Driver intelligenceVulnerableVerified

UDDB2B6.sys

UDDB2B6.sys is a TechPowerUp kernel driver (GPU-Z variant) that exposes I/O port read/write, MSR read/write, MmMapIoSpace map/unmap/read/write, and PCI configuration space read/write. TechPowerUp has a history of vulnerable kernel drivers including GPU-Z.sys (CVE-2019-7245, CVE-2025-5324) and ThrottleStop.sys (CVE-2025-7771). The driver is available in the KeServiceDescriptorTable/vulnerable-drivers repository.

UUID / 886af494-4087-48c9-b48f-53e638d6f62eADDED / 2026-04-17AUTHOR / Michael Haag

Known samples 1

0 recorded TRUE · 1 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

UDDB2B6.sysSample 1 · HVCI FALSE

MD5: d4320487bf3021f2f2afcfc43d652a69
SHA1: f94503fea3fa7c526a70187444affd7f0e0e8926
SHA256: 9af0b89c5c54eb66e5a660b61aee7c1a25b1c92e20a310d8b16552abcf90c0b5
Imphash: fbcbcd6272f1203182652eacc64bca75
Authentihash MD5: 7871902bebb585e4618ba59e9c48bf71
Authentihash SHA1: f36d42ef53bc86c5345ddc9d2a28093fd713822b
Authentihash SHA256: 9786d12616feaf1302c308b816d3582969f4510208aedffac92225bbb78efc35
Machine: AMD64
Version: 5.0.0.0
Publisher: Not recorded

Download vulnerable sample View on VirusTotal

Recorded command

sc.exe create UDDB2B6 binPath=C:\windows\temp\UDDB2B6.sys type=kernel && sc.exe start UDDB2B6

Elevate privileges · Privileges: kernel · OS: Windows 10

Research & references

Acknowledgement: @rainbowdynamix, @DbgPrint