Record · corpus.blog/posts/01a07df1-67a7-7347-b760-ab6b05fa03b3

The Binary Hiding in Your Registry: Cracking Windows UCPD’s Dynamic Rules

Binary Ninja · published 4 August 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at binary.ninja Wayback capture

1blogs citing

First cited: 21 Aug 2026
Most recent: 23 Aug 2026
Rank this month: not ranked
Links from this post: 20
Words captured: 2,495

Cited by

Blog

In the post

Date

xusheng.dev

How Windows UCPD Grew from a 29 KB Registry Filter into a 196 KB Policy Engine Read at the source ↗

23 Aug 2026

xusheng.dev

Microsoft Paint and Photos Embed Server-Issued GUIDs as Invisible Watermarks in Locally-Generated Images Read at the source ↗

21 Aug 2026

Links from this post

Link

Host

https://www.youtube.com/watch?v=xQUYh4iKsB0

youtube.com

https://youtu.be/TheUdURzFjI

youtu.be

https://youtu.be/xQUYh4iKsB0?t=381

youtu.be

https://sidekick.binary.ninja/

sidekick.binary.ninja

https://dev-docs.binary.ninja/guide/mcp.html

dev-docs.binary.ninja

https://www.unicorn-engine.org/

unicorn-engine.org

https://github.com/276793422/CalcHash_CS64

github.com

https://kaitai.io/

kaitai.io

https://github.com/xusheng6/ucpd_analysis/blob/main/202606_DR/ucpd_dr_config.ksy

github.com

https://github.com/Vector35/kaitai

github.com

https://github.com/Vector35/kaitai/tree/kaitai-ide-live-compile

github.com

https://patents.google.com/patent/US6570988B1/en

patents.google.com

SetUserFTA: UserChoice Hash defeated – Set File Type Associations per User or Group on Windows 8/10/11 and 2012/2016/2019/2022 Read at the source ↗

kolbi.cz

https://searchfox.org/firefox-main/source/browser/components/shell/WindowsUserChoice.cpp

searchfox.org

The Beast Opens its Eye: AI at LiveCTF 2025 Read at the source ↗

seeinglogic.com

https://patents.google.com/patent/WO2000078118A2/en

patents.google.com

UCPD.sys – UserChoice Protection Driver Part 2 Read at the source ↗

kolbi.cz

https://github.com/xusheng6/ucpd_analysis

github.com

https://github.com/xusheng6/ucpd_analysis/tree/main/202606_DR

github.com

https://hitco.at/blog/windows-userchoice-protection-driver-ucpd/

hitco.at