Update Well-Known WNF Names

googleprojectzero / sandbox-attacksurface-analysis-tools

Set of tools to analyze Windows sandboxes for exposed attack surface.

Apache License 2.0

2.05k stars 428 forks source link

Update Well-Known WNF Names #45

Open daem0nc0re opened 2 years ago

daem0nc0re commented 2 years ago

Hi.

I wrote wnf tools and dump well-known wnf names from perf_nt_c.dll on Windows 11 build 22000. The sha256 of perf_nt_c.dll is ca5a5b64b3bfa9dc43b020f5b81ee6055a6a62ed6507adb00209b31e28791c8f.