulnerableVerified

inetcache.sys

inetcache.sys is a vulnerable kernel driver from the KeServiceDescriptorTable/vulnerable-drivers repository. The driver exposes dangerous kernel primitives to usermode.

UUID / 45b0de20-b3cc-4604-a428-175ea092cd39ADDED / 2026-04-17AUTHOR / Michael Haag

Known samples 1

1 recorded TRUE · 0 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

inetcache.sysSample 1 · HVCI TRUE

MD5: 3c18a7e1d5d04e5d89770ffa0be0e32e
SHA1: 46978d34d464b2e120b705098bdfefc7c4b5ef7c
SHA256: 21996ff297cfd67e0f722b9b5b1f7b8252782ea777e6d3486cbee335e92f88c4
Imphash: 89b9b0c26e9fec59328aeb062c03f6e6
Authentihash MD5: 4994266eeb4504c3cac910149a0e63c2
Authentihash SHA1: a3b684d5b0e7d074a1fa4199be5482a1ef4f589f
Authentihash SHA256: cab9f96d4a105d5d6ff8da73687a07d7026dd9721a51a5fa3a0d9fa24822aa22
Machine: AMD64
Version: Not recorded
Publisher: Not recorded

Download vulnerable sample View on VirusTotal

Recorded command

sc.exe create inetcache binPath=C:\windows\temp\inetcache.sys type=kernel && sc.exe start inetcache

Elevate privileges · Privileges: kernel · OS: Windows 10

Research & references

Acknowledgement: @rainbowdynamix, @DbgPrint