Driver intelligenceVulnerableVerified

fjfwupgd.sys

fjfwupgd.sys is a vulnerable kernel driver from the KeServiceDescriptorTable/vulnerable-drivers repository. The driver exposes dangerous kernel primitives to usermode.

UUID / 2e47cd6a-30a2-4790-9f9c-9de7b0d7bf60ADDED / 2026-04-17AUTHOR / Michael Haag

Known samples 1

0 recorded TRUE · 1 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

fjfwupgd.sysSample 1 · HVCI FALSE

MD5: 23c5262947eed835d8b8997e308c809d
SHA1: 1c98e4699b2868fe09589c429a7866a723a446fe
SHA256: 30ee861d6d34db31ed57273fe1b3e08c30260c46fbca2cc00725d08ffd1013f6
Imphash: 8795438aa746402719d9402d98bea3f5
Authentihash MD5: ee3920a9eb865bac0c14a0f84f3ef8ab
Authentihash SHA1: e1f3d76ca9ab2e5fb95b85a3fbf36dd81a73cb69
Authentihash SHA256: 0f753015dfb54e11585bf8821fcc036dc8dee1f4165f26924d03fa38ab7e3d67
Machine: AMD64
Version: 1.0.0.0
Publisher: FUJITSU LIMITED

Download vulnerable sample View on VirusTotal

Recorded command

sc.exe create fjfwupgd binPath=C:\windows\temp\fjfwupgd.sys type=kernel && sc.exe start fjfwupgd

Elevate privileges · Privileges: kernel · OS: Windows 10

Research & references

Acknowledgement: @rainbowdynamix, @DbgPrint