search

Mattiwatti / EfiGuard

Disable PatchGuard and Driver Signature Enforcement at boot time
GNU General Public License v3.0
1.84k stars 341 forks source link

Patched ntoskrnl fails to load with STATUS_IMAGE_CHECKSUM_MISMATCH. #132

Open Hallilogod opened 2 months ago

Hallilogod commented 2 months ago

Operating system

Windows 10 build 19045

Issue description

I am trying to load a custom ntoskrnl image. EfiGuard does not give any errors during its log and reports functions like ImgpValidateImageHash or ImgpFilterValidationFailure as successfully patched, however winload reports the image as corrupted with ntstatus 0xC0000221 (STATUS_IMAGE_CHECKSUM_MISMATCH). I am doing this on VMware, which should not cause any problems.

Steps to reproduce

  1. Replace ntoskrnl.exe on a Windows 10 19045 system with a custom image you want to load.
  2. Boot the EfiGuard loader.

Logs

No response

Attachments

grafik grafik

aubymori commented 1 month ago

@Hallilogod Try loading with boot time DSE bypass by pressing Home when it prompts you and selecting the option for boot time DSE bypass.