Driver intelligenceVulnerableVerified

Novawave_Novabench_NovabenchDriverWin10.sys

Novawave_Novabench_NovabenchDriverWin10.sys is a vulnerable kernel driver from the KeServiceDescriptorTable/vulnerable-drivers repository. The driver exposes dangerous kernel primitives to usermode.

UUID / c7789f3c-b638-4f66-a890-7605682306e7ADDED / 2026-04-17AUTHOR / Michael Haag

Known samples 1

1 recorded TRUE · 0 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

Novawave_Novabench_NovabenchDriverWin10.sysSample 1 · HVCI TRUE

MD5: 7e08e027983e7401d837d44ff7f4ddf4
SHA1: 43e79b27217a6221d179522b3223fe7051e9b589
SHA256: b6a17c3a1ca599b9865889b3bc1780e566c6cd05c8c5c6a05d2a29fef7089880
Imphash: 00a7616cbc7e704cb5076d971d6e2f84
Authentihash MD5: aaa467cf5b1a0eadd6ecdc606c03acaa
Authentihash SHA1: 204804a55cb40a40b47e2af6e0c4a3764dea6883
Authentihash SHA256: 891bc3aaad50ffa97059fe8b59f20265ea2076ced64d3ac32f196d42d496dc9f
Machine: AMD64
Version: Not recorded
Publisher: Not recorded

Download vulnerable sample View on VirusTotal

Recorded command

sc.exe create Novawave_Novabench_NovabenchDriverWin10 binPath=C:\windows\temp\Novawave_Novabench_NovabenchDriverWin10.sys type=kernel && sc.exe start Novawave_Novabench_NovabenchDriverWin10

Elevate privileges · Privileges: kernel · OS: Windows 10

Research & references

Acknowledgement: @rainbowdynamix, @DbgPrint