CRUWBlocker.sys
Description: CRU USB WriteBlocker (x64)
Authors: Copyright (c) 2018 CRU Acquisition Group, LLC
Version: 1.2.1.0
Architecture: 64-bit
Operating System: Windows NT
SHA256: f59be364eb9360c999c6f68218100d0a
File Size: 39.2 KB
Uploaded At: Feb. 20, 2026, 6:28 p.m.
Views: 15
Exported Functions
No exported functions.
Imported DLLs & Functions
ntoskrnl.exe
- _wcsicmp (Address: 0x1400050f0)
- DbgPrintEx (Address: 0x140005098)
- ExAllocatePoolWithTag (Address: 0x140005060)
- ExFreePoolWithTag (Address: 0x140005068)
- IoAttachDeviceToDeviceStack (Address: 0x1400050a0)
- IoBuildDeviceIoControlRequest (Address: 0x140005018)
- IoBuildSynchronousFsdRequest (Address: 0x1400050f8)
- IoCreateDevice (Address: 0x1400050b0)
- IoDeleteDevice (Address: 0x1400050b8)
- IoDetachDevice (Address: 0x1400050c0)
- IofCallDriver (Address: 0x140005020)
- IofCompleteRequest (Address: 0x1400050a8)
- IoGetAttachedDeviceReference (Address: 0x140005100)
- IoGetDeviceAttachmentBaseRef (Address: 0x140005048)
- IoGetDeviceProperty (Address: 0x140005070)
- IoRegisterDeviceInterface (Address: 0x1400050d8)
- IoRegisterShutdownNotification (Address: 0x1400050c8)
- IoSetDeviceInterfaceState (Address: 0x1400050e0)
- IoWMIRegistrationControl (Address: 0x1400050d0)
- KeInitializeEvent (Address: 0x140005008)
- KeWaitForSingleObject (Address: 0x140005010)
- ObfDereferenceObject (Address: 0x140005028)
- RtlCheckRegistryKey (Address: 0x140005090)
- RtlCreateRegistryKey (Address: 0x140005088)
- RtlInitUnicodeString (Address: 0x140005000)
- RtlRandomEx (Address: 0x140005040)
- RtlUpcaseUnicodeChar (Address: 0x140005058)
- RtlWriteRegistryValue (Address: 0x140005080)
- wcsrchr (Address: 0x1400050e8)
- wcsstr (Address: 0x140005050)
- wcstoul (Address: 0x140005078)
- ZwClose (Address: 0x140005038)
- ZwCreateEvent (Address: 0x140005110)
- ZwCreateFile (Address: 0x140005030)
- ZwDeviceIoControlFile (Address: 0x140005108)