4 ms·
I thought windows required all kernel modules to be signed..? If there are multiple corrupt copies, rather than just some test escape, how could they have pas
by drewg123 2y ago
I thought windows required all kernel modules to be signed..? If there are multiple corrupt copies, rather than just some test escape, how could they have passed the signature verification and been loaded by the kernel?
- dist-epoch 2y agoThis is not even a valid executable. Most likely is not loaded as a driver binary, but instead is some data file used by the CrowdStrike driver.
- Izkata 2y agoSeems like a data file: https://news.ycombinator.com/item?id=41004103 https://news.ycombinator.com/item?id=41004103