<sh@8<>h@ L]h PoC:\Windowsl2t8t#(8 "6\6 -P275  $8!!6&X#l.7 ,8h ) <`77`*X4*&h)Xl )' &" 2`'& X& |5@$(3(|'!$x/\77 (2'D X90'%\(7D7h\ H5Pl:d  $!|!,p$X$%3$h-X7&%% T&+8 d" 35@t8|),$ ;36d , t: ;*::DX+<0*4& 6)$((/.4H1%8#@&04/#1 ++)"!h 4(t\(|(l*H8 94t2\3` t(stringsVENDORvendorRed Hat, Inc.kvmnet6.DeviceDescPkvmnet6.devicedescRed Hat VirtIO Ethernet Adapter;kvmnet6.Service.DispNamekvmnet6.service.dispnameRed Hat VirtIO Ethernet Adapter ServiceDiskId1 diskid1Red Hat VirtIO Ethernet Adapter Driver Disk #1NetworkAddress< networkaddressAssign MACPriority priorityInit.Do802.1PQJumboPacket jumbopacketJumbo PacketTxCapacityL txcapacityInit.MaxTxBuffers +RxCapacity rxcapacityInit.MaxRxBuffers-Offload.TxChecksum offload.txchecksumOffload.Tx.ChecksumOffload.TxLSO offload.txlso@:Offload.Tx.LSO,)Offload.RxCS offload.rxcsOffload.Rx.ChecksumEnableLogging` enableloggingLogging.EnableDebugLevel debuglevelLogging.Level4Tx6tx|+Tx EnabledRxPrxRx Enabled7TxRxtxrxRx & Tx EnabledStd.LsoV2IPv4std.lsov2ipv4Large Send Offload V2 (IPv4)Std.LsoV2IPv6Hstd.lsov2ipv6Large Send Offload V2 (IPv6)Std.UDPChecksumOffloadIPv4 std.udpchecksumoffloadipv4\UDP Checksum Offload (IPv4)Std.TCPChecksumOffloadIPv4|std.tcpchecksumoffloadipv4TCP Checksum Offload (IPv4)Std.UDPChecksumOffloadIPv60std.udpchecksumoffloadipv6UDP Checksum Offload (IPv6)Std.TCPChecksumOffloadIPv6std.tcpchecksumoffloadipv6TCP Checksum Offload (IPv6)x-Std.IPChecksumOffloadv4std.ipchecksumoffloadv4IPv4 Checksum OffloadDisable0disableDisabledEnableenable EnabledEnable*enable*Enabled*@,String_16string_1616String_32(string_3232String_64dstring_6464\%String_128string_128128String_256string_256256String_512(string_512`512String_1024lstring_10241024PriorityVlanTagpriorityvlantag#Priority and VLAN taggingPriorityOnly4priorityonlyVLantvlanVLan_IDvlan_idVLan IDX;Priority_Vlanpriority_vlanAll110M10m100M4100m1GT1g10Gl10gTCPv4tcpv4 TCP(v4),TCPUDPv4tcpudpv4TCP/UDP(v4)TCPUDPAlltcpudpalltTCP/UDP(v4,v6)all*IPv4dipv4MaximalmaximalversionSignaturesignature$Windows NT$*Class$classNetCatalogFile<catalogfilenetkvm.catClassGUID8classguid{4d36e972-e325-11ce-bfc1-08002be10318}Providerprovider%VENDOR%DriverVer\driverver02/23/2022100.90.104.21700DriverPackageTypedriverpackagetypePlugAndPlayH%DriverPackageDisplayName<driverpackagedisplayname%kvmnet6.DeviceDesc%PnpLockDownpnplockdown1manufacturer0red hat, inc.D%vendor%`NetKVMNTamd64.6.3netkvm.ntamd64.6.3red hat virtio ethernet adapter%kvmnet6.devicedesc%\!kvmnet6.ndiPCI\VEN_1AF4&DEV_1000&SUBSYS_00011AF4&REV_00PCI\VEN_1AF4&DEV_1000PCI\VEN_1AF4&DEV_1041&SUBSYS_11001AF4&REV_01PCI\VEN_1AF4&DEV_10410kvmnet6.ndi.hwAddRegpaddregkvmnet6.EnableMSIkvmnet6.enablemsiHKRInterrupt Management\MessageSignaledInterruptPropertiesMSISupported0x00010001MessageNumberLimit(2048Interrupt Management\Affinity PolicyDevicePolicy0DevicePriority2Characteristicscharacteristics0x84BusType!bustype5kvmnet6.Reg-ParametersCopyFilesx!copyfileskvmnet6.CopyFiles*IfType!*iftype6*MediaType"*mediatype*PhysicalMediaType8"*physicalmediatype#kvmnet6.ndi.servicesAddService"addservice4netkvmkvmnet6.Servicekvmnet6.EventLogDparametersNdi\Params\PriorityParamDesc%Priority%DefaulttypeenumNdi\Params\Priority\enum%Enable%%Disable%Ndi\Params\*PriorityVLANTag%PriorityVlanTag%3 Ndi\Params\*PriorityVLANTag\enum%Priority_Vlan%%VLan%%PriorityOnly%DNdi\params\VlanID%VLan_ID%long#defaultH.minmax4094 Ndi\Params\DoLog%EnableLogging%Ndi\Params\DoLog\enumNdi\params\DebugLevel%DebugLevel%int8step-Ndi\params\*JumboPacket%JumboPacket%151459065500Ndi\params\TxCapacity%TxCapacity%%Ndi\Params\TxCapacity\enum%String_16%%String_32%%String_64%%String_128%%String_256%%String_512%%String_1024%, Ndi\params\RxCapacity%RxCapacity%Ndi\Params\RxCapacity\enumNdi\params\NetworkAddress%NetworkAddress%edit6OptionalNdi\Params\OffLoad.TxChecksum%OffLoad.TxChecksum%31$%Ndi\Params\OffLoad.TxChecksum\enum%All%27%TCPUDPAll%%TCPUDPv4%%TCPv4%Ndi\Params\OffLoad.TxLSO%OffLoad.TxLSO%Ndi\Params\OffLoad.TxLSO\enum%Maximal%%IPv4%Ndi\Params\OffLoad.RxCS%OffLoad.RxCS%Ndi\Params\OffLoad.RxCS\enumNdi\Params\*IPChecksumOffloadIPv4%Std.IPChecksumOffloadv4%Ndi\Params\*IPChecksumOffloadIPv4\enum%TxRx%%Rx%+%Tx%Ndi\Params\*LsoV2IPv4%Std.LsoV2IPv4%Ndi\Params\*LsoV2IPv4\enumNdi\Params\*LsoV2IPv6%Std.LsoV2IPv6%X8Ndi\Params\*LsoV2IPv6\enumh0Ndi\Params\*UDPChecksumOffloadIPv40%Std.UDPChecksumOffloadIPv4%0Ndi\Params\*UDPChecksumOffloadIPv4\enumNdi\Params\*TCPChecksumOffloadIPv4%Std.TCPChecksumOffloadIPv4%2Ndi\Params\*TCPChecksumOffloadIPv4\enum@(Ndi\Params\*TCPChecksumOffloadIPv6%Std.TCPChecksumOffloadIPv6%8Ndi\Params\*TCPChecksumOffloadIPv6\enumNdi\Params\*UDPChecksumOffloadIPv6%Std.UDPChecksumOffloadIPv6%Ndi\Params\*UDPChecksumOffloadIPv6\enum!kvmnet6.copyfiles.netkvm.sys #kvmnet6.serviceDisplayName2displayname%kvmnet6.Service.DispName%ServiceType 3servicetypeStartTypeD3starttypeH4ErrorControlt3errorcontrolServiceBinary3servicebinaryC:\Windows\system32\DRIVERS\netkvm.sys%12%\netkvm.sys"LoadOrderGroupl4loadordergroupNDISTextModeFlags.Reg0#kvmnet6.eventlog9kvmnet6.AddEventLog.Reg5kvmnet6.addeventlog.regEventMessageFile0x00020000%SystemRoot%\System32\netevent.dll%%SystemRoot%%\System32\netevent.dllTypesSupported7textmodeflags.reg4 TextModeFlags0x0001T-DisableMSIEarlyDebug.sourcedisksnames%DiskId1%P'sourcedisksfilesdestinationdirs12@!kvmnet6.regBusNumberXNdiServiceNdi\InterfacesUpperRangendis5LowerRangeethernetNdi\params\*RSSReceive Side ScalingTypeNdi\params\*RSS\enumNdi\params\*NumRssQueues\Maximum Number of RSS QueuesNdi\params\*RscIPv4%Recv Segment Coalescing (IPv4)Ndi\params\*RscIPv4\enumNdi\params\*RscIPv6l'Recv Segment Coalescing (IPv6)Ndi\params\*RscIPv6\enumNdi\params\*UsoIPv49UDP Segmentation Offload (IPv4)Ndi\params\*UsoIPv4\enumNdi\params\*UsoIPv6 UDP Segmentation Offload (IPv6)Ndi\params\*UsoIPv6\enumSignature$Windows NT$ClassNetCatalogFilenetkvm.catClassGUID{4d36e972-e325-11ce-bfc1-08002be10318}ProviderRed Hat, Inc.DriverVer02/23/2022DriverPackageTypePlugAndPlayDriverPackageDisplayNameRed Hat VirtIO Ethernet AdapterPnpLockDown11 1:;=!>D*B"3IX#9|J(2t24H567\777(  !$'*-0369<?BEHKNQT W Z ] ` cfilorux{~ $%'(+,-./014;<=>?A BCDEF"G'I,J1K6L;M@OEPJQORTSYU^VcWhXmYrZw\|]^_`acdefghijklnopqrstuvwyz{} ~!&+05:?DINSX]bglqv{  %*/49>CHMRW\`cfilorux} !"$%&'()+,-./02345679 :;<=!>&?+@0A5B:C?DDFIGNHSIXJ]Kb0|P$ \ ` <  , h L 8 d  4 ` (4\PhhH@|l0 \D0Xp@(X|dD(`lT4 tt(D44`TTxll4Xtdd 0X<t,0t\ t<<0tD`DP((  d    !$!!8!@!\!!x!!!!!"" d"8" """ #0#t## t## t## #$ $ Xp$# p$# $p$# #$$ $ t$ $ X%# %# %%% %% %% % &#  &#  &# #X& X& X&# &# &&% &% &% &&& &# , &# %&% P'&% `'&% l'&& |'# |'# #|'% ' 'X X' ' ' '` `' (# (# #(% ,) ,)X X,) ,) ,) ,)` `,) h)# h)# )h)) )# d )# `*)# #l*`* l** 4l*$ l* l* X +#  +#  +# #|+ |+ d|+ X+# 4 +# `*+# #@,`* @,* 4@,$ @, @, X,# ,# $,# #-$ - h- 4- X-# -# -# #- - X.# .# .# #l. l. X.# @.# $.# #4/$ 4/ h4/ 44/ X/# /# $/# #0$ 0 h0 40 Xh0# \h0# $h0# #0$ 0 h0 40 XH1# H1# $H1# #1$ 1 h1 41 XP2l2l2 22\ (3 3\3D3$3t33334l4445l2|555l2\66l266\!6l2 \!7l2$ l2l2l2P2P2l2l2(2!7l27 77 "8,8 H88X8 t88# 888 #8# 8) 8 X8  9# X9 9# & 9%  9%  9% X 9& 9# 998 #9# 9) : X: @:# l:@:8 #@:# @:) : X: :# ;:8 #:# :) X; XX; ;# ;;8 #;# ;) < X< DD\#@$X$$$%H%\%X$%4&@$X$&0''($(@(\(|((( )($(@(\(|((()0**** +X$X+++X$,*** +X$,T-h-x-X$-@$X$H.@$X$.T-h-x-X$/T-h-x-X$0T-h-x-X$1T-h-x-X$2H4 6D7.PNF