deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-12 13:27:23 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

Updated recommended block rules up to and including December 2024's updates

Browse Source
This commit is contained in:
Jordan Geurten 2024-12-13 18:32:22 -05:00
parent 049a507e2d
commit a296736c62
1 changed files with 600 additions and 310 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

304
windows/security/application-security/application-control/app-control-for-business/design/microsoft-recommended-driver-block-rules.md
View File

@ -81,7 +81,7 @@ The following recommended blocklist xml policy file can also be downloaded from
```xml
<?xml version="1.0" encoding="utf-8"?>
<SiPolicy xmlns="urn:schemas-microsoft-com:sipolicy">
<VersionEx>10.0.27685.0</VersionEx>
<VersionEx>10.0.27770.0</VersionEx>
<PlatformID>{2E07F7E4-194C-4D20-B7C9-6F44A6C5A234}</PlatformID>
<Rules>
<Rule>
@ -378,6 +378,26 @@ The following recommended blocklist xml policy file can also be downloaded from
<Deny ID="ID_DENY_ASIO_4" FriendlyName="asio\2da330a2088409efc351118445a824f11edbe51cf3d653b298053785097fe40e Hash Page Sha256" Hash="EA9A321D58DD45D747C41AD6F0C30B3B11F134755CE3E69DC3DC34257E420493" />
<Deny ID="ID_DENY_ASIO_5" FriendlyName="asio\923ebbe8111e73d5b8ecc2db10f8ea2629a3264c3a535d01c3c118a3b4c91782 Hash Sha1" Hash="E471BA6D1327D1026EB2C6A905E2BAD3952DABBD" />
<Deny ID="ID_DENY_ASIO_6" FriendlyName="asio\923ebbe8111e73d5b8ecc2db10f8ea2629a3264c3a535d01c3c118a3b4c91782 Hash Sha256" Hash="ED302EA33FEB557B879F64C4B7835947A9CA31054573E1487F5BBC38449753FF" />
<Deny ID="ID_DENY_ASIO3_1" FriendlyName="asio3\03a1e1037ea162020e75e37be771f620c4569e9621175f672583705f3ab569f7 Hash Sha1" Hash="2608305C0A9463ED5E5D912D34C43F241385E70D"/>
<Deny ID="ID_DENY_ASIO3_2" FriendlyName="asio3\03a1e1037ea162020e75e37be771f620c4569e9621175f672583705f3ab569f7 Hash Sha256" Hash="24E18FE4F1463AD908EBDD42772580AACB6986B7539F6646B7046FEF16DD7B9F"/>
<Deny ID="ID_DENY_ASIO3_3" FriendlyName="asio3\1ed43e18f78413774c83660106154be8bfb5f2f9809d9b369a4211365a1685c1 Hash Sha1" Hash="E6E90EE0E3369A2A707229A3B4701D395DED8069"/>
<Deny ID="ID_DENY_ASIO3_4" FriendlyName="asio3\1ed43e18f78413774c83660106154be8bfb5f2f9809d9b369a4211365a1685c1 Hash Sha256" Hash="8E48E8439C99FBF2C90869AE32F95E4FB02D7DEC8AE24D76B2FBFFCA18E1DF91"/>
<Deny ID="ID_DENY_ASIO3_5" FriendlyName="asio3\218de0c801b70d8bebf0233f796de07842b84b899c49f7a7be1c0423a158b786 Hash Sha1" Hash="B18B97D10F3C0547606AD699C6BD4929B328471C"/>
<Deny ID="ID_DENY_ASIO3_6" FriendlyName="asio3\218de0c801b70d8bebf0233f796de07842b84b899c49f7a7be1c0423a158b786 Hash Sha256" Hash="953EE8E1D30689F71C5B849FD2C201154FA6374A927977E600F1116AF984D87F"/>
<Deny ID="ID_DENY_ASIO3_7" FriendlyName="asio3\383df3b803ea69e16de314c82c2099283e746a6865cc4488ac927510ab5ada9c Hash Sha1" Hash="8F518B3501FAF58D42875B5A00EB1A62FA6BA0E9"/>
<Deny ID="ID_DENY_ASIO3_8" FriendlyName="asio3\383df3b803ea69e16de314c82c2099283e746a6865cc4488ac927510ab5ada9c Hash Sha256" Hash="AD0370586555FFC34B633AEA8B5E4F42E85A4FF6051982362FF371E3972B23EF"/>
<Deny ID="ID_DENY_ASIO3_9" FriendlyName="asio3\4d71d5e711ced1d8b215aeee8238b12908000e3d5c0d7c30927219fdb4098ab1 Hash Sha1" Hash="1438E55795528185A974454257C342D510DBC5BA"/>
<Deny ID="ID_DENY_ASIO3_10" FriendlyName="asio3\4d71d5e711ced1d8b215aeee8238b12908000e3d5c0d7c30927219fdb4098ab1 Hash Sha256" Hash="5A68DB1B698F5084081D76C9E5DBC5BA6B7F3E51D8F69F8E323FEFC437D64BA4"/>
<Deny ID="ID_DENY_ASIO3_11" FriendlyName="asio3\69dc4782060178762305b17c353efc1508a2a6edd9baf124286f380f51f5daed Hash Sha1" Hash="5ACB42939E09D6B34911BE49CFCD09D6916E5650"/>
<Deny ID="ID_DENY_ASIO3_12" FriendlyName="asio3\69dc4782060178762305b17c353efc1508a2a6edd9baf124286f380f51f5daed Hash Sha256" Hash="24AF16A81CC820F3C44EFC1733754205FAFFD637899B706F423500DED5F2BFC7"/>
<Deny ID="ID_DENY_ASIO3_13" FriendlyName="asio3\82ada50f0001fdc2b5eae4e6343582d443343400442669f73bb660bb24db1e12 Hash Sha1" Hash="5273941AAC7670DA1855B5E51378C99113FD1391"/>
<Deny ID="ID_DENY_ASIO3_14" FriendlyName="asio3\82ada50f0001fdc2b5eae4e6343582d443343400442669f73bb660bb24db1e12 Hash Sha256" Hash="023DE4F3F57D627F1CF49BF4499263E394979FD4BB0F500E6B236A9AACEF86AF"/>
<Deny ID="ID_DENY_ASIO3_15" FriendlyName="asio3\cc442919294d81400674bb9e1b68ce8f9e5aafed7f45d548862ce167d487d59f Hash Sha1" Hash="667E808D66A9CAF9D4D57688A2F5EED85EA1DC3B"/>
<Deny ID="ID_DENY_ASIO3_16" FriendlyName="asio3\cc442919294d81400674bb9e1b68ce8f9e5aafed7f45d548862ce167d487d59f Hash Sha256" Hash="0CAB01269E7F3AF351ADD0AC19CA9CC781DA658CBF078499CCC3E699F8EAC5DD"/>
<Deny ID="ID_DENY_ASIO3_17" FriendlyName="asio3\cc58e64e2a9b77eebf466229df4c3c1f5305d6c69e50c6dd140661490ce70f1f Hash Sha1" Hash="AC07C5670916F6C3949A49036460AC08EC43A582"/>
<Deny ID="ID_DENY_ASIO3_18" FriendlyName="asio3\cc58e64e2a9b77eebf466229df4c3c1f5305d6c69e50c6dd140661490ce70f1f Hash Sha256" Hash="54231728C29F2D2003EC575729760369BB72BE7B656B52B4F02EC198F4EE4DFD"/>
<Deny ID="ID_DENY_ASIO3_19" FriendlyName="asio3\fa875178ae2d7604d027510b0d0a7e2d9d675e10a4c9dda2d927ee891e0bcb91 Hash Sha1" Hash="B6F1E92A8452C2AEC22AAA7657E92D2AA48B3055"/>
<Deny ID="ID_DENY_ASIO3_20" FriendlyName="asio3\fa875178ae2d7604d027510b0d0a7e2d9d675e10a4c9dda2d927ee891e0bcb91 Hash Sha256" Hash="26B8E689A13D3434951559CFF24FCFE55EDEB7B78C7CC16DB1A273C90AA694C1"/>
<Deny ID="ID_DENY_ASUPIO64_SHA1" FriendlyName="AsUpIO64.sys Hash Sha1" Hash="2A95F882DD9BAFCC57F144A2708A7EC67DD7844C" />
<Deny ID="ID_DENY_ASUPIO64_SHA256" FriendlyName="AsUpIO64.sys Hash Sha256" Hash="7F75D91844B0C162EEB24D14BCF63B7F230E111DAA7B0A26EAA489EEB22D9057" />
<Deny ID="ID_DENY_ASUPIO64_SHA1_PAGE" FriendlyName="AsUpIO64.sys Hash Page Sha1" Hash="316E7872A227F0EAD483D244805E9FF4D3569F6F" />
@ -552,6 +572,12 @@ The following recommended blocklist xml policy file can also be downloaded from
<Deny ID="ID_DENY_BS_RCIO_21" FriendlyName="BS_RCIO\e9e711056fada8681f3eb5578a0d449b68568bc812e29dfcc0b92b9a9e481202 Hash Sha256" Hash="30591EA53FBA8BAD22A017CF5A268211790706B7863F007CE20A77F2E3459170" />
<Deny ID="ID_DENY_BS_RCIO_22" FriendlyName="BS_RCIO\e9e711056fada8681f3eb5578a0d449b68568bc812e29dfcc0b92b9a9e481202 Hash Page Sha1" Hash="AF5B84A2456E2621F920D61130DDAAD32CD4729F" />
<Deny ID="ID_DENY_BS_RCIO_23" FriendlyName="BS_RCIO\e9e711056fada8681f3eb5578a0d449b68568bc812e29dfcc0b92b9a9e481202 Hash Page Sha256" Hash="6F698A9123CC763F0F035CF50177BF5690B4644802746C8C2F06F59CFC0D9F81" />
<Deny ID="ID_DENY_DBUTIL_1" FriendlyName="DBUtil.sys\71fe5af0f1564dc187eea8d59c0fbc897712afa07d18316d2080330ba17cf009 Hash Sha1" Hash="D46AE9BCC746CA408FBB55FB0D61B638720A8F25"/>
<Deny ID="ID_DENY_DBUTIL_2" FriendlyName="DBUtil.sys\71fe5af0f1564dc187eea8d59c0fbc897712afa07d18316d2080330ba17cf009 Hash Sha256" Hash="7BACB353363CC29F7F3815A9D01E85CD86202D92378D1AB1B11DF1AB2F42F40A"/>
<Deny ID="ID_DENY_DBUTIL_3" FriendlyName="DBUtil.sys 2.3 x86\87e38e7aeaaaa96efe1a74f59fca8371de93544b7af22862eb0e574cec49c7c3 Hash Sha1" Hash="485C0B9710A196C7177B99EE95E5DDB35B26DDD1"/>
<Deny ID="ID_DENY_DBUTIL_4" FriendlyName="DBUtil.sys 2.3 x86\87e38e7aeaaaa96efe1a74f59fca8371de93544b7af22862eb0e574cec49c7c3 Hash Sha256" Hash="96EE751F7C38731E97773E07E0F13F4DD361AF9AAA1D30B41652C2E6EFC3FB3E"/>
<Deny ID="ID_DENY_DBUTIL_5" FriendlyName="DBUtil.sys\8de80eb3a3649423c71d0d16e1c3ac0fbe279c19a3b6659be18d690abe6fedd4 Hash Sha1" Hash="9218A22C1901A4883339DA7A125E5C74A910A8E8"/>
<Deny ID="ID_DENY_DBUTIL_6" FriendlyName="DBUtil.sys\8de80eb3a3649423c71d0d16e1c3ac0fbe279c19a3b6659be18d690abe6fedd4 Hash Sha256" Hash="92A2687C06B41CCB7F5D94DA2DA109E4C97CBA334F38AB421F41CD42BF308F7E"/>
<Deny ID="ID_DENY_DELLBIOS_1" FriendlyName="DellBIOS.sys\163912dfa4ad141e689e1625e994ab7c1f335410ebff0ade86bda3b7cdf6e065 Hash Sha1" Hash="A5F8E8044E4ADD00FEF7F43725C8E6E121BA0E6A"/>
<Deny ID="ID_DENY_DELLBIOS_2" FriendlyName="DellBIOS.sys\163912dfa4ad141e689e1625e994ab7c1f335410ebff0ade86bda3b7cdf6e065 Hash Sha256" Hash="E2B6350E17E9B24B7140EED743B4AE0B01453BBB8CB73B091B51E2306017D80F"/>
<Deny ID="ID_DENY_DELLBIOS_3" FriendlyName="DellBIOS.sys\163912dfa4ad141e689e1625e994ab7c1f335410ebff0ade86bda3b7cdf6e065 Hash Page Sha1" Hash="BC93DBE8834352583E15F5D4A41D166EB2680660"/>
@ -1015,10 +1041,10 @@ The following recommended blocklist xml policy file can also be downloaded from
<Deny ID="ID_DENY_MSIO_2" FriendlyName="MsIo.sys Hash Sha256" Hash="0D0962DB9DC6879067270134801AD425C1F3E85B0DC39877C02AAA9C54ACA14E" />
<Deny ID="ID_DENY_MSIO_3" FriendlyName="MsIo.sys Hash Page Sha1" Hash="D4E21C205DE75CDE70CD73C52C646E1E5D333A35" />
<Deny ID="ID_DENY_MSIO_4" FriendlyName="MsIo.sys Hash Page Sha256" Hash="C1D2036235A489FDD8B3970C9EF01567443A87D17B0AD5C2A033D4C471D0ECDE" />
<Deny ID="ID_DENY_MSIO_5" FriendlyName="MSIo\525d9b51a80ca0cd4c5889a96f857e73f3a80da1ffbae59851e0f51bdfb0b6cd Hash Sha1" Hash="7E732ACB7CFAD9BA043A9350CDEFF25D742BECB8" />
<Deny ID="ID_DENY_MSIO_6" FriendlyName="MSIo\525d9b51a80ca0cd4c5889a96f857e73f3a80da1ffbae59851e0f51bdfb0b6cd Hash Sha256" Hash="7018D515A6C781EA6097CA71D0F0603AD0D689F7EC99DB27FCACD492A9E86027" />
<Deny ID="ID_DENY_MSIO_7" FriendlyName="MSIo\525d9b51a80ca0cd4c5889a96f857e73f3a80da1ffbae59851e0f51bdfb0b6cd Hash Page Sha1" Hash="CDE1A50E1DF7870F8E4AFD8631E45A847C714C0A" />
<Deny ID="ID_DENY_MSIO_8" FriendlyName="MSIo\525d9b51a80ca0cd4c5889a96f857e73f3a80da1ffbae59851e0f51bdfb0b6cd Hash Page Sha256" Hash="05736AB8B48DF84D81CB2CC0FBDC9D3DA34C22DB67A3E71C6F4B6B3923740DD5" />
<Deny ID="ID_DENY_MSIO_5" FriendlyName="MsIo.sys\525d9b51a80ca0cd4c5889a96f857e73f3a80da1ffbae59851e0f51bdfb0b6cd Hash Sha1" Hash="7E732ACB7CFAD9BA043A9350CDEFF25D742BECB8" />
<Deny ID="ID_DENY_MSIO_6" FriendlyName="MsIo.sys\525d9b51a80ca0cd4c5889a96f857e73f3a80da1ffbae59851e0f51bdfb0b6cd Hash Sha256" Hash="7018D515A6C781EA6097CA71D0F0603AD0D689F7EC99DB27FCACD492A9E86027" />
<Deny ID="ID_DENY_MSIO_7" FriendlyName="MsIo.sys\525d9b51a80ca0cd4c5889a96f857e73f3a80da1ffbae59851e0f51bdfb0b6cd Hash Page Sha1" Hash="CDE1A50E1DF7870F8E4AFD8631E45A847C714C0A" />
<Deny ID="ID_DENY_MSIO_8" FriendlyName="MsIo.sys\525d9b51a80ca0cd4c5889a96f857e73f3a80da1ffbae59851e0f51bdfb0b6cd Hash Page Sha256" Hash="05736AB8B48DF84D81CB2CC0FBDC9D3DA34C22DB67A3E71C6F4B6B3923740DD5" />
<Deny ID="ID_DENY_MSIO_9" FriendlyName="MsIo.sys Hash Sha1" Hash="07660D1867E20BE0212A96CBA6B5FE6BE7776EAF" />
<Deny ID="ID_DENY_MSIO_10" FriendlyName="MsIo.sys Hash Sha256" Hash="BE0AF245444321E51F4DD8A90A19A0ABE05A060CBAD93701E23A02DF307957AE" />
<Deny ID="ID_DENY_MSIO_11" FriendlyName="MsIo.sys Hash Sha1" Hash="B2CD3A63D04EAE427BEDE6C6FE8FACBA91ECECBF" />
@ -1238,6 +1264,8 @@ The following recommended blocklist xml policy file can also be downloaded from
<Deny ID="ID_DENY_PHYMEM_14" FriendlyName="Shenzhen Moyea Phymem.sys\d64478376497107c15d948c2d3c86c48bc45833001c6b5c51de05862de57bb02 Hash Sha256" Hash="0E8BF78808E3A25C4E45FEB4B6A2EF98DB1E485A623DCF32DBA3D31CE19E73A6"/>
<Deny ID="ID_DENY_PHYMEM_15" FriendlyName="Shenzhen Moyea Phymem.sys\d64478376497107c15d948c2d3c86c48bc45833001c6b5c51de05862de57bb02 Hash Page Sha1" Hash="BD2DBD536F80AE318ABD51AF0892ED1AABAF96CB"/>
<Deny ID="ID_DENY_PHYMEM_16" FriendlyName="Shenzhen Moyea Phymem.sys\d64478376497107c15d948c2d3c86c48bc45833001c6b5c51de05862de57bb02 Hash Page Sha256" Hash="0414AEF58A86751CE8E53C80F65A8337B27CAE720E1FCFB50E1D8736CDF7530B"/>
<Deny ID="ID_DENY_PPLKILLER_1" FriendlyName="Niche Technologies pplkiller.sys\0d176493a5be4c94744836da1c365707e49f40c237c29c3481ae5677f5fdbba1 Hash Sha1" Hash="443ECCAC950E16E8BDA33A15CE87F85FC9894193"/>
<Deny ID="ID_DENY_PPLKILLER_2" FriendlyName="Niche Technologies pplkiller.sys\0d176493a5be4c94744836da1c365707e49f40c237c29c3481ae5677f5fdbba1 Hash Sha256" Hash="215076B5ED8EC2B35A32DEBF78D51CDCB6BF1D58C2E1243CDB8A96572CFA2F6C"/>
<Deny ID="ID_DENY_QMBSEC_0" FriendlyName="qmbsec.sys\0c801d381292e0476fb435fcc450b7a8970054cc47230c3123f3b6930d8ad799 Hash Sha1" Hash="129ABA97A7EB768AE0ED28D0C9A496F3C60DB314" />
<Deny ID="ID_DENY_QMBSEC_1" FriendlyName="qmbsec.sys\0c801d381292e0476fb435fcc450b7a8970054cc47230c3123f3b6930d8ad799 Hash Sha256" Hash="AF55DE92D14CF69D19B2FCB6DB4FBE272C2E04E5F62F7519BD368C173A05CE1F" />
<Deny ID="ID_DENY_QMBSEC_2" FriendlyName="qmbsec.sys\0c801d381292e0476fb435fcc450b7a8970054cc47230c3123f3b6930d8ad799 Hash Page Sha1" Hash="416895E001A9C3721999048941CD9B79BB9BF9BB" />
@ -1579,6 +1607,70 @@ The following recommended blocklist xml policy file can also be downloaded from
<Deny ID="ID_DENY_TDEIO_6" FriendlyName="Tdeio.sys\aa282c3b989a0eca78023347b7b1e1feef7e42edf9fd2bef5d55c66000c99911 Hash Sha256" Hash="EE06212E22AE7E892F09AE75CB39587237F5A115BF3CE4AE7493A8E82C180CAE"/>
<Deny ID="ID_DENY_TDEIO_7" FriendlyName="Tdeio.sys\aa282c3b989a0eca78023347b7b1e1feef7e42edf9fd2bef5d55c66000c99911 Hash Page Sha1" Hash="6F4018933D98EFEF97CC2EA9EA55018B9497592D"/>
<Deny ID="ID_DENY_TDEIO_8" FriendlyName="Tdeio.sys\aa282c3b989a0eca78023347b7b1e1feef7e42edf9fd2bef5d55c66000c99911 Hash Page Sha256" Hash="5379AD6B8A4B6669DEFD907B9D1D2030F31D9F00559F32935629765A75F6B601"/>
<Deny ID="ID_DENY_TDKLIB_1" FriendlyName="tdklib.sys\03920ed3f904838b65c2065a338f08ce062c40247539345ea8f4c158efe66634 Hash Sha1" Hash="5118D2764E80218C7FE07A47644EAB0D3F148A08"/>
<Deny ID="ID_DENY_TDKLIB_2" FriendlyName="tdklib.sys\03920ed3f904838b65c2065a338f08ce062c40247539345ea8f4c158efe66634 Hash Sha256" Hash="9B133D1ECF6D09C5F4957E8BCF7CDBE025C05DD46C6A505AF2F9B35C5E87E9E1"/>
<Deny ID="ID_DENY_TDKLIB_3" FriendlyName="tdklib.sys\2695390a8a7448390fe383beb1eee06d582202683f0273d6e72ef39a8cf709e1 Hash Sha1" Hash="4A6AFD367EAEA9DADCF0EB27D8C074D56D5CDD26"/>
<Deny ID="ID_DENY_TDKLIB_4" FriendlyName="tdklib.sys\2695390a8a7448390fe383beb1eee06d582202683f0273d6e72ef39a8cf709e1 Hash Sha256" Hash="BCF811040C7552A2C93409A6CD2D63F8ABBAE121ACCA012E0B7F4FDC0B6A6B8B"/>
<Deny ID="ID_DENY_TDKLIB_5" FriendlyName="tdklib.sys\44a0537e95ebd2d6851f64fab72a41b2f95b5d93729b8978c20350f038ddb8f7 Hash Sha1" Hash="AB9695B3ECF873D4D3CB63ED9FC67410DF037B48"/>
<Deny ID="ID_DENY_TDKLIB_6" FriendlyName="tdklib.sys\44a0537e95ebd2d6851f64fab72a41b2f95b5d93729b8978c20350f038ddb8f7 Hash Sha256" Hash="5A84DCEF471A265C712CC488AAC278CBBFB29F9188DB9A9335C2E870AFB7C123"/>
<Deny ID="ID_DENY_TDKLIB_7" FriendlyName="tdklib.sys\45a74b2e7ab35dc783375a4603efd961f6dfefaf3c134d453d6b76af94607e74 Hash Sha1" Hash="503E66D1B93BC25A615F6C7BC882DC7A4EDFF9B0"/>
<Deny ID="ID_DENY_TDKLIB_8" FriendlyName="tdklib.sys\45a74b2e7ab35dc783375a4603efd961f6dfefaf3c134d453d6b76af94607e74 Hash Sha256" Hash="D5D3E6F48713A054C86313D58F7AD2F00A72AB3C21D4F77B36EB95D61C8B1432"/>
<Deny ID="ID_DENY_TDKLIB_9" FriendlyName="tdklib.sys\4c807bacfcf5c30686e26812ec8d5581a824b82fee7434260c27c33eee2dfbe2 Hash Sha1" Hash="6BD9A4CEB35BDF8CF449D85B9C1424DEC1482638"/>
<Deny ID="ID_DENY_TDKLIB_10" FriendlyName="tdklib.sys\4c807bacfcf5c30686e26812ec8d5581a824b82fee7434260c27c33eee2dfbe2 Hash Sha256" Hash="8866F6E762DD7DEA58C9E9486DA53D716F3AE61048A8A10F8033B60FB5028914"/>
<Deny ID="ID_DENY_TDKLIB_11" FriendlyName="tdklib.sys\506f56996fbcd34ff8a27e6948a2e2e21e6dbf42dab6e3a6438402000b969fd1 Hash Sha1" Hash="F682AEABAF6797E57D971EB3CCA5FD16F7B75AC0"/>
<Deny ID="ID_DENY_TDKLIB_12" FriendlyName="tdklib.sys\506f56996fbcd34ff8a27e6948a2e2e21e6dbf42dab6e3a6438402000b969fd1 Hash Sha256" Hash="5DC477CC45E4C1421296373ADEF9F5795FB9F5035F1400C72BB37678AD7F8954"/>
<Deny ID="ID_DENY_TDKLIB_13" FriendlyName="tdklib.sys\5fbfd7c4ea3db1197ad38d5a945acf6f2f42cb350380cf8ae276bc80b0dedb77 Hash Sha1" Hash="1767ADE8AC3E931082B02F04B5D2E004E6F9C10B"/>
<Deny ID="ID_DENY_TDKLIB_14" FriendlyName="tdklib.sys\5fbfd7c4ea3db1197ad38d5a945acf6f2f42cb350380cf8ae276bc80b0dedb77 Hash Sha256" Hash="CD57ABAF2F20EA5B3F56DB1193CB3772AA09BB2BE3C4FA8001E7CF72AE1F078C"/>
<Deny ID="ID_DENY_TDKLIB_15" FriendlyName="tdklib.sys\784be598d13257a77da904052260f475d115d45aad3be28e44af2b16b19a840b Hash Sha1" Hash="3FA52B5E77DF976680A052EBCA540E05A7235A9B"/>
<Deny ID="ID_DENY_TDKLIB_16" FriendlyName="tdklib.sys\784be598d13257a77da904052260f475d115d45aad3be28e44af2b16b19a840b Hash Sha256" Hash="CF370BF2EF3FB6FD5E9722BAD8AF5347B74CE7252D291E2958B365AAD1B0BB76"/>
<Deny ID="ID_DENY_TDKLIB_17" FriendlyName="tdklib.sys\a0dba310dc9e89b468523663545e0c3cc82f545d12ddaab234f8903e58ff359a Hash Sha1" Hash="2319BBD2839D7847D8E74F402A03689A464ABB93"/>
<Deny ID="ID_DENY_TDKLIB_18" FriendlyName="tdklib.sys\a0dba310dc9e89b468523663545e0c3cc82f545d12ddaab234f8903e58ff359a Hash Sha256" Hash="E6DC9D5DC37A0880F112496AE9961AD618B94B32078314C021BFF87BE5587368"/>
<Deny ID="ID_DENY_TDKLIB_19" FriendlyName="tdklib.sys\dd0bd7b8fae8e8835ba09118a02a06a51e111fccbe16916414844aab91cfeed4 Hash Sha1" Hash="D2660A9EC25CBDC57AEA05CF0DB52DC002387243"/>
<Deny ID="ID_DENY_TDKLIB_20" FriendlyName="tdklib.sys\dd0bd7b8fae8e8835ba09118a02a06a51e111fccbe16916414844aab91cfeed4 Hash Sha256" Hash="E3A74AC9D23EFAA857333A4D8A40ED0026F28575475DEEB6EB301FCC0DB34EFC"/>
<Deny ID="ID_DENY_TDKLIB_21" FriendlyName="tdklib.sys\e34afe0a8c5459d13e7a11f20d62c7762b2a55613aaf6dbeb887e014b5f19295 Hash Sha1" Hash="A191E684C3D55DB3A913953370662517E5C78557"/>
<Deny ID="ID_DENY_TDKLIB_22" FriendlyName="tdklib.sys\e34afe0a8c5459d13e7a11f20d62c7762b2a55613aaf6dbeb887e014b5f19295 Hash Sha256" Hash="E2DECC56788D257CE7F6B1915C90EA5A54FB5232F2BF9F311958DE495A4EB308"/>
<Deny ID="ID_DENY_TDKLIB_23" FriendlyName="TdkLib.sys\20d0759b3309603ea085ed31a636e42301df7ddcd358584e2ccd6cabf72af7c3 Hash Sha1" Hash="1A5D50A3AD402E1E8F84B488E11876A79603BD3C"/>
<Deny ID="ID_DENY_TDKLIB_24" FriendlyName="TdkLib.sys\20d0759b3309603ea085ed31a636e42301df7ddcd358584e2ccd6cabf72af7c3 Hash Sha256" Hash="34F26FBFB72329CBB7F25D2B40CB0F553E1A80373972BCDAD62C3C6284D5B2B1"/>
<Deny ID="ID_DENY_TDKLIB_25" FriendlyName="TdkLib.sys\31e2e5c3290989e8624820cf5af886fd778ee8187fed593f33a6178f65103f37 Hash Sha1" Hash="28FCBCE6C60BC9F0E815DD339F1C08FA4CC80DD7"/>
<Deny ID="ID_DENY_TDKLIB_26" FriendlyName="TdkLib.sys\31e2e5c3290989e8624820cf5af886fd778ee8187fed593f33a6178f65103f37 Hash Sha256" Hash="9FF4EF4BC143CB8DF2AE2F800D5124B117456B2E04D4C33DB766B7E8E21EA048"/>
<Deny ID="ID_DENY_TDKLIB_27" FriendlyName="TdkLib.sys\39f137083e6c0200543e1f8d3c074f857d141bdb8c8f09338d48520537b881aa Hash Sha1" Hash="8A156E7FED2B688235377E5FEBF83FE5EA028622"/>
<Deny ID="ID_DENY_TDKLIB_28" FriendlyName="TdkLib.sys\39f137083e6c0200543e1f8d3c074f857d141bdb8c8f09338d48520537b881aa Hash Sha256" Hash="5C3AC6F22B3F1614AD0C01C180421F7588460ACCBA5065562BF735D24BD3C674"/>
<Deny ID="ID_DENY_TDKLIB_29" FriendlyName="TdkLib.sys\5be106b92424b12865338b3f541b3c244dce9693fe15f763316f0c6d6fc073ee Hash Sha1" Hash="EF3256203E0F93EE9D8802A135641DECF9FBE2B0"/>
<Deny ID="ID_DENY_TDKLIB_30" FriendlyName="TdkLib.sys\5be106b92424b12865338b3f541b3c244dce9693fe15f763316f0c6d6fc073ee Hash Sha256" Hash="EB91E05733244A23F741A299E5E4A57836685A8F45366E690BC30B4BEFC02B14"/>
<Deny ID="ID_DENY_TDKLIB_31" FriendlyName="TdkLib.sys\797c1f883d90d25e7fd553624bb16bfd5db24c2658aa0c3c51c715d5833c10fd Hash Sha1" Hash="3FA52B5E77DF976680A052EBCA540E05A7235A9B"/>
<Deny ID="ID_DENY_TDKLIB_32" FriendlyName="TdkLib.sys\797c1f883d90d25e7fd553624bb16bfd5db24c2658aa0c3c51c715d5833c10fd Hash Sha256" Hash="CF370BF2EF3FB6FD5E9722BAD8AF5347B74CE7252D291E2958B365AAD1B0BB76"/>
<Deny ID="ID_DENY_TDKLIB_33" FriendlyName="TdkLib.sys\7b2ed5b6f6296cdd3e61a915707355bd5325ce7f5a6fab43b7e1e550277ecaed Hash Sha1" Hash="FA9779546048AB9703A9E2102530ADE127EC694F"/>
<Deny ID="ID_DENY_TDKLIB_34" FriendlyName="TdkLib.sys\7b2ed5b6f6296cdd3e61a915707355bd5325ce7f5a6fab43b7e1e550277ecaed Hash Sha256" Hash="CF3ED2ABC5E92D12282B4D8D95A2B631A317B33726E7E3283CC10243C2E4C4B4"/>
<Deny ID="ID_DENY_TDKLIB_35" FriendlyName="TdkLib.sys\aa0c52cebd64a0115c0e7faf4316a52208f738f66a54b4871bd4162eb83dc41a Hash Sha1" Hash="389F098C0AF203DDCC3C9A5905E79387C835A0FC"/>
<Deny ID="ID_DENY_TDKLIB_36" FriendlyName="TdkLib.sys\aa0c52cebd64a0115c0e7faf4316a52208f738f66a54b4871bd4162eb83dc41a Hash Sha256" Hash="4D7D06D2F6AF50FF5810C8D6A818CB59DA635A56C0FDAE5D0ED3D0AEE4BEDF3E"/>
<Deny ID="ID_DENY_TDKLIB_37" FriendlyName="TdkLib.sys\cbd4f66ae09797fcd1dc943261a526710acc8dd4b24e6f67ed4a1fce8b0ae31c Hash Sha1" Hash="36CE0DDB64A49AC05CFD7133861089D34F0BD433"/>
<Deny ID="ID_DENY_TDKLIB_38" FriendlyName="TdkLib.sys\cbd4f66ae09797fcd1dc943261a526710acc8dd4b24e6f67ed4a1fce8b0ae31c Hash Sha256" Hash="1C0A63E8A6A335F2498794F44CF5629453075F31DB314EAECBD964CF615DE3F7"/>
<Deny ID="ID_DENY_TDKLIB_39" FriendlyName="TdkLib.sys\20d0759b3309603ea085ed31a636e42301df7ddcd358584e2ccd6cabf72af7c3 Hash Sha1" Hash="1A5D50A3AD402E1E8F84B488E11876A79603BD3C"/>
<Deny ID="ID_DENY_TDKLIB_40" FriendlyName="TdkLib.sys\20d0759b3309603ea085ed31a636e42301df7ddcd358584e2ccd6cabf72af7c3 Hash Sha256" Hash="34F26FBFB72329CBB7F25D2B40CB0F553E1A80373972BCDAD62C3C6284D5B2B1"/>
<Deny ID="ID_DENY_TDKLIB_41" FriendlyName="TdkLib.sys\31e2e5c3290989e8624820cf5af886fd778ee8187fed593f33a6178f65103f37 Hash Sha1" Hash="28FCBCE6C60BC9F0E815DD339F1C08FA4CC80DD7"/>
<Deny ID="ID_DENY_TDKLIB_42" FriendlyName="TdkLib.sys\31e2e5c3290989e8624820cf5af886fd778ee8187fed593f33a6178f65103f37 Hash Sha256" Hash="9FF4EF4BC143CB8DF2AE2F800D5124B117456B2E04D4C33DB766B7E8E21EA048"/>
<Deny ID="ID_DENY_TDKLIB_43" FriendlyName="TdkLib.sys\39f137083e6c0200543e1f8d3c074f857d141bdb8c8f09338d48520537b881aa Hash Sha1" Hash="8A156E7FED2B688235377E5FEBF83FE5EA028622"/>
<Deny ID="ID_DENY_TDKLIB_44" FriendlyName="TdkLib.sys\39f137083e6c0200543e1f8d3c074f857d141bdb8c8f09338d48520537b881aa Hash Sha256" Hash="5C3AC6F22B3F1614AD0C01C180421F7588460ACCBA5065562BF735D24BD3C674"/>
<Deny ID="ID_DENY_TDKLIB_45" FriendlyName="TdkLib.sys\4c807bacfcf5c30686e26812ec8d5581a824b82fee7434260c27c33eee2dfbe2 Hash Sha1" Hash="6BD9A4CEB35BDF8CF449D85B9C1424DEC1482638"/>
<Deny ID="ID_DENY_TDKLIB_46" FriendlyName="TdkLib.sys\4c807bacfcf5c30686e26812ec8d5581a824b82fee7434260c27c33eee2dfbe2 Hash Sha256" Hash="8866F6E762DD7DEA58C9E9486DA53D716F3AE61048A8A10F8033B60FB5028914"/>
<Deny ID="ID_DENY_TDKLIB_47" FriendlyName="TdkLib.sys\506f56996fbcd34ff8a27e6948a2e2e21e6dbf42dab6e3a6438402000b969fd1 Hash Sha1" Hash="F682AEABAF6797E57D971EB3CCA5FD16F7B75AC0"/>
<Deny ID="ID_DENY_TDKLIB_48" FriendlyName="TdkLib.sys\506f56996fbcd34ff8a27e6948a2e2e21e6dbf42dab6e3a6438402000b969fd1 Hash Sha256" Hash="5DC477CC45E4C1421296373ADEF9F5795FB9F5035F1400C72BB37678AD7F8954"/>
<Deny ID="ID_DENY_TDKLIB_49" FriendlyName="TdkLib.sys\5be106b92424b12865338b3f541b3c244dce9693fe15f763316f0c6d6fc073ee Hash Sha1" Hash="EF3256203E0F93EE9D8802A135641DECF9FBE2B0"/>
<Deny ID="ID_DENY_TDKLIB_50" FriendlyName="TdkLib.sys\5be106b92424b12865338b3f541b3c244dce9693fe15f763316f0c6d6fc073ee Hash Sha256" Hash="EB91E05733244A23F741A299E5E4A57836685A8F45366E690BC30B4BEFC02B14"/>
<Deny ID="ID_DENY_TDKLIB_51" FriendlyName="TdkLib.sys\5fbfd7c4ea3db1197ad38d5a945acf6f2f42cb350380cf8ae276bc80b0dedb77 Hash Sha1" Hash="1767ADE8AC3E931082B02F04B5D2E004E6F9C10B"/>
<Deny ID="ID_DENY_TDKLIB_52" FriendlyName="TdkLib.sys\5fbfd7c4ea3db1197ad38d5a945acf6f2f42cb350380cf8ae276bc80b0dedb77 Hash Sha256" Hash="CD57ABAF2F20EA5B3F56DB1193CB3772AA09BB2BE3C4FA8001E7CF72AE1F078C"/>
<Deny ID="ID_DENY_TDKLIB_53" FriendlyName="TdkLib.sys\797c1f883d90d25e7fd553624bb16bfd5db24c2658aa0c3c51c715d5833c10fd Hash Sha1" Hash="3FA52B5E77DF976680A052EBCA540E05A7235A9B"/>
<Deny ID="ID_DENY_TDKLIB_54" FriendlyName="TdkLib.sys\797c1f883d90d25e7fd553624bb16bfd5db24c2658aa0c3c51c715d5833c10fd Hash Sha256" Hash="CF370BF2EF3FB6FD5E9722BAD8AF5347B74CE7252D291E2958B365AAD1B0BB76"/>
<Deny ID="ID_DENY_TDKLIB_55" FriendlyName="TdkLib.sys\7b2ed5b6f6296cdd3e61a915707355bd5325ce7f5a6fab43b7e1e550277ecaed Hash Sha1" Hash="FA9779546048AB9703A9E2102530ADE127EC694F"/>
<Deny ID="ID_DENY_TDKLIB_56" FriendlyName="TdkLib.sys\7b2ed5b6f6296cdd3e61a915707355bd5325ce7f5a6fab43b7e1e550277ecaed Hash Sha256" Hash="CF3ED2ABC5E92D12282B4D8D95A2B631A317B33726E7E3283CC10243C2E4C4B4"/>
<Deny ID="ID_DENY_TDKLIB_57" FriendlyName="TdkLib.sys\aa0c52cebd64a0115c0e7faf4316a52208f738f66a54b4871bd4162eb83dc41a Hash Sha1" Hash="389F098C0AF203DDCC3C9A5905E79387C835A0FC"/>
<Deny ID="ID_DENY_TDKLIB_58" FriendlyName="TdkLib.sys\aa0c52cebd64a0115c0e7faf4316a52208f738f66a54b4871bd4162eb83dc41a Hash Sha256" Hash="4D7D06D2F6AF50FF5810C8D6A818CB59DA635A56C0FDAE5D0ED3D0AEE4BEDF3E"/>
<Deny ID="ID_DENY_TDKLIB_59" FriendlyName="TdkLib.sys\cbd4f66ae09797fcd1dc943261a526710acc8dd4b24e6f67ed4a1fce8b0ae31c Hash Sha1" Hash="36CE0DDB64A49AC05CFD7133861089D34F0BD433"/>
<Deny ID="ID_DENY_TDKLIB_60" FriendlyName="TdkLib.sys\cbd4f66ae09797fcd1dc943261a526710acc8dd4b24e6f67ed4a1fce8b0ae31c Hash Sha256" Hash="1C0A63E8A6A335F2498794F44CF5629453075F31DB314EAECBD964CF615DE3F7"/>
<Deny ID="ID_DENY_TDKLIB_61" FriendlyName="TdkLib.sys\dd0bd7b8fae8e8835ba09118a02a06a51e111fccbe16916414844aab91cfeed4 Hash Sha1" Hash="D2660A9EC25CBDC57AEA05CF0DB52DC002387243"/>
<Deny ID="ID_DENY_TDKLIB_62" FriendlyName="TdkLib.sys\dd0bd7b8fae8e8835ba09118a02a06a51e111fccbe16916414844aab91cfeed4 Hash Sha256" Hash="E3A74AC9D23EFAA857333A4D8A40ED0026F28575475DEEB6EB301FCC0DB34EFC"/>
<Deny ID="ID_DENY_TDKLIB_63" FriendlyName="TdkLib.sys\e34afe0a8c5459d13e7a11f20d62c7762b2a55613aaf6dbeb887e014b5f19295 Hash Sha1" Hash="A191E684C3D55DB3A913953370662517E5C78557"/>
<Deny ID="ID_DENY_TDKLIB_64" FriendlyName="TdkLib.sys\e34afe0a8c5459d13e7a11f20d62c7762b2a55613aaf6dbeb887e014b5f19295 Hash Sha256" Hash="E2DECC56788D257CE7F6B1915C90EA5A54FB5232F2BF9F311958DE495A4EB308"/>
<Deny ID="ID_DENY_WFSHBR_1" FriendlyName="HyperTech wfshbr64\89698cad598a56f9e45efffd15d1841e494a2409cc12279150a03842cd6bb7f3 Hash Sha1" Hash="0122F7A57784F2AC460D175687450D8940CACE6E"/>
<Deny ID="ID_DENY_WFSHBR_2" FriendlyName="HyperTech wfshbr64\89698cad598a56f9e45efffd15d1841e494a2409cc12279150a03842cd6bb7f3 Hash Sha256" Hash="D16A59CD7C52D1D32BB43670CDCA739AADB19BA15996BAC62071845E1BFBDB95"/>
<Deny ID="ID_DENY_WFSHBR_3" FriendlyName="HyperTech wfshbr64\89698cad598a56f9e45efffd15d1841e494a2409cc12279150a03842cd6bb7f3 Hash Page Sha1" Hash="59621ADDE6C6353397F1D7E5C1F8A887AC9931E6"/>
@ -1716,6 +1808,7 @@ The following recommended blocklist xml policy file can also be downloaded from
<Deny ID="ID_DENY_PCHUNTER_1" FriendlyName="PCHunter Driver" FileName="PCHunter.sys" MinimumFileVersion="0.0.0.0" MaximumFileVersion="65535.65535.65535.65535" />
<Deny ID="ID_DENY_PCHUNTER_2" FriendlyName="PCHunter Driver" FileName="安全专用" MinimumFileVersion="0.0.0.0" MaximumFileVersion="65535.65535.65535.65535" />
<Deny ID="ID_DENY_PHYMEMX_64" FriendlyName="Phymemx64 Memory Mapping Driver" FileName="phymemx64.sys" MinimumFileVersion="0.0.0.0" MaximumFileVersion="65535.65535.65535.65535" />
<FileAttrib ID="ID_FILEATTRIB_ACEBASE" FriendlyName="Ace-Base.sys\0184b8314b3ddb11dd929b3ad9e4302f8246e99027077e42d7fc14b25d799428 FileAttribute" InternalName="ACE-BASE64" MinimumFileVersion="0.0.0.0" MaximumFileVersion="1.0.2312.65535" />
<FileAttrib ID="ID_FILEATTRIB_ALSYSIO" FriendlyName="ALSysIO\01af9b2e49907308312be623a125a4cd71da9e626a54dfa746336e5d69c0a70a FileAttribute" FileName="ALSysIO.sys" MinimumFileVersion="0.0.0.0" MaximumFileVersion="2.0.10.65535" />
<FileAttrib ID="ID_FILEATTRIB_AMD_RYZEN" FriendlyName="amdryzenmaster.sys" FileName="AMDRyzenMasterDriver.sys" MinimumFileVersion="0.0.0.0" MaximumFileVersion="1.5.0.0" />
<FileAttrib ID="ID_FILEATTRIB_AMDPP" FriendlyName="AMDPowerProfiler.sys FileAttribute" FileName="AMDPowerProfiler.sys" MinimumFileVersion="0.0.0.0" MaximumFileVersion="6.1.0.0" />
@ -1736,6 +1829,7 @@ The following recommended blocklist xml policy file can also be downloaded from
<FileAttrib ID="ID_FILEATTRIB_ASWARPOT" FriendlyName="Avast aswArpot FileAttribute" FileName="aswArPot.sys" MinimumFileVersion="0.0.0.0" MaximumFileVersion="21.4.65535.65535" />
<FileAttrib ID="ID_FILEATTRIB_ASWSP" FriendlyName="Avast aswSP.sys\1dccd1e13da17bd541a66b48d62e914df390818c15f5f599c636d42c05996ace FileAttribute" FileName="aswSP.sys" MinimumFileVersion="0.0.0.0" MaximumFileVersion="20.8.0.0"/>
<FileAttrib ID="ID_FILEATTRIB_ASWSNX" FriendlyName="Aswsnx FileAttribute" FileName="aswSnx.sys" MinimumFileVersion="0.0.0.0" MaximumFileVersion="17.1.65535.65535" />
<FileAttrib ID="ID_FILEATTRIB_ATIDSMXX" FriendlyName="atidsmxx.sys and atidsm.sys\ FileAttribute" FileName="atidsmxx.sys" MinimumFileVersion="0.0.0.0" MaximumFileVersion="65535.65535.65535.65535"/>
<FileAttrib ID="ID_FILEATTRIB_ATILLK" FriendlyName="atillk64 FileAttribute" FileName="atillk64.sys" MinimumFileVersion="0.0.0.0" MaximumFileVersion="65535.65535.65535.65535" />
<FileAttrib ID="ID_FILEATTRIB_ATLACCESS" FriendlyName="atlAccess\0b57569aaa0f4789d9642dd2189b0a82466b80ad32ff35f88127210ed105fe57 FileAttribute" FileName="atlAccess.sys" MinimumFileVersion="0.0.0.0" MaximumFileVersion="65535.65535.65535.65535"/>
<FileAttrib ID="ID_FILEATTRIB_ATOOLS" FriendlyName="Antiy Labs AToolsKrnl\24342de3b93a06b4e4534140b13cd0726e8e8f4665866a9dcbcceb5685b83cf3 FileAttribute" FileName="Atools2.sys" MinimumFileVersion="0.0.0.0" MaximumFileVersion="2.0.23.713"/>
@ -1781,6 +1875,7 @@ The following recommended blocklist xml policy file can also be downloaded from
<FileAttrib ID="ID_FILEATTRIB_IQVW64" FriendlyName="IQVW64.sys FileAttribute" FileName="iQVW64.SYS" MinimumFileVersion="0.0.0.0" MaximumFileVersion="1.4.0.21" />
<FileAttrib ID="ID_FILEATTRIB_ITLSFFN" FriendlyName="ITM s4killer ItlsFFN\01714295a16acc253e50be2c068974ac621b9635a9c328b4dc578cecb03b06f9 FileAttribute" FileName="ItlsFFN.sys" MinimumFileVersion="0.0.0.0" MaximumFileVersion="65535.65535.65535.65535"/>
<FileAttrib ID="ID_FILEATTRIB_KEVP64" FriendlyName="kevp64.sys FileAttribute" FileName="kEvP64.sys" MinimumFileVersion="0.0.0.0" MaximumFileVersion="65535.65535.65535.65535" />
<FileAttrib ID="ID_FILEATTRIB_KSAPI" FriendlyName="KingSoft ksapi.sys FileAttribute" FileName="ksapi.sys" MinimumFileVersion="0.0.0.0" MaximumFileVersion="2020.65535.65535.65535" />
<FileAttrib ID="ID_FILEATTRIB_LDIAGO_1" FriendlyName="Lenovo ldiagio.sys\68ca1b5151181a98cd6da55d6dfd6ef0c94f0cf9379be37a8f86dd996d677946 FileAttribute" FileName="LDiagIO_legacy.sys" MinimumFileVersion="0.0.0.0" MaximumFileVersion="65535.65535.65535.65535"/>
<FileAttrib ID="ID_FILEATTRIB_LDIAGO_2" FriendlyName="Lenovo ldiagio.sys\ef55a5a3be73d5bfc5aa2a2b3f0cc574b824d96a129a67931a1667e770d5d938 FileAttribute" FileName="LDiagIO_uefi.sys" MinimumFileVersion="0.0.0.0" MaximumFileVersion="65535.65535.65535.65535"/>
<FileAttrib ID="ID_FILEATTRIB_LDIAGO_3" FriendlyName="Lenovo ldiagio.sys\05f7419335418b1eb5c983860a8a68e73147508b31e7cb1341a9dbeeb81f96b4 FileAttribute" FileName="LDiagIO.sys" MinimumFileVersion="0.0.0.0" MaximumFileVersion="65535.65535.65535.65535"/>
@ -1852,6 +1947,7 @@ The following recommended blocklist xml policy file can also be downloaded from
<FileAttrib ID="ID_FILEATTRIB_WINRING0" FriendlyName="WinRing0.sys" FileName="WinRing0.sys" MinimumFileVersion="0.0.0.0" MaximumFileVersion="2.0.0.0" />
<FileAttrib ID="ID_FILEATTRIB_WIRWADRV" FriendlyName="Winstron wirwadrv\d8fc8e3a1348393c5d7c3a84bcbae383d85a4721a751ad7afac5428e5e579b4e FileAttribute" FileName="WiRwaDrv.sys" MinimumFileVersion="0.0.0.0" MaximumFileVersion="65535.65535.65535.65535"/>
<FileAttrib ID="ID_FILEATTRIB_WISEUNLO" FriendlyName="WiseUnlo FileAttribute" FileName="WiseUnlo.sys" MinimumFileVersion="0.0.0.0" MaximumFileVersion="65535.65535.65535.65535" />
<FileAttrib ID="ID_FILEATTRIB_WNBIOS" FriendlyName="wnbios.sys\530d9223ec7e4123532a403abef96dfd1af5291eb49497392ff5d14d18fccfbb FileAttribute" FileName="wnbios.sys" MinimumFileVersion="0.0.0.0" MaximumFileVersion="1.2.0.0" />
<FileAttrib ID="ID_FILEATTRIB_ZAM_1" FriendlyName="Zemana ZAM\a3908b3fa59c0fc7600ff8887a87861a4f8566ca0a3bdcf2371bb9f36745db91 FileAttribute" FileName="ZAM.exe" MinimumFileVersion="0.0.0.0" MaximumFileVersion="65535.65535.65535.65535"/>
<FileAttrib ID="ID_FILEATTRIB_ZAM_2" FriendlyName="Zemana Zam\036c1151a30a9c25afc961d7305c58cbf8f68e5e5c1e726565c9a8168c2f3cdb FileAttribute" ProductName="AntiLogger Free" MinimumFileVersion="0.0.0.0" MaximumFileVersion="65535.65535.65535.65535"/>
<FileAttrib ID="ID_FILEATTRIB_ZAM_3" FriendlyName="Zemana Zam\0aa79d4c5c3baca0aee095bdbdfddfe70fad495c791066c416bd732eaec2d965 FileAttribute" ProductName="ZAM" MinimumFileVersion="0.0.0.0" MaximumFileVersion="65535.65535.65535.65535"/>
@ -1879,6 +1975,7 @@ The following recommended blocklist xml policy file can also be downloaded from
<FileAttribRef RuleID="ID_FILEATTRIB_IOMEM" />
<FileAttribRef RuleID="ID_FILEATTRIB_IQVW64" />
<FileAttribRef RuleID="ID_FILEATTRIB_KEVP64" />
<FileAttribRef RuleID="ID_FILEATTRIB_KSAPI" />
<FileAttribRef RuleID="ID_FILEATTRIB_LHA" />
<FileAttribRef RuleID="ID_FILEATTRIB_MONITOR" />
<FileAttribRef RuleID="ID_FILEATTRIB_MTCBSV64" />
@ -1898,6 +1995,7 @@ The following recommended blocklist xml policy file can also be downloaded from
<FileAttribRef RuleID="ID_FILEATTRIB_SYSDETECTOR_5" />
<FileAttribRef RuleID="ID_FILEATTRIB_SYSDETECTOR_6" />
<FileAttribRef RuleID="ID_FILEATTRIB_VDBSV" />
<FileAttribRef RuleID="ID_FILEATTRIB_WNBIOS" />
</Signer>
<Signer ID="ID_SIGNER_VERISIGN_2010_2" Name="VeriSign Class 3 Code Signing 2010 CA">
<CertRoot Type="TBS" Value="4678C6E4A8787A8E6ED2BCE8792B122F6C08AFD8" />
@ -1925,6 +2023,7 @@ The following recommended blocklist xml policy file can also be downloaded from
</Signer>
<Signer ID="ID_SIGNER_DIGICERT_EV" Name="DigiCert EV Code Signing CA (SHA2)">
<CertRoot Type="TBS" Value="EEC58131DC11CD7F512501B15FDBC6074C603B68CA91F7162D5A042054EDB0CF" />
<FileAttribRef RuleID="ID_FILEATTRIB_ACEBASE" />
<FileAttribRef RuleID="ID_FILEATTRIB_ASHITIO" />
<FileAttribRef RuleID="ID_FILEATTRIB_CPUZ_DRIVER" />
<FileAttribRef RuleID="ID_FILEATTRIB_EIO64" />
@ -1944,6 +2043,7 @@ The following recommended blocklist xml policy file can also be downloaded from
<CertRoot Type="TBS" Value="4CDC38C800761463749C3CBD94A12F32E49877BF" />
<FileAttribRef RuleID="ID_FILEATTRIB_AODDRIVER_1" />
<FileAttribRef RuleID="ID_FILEATTRIB_AODDRIVER_2" />
<FileAttribRef RuleID="ID_FILEATTRIB_ATIDSMXX" />
<FileAttribRef RuleID="ID_FILEATTRIB_ATSZIO" />
<FileAttribRef RuleID="ID_FILEATTRIB_DRIVER7" />
<FileAttribRef RuleID="ID_FILEATTRIB_GDRV" />
@ -2016,6 +2116,7 @@ The following recommended blocklist xml policy file can also be downloaded from
<FileAttribRef RuleID="ID_FILEATTRIB_AMDPP" />
<FileAttribRef RuleID="ID_FILEATTRIB_ASWSNX" />
<FileAttribRef RuleID="ID_FILEATTRIB_ASWSP" />
<FileAttribRef RuleID="ID_FILEATTRIB_ATIDSMXX" />
<FileAttribRef RuleID="ID_FILEATTRIB_ETDSUPPORT" />
<FileAttribRef RuleID="ID_FILEATTRIB_FPCIE" />
<FileAttribRef RuleID="ID_FILEATTRIB_HPPORTIOX64" />
@ -2035,9 +2136,10 @@ The following recommended blocklist xml policy file can also be downloaded from
<Signer ID="ID_SIGNER_WINDOWS_3RD_PARTY_2014" Name="Microsoft Windows Third Party Component CA 2014">
<CertRoot Type="TBS" Value="D8BE9E4D9074088EF818BC6F6FB64955E90378B2754155126FEEBBBD969CF0AE" />
<CertPublisher Value="Microsoft Windows Hardware Compatibility Publisher" />
<FileAttribRef RuleID="ID_FILEATTRIB_ACEBASE" />
<FileAttribRef RuleID="ID_FILEATTRIB_ALSYSIO" />
<FileAttribRef RuleID="ID_FILEATTRIB_ASWSNX" />
<FileAttribRef RuleID="ID_FILEATTRIB_ASHITIO" />
<FileAttribRef RuleID="ID_FILEATTRIB_ATIDSMXX" />
<FileAttribRef RuleID="ID_FILEATTRIB_ATOOLS" />
<FileAttribRef RuleID="ID_FILEATTRIB_BS_HWMIO64" />
<FileAttribRef RuleID="ID_FILEATTRIB_BS_MEM" />
@ -2053,6 +2155,7 @@ The following recommended blocklist xml policy file can also be downloaded from
<FileAttribRef RuleID="ID_FILEATTRIB_HWINFO_2" />
<FileAttribRef RuleID="ID_FILEATTRIB_IOBITUNLOCKER" />
<FileAttribRef RuleID="ID_FILEATTRIB_ITLSFFN" />
<FileAttribRef RuleID="ID_FILEATTRIB_KSAPI" />
<FileAttribRef RuleID="ID_FILEATTRIB_LHA" />
<FileAttribRef RuleID="ID_FILEATTRIB_LIBNICM_DRIVER" />
<FileAttribRef RuleID="ID_FILEATTRIB_MSIO" />
@ -2071,6 +2174,7 @@ The following recommended blocklist xml policy file can also be downloaded from
<FileAttribRef RuleID="ID_FILEATTRIB_VIRAGT64" />
<FileAttribRef RuleID="ID_FILEATTRIB_VMDRV" />
<FileAttribRef RuleID="ID_FILEATTRIB_WISEUNLO" />
<FileAttribRef RuleID="ID_FILEATTRIB_WNBIOS" />
<FileAttribRef RuleID="ID_FILEATTRIB_ZAM_1" />
</Signer>
<Signer ID="ID_SIGNER_WINDOWS_3RD_PARTY_2010" Name="Microsoft Third Party Component Windows PCA 2010">
@ -2157,6 +2261,7 @@ The following recommended blocklist xml policy file can also be downloaded from
<FileAttribRef RuleID="ID_FILEATTRIB_AMD_RYZEN" />
<FileAttribRef RuleID="ID_FILEATTRIB_AMDPP" />
<FileAttribRef RuleID="ID_FILEATTRIB_ASWSP" />
<FileAttribRef RuleID="ID_FILEATTRIB_ATIDSMXX" />
<FileAttribRef RuleID="ID_FILEATTRIB_ATLACCESS" />
<FileAttribRef RuleID="ID_FILEATTRIB_ATOOLS" />
<FileAttribRef RuleID="ID_FILEATTRIB_GDRV" />
@ -2176,6 +2281,7 @@ The following recommended blocklist xml policy file can also be downloaded from
<CertRoot Type="TBS" Value="4843A82ED3B1F2BFBEE9671960E1940C942F688D" />
<CertPublisher Value="Advanced Micro Devices, Inc." />
<FileAttribRef RuleID="ID_FILEATTRIB_AMD_RYZEN" />
<FileAttribRef RuleID="ID_FILEATTRIB_ATIDSMXX" />
</Signer>
<Signer ID="ID_SIGNER_VERISIGN_TG_SOFT" Name="VeriSign Class 3 Code Signing 2010 CA">
<CertRoot Type="TBS" Value="4843A82ED3B1F2BFBEE9671960E1940C942F688D" />
@ -2345,6 +2451,7 @@ The following recommended blocklist xml policy file can also be downloaded from
<Signer ID="ID_SIGNER_ATILLK" Name="VeriSign Class 3 Code Signing 2004 CA">
<CertRoot Type="TBS" Value="C7FC1727F5B75A6421A1F95C73BBDB23580C48E5" />
<CertPublisher Value="ATI Technologies, Inc" />
<FileAttribRef RuleID="ID_FILEATTRIB_ATIDSMXX" />
<FileAttribRef RuleID="ID_FILEATTRIB_ATILLK" />
</Signer>
<Signer ID="ID_SIGNER_HW_A" Name="GlobalSign">
@ -2663,6 +2770,16 @@ The following recommended blocklist xml policy file can also be downloaded from
<CertPublisher Value="Adlice"/>
<FileAttribRef RuleID="ID_FILEATTRIB_TRUESIGHT"/>
</Signer>
<Signer ID="ID_SIGNER_TRUESIGHT_3" Name="DigiCert High Assurance Code Signing CA-1">
<CertRoot Type="TBS" Value="1D7E838ACCD498C2E5BA9373AF819EC097BB955C"/>
<CertPublisher Value="Adlice"/>
<FileAttribRef RuleID="ID_FILEATTRIB_TRUESIGHT"/>
</Signer>
<Signer ID="ID_SIGNER_TRUESIGHT_4" Name="DigiCert SHA2 High Assurance Code Signing CA">
<CertRoot Type="TBS" Value="0BF095B845B69928B5D7DFD1C42AE4F90FEB8DC97F7830598C93E848877021FB"/>
<CertPublisher Value="Adlice"/>
<FileAttribRef RuleID="ID_FILEATTRIB_TRUESIGHT"/>
</Signer>
<Signer ID="ID_SIGNER_HWDETECTNG" Name="GlobalSign Primary Object Publishing CA">
<CertRoot Type="TBS" Value="041750993D7C9E063F02DFE74699598640911AAB"/>
<CertPublisher Value="iNFERRE"/>
@ -2809,6 +2926,43 @@ The following recommended blocklist xml policy file can also be downloaded from
<CertRoot Type="TBS" Value="BD1765C56594221373893EF26D97F88C144FB0E5A0111215B45D7239C3444DF7"/>
<CertPublisher Value="INZENT Co., Ltd."/>
</Signer>
<Signer ID="ID_SIGNER_KSAPI_1" Name="DigiCert Assured ID Code Signing CA-1">
<CertRoot Type="TBS" Value="47F4B9898631773231B32844EC0D49990AC4EB1E"/>
<CertPublisher Value="Beijing Kingsoft Security software Co.,Ltd"/>
<FileAttribRef RuleID="ID_FILEATTRIB_KSAPI"/>
</Signer>
<Signer ID="ID_SIGNER_KSAPI_2" Name="GlobalSign Extended Validation CodeSigning CA - SHA256 - G3 Kingsoft">
<CertRoot Type="TBS" Value="15E7050789DF807F3E3174294A01B637A1239F603E42F4B5DB9398EFA9DA9996"/>
<CertPublisher Value="北京金山安全软件有限公司"/>
<FileAttribRef RuleID="ID_FILEATTRIB_KSAPI"/>
</Signer>
<Signer ID="ID_SIGNER_KSAPI_3" Name="GlobalSign GCC R45 EV CodeSigning CA 2020 - G3 Kingsoft">
<CertRoot Type="TBS" Value="D9C7DB0B704F07089440C56E69A0F31D730EDF77CFBF7514630E8B5390A270FE"/>
<CertPublisher Value="北京金山安全软件有限公司"/>
<FileAttribRef RuleID="ID_FILEATTRIB_KSAPI"/>
</Signer>
<Signer ID="ID_SIGNER_KSAPI_4" Name="GlobalSign CodeSigning CA - G3">
<CertRoot Type="TBS" Value="F478F0E790D5C8EC6056A3AB2567404A991D2837" />
<CertPublisher Value="珠海市君天电子科技有限公司" />
<FileAttribRef RuleID="ID_FILEATTRIB_KSAPI" />
</Signer>
<Signer ID="ID_SIGNER_ATIDSMXX" Name="DigiCert Assured ID Code Signing CA-1">
<CertRoot Type="TBS" Value="47F4B9898631773231B32844EC0D49990AC4EB1E"/>
<CertPublisher Value="Advanced Micro Devices, Inc."/>
<FileAttribRef RuleID="ID_FILEATTRIB_ATIDSMXX"/>
</Signer>
<Signer ID="ID_SIGNER_ACEBASE_1" Name="DigiCert Assured ID Code Signing CA-1">
<CertRoot Type="TBS" Value="47F4B9898631773231B32844EC0D49990AC4EB1E"/>
<FileAttribRef RuleID="ID_FILEATTRIB_ACEBASE"/>
</Signer>
<Signer ID="ID_SIGNER_ACEBASE_2" Name="DigiCert SHA2 Assured ID Code Signing CA">
<CertRoot Type="TBS" Value="E767799478F64A34B3F53FF3BB9057FE1768F4AB178041B0DCC0FF1E210CBA65"/>
<FileAttribRef RuleID="ID_FILEATTRIB_ACEBASE"/>
</Signer>
<Signer ID="ID_SIGNER_AMON" Name="Microsoft Windows Third Party Component CA 2014">
<CertRoot Type="TBS" Value="D8BE9E4D9074088EF818BC6F6FB64955E90378B2754155126FEEBBBD969CF0AE"/>
<CertOemID Value="AMON SOFTWARE LTD"/>
</Signer>
<Signer ID="ID_SIGNER_BAOJI" Name="VeriSign Class 3 Code Signing 2010 CA - Baoji zhihengtaiye co.,ltd">
<CertRoot Type="TBS" Value="ED37AD43BC52426943019F77F35ED1A6B063B5B7" />
</Signer>
@ -2916,12 +3070,40 @@ The following recommended blocklist xml policy file can also be downloaded from
<CertRoot Type="TBS" Value="D8BE9E4D9074088EF818BC6F6FB64955E90378B2754155126FEEBBBD969CF0AE" />
<CertOemID Value="ZEMANA A.Ş." />
</Signer>
<Signer ID="ID_SIGNER_FILSECLAB" Name="VeriSign Class 3 Code Signing 2010 CA">
<CertRoot Type="TBS" Value="4843A82ED3B1F2BFBEE9671960E1940C942F688D"/>
<CertPublisher Value="Filseclab Corporation"/>
</Signer>
<Signer ID="ID_SIGNER_NICHETECH" Name="Niche Technology, LLC (Thumbprint: 3F169455CB6E3AA41758018BF77C76BD5FAB90F5)">
<CertRoot Type="TBS" Value="825181BD24428CF03C069B973C01BDF9F6D0291FD7F51F452C6C90F5EE73571C"/>
</Signer>
<Signer ID="ID_SIGNER_CVM_SOFT_1" Name="Microsoft Windows Third Party Component CA 2014">
<CertRoot Type="TBS" Value="D8BE9E4D9074088EF818BC6F6FB64955E90378B2754155126FEEBBBD969CF0AE"/>
<CertOemID Value="CVM Software Solutions Ltd."/>
</Signer>
<Signer ID="ID_SIGNER_CVM_SOFT_2" Name="GlobalSign Extended Validation CodeSigning CA - SHA256 - G3">
<CertRoot Type="TBS" Value="15E7050789DF807F3E3174294A01B637A1239F603E42F4B5DB9398EFA9DA9996"/>
<CertPublisher Value="CVM Software Solutions Ltd."/>
</Signer>
<Signer ID="ID_SIGNER_CVM_SOFT_3" Name="GlobalSign Code Signing Root R45">
<CertRoot Type="TBS" Value="FEC727AF43D1569995CEA26E8EB97167165842A5B185304425A92C03B71254C5D51222837515F33E60CB8ED2E8C625BA"/>
<CertPublisher Value="CVM Software Solutions Ltd."/>
</Signer>
<Signer ID="ID_SIGNER_CVM_SOFT_4" Name="GlobalSign">
<CertRoot Type="TBS" Value="BD1765C56594221373893EF26D97F88C144FB0E5A0111215B45D7239C3444DF7"/>
<CertPublisher Value="CVM Software Solutions Ltd."/>
</Signer>
<Signer ID="ID_SIGNER_ARTIFICIAL_SOFT" Name="Artificial Software BV">
<CertRoot Type="TBS" Value="67B8386FFC9811CEAD5D88882EE2BD4DB6B516C1542ECB1FC9B8ADA932BFE8D9"/>
</Signer>
</Signers>
<!--Driver Signing Scenarios-->
<SigningScenarios>
<SigningScenario Value="131" ID="ID_SIGNINGSCENARIO_DENIED_VULN_MAL_SIGNERS" FriendlyName="Signers of known vulnerable or malicious drivers">
<ProductSigners>
<DeniedSigners>
<DeniedSigner SignerId="ID_SIGNER_ACEBASE_1" />
<DeniedSigner SignerId="ID_SIGNER_ACEBASE_2" />
<DeniedSigner SignerId="ID_SIGNER_AGNITUM_2004" />
<DeniedSigner SignerId="ID_SIGNER_AGNITUM_2009" />
<DeniedSigner SignerId="ID_SIGNER_AGNITUM_2010" />
@ -2929,10 +3111,13 @@ The following recommended blocklist xml policy file can also be downloaded from
<DeniedSigner SignerId="ID_SIGNER_ALSYSIO_1" />
<DeniedSigner SignerId="ID_SIGNER_ALSYSIO_2" />
<DeniedSigner SignerId="ID_SIGNER_AMDPP" />
<DeniedSigner SignerId="ID_SIGNER_AMON" />
<DeniedSigner SignerId="ID_SIGNER_APPID" />
<DeniedSigner SignerId="ID_SIGNER_ATIDSMXX" />
<DeniedSigner SignerId="ID_SIGNER_ATILLK" />
<DeniedSigner SignerId="ID_SIGNER_ARTIFICIAL_1" />
<DeniedSigner SignerId="ID_SIGNER_ARTIFICIAL_2" />
<DeniedSigner SignerId="ID_SIGNER_ARTIFICIAL_SOFT" />
<DeniedSigner SignerId="ID_SIGNER_ASROCK_RWDRV" />
<DeniedSigner SignerId="ID_SIGNER_ASWARPOT_1" />
<DeniedSigner SignerId="ID_SIGNER_ASWARPOT_2" />
@ -2956,17 +3141,23 @@ The following recommended blocklist xml policy file can also be downloaded from
<DeniedSigner SignerId="ID_SIGNER_COMPUTERZ_1" />
<DeniedSigner SignerId="ID_SIGNER_COMPUTERZ_2" />
<DeniedSigner SignerId="ID_SIGNER_COMODO_IQVW" />
<DeniedSigner SignerId="ID_SIGNER_CVM_SOFT_1" />
<DeniedSigner SignerId="ID_SIGNER_CVM_SOFT_2" />
<DeniedSigner SignerId="ID_SIGNER_CVM_SOFT_3" />
<DeniedSigner SignerId="ID_SIGNER_CVM_SOFT_4" />
<DeniedSigner SignerId="ID_SIGNER_CPUZ_1" />
<DeniedSigner SignerId="ID_SIGNER_CPUZ_2" />
<DeniedSigner SignerId="ID_SIGNER_DIGICERT_EV" />
<DeniedSigner SignerId="ID_SIGNER_ECSIODRV" />
<DeniedSigner SignerId="ID_SIGNER_ELBY" />
<DeniedSigner SignerId="ID_SIGNER_ECSIODRV" />
<DeniedSigner SignerId="ID_SIGNER_ENE" />
<DeniedSigner SignerId="ID_SIGNER_ETDSUPPORT" />
<DeniedSigner SignerId="ID_SIGNER_FAIRPLAY_1" />
<DeniedSigner SignerId="ID_SIGNER_FAIRPLAY_2" />
<DeniedSigner SignerId="ID_SIGNER_FAIRPLAY_3" />
<DeniedSigner SignerId="ID_SIGNER_FAIRPLAY_4" />
<DeniedSigner SignerId="ID_SIGNER_FILSECLAB" />
<DeniedSigner SignerId="ID_SIGNER_GEOTRUST_SRL_2009" />
<DeniedSigner SignerId="ID_SIGNER_GEOTRUST_SRL_2010" />
<DeniedSigner SignerId="ID_SIGNER_GETAC" />
@ -3011,6 +3202,10 @@ The following recommended blocklist xml policy file can also be downloaded from
<DeniedSigner SignerId="ID_SIGNER_JCOS_1" />
<DeniedSigner SignerId="ID_SIGNER_JCOS_2" />
<DeniedSigner SignerId="ID_SIGNER_JEROMIN_CODY_ERIC" />
<DeniedSigner SignerId="ID_SIGNER_KSAPI_1" />
<DeniedSigner SignerId="ID_SIGNER_KSAPI_2" />
<DeniedSigner SignerId="ID_SIGNER_KSAPI_3" />
<DeniedSigner SignerId="ID_SIGNER_KSAPI_4" />
<DeniedSigner SignerId="ID_SIGNER_LDIAGIO_1" />
<DeniedSigner SignerId="ID_SIGNER_LDIAGIO_2" />
<DeniedSigner SignerId="ID_SIGNER_LDIAGIO_3" />
@ -3034,6 +3229,7 @@ The following recommended blocklist xml policy file can also be downloaded from
<DeniedSigner SignerId="ID_SIGNER_MYDRIVERS_3" />
<DeniedSigner SignerId="ID_SIGNER_NANJING" />
<DeniedSigner SignerId="ID_SIGNER_NGIODRIVER" />
<DeniedSigner SignerId="ID_SIGNER_NICHETECH" />
<DeniedSigner SignerId="ID_SIGNER_NVFLASH" />
<DeniedSigner SignerId="ID_SIGNER_NVFLASH_2" />
<DeniedSigner SignerId="ID_SIGNER_NVFLASH_3" />
@ -3071,6 +3267,8 @@ The following recommended blocklist xml policy file can also be downloaded from
<DeniedSigner SignerId="ID_SIGNER_TRUST_ASIA" />
<DeniedSigner SignerId="ID_SIGNER_TRUESIGHT_1" />
<DeniedSigner SignerId="ID_SIGNER_TRUESIGHT_2" />
<DeniedSigner SignerId="ID_SIGNER_TRUESIGHT_3" />
<DeniedSigner SignerId="ID_SIGNER_TRUESIGHT_4" />
<DeniedSigner SignerId="ID_SIGNER_VBOX" />
<DeniedSigner SignerId="ID_SIGNER_VERISIGN_2004" />
<DeniedSigner SignerId="ID_SIGNER_VERISIGN_2004_BIOSTAR" />
@ -3382,6 +3580,26 @@ The following recommended blocklist xml policy file can also be downloaded from
<FileRuleRef RuleID="ID_DENY_ASIO_4"/>
<FileRuleRef RuleID="ID_DENY_ASIO_5"/>
<FileRuleRef RuleID="ID_DENY_ASIO_6"/>
<FileRuleRef RuleID="ID_DENY_ASIO3_1" />
<FileRuleRef RuleID="ID_DENY_ASIO3_2" />
<FileRuleRef RuleID="ID_DENY_ASIO3_3" />
<FileRuleRef RuleID="ID_DENY_ASIO3_4" />
<FileRuleRef RuleID="ID_DENY_ASIO3_5" />
<FileRuleRef RuleID="ID_DENY_ASIO3_6" />
<FileRuleRef RuleID="ID_DENY_ASIO3_7" />
<FileRuleRef RuleID="ID_DENY_ASIO3_8" />
<FileRuleRef RuleID="ID_DENY_ASIO3_9" />
<FileRuleRef RuleID="ID_DENY_ASIO3_10"/>
<FileRuleRef RuleID="ID_DENY_ASIO3_11"/>
<FileRuleRef RuleID="ID_DENY_ASIO3_12"/>
<FileRuleRef RuleID="ID_DENY_ASIO3_13"/>
<FileRuleRef RuleID="ID_DENY_ASIO3_14"/>
<FileRuleRef RuleID="ID_DENY_ASIO3_15"/>
<FileRuleRef RuleID="ID_DENY_ASIO3_16"/>
<FileRuleRef RuleID="ID_DENY_ASIO3_17"/>
<FileRuleRef RuleID="ID_DENY_ASIO3_18"/>
<FileRuleRef RuleID="ID_DENY_ASIO3_19"/>
<FileRuleRef RuleID="ID_DENY_ASIO3_20"/>
<FileRuleRef RuleID="ID_DENY_ASUPIO64_SHA1" />
<FileRuleRef RuleID="ID_DENY_ASUPIO64_SHA256" />
<FileRuleRef RuleID="ID_DENY_ASUPIO64_SHA1_PAGE" />
@ -3556,6 +3774,12 @@ The following recommended blocklist xml policy file can also be downloaded from
<FileRuleRef RuleID="ID_DENY_BS_RCIO_21" />
<FileRuleRef RuleID="ID_DENY_BS_RCIO_22" />
<FileRuleRef RuleID="ID_DENY_BS_RCIO_23" />
<FileRuleRef RuleID="ID_DENY_DBUTIL_1" />
<FileRuleRef RuleID="ID_DENY_DBUTIL_2" />
<FileRuleRef RuleID="ID_DENY_DBUTIL_3" />
<FileRuleRef RuleID="ID_DENY_DBUTIL_4" />
<FileRuleRef RuleID="ID_DENY_DBUTIL_5" />
<FileRuleRef RuleID="ID_DENY_DBUTIL_6" />
<FileRuleRef RuleID="ID_DENY_DELLBIOS_1" />
<FileRuleRef RuleID="ID_DENY_DELLBIOS_2" />
<FileRuleRef RuleID="ID_DENY_DELLBIOS_3" />
@ -4243,6 +4467,8 @@ The following recommended blocklist xml policy file can also be downloaded from
<FileRuleRef RuleID="ID_DENY_PHYMEMX64_SHA256" />
<FileRuleRef RuleID="ID_DENY_PHYMEMX64_SHA1_PAGE" />
<FileRuleRef RuleID="ID_DENY_PHYMEMX64_SHA256_PAGE" />
<FileRuleRef RuleID="ID_DENY_PPLKILLER_1" />
<FileRuleRef RuleID="ID_DENY_PPLKILLER_2" />
<FileRuleRef RuleID="ID_DENY_QMBSEC_0" />
<FileRuleRef RuleID="ID_DENY_QMBSEC_1" />
<FileRuleRef RuleID="ID_DENY_QMBSEC_2" />
@ -4588,6 +4814,70 @@ The following recommended blocklist xml policy file can also be downloaded from
<FileRuleRef RuleID="ID_DENY_TDEIO_6"/>
<FileRuleRef RuleID="ID_DENY_TDEIO_7"/>
<FileRuleRef RuleID="ID_DENY_TDEIO_8"/>
<FileRuleRef RuleID="ID_DENY_TDKLIB_1" />
<FileRuleRef RuleID="ID_DENY_TDKLIB_2" />
<FileRuleRef RuleID="ID_DENY_TDKLIB_3" />
<FileRuleRef RuleID="ID_DENY_TDKLIB_4" />
<FileRuleRef RuleID="ID_DENY_TDKLIB_5" />
<FileRuleRef RuleID="ID_DENY_TDKLIB_6" />
<FileRuleRef RuleID="ID_DENY_TDKLIB_7" />
<FileRuleRef RuleID="ID_DENY_TDKLIB_8" />
<FileRuleRef RuleID="ID_DENY_TDKLIB_9" />
<FileRuleRef RuleID="ID_DENY_TDKLIB_10"/>
<FileRuleRef RuleID="ID_DENY_TDKLIB_11"/>
<FileRuleRef RuleID="ID_DENY_TDKLIB_12"/>
<FileRuleRef RuleID="ID_DENY_TDKLIB_13"/>
<FileRuleRef RuleID="ID_DENY_TDKLIB_14"/>
<FileRuleRef RuleID="ID_DENY_TDKLIB_15"/>
<FileRuleRef RuleID="ID_DENY_TDKLIB_16"/>
<FileRuleRef RuleID="ID_DENY_TDKLIB_17"/>
<FileRuleRef RuleID="ID_DENY_TDKLIB_18"/>
<FileRuleRef RuleID="ID_DENY_TDKLIB_19"/>
<FileRuleRef RuleID="ID_DENY_TDKLIB_20"/>
<FileRuleRef RuleID="ID_DENY_TDKLIB_21"/>
<FileRuleRef RuleID="ID_DENY_TDKLIB_22"/>
<FileRuleRef RuleID="ID_DENY_TDKLIB_23"/>
<FileRuleRef RuleID="ID_DENY_TDKLIB_24"/>
<FileRuleRef RuleID="ID_DENY_TDKLIB_25"/>
<FileRuleRef RuleID="ID_DENY_TDKLIB_26"/>
<FileRuleRef RuleID="ID_DENY_TDKLIB_27"/>
<FileRuleRef RuleID="ID_DENY_TDKLIB_28"/>
<FileRuleRef RuleID="ID_DENY_TDKLIB_29"/>
<FileRuleRef RuleID="ID_DENY_TDKLIB_30"/>
<FileRuleRef RuleID="ID_DENY_TDKLIB_31"/>
<FileRuleRef RuleID="ID_DENY_TDKLIB_32"/>
<FileRuleRef RuleID="ID_DENY_TDKLIB_33"/>
<FileRuleRef RuleID="ID_DENY_TDKLIB_34"/>
<FileRuleRef RuleID="ID_DENY_TDKLIB_35"/>
<FileRuleRef RuleID="ID_DENY_TDKLIB_36"/>
<FileRuleRef RuleID="ID_DENY_TDKLIB_37"/>
<FileRuleRef RuleID="ID_DENY_TDKLIB_38"/>
<FileRuleRef RuleID="ID_DENY_TDKLIB_39"/>
<FileRuleRef RuleID="ID_DENY_TDKLIB_40"/>
<FileRuleRef RuleID="ID_DENY_TDKLIB_41"/>
<FileRuleRef RuleID="ID_DENY_TDKLIB_42"/>
<FileRuleRef RuleID="ID_DENY_TDKLIB_43"/>
<FileRuleRef RuleID="ID_DENY_TDKLIB_44"/>
<FileRuleRef RuleID="ID_DENY_TDKLIB_45"/>
<FileRuleRef RuleID="ID_DENY_TDKLIB_46"/>
<FileRuleRef RuleID="ID_DENY_TDKLIB_47"/>
<FileRuleRef RuleID="ID_DENY_TDKLIB_48"/>
<FileRuleRef RuleID="ID_DENY_TDKLIB_49"/>
<FileRuleRef RuleID="ID_DENY_TDKLIB_50"/>
<FileRuleRef RuleID="ID_DENY_TDKLIB_51"/>
<FileRuleRef RuleID="ID_DENY_TDKLIB_52"/>
<FileRuleRef RuleID="ID_DENY_TDKLIB_53"/>
<FileRuleRef RuleID="ID_DENY_TDKLIB_54"/>
<FileRuleRef RuleID="ID_DENY_TDKLIB_55"/>
<FileRuleRef RuleID="ID_DENY_TDKLIB_56"/>
<FileRuleRef RuleID="ID_DENY_TDKLIB_57"/>
<FileRuleRef RuleID="ID_DENY_TDKLIB_58"/>
<FileRuleRef RuleID="ID_DENY_TDKLIB_59"/>
<FileRuleRef RuleID="ID_DENY_TDKLIB_60"/>
<FileRuleRef RuleID="ID_DENY_TDKLIB_61"/>
<FileRuleRef RuleID="ID_DENY_TDKLIB_62"/>
<FileRuleRef RuleID="ID_DENY_TDKLIB_63"/>
<FileRuleRef RuleID="ID_DENY_TDKLIB_64"/>
<FileRuleRef RuleID="ID_DENY_WFSHBR_1" />
<FileRuleRef RuleID="ID_DENY_WFSHBR_2" />
<FileRuleRef RuleID="ID_DENY_WFSHBR_3" />
@ -4745,7 +5035,7 @@ The following recommended blocklist xml policy file can also be downloaded from
</Setting>
<Setting Provider="PolicyInfo" Key="Information" ValueName="Id">
<Value>
<String>10.0.27685.0</String>
<String>10.0.27770.0</String>
</Value>
</Setting>
</Settings>