Fixing DLL Hijack type of hid.dll/PerceptionSimulationService.exe

wietze · Jul 30, 2023 · 144cf60 · 144cf60
1 parent 73b09d1
commit 144cf60
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/yml/microsoft/built-in/hid.yml b/yml/microsoft/built-in/hid.yml
@@ -24,7 +24,7 @@ VulnerableExecutables:
     Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
     Type: Catalog
 - Path: '%SYSTEM32%\PerceptionSimulation\PerceptionSimulationService.exe'
-  Type: Phantom
+  Type: Search Order
   ExpectedSignatureInformation:
   - Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
     Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US