{"Id":"4dd3289c-522c-4fce-b48e-5370efc90fa1","Tags":["iQVW64.SYS"],"Verified":"TRUE","Author":"Nasreddine Bencherchali","Created":"2023-05-06","MitreID":"T1068","Category":"vulnerable driver","Commands":{"Command":"sc.exe create iQVW64.sys binPath=C:\\windows\\temp\\iQVW64.SYS type=kernel && sc.exe start iQVW64.SYS","Description":"","Usecase":"Elevate privileges","Privileges":"kernel","OperatingSystem":"Windows 10"},"Resources":["Internal Research"],"Detection":[{"type":"yara_signature","value":"https://github.com/magicsword-io/LOLDrivers/blob/main/detections/yara/yara-rules_vuln_drivers_strict_renamed.yar"},{"type":"sigma_hash","value":"https://github.com/magicsword-io/LOLDrivers/blob/main/detections/sigma/driver_load_win_vuln_drivers.yml"},{"type":"sigma_names","value":"https://github.com/magicsword-io/LOLDrivers/blob/main/detections/sigma/driver_load_win_vuln_drivers_names.yml"},{"type":"sysmon_hash_detect","value":"https://github.com/magicsword-io/LOLDrivers/blob/main/detections/sysmon/sysmon_config_vulnerable_hashes.xml"},{"type":"sysmon_hash_block","value":"https://github.com/magicsword-io/LOLDrivers/blob/main/detections/sysmon/sysmon_config_vulnerable_hashes_block.xml"}],"Acknowledgement":{"Person":"","Handle":""},"KnownVulnerableSamples":[{"Filename":"iQVW64.SYS","MD5":"c796a92a66ec725b7b7febbdc13dc69b","SHA1":"0ed0c4d6c3b6b478cbfd7fb0bd1e1b5457a757cc","SHA256":"19bf0d0f55d2ad33ef2d105520bde8fb4286f00e9d7a721e3c9587b9408a0775","Authentihash":{"MD5":"9628077052773b85d492e06322fa4366","SHA1":"013c02f8fb3b1eb638a8ccdd9da5277749d1060b","SHA256":"46ec6310c5ea5e289299d40f5ecca82b9c722ffc766dfd08f36dc88835e63567"},"Description":"Intel(R) Network Adapter Diagnostic Driver","Company":"Intel Corporation ","InternalName":"iQVW64.SYS","OriginalFilename":"iQVW64.SYS","FileVersion":"1.03.0.4 built by: WinDDK","Product":"Intel(R) iQVW64.SYS","ProductVersion":"1.03.0.4","Copyright":"Copyright (C) 2002-2011 Intel Corporation All Rights Reserved.","MachineType":"IA64","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["KeGetCurrentIrql","DbgPrint","strncpy","vsprintf","IoFreeMdl","MmMapLockedPages","MmBuildMdlForNonPagedPool","IoAllocateMdl","MmUnmapIoSpace","MmUnmapLockedPages","MmAllocateContiguousMemory","MmFreeContiguousMemory","MmMapIoSpace","ObfDereferenceObject","KeWaitForSingleObject","MmGetPhysicalAddress","IoBuildSynchronousFsdRequest","KeInitializeEvent","ZwClose","RtlFreeAnsiString","strstr","RtlUnicodeStringToAnsiString","ZwEnumerateValueKey","ZwOpenKey","wcsncpy","IoGetDeviceObjectPointer","IoGetDeviceInterfaces","ObReferenceObjectByPointer","KeTickCount","KeBugCheckEx","ExFreePoolWithTag","ExAllocatePoolWithTag","IofCompleteRequest","IoCreateDevice","IoCreateSymbolicLink","RtlInitUnicodeString","IoDeleteSymbolicLink","IofCallDriver","IoDeleteDevice","KeStallExecutionProcessor","WRITE_PORT_ULONG","WRITE_PORT_USHORT","WRITE_PORT_UCHAR","READ_PORT_ULONG","READ_PORT_USHORT","READ_PORT_UCHAR","KeQueryPerformanceCounter"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer , G2","ValidFrom":"2007-06-15 00:00:00","ValidTo":"2012-06-14 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"3825d7faf861af9ef490e726b5d65ad5","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"d6c7684e9aaa508cf268335f83afe040","SHA1":"18066d20ad92409c567cdfde745279ff71c75226","SHA256":"a612fb22ce8be6dab75e47c98508f98496583e79c9c97b936a8caee9ea9f3fff","SHA384":"35c249d6ad0261a6229b2a727067ac6ba32a5d24b30b9249051f748c7735fbe2ec2ef26a702c50df1790fbe32a65aee7"}},{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA","ValidFrom":"2003-12-04 00:00:00","ValidTo":"2013-12-03 23:59:59","Signature":"4a6bf9ea58c2441c318979992b96bf82ac01d61c4ccdb08a586edf0829a35ec8ca9313e704520def47272f0038b0e4c9934e9ad4226215f73f37214f703180f18b3887b3e8e89700fecf55964e24d2a9274e7aaeb76141f32acee7c9d95eddbb2b853eb59db5d9e157ffbeb4c57ef5cf0c9ef097fe2bd33b521b1b3827f73f4a","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"47bf1995df8d524643f7db6d480d31a4","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"518d2ea8a21e879c942d504824ac211c","SHA1":"21ce87d827077e61abddf2beba69fde5432ea031","SHA256":"1ec3b4f02e03930a470020e0e48d24b84678bb558f46182888d870541f5e25c7","SHA384":"53e346bbde23779a5d116cc9d86fdd71c97b1f1b343439f8a11aa1d3c87af63864bb8488a5aeb2d0c26a6a1e0b15f03f"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009,2 CA","ValidFrom":"2009-05-21 00:00:00","ValidTo":"2019-05-20 23:59:59","Signature":"8b03c0dd94d841a26169b015a878c730c6903c7e42f724b6e4837317047f04109ca1e2fa812febc0ca44e772e050b6551020836e9692e49a516ab43731dca52deb8c00c71d4fe74d32ba85f84ebefa675565f06abe7aca64381a101078457631f3867a030f60c2b35d9df68b6676821b59e183e5bd49a53856e5de41770e580f","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"655226e1b22e18e1590f2985ac22e75c","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"650704c342850095f3288eaf791147d4","SHA1":"4cdc38c800761463749c3cbd94a12f32e49877bf","SHA256":"07b8f662558ec85b71b43a79c6e94698144f4ced2308af21e7ba1e5d461da214","SHA384":"2a271d052213438467d09d60eaa4010c8642fff3eb0070e0cf9969428713c8fdc066b90996d594dd3136f5bd0af5a22a"}},{"Subject":"C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority","ValidFrom":"2006-05-23 17:01:29","ValidTo":"2016-05-23 17:11:29","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"610c120600000000001b","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"53c41bc1164e09e0cd1617a5bf913efd","SHA1":"93c03aac8951d494ecd5696b1c08658541b18727","SHA256":"40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b","SHA384":"f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"}},{"Subject":"C=US, ST=Oregon, L=Hillsboro, O=Intel Corporation, OU=Digital ID Class 3 , Microsoft Software Validation v2, OU=LAN Access Division, CN=Intel Corporation","ValidFrom":"2009-05-26 00:00:00","ValidTo":"2012-05-30 23:59:59","Signature":"3d01e2c5a5f6209e2b1cbf422f38c19677d0c3d164d29bcf4fda7ad174d1bbd575795110e13d1af2fad8fcf7a683374a113b00b3b79677f04594c035194e9ab3d016259124793bae1750082011447c5f3e5e46d4c8423affadd01a84b40bbb6143b2030b6741f17d9d9b31124857587c24f1b9877f901b861a7e487bb0ba249553fc7decd252dd7c15a2ebdddec25e84d4dc9e5d6bdf06cb35c97b9a14c04945765431fb8be90e0b007daa667972409973db8f484b2283492c62a7923202797428054a8077cbabc1b1ad48334a759a32c6c2651b9ed192f67dd6d1479da1ea6f0a3b24a02c01b4ac85d293dc40150f831870b8aaa56d727eec6f55a0ff68402a","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"058258571670ab2b1bac50679cec49a1","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"2db2db8ad770f96c4ba2de12f5336353","SHA1":"d70fb0f12785771b5eff8029e0801fbe0caca8b3","SHA256":"ebce0797330e680af51b1a399d34575a8bcac049d55b1323097e17147b430538","SHA384":"b1480302c0412127620d79bc13eba100191c2458e63df9ae6987481db2ca14de7530211e195540d9b30bc7390a44fec0"}}],"Signer":[{"SerialNumber":"058258571670ab2b1bac50679cec49a1","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009,2 CA","Version":1}]}],"RichPEHeaderHash":{"MD5":"8007fd3858325a29ea818653b1ceb33c","SHA1":"acaff2a453f47e14cf2a396ee2e6ca8cbc5801b7","SHA256":"d95fe490f0c27ddb18fe210abef87a55a90d70c1c3fc71319e0f05ae06894b29"},"Sections":{".text":{"Entropy":5.475411996294876,"Virtual Size":"0x95e0"},".rdata":{"Entropy":3.072068378066715,"Virtual Size":"0xf40"},".pdata":{"Entropy":3.9359294560144455,"Virtual Size":"0x3e4"},".srdata":{"Entropy":2.7857828687461534,"Virtual Size":"0x280"},".sdata":{"Entropy":2.491453465417235,"Virtual Size":"0x1b0"},".data":{"Entropy":0,"Virtual Size":"0x5c9d80"},"INIT":{"Entropy":5.639528673951456,"Virtual Size":"0x92a"},".rsrc":{"Entropy":3.4091935406815166,"Virtual Size":"0x3f8"},".reloc":{"Entropy":0.41227279241255127,"Virtual Size":"0x1020"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2011-10-05 03:13:31","Imphash":"4bd0bd7710a7f71d38f056241c8ce0a7","LoadsDespiteHVCI":"FALSE"},{"Filename":"iQVW64.SYS","MD5":"f7d963c14a691a022301afa31de9ecef","SHA1":"2e546d86d3b1e4eaa92b6ec4768de79f70eb922f","SHA256":"1f8168036d636aad1680dd0f577ef9532dbb2dad3591d63e752b0ba3ee6fd501","Authentihash":{"MD5":"9e5958641168a690ab2b8003d3095a1f","SHA1":"b1ce8991df0af287d5fd6837306384bd4327ea1d","SHA256":"6f2cf1c9502c5c5054edb556827ba30ffc2e6689faf807db404672781b032eaf"},"Description":"Intel(R) Network Adapter Diagnostic Driver","Company":"Intel Corporation ","InternalName":"iQVW64.SYS","OriginalFilename":"iQVW64.SYS","FileVersion":"1.3.2.16 built by: WinDDK","Product":"Intel(R) iQVW64.SYS","ProductVersion":"1.3.2.16","Copyright":"Copyright (C) 2002-2018 Intel Corporation All Rights Reserved.","MachineType":"AMD64","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["IoCreateSymbolicLink","IofCompleteRequest","MmIsAddressValid","ExAllocatePoolWithTag","ExFreePoolWithTag","MmGetPhysicalAddress","DbgPrint","strncpy","vsprintf","IoFreeMdl","MmMapLockedPagesSpecifyCache","MmBuildMdlForNonPagedPool","IoAllocateMdl","MmUnmapIoSpace","MmUnmapLockedPages","MmAllocateContiguousMemory","MmFreeContiguousMemory","MmMapIoSpace","RtlInitUnicodeString","KeWaitForSingleObject","IofCallDriver","IoBuildSynchronousFsdRequest","KeInitializeEvent","ZwClose","RtlFreeAnsiString","strstr","RtlUnicodeStringToAnsiString","ZwEnumerateValueKey","ZwOpenKey","wcsncpy","IoGetDeviceObjectPointer","IoGetDeviceInterfaces","ObReferenceObjectByPointer","MmAllocateNonCachedMemory","MmFreeNonCachedMemory","KeBugCheckEx","IoDeleteSymbolicLink","ObfDereferenceObject","IoDeleteDevice","MmGetSystemRoutineAddress","ZwSetSecurityObject","ObOpenObjectByPointer","IoDeviceObjectType","IoCreateDevice","RtlGetDaclSecurityDescriptor","RtlGetSaclSecurityDescriptor","RtlGetGroupSecurityDescriptor","RtlGetOwnerSecurityDescriptor","_snwprintf","RtlLengthSecurityDescriptor","SeCaptureSecurityDescriptor","SeExports","IoIsWdmVersionAvailable","_wcsnicmp","RtlAddAccessAllowedAce","RtlLengthSid","wcschr","RtlAbsoluteToSelfRelativeSD","RtlSetDaclSecurityDescriptor","RtlCreateSecurityDescriptor","ZwCreateKey","ZwQueryValueKey","ZwSetValueKey","RtlFreeUnicodeString","KeStallExecutionProcessor","KeQueryPerformanceCounter"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=SE, O=AddTrust AB, OU=AddTrust External TTP Network, CN=AddTrust External CA Root","ValidFrom":"2013-08-15 20:26:30","ValidTo":"2023-08-15 20:36:30","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"3300000035d8d5595b0671412b000000000035","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"3d488d41aaeb5661974952080abef2fd","SHA1":"df01e35e6befc7d65625319f17397b861e618d56","SHA256":"3d6ef38b5d26773dc77392e415e88b3a744b30ea9f2081e2a992b5818db2f0c4","SHA384":"ac7c06916fe4a00307834b2499f12799d3fe463c2e63d1881df669a2786745beeee2b3a7d87cd6bc9e4fe293c22e5a59"}},{"Subject":"C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Certification Authority","ValidFrom":"2000-05-30 10:48:38","ValidTo":"2020-05-30 10:48:38","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.12","IsCertificateAuthority":true,"SerialNumber":"2766ee56eb49f38eabd770a2fc84de22","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"be5bfbe77379139ac5cdcbcc8d4d3b34","SHA1":"606b701bc9f448ddbfe6fa63ccb8061b838ee254","SHA256":"0d73a614eef7596cf5a34733f74daf2ccfe4df7b4a40069bf43c43e428264177","SHA384":"7ce102d63c57cb48f80a65d1a5e9b350a7a618482aa5a36775323ca933ddfcb00def83796a6340dec5ebf7596cfd8e5d"}},{"Subject":"C=US, ST=CA, L=Santa Clara, O=Intel Corporation, CN=Intel(R) INTELND1617S2","ValidFrom":"2016-09-22 20:52:10","ValidTo":"2018-09-22 20:52:10","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":false,"SerialNumber":"560000013927007472d9b99b9b000000000139","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"cdc266193e7ecfd8e1e7f3aed67e75ed","SHA1":"d384f171c6ae3e92f8cc93ca26690c3d5be2a81b","SHA256":"15c1d42f57e1f011c3e16c96f68d07d2734a981e5c1200ac6b974e9c7683654e","SHA384":"55f8f8afaf783b2b4f9f1e48e86def2eeec80e1b2744679afd6d2809b2c822780720e65d69e43c93916b90b6da1dead8"}},{"Subject":"C=US, ST=CA, L=Santa Clara, O=Intel Corporation, CN=Intel External Issuing CA 7B","ValidFrom":"2015-10-28 00:00:00","ValidTo":"2021-06-17 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.12","IsCertificateAuthority":true,"SerialNumber":"069b5e99277284c8767f1368a7deb0f3","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"5578c7331db18bb448db403ad32c94ee","SHA1":"dfcfe5d6087cf830513d705aa701ff957d960298","SHA256":"5b619f82064ace7ecf48d26ce8ae6fa3b52671915fa81ee81cddbe740dd8698b","SHA384":"5fa042c979faba67de861093b4aca808ae4be0fcedf123cb8afe126856c0b6ac3451393048211db8993914c5ff410bd8"}}],"Signer":[{"SerialNumber":"560000013927007472d9b99b9b000000000139","Issuer":"C=US, ST=CA, L=Santa Clara, O=Intel Corporation, CN=Intel External Issuing CA 7B","Version":1}]}],"RichPEHeaderHash":{"MD5":"84dfb7245aa6b7f3efec05cfa6559636","SHA1":"695bd45c0e89dcb58253e90c9a43400b03ae2202","SHA256":"3ff178ffbb2c17ce7c3a02ef5943ddf3b580e3e28f6cc59775c5369062a0b9ab"},"Sections":{".text":{"Entropy":6.260738500856503,"Virtual Size":"0x4945"},".rdata":{"Entropy":4.781831199028562,"Virtual Size":"0xed0"},".data":{"Entropy":1.1262035268835313,"Virtual Size":"0x5ca0a0"},".pdata":{"Entropy":4.658699009524359,"Virtual Size":"0x678"},"PAGE":{"Entropy":6.1261566082145595,"Virtual Size":"0x1b71"},"INIT":{"Entropy":5.77048929806172,"Virtual Size":"0xb4c"},".rsrc":{"Entropy":3.435765934379025,"Virtual Size":"0x3f8"},".reloc":{"Entropy":1.2072398645622464,"Virtual Size":"0x60"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2018-04-06 04:56:07","Imphash":"2cf48a541dc193e91bb2a831adcf278e","LoadsDespiteHVCI":"FALSE"},{"Filename":"iQVW64.SYS","MD5":"73a40e29f61e5d142c8f42b28a351190","SHA1":"bdfb25cc4ed569dc0d5849545eb4abe08539029f","SHA256":"2d2c7ee9547738a8a676ab785c151e8b48ed40fe7cf6174650814c7f5f58513b","Authentihash":{"MD5":"de5dc7fda88792287ab03e73cece0ba8","SHA1":"99adef60a03c2ba9aa008adcd151686175ede2db","SHA256":"0ae3c446e5f075e8fc3db31eabd744a65b2c50a9b4a52877873547951bc19bc9"},"Description":"Intel(R) Network Adapter Diagnostic Driver","Company":"Intel Corporation ","InternalName":"iQVW64.SYS","OriginalFilename":"iQVW64.SYS","FileVersion":"1.03.0.6 built by: WinDDK","Product":"Intel(R) iQVW64.SYS","ProductVersion":"1.03.0.6","Copyright":"Copyright (C) 2002-2012 Intel Corporation All Rights Reserved.","MachineType":"AMD64","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["IoCreateSymbolicLink","IoCreateDevice","IofCompleteRequest","ExAllocatePoolWithTag","ExFreePoolWithTag","MmGetPhysicalAddress","DbgPrint","strncpy","vsprintf","IoFreeMdl","MmMapLockedPagesSpecifyCache","MmBuildMdlForNonPagedPool","IoAllocateMdl","MmUnmapIoSpace","MmUnmapLockedPages","MmAllocateContiguousMemory","MmFreeContiguousMemory","RtlInitUnicodeString","ObfDereferenceObject","KeWaitForSingleObject","IofCallDriver","IoBuildSynchronousFsdRequest","KeInitializeEvent","ZwClose","RtlFreeAnsiString","strstr","RtlUnicodeStringToAnsiString","ZwEnumerateValueKey","ZwOpenKey","wcsncpy","IoGetDeviceObjectPointer","IoGetDeviceInterfaces","ObReferenceObjectByPointer","KeBugCheckEx","IoDeleteSymbolicLink","MmMapIoSpace","IoDeleteDevice","KeStallExecutionProcessor","KeQueryPerformanceCounter"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer , G3","ValidFrom":"2012-05-01 00:00:00","ValidTo":"2012-12-31 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"79a2a585f9d1154213d9b83ef6b68ded","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"e6d820afb23af20a65cf0b03247ea05e","SHA1":"7a8f7c37453f99390ee1e94bb5d3d1cba3a0eea7","SHA256":"7e722dc40e6b9abf8c20aa4d887e34b6d2c6b8cbe53a055d49bf9f5e946e0d27","SHA384":"7e14609969a388d38d227df1dbb9ce086c9a820142c94fd1a28ef2835a8aa528aef4c6399bce344d79adb5f3dad86afa"}},{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA","ValidFrom":"2003-12-04 00:00:00","ValidTo":"2013-12-03 23:59:59","Signature":"4a6bf9ea58c2441c318979992b96bf82ac01d61c4ccdb08a586edf0829a35ec8ca9313e704520def47272f0038b0e4c9934e9ad4226215f73f37214f703180f18b3887b3e8e89700fecf55964e24d2a9274e7aaeb76141f32acee7c9d95eddbb2b853eb59db5d9e157ffbeb4c57ef5cf0c9ef097fe2bd33b521b1b3827f73f4a","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"47bf1995df8d524643f7db6d480d31a4","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"518d2ea8a21e879c942d504824ac211c","SHA1":"21ce87d827077e61abddf2beba69fde5432ea031","SHA256":"1ec3b4f02e03930a470020e0e48d24b84678bb558f46182888d870541f5e25c7","SHA384":"53e346bbde23779a5d116cc9d86fdd71c97b1f1b343439f8a11aa1d3c87af63864bb8488a5aeb2d0c26a6a1e0b15f03f"}},{"Subject":"C=US, ST=Oregon, L=Hillsboro, O=Intel Corporation, OU=Digital ID Class 3 , Microsoft Software Validation v2, OU=LAN Access Division, CN=Intel Corporation","ValidFrom":"2012-05-17 00:00:00","ValidTo":"2015-05-30 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"2776ab5cf2d09872f1ad05fbc3f21a87","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"fa13cce803fbe5b5256430f9bfee76de","SHA1":"ce566e0c55909bbf2bb0d43280ee78b4ba3d582f","SHA256":"7959ee2235998f36a9cdbd9b5ef7759e5846e0eecd7e868c5f042360a25482aa","SHA384":"82fcff4effee6971cfc9d0d684d13479eac42b53f23590e0df172e2804ff94abc1fbf0e2b6af0cf05b099fc97cf26789"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. , For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority , G5","ValidFrom":"2011-02-22 19:25:17","ValidTo":"2021-02-22 19:35:17","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"611993e400000000001c","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"78a717e082dcc1cda3458d917e677d14","SHA1":"4a872e0e51f9b304469cd1dedb496ee9b8b983a4","SHA256":"317fa1d234ebc49040ebc5e8746f8997471496051b185a91bdd9dfbb23fab5f8","SHA384":"b71052da4eb9157c8c1a5d7f55df19d69b9128598b72fcca608e5b7cc7d64c43c5504b9c86355a6dc22ee40c88cc385c"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","ValidFrom":"2010-02-08 00:00:00","ValidTo":"2020-02-07 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"5200e5aa2556fc1a86ed96c9d44b33c7","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"b30c31a572b0409383ed3fbe17e56e81","SHA1":"4843a82ed3b1f2bfbee9671960e1940c942f688d","SHA256":"03cda47a6e654ed85d932714fc09ce4874600eda29ec6628cfbaeb155cab78c9","SHA384":"bbda8407c4f9fc4e54d772f1c7fb9d30bc97e1f97ecd51c443063d1fa0644e266328781776cd5c44896c457c75f4d7da"}}],"Signer":[{"SerialNumber":"2776ab5cf2d09872f1ad05fbc3f21a87","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","Version":1}]}],"RichPEHeaderHash":{"MD5":"4521e9ed78c16f8d1e49a1981dfb32eb","SHA1":"557230bdf881a5a09523f4b063c81e10594ee183","SHA256":"4d270337cbd39f54b308a8b11869c2d85075acb846ce369f90aeceb8dd87782f"},"Sections":{".text":{"Entropy":6.313310272629252,"Virtual Size":"0x4595"},".rdata":{"Entropy":4.728842329222615,"Virtual Size":"0x7b8"},".data":{"Entropy":0.30140680731160896,"Virtual Size":"0x5c9ec0"},".pdata":{"Entropy":4.323928242016378,"Virtual Size":"0x408"},"INIT":{"Entropy":5.82935061954711,"Virtual Size":"0x7a8"},".rsrc":{"Entropy":3.419370252627768,"Virtual Size":"0x3f8"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2012-10-23 04:48:15","Imphash":"55db306bc2be3ff71a6b91fd9db051b8","LoadsDespiteHVCI":"FALSE"},{"Filename":"iQVW64.SYS","MD5":"69ba501a268f09f694ff0e8e208aa20e","SHA1":"3d6d53b0f1cc908b898610227b9f1b9352137aba","SHA256":"37c637a74bf20d7630281581a8fae124200920df11ad7cd68c14c26cc12c5ec9","Authentihash":{"MD5":"61c9bc2fd776b341f21b71fb1891eb5a","SHA1":"9af173db51828d2a3c64d34e9120f1fd129a2359","SHA256":"ecd6e879e5521ca4053a59ef6682a95d97f6d9ba75f313b87bd133afe5267852"},"Description":"Intel(R) Network Adapter Diagnostic Driver","Company":"Intel Corporation ","InternalName":"iQVW64.SYS","OriginalFilename":"iQVW64.SYS","FileVersion":"1.3.2.17 built by: WinDDK","Product":"Intel(R) iQVW64.SYS","ProductVersion":"1.3.2.17","Copyright":"Copyright (C) 2002-2018 Intel Corporation All Rights Reserved.","MachineType":"AMD64","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["IoCreateSymbolicLink","IofCompleteRequest","MmIsAddressValid","ExAllocatePoolWithTag","ExFreePoolWithTag","MmGetPhysicalAddress","DbgPrint","strncpy","vsprintf","IoFreeMdl","MmMapLockedPagesSpecifyCache","MmBuildMdlForNonPagedPool","IoAllocateMdl","MmUnmapIoSpace","MmUnmapLockedPages","MmAllocateContiguousMemory","MmFreeContiguousMemory","MmMapIoSpace","RtlInitUnicodeString","KeWaitForSingleObject","IofCallDriver","IoBuildSynchronousFsdRequest","KeInitializeEvent","ZwClose","RtlFreeAnsiString","strstr","RtlUnicodeStringToAnsiString","ZwEnumerateValueKey","ZwOpenKey","wcsncpy","IoGetDeviceObjectPointer","IoGetDeviceInterfaces","ObReferenceObjectByPointer","MmAllocateNonCachedMemory","MmFreeNonCachedMemory","KeBugCheckEx","IoDeleteSymbolicLink","ObfDereferenceObject","IoDeleteDevice","MmGetSystemRoutineAddress","ZwSetSecurityObject","ObOpenObjectByPointer","IoDeviceObjectType","IoCreateDevice","RtlGetDaclSecurityDescriptor","RtlGetSaclSecurityDescriptor","RtlGetGroupSecurityDescriptor","RtlGetOwnerSecurityDescriptor","_snwprintf","RtlLengthSecurityDescriptor","SeCaptureSecurityDescriptor","SeExports","IoIsWdmVersionAvailable","_wcsnicmp","RtlAddAccessAllowedAce","RtlLengthSid","wcschr","RtlAbsoluteToSelfRelativeSD","RtlSetDaclSecurityDescriptor","RtlCreateSecurityDescriptor","ZwCreateKey","ZwQueryValueKey","ZwSetValueKey","RtlFreeUnicodeString","KeStallExecutionProcessor","KeQueryPerformanceCounter"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=SE, O=AddTrust AB, OU=AddTrust External TTP Network, CN=AddTrust External CA Root","ValidFrom":"2013-08-15 20:26:30","ValidTo":"2023-08-15 20:36:30","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"3300000035d8d5595b0671412b000000000035","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"3d488d41aaeb5661974952080abef2fd","SHA1":"df01e35e6befc7d65625319f17397b861e618d56","SHA256":"3d6ef38b5d26773dc77392e415e88b3a744b30ea9f2081e2a992b5818db2f0c4","SHA384":"ac7c06916fe4a00307834b2499f12799d3fe463c2e63d1881df669a2786745beeee2b3a7d87cd6bc9e4fe293c22e5a59"}},{"Subject":"C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Certification Authority","ValidFrom":"2000-05-30 10:48:38","ValidTo":"2020-05-30 10:48:38","Signature":"64bf83f15f9a85d0cdb8a129570de85af7d1e93ef276046ef15270bb1e3cff4d0d746acc818225d3c3a02a5d4cf5ba8ba16dc4540975c7e3270e5d847937401377f5b4ac1cd03bab1712d6ef34187e2be979d3ab57450caf28fad0dbe5509588bbdf8557697d92d852ca7381bf1cf3e6b86e661105b31e942d7f91959259f14ccea391714c7c470c3b0b19f6a1b16c863e5caac42e82cbf90796ba484d90f294c8a973a2eb067b239ddea2f34d559f7a6145981868c75e406b23f5797aef8cb56b8bb76f46f47bf13d4b04d89380595ae041241db28f15605847dbef6e46fd15f5d95f9ab3dbd8b8e440b3cd9739ae85bb1d8ebcdc879bd1a6eff13b6f10386f","SignatureAlgorithmOID":"1.2.840.113549.1.1.12","IsCertificateAuthority":true,"SerialNumber":"2766ee56eb49f38eabd770a2fc84de22","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"be5bfbe77379139ac5cdcbcc8d4d3b34","SHA1":"606b701bc9f448ddbfe6fa63ccb8061b838ee254","SHA256":"0d73a614eef7596cf5a34733f74daf2ccfe4df7b4a40069bf43c43e428264177","SHA384":"7ce102d63c57cb48f80a65d1a5e9b350a7a618482aa5a36775323ca933ddfcb00def83796a6340dec5ebf7596cfd8e5d"}},{"Subject":"C=US, ST=CA, L=Santa Clara, O=Intel Corporation, OU=ND, CN=Intel(R) INTELND1820","ValidFrom":"2018-08-09 21:34:08","ValidTo":"2020-08-08 21:34:08","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":false,"SerialNumber":"560000077b478c76c9afcafcaf00000000077b","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"f3eba8fe0d2dd1bc861e0b0e6e23d96e","SHA1":"bce46695d618b69de8a4bb5ebede302378c1aebb","SHA256":"5de689926c95c269de72cd6edf9cad152c5ce41729dfc7835607b9b1182fe66e","SHA384":"348401b8898e24fd502451c161739c56eecd8f5a8159045b1fc312dd636174aba9627306025387736bf478ade2b773a0"}},{"Subject":"C=US, ST=CA, L=Santa Clara, O=Intel Corporation, CN=Intel External Issuing CA 7B","ValidFrom":"2015-10-28 00:00:00","ValidTo":"2021-06-17 23:59:59","Signature":"35bb03eacc9b601a13d075528e8095454e9ebf6ec0bb64aac36eb1021d465e2fe82f48cc8410f7ad993bfffa856829b0d37c31e21ab47bc166e2a53bc729189835ae6301a845209561db104db90d6bd39964ce5f8bb86c1346a06e5a0d3ee790ebb731a121f58dde3b7b6936f10800b9aabf1c566156d7cc923f29d4d96bd8222f0e56f56ad146e8808f397a923c6748b7e2fa190f3767e2df292d02aa43282eae2c464224be6dbb6a8849a64c20dfe5654ffae1c1be71d5f85ef59d6692b23b64e1e8aeac995517bddb1bdfa0934f3f56f23b83d5d2b7c1085a524042e33e9120f735b491f04de134694879c0ed30c9931a84d572198f6d8039f459ab2016d8f9ff7026237becc50033227c3d203aedb428bc7a810ce70bc13f7c300c4e50b8670fd76417b7c3c52085ca8fced5262a1254b9ff22f8a8273cca0e853714ee02e52f66156263876a5ecf29d3b89178b76172177bc119a6180822dad09125f606090926b02dac808874335fc7e044c1309976d877b14701ef69922bedae582963a0358ee41db704f1da3ab23280b1c8bcf0e70f71007a333a06e8a4d879d9d953cd9bfeb2685b8884856b0771d04f930a0760033408d273bf141adfe3c7041b2d999e931c95b38798425a1c916352398a8f4a2ac24c7b70693a3cf1fb2fff0e0a8794e4016acf9bb41fa30ea9ea2adcaf2b8c4401fd3a587d3278a219d5c974c5","SignatureAlgorithmOID":"1.2.840.113549.1.1.12","IsCertificateAuthority":true,"SerialNumber":"069b5e99277284c8767f1368a7deb0f3","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"5578c7331db18bb448db403ad32c94ee","SHA1":"dfcfe5d6087cf830513d705aa701ff957d960298","SHA256":"5b619f82064ace7ecf48d26ce8ae6fa3b52671915fa81ee81cddbe740dd8698b","SHA384":"5fa042c979faba67de861093b4aca808ae4be0fcedf123cb8afe126856c0b6ac3451393048211db8993914c5ff410bd8"}}],"Signer":[{"SerialNumber":"560000077b478c76c9afcafcaf00000000077b","Issuer":"C=US, ST=CA, L=Santa Clara, O=Intel Corporation, CN=Intel External Issuing CA 7B","Version":1}]}],"RichPEHeaderHash":{"MD5":"84dfb7245aa6b7f3efec05cfa6559636","SHA1":"695bd45c0e89dcb58253e90c9a43400b03ae2202","SHA256":"3ff178ffbb2c17ce7c3a02ef5943ddf3b580e3e28f6cc59775c5369062a0b9ab"},"Sections":{".text":{"Entropy":6.2614381305981635,"Virtual Size":"0x4945"},".rdata":{"Entropy":4.781156413274236,"Virtual Size":"0xed0"},".data":{"Entropy":1.1262035268835313,"Virtual Size":"0x5ca0a0"},".pdata":{"Entropy":4.658699009524359,"Virtual Size":"0x678"},"PAGE":{"Entropy":6.1261566082145595,"Virtual Size":"0x1b71"},"INIT":{"Entropy":5.7698100081018655,"Virtual Size":"0xb4c"},".rsrc":{"Entropy":3.4436811351467087,"Virtual Size":"0x3f8"},".reloc":{"Entropy":1.2072398645622464,"Virtual Size":"0x60"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2018-09-17 05:18:08","Imphash":"2cf48a541dc193e91bb2a831adcf278e","LoadsDespiteHVCI":"FALSE"},{"Filename":"iQVW64.SYS","MD5":"de4001f89ed139d1ed6ae5586d48997a","SHA1":"cb212a826324909fdedd2b572a59a5be877f1d7d","SHA256":"4d0580c20c1ba74cf90d44c82d040f0039542eea96e4bbff3996e6760f457cee","Authentihash":{"MD5":"b962ae9f688f5a0fc864e3b64a8fa443","SHA1":"f6e5a0c338354dfbd1a9170fb9bd71123db5ac3b","SHA256":"ee625d1910f91fc9e79237bd60b0ee5efb85c7f859922f30e4434db6cd50fa9b"},"Description":"Intel(R) Network Adapter Diagnostic Driver","Company":"Intel Corporation ","InternalName":"iQVW64.SYS","OriginalFilename":"iQVW64.SYS","FileVersion":"1.03.0.4 built by: WinDDK","Product":"Intel(R) iQVW64.SYS","ProductVersion":"1.03.0.4","Copyright":"Copyright (C) 2002-2006 Intel Corporation All Rights Reserved.","MachineType":"IA64","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["KeGetCurrentIrql","DbgPrint","sprintf","vsprintf","IoFreeMdl","MmMapLockedPages","MmBuildMdlForNonPagedPool","IoAllocateMdl","MmUnmapIoSpace","MmUnmapLockedPages","MmAllocateContiguousMemory","MmFreeContiguousMemory","MmMapIoSpace","ObfDereferenceObject","KeWaitForSingleObject","MmGetPhysicalAddress","IoBuildSynchronousFsdRequest","KeInitializeEvent","ZwClose","RtlFreeAnsiString","strstr","RtlUnicodeStringToAnsiString","ZwEnumerateValueKey","ZwOpenKey","wcsncpy","IoGetDeviceObjectPointer","IoGetDeviceInterfaces","ObReferenceObjectByPointer","KeTickCount","KeBugCheckEx","ExFreePoolWithTag","ExAllocatePoolWithTag","IofCompleteRequest","IoCreateDevice","IoCreateSymbolicLink","RtlInitUnicodeString","IoDeleteSymbolicLink","IofCallDriver","IoDeleteDevice","KeStallExecutionProcessor","WRITE_PORT_ULONG","WRITE_PORT_USHORT","WRITE_PORT_UCHAR","READ_PORT_ULONG","READ_PORT_USHORT","READ_PORT_UCHAR","KeQueryPerformanceCounter"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA","ValidFrom":"2003-12-04 00:00:00","ValidTo":"2013-12-03 23:59:59","Signature":"4a6bf9ea58c2441c318979992b96bf82ac01d61c4ccdb08a586edf0829a35ec8ca9313e704520def47272f0038b0e4c9934e9ad4226215f73f37214f703180f18b3887b3e8e89700fecf55964e24d2a9274e7aaeb76141f32acee7c9d95eddbb2b853eb59db5d9e157ffbeb4c57ef5cf0c9ef097fe2bd33b521b1b3827f73f4a","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"47bf1995df8d524643f7db6d480d31a4","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"518d2ea8a21e879c942d504824ac211c","SHA1":"21ce87d827077e61abddf2beba69fde5432ea031","SHA256":"1ec3b4f02e03930a470020e0e48d24b84678bb558f46182888d870541f5e25c7","SHA384":"53e346bbde23779a5d116cc9d86fdd71c97b1f1b343439f8a11aa1d3c87af63864bb8488a5aeb2d0c26a6a1e0b15f03f"}},{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer","ValidFrom":"2003-12-04 00:00:00","ValidTo":"2008-12-03 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"0de92bf0d4d82988183205095e9a7688","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"45c204b8a20f6abb0188d2d38a3fb0c9","SHA1":"cdf3a3c5c2eda4c29621f30fd3154f9f8c765739","SHA256":"e32839dddc0f4ed2474efaf37f59d46db400c700fd19533cb0895a111124bc77","SHA384":"ee9c75832cb252218b3201619852209df490d2ef7a5f7a28afdb37f1c1dd56f4604898838e558f615b1c798d4a488223"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)04, CN=VeriSign Class 3 Code Signing 2004 CA","ValidFrom":"2004-07-16 00:00:00","ValidTo":"2014-07-15 23:59:59","Signature":"ae3a17b84a7b55fa6455ec40a4ed494190999c89bcaf2e1dca7823f91c190f7feb68bc32d98838dedc3fd389b43fb18296f1a45abaed2e26d3de7c016e000a00a4069211480940f91c1879672324e0bbd5e150ae1bf50edde02e81cd80a36c524f9175558aba22f2d2ea4175882f63557d1e545a9559cad93481c05f5ef67ab5","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"4191a15a3978dfcf496566381d4c75c2","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"41011f8d0e7c7a6408334ca387914c61","SHA1":"c7fc1727f5b75a6421a1f95c73bbdb23580c48e5","SHA256":"88dd3952638ee82738c03168e6fd863fe4eab1059ee5e2926ad8cb587c255dc0","SHA384":"a00aa5ed457c41e37967882644d63366bae014f03a986576d8514164d7027acf7d0b5e03d764db2558f60db148954459"}},{"Subject":"C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority","ValidFrom":"2006-05-23 17:01:29","ValidTo":"2016-05-23 17:11:29","Signature":"01e446b33b457f7513877e5f43de468ecb8abdb64741bccccc7491d8ce395195a4a6b547c0efd2da7b8f5711f4328c7ccd3fee42da04214af7c843884a6f5cca14fc4bd19f4cbdd4556ecc02be0da6888f8609baa425bde8b0f0fa8b714e67b0cb82a8d78e55f737ebf03e88efe4e08afd1c6e2e61414875b4b02c1d28d8490fd715f02473253ccc880cde284c6554fe5eae8cea19ad2c51b29b3a47f53c80350117e24987d6544afb4bab07bcbf7d79cfbf35005cbb9ecffc82891b39a05197b6dec0b307ff449644c0342a195cabeef03bec294eb513c537857e75d5b4d60d066eb5d26c237167eaf1718eaf4e74aa0cf9ecbf4c58fa5e909b6d39cb86883f8b1ca81632d5fe6db9f1f8b3ead791f6364778c0272a15c768d6f4c5fc4f4ec8673f102d409ff11ec96148e7a703fc31730cf04688fe56da492995ef09daa3e5beef60ecd954a0599c28bd54ef66157f874c84dba60e95672e517b3439b641c28c846826dc240209e7818e0a972defeea7b998a60f818dc710b5e1ed982f486f53854964789bec5dac970b5526c3efba8dc8d1a52f5a7f936b611a339b18b8a26210de24ea76e12f43ebecdd7c12342489da2855aee5754e312b6763b6a8d7ab730a03cec5ea593fc7eb2a45aea8625b2f009939abb45f73c308ec80118f470e8f2a1343e191066255bbffba3da9a93d260faeca7d628b155589d694344dd665","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"610c120600000000001b","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"53c41bc1164e09e0cd1617a5bf913efd","SHA1":"93c03aac8951d494ecd5696b1c08658541b18727","SHA256":"40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b","SHA384":"f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"}},{"Subject":"C=US, ST=Oregon, L=Hillsboro, O=Intel Corporation, OU=Digital ID Class 3 , Microsoft Software Validation v2, OU=LAN Access Division, CN=Intel Corporation","ValidFrom":"2006-04-17 00:00:00","ValidTo":"2009-05-31 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"65680c783b728ab2a1880df4232ded32","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"9d44550dc9e1d18ef155513f85ab1f12","SHA1":"5f3d3da7374d8edbe4b2a2534c07682861458b3c","SHA256":"12d4c385c0c5e927fc876523b6874918232c08fdaff8e96e230e622b0841df00","SHA384":"165909cf2d34f32ea49a96d98d2c59d6eaad7a8bfe85f6e34d9da3fa79f40b31e4a88d3040558b876f2154c8970b41c4"}}],"Signer":[{"SerialNumber":"65680c783b728ab2a1880df4232ded32","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)04, CN=VeriSign Class 3 Code Signing 2004 CA","Version":1}]}],"RichPEHeaderHash":{"MD5":"8007fd3858325a29ea818653b1ceb33c","SHA1":"acaff2a453f47e14cf2a396ee2e6ca8cbc5801b7","SHA256":"d95fe490f0c27ddb18fe210abef87a55a90d70c1c3fc71319e0f05ae06894b29"},"Sections":{".text":{"Entropy":5.474712044858714,"Virtual Size":"0x9650"},".rdata":{"Entropy":3.609079674230226,"Virtual Size":"0x1268"},".pdata":{"Entropy":3.954637417465344,"Virtual Size":"0x3e4"},".srdata":{"Entropy":2.416721292937625,"Virtual Size":"0x298"},".sdata":{"Entropy":2.4838136736919543,"Virtual Size":"0x1b0"},".data":{"Entropy":1.0629748059111717,"Virtual Size":"0x5bb060"},"INIT":{"Entropy":5.613442587283406,"Virtual Size":"0x92a"},".rsrc":{"Entropy":3.4112316573365282,"Virtual Size":"0x3f8"},".reloc":{"Entropy":0.5046360681325445,"Virtual Size":"0x1170"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2007-02-13 18:23:41","Imphash":"a793af44219650b4dd07d8a19ede33f1","LoadsDespiteHVCI":"FALSE"},{"Filename":"iQVW64.SYS","MD5":"5adebdb94abb4c76dad2b7ecb1384a9d","SHA1":"1e8bccbd74f194db6411011017716c8c6b730d03","SHA256":"57a389da784269bb2cc0a258500f6dfbf4f6269276e1192619ce439ec77f4572","Authentihash":{"MD5":"772d513b311dd6ff2ded105980a7f92a","SHA1":"5db96ed94e2e32cf82f38724f8715fd775e0ebff","SHA256":"94b42f99cb2ac4db601a3759afe374168bad1714bd48662d74fed69099517a65"},"Description":"Intel(R) Network Adapter Diagnostic Driver","Company":"Intel Corporation ","InternalName":"iQVW64.SYS","OriginalFilename":"iQVW64.SYS","FileVersion":"1.03.0.4 built by: WinDDK","Product":"Intel(R) iQVW64.SYS","ProductVersion":"1.03.0.4","Copyright":"Copyright (C) 2002-2006 Intel Corporation All Rights Reserved.","MachineType":"IA64","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["KeGetCurrentIrql","DbgPrint","sprintf","vsprintf","IoFreeMdl","MmMapLockedPages","MmBuildMdlForNonPagedPool","IoAllocateMdl","MmUnmapIoSpace","MmUnmapLockedPages","MmAllocateContiguousMemory","MmFreeContiguousMemory","MmMapIoSpace","ObfDereferenceObject","KeWaitForSingleObject","MmGetPhysicalAddress","IoBuildSynchronousFsdRequest","KeInitializeEvent","ZwClose","RtlFreeAnsiString","strstr","RtlUnicodeStringToAnsiString","ZwEnumerateValueKey","ZwOpenKey","wcsncpy","IoGetDeviceObjectPointer","IoGetDeviceInterfaces","ObReferenceObjectByPointer","KeTickCount","KeBugCheckEx","ExFreePoolWithTag","ExAllocatePoolWithTag","IofCompleteRequest","IoCreateDevice","IoCreateSymbolicLink","RtlInitUnicodeString","IoDeleteSymbolicLink","IofCallDriver","IoDeleteDevice","KeStallExecutionProcessor","WRITE_PORT_ULONG","WRITE_PORT_USHORT","WRITE_PORT_UCHAR","READ_PORT_ULONG","READ_PORT_USHORT","READ_PORT_UCHAR","KeQueryPerformanceCounter"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA","ValidFrom":"2003-12-04 00:00:00","ValidTo":"2013-12-03 23:59:59","Signature":"4a6bf9ea58c2441c318979992b96bf82ac01d61c4ccdb08a586edf0829a35ec8ca9313e704520def47272f0038b0e4c9934e9ad4226215f73f37214f703180f18b3887b3e8e89700fecf55964e24d2a9274e7aaeb76141f32acee7c9d95eddbb2b853eb59db5d9e157ffbeb4c57ef5cf0c9ef097fe2bd33b521b1b3827f73f4a","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"47bf1995df8d524643f7db6d480d31a4","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"518d2ea8a21e879c942d504824ac211c","SHA1":"21ce87d827077e61abddf2beba69fde5432ea031","SHA256":"1ec3b4f02e03930a470020e0e48d24b84678bb558f46182888d870541f5e25c7","SHA384":"53e346bbde23779a5d116cc9d86fdd71c97b1f1b343439f8a11aa1d3c87af63864bb8488a5aeb2d0c26a6a1e0b15f03f"}},{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer","ValidFrom":"2003-12-04 00:00:00","ValidTo":"2008-12-03 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"0de92bf0d4d82988183205095e9a7688","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"45c204b8a20f6abb0188d2d38a3fb0c9","SHA1":"cdf3a3c5c2eda4c29621f30fd3154f9f8c765739","SHA256":"e32839dddc0f4ed2474efaf37f59d46db400c700fd19533cb0895a111124bc77","SHA384":"ee9c75832cb252218b3201619852209df490d2ef7a5f7a28afdb37f1c1dd56f4604898838e558f615b1c798d4a488223"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)04, CN=VeriSign Class 3 Code Signing 2004 CA","ValidFrom":"2004-07-16 00:00:00","ValidTo":"2014-07-15 23:59:59","Signature":"ae3a17b84a7b55fa6455ec40a4ed494190999c89bcaf2e1dca7823f91c190f7feb68bc32d98838dedc3fd389b43fb18296f1a45abaed2e26d3de7c016e000a00a4069211480940f91c1879672324e0bbd5e150ae1bf50edde02e81cd80a36c524f9175558aba22f2d2ea4175882f63557d1e545a9559cad93481c05f5ef67ab5","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"4191a15a3978dfcf496566381d4c75c2","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"41011f8d0e7c7a6408334ca387914c61","SHA1":"c7fc1727f5b75a6421a1f95c73bbdb23580c48e5","SHA256":"88dd3952638ee82738c03168e6fd863fe4eab1059ee5e2926ad8cb587c255dc0","SHA384":"a00aa5ed457c41e37967882644d63366bae014f03a986576d8514164d7027acf7d0b5e03d764db2558f60db148954459"}},{"Subject":"C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority","ValidFrom":"2006-05-23 17:01:29","ValidTo":"2016-05-23 17:11:29","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"610c120600000000001b","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"53c41bc1164e09e0cd1617a5bf913efd","SHA1":"93c03aac8951d494ecd5696b1c08658541b18727","SHA256":"40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b","SHA384":"f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"}},{"Subject":"C=US, ST=Oregon, L=Hillsboro, O=Intel Corporation, OU=Digital ID Class 3 , Microsoft Software Validation v2, OU=LAN Access Division, CN=Intel Corporation","ValidFrom":"2006-04-17 00:00:00","ValidTo":"2009-05-31 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"65680c783b728ab2a1880df4232ded32","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"9d44550dc9e1d18ef155513f85ab1f12","SHA1":"5f3d3da7374d8edbe4b2a2534c07682861458b3c","SHA256":"12d4c385c0c5e927fc876523b6874918232c08fdaff8e96e230e622b0841df00","SHA384":"165909cf2d34f32ea49a96d98d2c59d6eaad7a8bfe85f6e34d9da3fa79f40b31e4a88d3040558b876f2154c8970b41c4"}}],"Signer":[{"SerialNumber":"65680c783b728ab2a1880df4232ded32","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)04, CN=VeriSign Class 3 Code Signing 2004 CA","Version":1}]}],"RichPEHeaderHash":{"MD5":"8007fd3858325a29ea818653b1ceb33c","SHA1":"acaff2a453f47e14cf2a396ee2e6ca8cbc5801b7","SHA256":"d95fe490f0c27ddb18fe210abef87a55a90d70c1c3fc71319e0f05ae06894b29"},"Sections":{".text":{"Entropy":5.474603753371456,"Virtual Size":"0x9650"},".rdata":{"Entropy":3.6134847275970596,"Virtual Size":"0x1268"},".pdata":{"Entropy":3.954637417465344,"Virtual Size":"0x3e4"},".srdata":{"Entropy":2.416721292937625,"Virtual Size":"0x298"},".sdata":{"Entropy":2.4838136736919543,"Virtual Size":"0x1b0"},".data":{"Entropy":1.0629748059111717,"Virtual Size":"0x5bb060"},"INIT":{"Entropy":5.611516822868356,"Virtual Size":"0x92a"},".rsrc":{"Entropy":3.4112316573365282,"Virtual Size":"0x3f8"},".reloc":{"Entropy":0.5046360681325445,"Virtual Size":"0x1170"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2007-05-24 02:36:30","Imphash":"a793af44219650b4dd07d8a19ede33f1","LoadsDespiteHVCI":"FALSE"},{"Filename":"iQVW64.SYS","MD5":"b32497762d916dba6c827e31205b67dd","SHA1":"9310239b75394b75a963336fbd154038fc13c4e3","SHA256":"5f6547e9823f94c5b94af1fb69a967c4902f72b6e0c783804835e6ce27f887b0","Authentihash":{"MD5":"b08ec7710e9596bf9389b458b4f9717b","SHA1":"d544c1dfd17aee4bf15dc4aa8d5208fe304f4eb4","SHA256":"b261d4065c03dcc732a951a9451b3a9f6054899eb3b8a4062dfed1c0ca3f3755"},"Description":"Intel(R) Network Adapter Diagnostic Driver","Company":"Intel Corporation ","InternalName":"iQVW64.SYS","OriginalFilename":"iQVW64.SYS","FileVersion":"1.3.2.13 built by: WinDDK","Product":"Intel(R) iQVW64.SYS","ProductVersion":"1.3.2.13","Copyright":"Copyright (C) 2002-2017 Intel Corporation All Rights Reserved.","MachineType":"AMD64","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["IoCreateSymbolicLink","IofCompleteRequest","MmIsAddressValid","ExAllocatePoolWithTag","ExFreePoolWithTag","MmGetPhysicalAddress","DbgPrint","strncpy","vsprintf","IoFreeMdl","MmMapLockedPagesSpecifyCache","MmBuildMdlForNonPagedPool","IoAllocateMdl","MmUnmapIoSpace","MmUnmapLockedPages","MmAllocateContiguousMemory","MmFreeContiguousMemory","MmMapIoSpace","RtlInitUnicodeString","KeWaitForSingleObject","IofCallDriver","IoBuildSynchronousFsdRequest","KeInitializeEvent","ZwClose","RtlFreeAnsiString","strstr","RtlUnicodeStringToAnsiString","ZwEnumerateValueKey","ZwOpenKey","wcsncpy","IoGetDeviceObjectPointer","IoGetDeviceInterfaces","ObReferenceObjectByPointer","MmAllocateNonCachedMemory","MmFreeNonCachedMemory","KeBugCheckEx","IoDeleteSymbolicLink","ObfDereferenceObject","IoDeleteDevice","MmGetSystemRoutineAddress","ZwSetSecurityObject","ObOpenObjectByPointer","IoDeviceObjectType","IoCreateDevice","RtlGetDaclSecurityDescriptor","RtlGetSaclSecurityDescriptor","RtlGetGroupSecurityDescriptor","RtlGetOwnerSecurityDescriptor","_snwprintf","RtlLengthSecurityDescriptor","SeCaptureSecurityDescriptor","SeExports","IoIsWdmVersionAvailable","_wcsnicmp","RtlAddAccessAllowedAce","RtlLengthSid","wcschr","RtlAbsoluteToSelfRelativeSD","RtlSetDaclSecurityDescriptor","RtlCreateSecurityDescriptor","ZwCreateKey","ZwQueryValueKey","ZwSetValueKey","RtlFreeUnicodeString","KeStallExecutionProcessor","KeQueryPerformanceCounter"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, ST=CA, L=Santa Clara, O=Intel Corporation, CN=Intel(R) INTELND1617","ValidFrom":"2016-09-22 20:33:26","ValidTo":"2017-09-22 20:33:26","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"330000ba45a7f4234edca115e400020000ba45","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"fd23f7497ae36eb7eaaff376598e060b","SHA1":"e6b5f8479757625ad54c8a3fe9819feb2dde06fe","SHA256":"3e8e8357b13852cc90263d6ca1243a65555fe1840a26b8b71f45c426e90ee70f","SHA384":"4aa328888abed813d9e0fc7c81bd5404b4cc213148b1394220091695322b27a860442b5199124a682c9b7cf10c1922ef"}},{"Subject":"C=US, ST=CA, L=Santa Clara, O=Intel Corporation, CN=Intel External Basic Issuing CA 3B","ValidFrom":"2013-02-08 22:21:23","ValidTo":"2018-02-08 22:31:23","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"612cff88000100000010","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"da9a02953cdcc039174d11b07dd2967d","SHA1":"568cfca269ff49615d305e680988337f0a90bc32","SHA256":"fad628f5236458a9116a99f2d64fb9131a28f9942fca6239a5e7be0dddf4ce9f","SHA384":"5edeab0248f63cdc4c10b748618cd6fa4aa53ffb0ddfd51a2e35de2ea55a56822aa53fa734a46705655e8f5878b24ffd"}},{"Subject":"C=US, O=Intel Corporation, CN=Intel External Basic Policy CA","ValidFrom":"2013-02-01 00:00:00","ValidTo":"2020-05-30 10:48:38","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"79174aa9141736fe15a7ca9f2cff4588","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"6ce466d55ab160317ee9b13522c2a82a","SHA1":"53b052ba209c525233293274854b264bc0f68b73","SHA256":"f71790e057380a0cbafdfc25bc8b3dafd6cfbeb01077bb3d8194e91254a2fc9b","SHA384":"c0cc37f9505ff2bab958c8ef1ea94736efae52bcf5948c866446c46b64fb9f5e603fbad4bc70270ae74e58ac8ab055f9"}},{"Subject":"C=BM, O=QuoVadis Limited, CN=QuoVadis Issuing CA G4","ValidFrom":"2014-05-30 16:35:55","ValidTo":"2021-03-17 18:33:33","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":true,"SerialNumber":"69b2d1ccf02e20dcc95c62894f7f9e5f5fc057bf","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"4e0fbd79a99e4a55f97ef41efee38a9f","SHA1":"114f36d5f22b84de97893469fc00b7035b3ef734","SHA256":"f6dd9683708786a413d4d6a3661fa4e4aeb328adbd181b398b5b6aa02bb0bc16","SHA384":"a26fe570a01b0e15cf94b41ce48ebd39ed9e9d18493d4c117f0fbb5a5b33ed8ef06c069b9638dda957547f0b0645e447"}},{"Subject":"C=US, ST=CA, L=Santa Clara, O=Intel Corporation, OU=Thales TSS ESN:E892,D055,162F, OU=Thales TSS ESN:E892,D055,162F, CN=timestamp.intel.com","ValidFrom":"2015-04-24 21:46:24","ValidTo":"2018-04-24 21:46:23","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":true,"SerialNumber":"28a11e74fc0b8754580f50954c47c94e67754f28","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"990afc9a12be270c0fa6921df0223974","SHA1":"a7025b6889dbdeb4c6770d524d4c80a0a75da5df","SHA256":"6eb4cfbd4f50e31ece8b34937025ca350330cb25367a401a5665e68159b47f13","SHA384":"287f1afb51c586f323b8f42bd6e269051c3aabfd1aaa084650d4d35a42a122489b2cb634c6842981273da17c3d6c8c1d"}},{"Subject":"C=SE, O=AddTrust AB, OU=AddTrust External TTP Network, CN=AddTrust External CA Root","ValidFrom":"2013-08-15 20:26:30","ValidTo":"2023-08-15 20:36:30","Signature":"362ba2f2e1331fe493f7f26985c6640ec99b632fe4703798fd94ec7bcff8a14246f9ed6a4e8d34693605557a1ebbad8c99429606e925a82684bec1bf16a97caa5b04b7fdd1c0f402be28edf577c79bfe3af6e8c17bd382abfa144ecf2bcfe5d5b54840b1a38f838bad2b2553aba634cef243f74f2ce9dd1e4e5ab6bae83b10992400bc50fd78f6e523a8899493f7b74130374a57b7e644d9c9df9905aa44fc74af8264cc07cb01b609c32ee3e832a7b49f4178c7a184365462f2ec150ac8ead084f8f1e06bf456125f95e0fcddb77693fe294a25e90400f1b4110ec9849edb177df51ea58e3629193a6d6c464bd7ab7024288d05a3d9d524f2f8a0d13c8239d4a8820e693a8109fc06f0c75933843693064191232c22a5a7012b50b428aedb46b0591b86b39b87e8494e390b6d14df4c03301e1f5f74aef55b590353ec9816e0d06235751b48b87d13e57a48b87752a40798253b069b7a4e6a6f44864f144f2779273d5073414c9c413edd290c73b1c7fb1f760c176504ebd25010924149ece4067d3615446f89bf697df94d40c13a98b6a07e31d2b5aecafb53d53f5086cd5e933b6d5d7c9a3f3ff7a9255884dd114900a2c7c89e37dd778e6d718be05b81345d54baccf59347886de7ef5be228e4801b40e40f2ad17f2315655aac9994433f465526d6c4fa8895e2919aa32d0b85deac8ce0f967709f71790231f761a229c4","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"3300000035d8d5595b0671412b000000000035","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"3d488d41aaeb5661974952080abef2fd","SHA1":"df01e35e6befc7d65625319f17397b861e618d56","SHA256":"3d6ef38b5d26773dc77392e415e88b3a744b30ea9f2081e2a992b5818db2f0c4","SHA384":"ac7c06916fe4a00307834b2499f12799d3fe463c2e63d1881df669a2786745beeee2b3a7d87cd6bc9e4fe293c22e5a59"}}],"Signer":[{"SerialNumber":"330000ba45a7f4234edca115e400020000ba45","Issuer":"C=US, ST=CA, L=Santa Clara, O=Intel Corporation, CN=Intel External Basic Issuing CA 3B","Version":1}]}],"RichPEHeaderHash":{"MD5":"84dfb7245aa6b7f3efec05cfa6559636","SHA1":"695bd45c0e89dcb58253e90c9a43400b03ae2202","SHA256":"3ff178ffbb2c17ce7c3a02ef5943ddf3b580e3e28f6cc59775c5369062a0b9ab"},"Sections":{".text":{"Entropy":6.26149486344197,"Virtual Size":"0x4945"},".rdata":{"Entropy":4.781728512805813,"Virtual Size":"0xed0"},".data":{"Entropy":1.1262035268835313,"Virtual Size":"0x5ca0a0"},".pdata":{"Entropy":4.658699009524359,"Virtual Size":"0x678"},"PAGE":{"Entropy":6.1261566082145595,"Virtual Size":"0x1b71"},"INIT":{"Entropy":5.769261214042255,"Virtual Size":"0xb4c"},".rsrc":{"Entropy":3.439744127272693,"Virtual Size":"0x3f8"},".reloc":{"Entropy":1.2072398645622464,"Virtual Size":"0x60"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2017-04-03 11:14:26","Imphash":"2cf48a541dc193e91bb2a831adcf278e","LoadsDespiteHVCI":"FALSE"},{"Filename":"iQVW64.SYS","MD5":"ca6931fcbc1492d7283aa9dc0149032e","SHA1":"45a9f95a7a018925148152b888d09d478d56bbf5","SHA256":"5f69d6b167a1eeca3f6ac64785c3c01976ee7303171faf998d65852056988683","Authentihash":{"MD5":"5617c10f9fb9e09aba8657adb2c05b07","SHA1":"b4d869e7b3be6f0ae0113b05bc5358b955e2f6d4","SHA256":"08209cd92723526d56863e89f283750e2ee57c69db37ae501aa889c0c60bb552"},"Description":"Intel(R) Network Adapter Diagnostic Driver","Company":"Intel Corporation ","InternalName":"iQVW64.SYS","OriginalFilename":"iQVW64.SYS","FileVersion":"1.03.2.7 built by: WinDDK","Product":"Intel(R) iQVW64.SYS","ProductVersion":"1.03.2.7","Copyright":"Copyright (C) 2002-2016 Intel Corporation All Rights Reserved.","MachineType":"AMD64","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["IoCreateSymbolicLink","IofCompleteRequest","MmIsAddressValid","ExAllocatePoolWithTag","ExFreePoolWithTag","MmGetPhysicalAddress","DbgPrint","strncpy","vsprintf","IoFreeMdl","MmMapLockedPagesSpecifyCache","MmBuildMdlForNonPagedPool","IoAllocateMdl","MmUnmapIoSpace","MmUnmapLockedPages","MmAllocateContiguousMemory","MmFreeContiguousMemory","MmMapIoSpace","RtlInitUnicodeString","KeWaitForSingleObject","IofCallDriver","IoBuildSynchronousFsdRequest","KeInitializeEvent","ZwClose","RtlFreeAnsiString","strstr","RtlUnicodeStringToAnsiString","ZwEnumerateValueKey","ZwOpenKey","wcsncpy","IoGetDeviceObjectPointer","IoGetDeviceInterfaces","ObReferenceObjectByPointer","MmAllocateNonCachedMemory","MmFreeNonCachedMemory","KeBugCheckEx","IoDeleteSymbolicLink","ObfDereferenceObject","IoDeleteDevice","MmGetSystemRoutineAddress","ZwSetSecurityObject","ObOpenObjectByPointer","IoDeviceObjectType","IoCreateDevice","RtlGetDaclSecurityDescriptor","RtlGetSaclSecurityDescriptor","RtlGetGroupSecurityDescriptor","RtlGetOwnerSecurityDescriptor","_snwprintf","RtlLengthSecurityDescriptor","SeCaptureSecurityDescriptor","SeExports","IoIsWdmVersionAvailable","_wcsnicmp","RtlAddAccessAllowedAce","RtlLengthSid","wcschr","RtlAbsoluteToSelfRelativeSD","RtlSetDaclSecurityDescriptor","RtlCreateSecurityDescriptor","ZwCreateKey","ZwQueryValueKey","ZwSetValueKey","RtlFreeUnicodeString","KeStallExecutionProcessor","KeQueryPerformanceCounter"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, ST=CA, L=Santa Clara, O=Intel Corporation, CN=Intel(R) INTELNPG1","ValidFrom":"2015-09-28 19:41:01","ValidTo":"2016-09-27 19:41:01","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"330000b7c6cfa9df260db5243500020000b7c6","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"d04e62ad536be27b5ae5f53dfe14060b","SHA1":"558dc33cda5a996d71afe98ea75f5d81c358f42b","SHA256":"832c1b2d5269714f6804e13ed6fe068d732b543de00975c9e04dd697bf7be6e1","SHA384":"fde1b110f034d38c2923861b58e91798da1b17afbf0ed367c3fd6ecc708d2795a4d7434367625db81d686337cce199d0"}},{"Subject":"C=US, ST=CA, L=Santa Clara, O=Intel Corporation, CN=Intel External Basic Issuing CA 3B","ValidFrom":"2013-02-08 22:21:23","ValidTo":"2018-02-08 22:31:23","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"612cff88000100000010","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"da9a02953cdcc039174d11b07dd2967d","SHA1":"568cfca269ff49615d305e680988337f0a90bc32","SHA256":"fad628f5236458a9116a99f2d64fb9131a28f9942fca6239a5e7be0dddf4ce9f","SHA384":"5edeab0248f63cdc4c10b748618cd6fa4aa53ffb0ddfd51a2e35de2ea55a56822aa53fa734a46705655e8f5878b24ffd"}},{"Subject":"C=US, O=Intel Corporation, CN=Intel External Basic Policy CA","ValidFrom":"2013-02-01 00:00:00","ValidTo":"2020-05-30 10:48:38","Signature":"586fbfcd43074213fcb8d0ad8121f28a6fef87bc268a7c00bd680c2b19642c1167b3a9d9790aac395d6500163b53466ea2a6b56799dbe8bfa225ae049511093a2fdeacb73db8bc017430804748544ca0fb6ba8b8a284b7f434e57bcedc5278f4316d4251ae87bf94acbe9616fb55e5798264fdac5038e4dccb812ce7776f9d9b235c7d0403f4079e7ed457e266944debb55c5c629e8c2d83e64614e2a11380fddae0862711922bbd87174fcb19184b5e8ce60dd98f7d23766fa4ffa0ba3de36d37d62638e81a9c2392c8561f1a1a8e00d633a66b95fa821e740b0fa486df23337c9e3614b35ce2a3ed48a08e28f1d74cf6c09bb4f53ca3e5a863a22c08a5d5fe","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"79174aa9141736fe15a7ca9f2cff4588","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"6ce466d55ab160317ee9b13522c2a82a","SHA1":"53b052ba209c525233293274854b264bc0f68b73","SHA256":"f71790e057380a0cbafdfc25bc8b3dafd6cfbeb01077bb3d8194e91254a2fc9b","SHA384":"c0cc37f9505ff2bab958c8ef1ea94736efae52bcf5948c866446c46b64fb9f5e603fbad4bc70270ae74e58ac8ab055f9"}},{"Subject":"C=BM, O=QuoVadis Limited, CN=QuoVadis Issuing CA G4","ValidFrom":"2014-05-30 16:35:55","ValidTo":"2021-03-17 18:33:33","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":true,"SerialNumber":"69b2d1ccf02e20dcc95c62894f7f9e5f5fc057bf","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"4e0fbd79a99e4a55f97ef41efee38a9f","SHA1":"114f36d5f22b84de97893469fc00b7035b3ef734","SHA256":"f6dd9683708786a413d4d6a3661fa4e4aeb328adbd181b398b5b6aa02bb0bc16","SHA384":"a26fe570a01b0e15cf94b41ce48ebd39ed9e9d18493d4c117f0fbb5a5b33ed8ef06c069b9638dda957547f0b0645e447"}},{"Subject":"C=US, ST=CA, L=Santa Clara, O=Intel Corporation, OU=Authenticode, OU=Thales TSS ESN:A6A7,71B2,73F1, CN=Timestamp.intel.com","ValidFrom":"2014-12-09 21:30:38","ValidTo":"2017-12-09 21:30:35","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":true,"SerialNumber":"385dccec5fe14d3974c9591a3ab1c2caad188c2d","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"4d35161b8be0a29812bb748b548e94b1","SHA1":"bf27e048115892363598dec245759aa7529eb154","SHA256":"d5c67eb0b73915a6f12dbe19f662205172cc9c97b9988b78a07f14c3b7e1e2b0","SHA384":"8b0e411b3fc02dd3a8f5f7d248699a7d882c160a6e3753c1b223d2b0671a6d3f9efa4894172a3bfa3525787be2d6f20e"}},{"Subject":"C=SE, O=AddTrust AB, OU=AddTrust External TTP Network, CN=AddTrust External CA Root","ValidFrom":"2013-08-15 20:26:30","ValidTo":"2023-08-15 20:36:30","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"3300000035d8d5595b0671412b000000000035","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"3d488d41aaeb5661974952080abef2fd","SHA1":"df01e35e6befc7d65625319f17397b861e618d56","SHA256":"3d6ef38b5d26773dc77392e415e88b3a744b30ea9f2081e2a992b5818db2f0c4","SHA384":"ac7c06916fe4a00307834b2499f12799d3fe463c2e63d1881df669a2786745beeee2b3a7d87cd6bc9e4fe293c22e5a59"}}],"Signer":[{"SerialNumber":"330000b7c6cfa9df260db5243500020000b7c6","Issuer":"C=US, ST=CA, L=Santa Clara, O=Intel Corporation, CN=Intel External Basic Issuing CA 3B","Version":1}]}],"RichPEHeaderHash":{"MD5":"84dfb7245aa6b7f3efec05cfa6559636","SHA1":"695bd45c0e89dcb58253e90c9a43400b03ae2202","SHA256":"3ff178ffbb2c17ce7c3a02ef5943ddf3b580e3e28f6cc59775c5369062a0b9ab"},"Sections":{".text":{"Entropy":6.295892814002313,"Virtual Size":"0x4b95"},".rdata":{"Entropy":4.790906217741617,"Virtual Size":"0xed4"},".data":{"Entropy":1.1262035268835313,"Virtual Size":"0x5ca0a0"},".pdata":{"Entropy":4.662346739100627,"Virtual Size":"0x678"},"PAGE":{"Entropy":6.127905616673761,"Virtual Size":"0x1b71"},"INIT":{"Entropy":5.777452830533018,"Virtual Size":"0xb4c"},".rsrc":{"Entropy":3.4355466248056747,"Virtual Size":"0x3f8"},".reloc":{"Entropy":1.2072398645622464,"Virtual Size":"0x60"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2016-08-23 21:52:09","Imphash":"2cf48a541dc193e91bb2a831adcf278e","LoadsDespiteHVCI":"FALSE"},{"Filename":"iQVW64.SYS","MD5":"349fa788a4a7b57e37e426aca9b736d5","SHA1":"687b8962febbbea4cf6b3c11181fd76acb7dfd5a","SHA256":"77c5e95b872b1d815d6d3ed28b399ca39f3427eeb0143f49982120ff732285a9","Authentihash":{"MD5":"c50808f1da14138ea4b38907f113ab5a","SHA1":"859be8b0b744eee0b9a3410fc5a614b924ac4b43","SHA256":"e7fe1fa6d2e5502ff1882a345790d0aab3ad34fe269ab23e3115d2d93db3fe6b"},"Description":"Intel(R) Network Adapter Diagnostic Driver","Company":"Intel Corporation ","InternalName":"iQVW64.SYS","OriginalFilename":"iQVW64.SYS","FileVersion":"1.03.0.4 built by: WinDDK","Product":"Intel(R) iQVW64.SYS","ProductVersion":"1.03.0.4","Copyright":"Copyright (C) 2002-2006 Intel Corporation All Rights Reserved.","MachineType":"AMD64","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["IoCreateSymbolicLink","IoCreateDevice","IofCompleteRequest","ExAllocatePoolWithTag","ExFreePoolWithTag","MmGetPhysicalAddress","DbgPrint","sprintf","vsprintf","IoFreeMdl","MmMapLockedPages","MmBuildMdlForNonPagedPool","IoAllocateMdl","MmUnmapIoSpace","MmUnmapLockedPages","MmAllocateContiguousMemory","MmFreeContiguousMemory","RtlInitUnicodeString","ObfDereferenceObject","KeWaitForSingleObject","IofCallDriver","IoBuildSynchronousFsdRequest","KeInitializeEvent","ZwClose","RtlFreeAnsiString","strstr","RtlUnicodeStringToAnsiString","ZwEnumerateValueKey","ZwOpenKey","wcsncpy","IoGetDeviceObjectPointer","IoGetDeviceInterfaces","ObReferenceObjectByPointer","KeBugCheckEx","IoDeleteSymbolicLink","MmMapIoSpace","IoDeleteDevice","KeStallExecutionProcessor","KeQueryPerformanceCounter"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer , G2","ValidFrom":"2007-06-15 00:00:00","ValidTo":"2012-06-14 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"3825d7faf861af9ef490e726b5d65ad5","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"d6c7684e9aaa508cf268335f83afe040","SHA1":"18066d20ad92409c567cdfde745279ff71c75226","SHA256":"a612fb22ce8be6dab75e47c98508f98496583e79c9c97b936a8caee9ea9f3fff","SHA384":"35c249d6ad0261a6229b2a727067ac6ba32a5d24b30b9249051f748c7735fbe2ec2ef26a702c50df1790fbe32a65aee7"}},{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA","ValidFrom":"2003-12-04 00:00:00","ValidTo":"2013-12-03 23:59:59","Signature":"4a6bf9ea58c2441c318979992b96bf82ac01d61c4ccdb08a586edf0829a35ec8ca9313e704520def47272f0038b0e4c9934e9ad4226215f73f37214f703180f18b3887b3e8e89700fecf55964e24d2a9274e7aaeb76141f32acee7c9d95eddbb2b853eb59db5d9e157ffbeb4c57ef5cf0c9ef097fe2bd33b521b1b3827f73f4a","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"47bf1995df8d524643f7db6d480d31a4","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"518d2ea8a21e879c942d504824ac211c","SHA1":"21ce87d827077e61abddf2beba69fde5432ea031","SHA256":"1ec3b4f02e03930a470020e0e48d24b84678bb558f46182888d870541f5e25c7","SHA384":"53e346bbde23779a5d116cc9d86fdd71c97b1f1b343439f8a11aa1d3c87af63864bb8488a5aeb2d0c26a6a1e0b15f03f"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)04, CN=VeriSign Class 3 Code Signing 2004 CA","ValidFrom":"2004-07-16 00:00:00","ValidTo":"2014-07-15 23:59:59","Signature":"ae3a17b84a7b55fa6455ec40a4ed494190999c89bcaf2e1dca7823f91c190f7feb68bc32d98838dedc3fd389b43fb18296f1a45abaed2e26d3de7c016e000a00a4069211480940f91c1879672324e0bbd5e150ae1bf50edde02e81cd80a36c524f9175558aba22f2d2ea4175882f63557d1e545a9559cad93481c05f5ef67ab5","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"4191a15a3978dfcf496566381d4c75c2","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"41011f8d0e7c7a6408334ca387914c61","SHA1":"c7fc1727f5b75a6421a1f95c73bbdb23580c48e5","SHA256":"88dd3952638ee82738c03168e6fd863fe4eab1059ee5e2926ad8cb587c255dc0","SHA384":"a00aa5ed457c41e37967882644d63366bae014f03a986576d8514164d7027acf7d0b5e03d764db2558f60db148954459"}},{"Subject":"C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority","ValidFrom":"2006-05-23 17:01:29","ValidTo":"2016-05-23 17:11:29","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"610c120600000000001b","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"53c41bc1164e09e0cd1617a5bf913efd","SHA1":"93c03aac8951d494ecd5696b1c08658541b18727","SHA256":"40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b","SHA384":"f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"}},{"Subject":"C=US, ST=Oregon, L=Hillsboro, O=Intel Corporation, OU=Digital ID Class 3 , Microsoft Software Validation v2, OU=LAN Access Division, CN=Intel Corporation","ValidFrom":"2006-04-17 00:00:00","ValidTo":"2009-05-31 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"65680c783b728ab2a1880df4232ded32","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"9d44550dc9e1d18ef155513f85ab1f12","SHA1":"5f3d3da7374d8edbe4b2a2534c07682861458b3c","SHA256":"12d4c385c0c5e927fc876523b6874918232c08fdaff8e96e230e622b0841df00","SHA384":"165909cf2d34f32ea49a96d98d2c59d6eaad7a8bfe85f6e34d9da3fa79f40b31e4a88d3040558b876f2154c8970b41c4"}}],"Signer":[{"SerialNumber":"65680c783b728ab2a1880df4232ded32","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)04, CN=VeriSign Class 3 Code Signing 2004 CA","Version":1}]}],"RichPEHeaderHash":{"MD5":"4521e9ed78c16f8d1e49a1981dfb32eb","SHA1":"557230bdf881a5a09523f4b063c81e10594ee183","SHA256":"4d270337cbd39f54b308a8b11869c2d85075acb846ce369f90aeceb8dd87782f"},"Sections":{".text":{"Entropy":6.313950625118645,"Virtual Size":"0x4525"},".rdata":{"Entropy":5.072782940842027,"Virtual Size":"0xaa0"},".data":{"Entropy":1.3642226642444077,"Virtual Size":"0x5bb180"},".pdata":{"Entropy":4.302155417145168,"Virtual Size":"0x420"},"INIT":{"Entropy":5.824692693737898,"Virtual Size":"0x79c"},".rsrc":{"Entropy":3.414004191020133,"Virtual Size":"0x3f8"},".reloc":{"Entropy":1.2283624043981463,"Virtual Size":"0x12c"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2009-05-12 16:12:21","Imphash":"5c77661ac2951da388949d9a834eb694","LoadsDespiteHVCI":"FALSE"},{"Filename":"iQVW64.SYS","MD5":"1c61eb82f1269d8d6be8de2411133811","SHA1":"0d6fb0cb9566b4e4ca4586f26fe0631ffa847f2c","SHA256":"7cb497abc44aad09a38160d6a071db499e05ff5871802ccc45d565d242026ee7","Authentihash":{"MD5":"0b6c1cf6b4bad6edccd9c8457af495bc","SHA1":"69e6d06476e4c55989507cf47722f0c355f568ad","SHA256":"c857c2db1fe1b9c979079add29d5b970147d6a264b4095e6579b5d0669c2b572"},"Description":"Intel(R) Network Adapter Diagnostic Driver","Company":"Intel Corporation ","InternalName":"iQVW64.SYS","OriginalFilename":"iQVW64.SYS","FileVersion":"1.3.2.18 built by: WinDDK","Product":"Intel(R) iQVW64.SYS","ProductVersion":"1.3.2.18","Copyright":"Copyright (C) 2002-2019 Intel Corporation All Rights Reserved.","MachineType":"AMD64","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["IoCreateSymbolicLink","IofCompleteRequest","MmIsAddressValid","ExAllocatePoolWithTag","ExFreePoolWithTag","MmGetPhysicalAddress","DbgPrint","strncpy","vsprintf","IoFreeMdl","MmMapLockedPagesSpecifyCache","MmBuildMdlForNonPagedPool","IoAllocateMdl","MmUnmapIoSpace","MmUnmapLockedPages","MmAllocateContiguousMemory","MmFreeContiguousMemory","MmMapIoSpace","RtlInitUnicodeString","KeWaitForSingleObject","IofCallDriver","IoBuildSynchronousFsdRequest","KeInitializeEvent","ZwClose","RtlFreeAnsiString","strstr","RtlUnicodeStringToAnsiString","ZwEnumerateValueKey","ZwOpenKey","wcsncpy","IoGetDeviceObjectPointer","IoGetDeviceInterfaces","ObReferenceObjectByPointer","MmAllocateNonCachedMemory","MmFreeNonCachedMemory","KeBugCheckEx","IoDeleteSymbolicLink","ObfDereferenceObject","IoDeleteDevice","MmGetSystemRoutineAddress","ZwSetSecurityObject","ObOpenObjectByPointer","IoDeviceObjectType","IoCreateDevice","RtlGetDaclSecurityDescriptor","RtlGetSaclSecurityDescriptor","RtlGetGroupSecurityDescriptor","RtlGetOwnerSecurityDescriptor","_snwprintf","RtlLengthSecurityDescriptor","SeCaptureSecurityDescriptor","SeExports","IoIsWdmVersionAvailable","_wcsnicmp","RtlAddAccessAllowedAce","RtlLengthSid","wcschr","RtlAbsoluteToSelfRelativeSD","RtlSetDaclSecurityDescriptor","RtlCreateSecurityDescriptor","ZwCreateKey","ZwQueryValueKey","ZwSetValueKey","RtlFreeUnicodeString","KeStallExecutionProcessor","KeQueryPerformanceCounter"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=SE, O=AddTrust AB, OU=AddTrust External TTP Network, CN=AddTrust External CA Root","ValidFrom":"2013-08-15 20:26:30","ValidTo":"2023-08-15 20:36:30","Signature":"362ba2f2e1331fe493f7f26985c6640ec99b632fe4703798fd94ec7bcff8a14246f9ed6a4e8d34693605557a1ebbad8c99429606e925a82684bec1bf16a97caa5b04b7fdd1c0f402be28edf577c79bfe3af6e8c17bd382abfa144ecf2bcfe5d5b54840b1a38f838bad2b2553aba634cef243f74f2ce9dd1e4e5ab6bae83b10992400bc50fd78f6e523a8899493f7b74130374a57b7e644d9c9df9905aa44fc74af8264cc07cb01b609c32ee3e832a7b49f4178c7a184365462f2ec150ac8ead084f8f1e06bf456125f95e0fcddb77693fe294a25e90400f1b4110ec9849edb177df51ea58e3629193a6d6c464bd7ab7024288d05a3d9d524f2f8a0d13c8239d4a8820e693a8109fc06f0c75933843693064191232c22a5a7012b50b428aedb46b0591b86b39b87e8494e390b6d14df4c03301e1f5f74aef55b590353ec9816e0d06235751b48b87d13e57a48b87752a40798253b069b7a4e6a6f44864f144f2779273d5073414c9c413edd290c73b1c7fb1f760c176504ebd25010924149ece4067d3615446f89bf697df94d40c13a98b6a07e31d2b5aecafb53d53f5086cd5e933b6d5d7c9a3f3ff7a9255884dd114900a2c7c89e37dd778e6d718be05b81345d54baccf59347886de7ef5be228e4801b40e40f2ad17f2315655aac9994433f465526d6c4fa8895e2919aa32d0b85deac8ce0f967709f71790231f761a229c4","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"3300000035d8d5595b0671412b000000000035","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"3d488d41aaeb5661974952080abef2fd","SHA1":"df01e35e6befc7d65625319f17397b861e618d56","SHA256":"3d6ef38b5d26773dc77392e415e88b3a744b30ea9f2081e2a992b5818db2f0c4","SHA384":"ac7c06916fe4a00307834b2499f12799d3fe463c2e63d1881df669a2786745beeee2b3a7d87cd6bc9e4fe293c22e5a59"}},{"Subject":"C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Certification Authority","ValidFrom":"2000-05-30 10:48:38","ValidTo":"2020-05-30 10:48:38","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.12","IsCertificateAuthority":true,"SerialNumber":"2766ee56eb49f38eabd770a2fc84de22","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"be5bfbe77379139ac5cdcbcc8d4d3b34","SHA1":"606b701bc9f448ddbfe6fa63ccb8061b838ee254","SHA256":"0d73a614eef7596cf5a34733f74daf2ccfe4df7b4a40069bf43c43e428264177","SHA384":"7ce102d63c57cb48f80a65d1a5e9b350a7a618482aa5a36775323ca933ddfcb00def83796a6340dec5ebf7596cfd8e5d"}},{"Subject":"C=US, ST=CA, L=Santa Clara, O=Intel Corporation, CN=ND_QV","ValidFrom":"2019-03-27 21:49:54","ValidTo":"2021-03-26 21:49:54","Signature":"2b03535c8db5fa8488a8241590410378f7362874f1b40f0f3750eae22224e9f559d4f703760a9a0530b2869436b78ef40ec4fd88bc1ebe2783b74b2339d011cde8788c4ed967fd4de5f4ccc2af794eed1d8efc0bf6737ccd5db59f64394a68f0a3a152de60b5c5091c6a9913192cccb7168ab4465ac7da62ad6cba49688c4b2340c7e97386ca3a06fd9ffeb114f21cadf7e0c4f0dcd1457b7c1f7d0b0b286f90cffef6d1802d818c73fdf3588c46dc99855f2e80aa329c3fa62f9f941589e016b6cbb775b311a49cbfc1ae5cb906eee8cf9f93e7ae994e7f6069bd6d9b4b071ba7042653eaf235bae020582b9c6ab78a237c05bbbe8f9182631c0f836ad3da9a71ba48e2c3260d002c88c98f1ad0c6d67d259c393129e17fa2913545c1a9bc7a48e18452d2048bcf2d931d996472155dd91338551feb086e3f8ac979745b1652f6cc8efae1c3c1df6983db6a45549a5de477567bc22ed2529adb7db1002b15bd8ab4e91739a3d4d018aa6bc2ac744abcc68690c938ef2a3a3e2b6552944806f6ba7260c3d8d949d29e056e922a581edd28ff12ee03279882a5e389070fa06a1b1a900b9a32e1208c8f00bfc9a2f2dbb96c10071fb05231ed2ba6170b007717ad33c0934c45d6b9690194dcd0212f5cb68c203400a196a218bb20ca645ed6b72cfba8f31cdae8b56b91415973dd46b6dac1e4b268ebbd17de7da59f253b380c41","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":false,"SerialNumber":"5600000a6c1826788c3ae621c1000000000a6c","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"cd868880a6dccf68ec7c1c66ce39d77a","SHA1":"c876af6fba8aa3b9aa12a5cff67a85f1f5a9c580","SHA256":"1982800d0d658202d22e557c8aa3f88a4cc583c35802433aa82eeed007638a7a","SHA384":"cf43cda2e58eb3c0962b122eaa8d459855164cff4282b3d1f054de0139411e53511e50ebfd1dd4ebf29190272472faed"}},{"Subject":"C=US, ST=CA, L=Santa Clara, O=Intel Corporation, CN=Intel External Issuing CA 7B","ValidFrom":"2015-10-28 00:00:00","ValidTo":"2021-06-17 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.12","IsCertificateAuthority":true,"SerialNumber":"069b5e99277284c8767f1368a7deb0f3","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"5578c7331db18bb448db403ad32c94ee","SHA1":"dfcfe5d6087cf830513d705aa701ff957d960298","SHA256":"5b619f82064ace7ecf48d26ce8ae6fa3b52671915fa81ee81cddbe740dd8698b","SHA384":"5fa042c979faba67de861093b4aca808ae4be0fcedf123cb8afe126856c0b6ac3451393048211db8993914c5ff410bd8"}}],"Signer":[{"SerialNumber":"5600000a6c1826788c3ae621c1000000000a6c","Issuer":"C=US, ST=CA, L=Santa Clara, O=Intel Corporation, CN=Intel External Issuing CA 7B","Version":1}]}],"RichPEHeaderHash":{"MD5":"84dfb7245aa6b7f3efec05cfa6559636","SHA1":"695bd45c0e89dcb58253e90c9a43400b03ae2202","SHA256":"3ff178ffbb2c17ce7c3a02ef5943ddf3b580e3e28f6cc59775c5369062a0b9ab"},"Sections":{".text":{"Entropy":6.260751486147612,"Virtual Size":"0x4945"},".rdata":{"Entropy":4.780476060384341,"Virtual Size":"0xed0"},".data":{"Entropy":1.1262035268835313,"Virtual Size":"0x5ca0a0"},".pdata":{"Entropy":4.658699009524359,"Virtual Size":"0x678"},"PAGE":{"Entropy":6.1261566082145595,"Virtual Size":"0x1b71"},"INIT":{"Entropy":5.77082076544506,"Virtual Size":"0xb4c"},".rsrc":{"Entropy":3.441712631209701,"Virtual Size":"0x3f8"},".reloc":{"Entropy":1.2072398645622464,"Virtual Size":"0x60"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2019-04-24 07:50:56","Imphash":"2cf48a541dc193e91bb2a831adcf278e","LoadsDespiteHVCI":"FALSE"},{"Filename":"iQVW64.SYS","MD5":"31a4631d77b2357ac9618e2a60021f11","SHA1":"637d0de7fa2a06e462dad40a575cb0fa4a38d377","SHA256":"a566af57d88f37fa033e64b1d8abbd3ffdacaba260475fbbc8dab846a824eff5","Authentihash":{"MD5":"67bc13f641db5e7b40ffd8fd33b7d9c6","SHA1":"627e4a44e5a5da00cdb8ae2a538175ded6a9a113","SHA256":"9f94d9180104c820c3d27f03e20f5bbc9d2a5bc2ae6e74baf2a848f2f1790ec8"},"Description":"Intel(R) Network Adapter Diagnostic Driver","Company":"Intel Corporation ","InternalName":"iQVW64.SYS","OriginalFilename":"iQVW64.SYS","FileVersion":"1.03.0.4 built by: WinDDK","Product":"Intel(R) iQVW64.SYS","ProductVersion":"1.03.0.4","Copyright":"Copyright (C) 2002-2006 Intel Corporation All Rights Reserved.","MachineType":"AMD64","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["IoCreateSymbolicLink","IoCreateDevice","IofCompleteRequest","ExAllocatePoolWithTag","ExFreePoolWithTag","MmGetPhysicalAddress","DbgPrint","sprintf","vsprintf","IoFreeMdl","MmMapLockedPages","MmBuildMdlForNonPagedPool","IoAllocateMdl","MmUnmapIoSpace","MmUnmapLockedPages","MmAllocateContiguousMemory","MmFreeContiguousMemory","RtlInitUnicodeString","ObfDereferenceObject","KeWaitForSingleObject","IofCallDriver","IoBuildSynchronousFsdRequest","KeInitializeEvent","ZwClose","RtlFreeAnsiString","strstr","RtlUnicodeStringToAnsiString","ZwEnumerateValueKey","ZwOpenKey","wcsncpy","IoGetDeviceObjectPointer","IoGetDeviceInterfaces","ObReferenceObjectByPointer","KeBugCheckEx","IoDeleteSymbolicLink","MmMapIoSpace","IoDeleteDevice","KeStallExecutionProcessor","KeQueryPerformanceCounter"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer , G2","ValidFrom":"2007-06-15 00:00:00","ValidTo":"2012-06-14 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"3825d7faf861af9ef490e726b5d65ad5","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"d6c7684e9aaa508cf268335f83afe040","SHA1":"18066d20ad92409c567cdfde745279ff71c75226","SHA256":"a612fb22ce8be6dab75e47c98508f98496583e79c9c97b936a8caee9ea9f3fff","SHA384":"35c249d6ad0261a6229b2a727067ac6ba32a5d24b30b9249051f748c7735fbe2ec2ef26a702c50df1790fbe32a65aee7"}},{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA","ValidFrom":"2003-12-04 00:00:00","ValidTo":"2013-12-03 23:59:59","Signature":"4a6bf9ea58c2441c318979992b96bf82ac01d61c4ccdb08a586edf0829a35ec8ca9313e704520def47272f0038b0e4c9934e9ad4226215f73f37214f703180f18b3887b3e8e89700fecf55964e24d2a9274e7aaeb76141f32acee7c9d95eddbb2b853eb59db5d9e157ffbeb4c57ef5cf0c9ef097fe2bd33b521b1b3827f73f4a","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"47bf1995df8d524643f7db6d480d31a4","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"518d2ea8a21e879c942d504824ac211c","SHA1":"21ce87d827077e61abddf2beba69fde5432ea031","SHA256":"1ec3b4f02e03930a470020e0e48d24b84678bb558f46182888d870541f5e25c7","SHA384":"53e346bbde23779a5d116cc9d86fdd71c97b1f1b343439f8a11aa1d3c87af63864bb8488a5aeb2d0c26a6a1e0b15f03f"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009,2 CA","ValidFrom":"2009-05-21 00:00:00","ValidTo":"2019-05-20 23:59:59","Signature":"8b03c0dd94d841a26169b015a878c730c6903c7e42f724b6e4837317047f04109ca1e2fa812febc0ca44e772e050b6551020836e9692e49a516ab43731dca52deb8c00c71d4fe74d32ba85f84ebefa675565f06abe7aca64381a101078457631f3867a030f60c2b35d9df68b6676821b59e183e5bd49a53856e5de41770e580f","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"655226e1b22e18e1590f2985ac22e75c","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"650704c342850095f3288eaf791147d4","SHA1":"4cdc38c800761463749c3cbd94a12f32e49877bf","SHA256":"07b8f662558ec85b71b43a79c6e94698144f4ced2308af21e7ba1e5d461da214","SHA384":"2a271d052213438467d09d60eaa4010c8642fff3eb0070e0cf9969428713c8fdc066b90996d594dd3136f5bd0af5a22a"}},{"Subject":"C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority","ValidFrom":"2006-05-23 17:01:29","ValidTo":"2016-05-23 17:11:29","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"610c120600000000001b","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"53c41bc1164e09e0cd1617a5bf913efd","SHA1":"93c03aac8951d494ecd5696b1c08658541b18727","SHA256":"40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b","SHA384":"f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"}},{"Subject":"C=US, ST=Oregon, L=Hillsboro, O=Intel Corporation, OU=Digital ID Class 3 , Microsoft Software Validation v2, OU=LAN Access Division, CN=Intel Corporation","ValidFrom":"2009-05-26 00:00:00","ValidTo":"2012-05-30 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"058258571670ab2b1bac50679cec49a1","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"2db2db8ad770f96c4ba2de12f5336353","SHA1":"d70fb0f12785771b5eff8029e0801fbe0caca8b3","SHA256":"ebce0797330e680af51b1a399d34575a8bcac049d55b1323097e17147b430538","SHA384":"b1480302c0412127620d79bc13eba100191c2458e63df9ae6987481db2ca14de7530211e195540d9b30bc7390a44fec0"}}],"Signer":[{"SerialNumber":"058258571670ab2b1bac50679cec49a1","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009,2 CA","Version":1}]}],"RichPEHeaderHash":{"MD5":"4521e9ed78c16f8d1e49a1981dfb32eb","SHA1":"557230bdf881a5a09523f4b063c81e10594ee183","SHA256":"4d270337cbd39f54b308a8b11869c2d85075acb846ce369f90aeceb8dd87782f"},"Sections":{".text":{"Entropy":6.3188990871158195,"Virtual Size":"0x4545"},".rdata":{"Entropy":4.716285554861738,"Virtual Size":"0x7fc"},".data":{"Entropy":0.30140680731160896,"Virtual Size":"0x5c9ec0"},".pdata":{"Entropy":4.308481594389347,"Virtual Size":"0x438"},"INIT":{"Entropy":5.829703465693649,"Virtual Size":"0x79c"},".rsrc":{"Entropy":3.411600288391384,"Virtual Size":"0x3f8"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2010-09-02 01:02:32","Imphash":"5c77661ac2951da388949d9a834eb694","LoadsDespiteHVCI":"FALSE"},{"Filename":"iQVW64.SYS","MD5":"7c22b7686c75a2bb7409b3c392cc791a","SHA1":"bed5bad7f405aa828a146c7f71d09c31d0c32051","SHA256":"a59c40e7470b7003e8adfee37c77606663e78d7e3f2ebb8d60910af19924d8df","Authentihash":{"MD5":"1789a16d20ca2b55f491ad71848166a2","SHA1":"2cbfe4ad0e1231ff3e19c19ca9311d952ce170b7","SHA256":"785e87bc23a1353fe0726554fd009aca69c320a98445a604a64e23ab45108087"},"Description":"Intel(R) Network Adapter Diagnostic Driver","Company":"Intel Corporation ","InternalName":"iQVW64.SYS","OriginalFilename":"iQVW64.SYS","FileVersion":"1.03.0.7 built by: WinDDK","Product":"Intel(R) iQVW64.SYS","ProductVersion":"1.03.0.7","Copyright":"Copyright (C) 2002-2013 Intel Corporation All Rights Reserved.","MachineType":"AMD64","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["IoCreateSymbolicLink","IoCreateDevice","IofCompleteRequest","ExAllocatePoolWithTag","ExFreePoolWithTag","MmGetPhysicalAddress","DbgPrint","strncpy","vsprintf","IoFreeMdl","MmMapLockedPagesSpecifyCache","MmBuildMdlForNonPagedPool","IoAllocateMdl","MmUnmapIoSpace","MmUnmapLockedPages","MmAllocateContiguousMemory","MmFreeContiguousMemory","RtlInitUnicodeString","ObfDereferenceObject","KeWaitForSingleObject","IofCallDriver","IoBuildSynchronousFsdRequest","KeInitializeEvent","ZwClose","RtlFreeAnsiString","strstr","RtlUnicodeStringToAnsiString","ZwEnumerateValueKey","ZwOpenKey","wcsncpy","IoGetDeviceObjectPointer","IoGetDeviceInterfaces","ObReferenceObjectByPointer","KeBugCheckEx","IoDeleteSymbolicLink","MmMapIoSpace","IoDeleteDevice","KeStallExecutionProcessor","KeQueryPerformanceCounter"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA , G2","ValidFrom":"2012-12-21 00:00:00","ValidTo":"2020-12-30 23:59:59","Signature":"03099b8f79ef7f5930aaef68b5fae3091dbb4f82065d375fa6529f168dea1c9209446ef56deb587c30e8f9698d23730b126f47a9ae3911f82ab19bb01ac38eeb599600adce0c4db2d031a6085c2a7afce27a1d574ca86518e979406225966ec7c7376a8321088e41eaddd9573f1d7749872a16065ea6386a2212a35119837eb6","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"7e93ebfb7cc64e59ea4b9a77d406fc3b","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"d0785ad36e427c92b19f6826ab1e8020","SHA1":"365b7a9c21bd9373e49052c3e7b3e4646ddd4d43","SHA256":"c2abb7484da91a658548de089d52436175fdb760a1387d225611dc0613a1e2ff","SHA384":"eab4fe5ef90e0de4a6aa3a27769a5e879f588df5e4785aa4104debd1f81e19ea56d33e3a16e5facf99f68b5d8e3d287b"}},{"Subject":"C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer , G4","ValidFrom":"2012-10-18 00:00:00","ValidTo":"2020-12-29 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"0ecff438c8febf356e04d86a981b1a50","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"e9d38360b914c8863f6cba3ee58764d3","SHA1":"4cba8eae47b6bf76f20b3504b98b8f062694a89b","SHA256":"88901d86a4cc1f1bb193d08e1fb63d27452e63f83e228c657ab1a92e4ade3976","SHA384":"e9f2a75334a9e336c5a4712eadee88d0374b0fdc273262f4e65c9040ad2793067cc076696db5279a478773485e285652"}},{"Subject":"C=US, ST=Oregon, L=Hillsboro, O=Intel Corporation, OU=Digital ID Class 3 , Microsoft Software Validation v2, OU=LAN Access Division, CN=Intel Corporation","ValidFrom":"2012-05-17 00:00:00","ValidTo":"2015-05-30 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"2776ab5cf2d09872f1ad05fbc3f21a87","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"fa13cce803fbe5b5256430f9bfee76de","SHA1":"ce566e0c55909bbf2bb0d43280ee78b4ba3d582f","SHA256":"7959ee2235998f36a9cdbd9b5ef7759e5846e0eecd7e868c5f042360a25482aa","SHA384":"82fcff4effee6971cfc9d0d684d13479eac42b53f23590e0df172e2804ff94abc1fbf0e2b6af0cf05b099fc97cf26789"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. , For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority , G5","ValidFrom":"2011-02-22 19:25:17","ValidTo":"2021-02-22 19:35:17","Signature":"812a82168c34672be503eb347b8ca2a3508af45586f11e8c8eae7dee0319ce72951848ad6211fd20fd3f4706015ae2e06f8c152c4e3c6a506c0b36a3cf7a0d9c42bc5cf819d560e369e6e22341678c6883762b8f93a32ab57fbe59fba9c9b2268fcaa2f3821b983e919527978661ee5b5d076bcd86a8e26580a8e215e2b2be23056aba0cf347934daca48c077939c061123a050d89a3ec9f578984fbecca7c47661491d8b60f195de6b84aacbc47c8714396e63220a5dc7786fd3ce38b71db7b9b03fcb71d3264eb1652a043a3fa2ead59924e7cc7f233424838513a7c38c71b242228401e1a461f17db18f7f027356cb863d9cdb9645d2ba55eefc629b4f2c7f821cc04ba57fd01b6abc667f9e7d3997ff4f522fa72f5fdff3a1c423aa1f98018a5ee8d1cd4669e4501feaaeefffb178f30f7f1cd29c59decb5d549003d85b8cbbb933a276a49c030ae66c9f723283276f9a48356c848ce5a96aaa0cc0cc47fb48e97af6de35427c39f86c0d6e473089705dbd054625e0348c2d59f7fa7668cd09db04fd4d3985f4b7ac97fb22952d01280c70f54b61e67cdc6a06c110384d34875e72afeb03b6e0a3aa66b769905a3f177686133144706fc537f52bd92145c4a246a678caf8d90aad0f679211b93267cc3ce1ebd883892ae45c6196a4950b305f8ae59378a6a250394b1598150e8ba8380b72335f476b9671d5918ad208d94","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"611993e400000000001c","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"78a717e082dcc1cda3458d917e677d14","SHA1":"4a872e0e51f9b304469cd1dedb496ee9b8b983a4","SHA256":"317fa1d234ebc49040ebc5e8746f8997471496051b185a91bdd9dfbb23fab5f8","SHA384":"b71052da4eb9157c8c1a5d7f55df19d69b9128598b72fcca608e5b7cc7d64c43c5504b9c86355a6dc22ee40c88cc385c"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","ValidFrom":"2010-02-08 00:00:00","ValidTo":"2020-02-07 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"5200e5aa2556fc1a86ed96c9d44b33c7","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"b30c31a572b0409383ed3fbe17e56e81","SHA1":"4843a82ed3b1f2bfbee9671960e1940c942f688d","SHA256":"03cda47a6e654ed85d932714fc09ce4874600eda29ec6628cfbaeb155cab78c9","SHA384":"bbda8407c4f9fc4e54d772f1c7fb9d30bc97e1f97ecd51c443063d1fa0644e266328781776cd5c44896c457c75f4d7da"}}],"Signer":[{"SerialNumber":"2776ab5cf2d09872f1ad05fbc3f21a87","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","Version":1}]}],"RichPEHeaderHash":{"MD5":"4521e9ed78c16f8d1e49a1981dfb32eb","SHA1":"557230bdf881a5a09523f4b063c81e10594ee183","SHA256":"4d270337cbd39f54b308a8b11869c2d85075acb846ce369f90aeceb8dd87782f"},"Sections":{".text":{"Entropy":6.312074870341971,"Virtual Size":"0x4615"},".rdata":{"Entropy":4.765757053328623,"Virtual Size":"0x7c0"},".data":{"Entropy":0.30140680731160896,"Virtual Size":"0x5c9ec0"},".pdata":{"Entropy":4.307215755522235,"Virtual Size":"0x408"},"INIT":{"Entropy":5.835829282045137,"Virtual Size":"0x7a8"},".rsrc":{"Entropy":3.423830950438437,"Virtual Size":"0x3f8"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2013-11-14 10:22:43","Imphash":"55db306bc2be3ff71a6b91fd9db051b8","LoadsDespiteHVCI":"FALSE"},{"Filename":"iQVW64.SYS","MD5":"477e02a8e31cde2e76a8fb020df095c2","SHA1":"9449f211c3c47821b638513d239e5f2c778dc523","SHA256":"b51ddcf8309c80384986dda9b11bf7856b030e3e885b0856efdb9e84064917e5","Authentihash":{"MD5":"99f8e77dfc84cbd445500575ec9ab78a","SHA1":"154c4d80f243b40dcebc2d5a2f3cee968d2f6f0c","SHA256":"7cc54914473d7c75a483c5672655bd9df2ce20b556a0d92c6e4cb8722ab1647b"},"Description":"Intel(R) Network Adapter Diagnostic Driver","Company":"Intel Corporation ","InternalName":"iQVW64.SYS","OriginalFilename":"iQVW64.SYS","FileVersion":"1.03.0.4 built by: WinDDK","Product":"Intel(R) iQVW64.SYS","ProductVersion":"1.03.0.4","Copyright":"Copyright (C) 2002-2006 Intel Corporation All Rights Reserved.","MachineType":"AMD64","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["IoCreateSymbolicLink","IoCreateDevice","IofCompleteRequest","ExAllocatePoolWithTag","ExFreePoolWithTag","MmGetPhysicalAddress","DbgPrint","sprintf","vsprintf","IoFreeMdl","MmMapLockedPages","MmBuildMdlForNonPagedPool","IoAllocateMdl","MmUnmapIoSpace","MmUnmapLockedPages","MmAllocateContiguousMemory","MmFreeContiguousMemory","RtlInitUnicodeString","ObfDereferenceObject","KeWaitForSingleObject","IofCallDriver","IoBuildSynchronousFsdRequest","KeInitializeEvent","ZwClose","RtlFreeAnsiString","strstr","RtlUnicodeStringToAnsiString","ZwEnumerateValueKey","ZwOpenKey","wcsncpy","IoGetDeviceObjectPointer","IoGetDeviceInterfaces","ObReferenceObjectByPointer","KeBugCheckEx","IoDeleteSymbolicLink","MmMapIoSpace","IoDeleteDevice","KeStallExecutionProcessor","KeQueryPerformanceCounter"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer , G2","ValidFrom":"2007-06-15 00:00:00","ValidTo":"2012-06-14 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"3825d7faf861af9ef490e726b5d65ad5","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"d6c7684e9aaa508cf268335f83afe040","SHA1":"18066d20ad92409c567cdfde745279ff71c75226","SHA256":"a612fb22ce8be6dab75e47c98508f98496583e79c9c97b936a8caee9ea9f3fff","SHA384":"35c249d6ad0261a6229b2a727067ac6ba32a5d24b30b9249051f748c7735fbe2ec2ef26a702c50df1790fbe32a65aee7"}},{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA","ValidFrom":"2003-12-04 00:00:00","ValidTo":"2013-12-03 23:59:59","Signature":"4a6bf9ea58c2441c318979992b96bf82ac01d61c4ccdb08a586edf0829a35ec8ca9313e704520def47272f0038b0e4c9934e9ad4226215f73f37214f703180f18b3887b3e8e89700fecf55964e24d2a9274e7aaeb76141f32acee7c9d95eddbb2b853eb59db5d9e157ffbeb4c57ef5cf0c9ef097fe2bd33b521b1b3827f73f4a","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"47bf1995df8d524643f7db6d480d31a4","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"518d2ea8a21e879c942d504824ac211c","SHA1":"21ce87d827077e61abddf2beba69fde5432ea031","SHA256":"1ec3b4f02e03930a470020e0e48d24b84678bb558f46182888d870541f5e25c7","SHA384":"53e346bbde23779a5d116cc9d86fdd71c97b1f1b343439f8a11aa1d3c87af63864bb8488a5aeb2d0c26a6a1e0b15f03f"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009,2 CA","ValidFrom":"2009-05-21 00:00:00","ValidTo":"2019-05-20 23:59:59","Signature":"8b03c0dd94d841a26169b015a878c730c6903c7e42f724b6e4837317047f04109ca1e2fa812febc0ca44e772e050b6551020836e9692e49a516ab43731dca52deb8c00c71d4fe74d32ba85f84ebefa675565f06abe7aca64381a101078457631f3867a030f60c2b35d9df68b6676821b59e183e5bd49a53856e5de41770e580f","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"655226e1b22e18e1590f2985ac22e75c","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"650704c342850095f3288eaf791147d4","SHA1":"4cdc38c800761463749c3cbd94a12f32e49877bf","SHA256":"07b8f662558ec85b71b43a79c6e94698144f4ced2308af21e7ba1e5d461da214","SHA384":"2a271d052213438467d09d60eaa4010c8642fff3eb0070e0cf9969428713c8fdc066b90996d594dd3136f5bd0af5a22a"}},{"Subject":"C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority","ValidFrom":"2006-05-23 17:01:29","ValidTo":"2016-05-23 17:11:29","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"610c120600000000001b","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"53c41bc1164e09e0cd1617a5bf913efd","SHA1":"93c03aac8951d494ecd5696b1c08658541b18727","SHA256":"40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b","SHA384":"f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"}},{"Subject":"C=US, ST=Oregon, L=Hillsboro, O=Intel Corporation, OU=Digital ID Class 3 , Microsoft Software Validation v2, OU=LAN Access Division, CN=Intel Corporation","ValidFrom":"2009-05-26 00:00:00","ValidTo":"2012-05-30 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"058258571670ab2b1bac50679cec49a1","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"2db2db8ad770f96c4ba2de12f5336353","SHA1":"d70fb0f12785771b5eff8029e0801fbe0caca8b3","SHA256":"ebce0797330e680af51b1a399d34575a8bcac049d55b1323097e17147b430538","SHA384":"b1480302c0412127620d79bc13eba100191c2458e63df9ae6987481db2ca14de7530211e195540d9b30bc7390a44fec0"}}],"Signer":[{"SerialNumber":"058258571670ab2b1bac50679cec49a1","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009,2 CA","Version":1}]}],"RichPEHeaderHash":{"MD5":"4521e9ed78c16f8d1e49a1981dfb32eb","SHA1":"557230bdf881a5a09523f4b063c81e10594ee183","SHA256":"4d270337cbd39f54b308a8b11869c2d85075acb846ce369f90aeceb8dd87782f"},"Sections":{".text":{"Entropy":6.319006489194584,"Virtual Size":"0x4545"},".rdata":{"Entropy":4.717552023145485,"Virtual Size":"0x7fc"},".data":{"Entropy":0.30140680731160896,"Virtual Size":"0x5c9ec0"},".pdata":{"Entropy":4.308481594389347,"Virtual Size":"0x438"},"INIT":{"Entropy":5.832969298181631,"Virtual Size":"0x79c"},".rsrc":{"Entropy":3.411600288391384,"Virtual Size":"0x3f8"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2010-10-28 10:22:55","Imphash":"5c77661ac2951da388949d9a834eb694","LoadsDespiteHVCI":"FALSE"},{"Filename":"iQVW64.SYS","MD5":"ce67e51b8c0370d1bfe421b79fa8b656","SHA1":"4885cd221fa1ea330b9e4c1702be955d68bd3f6a","SHA256":"cff9aa9046bdfd781d34f607d901a431a51bb7e5f48f4f681cc743b2cdedc98c","Authentihash":{"MD5":"02eedc6afdeb843f391a69611266a838","SHA1":"9dae306ebc30a8c2f160e3f6e726fcd3e4f92280","SHA256":"727666434d5ea292a7631d0944edd36097db12862730996ce8a3f052be04a2cd"},"Description":"Intel(R) Network Adapter Diagnostic Driver","Company":"Intel Corporation ","InternalName":"iQVW64.SYS","OriginalFilename":"iQVW64.SYS","FileVersion":"1.03.0.4 built by: WinDDK","Product":"Intel(R) iQVW64.SYS","ProductVersion":"1.03.0.4","Copyright":"Copyright (C) 2002-2006 Intel Corporation All Rights Reserved.","MachineType":"AMD64","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["IoCreateSymbolicLink","IoCreateDevice","IofCompleteRequest","ExAllocatePoolWithTag","ExFreePoolWithTag","MmGetPhysicalAddress","DbgPrint","sprintf","vsprintf","IoFreeMdl","MmMapLockedPages","MmBuildMdlForNonPagedPool","IoAllocateMdl","MmUnmapIoSpace","MmUnmapLockedPages","MmAllocateContiguousMemory","MmFreeContiguousMemory","RtlInitUnicodeString","ObfDereferenceObject","KeWaitForSingleObject","IofCallDriver","IoBuildSynchronousFsdRequest","KeInitializeEvent","ZwClose","RtlFreeAnsiString","strstr","RtlUnicodeStringToAnsiString","ZwEnumerateValueKey","ZwOpenKey","wcsncpy","IoGetDeviceObjectPointer","IoGetDeviceInterfaces","ObReferenceObjectByPointer","KeBugCheckEx","IoDeleteSymbolicLink","MmMapIoSpace","IoDeleteDevice","KeStallExecutionProcessor","KeQueryPerformanceCounter"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer , G2","ValidFrom":"2007-06-15 00:00:00","ValidTo":"2012-06-14 23:59:59","Signature":"50c54bc82480dfe40d24c2de1ab1a102a1a6822d0c831581370a820e2cb05a1761b5d805fe88dbf19191b3561a40a6eb92be3839b07536743a984fe437ba9989ca95421db0b9c7a08d57e0fad5640442354e01d133a217c84daa27c7f2e1864c02384d8378c6fc53e0ebe00687dda4969e5e0c98e2a5bebf8285c360e1dfad28d8c7a54b64dac71b5bbdac3908d53822a1338b2f8a9aebbc07213f44410907b5651c24bc48d34480eba1cfc902b414cf54c716a3805cf9793e5d727d88179e2c43a2ca53ce7d3df62a3ab84f9400a56d0a835df95e53f418b3570f70c3fbf5ad95a00e17dec4168060c90f2b6e8604f1ebf47827d105c5ee345b5eb94932f233","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"3825d7faf861af9ef490e726b5d65ad5","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"d6c7684e9aaa508cf268335f83afe040","SHA1":"18066d20ad92409c567cdfde745279ff71c75226","SHA256":"a612fb22ce8be6dab75e47c98508f98496583e79c9c97b936a8caee9ea9f3fff","SHA384":"35c249d6ad0261a6229b2a727067ac6ba32a5d24b30b9249051f748c7735fbe2ec2ef26a702c50df1790fbe32a65aee7"}},{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA","ValidFrom":"2003-12-04 00:00:00","ValidTo":"2013-12-03 23:59:59","Signature":"4a6bf9ea58c2441c318979992b96bf82ac01d61c4ccdb08a586edf0829a35ec8ca9313e704520def47272f0038b0e4c9934e9ad4226215f73f37214f703180f18b3887b3e8e89700fecf55964e24d2a9274e7aaeb76141f32acee7c9d95eddbb2b853eb59db5d9e157ffbeb4c57ef5cf0c9ef097fe2bd33b521b1b3827f73f4a","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"47bf1995df8d524643f7db6d480d31a4","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"518d2ea8a21e879c942d504824ac211c","SHA1":"21ce87d827077e61abddf2beba69fde5432ea031","SHA256":"1ec3b4f02e03930a470020e0e48d24b84678bb558f46182888d870541f5e25c7","SHA384":"53e346bbde23779a5d116cc9d86fdd71c97b1f1b343439f8a11aa1d3c87af63864bb8488a5aeb2d0c26a6a1e0b15f03f"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009,2 CA","ValidFrom":"2009-05-21 00:00:00","ValidTo":"2019-05-20 23:59:59","Signature":"8b03c0dd94d841a26169b015a878c730c6903c7e42f724b6e4837317047f04109ca1e2fa812febc0ca44e772e050b6551020836e9692e49a516ab43731dca52deb8c00c71d4fe74d32ba85f84ebefa675565f06abe7aca64381a101078457631f3867a030f60c2b35d9df68b6676821b59e183e5bd49a53856e5de41770e580f","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"655226e1b22e18e1590f2985ac22e75c","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"650704c342850095f3288eaf791147d4","SHA1":"4cdc38c800761463749c3cbd94a12f32e49877bf","SHA256":"07b8f662558ec85b71b43a79c6e94698144f4ced2308af21e7ba1e5d461da214","SHA384":"2a271d052213438467d09d60eaa4010c8642fff3eb0070e0cf9969428713c8fdc066b90996d594dd3136f5bd0af5a22a"}},{"Subject":"C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority","ValidFrom":"2006-05-23 17:01:29","ValidTo":"2016-05-23 17:11:29","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"610c120600000000001b","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"53c41bc1164e09e0cd1617a5bf913efd","SHA1":"93c03aac8951d494ecd5696b1c08658541b18727","SHA256":"40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b","SHA384":"f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"}},{"Subject":"C=US, ST=Oregon, L=Hillsboro, O=Intel Corporation, OU=Digital ID Class 3 , Microsoft Software Validation v2, OU=LAN Access Division, CN=Intel Corporation","ValidFrom":"2009-05-26 00:00:00","ValidTo":"2012-05-30 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"058258571670ab2b1bac50679cec49a1","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"2db2db8ad770f96c4ba2de12f5336353","SHA1":"d70fb0f12785771b5eff8029e0801fbe0caca8b3","SHA256":"ebce0797330e680af51b1a399d34575a8bcac049d55b1323097e17147b430538","SHA384":"b1480302c0412127620d79bc13eba100191c2458e63df9ae6987481db2ca14de7530211e195540d9b30bc7390a44fec0"}}],"Signer":[{"SerialNumber":"058258571670ab2b1bac50679cec49a1","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009,2 CA","Version":1}]}],"RichPEHeaderHash":{"MD5":"4521e9ed78c16f8d1e49a1981dfb32eb","SHA1":"557230bdf881a5a09523f4b063c81e10594ee183","SHA256":"4d270337cbd39f54b308a8b11869c2d85075acb846ce369f90aeceb8dd87782f"},"Sections":{".text":{"Entropy":6.319295269173402,"Virtual Size":"0x4545"},".rdata":{"Entropy":4.712697675298715,"Virtual Size":"0x7fc"},".data":{"Entropy":0.30140680731160896,"Virtual Size":"0x5c9ec0"},".pdata":{"Entropy":4.308481594389347,"Virtual Size":"0x438"},"INIT":{"Entropy":5.834783593648872,"Virtual Size":"0x79c"},".rsrc":{"Entropy":3.411600288391384,"Virtual Size":"0x3f8"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2010-08-26 09:48:52","Imphash":"5c77661ac2951da388949d9a834eb694","LoadsDespiteHVCI":"FALSE"},{"Filename":"iQVW64.SYS","MD5":"2cc65e805757cfc4f87889cdceb546cd","SHA1":"7c625de858710d3673f6cb0cd8d0643d5422c688","SHA256":"d1f4949f76d8ac9f2fa844d16b1b45fb1375d149d46e414e4a4c9424dc66c91f","Authentihash":{"MD5":"3e2ca18cf98afa0faac4da0fb1eca408","SHA1":"15a85aa659248751080984a29dc848c37e900002","SHA256":"ccc65f108ad084af41725e42efc3c3c539f89a474c1b1293b111a83e3eba216a"},"Description":"Intel(R) Network Adapter Diagnostic Driver","Company":"Intel Corporation ","InternalName":"iQVW64.SYS","OriginalFilename":"iQVW64.SYS","FileVersion":"1.03.1.2 built by: WinDDK","Product":"Intel(R) iQVW64.SYS","ProductVersion":"1.03.1.2","Copyright":"Copyright (C) 2002-2015 Intel Corporation All Rights Reserved.","MachineType":"AMD64","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["IoCreateSymbolicLink","IoCreateDevice","IofCompleteRequest","MmIsAddressValid","ExAllocatePoolWithTag","ExFreePoolWithTag","MmGetPhysicalAddress","DbgPrint","strncpy","vsprintf","IoFreeMdl","MmMapLockedPagesSpecifyCache","MmBuildMdlForNonPagedPool","IoAllocateMdl","MmUnmapIoSpace","MmUnmapLockedPages","MmAllocateContiguousMemory","RtlInitUnicodeString","MmMapIoSpace","ObfDereferenceObject","KeWaitForSingleObject","IofCallDriver","IoBuildSynchronousFsdRequest","KeInitializeEvent","ZwClose","RtlFreeAnsiString","strstr","RtlUnicodeStringToAnsiString","ZwEnumerateValueKey","ZwOpenKey","wcsncpy","IoGetDeviceObjectPointer","IoGetDeviceInterfaces","ObReferenceObjectByPointer","KeBugCheckEx","IoDeleteSymbolicLink","MmFreeContiguousMemory","IoDeleteDevice","KeStallExecutionProcessor","KeQueryPerformanceCounter"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, ST=CA, L=Santa Clara, O=Intel Corporation, CN=Intel(R) INTELNPG1","ValidFrom":"2015-09-28 19:41:01","ValidTo":"2016-09-27 19:41:01","Signature":"2e848fb2550d87edeeacf69dca78bc7ee5e795fd42baa6a313ef275d8d2e759cc65a18cd2377377e94a0ebb35a0102145417defb44dcf18f4dd77ee101906f3246ae512d7bb1e1dc4e40381a2c6ee4b4109167360f93b6694abc8c91dfec6b9da549d30c874b96a7f1217f5a4ee8093a880eb8aafbc2d9b58de2a71e8cb2fcf51d7133cf971410e9de26ad9a1b3516055847e9979af0c1fe4950fcd301d3f4170bf37660e3eb7f30197aad793158fee9958f2772eca1836e57bfd50c2c3dbf6cb6916e56f9a7e262f79d57c75993056f677ff60638475f9980b51f0916fea9e87e96778bb86cbb56425752eed78660e6e026728f8388d1e05f2cf54fd664c17e","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"330000b7c6cfa9df260db5243500020000b7c6","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"d04e62ad536be27b5ae5f53dfe14060b","SHA1":"558dc33cda5a996d71afe98ea75f5d81c358f42b","SHA256":"832c1b2d5269714f6804e13ed6fe068d732b543de00975c9e04dd697bf7be6e1","SHA384":"fde1b110f034d38c2923861b58e91798da1b17afbf0ed367c3fd6ecc708d2795a4d7434367625db81d686337cce199d0"}},{"Subject":"C=US, ST=CA, L=Santa Clara, O=Intel Corporation, CN=Intel External Basic Issuing CA 3B","ValidFrom":"2013-02-08 22:21:23","ValidTo":"2018-02-08 22:31:23","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"612cff88000100000010","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"da9a02953cdcc039174d11b07dd2967d","SHA1":"568cfca269ff49615d305e680988337f0a90bc32","SHA256":"fad628f5236458a9116a99f2d64fb9131a28f9942fca6239a5e7be0dddf4ce9f","SHA384":"5edeab0248f63cdc4c10b748618cd6fa4aa53ffb0ddfd51a2e35de2ea55a56822aa53fa734a46705655e8f5878b24ffd"}},{"Subject":"C=US, O=Intel Corporation, CN=Intel External Basic Policy CA","ValidFrom":"2013-02-01 00:00:00","ValidTo":"2020-05-30 10:48:38","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"79174aa9141736fe15a7ca9f2cff4588","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"6ce466d55ab160317ee9b13522c2a82a","SHA1":"53b052ba209c525233293274854b264bc0f68b73","SHA256":"f71790e057380a0cbafdfc25bc8b3dafd6cfbeb01077bb3d8194e91254a2fc9b","SHA384":"c0cc37f9505ff2bab958c8ef1ea94736efae52bcf5948c866446c46b64fb9f5e603fbad4bc70270ae74e58ac8ab055f9"}},{"Subject":"C=BM, O=QuoVadis Limited, CN=QuoVadis Issuing CA G4","ValidFrom":"2014-05-30 16:35:55","ValidTo":"2021-03-17 18:33:33","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":true,"SerialNumber":"69b2d1ccf02e20dcc95c62894f7f9e5f5fc057bf","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"4e0fbd79a99e4a55f97ef41efee38a9f","SHA1":"114f36d5f22b84de97893469fc00b7035b3ef734","SHA256":"f6dd9683708786a413d4d6a3661fa4e4aeb328adbd181b398b5b6aa02bb0bc16","SHA384":"a26fe570a01b0e15cf94b41ce48ebd39ed9e9d18493d4c117f0fbb5a5b33ed8ef06c069b9638dda957547f0b0645e447"}},{"Subject":"C=US, ST=CA, L=Santa Clara, O=Intel Corporation, OU=Thales TSS ESN:E892,D055,162F, OU=Thales TSS ESN:E892,D055,162F, CN=timestamp.intel.com","ValidFrom":"2015-04-24 21:46:24","ValidTo":"2018-04-24 21:46:23","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":true,"SerialNumber":"28a11e74fc0b8754580f50954c47c94e67754f28","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"990afc9a12be270c0fa6921df0223974","SHA1":"a7025b6889dbdeb4c6770d524d4c80a0a75da5df","SHA256":"6eb4cfbd4f50e31ece8b34937025ca350330cb25367a401a5665e68159b47f13","SHA384":"287f1afb51c586f323b8f42bd6e269051c3aabfd1aaa084650d4d35a42a122489b2cb634c6842981273da17c3d6c8c1d"}},{"Subject":"C=SE, O=AddTrust AB, OU=AddTrust External TTP Network, CN=AddTrust External CA Root","ValidFrom":"2013-08-15 20:26:30","ValidTo":"2023-08-15 20:36:30","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"3300000035d8d5595b0671412b000000000035","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"3d488d41aaeb5661974952080abef2fd","SHA1":"df01e35e6befc7d65625319f17397b861e618d56","SHA256":"3d6ef38b5d26773dc77392e415e88b3a744b30ea9f2081e2a992b5818db2f0c4","SHA384":"ac7c06916fe4a00307834b2499f12799d3fe463c2e63d1881df669a2786745beeee2b3a7d87cd6bc9e4fe293c22e5a59"}}],"Signer":[{"SerialNumber":"330000b7c6cfa9df260db5243500020000b7c6","Issuer":"C=US, ST=CA, L=Santa Clara, O=Intel Corporation, CN=Intel External Basic Issuing CA 3B","Version":1}]}],"RichPEHeaderHash":{"MD5":"b93991aca170b2e53fc8da875f35fb17","SHA1":"a18b9d606191ba9cf8eeb0a6354b3cdb71e92d9e","SHA256":"af46cc3638ff53bbc265d41801940298f3825b98920feb29959c1b3e64750a96"},"Sections":{".text":{"Entropy":6.312822181118576,"Virtual Size":"0x47c5"},".rdata":{"Entropy":4.768779651626512,"Virtual Size":"0x804"},".data":{"Entropy":0.30140680731160896,"Virtual Size":"0x5c9ec0"},".pdata":{"Entropy":4.321873847434394,"Virtual Size":"0x42c"},"INIT":{"Entropy":5.8498641513136365,"Virtual Size":"0x7c4"},".rsrc":{"Entropy":3.4283016769481693,"Virtual Size":"0x3f8"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2015-10-29 17:44:49","Imphash":"a86fb9a41955bda815ab902fb58baa27","LoadsDespiteHVCI":"FALSE"},{"Filename":"iQVW64.SYS","MD5":"e1ebc6c5257a277115a7e61ee3e5e42f","SHA1":"b67945815e40b1cd90708c57c57dab12ed29da83","SHA256":"d74755311d127d0eb7454e56babc2db8dbaa814bc4ba8e2a7754d3e0224778e1","Authentihash":{"MD5":"d6a18c98a17d12e0c8678cd0c1cc5fc6","SHA1":"d3f4a292c29d6c87b4744370a430889cba6ab093","SHA256":"83aad7f91c4ebec89fb63e60ccc05628281aa0439362097bd91c69f4b74470bb"},"Description":"Intel(R) Network Adapter Diagnostic Driver","Company":"Intel Corporation ","InternalName":"iQVW64.SYS","OriginalFilename":"iQVW64.SYS","FileVersion":"1.03.0.4 built by: WinDDK","Product":"Intel(R) iQVW64.SYS","ProductVersion":"1.03.0.4","Copyright":"Copyright (C) 2002-2006 Intel Corporation All Rights Reserved.","MachineType":"IA64","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["KeGetCurrentIrql","DbgPrint","sprintf","vsprintf","IoFreeMdl","MmMapLockedPages","MmBuildMdlForNonPagedPool","IoAllocateMdl","MmUnmapIoSpace","MmUnmapLockedPages","MmAllocateContiguousMemory","MmFreeContiguousMemory","MmMapIoSpace","ObfDereferenceObject","KeWaitForSingleObject","MmGetPhysicalAddress","IoBuildSynchronousFsdRequest","KeInitializeEvent","ZwClose","RtlFreeAnsiString","strstr","RtlUnicodeStringToAnsiString","ZwEnumerateValueKey","ZwOpenKey","wcsncpy","IoGetDeviceObjectPointer","IoGetDeviceInterfaces","ObReferenceObjectByPointer","KeTickCount","KeBugCheckEx","ExFreePoolWithTag","ExAllocatePoolWithTag","IofCompleteRequest","IoCreateDevice","IoCreateSymbolicLink","RtlInitUnicodeString","IoDeleteSymbolicLink","IofCallDriver","IoDeleteDevice","KeStallExecutionProcessor","WRITE_PORT_ULONG","WRITE_PORT_USHORT","WRITE_PORT_UCHAR","READ_PORT_ULONG","READ_PORT_USHORT","READ_PORT_UCHAR","KeQueryPerformanceCounter"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA","ValidFrom":"2003-12-04 00:00:00","ValidTo":"2013-12-03 23:59:59","Signature":"4a6bf9ea58c2441c318979992b96bf82ac01d61c4ccdb08a586edf0829a35ec8ca9313e704520def47272f0038b0e4c9934e9ad4226215f73f37214f703180f18b3887b3e8e89700fecf55964e24d2a9274e7aaeb76141f32acee7c9d95eddbb2b853eb59db5d9e157ffbeb4c57ef5cf0c9ef097fe2bd33b521b1b3827f73f4a","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"47bf1995df8d524643f7db6d480d31a4","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"518d2ea8a21e879c942d504824ac211c","SHA1":"21ce87d827077e61abddf2beba69fde5432ea031","SHA256":"1ec3b4f02e03930a470020e0e48d24b84678bb558f46182888d870541f5e25c7","SHA384":"53e346bbde23779a5d116cc9d86fdd71c97b1f1b343439f8a11aa1d3c87af63864bb8488a5aeb2d0c26a6a1e0b15f03f"}},{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer","ValidFrom":"2003-12-04 00:00:00","ValidTo":"2008-12-03 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"0de92bf0d4d82988183205095e9a7688","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"45c204b8a20f6abb0188d2d38a3fb0c9","SHA1":"cdf3a3c5c2eda4c29621f30fd3154f9f8c765739","SHA256":"e32839dddc0f4ed2474efaf37f59d46db400c700fd19533cb0895a111124bc77","SHA384":"ee9c75832cb252218b3201619852209df490d2ef7a5f7a28afdb37f1c1dd56f4604898838e558f615b1c798d4a488223"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)04, CN=VeriSign Class 3 Code Signing 2004 CA","ValidFrom":"2004-07-16 00:00:00","ValidTo":"2014-07-15 23:59:59","Signature":"ae3a17b84a7b55fa6455ec40a4ed494190999c89bcaf2e1dca7823f91c190f7feb68bc32d98838dedc3fd389b43fb18296f1a45abaed2e26d3de7c016e000a00a4069211480940f91c1879672324e0bbd5e150ae1bf50edde02e81cd80a36c524f9175558aba22f2d2ea4175882f63557d1e545a9559cad93481c05f5ef67ab5","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"4191a15a3978dfcf496566381d4c75c2","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"41011f8d0e7c7a6408334ca387914c61","SHA1":"c7fc1727f5b75a6421a1f95c73bbdb23580c48e5","SHA256":"88dd3952638ee82738c03168e6fd863fe4eab1059ee5e2926ad8cb587c255dc0","SHA384":"a00aa5ed457c41e37967882644d63366bae014f03a986576d8514164d7027acf7d0b5e03d764db2558f60db148954459"}},{"Subject":"C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority","ValidFrom":"2006-05-23 17:01:29","ValidTo":"2016-05-23 17:11:29","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"610c120600000000001b","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"53c41bc1164e09e0cd1617a5bf913efd","SHA1":"93c03aac8951d494ecd5696b1c08658541b18727","SHA256":"40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b","SHA384":"f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"}},{"Subject":"C=US, ST=Oregon, L=Hillsboro, O=Intel Corporation, OU=Digital ID Class 3 , Microsoft Software Validation v2, OU=LAN Access Division, CN=Intel Corporation","ValidFrom":"2006-04-17 00:00:00","ValidTo":"2009-05-31 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"65680c783b728ab2a1880df4232ded32","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"9d44550dc9e1d18ef155513f85ab1f12","SHA1":"5f3d3da7374d8edbe4b2a2534c07682861458b3c","SHA256":"12d4c385c0c5e927fc876523b6874918232c08fdaff8e96e230e622b0841df00","SHA384":"165909cf2d34f32ea49a96d98d2c59d6eaad7a8bfe85f6e34d9da3fa79f40b31e4a88d3040558b876f2154c8970b41c4"}}],"Signer":[{"SerialNumber":"65680c783b728ab2a1880df4232ded32","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)04, CN=VeriSign Class 3 Code Signing 2004 CA","Version":1}]}],"RichPEHeaderHash":{"MD5":"8007fd3858325a29ea818653b1ceb33c","SHA1":"acaff2a453f47e14cf2a396ee2e6ca8cbc5801b7","SHA256":"d95fe490f0c27ddb18fe210abef87a55a90d70c1c3fc71319e0f05ae06894b29"},"Sections":{".text":{"Entropy":5.47466343739527,"Virtual Size":"0x9650"},".rdata":{"Entropy":3.6126138085431725,"Virtual Size":"0x1268"},".pdata":{"Entropy":3.954637417465344,"Virtual Size":"0x3e4"},".srdata":{"Entropy":2.416721292937625,"Virtual Size":"0x298"},".sdata":{"Entropy":2.4838136736919543,"Virtual Size":"0x1b0"},".data":{"Entropy":1.0629748059111717,"Virtual Size":"0x5bb060"},"INIT":{"Entropy":5.6120916993294285,"Virtual Size":"0x92a"},".rsrc":{"Entropy":3.4112316573365282,"Virtual Size":"0x3f8"},".reloc":{"Entropy":0.5046360681325445,"Virtual Size":"0x1170"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2007-06-12 10:31:18","Imphash":"a793af44219650b4dd07d8a19ede33f1","LoadsDespiteHVCI":"FALSE"},{"Filename":"iQVW64.SYS","MD5":"edbf206c27c3aa7d1890899dffcc03ec","SHA1":"3bb1dddb4157b6b8175fc6e1e7c33bef7870c500","SHA256":"de3597ae7196ca8c0750dce296a8a4f58893774f764455a125464766fcc9b3b5","Authentihash":{"MD5":"23b096e4055705b360ce4c802fb5e36c","SHA1":"4d3d6c6932e2882067830b2167b994b169e536d1","SHA256":"e80597ea0d75e9198428c81ca5b4495bf11922dd29852a0a2e63998e36857746"},"Description":"Intel(R) Network Adapter Diagnostic Driver","Company":"Intel Corporation ","InternalName":"iQVW64.SYS","OriginalFilename":"iQVW64.SYS","FileVersion":"1.03.1.0 built by: WinDDK","Product":"Intel(R) iQVW64.SYS","ProductVersion":"1.03.1.0","Copyright":"Copyright (C) 2002-2015 Intel Corporation All Rights Reserved.","MachineType":"AMD64","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["IoCreateSymbolicLink","IoCreateDevice","IofCompleteRequest","MmIsAddressValid","ExAllocatePoolWithTag","ExFreePoolWithTag","MmGetPhysicalAddress","DbgPrint","strncpy","vsprintf","IoFreeMdl","MmMapLockedPagesSpecifyCache","MmBuildMdlForNonPagedPool","IoAllocateMdl","MmUnmapIoSpace","MmUnmapLockedPages","MmAllocateContiguousMemory","RtlInitUnicodeString","MmMapIoSpace","ObfDereferenceObject","KeWaitForSingleObject","IofCallDriver","IoBuildSynchronousFsdRequest","KeInitializeEvent","ZwClose","RtlFreeAnsiString","strstr","RtlUnicodeStringToAnsiString","ZwEnumerateValueKey","ZwOpenKey","wcsncpy","IoGetDeviceObjectPointer","IoGetDeviceInterfaces","ObReferenceObjectByPointer","KeBugCheckEx","IoDeleteSymbolicLink","MmFreeContiguousMemory","IoDeleteDevice","KeStallExecutionProcessor","KeQueryPerformanceCounter"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, ST=CA, L=Santa Clara, O=Intel Corporation, CN=Intel(R) INTELNPG1","ValidFrom":"2015-09-28 19:41:01","ValidTo":"2016-09-27 19:41:01","Signature":"2e848fb2550d87edeeacf69dca78bc7ee5e795fd42baa6a313ef275d8d2e759cc65a18cd2377377e94a0ebb35a0102145417defb44dcf18f4dd77ee101906f3246ae512d7bb1e1dc4e40381a2c6ee4b4109167360f93b6694abc8c91dfec6b9da549d30c874b96a7f1217f5a4ee8093a880eb8aafbc2d9b58de2a71e8cb2fcf51d7133cf971410e9de26ad9a1b3516055847e9979af0c1fe4950fcd301d3f4170bf37660e3eb7f30197aad793158fee9958f2772eca1836e57bfd50c2c3dbf6cb6916e56f9a7e262f79d57c75993056f677ff60638475f9980b51f0916fea9e87e96778bb86cbb56425752eed78660e6e026728f8388d1e05f2cf54fd664c17e","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"330000b7c6cfa9df260db5243500020000b7c6","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"d04e62ad536be27b5ae5f53dfe14060b","SHA1":"558dc33cda5a996d71afe98ea75f5d81c358f42b","SHA256":"832c1b2d5269714f6804e13ed6fe068d732b543de00975c9e04dd697bf7be6e1","SHA384":"fde1b110f034d38c2923861b58e91798da1b17afbf0ed367c3fd6ecc708d2795a4d7434367625db81d686337cce199d0"}},{"Subject":"C=US, ST=CA, L=Santa Clara, O=Intel Corporation, CN=Intel External Basic Issuing CA 3B","ValidFrom":"2013-02-08 22:21:23","ValidTo":"2018-02-08 22:31:23","Signature":"47bb93e603b1d9570eff60e90fc75e86e623f7defa6dc27732ef23f68fcc6f2572d4a94bad11a273bb8bd2b7b8879474890ccc5cea3a9ac0753a97597c22003d7ac7c55be8d49313ec8f94cda833dfa4d79aa1c8d8a3b4497e173a02e96656978d16b470abbc6b1048e7457b13c74d05bca02c0516be067ef679678f9c3454e67eea197714f19d3b55e4339f69bba7a72254512c677d0452aa7b66dea96aad8ca15c7939cd1c85ec890699854627a001576e93365145e15a3a59af5b41f9709dc4160e05e795b401b4931a590b8a31f7b648c86af6228c9e92286fa893b4a772533ada2cfad43dbf09237fdfcc652ad091aa5031c865f53858d4b39be6311008","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"612cff88000100000010","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"da9a02953cdcc039174d11b07dd2967d","SHA1":"568cfca269ff49615d305e680988337f0a90bc32","SHA256":"fad628f5236458a9116a99f2d64fb9131a28f9942fca6239a5e7be0dddf4ce9f","SHA384":"5edeab0248f63cdc4c10b748618cd6fa4aa53ffb0ddfd51a2e35de2ea55a56822aa53fa734a46705655e8f5878b24ffd"}},{"Subject":"C=US, O=Intel Corporation, CN=Intel External Basic Policy CA","ValidFrom":"2013-02-01 00:00:00","ValidTo":"2020-05-30 10:48:38","Signature":"586fbfcd43074213fcb8d0ad8121f28a6fef87bc268a7c00bd680c2b19642c1167b3a9d9790aac395d6500163b53466ea2a6b56799dbe8bfa225ae049511093a2fdeacb73db8bc017430804748544ca0fb6ba8b8a284b7f434e57bcedc5278f4316d4251ae87bf94acbe9616fb55e5798264fdac5038e4dccb812ce7776f9d9b235c7d0403f4079e7ed457e266944debb55c5c629e8c2d83e64614e2a11380fddae0862711922bbd87174fcb19184b5e8ce60dd98f7d23766fa4ffa0ba3de36d37d62638e81a9c2392c8561f1a1a8e00d633a66b95fa821e740b0fa486df23337c9e3614b35ce2a3ed48a08e28f1d74cf6c09bb4f53ca3e5a863a22c08a5d5fe","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"79174aa9141736fe15a7ca9f2cff4588","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"6ce466d55ab160317ee9b13522c2a82a","SHA1":"53b052ba209c525233293274854b264bc0f68b73","SHA256":"f71790e057380a0cbafdfc25bc8b3dafd6cfbeb01077bb3d8194e91254a2fc9b","SHA384":"c0cc37f9505ff2bab958c8ef1ea94736efae52bcf5948c866446c46b64fb9f5e603fbad4bc70270ae74e58ac8ab055f9"}},{"Subject":"C=BM, O=QuoVadis Limited, CN=QuoVadis Issuing CA G4","ValidFrom":"2014-05-30 16:35:55","ValidTo":"2021-03-17 18:33:33","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":true,"SerialNumber":"69b2d1ccf02e20dcc95c62894f7f9e5f5fc057bf","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"4e0fbd79a99e4a55f97ef41efee38a9f","SHA1":"114f36d5f22b84de97893469fc00b7035b3ef734","SHA256":"f6dd9683708786a413d4d6a3661fa4e4aeb328adbd181b398b5b6aa02bb0bc16","SHA384":"a26fe570a01b0e15cf94b41ce48ebd39ed9e9d18493d4c117f0fbb5a5b33ed8ef06c069b9638dda957547f0b0645e447"}},{"Subject":"C=US, ST=CA, L=Santa Clara, O=Intel Corporation, OU=Thales TSS ESN:E892,D055,162F, OU=Thales TSS ESN:E892,D055,162F, CN=timestamp.intel.com","ValidFrom":"2015-04-24 21:46:24","ValidTo":"2018-04-24 21:46:23","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.11","IsCertificateAuthority":true,"SerialNumber":"28a11e74fc0b8754580f50954c47c94e67754f28","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"990afc9a12be270c0fa6921df0223974","SHA1":"a7025b6889dbdeb4c6770d524d4c80a0a75da5df","SHA256":"6eb4cfbd4f50e31ece8b34937025ca350330cb25367a401a5665e68159b47f13","SHA384":"287f1afb51c586f323b8f42bd6e269051c3aabfd1aaa084650d4d35a42a122489b2cb634c6842981273da17c3d6c8c1d"}},{"Subject":"C=SE, O=AddTrust AB, OU=AddTrust External TTP Network, CN=AddTrust External CA Root","ValidFrom":"2013-08-15 20:26:30","ValidTo":"2023-08-15 20:36:30","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"3300000035d8d5595b0671412b000000000035","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"3d488d41aaeb5661974952080abef2fd","SHA1":"df01e35e6befc7d65625319f17397b861e618d56","SHA256":"3d6ef38b5d26773dc77392e415e88b3a744b30ea9f2081e2a992b5818db2f0c4","SHA384":"ac7c06916fe4a00307834b2499f12799d3fe463c2e63d1881df669a2786745beeee2b3a7d87cd6bc9e4fe293c22e5a59"}}],"Signer":[{"SerialNumber":"330000b7c6cfa9df260db5243500020000b7c6","Issuer":"C=US, ST=CA, L=Santa Clara, O=Intel Corporation, CN=Intel External Basic Issuing CA 3B","Version":1}]}],"RichPEHeaderHash":{"MD5":"b93991aca170b2e53fc8da875f35fb17","SHA1":"a18b9d606191ba9cf8eeb0a6354b3cdb71e92d9e","SHA256":"af46cc3638ff53bbc265d41801940298f3825b98920feb29959c1b3e64750a96"},"Sections":{".text":{"Entropy":6.3078070626171385,"Virtual Size":"0x47f5"},".rdata":{"Entropy":4.766735064189019,"Virtual Size":"0x804"},".data":{"Entropy":0.30140680731160896,"Virtual Size":"0x5c9ec0"},".pdata":{"Entropy":4.311882242131907,"Virtual Size":"0x42c"},"INIT":{"Entropy":5.851810349253708,"Virtual Size":"0x7c4"},".rsrc":{"Entropy":3.4182486205222795,"Virtual Size":"0x3f8"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2015-11-24 09:11:47","Imphash":"a86fb9a41955bda815ab902fb58baa27","LoadsDespiteHVCI":"FALSE"},{"Filename":"iQVW64.SYS","MD5":"d0a5f9ace1f0c459cef714156db1de02","SHA1":"540b9f9a232b9d597138b8e0f33d83f5f6e247af","SHA256":"f877296e8506e6a1acbdacdc5085b18c6842320a2775a329d286bac796f08d54","Authentihash":{"MD5":"a3680d04628485c4f6258dc95f4e8e76","SHA1":"a254c2464cf2f39e729125250fa80297de9dcf01","SHA256":"dcd4d4bee76aacba8792df291eb55cc716752bd7ddb51ecb9bec491b02f57c70"},"Description":"Intel(R) Network Adapter Diagnostic Driver","Company":"Intel Corporation ","InternalName":"iQVW64.SYS","OriginalFilename":"iQVW64.SYS","FileVersion":"1.03.1.0 built by: WinDDK","Product":"Intel(R) iQVW64.SYS","ProductVersion":"1.03.1.0","Copyright":"Copyright (C) 2002-2015 Intel Corporation All Rights Reserved.","MachineType":"AMD64","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["IoCreateSymbolicLink","IoCreateDevice","IofCompleteRequest","MmIsAddressValid","ExAllocatePoolWithTag","ExFreePoolWithTag","MmGetPhysicalAddress","DbgPrint","strncpy","vsprintf","IoFreeMdl","MmMapLockedPagesSpecifyCache","MmBuildMdlForNonPagedPool","IoAllocateMdl","MmUnmapIoSpace","MmUnmapLockedPages","MmAllocateContiguousMemory","RtlInitUnicodeString","MmMapIoSpace","ObfDereferenceObject","KeWaitForSingleObject","IofCallDriver","IoBuildSynchronousFsdRequest","KeInitializeEvent","ZwClose","RtlFreeAnsiString","strstr","RtlUnicodeStringToAnsiString","ZwEnumerateValueKey","ZwOpenKey","wcsncpy","IoGetDeviceObjectPointer","IoGetDeviceInterfaces","ObReferenceObjectByPointer","KeBugCheckEx","IoDeleteSymbolicLink","MmFreeContiguousMemory","IoDeleteDevice","KeStallExecutionProcessor","KeQueryPerformanceCounter"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, ST=CA, L=Santa Clara, O=Intel Corporation, CN=Intel(R) Intel Network Drivers","ValidFrom":"2014-09-25 20:18:50","ValidTo":"2015-09-25 20:18:50","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"330000b4a079accd956034e6ae00020000b4a0","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"557387a7a96e3f151cc3c13fa63d68ba","SHA1":"e04a58597b2e5e13751077fd04eba275a3facc0e","SHA256":"b0143064d50e1d87a0c526921c271950fd3e3b29b7efa7adca88d2dc07fee5b2","SHA384":"8e59bc2bf8da2fcea5bd7519805de016bd47645d1950cf07603f165e0d68754f0910384cdf95ecd747a07f2137a1bc10"}},{"Subject":"C=US, ST=CA, L=Santa Clara, O=Intel Corporation, CN=Intel External Basic Issuing CA 3B","ValidFrom":"2013-02-08 22:21:23","ValidTo":"2018-02-08 22:31:23","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"612cff88000100000010","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"da9a02953cdcc039174d11b07dd2967d","SHA1":"568cfca269ff49615d305e680988337f0a90bc32","SHA256":"fad628f5236458a9116a99f2d64fb9131a28f9942fca6239a5e7be0dddf4ce9f","SHA384":"5edeab0248f63cdc4c10b748618cd6fa4aa53ffb0ddfd51a2e35de2ea55a56822aa53fa734a46705655e8f5878b24ffd"}},{"Subject":"C=US, O=Intel Corporation, CN=Intel External Basic Policy CA","ValidFrom":"2013-02-01 00:00:00","ValidTo":"2020-05-30 10:48:38","Signature":"586fbfcd43074213fcb8d0ad8121f28a6fef87bc268a7c00bd680c2b19642c1167b3a9d9790aac395d6500163b53466ea2a6b56799dbe8bfa225ae049511093a2fdeacb73db8bc017430804748544ca0fb6ba8b8a284b7f434e57bcedc5278f4316d4251ae87bf94acbe9616fb55e5798264fdac5038e4dccb812ce7776f9d9b235c7d0403f4079e7ed457e266944debb55c5c629e8c2d83e64614e2a11380fddae0862711922bbd87174fcb19184b5e8ce60dd98f7d23766fa4ffa0ba3de36d37d62638e81a9c2392c8561f1a1a8e00d633a66b95fa821e740b0fa486df23337c9e3614b35ce2a3ed48a08e28f1d74cf6c09bb4f53ca3e5a863a22c08a5d5fe","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"79174aa9141736fe15a7ca9f2cff4588","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"6ce466d55ab160317ee9b13522c2a82a","SHA1":"53b052ba209c525233293274854b264bc0f68b73","SHA256":"f71790e057380a0cbafdfc25bc8b3dafd6cfbeb01077bb3d8194e91254a2fc9b","SHA384":"c0cc37f9505ff2bab958c8ef1ea94736efae52bcf5948c866446c46b64fb9f5e603fbad4bc70270ae74e58ac8ab055f9"}},{"Subject":"C=SG, O=GMO GlobalSign Pte Ltd, CN=GlobalSign TSA for MS Authenticode , G2","ValidFrom":"2015-02-03 00:00:00","ValidTo":"2026-03-03 00:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"112106a081d33fd87ae5824cc16b52094e03","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"a0ac4d48fe852f7b3ed4e623d59a825f","SHA1":"d4db9846bc4d7db142eeb364286f6de7c102420c","SHA256":"78d2e41a13eb4e9171bae2d2adb192cf39210b5231f77cda936bcfbe8c003bdf","SHA384":"990ed96dca5979deeedc98a012279f04efb5559d7e7f5084a12f3802ee9439326557aecefd081cff739b78515b5d7f50"}},{"Subject":"C=BE, O=GlobalSign nv,sa, CN=GlobalSign Timestamping CA , G2","ValidFrom":"2011-04-13 10:00:00","ValidTo":"2028-01-28 12:00:00","Signature":"4e5e56901e46b4d94931f3bb1739281bc216ddfd41dc0905049b6fb2a29ad6992e40990055b5ea3fa52076d38634d417cc553ac782eeefa8babcd8069f1550dfcd167b523a02d7191afdaff0785ce04bc518df3a241edaacb8a95804020730dbb0125efe31bef00448f4f070f83a5e5683cf3dfb0dbcf4c5ed979db9d4dba52784e3389b8ba735864420a43b6da46a0ba183fd28ebdaef28f6cc885dfb0a3b00abe021ebe22f356c0f8e344597eba2f79933357ecb9a8abb454de73f9fc2d98afa65b26ec77e65ffe892e12c31a2f7b02736488f266f3bee4d761f79c3e57f9635bc2d0ecc01b08e7fff518080a792d4b34446648c874f166307314b63b0dff3","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"0400000000012f4ee152d7","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"e140543fe3256027cfa79fc3c19c1776","SHA1":"c655f94eb1ecc93de319fc0c9a2dc6c5ec063728","SHA256":"3ca71e85908ff67368e4dc00253f5691b9e6d50c966e7784143d75fb92aa3448","SHA384":"d9d366f9328f2b55ee19a32cc5fd5148b81d764282fe5dc196c872ae249caa51d2c212ef39f33945dfe0cda81925e326"}},{"Subject":"C=SE, O=AddTrust AB, OU=AddTrust External TTP Network, CN=AddTrust External CA Root","ValidFrom":"2013-08-15 20:26:30","ValidTo":"2023-08-15 20:36:30","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"3300000035d8d5595b0671412b000000000035","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"3d488d41aaeb5661974952080abef2fd","SHA1":"df01e35e6befc7d65625319f17397b861e618d56","SHA256":"3d6ef38b5d26773dc77392e415e88b3a744b30ea9f2081e2a992b5818db2f0c4","SHA384":"ac7c06916fe4a00307834b2499f12799d3fe463c2e63d1881df669a2786745beeee2b3a7d87cd6bc9e4fe293c22e5a59"}}],"Signer":[{"SerialNumber":"330000b4a079accd956034e6ae00020000b4a0","Issuer":"C=US, ST=CA, L=Santa Clara, O=Intel Corporation, CN=Intel External Basic Issuing CA 3B","Version":1}]}],"RichPEHeaderHash":{"MD5":"b93991aca170b2e53fc8da875f35fb17","SHA1":"a18b9d606191ba9cf8eeb0a6354b3cdb71e92d9e","SHA256":"af46cc3638ff53bbc265d41801940298f3825b98920feb29959c1b3e64750a96"},"Sections":{".text":{"Entropy":6.308035787328417,"Virtual Size":"0x47f5"},".rdata":{"Entropy":4.769224140133115,"Virtual Size":"0x804"},".data":{"Entropy":0.30140680731160896,"Virtual Size":"0x5c9ec0"},".pdata":{"Entropy":4.308844204470135,"Virtual Size":"0x42c"},"INIT":{"Entropy":5.8512797646335875,"Virtual Size":"0x7c4"},".rsrc":{"Entropy":3.4182486205222795,"Virtual Size":"0x3f8"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2015-04-22 07:46:58","Imphash":"a86fb9a41955bda815ab902fb58baa27","LoadsDespiteHVCI":"FALSE"},{"Filename":"iQVW64.SYS","MD5":"cebf532d1e3c109418687cb9207516ad","SHA1":"444a2b778e2fc26067c49dde0aff0dcfb85f2b64","SHA256":"ff115cefe624b6ca0b3878a86f6f8b352d1915b65fbbdc33ae15530a96ebdaa7","Authentihash":{"MD5":"e6245e7df4ae8bd2e49e0f41d3fad7fc","SHA1":"73d3fbb52669d917c11808919817d8d97681c6ac","SHA256":"1452103306895429c54ba1735800b8c8694c3165cdef32ca12ed6ce348019292"},"Description":"Intel(R) Network Adapter Diagnostic Driver","Company":"Intel Corporation ","InternalName":"iQVW64.SYS","OriginalFilename":"iQVW64.SYS","FileVersion":"1.03.0.4 built by: WinDDK","Product":"Intel(R) iQVW64.SYS","ProductVersion":"1.03.0.4","Copyright":"Copyright (C) 2002-2006 Intel Corporation All Rights Reserved.","MachineType":"IA64","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["KeGetCurrentIrql","DbgPrint","sprintf","vsprintf","IoFreeMdl","MmMapLockedPages","MmBuildMdlForNonPagedPool","IoAllocateMdl","MmUnmapIoSpace","MmUnmapLockedPages","MmAllocateContiguousMemory","MmFreeContiguousMemory","MmMapIoSpace","ObfDereferenceObject","KeWaitForSingleObject","MmGetPhysicalAddress","IoBuildSynchronousFsdRequest","KeInitializeEvent","ZwClose","RtlFreeAnsiString","strstr","RtlUnicodeStringToAnsiString","ZwEnumerateValueKey","ZwOpenKey","wcsncpy","IoGetDeviceObjectPointer","IoGetDeviceInterfaces","ObReferenceObjectByPointer","KeTickCount","KeBugCheckEx","ExFreePoolWithTag","ExAllocatePoolWithTag","IofCompleteRequest","IoCreateDevice","IoCreateSymbolicLink","RtlInitUnicodeString","IoDeleteSymbolicLink","IofCallDriver","IoDeleteDevice","KeStallExecutionProcessor","WRITE_PORT_ULONG","WRITE_PORT_USHORT","WRITE_PORT_UCHAR","READ_PORT_ULONG","READ_PORT_USHORT","READ_PORT_UCHAR","KeQueryPerformanceCounter"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA","ValidFrom":"2003-12-04 00:00:00","ValidTo":"2013-12-03 23:59:59","Signature":"4a6bf9ea58c2441c318979992b96bf82ac01d61c4ccdb08a586edf0829a35ec8ca9313e704520def47272f0038b0e4c9934e9ad4226215f73f37214f703180f18b3887b3e8e89700fecf55964e24d2a9274e7aaeb76141f32acee7c9d95eddbb2b853eb59db5d9e157ffbeb4c57ef5cf0c9ef097fe2bd33b521b1b3827f73f4a","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"47bf1995df8d524643f7db6d480d31a4","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"518d2ea8a21e879c942d504824ac211c","SHA1":"21ce87d827077e61abddf2beba69fde5432ea031","SHA256":"1ec3b4f02e03930a470020e0e48d24b84678bb558f46182888d870541f5e25c7","SHA384":"53e346bbde23779a5d116cc9d86fdd71c97b1f1b343439f8a11aa1d3c87af63864bb8488a5aeb2d0c26a6a1e0b15f03f"}},{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer","ValidFrom":"2003-12-04 00:00:00","ValidTo":"2008-12-03 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"0de92bf0d4d82988183205095e9a7688","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"45c204b8a20f6abb0188d2d38a3fb0c9","SHA1":"cdf3a3c5c2eda4c29621f30fd3154f9f8c765739","SHA256":"e32839dddc0f4ed2474efaf37f59d46db400c700fd19533cb0895a111124bc77","SHA384":"ee9c75832cb252218b3201619852209df490d2ef7a5f7a28afdb37f1c1dd56f4604898838e558f615b1c798d4a488223"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)04, CN=VeriSign Class 3 Code Signing 2004 CA","ValidFrom":"2004-07-16 00:00:00","ValidTo":"2014-07-15 23:59:59","Signature":"ae3a17b84a7b55fa6455ec40a4ed494190999c89bcaf2e1dca7823f91c190f7feb68bc32d98838dedc3fd389b43fb18296f1a45abaed2e26d3de7c016e000a00a4069211480940f91c1879672324e0bbd5e150ae1bf50edde02e81cd80a36c524f9175558aba22f2d2ea4175882f63557d1e545a9559cad93481c05f5ef67ab5","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"4191a15a3978dfcf496566381d4c75c2","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"41011f8d0e7c7a6408334ca387914c61","SHA1":"c7fc1727f5b75a6421a1f95c73bbdb23580c48e5","SHA256":"88dd3952638ee82738c03168e6fd863fe4eab1059ee5e2926ad8cb587c255dc0","SHA384":"a00aa5ed457c41e37967882644d63366bae014f03a986576d8514164d7027acf7d0b5e03d764db2558f60db148954459"}},{"Subject":"C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority","ValidFrom":"2006-05-23 17:01:29","ValidTo":"2016-05-23 17:11:29","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"610c120600000000001b","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"53c41bc1164e09e0cd1617a5bf913efd","SHA1":"93c03aac8951d494ecd5696b1c08658541b18727","SHA256":"40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b","SHA384":"f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"}},{"Subject":"C=US, ST=Oregon, L=Hillsboro, O=Intel Corporation, OU=Digital ID Class 3 , Microsoft Software Validation v2, OU=LAN Access Division, CN=Intel Corporation","ValidFrom":"2006-04-17 00:00:00","ValidTo":"2009-05-31 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"65680c783b728ab2a1880df4232ded32","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"9d44550dc9e1d18ef155513f85ab1f12","SHA1":"5f3d3da7374d8edbe4b2a2534c07682861458b3c","SHA256":"12d4c385c0c5e927fc876523b6874918232c08fdaff8e96e230e622b0841df00","SHA384":"165909cf2d34f32ea49a96d98d2c59d6eaad7a8bfe85f6e34d9da3fa79f40b31e4a88d3040558b876f2154c8970b41c4"}}],"Signer":[{"SerialNumber":"65680c783b728ab2a1880df4232ded32","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)04, CN=VeriSign Class 3 Code Signing 2004 CA","Version":1}]}],"RichPEHeaderHash":{"MD5":"8007fd3858325a29ea818653b1ceb33c","SHA1":"acaff2a453f47e14cf2a396ee2e6ca8cbc5801b7","SHA256":"d95fe490f0c27ddb18fe210abef87a55a90d70c1c3fc71319e0f05ae06894b29"},"Sections":{".text":{"Entropy":5.4745915858548955,"Virtual Size":"0x9650"},".rdata":{"Entropy":3.6105380581890048,"Virtual Size":"0x1268"},".pdata":{"Entropy":3.954637417465344,"Virtual Size":"0x3e4"},".srdata":{"Entropy":2.416721292937625,"Virtual Size":"0x298"},".sdata":{"Entropy":2.4838136736919543,"Virtual Size":"0x1b0"},".data":{"Entropy":1.0629748059111717,"Virtual Size":"0x5bb060"},"INIT":{"Entropy":5.611965932939277,"Virtual Size":"0x92a"},".rsrc":{"Entropy":3.4112316573365282,"Virtual Size":"0x3f8"},".reloc":{"Entropy":0.5046360681325445,"Virtual Size":"0x1170"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2006-11-15 10:41:42","Imphash":"a793af44219650b4dd07d8a19ede33f1","LoadsDespiteHVCI":"FALSE"}]}