Driver intelligenceVulnerableVerified

GlobalVistaVentures_v3.sys

GlobalVistaVentures_v3.sys is a vulnerable kernel driver from the KeServiceDescriptorTable/vulnerable-drivers repository. The driver exposes dangerous kernel primitives to usermode.

UUID / 90df671c-a903-49bd-ac62-c124d4f6901dADDED / 2026-04-17AUTHOR / Michael Haag

Known samples 1

0 recorded TRUE · 1 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

GlobalVistaVentures_v3.sysSample 1 · HVCI FALSE

MD5: a3e41b5caaabf71f04d110b158fbf2e2
SHA1: 36175fd1dc300b86af6b6e9f890d07e8a603067e
SHA256: 7ccb02b9dc8bb46e5ea32fb8f4c93bac195bcbb0c2fc02d3af28f4208afe7c41
Imphash: 224fd8efd6b1832a5c50de95bf5acc85
Authentihash MD5: 005fefb26c2f32153bda34215f9ef37d
Authentihash SHA1: bf8197d2246cf01f455bb842f3c82dcfb3a9eba5
Authentihash SHA256: 81b5ec019957fd1b214e4f73ddfc73d6dfd93d4ec7a5f29580b629ef63283b43
Machine: AMD64
Version: Not recorded
Publisher: Not recorded

Download vulnerable sample View on VirusTotal

Recorded command

sc.exe create GlobalVistaVentures_v3 binPath=C:\windows\temp\GlobalVistaVentures_v3.sys type=kernel && sc.exe start GlobalVistaVentures_v3

Elevate privileges · Privileges: kernel · OS: Windows 10

Research & references

Acknowledgement: @rainbowdynamix, @DbgPrint