diff --git a/.gitignore b/.gitignore
index 4cc4203..e344729 100644
--- a/.gitignore
+++ b/.gitignore
@@ -68,3 +68,7 @@ coverage/
 
 # SBOM intermediates (final SBOMs are committed; intermediates are not)
 sbom/work/
+
+# Driver binaries (e.g. virtio NetKVM netkvmp.exe) must be tracked despite the global
+# *.exe / *.msi ignores above -- they are referenced by the .inf and DISM needs them.
+!windows/drivers/**
diff --git a/windows/drivers/netkvm/netkvmco.exe b/windows/drivers/netkvm/netkvmco.exe
new file mode 100644
index 0000000..277192b
Binary files /dev/null and b/windows/drivers/netkvm/netkvmco.exe differ
diff --git a/windows/drivers/netkvm/netkvmp.exe b/windows/drivers/netkvm/netkvmp.exe
new file mode 100644
index 0000000..5e493a8
Binary files /dev/null and b/windows/drivers/netkvm/netkvmp.exe differ