Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I thought windows required all kernel modules to be signed..? If there are multiple corrupt copies, rather than just some test escape, how could they have passed the signature verification and been loaded by the kernel?


This is not even a valid executable.

Most likely is not loaded as a driver binary, but instead is some data file used by the CrowdStrike driver.





Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: