this driver is a direct response to the LegacyHive Exploit to deny it from gaining any oplocks to the HKCU hive (NTUSER.dat usrclass.dat)
Note that you need fltmgr.lib to build the driver other wise it wont build
2026/07/18: Fixed a minor issue in the name constants. String patterns for FsRtlIsNameInExpression must be strictly capitalized to handle mixed-case inputs correctly. Sorry for any inconvenience.
2026/9/2: fixed Unload Procedures didn't notice them earlier
2026/9/5: Hiveoplock as a Driver Was intercepting Yes but didn't actually intercept everything that was Needed Properly the issue had been fixed and the driver is tested under verifier /flags 0x03AFEFBF /driver HiveOplock.sys
This Section is for the People who loaded an Older version of the driver and is failing to unload it
First Boot to safe Mode via Shift + Restart
then after booting to the WinRE
Go to Troubleshoot -> Advanced -> Options -> Startup settings -> restart -> F4
then i want you to open a cmd and type in sc delete HiveOplock and you are done reboot to your OS normally again
i know i had been gone for a while but i had been Busy