{"Id":"0e3b0052-18c7-4c8b-a064-a1332df07af2","Tags":["ProxyDrv.sys"],"Verified":"TRUE","Author":"Michael Haag","Created":"2023-07-22","MitreID":"T1068","CVE":[""],"Category":"vulnerable driver","Commands":{"Command":"","Description":"Confirmed vulnerable driver from Microsoft Block List","OperatingSystem":"Windows","Privileges":"kernel","Usecase":"Elevate privileges"},"Resources":["https://gist.github.com/mgraeber-rc/1bde6a2a83237f17b463d051d32e802c"],"Detection":[{"type":"yara_signature","value":"https://github.com/magicsword-io/LOLDrivers/blob/main/detections/yara/yara-rules_vuln_drivers_strict_renamed.yar"},{"type":"sigma_hash","value":"https://github.com/magicsword-io/LOLDrivers/blob/main/detections/sigma/driver_load_win_vuln_drivers.yml"},{"type":"sigma_names","value":"https://github.com/magicsword-io/LOLDrivers/blob/main/detections/sigma/driver_load_win_vuln_drivers_names.yml"},{"type":"sysmon_hash_detect","value":"https://github.com/magicsword-io/LOLDrivers/blob/main/detections/sysmon/sysmon_config_vulnerable_hashes.xml"},{"type":"sysmon_hash_block","value":"https://github.com/magicsword-io/LOLDrivers/blob/main/detections/sysmon/sysmon_config_vulnerable_hashes_block.xml"}],"Acknowledgement":{"Handle":"","Person":""},"KnownVulnerableSamples":[{"Authentihash":{"MD5":"0139a9cdb5f84d47dbf553890e9a5377","SHA1":"69d6b4032f1456506382885eba5b396f1c36841b","SHA256":"49ed27460730b62403c1d2e4930573121ab0c86c442854bc0a62415ca445a810"},"Company":"雷神（武汉）网络技术有限公司","Copyright":"Copyright @ Www.Nn.Com","CreationTimestamp":"2020-04-03 06:51:25","Date":"","Description":"雷神NN加速器-驱动程序文件","ExportedFunctions":"","FileVersion":"1,9,5,3 built by: WinDDK","Filename":"","ImportedFunctions":["ExDeleteNPagedLookasideList","memcpy","ZwQueryValueKey","RtlUnwind","ZwSetSecurityObject","KeBugCheckEx","KeTickCount","_allmul","_aulldiv","KeQuerySystemTime","ExUuidCreate","swprintf_s","KeInitializeEvent","PsCreateSystemThread","ZwSetInformationThread","ObReferenceObjectByHandle","RtlAppendUnicodeToString","IoCreateDevice","IoCreateSymbolicLink","PsTerminateSystemThread","MmGetSystemRoutineAddress","PsLookupProcessByProcessId","IoAllocateMdl","MmBuildMdlForNonPagedPool","IoReleaseCancelSpinLock","PsGetCurrentProcessId","IofCompleteRequest","IoDeleteSymbolicLink","IoDeleteDevice","KeWaitForSingleObject","ObfDereferenceObject","MmAllocatePagesForMdl","MmMapLockedPagesSpecifyCache","MmFreePagesFromMdl","MmUnmapLockedPages","KeSetEvent","ObOpenObjectByPointer","RtlLengthSid","SeExports","RtlCreateAcl","RtlAddAccessAllowedAce","RtlCreateSecurityDescriptor","RtlSetDaclSecurityDescriptor","IoFreeMdl","ExInitializeNPagedLookasideList","InterlockedPushEntrySList","InterlockedPopEntrySList","_aullrem","ExFreePoolWithTag","memset","ExAllocatePoolWithTag","RtlInitUnicodeString","ZwOpenKey","ZwClose","KeAcquireInStackQueuedSpinLock","KeGetCurrentIrql","KeReleaseInStackQueuedSpinLock","FwpsFreeNetBufferList0","FwpmEngineOpen0","FwpmProviderAdd0","FwpmSubLayerDeleteByKey0","FwpmProviderContextDeleteByKey0","FwpsAcquireClassifyHandle0","FwpsQueryPacketInjectionState0","FwpsFlowAssociateContext0","FwpmSubLayerAdd0","FwpmSubLayerCreateEnumHandle0","FwpmFreeMemory0","FwpmSubLayerEnum0","FwpmSubLayerDestroyEnumHandle0","FwpmCalloutAdd0","FwpmFilterAdd0","FwpmTransactionBegin0","FwpmEngineClose0","FwpmTransactionCommit0","FwpmTransactionAbort0","FwpsCalloutRegister1","FwpsCalloutUnregisterByKey0","FwpsPendClassify0","FwpsInjectionHandleCreate0","FwpsCopyStreamDataToBuffer0","FwpsInjectNetworkReceiveAsync0","FwpsAcquireWritableLayerDataPointer0","FwpsApplyModifiedLayerData0","FwpsAllocateNetBufferAndNetBufferList0","FwpsInjectTransportSendAsync0","FwpsConstructIpHeaderForTransportPacket0","FwpsInjectNetworkSendAsync0","FwpsInjectTransportReceiveAsync0","FwpsFreeCloneNetBufferList0","FwpsInjectionHandleDestroy0","FwpsFlowRemoveContext0","FwpsCloneStreamData0","FwpsCompleteClassify0","FwpsReleaseClassifyHandle0","FwpsDiscardClonedStreamData0","FwpsStreamInjectAsync0","FwpmBfeStateGet0","FwpmBfeStateSubscribeChanges0","FwpmBfeStateUnsubscribeChanges0","NdisFreeGenericObject","NdisInitializeEvent","NdisWaitEvent","NdisFreeNetBufferListPool","NdisAdvanceNetBufferDataStart","NdisRetreatNetBufferDataStart","NdisAllocateNetBufferListPool","NdisAllocateGenericObject","NdisGetDataBuffer"],"Imports":["ntoskrnl.exe","HAL.dll","fwpkclnt.sys","NDIS.SYS"],"InternalName":"ProxyDrv.sys","MD5":"54313eadbe10511393d42b902436a30d","MachineType":"I386","MagicHeader":"50 45 0 0","OriginalFilename":"ProxyDrv.sys","PDBPath":"","Product":"雷神NN加速器","ProductVersion":"2.5.1.0","Publisher":"","RichPEHeaderHash":{"MD5":"46657e0062478bca55dea3bf3614c4a3","SHA1":"e1d9f53cbe8080caa655b35dab32bfdf1d3357d4","SHA256":"d9fb506945778a3c3b8083655cf3e32fa57fb67207d48a1fbe1f0f2044b49e20"},"SHA1":"1c9e3bc640de5065535925a75d7dda51af2c9836","SHA256":"0b205838a8271daea89656b1ec7c5bb7244c42a8b8000d7697e92095da6b9b94","Sections":{".text":{"Entropy":6.465065363864816,"Virtual Size":"0xb002"},".rdata":{"Entropy":4.169693415501691,"Virtual Size":"0x880"},".data":{"Entropy":2.8489589357060323,"Virtual Size":"0xef4"},"INIT":{"Entropy":5.507253947388693,"Virtual Size":"0xd0a"},".rsrc":{"Entropy":3.686270807485425,"Virtual Size":"0x350"},".reloc":{"Entropy":6.590687837428921,"Virtual Size":"0xc8a"}},"Signature":"","Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root CA","ValidFrom":"2011-04-15 19:41:37","ValidTo":"2021-04-15 19:51:37","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"611cb28a000000000026","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"983a0c315a50542362f2bd6a5d71c8d0","SHA1":"8047f476001f5cb16a661d2a3fd0c3576168f5e2","SHA256":"5f6a519ed2e35cd0fa1cdfc90f4387162c36287bbf9e4d6648251d99542a9e83","SHA384":"5f014b60511ddab3247ef0b3c03fe82c622237ba76015e2911d1adc50dc632d56ebd1ee532f3c2b6cbfe68d80a2c91dc"}},{"Subject":"C=CN, ST=, L=, O=, CN=","ValidFrom":"2020-04-07 00:00:00","ValidTo":"2023-04-12 12:00:00","Signature":"056b54cd71b6206297f5e781cbdd5fd3e1d00efd8902ba8fa5e88fa99f3e4de7f620d29685cd48f2e229845102cae6eeaf3dd16087873576b35af8bde8b369baf14d6956c881d4d55c730734db3029c84b83eabed46aeaf79daacc1821220e82886a9b499923225ac471a3df7389ab99693d7a950c07f7fcb4da549ed53c462676b259c867b31f317552cbdbeb331b537ec9b3ca4ab68c26a47aede38fd3a33253655442c4a6113cd16669660e55088a03650dc6c1c5fe52aabd613651e5f0a45096bfc3baeafc386bbe75b53909d4974cc360a491cb19090b681bca3dda039ee52b5bd5fdf1ff157625ad1f54db0e14b571e00d7119bfbd667df0cd517e77bd","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"0dd7d4a785990584d8c0837659173272","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"559c170b8f735dd1ba8c3946354c4fa5","SHA1":"e7432e65001ca5e56478ee25ae9906981432ee75","SHA256":"1c6140780d5210fb89e1dd3005184e03dc52740266a921035b1f836b5af0d32a","SHA384":"545ad02c12154f939f80b6f4b9d7ae888550220af82ec3f0a42805c8f6e6d7e57dbe62c80a8f8ec35a894acce2f68d9f"}},{"Subject":"C=US, O=DigiCert, CN=DigiCert Timestamp Responder","ValidFrom":"2014-10-22 00:00:00","ValidTo":"2024-10-22 00:00:00","Signature":"9d257e1b334db226815c9b86ce23200f8087e588ffffb1d46a2c31ed3a17197117cda91bbc5a1639009de36c84e45a40fbde06018c37fa9bb19d247efe20a457ad5bb79ab06026ea6957215d342f1f71b0839419056b359010a07b97c7f63fe7e21141a6bd62d9f0273d381d286f3a5209f0ec7062d3624bb0e073a692c0d38e31d82fe36d171306eee403b614abf38f43a7719d21dd14ca155d9241daf90f81d199740d26c40e7f1bb5f5a0f1c677062815e9d893e55516f0bb0aab1cdb5c482766c8a38b0a1ce595daaec42e59a061dddaf36da261e98a0b6dec1218bdf755544003922b6bc251c20a48afb0d46ee0f4140a3a1be38f3dcaaf6a8d7bdcd844","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"03019a023aff58b16bd6d5eae617f066","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"a752afee44f017e8d74e3f3eb7914ae3","SHA1":"8eca80a6b80e9c69dcef7745748524afb8019e2d","SHA256":"82560fa7efec30b5ff82af643e6f3bf3d46868bbd5e7d76f93db185e9e3553a1","SHA384":"e8b11408c88f877ade4ca51114a175fb5dfd2d18d2a66be547c1c9e080fa8f592c7870e30dfab1c04d234993dd0907f3"}},{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Code Signing CA,1","ValidFrom":"2011-02-11 12:00:00","ValidTo":"2026-02-10 12:00:00","Signature":"7b721d64ff88c83ac1b7e9e7a9c487bbdb9492d7905933fa2b87dea85b80253f138f9b831b7c43c4e68cdf393ec315ecb0da3b21257b24c1725db84791811346fa9c3f6a5138deb425cbf0abdfc528015479104624d1380f26a161904dbabd28e63ff1c4aa9bf6da35534fc9f23dd36cdc23edaaa04d6709f33a803d3cfb364c90e776a4ddf23abf56352fa24c65e8e0d4dad1c7c8916a2d234f373b199418d4d59c103cd5b11c19ff8fc86b9b9ef8ae9c999678d1cd9c51155b4226725a8d0a4a239240e886de22c2933ad49b68a6df297f06b93c0ebd9fc4869c82474271328609997209794b9d7169f541ff7f397764f1848dbe8b1eb27d68a3a590b10cff","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"0fa8490615d700a0be2176fdc5ec6dbd","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"a9a31555bbc92b6033975c5428fb3679","SHA1":"47f4b9898631773231b32844ec0d49990ac4eb1e","SHA256":"c826846e4b1d73edb7561ab1b41c949354e237a91e82fe1be5b7e2e1701f52d1","SHA384":"86f49574f368a561914a52d7ae043ec6784ef8c718960700f834e123594605d25d39f1ad45f1eb5052c9567f3edd0e16"}},{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID CA,1","ValidFrom":"2006-11-10 00:00:00","ValidTo":"2021-11-10 00:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"06fdf9039603adea000aeb3f27bbba1b","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"4e5ad189638cf52ba9cd881d4d44668c","SHA1":"cdc115e98d798b33904c820d63cc1e1afc19251d","SHA256":"37560fb9d548ab62cc3ed4669a4ab74828b5a108e67e829937ffb2d10a5f78dd","SHA384":"173bfb77183785621ef15f43ea807338cea6a02e8183317d9ef050c7237adda3fa2a5bdcd5a4c96da9f2c55900675b9f"}}],"Signer":[{"SerialNumber":"0dd7d4a785990584d8c0837659173272","Issuer":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Code Signing CA,1","Version":1}]}],"Imphash":"710e0a840c6027b3c64add0ff18631c3","LoadsDespiteHVCI":"FALSE"},{"Authentihash":{"MD5":"264c9453024d0f3b091f4ab6e8ca8d8b","SHA1":"aa937f73a8afcda98e868f4aeeb0eb81a4150075","SHA256":"c60fcff9c8e5243bbb22ec94618b9dcb02c59bb49b90c04d7d6ab3ebbd58dc3a"},"Company":"雷神（武汉）网络技术有限公司","Copyright":"Copyright @ Www.Nn.Com","CreationTimestamp":"2020-04-03 06:54:10","Date":"","Description":"雷神NN加速器-驱动程序文件","ExportedFunctions":"","FileVersion":"1,9,5,3","Filename":"","ImportedFunctions":["FwpmFreeMemory0","FwpmEngineOpen0","FwpmEngineClose0","FwpmTransactionBegin0","FwpmTransactionCommit0","FwpmTransactionAbort0","FwpmProviderAdd0","FwpmProviderContextDeleteByKey0","FwpmSubLayerAdd0","FwpmSubLayerDeleteByKey0","FwpmSubLayerCreateEnumHandle0","FwpmSubLayerEnum0","FwpmSubLayerDestroyEnumHandle0","FwpmCalloutAdd0","FwpmFilterAdd0","FwpsFlowAbort0","FwpsInjectionHandleCreate0","FwpsInjectionHandleDestroy0","FwpsRedirectHandleCreate0","FwpsFreeNetBufferList0","FwpsFreeCloneNetBufferList0","FwpsInjectNetworkSendAsync0","FwpsConstructIpHeaderForTransportPacket0","FwpsInjectTransportSendAsync0","FwpsInjectTransportReceiveAsync0","FwpsInjectNetworkReceiveAsync0","FwpsStreamInjectAsync0","FwpsCopyStreamDataToBuffer0","FwpmBfeStateGet0","FwpmBfeStateSubscribeChanges0","FwpmBfeStateUnsubscribeChanges0","FwpsFlowRemoveContext0","FwpsCompleteClassify0","FwpsRedirectHandleDestroy0","FwpsCloneStreamData0","FwpsDiscardClonedStreamData0","FwpsQueryPacketInjectionState0","FwpsApplyModifiedLayerData0","FwpsAcquireWritableLayerDataPointer0","FwpsReleaseClassifyHandle0","FwpsAcquireClassifyHandle0","FwpsFlowAssociateContext0","FwpsCalloutUnregisterByKey0","FwpsPendClassify0","FwpsCalloutRegister1","FwpsAllocateNetBufferAndNetBufferList0","NdisAllocateNetBufferListPool","NdisFreeNetBufferListPool","NdisWaitEvent","NdisInitializeEvent","NdisFreeGenericObject","NdisAllocateGenericObject","NdisGetDataBuffer","NdisAdvanceNetBufferDataStart","NdisRetreatNetBufferDataStart","KeAcquireInStackQueuedSpinLock","KeReleaseInStackQueuedSpinLock","ExAllocatePoolWithTag","ExUuidCreate","swprintf_s","RtlInitUnicodeString","MmGetSystemRoutineAddress","RtlAppendUnicodeToString","RtlCreateSecurityDescriptor","RtlSetDaclSecurityDescriptor","KeInitializeEvent","KeSetEvent","KeWaitForSingleObject","KeInitializeSpinLock","ExFreePoolWithTag","ExQueryDepthSList","ExpInterlockedPopEntrySList","ExpInterlockedPushEntrySList","ExInitializeNPagedLookasideList","ExDeleteNPagedLookasideList","MmBuildMdlForNonPagedPool","MmMapLockedPagesSpecifyCache","MmUnmapLockedPages","MmAllocatePagesForMdl","MmFreePagesFromMdl","PsCreateSystemThread","PsTerminateSystemThread","IoAllocateMdl","IofCompleteRequest","IoCreateDevice","IoCreateSymbolicLink","IoDeleteDevice","IoDeleteSymbolicLink","IoFreeMdl","IoReleaseCancelSpinLock","ObReferenceObjectByHandle","ObfDereferenceObject","ZwClose","ZwOpenKey","ZwQueryValueKey","PsGetCurrentProcessId","ZwSetInformationThread","RtlLengthSid","RtlCreateAcl","RtlAddAccessAllowedAce","PsLookupProcessByProcessId","ObOpenObjectByPointer","ZwSetSecurityObject","__C_specific_handler","SeExports","RtlGetVersion"],"Imports":["fwpkclnt.sys","NDIS.SYS","ntoskrnl.exe"],"InternalName":"ProxyDrv.sys","MD5":"b224ef59e8f31d8f397000fe6548b0c7","MachineType":"AMD64","MagicHeader":"50 45 0 0","OriginalFilename":"ProxyDrv.sys","PDBPath":"","Product":"雷神NN加速器","ProductVersion":"2.5.1.0","Publisher":"","RichPEHeaderHash":{"MD5":"c952cf0cb6ef2b504b8003c023e26016","SHA1":"dbedf0591c35f298c691e923a55be09b6daaf0bc","SHA256":"69b86efd5a2c247ea300ba9552bad07caeaf698f24091e714f83672cb107513c"},"SHA1":"f8e8b3e49b04b837b4d774a6c027e380971c221d","SHA256":"c0e74f565237c32989cb81234f4b5ad85f9dd731c112847c0a143d771021cb99","Sections":{".text":{"Entropy":6.182741872331694,"Virtual Size":"0xee64"},".rdata":{"Entropy":4.7617738882730976,"Virtual Size":"0x1c7c"},".data":{"Entropy":1.9573155632634147,"Virtual Size":"0x16c0"},".pdata":{"Entropy":4.987692606613797,"Virtual Size":"0xd50"},"INIT":{"Entropy":5.223648954698558,"Virtual Size":"0xe90"},".rsrc":{"Entropy":3.8633479531370662,"Virtual Size":"0x3b8"},".reloc":{"Entropy":4.789360076662959,"Virtual Size":"0x130"}},"Signature":"","Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root CA","ValidFrom":"2011-04-15 19:41:37","ValidTo":"2021-04-15 19:51:37","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"611cb28a000000000026","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"983a0c315a50542362f2bd6a5d71c8d0","SHA1":"8047f476001f5cb16a661d2a3fd0c3576168f5e2","SHA256":"5f6a519ed2e35cd0fa1cdfc90f4387162c36287bbf9e4d6648251d99542a9e83","SHA384":"5f014b60511ddab3247ef0b3c03fe82c622237ba76015e2911d1adc50dc632d56ebd1ee532f3c2b6cbfe68d80a2c91dc"}},{"Subject":"C=CN, ST=, L=, O=, CN=","ValidFrom":"2020-04-07 00:00:00","ValidTo":"2023-04-12 12:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"0dd7d4a785990584d8c0837659173272","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"559c170b8f735dd1ba8c3946354c4fa5","SHA1":"e7432e65001ca5e56478ee25ae9906981432ee75","SHA256":"1c6140780d5210fb89e1dd3005184e03dc52740266a921035b1f836b5af0d32a","SHA384":"545ad02c12154f939f80b6f4b9d7ae888550220af82ec3f0a42805c8f6e6d7e57dbe62c80a8f8ec35a894acce2f68d9f"}},{"Subject":"C=US, O=DigiCert, CN=DigiCert Timestamp Responder","ValidFrom":"2014-10-22 00:00:00","ValidTo":"2024-10-22 00:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"03019a023aff58b16bd6d5eae617f066","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"a752afee44f017e8d74e3f3eb7914ae3","SHA1":"8eca80a6b80e9c69dcef7745748524afb8019e2d","SHA256":"82560fa7efec30b5ff82af643e6f3bf3d46868bbd5e7d76f93db185e9e3553a1","SHA384":"e8b11408c88f877ade4ca51114a175fb5dfd2d18d2a66be547c1c9e080fa8f592c7870e30dfab1c04d234993dd0907f3"}},{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Code Signing CA,1","ValidFrom":"2011-02-11 12:00:00","ValidTo":"2026-02-10 12:00:00","Signature":"7b721d64ff88c83ac1b7e9e7a9c487bbdb9492d7905933fa2b87dea85b80253f138f9b831b7c43c4e68cdf393ec315ecb0da3b21257b24c1725db84791811346fa9c3f6a5138deb425cbf0abdfc528015479104624d1380f26a161904dbabd28e63ff1c4aa9bf6da35534fc9f23dd36cdc23edaaa04d6709f33a803d3cfb364c90e776a4ddf23abf56352fa24c65e8e0d4dad1c7c8916a2d234f373b199418d4d59c103cd5b11c19ff8fc86b9b9ef8ae9c999678d1cd9c51155b4226725a8d0a4a239240e886de22c2933ad49b68a6df297f06b93c0ebd9fc4869c82474271328609997209794b9d7169f541ff7f397764f1848dbe8b1eb27d68a3a590b10cff","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"0fa8490615d700a0be2176fdc5ec6dbd","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"a9a31555bbc92b6033975c5428fb3679","SHA1":"47f4b9898631773231b32844ec0d49990ac4eb1e","SHA256":"c826846e4b1d73edb7561ab1b41c949354e237a91e82fe1be5b7e2e1701f52d1","SHA384":"86f49574f368a561914a52d7ae043ec6784ef8c718960700f834e123594605d25d39f1ad45f1eb5052c9567f3edd0e16"}},{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID CA,1","ValidFrom":"2006-11-10 00:00:00","ValidTo":"2021-11-10 00:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"06fdf9039603adea000aeb3f27bbba1b","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"4e5ad189638cf52ba9cd881d4d44668c","SHA1":"cdc115e98d798b33904c820d63cc1e1afc19251d","SHA256":"37560fb9d548ab62cc3ed4669a4ab74828b5a108e67e829937ffb2d10a5f78dd","SHA384":"173bfb77183785621ef15f43ea807338cea6a02e8183317d9ef050c7237adda3fa2a5bdcd5a4c96da9f2c55900675b9f"}}],"Signer":[{"SerialNumber":"0dd7d4a785990584d8c0837659173272","Issuer":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Code Signing CA,1","Version":1}]}],"Imphash":"ff016f73670717be3741d1044bf4b7a6","LoadsDespiteHVCI":"FALSE"}]}