CRUWBlocker.sys

v1.2.1.0 64-bit Windows NT Analyzed
Download
Description
CRU USB WriteBlocker (x64)
Authors
Copyright (c) 2018 CRU Acquisition Group, LLC
File size
39.2 KB
Uploaded
2026-02-20 18:28
Views
196
SHA-256
f59be364eb9360c999c6f68218100d0a

Exported functions 0

No exported functions.

Imported DLLs & functions 35

ntoskrnl.exe 35
_wcsicmp 0x1400050f0
DbgPrintEx 0x140005098
ExAllocatePoolWithTag 0x140005060
ExFreePoolWithTag 0x140005068
IoAttachDeviceToDeviceStack 0x1400050a0
IoBuildDeviceIoControlRequest 0x140005018
IoBuildSynchronousFsdRequest 0x1400050f8
IoCreateDevice 0x1400050b0
IoDeleteDevice 0x1400050b8
IoDetachDevice 0x1400050c0
IofCallDriver 0x140005020
IofCompleteRequest 0x1400050a8
IoGetAttachedDeviceReference 0x140005100
IoGetDeviceAttachmentBaseRef 0x140005048
IoGetDeviceProperty 0x140005070
IoRegisterDeviceInterface 0x1400050d8
IoRegisterShutdownNotification 0x1400050c8
IoSetDeviceInterfaceState 0x1400050e0
IoWMIRegistrationControl 0x1400050d0
KeInitializeEvent 0x140005008
KeWaitForSingleObject 0x140005010
ObfDereferenceObject 0x140005028
RtlCheckRegistryKey 0x140005090
RtlCreateRegistryKey 0x140005088
RtlInitUnicodeString 0x140005000
RtlRandomEx 0x140005040
RtlUpcaseUnicodeChar 0x140005058
RtlWriteRegistryValue 0x140005080
wcsrchr 0x1400050e8
wcsstr 0x140005050
wcstoul 0x140005078
ZwClose 0x140005038
ZwCreateEvent 0x140005110
ZwCreateFile 0x140005030
ZwDeviceIoControlFile 0x140005108