Driver intelligenceVulnerableVerified

SvIoCtrlx64.sys

SvIoCtrlx64.sys is a vulnerable kernel driver from the KeServiceDescriptorTable/vulnerable-drivers repository. The driver exposes dangerous kernel primitives to usermode.

UUID / 8d2f15a5-e71a-47ba-a391-55d1a1962368ADDED / 2026-04-17AUTHOR / Michael Haag

Known samples 1

0 recorded TRUE · 1 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

SvIoCtrlx64.sysSample 1 · HVCI FALSE

MD5: 6fb3c8ef22bbf968965b2cf12d4e5542
SHA1: 343bdef40edc07f4dffc18637ab3fad4058d0a96
SHA256: 9ade632e54c3f5e8c75eaf636f2910bad3a8a07d6f078e48c9641d3af1fe811c
Imphash: d6f977640d4810a784d152e4d3c63a6b
Authentihash MD5: 421582fd06708834ae0c851206eb145b
Authentihash SHA1: 8f8270ca9da1cde4af3411b501860b30183d656d
Authentihash SHA256: 27ce16300ff18f628c35feb43287504da7f38636661692b83bc7e0eb48c75774
Machine: AMD64
Version: 1.0.0.0
Publisher: www.seavo.com

Download vulnerable sample View on VirusTotal

Recorded command

sc.exe create SvIoCtrlx64 binPath=C:\windows\temp\SvIoCtrlx64.sys type=kernel && sc.exe start SvIoCtrlx64

Elevate privileges · Privileges: kernel · OS: Windows 10

Research & references

Acknowledgement: @rainbowdynamix, @DbgPrint