IndirectKmd.sys without signature

Question

Good morning,

I found the driver file "IndirectKmd.sys" hash "0B834E9FBD694680C7F5AF22864BDCF7347C83C3684FF9CC5350AC0880CC878F" that is unsigned.

How it is possible? Is this possible that the driver is distributed without a signature?

Answer 1

Non boot-critical drivers are signed with security catalogs, not individual digital signature

run this in Windows Powershell

Get-AuthenticodeSignature C:\Windows\System32\drivers\IndirectKmd.sys | select *

or use signtool.exe tool from Windows Driver Kit / Windows SDK

signtool.exe verify /a /v C:\Windows\System32\drivers\IndirectKmd.sys