So- there is this Windows virtualiser with nsa-codeword sounding warbird as name. But why is is used to obfuscate the xpsprint driver and the speech recogniser dll? My spider sense tells me soon the world will know
Show this thread
-
Sometimes you stumble upon something and think wtf is going on here- like: long long SystemInformation[2]; NtQuerySystemInformation((SYSTEM_INFORMATION_CLASS)0xbe, SystemInformation,0x24,0);pic.twitter.com/JrPd7PfLZY
Show this thread
It have to be something OEM releated I think-but why do it look for that token, what do it unlock? Why is it looking on the uefi partition for it?
-
-
0xbe info class stands for SystemCodeIntegrityUnlockInformation which seems to correspond to the stack trace. https://github.com/processhacker/processhacker/blob/c933473b892100da409b270cef18f9fa69300855/phnt/include/ntexapi.h#L1440 …
-
Yarh- but what is it? I am not familar with the term systemcode - how do it releate to that pol file?
- Show replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.