{"Id":"2651f5c4-d9e1-4b06-92be-e9e7313f87c4","Tags":["asio.sys","AsIO32.sys","AsIO3.sys","AsIO3_64.sys","AsIO2.sys"],"Verified":"TRUE","Author":"Nasreddine Bencherchali, Michael Haag","Created":"2023-01-09","MitreID":"T1068","Category":"vulnerable driver","Commands":{"Command":"sc.exe create asio.sys binPath=C:\\windows\\temp\\asio.sys type=kernel && sc.exe start asio.sys","Description":"ASUS AsIO hardware-access drivers expose physical-memory mapping and I/O-port operations to user mode. These primitives can be abused to read or modify privileged system state and execute code in kernel context.","Usecase":"Elevate privileges","Privileges":"kernel","OperatingSystem":"Windows 10"},"Resources":["Internal Research","https://github.com/namazso/physmem_drivers","https://gist.github.com/mgraeber-rc/1bde6a2a83237f17b463d051d32e802c","https://github.com/magicsword-io/LOLDrivers/issues/295","https://github.com/fluffycats31/vulnerable-drivers","https://aka.ms/VulnerableDriverBlockList"],"Detection":[],"Acknowledgement":{"Person":"fluffycats31","Handle":"@fluffycats31"},"KnownVulnerableSamples":[{"Filename":"asio.sys","MD5":"bedc99bbcedaf89e2ee1aa574c5a2fa4","SHA1":"160a237295a9e5cbb64ca686a84e47553a14f71d","SHA256":"0ee5067ce48883701824c5b1ad91695998916a3702cf8086962fbe58af74b2d6","Authentihash":{"MD5":"7bb2dcc29ba50372d08fea800c190f09","SHA1":"e5c090903a20744ba3583a8ea684d035e8cecc34","SHA256":"9dcfd796e244d0687cc35eac9538f209f76c6df12de166f19dbc7d2c47fb16b3"},"Description":"","Company":"","InternalName":"","OriginalFilename":"","FileVersion":"","Product":"","ProductVersion":"","Copyright":"","MachineType":"AMD64","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["ObReferenceObjectByHandle","ZwOpenSection","RtlInitUnicodeString","ZwClose","IoDeleteDevice","IoDeleteSymbolicLink","ZwMapViewOfSection","MmGetPhysicalAddress","MmAllocateContiguousMemory","ZwUnmapViewOfSection","IoIs32bitProcess","IoCreateSymbolicLink","IoCreateDevice","IofCompleteRequest","KeDelayExecutionThread","HalTranslateBusAddress"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=MOPR, CN=Microsoft Windows Hardware Compatibility Publisher","ValidFrom":"2014-12-19 19:27:34","ValidTo":"2016-03-19 19:27:34","Signature":"9c8895d0b78e2fb9a8fff5d730270c52de3a7ead8c7e649a21d81298c0a56bed1fb109217ae8b55a5c3a4334ee73203e5d44c03ef843ef2b93621369e7079513d72985c1143d04b5f342dc3a92f554bd1a8a58943c177dda5dd7c3e5280891583cd251dac090051e36faa455e751498657c06ff9f886e6d431b498fce1ea596e21d8bc45c8ad97e2376158c2d18a1f1daaa694fd736ab959c8980358f5f83ccf340fc6594ddeb60587c567e7167ea1129a81f536222046cdde2706e30d6f2fb3b9984bace9f40afe2473a4b4ee4e1fb799259ba41101e08b546d55b55ecd52f10296d5ad0dadeba22cf7c250d5f029457c15f95dee91af4ee7ee0ed6f67ff4fc","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":false,"SerialNumber":"330000001dc31a761624754f8000000000001d","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"df2a0bc442ef65cd9973329be21c642f","SHA1":"d13bcda797c6b986a1a45b7ce9184e87ba0f994c","SHA256":"41718d172e45eaa02ec88494587672cf50f96a310aebc5b49a66c0adae99edc5","SHA384":"db7864a35b468726f3d431e07825ae860ddb0d6250b3bd8906f1b0ff98ce7b4c563c73288b01ec8f1ec5a2a06f31bc40"}},{"Subject":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Windows Third Party Component CA 2012","ValidFrom":"2012-04-18 23:48:38","ValidTo":"2027-04-18 23:58:38","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":true,"SerialNumber":"610baac1000000000009","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"a569061297e8e824767dbc3184a69bea","SHA1":"adbb26a587a8f44b4fccaecb306f980d1c55a150","SHA256":"cec1afd0e310c55c1dcc601ab8e172917706aa32fb5eaf826813547fdf02dd46","SHA384":"e947cac936803f5683196e4ff1b259096073395d0b908522ddce90d57597c9f7b57f7ddcdbe021ba863d843c340da8ba"}}],"Signer":[{"SerialNumber":"330000001dc31a761624754f8000000000001d","Issuer":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Windows Third Party Component CA 2012","Version":1}]}],"RichPEHeaderHash":{"MD5":"fdbc1ff6c9321efd70ec149c3c8ccac6","SHA1":"d77615c985da37ca9099b27c1be4785c6cb7ccf6","SHA256":"4dbce3e8c08dd544b78f87323f6d794fb990bb10cb6d239fe367da87a803f23c"},"Sections":{".text":{"Entropy":6.1181571322303645,"Virtual Size":"0xd66"},".rdata":{"Entropy":4.313686441268313,"Virtual Size":"0x188"},".data":{"Entropy":0,"Virtual Size":"0xc"},".pdata":{"Entropy":3.3006321366120503,"Virtual Size":"0x84"},"INIT":{"Entropy":4.548019208277369,"Virtual Size":"0x24a"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2012-08-22 05:54:47","Imphash":"d7de998e454f947f62d4a6b66490563b","LoadsDespiteHVCI":"FALSE"},{"Filename":"AsIO32.sys","MD5":"2ca1044a04cb2f0ce5bd0a5832981e04","SHA1":"8b86c99328e4eb542663164685c6926e7e54ac20","SHA256":"1afa03118f87b62c59a97617e595ebb26dde8dbdd16ee47ef3ddd1097c30ef6a","Authentihash":{"MD5":"3824dd56459d29ffc5d4bb51d7123778","SHA1":"5a7dd0da0aee0bdedc14c1b7831b9ce9178a0346","SHA256":"92edd48dfac025d4069eb6491b9730d9d131b77cceaa480af9b3c32bc8c5e3a9"},"Description":"","Company":"","InternalName":"","OriginalFilename":"","FileVersion":"","Product":"","ProductVersion":"","Copyright":"","MachineType":"I386","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["ZwClose","ZwMapViewOfSection","ObReferenceObjectByHandle","ZwOpenSection","RtlInitUnicodeString","IoDeleteDevice","IoDeleteSymbolicLink","WRITE_REGISTER_ULONG","MmAllocateContiguousMemory","IofCompleteRequest","ZwUnmapViewOfSection","IoCreateSymbolicLink","IoCreateDevice","KeTickCount","WRITE_REGISTER_USHORT","WRITE_REGISTER_UCHAR","READ_REGISTER_ULONG","READ_REGISTER_USHORT","READ_REGISTER_UCHAR","KeQuerySystemTime","MmGetPhysicalAddress","KeDelayExecutionThread","WRITE_PORT_USHORT","WRITE_PORT_UCHAR","HalTranslateBusAddress","READ_PORT_ULONG","READ_PORT_USHORT","READ_PORT_UCHAR","WRITE_PORT_ULONG"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=MOPR, CN=Microsoft Windows Hardware Compatibility Publisher","ValidFrom":"2014-12-19 19:27:34","ValidTo":"2016-03-19 19:27:34","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":false,"SerialNumber":"330000001dc31a761624754f8000000000001d","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"df2a0bc442ef65cd9973329be21c642f","SHA1":"d13bcda797c6b986a1a45b7ce9184e87ba0f994c","SHA256":"41718d172e45eaa02ec88494587672cf50f96a310aebc5b49a66c0adae99edc5","SHA384":"db7864a35b468726f3d431e07825ae860ddb0d6250b3bd8906f1b0ff98ce7b4c563c73288b01ec8f1ec5a2a06f31bc40"}},{"Subject":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Windows Third Party Component CA 2012","ValidFrom":"2012-04-18 23:48:38","ValidTo":"2027-04-18 23:58:38","Signature":"5a8a67daccd5fd0d264177bf0a4678b4b3de12692b7723c2652f015fd203f461ba509d2e8c3972f36c3e6ab11e766decb7f382dcccbbc56970287366173f54ebee011648c446d91b80ae813a8d0f796d68b09eea2d3f39d3ca387ebd5e7c086e19dcc6c2f438336861e2524783e1000156d2bacb878205310a418b4ee77f5f5fed5fd3392d45eba213bffd1ec298417161165fc80a70257c59693124e471e70abb0417f79f721ec9d2bb1abe3d02fe090cb243b4591a99539396215fe0d6b72601429536ac27fdbef48577683d18bdf4be98882211865216f345ec0397107087a37043713cdbc98603170cf5735bc67de15c64edd7c548d7ed32e2d1aad3cfa7f6574e61f977eb67f288b3de00da038fd08a34373e1dd862b8d2b1f3e12f8b723b81967c6ffcec667672601b24f2a0896d5b6d002eef28dd868705c2b4b9e5be64c22af24a155c98e2c42785ff52e3627e0fb2020bd766c70ab2d33d200414503259830a7d9bed5a38120152ba2f5e20728e4af1fde771028c3be107bec973f4dd47d8b4efb4a4b330b9893e76cab90098567eabea8ab8a5d038ab6977130b142fe9aa411ff7babd3a2b348aee0aab63e663f788248e200d2b3b9de3c24952ac9f1f0e393b5dd46e506ae67d523aaa7c3315290d265e0158a74ea93d7a846f743f609fe4324f3600af6d71d33ea646655f8174f1fec171da4ca0415a82ddf11f","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":true,"SerialNumber":"610baac1000000000009","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"a569061297e8e824767dbc3184a69bea","SHA1":"adbb26a587a8f44b4fccaecb306f980d1c55a150","SHA256":"cec1afd0e310c55c1dcc601ab8e172917706aa32fb5eaf826813547fdf02dd46","SHA384":"e947cac936803f5683196e4ff1b259096073395d0b908522ddce90d57597c9f7b57f7ddcdbe021ba863d843c340da8ba"}}],"Signer":[{"SerialNumber":"330000001dc31a761624754f8000000000001d","Issuer":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Windows Third Party Component CA 2012","Version":1}]}],"RichPEHeaderHash":{"MD5":"432a6583ab7bafb3773874586c68db85","SHA1":"bb0833dab5efdcbfcad58fe4e9a35fc31de53442","SHA256":"1dffaf610cdef8285f0794d34bc503106b06dbe14d99da734436265b9461f6c9"},"Sections":{".text":{"Entropy":6.23937613305102,"Virtual Size":"0x8ad"},".rdata":{"Entropy":4.36827815837928,"Virtual Size":"0xe7"},".data":{"Entropy":1.311278124459133,"Virtual Size":"0x10"},"INIT":{"Entropy":5.344545644500133,"Virtual Size":"0x370"},".reloc":{"Entropy":3.6862767817925604,"Virtual Size":"0xc6"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2012-08-22 05:54:43","Imphash":"2699b7ae36fcadd71425ebafd231d0d1","LoadsDespiteHVCI":"FALSE"},{"Filename":"AsIO3.sys","MD5":"40f39a98fb513411dacdfc5b2d972206","SHA1":"fe02ae340dc7fe08e4ad26dab9de418924e21603","SHA256":"26453afb1f808f64bec87a2532a9361b696c0ed501d6b973a1f1b5ae152a4d40","Authentihash":{"MD5":"8c33214968ec9043fa1c6abf1911e06d","SHA1":"3075f1fc419a62544b291d02e9067783cb0fd1f3","SHA256":"5aa7a47c7abaf13453b8ab309ef16bdd80ceaf7407e67fa27932d4591f025d67"},"Description":"","Company":"","InternalName":"","OriginalFilename":"","FileVersion":"","Product":"","ProductVersion":"","Copyright":"","MachineType":"AMD64","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["DbgPrint","RtlGetVersion","KeDelayExecutionThread","ExAllocatePoolWithTag","ExFreePoolWithTag","MmGetSystemRoutineAddress","MmAllocateContiguousMemory","IofCompleteRequest","IoCreateDevice","IoCreateSymbolicLink","IoDeleteDevice","IoDeleteSymbolicLink","RtlCopyUnicodeString","ObReferenceObjectByHandle","ObfDereferenceObject","ZwClose","ZwOpenSection","ZwMapViewOfSection","ZwUnmapViewOfSection","MmGetPhysicalAddress","__C_specific_handler","ZwOpenFile","ZwQueryInformationFile","ZwReadFile","KeBugCheckEx","IoIs32bitProcess","RtlInitUnicodeString","HalTranslateBusAddress"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=DigiCert, Inc., CN=DigiCert Timestamp 2021","ValidFrom":"2021-01-01 00:00:00","ValidTo":"2031-01-06 00:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":false,"SerialNumber":"0d424ae0be3a88ff604021ce1400f0dd","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"c0189c338449a42fe8358c2c1fbecc60","SHA1":"b8ac0ee6875594b80ad86a6df6dd1fa3048c187c","SHA256":"a43de6baf968a942da017b70769fdb65b3cfb1bbca1f9174da26a7d8aae78ec5","SHA384":"76d3a316a5a106050298418cce3beea16100524723d9e3220b0de51bfb6f1c35a5d4c7cd10b358fef7bf94c3e3562150"}},{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 Assured ID Timestamping CA","ValidFrom":"2016-01-07 12:00:00","ValidTo":"2031-01-07 12:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":true,"SerialNumber":"0aa125d6d6321b7e41e405da3697c215","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"8d26184fc613f89aba1cefb30fce1b53","SHA1":"63a7e376bad5ec2e419d514a403bcf46c8d31d95","SHA256":"56b5f0d9db578e3f142921daa387902722a76700375c7e1c4ae0ba004bacaa0c","SHA384":"d8c9691fe9dbe182f07b49b07fbb4f589fa7b38b5c4d21f265d3a2e818f4b1bfb39e03faab2ec05bb10333a99914fb8a"}},{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA","ValidFrom":"2011-04-15 19:45:33","ValidTo":"2021-04-15 19:55:33","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"61204db4000000000027","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"8e3ffc222fbcebdbb8b23115ab259be7","SHA1":"ee20bff28ffe13be731c294c90d6ded5aae0ec0e","SHA256":"59826b69bc8c28118c96323b627da59aaca0b142cc5d8bad25a8fcfd399aa821","SHA384":"f2dab7e56a33298654924501499487f6ba72c7d9477476a186e1ed7a9be031fade0e35ac09eff5e56bbbab95ae5374e7"}},{"Subject":"??=TW, ??=Private Organization, serialNumber=23638777, C=TW, L=Taipei City, O=ASUSTeK Computer Inc., CN=ASUSTeK Computer Inc.","ValidFrom":"2019-04-01 00:00:00","ValidTo":"2022-01-11 12:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":false,"SerialNumber":"0c64962e4467edcc1579646b7337ec8c","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"69796942ecdfadbd806bdea1460a5115","SHA1":"0ce9329828324db04bd0a7b101b4fbfedb3be8b2","SHA256":"efd9b83b154c3e805e1bf7fdfd6a7f7bfdcf2ff3e191d1c33bdc427b6c82039b","SHA384":"e27d21dc30c40e7b675120062e69c438e9f448ceed7b0434dedd129848c6a8edf05ec07ac25f5ec300be0da46a4c6eab"}},{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert EV Code Signing CA (SHA2)","ValidFrom":"2012-04-18 12:00:00","ValidTo":"2027-04-18 12:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":true,"SerialNumber":"03f1b4e15f3a82f1149678b3d7d8475c","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"83f5de89f641d0fbf60248e10a7b9534","SHA1":"382a73a059a08698d6eb98c87e1b36fc750933a4","SHA256":"eec58131dc11cd7f512501b15fdbc6074c603b68ca91f7162d5a042054edb0cf","SHA384":"4a25018683cabfb8ec2cad136334f37f33c89aa8540326322991d997c8adfb7faf06ab602ebd46630fe75fe3d2edc6b1"}}],"Signer":[{"SerialNumber":"0c64962e4467edcc1579646b7337ec8c","Issuer":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert EV Code Signing CA (SHA2)","Version":1}]}],"RichPEHeaderHash":{"MD5":"bd657195a5248af37c088ce8712464a4","SHA1":"0bf831fc65d253f731f72b7f46c099ddcab406a2","SHA256":"7affe0e940b8c0536ddeef345f02a37077919e88f16b182663de8c7dd947e46c"},"Sections":{".text":{"Entropy":6.325844334310556,"Virtual Size":"0x47f3"},".rdata":{"Entropy":5.476061155646105,"Virtual Size":"0x84c"},".data":{"Entropy":0.9352337914257391,"Virtual Size":"0x290"},".pdata":{"Entropy":3.923736262912225,"Virtual Size":"0x174"},"INIT":{"Entropy":5.255268621688079,"Virtual Size":"0x42c"},".reloc":{"Entropy":2.9464393446710155,"Virtual Size":"0x14"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2021-09-29 06:05:28","Imphash":"f5ebade1d3a6d3bde264b0c7f9f639e7","LoadsDespiteHVCI":"TRUE"},{"Filename":"AsIO3.sys","MD5":"19f32bf24b725f103f49dc3fa2f4f0bd","SHA1":"e40ea8d498328b90c4afbb0bb0e8b91b826f688e","SHA256":"2d195cd4400754cc6f6c3f8ab1fe31627932c3c1bf8d5d0507c292232d1a2396","Authentihash":{"MD5":"cf61dd8f9a187de6219f930866defcbd","SHA1":"80bb26a2ef12a3d9d77fe5dd6059d5955b690b2e","SHA256":"a7bb08f99a9701482ce693d71e95559b10a247c4e8f50deba8097b0d3f191532"},"Description":"","Company":"","InternalName":"","OriginalFilename":"","FileVersion":"","Product":"","ProductVersion":"","Copyright":"","MachineType":"AMD64","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["KeSetEvent","KeDelayExecutionThread","KeWaitForSingleObject","ExAllocatePoolWithTag","ExFreePoolWithTag","MmGetSystemRoutineAddress","MmAllocateContiguousMemory","MmFreeContiguousMemory","IofCompleteRequest","IoCreateDevice","IoCreateSymbolicLink","IoCreateSynchronizationEvent","IoDeleteDevice","RtlGetVersion","IoIs32bitProcess","ObReferenceObjectByHandle","ObfDereferenceObject","ZwClose","ZwOpenSection","ZwMapViewOfSection","ZwUnmapViewOfSection","MmGetPhysicalAddress","__C_specific_handler","ZwOpenFile","ZwQueryInformationFile","ZwReadFile","KeBugCheckEx","DbgPrint","RtlCopyUnicodeString","IoDeleteSymbolicLink","RtlInitUnicodeString","HalSetBusDataByOffset","HalGetBusDataByOffset","HalTranslateBusAddress"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=DigiCert, Inc., CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1","ValidFrom":"2021-04-29 00:00:00","ValidTo":"2036-04-28 23:59:59","Signature":"3a23443d8d0876ee8fbc3a99d356e0021aa5f84834f32cb6e67466f79472b100caaf6c302713129e90449f4bfd9ea37c26d537bc3a5d486d95d53f49f427bb16814550fd9cbdb685e0767e3771cb22f75aaa90cff5936ae3eb20d1d55079889a8a8ac1b6bda148187edcd8801a111918cd61998156f6c9e376e7c4e41b5f43f83e94ff76393d9ed499cf4add28eb5f26a1955848d51afed7273ffd90d17686dd1cb0605cf30da8eee089a1bd39e1384eda6ebb369dfbe521535ac3cae96af1a23edb43b833c84f38149299f5ddce546dd95d02141f40337c03e295b2c221757352cb46d8c4341ca2a54b8dcd6f76372c853f1ace26e918be9007b0437f9588208270f0cccaeffd29355c1f893855f7378a8b09a1cb0be9311aff2e195c3971e1be9ca70a06d62667b792e64e5fde7aac49cf2ea47492addb3ca49c861fe3c1561b2b23ff8fb5ea887b706be6a0bafd3a3f45a6c4e81691528b41c048844b964dab4440e38df01528ceedf11856072a2f10c40c08643c338fae288c3ccb8f880b0dbf3bf4ce1e7b8eefb5ebcbb7f07713e6e7283fac12aea52f226c41f9825c1566cc6c0ecac586c3f626330c074ba0d307026a6a4030484b34a85120bbad1b8508e2590d6dca05502bea4a1c9ea5fda0a71f0674e7f2d65290fdaf854821f9573bb49c03ed8645f4b4616ebf68e2266086eac8afa9fe941de7631b3a8656784e","SignatureAlgorithmOID":"1.2.840.113549.1.1.12","IsCertificateAuthority":true,"SerialNumber":"08ad40b260d29c4c9f5ecda9bd93aed9","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"5d8003a64dfa5a4d88365da1566038cb","SHA1":"79465b56bc7ad55a37bdf633943da8bfc84db228","SHA256":"84bdc82e2f2a7f7aaa782667dac556ffcb2b33240c1f9c0a00a3264526a98332","SHA384":"65b1d4076a89ae273f57e6eeedecb3eae129b4168f76fa7671914cdf461d542255c59d9b85b916ae0ca6fc0fcf7a8e64"}},{"Subject":"??=Private Organization, ??=TW, serialNumber=23638777, C=TW, ST=Taipei City, L=Beitou District, O=ASUSTeK COMPUTER INC., CN=ASUSTeK COMPUTER INC.","ValidFrom":"2021-10-22 00:00:00","ValidTo":"2024-10-22 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":false,"SerialNumber":"0bbe02c8838fbf02ab56edabb1e34c19","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"0357e292e0e92b06c92b21cacfcfa451","SHA1":"f52795bc8de5d803f09e20dd216d7df861f4cb34","SHA256":"b33b80e64cdfb28fb9afb17259be19ffe1edf8aae62fcfbfe8ff301f786c500d","SHA384":"5fbe918c3fa1034d5671ae38b20773df18b8f9dd48e60f90c5c98708e73d6ca0c6dec4e2bcb0de22ba3efb59479db152"}}],"Signer":[{"SerialNumber":"0bbe02c8838fbf02ab56edabb1e34c19","Issuer":"C=US, O=DigiCert, Inc., CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1","Version":1}]}],"RichPEHeaderHash":{"MD5":"dbe8b55f933a7abbc26d9f121bbf2b84","SHA1":"81e0e90f23b7d56dd1dccbbe04bb3c54892af7b8","SHA256":"270748ae970faf04f98d588b783073c9b24e3dae8630ad2e3f1a862731078f4b"},"Sections":{".text":{"Entropy":6.407232131831549,"Virtual Size":"0x58d3"},".rdata":{"Entropy":5.437107960063165,"Virtual Size":"0x8d4"},".data":{"Entropy":0.9313275414257391,"Virtual Size":"0x290"},".pdata":{"Entropy":4.005604411589105,"Virtual Size":"0x1bc"},"INIT":{"Entropy":5.265885086539526,"Virtual Size":"0x4ec"},".reloc":{"Entropy":3.1086949695628423,"Virtual Size":"0x14"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2022-05-18 22:51:01","Imphash":"b3e26c5e0de2d01597dca208ef27cc38","LoadsDespiteHVCI":"TRUE"},{"Filename":"asio.sys","MD5":"bfe96411cf67edb3cee2b9894b910cd5","SHA1":"67dfd415c729705396ce54166bd70faf09ac7f10","SHA256":"48891874441c6fa69e5518d98c53d83b723573e280c6c65ccfbde9039a6458c9","Authentihash":{"MD5":"3824dd56459d29ffc5d4bb51d7123778","SHA1":"5a7dd0da0aee0bdedc14c1b7831b9ce9178a0346","SHA256":"92edd48dfac025d4069eb6491b9730d9d131b77cceaa480af9b3c32bc8c5e3a9"},"Description":"","Company":"","InternalName":"","OriginalFilename":"","FileVersion":"","Product":"","ProductVersion":"","Copyright":"","MachineType":"I386","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["ZwClose","ZwMapViewOfSection","ObReferenceObjectByHandle","ZwOpenSection","RtlInitUnicodeString","IoDeleteDevice","IoDeleteSymbolicLink","WRITE_REGISTER_ULONG","MmAllocateContiguousMemory","IofCompleteRequest","ZwUnmapViewOfSection","IoCreateSymbolicLink","IoCreateDevice","KeTickCount","WRITE_REGISTER_USHORT","WRITE_REGISTER_UCHAR","READ_REGISTER_ULONG","READ_REGISTER_USHORT","READ_REGISTER_UCHAR","KeQuerySystemTime","MmGetPhysicalAddress","KeDelayExecutionThread","WRITE_PORT_USHORT","WRITE_PORT_UCHAR","HalTranslateBusAddress","READ_PORT_ULONG","READ_PORT_USHORT","READ_PORT_UCHAR","WRITE_PORT_ULONG"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer , G3","ValidFrom":"2012-05-01 00:00:00","ValidTo":"2012-12-31 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"79a2a585f9d1154213d9b83ef6b68ded","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"e6d820afb23af20a65cf0b03247ea05e","SHA1":"7a8f7c37453f99390ee1e94bb5d3d1cba3a0eea7","SHA256":"7e722dc40e6b9abf8c20aa4d887e34b6d2c6b8cbe53a055d49bf9f5e946e0d27","SHA384":"7e14609969a388d38d227df1dbb9ce086c9a820142c94fd1a28ef2835a8aa528aef4c6399bce344d79adb5f3dad86afa"}},{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA","ValidFrom":"2003-12-04 00:00:00","ValidTo":"2013-12-03 23:59:59","Signature":"4a6bf9ea58c2441c318979992b96bf82ac01d61c4ccdb08a586edf0829a35ec8ca9313e704520def47272f0038b0e4c9934e9ad4226215f73f37214f703180f18b3887b3e8e89700fecf55964e24d2a9274e7aaeb76141f32acee7c9d95eddbb2b853eb59db5d9e157ffbeb4c57ef5cf0c9ef097fe2bd33b521b1b3827f73f4a","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"47bf1995df8d524643f7db6d480d31a4","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"518d2ea8a21e879c942d504824ac211c","SHA1":"21ce87d827077e61abddf2beba69fde5432ea031","SHA256":"1ec3b4f02e03930a470020e0e48d24b84678bb558f46182888d870541f5e25c7","SHA384":"53e346bbde23779a5d116cc9d86fdd71c97b1f1b343439f8a11aa1d3c87af63864bb8488a5aeb2d0c26a6a1e0b15f03f"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. , For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority , G5","ValidFrom":"2006-11-08 00:00:00","ValidTo":"2021-11-07 23:59:59","Signature":"1302ddf8e88600f25af8f8200c59886207cecef74ef9bb59a198e5e138dd4ebc6618d3adeb18f20dc96d3e4a9420c33cbabd6554c6af44b310ad2c6b3eabd707b6b88163c5f95e2ee52a67cecd330c2ad7895603231fb3bee83a0859b4ec4535f78a5bff66cf50afc66d578d1978b7b9a2d157ea1f9a4bafbac98e127ec6bdff","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"250ce8e030612e9f2b89f7054d7cf8fd","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"918d9eb6a6cd36c531eceb926170a7e1","SHA1":"0ae95700d65e6f59715aa47048993ca7858e676a","SHA256":"47c46e6eaa3780eace3d0d891346cd373359d246b21a957219dbab4c8f37c166","SHA384":"e54017c93ba52f012cc15aeb3bcbce1e90a0006ff8dca231a24fc572926770f63213343f538003407bed3463fa9c4a85"}},{"Subject":"C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority","ValidFrom":"2006-05-23 17:01:29","ValidTo":"2016-05-23 17:11:29","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"610c120600000000001b","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"53c41bc1164e09e0cd1617a5bf913efd","SHA1":"93c03aac8951d494ecd5696b1c08658541b18727","SHA256":"40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b","SHA384":"f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"}},{"Subject":"C=TW, ST=Taiwan, L=Taipei / Peitou, O=ASUSTeK Computer Inc., OU=Digital ID Class 3 , Microsoft Software Validation v2, OU=Quality Testing Department, CN=ASUSTeK Computer Inc.","ValidFrom":"2012-07-31 00:00:00","ValidTo":"2015-08-03 23:59:59","Signature":"03cd161c1960e13d0b06441f08fdfc9df8319f8d87a83ecc865bc20767841d4087e40dc9d770bdc5c0fe6ccb9cf3e08bee7364451b03fb3130356761cae54417e8a282ed7cd33b0becd72e8799b616a2766976a7172a1cc299e8321ebeb479f592e03f425da4b2ea6a0cd0b5cc32b9bdeec80aa3ef0a62d6e16b72765301d53ef883ab9210a4b868ff2e2724e37804feb5277d3e26da8ba9d0b6ef61769d1c0f62a78757779d7134a63320b1a692584f12162d3fa20ec6e1b038b1a8d7afc2fad7b692759c6a000159714271f40d608fed3c08213b757fa75baf4674380f5aea46b7125f17532c636876c1f3e0d4b0350822f2a640001fda794b969e2cc681c2","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"7d08d9bc130726de26ee4ef28e133084","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"72cafb0a175f0481177fa2c9803283c7","SHA1":"b603167b958c5fcd7094552891ddc4e2ea4c149f","SHA256":"a36a0024075771a4b30eab8f1288817059fe1a01003d0c1d92f647df17f3b688","SHA384":"33c28dc6857ce5d20a2e9ba8a47f6bc80a9a98fba518fd732963bedbbb408848b89b3d8438d413f8b933ee761ffa1653"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","ValidFrom":"2010-02-08 00:00:00","ValidTo":"2020-02-07 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"5200e5aa2556fc1a86ed96c9d44b33c7","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"b30c31a572b0409383ed3fbe17e56e81","SHA1":"4843a82ed3b1f2bfbee9671960e1940c942f688d","SHA256":"03cda47a6e654ed85d932714fc09ce4874600eda29ec6628cfbaeb155cab78c9","SHA384":"bbda8407c4f9fc4e54d772f1c7fb9d30bc97e1f97ecd51c443063d1fa0644e266328781776cd5c44896c457c75f4d7da"}}],"Signer":[{"SerialNumber":"7d08d9bc130726de26ee4ef28e133084","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","Version":1}]}],"RichPEHeaderHash":{"MD5":"432a6583ab7bafb3773874586c68db85","SHA1":"bb0833dab5efdcbfcad58fe4e9a35fc31de53442","SHA256":"1dffaf610cdef8285f0794d34bc503106b06dbe14d99da734436265b9461f6c9"},"Sections":{".text":{"Entropy":6.23937613305102,"Virtual Size":"0x8ad"},".rdata":{"Entropy":4.36827815837928,"Virtual Size":"0xe7"},".data":{"Entropy":1.311278124459133,"Virtual Size":"0x10"},"INIT":{"Entropy":5.344545644500133,"Virtual Size":"0x370"},".reloc":{"Entropy":3.6862767817925604,"Virtual Size":"0xc6"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2012-08-22 05:54:43","Imphash":"2699b7ae36fcadd71425ebafd231d0d1","LoadsDespiteHVCI":"FALSE"},{"Filename":"asio.sys","MD5":"ea14899d1bfba397bc731770765768d1","SHA1":"c775ca665ed4858acc3f7e75e025cbbda1f8c687","SHA256":"506f953bbb285aeb8af0549eb24f52f3b7af36afe740afa36735bac70573ce28","Authentihash":{"MD5":"9fd03554246c6c74c232919c680d7be8","SHA1":"b25550309c902a21b03367ae27694c5a29b891b5","SHA256":"c3e3719ca592ba65a67f594ec1a08d0d7ad724b088be77d48cb33627c56f4614"},"Description":"","Company":"","InternalName":"","OriginalFilename":"","FileVersion":"","Product":"","ProductVersion":"","Copyright":"","MachineType":"AMD64","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["ZwMapViewOfSection","ObReferenceObjectByHandle","ZwOpenSection","RtlInitUnicodeString","IoDeleteDevice","IoDeleteSymbolicLink","ZwClose","MmGetPhysicalAddress","MmAllocateContiguousMemory","ZwUnmapViewOfSection","IoIs32bitProcess","IoCreateSymbolicLink","IoCreateDevice","IofCompleteRequest","KeDelayExecutionThread","HalTranslateBusAddress"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, ST=California, L=Santa Clara, O=NVIDIA Corporation, OU=Digital ID Class 3 , Microsoft Software Validation v2, OU=Software, CN=NVIDIA Corporation","ValidFrom":"2011-09-02 00:00:00","ValidTo":"2014-09-01 23:59:59","Signature":"5238793a97b2868da546597dbe0a1fba197ae635b9f53b53e26758194d749767e05fb1ce407fd31469376b37c67d5d48bc834f970ac733cd63d557e8a3be20a1fbf9d09e7a5c6c4ebd6fc18a68d0842d2ffdf6f79142d914c6521d227014040fa12f2afb3878aa065cfbed7fa29091b4fe54ea6237a0e1f8f183d0573ebb5bfe712cee4c49bd0b2f40c33bfcf0c7de0bc51ce01a70d14072d4d01216f36e388159220a4d8e3250ddccd71c7ef8a93a26edda2e959b598703a85fa391630e052454e31390dd82d69afee5df2f287bdce8f45f6363c27e6e23ab92faefc7e8d78c10cc1f936f33c36a134cb8820b5749ff479f70834bd99d8e15ad79a1cb3d7ebf","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"43bb437d609866286dd839e1d00309f5","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"cef292b5c6cdb07e480ccbba0c9d56d1","SHA1":"15c37dbebe6fcc77108e3d7ad982676d3d5e77f7","SHA256":"3cb152375fa9e694fd2f9167c382005166871c783774997df1a42e0b6013d82a","SHA384":"e64427dea71a71110ebc317f3552cd7193c5743f72d5cac9257abe80346d15ee42930d5a85e16c02ea06f56c7e8811fb"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. , For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority , G5","ValidFrom":"2011-02-22 19:25:17","ValidTo":"2021-02-22 19:35:17","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"611993e400000000001c","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"78a717e082dcc1cda3458d917e677d14","SHA1":"4a872e0e51f9b304469cd1dedb496ee9b8b983a4","SHA256":"317fa1d234ebc49040ebc5e8746f8997471496051b185a91bdd9dfbb23fab5f8","SHA384":"b71052da4eb9157c8c1a5d7f55df19d69b9128598b72fcca608e5b7cc7d64c43c5504b9c86355a6dc22ee40c88cc385c"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","ValidFrom":"2010-02-08 00:00:00","ValidTo":"2020-02-07 23:59:59","Signature":"5622e634a4c461cb48b901ad56a8640fd98c91c4bbcc0ce5ad7aa0227fdf47384a2d6cd17f711a7cec70a9b1f04fe40f0c53fa155efe749849248581261c911447b04c638cbba134d4c645e80d85267303d0a98c646ddc7192e645056015595139fc58146bfed4a4ed796b080c4172e737220609be23e93f449a1ee9619dccb1905cfc3dd28dac423d6536d4b43d40288f9b10cf2326cc4b20cb901f5d8c4c34ca3cd8e537d66fa520bd34eb26d9ae0de7c59af7a1b42191336f86e858bb257c740e58fe751b633fce317c9b8f1b969ec55376845b9cad91faaced93ba5dc82153c2825363af120d5087111b3d5452968a2c9c3d921a089a052ec793a54891d3","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"5200e5aa2556fc1a86ed96c9d44b33c7","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"b30c31a572b0409383ed3fbe17e56e81","SHA1":"4843a82ed3b1f2bfbee9671960e1940c942f688d","SHA256":"03cda47a6e654ed85d932714fc09ce4874600eda29ec6628cfbaeb155cab78c9","SHA384":"bbda8407c4f9fc4e54d772f1c7fb9d30bc97e1f97ecd51c443063d1fa0644e266328781776cd5c44896c457c75f4d7da"}}],"Signer":[{"SerialNumber":"43bb437d609866286dd839e1d00309f5","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","Version":1}]}],"RichPEHeaderHash":{"MD5":"fdbc1ff6c9321efd70ec149c3c8ccac6","SHA1":"d77615c985da37ca9099b27c1be4785c6cb7ccf6","SHA256":"4dbce3e8c08dd544b78f87323f6d794fb990bb10cb6d239fe367da87a803f23c"},"Sections":{".text":{"Entropy":6.108859458208728,"Virtual Size":"0xd86"},".rdata":{"Entropy":4.337980114178664,"Virtual Size":"0x188"},".data":{"Entropy":0,"Virtual Size":"0xc"},".pdata":{"Entropy":3.2608964358708645,"Virtual Size":"0x84"},"INIT":{"Entropy":4.571215641554434,"Virtual Size":"0x24a"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2010-06-28 01:19:38","Imphash":"b4b90c1b054ebe273bff4b2fd6927990","LoadsDespiteHVCI":"FALSE"},{"Filename":"AsIO2.sys","MD5":"09672532194b4bff5e0f7a7d782c7bf2","SHA1":"aa2ea973bb248b18973e57339307cfb8d309f687","SHA256":"5ae23f1fcf3fb735fcf1fa27f27e610d9945d668a149c7b7b0c84ffd6409d99a","Authentihash":{"MD5":"9387de920b7da0bd65f15323feed6a18","SHA1":"92fee95e32a727d135f1f46ca98c201fffbf6950","SHA256":"9c7ad854f6670452d7da064d4b429eb90c42155b6f7eaa52ee471d9ee8b61e6f"},"Description":"","Company":"","InternalName":"","OriginalFilename":"","FileVersion":"","Product":"","ProductVersion":"","Copyright":"","MachineType":"AMD64","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["DbgPrint","KeDelayExecutionThread","ExAllocatePoolWithTag","ExFreePoolWithTag","MmGetSystemRoutineAddress","MmAllocateContiguousMemory","IofCompleteRequest","IoCreateDevice","IoCreateSymbolicLink","IoDeleteDevice","IoDeleteSymbolicLink","IoIs32bitProcess","RtlCopyUnicodeString","ObfDereferenceObject","ZwClose","ZwOpenSection","ZwMapViewOfSection","ZwUnmapViewOfSection","MmGetPhysicalAddress","RtlCompareUnicodeString","ZwOpenFile","ZwQueryInformationFile","ZwReadFile","__C_specific_handler","KeBugCheckEx","ObReferenceObjectByHandle","RtlInitUnicodeString","HalTranslateBusAddress"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA , G2","ValidFrom":"2012-12-21 00:00:00","ValidTo":"2020-12-30 23:59:59","Signature":"03099b8f79ef7f5930aaef68b5fae3091dbb4f82065d375fa6529f168dea1c9209446ef56deb587c30e8f9698d23730b126f47a9ae3911f82ab19bb01ac38eeb599600adce0c4db2d031a6085c2a7afce27a1d574ca86518e979406225966ec7c7376a8321088e41eaddd9573f1d7749872a16065ea6386a2212a35119837eb6","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"7e93ebfb7cc64e59ea4b9a77d406fc3b","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"d0785ad36e427c92b19f6826ab1e8020","SHA1":"365b7a9c21bd9373e49052c3e7b3e4646ddd4d43","SHA256":"c2abb7484da91a658548de089d52436175fdb760a1387d225611dc0613a1e2ff","SHA384":"eab4fe5ef90e0de4a6aa3a27769a5e879f588df5e4785aa4104debd1f81e19ea56d33e3a16e5facf99f68b5d8e3d287b"}},{"Subject":"C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer , G4","ValidFrom":"2012-10-18 00:00:00","ValidTo":"2020-12-29 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"0ecff438c8febf356e04d86a981b1a50","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"e9d38360b914c8863f6cba3ee58764d3","SHA1":"4cba8eae47b6bf76f20b3504b98b8f062694a89b","SHA256":"88901d86a4cc1f1bb193d08e1fb63d27452e63f83e228c657ab1a92e4ade3976","SHA384":"e9f2a75334a9e336c5a4712eadee88d0374b0fdc273262f4e65c9040ad2793067cc076696db5279a478773485e285652"}},{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA","ValidFrom":"2011-04-15 19:45:33","ValidTo":"2021-04-15 19:55:33","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"61204db4000000000027","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"8e3ffc222fbcebdbb8b23115ab259be7","SHA1":"ee20bff28ffe13be731c294c90d6ded5aae0ec0e","SHA256":"59826b69bc8c28118c96323b627da59aaca0b142cc5d8bad25a8fcfd399aa821","SHA384":"f2dab7e56a33298654924501499487f6ba72c7d9477476a186e1ed7a9be031fade0e35ac09eff5e56bbbab95ae5374e7"}},{"Subject":"??=TW, ??=Private Organization, serialNumber=23638777, C=TW, L=Taipei City, O=ASUSTeK Computer Inc., CN=ASUSTeK Computer Inc.","ValidFrom":"2019-04-01 00:00:00","ValidTo":"2022-01-11 12:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":false,"SerialNumber":"0c64962e4467edcc1579646b7337ec8c","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"69796942ecdfadbd806bdea1460a5115","SHA1":"0ce9329828324db04bd0a7b101b4fbfedb3be8b2","SHA256":"efd9b83b154c3e805e1bf7fdfd6a7f7bfdcf2ff3e191d1c33bdc427b6c82039b","SHA384":"e27d21dc30c40e7b675120062e69c438e9f448ceed7b0434dedd129848c6a8edf05ec07ac25f5ec300be0da46a4c6eab"}},{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert EV Code Signing CA (SHA2)","ValidFrom":"2012-04-18 12:00:00","ValidTo":"2027-04-18 12:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":true,"SerialNumber":"03f1b4e15f3a82f1149678b3d7d8475c","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"83f5de89f641d0fbf60248e10a7b9534","SHA1":"382a73a059a08698d6eb98c87e1b36fc750933a4","SHA256":"eec58131dc11cd7f512501b15fdbc6074c603b68ca91f7162d5a042054edb0cf","SHA384":"4a25018683cabfb8ec2cad136334f37f33c89aa8540326322991d997c8adfb7faf06ab602ebd46630fe75fe3d2edc6b1"}}],"Signer":[{"SerialNumber":"0c64962e4467edcc1579646b7337ec8c","Issuer":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert EV Code Signing CA (SHA2)","Version":1}]}],"RichPEHeaderHash":{"MD5":"4d4124d64d3ec50417cbec6daeee88c6","SHA1":"8bda6992e8fd342be0abce910d9a992c8ebbce34","SHA256":"2e82cfe54b31c08c9ac79f9cfa2dc0681ae022435c35d74c9c5b0a8d62a578ff"},"Sections":{".text":{"Entropy":6.504139925831708,"Virtual Size":"0x24d2"},".rdata":{"Entropy":5.447692050379133,"Virtual Size":"0x874"},".data":{"Entropy":2.591917186688699,"Virtual Size":"0x20"},".pdata":{"Entropy":3.9085448824956335,"Virtual Size":"0x18c"},"INIT":{"Entropy":5.215252524750182,"Virtual Size":"0x436"},".reloc":{"Entropy":2.9464393446710155,"Virtual Size":"0x14"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2019-04-09 05:59:16","Imphash":"81e2eb25e24938b90806de865630a2b2","LoadsDespiteHVCI":"TRUE"},{"Filename":"AsIO3.sys","MD5":"ba23266992ad964eff6d358d946b76bd","SHA1":"d1670bd08cfd376fc2b70c6193f3099078f1d72f","SHA256":"71ff60722231c7641ad593756108cf6779dbaad21c7b08065fb1d4e225eab14d","Authentihash":{"MD5":"ace2d8ea30005bce12b1421f431bc39c","SHA1":"f084b6ba134b23e06f5867e650ba4eb9d1007231","SHA256":"12af7c39519e16307c2c62a84ca40017b43acf7fa90ec97c182701ffcffa1b61"},"Description":"","Company":"","InternalName":"","OriginalFilename":"","FileVersion":"","Product":"","ProductVersion":"","Copyright":"","MachineType":"AMD64","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["DbgPrint","RtlGetVersion","KeDelayExecutionThread","ExAllocatePoolWithTag","ExFreePoolWithTag","MmGetSystemRoutineAddress","MmAllocateContiguousMemory","IofCompleteRequest","IoCreateDevice","IoCreateSymbolicLink","IoDeleteDevice","IoDeleteSymbolicLink","RtlCopyUnicodeString","ObReferenceObjectByHandle","ObfDereferenceObject","ZwClose","ZwOpenSection","ZwMapViewOfSection","ZwUnmapViewOfSection","MmGetPhysicalAddress","__C_specific_handler","ZwOpenFile","ZwQueryInformationFile","ZwReadFile","KeBugCheckEx","IoIs32bitProcess","RtlInitUnicodeString","HalTranslateBusAddress"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=DigiCert, Inc., CN=DigiCert Timestamp 2021","ValidFrom":"2021-01-01 00:00:00","ValidTo":"2031-01-06 00:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":false,"SerialNumber":"0d424ae0be3a88ff604021ce1400f0dd","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"c0189c338449a42fe8358c2c1fbecc60","SHA1":"b8ac0ee6875594b80ad86a6df6dd1fa3048c187c","SHA256":"a43de6baf968a942da017b70769fdb65b3cfb1bbca1f9174da26a7d8aae78ec5","SHA384":"76d3a316a5a106050298418cce3beea16100524723d9e3220b0de51bfb6f1c35a5d4c7cd10b358fef7bf94c3e3562150"}},{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 Assured ID Timestamping CA","ValidFrom":"2016-01-07 12:00:00","ValidTo":"2031-01-07 12:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":true,"SerialNumber":"0aa125d6d6321b7e41e405da3697c215","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"8d26184fc613f89aba1cefb30fce1b53","SHA1":"63a7e376bad5ec2e419d514a403bcf46c8d31d95","SHA256":"56b5f0d9db578e3f142921daa387902722a76700375c7e1c4ae0ba004bacaa0c","SHA384":"d8c9691fe9dbe182f07b49b07fbb4f589fa7b38b5c4d21f265d3a2e818f4b1bfb39e03faab2ec05bb10333a99914fb8a"}},{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA","ValidFrom":"2011-04-15 19:45:33","ValidTo":"2021-04-15 19:55:33","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"61204db4000000000027","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"8e3ffc222fbcebdbb8b23115ab259be7","SHA1":"ee20bff28ffe13be731c294c90d6ded5aae0ec0e","SHA256":"59826b69bc8c28118c96323b627da59aaca0b142cc5d8bad25a8fcfd399aa821","SHA384":"f2dab7e56a33298654924501499487f6ba72c7d9477476a186e1ed7a9be031fade0e35ac09eff5e56bbbab95ae5374e7"}},{"Subject":"??=TW, ??=Private Organization, serialNumber=23638777, C=TW, L=Taipei City, O=ASUSTeK Computer Inc., CN=ASUSTeK Computer Inc.","ValidFrom":"2019-04-01 00:00:00","ValidTo":"2022-01-11 12:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":false,"SerialNumber":"0c64962e4467edcc1579646b7337ec8c","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"69796942ecdfadbd806bdea1460a5115","SHA1":"0ce9329828324db04bd0a7b101b4fbfedb3be8b2","SHA256":"efd9b83b154c3e805e1bf7fdfd6a7f7bfdcf2ff3e191d1c33bdc427b6c82039b","SHA384":"e27d21dc30c40e7b675120062e69c438e9f448ceed7b0434dedd129848c6a8edf05ec07ac25f5ec300be0da46a4c6eab"}},{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert EV Code Signing CA (SHA2)","ValidFrom":"2012-04-18 12:00:00","ValidTo":"2027-04-18 12:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":true,"SerialNumber":"03f1b4e15f3a82f1149678b3d7d8475c","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"83f5de89f641d0fbf60248e10a7b9534","SHA1":"382a73a059a08698d6eb98c87e1b36fc750933a4","SHA256":"eec58131dc11cd7f512501b15fdbc6074c603b68ca91f7162d5a042054edb0cf","SHA384":"4a25018683cabfb8ec2cad136334f37f33c89aa8540326322991d997c8adfb7faf06ab602ebd46630fe75fe3d2edc6b1"}}],"Signer":[{"SerialNumber":"0c64962e4467edcc1579646b7337ec8c","Issuer":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert EV Code Signing CA (SHA2)","Version":1}]}],"RichPEHeaderHash":{"MD5":"b6539d5c7cfa1f973bd84a2b5f9e21ff","SHA1":"8cdb66c7de4ddc498383fafea692448ccbdfd066","SHA256":"f3d0d00d01297987bc4c626fec0a82efb94cef8ebe74e46e7b8eb63abe087d7b"},"Sections":{".text":{"Entropy":6.323949092110609,"Virtual Size":"0x4733"},".rdata":{"Entropy":5.459170046837529,"Virtual Size":"0x83c"},".data":{"Entropy":0.9406144310784021,"Virtual Size":"0x290"},".pdata":{"Entropy":3.8692348543800357,"Virtual Size":"0x174"},"INIT":{"Entropy":5.255268621688079,"Virtual Size":"0x42c"},".reloc":{"Entropy":2.9464393446710155,"Virtual Size":"0x14"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2021-05-31 21:44:39","Imphash":"f5ebade1d3a6d3bde264b0c7f9f639e7","LoadsDespiteHVCI":"TRUE"},{"Filename":"AsIO2.sys","MD5":"f4e1997192d5a95a38965c9e15c687fc","SHA1":"d3b23a0b70d6d279abd8db109f08a8b0721ce327","SHA256":"72322fa8bba20df6966acbcf41e83747893fd173cd29de99b5ad1a5d3bf8f2de","Authentihash":{"MD5":"00222ac0100839199b77ebb2c911eda5","SHA1":"bb4bff7156e15818a9e6344bad411587f3dcc0a1","SHA256":"0e955e57f078a2c0de7d113e85859bb3e0fcac772a5a1b9b9709a90a86ef4cd5"},"Description":"","Company":"","InternalName":"","OriginalFilename":"","FileVersion":"","Product":"","ProductVersion":"","Copyright":"","MachineType":"AMD64","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["DbgPrint","RtlGetVersion","KeDelayExecutionThread","ExAllocatePoolWithTag","ExFreePoolWithTag","MmGetSystemRoutineAddress","MmAllocateContiguousMemory","IofCompleteRequest","IoCreateDevice","IoCreateSymbolicLink","IoDeleteDevice","IoDeleteSymbolicLink","RtlCopyUnicodeString","ObReferenceObjectByHandle","ObfDereferenceObject","ZwClose","ZwOpenSection","ZwMapViewOfSection","ZwUnmapViewOfSection","MmGetPhysicalAddress","RtlCompareUnicodeString","ZwOpenFile","ZwQueryInformationFile","ZwReadFile","__C_specific_handler","KeBugCheckEx","IoIs32bitProcess","RtlInitUnicodeString","HalTranslateBusAddress"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA","ValidFrom":"2011-04-15 19:45:33","ValidTo":"2021-04-15 19:55:33","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"61204db4000000000027","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"8e3ffc222fbcebdbb8b23115ab259be7","SHA1":"ee20bff28ffe13be731c294c90d6ded5aae0ec0e","SHA256":"59826b69bc8c28118c96323b627da59aaca0b142cc5d8bad25a8fcfd399aa821","SHA384":"f2dab7e56a33298654924501499487f6ba72c7d9477476a186e1ed7a9be031fade0e35ac09eff5e56bbbab95ae5374e7"}},{"Subject":"??=TW, ??=Private Organization, serialNumber=23638777, C=TW, L=Taipei City, O=ASUSTeK Computer Inc., CN=ASUSTeK Computer Inc.","ValidFrom":"2019-04-01 00:00:00","ValidTo":"2022-01-11 12:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":false,"SerialNumber":"0c64962e4467edcc1579646b7337ec8c","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"69796942ecdfadbd806bdea1460a5115","SHA1":"0ce9329828324db04bd0a7b101b4fbfedb3be8b2","SHA256":"efd9b83b154c3e805e1bf7fdfd6a7f7bfdcf2ff3e191d1c33bdc427b6c82039b","SHA384":"e27d21dc30c40e7b675120062e69c438e9f448ceed7b0434dedd129848c6a8edf05ec07ac25f5ec300be0da46a4c6eab"}},{"Subject":"C=US, O=DigiCert, CN=DigiCert Timestamp Responder","ValidFrom":"2014-10-22 00:00:00","ValidTo":"2024-10-22 00:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"03019a023aff58b16bd6d5eae617f066","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"a752afee44f017e8d74e3f3eb7914ae3","SHA1":"8eca80a6b80e9c69dcef7745748524afb8019e2d","SHA256":"82560fa7efec30b5ff82af643e6f3bf3d46868bbd5e7d76f93db185e9e3553a1","SHA384":"e8b11408c88f877ade4ca51114a175fb5dfd2d18d2a66be547c1c9e080fa8f592c7870e30dfab1c04d234993dd0907f3"}},{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert EV Code Signing CA (SHA2)","ValidFrom":"2012-04-18 12:00:00","ValidTo":"2027-04-18 12:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":true,"SerialNumber":"03f1b4e15f3a82f1149678b3d7d8475c","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"83f5de89f641d0fbf60248e10a7b9534","SHA1":"382a73a059a08698d6eb98c87e1b36fc750933a4","SHA256":"eec58131dc11cd7f512501b15fdbc6074c603b68ca91f7162d5a042054edb0cf","SHA384":"4a25018683cabfb8ec2cad136334f37f33c89aa8540326322991d997c8adfb7faf06ab602ebd46630fe75fe3d2edc6b1"}},{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID CA,1","ValidFrom":"2006-11-10 00:00:00","ValidTo":"2021-11-10 00:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"06fdf9039603adea000aeb3f27bbba1b","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"4e5ad189638cf52ba9cd881d4d44668c","SHA1":"cdc115e98d798b33904c820d63cc1e1afc19251d","SHA256":"37560fb9d548ab62cc3ed4669a4ab74828b5a108e67e829937ffb2d10a5f78dd","SHA384":"173bfb77183785621ef15f43ea807338cea6a02e8183317d9ef050c7237adda3fa2a5bdcd5a4c96da9f2c55900675b9f"}}],"Signer":[{"SerialNumber":"0c64962e4467edcc1579646b7337ec8c","Issuer":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert EV Code Signing CA (SHA2)","Version":1}]}],"RichPEHeaderHash":{"MD5":"b19546fb2509abca52ddbc17db4bdb42","SHA1":"6d702f91bc9b3a73eba9f9c0417984b578ca200b","SHA256":"73a749678370e9cfeca10fc868e7a18cc3b499e01f7a97479cd909f44feb5b87"},"Sections":{".text":{"Entropy":6.497436117425461,"Virtual Size":"0x2552"},".rdata":{"Entropy":5.458978412009734,"Virtual Size":"0x88c"},".data":{"Entropy":2.2166422780956516,"Virtual Size":"0x28"},".pdata":{"Entropy":3.90277567498223,"Virtual Size":"0x18c"},"INIT":{"Entropy":5.195052400903618,"Virtual Size":"0x44e"},".reloc":{"Entropy":2.939353872167201,"Virtual Size":"0x14"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2020-05-20 04:47:26","Imphash":"f74aa24adc713dbb957ccb18f3c16a71","LoadsDespiteHVCI":"TRUE"},{"Filename":"AsIO3_64.sys","MD5":"07efb8259b42975d502a058db8a3fd21","SHA1":"9f22ebcd2915471e7526f30aa53c24b557a689f5","SHA256":"7236c8ff33c0e5cfa956778aa7303f1979f3bf709c361399fa1ce101b7e355b8","Authentihash":{"MD5":"9a476899b3d01439880bcc7ae9991d47","SHA1":"ac07c5670916f6c3949a49036460ac08ec43a582","SHA256":"54231728c29f2d2003ec575729760369bb72be7b656b52b4f02ec198f4ee4dfd"},"Description":"","Company":"","InternalName":"","OriginalFilename":"","FileVersion":"","Product":"","ProductVersion":"","Copyright":"","MachineType":"AMD64","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["KeSetEvent","KeDelayExecutionThread","KeWaitForSingleObject","ExAllocatePoolWithTag","ExFreePoolWithTag","MmGetSystemRoutineAddress","MmAllocateContiguousMemory","MmFreeContiguousMemory","IofCompleteRequest","IoCreateDevice","IoCreateSymbolicLink","IoCreateSynchronizationEvent","IoDeleteDevice","RtlGetVersion","IoIs32bitProcess","ObReferenceObjectByHandle","ObfDereferenceObject","ZwClose","ZwOpenSection","ZwMapViewOfSection","ZwUnmapViewOfSection","MmGetPhysicalAddress","__C_specific_handler","ZwOpenFile","ZwQueryInformationFile","ZwReadFile","KeBugCheckEx","DbgPrint","RtlCopyUnicodeString","IoDeleteSymbolicLink","RtlInitUnicodeString","HalSetBusDataByOffset","HalGetBusDataByOffset","HalTranslateBusAddress"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=DigiCert, Inc., CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1","ValidFrom":"2021-04-29 00:00:00","ValidTo":"2036-04-28 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.12","IsCertificateAuthority":true,"SerialNumber":"08ad40b260d29c4c9f5ecda9bd93aed9","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"5d8003a64dfa5a4d88365da1566038cb","SHA1":"79465b56bc7ad55a37bdf633943da8bfc84db228","SHA256":"84bdc82e2f2a7f7aaa782667dac556ffcb2b33240c1f9c0a00a3264526a98332","SHA384":"65b1d4076a89ae273f57e6eeedecb3eae129b4168f76fa7671914cdf461d542255c59d9b85b916ae0ca6fc0fcf7a8e64"}},{"Subject":"??=Private Organization, ??=TW, serialNumber=23638777, C=TW, ST=Taipei City, L=Beitou District, O=ASUSTeK COMPUTER INC., CN=ASUSTeK COMPUTER INC.","ValidFrom":"2021-10-22 00:00:00","ValidTo":"2024-10-22 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":false,"SerialNumber":"0bbe02c8838fbf02ab56edabb1e34c19","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"0357e292e0e92b06c92b21cacfcfa451","SHA1":"f52795bc8de5d803f09e20dd216d7df861f4cb34","SHA256":"b33b80e64cdfb28fb9afb17259be19ffe1edf8aae62fcfbfe8ff301f786c500d","SHA384":"5fbe918c3fa1034d5671ae38b20773df18b8f9dd48e60f90c5c98708e73d6ca0c6dec4e2bcb0de22ba3efb59479db152"}}],"Signer":[{"SerialNumber":"0bbe02c8838fbf02ab56edabb1e34c19","Issuer":"C=US, O=DigiCert, Inc., CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1","Version":1}]}],"RichPEHeaderHash":{"MD5":"dbe8b55f933a7abbc26d9f121bbf2b84","SHA1":"81e0e90f23b7d56dd1dccbbe04bb3c54892af7b8","SHA256":"270748ae970faf04f98d588b783073c9b24e3dae8630ad2e3f1a862731078f4b"},"Sections":{".text":{"Entropy":6.407232131831549,"Virtual Size":"0x58d3"},".rdata":{"Entropy":5.43652038691502,"Virtual Size":"0x8d4"},".data":{"Entropy":0.9367081810784021,"Virtual Size":"0x290"},".pdata":{"Entropy":4.005604411589105,"Virtual Size":"0x1bc"},"INIT":{"Entropy":5.265885086539526,"Virtual Size":"0x4ec"},".reloc":{"Entropy":3.1086949695628423,"Virtual Size":"0x14"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2022-07-28 04:33:11","Imphash":"b3e26c5e0de2d01597dca208ef27cc38","LoadsDespiteHVCI":"TRUE"},{"Filename":"AsIO3.sys","MD5":"1414629b1ee93d2652ff49b2eb829940","SHA1":"df58f9b193c6916aaec7606c0de5eba70c8ec665","SHA256":"7b0f442ac0bb183906700097d65aed0b4b9d8678f9a01aca864854189fe368e7","Authentihash":{"MD5":"cf61dd8f9a187de6219f930866defcbd","SHA1":"80bb26a2ef12a3d9d77fe5dd6059d5955b690b2e","SHA256":"a7bb08f99a9701482ce693d71e95559b10a247c4e8f50deba8097b0d3f191532"},"Description":"","Company":"","InternalName":"","OriginalFilename":"","FileVersion":"","Product":"","ProductVersion":"","Copyright":"","MachineType":"AMD64","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["KeSetEvent","KeDelayExecutionThread","KeWaitForSingleObject","ExAllocatePoolWithTag","ExFreePoolWithTag","MmGetSystemRoutineAddress","MmAllocateContiguousMemory","MmFreeContiguousMemory","IofCompleteRequest","IoCreateDevice","IoCreateSymbolicLink","IoCreateSynchronizationEvent","IoDeleteDevice","RtlGetVersion","IoIs32bitProcess","ObReferenceObjectByHandle","ObfDereferenceObject","ZwClose","ZwOpenSection","ZwMapViewOfSection","ZwUnmapViewOfSection","MmGetPhysicalAddress","__C_specific_handler","ZwOpenFile","ZwQueryInformationFile","ZwReadFile","KeBugCheckEx","DbgPrint","RtlCopyUnicodeString","IoDeleteSymbolicLink","RtlInitUnicodeString","HalSetBusDataByOffset","HalGetBusDataByOffset","HalTranslateBusAddress"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=DigiCert, Inc., CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1","ValidFrom":"2021-04-29 00:00:00","ValidTo":"2036-04-28 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.12","IsCertificateAuthority":true,"SerialNumber":"08ad40b260d29c4c9f5ecda9bd93aed9","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"5d8003a64dfa5a4d88365da1566038cb","SHA1":"79465b56bc7ad55a37bdf633943da8bfc84db228","SHA256":"84bdc82e2f2a7f7aaa782667dac556ffcb2b33240c1f9c0a00a3264526a98332","SHA384":"65b1d4076a89ae273f57e6eeedecb3eae129b4168f76fa7671914cdf461d542255c59d9b85b916ae0ca6fc0fcf7a8e64"}},{"Subject":"??=Private Organization, ??=TW, serialNumber=23638777, C=TW, ST=Taipei City, L=Beitou District, O=ASUSTeK COMPUTER INC., CN=ASUSTeK COMPUTER INC.","ValidFrom":"2021-10-22 00:00:00","ValidTo":"2024-10-22 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":false,"SerialNumber":"0bbe02c8838fbf02ab56edabb1e34c19","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"0357e292e0e92b06c92b21cacfcfa451","SHA1":"f52795bc8de5d803f09e20dd216d7df861f4cb34","SHA256":"b33b80e64cdfb28fb9afb17259be19ffe1edf8aae62fcfbfe8ff301f786c500d","SHA384":"5fbe918c3fa1034d5671ae38b20773df18b8f9dd48e60f90c5c98708e73d6ca0c6dec4e2bcb0de22ba3efb59479db152"}}],"Signer":[{"SerialNumber":"0bbe02c8838fbf02ab56edabb1e34c19","Issuer":"C=US, O=DigiCert, Inc., CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1","Version":1}]}],"RichPEHeaderHash":{"MD5":"dbe8b55f933a7abbc26d9f121bbf2b84","SHA1":"81e0e90f23b7d56dd1dccbbe04bb3c54892af7b8","SHA256":"270748ae970faf04f98d588b783073c9b24e3dae8630ad2e3f1a862731078f4b"},"Sections":{".text":{"Entropy":6.407232131831549,"Virtual Size":"0x58d3"},".rdata":{"Entropy":5.437107960063165,"Virtual Size":"0x8d4"},".data":{"Entropy":0.9313275414257391,"Virtual Size":"0x290"},".pdata":{"Entropy":4.005604411589105,"Virtual Size":"0x1bc"},"INIT":{"Entropy":5.265885086539526,"Virtual Size":"0x4ec"},".reloc":{"Entropy":3.1086949695628423,"Virtual Size":"0x14"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2022-05-18 22:51:01","Imphash":"b3e26c5e0de2d01597dca208ef27cc38","LoadsDespiteHVCI":"TRUE"},{"Filename":"AsIO3.sys","MD5":"67e03f83c503c3f11843942df32efe5a","SHA1":"b0c7ec472abf544c5524b644a7114cba0505951e","SHA256":"7e3b0b8d3e430074109d85729201d7c34bc5b918c0bcb9f64ce88c5e37e1a456","Authentihash":{"MD5":"a41fc38c2ffe9e5097c8d781a89bbbe9","SHA1":"a248637b54b10942743e0caf8698ce8b84559f79","SHA256":"9512115b60e67fa268a7463119add2404150842bb3dffa41124b12dd9cb580a2"},"Description":"","Company":"","InternalName":"","OriginalFilename":"","FileVersion":"","Product":"","ProductVersion":"","Copyright":"","MachineType":"AMD64","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["DbgPrint","RtlGetVersion","KeDelayExecutionThread","ExAllocatePoolWithTag","ExFreePoolWithTag","MmGetSystemRoutineAddress","MmAllocateContiguousMemory","IofCompleteRequest","IoCreateDevice","IoCreateSymbolicLink","IoDeleteDevice","IoDeleteSymbolicLink","RtlCopyUnicodeString","ObReferenceObjectByHandle","ObfDereferenceObject","ZwClose","ZwOpenSection","ZwMapViewOfSection","ZwUnmapViewOfSection","MmGetPhysicalAddress","__C_specific_handler","ZwOpenFile","ZwQueryInformationFile","ZwReadFile","KeBugCheckEx","IoIs32bitProcess","RtlInitUnicodeString","HalTranslateBusAddress"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=DigiCert, Inc., CN=DigiCert Timestamp 2021","ValidFrom":"2021-01-01 00:00:00","ValidTo":"2031-01-06 00:00:00","Signature":"481cdcb5e99a23bce71ae7200e8e6746fd427251740a2347a3ab92d225c47059be14a0e52781a54d1415190779f0d104c386d93bbdfe4402664ded69a40ff6b870cf62e8f5514a7879367a27b7f3e7529f93a7ed439e7be7b4dd412289fb87a246034efcf4feb76477635f2352698382fa1a53ed90cc8da117730df4f36539704bf39cd67a7bda0cbc3d32d01bcbf561fc75080076bc810ef8c0e15ccfc41172e71b6449d8229a751542f52d323881daf460a2bab452fb5ce06124254fb2dfc929a8734351dabd63d61f5b9bf72e1b4f131df74a0d717e97b7f43f84ebc1e3a349a1facea7bf56cfba597661895f7ea7b48e6778f93698e1cb28da5b87a68a2f","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":false,"SerialNumber":"0d424ae0be3a88ff604021ce1400f0dd","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"c0189c338449a42fe8358c2c1fbecc60","SHA1":"b8ac0ee6875594b80ad86a6df6dd1fa3048c187c","SHA256":"a43de6baf968a942da017b70769fdb65b3cfb1bbca1f9174da26a7d8aae78ec5","SHA384":"76d3a316a5a106050298418cce3beea16100524723d9e3220b0de51bfb6f1c35a5d4c7cd10b358fef7bf94c3e3562150"}},{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 Assured ID Timestamping CA","ValidFrom":"2016-01-07 12:00:00","ValidTo":"2031-01-07 12:00:00","Signature":"719512e951875669cdefddda7caa637ab378cf06374084ef4b84bfcacf0302fdc5a7c30e20422caf77f32b1f0c215a2ab705341d6aae99f827a266bf09aa60df76a43a930ff8b2d1d87c1962e85e82251ec4ba1c7b2c21e2d65b2c1435430468b2db7502e072c798d63c64e51f4810185f8938614d62462487638c91522caf2989e5781fd60b14a580d7124770b375d59385937eb69267fb536189a8f56b96c0f458690d7cc801b1b92875b7996385228c61ca79947e59fc8c0fe36fb50126b66ca5ee875121e458609bba0c2d2b6da2c47ebbc4252b4702087c49ae13b6e17c424228c61856cf4134b6665db6747bf55633222f2236b24ba24a95d8f5a68e52","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":true,"SerialNumber":"0aa125d6d6321b7e41e405da3697c215","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"8d26184fc613f89aba1cefb30fce1b53","SHA1":"63a7e376bad5ec2e419d514a403bcf46c8d31d95","SHA256":"56b5f0d9db578e3f142921daa387902722a76700375c7e1c4ae0ba004bacaa0c","SHA384":"d8c9691fe9dbe182f07b49b07fbb4f589fa7b38b5c4d21f265d3a2e818f4b1bfb39e03faab2ec05bb10333a99914fb8a"}},{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA","ValidFrom":"2011-04-15 19:45:33","ValidTo":"2021-04-15 19:55:33","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"61204db4000000000027","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"8e3ffc222fbcebdbb8b23115ab259be7","SHA1":"ee20bff28ffe13be731c294c90d6ded5aae0ec0e","SHA256":"59826b69bc8c28118c96323b627da59aaca0b142cc5d8bad25a8fcfd399aa821","SHA384":"f2dab7e56a33298654924501499487f6ba72c7d9477476a186e1ed7a9be031fade0e35ac09eff5e56bbbab95ae5374e7"}},{"Subject":"??=TW, ??=Private Organization, serialNumber=23638777, C=TW, L=Taipei City, O=ASUSTeK Computer Inc., CN=ASUSTeK Computer Inc.","ValidFrom":"2019-04-01 00:00:00","ValidTo":"2022-01-11 12:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":false,"SerialNumber":"0c64962e4467edcc1579646b7337ec8c","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"69796942ecdfadbd806bdea1460a5115","SHA1":"0ce9329828324db04bd0a7b101b4fbfedb3be8b2","SHA256":"efd9b83b154c3e805e1bf7fdfd6a7f7bfdcf2ff3e191d1c33bdc427b6c82039b","SHA384":"e27d21dc30c40e7b675120062e69c438e9f448ceed7b0434dedd129848c6a8edf05ec07ac25f5ec300be0da46a4c6eab"}},{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert EV Code Signing CA (SHA2)","ValidFrom":"2012-04-18 12:00:00","ValidTo":"2027-04-18 12:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":true,"SerialNumber":"03f1b4e15f3a82f1149678b3d7d8475c","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"83f5de89f641d0fbf60248e10a7b9534","SHA1":"382a73a059a08698d6eb98c87e1b36fc750933a4","SHA256":"eec58131dc11cd7f512501b15fdbc6074c603b68ca91f7162d5a042054edb0cf","SHA384":"4a25018683cabfb8ec2cad136334f37f33c89aa8540326322991d997c8adfb7faf06ab602ebd46630fe75fe3d2edc6b1"}}],"Signer":[{"SerialNumber":"0c64962e4467edcc1579646b7337ec8c","Issuer":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert EV Code Signing CA (SHA2)","Version":1}]}],"RichPEHeaderHash":{"MD5":"e18ac3c1c174f9dd7f12cc8d339ad259","SHA1":"3ff5f57a82c8f78cff5a08583bc903c9bd16856a","SHA256":"ccaa03ac8897c2e6efedd37e2e50e08105dc5249d516bbc5468343694398fe49"},"Sections":{".text":{"Entropy":6.317535926138567,"Virtual Size":"0x4773"},".rdata":{"Entropy":5.444571678310986,"Virtual Size":"0x86c"},".data":{"Entropy":0.9352337914257391,"Virtual Size":"0x290"},".pdata":{"Entropy":3.9765553031924283,"Virtual Size":"0x174"},"INIT":{"Entropy":5.260485600682463,"Virtual Size":"0x42c"},".reloc":{"Entropy":2.9464393446710155,"Virtual Size":"0x14"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2021-09-15 22:17:14","Imphash":"f5ebade1d3a6d3bde264b0c7f9f639e7","LoadsDespiteHVCI":"TRUE"},{"Filename":"AsIO64.sys","MD5":"85b756463ab0c000f816260d49923cde","SHA1":"de0c16e3812924212f04e15caa09763ae4770403","SHA256":"841335eeb6af68dce5b8b24151776281a751b95056a894991b23afae80e9f33b","Authentihash":{"MD5":"e0f8fb00de2a72c7808c94223cea5145","SHA1":"cbe317096adb8eba45f7e8b22830257ff8625514","SHA256":"e304e5d70d3f986f623fad7f4355d5218d8c1681e423b02db0946cbe1503eb76"},"Description":"","Company":"","InternalName":"","OriginalFilename":"","FileVersion":"","Product":"","ProductVersion":"","Copyright":"","MachineType":"AMD64","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["ZwClose","ZwMapViewOfSection","ObReferenceObjectByHandle","ZwOpenSection","RtlInitUnicodeString","IoDeleteDevice","DbgPrint","IofCompleteRequest","ZwUnmapViewOfSection","IoIs32bitProcess","IoCreateSymbolicLink","IoCreateDevice","IoDeleteSymbolicLink","KeDelayExecutionThread","HalTranslateBusAddress"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA","ValidFrom":"2003-12-04 00:00:00","ValidTo":"2013-12-03 23:59:59","Signature":"4a6bf9ea58c2441c318979992b96bf82ac01d61c4ccdb08a586edf0829a35ec8ca9313e704520def47272f0038b0e4c9934e9ad4226215f73f37214f703180f18b3887b3e8e89700fecf55964e24d2a9274e7aaeb76141f32acee7c9d95eddbb2b853eb59db5d9e157ffbeb4c57ef5cf0c9ef097fe2bd33b521b1b3827f73f4a","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"47bf1995df8d524643f7db6d480d31a4","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"518d2ea8a21e879c942d504824ac211c","SHA1":"21ce87d827077e61abddf2beba69fde5432ea031","SHA256":"1ec3b4f02e03930a470020e0e48d24b84678bb558f46182888d870541f5e25c7","SHA384":"53e346bbde23779a5d116cc9d86fdd71c97b1f1b343439f8a11aa1d3c87af63864bb8488a5aeb2d0c26a6a1e0b15f03f"}},{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer","ValidFrom":"2003-12-04 00:00:00","ValidTo":"2008-12-03 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"0de92bf0d4d82988183205095e9a7688","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"45c204b8a20f6abb0188d2d38a3fb0c9","SHA1":"cdf3a3c5c2eda4c29621f30fd3154f9f8c765739","SHA256":"e32839dddc0f4ed2474efaf37f59d46db400c700fd19533cb0895a111124bc77","SHA384":"ee9c75832cb252218b3201619852209df490d2ef7a5f7a28afdb37f1c1dd56f4604898838e558f615b1c798d4a488223"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)04, CN=VeriSign Class 3 Code Signing 2004 CA","ValidFrom":"2004-07-16 00:00:00","ValidTo":"2014-07-15 23:59:59","Signature":"ae3a17b84a7b55fa6455ec40a4ed494190999c89bcaf2e1dca7823f91c190f7feb68bc32d98838dedc3fd389b43fb18296f1a45abaed2e26d3de7c016e000a00a4069211480940f91c1879672324e0bbd5e150ae1bf50edde02e81cd80a36c524f9175558aba22f2d2ea4175882f63557d1e545a9559cad93481c05f5ef67ab5","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"4191a15a3978dfcf496566381d4c75c2","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"41011f8d0e7c7a6408334ca387914c61","SHA1":"c7fc1727f5b75a6421a1f95c73bbdb23580c48e5","SHA256":"88dd3952638ee82738c03168e6fd863fe4eab1059ee5e2926ad8cb587c255dc0","SHA384":"a00aa5ed457c41e37967882644d63366bae014f03a986576d8514164d7027acf7d0b5e03d764db2558f60db148954459"}},{"Subject":"C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority","ValidFrom":"2006-05-23 17:01:29","ValidTo":"2016-05-23 17:11:29","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"610c120600000000001b","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"53c41bc1164e09e0cd1617a5bf913efd","SHA1":"93c03aac8951d494ecd5696b1c08658541b18727","SHA256":"40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b","SHA384":"f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"}},{"Subject":"C=TW, ST=Taiwan, L=Taipei / Peitou, O=ASUSTeK Computer Inc., OU=Digital ID Class 3 , Microsoft Software Validation v2, OU=Quality Testing Department, CN=ASUSTeK Computer Inc.","ValidFrom":"2006-06-27 00:00:00","ValidTo":"2007-07-16 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"284649f592786c4851c1138e364185ae","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"2fc1a78b4874ed1ac403284a5d4084fb","SHA1":"9ae9b025b3a9ebfacdf55104f3fc1c143457a296","SHA256":"9ffd439139209f1a084cb30cd791558dc266265405f7c5c7444c5a941ff0c004","SHA384":"656817a3d8aa52cdc8fbff1dcb0ef1f07ea93f0c6b82067d7c6c5f68a125dc3b50f88974a66d59ecc5b996ca5e55eaa1"}}],"Signer":[{"SerialNumber":"284649f592786c4851c1138e364185ae","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)04, CN=VeriSign Class 3 Code Signing 2004 CA","Version":1}]}],"RichPEHeaderHash":{"MD5":"59080883b71fd56bbf10ec0ae4b6bdd4","SHA1":"503a36a225568553cc9b05f63b3506c6ff21e12e","SHA256":"bc812d4ddc3ecfbf38c4d0d185e368fc58bac6e07f722db032bf6303daa7c946"},"Sections":{".text":{"Entropy":6.172691138654025,"Virtual Size":"0xd8c"},".rdata":{"Entropy":4.3738577464905095,"Virtual Size":"0x18c"},".data":{"Entropy":0,"Virtual Size":"0xc"},".pdata":{"Entropy":3.3303322930213435,"Virtual Size":"0x84"},"INIT":{"Entropy":4.4509406095000665,"Virtual Size":"0x218"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2004-10-14 05:53:21","Imphash":"ccdeab2a83fbf2fef2e418cccd133ec1","LoadsDespiteHVCI":"FALSE"},{"Filename":"AsIO3_64.sys","MD5":"598f8fb2317350e5f90b7bd16baf5738","SHA1":"a8be6203c5a87ecc3ae1c452b7b6dbdf3a9f82ae","SHA256":"910479467ef17b9591d8d42305e7f6f247ad41c60ec890a1ffbe331f495ed135","Authentihash":{"MD5":"ace2d8ea30005bce12b1421f431bc39c","SHA1":"f084b6ba134b23e06f5867e650ba4eb9d1007231","SHA256":"12af7c39519e16307c2c62a84ca40017b43acf7fa90ec97c182701ffcffa1b61"},"Description":"","Company":"","InternalName":"","OriginalFilename":"","FileVersion":"","Product":"","ProductVersion":"","Copyright":"","MachineType":"AMD64","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["DbgPrint","RtlGetVersion","KeDelayExecutionThread","ExAllocatePoolWithTag","ExFreePoolWithTag","MmGetSystemRoutineAddress","MmAllocateContiguousMemory","IofCompleteRequest","IoCreateDevice","IoCreateSymbolicLink","IoDeleteDevice","IoDeleteSymbolicLink","RtlCopyUnicodeString","ObReferenceObjectByHandle","ObfDereferenceObject","ZwClose","ZwOpenSection","ZwMapViewOfSection","ZwUnmapViewOfSection","MmGetPhysicalAddress","__C_specific_handler","ZwOpenFile","ZwQueryInformationFile","ZwReadFile","KeBugCheckEx","IoIs32bitProcess","RtlInitUnicodeString","HalTranslateBusAddress"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=DigiCert, Inc., CN=DigiCert Timestamp 2021","ValidFrom":"2021-01-01 00:00:00","ValidTo":"2031-01-06 00:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":false,"SerialNumber":"0d424ae0be3a88ff604021ce1400f0dd","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"c0189c338449a42fe8358c2c1fbecc60","SHA1":"b8ac0ee6875594b80ad86a6df6dd1fa3048c187c","SHA256":"a43de6baf968a942da017b70769fdb65b3cfb1bbca1f9174da26a7d8aae78ec5","SHA384":"76d3a316a5a106050298418cce3beea16100524723d9e3220b0de51bfb6f1c35a5d4c7cd10b358fef7bf94c3e3562150"}},{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 Assured ID Timestamping CA","ValidFrom":"2016-01-07 12:00:00","ValidTo":"2031-01-07 12:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":true,"SerialNumber":"0aa125d6d6321b7e41e405da3697c215","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"8d26184fc613f89aba1cefb30fce1b53","SHA1":"63a7e376bad5ec2e419d514a403bcf46c8d31d95","SHA256":"56b5f0d9db578e3f142921daa387902722a76700375c7e1c4ae0ba004bacaa0c","SHA384":"d8c9691fe9dbe182f07b49b07fbb4f589fa7b38b5c4d21f265d3a2e818f4b1bfb39e03faab2ec05bb10333a99914fb8a"}},{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA","ValidFrom":"2011-04-15 19:45:33","ValidTo":"2021-04-15 19:55:33","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"61204db4000000000027","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"8e3ffc222fbcebdbb8b23115ab259be7","SHA1":"ee20bff28ffe13be731c294c90d6ded5aae0ec0e","SHA256":"59826b69bc8c28118c96323b627da59aaca0b142cc5d8bad25a8fcfd399aa821","SHA384":"f2dab7e56a33298654924501499487f6ba72c7d9477476a186e1ed7a9be031fade0e35ac09eff5e56bbbab95ae5374e7"}},{"Subject":"??=TW, ??=Private Organization, serialNumber=23638777, C=TW, L=Taipei City, O=ASUSTeK Computer Inc., CN=ASUSTeK Computer Inc.","ValidFrom":"2019-04-01 00:00:00","ValidTo":"2022-01-11 12:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":false,"SerialNumber":"0c64962e4467edcc1579646b7337ec8c","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"69796942ecdfadbd806bdea1460a5115","SHA1":"0ce9329828324db04bd0a7b101b4fbfedb3be8b2","SHA256":"efd9b83b154c3e805e1bf7fdfd6a7f7bfdcf2ff3e191d1c33bdc427b6c82039b","SHA384":"e27d21dc30c40e7b675120062e69c438e9f448ceed7b0434dedd129848c6a8edf05ec07ac25f5ec300be0da46a4c6eab"}},{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert EV Code Signing CA (SHA2)","ValidFrom":"2012-04-18 12:00:00","ValidTo":"2027-04-18 12:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":true,"SerialNumber":"03f1b4e15f3a82f1149678b3d7d8475c","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"83f5de89f641d0fbf60248e10a7b9534","SHA1":"382a73a059a08698d6eb98c87e1b36fc750933a4","SHA256":"eec58131dc11cd7f512501b15fdbc6074c603b68ca91f7162d5a042054edb0cf","SHA384":"4a25018683cabfb8ec2cad136334f37f33c89aa8540326322991d997c8adfb7faf06ab602ebd46630fe75fe3d2edc6b1"}}],"Signer":[{"SerialNumber":"0c64962e4467edcc1579646b7337ec8c","Issuer":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert EV Code Signing CA (SHA2)","Version":1}]}],"RichPEHeaderHash":{"MD5":"b6539d5c7cfa1f973bd84a2b5f9e21ff","SHA1":"8cdb66c7de4ddc498383fafea692448ccbdfd066","SHA256":"f3d0d00d01297987bc4c626fec0a82efb94cef8ebe74e46e7b8eb63abe087d7b"},"Sections":{".text":{"Entropy":6.323949092110609,"Virtual Size":"0x4733"},".rdata":{"Entropy":5.459170046837529,"Virtual Size":"0x83c"},".data":{"Entropy":0.9406144310784021,"Virtual Size":"0x290"},".pdata":{"Entropy":3.8692348543800357,"Virtual Size":"0x174"},"INIT":{"Entropy":5.255268621688079,"Virtual Size":"0x42c"},".reloc":{"Entropy":2.9464393446710155,"Virtual Size":"0x14"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2021-05-31 21:44:39","Imphash":"f5ebade1d3a6d3bde264b0c7f9f639e7","LoadsDespiteHVCI":"TRUE"},{"Filename":"asio.sys","MD5":"2b4e66fac6503494a2c6f32bb6ab3826","SHA1":"ed219d966a6e74275895cc0b975b79397760ea9f","SHA256":"923ebbe8111e73d5b8ecc2db10f8ea2629a3264c3a535d01c3c118a3b4c91782","Authentihash":{"MD5":"1b20fb8ed378500e83656fd527ac48c4","SHA1":"e471ba6d1327d1026eb2c6a905e2bad3952dabbd","SHA256":"ed302ea33feb557b879f64c4b7835947a9ca31054573e1487f5bbc38449753ff"},"Description":"","Company":"","InternalName":"","OriginalFilename":"","FileVersion":"","Product":"","ProductVersion":"","Copyright":"","MachineType":"I386","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["READ_REGISTER_UCHAR","READ_REGISTER_USHORT","READ_REGISTER_ULONG","WRITE_REGISTER_UCHAR","KeQuerySystemTime","KeDelayExecutionThread","IofCompleteRequest","ZwClose","ZwMapViewOfSection","ObReferenceObjectByHandle","ZwOpenSection","IoDeleteSymbolicLink","DbgPrint","ZwUnmapViewOfSection","IoCreateSymbolicLink","RtlInitUnicodeString","IoCreateDevice","WRITE_REGISTER_USHORT","IoDeleteDevice","WRITE_REGISTER_ULONG","WRITE_PORT_ULONG","WRITE_PORT_USHORT","HalTranslateBusAddress","READ_PORT_ULONG","WRITE_PORT_UCHAR","READ_PORT_UCHAR","READ_PORT_USHORT"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer , G2","ValidFrom":"2007-06-15 00:00:00","ValidTo":"2012-06-14 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"3825d7faf861af9ef490e726b5d65ad5","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"d6c7684e9aaa508cf268335f83afe040","SHA1":"18066d20ad92409c567cdfde745279ff71c75226","SHA256":"a612fb22ce8be6dab75e47c98508f98496583e79c9c97b936a8caee9ea9f3fff","SHA384":"35c249d6ad0261a6229b2a727067ac6ba32a5d24b30b9249051f748c7735fbe2ec2ef26a702c50df1790fbe32a65aee7"}},{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA","ValidFrom":"2003-12-04 00:00:00","ValidTo":"2013-12-03 23:59:59","Signature":"4a6bf9ea58c2441c318979992b96bf82ac01d61c4ccdb08a586edf0829a35ec8ca9313e704520def47272f0038b0e4c9934e9ad4226215f73f37214f703180f18b3887b3e8e89700fecf55964e24d2a9274e7aaeb76141f32acee7c9d95eddbb2b853eb59db5d9e157ffbeb4c57ef5cf0c9ef097fe2bd33b521b1b3827f73f4a","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"47bf1995df8d524643f7db6d480d31a4","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"518d2ea8a21e879c942d504824ac211c","SHA1":"21ce87d827077e61abddf2beba69fde5432ea031","SHA256":"1ec3b4f02e03930a470020e0e48d24b84678bb558f46182888d870541f5e25c7","SHA384":"53e346bbde23779a5d116cc9d86fdd71c97b1f1b343439f8a11aa1d3c87af63864bb8488a5aeb2d0c26a6a1e0b15f03f"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)04, CN=VeriSign Class 3 Code Signing 2004 CA","ValidFrom":"2004-07-16 00:00:00","ValidTo":"2014-07-15 23:59:59","Signature":"ae3a17b84a7b55fa6455ec40a4ed494190999c89bcaf2e1dca7823f91c190f7feb68bc32d98838dedc3fd389b43fb18296f1a45abaed2e26d3de7c016e000a00a4069211480940f91c1879672324e0bbd5e150ae1bf50edde02e81cd80a36c524f9175558aba22f2d2ea4175882f63557d1e545a9559cad93481c05f5ef67ab5","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"4191a15a3978dfcf496566381d4c75c2","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"41011f8d0e7c7a6408334ca387914c61","SHA1":"c7fc1727f5b75a6421a1f95c73bbdb23580c48e5","SHA256":"88dd3952638ee82738c03168e6fd863fe4eab1059ee5e2926ad8cb587c255dc0","SHA384":"a00aa5ed457c41e37967882644d63366bae014f03a986576d8514164d7027acf7d0b5e03d764db2558f60db148954459"}},{"Subject":"C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority","ValidFrom":"2006-05-23 17:01:29","ValidTo":"2016-05-23 17:11:29","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"610c120600000000001b","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"53c41bc1164e09e0cd1617a5bf913efd","SHA1":"93c03aac8951d494ecd5696b1c08658541b18727","SHA256":"40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b","SHA384":"f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"}},{"Subject":"C=TW, ST=Taiwan, L=Taipei / Peitou, O=ASUSTeK Computer Inc., OU=Digital ID Class 3 , Microsoft Software Validation v2, OU=Quality Testing Department, CN=ASUSTeK Computer Inc.","ValidFrom":"2007-07-03 00:00:00","ValidTo":"2008-07-26 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"23eab3ac30c7016a299c8d31d99f3ae8","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"54f73eaca10fe12ff2e14194e2f019b8","SHA1":"471cb77202e7d4941a5bff8ba813f5ed221dc32e","SHA256":"9dba2d4765226ca91fb7104e0cbd01308c4e8ed9727ea661eeaa473d7825ee35","SHA384":"272d877ad02e5487a0864e4d876a9e06fea5ead9cd149e7a48c4f111cfa8dc2f05f1042f2822b42360896da334e6390d"}}],"Signer":[{"SerialNumber":"23eab3ac30c7016a299c8d31d99f3ae8","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)04, CN=VeriSign Class 3 Code Signing 2004 CA","Version":1}]}],"RichPEHeaderHash":{"MD5":"b39d8b5610182849a95fa415c9786274","SHA1":"47e24c8d5f1687b4811c2267b1519e4f53576005","SHA256":"bde1051ba0a00c5223e7850f91b66678c6236ab82415e73114502cd4e9e2bef8"},"Sections":{".text":{"Entropy":6.417694814045169,"Virtual Size":"0xcb4"},".rdata":{"Entropy":2.710450233592338,"Virtual Size":"0xd4"},".data":{"Entropy":0,"Virtual Size":"0xc"},"INIT":{"Entropy":5.25231831216104,"Virtual Size":"0x300"},".reloc":{"Entropy":4.595102637134157,"Virtual Size":"0xcc"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2007-12-17 04:10:20","Imphash":"f4c5b0399665885a7dd34f7cdbbc586f","LoadsDespiteHVCI":"FALSE"},{"Filename":"AsIO2.sys","MD5":"79329e2917623181888605bc5b302711","SHA1":"844d2345bde50bf8ee7e86117cf7b8c6e6f00be4","SHA256":"a7860e110f7a292d621006b7208a634504fb5be417fd71e219060381b9a891e6","Authentihash":{"MD5":"220f8ab33b94d37e06e465825c05a867","SHA1":"06dd63bd069498a712cdfe3d9ac27bfbf5d661f5","SHA256":"7ebc5906d7fd9c606dc6ef9b49f3e57b63af838f5807fcdcdd5ff47b5b05e39c"},"Description":"","Company":"","InternalName":"","OriginalFilename":"","FileVersion":"","Product":"","ProductVersion":"","Copyright":"","MachineType":"AMD64","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["DbgPrint","RtlGetVersion","KeDelayExecutionThread","ExAllocatePoolWithTag","ExFreePoolWithTag","MmGetSystemRoutineAddress","MmAllocateContiguousMemory","IofCompleteRequest","IoCreateDevice","IoCreateSymbolicLink","IoDeleteDevice","IoDeleteSymbolicLink","RtlCopyUnicodeString","ObReferenceObjectByHandle","ObfDereferenceObject","ZwClose","ZwOpenSection","ZwMapViewOfSection","ZwUnmapViewOfSection","MmGetPhysicalAddress","__C_specific_handler","RtlCompareUnicodeString","ZwOpenFile","ZwQueryInformationFile","ZwReadFile","KeBugCheckEx","IoIs32bitProcess","RtlInitUnicodeString","HalTranslateBusAddress"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=DigiCert, Inc., CN=DigiCert Timestamp 2021","ValidFrom":"2021-01-01 00:00:00","ValidTo":"2031-01-06 00:00:00","Signature":"481cdcb5e99a23bce71ae7200e8e6746fd427251740a2347a3ab92d225c47059be14a0e52781a54d1415190779f0d104c386d93bbdfe4402664ded69a40ff6b870cf62e8f5514a7879367a27b7f3e7529f93a7ed439e7be7b4dd412289fb87a246034efcf4feb76477635f2352698382fa1a53ed90cc8da117730df4f36539704bf39cd67a7bda0cbc3d32d01bcbf561fc75080076bc810ef8c0e15ccfc41172e71b6449d8229a751542f52d323881daf460a2bab452fb5ce06124254fb2dfc929a8734351dabd63d61f5b9bf72e1b4f131df74a0d717e97b7f43f84ebc1e3a349a1facea7bf56cfba597661895f7ea7b48e6778f93698e1cb28da5b87a68a2f","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":false,"SerialNumber":"0d424ae0be3a88ff604021ce1400f0dd","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"c0189c338449a42fe8358c2c1fbecc60","SHA1":"b8ac0ee6875594b80ad86a6df6dd1fa3048c187c","SHA256":"a43de6baf968a942da017b70769fdb65b3cfb1bbca1f9174da26a7d8aae78ec5","SHA384":"76d3a316a5a106050298418cce3beea16100524723d9e3220b0de51bfb6f1c35a5d4c7cd10b358fef7bf94c3e3562150"}},{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 Assured ID Timestamping CA","ValidFrom":"2016-01-07 12:00:00","ValidTo":"2031-01-07 12:00:00","Signature":"719512e951875669cdefddda7caa637ab378cf06374084ef4b84bfcacf0302fdc5a7c30e20422caf77f32b1f0c215a2ab705341d6aae99f827a266bf09aa60df76a43a930ff8b2d1d87c1962e85e82251ec4ba1c7b2c21e2d65b2c1435430468b2db7502e072c798d63c64e51f4810185f8938614d62462487638c91522caf2989e5781fd60b14a580d7124770b375d59385937eb69267fb536189a8f56b96c0f458690d7cc801b1b92875b7996385228c61ca79947e59fc8c0fe36fb50126b66ca5ee875121e458609bba0c2d2b6da2c47ebbc4252b4702087c49ae13b6e17c424228c61856cf4134b6665db6747bf55633222f2236b24ba24a95d8f5a68e52","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":true,"SerialNumber":"0aa125d6d6321b7e41e405da3697c215","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"8d26184fc613f89aba1cefb30fce1b53","SHA1":"63a7e376bad5ec2e419d514a403bcf46c8d31d95","SHA256":"56b5f0d9db578e3f142921daa387902722a76700375c7e1c4ae0ba004bacaa0c","SHA384":"d8c9691fe9dbe182f07b49b07fbb4f589fa7b38b5c4d21f265d3a2e818f4b1bfb39e03faab2ec05bb10333a99914fb8a"}},{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA","ValidFrom":"2011-04-15 19:45:33","ValidTo":"2021-04-15 19:55:33","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"61204db4000000000027","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"8e3ffc222fbcebdbb8b23115ab259be7","SHA1":"ee20bff28ffe13be731c294c90d6ded5aae0ec0e","SHA256":"59826b69bc8c28118c96323b627da59aaca0b142cc5d8bad25a8fcfd399aa821","SHA384":"f2dab7e56a33298654924501499487f6ba72c7d9477476a186e1ed7a9be031fade0e35ac09eff5e56bbbab95ae5374e7"}},{"Subject":"??=TW, ??=Private Organization, serialNumber=23638777, C=TW, L=Taipei City, O=ASUSTeK Computer Inc., CN=ASUSTeK Computer Inc.","ValidFrom":"2019-04-01 00:00:00","ValidTo":"2022-01-11 12:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":false,"SerialNumber":"0c64962e4467edcc1579646b7337ec8c","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"69796942ecdfadbd806bdea1460a5115","SHA1":"0ce9329828324db04bd0a7b101b4fbfedb3be8b2","SHA256":"efd9b83b154c3e805e1bf7fdfd6a7f7bfdcf2ff3e191d1c33bdc427b6c82039b","SHA384":"e27d21dc30c40e7b675120062e69c438e9f448ceed7b0434dedd129848c6a8edf05ec07ac25f5ec300be0da46a4c6eab"}},{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert EV Code Signing CA (SHA2)","ValidFrom":"2012-04-18 12:00:00","ValidTo":"2027-04-18 12:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":true,"SerialNumber":"03f1b4e15f3a82f1149678b3d7d8475c","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"83f5de89f641d0fbf60248e10a7b9534","SHA1":"382a73a059a08698d6eb98c87e1b36fc750933a4","SHA256":"eec58131dc11cd7f512501b15fdbc6074c603b68ca91f7162d5a042054edb0cf","SHA384":"4a25018683cabfb8ec2cad136334f37f33c89aa8540326322991d997c8adfb7faf06ab602ebd46630fe75fe3d2edc6b1"}}],"Signer":[{"SerialNumber":"0c64962e4467edcc1579646b7337ec8c","Issuer":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert EV Code Signing CA (SHA2)","Version":1}]}],"RichPEHeaderHash":{"MD5":"55ace001f38a8911c5f09f16dabe7710","SHA1":"2d56cc62eb682f5f1db9ca8aff9cb013d02cb44a","SHA256":"7eea7e80cc820d9b0b6778881c2c81f86ec7229cf8315950217787e98b8a78fb"},"Sections":{".text":{"Entropy":6.4920388528757735,"Virtual Size":"0x2592"},".rdata":{"Entropy":5.43615554646452,"Virtual Size":"0x8a4"},".data":{"Entropy":2.2166422780956516,"Virtual Size":"0x28"},".pdata":{"Entropy":3.9380649561842502,"Virtual Size":"0x198"},"INIT":{"Entropy":5.190250208066914,"Virtual Size":"0x44e"},".reloc":{"Entropy":2.939353872167201,"Virtual Size":"0x14"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2021-05-31 21:42:16","Imphash":"d6d76f43ccc3872b879b0df583364c78","LoadsDespiteHVCI":"TRUE"},{"Filename":"AsIO3.sys","MD5":"1ce19950e23c975f677b80ff59d04fae","SHA1":"4f30f64b5dfcdc889f4a5e25b039c93dd8551c71","SHA256":"b6fd51e1f57a03006953e84fd56cc2821cc19e7c77c0474e1110aabaacaf03df","Authentihash":{"MD5":"cf61dd8f9a187de6219f930866defcbd","SHA1":"80bb26a2ef12a3d9d77fe5dd6059d5955b690b2e","SHA256":"a7bb08f99a9701482ce693d71e95559b10a247c4e8f50deba8097b0d3f191532"},"Description":"","Company":"","InternalName":"","OriginalFilename":"","FileVersion":"","Product":"","ProductVersion":"","Copyright":"","MachineType":"AMD64","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["KeSetEvent","KeDelayExecutionThread","KeWaitForSingleObject","ExAllocatePoolWithTag","ExFreePoolWithTag","MmGetSystemRoutineAddress","MmAllocateContiguousMemory","MmFreeContiguousMemory","IofCompleteRequest","IoCreateDevice","IoCreateSymbolicLink","IoCreateSynchronizationEvent","IoDeleteDevice","RtlGetVersion","IoIs32bitProcess","ObReferenceObjectByHandle","ObfDereferenceObject","ZwClose","ZwOpenSection","ZwMapViewOfSection","ZwUnmapViewOfSection","MmGetPhysicalAddress","__C_specific_handler","ZwOpenFile","ZwQueryInformationFile","ZwReadFile","KeBugCheckEx","DbgPrint","RtlCopyUnicodeString","IoDeleteSymbolicLink","RtlInitUnicodeString","HalSetBusDataByOffset","HalGetBusDataByOffset","HalTranslateBusAddress"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=DigiCert, Inc., CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1","ValidFrom":"2021-04-29 00:00:00","ValidTo":"2036-04-28 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.12","IsCertificateAuthority":true,"SerialNumber":"08ad40b260d29c4c9f5ecda9bd93aed9","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"5d8003a64dfa5a4d88365da1566038cb","SHA1":"79465b56bc7ad55a37bdf633943da8bfc84db228","SHA256":"84bdc82e2f2a7f7aaa782667dac556ffcb2b33240c1f9c0a00a3264526a98332","SHA384":"65b1d4076a89ae273f57e6eeedecb3eae129b4168f76fa7671914cdf461d542255c59d9b85b916ae0ca6fc0fcf7a8e64"}},{"Subject":"??=Private Organization, ??=TW, serialNumber=23638777, C=TW, ST=Taipei City, L=Beitou District, O=ASUSTeK COMPUTER INC., CN=ASUSTeK COMPUTER INC.","ValidFrom":"2021-10-22 00:00:00","ValidTo":"2024-10-22 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":false,"SerialNumber":"0bbe02c8838fbf02ab56edabb1e34c19","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"0357e292e0e92b06c92b21cacfcfa451","SHA1":"f52795bc8de5d803f09e20dd216d7df861f4cb34","SHA256":"b33b80e64cdfb28fb9afb17259be19ffe1edf8aae62fcfbfe8ff301f786c500d","SHA384":"5fbe918c3fa1034d5671ae38b20773df18b8f9dd48e60f90c5c98708e73d6ca0c6dec4e2bcb0de22ba3efb59479db152"}}],"Signer":[{"SerialNumber":"0bbe02c8838fbf02ab56edabb1e34c19","Issuer":"C=US, O=DigiCert, Inc., CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1","Version":1}]}],"RichPEHeaderHash":{"MD5":"dbe8b55f933a7abbc26d9f121bbf2b84","SHA1":"81e0e90f23b7d56dd1dccbbe04bb3c54892af7b8","SHA256":"270748ae970faf04f98d588b783073c9b24e3dae8630ad2e3f1a862731078f4b"},"Sections":{".text":{"Entropy":6.407232131831549,"Virtual Size":"0x58d3"},".rdata":{"Entropy":5.437107960063165,"Virtual Size":"0x8d4"},".data":{"Entropy":0.9313275414257391,"Virtual Size":"0x290"},".pdata":{"Entropy":4.005604411589105,"Virtual Size":"0x1bc"},"INIT":{"Entropy":5.265885086539526,"Virtual Size":"0x4ec"},".reloc":{"Entropy":3.1086949695628423,"Virtual Size":"0x14"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2022-05-18 22:51:01","Imphash":"b3e26c5e0de2d01597dca208ef27cc38","LoadsDespiteHVCI":"TRUE"},{"Filename":"AsIO3.sys","MD5":"370a4ca29a7cf1d6bc0744afc12b236c","SHA1":"cfa85a19d9a2f7f687b0decdc4a5480b6e30cb8c","SHA256":"c344e92a6d06155a217a9af7b4b35e6653665eec6569292e7b2e70f3a3027646","Authentihash":{"MD5":"2f131a8ffb55f70edd90f4cda9e4f84e","SHA1":"4bfc51e23494f7eaf27560f92cd6fbced2ffa4f6","SHA256":"9b1af050481bda270a08ae873224a142c8b2119eeda59d3a04b1f6d66715a8c8"},"Description":"","Company":"","InternalName":"","OriginalFilename":"","FileVersion":"","Product":"","ProductVersion":"","Copyright":"","MachineType":"AMD64","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["DbgPrint","RtlGetVersion","KeDelayExecutionThread","ExAllocatePoolWithTag","ExFreePoolWithTag","MmGetSystemRoutineAddress","MmAllocateContiguousMemory","IofCompleteRequest","IoCreateDevice","IoCreateSymbolicLink","IoDeleteDevice","IoDeleteSymbolicLink","RtlCopyUnicodeString","ObReferenceObjectByHandle","ObfDereferenceObject","ZwClose","ZwOpenSection","ZwMapViewOfSection","ZwUnmapViewOfSection","MmGetPhysicalAddress","ZwOpenFile","ZwQueryInformationFile","ZwReadFile","__C_specific_handler","KeBugCheckEx","IoIs32bitProcess","RtlInitUnicodeString","HalTranslateBusAddress"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA","ValidFrom":"2011-04-15 19:45:33","ValidTo":"2021-04-15 19:55:33","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"61204db4000000000027","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"8e3ffc222fbcebdbb8b23115ab259be7","SHA1":"ee20bff28ffe13be731c294c90d6ded5aae0ec0e","SHA256":"59826b69bc8c28118c96323b627da59aaca0b142cc5d8bad25a8fcfd399aa821","SHA384":"f2dab7e56a33298654924501499487f6ba72c7d9477476a186e1ed7a9be031fade0e35ac09eff5e56bbbab95ae5374e7"}},{"Subject":"??=TW, ??=Private Organization, serialNumber=23638777, C=TW, L=Taipei City, O=ASUSTeK Computer Inc., CN=ASUSTeK Computer Inc.","ValidFrom":"2019-04-01 00:00:00","ValidTo":"2022-01-11 12:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":false,"SerialNumber":"0c64962e4467edcc1579646b7337ec8c","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"69796942ecdfadbd806bdea1460a5115","SHA1":"0ce9329828324db04bd0a7b101b4fbfedb3be8b2","SHA256":"efd9b83b154c3e805e1bf7fdfd6a7f7bfdcf2ff3e191d1c33bdc427b6c82039b","SHA384":"e27d21dc30c40e7b675120062e69c438e9f448ceed7b0434dedd129848c6a8edf05ec07ac25f5ec300be0da46a4c6eab"}},{"Subject":"C=US, O=DigiCert, CN=DigiCert Timestamp Responder","ValidFrom":"2014-10-22 00:00:00","ValidTo":"2024-10-22 00:00:00","Signature":"9d257e1b334db226815c9b86ce23200f8087e588ffffb1d46a2c31ed3a17197117cda91bbc5a1639009de36c84e45a40fbde06018c37fa9bb19d247efe20a457ad5bb79ab06026ea6957215d342f1f71b0839419056b359010a07b97c7f63fe7e21141a6bd62d9f0273d381d286f3a5209f0ec7062d3624bb0e073a692c0d38e31d82fe36d171306eee403b614abf38f43a7719d21dd14ca155d9241daf90f81d199740d26c40e7f1bb5f5a0f1c677062815e9d893e55516f0bb0aab1cdb5c482766c8a38b0a1ce595daaec42e59a061dddaf36da261e98a0b6dec1218bdf755544003922b6bc251c20a48afb0d46ee0f4140a3a1be38f3dcaaf6a8d7bdcd844","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"03019a023aff58b16bd6d5eae617f066","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"a752afee44f017e8d74e3f3eb7914ae3","SHA1":"8eca80a6b80e9c69dcef7745748524afb8019e2d","SHA256":"82560fa7efec30b5ff82af643e6f3bf3d46868bbd5e7d76f93db185e9e3553a1","SHA384":"e8b11408c88f877ade4ca51114a175fb5dfd2d18d2a66be547c1c9e080fa8f592c7870e30dfab1c04d234993dd0907f3"}},{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert EV Code Signing CA (SHA2)","ValidFrom":"2012-04-18 12:00:00","ValidTo":"2027-04-18 12:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":true,"SerialNumber":"03f1b4e15f3a82f1149678b3d7d8475c","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"83f5de89f641d0fbf60248e10a7b9534","SHA1":"382a73a059a08698d6eb98c87e1b36fc750933a4","SHA256":"eec58131dc11cd7f512501b15fdbc6074c603b68ca91f7162d5a042054edb0cf","SHA384":"4a25018683cabfb8ec2cad136334f37f33c89aa8540326322991d997c8adfb7faf06ab602ebd46630fe75fe3d2edc6b1"}},{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID CA,1","ValidFrom":"2006-11-10 00:00:00","ValidTo":"2021-11-10 00:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"06fdf9039603adea000aeb3f27bbba1b","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"4e5ad189638cf52ba9cd881d4d44668c","SHA1":"cdc115e98d798b33904c820d63cc1e1afc19251d","SHA256":"37560fb9d548ab62cc3ed4669a4ab74828b5a108e67e829937ffb2d10a5f78dd","SHA384":"173bfb77183785621ef15f43ea807338cea6a02e8183317d9ef050c7237adda3fa2a5bdcd5a4c96da9f2c55900675b9f"}}],"Signer":[{"SerialNumber":"0c64962e4467edcc1579646b7337ec8c","Issuer":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert EV Code Signing CA (SHA2)","Version":1}]}],"RichPEHeaderHash":{"MD5":"7083a39914a09adba51ea04eeca7990e","SHA1":"ae8af171da2509ddac02c0b559b44f8f5fd8da25","SHA256":"9ce58648fd2c5b9ba36584499ca7bf3ed1eca7da6c847f10d6e07f1e9c0a8880"},"Sections":{".text":{"Entropy":6.326590226061026,"Virtual Size":"0x4733"},".rdata":{"Entropy":5.496552032776753,"Virtual Size":"0x81c"},".data":{"Entropy":0.9406144310784021,"Virtual Size":"0x290"},".pdata":{"Entropy":3.9063193538964076,"Virtual Size":"0x168"},"INIT":{"Entropy":5.257848104368007,"Virtual Size":"0x42c"},".reloc":{"Entropy":2.9464393446710155,"Virtual Size":"0x14"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2020-12-15 03:10:32","Imphash":"f0cd7cce1d03cf9df1b8266701f92b46","LoadsDespiteHVCI":"TRUE"},{"Filename":"asio.sys","MD5":"68726474c69b738eac3a62e06b33addc","SHA1":"8453fc3198349cf0561c87efc329c81e7240c3da","SHA256":"c470c9db58840149ce002f3e6003382ecf740884a683bae8f9d10831be218fa2","Authentihash":{"MD5":"9f79edf758e219929902ec7564e0f435","SHA1":"c92148d0666f2235500805975be79738b84e48c2","SHA256":"19c74ea0e0baf04820e5642bd2fa224158801ed966be1041539e3c55bd65c471"},"Description":"","Company":"","InternalName":"","OriginalFilename":"","FileVersion":"","Product":"","ProductVersion":"","Copyright":"","MachineType":"AMD64","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["ZwMapViewOfSection","ObReferenceObjectByHandle","ZwOpenSection","RtlInitUnicodeString","IoDeleteDevice","ZwClose","IofCompleteRequest","ZwUnmapViewOfSection","IoIs32bitProcess","IoCreateSymbolicLink","IoCreateDevice","IoDeleteSymbolicLink","KeDelayExecutionThread","HalTranslateBusAddress"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer , G2","ValidFrom":"2007-06-15 00:00:00","ValidTo":"2012-06-14 23:59:59","Signature":"50c54bc82480dfe40d24c2de1ab1a102a1a6822d0c831581370a820e2cb05a1761b5d805fe88dbf19191b3561a40a6eb92be3839b07536743a984fe437ba9989ca95421db0b9c7a08d57e0fad5640442354e01d133a217c84daa27c7f2e1864c02384d8378c6fc53e0ebe00687dda4969e5e0c98e2a5bebf8285c360e1dfad28d8c7a54b64dac71b5bbdac3908d53822a1338b2f8a9aebbc07213f44410907b5651c24bc48d34480eba1cfc902b414cf54c716a3805cf9793e5d727d88179e2c43a2ca53ce7d3df62a3ab84f9400a56d0a835df95e53f418b3570f70c3fbf5ad95a00e17dec4168060c90f2b6e8604f1ebf47827d105c5ee345b5eb94932f233","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"3825d7faf861af9ef490e726b5d65ad5","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"d6c7684e9aaa508cf268335f83afe040","SHA1":"18066d20ad92409c567cdfde745279ff71c75226","SHA256":"a612fb22ce8be6dab75e47c98508f98496583e79c9c97b936a8caee9ea9f3fff","SHA384":"35c249d6ad0261a6229b2a727067ac6ba32a5d24b30b9249051f748c7735fbe2ec2ef26a702c50df1790fbe32a65aee7"}},{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA","ValidFrom":"2003-12-04 00:00:00","ValidTo":"2013-12-03 23:59:59","Signature":"4a6bf9ea58c2441c318979992b96bf82ac01d61c4ccdb08a586edf0829a35ec8ca9313e704520def47272f0038b0e4c9934e9ad4226215f73f37214f703180f18b3887b3e8e89700fecf55964e24d2a9274e7aaeb76141f32acee7c9d95eddbb2b853eb59db5d9e157ffbeb4c57ef5cf0c9ef097fe2bd33b521b1b3827f73f4a","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"47bf1995df8d524643f7db6d480d31a4","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"518d2ea8a21e879c942d504824ac211c","SHA1":"21ce87d827077e61abddf2beba69fde5432ea031","SHA256":"1ec3b4f02e03930a470020e0e48d24b84678bb558f46182888d870541f5e25c7","SHA384":"53e346bbde23779a5d116cc9d86fdd71c97b1f1b343439f8a11aa1d3c87af63864bb8488a5aeb2d0c26a6a1e0b15f03f"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)04, CN=VeriSign Class 3 Code Signing 2004 CA","ValidFrom":"2004-07-16 00:00:00","ValidTo":"2014-07-15 23:59:59","Signature":"ae3a17b84a7b55fa6455ec40a4ed494190999c89bcaf2e1dca7823f91c190f7feb68bc32d98838dedc3fd389b43fb18296f1a45abaed2e26d3de7c016e000a00a4069211480940f91c1879672324e0bbd5e150ae1bf50edde02e81cd80a36c524f9175558aba22f2d2ea4175882f63557d1e545a9559cad93481c05f5ef67ab5","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"4191a15a3978dfcf496566381d4c75c2","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"41011f8d0e7c7a6408334ca387914c61","SHA1":"c7fc1727f5b75a6421a1f95c73bbdb23580c48e5","SHA256":"88dd3952638ee82738c03168e6fd863fe4eab1059ee5e2926ad8cb587c255dc0","SHA384":"a00aa5ed457c41e37967882644d63366bae014f03a986576d8514164d7027acf7d0b5e03d764db2558f60db148954459"}},{"Subject":"C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority","ValidFrom":"2006-05-23 17:01:29","ValidTo":"2016-05-23 17:11:29","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"610c120600000000001b","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"53c41bc1164e09e0cd1617a5bf913efd","SHA1":"93c03aac8951d494ecd5696b1c08658541b18727","SHA256":"40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b","SHA384":"f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"}},{"Subject":"C=TW, ST=Taiwan, L=Taipei / Peitou, O=ASUSTeK Computer Inc., OU=Digital ID Class 3 , Microsoft Software Validation v2, OU=Quality Testing Department, CN=ASUSTeK Computer Inc.","ValidFrom":"2008-07-22 00:00:00","ValidTo":"2009-07-31 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"37ed9092bdd1dccf58d2afa47f961448","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"336ceef1b70541c73c4c4f7af221eac7","SHA1":"582a82a16246e3aa1e3534a2df1f33f7de90ad9d","SHA256":"6eb6b2bdb401d5172e19ce279574850c18e97bb0635dd89b62a92fc0442b73a3","SHA384":"c1ff22f1feb811e669f8bf1c4b6f5334b72046c4ed2b81f07b96684747db19323a5c1dfb2fd08ad00a82538080c2689a"}}],"Signer":[{"SerialNumber":"37ed9092bdd1dccf58d2afa47f961448","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)04, CN=VeriSign Class 3 Code Signing 2004 CA","Version":1}]}],"RichPEHeaderHash":{"MD5":"deb9c1e252f598099d70d2b33a313da3","SHA1":"f0c2801e0091ed6f5e10ea7045e911aa90030290","SHA256":"914fb9761d50c3fa2ecf9fbd8af3735f9b8d6c4903e067c8af9546e79b6f22c7"},"Sections":{".text":{"Entropy":6.140846081676954,"Virtual Size":"0xca6"},".rdata":{"Entropy":4.362536233544753,"Virtual Size":"0x170"},".data":{"Entropy":0,"Virtual Size":"0xc"},".pdata":{"Entropy":3.245354266022441,"Virtual Size":"0x84"},"INIT":{"Entropy":4.455848230056508,"Virtual Size":"0x204"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2009-04-06 03:21:08","Imphash":"12befc0a82dcb0585359d335ed47af19","LoadsDespiteHVCI":"FALSE"},{"Filename":"AsIO3_64.sys","MD5":"d5556c54c474cf0bff25804bfbe788d3","SHA1":"c71597c89bd8e937886e3390bc8ac4f17cdeae7c","SHA256":"fa875178ae2d7604d027510b0d0a7e2d9d675e10a4c9dda2d927ee891e0bcb91","Authentihash":{"MD5":"d9af966d89c5f045997042d35b9a7b91","SHA1":"b6f1e92a8452c2aec22aaa7657e92d2aa48b3055","SHA256":"26b8e689a13d3434951559cff24fcfe55edeb7b78c7cc16db1a273c90aa694c1"},"Description":"","Company":"","InternalName":"","OriginalFilename":"","FileVersion":"","Product":"","ProductVersion":"","Copyright":"","MachineType":"AMD64","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["KeSetEvent","KeDelayExecutionThread","KeWaitForSingleObject","ExAllocatePoolWithTag","ExFreePoolWithTag","MmGetSystemRoutineAddress","MmAllocateContiguousMemory","MmFreeContiguousMemory","IofCompleteRequest","IoCreateDevice","IoCreateSymbolicLink","IoCreateSynchronizationEvent","IoDeleteDevice","RtlGetVersion","IoIs32bitProcess","ObReferenceObjectByHandle","ObfDereferenceObject","ZwClose","ZwOpenSection","ZwMapViewOfSection","ZwUnmapViewOfSection","MmGetPhysicalAddress","__C_specific_handler","ZwOpenFile","ZwQueryInformationFile","ZwReadFile","KeBugCheckEx","DbgPrint","RtlCopyUnicodeString","IoDeleteSymbolicLink","RtlInitUnicodeString","HalSetBusDataByOffset","HalGetBusDataByOffset","HalTranslateBusAddress"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=DigiCert, Inc., CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1","ValidFrom":"2021-04-29 00:00:00","ValidTo":"2036-04-28 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.12","IsCertificateAuthority":true,"SerialNumber":"08ad40b260d29c4c9f5ecda9bd93aed9","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"5d8003a64dfa5a4d88365da1566038cb","SHA1":"79465b56bc7ad55a37bdf633943da8bfc84db228","SHA256":"84bdc82e2f2a7f7aaa782667dac556ffcb2b33240c1f9c0a00a3264526a98332","SHA384":"65b1d4076a89ae273f57e6eeedecb3eae129b4168f76fa7671914cdf461d542255c59d9b85b916ae0ca6fc0fcf7a8e64"}},{"Subject":"??=Private Organization, ??=TW, serialNumber=23638777, C=TW, ST=Taipei City, L=Beitou District, O=ASUSTeK COMPUTER INC., CN=ASUSTeK COMPUTER INC.","ValidFrom":"2021-10-22 00:00:00","ValidTo":"2024-10-22 23:59:59","Signature":"1a8b6fd4e11cec34a3dfea314f0d59c6f41c56f76e1ac51f68e0285f1abdbda9e22628939dbd7acdf890d8ff3c7c4fff180c624b8434c6536bb61f1ff459d48a14c001d9d40ff1587cf64ce82edee2a24da8d80cd240e2af6d0e1c61aab24ce95f9c8ef50eeb0e153a343c1279fe6a003c44f3bd3ffa75ffbe314fc13bb36a9bbb3cea6026f5cb582992b016059074e4fcd8c16d4c5e8750bc9a196f94525317febcddb2d0121a235bb95136a0e4fc25611cd2915f4b488b66888168b90824e171d3214480c99fadb7b6c89cafc500eee468cb7faa9c1c1526d224ff389de012480480ced98831c324b129f2df3d3493d002ec8d4725e00eda33994f82493505861f61035c625d1c9ce2c7363799d3f1df9b17712b43cbf4c2027b54c796cbaca6b1523d028291e07774168a976ee3c879c850c1aaf65b1cec5c6dcb445487ab11b3967b8dd7726fe0dc529f7d624346a996adfd9dc6aab808edd9836a93e229ddbba4e8bb1c59719b6ebdcfc74d73f57ed946e936b5659783c199395bd2595458958edde6674bf08b3b650a8aeaa5507053b3f6ee7aedf16f55b849111535ca68ea11a5827551cba28023e230db7a209c763743ea22be0948ecf03d98ed447f66ecb97c0a525eb3b469779f2417f2082c4244b50936a9cb215745c71f3c27c98220f76395ba22a2f921a87655237977febd8b9a1564333af0cdf8e749bce0dd","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":false,"SerialNumber":"0bbe02c8838fbf02ab56edabb1e34c19","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"0357e292e0e92b06c92b21cacfcfa451","SHA1":"f52795bc8de5d803f09e20dd216d7df861f4cb34","SHA256":"b33b80e64cdfb28fb9afb17259be19ffe1edf8aae62fcfbfe8ff301f786c500d","SHA384":"5fbe918c3fa1034d5671ae38b20773df18b8f9dd48e60f90c5c98708e73d6ca0c6dec4e2bcb0de22ba3efb59479db152"}}],"Signer":[{"SerialNumber":"0bbe02c8838fbf02ab56edabb1e34c19","Issuer":"C=US, O=DigiCert, Inc., CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1","Version":1}]}],"RichPEHeaderHash":{"MD5":"3be7917d9cf3e4ac3371233a5a20d62d","SHA1":"b7c8880dd8e1c5b626d55b5cfb0d2942e7162334","SHA256":"231cb707d547c553745056a7a5e03c8cd05307beb4e2208f607a1845b51d96f7"},"Sections":{".text":{"Entropy":6.407232131831549,"Virtual Size":"0x58d3"},".rdata":{"Entropy":5.437540965006372,"Virtual Size":"0x8d4"},".data":{"Entropy":0.9313275414257391,"Virtual Size":"0x290"},".pdata":{"Entropy":4.005604411589105,"Virtual Size":"0x1bc"},"INIT":{"Entropy":5.265885086539526,"Virtual Size":"0x4ec"},".reloc":{"Entropy":3.1086949695628423,"Virtual Size":"0x14"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2022-02-17 07:12:10","Imphash":"b3e26c5e0de2d01597dca208ef27cc38","LoadsDespiteHVCI":"TRUE"},{"Authentihash":{"MD5":"9fd03554246c6c74c232919c680d7be8","SHA1":"b25550309c902a21b03367ae27694c5a29b891b5","SHA256":"c3e3719ca592ba65a67f594ec1a08d0d7ad724b088be77d48cb33627c56f4614"},"Company":"","Copyright":"","CreationTimestamp":"2010-06-28 01:19:38","Date":"","Description":"","ExportedFunctions":"","FileVersion":"","Filename":"AsIO.sys","ImportedFunctions":["ZwMapViewOfSection","ObReferenceObjectByHandle","ZwOpenSection","RtlInitUnicodeString","IoDeleteDevice","IoDeleteSymbolicLink","ZwClose","MmGetPhysicalAddress","MmAllocateContiguousMemory","ZwUnmapViewOfSection","IoIs32bitProcess","IoCreateSymbolicLink","IoCreateDevice","IofCompleteRequest","KeDelayExecutionThread","HalTranslateBusAddress"],"Imports":["ntoskrnl.exe","HAL.dll"],"InternalName":"","MD5":"1dc94a6a82697c62a04e461d7a94d0b0","MachineType":"AMD64","MagicHeader":"50 45 0 0","OriginalFilename":"","Product":"","ProductVersion":"","Publisher":"ASUSTeK Computer Inc.","RichPEHeaderHash":{"MD5":"fdbc1ff6c9321efd70ec149c3c8ccac6","SHA1":"d77615c985da37ca9099b27c1be4785c6cb7ccf6","SHA256":"4dbce3e8c08dd544b78f87323f6d794fb990bb10cb6d239fe367da87a803f23c"},"SHA1":"b97a8d506be2e7eaa4385f70c009b22adbd071ba","SHA256":"2da330a2088409efc351118445a824f11edbe51cf3d653b298053785097fe40e","Sections":{".text":{"Entropy":6.108859458208728,"Virtual Size":"0xd86"},".rdata":{"Entropy":4.337980114178664,"Virtual Size":"0x188"},".data":{"Entropy":0,"Virtual Size":"0xc"},".pdata":{"Entropy":3.2608964358708645,"Virtual Size":"0x84"},"INIT":{"Entropy":4.571215641554434,"Virtual Size":"0x24a"}},"Signature":["ASUSTeK Computer Inc.","VeriSign Class 3 Code Signing 2009-2 CA","VeriSign Class 3 Public Primary CA"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer , G2","ValidFrom":"2007-06-15 00:00:00","ValidTo":"2012-06-14 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"3825d7faf861af9ef490e726b5d65ad5","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"d6c7684e9aaa508cf268335f83afe040","SHA1":"18066d20ad92409c567cdfde745279ff71c75226","SHA256":"a612fb22ce8be6dab75e47c98508f98496583e79c9c97b936a8caee9ea9f3fff","SHA384":"35c249d6ad0261a6229b2a727067ac6ba32a5d24b30b9249051f748c7735fbe2ec2ef26a702c50df1790fbe32a65aee7"}},{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA","ValidFrom":"2003-12-04 00:00:00","ValidTo":"2013-12-03 23:59:59","Signature":"4a6bf9ea58c2441c318979992b96bf82ac01d61c4ccdb08a586edf0829a35ec8ca9313e704520def47272f0038b0e4c9934e9ad4226215f73f37214f703180f18b3887b3e8e89700fecf55964e24d2a9274e7aaeb76141f32acee7c9d95eddbb2b853eb59db5d9e157ffbeb4c57ef5cf0c9ef097fe2bd33b521b1b3827f73f4a","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"47bf1995df8d524643f7db6d480d31a4","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"518d2ea8a21e879c942d504824ac211c","SHA1":"21ce87d827077e61abddf2beba69fde5432ea031","SHA256":"1ec3b4f02e03930a470020e0e48d24b84678bb558f46182888d870541f5e25c7","SHA384":"53e346bbde23779a5d116cc9d86fdd71c97b1f1b343439f8a11aa1d3c87af63864bb8488a5aeb2d0c26a6a1e0b15f03f"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009,2 CA","ValidFrom":"2009-05-21 00:00:00","ValidTo":"2019-05-20 23:59:59","Signature":"8b03c0dd94d841a26169b015a878c730c6903c7e42f724b6e4837317047f04109ca1e2fa812febc0ca44e772e050b6551020836e9692e49a516ab43731dca52deb8c00c71d4fe74d32ba85f84ebefa675565f06abe7aca64381a101078457631f3867a030f60c2b35d9df68b6676821b59e183e5bd49a53856e5de41770e580f","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"655226e1b22e18e1590f2985ac22e75c","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"650704c342850095f3288eaf791147d4","SHA1":"4cdc38c800761463749c3cbd94a12f32e49877bf","SHA256":"07b8f662558ec85b71b43a79c6e94698144f4ced2308af21e7ba1e5d461da214","SHA384":"2a271d052213438467d09d60eaa4010c8642fff3eb0070e0cf9969428713c8fdc066b90996d594dd3136f5bd0af5a22a"}},{"Subject":"C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority","ValidFrom":"2006-05-23 17:01:29","ValidTo":"2016-05-23 17:11:29","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"610c120600000000001b","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"53c41bc1164e09e0cd1617a5bf913efd","SHA1":"93c03aac8951d494ecd5696b1c08658541b18727","SHA256":"40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b","SHA384":"f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"}},{"Subject":"C=TW, ST=Taiwan, L=Taipei / Peitou, O=ASUSTeK Computer Inc., OU=Digital ID Class 3 , Microsoft Software Validation v2, OU=Quality Testing Department, CN=ASUSTeK Computer Inc.","ValidFrom":"2009-08-03 00:00:00","ValidTo":"2012-08-03 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"12d5c9e2949d48abaccd3514f0fb22ad","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"a8e2727ca2cb8705c02aaef015feb372","SHA1":"94a0711ecebe96729e048ae1c7de9c4ba5c25ec4","SHA256":"dd670882ef38bfeecfb2865ad06f52e36b07f99fbf5937b2ede58178d2221961","SHA384":"508037c851d72d2bf8f35ba25436903a510d02d58f923b6d2c694a9a27f4a82b0b0953ee7b3c68078faafe3886a64aa4"}}],"Signer":[{"SerialNumber":"12d5c9e2949d48abaccd3514f0fb22ad","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009,2 CA","Version":1}]}],"Imphash":"b4b90c1b054ebe273bff4b2fd6927990","LoadsDespiteHVCI":"FALSE"},{"Authentihash":{"MD5":"7bb2dcc29ba50372d08fea800c190f09","SHA1":"e5c090903a20744ba3583a8ea684d035e8cecc34","SHA256":"9dcfd796e244d0687cc35eac9538f209f76c6df12de166f19dbc7d2c47fb16b3"},"Company":"","Copyright":"","CreationTimestamp":"2012-08-22 05:54:47","Date":"","Description":"","ExportedFunctions":"","FileVersion":"","Filename":"AsIO.sys","ImportedFunctions":["ObReferenceObjectByHandle","ZwOpenSection","RtlInitUnicodeString","ZwClose","IoDeleteDevice","IoDeleteSymbolicLink","ZwMapViewOfSection","MmGetPhysicalAddress","MmAllocateContiguousMemory","ZwUnmapViewOfSection","IoIs32bitProcess","IoCreateSymbolicLink","IoCreateDevice","IofCompleteRequest","KeDelayExecutionThread","HalTranslateBusAddress"],"Imports":["ntoskrnl.exe","HAL.dll"],"InternalName":"","MD5":"798de15f187c1f013095bbbeb6fb6197","MachineType":"AMD64","MagicHeader":"50 45 0 0","OriginalFilename":"","Product":"","ProductVersion":"","Publisher":"ASUSTeK Computer Inc.","RichPEHeaderHash":{"MD5":"fdbc1ff6c9321efd70ec149c3c8ccac6","SHA1":"d77615c985da37ca9099b27c1be4785c6cb7ccf6","SHA256":"4dbce3e8c08dd544b78f87323f6d794fb990bb10cb6d239fe367da87a803f23c"},"SHA1":"92f251358b3fe86fd5e7aa9b17330afa0d64a705","SHA256":"436ccab6f62fa2d29827916e054ade7acae485b3de1d3e5c6c62d3debf1480e7","Sections":{".text":{"Entropy":6.1181571322303645,"Virtual Size":"0xd66"},".rdata":{"Entropy":4.313686441268313,"Virtual Size":"0x188"},".data":{"Entropy":0,"Virtual Size":"0xc"},".pdata":{"Entropy":3.3006321366120503,"Virtual Size":"0x84"},"INIT":{"Entropy":4.548019208277369,"Virtual Size":"0x24a"}},"Signature":["ASUSTeK Computer Inc.","VeriSign Class 3 Code Signing 2010 CA","VeriSign"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer , G3","ValidFrom":"2012-05-01 00:00:00","ValidTo":"2012-12-31 23:59:59","Signature":"1e98aa27b778b508b5c9726db7dfc00e98a635c488c9d2f66df14b1afbd5f92d99009ed1e79b8be13fbd39800c66cd07bc5c9854a694ba10d14e8babf56f65cc6709a2807c52e80e03d66b7ac60518ecc8ac427c072ca73d0866dc00edfd941d73f2729893b111d68fef8eeaacf496510cd08ddf31524f5eaf7da74a75e64ece2b9f292be7cf5d9f037e6e277b23ad622966af92e82ccebd9c7fdccd173c43c2093f7545c79ee4d7607f97c6e4aac769f5fccd74ac2cb048c1504e70561eb535d38ebeb1edacbdfe0cec857dd5bb856644195d9f93eb82ba639ed37c61ffc81bd923587f30a366a139265e92c33ccb3732faf5a38ddcd5b0a3e9253655d781fa","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"79a2a585f9d1154213d9b83ef6b68ded","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"e6d820afb23af20a65cf0b03247ea05e","SHA1":"7a8f7c37453f99390ee1e94bb5d3d1cba3a0eea7","SHA256":"7e722dc40e6b9abf8c20aa4d887e34b6d2c6b8cbe53a055d49bf9f5e946e0d27","SHA384":"7e14609969a388d38d227df1dbb9ce086c9a820142c94fd1a28ef2835a8aa528aef4c6399bce344d79adb5f3dad86afa"}},{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA","ValidFrom":"2003-12-04 00:00:00","ValidTo":"2013-12-03 23:59:59","Signature":"4a6bf9ea58c2441c318979992b96bf82ac01d61c4ccdb08a586edf0829a35ec8ca9313e704520def47272f0038b0e4c9934e9ad4226215f73f37214f703180f18b3887b3e8e89700fecf55964e24d2a9274e7aaeb76141f32acee7c9d95eddbb2b853eb59db5d9e157ffbeb4c57ef5cf0c9ef097fe2bd33b521b1b3827f73f4a","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"47bf1995df8d524643f7db6d480d31a4","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"518d2ea8a21e879c942d504824ac211c","SHA1":"21ce87d827077e61abddf2beba69fde5432ea031","SHA256":"1ec3b4f02e03930a470020e0e48d24b84678bb558f46182888d870541f5e25c7","SHA384":"53e346bbde23779a5d116cc9d86fdd71c97b1f1b343439f8a11aa1d3c87af63864bb8488a5aeb2d0c26a6a1e0b15f03f"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. , For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority , G5","ValidFrom":"2006-11-08 00:00:00","ValidTo":"2021-11-07 23:59:59","Signature":"1302ddf8e88600f25af8f8200c59886207cecef74ef9bb59a198e5e138dd4ebc6618d3adeb18f20dc96d3e4a9420c33cbabd6554c6af44b310ad2c6b3eabd707b6b88163c5f95e2ee52a67cecd330c2ad7895603231fb3bee83a0859b4ec4535f78a5bff66cf50afc66d578d1978b7b9a2d157ea1f9a4bafbac98e127ec6bdff","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"250ce8e030612e9f2b89f7054d7cf8fd","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"918d9eb6a6cd36c531eceb926170a7e1","SHA1":"0ae95700d65e6f59715aa47048993ca7858e676a","SHA256":"47c46e6eaa3780eace3d0d891346cd373359d246b21a957219dbab4c8f37c166","SHA384":"e54017c93ba52f012cc15aeb3bcbce1e90a0006ff8dca231a24fc572926770f63213343f538003407bed3463fa9c4a85"}},{"Subject":"C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority","ValidFrom":"2006-05-23 17:01:29","ValidTo":"2016-05-23 17:11:29","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"610c120600000000001b","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"53c41bc1164e09e0cd1617a5bf913efd","SHA1":"93c03aac8951d494ecd5696b1c08658541b18727","SHA256":"40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b","SHA384":"f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"}},{"Subject":"C=TW, ST=Taiwan, L=Taipei / Peitou, O=ASUSTeK Computer Inc., OU=Digital ID Class 3 , Microsoft Software Validation v2, OU=Quality Testing Department, CN=ASUSTeK Computer Inc.","ValidFrom":"2012-07-31 00:00:00","ValidTo":"2015-08-03 23:59:59","Signature":"03cd161c1960e13d0b06441f08fdfc9df8319f8d87a83ecc865bc20767841d4087e40dc9d770bdc5c0fe6ccb9cf3e08bee7364451b03fb3130356761cae54417e8a282ed7cd33b0becd72e8799b616a2766976a7172a1cc299e8321ebeb479f592e03f425da4b2ea6a0cd0b5cc32b9bdeec80aa3ef0a62d6e16b72765301d53ef883ab9210a4b868ff2e2724e37804feb5277d3e26da8ba9d0b6ef61769d1c0f62a78757779d7134a63320b1a692584f12162d3fa20ec6e1b038b1a8d7afc2fad7b692759c6a000159714271f40d608fed3c08213b757fa75baf4674380f5aea46b7125f17532c636876c1f3e0d4b0350822f2a640001fda794b969e2cc681c2","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"7d08d9bc130726de26ee4ef28e133084","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"72cafb0a175f0481177fa2c9803283c7","SHA1":"b603167b958c5fcd7094552891ddc4e2ea4c149f","SHA256":"a36a0024075771a4b30eab8f1288817059fe1a01003d0c1d92f647df17f3b688","SHA384":"33c28dc6857ce5d20a2e9ba8a47f6bc80a9a98fba518fd732963bedbbb408848b89b3d8438d413f8b933ee761ffa1653"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","ValidFrom":"2010-02-08 00:00:00","ValidTo":"2020-02-07 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"5200e5aa2556fc1a86ed96c9d44b33c7","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"b30c31a572b0409383ed3fbe17e56e81","SHA1":"4843a82ed3b1f2bfbee9671960e1940c942f688d","SHA256":"03cda47a6e654ed85d932714fc09ce4874600eda29ec6628cfbaeb155cab78c9","SHA384":"bbda8407c4f9fc4e54d772f1c7fb9d30bc97e1f97ecd51c443063d1fa0644e266328781776cd5c44896c457c75f4d7da"}}],"Signer":[{"SerialNumber":"7d08d9bc130726de26ee4ef28e133084","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","Version":1}]}],"Imphash":"d7de998e454f947f62d4a6b66490563b","LoadsDespiteHVCI":"FALSE"},{"Authentihash":{"MD5":"1e97ead4c5049f8fefe2b72edd5fa90e","SHA1":"2a95f882dd9bafcc57f144a2708a7ec67dd7844c","SHA256":"7f75d91844b0c162eeb24d14bcf63b7f230e111daa7b0a26eaa489eeb22d9057"},"Company":"","Copyright":"","CreationTimestamp":"2010-08-02 22:47:59","Date":"","Description":"","ExportedFunctions":"","FileVersion":"","Filename":"AsIO.sys","ImportedFunctions":["ZwMapViewOfSection","ObReferenceObjectByHandle","ZwOpenSection","RtlInitUnicodeString","IoDeleteDevice","IoDeleteSymbolicLink","ZwClose","MmGetPhysicalAddress","MmAllocateContiguousMemory","ZwUnmapViewOfSection","IoIs32bitProcess","IoCreateSymbolicLink","IoCreateDevice","IofCompleteRequest","KeDelayExecutionThread","HalTranslateBusAddress"],"Imports":["ntoskrnl.exe","HAL.dll"],"InternalName":"","MD5":"1392b92179b07b672720763d9b1028a5","MachineType":"AMD64","MagicHeader":"50 45 0 0","OriginalFilename":"","Product":"","ProductVersion":"","Publisher":"ASUSTeK Computer Inc.","RichPEHeaderHash":{"MD5":"058831031bc182e09fd9501e62a8c8ce","SHA1":"23c55978de25c037af392054d26cc72818ee3a60","SHA256":"7890a60d1090102ce6bb8cacac02b827a9edbbdf8ec13c022a9170b0ee036c43"},"SHA1":"8b6aa5b2bff44766ef7afbe095966a71bc4183fa","SHA256":"b4d47ea790920a4531e3df5a4b4b0721b7fea6b49a35679f0652f1e590422602","Sections":{".text":{"Entropy":6.128485959548185,"Virtual Size":"0x10fc"},".rdata":{"Entropy":4.469326855336564,"Virtual Size":"0x1a0"},".data":{"Entropy":0,"Virtual Size":"0xc"},".pdata":{"Entropy":3.3216749799000778,"Virtual Size":"0x90"},"INIT":{"Entropy":4.5288929688981066,"Virtual Size":"0x24a"}},"Signature":["ASUSTeK Computer Inc.","VeriSign Class 3 Code Signing 2009-2 CA","VeriSign Class 3 Public Primary CA"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer , G2","ValidFrom":"2007-06-15 00:00:00","ValidTo":"2012-06-14 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"3825d7faf861af9ef490e726b5d65ad5","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"d6c7684e9aaa508cf268335f83afe040","SHA1":"18066d20ad92409c567cdfde745279ff71c75226","SHA256":"a612fb22ce8be6dab75e47c98508f98496583e79c9c97b936a8caee9ea9f3fff","SHA384":"35c249d6ad0261a6229b2a727067ac6ba32a5d24b30b9249051f748c7735fbe2ec2ef26a702c50df1790fbe32a65aee7"}},{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA","ValidFrom":"2003-12-04 00:00:00","ValidTo":"2013-12-03 23:59:59","Signature":"4a6bf9ea58c2441c318979992b96bf82ac01d61c4ccdb08a586edf0829a35ec8ca9313e704520def47272f0038b0e4c9934e9ad4226215f73f37214f703180f18b3887b3e8e89700fecf55964e24d2a9274e7aaeb76141f32acee7c9d95eddbb2b853eb59db5d9e157ffbeb4c57ef5cf0c9ef097fe2bd33b521b1b3827f73f4a","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"47bf1995df8d524643f7db6d480d31a4","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"518d2ea8a21e879c942d504824ac211c","SHA1":"21ce87d827077e61abddf2beba69fde5432ea031","SHA256":"1ec3b4f02e03930a470020e0e48d24b84678bb558f46182888d870541f5e25c7","SHA384":"53e346bbde23779a5d116cc9d86fdd71c97b1f1b343439f8a11aa1d3c87af63864bb8488a5aeb2d0c26a6a1e0b15f03f"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009,2 CA","ValidFrom":"2009-05-21 00:00:00","ValidTo":"2019-05-20 23:59:59","Signature":"8b03c0dd94d841a26169b015a878c730c6903c7e42f724b6e4837317047f04109ca1e2fa812febc0ca44e772e050b6551020836e9692e49a516ab43731dca52deb8c00c71d4fe74d32ba85f84ebefa675565f06abe7aca64381a101078457631f3867a030f60c2b35d9df68b6676821b59e183e5bd49a53856e5de41770e580f","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"655226e1b22e18e1590f2985ac22e75c","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"650704c342850095f3288eaf791147d4","SHA1":"4cdc38c800761463749c3cbd94a12f32e49877bf","SHA256":"07b8f662558ec85b71b43a79c6e94698144f4ced2308af21e7ba1e5d461da214","SHA384":"2a271d052213438467d09d60eaa4010c8642fff3eb0070e0cf9969428713c8fdc066b90996d594dd3136f5bd0af5a22a"}},{"Subject":"C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority","ValidFrom":"2006-05-23 17:01:29","ValidTo":"2016-05-23 17:11:29","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"610c120600000000001b","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"53c41bc1164e09e0cd1617a5bf913efd","SHA1":"93c03aac8951d494ecd5696b1c08658541b18727","SHA256":"40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b","SHA384":"f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"}},{"Subject":"C=TW, ST=Taiwan, L=Taipei / Peitou, O=ASUSTeK Computer Inc., OU=Digital ID Class 3 , Microsoft Software Validation v2, OU=Quality Testing Department, CN=ASUSTeK Computer Inc.","ValidFrom":"2009-08-03 00:00:00","ValidTo":"2012-08-03 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"12d5c9e2949d48abaccd3514f0fb22ad","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"a8e2727ca2cb8705c02aaef015feb372","SHA1":"94a0711ecebe96729e048ae1c7de9c4ba5c25ec4","SHA256":"dd670882ef38bfeecfb2865ad06f52e36b07f99fbf5937b2ede58178d2221961","SHA384":"508037c851d72d2bf8f35ba25436903a510d02d58f923b6d2c694a9a27f4a82b0b0953ee7b3c68078faafe3886a64aa4"}}],"Signer":[{"SerialNumber":"12d5c9e2949d48abaccd3514f0fb22ad","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009,2 CA","Version":1}]}],"Imphash":"b4b90c1b054ebe273bff4b2fd6927990","LoadsDespiteHVCI":"FALSE"},{"Authentihash":{"MD5":"9e7fb1f3c75f1f5e6769813c545643fc","SHA1":"86f07797273b7f0e0805d2add8c1a0be116eb88c","SHA256":"191689c53195dbe828f406b206cb167dcd4671ecdab32b80e01c885f706a6baf"},"Company":"","Copyright":"","CreationTimestamp":"2010-08-23 21:53:02","Date":"","Description":"","ExportedFunctions":"","FileVersion":"","Filename":"AsIO.sys","ImportedFunctions":["ZwMapViewOfSection","ObReferenceObjectByHandle","ZwOpenSection","RtlInitUnicodeString","IoDeleteDevice","IoDeleteSymbolicLink","ZwClose","MmGetPhysicalAddress","MmAllocateContiguousMemory","ZwUnmapViewOfSection","IoIs32bitProcess","IoCreateSymbolicLink","IoCreateDevice","IofCompleteRequest","KeDelayExecutionThread","HalTranslateBusAddress"],"Imports":["ntoskrnl.exe","HAL.dll"],"InternalName":"","MD5":"fef9dd9ea587f8886ade43c1befbdafe","MachineType":"AMD64","MagicHeader":"50 45 0 0","OriginalFilename":"","Product":"","ProductVersion":"","Publisher":"ASUSTeK Computer Inc.","RichPEHeaderHash":{"MD5":"fdbc1ff6c9321efd70ec149c3c8ccac6","SHA1":"d77615c985da37ca9099b27c1be4785c6cb7ccf6","SHA256":"4dbce3e8c08dd544b78f87323f6d794fb990bb10cb6d239fe367da87a803f23c"},"SHA1":"af6e1f2cfb230907476e8b2d676129b6d6657124","SHA256":"dde6f28b3f7f2abbee59d4864435108791631e9cb4cdfb1f178e5aa9859956d8","Sections":{".text":{"Entropy":6.107404762164129,"Virtual Size":"0xd86"},".rdata":{"Entropy":4.358520944651229,"Virtual Size":"0x188"},".data":{"Entropy":0,"Virtual Size":"0xc"},".pdata":{"Entropy":3.2608964358708645,"Virtual Size":"0x84"},"INIT":{"Entropy":4.571215641554434,"Virtual Size":"0x24a"}},"Signature":["ASUSTeK Computer Inc.","VeriSign Class 3 Code Signing 2009-2 CA","VeriSign Class 3 Public Primary CA"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer , G2","ValidFrom":"2007-06-15 00:00:00","ValidTo":"2012-06-14 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"3825d7faf861af9ef490e726b5d65ad5","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"d6c7684e9aaa508cf268335f83afe040","SHA1":"18066d20ad92409c567cdfde745279ff71c75226","SHA256":"a612fb22ce8be6dab75e47c98508f98496583e79c9c97b936a8caee9ea9f3fff","SHA384":"35c249d6ad0261a6229b2a727067ac6ba32a5d24b30b9249051f748c7735fbe2ec2ef26a702c50df1790fbe32a65aee7"}},{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA","ValidFrom":"2003-12-04 00:00:00","ValidTo":"2013-12-03 23:59:59","Signature":"4a6bf9ea58c2441c318979992b96bf82ac01d61c4ccdb08a586edf0829a35ec8ca9313e704520def47272f0038b0e4c9934e9ad4226215f73f37214f703180f18b3887b3e8e89700fecf55964e24d2a9274e7aaeb76141f32acee7c9d95eddbb2b853eb59db5d9e157ffbeb4c57ef5cf0c9ef097fe2bd33b521b1b3827f73f4a","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"47bf1995df8d524643f7db6d480d31a4","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"518d2ea8a21e879c942d504824ac211c","SHA1":"21ce87d827077e61abddf2beba69fde5432ea031","SHA256":"1ec3b4f02e03930a470020e0e48d24b84678bb558f46182888d870541f5e25c7","SHA384":"53e346bbde23779a5d116cc9d86fdd71c97b1f1b343439f8a11aa1d3c87af63864bb8488a5aeb2d0c26a6a1e0b15f03f"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009,2 CA","ValidFrom":"2009-05-21 00:00:00","ValidTo":"2019-05-20 23:59:59","Signature":"8b03c0dd94d841a26169b015a878c730c6903c7e42f724b6e4837317047f04109ca1e2fa812febc0ca44e772e050b6551020836e9692e49a516ab43731dca52deb8c00c71d4fe74d32ba85f84ebefa675565f06abe7aca64381a101078457631f3867a030f60c2b35d9df68b6676821b59e183e5bd49a53856e5de41770e580f","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"655226e1b22e18e1590f2985ac22e75c","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"650704c342850095f3288eaf791147d4","SHA1":"4cdc38c800761463749c3cbd94a12f32e49877bf","SHA256":"07b8f662558ec85b71b43a79c6e94698144f4ced2308af21e7ba1e5d461da214","SHA384":"2a271d052213438467d09d60eaa4010c8642fff3eb0070e0cf9969428713c8fdc066b90996d594dd3136f5bd0af5a22a"}},{"Subject":"C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority","ValidFrom":"2006-05-23 17:01:29","ValidTo":"2016-05-23 17:11:29","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"610c120600000000001b","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"53c41bc1164e09e0cd1617a5bf913efd","SHA1":"93c03aac8951d494ecd5696b1c08658541b18727","SHA256":"40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b","SHA384":"f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"}},{"Subject":"C=TW, ST=Taiwan, L=Taipei / Peitou, O=ASUSTeK Computer Inc., OU=Digital ID Class 3 , Microsoft Software Validation v2, OU=Quality Testing Department, CN=ASUSTeK Computer Inc.","ValidFrom":"2009-08-03 00:00:00","ValidTo":"2012-08-03 23:59:59","Signature":"bdc1dedf888c617c55af86763028f36094aeaadb7ebe82208e02d910305a252b4156a62a7f17366536fde06c13ff2bd8891e303a1e8c5c3cdb5fb257627367e3b6446b76c8080f61feac4424c5ef89467a79dc55fcb929805b727a10b39493038f97535686250f46e169bc85a02fb1f8a2626235a540e058084d1b17dbb7c426e76a8d3c2b3e2c0c4f33b9d6cc8d7a3590f8f61358ea5380ee0af3df7197dc4a615bcef1bcd119dba007d955d1acd14b42ab89d3539047d13d3e767de04ab5aa289fa0a698a582e84a5a65a1c9fabed2f75576629e8ad1826b68f2fca2baa751745f5ec968ed91cdf9761244a80b8c0d957900297ac3523c7a20c64e35be1b0a","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"12d5c9e2949d48abaccd3514f0fb22ad","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"a8e2727ca2cb8705c02aaef015feb372","SHA1":"94a0711ecebe96729e048ae1c7de9c4ba5c25ec4","SHA256":"dd670882ef38bfeecfb2865ad06f52e36b07f99fbf5937b2ede58178d2221961","SHA384":"508037c851d72d2bf8f35ba25436903a510d02d58f923b6d2c694a9a27f4a82b0b0953ee7b3c68078faafe3886a64aa4"}}],"Signer":[{"SerialNumber":"12d5c9e2949d48abaccd3514f0fb22ad","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009,2 CA","Version":1}]}],"Imphash":"b4b90c1b054ebe273bff4b2fd6927990","LoadsDespiteHVCI":"TRUE"},{"Authentihash":{"MD5":"9f79edf758e219929902ec7564e0f435","SHA1":"c92148d0666f2235500805975be79738b84e48c2","SHA256":"19c74ea0e0baf04820e5642bd2fa224158801ed966be1041539e3c55bd65c471"},"Company":"","Copyright":"","CreationTimestamp":"2009-04-06 03:21:08","Date":"","Description":"","ExportedFunctions":"","FileVersion":"","Filename":"","ImportedFunctions":["ZwMapViewOfSection","ObReferenceObjectByHandle","ZwOpenSection","RtlInitUnicodeString","IoDeleteDevice","ZwClose","IofCompleteRequest","ZwUnmapViewOfSection","IoIs32bitProcess","IoCreateSymbolicLink","IoCreateDevice","IoDeleteSymbolicLink","KeDelayExecutionThread","HalTranslateBusAddress"],"Imports":["ntoskrnl.exe","HAL.dll"],"InternalName":"","MD5":"517d484bdbad4637188ec7a908335b86","MachineType":"AMD64","MagicHeader":"50 45 0 0","OriginalFilename":"","PDBPath":"","Product":"","ProductVersion":"","Publisher":"","RichPEHeaderHash":{"MD5":"deb9c1e252f598099d70d2b33a313da3","SHA1":"f0c2801e0091ed6f5e10ea7045e911aa90030290","SHA256":"914fb9761d50c3fa2ecf9fbd8af3735f9b8d6c4903e067c8af9546e79b6f22c7"},"SHA1":"2207cdee7deaba1492ae2349392864f19eb4dfaf","SHA256":"db73b0fa032be22405fa0b52fbfe3b30e56ac4787e620e4854c32668ae43bc33","Sections":{".text":{"Entropy":6.140846081676954,"Virtual Size":"0xca6"},".rdata":{"Entropy":4.362536233544753,"Virtual Size":"0x170"},".data":{"Entropy":0,"Virtual Size":"0xc"},".pdata":{"Entropy":3.245354266022441,"Virtual Size":"0x84"},"INIT":{"Entropy":4.455848230056508,"Virtual Size":"0x204"}},"Signature":"","Signatures":{},"Imphash":"12befc0a82dcb0585359d335ed47af19","LoadsDespiteHVCI":"FALSE"},{"Authentihash":{"MD5":"7bb2dcc29ba50372d08fea800c190f09","SHA1":"e5c090903a20744ba3583a8ea684d035e8cecc34","SHA256":"9dcfd796e244d0687cc35eac9538f209f76c6df12de166f19dbc7d2c47fb16b3"},"Company":"","Copyright":"","CreationTimestamp":"2012-08-22 05:54:47","Date":"","Description":"","ExportedFunctions":"","FileVersion":"","Filename":"","ImportedFunctions":["ObReferenceObjectByHandle","ZwOpenSection","RtlInitUnicodeString","ZwClose","IoDeleteDevice","IoDeleteSymbolicLink","ZwMapViewOfSection","MmGetPhysicalAddress","MmAllocateContiguousMemory","ZwUnmapViewOfSection","IoIs32bitProcess","IoCreateSymbolicLink","IoCreateDevice","IofCompleteRequest","KeDelayExecutionThread","HalTranslateBusAddress"],"Imports":["ntoskrnl.exe","HAL.dll"],"InternalName":"","MD5":"b2e4e588ce7b993cc31c18a0721d904d","MachineType":"AMD64","MagicHeader":"50 45 0 0","OriginalFilename":"","PDBPath":"","Product":"","ProductVersion":"","Publisher":"","RichPEHeaderHash":{"MD5":"fdbc1ff6c9321efd70ec149c3c8ccac6","SHA1":"d77615c985da37ca9099b27c1be4785c6cb7ccf6","SHA256":"4dbce3e8c08dd544b78f87323f6d794fb990bb10cb6d239fe367da87a803f23c"},"SHA1":"a714a2a045fa8f46d0165b78fe3eecf129c1de3a","SHA256":"707b4b5f5c4585156d8a4d8c39cf26729f5ad05d7f77b17f48e670e808e3e6a0","Sections":{".text":{"Entropy":6.1181571322303645,"Virtual Size":"0xd66"},".rdata":{"Entropy":4.313686441268313,"Virtual Size":"0x188"},".data":{"Entropy":0,"Virtual Size":"0xc"},".pdata":{"Entropy":3.3006321366120503,"Virtual Size":"0x84"},"INIT":{"Entropy":4.548019208277369,"Virtual Size":"0x24a"}},"Signature":"","Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=MOPR, CN=Microsoft Windows Hardware Compatibility Publisher","ValidFrom":"2014-12-19 19:27:34","ValidTo":"2016-03-19 19:27:34","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":false,"SerialNumber":"330000001dc31a761624754f8000000000001d","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"df2a0bc442ef65cd9973329be21c642f","SHA1":"d13bcda797c6b986a1a45b7ce9184e87ba0f994c","SHA256":"41718d172e45eaa02ec88494587672cf50f96a310aebc5b49a66c0adae99edc5","SHA384":"db7864a35b468726f3d431e07825ae860ddb0d6250b3bd8906f1b0ff98ce7b4c563c73288b01ec8f1ec5a2a06f31bc40"}},{"Subject":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Windows Third Party Component CA 2012","ValidFrom":"2012-04-18 23:48:38","ValidTo":"2027-04-18 23:58:38","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":true,"SerialNumber":"610baac1000000000009","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"a569061297e8e824767dbc3184a69bea","SHA1":"adbb26a587a8f44b4fccaecb306f980d1c55a150","SHA256":"cec1afd0e310c55c1dcc601ab8e172917706aa32fb5eaf826813547fdf02dd46","SHA384":"e947cac936803f5683196e4ff1b259096073395d0b908522ddce90d57597c9f7b57f7ddcdbe021ba863d843c340da8ba"}}],"Signer":[{"SerialNumber":"330000001dc31a761624754f8000000000001d","Issuer":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Windows Third Party Component CA 2012","Version":1}]}],"Imphash":"d7de998e454f947f62d4a6b66490563b","LoadsDespiteHVCI":"FALSE"},{"Authentihash":{"MD5":"5b13f61ef5173aaea45b31d934fa2b37","SHA1":"55ab7e27412eca433d76513edc7e6e03bcdd7eda","SHA256":"c1b41d6b91448e2409bb2f4fbf4aeb952adf373d0decc9d052277b89ba401407"},"Company":"","Copyright":"","CreationTimestamp":"2009-08-03 03:02:32","Date":"","Description":"","ExportedFunctions":"","FileVersion":"","Filename":"","ImportedFunctions":["READ_REGISTER_UCHAR","READ_REGISTER_USHORT","READ_REGISTER_ULONG","WRITE_REGISTER_UCHAR","WRITE_REGISTER_USHORT","KeQuerySystemTime","ZwClose","ZwMapViewOfSection","ObReferenceObjectByHandle","ZwOpenSection","IoDeleteSymbolicLink","KeDelayExecutionThread","ZwUnmapViewOfSection","IofCompleteRequest","RtlInitUnicodeString","IoCreateDevice","IoCreateSymbolicLink","WRITE_REGISTER_ULONG","IoDeleteDevice","WRITE_PORT_USHORT","WRITE_PORT_UCHAR","HalTranslateBusAddress","READ_PORT_ULONG","READ_PORT_USHORT","READ_PORT_UCHAR","WRITE_PORT_ULONG"],"Imports":["ntoskrnl.exe","HAL.dll"],"InternalName":"","MD5":"9d8cb58b9a9e177ddd599791a58a654d","MachineType":"I386","MagicHeader":"50 45 0 0","OriginalFilename":"","PDBPath":"","Product":"","ProductVersion":"","Publisher":"","RichPEHeaderHash":{"MD5":"1dca2593c812b9d1ad59cd6c601d9984","SHA1":"ed8d9ab054b6e3b43e55dff40654162d6abc6657","SHA256":"332168c7827fb42ec1ee5e08f64bb7273db098da638241b85585b8daf24ba5fb"},"SHA1":"e4e40032376279e29487afc18527804dce792883","SHA256":"b3e645e8817696fa5d5e2255f9328f3b6a2e5fce91737f4d654ff155dc9851e5","Sections":{".text":{"Entropy":6.1960789663995905,"Virtual Size":"0x872"},".rdata":{"Entropy":2.808152433711106,"Virtual Size":"0xc4"},".data":{"Entropy":0,"Virtual Size":"0xc"},"INIT":{"Entropy":5.208673110075946,"Virtual Size":"0x2f0"},".reloc":{"Entropy":3.9280891177162527,"Virtual Size":"0x92"}},"Signature":"","Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer , G2","ValidFrom":"2007-06-15 00:00:00","ValidTo":"2012-06-14 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"3825d7faf861af9ef490e726b5d65ad5","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"d6c7684e9aaa508cf268335f83afe040","SHA1":"18066d20ad92409c567cdfde745279ff71c75226","SHA256":"a612fb22ce8be6dab75e47c98508f98496583e79c9c97b936a8caee9ea9f3fff","SHA384":"35c249d6ad0261a6229b2a727067ac6ba32a5d24b30b9249051f748c7735fbe2ec2ef26a702c50df1790fbe32a65aee7"}},{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA","ValidFrom":"2003-12-04 00:00:00","ValidTo":"2013-12-03 23:59:59","Signature":"4a6bf9ea58c2441c318979992b96bf82ac01d61c4ccdb08a586edf0829a35ec8ca9313e704520def47272f0038b0e4c9934e9ad4226215f73f37214f703180f18b3887b3e8e89700fecf55964e24d2a9274e7aaeb76141f32acee7c9d95eddbb2b853eb59db5d9e157ffbeb4c57ef5cf0c9ef097fe2bd33b521b1b3827f73f4a","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"47bf1995df8d524643f7db6d480d31a4","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"518d2ea8a21e879c942d504824ac211c","SHA1":"21ce87d827077e61abddf2beba69fde5432ea031","SHA256":"1ec3b4f02e03930a470020e0e48d24b84678bb558f46182888d870541f5e25c7","SHA384":"53e346bbde23779a5d116cc9d86fdd71c97b1f1b343439f8a11aa1d3c87af63864bb8488a5aeb2d0c26a6a1e0b15f03f"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009,2 CA","ValidFrom":"2009-05-21 00:00:00","ValidTo":"2019-05-20 23:59:59","Signature":"8b03c0dd94d841a26169b015a878c730c6903c7e42f724b6e4837317047f04109ca1e2fa812febc0ca44e772e050b6551020836e9692e49a516ab43731dca52deb8c00c71d4fe74d32ba85f84ebefa675565f06abe7aca64381a101078457631f3867a030f60c2b35d9df68b6676821b59e183e5bd49a53856e5de41770e580f","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"655226e1b22e18e1590f2985ac22e75c","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"650704c342850095f3288eaf791147d4","SHA1":"4cdc38c800761463749c3cbd94a12f32e49877bf","SHA256":"07b8f662558ec85b71b43a79c6e94698144f4ced2308af21e7ba1e5d461da214","SHA384":"2a271d052213438467d09d60eaa4010c8642fff3eb0070e0cf9969428713c8fdc066b90996d594dd3136f5bd0af5a22a"}},{"Subject":"C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority","ValidFrom":"2006-05-23 17:01:29","ValidTo":"2016-05-23 17:11:29","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"610c120600000000001b","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"53c41bc1164e09e0cd1617a5bf913efd","SHA1":"93c03aac8951d494ecd5696b1c08658541b18727","SHA256":"40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b","SHA384":"f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"}},{"Subject":"C=TW, ST=Taiwan, L=Taipei / Peitou, O=ASUSTeK Computer Inc., OU=Digital ID Class 3 , Microsoft Software Validation v2, OU=Quality Testing Department, CN=ASUSTeK Computer Inc.","ValidFrom":"2009-08-03 00:00:00","ValidTo":"2012-08-03 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"12d5c9e2949d48abaccd3514f0fb22ad","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"a8e2727ca2cb8705c02aaef015feb372","SHA1":"94a0711ecebe96729e048ae1c7de9c4ba5c25ec4","SHA256":"dd670882ef38bfeecfb2865ad06f52e36b07f99fbf5937b2ede58178d2221961","SHA384":"508037c851d72d2bf8f35ba25436903a510d02d58f923b6d2c694a9a27f4a82b0b0953ee7b3c68078faafe3886a64aa4"}}],"Signer":[{"SerialNumber":"12d5c9e2949d48abaccd3514f0fb22ad","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009,2 CA","Version":1}]}],"Imphash":"b0e74761cced2dde5173ae05ec562085","LoadsDespiteHVCI":"FALSE"},{"Authentihash":{"MD5":"4fcf3854e63dee328f9deefa6ce069cb","SHA1":"d569d4bab86e70efbcdfdac9d822139d6f477b7c","SHA256":"80599708ce61ec5d6dcfc5977208a2a0be2252820a88d9ba260d8cdf5dc7fbe4"},"Company":"","Copyright":"","CreationTimestamp":"2005-12-21 03:55:21","Date":"","Description":"","ExportedFunctions":"","FileVersion":"","Filename":"","ImportedFunctions":["READ_REGISTER_UCHAR","READ_REGISTER_USHORT","READ_REGISTER_ULONG","WRITE_REGISTER_UCHAR","KeQuerySystemTime","KeDelayExecutionThread","IofCompleteRequest","ZwClose","ZwMapViewOfSection","ObReferenceObjectByHandle","ZwOpenSection","IoDeleteSymbolicLink","DbgPrint","ZwUnmapViewOfSection","IoCreateSymbolicLink","RtlInitUnicodeString","IoCreateDevice","WRITE_REGISTER_USHORT","IoDeleteDevice","WRITE_REGISTER_ULONG","WRITE_PORT_ULONG","WRITE_PORT_USHORT","HalTranslateBusAddress","READ_PORT_ULONG","WRITE_PORT_UCHAR","READ_PORT_UCHAR","READ_PORT_USHORT"],"Imports":["ntoskrnl.exe","HAL.dll"],"InternalName":"","MD5":"663f2fb92608073824ee3106886120f3","MachineType":"I386","MagicHeader":"50 45 0 0","OriginalFilename":"","PDBPath":"","Product":"","ProductVersion":"","Publisher":"","RichPEHeaderHash":{"MD5":"b39d8b5610182849a95fa415c9786274","SHA1":"47e24c8d5f1687b4811c2267b1519e4f53576005","SHA256":"bde1051ba0a00c5223e7850f91b66678c6236ab82415e73114502cd4e9e2bef8"},"SHA1":"470633a3a1e1b1f13c3f6c5192ce881efd206d7c","SHA256":"41765151df57125286b398cc107ff8007972f4653527f876d133dac1548865d6","Sections":{".text":{"Entropy":6.41894248761542,"Virtual Size":"0xcac"},".rdata":{"Entropy":2.710450233592338,"Virtual Size":"0xd4"},".data":{"Entropy":0,"Virtual Size":"0xc"},"INIT":{"Entropy":5.25231831216104,"Virtual Size":"0x300"},".reloc":{"Entropy":4.575666038623564,"Virtual Size":"0xcc"}},"Signature":"","Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA","ValidFrom":"2003-12-04 00:00:00","ValidTo":"2013-12-03 23:59:59","Signature":"4a6bf9ea58c2441c318979992b96bf82ac01d61c4ccdb08a586edf0829a35ec8ca9313e704520def47272f0038b0e4c9934e9ad4226215f73f37214f703180f18b3887b3e8e89700fecf55964e24d2a9274e7aaeb76141f32acee7c9d95eddbb2b853eb59db5d9e157ffbeb4c57ef5cf0c9ef097fe2bd33b521b1b3827f73f4a","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"47bf1995df8d524643f7db6d480d31a4","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"518d2ea8a21e879c942d504824ac211c","SHA1":"21ce87d827077e61abddf2beba69fde5432ea031","SHA256":"1ec3b4f02e03930a470020e0e48d24b84678bb558f46182888d870541f5e25c7","SHA384":"53e346bbde23779a5d116cc9d86fdd71c97b1f1b343439f8a11aa1d3c87af63864bb8488a5aeb2d0c26a6a1e0b15f03f"}},{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer","ValidFrom":"2003-12-04 00:00:00","ValidTo":"2008-12-03 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"0de92bf0d4d82988183205095e9a7688","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"45c204b8a20f6abb0188d2d38a3fb0c9","SHA1":"cdf3a3c5c2eda4c29621f30fd3154f9f8c765739","SHA256":"e32839dddc0f4ed2474efaf37f59d46db400c700fd19533cb0895a111124bc77","SHA384":"ee9c75832cb252218b3201619852209df490d2ef7a5f7a28afdb37f1c1dd56f4604898838e558f615b1c798d4a488223"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)04, CN=VeriSign Class 3 Code Signing 2004 CA","ValidFrom":"2004-07-16 00:00:00","ValidTo":"2014-07-15 23:59:59","Signature":"ae3a17b84a7b55fa6455ec40a4ed494190999c89bcaf2e1dca7823f91c190f7feb68bc32d98838dedc3fd389b43fb18296f1a45abaed2e26d3de7c016e000a00a4069211480940f91c1879672324e0bbd5e150ae1bf50edde02e81cd80a36c524f9175558aba22f2d2ea4175882f63557d1e545a9559cad93481c05f5ef67ab5","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"4191a15a3978dfcf496566381d4c75c2","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"41011f8d0e7c7a6408334ca387914c61","SHA1":"c7fc1727f5b75a6421a1f95c73bbdb23580c48e5","SHA256":"88dd3952638ee82738c03168e6fd863fe4eab1059ee5e2926ad8cb587c255dc0","SHA384":"a00aa5ed457c41e37967882644d63366bae014f03a986576d8514164d7027acf7d0b5e03d764db2558f60db148954459"}},{"Subject":"C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority","ValidFrom":"2006-05-23 17:01:29","ValidTo":"2016-05-23 17:11:29","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"610c120600000000001b","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"53c41bc1164e09e0cd1617a5bf913efd","SHA1":"93c03aac8951d494ecd5696b1c08658541b18727","SHA256":"40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b","SHA384":"f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"}},{"Subject":"C=TW, ST=Taiwan, L=Taipei / Peitou, O=ASUSTeK Computer Inc., OU=Digital ID Class 3 , Microsoft Software Validation v2, OU=Quality Testing Department, CN=ASUSTeK Computer Inc.","ValidFrom":"2006-06-27 00:00:00","ValidTo":"2007-07-16 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"284649f592786c4851c1138e364185ae","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"2fc1a78b4874ed1ac403284a5d4084fb","SHA1":"9ae9b025b3a9ebfacdf55104f3fc1c143457a296","SHA256":"9ffd439139209f1a084cb30cd791558dc266265405f7c5c7444c5a941ff0c004","SHA384":"656817a3d8aa52cdc8fbff1dcb0ef1f07ea93f0c6b82067d7c6c5f68a125dc3b50f88974a66d59ecc5b996ca5e55eaa1"}}],"Signer":[{"SerialNumber":"284649f592786c4851c1138e364185ae","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)04, CN=VeriSign Class 3 Code Signing 2004 CA","Version":1}]}],"Imphash":"f4c5b0399665885a7dd34f7cdbbc586f","LoadsDespiteHVCI":"FALSE"},{"Authentihash":{"MD5":"09e04d9a1ba63e4db9e4b55a00d5050d","SHA1":"61e1b497a5df0797527d6d465a8f315a82ad35eb","SHA256":"739c11fdb8673ab5b78f1a874daf5ba3faddb7910a6d4e0cc49abd8b8537333f"},"Company":"","Copyright":"","CreationTimestamp":"2009-08-03 03:03:16","Date":"","Description":"","ExportedFunctions":"","FileVersion":"","Filename":"","ImportedFunctions":["ZwMapViewOfSection","ObReferenceObjectByHandle","ZwOpenSection","RtlInitUnicodeString","IoDeleteDevice","ZwClose","IofCompleteRequest","ZwUnmapViewOfSection","IoIs32bitProcess","IoCreateSymbolicLink","IoCreateDevice","IoDeleteSymbolicLink","KeDelayExecutionThread","HalTranslateBusAddress"],"Imports":["ntoskrnl.exe","HAL.dll"],"InternalName":"","MD5":"a82c01606dc27d05d9d3bfb6bb807e32","MachineType":"AMD64","MagicHeader":"50 45 0 0","OriginalFilename":"","PDBPath":"","Product":"","ProductVersion":"","Publisher":"","RichPEHeaderHash":{"MD5":"deb9c1e252f598099d70d2b33a313da3","SHA1":"f0c2801e0091ed6f5e10ea7045e911aa90030290","SHA256":"914fb9761d50c3fa2ecf9fbd8af3735f9b8d6c4903e067c8af9546e79b6f22c7"},"SHA1":"1951ae94c6ee63fa801208771b5784f021c70c60","SHA256":"ce231637422709d927fb6fa0c4f2215b9c0e3ebbd951fb2fa97b8e64da479b96","Sections":{".text":{"Entropy":6.1423523697958835,"Virtual Size":"0xca6"},".rdata":{"Entropy":4.447540499473679,"Virtual Size":"0x178"},".data":{"Entropy":0,"Virtual Size":"0xc"},".pdata":{"Entropy":3.2844547164673656,"Virtual Size":"0x84"},"INIT":{"Entropy":4.455848230056508,"Virtual Size":"0x204"}},"Signature":"","Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer , G2","ValidFrom":"2007-06-15 00:00:00","ValidTo":"2012-06-14 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"3825d7faf861af9ef490e726b5d65ad5","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"d6c7684e9aaa508cf268335f83afe040","SHA1":"18066d20ad92409c567cdfde745279ff71c75226","SHA256":"a612fb22ce8be6dab75e47c98508f98496583e79c9c97b936a8caee9ea9f3fff","SHA384":"35c249d6ad0261a6229b2a727067ac6ba32a5d24b30b9249051f748c7735fbe2ec2ef26a702c50df1790fbe32a65aee7"}},{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA","ValidFrom":"2003-12-04 00:00:00","ValidTo":"2013-12-03 23:59:59","Signature":"4a6bf9ea58c2441c318979992b96bf82ac01d61c4ccdb08a586edf0829a35ec8ca9313e704520def47272f0038b0e4c9934e9ad4226215f73f37214f703180f18b3887b3e8e89700fecf55964e24d2a9274e7aaeb76141f32acee7c9d95eddbb2b853eb59db5d9e157ffbeb4c57ef5cf0c9ef097fe2bd33b521b1b3827f73f4a","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"47bf1995df8d524643f7db6d480d31a4","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"518d2ea8a21e879c942d504824ac211c","SHA1":"21ce87d827077e61abddf2beba69fde5432ea031","SHA256":"1ec3b4f02e03930a470020e0e48d24b84678bb558f46182888d870541f5e25c7","SHA384":"53e346bbde23779a5d116cc9d86fdd71c97b1f1b343439f8a11aa1d3c87af63864bb8488a5aeb2d0c26a6a1e0b15f03f"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009,2 CA","ValidFrom":"2009-05-21 00:00:00","ValidTo":"2019-05-20 23:59:59","Signature":"8b03c0dd94d841a26169b015a878c730c6903c7e42f724b6e4837317047f04109ca1e2fa812febc0ca44e772e050b6551020836e9692e49a516ab43731dca52deb8c00c71d4fe74d32ba85f84ebefa675565f06abe7aca64381a101078457631f3867a030f60c2b35d9df68b6676821b59e183e5bd49a53856e5de41770e580f","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"655226e1b22e18e1590f2985ac22e75c","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"650704c342850095f3288eaf791147d4","SHA1":"4cdc38c800761463749c3cbd94a12f32e49877bf","SHA256":"07b8f662558ec85b71b43a79c6e94698144f4ced2308af21e7ba1e5d461da214","SHA384":"2a271d052213438467d09d60eaa4010c8642fff3eb0070e0cf9969428713c8fdc066b90996d594dd3136f5bd0af5a22a"}},{"Subject":"C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority","ValidFrom":"2006-05-23 17:01:29","ValidTo":"2016-05-23 17:11:29","Signature":"01e446b33b457f7513877e5f43de468ecb8abdb64741bccccc7491d8ce395195a4a6b547c0efd2da7b8f5711f4328c7ccd3fee42da04214af7c843884a6f5cca14fc4bd19f4cbdd4556ecc02be0da6888f8609baa425bde8b0f0fa8b714e67b0cb82a8d78e55f737ebf03e88efe4e08afd1c6e2e61414875b4b02c1d28d8490fd715f02473253ccc880cde284c6554fe5eae8cea19ad2c51b29b3a47f53c80350117e24987d6544afb4bab07bcbf7d79cfbf35005cbb9ecffc82891b39a05197b6dec0b307ff449644c0342a195cabeef03bec294eb513c537857e75d5b4d60d066eb5d26c237167eaf1718eaf4e74aa0cf9ecbf4c58fa5e909b6d39cb86883f8b1ca81632d5fe6db9f1f8b3ead791f6364778c0272a15c768d6f4c5fc4f4ec8673f102d409ff11ec96148e7a703fc31730cf04688fe56da492995ef09daa3e5beef60ecd954a0599c28bd54ef66157f874c84dba60e95672e517b3439b641c28c846826dc240209e7818e0a972defeea7b998a60f818dc710b5e1ed982f486f53854964789bec5dac970b5526c3efba8dc8d1a52f5a7f936b611a339b18b8a26210de24ea76e12f43ebecdd7c12342489da2855aee5754e312b6763b6a8d7ab730a03cec5ea593fc7eb2a45aea8625b2f009939abb45f73c308ec80118f470e8f2a1343e191066255bbffba3da9a93d260faeca7d628b155589d694344dd665","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"610c120600000000001b","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"53c41bc1164e09e0cd1617a5bf913efd","SHA1":"93c03aac8951d494ecd5696b1c08658541b18727","SHA256":"40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b","SHA384":"f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"}},{"Subject":"C=TW, ST=Taiwan, L=Taipei / Peitou, O=ASUSTeK Computer Inc., OU=Digital ID Class 3 , Microsoft Software Validation v2, OU=Quality Testing Department, CN=ASUSTeK Computer Inc.","ValidFrom":"2009-08-03 00:00:00","ValidTo":"2012-08-03 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"12d5c9e2949d48abaccd3514f0fb22ad","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"a8e2727ca2cb8705c02aaef015feb372","SHA1":"94a0711ecebe96729e048ae1c7de9c4ba5c25ec4","SHA256":"dd670882ef38bfeecfb2865ad06f52e36b07f99fbf5937b2ede58178d2221961","SHA384":"508037c851d72d2bf8f35ba25436903a510d02d58f923b6d2c694a9a27f4a82b0b0953ee7b3c68078faafe3886a64aa4"}}],"Signer":[{"SerialNumber":"12d5c9e2949d48abaccd3514f0fb22ad","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009,2 CA","Version":1}]}],"Imphash":"12befc0a82dcb0585359d335ed47af19","LoadsDespiteHVCI":"FALSE"},{"Authentihash":{"MD5":"7bb2dcc29ba50372d08fea800c190f09","SHA1":"e5c090903a20744ba3583a8ea684d035e8cecc34","SHA256":"9dcfd796e244d0687cc35eac9538f209f76c6df12de166f19dbc7d2c47fb16b3"},"Company":"","Copyright":"","CreationTimestamp":"2012-08-22 05:54:47","Date":"","Description":"","ExportedFunctions":"","FileVersion":"","Filename":"","ImportedFunctions":["ObReferenceObjectByHandle","ZwOpenSection","RtlInitUnicodeString","ZwClose","IoDeleteDevice","IoDeleteSymbolicLink","ZwMapViewOfSection","MmGetPhysicalAddress","MmAllocateContiguousMemory","ZwUnmapViewOfSection","IoIs32bitProcess","IoCreateSymbolicLink","IoCreateDevice","IofCompleteRequest","KeDelayExecutionThread","HalTranslateBusAddress"],"Imports":["ntoskrnl.exe","HAL.dll"],"InternalName":"","MD5":"94cdf2cf363be5a8749670bea4db65cd","MachineType":"AMD64","MagicHeader":"50 45 0 0","OriginalFilename":"","PDBPath":"","Product":"","ProductVersion":"","Publisher":"","RichPEHeaderHash":{"MD5":"fdbc1ff6c9321efd70ec149c3c8ccac6","SHA1":"d77615c985da37ca9099b27c1be4785c6cb7ccf6","SHA256":"4dbce3e8c08dd544b78f87323f6d794fb990bb10cb6d239fe367da87a803f23c"},"SHA1":"96523f72e4283f9816d3da8f2270690dd1dd263e","SHA256":"20e52e0d7f579dc6884cc6e80266fddceda69ea5fdd0b095c0874b0d877e48a2","Sections":{".text":{"Entropy":6.1181571322303645,"Virtual Size":"0xd66"},".rdata":{"Entropy":4.313686441268313,"Virtual Size":"0x188"},".data":{"Entropy":0,"Virtual Size":"0xc"},".pdata":{"Entropy":3.3006321366120503,"Virtual Size":"0x84"},"INIT":{"Entropy":4.548019208277369,"Virtual Size":"0x24a"}},"Signature":"","Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"??=TW, ??=Private Organization, serialNumber=23638777, C=TW, L=Taipei City, O=ASUSTeK Computer Inc., CN=ASUSTeK Computer Inc.","ValidFrom":"2019-01-08 00:00:00","ValidTo":"2022-01-11 12:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":false,"SerialNumber":"073501671dc61bf273a6daec906e40a5","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"40e2b5ee26c4990c33a5e669c600b8a3","SHA1":"30796f70d4552dd84ee58219d9f61df8c22bec18","SHA256":"3062c7ba0949c3e882ca9cc23a60b9e4e742c7e2e1d4c3a63b893019189dba13","SHA384":"e215473c05b611248331b3b259cc483a94c2d830fa63a5b6e08d1e52b06d360ebd30519a73f6ffcf79be880975e94738"}},{"Subject":"C=US, O=DigiCert, CN=DigiCert Timestamp Responder","ValidFrom":"2014-10-22 00:00:00","ValidTo":"2024-10-22 00:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"03019a023aff58b16bd6d5eae617f066","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"a752afee44f017e8d74e3f3eb7914ae3","SHA1":"8eca80a6b80e9c69dcef7745748524afb8019e2d","SHA256":"82560fa7efec30b5ff82af643e6f3bf3d46868bbd5e7d76f93db185e9e3553a1","SHA384":"e8b11408c88f877ade4ca51114a175fb5dfd2d18d2a66be547c1c9e080fa8f592c7870e30dfab1c04d234993dd0907f3"}},{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID CA,1","ValidFrom":"2006-11-10 00:00:00","ValidTo":"2021-11-10 00:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"06fdf9039603adea000aeb3f27bbba1b","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"4e5ad189638cf52ba9cd881d4d44668c","SHA1":"cdc115e98d798b33904c820d63cc1e1afc19251d","SHA256":"37560fb9d548ab62cc3ed4669a4ab74828b5a108e67e829937ffb2d10a5f78dd","SHA384":"173bfb77183785621ef15f43ea807338cea6a02e8183317d9ef050c7237adda3fa2a5bdcd5a4c96da9f2c55900675b9f"}}],"Signer":[{"SerialNumber":"073501671dc61bf273a6daec906e40a5","Issuer":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert EV Code Signing CA (SHA2)","Version":1}]}],"Imphash":"d7de998e454f947f62d4a6b66490563b","LoadsDespiteHVCI":"FALSE"},{"Authentihash":{"MD5":"3824dd56459d29ffc5d4bb51d7123778","SHA1":"5a7dd0da0aee0bdedc14c1b7831b9ce9178a0346","SHA256":"92edd48dfac025d4069eb6491b9730d9d131b77cceaa480af9b3c32bc8c5e3a9"},"Company":"","Copyright":"","CreationTimestamp":"2012-08-22 05:54:43","Date":"","Description":"","ExportedFunctions":"","FileVersion":"","Filename":"","ImportedFunctions":["ZwClose","ZwMapViewOfSection","ObReferenceObjectByHandle","ZwOpenSection","RtlInitUnicodeString","IoDeleteDevice","IoDeleteSymbolicLink","WRITE_REGISTER_ULONG","MmAllocateContiguousMemory","IofCompleteRequest","ZwUnmapViewOfSection","IoCreateSymbolicLink","IoCreateDevice","KeTickCount","WRITE_REGISTER_USHORT","WRITE_REGISTER_UCHAR","READ_REGISTER_ULONG","READ_REGISTER_USHORT","READ_REGISTER_UCHAR","KeQuerySystemTime","MmGetPhysicalAddress","KeDelayExecutionThread","WRITE_PORT_USHORT","WRITE_PORT_UCHAR","HalTranslateBusAddress","READ_PORT_ULONG","READ_PORT_USHORT","READ_PORT_UCHAR","WRITE_PORT_ULONG"],"Imports":["ntoskrnl.exe","HAL.dll"],"InternalName":"","MD5":"272446de15c63095940a3dad0b426f21","MachineType":"I386","MagicHeader":"50 45 0 0","OriginalFilename":"","PDBPath":"","Product":"","ProductVersion":"","Publisher":"","RichPEHeaderHash":{"MD5":"432a6583ab7bafb3773874586c68db85","SHA1":"bb0833dab5efdcbfcad58fe4e9a35fc31de53442","SHA256":"1dffaf610cdef8285f0794d34bc503106b06dbe14d99da734436265b9461f6c9"},"SHA1":"7eb34cc1fcffb4fdb5cb7e97184dd64a65cb9371","SHA256":"52a90fd1546c068b92add52c29fbb8a87d472a57e609146bbcb34862f9dcec15","Sections":{".text":{"Entropy":6.23937613305102,"Virtual Size":"0x8ad"},".rdata":{"Entropy":4.36827815837928,"Virtual Size":"0xe7"},".data":{"Entropy":1.311278124459133,"Virtual Size":"0x10"},"INIT":{"Entropy":5.344545644500133,"Virtual Size":"0x370"},".reloc":{"Entropy":3.6862767817925604,"Virtual Size":"0xc6"}},"Signature":"","Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=MOPR, CN=Microsoft Windows Hardware Compatibility Publisher","ValidFrom":"2014-12-19 19:27:34","ValidTo":"2016-03-19 19:27:34","Signature":"9c8895d0b78e2fb9a8fff5d730270c52de3a7ead8c7e649a21d81298c0a56bed1fb109217ae8b55a5c3a4334ee73203e5d44c03ef843ef2b93621369e7079513d72985c1143d04b5f342dc3a92f554bd1a8a58943c177dda5dd7c3e5280891583cd251dac090051e36faa455e751498657c06ff9f886e6d431b498fce1ea596e21d8bc45c8ad97e2376158c2d18a1f1daaa694fd736ab959c8980358f5f83ccf340fc6594ddeb60587c567e7167ea1129a81f536222046cdde2706e30d6f2fb3b9984bace9f40afe2473a4b4ee4e1fb799259ba41101e08b546d55b55ecd52f10296d5ad0dadeba22cf7c250d5f029457c15f95dee91af4ee7ee0ed6f67ff4fc","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":false,"SerialNumber":"330000001dc31a761624754f8000000000001d","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"df2a0bc442ef65cd9973329be21c642f","SHA1":"d13bcda797c6b986a1a45b7ce9184e87ba0f994c","SHA256":"41718d172e45eaa02ec88494587672cf50f96a310aebc5b49a66c0adae99edc5","SHA384":"db7864a35b468726f3d431e07825ae860ddb0d6250b3bd8906f1b0ff98ce7b4c563c73288b01ec8f1ec5a2a06f31bc40"}},{"Subject":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Windows Third Party Component CA 2012","ValidFrom":"2012-04-18 23:48:38","ValidTo":"2027-04-18 23:58:38","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":true,"SerialNumber":"610baac1000000000009","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"a569061297e8e824767dbc3184a69bea","SHA1":"adbb26a587a8f44b4fccaecb306f980d1c55a150","SHA256":"cec1afd0e310c55c1dcc601ab8e172917706aa32fb5eaf826813547fdf02dd46","SHA384":"e947cac936803f5683196e4ff1b259096073395d0b908522ddce90d57597c9f7b57f7ddcdbe021ba863d843c340da8ba"}}],"Signer":[{"SerialNumber":"330000001dc31a761624754f8000000000001d","Issuer":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Windows Third Party Component CA 2012","Version":1}]}],"Imphash":"2699b7ae36fcadd71425ebafd231d0d1","LoadsDespiteHVCI":"FALSE"},{"Authentihash":{"MD5":"7bb2dcc29ba50372d08fea800c190f09","SHA1":"e5c090903a20744ba3583a8ea684d035e8cecc34","SHA256":"9dcfd796e244d0687cc35eac9538f209f76c6df12de166f19dbc7d2c47fb16b3"},"Company":"","Copyright":"","CreationTimestamp":"2012-08-22 05:54:47","Date":"","Description":"","ExportedFunctions":"","FileVersion":"","Filename":"","ImportedFunctions":["ObReferenceObjectByHandle","ZwOpenSection","RtlInitUnicodeString","ZwClose","IoDeleteDevice","IoDeleteSymbolicLink","ZwMapViewOfSection","MmGetPhysicalAddress","MmAllocateContiguousMemory","ZwUnmapViewOfSection","IoIs32bitProcess","IoCreateSymbolicLink","IoCreateDevice","IofCompleteRequest","KeDelayExecutionThread","HalTranslateBusAddress"],"Imports":["ntoskrnl.exe","HAL.dll"],"InternalName":"","MD5":"f701ddcc7c51919413ddadd351ad2fef","MachineType":"AMD64","MagicHeader":"50 45 0 0","OriginalFilename":"","PDBPath":"","Product":"","ProductVersion":"","Publisher":"","RichPEHeaderHash":{"MD5":"fdbc1ff6c9321efd70ec149c3c8ccac6","SHA1":"d77615c985da37ca9099b27c1be4785c6cb7ccf6","SHA256":"4dbce3e8c08dd544b78f87323f6d794fb990bb10cb6d239fe367da87a803f23c"},"SHA1":"ca47bab2bea62ff58caea4741bcfbd7f3abb6c5f","SHA256":"2d36642135166bbb296624dca878925963c7da785e42e940f02d01beb7c477d5","Sections":{".text":{"Entropy":6.1181571322303645,"Virtual Size":"0xd66"},".rdata":{"Entropy":4.313686441268313,"Virtual Size":"0x188"},".data":{"Entropy":0,"Virtual Size":"0xc"},".pdata":{"Entropy":3.3006321366120503,"Virtual Size":"0x84"},"INIT":{"Entropy":4.548019208277369,"Virtual Size":"0x24a"}},"Signature":"","Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=MOPR, CN=Microsoft Windows Hardware Compatibility Publisher","ValidFrom":"2014-12-19 19:27:34","ValidTo":"2016-03-19 19:27:34","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":false,"SerialNumber":"330000001dc31a761624754f8000000000001d","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"df2a0bc442ef65cd9973329be21c642f","SHA1":"d13bcda797c6b986a1a45b7ce9184e87ba0f994c","SHA256":"41718d172e45eaa02ec88494587672cf50f96a310aebc5b49a66c0adae99edc5","SHA384":"db7864a35b468726f3d431e07825ae860ddb0d6250b3bd8906f1b0ff98ce7b4c563c73288b01ec8f1ec5a2a06f31bc40"}},{"Subject":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Windows Third Party Component CA 2012","ValidFrom":"2012-04-18 23:48:38","ValidTo":"2027-04-18 23:58:38","Signature":"5a8a67daccd5fd0d264177bf0a4678b4b3de12692b7723c2652f015fd203f461ba509d2e8c3972f36c3e6ab11e766decb7f382dcccbbc56970287366173f54ebee011648c446d91b80ae813a8d0f796d68b09eea2d3f39d3ca387ebd5e7c086e19dcc6c2f438336861e2524783e1000156d2bacb878205310a418b4ee77f5f5fed5fd3392d45eba213bffd1ec298417161165fc80a70257c59693124e471e70abb0417f79f721ec9d2bb1abe3d02fe090cb243b4591a99539396215fe0d6b72601429536ac27fdbef48577683d18bdf4be98882211865216f345ec0397107087a37043713cdbc98603170cf5735bc67de15c64edd7c548d7ed32e2d1aad3cfa7f6574e61f977eb67f288b3de00da038fd08a34373e1dd862b8d2b1f3e12f8b723b81967c6ffcec667672601b24f2a0896d5b6d002eef28dd868705c2b4b9e5be64c22af24a155c98e2c42785ff52e3627e0fb2020bd766c70ab2d33d200414503259830a7d9bed5a38120152ba2f5e20728e4af1fde771028c3be107bec973f4dd47d8b4efb4a4b330b9893e76cab90098567eabea8ab8a5d038ab6977130b142fe9aa411ff7babd3a2b348aee0aab63e663f788248e200d2b3b9de3c24952ac9f1f0e393b5dd46e506ae67d523aaa7c3315290d265e0158a74ea93d7a846f743f609fe4324f3600af6d71d33ea646655f8174f1fec171da4ca0415a82ddf11f","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":true,"SerialNumber":"610baac1000000000009","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"a569061297e8e824767dbc3184a69bea","SHA1":"adbb26a587a8f44b4fccaecb306f980d1c55a150","SHA256":"cec1afd0e310c55c1dcc601ab8e172917706aa32fb5eaf826813547fdf02dd46","SHA384":"e947cac936803f5683196e4ff1b259096073395d0b908522ddce90d57597c9f7b57f7ddcdbe021ba863d843c340da8ba"}}],"Signer":[{"SerialNumber":"330000001dc31a761624754f8000000000001d","Issuer":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Windows Third Party Component CA 2012","Version":1}]}],"Imphash":"d7de998e454f947f62d4a6b66490563b","LoadsDespiteHVCI":"FALSE"},{"Authentihash":{"MD5":"d593aec08f96fe410f7a6b53e49551a0","SHA1":"2ea631bfe3fd765e3a03b3165790faf8fdd8286b","SHA256":"906d8412b357379db9512e3f584fcda1f788acc1337e5b4d4eff5e6fa59324a6"},"Company":"","Copyright":"","CreationTimestamp":"2007-12-17 04:11:49","Date":"","Description":"","ExportedFunctions":"","FileVersion":"","Filename":"AsIO64.sys","ImportedFunctions":["ZwClose","ZwMapViewOfSection","ObReferenceObjectByHandle","ZwOpenSection","RtlInitUnicodeString","IoDeleteDevice","KeDelayExecutionThread","IofCompleteRequest","ZwUnmapViewOfSection","IoIs32bitProcess","IoCreateSymbolicLink","IoCreateDevice","IoDeleteSymbolicLink","DbgPrint","HalTranslateBusAddress"],"Imports":["ntoskrnl.exe","HAL.dll"],"InternalName":"","MD5":"8065a7659562005127673ac52898675f","MachineType":"AMD64","MagicHeader":"50 45 0 0","OriginalFilename":"","Product":"","ProductVersion":"","Publisher":"ASUSTeK Computer Inc.","RichPEHeaderHash":{"MD5":"59080883b71fd56bbf10ec0ae4b6bdd4","SHA1":"503a36a225568553cc9b05f63b3506c6ff21e12e","SHA256":"bc812d4ddc3ecfbf38c4d0d185e368fc58bac6e07f722db032bf6303daa7c946"},"SHA1":"fcde5275ee1913509927ce5f0f85e6681064c9d2","SHA256":"b48a309ee0960da3caaaaf1e794e8c409993aeb3a2b64809f36b97aac8a1e62a","Sections":{".text":{"Entropy":6.269179908398606,"Virtual Size":"0x106c"},".rdata":{"Entropy":4.398778967999751,"Virtual Size":"0x19c"},".data":{"Entropy":0,"Virtual Size":"0xc"},".pdata":{"Entropy":3.2766921576186183,"Virtual Size":"0x84"},"INIT":{"Entropy":4.419041794725205,"Virtual Size":"0x218"}},"Signature":["ASUSTeK Computer Inc.","VeriSign Class 3 Code Signing 2004 CA","VeriSign Class 3 Public Primary CA"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer , G2","ValidFrom":"2007-06-15 00:00:00","ValidTo":"2012-06-14 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"3825d7faf861af9ef490e726b5d65ad5","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"d6c7684e9aaa508cf268335f83afe040","SHA1":"18066d20ad92409c567cdfde745279ff71c75226","SHA256":"a612fb22ce8be6dab75e47c98508f98496583e79c9c97b936a8caee9ea9f3fff","SHA384":"35c249d6ad0261a6229b2a727067ac6ba32a5d24b30b9249051f748c7735fbe2ec2ef26a702c50df1790fbe32a65aee7"}},{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA","ValidFrom":"2003-12-04 00:00:00","ValidTo":"2013-12-03 23:59:59","Signature":"4a6bf9ea58c2441c318979992b96bf82ac01d61c4ccdb08a586edf0829a35ec8ca9313e704520def47272f0038b0e4c9934e9ad4226215f73f37214f703180f18b3887b3e8e89700fecf55964e24d2a9274e7aaeb76141f32acee7c9d95eddbb2b853eb59db5d9e157ffbeb4c57ef5cf0c9ef097fe2bd33b521b1b3827f73f4a","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"47bf1995df8d524643f7db6d480d31a4","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"518d2ea8a21e879c942d504824ac211c","SHA1":"21ce87d827077e61abddf2beba69fde5432ea031","SHA256":"1ec3b4f02e03930a470020e0e48d24b84678bb558f46182888d870541f5e25c7","SHA384":"53e346bbde23779a5d116cc9d86fdd71c97b1f1b343439f8a11aa1d3c87af63864bb8488a5aeb2d0c26a6a1e0b15f03f"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)04, CN=VeriSign Class 3 Code Signing 2004 CA","ValidFrom":"2004-07-16 00:00:00","ValidTo":"2014-07-15 23:59:59","Signature":"ae3a17b84a7b55fa6455ec40a4ed494190999c89bcaf2e1dca7823f91c190f7feb68bc32d98838dedc3fd389b43fb18296f1a45abaed2e26d3de7c016e000a00a4069211480940f91c1879672324e0bbd5e150ae1bf50edde02e81cd80a36c524f9175558aba22f2d2ea4175882f63557d1e545a9559cad93481c05f5ef67ab5","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"4191a15a3978dfcf496566381d4c75c2","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"41011f8d0e7c7a6408334ca387914c61","SHA1":"c7fc1727f5b75a6421a1f95c73bbdb23580c48e5","SHA256":"88dd3952638ee82738c03168e6fd863fe4eab1059ee5e2926ad8cb587c255dc0","SHA384":"a00aa5ed457c41e37967882644d63366bae014f03a986576d8514164d7027acf7d0b5e03d764db2558f60db148954459"}},{"Subject":"C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority","ValidFrom":"2006-05-23 17:01:29","ValidTo":"2016-05-23 17:11:29","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"610c120600000000001b","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"53c41bc1164e09e0cd1617a5bf913efd","SHA1":"93c03aac8951d494ecd5696b1c08658541b18727","SHA256":"40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b","SHA384":"f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"}},{"Subject":"C=TW, ST=Taiwan, L=Taipei / Peitou, O=ASUSTeK Computer Inc., OU=Digital ID Class 3 , Microsoft Software Validation v2, OU=Quality Testing Department, CN=ASUSTeK Computer Inc.","ValidFrom":"2007-07-03 00:00:00","ValidTo":"2008-07-26 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"23eab3ac30c7016a299c8d31d99f3ae8","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"54f73eaca10fe12ff2e14194e2f019b8","SHA1":"471cb77202e7d4941a5bff8ba813f5ed221dc32e","SHA256":"9dba2d4765226ca91fb7104e0cbd01308c4e8ed9727ea661eeaa473d7825ee35","SHA384":"272d877ad02e5487a0864e4d876a9e06fea5ead9cd149e7a48c4f111cfa8dc2f05f1042f2822b42360896da334e6390d"}}],"Signer":[{"SerialNumber":"23eab3ac30c7016a299c8d31d99f3ae8","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)04, CN=VeriSign Class 3 Code Signing 2004 CA","Version":1}]}],"Imphash":"5662b51943d85b7ca47a99cac81af985","LoadsDespiteHVCI":"FALSE"},{"Filename":"AsIO3.sys","MD5":"f8ccfbd55e9fcf655e5ac0cbe62cf5b0","SHA1":"e495405d5e3b6b3fa8275a0aecd9339a869df9e7","SHA256":"69dc4782060178762305b17c353efc1508a2a6edd9baf124286f380f51f5daed","LoadsDespiteHVCI":"FALSE","Imphash":"f0cd7cce1d03cf9df1b8266701f92b46","Authentihash":{"MD5":"cf99ab62c8f196f5ba745162adfeade8","SHA1":"5acb42939e09d6b34911be49cfcd09d6916e5650","SHA256":"24af16a81cc820f3c44efc1733754205faffd637899b706f423500ded5f2bfc7"},"RichPEHeaderHash":{"MD5":"18ee6e5509c325dad92073b8217f7c1f","SHA1":"8d0b6e70aff53618ff61ce7b9acacc987a24f5e4","SHA256":"d73efad1c614b703fcd0ca36317d414d29b209ddc2fe53dac8f937110032f2b9"},"Sections":{".text":{"Entropy":6.325749654996351,"Virtual Size":"0x4733"},".rdata":{"Entropy":5.492734334014425,"Virtual Size":"0x81c"},".data":{"Entropy":0.9406144310784021,"Virtual Size":"0x290"},".pdata":{"Entropy":3.911874909451963,"Virtual Size":"0x168"},"INIT":{"Entropy":5.257848104368007,"Virtual Size":"0x42c"},".reloc":{"Entropy":2.9464393446710155,"Virtual Size":"0x14"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2020-10-13 00:21:35","Description":"","Company":"","InternalName":"","OriginalFilename":"","FileVersion":"","Product":"","ProductVersion":"","Copyright":"","MachineType":"AMD64","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["DbgPrint","RtlGetVersion","KeDelayExecutionThread","ExAllocatePoolWithTag","ExFreePoolWithTag","MmGetSystemRoutineAddress","MmAllocateContiguousMemory","IofCompleteRequest","IoCreateDevice","IoCreateSymbolicLink","IoDeleteDevice","IoDeleteSymbolicLink","RtlCopyUnicodeString","ObReferenceObjectByHandle","ObfDereferenceObject","ZwClose","ZwOpenSection","ZwMapViewOfSection","ZwUnmapViewOfSection","MmGetPhysicalAddress","ZwOpenFile","ZwQueryInformationFile","ZwReadFile","__C_specific_handler","KeBugCheckEx","IoIs32bitProcess","RtlInitUnicodeString","HalTranslateBusAddress"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA","ValidFrom":"2011-04-15 19:45:33","ValidTo":"2021-04-15 19:55:33","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"61204db4000000000027","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"8e3ffc222fbcebdbb8b23115ab259be7","SHA1":"ee20bff28ffe13be731c294c90d6ded5aae0ec0e","SHA256":"59826b69bc8c28118c96323b627da59aaca0b142cc5d8bad25a8fcfd399aa821","SHA384":"f2dab7e56a33298654924501499487f6ba72c7d9477476a186e1ed7a9be031fade0e35ac09eff5e56bbbab95ae5374e7"}},{"Subject":"JURISDICTION_OF_INCORPORATION_C=TW, BUSINESS_CATEGORY=Private Organization, serialNumber=23638777, C=TW, L=Taipei City, O=ASUSTeK Computer Inc., CN=ASUSTeK Computer Inc.","ValidFrom":"2019-04-01 00:00:00","ValidTo":"2022-01-11 12:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":false,"SerialNumber":"0c64962e4467edcc1579646b7337ec8c","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"69796942ecdfadbd806bdea1460a5115","SHA1":"0ce9329828324db04bd0a7b101b4fbfedb3be8b2","SHA256":"efd9b83b154c3e805e1bf7fdfd6a7f7bfdcf2ff3e191d1c33bdc427b6c82039b","SHA384":"e27d21dc30c40e7b675120062e69c438e9f448ceed7b0434dedd129848c6a8edf05ec07ac25f5ec300be0da46a4c6eab"}},{"Subject":"C=US, O=DigiCert, CN=DigiCert Timestamp Responder","ValidFrom":"2014-10-22 00:00:00","ValidTo":"2024-10-22 00:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"03019a023aff58b16bd6d5eae617f066","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"a752afee44f017e8d74e3f3eb7914ae3","SHA1":"8eca80a6b80e9c69dcef7745748524afb8019e2d","SHA256":"82560fa7efec30b5ff82af643e6f3bf3d46868bbd5e7d76f93db185e9e3553a1","SHA384":"e8b11408c88f877ade4ca51114a175fb5dfd2d18d2a66be547c1c9e080fa8f592c7870e30dfab1c04d234993dd0907f3"}},{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert EV Code Signing CA (SHA2)","ValidFrom":"2012-04-18 12:00:00","ValidTo":"2027-04-18 12:00:00","Signature":"19334a0c813337dbad36c9e4c93abbb51b2e7aa2e2f44342179ebf4ea14de1b1dbe981dd9f01f2e488d5e9fe09fd21c1ec5d80d2f0d6c143c2fe772bdbf9d79133ce6cd5b2193be62ed6c9934f88408ecde1f57ef10fc6595672e8eb6a41bd1cd546d57c49ca663815c1bfe091707787dcc98d31c90c29a233ed8de287cd898d3f1bffd5e01a978b7cda6dfba8c6b23a666b7b01b3cdd8a634ec1201ab9558a5c45357a860e6e70212a0b92364a24dbb7c81256421becfee42184397bba53706af4dff26a54d614bec4641b865ceb8799e08960b818c8a3b8fc7998ca32a6e986d5e61c696b78ab9612d93b8eb0e0443d7f5fea6f062d4996aa5c1c1f0649480","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":true,"SerialNumber":"03f1b4e15f3a82f1149678b3d7d8475c","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"83f5de89f641d0fbf60248e10a7b9534","SHA1":"382a73a059a08698d6eb98c87e1b36fc750933a4","SHA256":"eec58131dc11cd7f512501b15fdbc6074c603b68ca91f7162d5a042054edb0cf","SHA384":"4a25018683cabfb8ec2cad136334f37f33c89aa8540326322991d997c8adfb7faf06ab602ebd46630fe75fe3d2edc6b1"}},{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID CA,1","ValidFrom":"2006-11-10 00:00:00","ValidTo":"2021-11-10 00:00:00","Signature":"46503ec9b72824a7381db65b29af52cf52e93147ab565c7bd50d0b41b3efec751f7438f2b25c61a29c95c350e482b923d1ba3a8672ad3878ac755d1717347247859456d1ebbb368477cc24a5f3041955a9e7e3e7ab62cdfb8b2d90c2c0d2b594bd5e4fb105d20e3d1aa9145ba6863162a8a833e49b39a7c4f5ce1d7876942573e42aabcf9c764bed5fc24b16e44b704c00891efcc579bc4c1257fe5fe11ebc025da8fefb07384f0dc65d91b90f6745cdd683ede7920d8db1698c4ffb59e0230fd2aaae007cee9c420ecf91d727b716ee0fc3bd7c0aa0ee2c08558522b8eb181a4dfc2a21ad49318347957771dcb11b4b4b1c109c7714c19d4f2f5a9508291026","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"06fdf9039603adea000aeb3f27bbba1b","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"4e5ad189638cf52ba9cd881d4d44668c","SHA1":"cdc115e98d798b33904c820d63cc1e1afc19251d","SHA256":"37560fb9d548ab62cc3ed4669a4ab74828b5a108e67e829937ffb2d10a5f78dd","SHA384":"173bfb77183785621ef15f43ea807338cea6a02e8183317d9ef050c7237adda3fa2a5bdcd5a4c96da9f2c55900675b9f"}}],"Signer":[{"SerialNumber":"0c64962e4467edcc1579646b7337ec8c","Issuer":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert EV Code Signing CA (SHA2)","Version":1}]}]},{"Filename":"AsIO3.sys","MD5":"336350017860735c40e8c1d10c70d70d","SHA1":"fb10e2451c6b4baee6e9f0a94dccf8eb32e000c9","SHA256":"383df3b803ea69e16de314c82c2099283e746a6865cc4488ac927510ab5ada9c","LoadsDespiteHVCI":"FALSE","Imphash":"9df353ef17794136c2e3d4c454c105c6","Authentihash":{"MD5":"600e5dfffea543a1d986cad5df29560b","SHA1":"8f518b3501faf58d42875b5a00eb1a62fa6ba0e9","SHA256":"ad0370586555ffc34b633aea8b5e4f42e85a4ff6051982362ff371e3972b23ef"},"RichPEHeaderHash":{"MD5":"d558982731f9423ca5f394a4993db6af","SHA1":"5b8fa88b7bcbee1cb5ef1de4a5cbe1c8e1f61c05","SHA256":"8d4e206b843967c07e5ae6562089e9e47c12e69f58af173a67713864b26555f8"},"Sections":{".text":{"Entropy":6.436924951011687,"Virtual Size":"0x68fa"},".rdata":{"Entropy":4.319676645078758,"Virtual Size":"0x8b4"},".data":{"Entropy":3.5806399323654072,"Virtual Size":"0x430"},".pdata":{"Entropy":4.079462748133116,"Virtual Size":"0x228"},"PAGE":{"Entropy":5.667322295964277,"Virtual Size":"0x168"},"INIT":{"Entropy":5.26521055468094,"Virtual Size":"0x68e"},".rsrc":{"Entropy":3.2525333369699623,"Virtual Size":"0x300"},".reloc":{"Entropy":2.7458389387454223,"Virtual Size":"0x18"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2024-06-12 01:31:25","Description":"AsIO3 Driver","Company":"Asustek Computer Inc.","InternalName":"AsIO3","OriginalFilename":"","FileVersion":"1.02.28","Product":"AsIO3","ProductVersion":"1.02.28","Copyright":"Copyright (C) 2022 Asustek Computer Inc.","MachineType":"AMD64","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["DbgPrint","RtlGetVersion","KeSetEvent","KeDelayExecutionThread","KeWaitForSingleObject","ExAllocatePoolWithTag","ExFreePoolWithTag","MmGetSystemRoutineAddress","MmMapIoSpace","MmUnmapIoSpace","MmAllocateContiguousMemory","MmFreeContiguousMemory","IofCompleteRequest","IoCreateDevice","IoCreateSymbolicLink","IoCreateSynchronizationEvent","IoDeleteDevice","IoDeleteSymbolicLink","IoIs32bitProcess","ObReferenceObjectByHandle","ObfDereferenceObject","RtlFreeUnicodeString","ZwOpenSection","ZwMapViewOfSection","ZwUnmapViewOfSection","ZwOpenKey","ZwQueryValueKey","ZwOpenSymbolicLinkObject","ZwQuerySymbolicLinkObject","MmGetPhysicalAddress","PsSetCreateProcessNotifyRoutineEx","PsGetProcessImageFileName","__C_specific_handler","strcpy_s","ZwOpenFile","ZwQueryInformationFile","ZwReadFile","PsGetVersion","ExAllocatePoolWithQuotaTag","ZwQuerySystemInformation","KeBugCheckEx","RtlCopyUnicodeString","RtlInitUnicodeString","ZwClose","_stricmp","HalSetBusDataByOffset","HalGetBusDataByOffset","HalTranslateBusAddress"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Trusted Root G4","ValidFrom":"2022-01-13 00:00:00","ValidTo":"2031-11-09 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":true,"SerialNumber":"0fd1bbca796bd7f8dd4c82e10a9a9631","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"b7b45b8ea989e3bb49fef821df6b4153","SHA1":"dfe27c66bf0e9730199a3c9b2bbc1c02d2d94914","SHA256":"e66e90fa03738d0f0353cd15ea61d4a02d406c32e238e192be9d866c343d7152","SHA384":"7fb01804ee870a928e56cad8f50fbf3a4689d92c69b891000f845290a05da7be8a60bfb57032871a7eccf2656b9adbea"}},{"Subject":"C=US, O=DigiCert, Inc., CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1","ValidFrom":"2021-04-29 00:00:00","ValidTo":"2036-04-28 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.12","IsCertificateAuthority":true,"SerialNumber":"08ad40b260d29c4c9f5ecda9bd93aed9","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"5d8003a64dfa5a4d88365da1566038cb","SHA1":"79465b56bc7ad55a37bdf633943da8bfc84db228","SHA256":"84bdc82e2f2a7f7aaa782667dac556ffcb2b33240c1f9c0a00a3264526a98332","SHA384":"65b1d4076a89ae273f57e6eeedecb3eae129b4168f76fa7671914cdf461d542255c59d9b85b916ae0ca6fc0fcf7a8e64"}},{"Subject":"BUSINESS_CATEGORY=Private Organization, JURISDICTION_OF_INCORPORATION_C=TW, serialNumber=23638777, C=TW, ST=Taipei City, L=Beitou District, O=ASUSTeK COMPUTER INC., CN=ASUSTeK COMPUTER INC.","ValidFrom":"2021-10-22 00:00:00","ValidTo":"2024-10-22 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":false,"SerialNumber":"0bbe02c8838fbf02ab56edabb1e34c19","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"0357e292e0e92b06c92b21cacfcfa451","SHA1":"f52795bc8de5d803f09e20dd216d7df861f4cb34","SHA256":"b33b80e64cdfb28fb9afb17259be19ffe1edf8aae62fcfbfe8ff301f786c500d","SHA384":"5fbe918c3fa1034d5671ae38b20773df18b8f9dd48e60f90c5c98708e73d6ca0c6dec4e2bcb0de22ba3efb59479db152"}}],"Signer":[{"SerialNumber":"0bbe02c8838fbf02ab56edabb1e34c19","Issuer":"C=US, O=DigiCert, Inc., CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1","Version":1}]}]},{"Filename":"AsIO3.sys","MD5":"6a10758eca7544ed9c23fc3027fdd147","SHA1":"9b0f47e15bbeae5db5b777ff17490e3ad3077b4b","SHA256":"cc442919294d81400674bb9e1b68ce8f9e5aafed7f45d548862ce167d487d59f","LoadsDespiteHVCI":"FALSE","Imphash":"3c673848e3f6709859633dbc1e94e692","Authentihash":{"MD5":"549a20328bb9ccc83242548b79b1802f","SHA1":"667e808d66a9caf9d4d57688a2f5eed85ea1dc3b","SHA256":"0cab01269e7f3af351add0ac19ca9cc781da658cbf078499ccc3e699f8eac5dd"},"RichPEHeaderHash":{"MD5":"df82740f2a01f3ec5758d5aa38713b10","SHA1":"70d39a9d0e9af6be9a40991a05e9ca57f3017757","SHA256":"6a4c32141d1dc11114f8e55df8de90a0a97061aa01c248a9dbef26df09e294bb"},"Sections":{".text":{"Entropy":6.4329938090532695,"Virtual Size":"0x6b8a"},".rdata":{"Entropy":4.340345836438529,"Virtual Size":"0x8cc"},".data":{"Entropy":3.1401445037050704,"Virtual Size":"0x3f0"},".pdata":{"Entropy":4.138854178443389,"Virtual Size":"0x234"},"PAGE":{"Entropy":5.690436584382233,"Virtual Size":"0x168"},"INIT":{"Entropy":5.2464886620008,"Virtual Size":"0x634"},".rsrc":{"Entropy":3.2473250036366292,"Virtual Size":"0x300"},".reloc":{"Entropy":2.886842188131012,"Virtual Size":"0x18"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2023-06-01 02:50:04","Description":"AsIO3 Driver","Company":"Asustek Computer Inc.","InternalName":"AsIO3","OriginalFilename":"","FileVersion":"1.02.12","Product":"AsIO3","ProductVersion":"1.02.12","Copyright":"Copyright (C) 2022 Asustek Computer Inc.","MachineType":"AMD64","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["DbgPrint","RtlGetVersion","KeSetEvent","KeDelayExecutionThread","KeWaitForSingleObject","ExAllocatePoolWithTag","ExFreePoolWithTag","MmGetSystemRoutineAddress","MmMapIoSpace","MmUnmapIoSpace","MmAllocateContiguousMemory","MmFreeContiguousMemory","IofCompleteRequest","IoCreateDevice","IoCreateSymbolicLink","IoCreateSynchronizationEvent","IoDeleteDevice","IoDeleteSymbolicLink","IoIs32bitProcess","ObReferenceObjectByHandle","RtlAppendUnicodeToString","ZwClose","ZwOpenSection","ZwMapViewOfSection","ZwUnmapViewOfSection","ZwOpenKey","ZwQueryValueKey","ZwOpenSymbolicLinkObject","ZwQuerySymbolicLinkObject","MmGetPhysicalAddress","__C_specific_handler","strcpy_s","ZwOpenFile","ZwQueryInformationFile","ZwReadFile","PsGetVersion","ExAllocatePoolWithQuotaTag","ZwQuerySystemInformation","KeBugCheckEx","RtlInitUnicodeString","wcsstr","ObfDereferenceObject","_stricmp","HalSetBusDataByOffset","HalGetBusDataByOffset","HalTranslateBusAddress"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Trusted Root G4","ValidFrom":"2022-01-13 00:00:00","ValidTo":"2031-11-09 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":true,"SerialNumber":"0fd1bbca796bd7f8dd4c82e10a9a9631","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"b7b45b8ea989e3bb49fef821df6b4153","SHA1":"dfe27c66bf0e9730199a3c9b2bbc1c02d2d94914","SHA256":"e66e90fa03738d0f0353cd15ea61d4a02d406c32e238e192be9d866c343d7152","SHA384":"7fb01804ee870a928e56cad8f50fbf3a4689d92c69b891000f845290a05da7be8a60bfb57032871a7eccf2656b9adbea"}},{"Subject":"C=US, O=DigiCert, Inc., CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1","ValidFrom":"2021-04-29 00:00:00","ValidTo":"2036-04-28 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.12","IsCertificateAuthority":true,"SerialNumber":"08ad40b260d29c4c9f5ecda9bd93aed9","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"5d8003a64dfa5a4d88365da1566038cb","SHA1":"79465b56bc7ad55a37bdf633943da8bfc84db228","SHA256":"84bdc82e2f2a7f7aaa782667dac556ffcb2b33240c1f9c0a00a3264526a98332","SHA384":"65b1d4076a89ae273f57e6eeedecb3eae129b4168f76fa7671914cdf461d542255c59d9b85b916ae0ca6fc0fcf7a8e64"}},{"Subject":"BUSINESS_CATEGORY=Private Organization, JURISDICTION_OF_INCORPORATION_C=TW, serialNumber=23638777, C=TW, ST=Taipei City, L=Beitou District, O=ASUSTeK COMPUTER INC., CN=ASUSTeK COMPUTER INC.","ValidFrom":"2021-10-22 00:00:00","ValidTo":"2024-10-22 23:59:59","Signature":"1a8b6fd4e11cec34a3dfea314f0d59c6f41c56f76e1ac51f68e0285f1abdbda9e22628939dbd7acdf890d8ff3c7c4fff180c624b8434c6536bb61f1ff459d48a14c001d9d40ff1587cf64ce82edee2a24da8d80cd240e2af6d0e1c61aab24ce95f9c8ef50eeb0e153a343c1279fe6a003c44f3bd3ffa75ffbe314fc13bb36a9bbb3cea6026f5cb582992b016059074e4fcd8c16d4c5e8750bc9a196f94525317febcddb2d0121a235bb95136a0e4fc25611cd2915f4b488b66888168b90824e171d3214480c99fadb7b6c89cafc500eee468cb7faa9c1c1526d224ff389de012480480ced98831c324b129f2df3d3493d002ec8d4725e00eda33994f82493505861f61035c625d1c9ce2c7363799d3f1df9b17712b43cbf4c2027b54c796cbaca6b1523d028291e07774168a976ee3c879c850c1aaf65b1cec5c6dcb445487ab11b3967b8dd7726fe0dc529f7d624346a996adfd9dc6aab808edd9836a93e229ddbba4e8bb1c59719b6ebdcfc74d73f57ed946e936b5659783c199395bd2595458958edde6674bf08b3b650a8aeaa5507053b3f6ee7aedf16f55b849111535ca68ea11a5827551cba28023e230db7a209c763743ea22be0948ecf03d98ed447f66ecb97c0a525eb3b469779f2417f2082c4244b50936a9cb215745c71f3c27c98220f76395ba22a2f921a87655237977febd8b9a1564333af0cdf8e749bce0dd","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":false,"SerialNumber":"0bbe02c8838fbf02ab56edabb1e34c19","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"0357e292e0e92b06c92b21cacfcfa451","SHA1":"f52795bc8de5d803f09e20dd216d7df861f4cb34","SHA256":"b33b80e64cdfb28fb9afb17259be19ffe1edf8aae62fcfbfe8ff301f786c500d","SHA384":"5fbe918c3fa1034d5671ae38b20773df18b8f9dd48e60f90c5c98708e73d6ca0c6dec4e2bcb0de22ba3efb59479db152"}}],"Signer":[{"SerialNumber":"0bbe02c8838fbf02ab56edabb1e34c19","Issuer":"C=US, O=DigiCert, Inc., CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1","Version":1}]}]},{"Filename":"asio.sys","MD5":"0f0ffd1d5eed08cce0eee756b3dfc8b9","SHA1":"53b7fce428d49ef24d2500b2fdc42c7a223f91ab","SHA256":"d374f143dcfc1817fce11226a30653aa2bb7bf9d36ff58d289ff8c0199e4fc3f","LoadsDespiteHVCI":"FALSE","Imphash":"d7de998e454f947f62d4a6b66490563b","Authentihash":{"MD5":"7bb2dcc29ba50372d08fea800c190f09","SHA1":"e5c090903a20744ba3583a8ea684d035e8cecc34","SHA256":"9dcfd796e244d0687cc35eac9538f209f76c6df12de166f19dbc7d2c47fb16b3"},"RichPEHeaderHash":{"MD5":"fdbc1ff6c9321efd70ec149c3c8ccac6","SHA1":"d77615c985da37ca9099b27c1be4785c6cb7ccf6","SHA256":"4dbce3e8c08dd544b78f87323f6d794fb990bb10cb6d239fe367da87a803f23c"},"Sections":{".text":{"Entropy":6.1181571322303645,"Virtual Size":"0xd66"},".rdata":{"Entropy":4.313686441268312,"Virtual Size":"0x188"},".data":{"Entropy":0,"Virtual Size":"0xc"},".pdata":{"Entropy":3.3006321366120503,"Virtual Size":"0x84"},"INIT":{"Entropy":4.548019208277369,"Virtual Size":"0x24a"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2012-08-22 03:54:47","Description":"","Company":"","InternalName":"","OriginalFilename":"","FileVersion":"","Product":"","ProductVersion":"","Copyright":"","MachineType":"AMD64","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["ObReferenceObjectByHandle","ZwOpenSection","RtlInitUnicodeString","ZwClose","IoDeleteDevice","IoDeleteSymbolicLink","ZwMapViewOfSection","MmGetPhysicalAddress","MmAllocateContiguousMemory","ZwUnmapViewOfSection","IoIs32bitProcess","IoCreateSymbolicLink","IoCreateDevice","IofCompleteRequest","KeDelayExecutionThread","HalTranslateBusAddress"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=MOPR, CN=Microsoft Windows Hardware Compatibility Publisher","ValidFrom":"2014-12-19 19:27:34","ValidTo":"2016-03-19 19:27:34","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":false,"SerialNumber":"330000001dc31a761624754f8000000000001d","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"df2a0bc442ef65cd9973329be21c642f","SHA1":"d13bcda797c6b986a1a45b7ce9184e87ba0f994c","SHA256":"41718d172e45eaa02ec88494587672cf50f96a310aebc5b49a66c0adae99edc5","SHA384":"db7864a35b468726f3d431e07825ae860ddb0d6250b3bd8906f1b0ff98ce7b4c563c73288b01ec8f1ec5a2a06f31bc40"}},{"Subject":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Windows Third Party Component CA 2012","ValidFrom":"2012-04-18 23:48:38","ValidTo":"2027-04-18 23:58:38","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":true,"SerialNumber":"610baac1000000000009","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"a569061297e8e824767dbc3184a69bea","SHA1":"adbb26a587a8f44b4fccaecb306f980d1c55a150","SHA256":"cec1afd0e310c55c1dcc601ab8e172917706aa32fb5eaf826813547fdf02dd46","SHA384":"e947cac936803f5683196e4ff1b259096073395d0b908522ddce90d57597c9f7b57f7ddcdbe021ba863d843c340da8ba"}}],"Signer":[{"SerialNumber":"330000001dc31a761624754f8000000000001d","Issuer":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Windows Third Party Component CA 2012","Version":1}]}]}]}