{"Id":"1c6e1d3b-f825-4065-9e0c-83386883e40f","Tags":["rzpnk.sys"],"Verified":"TRUE","Author":"Michael Haag","Created":"2023-01-09","MitreID":"T1068","CVE":["CVE-2017-9769"],"Category":"vulnerable driver","Commands":{"Command":"sc.exe create rzpnk.sys binPath=C:\\windows\\temp\\rzpnk.sys type=kernel && sc.exe start rzpnk.sys","Description":"A vulnerability exists in the latest version of Razer Synapse (v2.20.15.1104 as of the day of disclosure) which can be leveraged locally by a malicious application to elevate its privileges to those of NT_AUTHORITY\\SYSTEM. The vulnerability lies in a specific IOCTL handler in the rzpnk.sys driver that passes a PID specified by the user to ZwOpenProcess. CVE-2017-9769.","OperatingSystem":"Windows 10","Privileges":"kernel","Usecase":"Elevate privileges"},"Resources":["https://github.com/nomi-sec/PoC-in-GitHub/blob/2a85c15ed806287861a7adec6545c85aec618e3b/2017/CVE-2017-9769.json#L13","https://www.rapid7.com/db/modules/exploit/windows/local/razer_zwopenprocess/"],"Detection":[{"type":"yara_signature","value":"https://github.com/magicsword-io/LOLDrivers/blob/main/detections/yara/93d873cdf23d5edc622b74f9544cac7fe247d7a68e1e2a7bf2879fad97a3ae63.yara"},{"type":"sigma_hash","value":"https://github.com/magicsword-io/LOLDrivers/blob/main/detections/sigma/driver_load_win_vuln_drivers.yml"},{"type":"sigma_names","value":"https://github.com/magicsword-io/LOLDrivers/blob/main/detections/sigma/driver_load_win_vuln_drivers_names.yml"},{"type":"sysmon_hash_detect","value":"https://github.com/magicsword-io/LOLDrivers/blob/main/detections/sysmon/sysmon_config_vulnerable_hashes.xml"},{"type":"sysmon_hash_block","value":"https://github.com/magicsword-io/LOLDrivers/blob/main/detections/sysmon/sysmon_config_vulnerable_hashes_block.xml"},{"type":"yara_signature","value":"https://github.com/magicsword-io/LOLDrivers/blob/main/detections/yara/yara-rules_vuln_drivers_strict_renamed.yar"},{"type":"sigma_hash","value":"https://github.com/magicsword-io/LOLDrivers/blob/main/detections/sigma/driver_load_win_vuln_drivers.yml"},{"type":"sigma_names","value":"https://github.com/magicsword-io/LOLDrivers/blob/main/detections/sigma/driver_load_win_vuln_drivers_names.yml"},{"type":"sysmon_hash_detect","value":"https://github.com/magicsword-io/LOLDrivers/blob/main/detections/sysmon/sysmon_config_vulnerable_hashes.xml"},{"type":"sysmon_hash_block","value":"https://github.com/magicsword-io/LOLDrivers/blob/main/detections/sysmon/sysmon_config_vulnerable_hashes_block.xml"}],"Acknowledgement":{"Handle":"","Person":""},"KnownVulnerableSamples":[{"Authentihash":{"MD5":"76934be6e996e801ea4d68c504d427c3","SHA1":"b2e03d9e602a6026f45c08b686c6810abd43bfac","SHA256":"982ad43111d8b7a7900df652c8873eeb6aa485bb429dee6c2ad44acf598bb5e6"},"Company":"Razer, Inc.","Copyright":"Copyright (C) 2010-2017. Razer, Inc.","CreationTimestamp":"2017-07-16 15:10:48","Date":"","Description":"Razer Overlay Support","ExportedFunctions":"","FileVersion":"1.0.12.10155","Filename":"rzpnk.sys","ImportedFunctions":["IoAcquireCancelSpinLock","IoReleaseCancelSpinLock","ObReferenceObjectByHandle","ExFreePoolWithTag","ExAllocatePoolWithTag","KeAcquireGuardedMutex","KeReleaseGuardedMutex","RtlInitUnicodeString","IoCreateDevice","IoCreateSymbolicLink","PoStartNextPowerIrp","IoDeleteDevice","KeInitializeEvent","PsSetCreateProcessNotifyRoutine","PsSetCreateThreadNotifyRoutine","PsRemoveCreateThreadNotifyRoutine","ZwSetEvent","_wcslwr","wcsstr","ZwClose","KeSetEvent","ZwWaitForSingleObject","_purecall","KeGetCurrentThread","_vsnprintf","swprintf","PsLookupProcessByProcessId","PsReferencePrimaryToken","SeQueryInformationToken","RtlLengthRequiredSid","RtlInitializeSid","RtlSubAuthoritySid","RtlEqualSid","PsDereferencePrimaryToken","MmGetSystemRoutineAddress","MmIsAddressValid","KeStackAttachProcess","KeUnstackDetachProcess","wcsrchr","ZwOpenProcess","PsLookupThreadByThreadId","ObOpenObjectByPointer","PsThreadType","ZwCreateEvent","PsGetCurrentProcessId","ZwOpenProcessTokenEx","ZwQueryInformationToken","RtlSubAuthorityCountSid","KeTickCount","KeBugCheckEx","ObfDereferenceObject","sprintf","IofCompleteRequest","memcpy","memset","RtlUnwind","KfAcquireSpinLock","ExReleaseFastMutex","ExAcquireFastMutex","KfReleaseSpinLock"],"Imports":["ntoskrnl.exe","HAL.dll"],"InternalName":"Rzpnk","MD5":"4cc3ddd5ae268d9a154a426af2c23ef9","MachineType":"I386","MagicHeader":"50 45 0 0","OriginalFilename":"Rzpnk.sys","Product":"Rzpnk","ProductVersion":"1.0.12.10155","Publisher":"","RichPEHeaderHash":{"MD5":"4a9a353a14ee7f23eb41b8a45b487e20","SHA1":"6c6a81d70919694d3abe35859966f0d320d0b3a3","SHA256":"89faf986a8af825587e8da0861c420dad1d83ce6bb17589fd1d397352352159c"},"SHA1":"684786de4b3b3f53816eae9df5f943a22c89601f","SHA256":"93d873cdf23d5edc622b74f9544cac7fe247d7a68e1e2a7bf2879fad97a3ae63","Sections":{".text":{"Entropy":6.13737056754944,"Virtual Size":"0x3870"},".rdata":{"Entropy":0.7745929346692745,"Virtual Size":"0x8b34"},".data":{"Entropy":0.16801126406945746,"Virtual Size":"0x308"},"PAGE":{"Entropy":4.500559089030644,"Virtual Size":"0x69"},"INIT":{"Entropy":5.53827735746872,"Virtual Size":"0x676"},".rsrc":{"Entropy":3.335903976976208,"Virtual Size":"0x348"},".reloc":{"Entropy":6.523525927018517,"Virtual Size":"0x3dc"}},"Signature":["Razer USA Ltd.","Symantec Class 3 SHA256 Code Signing CA","VeriSign"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, ST=California, L=Irvine, O=Razer USA Ltd., CN=Razer USA Ltd.","ValidFrom":"2016-02-10 00:00:00","ValidTo":"2019-02-07 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":false,"SerialNumber":"1834b81889070312b5c4ca72ea419a5e","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"966e59fada7c527111ba61f0cafcb355","SHA1":"d72efbe2c9127b91fffcfa0825dc16c9f7580e44","SHA256":"506eaba716a689df7e0bb57b6f41afea02cce8c4af4d2392e96bd2e1bf483528","SHA384":"0edb1fa0ccc2600fcd37358eb158fae5b72cc13fd3ff6cd0518aa6c780377dd5a7e39145784d4b9c595f163be613f2f1"}},{"Subject":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 SHA256 Code Signing CA","ValidFrom":"2013-12-10 00:00:00","ValidTo":"2023-12-09 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":true,"SerialNumber":"3d78d7f9764960b2617df4f01eca862a","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"1f056ff7d5f874984dc605402b7cb042","SHA1":"bdb348353a2203deb4b767914fa1bd7248dd728b","SHA256":"a08e79c386083d875014c409c13d144e0a24386132980df11ff59737c8489eb1","SHA384":"fa2729064b49e0d77540c1ee95d5f74acaf8eaf55197851a3a40383335f8113e51190bc48b552196edf8ac5cf0c89278"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. , For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority , G5","ValidFrom":"2011-02-22 19:25:17","ValidTo":"2021-02-22 19:35:17","Signature":"812a82168c34672be503eb347b8ca2a3508af45586f11e8c8eae7dee0319ce72951848ad6211fd20fd3f4706015ae2e06f8c152c4e3c6a506c0b36a3cf7a0d9c42bc5cf819d560e369e6e22341678c6883762b8f93a32ab57fbe59fba9c9b2268fcaa2f3821b983e919527978661ee5b5d076bcd86a8e26580a8e215e2b2be23056aba0cf347934daca48c077939c061123a050d89a3ec9f578984fbecca7c47661491d8b60f195de6b84aacbc47c8714396e63220a5dc7786fd3ce38b71db7b9b03fcb71d3264eb1652a043a3fa2ead59924e7cc7f233424838513a7c38c71b242228401e1a461f17db18f7f027356cb863d9cdb9645d2ba55eefc629b4f2c7f821cc04ba57fd01b6abc667f9e7d3997ff4f522fa72f5fdff3a1c423aa1f98018a5ee8d1cd4669e4501feaaeefffb178f30f7f1cd29c59decb5d549003d85b8cbbb933a276a49c030ae66c9f723283276f9a48356c848ce5a96aaa0cc0cc47fb48e97af6de35427c39f86c0d6e473089705dbd054625e0348c2d59f7fa7668cd09db04fd4d3985f4b7ac97fb22952d01280c70f54b61e67cdc6a06c110384d34875e72afeb03b6e0a3aa66b769905a3f177686133144706fc537f52bd92145c4a246a678caf8d90aad0f679211b93267cc3ce1ebd883892ae45c6196a4950b305f8ae59378a6a250394b1598150e8ba8380b72335f476b9671d5918ad208d94","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"611993e400000000001c","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"78a717e082dcc1cda3458d917e677d14","SHA1":"4a872e0e51f9b304469cd1dedb496ee9b8b983a4","SHA256":"317fa1d234ebc49040ebc5e8746f8997471496051b185a91bdd9dfbb23fab5f8","SHA384":"b71052da4eb9157c8c1a5d7f55df19d69b9128598b72fcca608e5b7cc7d64c43c5504b9c86355a6dc22ee40c88cc385c"}}],"Signer":[{"SerialNumber":"1834b81889070312b5c4ca72ea419a5e","Issuer":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 SHA256 Code Signing CA","Version":1}]}],"Imphash":"700a9350ac8b218ab9fc62cf25337ad3","LoadsDespiteHVCI":"FALSE"},{"Authentihash":{"MD5":"76934be6e996e801ea4d68c504d427c3","SHA1":"b2e03d9e602a6026f45c08b686c6810abd43bfac","SHA256":"982ad43111d8b7a7900df652c8873eeb6aa485bb429dee6c2ad44acf598bb5e6"},"Company":"Razer, Inc.","Copyright":"Copyright (C) 2010-2017. Razer, Inc.","CreationTimestamp":"2017-07-16 15:10:48","Date":"","Description":"Razer Overlay Support","ExportedFunctions":"","FileVersion":"1.0.12.10155","Filename":"","ImportedFunctions":["IoAcquireCancelSpinLock","IoReleaseCancelSpinLock","ObReferenceObjectByHandle","ExFreePoolWithTag","ExAllocatePoolWithTag","KeAcquireGuardedMutex","KeReleaseGuardedMutex","RtlInitUnicodeString","IoCreateDevice","IoCreateSymbolicLink","PoStartNextPowerIrp","IoDeleteDevice","KeInitializeEvent","PsSetCreateProcessNotifyRoutine","PsSetCreateThreadNotifyRoutine","PsRemoveCreateThreadNotifyRoutine","ZwSetEvent","_wcslwr","wcsstr","ZwClose","KeSetEvent","ZwWaitForSingleObject","_purecall","KeGetCurrentThread","_vsnprintf","swprintf","PsLookupProcessByProcessId","PsReferencePrimaryToken","SeQueryInformationToken","RtlLengthRequiredSid","RtlInitializeSid","RtlSubAuthoritySid","RtlEqualSid","PsDereferencePrimaryToken","MmGetSystemRoutineAddress","MmIsAddressValid","KeStackAttachProcess","KeUnstackDetachProcess","wcsrchr","ZwOpenProcess","PsLookupThreadByThreadId","ObOpenObjectByPointer","PsThreadType","ZwCreateEvent","PsGetCurrentProcessId","ZwOpenProcessTokenEx","ZwQueryInformationToken","RtlSubAuthorityCountSid","KeTickCount","KeBugCheckEx","ObfDereferenceObject","sprintf","IofCompleteRequest","memcpy","memset","RtlUnwind","KfAcquireSpinLock","ExReleaseFastMutex","ExAcquireFastMutex","KfReleaseSpinLock"],"Imports":["ntoskrnl.exe","HAL.dll"],"InternalName":"Rzpnk","MD5":"2e7d824a49d731da9fc96262a29c85ce","MachineType":"I386","MagicHeader":"50 45 0 0","OriginalFilename":"Rzpnk.sys","PDBPath":"","Product":"Rzpnk","ProductVersion":"1.0.12.10155","Publisher":"","RichPEHeaderHash":{"MD5":"4a9a353a14ee7f23eb41b8a45b487e20","SHA1":"6c6a81d70919694d3abe35859966f0d320d0b3a3","SHA256":"89faf986a8af825587e8da0861c420dad1d83ce6bb17589fd1d397352352159c"},"SHA1":"a4e2e227f984f344d48f4bf088ca9d020c63db4e","SHA256":"2665d3127ddd9411af38a255787a4e2483d720aa021be8d6418e071da52ed266","Sections":{".text":{"Entropy":6.13737056754944,"Virtual Size":"0x3870"},".rdata":{"Entropy":0.7745929346692745,"Virtual Size":"0x8b34"},".data":{"Entropy":0.16801126406945746,"Virtual Size":"0x308"},"PAGE":{"Entropy":4.500559089030644,"Virtual Size":"0x69"},"INIT":{"Entropy":5.53827735746872,"Virtual Size":"0x676"},".rsrc":{"Entropy":3.335903976976208,"Virtual Size":"0x348"},".reloc":{"Entropy":6.523525927018517,"Virtual Size":"0x3dc"}},"Signature":"","Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, ST=California, L=Irvine, O=Razer USA Ltd., CN=Razer USA Ltd.","ValidFrom":"2016-02-10 00:00:00","ValidTo":"2019-02-07 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":false,"SerialNumber":"1834b81889070312b5c4ca72ea419a5e","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"966e59fada7c527111ba61f0cafcb355","SHA1":"d72efbe2c9127b91fffcfa0825dc16c9f7580e44","SHA256":"506eaba716a689df7e0bb57b6f41afea02cce8c4af4d2392e96bd2e1bf483528","SHA384":"0edb1fa0ccc2600fcd37358eb158fae5b72cc13fd3ff6cd0518aa6c780377dd5a7e39145784d4b9c595f163be613f2f1"}},{"Subject":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 SHA256 Code Signing CA","ValidFrom":"2013-12-10 00:00:00","ValidTo":"2023-12-09 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":true,"SerialNumber":"3d78d7f9764960b2617df4f01eca862a","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"1f056ff7d5f874984dc605402b7cb042","SHA1":"bdb348353a2203deb4b767914fa1bd7248dd728b","SHA256":"a08e79c386083d875014c409c13d144e0a24386132980df11ff59737c8489eb1","SHA384":"fa2729064b49e0d77540c1ee95d5f74acaf8eaf55197851a3a40383335f8113e51190bc48b552196edf8ac5cf0c89278"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. , For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority , G5","ValidFrom":"2011-02-22 19:25:17","ValidTo":"2021-02-22 19:35:17","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"611993e400000000001c","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"78a717e082dcc1cda3458d917e677d14","SHA1":"4a872e0e51f9b304469cd1dedb496ee9b8b983a4","SHA256":"317fa1d234ebc49040ebc5e8746f8997471496051b185a91bdd9dfbb23fab5f8","SHA384":"b71052da4eb9157c8c1a5d7f55df19d69b9128598b72fcca608e5b7cc7d64c43c5504b9c86355a6dc22ee40c88cc385c"}}],"Signer":[{"SerialNumber":"1834b81889070312b5c4ca72ea419a5e","Issuer":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 SHA256 Code Signing CA","Version":1}]}],"Imphash":"700a9350ac8b218ab9fc62cf25337ad3","LoadsDespiteHVCI":"FALSE"},{"Authentihash":{"MD5":"64c80e12a495fb117c5db8f0ab70dc91","SHA1":"39c687c1c70ea61e122ef145364fa123ddeb3383","SHA256":"3e28142ad02a1ac63ab86f97834321f30bb28e19d5c997bb0a13807ddb414c0e"},"Company":"Razer, Inc.","Copyright":"Copyright (C) 2010-2017. Razer, Inc.","CreationTimestamp":"2017-09-20 18:35:30","Date":"","Description":"Razer Overlay Support","ExportedFunctions":"","FileVersion":"1.0.12.10177","Filename":"","ImportedFunctions":["IofCompleteRequest","ObfDereferenceObject","ObfReferenceObject","KeClearEvent","KeWaitForSingleObject","IoAcquireCancelSpinLock","IoReleaseCancelSpinLock","ObReferenceObjectByHandle","ExEventObjectType","ExFreePoolWithTag","ExAllocatePoolWithTag","ExAcquireFastMutex","ExReleaseFastMutex","KeAcquireGuardedMutex","KeReleaseGuardedMutex","KeAcquireSpinLockRaiseToDpc","KeReleaseSpinLock","RtlInitUnicodeString","IoCreateDevice","IoCreateSymbolicLink","PsGetCurrentProcessId","_wcslwr","wcsstr","PoStartNextPowerIrp","ZwLoadDriver","IoGetDeviceObjectPointer","ZwUnloadDriver","IoAttachDeviceToDeviceStack","IoDeleteDevice","KeInitializeEvent","IofCallDriver","PoCallDriver","PsSetCreateProcessNotifyRoutine","PsSetCreateThreadNotifyRoutine","PsRemoveCreateThreadNotifyRoutine","ZwSetEvent","ZwClose","KeSetEvent","ZwWaitForSingleObject","_purecall","sprintf","_vsnprintf","DbgPrint","swprintf","KeInitializeGuardedMutex","PsLookupProcessByProcessId","PsReferencePrimaryToken","SeQueryInformationToken","RtlLengthRequiredSid","RtlInitializeSid","RtlSubAuthoritySid","RtlEqualSid","PsDereferencePrimaryToken","MmGetSystemRoutineAddress","MmIsAddressValid","KeStackAttachProcess","KeUnstackDetachProcess","wcsrchr","ZwOpenProcess","PsLookupThreadByThreadId","ObOpenObjectByPointer","PsThreadType","ZwCreateEvent","RtlInitString","RtlCompareString","ZwMapViewOfSection","ZwOpenProcessTokenEx","ZwQueryInformationToken","RtlSubAuthorityCountSid","KeBugCheckEx","__C_specific_handler"],"Imports":["ntoskrnl.exe"],"InternalName":"Rzpnk","MD5":"3fda3d414c31ad73efd8ccceeaa3bdc2","MachineType":"AMD64","MagicHeader":"50 45 0 0","OriginalFilename":"Rzpnk.sys","PDBPath":"","Product":"Rzpnk","ProductVersion":"1.0.12.10177","Publisher":"","RichPEHeaderHash":{"MD5":"ce0bfa21df06f7d3067953da829fe299","SHA1":"49f5fdf333898858dd7297603f3b2347a01e777d","SHA256":"c059cad135868369281fd57e51cf8d64ac50e012ce54e3efb9321d8b519bd2dd"},"SHA1":"537923c633d8fc94d9ae45ad9d89e5346f581f17","SHA256":"f15962354d37089884abba417f58e9dbd521569b4f69037a24a37cfc2a490672","Sections":{".text":{"Entropy":6.029574446422592,"Virtual Size":"0x7a9e"},".rdata":{"Entropy":2.166400944027784,"Virtual Size":"0x145cc"},".data":{"Entropy":0.15812764646865457,"Virtual Size":"0x3e4"},".pdata":{"Entropy":4.867440310144845,"Virtual Size":"0xcf0"},"PAGE":{"Entropy":4.405262522641727,"Virtual Size":"0x87"},"INIT":{"Entropy":5.35429740385259,"Virtual Size":"0x8e8"},".rsrc":{"Entropy":3.3372398450648846,"Virtual Size":"0x348"},".reloc":{"Entropy":4.323516902746281,"Virtual Size":"0x8c"}},"Signature":"","Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, ST=California, L=Irvine, O=Razer USA Ltd., CN=Razer USA Ltd.","ValidFrom":"2016-02-10 00:00:00","ValidTo":"2019-02-07 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":false,"SerialNumber":"1834b81889070312b5c4ca72ea419a5e","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"966e59fada7c527111ba61f0cafcb355","SHA1":"d72efbe2c9127b91fffcfa0825dc16c9f7580e44","SHA256":"506eaba716a689df7e0bb57b6f41afea02cce8c4af4d2392e96bd2e1bf483528","SHA384":"0edb1fa0ccc2600fcd37358eb158fae5b72cc13fd3ff6cd0518aa6c780377dd5a7e39145784d4b9c595f163be613f2f1"}},{"Subject":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 SHA256 Code Signing CA","ValidFrom":"2013-12-10 00:00:00","ValidTo":"2023-12-09 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":true,"SerialNumber":"3d78d7f9764960b2617df4f01eca862a","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"1f056ff7d5f874984dc605402b7cb042","SHA1":"bdb348353a2203deb4b767914fa1bd7248dd728b","SHA256":"a08e79c386083d875014c409c13d144e0a24386132980df11ff59737c8489eb1","SHA384":"fa2729064b49e0d77540c1ee95d5f74acaf8eaf55197851a3a40383335f8113e51190bc48b552196edf8ac5cf0c89278"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. , For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority , G5","ValidFrom":"2011-02-22 19:25:17","ValidTo":"2021-02-22 19:35:17","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"611993e400000000001c","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"78a717e082dcc1cda3458d917e677d14","SHA1":"4a872e0e51f9b304469cd1dedb496ee9b8b983a4","SHA256":"317fa1d234ebc49040ebc5e8746f8997471496051b185a91bdd9dfbb23fab5f8","SHA384":"b71052da4eb9157c8c1a5d7f55df19d69b9128598b72fcca608e5b7cc7d64c43c5504b9c86355a6dc22ee40c88cc385c"}}],"Signer":[{"SerialNumber":"1834b81889070312b5c4ca72ea419a5e","Issuer":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 SHA256 Code Signing CA","Version":1}]}],"Imphash":"74081c86ad3e9771011f162c107927de","LoadsDespiteHVCI":"FALSE"},{"Authentihash":{"MD5":"43ffd546261cc9a839107caae118b47e","SHA1":"cd5db11f0d5aa7c13242e424463266d9cfd7be44","SHA256":"30d737a6da29ad2fe035c0a5f1f7a423a8cd96b8f3dc9885fe95ef3333478dd7"},"Company":"Razer, Inc.","Copyright":"Copyright (C) 2010-2014","CreationTimestamp":"2014-10-17 15:36:56","Date":"","Description":"Razer Overlay Support","ExportedFunctions":"","FileVersion":"1.0.12.3137","Filename":"","ImportedFunctions":["IoAcquireCancelSpinLock","IoReleaseCancelSpinLock","ObReferenceObjectByHandle","ExFreePoolWithTag","ExAllocatePoolWithTag","KeAcquireGuardedMutex","KeReleaseGuardedMutex","RtlInitUnicodeString","IoCreateDevice","IoCreateSymbolicLink","PoStartNextPowerIrp","IoDeleteDevice","KeInitializeEvent","PsSetCreateProcessNotifyRoutine","PsSetCreateThreadNotifyRoutine","PsRemoveCreateThreadNotifyRoutine","ZwSetEvent","_wcslwr","wcsstr","ZwClose","KeSetEvent","ZwWaitForSingleObject","_purecall","KeGetCurrentThread","sprintf","_vsnprintf","swprintf","PsLookupProcessByProcessId","PsReferencePrimaryToken","SeQueryInformationToken","RtlLengthRequiredSid","RtlInitializeSid","RtlSubAuthoritySid","RtlEqualSid","PsDereferencePrimaryToken","MmGetSystemRoutineAddress","MmIsAddressValid","KeStackAttachProcess","KeUnstackDetachProcess","wcsrchr","ZwOpenProcess","PsLookupThreadByThreadId","ObOpenObjectByPointer","PsThreadType","ZwCreateEvent","PsGetCurrentProcessId","KeTickCount","KeBugCheckEx","ObfDereferenceObject","IofCompleteRequest","memset","memcpy","RtlUnwind","KfAcquireSpinLock","ExReleaseFastMutex","ExAcquireFastMutex","KfReleaseSpinLock"],"Imports":["ntoskrnl.exe","HAL.dll"],"InternalName":"Rzpnk","MD5":"560069dc51d3cc7f9cf1f4e940f93cae","MachineType":"I386","MagicHeader":"50 45 0 0","OriginalFilename":"Rzpnk.sys","PDBPath":"","Product":"Rzpnk","ProductVersion":"1.0.12.3137","Publisher":"","RichPEHeaderHash":{"MD5":"d057638b27154020a709184ba7727e65","SHA1":"5ef2028df0810ed9c5c6f0f98056403e8fbafccf","SHA256":"c43d8b1564531353b120234c6056e59fb2254e04d1a7d775171952d29612fd57"},"SHA1":"1a83c8b63d675c940aaec10f70c0c7698e9b0165","SHA256":"16e2b071991b470a76dff4b6312d3c7e2133ad9ac4b6a62dda4e32281952fb23","Sections":{".text":{"Entropy":6.145469415830601,"Virtual Size":"0x3606"},".rdata":{"Entropy":0.5345726604843702,"Virtual Size":"0x10954"},".data":{"Entropy":5.3767156460043655,"Virtual Size":"0x754"},"PAGE":{"Entropy":4.549744862533889,"Virtual Size":"0x6a"},"INIT":{"Entropy":5.570949806092893,"Virtual Size":"0x61e"},".rsrc":{"Entropy":3.308209327501646,"Virtual Size":"0x328"},".reloc":{"Entropy":4.7243644582145805,"Virtual Size":"0x5e0"}},"Signature":"","Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA , G2","ValidFrom":"2012-12-21 00:00:00","ValidTo":"2020-12-30 23:59:59","Signature":"03099b8f79ef7f5930aaef68b5fae3091dbb4f82065d375fa6529f168dea1c9209446ef56deb587c30e8f9698d23730b126f47a9ae3911f82ab19bb01ac38eeb599600adce0c4db2d031a6085c2a7afce27a1d574ca86518e979406225966ec7c7376a8321088e41eaddd9573f1d7749872a16065ea6386a2212a35119837eb6","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"7e93ebfb7cc64e59ea4b9a77d406fc3b","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"d0785ad36e427c92b19f6826ab1e8020","SHA1":"365b7a9c21bd9373e49052c3e7b3e4646ddd4d43","SHA256":"c2abb7484da91a658548de089d52436175fdb760a1387d225611dc0613a1e2ff","SHA384":"eab4fe5ef90e0de4a6aa3a27769a5e879f588df5e4785aa4104debd1f81e19ea56d33e3a16e5facf99f68b5d8e3d287b"}},{"Subject":"C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer , G4","ValidFrom":"2012-10-18 00:00:00","ValidTo":"2020-12-29 23:59:59","Signature":"783bb4912a004cf08f62303778a38427076f18b2de25dca0d49403aa864e259f9a40031cddcee379cb216806dab632b46dbff42c266333e449646d0de6c3670ef705a4356c7c8916c6e9b2dfb2e9dd20c6710fcd9574dcb65cdebd371f4378e678b5cd280420a3aaf14bc48829910e80d111fcdd5c766e4f5e0e4546416e0db0ea389ab13ada097110fc1c79b4807bac69f4fd9cb60c162bf17f5b093d9b5be216ca13816d002e380da8298f2ce1b2f45aa901af159c2c2f491bdb22bbc3fe789451c386b182885df03db451a179332b2e7bb9dc20091371eb6a195bcfe8a530572c89493fb9cf7fc9bf3e226863539abd6974acc51d3c7f92e0c3bc1cd80475","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"0ecff438c8febf356e04d86a981b1a50","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"e9d38360b914c8863f6cba3ee58764d3","SHA1":"4cba8eae47b6bf76f20b3504b98b8f062694a89b","SHA256":"88901d86a4cc1f1bb193d08e1fb63d27452e63f83e228c657ab1a92e4ade3976","SHA384":"e9f2a75334a9e336c5a4712eadee88d0374b0fdc273262f4e65c9040ad2793067cc076696db5279a478773485e285652"}},{"Subject":"C=KY, ST=Cayman Islands, L=George Town, O=Razer Inc., OU=Digital ID Class 3 , Microsoft Software Validation v2, CN=Razer Inc.","ValidFrom":"2013-09-13 00:00:00","ValidTo":"2016-08-02 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"4e4563adead3fedac7bd44ec5c590577","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"62e336c644b79eb95f869025a59a0814","SHA1":"a2f3feca99242c7df87dbe3676a64c4dba12b76b","SHA256":"3b43e76a05117b0ee9c87f7b98005a1a4b804d633660c8e3a43d342ba9184e1b","SHA384":"06fa6279fc3c74eade44518adb2b1c269e30736e11ff02f8e3b1f4a3e55a9f0b07ec215f9654d579c25c90627809182c"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. , For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority , G5","ValidFrom":"2011-02-22 19:25:17","ValidTo":"2021-02-22 19:35:17","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"611993e400000000001c","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"78a717e082dcc1cda3458d917e677d14","SHA1":"4a872e0e51f9b304469cd1dedb496ee9b8b983a4","SHA256":"317fa1d234ebc49040ebc5e8746f8997471496051b185a91bdd9dfbb23fab5f8","SHA384":"b71052da4eb9157c8c1a5d7f55df19d69b9128598b72fcca608e5b7cc7d64c43c5504b9c86355a6dc22ee40c88cc385c"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","ValidFrom":"2010-02-08 00:00:00","ValidTo":"2020-02-07 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"5200e5aa2556fc1a86ed96c9d44b33c7","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"b30c31a572b0409383ed3fbe17e56e81","SHA1":"4843a82ed3b1f2bfbee9671960e1940c942f688d","SHA256":"03cda47a6e654ed85d932714fc09ce4874600eda29ec6628cfbaeb155cab78c9","SHA384":"bbda8407c4f9fc4e54d772f1c7fb9d30bc97e1f97ecd51c443063d1fa0644e266328781776cd5c44896c457c75f4d7da"}}],"Signer":[{"SerialNumber":"4e4563adead3fedac7bd44ec5c590577","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","Version":1}]}],"Imphash":"805e4a267f9495e7c0c430d92b78f8bd","LoadsDespiteHVCI":"FALSE"},{"Authentihash":{"MD5":"151f2aa65417bbb3563e02d1f60484dc","SHA1":"970bd6388867c86b786d4e218d1a6967d7304ee4","SHA256":"9d61963c098b07fa7ee6dba40f476fc5d2f16301d79a3e8554319d66c69404a9"},"Company":"Razer, Inc.","Copyright":"Copyright (C) 2010-2018. Razer, Inc.","CreationTimestamp":"2018-03-19 14:55:13","Date":"","Description":"Razer Overlay Support","ExportedFunctions":"","FileVersion":"1.0.12.10201","Filename":"","ImportedFunctions":["IofCompleteRequest","ObfDereferenceObject","ObfReferenceObject","KeClearEvent","KeWaitForSingleObject","IoAcquireCancelSpinLock","IoReleaseCancelSpinLock","ObReferenceObjectByHandle","ExEventObjectType","ExFreePoolWithTag","ExAllocatePoolWithTag","ExAcquireFastMutex","ExReleaseFastMutex","KeAcquireGuardedMutex","KeReleaseGuardedMutex","KeAcquireSpinLockRaiseToDpc","KeReleaseSpinLock","RtlInitUnicodeString","IoCreateDevice","IoCreateSymbolicLink","PsGetCurrentProcessId","_wcslwr","wcsstr","PoStartNextPowerIrp","ZwLoadDriver","IoGetDeviceObjectPointer","ZwUnloadDriver","IoAttachDeviceToDeviceStack","IoDeleteDevice","KeInitializeEvent","IofCallDriver","PoCallDriver","PsSetCreateProcessNotifyRoutine","PsSetCreateThreadNotifyRoutine","PsRemoveCreateThreadNotifyRoutine","ZwSetEvent","ZwClose","KeSetEvent","ZwWaitForSingleObject","_purecall","sprintf","_vsnprintf","DbgPrint","swprintf","KeInitializeGuardedMutex","PsLookupProcessByProcessId","PsReferencePrimaryToken","SeQueryInformationToken","RtlLengthRequiredSid","RtlInitializeSid","RtlSubAuthoritySid","RtlEqualSid","PsDereferencePrimaryToken","MmGetSystemRoutineAddress","MmIsAddressValid","KeStackAttachProcess","KeUnstackDetachProcess","wcsrchr","ZwOpenProcess","PsLookupThreadByThreadId","ObOpenObjectByPointer","PsThreadType","ZwCreateEvent","RtlInitString","RtlCompareString","ZwOpenProcessTokenEx","ZwQueryInformationToken","RtlSubAuthorityCountSid","KeBugCheckEx","__C_specific_handler"],"Imports":["ntoskrnl.exe"],"InternalName":"Rzpnk","MD5":"8de7dcade65a1f51605a076c1d2b3456","MachineType":"AMD64","MagicHeader":"50 45 0 0","OriginalFilename":"Rzpnk.sys","PDBPath":"","Product":"Rzpnk","ProductVersion":"1.0.12.10201","Publisher":"","RichPEHeaderHash":{"MD5":"38005c498229dd5f64251bb3e57a40bf","SHA1":"3ddcef7c8b8f8eeaccbc11703dd94c7d300ba1a0","SHA256":"27973d74dd877714939b06ddea7c9cad50ac645cd8569f068dc78575c14e6704"},"SHA1":"a95a126b539989e29e68969bfab16df291e7fa8a","SHA256":"dafa4459d88a8ab738b003b70953e0780f6b8f09344ce3cd631af70c78310b53","Sections":{".text":{"Entropy":6.032294908964451,"Virtual Size":"0x7a82"},".rdata":{"Entropy":2.158939241562336,"Virtual Size":"0x14564"},".data":{"Entropy":0.15812764646865457,"Virtual Size":"0x3e4"},".pdata":{"Entropy":4.8892997126668325,"Virtual Size":"0xcf0"},"PAGE":{"Entropy":4.405262522641727,"Virtual Size":"0x87"},"INIT":{"Entropy":5.339799543825723,"Virtual Size":"0x8ca"},".rsrc":{"Entropy":3.327497519552929,"Virtual Size":"0x348"},".reloc":{"Entropy":4.323516902746281,"Virtual Size":"0x8c"}},"Signature":"","Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, ST=California, L=Irvine, O=Razer USA Ltd., CN=Razer USA Ltd.","ValidFrom":"2016-02-10 00:00:00","ValidTo":"2019-02-07 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":false,"SerialNumber":"1834b81889070312b5c4ca72ea419a5e","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"966e59fada7c527111ba61f0cafcb355","SHA1":"d72efbe2c9127b91fffcfa0825dc16c9f7580e44","SHA256":"506eaba716a689df7e0bb57b6f41afea02cce8c4af4d2392e96bd2e1bf483528","SHA384":"0edb1fa0ccc2600fcd37358eb158fae5b72cc13fd3ff6cd0518aa6c780377dd5a7e39145784d4b9c595f163be613f2f1"}},{"Subject":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 SHA256 Code Signing CA","ValidFrom":"2013-12-10 00:00:00","ValidTo":"2023-12-09 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":true,"SerialNumber":"3d78d7f9764960b2617df4f01eca862a","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"1f056ff7d5f874984dc605402b7cb042","SHA1":"bdb348353a2203deb4b767914fa1bd7248dd728b","SHA256":"a08e79c386083d875014c409c13d144e0a24386132980df11ff59737c8489eb1","SHA384":"fa2729064b49e0d77540c1ee95d5f74acaf8eaf55197851a3a40383335f8113e51190bc48b552196edf8ac5cf0c89278"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. , For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority , G5","ValidFrom":"2011-02-22 19:25:17","ValidTo":"2021-02-22 19:35:17","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"611993e400000000001c","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"78a717e082dcc1cda3458d917e677d14","SHA1":"4a872e0e51f9b304469cd1dedb496ee9b8b983a4","SHA256":"317fa1d234ebc49040ebc5e8746f8997471496051b185a91bdd9dfbb23fab5f8","SHA384":"b71052da4eb9157c8c1a5d7f55df19d69b9128598b72fcca608e5b7cc7d64c43c5504b9c86355a6dc22ee40c88cc385c"}}],"Signer":[{"SerialNumber":"1834b81889070312b5c4ca72ea419a5e","Issuer":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 SHA256 Code Signing CA","Version":1}]}],"Imphash":"5192bc7311bdeb1f3977bdc0d2e943e4","LoadsDespiteHVCI":"FALSE"},{"Authentihash":{"MD5":"700c4e80369a63127263fb1702bbe07b","SHA1":"d6729e750660410644fb73361bc7113523a70c05","SHA256":"7070ee6dd615538ca6a701e7bdc2c23a19b84ae8ca5f9edc6307fef47eb05abb"},"Company":"Razer, Inc.","Copyright":"Copyright (C) 2010-2014","CreationTimestamp":"2016-05-19 17:08:25","Date":"","Description":"Razer Overlay Support","ExportedFunctions":"","FileVersion":"1.0.12.9986","Filename":"","ImportedFunctions":["IoAcquireCancelSpinLock","IoReleaseCancelSpinLock","ObReferenceObjectByHandle","ExFreePoolWithTag","ExAllocatePoolWithTag","KeAcquireGuardedMutex","KeReleaseGuardedMutex","RtlInitUnicodeString","IoCreateDevice","IoCreateSymbolicLink","PoStartNextPowerIrp","IoDeleteDevice","KeInitializeEvent","PsSetCreateProcessNotifyRoutine","PsSetCreateThreadNotifyRoutine","PsRemoveCreateThreadNotifyRoutine","ZwSetEvent","_wcslwr","wcsstr","ZwClose","KeSetEvent","ZwWaitForSingleObject","_purecall","KeGetCurrentThread","sprintf","_vsnprintf","swprintf","PsLookupProcessByProcessId","PsReferencePrimaryToken","SeQueryInformationToken","RtlLengthRequiredSid","RtlInitializeSid","RtlSubAuthoritySid","RtlEqualSid","PsDereferencePrimaryToken","MmGetSystemRoutineAddress","MmIsAddressValid","KeStackAttachProcess","KeUnstackDetachProcess","wcsrchr","ZwOpenProcess","PsLookupThreadByThreadId","ObOpenObjectByPointer","PsThreadType","ZwCreateEvent","ZwMapViewOfSection","KeTickCount","KeBugCheckEx","ObfDereferenceObject","IofCompleteRequest","memcpy","memset","RtlUnwind","KfAcquireSpinLock","ExReleaseFastMutex","ExAcquireFastMutex","KfReleaseSpinLock"],"Imports":["ntoskrnl.exe","HAL.dll"],"InternalName":"Rzpnk","MD5":"4e92f1c677e08fd09b57032c5b47ca46","MachineType":"I386","MagicHeader":"50 45 0 0","OriginalFilename":"Rzpnk.sys","PDBPath":"","Product":"Rzpnk","ProductVersion":"1.0.12.9986","Publisher":"","RichPEHeaderHash":{"MD5":"c723c2141747136a803cc8d5df9b0e9c","SHA1":"ab3959e0fa2376ebca63456374e4454a4d711ec1","SHA256":"4d91707d4f7a8f5cbedd69ff24b76a642fe430fa85657e0622340935b9806df5"},"SHA1":"6e191d72b980c8f08a0f60efa01f0b5bf3b34afb","SHA256":"ad8fd8300ed375e22463cea8767f68857d9a3b0ff8585fbeb60acef89bf4a7d7","Sections":{".text":{"Entropy":6.114856649345834,"Virtual Size":"0x3670"},".rdata":{"Entropy":0.751113745545077,"Virtual Size":"0x8ac4"},".data":{"Entropy":0.16801126406945746,"Virtual Size":"0x308"},"PAGE":{"Entropy":4.450605636670296,"Virtual Size":"0x69"},"INIT":{"Entropy":5.5079261670391375,"Virtual Size":"0x61c"},".rsrc":{"Entropy":3.306152731455725,"Virtual Size":"0x328"},".reloc":{"Entropy":6.471599422357952,"Virtual Size":"0x3d4"}},"Signature":"","Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, ST=California, L=Irvine, O=Razer USA Ltd., CN=Razer USA Ltd.","ValidFrom":"2016-02-10 00:00:00","ValidTo":"2019-02-07 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":false,"SerialNumber":"1834b81889070312b5c4ca72ea419a5e","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"966e59fada7c527111ba61f0cafcb355","SHA1":"d72efbe2c9127b91fffcfa0825dc16c9f7580e44","SHA256":"506eaba716a689df7e0bb57b6f41afea02cce8c4af4d2392e96bd2e1bf483528","SHA384":"0edb1fa0ccc2600fcd37358eb158fae5b72cc13fd3ff6cd0518aa6c780377dd5a7e39145784d4b9c595f163be613f2f1"}},{"Subject":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 SHA256 Code Signing CA","ValidFrom":"2013-12-10 00:00:00","ValidTo":"2023-12-09 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":true,"SerialNumber":"3d78d7f9764960b2617df4f01eca862a","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"1f056ff7d5f874984dc605402b7cb042","SHA1":"bdb348353a2203deb4b767914fa1bd7248dd728b","SHA256":"a08e79c386083d875014c409c13d144e0a24386132980df11ff59737c8489eb1","SHA384":"fa2729064b49e0d77540c1ee95d5f74acaf8eaf55197851a3a40383335f8113e51190bc48b552196edf8ac5cf0c89278"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. , For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority , G5","ValidFrom":"2011-02-22 19:25:17","ValidTo":"2021-02-22 19:35:17","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"611993e400000000001c","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"78a717e082dcc1cda3458d917e677d14","SHA1":"4a872e0e51f9b304469cd1dedb496ee9b8b983a4","SHA256":"317fa1d234ebc49040ebc5e8746f8997471496051b185a91bdd9dfbb23fab5f8","SHA384":"b71052da4eb9157c8c1a5d7f55df19d69b9128598b72fcca608e5b7cc7d64c43c5504b9c86355a6dc22ee40c88cc385c"}}],"Signer":[{"SerialNumber":"1834b81889070312b5c4ca72ea419a5e","Issuer":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 SHA256 Code Signing CA","Version":1}]}],"Imphash":"42e3f2ffa29901e572f2df03cb872159","LoadsDespiteHVCI":"FALSE"},{"Authentihash":{"MD5":"78276d9e5e7111419e997b4ea0dc0bcc","SHA1":"876a391320ff8b3e545c53bb933d6afd8ace66e6","SHA256":"a9e0f35da47fe91d887a28a0670d8e79ceef7c61ff6d9af3d0568a9737fe0673"},"Company":"Razer, Inc.","Copyright":"Copyright (C) 2010-2014","CreationTimestamp":"2015-05-28 15:22:11","Date":"","Description":"Razer Overlay Support","ExportedFunctions":"","FileVersion":"1.0.12.6087","Filename":"","ImportedFunctions":["IofCompleteRequest","ObfDereferenceObject","ObfReferenceObject","KeClearEvent","KeWaitForSingleObject","IoAcquireCancelSpinLock","IoReleaseCancelSpinLock","ObReferenceObjectByHandle","ExEventObjectType","ExFreePoolWithTag","ExAllocatePoolWithTag","ExAcquireFastMutex","ExReleaseFastMutex","KeAcquireGuardedMutex","KeReleaseGuardedMutex","KeAcquireSpinLockRaiseToDpc","KeReleaseSpinLock","RtlInitUnicodeString","IoCreateDevice","IoCreateSymbolicLink","PoStartNextPowerIrp","ZwLoadDriver","IoGetDeviceObjectPointer","ZwUnloadDriver","IoAttachDeviceToDeviceStack","IoDeleteDevice","KeInitializeEvent","IofCallDriver","PoCallDriver","PsSetCreateProcessNotifyRoutine","PsSetCreateThreadNotifyRoutine","PsRemoveCreateThreadNotifyRoutine","ZwSetEvent","_wcslwr","wcsstr","ZwClose","KeSetEvent","ZwWaitForSingleObject","_purecall","sprintf","_vsnprintf","DbgPrint","swprintf","KeInitializeGuardedMutex","PsLookupProcessByProcessId","PsReferencePrimaryToken","SeQueryInformationToken","RtlLengthRequiredSid","RtlInitializeSid","RtlSubAuthoritySid","RtlEqualSid","PsDereferencePrimaryToken","MmGetSystemRoutineAddress","MmIsAddressValid","KeStackAttachProcess","KeUnstackDetachProcess","wcsrchr","ZwOpenProcess","PsLookupThreadByThreadId","ObOpenObjectByPointer","PsThreadType","ZwCreateEvent","PsGetCurrentProcessId","RtlInitString","RtlCompareString","KeBugCheckEx","__C_specific_handler"],"Imports":["ntoskrnl.exe"],"InternalName":"Rzpnk","MD5":"288471f132c7249f598032d03575f083","MachineType":"AMD64","MagicHeader":"50 45 0 0","OriginalFilename":"Rzpnk.sys","PDBPath":"","Product":"Rzpnk","ProductVersion":"1.0.12.6087","Publisher":"","RichPEHeaderHash":{"MD5":"6f46839d81ff1d1b3e509d134f95c5a9","SHA1":"987e1f687c75f4e3bd6377359b2ed6b71e16b88e","SHA256":"011d63cf6e09f148f628424ead77cac9969f196a4bb773e8fbd60ab9b41d8c93"},"SHA1":"3fbe337b6ed1a1a63ae8b4240c01bd68ed531674","SHA256":"9e3430d5e0e93bc4a5dccc985053912065e65722bfc2eaf431bc1da91410434c","Sections":{".text":{"Entropy":5.9988823890417375,"Virtual Size":"0x7360"},".rdata":{"Entropy":2.024740490753228,"Virtual Size":"0x13f2c"},".data":{"Entropy":4.883228407116594,"Virtual Size":"0x84c"},".pdata":{"Entropy":4.849576987895292,"Virtual Size":"0xce4"},"PAGE":{"Entropy":4.375632893012098,"Virtual Size":"0x87"},"INIT":{"Entropy":5.335573695740321,"Virtual Size":"0x866"},".rsrc":{"Entropy":3.3151233781057714,"Virtual Size":"0x328"},".reloc":{"Entropy":2.1849334100920914,"Virtual Size":"0x1a4"}},"Signature":"","Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA , G2","ValidFrom":"2012-12-21 00:00:00","ValidTo":"2020-12-30 23:59:59","Signature":"03099b8f79ef7f5930aaef68b5fae3091dbb4f82065d375fa6529f168dea1c9209446ef56deb587c30e8f9698d23730b126f47a9ae3911f82ab19bb01ac38eeb599600adce0c4db2d031a6085c2a7afce27a1d574ca86518e979406225966ec7c7376a8321088e41eaddd9573f1d7749872a16065ea6386a2212a35119837eb6","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"7e93ebfb7cc64e59ea4b9a77d406fc3b","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"d0785ad36e427c92b19f6826ab1e8020","SHA1":"365b7a9c21bd9373e49052c3e7b3e4646ddd4d43","SHA256":"c2abb7484da91a658548de089d52436175fdb760a1387d225611dc0613a1e2ff","SHA384":"eab4fe5ef90e0de4a6aa3a27769a5e879f588df5e4785aa4104debd1f81e19ea56d33e3a16e5facf99f68b5d8e3d287b"}},{"Subject":"C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer , G4","ValidFrom":"2012-10-18 00:00:00","ValidTo":"2020-12-29 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"0ecff438c8febf356e04d86a981b1a50","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"e9d38360b914c8863f6cba3ee58764d3","SHA1":"4cba8eae47b6bf76f20b3504b98b8f062694a89b","SHA256":"88901d86a4cc1f1bb193d08e1fb63d27452e63f83e228c657ab1a92e4ade3976","SHA384":"e9f2a75334a9e336c5a4712eadee88d0374b0fdc273262f4e65c9040ad2793067cc076696db5279a478773485e285652"}},{"Subject":"C=KY, ST=Cayman Islands, L=George Town, O=Razer Inc., OU=Digital ID Class 3 , Microsoft Software Validation v2, CN=Razer Inc.","ValidFrom":"2013-09-13 00:00:00","ValidTo":"2016-08-02 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"4e4563adead3fedac7bd44ec5c590577","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"62e336c644b79eb95f869025a59a0814","SHA1":"a2f3feca99242c7df87dbe3676a64c4dba12b76b","SHA256":"3b43e76a05117b0ee9c87f7b98005a1a4b804d633660c8e3a43d342ba9184e1b","SHA384":"06fa6279fc3c74eade44518adb2b1c269e30736e11ff02f8e3b1f4a3e55a9f0b07ec215f9654d579c25c90627809182c"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. , For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority , G5","ValidFrom":"2011-02-22 19:25:17","ValidTo":"2021-02-22 19:35:17","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"611993e400000000001c","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"78a717e082dcc1cda3458d917e677d14","SHA1":"4a872e0e51f9b304469cd1dedb496ee9b8b983a4","SHA256":"317fa1d234ebc49040ebc5e8746f8997471496051b185a91bdd9dfbb23fab5f8","SHA384":"b71052da4eb9157c8c1a5d7f55df19d69b9128598b72fcca608e5b7cc7d64c43c5504b9c86355a6dc22ee40c88cc385c"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","ValidFrom":"2010-02-08 00:00:00","ValidTo":"2020-02-07 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"5200e5aa2556fc1a86ed96c9d44b33c7","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"b30c31a572b0409383ed3fbe17e56e81","SHA1":"4843a82ed3b1f2bfbee9671960e1940c942f688d","SHA256":"03cda47a6e654ed85d932714fc09ce4874600eda29ec6628cfbaeb155cab78c9","SHA384":"bbda8407c4f9fc4e54d772f1c7fb9d30bc97e1f97ecd51c443063d1fa0644e266328781776cd5c44896c457c75f4d7da"}}],"Signer":[{"SerialNumber":"4e4563adead3fedac7bd44ec5c590577","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","Version":1}]}],"Imphash":"dd7c5c0c762169d40ee01280e4ac74fc","LoadsDespiteHVCI":"FALSE"},{"Authentihash":{"MD5":"13d7aa7733e7db4e391dba54f3f4b61f","SHA1":"d466b8fa00d2fdd9834d5d3bafdf8cbc0ccf139c","SHA256":"bedb1e28fd1cdf391edc859c58cb318a9ab686f254195246909b245e7aaf7669"},"Company":"Razer, Inc.","Copyright":"Copyright (C) 2010-2018. Razer, Inc.","CreationTimestamp":"2018-03-19 14:54:13","Date":"","Description":"Razer Overlay Support","ExportedFunctions":"","FileVersion":"1.0.12.10201","Filename":"","ImportedFunctions":["IoAcquireCancelSpinLock","IoReleaseCancelSpinLock","ObReferenceObjectByHandle","ExFreePoolWithTag","ExAllocatePoolWithTag","KeAcquireGuardedMutex","KeReleaseGuardedMutex","RtlInitUnicodeString","IoCreateDevice","IoCreateSymbolicLink","PsGetCurrentProcessId","_wcslwr","wcsstr","PoStartNextPowerIrp","IoDeleteDevice","KeInitializeEvent","PsSetCreateProcessNotifyRoutine","PsSetCreateThreadNotifyRoutine","PsRemoveCreateThreadNotifyRoutine","ZwSetEvent","ZwClose","KeSetEvent","ZwWaitForSingleObject","_purecall","KeGetCurrentThread","sprintf","_vsnprintf","swprintf","PsLookupProcessByProcessId","PsReferencePrimaryToken","SeQueryInformationToken","RtlLengthRequiredSid","RtlInitializeSid","RtlSubAuthoritySid","RtlEqualSid","PsDereferencePrimaryToken","MmGetSystemRoutineAddress","MmIsAddressValid","KeStackAttachProcess","KeUnstackDetachProcess","wcsrchr","ZwOpenProcess","PsLookupThreadByThreadId","ObOpenObjectByPointer","PsThreadType","ZwCreateEvent","KeTickCount","KeBugCheckEx","ObfDereferenceObject","IofCompleteRequest","memcpy","memset","RtlUnwind","KfAcquireSpinLock","ExReleaseFastMutex","ExAcquireFastMutex","KfReleaseSpinLock"],"Imports":["ntoskrnl.exe","HAL.dll"],"InternalName":"Rzpnk","MD5":"f5e6ef0dcbb3d4a608e9e0bba4d80d0a","MachineType":"I386","MagicHeader":"50 45 0 0","OriginalFilename":"Rzpnk.sys","PDBPath":"","Product":"Rzpnk","ProductVersion":"1.0.12.10201","Publisher":"","RichPEHeaderHash":{"MD5":"74246c83ad31479ca2853d2303658a0b","SHA1":"52345554a866b72e0e63cad68915f73877138d99","SHA256":"03ea97d4e2a7432508634ad865d3ec46fc3bf05c92874ae57fb5cfeacced2b2b"},"SHA1":"58ebfb7de214ee09f6bf71c8cc9c139dd4c8b016","SHA256":"46d1dc89cc5fa327e7adf3e3d6d498657240772b85548c17d2e356aac193dd28","Sections":{".text":{"Entropy":6.1267659551337,"Virtual Size":"0x3888"},".rdata":{"Entropy":0.7774911680764585,"Virtual Size":"0x8b54"},".data":{"Entropy":0.16801126406945746,"Virtual Size":"0x308"},"PAGE":{"Entropy":4.345324837503696,"Virtual Size":"0x69"},"INIT":{"Entropy":5.5036715965307845,"Virtual Size":"0x61e"},".rsrc":{"Entropy":3.321864460423256,"Virtual Size":"0x348"},".reloc":{"Entropy":6.534717310120353,"Virtual Size":"0x3d8"}},"Signature":"","Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, ST=California, L=Irvine, O=Razer USA Ltd., CN=Razer USA Ltd.","ValidFrom":"2016-02-10 00:00:00","ValidTo":"2019-02-07 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":false,"SerialNumber":"1834b81889070312b5c4ca72ea419a5e","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"966e59fada7c527111ba61f0cafcb355","SHA1":"d72efbe2c9127b91fffcfa0825dc16c9f7580e44","SHA256":"506eaba716a689df7e0bb57b6f41afea02cce8c4af4d2392e96bd2e1bf483528","SHA384":"0edb1fa0ccc2600fcd37358eb158fae5b72cc13fd3ff6cd0518aa6c780377dd5a7e39145784d4b9c595f163be613f2f1"}},{"Subject":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 SHA256 Code Signing CA","ValidFrom":"2013-12-10 00:00:00","ValidTo":"2023-12-09 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":true,"SerialNumber":"3d78d7f9764960b2617df4f01eca862a","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"1f056ff7d5f874984dc605402b7cb042","SHA1":"bdb348353a2203deb4b767914fa1bd7248dd728b","SHA256":"a08e79c386083d875014c409c13d144e0a24386132980df11ff59737c8489eb1","SHA384":"fa2729064b49e0d77540c1ee95d5f74acaf8eaf55197851a3a40383335f8113e51190bc48b552196edf8ac5cf0c89278"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. , For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority , G5","ValidFrom":"2011-02-22 19:25:17","ValidTo":"2021-02-22 19:35:17","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"611993e400000000001c","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"78a717e082dcc1cda3458d917e677d14","SHA1":"4a872e0e51f9b304469cd1dedb496ee9b8b983a4","SHA256":"317fa1d234ebc49040ebc5e8746f8997471496051b185a91bdd9dfbb23fab5f8","SHA384":"b71052da4eb9157c8c1a5d7f55df19d69b9128598b72fcca608e5b7cc7d64c43c5504b9c86355a6dc22ee40c88cc385c"}}],"Signer":[{"SerialNumber":"1834b81889070312b5c4ca72ea419a5e","Issuer":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 SHA256 Code Signing CA","Version":1}]}],"Imphash":"d67b7c7501e5261df5e66b3219fa52ee","LoadsDespiteHVCI":"FALSE"},{"Authentihash":{"MD5":"49143ee3e5fc7193b0826428979792c8","SHA1":"2fa99a65d8992e07ac5af3a935861b493669d870","SHA256":"e269b4cb9df863c31ae13012429f67a0f3cd81481025d35ce6531b33b63b5976"},"Company":"Razer, Inc.","Copyright":"Copyright (C) 2010-2017. Razer, Inc.","CreationTimestamp":"2017-09-20 18:34:31","Date":"","Description":"Razer Overlay Support","ExportedFunctions":"","FileVersion":"1.0.12.10177","Filename":"","ImportedFunctions":["IoAcquireCancelSpinLock","IoReleaseCancelSpinLock","ObReferenceObjectByHandle","ExFreePoolWithTag","ExAllocatePoolWithTag","KeAcquireGuardedMutex","KeReleaseGuardedMutex","RtlInitUnicodeString","IoCreateDevice","IoCreateSymbolicLink","PsGetCurrentProcessId","_wcslwr","wcsstr","PoStartNextPowerIrp","IoDeleteDevice","KeInitializeEvent","PsSetCreateProcessNotifyRoutine","PsSetCreateThreadNotifyRoutine","PsRemoveCreateThreadNotifyRoutine","ZwSetEvent","ZwClose","KeSetEvent","ZwWaitForSingleObject","_purecall","sprintf","_vsnprintf","swprintf","PsLookupProcessByProcessId","PsReferencePrimaryToken","SeQueryInformationToken","RtlLengthRequiredSid","RtlInitializeSid","RtlSubAuthoritySid","RtlEqualSid","PsDereferencePrimaryToken","MmGetSystemRoutineAddress","MmIsAddressValid","KeStackAttachProcess","KeUnstackDetachProcess","wcsrchr","ZwOpenProcess","PsLookupThreadByThreadId","ObOpenObjectByPointer","PsThreadType","ZwCreateEvent","KeTickCount","KeBugCheckEx","ObfDereferenceObject","KeGetCurrentThread","IofCompleteRequest","memcpy","memset","RtlUnwind","KfAcquireSpinLock","ExReleaseFastMutex","ExAcquireFastMutex","KfReleaseSpinLock"],"Imports":["ntoskrnl.exe","HAL.dll"],"InternalName":"Rzpnk","MD5":"36527fdb70ed6f74b70a98129f82ad62","MachineType":"I386","MagicHeader":"50 45 0 0","OriginalFilename":"Rzpnk.sys","PDBPath":"","Product":"Rzpnk","ProductVersion":"1.0.12.10177","Publisher":"","RichPEHeaderHash":{"MD5":"4a9a353a14ee7f23eb41b8a45b487e20","SHA1":"6c6a81d70919694d3abe35859966f0d320d0b3a3","SHA256":"89faf986a8af825587e8da0861c420dad1d83ce6bb17589fd1d397352352159c"},"SHA1":"986c1fdfe7c9731f4de15680a475a72cf2245121","SHA256":"9fa120bda98633e30480d8475c9ac6637470c4ca7c63763560bf869138091b01","Sections":{".text":{"Entropy":6.128458524856704,"Virtual Size":"0x3878"},".rdata":{"Entropy":0.7781386812218317,"Virtual Size":"0x8b54"},".data":{"Entropy":0.16801126406945746,"Virtual Size":"0x308"},"PAGE":{"Entropy":4.455274446152897,"Virtual Size":"0x69"},"INIT":{"Entropy":5.513410336591057,"Virtual Size":"0x61e"},".rsrc":{"Entropy":3.331606785935212,"Virtual Size":"0x348"},".reloc":{"Entropy":6.56214856252232,"Virtual Size":"0x3d8"}},"Signature":"","Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, ST=California, L=Irvine, O=Razer USA Ltd., CN=Razer USA Ltd.","ValidFrom":"2016-02-10 00:00:00","ValidTo":"2019-02-07 23:59:59","Signature":"06b8b8ab165538f61a5033c866556c0dd5e0f3ccc78633965b7feb8b012f312c40d09a3916370efd6a1747fa6c39c0de0be5226f7de748d11854a396dfcdfb31bdf572c2fa2561204ea01d2a076a197f89b7cb084d4cdd2c788195309cd507be6847667b2c00b74d94f53291c03201e23c363928968cbe4596649a671458d82001d22205c3d4f6beb5405247d9ad1ad832c12a96e7e557426d8fc85b0069b512354557b7e2124305c0171df610bea39f8dabb973e3fec041fbce781db485d88fa826f74f0e0810e62b63615404c2daeaa354fa3c73baafcd5daca7146f3afee8c30cb257f6b25843c5df2317c1d05a619e86e843c081169e0dfd5036cd19f9ef","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":false,"SerialNumber":"1834b81889070312b5c4ca72ea419a5e","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"966e59fada7c527111ba61f0cafcb355","SHA1":"d72efbe2c9127b91fffcfa0825dc16c9f7580e44","SHA256":"506eaba716a689df7e0bb57b6f41afea02cce8c4af4d2392e96bd2e1bf483528","SHA384":"0edb1fa0ccc2600fcd37358eb158fae5b72cc13fd3ff6cd0518aa6c780377dd5a7e39145784d4b9c595f163be613f2f1"}},{"Subject":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 SHA256 Code Signing CA","ValidFrom":"2013-12-10 00:00:00","ValidTo":"2023-12-09 23:59:59","Signature":"13851a1e69a937f7a0bda4af7e1d6153fe9d8c5e0ca6751e781723ddfdec1a035539fb7195c7655aa78e30d2445a61db706fda2105c22e73ba49f1d193fe5dc9cd5e03e0899e3f741ed7f7388ba9d6cfbb352f3358a89256d1c84d3b82e6798416fc28b0b147f31da23eee87d9a67fa456a53fad842e29de7cbca8aaa33d0401eaba93a20e502229174c87e43a115fd6a425899b056b2fb4c9014c277b0bac190522a060153fdac9fb4d4c8ffb726777fd2794c7ba350e8849fe8dfd28af4a12bd0db39705de440c15fa362b03dcc15001f1a1115d14e5e2bd274b54be2b845e0fa6c374050aef97c38922b11f77f3bdcd43d4f14ca93fb58b84af64f2d01421","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":true,"SerialNumber":"3d78d7f9764960b2617df4f01eca862a","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"1f056ff7d5f874984dc605402b7cb042","SHA1":"bdb348353a2203deb4b767914fa1bd7248dd728b","SHA256":"a08e79c386083d875014c409c13d144e0a24386132980df11ff59737c8489eb1","SHA384":"fa2729064b49e0d77540c1ee95d5f74acaf8eaf55197851a3a40383335f8113e51190bc48b552196edf8ac5cf0c89278"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. , For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority , G5","ValidFrom":"2011-02-22 19:25:17","ValidTo":"2021-02-22 19:35:17","Signature":"812a82168c34672be503eb347b8ca2a3508af45586f11e8c8eae7dee0319ce72951848ad6211fd20fd3f4706015ae2e06f8c152c4e3c6a506c0b36a3cf7a0d9c42bc5cf819d560e369e6e22341678c6883762b8f93a32ab57fbe59fba9c9b2268fcaa2f3821b983e919527978661ee5b5d076bcd86a8e26580a8e215e2b2be23056aba0cf347934daca48c077939c061123a050d89a3ec9f578984fbecca7c47661491d8b60f195de6b84aacbc47c8714396e63220a5dc7786fd3ce38b71db7b9b03fcb71d3264eb1652a043a3fa2ead59924e7cc7f233424838513a7c38c71b242228401e1a461f17db18f7f027356cb863d9cdb9645d2ba55eefc629b4f2c7f821cc04ba57fd01b6abc667f9e7d3997ff4f522fa72f5fdff3a1c423aa1f98018a5ee8d1cd4669e4501feaaeefffb178f30f7f1cd29c59decb5d549003d85b8cbbb933a276a49c030ae66c9f723283276f9a48356c848ce5a96aaa0cc0cc47fb48e97af6de35427c39f86c0d6e473089705dbd054625e0348c2d59f7fa7668cd09db04fd4d3985f4b7ac97fb22952d01280c70f54b61e67cdc6a06c110384d34875e72afeb03b6e0a3aa66b769905a3f177686133144706fc537f52bd92145c4a246a678caf8d90aad0f679211b93267cc3ce1ebd883892ae45c6196a4950b305f8ae59378a6a250394b1598150e8ba8380b72335f476b9671d5918ad208d94","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"611993e400000000001c","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"78a717e082dcc1cda3458d917e677d14","SHA1":"4a872e0e51f9b304469cd1dedb496ee9b8b983a4","SHA256":"317fa1d234ebc49040ebc5e8746f8997471496051b185a91bdd9dfbb23fab5f8","SHA384":"b71052da4eb9157c8c1a5d7f55df19d69b9128598b72fcca608e5b7cc7d64c43c5504b9c86355a6dc22ee40c88cc385c"}}],"Signer":[{"SerialNumber":"1834b81889070312b5c4ca72ea419a5e","Issuer":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 SHA256 Code Signing CA","Version":1}]}],"Imphash":"7fb9382c0d754d5aac897d7a3e72b10c","LoadsDespiteHVCI":"FALSE"},{"Authentihash":{"MD5":"3b53b1da67c8917786be48c57c6a2db1","SHA1":"b2aac760470a4575bc0f6508179ed32d7c37a5d9","SHA256":"39789a159c1196255f1b6d83e23af4082fd4cffe2662e40b71631b4e2e4bc05d"},"Company":"Razer, Inc.","Copyright":"Copyright (C) 2010-2017. Razer, Inc.","CreationTimestamp":"2017-07-16 15:12:07","Date":"","Description":"Razer Overlay Support","ExportedFunctions":"","FileVersion":"1.0.12.10155","Filename":"","ImportedFunctions":["IofCompleteRequest","ObfDereferenceObject","ObfReferenceObject","KeClearEvent","KeWaitForSingleObject","IoAcquireCancelSpinLock","IoReleaseCancelSpinLock","ObReferenceObjectByHandle","ExEventObjectType","ExFreePoolWithTag","ExAllocatePoolWithTag","ExAcquireFastMutex","ExReleaseFastMutex","KeAcquireGuardedMutex","KeReleaseGuardedMutex","KeAcquireSpinLockRaiseToDpc","KeReleaseSpinLock","RtlInitUnicodeString","IoCreateDevice","IoCreateSymbolicLink","PoStartNextPowerIrp","ZwLoadDriver","IoGetDeviceObjectPointer","ZwUnloadDriver","IoAttachDeviceToDeviceStack","IoDeleteDevice","KeInitializeEvent","IofCallDriver","PoCallDriver","PsSetCreateProcessNotifyRoutine","PsSetCreateThreadNotifyRoutine","PsRemoveCreateThreadNotifyRoutine","ZwSetEvent","_wcslwr","wcsstr","ZwClose","KeSetEvent","ZwWaitForSingleObject","_purecall","sprintf","_vsnprintf","DbgPrint","swprintf","KeInitializeGuardedMutex","PsLookupProcessByProcessId","PsReferencePrimaryToken","SeQueryInformationToken","RtlLengthRequiredSid","RtlInitializeSid","RtlSubAuthoritySid","RtlEqualSid","PsDereferencePrimaryToken","MmGetSystemRoutineAddress","MmIsAddressValid","KeStackAttachProcess","KeUnstackDetachProcess","wcsrchr","ZwOpenProcess","PsLookupThreadByThreadId","ObOpenObjectByPointer","PsThreadType","ZwCreateEvent","PsGetCurrentProcessId","RtlInitString","RtlCompareString","ZwMapViewOfSection","ZwOpenProcessTokenEx","ZwQueryInformationToken","RtlSubAuthorityCountSid","KeBugCheckEx","__C_specific_handler"],"Imports":["ntoskrnl.exe"],"InternalName":"Rzpnk","MD5":"935a7df222f19ac532e831e6bf9e8e45","MachineType":"AMD64","MagicHeader":"50 45 0 0","OriginalFilename":"Rzpnk.sys","PDBPath":"","Product":"Rzpnk","ProductVersion":"1.0.12.10155","Publisher":"","RichPEHeaderHash":{"MD5":"ce0bfa21df06f7d3067953da829fe299","SHA1":"49f5fdf333898858dd7297603f3b2347a01e777d","SHA256":"c059cad135868369281fd57e51cf8d64ac50e012ce54e3efb9321d8b519bd2dd"},"SHA1":"a6aa7926aa46beaf9882a93053536b75ef2c7536","SHA256":"567809308cfb72d59b89364a6475f34a912d03889aa50866803ac3d0bf2c3270","Sections":{".text":{"Entropy":6.029813362546066,"Virtual Size":"0x797e"},".rdata":{"Entropy":2.1638565406792596,"Virtual Size":"0x1457c"},".data":{"Entropy":0.15812764646865457,"Virtual Size":"0x3e4"},".pdata":{"Entropy":4.86837045917237,"Virtual Size":"0xcf0"},"PAGE":{"Entropy":4.405262522641727,"Virtual Size":"0x87"},"INIT":{"Entropy":5.362469333828446,"Virtual Size":"0x8e8"},".rsrc":{"Entropy":3.3415370361058807,"Virtual Size":"0x348"},".reloc":{"Entropy":4.425570968528865,"Virtual Size":"0x8c"}},"Signature":"","Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, ST=California, L=Irvine, O=Razer USA Ltd., CN=Razer USA Ltd.","ValidFrom":"2016-02-10 00:00:00","ValidTo":"2019-02-07 23:59:59","Signature":"06b8b8ab165538f61a5033c866556c0dd5e0f3ccc78633965b7feb8b012f312c40d09a3916370efd6a1747fa6c39c0de0be5226f7de748d11854a396dfcdfb31bdf572c2fa2561204ea01d2a076a197f89b7cb084d4cdd2c788195309cd507be6847667b2c00b74d94f53291c03201e23c363928968cbe4596649a671458d82001d22205c3d4f6beb5405247d9ad1ad832c12a96e7e557426d8fc85b0069b512354557b7e2124305c0171df610bea39f8dabb973e3fec041fbce781db485d88fa826f74f0e0810e62b63615404c2daeaa354fa3c73baafcd5daca7146f3afee8c30cb257f6b25843c5df2317c1d05a619e86e843c081169e0dfd5036cd19f9ef","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":false,"SerialNumber":"1834b81889070312b5c4ca72ea419a5e","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"966e59fada7c527111ba61f0cafcb355","SHA1":"d72efbe2c9127b91fffcfa0825dc16c9f7580e44","SHA256":"506eaba716a689df7e0bb57b6f41afea02cce8c4af4d2392e96bd2e1bf483528","SHA384":"0edb1fa0ccc2600fcd37358eb158fae5b72cc13fd3ff6cd0518aa6c780377dd5a7e39145784d4b9c595f163be613f2f1"}},{"Subject":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 SHA256 Code Signing CA","ValidFrom":"2013-12-10 00:00:00","ValidTo":"2023-12-09 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":true,"SerialNumber":"3d78d7f9764960b2617df4f01eca862a","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"1f056ff7d5f874984dc605402b7cb042","SHA1":"bdb348353a2203deb4b767914fa1bd7248dd728b","SHA256":"a08e79c386083d875014c409c13d144e0a24386132980df11ff59737c8489eb1","SHA384":"fa2729064b49e0d77540c1ee95d5f74acaf8eaf55197851a3a40383335f8113e51190bc48b552196edf8ac5cf0c89278"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. , For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority , G5","ValidFrom":"2011-02-22 19:25:17","ValidTo":"2021-02-22 19:35:17","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"611993e400000000001c","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"78a717e082dcc1cda3458d917e677d14","SHA1":"4a872e0e51f9b304469cd1dedb496ee9b8b983a4","SHA256":"317fa1d234ebc49040ebc5e8746f8997471496051b185a91bdd9dfbb23fab5f8","SHA384":"b71052da4eb9157c8c1a5d7f55df19d69b9128598b72fcca608e5b7cc7d64c43c5504b9c86355a6dc22ee40c88cc385c"}}],"Signer":[{"SerialNumber":"1834b81889070312b5c4ca72ea419a5e","Issuer":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 SHA256 Code Signing CA","Version":1}]}],"Imphash":"6b7d4c6283b9b951b7b2f47a0c5be8c7","LoadsDespiteHVCI":"FALSE"},{"Authentihash":{"MD5":"428e1d8063028ac66be9501b5bccb038","SHA1":"e4e33d2ad37a0e7edf98f9384d0167dfaa540e77","SHA256":"af9c600edb134fb8f21d585bbf7d0a4d3f1b792b6dd104c10d38f220f47671f8"},"Company":"Razer, Inc.","Copyright":"Copyright (C) 2010-2014","CreationTimestamp":"2016-05-19 17:09:43","Date":"","Description":"Razer Overlay Support","ExportedFunctions":"","FileVersion":"1.0.12.9986","Filename":"","ImportedFunctions":["IofCompleteRequest","ObfDereferenceObject","ObfReferenceObject","KeClearEvent","KeWaitForSingleObject","IoAcquireCancelSpinLock","IoReleaseCancelSpinLock","ObReferenceObjectByHandle","ExEventObjectType","ExFreePoolWithTag","ExAllocatePoolWithTag","ExAcquireFastMutex","ExReleaseFastMutex","KeAcquireGuardedMutex","KeReleaseGuardedMutex","KeAcquireSpinLockRaiseToDpc","KeReleaseSpinLock","RtlInitUnicodeString","IoCreateDevice","IoCreateSymbolicLink","PoStartNextPowerIrp","ZwLoadDriver","IoGetDeviceObjectPointer","ZwUnloadDriver","IoAttachDeviceToDeviceStack","IoDeleteDevice","KeInitializeEvent","IofCallDriver","PoCallDriver","PsSetCreateProcessNotifyRoutine","PsSetCreateThreadNotifyRoutine","PsRemoveCreateThreadNotifyRoutine","ZwSetEvent","_wcslwr","wcsstr","ZwClose","KeSetEvent","ZwWaitForSingleObject","_purecall","sprintf","_vsnprintf","DbgPrint","swprintf","KeInitializeGuardedMutex","PsLookupProcessByProcessId","PsReferencePrimaryToken","SeQueryInformationToken","RtlLengthRequiredSid","RtlInitializeSid","RtlSubAuthoritySid","RtlEqualSid","PsDereferencePrimaryToken","MmGetSystemRoutineAddress","MmIsAddressValid","KeStackAttachProcess","KeUnstackDetachProcess","wcsrchr","ZwOpenProcess","PsLookupThreadByThreadId","ObOpenObjectByPointer","PsThreadType","ZwCreateEvent","PsGetCurrentProcessId","RtlInitString","RtlCompareString","ZwMapViewOfSection","KeBugCheckEx","__C_specific_handler"],"Imports":["ntoskrnl.exe"],"InternalName":"Rzpnk","MD5":"2229d5a9a92b62df4df9cf51f48436f7","MachineType":"AMD64","MagicHeader":"50 45 0 0","OriginalFilename":"Rzpnk.sys","PDBPath":"","Product":"Rzpnk","ProductVersion":"1.0.12.9986","Publisher":"","RichPEHeaderHash":{"MD5":"d95b83b1676185463804c7be60a5629a","SHA1":"1d9671d566106c909d9fb90ad6d433103705a06e","SHA256":"98a9df9ab526c9ccc780176b4ab4f0bdf1479789da7a463f76afa5ca5eeb57a8"},"SHA1":"63cf021c8662fa23ce3e4075a4f849431e473058","SHA256":"0507d893e3fd2917c81c1dc13ccb22ae5402ab6ca9fb8d89485010838050d08d","Sections":{".text":{"Entropy":6.019686004932245,"Virtual Size":"0x76de"},".rdata":{"Entropy":2.1425402181335667,"Virtual Size":"0x1441c"},".data":{"Entropy":0.15812764646865457,"Virtual Size":"0x3e4"},".pdata":{"Entropy":4.833106417422371,"Virtual Size":"0xc84"},"PAGE":{"Entropy":4.405262522641727,"Virtual Size":"0x87"},"INIT":{"Entropy":5.3460375261506305,"Virtual Size":"0x884"},".rsrc":{"Entropy":3.311949790337429,"Virtual Size":"0x328"},".reloc":{"Entropy":4.342739465022854,"Virtual Size":"0x94"}},"Signature":"","Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, ST=California, L=Irvine, O=Razer USA Ltd., CN=Razer USA Ltd.","ValidFrom":"2016-02-10 00:00:00","ValidTo":"2019-02-07 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":false,"SerialNumber":"1834b81889070312b5c4ca72ea419a5e","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"966e59fada7c527111ba61f0cafcb355","SHA1":"d72efbe2c9127b91fffcfa0825dc16c9f7580e44","SHA256":"506eaba716a689df7e0bb57b6f41afea02cce8c4af4d2392e96bd2e1bf483528","SHA384":"0edb1fa0ccc2600fcd37358eb158fae5b72cc13fd3ff6cd0518aa6c780377dd5a7e39145784d4b9c595f163be613f2f1"}},{"Subject":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 SHA256 Code Signing CA","ValidFrom":"2013-12-10 00:00:00","ValidTo":"2023-12-09 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":true,"SerialNumber":"3d78d7f9764960b2617df4f01eca862a","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"1f056ff7d5f874984dc605402b7cb042","SHA1":"bdb348353a2203deb4b767914fa1bd7248dd728b","SHA256":"a08e79c386083d875014c409c13d144e0a24386132980df11ff59737c8489eb1","SHA384":"fa2729064b49e0d77540c1ee95d5f74acaf8eaf55197851a3a40383335f8113e51190bc48b552196edf8ac5cf0c89278"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. , For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority , G5","ValidFrom":"2011-02-22 19:25:17","ValidTo":"2021-02-22 19:35:17","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"611993e400000000001c","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"78a717e082dcc1cda3458d917e677d14","SHA1":"4a872e0e51f9b304469cd1dedb496ee9b8b983a4","SHA256":"317fa1d234ebc49040ebc5e8746f8997471496051b185a91bdd9dfbb23fab5f8","SHA384":"b71052da4eb9157c8c1a5d7f55df19d69b9128598b72fcca608e5b7cc7d64c43c5504b9c86355a6dc22ee40c88cc385c"}}],"Signer":[{"SerialNumber":"1834b81889070312b5c4ca72ea419a5e","Issuer":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 SHA256 Code Signing CA","Version":1}]}],"Imphash":"e1ecbd956bd016618b07e7dddcaf6e60","LoadsDespiteHVCI":"FALSE"},{"Authentihash":{"MD5":"49143ee3e5fc7193b0826428979792c8","SHA1":"2fa99a65d8992e07ac5af3a935861b493669d870","SHA256":"e269b4cb9df863c31ae13012429f67a0f3cd81481025d35ce6531b33b63b5976"},"Company":"Razer, Inc.","Copyright":"Copyright (C) 2010-2017. Razer, Inc.","CreationTimestamp":"2017-09-20 18:34:31","Date":"","Description":"Razer Overlay Support","ExportedFunctions":"","FileVersion":"1.0.12.10177","Filename":"","ImportedFunctions":["IoAcquireCancelSpinLock","IoReleaseCancelSpinLock","ObReferenceObjectByHandle","ExFreePoolWithTag","ExAllocatePoolWithTag","KeAcquireGuardedMutex","KeReleaseGuardedMutex","RtlInitUnicodeString","IoCreateDevice","IoCreateSymbolicLink","PsGetCurrentProcessId","_wcslwr","wcsstr","PoStartNextPowerIrp","IoDeleteDevice","KeInitializeEvent","PsSetCreateProcessNotifyRoutine","PsSetCreateThreadNotifyRoutine","PsRemoveCreateThreadNotifyRoutine","ZwSetEvent","ZwClose","KeSetEvent","ZwWaitForSingleObject","_purecall","sprintf","_vsnprintf","swprintf","PsLookupProcessByProcessId","PsReferencePrimaryToken","SeQueryInformationToken","RtlLengthRequiredSid","RtlInitializeSid","RtlSubAuthoritySid","RtlEqualSid","PsDereferencePrimaryToken","MmGetSystemRoutineAddress","MmIsAddressValid","KeStackAttachProcess","KeUnstackDetachProcess","wcsrchr","ZwOpenProcess","PsLookupThreadByThreadId","ObOpenObjectByPointer","PsThreadType","ZwCreateEvent","KeTickCount","KeBugCheckEx","ObfDereferenceObject","KeGetCurrentThread","IofCompleteRequest","memcpy","memset","RtlUnwind","KfAcquireSpinLock","ExReleaseFastMutex","ExAcquireFastMutex","KfReleaseSpinLock"],"Imports":["ntoskrnl.exe","HAL.dll"],"InternalName":"Rzpnk","MD5":"1c9d2a993e99054050b596d88b307d95","MachineType":"I386","MagicHeader":"50 45 0 0","OriginalFilename":"Rzpnk.sys","PDBPath":"","Product":"Rzpnk","ProductVersion":"1.0.12.10177","Publisher":"","RichPEHeaderHash":{"MD5":"4a9a353a14ee7f23eb41b8a45b487e20","SHA1":"6c6a81d70919694d3abe35859966f0d320d0b3a3","SHA256":"89faf986a8af825587e8da0861c420dad1d83ce6bb17589fd1d397352352159c"},"SHA1":"6293ff11805cd33bccbcca9f0132bff3ae2e2534","SHA256":"9eba5d1545fdbf37cf053ac3f3ba45bcb651b8abb7805cbfdfb5f91ea294fb95","Sections":{".text":{"Entropy":6.128458524856704,"Virtual Size":"0x3878"},".rdata":{"Entropy":0.7781386812218317,"Virtual Size":"0x8b54"},".data":{"Entropy":0.16801126406945746,"Virtual Size":"0x308"},"PAGE":{"Entropy":4.455274446152897,"Virtual Size":"0x69"},"INIT":{"Entropy":5.513410336591057,"Virtual Size":"0x61e"},".rsrc":{"Entropy":3.331606785935212,"Virtual Size":"0x348"},".reloc":{"Entropy":6.56214856252232,"Virtual Size":"0x3d8"}},"Signature":"","Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, ST=California, L=Irvine, O=Razer USA Ltd., CN=Razer USA Ltd.","ValidFrom":"2016-02-10 00:00:00","ValidTo":"2019-02-07 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":false,"SerialNumber":"1834b81889070312b5c4ca72ea419a5e","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"966e59fada7c527111ba61f0cafcb355","SHA1":"d72efbe2c9127b91fffcfa0825dc16c9f7580e44","SHA256":"506eaba716a689df7e0bb57b6f41afea02cce8c4af4d2392e96bd2e1bf483528","SHA384":"0edb1fa0ccc2600fcd37358eb158fae5b72cc13fd3ff6cd0518aa6c780377dd5a7e39145784d4b9c595f163be613f2f1"}},{"Subject":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 SHA256 Code Signing CA","ValidFrom":"2013-12-10 00:00:00","ValidTo":"2023-12-09 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":true,"SerialNumber":"3d78d7f9764960b2617df4f01eca862a","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"1f056ff7d5f874984dc605402b7cb042","SHA1":"bdb348353a2203deb4b767914fa1bd7248dd728b","SHA256":"a08e79c386083d875014c409c13d144e0a24386132980df11ff59737c8489eb1","SHA384":"fa2729064b49e0d77540c1ee95d5f74acaf8eaf55197851a3a40383335f8113e51190bc48b552196edf8ac5cf0c89278"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. , For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority , G5","ValidFrom":"2011-02-22 19:25:17","ValidTo":"2021-02-22 19:35:17","Signature":"812a82168c34672be503eb347b8ca2a3508af45586f11e8c8eae7dee0319ce72951848ad6211fd20fd3f4706015ae2e06f8c152c4e3c6a506c0b36a3cf7a0d9c42bc5cf819d560e369e6e22341678c6883762b8f93a32ab57fbe59fba9c9b2268fcaa2f3821b983e919527978661ee5b5d076bcd86a8e26580a8e215e2b2be23056aba0cf347934daca48c077939c061123a050d89a3ec9f578984fbecca7c47661491d8b60f195de6b84aacbc47c8714396e63220a5dc7786fd3ce38b71db7b9b03fcb71d3264eb1652a043a3fa2ead59924e7cc7f233424838513a7c38c71b242228401e1a461f17db18f7f027356cb863d9cdb9645d2ba55eefc629b4f2c7f821cc04ba57fd01b6abc667f9e7d3997ff4f522fa72f5fdff3a1c423aa1f98018a5ee8d1cd4669e4501feaaeefffb178f30f7f1cd29c59decb5d549003d85b8cbbb933a276a49c030ae66c9f723283276f9a48356c848ce5a96aaa0cc0cc47fb48e97af6de35427c39f86c0d6e473089705dbd054625e0348c2d59f7fa7668cd09db04fd4d3985f4b7ac97fb22952d01280c70f54b61e67cdc6a06c110384d34875e72afeb03b6e0a3aa66b769905a3f177686133144706fc537f52bd92145c4a246a678caf8d90aad0f679211b93267cc3ce1ebd883892ae45c6196a4950b305f8ae59378a6a250394b1598150e8ba8380b72335f476b9671d5918ad208d94","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"611993e400000000001c","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"78a717e082dcc1cda3458d917e677d14","SHA1":"4a872e0e51f9b304469cd1dedb496ee9b8b983a4","SHA256":"317fa1d234ebc49040ebc5e8746f8997471496051b185a91bdd9dfbb23fab5f8","SHA384":"b71052da4eb9157c8c1a5d7f55df19d69b9128598b72fcca608e5b7cc7d64c43c5504b9c86355a6dc22ee40c88cc385c"}}],"Signer":[{"SerialNumber":"1834b81889070312b5c4ca72ea419a5e","Issuer":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 SHA256 Code Signing CA","Version":1}]}],"Imphash":"7fb9382c0d754d5aac897d7a3e72b10c","LoadsDespiteHVCI":"FALSE"},{"Authentihash":{"MD5":"4b6d5f6c61c9820aaf6dd10acbcc8385","SHA1":"1ac31466261a6da69fbeb8e99d0b7b772071ac7f","SHA256":"d2e10e17bca5e85e6b84345b47aab14adf45d98c672db6acf90479a7faf20b5a"},"Company":"Razer, Inc.","Copyright":"Copyright (C) 2010-2014","CreationTimestamp":"2015-09-16 20:16:35","Date":"","Description":"Razer Overlay Support","ExportedFunctions":"","FileVersion":"1.0.12.7465","Filename":"","ImportedFunctions":["IofCompleteRequest","ObfDereferenceObject","ObfReferenceObject","KeClearEvent","KeWaitForSingleObject","IoAcquireCancelSpinLock","IoReleaseCancelSpinLock","ObReferenceObjectByHandle","ExEventObjectType","ExFreePoolWithTag","ExAllocatePoolWithTag","ExAcquireFastMutex","ExReleaseFastMutex","KeAcquireGuardedMutex","KeReleaseGuardedMutex","KeAcquireSpinLockRaiseToDpc","KeReleaseSpinLock","RtlInitUnicodeString","IoCreateDevice","IoCreateSymbolicLink","PoStartNextPowerIrp","ZwLoadDriver","IoGetDeviceObjectPointer","ZwUnloadDriver","IoAttachDeviceToDeviceStack","IoDeleteDevice","KeInitializeEvent","IofCallDriver","PoCallDriver","PsSetCreateProcessNotifyRoutine","PsSetCreateThreadNotifyRoutine","PsRemoveCreateThreadNotifyRoutine","ZwSetEvent","_wcslwr","wcsstr","ZwClose","KeSetEvent","ZwWaitForSingleObject","_purecall","sprintf","_vsnprintf","DbgPrint","swprintf","KeInitializeGuardedMutex","PsLookupProcessByProcessId","PsReferencePrimaryToken","SeQueryInformationToken","RtlLengthRequiredSid","RtlInitializeSid","RtlSubAuthoritySid","RtlEqualSid","PsDereferencePrimaryToken","MmGetSystemRoutineAddress","MmIsAddressValid","KeStackAttachProcess","KeUnstackDetachProcess","wcsrchr","ZwOpenProcess","PsLookupThreadByThreadId","ObOpenObjectByPointer","PsThreadType","ZwCreateEvent","PsGetCurrentProcessId","RtlInitString","RtlCompareString","ZwMapViewOfSection","KeBugCheckEx","__C_specific_handler"],"Imports":["ntoskrnl.exe"],"InternalName":"Rzpnk","MD5":"b4598c05d5440250633e25933fff42b0","MachineType":"AMD64","MagicHeader":"50 45 0 0","OriginalFilename":"Rzpnk.sys","PDBPath":"","Product":"Rzpnk","ProductVersion":"1.0.12.7465","Publisher":"","RichPEHeaderHash":{"MD5":"d95b83b1676185463804c7be60a5629a","SHA1":"1d9671d566106c909d9fb90ad6d433103705a06e","SHA256":"98a9df9ab526c9ccc780176b4ab4f0bdf1479789da7a463f76afa5ca5eeb57a8"},"SHA1":"f999709e5b00a68a0f4fa912619fe6548ad0c42d","SHA256":"a66d2fb7ef7350ea74d4290c57fb62bc59c6ea93f759d4ca93c3febca7aeb512","Sections":{".text":{"Entropy":6.022819869183744,"Virtual Size":"0x786e"},".rdata":{"Entropy":2.156441781870166,"Virtual Size":"0x144fc"},".data":{"Entropy":0.15812764646865457,"Virtual Size":"0x3e4"},".pdata":{"Entropy":4.83123136246416,"Virtual Size":"0xcb4"},"PAGE":{"Entropy":4.405262522641727,"Virtual Size":"0x87"},"INIT":{"Entropy":5.345466868963517,"Virtual Size":"0x884"},".rsrc":{"Entropy":3.3229086430258863,"Virtual Size":"0x328"},".reloc":{"Entropy":4.404219521463952,"Virtual Size":"0x94"}},"Signature":"","Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA , G2","ValidFrom":"2012-12-21 00:00:00","ValidTo":"2020-12-30 23:59:59","Signature":"03099b8f79ef7f5930aaef68b5fae3091dbb4f82065d375fa6529f168dea1c9209446ef56deb587c30e8f9698d23730b126f47a9ae3911f82ab19bb01ac38eeb599600adce0c4db2d031a6085c2a7afce27a1d574ca86518e979406225966ec7c7376a8321088e41eaddd9573f1d7749872a16065ea6386a2212a35119837eb6","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"7e93ebfb7cc64e59ea4b9a77d406fc3b","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"d0785ad36e427c92b19f6826ab1e8020","SHA1":"365b7a9c21bd9373e49052c3e7b3e4646ddd4d43","SHA256":"c2abb7484da91a658548de089d52436175fdb760a1387d225611dc0613a1e2ff","SHA384":"eab4fe5ef90e0de4a6aa3a27769a5e879f588df5e4785aa4104debd1f81e19ea56d33e3a16e5facf99f68b5d8e3d287b"}},{"Subject":"C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer , G4","ValidFrom":"2012-10-18 00:00:00","ValidTo":"2020-12-29 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"0ecff438c8febf356e04d86a981b1a50","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"e9d38360b914c8863f6cba3ee58764d3","SHA1":"4cba8eae47b6bf76f20b3504b98b8f062694a89b","SHA256":"88901d86a4cc1f1bb193d08e1fb63d27452e63f83e228c657ab1a92e4ade3976","SHA384":"e9f2a75334a9e336c5a4712eadee88d0374b0fdc273262f4e65c9040ad2793067cc076696db5279a478773485e285652"}},{"Subject":"C=KY, ST=Cayman Islands, L=George Town, O=Razer Inc., OU=Digital ID Class 3 , Microsoft Software Validation v2, CN=Razer Inc.","ValidFrom":"2013-09-13 00:00:00","ValidTo":"2016-08-02 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"4e4563adead3fedac7bd44ec5c590577","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"62e336c644b79eb95f869025a59a0814","SHA1":"a2f3feca99242c7df87dbe3676a64c4dba12b76b","SHA256":"3b43e76a05117b0ee9c87f7b98005a1a4b804d633660c8e3a43d342ba9184e1b","SHA384":"06fa6279fc3c74eade44518adb2b1c269e30736e11ff02f8e3b1f4a3e55a9f0b07ec215f9654d579c25c90627809182c"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. , For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority , G5","ValidFrom":"2011-02-22 19:25:17","ValidTo":"2021-02-22 19:35:17","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"611993e400000000001c","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"78a717e082dcc1cda3458d917e677d14","SHA1":"4a872e0e51f9b304469cd1dedb496ee9b8b983a4","SHA256":"317fa1d234ebc49040ebc5e8746f8997471496051b185a91bdd9dfbb23fab5f8","SHA384":"b71052da4eb9157c8c1a5d7f55df19d69b9128598b72fcca608e5b7cc7d64c43c5504b9c86355a6dc22ee40c88cc385c"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","ValidFrom":"2010-02-08 00:00:00","ValidTo":"2020-02-07 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"5200e5aa2556fc1a86ed96c9d44b33c7","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"b30c31a572b0409383ed3fbe17e56e81","SHA1":"4843a82ed3b1f2bfbee9671960e1940c942f688d","SHA256":"03cda47a6e654ed85d932714fc09ce4874600eda29ec6628cfbaeb155cab78c9","SHA384":"bbda8407c4f9fc4e54d772f1c7fb9d30bc97e1f97ecd51c443063d1fa0644e266328781776cd5c44896c457c75f4d7da"}}],"Signer":[{"SerialNumber":"4e4563adead3fedac7bd44ec5c590577","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","Version":1}]}],"Imphash":"e1ecbd956bd016618b07e7dddcaf6e60","LoadsDespiteHVCI":"FALSE"},{"Authentihash":{"MD5":"870f5888401c299ad7b0cacabd53edc2","SHA1":"fb21a2be31b336ac5da2f69c93c4ff4f8fe30a42","SHA256":"def61560c0650717cb1da923f0d674b363b8f2051247719b34f06744bbb79000"},"Company":"Razer, Inc.","Copyright":"Copyright (C) 2010-2014","CreationTimestamp":"2015-09-16 20:15:26","Date":"","Description":"Razer Overlay Support","ExportedFunctions":"","FileVersion":"1.0.12.7465","Filename":"","ImportedFunctions":["IoAcquireCancelSpinLock","IoReleaseCancelSpinLock","ObReferenceObjectByHandle","ExFreePoolWithTag","ExAllocatePoolWithTag","KeAcquireGuardedMutex","KeReleaseGuardedMutex","RtlInitUnicodeString","IoCreateDevice","IoCreateSymbolicLink","PoStartNextPowerIrp","IoDeleteDevice","KeInitializeEvent","PsSetCreateProcessNotifyRoutine","PsSetCreateThreadNotifyRoutine","PsRemoveCreateThreadNotifyRoutine","ZwSetEvent","_wcslwr","wcsstr","ZwClose","KeSetEvent","ZwWaitForSingleObject","_purecall","KeGetCurrentThread","sprintf","_vsnprintf","swprintf","PsLookupProcessByProcessId","PsReferencePrimaryToken","SeQueryInformationToken","RtlLengthRequiredSid","RtlInitializeSid","RtlSubAuthoritySid","RtlEqualSid","PsDereferencePrimaryToken","MmGetSystemRoutineAddress","MmIsAddressValid","KeStackAttachProcess","KeUnstackDetachProcess","wcsrchr","ZwOpenProcess","PsLookupThreadByThreadId","ObOpenObjectByPointer","PsThreadType","ZwCreateEvent","PsGetCurrentProcessId","ZwMapViewOfSection","KeTickCount","KeBugCheckEx","ObfDereferenceObject","IofCompleteRequest","memcpy","memset","RtlUnwind","KfAcquireSpinLock","ExReleaseFastMutex","ExAcquireFastMutex","KfReleaseSpinLock"],"Imports":["ntoskrnl.exe","HAL.dll"],"InternalName":"Rzpnk","MD5":"0d8daf471d871deb90225d2953c0eb95","MachineType":"I386","MagicHeader":"50 45 0 0","OriginalFilename":"Rzpnk.sys","PDBPath":"","Product":"Rzpnk","ProductVersion":"1.0.12.7465","Publisher":"","RichPEHeaderHash":{"MD5":"c723c2141747136a803cc8d5df9b0e9c","SHA1":"ab3959e0fa2376ebca63456374e4454a4d711ec1","SHA256":"4d91707d4f7a8f5cbedd69ff24b76a642fe430fa85657e0622340935b9806df5"},"SHA1":"f0d6b0bcd5f47b41d3c3192e244314d99d1df409","SHA256":"9724488ca2ba4c787640c49131f4d1daae5bd47d6b2e7e5f9e8918b1d6f655be","Sections":{".text":{"Entropy":6.147790168427177,"Virtual Size":"0x3820"},".rdata":{"Entropy":0.7852972442434865,"Virtual Size":"0x8b54"},".data":{"Entropy":0.16801126406945746,"Virtual Size":"0x308"},"PAGE":{"Entropy":4.462463850935407,"Virtual Size":"0x69"},"INIT":{"Entropy":5.522612592290352,"Virtual Size":"0x638"},".rsrc":{"Entropy":3.3171115841441816,"Virtual Size":"0x328"},".reloc":{"Entropy":6.493689021459392,"Virtual Size":"0x3ec"}},"Signature":"","Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA , G2","ValidFrom":"2012-12-21 00:00:00","ValidTo":"2020-12-30 23:59:59","Signature":"03099b8f79ef7f5930aaef68b5fae3091dbb4f82065d375fa6529f168dea1c9209446ef56deb587c30e8f9698d23730b126f47a9ae3911f82ab19bb01ac38eeb599600adce0c4db2d031a6085c2a7afce27a1d574ca86518e979406225966ec7c7376a8321088e41eaddd9573f1d7749872a16065ea6386a2212a35119837eb6","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"7e93ebfb7cc64e59ea4b9a77d406fc3b","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"d0785ad36e427c92b19f6826ab1e8020","SHA1":"365b7a9c21bd9373e49052c3e7b3e4646ddd4d43","SHA256":"c2abb7484da91a658548de089d52436175fdb760a1387d225611dc0613a1e2ff","SHA384":"eab4fe5ef90e0de4a6aa3a27769a5e879f588df5e4785aa4104debd1f81e19ea56d33e3a16e5facf99f68b5d8e3d287b"}},{"Subject":"C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer , G4","ValidFrom":"2012-10-18 00:00:00","ValidTo":"2020-12-29 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"0ecff438c8febf356e04d86a981b1a50","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"e9d38360b914c8863f6cba3ee58764d3","SHA1":"4cba8eae47b6bf76f20b3504b98b8f062694a89b","SHA256":"88901d86a4cc1f1bb193d08e1fb63d27452e63f83e228c657ab1a92e4ade3976","SHA384":"e9f2a75334a9e336c5a4712eadee88d0374b0fdc273262f4e65c9040ad2793067cc076696db5279a478773485e285652"}},{"Subject":"C=KY, ST=Cayman Islands, L=George Town, O=Razer Inc., OU=Digital ID Class 3 , Microsoft Software Validation v2, CN=Razer Inc.","ValidFrom":"2013-09-13 00:00:00","ValidTo":"2016-08-02 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"4e4563adead3fedac7bd44ec5c590577","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"62e336c644b79eb95f869025a59a0814","SHA1":"a2f3feca99242c7df87dbe3676a64c4dba12b76b","SHA256":"3b43e76a05117b0ee9c87f7b98005a1a4b804d633660c8e3a43d342ba9184e1b","SHA384":"06fa6279fc3c74eade44518adb2b1c269e30736e11ff02f8e3b1f4a3e55a9f0b07ec215f9654d579c25c90627809182c"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. , For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority , G5","ValidFrom":"2011-02-22 19:25:17","ValidTo":"2021-02-22 19:35:17","Signature":"812a82168c34672be503eb347b8ca2a3508af45586f11e8c8eae7dee0319ce72951848ad6211fd20fd3f4706015ae2e06f8c152c4e3c6a506c0b36a3cf7a0d9c42bc5cf819d560e369e6e22341678c6883762b8f93a32ab57fbe59fba9c9b2268fcaa2f3821b983e919527978661ee5b5d076bcd86a8e26580a8e215e2b2be23056aba0cf347934daca48c077939c061123a050d89a3ec9f578984fbecca7c47661491d8b60f195de6b84aacbc47c8714396e63220a5dc7786fd3ce38b71db7b9b03fcb71d3264eb1652a043a3fa2ead59924e7cc7f233424838513a7c38c71b242228401e1a461f17db18f7f027356cb863d9cdb9645d2ba55eefc629b4f2c7f821cc04ba57fd01b6abc667f9e7d3997ff4f522fa72f5fdff3a1c423aa1f98018a5ee8d1cd4669e4501feaaeefffb178f30f7f1cd29c59decb5d549003d85b8cbbb933a276a49c030ae66c9f723283276f9a48356c848ce5a96aaa0cc0cc47fb48e97af6de35427c39f86c0d6e473089705dbd054625e0348c2d59f7fa7668cd09db04fd4d3985f4b7ac97fb22952d01280c70f54b61e67cdc6a06c110384d34875e72afeb03b6e0a3aa66b769905a3f177686133144706fc537f52bd92145c4a246a678caf8d90aad0f679211b93267cc3ce1ebd883892ae45c6196a4950b305f8ae59378a6a250394b1598150e8ba8380b72335f476b9671d5918ad208d94","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"611993e400000000001c","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"78a717e082dcc1cda3458d917e677d14","SHA1":"4a872e0e51f9b304469cd1dedb496ee9b8b983a4","SHA256":"317fa1d234ebc49040ebc5e8746f8997471496051b185a91bdd9dfbb23fab5f8","SHA384":"b71052da4eb9157c8c1a5d7f55df19d69b9128598b72fcca608e5b7cc7d64c43c5504b9c86355a6dc22ee40c88cc385c"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","ValidFrom":"2010-02-08 00:00:00","ValidTo":"2020-02-07 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"5200e5aa2556fc1a86ed96c9d44b33c7","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"b30c31a572b0409383ed3fbe17e56e81","SHA1":"4843a82ed3b1f2bfbee9671960e1940c942f688d","SHA256":"03cda47a6e654ed85d932714fc09ce4874600eda29ec6628cfbaeb155cab78c9","SHA384":"bbda8407c4f9fc4e54d772f1c7fb9d30bc97e1f97ecd51c443063d1fa0644e266328781776cd5c44896c457c75f4d7da"}}],"Signer":[{"SerialNumber":"4e4563adead3fedac7bd44ec5c590577","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","Version":1}]}],"Imphash":"cc335217d6f7ab7a53dcfa55cbda5fb0","LoadsDespiteHVCI":"FALSE"},{"Authentihash":{"MD5":"13d7aa7733e7db4e391dba54f3f4b61f","SHA1":"d466b8fa00d2fdd9834d5d3bafdf8cbc0ccf139c","SHA256":"bedb1e28fd1cdf391edc859c58cb318a9ab686f254195246909b245e7aaf7669"},"Company":"Razer, Inc.","Copyright":"Copyright (C) 2010-2018. Razer, Inc.","CreationTimestamp":"2018-03-19 14:54:13","Date":"","Description":"Razer Overlay Support","ExportedFunctions":"","FileVersion":"1.0.12.10201","Filename":"","ImportedFunctions":["IoAcquireCancelSpinLock","IoReleaseCancelSpinLock","ObReferenceObjectByHandle","ExFreePoolWithTag","ExAllocatePoolWithTag","KeAcquireGuardedMutex","KeReleaseGuardedMutex","RtlInitUnicodeString","IoCreateDevice","IoCreateSymbolicLink","PsGetCurrentProcessId","_wcslwr","wcsstr","PoStartNextPowerIrp","IoDeleteDevice","KeInitializeEvent","PsSetCreateProcessNotifyRoutine","PsSetCreateThreadNotifyRoutine","PsRemoveCreateThreadNotifyRoutine","ZwSetEvent","ZwClose","KeSetEvent","ZwWaitForSingleObject","_purecall","KeGetCurrentThread","sprintf","_vsnprintf","swprintf","PsLookupProcessByProcessId","PsReferencePrimaryToken","SeQueryInformationToken","RtlLengthRequiredSid","RtlInitializeSid","RtlSubAuthoritySid","RtlEqualSid","PsDereferencePrimaryToken","MmGetSystemRoutineAddress","MmIsAddressValid","KeStackAttachProcess","KeUnstackDetachProcess","wcsrchr","ZwOpenProcess","PsLookupThreadByThreadId","ObOpenObjectByPointer","PsThreadType","ZwCreateEvent","KeTickCount","KeBugCheckEx","ObfDereferenceObject","IofCompleteRequest","memcpy","memset","RtlUnwind","KfAcquireSpinLock","ExReleaseFastMutex","ExAcquireFastMutex","KfReleaseSpinLock"],"Imports":["ntoskrnl.exe","HAL.dll"],"InternalName":"Rzpnk","MD5":"3c1f92a1386fa6cf1ba51bae5e9a98dd","MachineType":"I386","MagicHeader":"50 45 0 0","OriginalFilename":"Rzpnk.sys","PDBPath":"","Product":"Rzpnk","ProductVersion":"1.0.12.10201","Publisher":"","RichPEHeaderHash":{"MD5":"74246c83ad31479ca2853d2303658a0b","SHA1":"52345554a866b72e0e63cad68915f73877138d99","SHA256":"03ea97d4e2a7432508634ad865d3ec46fc3bf05c92874ae57fb5cfeacced2b2b"},"SHA1":"d083e69055556a36df7c6e02115cbbf90726f35c","SHA256":"4c2d2122ef7a100e1651f2ec50528c0d1a2b8a71c075461f0dc58a1aca36bc61","Sections":{".text":{"Entropy":6.1267659551337,"Virtual Size":"0x3888"},".rdata":{"Entropy":0.7774911680764585,"Virtual Size":"0x8b54"},".data":{"Entropy":0.16801126406945746,"Virtual Size":"0x308"},"PAGE":{"Entropy":4.345324837503696,"Virtual Size":"0x69"},"INIT":{"Entropy":5.5036715965307845,"Virtual Size":"0x61e"},".rsrc":{"Entropy":3.321864460423256,"Virtual Size":"0x348"},".reloc":{"Entropy":6.534717310120353,"Virtual Size":"0x3d8"}},"Signature":"","Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, ST=California, L=Irvine, O=Razer USA Ltd., CN=Razer USA Ltd.","ValidFrom":"2016-02-10 00:00:00","ValidTo":"2019-02-07 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":false,"SerialNumber":"1834b81889070312b5c4ca72ea419a5e","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"966e59fada7c527111ba61f0cafcb355","SHA1":"d72efbe2c9127b91fffcfa0825dc16c9f7580e44","SHA256":"506eaba716a689df7e0bb57b6f41afea02cce8c4af4d2392e96bd2e1bf483528","SHA384":"0edb1fa0ccc2600fcd37358eb158fae5b72cc13fd3ff6cd0518aa6c780377dd5a7e39145784d4b9c595f163be613f2f1"}},{"Subject":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 SHA256 Code Signing CA","ValidFrom":"2013-12-10 00:00:00","ValidTo":"2023-12-09 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":true,"SerialNumber":"3d78d7f9764960b2617df4f01eca862a","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"1f056ff7d5f874984dc605402b7cb042","SHA1":"bdb348353a2203deb4b767914fa1bd7248dd728b","SHA256":"a08e79c386083d875014c409c13d144e0a24386132980df11ff59737c8489eb1","SHA384":"fa2729064b49e0d77540c1ee95d5f74acaf8eaf55197851a3a40383335f8113e51190bc48b552196edf8ac5cf0c89278"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. , For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority , G5","ValidFrom":"2011-02-22 19:25:17","ValidTo":"2021-02-22 19:35:17","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"611993e400000000001c","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"78a717e082dcc1cda3458d917e677d14","SHA1":"4a872e0e51f9b304469cd1dedb496ee9b8b983a4","SHA256":"317fa1d234ebc49040ebc5e8746f8997471496051b185a91bdd9dfbb23fab5f8","SHA384":"b71052da4eb9157c8c1a5d7f55df19d69b9128598b72fcca608e5b7cc7d64c43c5504b9c86355a6dc22ee40c88cc385c"}}],"Signer":[{"SerialNumber":"1834b81889070312b5c4ca72ea419a5e","Issuer":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 SHA256 Code Signing CA","Version":1}]}],"Imphash":"d67b7c7501e5261df5e66b3219fa52ee","LoadsDespiteHVCI":"FALSE"},{"Authentihash":{"MD5":"76934be6e996e801ea4d68c504d427c3","SHA1":"b2e03d9e602a6026f45c08b686c6810abd43bfac","SHA256":"982ad43111d8b7a7900df652c8873eeb6aa485bb429dee6c2ad44acf598bb5e6"},"Company":"Razer, Inc.","Copyright":"Copyright (C) 2010-2017. Razer, Inc.","CreationTimestamp":"2017-07-16 15:10:48","Date":"","Description":"Razer Overlay Support","ExportedFunctions":"","FileVersion":"1.0.12.10155","Filename":"","ImportedFunctions":["IoAcquireCancelSpinLock","IoReleaseCancelSpinLock","ObReferenceObjectByHandle","ExFreePoolWithTag","ExAllocatePoolWithTag","KeAcquireGuardedMutex","KeReleaseGuardedMutex","RtlInitUnicodeString","IoCreateDevice","IoCreateSymbolicLink","PoStartNextPowerIrp","IoDeleteDevice","KeInitializeEvent","PsSetCreateProcessNotifyRoutine","PsSetCreateThreadNotifyRoutine","PsRemoveCreateThreadNotifyRoutine","ZwSetEvent","_wcslwr","wcsstr","ZwClose","KeSetEvent","ZwWaitForSingleObject","_purecall","KeGetCurrentThread","_vsnprintf","swprintf","PsLookupProcessByProcessId","PsReferencePrimaryToken","SeQueryInformationToken","RtlLengthRequiredSid","RtlInitializeSid","RtlSubAuthoritySid","RtlEqualSid","PsDereferencePrimaryToken","MmGetSystemRoutineAddress","MmIsAddressValid","KeStackAttachProcess","KeUnstackDetachProcess","wcsrchr","ZwOpenProcess","PsLookupThreadByThreadId","ObOpenObjectByPointer","PsThreadType","ZwCreateEvent","PsGetCurrentProcessId","ZwOpenProcessTokenEx","ZwQueryInformationToken","RtlSubAuthorityCountSid","KeTickCount","KeBugCheckEx","ObfDereferenceObject","sprintf","IofCompleteRequest","memcpy","memset","RtlUnwind","KfAcquireSpinLock","ExReleaseFastMutex","ExAcquireFastMutex","KfReleaseSpinLock"],"Imports":["ntoskrnl.exe","HAL.dll"],"InternalName":"Rzpnk","MD5":"2e7d824a49d731da9fc96262a29c85ce","MachineType":"I386","MagicHeader":"50 45 0 0","OriginalFilename":"Rzpnk.sys","PDBPath":"","Product":"Rzpnk","ProductVersion":"1.0.12.10155","Publisher":"","RichPEHeaderHash":{"MD5":"4a9a353a14ee7f23eb41b8a45b487e20","SHA1":"6c6a81d70919694d3abe35859966f0d320d0b3a3","SHA256":"89faf986a8af825587e8da0861c420dad1d83ce6bb17589fd1d397352352159c"},"SHA1":"a4e2e227f984f344d48f4bf088ca9d020c63db4e","SHA256":"2665d3127ddd9411af38a255787a4e2483d720aa021be8d6418e071da52ed266","Sections":{".text":{"Entropy":6.13737056754944,"Virtual Size":"0x3870"},".rdata":{"Entropy":0.7745929346692745,"Virtual Size":"0x8b34"},".data":{"Entropy":0.16801126406945746,"Virtual Size":"0x308"},"PAGE":{"Entropy":4.500559089030644,"Virtual Size":"0x69"},"INIT":{"Entropy":5.53827735746872,"Virtual Size":"0x676"},".rsrc":{"Entropy":3.335903976976208,"Virtual Size":"0x348"},".reloc":{"Entropy":6.523525927018517,"Virtual Size":"0x3dc"}},"Signature":"","Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, ST=California, L=Irvine, O=Razer USA Ltd., CN=Razer USA Ltd.","ValidFrom":"2016-02-10 00:00:00","ValidTo":"2019-02-07 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":false,"SerialNumber":"1834b81889070312b5c4ca72ea419a5e","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"966e59fada7c527111ba61f0cafcb355","SHA1":"d72efbe2c9127b91fffcfa0825dc16c9f7580e44","SHA256":"506eaba716a689df7e0bb57b6f41afea02cce8c4af4d2392e96bd2e1bf483528","SHA384":"0edb1fa0ccc2600fcd37358eb158fae5b72cc13fd3ff6cd0518aa6c780377dd5a7e39145784d4b9c595f163be613f2f1"}},{"Subject":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 SHA256 Code Signing CA","ValidFrom":"2013-12-10 00:00:00","ValidTo":"2023-12-09 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":true,"SerialNumber":"3d78d7f9764960b2617df4f01eca862a","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"1f056ff7d5f874984dc605402b7cb042","SHA1":"bdb348353a2203deb4b767914fa1bd7248dd728b","SHA256":"a08e79c386083d875014c409c13d144e0a24386132980df11ff59737c8489eb1","SHA384":"fa2729064b49e0d77540c1ee95d5f74acaf8eaf55197851a3a40383335f8113e51190bc48b552196edf8ac5cf0c89278"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. , For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority , G5","ValidFrom":"2011-02-22 19:25:17","ValidTo":"2021-02-22 19:35:17","Signature":"812a82168c34672be503eb347b8ca2a3508af45586f11e8c8eae7dee0319ce72951848ad6211fd20fd3f4706015ae2e06f8c152c4e3c6a506c0b36a3cf7a0d9c42bc5cf819d560e369e6e22341678c6883762b8f93a32ab57fbe59fba9c9b2268fcaa2f3821b983e919527978661ee5b5d076bcd86a8e26580a8e215e2b2be23056aba0cf347934daca48c077939c061123a050d89a3ec9f578984fbecca7c47661491d8b60f195de6b84aacbc47c8714396e63220a5dc7786fd3ce38b71db7b9b03fcb71d3264eb1652a043a3fa2ead59924e7cc7f233424838513a7c38c71b242228401e1a461f17db18f7f027356cb863d9cdb9645d2ba55eefc629b4f2c7f821cc04ba57fd01b6abc667f9e7d3997ff4f522fa72f5fdff3a1c423aa1f98018a5ee8d1cd4669e4501feaaeefffb178f30f7f1cd29c59decb5d549003d85b8cbbb933a276a49c030ae66c9f723283276f9a48356c848ce5a96aaa0cc0cc47fb48e97af6de35427c39f86c0d6e473089705dbd054625e0348c2d59f7fa7668cd09db04fd4d3985f4b7ac97fb22952d01280c70f54b61e67cdc6a06c110384d34875e72afeb03b6e0a3aa66b769905a3f177686133144706fc537f52bd92145c4a246a678caf8d90aad0f679211b93267cc3ce1ebd883892ae45c6196a4950b305f8ae59378a6a250394b1598150e8ba8380b72335f476b9671d5918ad208d94","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"611993e400000000001c","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"78a717e082dcc1cda3458d917e677d14","SHA1":"4a872e0e51f9b304469cd1dedb496ee9b8b983a4","SHA256":"317fa1d234ebc49040ebc5e8746f8997471496051b185a91bdd9dfbb23fab5f8","SHA384":"b71052da4eb9157c8c1a5d7f55df19d69b9128598b72fcca608e5b7cc7d64c43c5504b9c86355a6dc22ee40c88cc385c"}}],"Signer":[{"SerialNumber":"1834b81889070312b5c4ca72ea419a5e","Issuer":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 SHA256 Code Signing CA","Version":1}]}],"Imphash":"700a9350ac8b218ab9fc62cf25337ad3","LoadsDespiteHVCI":"FALSE"},{"Authentihash":{"MD5":"4b6d5f6c61c9820aaf6dd10acbcc8385","SHA1":"1ac31466261a6da69fbeb8e99d0b7b772071ac7f","SHA256":"d2e10e17bca5e85e6b84345b47aab14adf45d98c672db6acf90479a7faf20b5a"},"Company":"Razer, Inc.","Copyright":"Copyright (C) 2010-2014","CreationTimestamp":"2015-09-16 20:16:35","Date":"","Description":"Razer Overlay Support","ExportedFunctions":"","FileVersion":"1.0.12.7465","Filename":"","ImportedFunctions":["IofCompleteRequest","ObfDereferenceObject","ObfReferenceObject","KeClearEvent","KeWaitForSingleObject","IoAcquireCancelSpinLock","IoReleaseCancelSpinLock","ObReferenceObjectByHandle","ExEventObjectType","ExFreePoolWithTag","ExAllocatePoolWithTag","ExAcquireFastMutex","ExReleaseFastMutex","KeAcquireGuardedMutex","KeReleaseGuardedMutex","KeAcquireSpinLockRaiseToDpc","KeReleaseSpinLock","RtlInitUnicodeString","IoCreateDevice","IoCreateSymbolicLink","PoStartNextPowerIrp","ZwLoadDriver","IoGetDeviceObjectPointer","ZwUnloadDriver","IoAttachDeviceToDeviceStack","IoDeleteDevice","KeInitializeEvent","IofCallDriver","PoCallDriver","PsSetCreateProcessNotifyRoutine","PsSetCreateThreadNotifyRoutine","PsRemoveCreateThreadNotifyRoutine","ZwSetEvent","_wcslwr","wcsstr","ZwClose","KeSetEvent","ZwWaitForSingleObject","_purecall","sprintf","_vsnprintf","DbgPrint","swprintf","KeInitializeGuardedMutex","PsLookupProcessByProcessId","PsReferencePrimaryToken","SeQueryInformationToken","RtlLengthRequiredSid","RtlInitializeSid","RtlSubAuthoritySid","RtlEqualSid","PsDereferencePrimaryToken","MmGetSystemRoutineAddress","MmIsAddressValid","KeStackAttachProcess","KeUnstackDetachProcess","wcsrchr","ZwOpenProcess","PsLookupThreadByThreadId","ObOpenObjectByPointer","PsThreadType","ZwCreateEvent","PsGetCurrentProcessId","RtlInitString","RtlCompareString","ZwMapViewOfSection","KeBugCheckEx","__C_specific_handler"],"Imports":["ntoskrnl.exe"],"InternalName":"Rzpnk","MD5":"f8a13d4413a93dd005fad116cbd6b6f7","MachineType":"AMD64","MagicHeader":"50 45 0 0","OriginalFilename":"Rzpnk.sys","PDBPath":"","Product":"Rzpnk","ProductVersion":"1.0.12.7465","Publisher":"","RichPEHeaderHash":{"MD5":"d95b83b1676185463804c7be60a5629a","SHA1":"1d9671d566106c909d9fb90ad6d433103705a06e","SHA256":"98a9df9ab526c9ccc780176b4ab4f0bdf1479789da7a463f76afa5ca5eeb57a8"},"SHA1":"8edcd4b35f5ae88d14e83252390659c6fc79eae3","SHA256":"8ed0c00920ce76e832701d45117ed00b12e20588cb6fe8039fbccdfef9841047","Sections":{".text":{"Entropy":6.022819869183744,"Virtual Size":"0x786e"},".rdata":{"Entropy":2.156441781870166,"Virtual Size":"0x144fc"},".data":{"Entropy":0.15812764646865457,"Virtual Size":"0x3e4"},".pdata":{"Entropy":4.83123136246416,"Virtual Size":"0xcb4"},"PAGE":{"Entropy":4.405262522641727,"Virtual Size":"0x87"},"INIT":{"Entropy":5.345466868963517,"Virtual Size":"0x884"},".rsrc":{"Entropy":3.3229086430258863,"Virtual Size":"0x328"},".reloc":{"Entropy":4.404219521463952,"Virtual Size":"0x94"}},"Signature":"","Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA , G2","ValidFrom":"2012-12-21 00:00:00","ValidTo":"2020-12-30 23:59:59","Signature":"03099b8f79ef7f5930aaef68b5fae3091dbb4f82065d375fa6529f168dea1c9209446ef56deb587c30e8f9698d23730b126f47a9ae3911f82ab19bb01ac38eeb599600adce0c4db2d031a6085c2a7afce27a1d574ca86518e979406225966ec7c7376a8321088e41eaddd9573f1d7749872a16065ea6386a2212a35119837eb6","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"7e93ebfb7cc64e59ea4b9a77d406fc3b","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"d0785ad36e427c92b19f6826ab1e8020","SHA1":"365b7a9c21bd9373e49052c3e7b3e4646ddd4d43","SHA256":"c2abb7484da91a658548de089d52436175fdb760a1387d225611dc0613a1e2ff","SHA384":"eab4fe5ef90e0de4a6aa3a27769a5e879f588df5e4785aa4104debd1f81e19ea56d33e3a16e5facf99f68b5d8e3d287b"}},{"Subject":"C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer , G4","ValidFrom":"2012-10-18 00:00:00","ValidTo":"2020-12-29 23:59:59","Signature":"783bb4912a004cf08f62303778a38427076f18b2de25dca0d49403aa864e259f9a40031cddcee379cb216806dab632b46dbff42c266333e449646d0de6c3670ef705a4356c7c8916c6e9b2dfb2e9dd20c6710fcd9574dcb65cdebd371f4378e678b5cd280420a3aaf14bc48829910e80d111fcdd5c766e4f5e0e4546416e0db0ea389ab13ada097110fc1c79b4807bac69f4fd9cb60c162bf17f5b093d9b5be216ca13816d002e380da8298f2ce1b2f45aa901af159c2c2f491bdb22bbc3fe789451c386b182885df03db451a179332b2e7bb9dc20091371eb6a195bcfe8a530572c89493fb9cf7fc9bf3e226863539abd6974acc51d3c7f92e0c3bc1cd80475","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"0ecff438c8febf356e04d86a981b1a50","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"e9d38360b914c8863f6cba3ee58764d3","SHA1":"4cba8eae47b6bf76f20b3504b98b8f062694a89b","SHA256":"88901d86a4cc1f1bb193d08e1fb63d27452e63f83e228c657ab1a92e4ade3976","SHA384":"e9f2a75334a9e336c5a4712eadee88d0374b0fdc273262f4e65c9040ad2793067cc076696db5279a478773485e285652"}},{"Subject":"C=KY, ST=Cayman Islands, L=George Town, O=Razer Inc., OU=Digital ID Class 3 , Microsoft Software Validation v2, CN=Razer Inc.","ValidFrom":"2013-09-13 00:00:00","ValidTo":"2016-08-02 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"4e4563adead3fedac7bd44ec5c590577","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"62e336c644b79eb95f869025a59a0814","SHA1":"a2f3feca99242c7df87dbe3676a64c4dba12b76b","SHA256":"3b43e76a05117b0ee9c87f7b98005a1a4b804d633660c8e3a43d342ba9184e1b","SHA384":"06fa6279fc3c74eade44518adb2b1c269e30736e11ff02f8e3b1f4a3e55a9f0b07ec215f9654d579c25c90627809182c"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. , For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority , G5","ValidFrom":"2011-02-22 19:25:17","ValidTo":"2021-02-22 19:35:17","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"611993e400000000001c","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"78a717e082dcc1cda3458d917e677d14","SHA1":"4a872e0e51f9b304469cd1dedb496ee9b8b983a4","SHA256":"317fa1d234ebc49040ebc5e8746f8997471496051b185a91bdd9dfbb23fab5f8","SHA384":"b71052da4eb9157c8c1a5d7f55df19d69b9128598b72fcca608e5b7cc7d64c43c5504b9c86355a6dc22ee40c88cc385c"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","ValidFrom":"2010-02-08 00:00:00","ValidTo":"2020-02-07 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"5200e5aa2556fc1a86ed96c9d44b33c7","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"b30c31a572b0409383ed3fbe17e56e81","SHA1":"4843a82ed3b1f2bfbee9671960e1940c942f688d","SHA256":"03cda47a6e654ed85d932714fc09ce4874600eda29ec6628cfbaeb155cab78c9","SHA384":"bbda8407c4f9fc4e54d772f1c7fb9d30bc97e1f97ecd51c443063d1fa0644e266328781776cd5c44896c457c75f4d7da"}}],"Signer":[{"SerialNumber":"4e4563adead3fedac7bd44ec5c590577","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","Version":1}]}],"Imphash":"e1ecbd956bd016618b07e7dddcaf6e60","LoadsDespiteHVCI":"FALSE"},{"Authentihash":{"MD5":"3b53b1da67c8917786be48c57c6a2db1","SHA1":"b2aac760470a4575bc0f6508179ed32d7c37a5d9","SHA256":"39789a159c1196255f1b6d83e23af4082fd4cffe2662e40b71631b4e2e4bc05d"},"Company":"Razer, Inc.","Copyright":"Copyright (C) 2010-2017. Razer, Inc.","CreationTimestamp":"2017-07-16 15:12:07","Date":"","Description":"Razer Overlay Support","ExportedFunctions":"","FileVersion":"1.0.12.10155","Filename":"","ImportedFunctions":["IofCompleteRequest","ObfDereferenceObject","ObfReferenceObject","KeClearEvent","KeWaitForSingleObject","IoAcquireCancelSpinLock","IoReleaseCancelSpinLock","ObReferenceObjectByHandle","ExEventObjectType","ExFreePoolWithTag","ExAllocatePoolWithTag","ExAcquireFastMutex","ExReleaseFastMutex","KeAcquireGuardedMutex","KeReleaseGuardedMutex","KeAcquireSpinLockRaiseToDpc","KeReleaseSpinLock","RtlInitUnicodeString","IoCreateDevice","IoCreateSymbolicLink","PoStartNextPowerIrp","ZwLoadDriver","IoGetDeviceObjectPointer","ZwUnloadDriver","IoAttachDeviceToDeviceStack","IoDeleteDevice","KeInitializeEvent","IofCallDriver","PoCallDriver","PsSetCreateProcessNotifyRoutine","PsSetCreateThreadNotifyRoutine","PsRemoveCreateThreadNotifyRoutine","ZwSetEvent","_wcslwr","wcsstr","ZwClose","KeSetEvent","ZwWaitForSingleObject","_purecall","sprintf","_vsnprintf","DbgPrint","swprintf","KeInitializeGuardedMutex","PsLookupProcessByProcessId","PsReferencePrimaryToken","SeQueryInformationToken","RtlLengthRequiredSid","RtlInitializeSid","RtlSubAuthoritySid","RtlEqualSid","PsDereferencePrimaryToken","MmGetSystemRoutineAddress","MmIsAddressValid","KeStackAttachProcess","KeUnstackDetachProcess","wcsrchr","ZwOpenProcess","PsLookupThreadByThreadId","ObOpenObjectByPointer","PsThreadType","ZwCreateEvent","PsGetCurrentProcessId","RtlInitString","RtlCompareString","ZwMapViewOfSection","ZwOpenProcessTokenEx","ZwQueryInformationToken","RtlSubAuthorityCountSid","KeBugCheckEx","__C_specific_handler"],"Imports":["ntoskrnl.exe"],"InternalName":"Rzpnk","MD5":"d4a299c595d35264b5cfd12490a138dc","MachineType":"AMD64","MagicHeader":"50 45 0 0","OriginalFilename":"Rzpnk.sys","PDBPath":"","Product":"Rzpnk","ProductVersion":"1.0.12.10155","Publisher":"","RichPEHeaderHash":{"MD5":"ce0bfa21df06f7d3067953da829fe299","SHA1":"49f5fdf333898858dd7297603f3b2347a01e777d","SHA256":"c059cad135868369281fd57e51cf8d64ac50e012ce54e3efb9321d8b519bd2dd"},"SHA1":"64df813dc0774ef57d21141dcb38d08059fd8660","SHA256":"d7b743c3f98662c955c616e0d1bb0800c9602e5b6f2385336a72623037bfd6dd","Sections":{".text":{"Entropy":6.029813362546066,"Virtual Size":"0x797e"},".rdata":{"Entropy":2.1638565406792596,"Virtual Size":"0x1457c"},".data":{"Entropy":0.15812764646865457,"Virtual Size":"0x3e4"},".pdata":{"Entropy":4.86837045917237,"Virtual Size":"0xcf0"},"PAGE":{"Entropy":4.405262522641727,"Virtual Size":"0x87"},"INIT":{"Entropy":5.362469333828446,"Virtual Size":"0x8e8"},".rsrc":{"Entropy":3.3415370361058807,"Virtual Size":"0x348"},".reloc":{"Entropy":4.425570968528865,"Virtual Size":"0x8c"}},"Signature":"","Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, ST=California, L=Irvine, O=Razer USA Ltd., CN=Razer USA Ltd.","ValidFrom":"2016-02-10 00:00:00","ValidTo":"2019-02-07 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":false,"SerialNumber":"1834b81889070312b5c4ca72ea419a5e","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"966e59fada7c527111ba61f0cafcb355","SHA1":"d72efbe2c9127b91fffcfa0825dc16c9f7580e44","SHA256":"506eaba716a689df7e0bb57b6f41afea02cce8c4af4d2392e96bd2e1bf483528","SHA384":"0edb1fa0ccc2600fcd37358eb158fae5b72cc13fd3ff6cd0518aa6c780377dd5a7e39145784d4b9c595f163be613f2f1"}},{"Subject":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 SHA256 Code Signing CA","ValidFrom":"2013-12-10 00:00:00","ValidTo":"2023-12-09 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":true,"SerialNumber":"3d78d7f9764960b2617df4f01eca862a","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"1f056ff7d5f874984dc605402b7cb042","SHA1":"bdb348353a2203deb4b767914fa1bd7248dd728b","SHA256":"a08e79c386083d875014c409c13d144e0a24386132980df11ff59737c8489eb1","SHA384":"fa2729064b49e0d77540c1ee95d5f74acaf8eaf55197851a3a40383335f8113e51190bc48b552196edf8ac5cf0c89278"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. , For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority , G5","ValidFrom":"2011-02-22 19:25:17","ValidTo":"2021-02-22 19:35:17","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"611993e400000000001c","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"78a717e082dcc1cda3458d917e677d14","SHA1":"4a872e0e51f9b304469cd1dedb496ee9b8b983a4","SHA256":"317fa1d234ebc49040ebc5e8746f8997471496051b185a91bdd9dfbb23fab5f8","SHA384":"b71052da4eb9157c8c1a5d7f55df19d69b9128598b72fcca608e5b7cc7d64c43c5504b9c86355a6dc22ee40c88cc385c"}}],"Signer":[{"SerialNumber":"1834b81889070312b5c4ca72ea419a5e","Issuer":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 SHA256 Code Signing CA","Version":1}]}],"Imphash":"6b7d4c6283b9b951b7b2f47a0c5be8c7","LoadsDespiteHVCI":"FALSE"},{"Authentihash":{"MD5":"151f2aa65417bbb3563e02d1f60484dc","SHA1":"970bd6388867c86b786d4e218d1a6967d7304ee4","SHA256":"9d61963c098b07fa7ee6dba40f476fc5d2f16301d79a3e8554319d66c69404a9"},"Company":"Razer, Inc.","Copyright":"Copyright (C) 2010-2018. Razer, Inc.","CreationTimestamp":"2018-03-19 14:55:13","Date":"","Description":"Razer Overlay Support","ExportedFunctions":"","FileVersion":"1.0.12.10201","Filename":"","ImportedFunctions":["IofCompleteRequest","ObfDereferenceObject","ObfReferenceObject","KeClearEvent","KeWaitForSingleObject","IoAcquireCancelSpinLock","IoReleaseCancelSpinLock","ObReferenceObjectByHandle","ExEventObjectType","ExFreePoolWithTag","ExAllocatePoolWithTag","ExAcquireFastMutex","ExReleaseFastMutex","KeAcquireGuardedMutex","KeReleaseGuardedMutex","KeAcquireSpinLockRaiseToDpc","KeReleaseSpinLock","RtlInitUnicodeString","IoCreateDevice","IoCreateSymbolicLink","PsGetCurrentProcessId","_wcslwr","wcsstr","PoStartNextPowerIrp","ZwLoadDriver","IoGetDeviceObjectPointer","ZwUnloadDriver","IoAttachDeviceToDeviceStack","IoDeleteDevice","KeInitializeEvent","IofCallDriver","PoCallDriver","PsSetCreateProcessNotifyRoutine","PsSetCreateThreadNotifyRoutine","PsRemoveCreateThreadNotifyRoutine","ZwSetEvent","ZwClose","KeSetEvent","ZwWaitForSingleObject","_purecall","sprintf","_vsnprintf","DbgPrint","swprintf","KeInitializeGuardedMutex","PsLookupProcessByProcessId","PsReferencePrimaryToken","SeQueryInformationToken","RtlLengthRequiredSid","RtlInitializeSid","RtlSubAuthoritySid","RtlEqualSid","PsDereferencePrimaryToken","MmGetSystemRoutineAddress","MmIsAddressValid","KeStackAttachProcess","KeUnstackDetachProcess","wcsrchr","ZwOpenProcess","PsLookupThreadByThreadId","ObOpenObjectByPointer","PsThreadType","ZwCreateEvent","RtlInitString","RtlCompareString","ZwOpenProcessTokenEx","ZwQueryInformationToken","RtlSubAuthorityCountSid","KeBugCheckEx","__C_specific_handler"],"Imports":["ntoskrnl.exe"],"InternalName":"Rzpnk","MD5":"f758e7d53184faab5bc51f751937fa36","MachineType":"AMD64","MagicHeader":"50 45 0 0","OriginalFilename":"Rzpnk.sys","PDBPath":"","Product":"Rzpnk","ProductVersion":"1.0.12.10201","Publisher":"","RichPEHeaderHash":{"MD5":"38005c498229dd5f64251bb3e57a40bf","SHA1":"3ddcef7c8b8f8eeaccbc11703dd94c7d300ba1a0","SHA256":"27973d74dd877714939b06ddea7c9cad50ac645cd8569f068dc78575c14e6704"},"SHA1":"7e900b0370a1d3cb8a3ea5394d7d094f95ec5dc0","SHA256":"d59cc3765a2a9fa510273dded5a9f9ac5190f1edf24a00ffd6a1bbd1cb34c757","Sections":{".text":{"Entropy":6.032294908964451,"Virtual Size":"0x7a82"},".rdata":{"Entropy":2.158939241562336,"Virtual Size":"0x14564"},".data":{"Entropy":0.15812764646865457,"Virtual Size":"0x3e4"},".pdata":{"Entropy":4.8892997126668325,"Virtual Size":"0xcf0"},"PAGE":{"Entropy":4.405262522641727,"Virtual Size":"0x87"},"INIT":{"Entropy":5.339799543825723,"Virtual Size":"0x8ca"},".rsrc":{"Entropy":3.327497519552929,"Virtual Size":"0x348"},".reloc":{"Entropy":4.323516902746281,"Virtual Size":"0x8c"}},"Signature":"","Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, ST=California, L=Irvine, O=Razer USA Ltd., CN=Razer USA Ltd.","ValidFrom":"2016-02-10 00:00:00","ValidTo":"2019-02-07 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":false,"SerialNumber":"1834b81889070312b5c4ca72ea419a5e","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"966e59fada7c527111ba61f0cafcb355","SHA1":"d72efbe2c9127b91fffcfa0825dc16c9f7580e44","SHA256":"506eaba716a689df7e0bb57b6f41afea02cce8c4af4d2392e96bd2e1bf483528","SHA384":"0edb1fa0ccc2600fcd37358eb158fae5b72cc13fd3ff6cd0518aa6c780377dd5a7e39145784d4b9c595f163be613f2f1"}},{"Subject":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 SHA256 Code Signing CA","ValidFrom":"2013-12-10 00:00:00","ValidTo":"2023-12-09 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":true,"SerialNumber":"3d78d7f9764960b2617df4f01eca862a","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"1f056ff7d5f874984dc605402b7cb042","SHA1":"bdb348353a2203deb4b767914fa1bd7248dd728b","SHA256":"a08e79c386083d875014c409c13d144e0a24386132980df11ff59737c8489eb1","SHA384":"fa2729064b49e0d77540c1ee95d5f74acaf8eaf55197851a3a40383335f8113e51190bc48b552196edf8ac5cf0c89278"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. , For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority , G5","ValidFrom":"2011-02-22 19:25:17","ValidTo":"2021-02-22 19:35:17","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"611993e400000000001c","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"78a717e082dcc1cda3458d917e677d14","SHA1":"4a872e0e51f9b304469cd1dedb496ee9b8b983a4","SHA256":"317fa1d234ebc49040ebc5e8746f8997471496051b185a91bdd9dfbb23fab5f8","SHA384":"b71052da4eb9157c8c1a5d7f55df19d69b9128598b72fcca608e5b7cc7d64c43c5504b9c86355a6dc22ee40c88cc385c"}}],"Signer":[{"SerialNumber":"1834b81889070312b5c4ca72ea419a5e","Issuer":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 SHA256 Code Signing CA","Version":1}]}],"Imphash":"5192bc7311bdeb1f3977bdc0d2e943e4","LoadsDespiteHVCI":"FALSE"},{"Authentihash":{"MD5":"870f5888401c299ad7b0cacabd53edc2","SHA1":"fb21a2be31b336ac5da2f69c93c4ff4f8fe30a42","SHA256":"def61560c0650717cb1da923f0d674b363b8f2051247719b34f06744bbb79000"},"Company":"Razer, Inc.","Copyright":"Copyright (C) 2010-2014","CreationTimestamp":"2015-09-16 20:15:26","Date":"","Description":"Razer Overlay Support","ExportedFunctions":"","FileVersion":"1.0.12.7465","Filename":"","ImportedFunctions":["IoAcquireCancelSpinLock","IoReleaseCancelSpinLock","ObReferenceObjectByHandle","ExFreePoolWithTag","ExAllocatePoolWithTag","KeAcquireGuardedMutex","KeReleaseGuardedMutex","RtlInitUnicodeString","IoCreateDevice","IoCreateSymbolicLink","PoStartNextPowerIrp","IoDeleteDevice","KeInitializeEvent","PsSetCreateProcessNotifyRoutine","PsSetCreateThreadNotifyRoutine","PsRemoveCreateThreadNotifyRoutine","ZwSetEvent","_wcslwr","wcsstr","ZwClose","KeSetEvent","ZwWaitForSingleObject","_purecall","KeGetCurrentThread","sprintf","_vsnprintf","swprintf","PsLookupProcessByProcessId","PsReferencePrimaryToken","SeQueryInformationToken","RtlLengthRequiredSid","RtlInitializeSid","RtlSubAuthoritySid","RtlEqualSid","PsDereferencePrimaryToken","MmGetSystemRoutineAddress","MmIsAddressValid","KeStackAttachProcess","KeUnstackDetachProcess","wcsrchr","ZwOpenProcess","PsLookupThreadByThreadId","ObOpenObjectByPointer","PsThreadType","ZwCreateEvent","PsGetCurrentProcessId","ZwMapViewOfSection","KeTickCount","KeBugCheckEx","ObfDereferenceObject","IofCompleteRequest","memcpy","memset","RtlUnwind","KfAcquireSpinLock","ExReleaseFastMutex","ExAcquireFastMutex","KfReleaseSpinLock"],"Imports":["ntoskrnl.exe","HAL.dll"],"InternalName":"Rzpnk","MD5":"05a6f843c43d75fbce8e885bb8656aa4","MachineType":"I386","MagicHeader":"50 45 0 0","OriginalFilename":"Rzpnk.sys","PDBPath":"","Product":"Rzpnk","ProductVersion":"1.0.12.7465","Publisher":"","RichPEHeaderHash":{"MD5":"c723c2141747136a803cc8d5df9b0e9c","SHA1":"ab3959e0fa2376ebca63456374e4454a4d711ec1","SHA256":"4d91707d4f7a8f5cbedd69ff24b76a642fe430fa85657e0622340935b9806df5"},"SHA1":"d72de7e8f0118153dd5cf784f724e725865fc523","SHA256":"e77786b21dbe73e9619ac9aac5e7e92989333d559aa22b4b65c97f0a42ff2e21","Sections":{".text":{"Entropy":6.147790168427177,"Virtual Size":"0x3820"},".rdata":{"Entropy":0.7852972442434865,"Virtual Size":"0x8b54"},".data":{"Entropy":0.16801126406945746,"Virtual Size":"0x308"},"PAGE":{"Entropy":4.462463850935407,"Virtual Size":"0x69"},"INIT":{"Entropy":5.522612592290352,"Virtual Size":"0x638"},".rsrc":{"Entropy":3.3171115841441816,"Virtual Size":"0x328"},".reloc":{"Entropy":6.493689021459392,"Virtual Size":"0x3ec"}},"Signature":"","Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA , G2","ValidFrom":"2012-12-21 00:00:00","ValidTo":"2020-12-30 23:59:59","Signature":"03099b8f79ef7f5930aaef68b5fae3091dbb4f82065d375fa6529f168dea1c9209446ef56deb587c30e8f9698d23730b126f47a9ae3911f82ab19bb01ac38eeb599600adce0c4db2d031a6085c2a7afce27a1d574ca86518e979406225966ec7c7376a8321088e41eaddd9573f1d7749872a16065ea6386a2212a35119837eb6","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"7e93ebfb7cc64e59ea4b9a77d406fc3b","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"d0785ad36e427c92b19f6826ab1e8020","SHA1":"365b7a9c21bd9373e49052c3e7b3e4646ddd4d43","SHA256":"c2abb7484da91a658548de089d52436175fdb760a1387d225611dc0613a1e2ff","SHA384":"eab4fe5ef90e0de4a6aa3a27769a5e879f588df5e4785aa4104debd1f81e19ea56d33e3a16e5facf99f68b5d8e3d287b"}},{"Subject":"C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer , G4","ValidFrom":"2012-10-18 00:00:00","ValidTo":"2020-12-29 23:59:59","Signature":"783bb4912a004cf08f62303778a38427076f18b2de25dca0d49403aa864e259f9a40031cddcee379cb216806dab632b46dbff42c266333e449646d0de6c3670ef705a4356c7c8916c6e9b2dfb2e9dd20c6710fcd9574dcb65cdebd371f4378e678b5cd280420a3aaf14bc48829910e80d111fcdd5c766e4f5e0e4546416e0db0ea389ab13ada097110fc1c79b4807bac69f4fd9cb60c162bf17f5b093d9b5be216ca13816d002e380da8298f2ce1b2f45aa901af159c2c2f491bdb22bbc3fe789451c386b182885df03db451a179332b2e7bb9dc20091371eb6a195bcfe8a530572c89493fb9cf7fc9bf3e226863539abd6974acc51d3c7f92e0c3bc1cd80475","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"0ecff438c8febf356e04d86a981b1a50","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"e9d38360b914c8863f6cba3ee58764d3","SHA1":"4cba8eae47b6bf76f20b3504b98b8f062694a89b","SHA256":"88901d86a4cc1f1bb193d08e1fb63d27452e63f83e228c657ab1a92e4ade3976","SHA384":"e9f2a75334a9e336c5a4712eadee88d0374b0fdc273262f4e65c9040ad2793067cc076696db5279a478773485e285652"}},{"Subject":"C=KY, ST=Cayman Islands, L=George Town, O=Razer Inc., OU=Digital ID Class 3 , Microsoft Software Validation v2, CN=Razer Inc.","ValidFrom":"2013-09-13 00:00:00","ValidTo":"2016-08-02 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"4e4563adead3fedac7bd44ec5c590577","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"62e336c644b79eb95f869025a59a0814","SHA1":"a2f3feca99242c7df87dbe3676a64c4dba12b76b","SHA256":"3b43e76a05117b0ee9c87f7b98005a1a4b804d633660c8e3a43d342ba9184e1b","SHA384":"06fa6279fc3c74eade44518adb2b1c269e30736e11ff02f8e3b1f4a3e55a9f0b07ec215f9654d579c25c90627809182c"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. , For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority , G5","ValidFrom":"2011-02-22 19:25:17","ValidTo":"2021-02-22 19:35:17","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"611993e400000000001c","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"78a717e082dcc1cda3458d917e677d14","SHA1":"4a872e0e51f9b304469cd1dedb496ee9b8b983a4","SHA256":"317fa1d234ebc49040ebc5e8746f8997471496051b185a91bdd9dfbb23fab5f8","SHA384":"b71052da4eb9157c8c1a5d7f55df19d69b9128598b72fcca608e5b7cc7d64c43c5504b9c86355a6dc22ee40c88cc385c"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","ValidFrom":"2010-02-08 00:00:00","ValidTo":"2020-02-07 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"5200e5aa2556fc1a86ed96c9d44b33c7","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"b30c31a572b0409383ed3fbe17e56e81","SHA1":"4843a82ed3b1f2bfbee9671960e1940c942f688d","SHA256":"03cda47a6e654ed85d932714fc09ce4874600eda29ec6628cfbaeb155cab78c9","SHA384":"bbda8407c4f9fc4e54d772f1c7fb9d30bc97e1f97ecd51c443063d1fa0644e266328781776cd5c44896c457c75f4d7da"}}],"Signer":[{"SerialNumber":"4e4563adead3fedac7bd44ec5c590577","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","Version":1}]}],"Imphash":"cc335217d6f7ab7a53dcfa55cbda5fb0","LoadsDespiteHVCI":"FALSE"},{"Authentihash":{"MD5":"049d38cee6bf9975ca33274d57bb4666","SHA1":"1d96772942225757522ddd38d52e9616089377b2","SHA256":"fec1c641c7151e931aeb0d1ac59a97d6d3b486c482c1df8794e6424e75e6da1a"},"Company":"Razer, Inc.","Copyright":"Copyright (C) 2010-2014","CreationTimestamp":"2014-10-17 15:38:10","Date":"","Description":"Razer Overlay Support","ExportedFunctions":"","FileVersion":"1.0.12.3137","Filename":"","ImportedFunctions":["IofCompleteRequest","ObfDereferenceObject","ObfReferenceObject","KeClearEvent","KeWaitForSingleObject","IoAcquireCancelSpinLock","IoReleaseCancelSpinLock","ObReferenceObjectByHandle","ExEventObjectType","ExFreePoolWithTag","ExAllocatePoolWithTag","ExAcquireFastMutex","ExReleaseFastMutex","KeAcquireGuardedMutex","KeReleaseGuardedMutex","KeAcquireSpinLockRaiseToDpc","KeReleaseSpinLock","RtlInitUnicodeString","IoCreateDevice","IoCreateSymbolicLink","PoStartNextPowerIrp","ZwLoadDriver","IoGetDeviceObjectPointer","ZwUnloadDriver","IoAttachDeviceToDeviceStack","IoDeleteDevice","KeInitializeEvent","IofCallDriver","PoCallDriver","PsSetCreateProcessNotifyRoutine","PsSetCreateThreadNotifyRoutine","PsRemoveCreateThreadNotifyRoutine","ZwSetEvent","_wcslwr","wcsstr","ZwClose","KeSetEvent","ZwWaitForSingleObject","_purecall","sprintf","_vsnprintf","DbgPrint","swprintf","KeInitializeGuardedMutex","PsLookupProcessByProcessId","PsReferencePrimaryToken","SeQueryInformationToken","RtlLengthRequiredSid","RtlInitializeSid","RtlSubAuthoritySid","RtlEqualSid","PsDereferencePrimaryToken","MmGetSystemRoutineAddress","MmIsAddressValid","KeStackAttachProcess","KeUnstackDetachProcess","wcsrchr","ZwOpenProcess","PsLookupThreadByThreadId","ObOpenObjectByPointer","PsThreadType","ZwCreateEvent","PsGetCurrentProcessId","RtlInitString","RtlCompareString","KeBugCheckEx","__C_specific_handler"],"Imports":["ntoskrnl.exe"],"InternalName":"Rzpnk","MD5":"fef60a37301e1f5a3020fa3487fb2cd7","MachineType":"AMD64","MagicHeader":"50 45 0 0","OriginalFilename":"Rzpnk.sys","PDBPath":"","Product":"Rzpnk","ProductVersion":"1.0.12.3137","Publisher":"","RichPEHeaderHash":{"MD5":"6f46839d81ff1d1b3e509d134f95c5a9","SHA1":"987e1f687c75f4e3bd6377359b2ed6b71e16b88e","SHA256":"011d63cf6e09f148f628424ead77cac9969f196a4bb773e8fbd60ab9b41d8c93"},"SHA1":"838823f25436cadc9a145ddac076dce3e0b84d96","SHA256":"0c925468c3376458d0e1ec65e097bd1a81a03901035c0195e8f6ef904ef3f901","Sections":{".text":{"Entropy":6.001395877605703,"Virtual Size":"0x7400"},".rdata":{"Entropy":2.0228543552827074,"Virtual Size":"0x13f5c"},".data":{"Entropy":4.883228407116594,"Virtual Size":"0x84c"},".pdata":{"Entropy":4.8259775115408505,"Virtual Size":"0xcfc"},"PAGE":{"Entropy":4.375632893012098,"Virtual Size":"0x87"},"INIT":{"Entropy":5.328254520489819,"Virtual Size":"0x866"},".rsrc":{"Entropy":3.312676704326444,"Virtual Size":"0x328"},".reloc":{"Entropy":2.1502919023967038,"Virtual Size":"0x1a4"}},"Signature":"","Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA , G2","ValidFrom":"2012-12-21 00:00:00","ValidTo":"2020-12-30 23:59:59","Signature":"03099b8f79ef7f5930aaef68b5fae3091dbb4f82065d375fa6529f168dea1c9209446ef56deb587c30e8f9698d23730b126f47a9ae3911f82ab19bb01ac38eeb599600adce0c4db2d031a6085c2a7afce27a1d574ca86518e979406225966ec7c7376a8321088e41eaddd9573f1d7749872a16065ea6386a2212a35119837eb6","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"7e93ebfb7cc64e59ea4b9a77d406fc3b","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"d0785ad36e427c92b19f6826ab1e8020","SHA1":"365b7a9c21bd9373e49052c3e7b3e4646ddd4d43","SHA256":"c2abb7484da91a658548de089d52436175fdb760a1387d225611dc0613a1e2ff","SHA384":"eab4fe5ef90e0de4a6aa3a27769a5e879f588df5e4785aa4104debd1f81e19ea56d33e3a16e5facf99f68b5d8e3d287b"}},{"Subject":"C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer , G4","ValidFrom":"2012-10-18 00:00:00","ValidTo":"2020-12-29 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"0ecff438c8febf356e04d86a981b1a50","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"e9d38360b914c8863f6cba3ee58764d3","SHA1":"4cba8eae47b6bf76f20b3504b98b8f062694a89b","SHA256":"88901d86a4cc1f1bb193d08e1fb63d27452e63f83e228c657ab1a92e4ade3976","SHA384":"e9f2a75334a9e336c5a4712eadee88d0374b0fdc273262f4e65c9040ad2793067cc076696db5279a478773485e285652"}},{"Subject":"C=KY, ST=Cayman Islands, L=George Town, O=Razer Inc., OU=Digital ID Class 3 , Microsoft Software Validation v2, CN=Razer Inc.","ValidFrom":"2013-09-13 00:00:00","ValidTo":"2016-08-02 23:59:59","Signature":"7fed5fa5da7959a757624348c39cb82555cbfa8fef504c4f9240c1832d551fa464a0f36ce293c269028849708ded45320d843e52e6e0a5c45d4c048f1c61db7831aa29bee4524cf538db8d5e3e810af96c8a2b4e85c17e6c6eefe399d57722554303e99d8b81d546bc42f89165b7c44efba44b0d073ed1d1fcae1b17e61a8e3995b5c61e33bf7c0c4d540ab2b925bcb7141159fa8095912ecccf2ad734a6362981e0248b1765df2a8815904dddf5817d76a2f493fb505624e2cd4341a39d40a3a0247a9886642d4f2f87d768efb8f08f89192eef8b635d8b76f97a3e84dfb4f05e6b1d16adc6101b7b2869aa277f886be34571d4f3af59744d4132bf2e694dc4","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"4e4563adead3fedac7bd44ec5c590577","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"62e336c644b79eb95f869025a59a0814","SHA1":"a2f3feca99242c7df87dbe3676a64c4dba12b76b","SHA256":"3b43e76a05117b0ee9c87f7b98005a1a4b804d633660c8e3a43d342ba9184e1b","SHA384":"06fa6279fc3c74eade44518adb2b1c269e30736e11ff02f8e3b1f4a3e55a9f0b07ec215f9654d579c25c90627809182c"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. , For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority , G5","ValidFrom":"2011-02-22 19:25:17","ValidTo":"2021-02-22 19:35:17","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"611993e400000000001c","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"78a717e082dcc1cda3458d917e677d14","SHA1":"4a872e0e51f9b304469cd1dedb496ee9b8b983a4","SHA256":"317fa1d234ebc49040ebc5e8746f8997471496051b185a91bdd9dfbb23fab5f8","SHA384":"b71052da4eb9157c8c1a5d7f55df19d69b9128598b72fcca608e5b7cc7d64c43c5504b9c86355a6dc22ee40c88cc385c"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","ValidFrom":"2010-02-08 00:00:00","ValidTo":"2020-02-07 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"5200e5aa2556fc1a86ed96c9d44b33c7","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"b30c31a572b0409383ed3fbe17e56e81","SHA1":"4843a82ed3b1f2bfbee9671960e1940c942f688d","SHA256":"03cda47a6e654ed85d932714fc09ce4874600eda29ec6628cfbaeb155cab78c9","SHA384":"bbda8407c4f9fc4e54d772f1c7fb9d30bc97e1f97ecd51c443063d1fa0644e266328781776cd5c44896c457c75f4d7da"}}],"Signer":[{"SerialNumber":"4e4563adead3fedac7bd44ec5c590577","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","Version":1}]}],"Imphash":"dd7c5c0c762169d40ee01280e4ac74fc","LoadsDespiteHVCI":"FALSE"},{"Authentihash":{"MD5":"64c80e12a495fb117c5db8f0ab70dc91","SHA1":"39c687c1c70ea61e122ef145364fa123ddeb3383","SHA256":"3e28142ad02a1ac63ab86f97834321f30bb28e19d5c997bb0a13807ddb414c0e"},"Company":"Razer, Inc.","Copyright":"Copyright (C) 2010-2017. Razer, Inc.","CreationTimestamp":"2017-09-20 18:35:30","Date":"","Description":"Razer Overlay Support","ExportedFunctions":"","FileVersion":"1.0.12.10177","Filename":"","ImportedFunctions":["IofCompleteRequest","ObfDereferenceObject","ObfReferenceObject","KeClearEvent","KeWaitForSingleObject","IoAcquireCancelSpinLock","IoReleaseCancelSpinLock","ObReferenceObjectByHandle","ExEventObjectType","ExFreePoolWithTag","ExAllocatePoolWithTag","ExAcquireFastMutex","ExReleaseFastMutex","KeAcquireGuardedMutex","KeReleaseGuardedMutex","KeAcquireSpinLockRaiseToDpc","KeReleaseSpinLock","RtlInitUnicodeString","IoCreateDevice","IoCreateSymbolicLink","PsGetCurrentProcessId","_wcslwr","wcsstr","PoStartNextPowerIrp","ZwLoadDriver","IoGetDeviceObjectPointer","ZwUnloadDriver","IoAttachDeviceToDeviceStack","IoDeleteDevice","KeInitializeEvent","IofCallDriver","PoCallDriver","PsSetCreateProcessNotifyRoutine","PsSetCreateThreadNotifyRoutine","PsRemoveCreateThreadNotifyRoutine","ZwSetEvent","ZwClose","KeSetEvent","ZwWaitForSingleObject","_purecall","sprintf","_vsnprintf","DbgPrint","swprintf","KeInitializeGuardedMutex","PsLookupProcessByProcessId","PsReferencePrimaryToken","SeQueryInformationToken","RtlLengthRequiredSid","RtlInitializeSid","RtlSubAuthoritySid","RtlEqualSid","PsDereferencePrimaryToken","MmGetSystemRoutineAddress","MmIsAddressValid","KeStackAttachProcess","KeUnstackDetachProcess","wcsrchr","ZwOpenProcess","PsLookupThreadByThreadId","ObOpenObjectByPointer","PsThreadType","ZwCreateEvent","RtlInitString","RtlCompareString","ZwMapViewOfSection","ZwOpenProcessTokenEx","ZwQueryInformationToken","RtlSubAuthorityCountSid","KeBugCheckEx","__C_specific_handler"],"Imports":["ntoskrnl.exe"],"InternalName":"Rzpnk","MD5":"6846c2035b4c56b488d2ce2c69a57261","MachineType":"AMD64","MagicHeader":"50 45 0 0","OriginalFilename":"Rzpnk.sys","PDBPath":"","Product":"Rzpnk","ProductVersion":"1.0.12.10177","Publisher":"","RichPEHeaderHash":{"MD5":"ce0bfa21df06f7d3067953da829fe299","SHA1":"49f5fdf333898858dd7297603f3b2347a01e777d","SHA256":"c059cad135868369281fd57e51cf8d64ac50e012ce54e3efb9321d8b519bd2dd"},"SHA1":"e41808b022656befb7dc42bbeceaf867e2fec6b2","SHA256":"0b547368c03e0a584ae3c5e62af3728426c68b316a15f3290316844d193ad182","Sections":{".text":{"Entropy":6.029574446422592,"Virtual Size":"0x7a9e"},".rdata":{"Entropy":2.166400944027784,"Virtual Size":"0x145cc"},".data":{"Entropy":0.15812764646865457,"Virtual Size":"0x3e4"},".pdata":{"Entropy":4.867440310144845,"Virtual Size":"0xcf0"},"PAGE":{"Entropy":4.405262522641727,"Virtual Size":"0x87"},"INIT":{"Entropy":5.35429740385259,"Virtual Size":"0x8e8"},".rsrc":{"Entropy":3.3372398450648846,"Virtual Size":"0x348"},".reloc":{"Entropy":4.323516902746281,"Virtual Size":"0x8c"}},"Signature":"","Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, ST=California, L=Irvine, O=Razer USA Ltd., CN=Razer USA Ltd.","ValidFrom":"2016-02-10 00:00:00","ValidTo":"2019-02-07 23:59:59","Signature":"06b8b8ab165538f61a5033c866556c0dd5e0f3ccc78633965b7feb8b012f312c40d09a3916370efd6a1747fa6c39c0de0be5226f7de748d11854a396dfcdfb31bdf572c2fa2561204ea01d2a076a197f89b7cb084d4cdd2c788195309cd507be6847667b2c00b74d94f53291c03201e23c363928968cbe4596649a671458d82001d22205c3d4f6beb5405247d9ad1ad832c12a96e7e557426d8fc85b0069b512354557b7e2124305c0171df610bea39f8dabb973e3fec041fbce781db485d88fa826f74f0e0810e62b63615404c2daeaa354fa3c73baafcd5daca7146f3afee8c30cb257f6b25843c5df2317c1d05a619e86e843c081169e0dfd5036cd19f9ef","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":false,"SerialNumber":"1834b81889070312b5c4ca72ea419a5e","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"966e59fada7c527111ba61f0cafcb355","SHA1":"d72efbe2c9127b91fffcfa0825dc16c9f7580e44","SHA256":"506eaba716a689df7e0bb57b6f41afea02cce8c4af4d2392e96bd2e1bf483528","SHA384":"0edb1fa0ccc2600fcd37358eb158fae5b72cc13fd3ff6cd0518aa6c780377dd5a7e39145784d4b9c595f163be613f2f1"}},{"Subject":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 SHA256 Code Signing CA","ValidFrom":"2013-12-10 00:00:00","ValidTo":"2023-12-09 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":true,"SerialNumber":"3d78d7f9764960b2617df4f01eca862a","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"1f056ff7d5f874984dc605402b7cb042","SHA1":"bdb348353a2203deb4b767914fa1bd7248dd728b","SHA256":"a08e79c386083d875014c409c13d144e0a24386132980df11ff59737c8489eb1","SHA384":"fa2729064b49e0d77540c1ee95d5f74acaf8eaf55197851a3a40383335f8113e51190bc48b552196edf8ac5cf0c89278"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. , For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority , G5","ValidFrom":"2011-02-22 19:25:17","ValidTo":"2021-02-22 19:35:17","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"611993e400000000001c","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"78a717e082dcc1cda3458d917e677d14","SHA1":"4a872e0e51f9b304469cd1dedb496ee9b8b983a4","SHA256":"317fa1d234ebc49040ebc5e8746f8997471496051b185a91bdd9dfbb23fab5f8","SHA384":"b71052da4eb9157c8c1a5d7f55df19d69b9128598b72fcca608e5b7cc7d64c43c5504b9c86355a6dc22ee40c88cc385c"}}],"Signer":[{"SerialNumber":"1834b81889070312b5c4ca72ea419a5e","Issuer":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 SHA256 Code Signing CA","Version":1}]}],"Imphash":"74081c86ad3e9771011f162c107927de","LoadsDespiteHVCI":"FALSE"}]}