Driver intelligenceVulnerableVerified

hp64vision.sys

hp64vision.sys is a vulnerable kernel driver from the KeServiceDescriptorTable/vulnerable-drivers repository. The driver exposes dangerous kernel primitives to usermode.

UUID / da6709ab-3b7a-445d-9a47-e8b4141d4133ADDED / 2026-04-17AUTHOR / Michael Haag

Known samples 1

0 recorded TRUE · 1 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

hp64vision.sysSample 1 · HVCI FALSE

MD5: 4e6def72f97b0b8ee66637e41cdd1599
SHA1: eba70d4d113474e71e07dbc7a7d400bc47d52e41
SHA256: c1e11e2012216b54b2aad1be37b469d328f39b09352c66e8c74e6032ec858b96
Imphash: 79e47c851d03688b3b2870953371ee51
Authentihash MD5: 824c49f1e385d85acc863d6da754f176
Authentihash SHA1: 808defb0d9ef0f75f3cc5da831af2c6755d5b739
Authentihash SHA256: 96966130b8e6fd63eb036c9229e4c9aa515dc0ac00fa90ab61d55991db106d55
Machine: AMD64
Version: 2.0.0.0 built by: WinDDK
Publisher: Windows (R) Codename Longhorn DDK provider

Download vulnerable sample View on VirusTotal

Recorded command

sc.exe create hp64vision binPath=C:\windows\temp\hp64vision.sys type=kernel && sc.exe start hp64vision

Elevate privileges · Privileges: kernel · OS: Windows 10

Research & references

Acknowledgement: @rainbowdynamix, @DbgPrint