{"Id":"9bf033e4-7295-4b63-8772-638b76851741","Tags":["ComputerZ.Sys"],"Verified":"TRUE","Author":"Takahiro Haruyama","Created":"2023-11-02","MitreID":"T1068","Category":"vulnerable driver","Commands":{"Command":"sc.exe create ComputerZSys binPath= C:\\windows\\temp\\ComputerZSys.sys type=kernel && sc.exe start ComputerZSys","Description":"The Carbon Black Threat Analysis Unit (TAU) discovered 34 unique vulnerable drivers (237 file hashes) accepting firmware access. Six allow kernel memory access. All give full control of the devices to non-admin users. By exploiting the vulnerable drivers, an attacker without the system privilege may erase/alter firmware, and/or elevate privileges. As of the time of writing in October 2023, the filenames of the vulnerable drivers have not been made public until now.","OperatingSystem":"Windows 10","Privileges":"kernel","Usecase":"Elevate privileges"},"Resources":["https://blogs.vmware.com/security/2023/10/hunting-vulnerable-kernel-drivers.html","https://github.com/magicsword-io/LOLDrivers/issues/304"],"Detection":[{"type":"yara_signature","value":"https://github.com/magicsword-io/LOLDrivers/blob/main/detections/yara/yara-rules_vuln_drivers_strict_renamed.yar"},{"type":"sigma_hash","value":"https://github.com/magicsword-io/LOLDrivers/blob/main/detections/sigma/driver_load_win_vuln_drivers.yml"},{"type":"sigma_names","value":"https://github.com/magicsword-io/LOLDrivers/blob/main/detections/sigma/driver_load_win_vuln_drivers_names.yml"},{"type":"sysmon_hash_detect","value":"https://github.com/magicsword-io/LOLDrivers/blob/main/detections/sysmon/sysmon_config_vulnerable_hashes.xml"},{"type":"sysmon_hash_block","value":"https://github.com/magicsword-io/LOLDrivers/blob/main/detections/sysmon/sysmon_config_vulnerable_hashes_block.xml"}],"Acknowledgement":{"Handle":"","Person":""},"KnownVulnerableSamples":[{"Company":"360.cn","Date":"","Description":"Ludashi System Driver","FileVersion":"1.6.14.1023","Filename":"","MD5":"1f01257d9730f805b2a1d69099ef891d","MachineType":"I386","OriginalFilename":"ComputerZ.Sys","Product":"鲁大师","ProductVersion":"1.6.14.1023","Publisher":"","SHA1":"f10ec1b88c3a383c2a0c03362d31960836e3fb5f","SHA256":"00d9781d0823ab49505ef9c877aa6fa674e19ecc8b02c39ee2728f298bc92b03","Signature":"","Imphash":"f9b9487f25a2c1e08c02f391387c5323","Authentihash":{"MD5":"a8a3d4946e4a02ac7127d878704da757","SHA1":"eae3b3c7e6b4e1dcb6ed1b2378a633fb2ff72fb4","SHA256":"06c40abdf980ea22c8c4c50d9599db95d586354a8177e2cd670124e46a22a1f1"},"RichPEHeaderHash":{"MD5":"7fc550aec15fd6621ba15e6f0c8d0b43","SHA1":"231a47a21f97fb57cdca08ba5a88d86f15920c2e","SHA256":"2d878af22eeafbfa7f8d8a40ca040a55f5c294ef7d7e93e7505d1fb2691880d2"},"Sections":{".text":{"Entropy":6.327844483094998,"Virtual Size":"0x2fe0"},".rdata":{"Entropy":4.052887877624582,"Virtual Size":"0x194"},".data":{"Entropy":0.6831361601556649,"Virtual Size":"0x94"},"INIT":{"Entropy":5.471916387889967,"Virtual Size":"0x448"},".rsrc":{"Entropy":3.5576816257450643,"Virtual Size":"0x480"},".reloc":{"Entropy":5.706460178916482,"Virtual Size":"0x23e"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2014-11-13 21:34:11","InternalName":"ComputerZ.Sys","Copyright":"版权所有 (C) 2010-2014 www.ludashi.com","Imports":["ntoskrnl.exe"],"ExportedFunctions":"","ImportedFunctions":["IoDeleteDevice","IoDeleteSymbolicLink","RtlInitUnicodeString","IofCompleteRequest","IoCreateSymbolicLink","IoCreateDevice","ExFreePoolWithTag","ExAllocatePoolWithTag","IoGetDeviceProperty","RtlCompareUnicodeString","ObfDereferenceObject","IoGetDeviceAttachmentBaseRef","PsGetVersion","MmIsAddressValid","RtlFreeUnicodeString","IoGetDeviceObjectPointer","RtlAnsiStringToUnicodeString","RtlInitAnsiString","KeWaitForSingleObject","IofCallDriver","IoBuildDeviceIoControlRequest","KeInitializeEvent","MmUnmapIoSpace","READ_REGISTER_BUFFER_UCHAR","MmMapIoSpace","READ_REGISTER_BUFFER_ULONG","WRITE_REGISTER_ULONG","WRITE_REGISTER_UCHAR","KeSetTimer","KeInitializeTimerEx","_allmul","SeReleaseSubjectContext","SeTokenIsAdmin","SeCaptureSubjectContext","KeTickCount","KeBugCheckEx","RtlUnwind"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Time Stamping Signer","ValidFrom":"2010-05-10 00:00:00","ValidTo":"2015-05-10 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"478a8efb59e1d83f0ce142d2a28707be","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"f13ede9179075999ef7f856ec31e364b","SHA1":"2f09867166e6107e17808317f5c8d4ee157f45bc","SHA256":"089a2c4c6ac7432020acdb65c33bf39130da6f37c002ba79128bd4c94e4fa101","SHA384":"67be6d358f4ecd0726163603a404db9d78c340951d43fd608482cd89a2de7f9566f0ce45f8222f420003157cb266b939"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. , For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority , G5","ValidFrom":"2006-11-08 00:00:00","ValidTo":"2021-11-07 23:59:59","Signature":"1302ddf8e88600f25af8f8200c59886207cecef74ef9bb59a198e5e138dd4ebc6618d3adeb18f20dc96d3e4a9420c33cbabd6554c6af44b310ad2c6b3eabd707b6b88163c5f95e2ee52a67cecd330c2ad7895603231fb3bee83a0859b4ec4535f78a5bff66cf50afc66d578d1978b7b9a2d157ea1f9a4bafbac98e127ec6bdff","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"250ce8e030612e9f2b89f7054d7cf8fd","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"918d9eb6a6cd36c531eceb926170a7e1","SHA1":"0ae95700d65e6f59715aa47048993ca7858e676a","SHA256":"47c46e6eaa3780eace3d0d891346cd373359d246b21a957219dbab4c8f37c166","SHA384":"e54017c93ba52f012cc15aeb3bcbce1e90a0006ff8dca231a24fc572926770f63213343f538003407bed3463fa9c4a85"}},{"Subject":"C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority","ValidFrom":"2006-05-23 17:01:29","ValidTo":"2016-05-23 17:11:29","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"610c120600000000001b","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"53c41bc1164e09e0cd1617a5bf913efd","SHA1":"93c03aac8951d494ecd5696b1c08658541b18727","SHA256":"40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b","SHA384":"f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"}},{"Subject":"C=CN, ST=Beijing, L=Beijing, O=Qihoo 360 Software (Beijing) Company Limited, OU=Digital ID Class 3 , Microsoft Software Validation v2, OU=Tech. Dev. Dept., CN=Qihoo 360 Software (Beijing) Company Limited","ValidFrom":"2013-03-11 00:00:00","ValidTo":"2016-03-10 23:59:59","Signature":"b1e984808fbc7d3658d18d137c68f1277611af3e98408e495fd55de202bc04f7dc44ae362658e6b5f9dd97b5b383b94723bae937b8fb9e75bb92317a85bcee1989c90c318216da71629f3147ae647502e71e360d16b7cf7006927282265eb0014300650595d1cccc07ed28d9df246055981cec3485bc3173aef9b76912a6cbb2766fa5363e1fc0a91d4679db92e1e1b8dc84e1a14de55324d522670f9e574714b2959ea7a89db456e3debd34d35bbe6403389421ac76615e4ce194990b325132fa62279f31e86fb7043627343fef7118672d5f1ce4666a594d746bb3c69bf123f27c6cb24079fc490a382286d4e85fc118ca9a4612dda448b84a25bcd0fa2cf1","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"51bd5d8e45b82a0210f17fe4c5233468","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"ad73c81b3174cc055d9718b2145a3d1f","SHA1":"0cb9e92828857976774a9fe96c016cdc67a25e6d","SHA256":"2c5d88401dfeec2ebf814e09d0d0faec9d109a503d427da4a7f3e0dec5ae0b6c","SHA384":"48c38329eb7f200be0d48acddabdb93c354dd1b8b3c3ce955a23638a4e2e32dd7d0f3a4f227a2b6382adc95e746cc411"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","ValidFrom":"2010-02-08 00:00:00","ValidTo":"2020-02-07 23:59:59","Signature":"5622e634a4c461cb48b901ad56a8640fd98c91c4bbcc0ce5ad7aa0227fdf47384a2d6cd17f711a7cec70a9b1f04fe40f0c53fa155efe749849248581261c911447b04c638cbba134d4c645e80d85267303d0a98c646ddc7192e645056015595139fc58146bfed4a4ed796b080c4172e737220609be23e93f449a1ee9619dccb1905cfc3dd28dac423d6536d4b43d40288f9b10cf2326cc4b20cb901f5d8c4c34ca3cd8e537d66fa520bd34eb26d9ae0de7c59af7a1b42191336f86e858bb257c740e58fe751b633fce317c9b8f1b969ec55376845b9cad91faaced93ba5dc82153c2825363af120d5087111b3d5452968a2c9c3d921a089a052ec793a54891d3","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"5200e5aa2556fc1a86ed96c9d44b33c7","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"b30c31a572b0409383ed3fbe17e56e81","SHA1":"4843a82ed3b1f2bfbee9671960e1940c942f688d","SHA256":"03cda47a6e654ed85d932714fc09ce4874600eda29ec6628cfbaeb155cab78c9","SHA384":"bbda8407c4f9fc4e54d772f1c7fb9d30bc97e1f97ecd51c443063d1fa0644e266328781776cd5c44896c457c75f4d7da"}}],"Signer":[{"SerialNumber":"51bd5d8e45b82a0210f17fe4c5233468","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","Version":1}]}],"LoadsDespiteHVCI":"FALSE"},{"Company":"ludashi.com","Date":"","Description":"Ludashi System Driver","FileVersion":"1.6.16.1015","Filename":"","MD5":"5b6c21e8366220f7511e6904ffeeced9","MachineType":"I386","OriginalFilename":"ComputerZ.Sys","Product":"鲁大师","ProductVersion":"1.6.16.1015","Publisher":"","SHA1":"c32dfdb0ee859de618484f3ab7a43ee1d9a25d1c","SHA256":"03680068ec41bbe725e1ed2042b63b82391f792e8e21e45dc114618641611d5d","Signature":"","Imphash":"a53b095a8d7366075d445892070cde51","Authentihash":{"MD5":"e0a6c9b07aeb96edf04da906f206e11d","SHA1":"cae3a4dc81504e2892510a6ff90bff711092514b","SHA256":"df813922fcebbcaae99314cc207ec95111a6599ec7fb2d723f6bb1052c493c8a"},"RichPEHeaderHash":{"MD5":"36d79e4bc2a15ca68d83887d15f8f3b0","SHA1":"8ae8df369a94635efe2cd11c5a54829a352887c5","SHA256":"c7e19135c0e8c6b70db667044a45444ec135e550845f32f0b49fa08cfe0a9e7e"},"Sections":{".text":{"Entropy":6.308900702775621,"Virtual Size":"0x3970"},".rdata":{"Entropy":4.058483972608683,"Virtual Size":"0x1a4"},".data":{"Entropy":0.5154246727248383,"Virtual Size":"0xd0"},"INIT":{"Entropy":5.455393527320866,"Virtual Size":"0x4b4"},".rsrc":{"Entropy":3.5699609259177874,"Virtual Size":"0x488"},".reloc":{"Entropy":5.807110906252108,"Virtual Size":"0x2e2"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2016-06-21 07:51:17","InternalName":"ComputerZ.Sys","Copyright":"版权所有 (C) 2010-2016 www.ludashi.com","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["IofCompleteRequest","RtlGetVersion","IoCreateSymbolicLink","IoCreateDevice","ExFreePoolWithTag","ExAllocatePoolWithTag","IoGetDeviceProperty","RtlCompareUnicodeString","ObfDereferenceObject","IoGetDeviceAttachmentBaseRef","PsGetVersion","MmIsAddressValid","RtlFreeUnicodeString","IoGetDeviceObjectPointer","RtlAnsiStringToUnicodeString","RtlInitAnsiString","KeWaitForSingleObject","RtlInitUnicodeString","IoBuildDeviceIoControlRequest","KeInitializeEvent","MmUnmapIoSpace","READ_REGISTER_BUFFER_UCHAR","MmMapIoSpace","READ_REGISTER_BUFFER_ULONG","WRITE_REGISTER_ULONG","WRITE_REGISTER_UCHAR","KeSetTimer","KeInitializeTimerEx","_allmul","SeReleaseSubjectContext","SeTokenIsAdmin","SeCaptureSubjectContext","KeTickCount","KeBugCheckEx","RtlUnwind","IoDeleteSymbolicLink","IofCallDriver","IoDeleteDevice","HalGetBusDataByOffset","HalSetBusDataByOffset"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA , G2","ValidFrom":"2012-12-21 00:00:00","ValidTo":"2020-12-30 23:59:59","Signature":"03099b8f79ef7f5930aaef68b5fae3091dbb4f82065d375fa6529f168dea1c9209446ef56deb587c30e8f9698d23730b126f47a9ae3911f82ab19bb01ac38eeb599600adce0c4db2d031a6085c2a7afce27a1d574ca86518e979406225966ec7c7376a8321088e41eaddd9573f1d7749872a16065ea6386a2212a35119837eb6","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"7e93ebfb7cc64e59ea4b9a77d406fc3b","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"d0785ad36e427c92b19f6826ab1e8020","SHA1":"365b7a9c21bd9373e49052c3e7b3e4646ddd4d43","SHA256":"c2abb7484da91a658548de089d52436175fdb760a1387d225611dc0613a1e2ff","SHA384":"eab4fe5ef90e0de4a6aa3a27769a5e879f588df5e4785aa4104debd1f81e19ea56d33e3a16e5facf99f68b5d8e3d287b"}},{"Subject":"C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer , G4","ValidFrom":"2012-10-18 00:00:00","ValidTo":"2020-12-29 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"0ecff438c8febf356e04d86a981b1a50","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"e9d38360b914c8863f6cba3ee58764d3","SHA1":"4cba8eae47b6bf76f20b3504b98b8f062694a89b","SHA256":"88901d86a4cc1f1bb193d08e1fb63d27452e63f83e228c657ab1a92e4ade3976","SHA384":"e9f2a75334a9e336c5a4712eadee88d0374b0fdc273262f4e65c9040ad2793067cc076696db5279a478773485e285652"}},{"Subject":"C=CN, ST=Beijing, L=Beijing, O=Qihoo 360 Software (Beijing) Company Limited, OU=Tech. Dev. Dept., CN=Qihoo 360 Software (Beijing) Company Limited","ValidFrom":"2016-01-06 00:00:00","ValidTo":"2019-03-28 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"26279f0f2f11970dccf63eba88f2d4c4","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"fbebdc165d8f4616444075e0a48855e6","SHA1":"f6bf44f1acae05fc1638190459485da95f4ed1ec","SHA256":"6917dc56b04b2bd7a75f0987ee27c832dc62298b698b585a4c2c07eb890b6528","SHA384":"c857fb61de8d13e1ac649fbaa4d69acd293d8542cd380411db8bbe2fdc3b9d98c607d0d267081fac285dd33e9141f329"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. , For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority , G5","ValidFrom":"2011-02-22 19:25:17","ValidTo":"2021-02-22 19:35:17","Signature":"812a82168c34672be503eb347b8ca2a3508af45586f11e8c8eae7dee0319ce72951848ad6211fd20fd3f4706015ae2e06f8c152c4e3c6a506c0b36a3cf7a0d9c42bc5cf819d560e369e6e22341678c6883762b8f93a32ab57fbe59fba9c9b2268fcaa2f3821b983e919527978661ee5b5d076bcd86a8e26580a8e215e2b2be23056aba0cf347934daca48c077939c061123a050d89a3ec9f578984fbecca7c47661491d8b60f195de6b84aacbc47c8714396e63220a5dc7786fd3ce38b71db7b9b03fcb71d3264eb1652a043a3fa2ead59924e7cc7f233424838513a7c38c71b242228401e1a461f17db18f7f027356cb863d9cdb9645d2ba55eefc629b4f2c7f821cc04ba57fd01b6abc667f9e7d3997ff4f522fa72f5fdff3a1c423aa1f98018a5ee8d1cd4669e4501feaaeefffb178f30f7f1cd29c59decb5d549003d85b8cbbb933a276a49c030ae66c9f723283276f9a48356c848ce5a96aaa0cc0cc47fb48e97af6de35427c39f86c0d6e473089705dbd054625e0348c2d59f7fa7668cd09db04fd4d3985f4b7ac97fb22952d01280c70f54b61e67cdc6a06c110384d34875e72afeb03b6e0a3aa66b769905a3f177686133144706fc537f52bd92145c4a246a678caf8d90aad0f679211b93267cc3ce1ebd883892ae45c6196a4950b305f8ae59378a6a250394b1598150e8ba8380b72335f476b9671d5918ad208d94","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"611993e400000000001c","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"78a717e082dcc1cda3458d917e677d14","SHA1":"4a872e0e51f9b304469cd1dedb496ee9b8b983a4","SHA256":"317fa1d234ebc49040ebc5e8746f8997471496051b185a91bdd9dfbb23fab5f8","SHA384":"b71052da4eb9157c8c1a5d7f55df19d69b9128598b72fcca608e5b7cc7d64c43c5504b9c86355a6dc22ee40c88cc385c"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","ValidFrom":"2010-02-08 00:00:00","ValidTo":"2020-02-07 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"5200e5aa2556fc1a86ed96c9d44b33c7","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"b30c31a572b0409383ed3fbe17e56e81","SHA1":"4843a82ed3b1f2bfbee9671960e1940c942f688d","SHA256":"03cda47a6e654ed85d932714fc09ce4874600eda29ec6628cfbaeb155cab78c9","SHA384":"bbda8407c4f9fc4e54d772f1c7fb9d30bc97e1f97ecd51c443063d1fa0644e266328781776cd5c44896c457c75f4d7da"}}],"Signer":[{"SerialNumber":"26279f0f2f11970dccf63eba88f2d4c4","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","Version":1}]}],"LoadsDespiteHVCI":"FALSE"},{"Company":"鲁大师","Date":"","Description":"Ludashi System Driver","FileVersion":"1.3.10.831","Filename":"","MD5":"4429f85e2415742c7cf8c9f54905c4b9","MachineType":"AMD64","OriginalFilename":"ComputerZ.Sys","Product":"Ludashi System Driver","ProductVersion":"1.3.10.831","Publisher":"","SHA1":"ddd36f96f5a509855f55eed9eb4cba9758d6339a","SHA256":"07d0090c76155318e78a676e2f8af1500c20aaa1e84f047c674d5f990f5a09c8","Signature":"","Imphash":"223a76f59831e1a59980b603f81c271d","Authentihash":{"MD5":"e3bed503df0bb23e0c81b317278b62ee","SHA1":"0dc3a20a5b85e67735b6356da876a8dbe44a5b18","SHA256":"e160fc9d1990bc1e7ffa556d6ada19db0d2c5c7aeb23a491704b37854a666480"},"RichPEHeaderHash":{"MD5":"f7bc3e823b56dda64b7a8789aa87612d","SHA1":"97b834dc6972d075c125b943de783fe4e8c7a503","SHA256":"fef8ed434cfdce3a7a1e00bf4fa8a056dd28b93390c64443255f6d69d48ccfc6"},"Sections":{".text":{"Entropy":5.897491141813393,"Virtual Size":"0x11b4"},".rdata":{"Entropy":4.455030251248843,"Virtual Size":"0x310"},".data":{"Entropy":0.5159719988134768,"Virtual Size":"0x110"},".pdata":{"Entropy":3.743559962617485,"Virtual Size":"0x138"},"INIT":{"Entropy":4.924487246749098,"Virtual Size":"0x322"},".rsrc":{"Entropy":3.451496132005,"Virtual Size":"0x3e8"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2010-09-01 04:09:04","InternalName":"ComputerZ.Sys","Copyright":"Copyright (C) 2008-2010 www.ludashi.com","Imports":["ntoskrnl.exe"],"ExportedFunctions":"","ImportedFunctions":["IoDeleteDevice","IoDeleteSymbolicLink","RtlInitUnicodeString","__C_specific_handler","MmUnmapIoSpace","MmMapIoSpace","IofCompleteRequest","IoCreateSymbolicLink","IoCreateDevice","RtlFreeUnicodeString","ObfDereferenceObject","MmIsAddressValid","IoGetDeviceObjectPointer","RtlAnsiStringToUnicodeString","RtlInitAnsiString","PsGetVersion","KeWaitForSingleObject","IofCallDriver","IoBuildDeviceIoControlRequest","KeInitializeEvent","KeBugCheckEx"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009,2 CA","ValidFrom":"2009-05-21 00:00:00","ValidTo":"2019-05-20 23:59:59","Signature":"8b03c0dd94d841a26169b015a878c730c6903c7e42f724b6e4837317047f04109ca1e2fa812febc0ca44e772e050b6551020836e9692e49a516ab43731dca52deb8c00c71d4fe74d32ba85f84ebefa675565f06abe7aca64381a101078457631f3867a030f60c2b35d9df68b6676821b59e183e5bd49a53856e5de41770e580f","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"655226e1b22e18e1590f2985ac22e75c","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"650704c342850095f3288eaf791147d4","SHA1":"4cdc38c800761463749c3cbd94a12f32e49877bf","SHA256":"07b8f662558ec85b71b43a79c6e94698144f4ced2308af21e7ba1e5d461da214","SHA384":"2a271d052213438467d09d60eaa4010c8642fff3eb0070e0cf9969428713c8fdc066b90996d594dd3136f5bd0af5a22a"}},{"Subject":"C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority","ValidFrom":"2006-05-23 17:01:29","ValidTo":"2016-05-23 17:11:29","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"610c120600000000001b","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"53c41bc1164e09e0cd1617a5bf913efd","SHA1":"93c03aac8951d494ecd5696b1c08658541b18727","SHA256":"40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b","SHA384":"f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"}},{"Subject":"C=CN, ST=Sichuan, L=Chengdu, O=Chengdu Qiying Technology Co.,Ltd., OU=Digital ID Class 3 , Microsoft Software Validation v2, CN=Chengdu Qiying Technology Co.,Ltd.","ValidFrom":"2010-03-31 00:00:00","ValidTo":"2011-03-31 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"61359ac44514d781769fd643666b4572","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"416fc5d0038211bf34811efeff6d562f","SHA1":"e0acbd39e2fa410a22c96e2a3eaea4342a626f40","SHA256":"843e587edb9c53b2fbbf84cd90b217af016da1330905b25c16bb059a26b5726e","SHA384":"1a1167bbac2b00e60c10a4c1dc1d0f5105c42582b1a39e05a1d60710d97a24c6ff76fe73700f0fb0e1e03f27aebb7697"}}],"Signer":[{"SerialNumber":"61359ac44514d781769fd643666b4572","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009,2 CA","Version":1}]}],"LoadsDespiteHVCI":"FALSE"},{"Company":"360.cn","Date":"","Description":"Ludashi System Driver","FileVersion":"1.6.14.1022","Filename":"","MD5":"006d9d615cdcc105f642ab599b66f94e","MachineType":"AMD64","OriginalFilename":"ComputerZ.Sys","Product":"鲁大师","ProductVersion":"1.6.14.1021","Publisher":"","SHA1":"ea58d72db03df85b04d1412a9b90d88ba68ab43d","SHA256":"0fc3bc6e81b04dcaa349f59f04d6c85c55a2fea5db8fa0ba53d3096a040ce5a7","Signature":"","Imphash":"fffbca93e6322995552b841c7d65b033","Authentihash":{"MD5":"717682508e2f11589885b9d155679c04","SHA1":"10bc411d5414c73e2f19cd654ea23349ecc55878","SHA256":"58d81ddb4104c37284b15fca0d90b4388e430a34d93823df1a3514962dbcddb5"},"RichPEHeaderHash":{"MD5":"7f4fe28fbea8250d1d89c107bf8aa820","SHA1":"2c88a39230384654a89546d9eae4394786648eeb","SHA256":"ac21ab9c51c4a7d30efd0f08fc44428e2d46890849b3413fc8c4a4239c468130"},"Sections":{".text":{"Entropy":6.318474008501602,"Virtual Size":"0x2fae"},".rdata":{"Entropy":4.6177232151719565,"Virtual Size":"0x33c"},".data":{"Entropy":0.3888300330017545,"Virtual Size":"0x17c"},".pdata":{"Entropy":4.038325406004775,"Virtual Size":"0x1c8"},"INIT":{"Entropy":5.1042520300899135,"Virtual Size":"0x470"},".rsrc":{"Entropy":3.556864166617942,"Virtual Size":"0x480"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2014-04-17 23:58:34","InternalName":"ComputerZ.Sys","Copyright":"版权所有 (C) 2010-2014 www.ludashi.com","Imports":["ntoskrnl.exe"],"ExportedFunctions":"","ImportedFunctions":["IoDeleteSymbolicLink","RtlInitUnicodeString","IoDeleteDevice","IofCompleteRequest","IoCreateSymbolicLink","IoCreateDevice","ExAllocatePoolWithTag","ExFreePoolWithTag","IoGetDeviceAttachmentBaseRef","PsGetVersion","RtlCompareUnicodeString","ObfDereferenceObject","IoGetDeviceProperty","RtlAnsiStringToUnicodeString","RtlInitAnsiString","RtlFreeUnicodeString","IoGetDeviceObjectPointer","MmIsAddressValid","IoBuildDeviceIoControlRequest","KeInitializeEvent","KeWaitForSingleObject","IofCallDriver","MmUnmapIoSpace","MmMapIoSpace","SeTokenIsAdmin","SeReleaseSubjectContext","SeCaptureSubjectContext","KeSetTimer","KeInitializeTimerEx","KeBugCheckEx","__C_specific_handler"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Time Stamping Signer","ValidFrom":"2010-05-10 00:00:00","ValidTo":"2015-05-10 23:59:59","Signature":"c8fb63f80b75752c3af1f213a72db6a31a9cad0107d3348e77e0c26eae025d484fa4d221b636fd2a35437c6bdf80870b15f0763200b4ceb567a42f2f201b9c549e833f1f5f149562820f2241221f70b3f3f742de6c51cd4bf821ac9b3b8cb1e5e6288fce2a8af9aa524d8c5b77ba4d5a58dbbb6a04cc521e9de228370ebbe70e91c7f8dbf18198ebcd37b30eab65d362ec3aa576eb13a83593c92e0a01ecc0e8cc3d7eb6ebe2c1ecd3149282668750dcfd5097acb34a767306c486113ab35f4304526feab3d074364ccaf11b7984377063ad74b9aa0ef398b08608ebdbe01f8c10f239649bae4f0a2c928a4f18b591e58d1a935f1faef1a6f02e97d0d2f62b3c","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"478a8efb59e1d83f0ce142d2a28707be","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"f13ede9179075999ef7f856ec31e364b","SHA1":"2f09867166e6107e17808317f5c8d4ee157f45bc","SHA256":"089a2c4c6ac7432020acdb65c33bf39130da6f37c002ba79128bd4c94e4fa101","SHA384":"67be6d358f4ecd0726163603a404db9d78c340951d43fd608482cd89a2de7f9566f0ce45f8222f420003157cb266b939"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. , For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority , G5","ValidFrom":"2006-11-08 00:00:00","ValidTo":"2021-11-07 23:59:59","Signature":"1302ddf8e88600f25af8f8200c59886207cecef74ef9bb59a198e5e138dd4ebc6618d3adeb18f20dc96d3e4a9420c33cbabd6554c6af44b310ad2c6b3eabd707b6b88163c5f95e2ee52a67cecd330c2ad7895603231fb3bee83a0859b4ec4535f78a5bff66cf50afc66d578d1978b7b9a2d157ea1f9a4bafbac98e127ec6bdff","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"250ce8e030612e9f2b89f7054d7cf8fd","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"918d9eb6a6cd36c531eceb926170a7e1","SHA1":"0ae95700d65e6f59715aa47048993ca7858e676a","SHA256":"47c46e6eaa3780eace3d0d891346cd373359d246b21a957219dbab4c8f37c166","SHA384":"e54017c93ba52f012cc15aeb3bcbce1e90a0006ff8dca231a24fc572926770f63213343f538003407bed3463fa9c4a85"}},{"Subject":"C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority","ValidFrom":"2006-05-23 17:01:29","ValidTo":"2016-05-23 17:11:29","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"610c120600000000001b","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"53c41bc1164e09e0cd1617a5bf913efd","SHA1":"93c03aac8951d494ecd5696b1c08658541b18727","SHA256":"40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b","SHA384":"f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"}},{"Subject":"C=CN, ST=Beijing, L=Beijing, O=Qihoo 360 Software (Beijing) Company Limited, OU=Digital ID Class 3 , Microsoft Software Validation v2, OU=Tech. Dev. Dept., CN=Qihoo 360 Software (Beijing) Company Limited","ValidFrom":"2013-03-11 00:00:00","ValidTo":"2016-03-10 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"51bd5d8e45b82a0210f17fe4c5233468","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"ad73c81b3174cc055d9718b2145a3d1f","SHA1":"0cb9e92828857976774a9fe96c016cdc67a25e6d","SHA256":"2c5d88401dfeec2ebf814e09d0d0faec9d109a503d427da4a7f3e0dec5ae0b6c","SHA384":"48c38329eb7f200be0d48acddabdb93c354dd1b8b3c3ce955a23638a4e2e32dd7d0f3a4f227a2b6382adc95e746cc411"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","ValidFrom":"2010-02-08 00:00:00","ValidTo":"2020-02-07 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"5200e5aa2556fc1a86ed96c9d44b33c7","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"b30c31a572b0409383ed3fbe17e56e81","SHA1":"4843a82ed3b1f2bfbee9671960e1940c942f688d","SHA256":"03cda47a6e654ed85d932714fc09ce4874600eda29ec6628cfbaeb155cab78c9","SHA384":"bbda8407c4f9fc4e54d772f1c7fb9d30bc97e1f97ecd51c443063d1fa0644e266328781776cd5c44896c457c75f4d7da"}}],"Signer":[{"SerialNumber":"51bd5d8e45b82a0210f17fe4c5233468","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","Version":1}]}],"LoadsDespiteHVCI":"FALSE"},{"Company":"ludashi.com","Date":"","Description":"Ludashi System Driver","FileVersion":"1.6.15.1045","Filename":"","MD5":"dab9142dc12480bb39f25c9911df6c6c","MachineType":"AMD64","OriginalFilename":"ComputerZ.Sys","Product":"鲁大师","ProductVersion":"1.6.15.1045","Publisher":"","SHA1":"1f26424eaf046dbf800ae2ac52d9bb38494d061a","SHA256":"13ae3081393f8100cc491ebb88ba58f0491b3550787cf3fd25a73aa7ca0290d9","Signature":"","Imphash":"fbfa302bf7eb5d615d0968541ee49ce4","Authentihash":{"MD5":"98a39fd9543c26e95548235dbed6f6ee","SHA1":"55a83548224d9dc156e1ba4b4bd1400cad060009","SHA256":"aac9c11490da2ad5316469aa91943b42d019b51ff6f1d9d9767260abd075bb8f"},"RichPEHeaderHash":{"MD5":"931e927cdf1c24d5817bff89dab85a64","SHA1":"4cd801fca152bbe24f5f38fd11ceb6376bcef450","SHA256":"7122c2c491e45b9bc338bcc38386cc39217d647ee94adc68881890034b241fb2"},"Sections":{".text":{"Entropy":6.323647044082133,"Virtual Size":"0x36fe"},".rdata":{"Entropy":4.706224571856012,"Virtual Size":"0x3b4"},".data":{"Entropy":0.34051109993725664,"Virtual Size":"0x1bc"},".pdata":{"Entropy":4.140010388960332,"Virtual Size":"0x1e0"},"INIT":{"Entropy":5.131166362174372,"Virtual Size":"0x4e8"},".rsrc":{"Entropy":3.574245952532775,"Virtual Size":"0x488"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2015-09-05 23:28:20","InternalName":"ComputerZ.Sys","Copyright":"版权所有 (C) 2010-2015 www.ludashi.com","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["RtlGetVersion","IofCompleteRequest","IoCreateSymbolicLink","IoCreateDevice","ExAllocatePoolWithTag","ExFreePoolWithTag","IoGetDeviceAttachmentBaseRef","PsGetVersion","RtlCompareUnicodeString","ObfDereferenceObject","IoGetDeviceProperty","RtlAnsiStringToUnicodeString","RtlInitAnsiString","RtlFreeUnicodeString","IoDeleteDevice","MmIsAddressValid","IoBuildDeviceIoControlRequest","KeInitializeEvent","KeWaitForSingleObject","IofCallDriver","MmUnmapIoSpace","MmMapIoSpace","SeTokenIsAdmin","SeReleaseSubjectContext","SeCaptureSubjectContext","KeSetTimer","KeInitializeTimerEx","KeBugCheckEx","RtlInitUnicodeString","IoGetDeviceObjectPointer","IoDeleteSymbolicLink","__C_specific_handler","HalSetBusDataByOffset","HalGetBusDataByOffset"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Time Stamping Signer","ValidFrom":"2015-05-05 00:00:00","ValidTo":"2015-12-31 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"009feac811b0f16247a5fc20d80523ace6","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"b6aa9cf28bcfc9f07ec1069fb425ab61","SHA1":"ca7a166fcd53878ba5a38d4cac37c63513cfc1fa","SHA256":"711394fc49f8948a831f687d42ced6b18514f57786ecc6cdbc3c3eb72e568a40","SHA384":"ca01f9c9ed4e1ddff7126b7bbf618bc8132429886ca563f86655429e928739c621b9fdea6e04a623712cbb998c5c7d77"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. , For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority , G5","ValidFrom":"2006-11-08 00:00:00","ValidTo":"2021-11-07 23:59:59","Signature":"1302ddf8e88600f25af8f8200c59886207cecef74ef9bb59a198e5e138dd4ebc6618d3adeb18f20dc96d3e4a9420c33cbabd6554c6af44b310ad2c6b3eabd707b6b88163c5f95e2ee52a67cecd330c2ad7895603231fb3bee83a0859b4ec4535f78a5bff66cf50afc66d578d1978b7b9a2d157ea1f9a4bafbac98e127ec6bdff","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"250ce8e030612e9f2b89f7054d7cf8fd","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"918d9eb6a6cd36c531eceb926170a7e1","SHA1":"0ae95700d65e6f59715aa47048993ca7858e676a","SHA256":"47c46e6eaa3780eace3d0d891346cd373359d246b21a957219dbab4c8f37c166","SHA384":"e54017c93ba52f012cc15aeb3bcbce1e90a0006ff8dca231a24fc572926770f63213343f538003407bed3463fa9c4a85"}},{"Subject":"C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority","ValidFrom":"2006-05-23 17:01:29","ValidTo":"2016-05-23 17:11:29","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"610c120600000000001b","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"53c41bc1164e09e0cd1617a5bf913efd","SHA1":"93c03aac8951d494ecd5696b1c08658541b18727","SHA256":"40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b","SHA384":"f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"}},{"Subject":"C=CN, ST=Beijing, L=Beijing, O=Qihoo 360 Software (Beijing) Company Limited, OU=Digital ID Class 3 , Microsoft Software Validation v2, OU=Tech. Dev. Dept., CN=Qihoo 360 Software (Beijing) Company Limited","ValidFrom":"2013-03-11 00:00:00","ValidTo":"2016-03-10 23:59:59","Signature":"b1e984808fbc7d3658d18d137c68f1277611af3e98408e495fd55de202bc04f7dc44ae362658e6b5f9dd97b5b383b94723bae937b8fb9e75bb92317a85bcee1989c90c318216da71629f3147ae647502e71e360d16b7cf7006927282265eb0014300650595d1cccc07ed28d9df246055981cec3485bc3173aef9b76912a6cbb2766fa5363e1fc0a91d4679db92e1e1b8dc84e1a14de55324d522670f9e574714b2959ea7a89db456e3debd34d35bbe6403389421ac76615e4ce194990b325132fa62279f31e86fb7043627343fef7118672d5f1ce4666a594d746bb3c69bf123f27c6cb24079fc490a382286d4e85fc118ca9a4612dda448b84a25bcd0fa2cf1","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"51bd5d8e45b82a0210f17fe4c5233468","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"ad73c81b3174cc055d9718b2145a3d1f","SHA1":"0cb9e92828857976774a9fe96c016cdc67a25e6d","SHA256":"2c5d88401dfeec2ebf814e09d0d0faec9d109a503d427da4a7f3e0dec5ae0b6c","SHA384":"48c38329eb7f200be0d48acddabdb93c354dd1b8b3c3ce955a23638a4e2e32dd7d0f3a4f227a2b6382adc95e746cc411"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","ValidFrom":"2010-02-08 00:00:00","ValidTo":"2020-02-07 23:59:59","Signature":"5622e634a4c461cb48b901ad56a8640fd98c91c4bbcc0ce5ad7aa0227fdf47384a2d6cd17f711a7cec70a9b1f04fe40f0c53fa155efe749849248581261c911447b04c638cbba134d4c645e80d85267303d0a98c646ddc7192e645056015595139fc58146bfed4a4ed796b080c4172e737220609be23e93f449a1ee9619dccb1905cfc3dd28dac423d6536d4b43d40288f9b10cf2326cc4b20cb901f5d8c4c34ca3cd8e537d66fa520bd34eb26d9ae0de7c59af7a1b42191336f86e858bb257c740e58fe751b633fce317c9b8f1b969ec55376845b9cad91faaced93ba5dc82153c2825363af120d5087111b3d5452968a2c9c3d921a089a052ec793a54891d3","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"5200e5aa2556fc1a86ed96c9d44b33c7","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"b30c31a572b0409383ed3fbe17e56e81","SHA1":"4843a82ed3b1f2bfbee9671960e1940c942f688d","SHA256":"03cda47a6e654ed85d932714fc09ce4874600eda29ec6628cfbaeb155cab78c9","SHA384":"bbda8407c4f9fc4e54d772f1c7fb9d30bc97e1f97ecd51c443063d1fa0644e266328781776cd5c44896c457c75f4d7da"}}],"Signer":[{"SerialNumber":"51bd5d8e45b82a0210f17fe4c5233468","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","Version":1}]}],"LoadsDespiteHVCI":"FALSE"},{"Company":"360.cn","Date":"","Description":"Ludashi System Driver","FileVersion":"1.6.14.1021","Filename":"","MD5":"0cd2504a2e0a8ad81d9a3a6a1fad7306","MachineType":"I386","OriginalFilename":"ComputerZ.Sys","Product":"鲁大师","ProductVersion":"1.6.14.1021","Publisher":"","SHA1":"441f87633ee6fbea5dee1268d1b9b936a596464d","SHA256":"182bbdb9ecd3932e0f0c986b779c2b2b3997a7ca9375caa2ec59b4b08f4e9714","Signature":"","Imphash":"f9b9487f25a2c1e08c02f391387c5323","Authentihash":{"MD5":"e7a9db31f57baffaa58807394be333df","SHA1":"9fe5d0b19514ee8c335e63b2fbce6a0564b8e5cc","SHA256":"e1a34446a3d8b2875a505b109a1c78177f9fa887472699ec9db5147b1074e42f"},"RichPEHeaderHash":{"MD5":"7fc550aec15fd6621ba15e6f0c8d0b43","SHA1":"231a47a21f97fb57cdca08ba5a88d86f15920c2e","SHA256":"2d878af22eeafbfa7f8d8a40ca040a55f5c294ef7d7e93e7505d1fb2691880d2"},"Sections":{".text":{"Entropy":6.341617339803296,"Virtual Size":"0x2c20"},".rdata":{"Entropy":4.038228210908961,"Virtual Size":"0x194"},".data":{"Entropy":0.9395563653739029,"Virtual Size":"0x64"},"INIT":{"Entropy":5.471916387889967,"Virtual Size":"0x448"},".rsrc":{"Entropy":3.553806284211462,"Virtual Size":"0x480"},".reloc":{"Entropy":5.46903370349161,"Virtual Size":"0x206"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2014-02-24 21:36:48","InternalName":"ComputerZ.Sys","Copyright":"版权所有 (C) 2010-2014 www.ludashi.com","Imports":["ntoskrnl.exe"],"ExportedFunctions":"","ImportedFunctions":["IoDeleteDevice","IoDeleteSymbolicLink","RtlInitUnicodeString","IofCompleteRequest","IoCreateSymbolicLink","IoCreateDevice","ExFreePoolWithTag","ExAllocatePoolWithTag","IoGetDeviceProperty","RtlCompareUnicodeString","ObfDereferenceObject","IoGetDeviceAttachmentBaseRef","PsGetVersion","MmIsAddressValid","RtlFreeUnicodeString","IoGetDeviceObjectPointer","RtlAnsiStringToUnicodeString","RtlInitAnsiString","KeWaitForSingleObject","IofCallDriver","IoBuildDeviceIoControlRequest","KeInitializeEvent","MmUnmapIoSpace","READ_REGISTER_BUFFER_UCHAR","MmMapIoSpace","READ_REGISTER_BUFFER_ULONG","WRITE_REGISTER_ULONG","WRITE_REGISTER_UCHAR","KeSetTimer","KeInitializeTimerEx","_allmul","SeReleaseSubjectContext","SeTokenIsAdmin","SeCaptureSubjectContext","KeTickCount","KeBugCheckEx","RtlUnwind"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Time Stamping Signer","ValidFrom":"2010-05-10 00:00:00","ValidTo":"2015-05-10 23:59:59","Signature":"c8fb63f80b75752c3af1f213a72db6a31a9cad0107d3348e77e0c26eae025d484fa4d221b636fd2a35437c6bdf80870b15f0763200b4ceb567a42f2f201b9c549e833f1f5f149562820f2241221f70b3f3f742de6c51cd4bf821ac9b3b8cb1e5e6288fce2a8af9aa524d8c5b77ba4d5a58dbbb6a04cc521e9de228370ebbe70e91c7f8dbf18198ebcd37b30eab65d362ec3aa576eb13a83593c92e0a01ecc0e8cc3d7eb6ebe2c1ecd3149282668750dcfd5097acb34a767306c486113ab35f4304526feab3d074364ccaf11b7984377063ad74b9aa0ef398b08608ebdbe01f8c10f239649bae4f0a2c928a4f18b591e58d1a935f1faef1a6f02e97d0d2f62b3c","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"478a8efb59e1d83f0ce142d2a28707be","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"f13ede9179075999ef7f856ec31e364b","SHA1":"2f09867166e6107e17808317f5c8d4ee157f45bc","SHA256":"089a2c4c6ac7432020acdb65c33bf39130da6f37c002ba79128bd4c94e4fa101","SHA384":"67be6d358f4ecd0726163603a404db9d78c340951d43fd608482cd89a2de7f9566f0ce45f8222f420003157cb266b939"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. , For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority , G5","ValidFrom":"2006-11-08 00:00:00","ValidTo":"2021-11-07 23:59:59","Signature":"1302ddf8e88600f25af8f8200c59886207cecef74ef9bb59a198e5e138dd4ebc6618d3adeb18f20dc96d3e4a9420c33cbabd6554c6af44b310ad2c6b3eabd707b6b88163c5f95e2ee52a67cecd330c2ad7895603231fb3bee83a0859b4ec4535f78a5bff66cf50afc66d578d1978b7b9a2d157ea1f9a4bafbac98e127ec6bdff","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"250ce8e030612e9f2b89f7054d7cf8fd","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"918d9eb6a6cd36c531eceb926170a7e1","SHA1":"0ae95700d65e6f59715aa47048993ca7858e676a","SHA256":"47c46e6eaa3780eace3d0d891346cd373359d246b21a957219dbab4c8f37c166","SHA384":"e54017c93ba52f012cc15aeb3bcbce1e90a0006ff8dca231a24fc572926770f63213343f538003407bed3463fa9c4a85"}},{"Subject":"C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority","ValidFrom":"2006-05-23 17:01:29","ValidTo":"2016-05-23 17:11:29","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"610c120600000000001b","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"53c41bc1164e09e0cd1617a5bf913efd","SHA1":"93c03aac8951d494ecd5696b1c08658541b18727","SHA256":"40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b","SHA384":"f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"}},{"Subject":"C=CN, ST=Beijing, L=Beijing, O=Qihoo 360 Software (Beijing) Company Limited, OU=Digital ID Class 3 , Microsoft Software Validation v2, OU=Tech. Dev. Dept., CN=Qihoo 360 Software (Beijing) Company Limited","ValidFrom":"2013-03-11 00:00:00","ValidTo":"2016-03-10 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"51bd5d8e45b82a0210f17fe4c5233468","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"ad73c81b3174cc055d9718b2145a3d1f","SHA1":"0cb9e92828857976774a9fe96c016cdc67a25e6d","SHA256":"2c5d88401dfeec2ebf814e09d0d0faec9d109a503d427da4a7f3e0dec5ae0b6c","SHA384":"48c38329eb7f200be0d48acddabdb93c354dd1b8b3c3ce955a23638a4e2e32dd7d0f3a4f227a2b6382adc95e746cc411"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","ValidFrom":"2010-02-08 00:00:00","ValidTo":"2020-02-07 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"5200e5aa2556fc1a86ed96c9d44b33c7","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"b30c31a572b0409383ed3fbe17e56e81","SHA1":"4843a82ed3b1f2bfbee9671960e1940c942f688d","SHA256":"03cda47a6e654ed85d932714fc09ce4874600eda29ec6628cfbaeb155cab78c9","SHA384":"bbda8407c4f9fc4e54d772f1c7fb9d30bc97e1f97ecd51c443063d1fa0644e266328781776cd5c44896c457c75f4d7da"}}],"Signer":[{"SerialNumber":"51bd5d8e45b82a0210f17fe4c5233468","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","Version":1}]}],"LoadsDespiteHVCI":"FALSE"},{"Company":"360.cn","Date":"","Description":"Ludashi System Driver","FileVersion":"1.6.12.302","Filename":"","MD5":"f7745b42882dec947f6629ab9b7c39b7","MachineType":"AMD64","OriginalFilename":"ComputerZ.Sys","Product":"360硬件大师","ProductVersion":"1.6.12.302","Publisher":"","SHA1":"2bb68b195f66f53f90f17b364928929d5b2883b5","SHA256":"26ecd3cea139218120a9f168c8c0c3b856e0dd8fb2205c2a4bcb398f5f35d8dd","Signature":"","Imphash":"fffbca93e6322995552b841c7d65b033","Authentihash":{"MD5":"462a9cd6018292c641c537c08b5a2602","SHA1":"ed9ed937052bc96ec57886d5bbc3edaaf7145451","SHA256":"9acd27f9b7b3075e5d5273ae285de33844aafe0477782ecd4ae573ed282f863a"},"RichPEHeaderHash":{"MD5":"a7cda6f0c911980e37ebc92229feb730","SHA1":"91587d822874bdf4b4d2ec960f01d9614af4ff27","SHA256":"645a47a93bb7711e822de9e1857874ccbcd24620e48565e30cbd354f631fca61"},"Sections":{".text":{"Entropy":6.320258380228078,"Virtual Size":"0x28be"},".rdata":{"Entropy":4.549947297419023,"Virtual Size":"0x324"},".data":{"Entropy":0.41099431917639,"Virtual Size":"0x164"},".pdata":{"Entropy":4.014024074963754,"Virtual Size":"0x198"},"INIT":{"Entropy":5.1021846748561135,"Virtual Size":"0x470"},".rsrc":{"Entropy":3.507951771882346,"Virtual Size":"0x3b0"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2012-03-02 02:49:07","InternalName":"ComputerZ.Sys","Copyright":"版权所有 (C) 2010-2012 360.cn","Imports":["ntoskrnl.exe"],"ExportedFunctions":"","ImportedFunctions":["IoDeleteSymbolicLink","RtlInitUnicodeString","IoDeleteDevice","IofCompleteRequest","IoCreateSymbolicLink","IoCreateDevice","ExAllocatePoolWithTag","ExFreePoolWithTag","IoGetDeviceAttachmentBaseRef","PsGetVersion","RtlCompareUnicodeString","ObfDereferenceObject","IoGetDeviceProperty","RtlAnsiStringToUnicodeString","RtlInitAnsiString","RtlFreeUnicodeString","IoGetDeviceObjectPointer","MmIsAddressValid","IoBuildDeviceIoControlRequest","KeInitializeEvent","KeWaitForSingleObject","IofCallDriver","MmUnmapIoSpace","MmMapIoSpace","SeTokenIsAdmin","SeReleaseSubjectContext","SeCaptureSubjectContext","KeSetTimer","KeInitializeTimerEx","KeBugCheckEx","__C_specific_handler"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer , G2","ValidFrom":"2007-06-15 00:00:00","ValidTo":"2012-06-14 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"3825d7faf861af9ef490e726b5d65ad5","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"d6c7684e9aaa508cf268335f83afe040","SHA1":"18066d20ad92409c567cdfde745279ff71c75226","SHA256":"a612fb22ce8be6dab75e47c98508f98496583e79c9c97b936a8caee9ea9f3fff","SHA384":"35c249d6ad0261a6229b2a727067ac6ba32a5d24b30b9249051f748c7735fbe2ec2ef26a702c50df1790fbe32a65aee7"}},{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA","ValidFrom":"2003-12-04 00:00:00","ValidTo":"2013-12-03 23:59:59","Signature":"4a6bf9ea58c2441c318979992b96bf82ac01d61c4ccdb08a586edf0829a35ec8ca9313e704520def47272f0038b0e4c9934e9ad4226215f73f37214f703180f18b3887b3e8e89700fecf55964e24d2a9274e7aaeb76141f32acee7c9d95eddbb2b853eb59db5d9e157ffbeb4c57ef5cf0c9ef097fe2bd33b521b1b3827f73f4a","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"47bf1995df8d524643f7db6d480d31a4","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"518d2ea8a21e879c942d504824ac211c","SHA1":"21ce87d827077e61abddf2beba69fde5432ea031","SHA256":"1ec3b4f02e03930a470020e0e48d24b84678bb558f46182888d870541f5e25c7","SHA384":"53e346bbde23779a5d116cc9d86fdd71c97b1f1b343439f8a11aa1d3c87af63864bb8488a5aeb2d0c26a6a1e0b15f03f"}},{"Subject":"C=CN, ST=Beijing, L=Beijing, O=360.cn, OU=Digital ID Class 3 , Microsoft Software Validation v2, CN=360.cn","ValidFrom":"2010-03-16 00:00:00","ValidTo":"2013-03-15 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"74f2958d31d03eb042f9081555305277","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"4f5c7d4f95e9d6a9749876f33ae138c4","SHA1":"3666bdaf7b0d6a9019d5111e2ffd0bf06587dd58","SHA256":"f5b44adb5d25d0e309ae2f5db3f1e2428ef0b7332f8afcc2086786485aa7c162","SHA384":"ae0b037429f9c36e2925d6be76b2535f8a66c6d81b07252c63ce74af493bb31d5d52c276de95cdc4c71ba56bdf7148e4"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009,2 CA","ValidFrom":"2009-05-21 00:00:00","ValidTo":"2019-05-20 23:59:59","Signature":"8b03c0dd94d841a26169b015a878c730c6903c7e42f724b6e4837317047f04109ca1e2fa812febc0ca44e772e050b6551020836e9692e49a516ab43731dca52deb8c00c71d4fe74d32ba85f84ebefa675565f06abe7aca64381a101078457631f3867a030f60c2b35d9df68b6676821b59e183e5bd49a53856e5de41770e580f","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"655226e1b22e18e1590f2985ac22e75c","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"650704c342850095f3288eaf791147d4","SHA1":"4cdc38c800761463749c3cbd94a12f32e49877bf","SHA256":"07b8f662558ec85b71b43a79c6e94698144f4ced2308af21e7ba1e5d461da214","SHA384":"2a271d052213438467d09d60eaa4010c8642fff3eb0070e0cf9969428713c8fdc066b90996d594dd3136f5bd0af5a22a"}},{"Subject":"C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority","ValidFrom":"2006-05-23 17:01:29","ValidTo":"2016-05-23 17:11:29","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"610c120600000000001b","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"53c41bc1164e09e0cd1617a5bf913efd","SHA1":"93c03aac8951d494ecd5696b1c08658541b18727","SHA256":"40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b","SHA384":"f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"}}],"Signer":[{"SerialNumber":"74f2958d31d03eb042f9081555305277","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009,2 CA","Version":1}]}],"LoadsDespiteHVCI":"FALSE"},{"Company":"360.cn","Date":"","Description":"Ludashi System Driver","FileVersion":"1.6.12.1018","Filename":"","MD5":"ca7b41ce335051bf9dd7fa4a55581296","MachineType":"AMD64","OriginalFilename":"ComputerZ.Sys","Product":"360硬件大师","ProductVersion":"1.6.12.1018","Publisher":"","SHA1":"ddec18909571a9d5992f93636628756b7aa9b9a2","SHA256":"31ffc8218a52c3276bece1e5bac7fcb638dca0bc95c2d385511958abdbe4e4a5","Signature":"","Imphash":"fffbca93e6322995552b841c7d65b033","Authentihash":{"MD5":"b791f732161b03fc3fbddbdea0ec3f52","SHA1":"cef9b850a6967a79f5db4e6cb721af2762a90a88","SHA256":"4d16e1f28bae42b72cad2b1511ec59968d0659a6913cce8056b4572c20303822"},"RichPEHeaderHash":{"MD5":"a7cda6f0c911980e37ebc92229feb730","SHA1":"91587d822874bdf4b4d2ec960f01d9614af4ff27","SHA256":"645a47a93bb7711e822de9e1857874ccbcd24620e48565e30cbd354f631fca61"},"Sections":{".text":{"Entropy":6.324703317375317,"Virtual Size":"0x295e"},".rdata":{"Entropy":4.584690789245981,"Virtual Size":"0x324"},".data":{"Entropy":0.41099431917639,"Virtual Size":"0x164"},".pdata":{"Entropy":4.01447436542752,"Virtual Size":"0x198"},"INIT":{"Entropy":5.1021846748561135,"Virtual Size":"0x470"},".rsrc":{"Entropy":3.5298436640182693,"Virtual Size":"0x3b0"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2012-11-07 05:16:36","InternalName":"ComputerZ.Sys","Copyright":"版权所有 (C) 2010-2012 360.cn","Imports":["ntoskrnl.exe"],"ExportedFunctions":"","ImportedFunctions":["IoDeleteSymbolicLink","RtlInitUnicodeString","IoDeleteDevice","IofCompleteRequest","IoCreateSymbolicLink","IoCreateDevice","ExAllocatePoolWithTag","ExFreePoolWithTag","IoGetDeviceAttachmentBaseRef","PsGetVersion","RtlCompareUnicodeString","ObfDereferenceObject","IoGetDeviceProperty","RtlAnsiStringToUnicodeString","RtlInitAnsiString","RtlFreeUnicodeString","IoGetDeviceObjectPointer","MmIsAddressValid","IoBuildDeviceIoControlRequest","KeInitializeEvent","KeWaitForSingleObject","IofCallDriver","MmUnmapIoSpace","MmMapIoSpace","SeTokenIsAdmin","SeReleaseSubjectContext","SeCaptureSubjectContext","KeSetTimer","KeInitializeTimerEx","KeBugCheckEx","__C_specific_handler"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer , G3","ValidFrom":"2012-05-01 00:00:00","ValidTo":"2012-12-31 23:59:59","Signature":"1e98aa27b778b508b5c9726db7dfc00e98a635c488c9d2f66df14b1afbd5f92d99009ed1e79b8be13fbd39800c66cd07bc5c9854a694ba10d14e8babf56f65cc6709a2807c52e80e03d66b7ac60518ecc8ac427c072ca73d0866dc00edfd941d73f2729893b111d68fef8eeaacf496510cd08ddf31524f5eaf7da74a75e64ece2b9f292be7cf5d9f037e6e277b23ad622966af92e82ccebd9c7fdccd173c43c2093f7545c79ee4d7607f97c6e4aac769f5fccd74ac2cb048c1504e70561eb535d38ebeb1edacbdfe0cec857dd5bb856644195d9f93eb82ba639ed37c61ffc81bd923587f30a366a139265e92c33ccb3732faf5a38ddcd5b0a3e9253655d781fa","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"79a2a585f9d1154213d9b83ef6b68ded","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"e6d820afb23af20a65cf0b03247ea05e","SHA1":"7a8f7c37453f99390ee1e94bb5d3d1cba3a0eea7","SHA256":"7e722dc40e6b9abf8c20aa4d887e34b6d2c6b8cbe53a055d49bf9f5e946e0d27","SHA384":"7e14609969a388d38d227df1dbb9ce086c9a820142c94fd1a28ef2835a8aa528aef4c6399bce344d79adb5f3dad86afa"}},{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA","ValidFrom":"2003-12-04 00:00:00","ValidTo":"2013-12-03 23:59:59","Signature":"4a6bf9ea58c2441c318979992b96bf82ac01d61c4ccdb08a586edf0829a35ec8ca9313e704520def47272f0038b0e4c9934e9ad4226215f73f37214f703180f18b3887b3e8e89700fecf55964e24d2a9274e7aaeb76141f32acee7c9d95eddbb2b853eb59db5d9e157ffbeb4c57ef5cf0c9ef097fe2bd33b521b1b3827f73f4a","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"47bf1995df8d524643f7db6d480d31a4","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"518d2ea8a21e879c942d504824ac211c","SHA1":"21ce87d827077e61abddf2beba69fde5432ea031","SHA256":"1ec3b4f02e03930a470020e0e48d24b84678bb558f46182888d870541f5e25c7","SHA384":"53e346bbde23779a5d116cc9d86fdd71c97b1f1b343439f8a11aa1d3c87af63864bb8488a5aeb2d0c26a6a1e0b15f03f"}},{"Subject":"C=CN, ST=Beijing, L=Beijing, O=360.cn, OU=Digital ID Class 3 , Microsoft Software Validation v2, CN=360.cn","ValidFrom":"2010-03-16 00:00:00","ValidTo":"2013-03-15 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"74f2958d31d03eb042f9081555305277","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"4f5c7d4f95e9d6a9749876f33ae138c4","SHA1":"3666bdaf7b0d6a9019d5111e2ffd0bf06587dd58","SHA256":"f5b44adb5d25d0e309ae2f5db3f1e2428ef0b7332f8afcc2086786485aa7c162","SHA384":"ae0b037429f9c36e2925d6be76b2535f8a66c6d81b07252c63ce74af493bb31d5d52c276de95cdc4c71ba56bdf7148e4"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009,2 CA","ValidFrom":"2009-05-21 00:00:00","ValidTo":"2019-05-20 23:59:59","Signature":"8b03c0dd94d841a26169b015a878c730c6903c7e42f724b6e4837317047f04109ca1e2fa812febc0ca44e772e050b6551020836e9692e49a516ab43731dca52deb8c00c71d4fe74d32ba85f84ebefa675565f06abe7aca64381a101078457631f3867a030f60c2b35d9df68b6676821b59e183e5bd49a53856e5de41770e580f","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"655226e1b22e18e1590f2985ac22e75c","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"650704c342850095f3288eaf791147d4","SHA1":"4cdc38c800761463749c3cbd94a12f32e49877bf","SHA256":"07b8f662558ec85b71b43a79c6e94698144f4ced2308af21e7ba1e5d461da214","SHA384":"2a271d052213438467d09d60eaa4010c8642fff3eb0070e0cf9969428713c8fdc066b90996d594dd3136f5bd0af5a22a"}},{"Subject":"C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority","ValidFrom":"2006-05-23 17:01:29","ValidTo":"2016-05-23 17:11:29","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"610c120600000000001b","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"53c41bc1164e09e0cd1617a5bf913efd","SHA1":"93c03aac8951d494ecd5696b1c08658541b18727","SHA256":"40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b","SHA384":"f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"}}],"Signer":[{"SerialNumber":"74f2958d31d03eb042f9081555305277","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009,2 CA","Version":1}]}],"LoadsDespiteHVCI":"FALSE"},{"Company":"360.cn","Date":"","Description":"Ludashi System Driver","FileVersion":"1.6.11.1129","Filename":"","MD5":"159f89d9870e208abd8b912c3d1d3ae9","MachineType":"AMD64","OriginalFilename":"ComputerZ.Sys","Product":"360硬件大师","ProductVersion":"1.6.11.1129","Publisher":"","SHA1":"5cfec6aa4842e5bafff23937f5efca71f21cf7ca","SHA256":"348dc502ac57d7362c7f222e656c52e630c90bef92217a3bd20e49193b5a69f1","Signature":"","Imphash":"fffbca93e6322995552b841c7d65b033","Authentihash":{"MD5":"2f2350f631202a79acea24c65290c114","SHA1":"bcd6c1d912830061824d423ffa8d07421433215a","SHA256":"11e76c3f091b3771d881e82f7171e72228bd43877aeea9008d7de4bda184aec2"},"RichPEHeaderHash":{"MD5":"c6a84fd8b9ad9825f80dad9cd0c9e192","SHA1":"2955d54729fcdec5454796a4decd2ce2fd49f167","SHA256":"d409b635f972a6ced87c5ac14d62792a70f26f226099fc41075fbcea4daf6f29"},"Sections":{".text":{"Entropy":6.337114871973153,"Virtual Size":"0x287e"},".rdata":{"Entropy":4.651420212037889,"Virtual Size":"0x30c"},".data":{"Entropy":0.41099431917639,"Virtual Size":"0x164"},".pdata":{"Entropy":3.9492163220317558,"Virtual Size":"0x180"},"INIT":{"Entropy":5.095554796299162,"Virtual Size":"0x470"},".rsrc":{"Entropy":3.52687041352958,"Virtual Size":"0x3b0"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2011-11-30 05:27:11","InternalName":"ComputerZ.Sys","Copyright":"版权所有 (C) 2010-2011 360.cn","Imports":["ntoskrnl.exe"],"ExportedFunctions":"","ImportedFunctions":["IoDeleteSymbolicLink","RtlInitUnicodeString","IoDeleteDevice","IofCompleteRequest","IoCreateSymbolicLink","IoCreateDevice","ExAllocatePoolWithTag","ExFreePoolWithTag","IoGetDeviceAttachmentBaseRef","PsGetVersion","RtlCompareUnicodeString","ObfDereferenceObject","IoGetDeviceProperty","RtlAnsiStringToUnicodeString","RtlInitAnsiString","RtlFreeUnicodeString","IoGetDeviceObjectPointer","MmIsAddressValid","IoBuildDeviceIoControlRequest","KeInitializeEvent","KeWaitForSingleObject","IofCallDriver","MmUnmapIoSpace","MmMapIoSpace","SeTokenIsAdmin","SeReleaseSubjectContext","SeCaptureSubjectContext","KeSetTimer","KeInitializeTimerEx","KeBugCheckEx","__C_specific_handler"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer , G2","ValidFrom":"2007-06-15 00:00:00","ValidTo":"2012-06-14 23:59:59","Signature":"50c54bc82480dfe40d24c2de1ab1a102a1a6822d0c831581370a820e2cb05a1761b5d805fe88dbf19191b3561a40a6eb92be3839b07536743a984fe437ba9989ca95421db0b9c7a08d57e0fad5640442354e01d133a217c84daa27c7f2e1864c02384d8378c6fc53e0ebe00687dda4969e5e0c98e2a5bebf8285c360e1dfad28d8c7a54b64dac71b5bbdac3908d53822a1338b2f8a9aebbc07213f44410907b5651c24bc48d34480eba1cfc902b414cf54c716a3805cf9793e5d727d88179e2c43a2ca53ce7d3df62a3ab84f9400a56d0a835df95e53f418b3570f70c3fbf5ad95a00e17dec4168060c90f2b6e8604f1ebf47827d105c5ee345b5eb94932f233","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"3825d7faf861af9ef490e726b5d65ad5","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"d6c7684e9aaa508cf268335f83afe040","SHA1":"18066d20ad92409c567cdfde745279ff71c75226","SHA256":"a612fb22ce8be6dab75e47c98508f98496583e79c9c97b936a8caee9ea9f3fff","SHA384":"35c249d6ad0261a6229b2a727067ac6ba32a5d24b30b9249051f748c7735fbe2ec2ef26a702c50df1790fbe32a65aee7"}},{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA","ValidFrom":"2003-12-04 00:00:00","ValidTo":"2013-12-03 23:59:59","Signature":"4a6bf9ea58c2441c318979992b96bf82ac01d61c4ccdb08a586edf0829a35ec8ca9313e704520def47272f0038b0e4c9934e9ad4226215f73f37214f703180f18b3887b3e8e89700fecf55964e24d2a9274e7aaeb76141f32acee7c9d95eddbb2b853eb59db5d9e157ffbeb4c57ef5cf0c9ef097fe2bd33b521b1b3827f73f4a","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"47bf1995df8d524643f7db6d480d31a4","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"518d2ea8a21e879c942d504824ac211c","SHA1":"21ce87d827077e61abddf2beba69fde5432ea031","SHA256":"1ec3b4f02e03930a470020e0e48d24b84678bb558f46182888d870541f5e25c7","SHA384":"53e346bbde23779a5d116cc9d86fdd71c97b1f1b343439f8a11aa1d3c87af63864bb8488a5aeb2d0c26a6a1e0b15f03f"}},{"Subject":"C=CN, ST=Beijing, L=Beijing, O=360.cn, OU=Digital ID Class 3 , Microsoft Software Validation v2, CN=360.cn","ValidFrom":"2010-03-16 00:00:00","ValidTo":"2013-03-15 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"74f2958d31d03eb042f9081555305277","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"4f5c7d4f95e9d6a9749876f33ae138c4","SHA1":"3666bdaf7b0d6a9019d5111e2ffd0bf06587dd58","SHA256":"f5b44adb5d25d0e309ae2f5db3f1e2428ef0b7332f8afcc2086786485aa7c162","SHA384":"ae0b037429f9c36e2925d6be76b2535f8a66c6d81b07252c63ce74af493bb31d5d52c276de95cdc4c71ba56bdf7148e4"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009,2 CA","ValidFrom":"2009-05-21 00:00:00","ValidTo":"2019-05-20 23:59:59","Signature":"8b03c0dd94d841a26169b015a878c730c6903c7e42f724b6e4837317047f04109ca1e2fa812febc0ca44e772e050b6551020836e9692e49a516ab43731dca52deb8c00c71d4fe74d32ba85f84ebefa675565f06abe7aca64381a101078457631f3867a030f60c2b35d9df68b6676821b59e183e5bd49a53856e5de41770e580f","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"655226e1b22e18e1590f2985ac22e75c","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"650704c342850095f3288eaf791147d4","SHA1":"4cdc38c800761463749c3cbd94a12f32e49877bf","SHA256":"07b8f662558ec85b71b43a79c6e94698144f4ced2308af21e7ba1e5d461da214","SHA384":"2a271d052213438467d09d60eaa4010c8642fff3eb0070e0cf9969428713c8fdc066b90996d594dd3136f5bd0af5a22a"}},{"Subject":"C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority","ValidFrom":"2006-05-23 17:01:29","ValidTo":"2016-05-23 17:11:29","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"610c120600000000001b","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"53c41bc1164e09e0cd1617a5bf913efd","SHA1":"93c03aac8951d494ecd5696b1c08658541b18727","SHA256":"40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b","SHA384":"f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"}}],"Signer":[{"SerialNumber":"74f2958d31d03eb042f9081555305277","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009,2 CA","Version":1}]}],"LoadsDespiteHVCI":"FALSE"},{"Company":"ludashi.com","Date":"","Description":"Ludashi System Driver","FileVersion":"1.1020.1030.1217","Filename":"","MD5":"6ba221afb17342a3c81245a4958516a2","MachineType":"AMD64","OriginalFilename":"ComputerZ.Sys","Product":"鲁大师","ProductVersion":"1.1020.1030.1217","Publisher":"","SHA1":"7c996d9ef7e47a3b197ff69798333dc29a04cc8a","SHA256":"37d999df20c1a0b8ffaef9484c213a97b9987ed308b4ba07316a6013fbd31c60","Signature":"","Imphash":"1427c5f0f4fb100e26a3911f8209504b","Authentihash":{"MD5":"245ccd9242dcc0ff7a8defc7a496bfd2","SHA1":"66b24de401ff03030585a778bb4665338e87494c","SHA256":"1f4647364210b9ec997483f9a707a733c4e1b59263c1046301dee90890273f34"},"RichPEHeaderHash":{"MD5":"290fe3bdce284c8212f3064b32eb31d7","SHA1":"5d4ee43b584947ef637a702c4550d47a239c8d62","SHA256":"8523b6eb7567114055ba82faa7f1d7801cd00b6f8c6e87dee48fdceae32b7efe"},"Sections":{".text":{"Entropy":6.356689564177742,"Virtual Size":"0x3fae"},".rdata":{"Entropy":4.67241303817361,"Virtual Size":"0x424"},".data":{"Entropy":0.31187978478105094,"Virtual Size":"0x1ec"},".pdata":{"Entropy":4.157923480569919,"Virtual Size":"0x234"},"INIT":{"Entropy":5.132395977062985,"Virtual Size":"0x4b0"},".rsrc":{"Entropy":3.5345136989811943,"Virtual Size":"0x3e0"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2020-12-17 05:08:51","InternalName":"ComputerZ.Sys","Copyright":"版权所有 (C) 2010-2020 www.ludashi.com","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["IofCompleteRequest","IoCreateSymbolicLink","IoCreateDevice","_wcsicmp","IoGetDeviceAttachmentBaseRef","PsGetVersion","ObfDereferenceObject","IoGetDeviceProperty","RtlAnsiStringToUnicodeString","RtlInitAnsiString","RtlFreeUnicodeString","IoGetDeviceObjectPointer","RtlGetVersion","IoBuildDeviceIoControlRequest","KeInitializeEvent","KeWaitForSingleObject","IofCallDriver","MmUnmapIoSpace","MmMapIoSpace","SeTokenIsAdmin","SeReleaseSubjectContext","KeDelayExecutionThread","SeCaptureSubjectContext","KeBugCheckEx","IoDeleteDevice","RtlInitUnicodeString","MmIsAddressValid","IoDeleteSymbolicLink","__C_specific_handler","HalGetBusDataByOffset","HalSetBusDataByOffset","KeStallExecutionProcessor"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root CA","ValidFrom":"2011-04-15 19:41:37","ValidTo":"2021-04-15 19:51:37","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"611cb28a000000000026","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"983a0c315a50542362f2bd6a5d71c8d0","SHA1":"8047f476001f5cb16a661d2a3fd0c3576168f5e2","SHA256":"5f6a519ed2e35cd0fa1cdfc90f4387162c36287bbf9e4d6648251d99542a9e83","SHA384":"5f014b60511ddab3247ef0b3c03fe82c622237ba76015e2911d1adc50dc632d56ebd1ee532f3c2b6cbfe68d80a2c91dc"}},{"Subject":"C=CN, ST=, L=, O=, CN=","ValidFrom":"2020-09-22 00:00:00","ValidTo":"2021-11-03 12:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"03fd3e81a23e67968baf999b7a1b3bbc","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"f59257898e29705841730d2e5f7360e2","SHA1":"366a61045b4c61e4f763413993da98b2d1122d89","SHA256":"e3079aa603102d9040e6f1d637b95d13e7c94cec366637a99abd629711cc681c","SHA384":"1876b057e7b177bca4d184d0e9ee2510c706e8e6b85d1e5aea268823d0bf1d59637c0eb343d913a147643ef2298854d0"}},{"Subject":"C=US, O=DigiCert, CN=DigiCert Timestamp Responder","ValidFrom":"2014-10-22 00:00:00","ValidTo":"2024-10-22 00:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"03019a023aff58b16bd6d5eae617f066","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"a752afee44f017e8d74e3f3eb7914ae3","SHA1":"8eca80a6b80e9c69dcef7745748524afb8019e2d","SHA256":"82560fa7efec30b5ff82af643e6f3bf3d46868bbd5e7d76f93db185e9e3553a1","SHA384":"e8b11408c88f877ade4ca51114a175fb5dfd2d18d2a66be547c1c9e080fa8f592c7870e30dfab1c04d234993dd0907f3"}},{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Code Signing CA,1","ValidFrom":"2011-02-11 12:00:00","ValidTo":"2026-02-10 12:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"0fa8490615d700a0be2176fdc5ec6dbd","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"a9a31555bbc92b6033975c5428fb3679","SHA1":"47f4b9898631773231b32844ec0d49990ac4eb1e","SHA256":"c826846e4b1d73edb7561ab1b41c949354e237a91e82fe1be5b7e2e1701f52d1","SHA384":"86f49574f368a561914a52d7ae043ec6784ef8c718960700f834e123594605d25d39f1ad45f1eb5052c9567f3edd0e16"}},{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID CA,1","ValidFrom":"2006-11-10 00:00:00","ValidTo":"2021-11-10 00:00:00","Signature":"46503ec9b72824a7381db65b29af52cf52e93147ab565c7bd50d0b41b3efec751f7438f2b25c61a29c95c350e482b923d1ba3a8672ad3878ac755d1717347247859456d1ebbb368477cc24a5f3041955a9e7e3e7ab62cdfb8b2d90c2c0d2b594bd5e4fb105d20e3d1aa9145ba6863162a8a833e49b39a7c4f5ce1d7876942573e42aabcf9c764bed5fc24b16e44b704c00891efcc579bc4c1257fe5fe11ebc025da8fefb07384f0dc65d91b90f6745cdd683ede7920d8db1698c4ffb59e0230fd2aaae007cee9c420ecf91d727b716ee0fc3bd7c0aa0ee2c08558522b8eb181a4dfc2a21ad49318347957771dcb11b4b4b1c109c7714c19d4f2f5a9508291026","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"06fdf9039603adea000aeb3f27bbba1b","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"4e5ad189638cf52ba9cd881d4d44668c","SHA1":"cdc115e98d798b33904c820d63cc1e1afc19251d","SHA256":"37560fb9d548ab62cc3ed4669a4ab74828b5a108e67e829937ffb2d10a5f78dd","SHA384":"173bfb77183785621ef15f43ea807338cea6a02e8183317d9ef050c7237adda3fa2a5bdcd5a4c96da9f2c55900675b9f"}}],"Signer":[{"SerialNumber":"03fd3e81a23e67968baf999b7a1b3bbc","Issuer":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Code Signing CA,1","Version":1}]}],"LoadsDespiteHVCI":"TRUE"},{"Company":"鲁大师","Date":"","Description":"Ludashi System Driver","FileVersion":"1.3.10.802","Filename":"","MD5":"f3f5c518bc3715492cb0b7c59e94c357","MachineType":"I386","OriginalFilename":"ComputerZ.Sys","Product":"Ludashi System Driver","ProductVersion":"1.3.10.802","Publisher":"","SHA1":"8278db134d3b505c735306393fdf104d014fb3bf","SHA256":"386745d23a841e1c768b5bdf052e0c79bb47245f9713ee64e2a63f330697f0c8","Signature":"","Imphash":"b142d772a67c40535c8d8fabb6861748","Authentihash":{"MD5":"66b4187e1b01819b2eecffaf79b0d5ce","SHA1":"9411830260a6fe79dcbe1854ea5338f0da2b9d42","SHA256":"8cc23f39380a590d822d9c064a064c274554d814b651ae4b2f0560d8b016f105"},"RichPEHeaderHash":{"MD5":"45205f6fbd955e6f411225db2c836af9","SHA1":"123f4b488a573fbe556339280d0485feb65fc9a1","SHA256":"a59884d16bd282a5d177da9ed228fe715c89a3682deeced17bd47246b0ad7e6a"},"Sections":{".text":{"Entropy":6.30554447906216,"Virtual Size":"0xc2c"},".rdata":{"Entropy":4.109499016606657,"Virtual Size":"0x164"},".data":{"Entropy":2.5,"Virtual Size":"0x8"},"INIT":{"Entropy":5.373220833511577,"Virtual Size":"0x30e"},".rsrc":{"Entropy":3.45360307263041,"Virtual Size":"0x3e8"},".reloc":{"Entropy":4.016862360862906,"Virtual Size":"0xda"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2010-08-02 04:58:39","InternalName":"ComputerZ.Sys","Copyright":"Copyright (C) 2008-2010 www.ludashi.com","Imports":["ntoskrnl.exe"],"ExportedFunctions":"","ImportedFunctions":["IoDeleteDevice","IoDeleteSymbolicLink","RtlInitUnicodeString","_except_handler3","MmUnmapIoSpace","MmMapIoSpace","READ_REGISTER_BUFFER_ULONG","WRITE_REGISTER_ULONG","WRITE_REGISTER_UCHAR","IofCompleteRequest","IoCreateSymbolicLink","IoCreateDevice","ObfDereferenceObject","MmIsAddressValid","RtlFreeUnicodeString","IoGetDeviceObjectPointer","RtlAnsiStringToUnicodeString","RtlInitAnsiString","PsGetVersion","KeWaitForSingleObject","IofCallDriver","IoBuildDeviceIoControlRequest","KeInitializeEvent","KeTickCount","KeBugCheckEx"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer , G2","ValidFrom":"2007-06-15 00:00:00","ValidTo":"2012-06-14 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"3825d7faf861af9ef490e726b5d65ad5","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"d6c7684e9aaa508cf268335f83afe040","SHA1":"18066d20ad92409c567cdfde745279ff71c75226","SHA256":"a612fb22ce8be6dab75e47c98508f98496583e79c9c97b936a8caee9ea9f3fff","SHA384":"35c249d6ad0261a6229b2a727067ac6ba32a5d24b30b9249051f748c7735fbe2ec2ef26a702c50df1790fbe32a65aee7"}},{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA","ValidFrom":"2003-12-04 00:00:00","ValidTo":"2013-12-03 23:59:59","Signature":"4a6bf9ea58c2441c318979992b96bf82ac01d61c4ccdb08a586edf0829a35ec8ca9313e704520def47272f0038b0e4c9934e9ad4226215f73f37214f703180f18b3887b3e8e89700fecf55964e24d2a9274e7aaeb76141f32acee7c9d95eddbb2b853eb59db5d9e157ffbeb4c57ef5cf0c9ef097fe2bd33b521b1b3827f73f4a","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"47bf1995df8d524643f7db6d480d31a4","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"518d2ea8a21e879c942d504824ac211c","SHA1":"21ce87d827077e61abddf2beba69fde5432ea031","SHA256":"1ec3b4f02e03930a470020e0e48d24b84678bb558f46182888d870541f5e25c7","SHA384":"53e346bbde23779a5d116cc9d86fdd71c97b1f1b343439f8a11aa1d3c87af63864bb8488a5aeb2d0c26a6a1e0b15f03f"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009,2 CA","ValidFrom":"2009-05-21 00:00:00","ValidTo":"2019-05-20 23:59:59","Signature":"8b03c0dd94d841a26169b015a878c730c6903c7e42f724b6e4837317047f04109ca1e2fa812febc0ca44e772e050b6551020836e9692e49a516ab43731dca52deb8c00c71d4fe74d32ba85f84ebefa675565f06abe7aca64381a101078457631f3867a030f60c2b35d9df68b6676821b59e183e5bd49a53856e5de41770e580f","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"655226e1b22e18e1590f2985ac22e75c","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"650704c342850095f3288eaf791147d4","SHA1":"4cdc38c800761463749c3cbd94a12f32e49877bf","SHA256":"07b8f662558ec85b71b43a79c6e94698144f4ced2308af21e7ba1e5d461da214","SHA384":"2a271d052213438467d09d60eaa4010c8642fff3eb0070e0cf9969428713c8fdc066b90996d594dd3136f5bd0af5a22a"}},{"Subject":"C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority","ValidFrom":"2006-05-23 17:01:29","ValidTo":"2016-05-23 17:11:29","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"610c120600000000001b","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"53c41bc1164e09e0cd1617a5bf913efd","SHA1":"93c03aac8951d494ecd5696b1c08658541b18727","SHA256":"40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b","SHA384":"f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"}},{"Subject":"C=CN, ST=Sichuan, L=Chengdu, O=Chengdu Qiying Technology Co.,Ltd., OU=Digital ID Class 3 , Microsoft Software Validation v2, CN=Chengdu Qiying Technology Co.,Ltd.","ValidFrom":"2010-03-31 00:00:00","ValidTo":"2011-03-31 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"61359ac44514d781769fd643666b4572","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"416fc5d0038211bf34811efeff6d562f","SHA1":"e0acbd39e2fa410a22c96e2a3eaea4342a626f40","SHA256":"843e587edb9c53b2fbbf84cd90b217af016da1330905b25c16bb059a26b5726e","SHA384":"1a1167bbac2b00e60c10a4c1dc1d0f5105c42582b1a39e05a1d60710d97a24c6ff76fe73700f0fb0e1e03f27aebb7697"}}],"Signer":[{"SerialNumber":"61359ac44514d781769fd643666b4572","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009,2 CA","Version":1}]}],"LoadsDespiteHVCI":"FALSE"},{"Company":"360.cn","Date":"","Description":"Ludashi System Driver","FileVersion":"1.6.11.415","Filename":"","MD5":"ee3b74cdfed959782dff84153e3d5a6e","MachineType":"I386","OriginalFilename":"ComputerZ.Sys","Product":"360硬件大师","ProductVersion":"1.6.11.415","Publisher":"","SHA1":"53a194e1a30ed9b2d3acd87c2752cfa6645eea76","SHA256":"39134750f909987f6ebb46cf37519bb80707be0ca2017f3735018bac795a3f8d","Signature":"","Imphash":"f9b9487f25a2c1e08c02f391387c5323","Authentihash":{"MD5":"ff44341db8793b06163bd7443d7a2fb7","SHA1":"5f4f4071df9b391fd8f93d6124f802fa8b4b61d8","SHA256":"c2898d715a1806b6cb574bff1dcd4bb2fd026ac624a2fbe71b7f17a64d0a9451"},"RichPEHeaderHash":{"MD5":"2b333a796628f5a6167204d8386db243","SHA1":"42eee62246749bc7f1c13620a762c056e9d0a754","SHA256":"78a5ad5e597ace30219e94d7082fb7d502c98948841e6885741e72d94d058d3b"},"Sections":{".text":{"Entropy":6.332419090076251,"Virtual Size":"0x25fc"},".rdata":{"Entropy":4.042106979727347,"Virtual Size":"0x194"},".data":{"Entropy":0.9185644431995964,"Virtual Size":"0x40"},"INIT":{"Entropy":5.440242429774388,"Virtual Size":"0x448"},".rsrc":{"Entropy":3.5165348803600867,"Virtual Size":"0x3b0"},".reloc":{"Entropy":5.262723438442423,"Virtual Size":"0x1d2"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2011-04-15 05:21:16","InternalName":"ComputerZ.Sys","Copyright":"版权所有 (C) 2010-2011 360.cn","Imports":["ntoskrnl.exe"],"ExportedFunctions":"","ImportedFunctions":["IoDeleteDevice","IoDeleteSymbolicLink","RtlInitUnicodeString","IofCompleteRequest","IoCreateSymbolicLink","IoCreateDevice","ExFreePoolWithTag","ExAllocatePoolWithTag","IoGetDeviceProperty","RtlCompareUnicodeString","ObfDereferenceObject","IoGetDeviceAttachmentBaseRef","PsGetVersion","MmIsAddressValid","RtlFreeUnicodeString","IoGetDeviceObjectPointer","RtlAnsiStringToUnicodeString","RtlInitAnsiString","KeWaitForSingleObject","IofCallDriver","IoBuildDeviceIoControlRequest","KeInitializeEvent","MmUnmapIoSpace","READ_REGISTER_BUFFER_UCHAR","MmMapIoSpace","READ_REGISTER_BUFFER_ULONG","WRITE_REGISTER_ULONG","WRITE_REGISTER_UCHAR","KeSetTimer","KeInitializeTimerEx","_allmul","SeReleaseSubjectContext","SeTokenIsAdmin","SeCaptureSubjectContext","KeTickCount","KeBugCheckEx","RtlUnwind"],"Signatures":{},"LoadsDespiteHVCI":"TRUE"},{"Company":"360.cn","Date":"","Description":"Ludashi System Driver","FileVersion":"1.6.11.415","Filename":"","MD5":"7d87a9c54e49943bf18574c6f02788ee","MachineType":"I386","OriginalFilename":"ComputerZ.Sys","Product":"360硬件大师","ProductVersion":"1.6.11.415","Publisher":"","SHA1":"92befb8b3d17bd3f510d09d464ec0131f8a43b8f","SHA256":"3e758221506628b116e88c14e71be99940894663013df3cf1a9e0b6fb18852b9","Signature":"","Imphash":"f9b9487f25a2c1e08c02f391387c5323","Authentihash":{"MD5":"ff44341db8793b06163bd7443d7a2fb7","SHA1":"5f4f4071df9b391fd8f93d6124f802fa8b4b61d8","SHA256":"c2898d715a1806b6cb574bff1dcd4bb2fd026ac624a2fbe71b7f17a64d0a9451"},"RichPEHeaderHash":{"MD5":"2b333a796628f5a6167204d8386db243","SHA1":"42eee62246749bc7f1c13620a762c056e9d0a754","SHA256":"78a5ad5e597ace30219e94d7082fb7d502c98948841e6885741e72d94d058d3b"},"Sections":{".text":{"Entropy":6.332419090076251,"Virtual Size":"0x25fc"},".rdata":{"Entropy":4.042106979727347,"Virtual Size":"0x194"},".data":{"Entropy":0.9185644431995964,"Virtual Size":"0x40"},"INIT":{"Entropy":5.440242429774388,"Virtual Size":"0x448"},".rsrc":{"Entropy":3.5165348803600867,"Virtual Size":"0x3b0"},".reloc":{"Entropy":5.262723438442423,"Virtual Size":"0x1d2"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2011-04-15 05:21:16","InternalName":"ComputerZ.Sys","Copyright":"版权所有 (C) 2010-2011 360.cn","Imports":["ntoskrnl.exe"],"ExportedFunctions":"","ImportedFunctions":["IoDeleteDevice","IoDeleteSymbolicLink","RtlInitUnicodeString","IofCompleteRequest","IoCreateSymbolicLink","IoCreateDevice","ExFreePoolWithTag","ExAllocatePoolWithTag","IoGetDeviceProperty","RtlCompareUnicodeString","ObfDereferenceObject","IoGetDeviceAttachmentBaseRef","PsGetVersion","MmIsAddressValid","RtlFreeUnicodeString","IoGetDeviceObjectPointer","RtlAnsiStringToUnicodeString","RtlInitAnsiString","KeWaitForSingleObject","IofCallDriver","IoBuildDeviceIoControlRequest","KeInitializeEvent","MmUnmapIoSpace","READ_REGISTER_BUFFER_UCHAR","MmMapIoSpace","READ_REGISTER_BUFFER_ULONG","WRITE_REGISTER_ULONG","WRITE_REGISTER_UCHAR","KeSetTimer","KeInitializeTimerEx","_allmul","SeReleaseSubjectContext","SeTokenIsAdmin","SeCaptureSubjectContext","KeTickCount","KeBugCheckEx","RtlUnwind"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer , G2","ValidFrom":"2007-06-15 00:00:00","ValidTo":"2012-06-14 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"3825d7faf861af9ef490e726b5d65ad5","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"d6c7684e9aaa508cf268335f83afe040","SHA1":"18066d20ad92409c567cdfde745279ff71c75226","SHA256":"a612fb22ce8be6dab75e47c98508f98496583e79c9c97b936a8caee9ea9f3fff","SHA384":"35c249d6ad0261a6229b2a727067ac6ba32a5d24b30b9249051f748c7735fbe2ec2ef26a702c50df1790fbe32a65aee7"}},{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA","ValidFrom":"2003-12-04 00:00:00","ValidTo":"2013-12-03 23:59:59","Signature":"4a6bf9ea58c2441c318979992b96bf82ac01d61c4ccdb08a586edf0829a35ec8ca9313e704520def47272f0038b0e4c9934e9ad4226215f73f37214f703180f18b3887b3e8e89700fecf55964e24d2a9274e7aaeb76141f32acee7c9d95eddbb2b853eb59db5d9e157ffbeb4c57ef5cf0c9ef097fe2bd33b521b1b3827f73f4a","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"47bf1995df8d524643f7db6d480d31a4","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"518d2ea8a21e879c942d504824ac211c","SHA1":"21ce87d827077e61abddf2beba69fde5432ea031","SHA256":"1ec3b4f02e03930a470020e0e48d24b84678bb558f46182888d870541f5e25c7","SHA384":"53e346bbde23779a5d116cc9d86fdd71c97b1f1b343439f8a11aa1d3c87af63864bb8488a5aeb2d0c26a6a1e0b15f03f"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. , For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority , G5","ValidFrom":"2006-11-08 00:00:00","ValidTo":"2021-11-07 23:59:59","Signature":"1302ddf8e88600f25af8f8200c59886207cecef74ef9bb59a198e5e138dd4ebc6618d3adeb18f20dc96d3e4a9420c33cbabd6554c6af44b310ad2c6b3eabd707b6b88163c5f95e2ee52a67cecd330c2ad7895603231fb3bee83a0859b4ec4535f78a5bff66cf50afc66d578d1978b7b9a2d157ea1f9a4bafbac98e127ec6bdff","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"250ce8e030612e9f2b89f7054d7cf8fd","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"918d9eb6a6cd36c531eceb926170a7e1","SHA1":"0ae95700d65e6f59715aa47048993ca7858e676a","SHA256":"47c46e6eaa3780eace3d0d891346cd373359d246b21a957219dbab4c8f37c166","SHA384":"e54017c93ba52f012cc15aeb3bcbce1e90a0006ff8dca231a24fc572926770f63213343f538003407bed3463fa9c4a85"}},{"Subject":"C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority","ValidFrom":"2006-05-23 17:01:29","ValidTo":"2016-05-23 17:11:29","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"610c120600000000001b","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"53c41bc1164e09e0cd1617a5bf913efd","SHA1":"93c03aac8951d494ecd5696b1c08658541b18727","SHA256":"40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b","SHA384":"f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"}},{"Subject":"C=CN, ST=Sichuan, L=Chengdu, O=Chengdu Qiying Technology Co.,Ltd., OU=Digital ID Class 3 , Microsoft Software Validation v2, CN=Chengdu Qiying Technology Co.,Ltd.","ValidFrom":"2011-03-24 00:00:00","ValidTo":"2012-04-21 23:59:59","Signature":"cd066ca62f5db4c9ca07274bc3f10d7e1e9a9beb90957073cfd2fd65e8bfd419db87e5fcf772c2b099bdff5de2412caa65069a5502a69ecaf6ad4659e901a8837c2bfd3bd81ea1305378c81d53cc4384010bf48d51c86f43586f22e546e41df4f5dc7f5cb73a24f7da0661c38eca09982e8fe91275f412aacec0842ce28efeb295c88ad1c74fcdbd744ec90640da8620ba02e7a2ab4857c8fccaf7de1268e513b8bbac9407f0a9fa59194d70659e46111ab4cd5f1fce1b97c663ceea671c055659e1d24cbe3f4cfb366ecc89f350f1a54eb1fcd3f5dbfc0efef9cb4b0e71996a94aaa92380859fa92371593420e258d0a14d09dc9bfd6c4b528c83d439b44abf","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"4eb872f0c388229ae038b56303fcfdd5","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"08ba4b408576a45f9ae47b3bb6bee468","SHA1":"8701103a3c6f007be112d5f0d1cdfe32f73d1c02","SHA256":"8ba1e1472491da70d5de5d5b6e754d3217893f3abea2877e228c0bfccf07e8b2","SHA384":"d63bb928f6a887680169cb72c13b8a402c574766848035406c9fb119643f7f7a04852ccdfbddf0ff673d7189e4aa09f4"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","ValidFrom":"2010-02-08 00:00:00","ValidTo":"2020-02-07 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"5200e5aa2556fc1a86ed96c9d44b33c7","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"b30c31a572b0409383ed3fbe17e56e81","SHA1":"4843a82ed3b1f2bfbee9671960e1940c942f688d","SHA256":"03cda47a6e654ed85d932714fc09ce4874600eda29ec6628cfbaeb155cab78c9","SHA384":"bbda8407c4f9fc4e54d772f1c7fb9d30bc97e1f97ecd51c443063d1fa0644e266328781776cd5c44896c457c75f4d7da"}}],"Signer":[{"SerialNumber":"4eb872f0c388229ae038b56303fcfdd5","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","Version":1}]}],"LoadsDespiteHVCI":"FALSE"},{"Company":"ludashi.com","Date":"","Description":"Ludashi System Driver","FileVersion":"1.1020.1030.1217","Filename":"","MD5":"8a973be665923e9708974e72228f9805","MachineType":"I386","OriginalFilename":"ComputerZ.Sys","Product":"鲁大师","ProductVersion":"1.1020.1030.1217","Publisher":"","SHA1":"34b2986f1ff5146f7145433f1ef5dfe6210131d0","SHA256":"3f3684a37b2645fa6827943d9812ffc2d83e89e962935b29874bec7c3714a06f","Signature":"","Imphash":"050d389675730da0d9d75367659cd53b","Authentihash":{"MD5":"98e90e61976ed80c2d4db4e949ccb4dd","SHA1":"c8b1dcdb8c29435c60b5c1e7ebaa399637c880a7","SHA256":"e4f90ded38e11860497b9d0290bcf93a6bcb48e836b334010894a2de865b148c"},"RichPEHeaderHash":{"MD5":"d1a79229c378e2371e92e26510f9d7dc","SHA1":"59d47b012da8415f780a06d0204294a48affa1ab","SHA256":"cc6c4013bb762de8a20b4e2f725a9388fab9c386c3e86a5e30c1cc4429c6a525"},"Sections":{".text":{"Entropy":6.304794231575882,"Virtual Size":"0x3bac"},".rdata":{"Entropy":4.036978756000567,"Virtual Size":"0x1b4"},".data":{"Entropy":0.5154246727248383,"Virtual Size":"0xd0"},"INIT":{"Entropy":5.472409663915438,"Virtual Size":"0x492"},".rsrc":{"Entropy":3.530874948502931,"Virtual Size":"0x3e0"},".reloc":{"Entropy":5.920309756075584,"Virtual Size":"0x2d8"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2020-12-17 05:08:52","InternalName":"ComputerZ.Sys","Copyright":"版权所有 (C) 2010-2020 www.ludashi.com","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["RtlGetVersion","IoCreateSymbolicLink","IoCreateDevice","IoGetDeviceProperty","_wcsicmp","ObfDereferenceObject","IoGetDeviceAttachmentBaseRef","PsGetVersion","memset","MmIsAddressValid","RtlFreeUnicodeString","IoGetDeviceObjectPointer","RtlAnsiStringToUnicodeString","RtlInitAnsiString","KeWaitForSingleObject","IofCallDriver","IofCompleteRequest","KeInitializeEvent","MmUnmapIoSpace","READ_REGISTER_BUFFER_UCHAR","MmMapIoSpace","READ_REGISTER_BUFFER_ULONG","WRITE_REGISTER_ULONG","WRITE_REGISTER_UCHAR","KeDelayExecutionThread","_allmul","SeReleaseSubjectContext","SeTokenIsAdmin","SeCaptureSubjectContext","KeTickCount","KeBugCheckEx","RtlUnwind","RtlInitUnicodeString","IoDeleteSymbolicLink","IoBuildDeviceIoControlRequest","IoDeleteDevice","HalSetBusDataByOffset","HalGetBusDataByOffset","KeStallExecutionProcessor"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root CA","ValidFrom":"2011-04-15 19:41:37","ValidTo":"2021-04-15 19:51:37","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"611cb28a000000000026","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"983a0c315a50542362f2bd6a5d71c8d0","SHA1":"8047f476001f5cb16a661d2a3fd0c3576168f5e2","SHA256":"5f6a519ed2e35cd0fa1cdfc90f4387162c36287bbf9e4d6648251d99542a9e83","SHA384":"5f014b60511ddab3247ef0b3c03fe82c622237ba76015e2911d1adc50dc632d56ebd1ee532f3c2b6cbfe68d80a2c91dc"}},{"Subject":"C=CN, ST=, L=, O=, CN=","ValidFrom":"2020-09-22 00:00:00","ValidTo":"2021-11-03 12:00:00","Signature":"13db2c81c633c1bcbd24583f4cad5f4bd0232e41c522e305508be512b31dfbd3044c237481ea96acab73c7546abe77305354ac011394026846c10cb34e86a768e44d8b5926558ec8cf18819016b9385e80097f0c6ec6475812391baf984d0f1989ac661dde4c29576e53b512e14541d5ae061282063d2c78a93203a58ccbd1890ebaf9021e37f9f445ca35eaecede3a9cb7eda7298521e98a9700128085b6ed12a1580a0aa1e9154c2b7987dd98bbecae3878cd5b81dcb859c1373058dc0aa5cde4cfd1ab33a65d380eb29848de8ce003c5e013d694ad5bc4a5eaa88b16dd590d059a4efe8dc4e65073e1a91ae76cdcecf24070a4a674985bafc7bf6dd976040","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"03fd3e81a23e67968baf999b7a1b3bbc","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"f59257898e29705841730d2e5f7360e2","SHA1":"366a61045b4c61e4f763413993da98b2d1122d89","SHA256":"e3079aa603102d9040e6f1d637b95d13e7c94cec366637a99abd629711cc681c","SHA384":"1876b057e7b177bca4d184d0e9ee2510c706e8e6b85d1e5aea268823d0bf1d59637c0eb343d913a147643ef2298854d0"}},{"Subject":"C=US, O=DigiCert, CN=DigiCert Timestamp Responder","ValidFrom":"2014-10-22 00:00:00","ValidTo":"2024-10-22 00:00:00","Signature":"9d257e1b334db226815c9b86ce23200f8087e588ffffb1d46a2c31ed3a17197117cda91bbc5a1639009de36c84e45a40fbde06018c37fa9bb19d247efe20a457ad5bb79ab06026ea6957215d342f1f71b0839419056b359010a07b97c7f63fe7e21141a6bd62d9f0273d381d286f3a5209f0ec7062d3624bb0e073a692c0d38e31d82fe36d171306eee403b614abf38f43a7719d21dd14ca155d9241daf90f81d199740d26c40e7f1bb5f5a0f1c677062815e9d893e55516f0bb0aab1cdb5c482766c8a38b0a1ce595daaec42e59a061dddaf36da261e98a0b6dec1218bdf755544003922b6bc251c20a48afb0d46ee0f4140a3a1be38f3dcaaf6a8d7bdcd844","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"03019a023aff58b16bd6d5eae617f066","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"a752afee44f017e8d74e3f3eb7914ae3","SHA1":"8eca80a6b80e9c69dcef7745748524afb8019e2d","SHA256":"82560fa7efec30b5ff82af643e6f3bf3d46868bbd5e7d76f93db185e9e3553a1","SHA384":"e8b11408c88f877ade4ca51114a175fb5dfd2d18d2a66be547c1c9e080fa8f592c7870e30dfab1c04d234993dd0907f3"}},{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Code Signing CA,1","ValidFrom":"2011-02-11 12:00:00","ValidTo":"2026-02-10 12:00:00","Signature":"7b721d64ff88c83ac1b7e9e7a9c487bbdb9492d7905933fa2b87dea85b80253f138f9b831b7c43c4e68cdf393ec315ecb0da3b21257b24c1725db84791811346fa9c3f6a5138deb425cbf0abdfc528015479104624d1380f26a161904dbabd28e63ff1c4aa9bf6da35534fc9f23dd36cdc23edaaa04d6709f33a803d3cfb364c90e776a4ddf23abf56352fa24c65e8e0d4dad1c7c8916a2d234f373b199418d4d59c103cd5b11c19ff8fc86b9b9ef8ae9c999678d1cd9c51155b4226725a8d0a4a239240e886de22c2933ad49b68a6df297f06b93c0ebd9fc4869c82474271328609997209794b9d7169f541ff7f397764f1848dbe8b1eb27d68a3a590b10cff","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"0fa8490615d700a0be2176fdc5ec6dbd","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"a9a31555bbc92b6033975c5428fb3679","SHA1":"47f4b9898631773231b32844ec0d49990ac4eb1e","SHA256":"c826846e4b1d73edb7561ab1b41c949354e237a91e82fe1be5b7e2e1701f52d1","SHA384":"86f49574f368a561914a52d7ae043ec6784ef8c718960700f834e123594605d25d39f1ad45f1eb5052c9567f3edd0e16"}},{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID CA,1","ValidFrom":"2006-11-10 00:00:00","ValidTo":"2021-11-10 00:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"06fdf9039603adea000aeb3f27bbba1b","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"4e5ad189638cf52ba9cd881d4d44668c","SHA1":"cdc115e98d798b33904c820d63cc1e1afc19251d","SHA256":"37560fb9d548ab62cc3ed4669a4ab74828b5a108e67e829937ffb2d10a5f78dd","SHA384":"173bfb77183785621ef15f43ea807338cea6a02e8183317d9ef050c7237adda3fa2a5bdcd5a4c96da9f2c55900675b9f"}}],"Signer":[{"SerialNumber":"03fd3e81a23e67968baf999b7a1b3bbc","Issuer":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Code Signing CA,1","Version":1}]}],"LoadsDespiteHVCI":"TRUE"},{"Company":"360.cn","Date":"","Description":"Ludashi System Driver","FileVersion":"1.6.14.1022","Filename":"","MD5":"0d123be07e2dfd2b2ade49ad2a905a5b","MachineType":"I386","OriginalFilename":"ComputerZ.Sys","Product":"鲁大师","ProductVersion":"1.6.14.1021","Publisher":"","SHA1":"c74f6293be68533995e4b95469e6dddedd1c3905","SHA256":"40eef1f52c7b81750cee2b74b5d2f4155d4e58bdde5e18ea612ab09ed0864554","Signature":"","Imphash":"f9b9487f25a2c1e08c02f391387c5323","Authentihash":{"MD5":"91540db08dc5242983241c8cd8979178","SHA1":"8db33a31ff39917a4dbd0ed5a2b785cf751ec862","SHA256":"811f82960814c21949534fc1808e341a5b22caf52a094e5e427dac3aa6c7aa73"},"RichPEHeaderHash":{"MD5":"7fc550aec15fd6621ba15e6f0c8d0b43","SHA1":"231a47a21f97fb57cdca08ba5a88d86f15920c2e","SHA256":"2d878af22eeafbfa7f8d8a40ca040a55f5c294ef7d7e93e7505d1fb2691880d2"},"Sections":{".text":{"Entropy":6.341617339803296,"Virtual Size":"0x2c20"},".rdata":{"Entropy":4.045541622895057,"Virtual Size":"0x194"},".data":{"Entropy":0.9395563653739029,"Virtual Size":"0x64"},"INIT":{"Entropy":5.471916387889967,"Virtual Size":"0x448"},".rsrc":{"Entropy":3.552352662648348,"Virtual Size":"0x480"},".reloc":{"Entropy":5.46903370349161,"Virtual Size":"0x206"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2014-04-17 23:58:31","InternalName":"ComputerZ.Sys","Copyright":"版权所有 (C) 2010-2014 www.ludashi.com","Imports":["ntoskrnl.exe"],"ExportedFunctions":"","ImportedFunctions":["IoDeleteDevice","IoDeleteSymbolicLink","RtlInitUnicodeString","IofCompleteRequest","IoCreateSymbolicLink","IoCreateDevice","ExFreePoolWithTag","ExAllocatePoolWithTag","IoGetDeviceProperty","RtlCompareUnicodeString","ObfDereferenceObject","IoGetDeviceAttachmentBaseRef","PsGetVersion","MmIsAddressValid","RtlFreeUnicodeString","IoGetDeviceObjectPointer","RtlAnsiStringToUnicodeString","RtlInitAnsiString","KeWaitForSingleObject","IofCallDriver","IoBuildDeviceIoControlRequest","KeInitializeEvent","MmUnmapIoSpace","READ_REGISTER_BUFFER_UCHAR","MmMapIoSpace","READ_REGISTER_BUFFER_ULONG","WRITE_REGISTER_ULONG","WRITE_REGISTER_UCHAR","KeSetTimer","KeInitializeTimerEx","_allmul","SeReleaseSubjectContext","SeTokenIsAdmin","SeCaptureSubjectContext","KeTickCount","KeBugCheckEx","RtlUnwind"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Time Stamping Signer","ValidFrom":"2010-05-10 00:00:00","ValidTo":"2015-05-10 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"478a8efb59e1d83f0ce142d2a28707be","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"f13ede9179075999ef7f856ec31e364b","SHA1":"2f09867166e6107e17808317f5c8d4ee157f45bc","SHA256":"089a2c4c6ac7432020acdb65c33bf39130da6f37c002ba79128bd4c94e4fa101","SHA384":"67be6d358f4ecd0726163603a404db9d78c340951d43fd608482cd89a2de7f9566f0ce45f8222f420003157cb266b939"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. , For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority , G5","ValidFrom":"2006-11-08 00:00:00","ValidTo":"2021-11-07 23:59:59","Signature":"1302ddf8e88600f25af8f8200c59886207cecef74ef9bb59a198e5e138dd4ebc6618d3adeb18f20dc96d3e4a9420c33cbabd6554c6af44b310ad2c6b3eabd707b6b88163c5f95e2ee52a67cecd330c2ad7895603231fb3bee83a0859b4ec4535f78a5bff66cf50afc66d578d1978b7b9a2d157ea1f9a4bafbac98e127ec6bdff","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"250ce8e030612e9f2b89f7054d7cf8fd","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"918d9eb6a6cd36c531eceb926170a7e1","SHA1":"0ae95700d65e6f59715aa47048993ca7858e676a","SHA256":"47c46e6eaa3780eace3d0d891346cd373359d246b21a957219dbab4c8f37c166","SHA384":"e54017c93ba52f012cc15aeb3bcbce1e90a0006ff8dca231a24fc572926770f63213343f538003407bed3463fa9c4a85"}},{"Subject":"C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority","ValidFrom":"2006-05-23 17:01:29","ValidTo":"2016-05-23 17:11:29","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"610c120600000000001b","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"53c41bc1164e09e0cd1617a5bf913efd","SHA1":"93c03aac8951d494ecd5696b1c08658541b18727","SHA256":"40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b","SHA384":"f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"}},{"Subject":"C=CN, ST=Beijing, L=Beijing, O=Qihoo 360 Software (Beijing) Company Limited, OU=Digital ID Class 3 , Microsoft Software Validation v2, OU=Tech. Dev. Dept., CN=Qihoo 360 Software (Beijing) Company Limited","ValidFrom":"2013-03-11 00:00:00","ValidTo":"2016-03-10 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"51bd5d8e45b82a0210f17fe4c5233468","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"ad73c81b3174cc055d9718b2145a3d1f","SHA1":"0cb9e92828857976774a9fe96c016cdc67a25e6d","SHA256":"2c5d88401dfeec2ebf814e09d0d0faec9d109a503d427da4a7f3e0dec5ae0b6c","SHA384":"48c38329eb7f200be0d48acddabdb93c354dd1b8b3c3ce955a23638a4e2e32dd7d0f3a4f227a2b6382adc95e746cc411"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","ValidFrom":"2010-02-08 00:00:00","ValidTo":"2020-02-07 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"5200e5aa2556fc1a86ed96c9d44b33c7","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"b30c31a572b0409383ed3fbe17e56e81","SHA1":"4843a82ed3b1f2bfbee9671960e1940c942f688d","SHA256":"03cda47a6e654ed85d932714fc09ce4874600eda29ec6628cfbaeb155cab78c9","SHA384":"bbda8407c4f9fc4e54d772f1c7fb9d30bc97e1f97ecd51c443063d1fa0644e266328781776cd5c44896c457c75f4d7da"}}],"Signer":[{"SerialNumber":"51bd5d8e45b82a0210f17fe4c5233468","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","Version":1}]}],"LoadsDespiteHVCI":"FALSE"},{"Company":"ludashi.com","Date":"","Description":"Ludashi System Driver","FileVersion":"1.6.16.1005","Filename":"","MD5":"2751c7fd7f09479fa2b15168695adebc","MachineType":"I386","OriginalFilename":"ComputerZ.Sys","Product":"鲁大师","ProductVersion":"1.6.16.1005","Publisher":"","SHA1":"229716e61f74db821d5065bac533469efb54867b","SHA256":"423f052690b6b523502931151dfcc63530e3bd9d79680f9b5ac033b23b5c6f18","Signature":"","Imphash":"a53b095a8d7366075d445892070cde51","Authentihash":{"MD5":"9e942fef50fc9b5d806b205e5f58fd52","SHA1":"dc05788d55803c417369bf42491f78bad6fdb139","SHA256":"10576dad4928b01c21ecd2ed9914abba8bf4edae964d5d9d3c0d64ec7657f3d3"},"RichPEHeaderHash":{"MD5":"36d79e4bc2a15ca68d83887d15f8f3b0","SHA1":"8ae8df369a94635efe2cd11c5a54829a352887c5","SHA256":"c7e19135c0e8c6b70db667044a45444ec135e550845f32f0b49fa08cfe0a9e7e"},"Sections":{".text":{"Entropy":6.308380539521111,"Virtual Size":"0x3480"},".rdata":{"Entropy":4.079851535781263,"Virtual Size":"0x1a4"},".data":{"Entropy":0.6683247346784849,"Virtual Size":"0x98"},"INIT":{"Entropy":5.453732397752759,"Virtual Size":"0x4b4"},".rsrc":{"Entropy":3.5694600740980404,"Virtual Size":"0x488"},".reloc":{"Entropy":5.771234247296874,"Virtual Size":"0x286"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2016-04-18 22:27:25","InternalName":"ComputerZ.Sys","Copyright":"版权所有 (C) 2010-2016 www.ludashi.com","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["IofCompleteRequest","RtlGetVersion","IoCreateSymbolicLink","IoCreateDevice","ExFreePoolWithTag","ExAllocatePoolWithTag","IoGetDeviceProperty","RtlCompareUnicodeString","ObfDereferenceObject","IoGetDeviceAttachmentBaseRef","PsGetVersion","MmIsAddressValid","RtlFreeUnicodeString","IoGetDeviceObjectPointer","RtlAnsiStringToUnicodeString","RtlInitAnsiString","KeWaitForSingleObject","RtlInitUnicodeString","IoBuildDeviceIoControlRequest","KeInitializeEvent","MmUnmapIoSpace","READ_REGISTER_BUFFER_UCHAR","MmMapIoSpace","READ_REGISTER_BUFFER_ULONG","WRITE_REGISTER_ULONG","WRITE_REGISTER_UCHAR","KeSetTimer","KeInitializeTimerEx","_allmul","SeReleaseSubjectContext","SeTokenIsAdmin","SeCaptureSubjectContext","KeTickCount","KeBugCheckEx","RtlUnwind","IoDeleteSymbolicLink","IofCallDriver","IoDeleteDevice","HalGetBusDataByOffset","HalSetBusDataByOffset"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA , G2","ValidFrom":"2012-12-21 00:00:00","ValidTo":"2020-12-30 23:59:59","Signature":"03099b8f79ef7f5930aaef68b5fae3091dbb4f82065d375fa6529f168dea1c9209446ef56deb587c30e8f9698d23730b126f47a9ae3911f82ab19bb01ac38eeb599600adce0c4db2d031a6085c2a7afce27a1d574ca86518e979406225966ec7c7376a8321088e41eaddd9573f1d7749872a16065ea6386a2212a35119837eb6","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"7e93ebfb7cc64e59ea4b9a77d406fc3b","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"d0785ad36e427c92b19f6826ab1e8020","SHA1":"365b7a9c21bd9373e49052c3e7b3e4646ddd4d43","SHA256":"c2abb7484da91a658548de089d52436175fdb760a1387d225611dc0613a1e2ff","SHA384":"eab4fe5ef90e0de4a6aa3a27769a5e879f588df5e4785aa4104debd1f81e19ea56d33e3a16e5facf99f68b5d8e3d287b"}},{"Subject":"C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer , G4","ValidFrom":"2012-10-18 00:00:00","ValidTo":"2020-12-29 23:59:59","Signature":"783bb4912a004cf08f62303778a38427076f18b2de25dca0d49403aa864e259f9a40031cddcee379cb216806dab632b46dbff42c266333e449646d0de6c3670ef705a4356c7c8916c6e9b2dfb2e9dd20c6710fcd9574dcb65cdebd371f4378e678b5cd280420a3aaf14bc48829910e80d111fcdd5c766e4f5e0e4546416e0db0ea389ab13ada097110fc1c79b4807bac69f4fd9cb60c162bf17f5b093d9b5be216ca13816d002e380da8298f2ce1b2f45aa901af159c2c2f491bdb22bbc3fe789451c386b182885df03db451a179332b2e7bb9dc20091371eb6a195bcfe8a530572c89493fb9cf7fc9bf3e226863539abd6974acc51d3c7f92e0c3bc1cd80475","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"0ecff438c8febf356e04d86a981b1a50","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"e9d38360b914c8863f6cba3ee58764d3","SHA1":"4cba8eae47b6bf76f20b3504b98b8f062694a89b","SHA256":"88901d86a4cc1f1bb193d08e1fb63d27452e63f83e228c657ab1a92e4ade3976","SHA384":"e9f2a75334a9e336c5a4712eadee88d0374b0fdc273262f4e65c9040ad2793067cc076696db5279a478773485e285652"}},{"Subject":"C=CN, ST=Beijing, L=Beijing, O=Qihoo 360 Software (Beijing) Company Limited, OU=Tech. Dev. Dept., CN=Qihoo 360 Software (Beijing) Company Limited","ValidFrom":"2016-01-06 00:00:00","ValidTo":"2019-03-28 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"26279f0f2f11970dccf63eba88f2d4c4","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"fbebdc165d8f4616444075e0a48855e6","SHA1":"f6bf44f1acae05fc1638190459485da95f4ed1ec","SHA256":"6917dc56b04b2bd7a75f0987ee27c832dc62298b698b585a4c2c07eb890b6528","SHA384":"c857fb61de8d13e1ac649fbaa4d69acd293d8542cd380411db8bbe2fdc3b9d98c607d0d267081fac285dd33e9141f329"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. , For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority , G5","ValidFrom":"2011-02-22 19:25:17","ValidTo":"2021-02-22 19:35:17","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"611993e400000000001c","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"78a717e082dcc1cda3458d917e677d14","SHA1":"4a872e0e51f9b304469cd1dedb496ee9b8b983a4","SHA256":"317fa1d234ebc49040ebc5e8746f8997471496051b185a91bdd9dfbb23fab5f8","SHA384":"b71052da4eb9157c8c1a5d7f55df19d69b9128598b72fcca608e5b7cc7d64c43c5504b9c86355a6dc22ee40c88cc385c"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","ValidFrom":"2010-02-08 00:00:00","ValidTo":"2020-02-07 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"5200e5aa2556fc1a86ed96c9d44b33c7","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"b30c31a572b0409383ed3fbe17e56e81","SHA1":"4843a82ed3b1f2bfbee9671960e1940c942f688d","SHA256":"03cda47a6e654ed85d932714fc09ce4874600eda29ec6628cfbaeb155cab78c9","SHA384":"bbda8407c4f9fc4e54d772f1c7fb9d30bc97e1f97ecd51c443063d1fa0644e266328781776cd5c44896c457c75f4d7da"}}],"Signer":[{"SerialNumber":"26279f0f2f11970dccf63eba88f2d4c4","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","Version":1}]}],"LoadsDespiteHVCI":"FALSE"},{"Company":"ludashi.com","Date":"","Description":"Ludashi System Driver","FileVersion":"1.6.16.1000","Filename":"","MD5":"15dd3ef7df34f9b464e9b38c2deb0793","MachineType":"I386","OriginalFilename":"ComputerZ.Sys","Product":"鲁大师","ProductVersion":"1.6.16.1000","Publisher":"","SHA1":"88811e1a542f33431b9f8b74cb8bf27209b27f17","SHA256":"468b087a0901d7bd971ab564b03ded48c508840b1f9e5d233a7916d1da6d9bd5","Signature":"","Imphash":"60e068470635cf20cc19b7f8e8cbfc5f","Authentihash":{"MD5":"a816b0ae3be265e0c94cb5c327d8b8b0","SHA1":"21f2c89ddef3f65f13275052865ae1fc07d0d938","SHA256":"448048bafeb3796bfce954dd78e1b90f5849d9b3459c51750f210da8bafb8753"},"RichPEHeaderHash":{"MD5":"36d79e4bc2a15ca68d83887d15f8f3b0","SHA1":"8ae8df369a94635efe2cd11c5a54829a352887c5","SHA256":"c7e19135c0e8c6b70db667044a45444ec135e550845f32f0b49fa08cfe0a9e7e"},"Sections":{".text":{"Entropy":6.347659623346448,"Virtual Size":"0x3370"},".rdata":{"Entropy":4.08913757037624,"Virtual Size":"0x1a4"},".data":{"Entropy":0.6683247346784849,"Virtual Size":"0x98"},"INIT":{"Entropy":5.454359380727977,"Virtual Size":"0x4b4"},".rsrc":{"Entropy":3.56231919573584,"Virtual Size":"0x488"},".reloc":{"Entropy":5.745697158903053,"Virtual Size":"0x27e"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2016-02-26 03:48:30","InternalName":"ComputerZ.Sys","Copyright":"版权所有 (C) 2010-2016 www.ludashi.com","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["RtlGetVersion","IofCompleteRequest","IoCreateSymbolicLink","IoCreateDevice","ExFreePoolWithTag","ExAllocatePoolWithTag","IoGetDeviceProperty","RtlCompareUnicodeString","ObfDereferenceObject","IoGetDeviceAttachmentBaseRef","PsGetVersion","MmIsAddressValid","RtlFreeUnicodeString","IoGetDeviceObjectPointer","RtlAnsiStringToUnicodeString","RtlInitAnsiString","KeWaitForSingleObject","RtlInitUnicodeString","IoBuildDeviceIoControlRequest","KeInitializeEvent","MmUnmapIoSpace","READ_REGISTER_BUFFER_UCHAR","MmMapIoSpace","READ_REGISTER_BUFFER_ULONG","WRITE_REGISTER_ULONG","WRITE_REGISTER_UCHAR","KeSetTimer","KeInitializeTimerEx","_allmul","SeReleaseSubjectContext","SeTokenIsAdmin","SeCaptureSubjectContext","KeTickCount","KeBugCheckEx","RtlUnwind","IoDeleteSymbolicLink","IofCallDriver","IoDeleteDevice","HalGetBusDataByOffset","HalSetBusDataByOffset"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA , G2","ValidFrom":"2012-12-21 00:00:00","ValidTo":"2020-12-30 23:59:59","Signature":"03099b8f79ef7f5930aaef68b5fae3091dbb4f82065d375fa6529f168dea1c9209446ef56deb587c30e8f9698d23730b126f47a9ae3911f82ab19bb01ac38eeb599600adce0c4db2d031a6085c2a7afce27a1d574ca86518e979406225966ec7c7376a8321088e41eaddd9573f1d7749872a16065ea6386a2212a35119837eb6","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"7e93ebfb7cc64e59ea4b9a77d406fc3b","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"d0785ad36e427c92b19f6826ab1e8020","SHA1":"365b7a9c21bd9373e49052c3e7b3e4646ddd4d43","SHA256":"c2abb7484da91a658548de089d52436175fdb760a1387d225611dc0613a1e2ff","SHA384":"eab4fe5ef90e0de4a6aa3a27769a5e879f588df5e4785aa4104debd1f81e19ea56d33e3a16e5facf99f68b5d8e3d287b"}},{"Subject":"C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer , G4","ValidFrom":"2012-10-18 00:00:00","ValidTo":"2020-12-29 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"0ecff438c8febf356e04d86a981b1a50","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"e9d38360b914c8863f6cba3ee58764d3","SHA1":"4cba8eae47b6bf76f20b3504b98b8f062694a89b","SHA256":"88901d86a4cc1f1bb193d08e1fb63d27452e63f83e228c657ab1a92e4ade3976","SHA384":"e9f2a75334a9e336c5a4712eadee88d0374b0fdc273262f4e65c9040ad2793067cc076696db5279a478773485e285652"}},{"Subject":"C=CN, ST=Beijing, L=Beijing, O=Qihoo 360 Software (Beijing) Company Limited, OU=Tech. Dev. Dept., CN=Qihoo 360 Software (Beijing) Company Limited","ValidFrom":"2016-01-06 00:00:00","ValidTo":"2019-03-28 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"26279f0f2f11970dccf63eba88f2d4c4","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"fbebdc165d8f4616444075e0a48855e6","SHA1":"f6bf44f1acae05fc1638190459485da95f4ed1ec","SHA256":"6917dc56b04b2bd7a75f0987ee27c832dc62298b698b585a4c2c07eb890b6528","SHA384":"c857fb61de8d13e1ac649fbaa4d69acd293d8542cd380411db8bbe2fdc3b9d98c607d0d267081fac285dd33e9141f329"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. , For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority , G5","ValidFrom":"2011-02-22 19:25:17","ValidTo":"2021-02-22 19:35:17","Signature":"812a82168c34672be503eb347b8ca2a3508af45586f11e8c8eae7dee0319ce72951848ad6211fd20fd3f4706015ae2e06f8c152c4e3c6a506c0b36a3cf7a0d9c42bc5cf819d560e369e6e22341678c6883762b8f93a32ab57fbe59fba9c9b2268fcaa2f3821b983e919527978661ee5b5d076bcd86a8e26580a8e215e2b2be23056aba0cf347934daca48c077939c061123a050d89a3ec9f578984fbecca7c47661491d8b60f195de6b84aacbc47c8714396e63220a5dc7786fd3ce38b71db7b9b03fcb71d3264eb1652a043a3fa2ead59924e7cc7f233424838513a7c38c71b242228401e1a461f17db18f7f027356cb863d9cdb9645d2ba55eefc629b4f2c7f821cc04ba57fd01b6abc667f9e7d3997ff4f522fa72f5fdff3a1c423aa1f98018a5ee8d1cd4669e4501feaaeefffb178f30f7f1cd29c59decb5d549003d85b8cbbb933a276a49c030ae66c9f723283276f9a48356c848ce5a96aaa0cc0cc47fb48e97af6de35427c39f86c0d6e473089705dbd054625e0348c2d59f7fa7668cd09db04fd4d3985f4b7ac97fb22952d01280c70f54b61e67cdc6a06c110384d34875e72afeb03b6e0a3aa66b769905a3f177686133144706fc537f52bd92145c4a246a678caf8d90aad0f679211b93267cc3ce1ebd883892ae45c6196a4950b305f8ae59378a6a250394b1598150e8ba8380b72335f476b9671d5918ad208d94","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"611993e400000000001c","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"78a717e082dcc1cda3458d917e677d14","SHA1":"4a872e0e51f9b304469cd1dedb496ee9b8b983a4","SHA256":"317fa1d234ebc49040ebc5e8746f8997471496051b185a91bdd9dfbb23fab5f8","SHA384":"b71052da4eb9157c8c1a5d7f55df19d69b9128598b72fcca608e5b7cc7d64c43c5504b9c86355a6dc22ee40c88cc385c"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","ValidFrom":"2010-02-08 00:00:00","ValidTo":"2020-02-07 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"5200e5aa2556fc1a86ed96c9d44b33c7","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"b30c31a572b0409383ed3fbe17e56e81","SHA1":"4843a82ed3b1f2bfbee9671960e1940c942f688d","SHA256":"03cda47a6e654ed85d932714fc09ce4874600eda29ec6628cfbaeb155cab78c9","SHA384":"bbda8407c4f9fc4e54d772f1c7fb9d30bc97e1f97ecd51c443063d1fa0644e266328781776cd5c44896c457c75f4d7da"}}],"Signer":[{"SerialNumber":"26279f0f2f11970dccf63eba88f2d4c4","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","Version":1}]}],"LoadsDespiteHVCI":"FALSE"},{"Company":"360.cn","Date":"","Description":"Ludashi System Driver","FileVersion":"1.6.11.1008","Filename":"","MD5":"0fbf893691a376b168d8cdf427b89945","MachineType":"AMD64","OriginalFilename":"ComputerZ.Sys","Product":"360硬件大师","ProductVersion":"1.6.11.1008","Publisher":"","SHA1":"98600e919b8579d89e232a253d7277355b652750","SHA256":"47c490cc83a17ff36a1a92e08d63e76edffba49c9577865315a6c9be6ba80a7d","Signature":"","Imphash":"fffbca93e6322995552b841c7d65b033","Authentihash":{"MD5":"8289ff20bf4f317bec672811f31b301a","SHA1":"ae373bd5efa1d240b8a0a9c02dd9aa28313e39e5","SHA256":"da99d80082f3492080cd036d121d6d017b9e8d09edcd59e099b1755aa7e9be16"},"RichPEHeaderHash":{"MD5":"c6a84fd8b9ad9825f80dad9cd0c9e192","SHA1":"2955d54729fcdec5454796a4decd2ce2fd49f167","SHA256":"d409b635f972a6ced87c5ac14d62792a70f26f226099fc41075fbcea4daf6f29"},"Sections":{".text":{"Entropy":6.337985452252188,"Virtual Size":"0x283e"},".rdata":{"Entropy":4.64724214111085,"Virtual Size":"0x308"},".data":{"Entropy":0.41099431917639,"Virtual Size":"0x164"},".pdata":{"Entropy":3.820847865098973,"Virtual Size":"0x180"},"INIT":{"Entropy":5.095356237769951,"Virtual Size":"0x470"},".rsrc":{"Entropy":3.527424727145746,"Virtual Size":"0x3b0"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2011-10-08 00:15:32","InternalName":"ComputerZ.Sys","Copyright":"版权所有 (C) 2010-2011 360.cn","Imports":["ntoskrnl.exe"],"ExportedFunctions":"","ImportedFunctions":["IoDeleteSymbolicLink","RtlInitUnicodeString","IoDeleteDevice","IofCompleteRequest","IoCreateSymbolicLink","IoCreateDevice","ExAllocatePoolWithTag","ExFreePoolWithTag","IoGetDeviceAttachmentBaseRef","PsGetVersion","RtlCompareUnicodeString","ObfDereferenceObject","IoGetDeviceProperty","RtlAnsiStringToUnicodeString","RtlInitAnsiString","RtlFreeUnicodeString","IoGetDeviceObjectPointer","MmIsAddressValid","IoBuildDeviceIoControlRequest","KeInitializeEvent","KeWaitForSingleObject","IofCallDriver","MmUnmapIoSpace","MmMapIoSpace","SeTokenIsAdmin","SeReleaseSubjectContext","SeCaptureSubjectContext","KeSetTimer","KeInitializeTimerEx","KeBugCheckEx","__C_specific_handler"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer , G2","ValidFrom":"2007-06-15 00:00:00","ValidTo":"2012-06-14 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"3825d7faf861af9ef490e726b5d65ad5","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"d6c7684e9aaa508cf268335f83afe040","SHA1":"18066d20ad92409c567cdfde745279ff71c75226","SHA256":"a612fb22ce8be6dab75e47c98508f98496583e79c9c97b936a8caee9ea9f3fff","SHA384":"35c249d6ad0261a6229b2a727067ac6ba32a5d24b30b9249051f748c7735fbe2ec2ef26a702c50df1790fbe32a65aee7"}},{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA","ValidFrom":"2003-12-04 00:00:00","ValidTo":"2013-12-03 23:59:59","Signature":"4a6bf9ea58c2441c318979992b96bf82ac01d61c4ccdb08a586edf0829a35ec8ca9313e704520def47272f0038b0e4c9934e9ad4226215f73f37214f703180f18b3887b3e8e89700fecf55964e24d2a9274e7aaeb76141f32acee7c9d95eddbb2b853eb59db5d9e157ffbeb4c57ef5cf0c9ef097fe2bd33b521b1b3827f73f4a","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"47bf1995df8d524643f7db6d480d31a4","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"518d2ea8a21e879c942d504824ac211c","SHA1":"21ce87d827077e61abddf2beba69fde5432ea031","SHA256":"1ec3b4f02e03930a470020e0e48d24b84678bb558f46182888d870541f5e25c7","SHA384":"53e346bbde23779a5d116cc9d86fdd71c97b1f1b343439f8a11aa1d3c87af63864bb8488a5aeb2d0c26a6a1e0b15f03f"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. , For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority , G5","ValidFrom":"2006-11-08 00:00:00","ValidTo":"2021-11-07 23:59:59","Signature":"1302ddf8e88600f25af8f8200c59886207cecef74ef9bb59a198e5e138dd4ebc6618d3adeb18f20dc96d3e4a9420c33cbabd6554c6af44b310ad2c6b3eabd707b6b88163c5f95e2ee52a67cecd330c2ad7895603231fb3bee83a0859b4ec4535f78a5bff66cf50afc66d578d1978b7b9a2d157ea1f9a4bafbac98e127ec6bdff","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"250ce8e030612e9f2b89f7054d7cf8fd","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"918d9eb6a6cd36c531eceb926170a7e1","SHA1":"0ae95700d65e6f59715aa47048993ca7858e676a","SHA256":"47c46e6eaa3780eace3d0d891346cd373359d246b21a957219dbab4c8f37c166","SHA384":"e54017c93ba52f012cc15aeb3bcbce1e90a0006ff8dca231a24fc572926770f63213343f538003407bed3463fa9c4a85"}},{"Subject":"C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority","ValidFrom":"2006-05-23 17:01:29","ValidTo":"2016-05-23 17:11:29","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"610c120600000000001b","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"53c41bc1164e09e0cd1617a5bf913efd","SHA1":"93c03aac8951d494ecd5696b1c08658541b18727","SHA256":"40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b","SHA384":"f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"}},{"Subject":"C=CN, ST=Sichuan, L=Chengdu, O=Chengdu Qiying Technology Co.,Ltd., OU=Digital ID Class 3 , Microsoft Software Validation v2, CN=Chengdu Qiying Technology Co.,Ltd.","ValidFrom":"2011-03-24 00:00:00","ValidTo":"2012-04-21 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"4eb872f0c388229ae038b56303fcfdd5","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"08ba4b408576a45f9ae47b3bb6bee468","SHA1":"8701103a3c6f007be112d5f0d1cdfe32f73d1c02","SHA256":"8ba1e1472491da70d5de5d5b6e754d3217893f3abea2877e228c0bfccf07e8b2","SHA384":"d63bb928f6a887680169cb72c13b8a402c574766848035406c9fb119643f7f7a04852ccdfbddf0ff673d7189e4aa09f4"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","ValidFrom":"2010-02-08 00:00:00","ValidTo":"2020-02-07 23:59:59","Signature":"5622e634a4c461cb48b901ad56a8640fd98c91c4bbcc0ce5ad7aa0227fdf47384a2d6cd17f711a7cec70a9b1f04fe40f0c53fa155efe749849248581261c911447b04c638cbba134d4c645e80d85267303d0a98c646ddc7192e645056015595139fc58146bfed4a4ed796b080c4172e737220609be23e93f449a1ee9619dccb1905cfc3dd28dac423d6536d4b43d40288f9b10cf2326cc4b20cb901f5d8c4c34ca3cd8e537d66fa520bd34eb26d9ae0de7c59af7a1b42191336f86e858bb257c740e58fe751b633fce317c9b8f1b969ec55376845b9cad91faaced93ba5dc82153c2825363af120d5087111b3d5452968a2c9c3d921a089a052ec793a54891d3","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"5200e5aa2556fc1a86ed96c9d44b33c7","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"b30c31a572b0409383ed3fbe17e56e81","SHA1":"4843a82ed3b1f2bfbee9671960e1940c942f688d","SHA256":"03cda47a6e654ed85d932714fc09ce4874600eda29ec6628cfbaeb155cab78c9","SHA384":"bbda8407c4f9fc4e54d772f1c7fb9d30bc97e1f97ecd51c443063d1fa0644e266328781776cd5c44896c457c75f4d7da"}}],"Signer":[{"SerialNumber":"4eb872f0c388229ae038b56303fcfdd5","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","Version":1}]}],"LoadsDespiteHVCI":"FALSE"},{"Company":"鲁大师","Date":"","Description":"Ludashi System Driver","FileVersion":"1.3.10.802","Filename":"","MD5":"4f963d716a60737e5b59299f00daf285","MachineType":"AMD64","OriginalFilename":"ComputerZ.Sys","Product":"Ludashi System Driver","ProductVersion":"1.3.10.802","Publisher":"","SHA1":"879b32fcf78044cbc74b57717ab3ae18e77bc2fb","SHA256":"5aee1bae73d056960b3a2d2e24ea07c44358dc7bc3f8ac58cc015cccc8f8d89c","Signature":"","Imphash":"223a76f59831e1a59980b603f81c271d","Authentihash":{"MD5":"774176c8bcad0347dc02365e2992cb35","SHA1":"2691b12459cd8daecd942385ca64d8313ea78332","SHA256":"fb3176deae54472750747167287284c3cda5e14248ee10844305f322adcb81cd"},"RichPEHeaderHash":{"MD5":"f7bc3e823b56dda64b7a8789aa87612d","SHA1":"97b834dc6972d075c125b943de783fe4e8c7a503","SHA256":"fef8ed434cfdce3a7a1e00bf4fa8a056dd28b93390c64443255f6d69d48ccfc6"},"Sections":{".text":{"Entropy":5.84076554645177,"Virtual Size":"0xf44"},".rdata":{"Entropy":4.463998880670284,"Virtual Size":"0x2ac"},".data":{"Entropy":0.5159719988134768,"Virtual Size":"0x110"},".pdata":{"Entropy":3.6135610041122836,"Virtual Size":"0xfc"},"INIT":{"Entropy":4.947977722302833,"Virtual Size":"0x322"},".rsrc":{"Entropy":3.454357960132574,"Virtual Size":"0x3e8"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2010-08-02 04:58:46","InternalName":"ComputerZ.Sys","Copyright":"Copyright (C) 2008-2010 www.ludashi.com","Imports":["ntoskrnl.exe"],"ExportedFunctions":"","ImportedFunctions":["IoDeleteDevice","IoDeleteSymbolicLink","RtlInitUnicodeString","__C_specific_handler","MmUnmapIoSpace","MmMapIoSpace","IofCompleteRequest","IoCreateSymbolicLink","IoCreateDevice","RtlFreeUnicodeString","ObfDereferenceObject","MmIsAddressValid","IoGetDeviceObjectPointer","RtlAnsiStringToUnicodeString","RtlInitAnsiString","PsGetVersion","KeWaitForSingleObject","IofCallDriver","IoBuildDeviceIoControlRequest","KeInitializeEvent","KeBugCheckEx"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer , G2","ValidFrom":"2007-06-15 00:00:00","ValidTo":"2012-06-14 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"3825d7faf861af9ef490e726b5d65ad5","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"d6c7684e9aaa508cf268335f83afe040","SHA1":"18066d20ad92409c567cdfde745279ff71c75226","SHA256":"a612fb22ce8be6dab75e47c98508f98496583e79c9c97b936a8caee9ea9f3fff","SHA384":"35c249d6ad0261a6229b2a727067ac6ba32a5d24b30b9249051f748c7735fbe2ec2ef26a702c50df1790fbe32a65aee7"}},{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA","ValidFrom":"2003-12-04 00:00:00","ValidTo":"2013-12-03 23:59:59","Signature":"4a6bf9ea58c2441c318979992b96bf82ac01d61c4ccdb08a586edf0829a35ec8ca9313e704520def47272f0038b0e4c9934e9ad4226215f73f37214f703180f18b3887b3e8e89700fecf55964e24d2a9274e7aaeb76141f32acee7c9d95eddbb2b853eb59db5d9e157ffbeb4c57ef5cf0c9ef097fe2bd33b521b1b3827f73f4a","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"47bf1995df8d524643f7db6d480d31a4","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"518d2ea8a21e879c942d504824ac211c","SHA1":"21ce87d827077e61abddf2beba69fde5432ea031","SHA256":"1ec3b4f02e03930a470020e0e48d24b84678bb558f46182888d870541f5e25c7","SHA384":"53e346bbde23779a5d116cc9d86fdd71c97b1f1b343439f8a11aa1d3c87af63864bb8488a5aeb2d0c26a6a1e0b15f03f"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009,2 CA","ValidFrom":"2009-05-21 00:00:00","ValidTo":"2019-05-20 23:59:59","Signature":"8b03c0dd94d841a26169b015a878c730c6903c7e42f724b6e4837317047f04109ca1e2fa812febc0ca44e772e050b6551020836e9692e49a516ab43731dca52deb8c00c71d4fe74d32ba85f84ebefa675565f06abe7aca64381a101078457631f3867a030f60c2b35d9df68b6676821b59e183e5bd49a53856e5de41770e580f","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"655226e1b22e18e1590f2985ac22e75c","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"650704c342850095f3288eaf791147d4","SHA1":"4cdc38c800761463749c3cbd94a12f32e49877bf","SHA256":"07b8f662558ec85b71b43a79c6e94698144f4ced2308af21e7ba1e5d461da214","SHA384":"2a271d052213438467d09d60eaa4010c8642fff3eb0070e0cf9969428713c8fdc066b90996d594dd3136f5bd0af5a22a"}},{"Subject":"C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority","ValidFrom":"2006-05-23 17:01:29","ValidTo":"2016-05-23 17:11:29","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"610c120600000000001b","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"53c41bc1164e09e0cd1617a5bf913efd","SHA1":"93c03aac8951d494ecd5696b1c08658541b18727","SHA256":"40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b","SHA384":"f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"}},{"Subject":"C=CN, ST=Sichuan, L=Chengdu, O=Chengdu Qiying Technology Co.,Ltd., OU=Digital ID Class 3 , Microsoft Software Validation v2, CN=Chengdu Qiying Technology Co.,Ltd.","ValidFrom":"2010-03-31 00:00:00","ValidTo":"2011-03-31 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"61359ac44514d781769fd643666b4572","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"416fc5d0038211bf34811efeff6d562f","SHA1":"e0acbd39e2fa410a22c96e2a3eaea4342a626f40","SHA256":"843e587edb9c53b2fbbf84cd90b217af016da1330905b25c16bb059a26b5726e","SHA384":"1a1167bbac2b00e60c10a4c1dc1d0f5105c42582b1a39e05a1d60710d97a24c6ff76fe73700f0fb0e1e03f27aebb7697"}}],"Signer":[{"SerialNumber":"61359ac44514d781769fd643666b4572","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009,2 CA","Version":1}]}],"LoadsDespiteHVCI":"FALSE"},{"Company":"鲁大师","Date":"","Description":"Ludashi System Driver","FileVersion":"1.3.10.1110","Filename":"","MD5":"931d4f01b5a88027ef86437f1b862000","MachineType":"AMD64","OriginalFilename":"ComputerZ.Sys","Product":"Ludashi System Driver","ProductVersion":"1.3.10.1110","Publisher":"","SHA1":"a14d96b65d3968181d57b57ee60c533cb621b707","SHA256":"5c80dc051c4b0c62b9284211f71e5567c0c0187e466591eacb93e7dc10e4b9ab","Signature":"","Imphash":"27db67ffa112f866f1d34c32226e09cf","Authentihash":{"MD5":"3b253d28bd35fc413cf6f32fcf2b991d","SHA1":"d45c92707664f70a1f537833187dd42cb381470d","SHA256":"28bac5dbcdd887f35f8fef454d5df1f53c18a90c51d8222636f487a0f351f725"},"RichPEHeaderHash":{"MD5":"712c9acf9249f9b6194f890ef2c4677e","SHA1":"4db43c2a0f66a029cd8f5df58124ac8f43b4437b","SHA256":"617aebfb52124be4fe9394332dc751e1c916480a1fa87489bcf116bdc9d97d92"},"Sections":{".text":{"Entropy":6.229518311277104,"Virtual Size":"0x13f4"},".rdata":{"Entropy":4.406492937093676,"Virtual Size":"0x1fc"},".data":{"Entropy":0.5159719988134768,"Virtual Size":"0x110"},".pdata":{"Entropy":3.435198680954687,"Virtual Size":"0x9c"},"INIT":{"Entropy":4.975886532684368,"Virtual Size":"0x31a"},".rsrc":{"Entropy":3.448470909792412,"Virtual Size":"0x3e8"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2010-11-10 03:33:17","InternalName":"ComputerZ.Sys","Copyright":"Copyright (C) 2008-2010 www.ludashi.com","Imports":["ntoskrnl.exe"],"ExportedFunctions":"","ImportedFunctions":["IoDeleteSymbolicLink","RtlInitUnicodeString","IoDeleteDevice","MmUnmapIoSpace","MmMapIoSpace","IofCompleteRequest","IoCreateSymbolicLink","IoCreateDevice","IoBuildDeviceIoControlRequest","RtlAnsiStringToUnicodeString","KeInitializeEvent","RtlInitAnsiString","RtlFreeUnicodeString","IoGetDeviceObjectPointer","KeWaitForSingleObject","PsGetVersion","MmIsAddressValid","ObfDereferenceObject","IofCallDriver","KeBugCheckEx","__C_specific_handler"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer , G2","ValidFrom":"2007-06-15 00:00:00","ValidTo":"2012-06-14 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"3825d7faf861af9ef490e726b5d65ad5","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"d6c7684e9aaa508cf268335f83afe040","SHA1":"18066d20ad92409c567cdfde745279ff71c75226","SHA256":"a612fb22ce8be6dab75e47c98508f98496583e79c9c97b936a8caee9ea9f3fff","SHA384":"35c249d6ad0261a6229b2a727067ac6ba32a5d24b30b9249051f748c7735fbe2ec2ef26a702c50df1790fbe32a65aee7"}},{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA","ValidFrom":"2003-12-04 00:00:00","ValidTo":"2013-12-03 23:59:59","Signature":"4a6bf9ea58c2441c318979992b96bf82ac01d61c4ccdb08a586edf0829a35ec8ca9313e704520def47272f0038b0e4c9934e9ad4226215f73f37214f703180f18b3887b3e8e89700fecf55964e24d2a9274e7aaeb76141f32acee7c9d95eddbb2b853eb59db5d9e157ffbeb4c57ef5cf0c9ef097fe2bd33b521b1b3827f73f4a","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"47bf1995df8d524643f7db6d480d31a4","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"518d2ea8a21e879c942d504824ac211c","SHA1":"21ce87d827077e61abddf2beba69fde5432ea031","SHA256":"1ec3b4f02e03930a470020e0e48d24b84678bb558f46182888d870541f5e25c7","SHA384":"53e346bbde23779a5d116cc9d86fdd71c97b1f1b343439f8a11aa1d3c87af63864bb8488a5aeb2d0c26a6a1e0b15f03f"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009,2 CA","ValidFrom":"2009-05-21 00:00:00","ValidTo":"2019-05-20 23:59:59","Signature":"8b03c0dd94d841a26169b015a878c730c6903c7e42f724b6e4837317047f04109ca1e2fa812febc0ca44e772e050b6551020836e9692e49a516ab43731dca52deb8c00c71d4fe74d32ba85f84ebefa675565f06abe7aca64381a101078457631f3867a030f60c2b35d9df68b6676821b59e183e5bd49a53856e5de41770e580f","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"655226e1b22e18e1590f2985ac22e75c","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"650704c342850095f3288eaf791147d4","SHA1":"4cdc38c800761463749c3cbd94a12f32e49877bf","SHA256":"07b8f662558ec85b71b43a79c6e94698144f4ced2308af21e7ba1e5d461da214","SHA384":"2a271d052213438467d09d60eaa4010c8642fff3eb0070e0cf9969428713c8fdc066b90996d594dd3136f5bd0af5a22a"}},{"Subject":"C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority","ValidFrom":"2006-05-23 17:01:29","ValidTo":"2016-05-23 17:11:29","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"610c120600000000001b","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"53c41bc1164e09e0cd1617a5bf913efd","SHA1":"93c03aac8951d494ecd5696b1c08658541b18727","SHA256":"40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b","SHA384":"f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"}},{"Subject":"C=CN, ST=Sichuan, L=Chengdu, O=Chengdu Qiying Technology Co.,Ltd., OU=Digital ID Class 3 , Microsoft Software Validation v2, CN=Chengdu Qiying Technology Co.,Ltd.","ValidFrom":"2010-03-31 00:00:00","ValidTo":"2011-03-31 23:59:59","Signature":"1faadccc76ce27891191f3b98a4feaac1220aa61f9a07540f1de38346f466d20bb5ecda07db57aaffc5b472a5d47f928fb717b5d407aff12311fe9cac2daa7fca057a85d34058cf2c02ae2c5168e7f99c7d065b9cd2ac1beda4c9d7fdf0caf7030b821b71bae2a0d17ccbc829b469407cddec7a1fbf93d8c0364b79231b978b227ea09dc6be8d83da1b430c6a1945254bdc987341ac9bccc93c74eb006e9960a38e74815a549617678b00857098adbac42783d88babc75de8e1569fe05b4c74a79e2e423e296b4f1585db891a257dd4b82167cbc8efcd6ae322c0d778036a8fd4b549e736ba03dff6c3a8835b9279fab3639b610554c87bfa6630d8b7a07e6c3","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"61359ac44514d781769fd643666b4572","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"416fc5d0038211bf34811efeff6d562f","SHA1":"e0acbd39e2fa410a22c96e2a3eaea4342a626f40","SHA256":"843e587edb9c53b2fbbf84cd90b217af016da1330905b25c16bb059a26b5726e","SHA384":"1a1167bbac2b00e60c10a4c1dc1d0f5105c42582b1a39e05a1d60710d97a24c6ff76fe73700f0fb0e1e03f27aebb7697"}}],"Signer":[{"SerialNumber":"61359ac44514d781769fd643666b4572","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009,2 CA","Version":1}]}],"LoadsDespiteHVCI":"FALSE"},{"Company":"ludashi.com","Date":"","Description":"Ludashi System Driver","FileVersion":"1.6.15.1045","Filename":"","MD5":"35493772986f610753be29121cd68234","MachineType":"I386","OriginalFilename":"ComputerZ.Sys","Product":"鲁大师","ProductVersion":"1.6.15.1045","Publisher":"","SHA1":"b2b01c728e0e8ef7b2e9040d6db9828bd4a5b48d","SHA256":"5c9e257c9740561b5744812e1343815e7972c362c8993d972b96a56e18c712f3","Signature":"","Imphash":"a53b095a8d7366075d445892070cde51","Authentihash":{"MD5":"55f05d6f7d05be2f6570b52ee06507e1","SHA1":"9a861ad1b13314a3637e16b286911d54db02a4bc","SHA256":"bcf3c0762d6600506ff3b2f13ac6d978041b0b50131b3a564a558611dd3b96df"},"RichPEHeaderHash":{"MD5":"36d79e4bc2a15ca68d83887d15f8f3b0","SHA1":"8ae8df369a94635efe2cd11c5a54829a352887c5","SHA256":"c7e19135c0e8c6b70db667044a45444ec135e550845f32f0b49fa08cfe0a9e7e"},"Sections":{".text":{"Entropy":6.3753294877462245,"Virtual Size":"0x3190"},".rdata":{"Entropy":4.088208142934422,"Virtual Size":"0x1a4"},".data":{"Entropy":0.6406837316805838,"Virtual Size":"0xa0"},"INIT":{"Entropy":5.453105414777541,"Virtual Size":"0x4b4"},".rsrc":{"Entropy":3.57239965128271,"Virtual Size":"0x488"},".reloc":{"Entropy":5.767403415227798,"Virtual Size":"0x282"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2015-09-05 23:28:18","InternalName":"ComputerZ.Sys","Copyright":"版权所有 (C) 2010-2015 www.ludashi.com","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["IofCompleteRequest","RtlGetVersion","IoCreateSymbolicLink","IoCreateDevice","ExFreePoolWithTag","ExAllocatePoolWithTag","IoGetDeviceProperty","RtlCompareUnicodeString","ObfDereferenceObject","IoGetDeviceAttachmentBaseRef","PsGetVersion","MmIsAddressValid","RtlFreeUnicodeString","IoGetDeviceObjectPointer","RtlAnsiStringToUnicodeString","RtlInitAnsiString","KeWaitForSingleObject","RtlInitUnicodeString","IoBuildDeviceIoControlRequest","KeInitializeEvent","MmUnmapIoSpace","READ_REGISTER_BUFFER_UCHAR","MmMapIoSpace","READ_REGISTER_BUFFER_ULONG","WRITE_REGISTER_ULONG","WRITE_REGISTER_UCHAR","KeSetTimer","KeInitializeTimerEx","_allmul","SeReleaseSubjectContext","SeTokenIsAdmin","SeCaptureSubjectContext","KeTickCount","KeBugCheckEx","RtlUnwind","IoDeleteSymbolicLink","IofCallDriver","IoDeleteDevice","HalGetBusDataByOffset","HalSetBusDataByOffset"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Time Stamping Signer","ValidFrom":"2015-05-05 00:00:00","ValidTo":"2015-12-31 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"009feac811b0f16247a5fc20d80523ace6","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"b6aa9cf28bcfc9f07ec1069fb425ab61","SHA1":"ca7a166fcd53878ba5a38d4cac37c63513cfc1fa","SHA256":"711394fc49f8948a831f687d42ced6b18514f57786ecc6cdbc3c3eb72e568a40","SHA384":"ca01f9c9ed4e1ddff7126b7bbf618bc8132429886ca563f86655429e928739c621b9fdea6e04a623712cbb998c5c7d77"}},{"Subject":"??=HK, ??=Private Organization, serialNumber=1848744, C=HK, ST=Hong Kong, L=Hong Kong, O=QIHU 360 SOFTWARE CO. LIMITED, CN=QIHU 360 SOFTWARE CO. LIMITED","ValidFrom":"2013-05-21 00:00:00","ValidTo":"2016-05-20 23:59:59","Signature":"587d78ec02924b2d33f7c5cc7040ac737c6fca831ea1f059e6a03b75fa436dee4b7ff5ac1c23878cf3427830d11a3ea28eb7e01e07866f5208f06e3f53b7804792c79d3d6ae28d86bf5389667f6bc26499ab3f426cf4ab0f25ba10e46ef47e398eeb7346bdf4c94dda781f9b8dd207d68694c24cccf6784993196d868768e64c839aaf875032fab8bc00e0e35d791b7c9d00527038d7913aba02ea1a4dca9b6058ce8189cb22bb35937213f6ce8737c2b58f621a0821e05b7d072cd7fc1907fac18804aac193183c922eba0364cc4b228c9e47ad2a593d08b7ba21e7357d957586d69497799e365d2371efa162e7ad188ac0cc3139abba389d2478b5579f0c8a","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"541fda68b5e95006f2fec51bea326365","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"f741ec6836bb74e2370476618157c432","SHA1":"a392f40f4b3dc57727804cbeef660bbf9e2fbb69","SHA256":"faf712aafed949a99bad324e153686c3e94f25ed38ecadbee3e7650f23bea634","SHA384":"d2935b45e517522578d0a44e3654896b3dd991aef0091a60a1d22d3c695b07b4d8e9c0b36bab3b44c1fe1c12cf225f91"}},{"Subject":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Extended Validation Code Signing CA","ValidFrom":"2012-06-07 00:00:00","ValidTo":"2022-06-06 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"6c59efa9e100e10ee306ba8fe0292559","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"cc806ac6ce6822cccc165d63c1b8fa37","SHA1":"261a24e7b2648867017e7e852258ef87ab84c5f1","SHA256":"a8b0af15f217006b33f9beafe49e22f7263776bdb82c268c97c4441a6c7357e6","SHA384":"ce7e869a43aa2e17b7e4c0d78cabbca7b40d22c86e132153234d39b00ae426ceeef56c6ee8312f5ffda5c3f629a5dee1"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. , For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority , G5","ValidFrom":"2011-02-22 19:25:17","ValidTo":"2021-02-22 19:35:17","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"611993e400000000001c","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"78a717e082dcc1cda3458d917e677d14","SHA1":"4a872e0e51f9b304469cd1dedb496ee9b8b983a4","SHA256":"317fa1d234ebc49040ebc5e8746f8997471496051b185a91bdd9dfbb23fab5f8","SHA384":"b71052da4eb9157c8c1a5d7f55df19d69b9128598b72fcca608e5b7cc7d64c43c5504b9c86355a6dc22ee40c88cc385c"}}],"Signer":[{"SerialNumber":"541fda68b5e95006f2fec51bea326365","Issuer":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Extended Validation Code Signing CA","Version":1}]}],"LoadsDespiteHVCI":"TRUE"},{"Company":"Z武器","Date":"","Description":"Zwuqi System Driver","FileVersion":"1.1.9.416","Filename":"","MD5":"eaec88a63db9cf9cee53471263afe6fb","MachineType":"AMD64","OriginalFilename":"ComputerZ.Sys","Product":"Zwuqi System Driver","ProductVersion":"1.1.9.416","Publisher":"","SHA1":"5eed0ce6487d0b8d0a6989044c4fcab1bd845d9e","SHA256":"61e7f9a91ef25529d85b22c39e830078b96f40b94d00756595dded9d1a8f6629","Signature":"","Imphash":"d16f507665603095c26147a7adcb93b8","Authentihash":{"MD5":"282fdadf7dd256c658f7524fcd42012b","SHA1":"46aa43b01c9150dbeb70d0647aef3b0970326b2a","SHA256":"0c66ca63774f8aa697fe172233283af90db88902204524294a4df212f9f0b949"},"RichPEHeaderHash":{"MD5":"37c0371cbfd84cadf02fdb7eea7d972a","SHA1":"d652c969b605877c575b0189fec14256731c61b3","SHA256":"55b54ffc4c79a0d6c26ce73a58795acbf93d397ddc75094f41e91bfdf40280da"},"Sections":{".text":{"Entropy":6.081255741764561,"Virtual Size":"0x984"},".rdata":{"Entropy":4.2613174917675005,"Virtual Size":"0x164"},".data":{"Entropy":0.5159719988134768,"Virtual Size":"0x110"},".pdata":{"Entropy":3.2892420155694175,"Virtual Size":"0x6c"},"INIT":{"Entropy":4.8288898798498465,"Virtual Size":"0x1c2"},".rsrc":{"Entropy":3.4310871150702678,"Virtual Size":"0x3d0"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2009-04-15 23:38:10","InternalName":"ComputerZ.Sys","Copyright":"Copyright (C) 2008-2009 www.zwuqi.com","Imports":["ntoskrnl.exe"],"ExportedFunctions":"","ImportedFunctions":["IoDeleteSymbolicLink","RtlInitUnicodeString","IoDeleteDevice","MmUnmapIoSpace","MmMapIoSpace","IofCompleteRequest","IoCreateSymbolicLink","IoCreateDevice","KeBugCheckEx","__C_specific_handler"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer , G2","ValidFrom":"2007-06-15 00:00:00","ValidTo":"2012-06-14 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"3825d7faf861af9ef490e726b5d65ad5","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"d6c7684e9aaa508cf268335f83afe040","SHA1":"18066d20ad92409c567cdfde745279ff71c75226","SHA256":"a612fb22ce8be6dab75e47c98508f98496583e79c9c97b936a8caee9ea9f3fff","SHA384":"35c249d6ad0261a6229b2a727067ac6ba32a5d24b30b9249051f748c7735fbe2ec2ef26a702c50df1790fbe32a65aee7"}},{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA","ValidFrom":"2003-12-04 00:00:00","ValidTo":"2013-12-03 23:59:59","Signature":"4a6bf9ea58c2441c318979992b96bf82ac01d61c4ccdb08a586edf0829a35ec8ca9313e704520def47272f0038b0e4c9934e9ad4226215f73f37214f703180f18b3887b3e8e89700fecf55964e24d2a9274e7aaeb76141f32acee7c9d95eddbb2b853eb59db5d9e157ffbeb4c57ef5cf0c9ef097fe2bd33b521b1b3827f73f4a","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"47bf1995df8d524643f7db6d480d31a4","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"518d2ea8a21e879c942d504824ac211c","SHA1":"21ce87d827077e61abddf2beba69fde5432ea031","SHA256":"1ec3b4f02e03930a470020e0e48d24b84678bb558f46182888d870541f5e25c7","SHA384":"53e346bbde23779a5d116cc9d86fdd71c97b1f1b343439f8a11aa1d3c87af63864bb8488a5aeb2d0c26a6a1e0b15f03f"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)04, CN=VeriSign Class 3 Code Signing 2004 CA","ValidFrom":"2004-07-16 00:00:00","ValidTo":"2014-07-15 23:59:59","Signature":"ae3a17b84a7b55fa6455ec40a4ed494190999c89bcaf2e1dca7823f91c190f7feb68bc32d98838dedc3fd389b43fb18296f1a45abaed2e26d3de7c016e000a00a4069211480940f91c1879672324e0bbd5e150ae1bf50edde02e81cd80a36c524f9175558aba22f2d2ea4175882f63557d1e545a9559cad93481c05f5ef67ab5","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"4191a15a3978dfcf496566381d4c75c2","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"41011f8d0e7c7a6408334ca387914c61","SHA1":"c7fc1727f5b75a6421a1f95c73bbdb23580c48e5","SHA256":"88dd3952638ee82738c03168e6fd863fe4eab1059ee5e2926ad8cb587c255dc0","SHA384":"a00aa5ed457c41e37967882644d63366bae014f03a986576d8514164d7027acf7d0b5e03d764db2558f60db148954459"}},{"Subject":"C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority","ValidFrom":"2006-05-23 17:01:29","ValidTo":"2016-05-23 17:11:29","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"610c120600000000001b","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"53c41bc1164e09e0cd1617a5bf913efd","SHA1":"93c03aac8951d494ecd5696b1c08658541b18727","SHA256":"40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b","SHA384":"f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"}},{"Subject":"C=CN, ST=Sichuan, L=Chengdu, O=Chengdu Ceshi Technology Co., Ltd., OU=Digital ID Class 3 , Microsoft Software Validation v2, CN=Chengdu Ceshi Technology Co., Ltd.","ValidFrom":"2009-04-15 00:00:00","ValidTo":"2010-04-15 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"2b7f0f1afe0f348edec71b75a47165b8","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"051f7966823abbbf31c49631ca95b4c5","SHA1":"3b53e6177f766345accfa2ec3124a18e0a025e17","SHA256":"b4e6bd3ca86f6af669589e3f15b86387655214e7d7312835ffd23a6618cee060","SHA384":"f86eada997b14af71058b08a8d7a3699cd2bb7e59a88faa104694fddd0ccd31ac01ad6fa633b19b69b730b2bc360af46"}}],"Signer":[{"SerialNumber":"2b7f0f1afe0f348edec71b75a47165b8","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)04, CN=VeriSign Class 3 Code Signing 2004 CA","Version":1}]}],"LoadsDespiteHVCI":"FALSE"},{"Company":"ComputerZ","Date":"","Description":"ComputerZ System Driver","FileVersion":"1.0.8.818","Filename":"","MD5":"cb0c5d3639fcd810cde94b7b990aa51c","MachineType":"I386","OriginalFilename":"ComputerZ.Sys","Product":"ComputerZ System Driver","ProductVersion":"1.0.8.818","Publisher":"","SHA1":"db3debacd5f6152abd7a457d7910a0ec4457c0d7","SHA256":"61f3b1c026d203ce94fab514e3d15090222c0eedc2a768cc2d073ec658671874","Signature":"","Imphash":"60a2fba979aaa0d0ccd09c12ca3d9e57","Authentihash":{"MD5":"c31945f05d392cb9eea988f1c427b5a9","SHA1":"992b8f204b5ddb6bf0f51e34a7c423336b5fb7c2","SHA256":"b6d91487921478891e5570663f23a473b1b0490f8cf75bdeb7ab00111999fb9b"},"RichPEHeaderHash":{"MD5":"1b6b377b885ae86349219451aa7d1734","SHA1":"727d7fe6ee981ebc907fee06c37bcf5868fc8dc7","SHA256":"bb5c1372b0803537056313e822cb7aa36cc7fcd5b49a1bbaa5dbb7c6fda38443"},"Sections":{".text":{"Entropy":6.2108948201384235,"Virtual Size":"0x654"},".rdata":{"Entropy":3.9015650939248654,"Virtual Size":"0x114"},".data":{"Entropy":2,"Virtual Size":"0x4"},"INIT":{"Entropy":4.577125493627475,"Virtual Size":"0x116"},".rsrc":{"Entropy":3.3322017946055316,"Virtual Size":"0x3f0"},".reloc":{"Entropy":3.6028735908357534,"Virtual Size":"0x5a"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2008-09-25 06:04:43","InternalName":"ComputerZ.Sys","Copyright":"Copyright (C) 2008 ComputerZ","Imports":["ntoskrnl.exe"],"ExportedFunctions":"","ImportedFunctions":["IoDeleteDevice","IoDeleteSymbolicLink","RtlInitUnicodeString","_except_handler3","MmUnmapIoSpace","MmMapIoSpace","IofCompleteRequest","IoCreateSymbolicLink","IoCreateDevice"],"Signatures":{},"LoadsDespiteHVCI":"TRUE"},{"Company":"ludashi.com","Date":"","Description":"Ludashi System Driver","FileVersion":"1.1019.1025.918","Filename":"","MD5":"e432956d19714c65723f9c407ffea0c5","MachineType":"I386","OriginalFilename":"ComputerZ.Sys","Product":"鲁大师","ProductVersion":"1.1019.1025.918","Publisher":"","SHA1":"1a53902327bac3ab323ee63ed215234b735c64da","SHA256":"64dddd5ac53fe2c9de2b317c09034d1bccaf21d6c03ccfde3518e5aa3623dd66","Signature":"","Imphash":"27365d8741d23e179699f1f11a619c7d","Authentihash":{"MD5":"4ba59b6b5b50688e0a7f0a418cdd9fb5","SHA1":"928670cee224e0f69b1d827e7f278e00c254c130","SHA256":"de8a750317ff44704c0b03c374f5cbc37c9ef5c067a33628aa7c51a5b11db383"},"RichPEHeaderHash":{"MD5":"bc82137e092e13c598bc6289ea8cddf7","SHA1":"d571a93f6f1fdf8cc3386910a784a5061290076f","SHA256":"c05cd83a1fe32cf6831617580aefb0083698b5d82ee84bb2be3d868c94b01335"},"Sections":{".text":{"Entropy":6.288107277208351,"Virtual Size":"0x392c"},".rdata":{"Entropy":3.8231896263497824,"Virtual Size":"0x184"},".data":{"Entropy":0.5154246727248383,"Virtual Size":"0xd0"},"INIT":{"Entropy":5.486604320601577,"Virtual Size":"0x472"},".rsrc":{"Entropy":3.603298090643343,"Virtual Size":"0x498"},".reloc":{"Entropy":5.853799317958882,"Virtual Size":"0x2d0"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2020-02-26 01:36:00","InternalName":"ComputerZ.Sys","Copyright":"版权所有 (C) 2010-2019 www.ludashi.com","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["IofCompleteRequest","RtlGetVersion","IoCreateSymbolicLink","IoCreateDevice","IoGetDeviceProperty","_wcsicmp","ObfDereferenceObject","IoGetDeviceAttachmentBaseRef","PsGetVersion","memset","MmIsAddressValid","RtlFreeUnicodeString","IoGetDeviceObjectPointer","RtlAnsiStringToUnicodeString","RtlInitAnsiString","KeWaitForSingleObject","RtlInitUnicodeString","IoBuildDeviceIoControlRequest","KeInitializeEvent","MmUnmapIoSpace","READ_REGISTER_BUFFER_UCHAR","MmMapIoSpace","READ_REGISTER_BUFFER_ULONG","WRITE_REGISTER_ULONG","WRITE_REGISTER_UCHAR","KeDelayExecutionThread","_allmul","SeReleaseSubjectContext","SeTokenIsAdmin","SeCaptureSubjectContext","KeTickCount","KeBugCheckEx","RtlUnwind","IoDeleteSymbolicLink","IofCallDriver","IoDeleteDevice","HalGetBusDataByOffset","HalSetBusDataByOffset"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=BE, O=GlobalSign nv,sa, CN=GlobalSign Timestamping CA , G2","ValidFrom":"2011-04-13 10:00:00","ValidTo":"2028-01-28 12:00:00","Signature":"4e5e56901e46b4d94931f3bb1739281bc216ddfd41dc0905049b6fb2a29ad6992e40990055b5ea3fa52076d38634d417cc553ac782eeefa8babcd8069f1550dfcd167b523a02d7191afdaff0785ce04bc518df3a241edaacb8a95804020730dbb0125efe31bef00448f4f070f83a5e5683cf3dfb0dbcf4c5ed979db9d4dba52784e3389b8ba735864420a43b6da46a0ba183fd28ebdaef28f6cc885dfb0a3b00abe021ebe22f356c0f8e344597eba2f79933357ecb9a8abb454de73f9fc2d98afa65b26ec77e65ffe892e12c31a2f7b02736488f266f3bee4d761f79c3e57f9635bc2d0ecc01b08e7fff518080a792d4b34446648c874f166307314b63b0dff3","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"0400000000012f4ee152d7","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"e140543fe3256027cfa79fc3c19c1776","SHA1":"c655f94eb1ecc93de319fc0c9a2dc6c5ec063728","SHA256":"3ca71e85908ff67368e4dc00253f5691b9e6d50c966e7784143d75fb92aa3448","SHA384":"d9d366f9328f2b55ee19a32cc5fd5148b81d764282fe5dc196c872ae249caa51d2c212ef39f33945dfe0cda81925e326"}},{"Subject":"C=SG, O=GMO GlobalSign Pte Ltd, CN=GlobalSign TSA for MS Authenticode , G2","ValidFrom":"2016-05-24 00:00:00","ValidTo":"2027-06-24 00:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"1121d699a764973ef1f8427ee919cc534114","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"acb5170547d76873f1e4ff18ed5de2eb","SHA1":"bd6e261e75b807381bada7287de04d259258a5fa","SHA256":"4783380498acf592286ef2dea0fcc5bdea3f54d5e374d3e3497df9d5f662cfb6","SHA384":"4f428f115cf3d008248f15f32007fc7c54bd454e1b48b765776b4c87c23ab8818d8fbcbb3646d35eca012b025260a3b8"}},{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root CA","ValidFrom":"2011-04-15 19:41:37","ValidTo":"2021-04-15 19:51:37","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"611cb28a000000000026","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"983a0c315a50542362f2bd6a5d71c8d0","SHA1":"8047f476001f5cb16a661d2a3fd0c3576168f5e2","SHA256":"5f6a519ed2e35cd0fa1cdfc90f4387162c36287bbf9e4d6648251d99542a9e83","SHA384":"5f014b60511ddab3247ef0b3c03fe82c622237ba76015e2911d1adc50dc632d56ebd1ee532f3c2b6cbfe68d80a2c91dc"}},{"Subject":"C=CN, ST=Sichuan, L=Chengdu, O=Chengdu Qilu Technology Co. Ltd., CN=Chengdu Qilu Technology Co. Ltd.","ValidFrom":"2019-10-30 00:00:00","ValidTo":"2020-11-03 12:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"0a3a9f12d727bbf01199e74e0a5c7d8a","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"4e1dd44417986e6b087613679af48015","SHA1":"78273dbcf8cf746b5bdeccc6931246ea716adaea","SHA256":"b437120e22b1250fec3ae5f55b0b431a2e4ac527c551cfba59cc58793ce29897","SHA384":"d77f55a27f83c72814b7cd7c0ee7b3a29428c15c5fc8e3d478d7f0abdd37be30cdbe618845a7c358a4a43e75ceac5750"}},{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Code Signing CA,1","ValidFrom":"2011-02-11 12:00:00","ValidTo":"2026-02-10 12:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"0fa8490615d700a0be2176fdc5ec6dbd","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"a9a31555bbc92b6033975c5428fb3679","SHA1":"47f4b9898631773231b32844ec0d49990ac4eb1e","SHA256":"c826846e4b1d73edb7561ab1b41c949354e237a91e82fe1be5b7e2e1701f52d1","SHA384":"86f49574f368a561914a52d7ae043ec6784ef8c718960700f834e123594605d25d39f1ad45f1eb5052c9567f3edd0e16"}}],"Signer":[{"SerialNumber":"0a3a9f12d727bbf01199e74e0a5c7d8a","Issuer":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Code Signing CA,1","Version":1}]}],"LoadsDespiteHVCI":"TRUE"},{"Company":"ludashi.com","Date":"","Description":"Ludashi System Driver","FileVersion":"1.6.16.1015","Filename":"","MD5":"5fade7137c14a94b323f3b7886fba2a9","MachineType":"AMD64","OriginalFilename":"ComputerZ.Sys","Product":"鲁大师","ProductVersion":"1.6.16.1015","Publisher":"","SHA1":"0b77242d4e920f2fcb2b506502cfe3985381defc","SHA256":"66f851b309bada6d3e4b211baa23b534165b29ba16b5cbf5e8f44eaeb3ca86ea","Signature":"","Imphash":"fbfa302bf7eb5d615d0968541ee49ce4","Authentihash":{"MD5":"0e7572ee69004b9c65c842eae1175b48","SHA1":"f646f70354ed77ed8e896e254a8985ec00d3dc53","SHA256":"0a1d5ba96cde7e8485077763e34738bf9c2734c81440ecab82ff63606a50dfb2"},"RichPEHeaderHash":{"MD5":"931e927cdf1c24d5817bff89dab85a64","SHA1":"4cd801fca152bbe24f5f38fd11ceb6376bcef450","SHA256":"7122c2c491e45b9bc338bcc38386cc39217d647ee94adc68881890034b241fb2"},"Sections":{".text":{"Entropy":6.329269583331132,"Virtual Size":"0x3c9e"},".rdata":{"Entropy":4.689036911549702,"Virtual Size":"0x3f4"},".data":{"Entropy":0.31187978478105094,"Virtual Size":"0x1ec"},".pdata":{"Entropy":4.137755082902252,"Virtual Size":"0x21c"},"INIT":{"Entropy":5.133308046836707,"Virtual Size":"0x4e8"},".rsrc":{"Entropy":3.5718072271678527,"Virtual Size":"0x488"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2016-06-21 07:51:19","InternalName":"ComputerZ.Sys","Copyright":"版权所有 (C) 2010-2016 www.ludashi.com","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["RtlGetVersion","IofCompleteRequest","IoCreateSymbolicLink","IoCreateDevice","ExAllocatePoolWithTag","ExFreePoolWithTag","IoGetDeviceAttachmentBaseRef","PsGetVersion","RtlCompareUnicodeString","ObfDereferenceObject","IoGetDeviceProperty","RtlAnsiStringToUnicodeString","RtlInitAnsiString","RtlFreeUnicodeString","IoDeleteDevice","MmIsAddressValid","IoBuildDeviceIoControlRequest","KeInitializeEvent","KeWaitForSingleObject","IofCallDriver","MmUnmapIoSpace","MmMapIoSpace","SeTokenIsAdmin","SeReleaseSubjectContext","SeCaptureSubjectContext","KeSetTimer","KeInitializeTimerEx","KeBugCheckEx","RtlInitUnicodeString","IoGetDeviceObjectPointer","IoDeleteSymbolicLink","__C_specific_handler","HalSetBusDataByOffset","HalGetBusDataByOffset"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA , G2","ValidFrom":"2012-12-21 00:00:00","ValidTo":"2020-12-30 23:59:59","Signature":"03099b8f79ef7f5930aaef68b5fae3091dbb4f82065d375fa6529f168dea1c9209446ef56deb587c30e8f9698d23730b126f47a9ae3911f82ab19bb01ac38eeb599600adce0c4db2d031a6085c2a7afce27a1d574ca86518e979406225966ec7c7376a8321088e41eaddd9573f1d7749872a16065ea6386a2212a35119837eb6","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"7e93ebfb7cc64e59ea4b9a77d406fc3b","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"d0785ad36e427c92b19f6826ab1e8020","SHA1":"365b7a9c21bd9373e49052c3e7b3e4646ddd4d43","SHA256":"c2abb7484da91a658548de089d52436175fdb760a1387d225611dc0613a1e2ff","SHA384":"eab4fe5ef90e0de4a6aa3a27769a5e879f588df5e4785aa4104debd1f81e19ea56d33e3a16e5facf99f68b5d8e3d287b"}},{"Subject":"C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer , G4","ValidFrom":"2012-10-18 00:00:00","ValidTo":"2020-12-29 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"0ecff438c8febf356e04d86a981b1a50","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"e9d38360b914c8863f6cba3ee58764d3","SHA1":"4cba8eae47b6bf76f20b3504b98b8f062694a89b","SHA256":"88901d86a4cc1f1bb193d08e1fb63d27452e63f83e228c657ab1a92e4ade3976","SHA384":"e9f2a75334a9e336c5a4712eadee88d0374b0fdc273262f4e65c9040ad2793067cc076696db5279a478773485e285652"}},{"Subject":"C=CN, ST=Beijing, L=Beijing, O=Qihoo 360 Software (Beijing) Company Limited, OU=Tech. Dev. Dept., CN=Qihoo 360 Software (Beijing) Company Limited","ValidFrom":"2016-01-06 00:00:00","ValidTo":"2019-03-28 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"26279f0f2f11970dccf63eba88f2d4c4","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"fbebdc165d8f4616444075e0a48855e6","SHA1":"f6bf44f1acae05fc1638190459485da95f4ed1ec","SHA256":"6917dc56b04b2bd7a75f0987ee27c832dc62298b698b585a4c2c07eb890b6528","SHA384":"c857fb61de8d13e1ac649fbaa4d69acd293d8542cd380411db8bbe2fdc3b9d98c607d0d267081fac285dd33e9141f329"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. , For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority , G5","ValidFrom":"2011-02-22 19:25:17","ValidTo":"2021-02-22 19:35:17","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"611993e400000000001c","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"78a717e082dcc1cda3458d917e677d14","SHA1":"4a872e0e51f9b304469cd1dedb496ee9b8b983a4","SHA256":"317fa1d234ebc49040ebc5e8746f8997471496051b185a91bdd9dfbb23fab5f8","SHA384":"b71052da4eb9157c8c1a5d7f55df19d69b9128598b72fcca608e5b7cc7d64c43c5504b9c86355a6dc22ee40c88cc385c"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","ValidFrom":"2010-02-08 00:00:00","ValidTo":"2020-02-07 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"5200e5aa2556fc1a86ed96c9d44b33c7","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"b30c31a572b0409383ed3fbe17e56e81","SHA1":"4843a82ed3b1f2bfbee9671960e1940c942f688d","SHA256":"03cda47a6e654ed85d932714fc09ce4874600eda29ec6628cfbaeb155cab78c9","SHA384":"bbda8407c4f9fc4e54d772f1c7fb9d30bc97e1f97ecd51c443063d1fa0644e266328781776cd5c44896c457c75f4d7da"}}],"Signer":[{"SerialNumber":"26279f0f2f11970dccf63eba88f2d4c4","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","Version":1}]}],"LoadsDespiteHVCI":"FALSE"},{"Company":"360.cn","Date":"","Description":"Ludashi System Driver","FileVersion":"1.6.13.1019","Filename":"","MD5":"4ecfb46fcdce95623f994bd29bbe59cb","MachineType":"I386","OriginalFilename":"ComputerZ.Sys","Product":"鲁大师","ProductVersion":"1.6.13.1019","Publisher":"","SHA1":"d452fc8541ed5e97a6cbc93d08892c82991cdaad","SHA256":"6d2cc7e1d95bb752d79613d0ea287ea48a63fb643dcb88c12b516055da56a11d","Signature":"","Imphash":"f9b9487f25a2c1e08c02f391387c5323","Authentihash":{"MD5":"1bc96d2e740a8a9ed500f96ec8ec0b80","SHA1":"6270f0d0907d7ef842cd65e5e3be8c0f66f8ebb3","SHA256":"db58973c75b7cb94ffb31ad46fddf2f16f19075a99a69a7de20f8c0e42d96ba0"},"RichPEHeaderHash":{"MD5":"7fc550aec15fd6621ba15e6f0c8d0b43","SHA1":"231a47a21f97fb57cdca08ba5a88d86f15920c2e","SHA256":"2d878af22eeafbfa7f8d8a40ca040a55f5c294ef7d7e93e7505d1fb2691880d2"},"Sections":{".text":{"Entropy":6.359568361619904,"Virtual Size":"0x28f0"},".rdata":{"Entropy":4.068952790980209,"Virtual Size":"0x194"},".data":{"Entropy":1.1225846798245738,"Virtual Size":"0x50"},"INIT":{"Entropy":5.472605153859094,"Virtual Size":"0x448"},".rsrc":{"Entropy":3.56314212405709,"Virtual Size":"0x480"},".reloc":{"Entropy":5.338836916876603,"Virtual Size":"0x1d8"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2013-07-22 03:47:23","InternalName":"ComputerZ.Sys","Copyright":"版权所有 (C) 2010-2013 www.ludashi.com","Imports":["ntoskrnl.exe"],"ExportedFunctions":"","ImportedFunctions":["IoDeleteDevice","IoDeleteSymbolicLink","RtlInitUnicodeString","IofCompleteRequest","IoCreateSymbolicLink","IoCreateDevice","ExFreePoolWithTag","ExAllocatePoolWithTag","IoGetDeviceProperty","RtlCompareUnicodeString","ObfDereferenceObject","IoGetDeviceAttachmentBaseRef","PsGetVersion","MmIsAddressValid","RtlFreeUnicodeString","IoGetDeviceObjectPointer","RtlAnsiStringToUnicodeString","RtlInitAnsiString","KeWaitForSingleObject","IofCallDriver","IoBuildDeviceIoControlRequest","KeInitializeEvent","MmUnmapIoSpace","READ_REGISTER_BUFFER_UCHAR","MmMapIoSpace","READ_REGISTER_BUFFER_ULONG","WRITE_REGISTER_ULONG","WRITE_REGISTER_UCHAR","KeSetTimer","KeInitializeTimerEx","_allmul","SeReleaseSubjectContext","SeTokenIsAdmin","SeCaptureSubjectContext","KeTickCount","KeBugCheckEx","RtlUnwind"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Time Stamping Signer","ValidFrom":"2010-05-10 00:00:00","ValidTo":"2015-05-10 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"478a8efb59e1d83f0ce142d2a28707be","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"f13ede9179075999ef7f856ec31e364b","SHA1":"2f09867166e6107e17808317f5c8d4ee157f45bc","SHA256":"089a2c4c6ac7432020acdb65c33bf39130da6f37c002ba79128bd4c94e4fa101","SHA384":"67be6d358f4ecd0726163603a404db9d78c340951d43fd608482cd89a2de7f9566f0ce45f8222f420003157cb266b939"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. , For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority , G5","ValidFrom":"2006-11-08 00:00:00","ValidTo":"2021-11-07 23:59:59","Signature":"1302ddf8e88600f25af8f8200c59886207cecef74ef9bb59a198e5e138dd4ebc6618d3adeb18f20dc96d3e4a9420c33cbabd6554c6af44b310ad2c6b3eabd707b6b88163c5f95e2ee52a67cecd330c2ad7895603231fb3bee83a0859b4ec4535f78a5bff66cf50afc66d578d1978b7b9a2d157ea1f9a4bafbac98e127ec6bdff","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"250ce8e030612e9f2b89f7054d7cf8fd","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"918d9eb6a6cd36c531eceb926170a7e1","SHA1":"0ae95700d65e6f59715aa47048993ca7858e676a","SHA256":"47c46e6eaa3780eace3d0d891346cd373359d246b21a957219dbab4c8f37c166","SHA384":"e54017c93ba52f012cc15aeb3bcbce1e90a0006ff8dca231a24fc572926770f63213343f538003407bed3463fa9c4a85"}},{"Subject":"C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority","ValidFrom":"2006-05-23 17:01:29","ValidTo":"2016-05-23 17:11:29","Signature":"01e446b33b457f7513877e5f43de468ecb8abdb64741bccccc7491d8ce395195a4a6b547c0efd2da7b8f5711f4328c7ccd3fee42da04214af7c843884a6f5cca14fc4bd19f4cbdd4556ecc02be0da6888f8609baa425bde8b0f0fa8b714e67b0cb82a8d78e55f737ebf03e88efe4e08afd1c6e2e61414875b4b02c1d28d8490fd715f02473253ccc880cde284c6554fe5eae8cea19ad2c51b29b3a47f53c80350117e24987d6544afb4bab07bcbf7d79cfbf35005cbb9ecffc82891b39a05197b6dec0b307ff449644c0342a195cabeef03bec294eb513c537857e75d5b4d60d066eb5d26c237167eaf1718eaf4e74aa0cf9ecbf4c58fa5e909b6d39cb86883f8b1ca81632d5fe6db9f1f8b3ead791f6364778c0272a15c768d6f4c5fc4f4ec8673f102d409ff11ec96148e7a703fc31730cf04688fe56da492995ef09daa3e5beef60ecd954a0599c28bd54ef66157f874c84dba60e95672e517b3439b641c28c846826dc240209e7818e0a972defeea7b998a60f818dc710b5e1ed982f486f53854964789bec5dac970b5526c3efba8dc8d1a52f5a7f936b611a339b18b8a26210de24ea76e12f43ebecdd7c12342489da2855aee5754e312b6763b6a8d7ab730a03cec5ea593fc7eb2a45aea8625b2f009939abb45f73c308ec80118f470e8f2a1343e191066255bbffba3da9a93d260faeca7d628b155589d694344dd665","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"610c120600000000001b","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"53c41bc1164e09e0cd1617a5bf913efd","SHA1":"93c03aac8951d494ecd5696b1c08658541b18727","SHA256":"40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b","SHA384":"f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"}},{"Subject":"C=CN, ST=Beijing, L=Beijing, O=Qihoo 360 Software (Beijing) Company Limited, OU=Digital ID Class 3 , Microsoft Software Validation v2, OU=Tech. Dev. Dept., CN=Qihoo 360 Software (Beijing) Company Limited","ValidFrom":"2013-03-11 00:00:00","ValidTo":"2016-03-10 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"51bd5d8e45b82a0210f17fe4c5233468","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"ad73c81b3174cc055d9718b2145a3d1f","SHA1":"0cb9e92828857976774a9fe96c016cdc67a25e6d","SHA256":"2c5d88401dfeec2ebf814e09d0d0faec9d109a503d427da4a7f3e0dec5ae0b6c","SHA384":"48c38329eb7f200be0d48acddabdb93c354dd1b8b3c3ce955a23638a4e2e32dd7d0f3a4f227a2b6382adc95e746cc411"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","ValidFrom":"2010-02-08 00:00:00","ValidTo":"2020-02-07 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"5200e5aa2556fc1a86ed96c9d44b33c7","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"b30c31a572b0409383ed3fbe17e56e81","SHA1":"4843a82ed3b1f2bfbee9671960e1940c942f688d","SHA256":"03cda47a6e654ed85d932714fc09ce4874600eda29ec6628cfbaeb155cab78c9","SHA384":"bbda8407c4f9fc4e54d772f1c7fb9d30bc97e1f97ecd51c443063d1fa0644e266328781776cd5c44896c457c75f4d7da"}}],"Signer":[{"SerialNumber":"51bd5d8e45b82a0210f17fe4c5233468","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","Version":1}]}],"LoadsDespiteHVCI":"FALSE"},{"Company":"ludashi.com","Date":"","Description":"Ludashi System Driver","FileVersion":"1.6.15.1045","Filename":"","MD5":"94d45bb36b13f4e936badb382fc133fe","MachineType":"I386","OriginalFilename":"ComputerZ.Sys","Product":"鲁大师","ProductVersion":"1.6.15.1045","Publisher":"","SHA1":"850d7df29256b4f537eddafe95cfea59fb118fe2","SHA256":"71c0ce3d33352ba6a0fb26e274d0fa87dc756d2473e104e0f5a7d57fab8a5713","Signature":"","Imphash":"a53b095a8d7366075d445892070cde51","Authentihash":{"MD5":"55f05d6f7d05be2f6570b52ee06507e1","SHA1":"9a861ad1b13314a3637e16b286911d54db02a4bc","SHA256":"bcf3c0762d6600506ff3b2f13ac6d978041b0b50131b3a564a558611dd3b96df"},"RichPEHeaderHash":{"MD5":"36d79e4bc2a15ca68d83887d15f8f3b0","SHA1":"8ae8df369a94635efe2cd11c5a54829a352887c5","SHA256":"c7e19135c0e8c6b70db667044a45444ec135e550845f32f0b49fa08cfe0a9e7e"},"Sections":{".text":{"Entropy":6.3753294877462245,"Virtual Size":"0x3190"},".rdata":{"Entropy":4.088208142934422,"Virtual Size":"0x1a4"},".data":{"Entropy":0.6406837316805838,"Virtual Size":"0xa0"},"INIT":{"Entropy":5.453105414777541,"Virtual Size":"0x4b4"},".rsrc":{"Entropy":3.57239965128271,"Virtual Size":"0x488"},".reloc":{"Entropy":5.767403415227798,"Virtual Size":"0x282"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2015-09-05 23:28:18","InternalName":"ComputerZ.Sys","Copyright":"版权所有 (C) 2010-2015 www.ludashi.com","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["IofCompleteRequest","RtlGetVersion","IoCreateSymbolicLink","IoCreateDevice","ExFreePoolWithTag","ExAllocatePoolWithTag","IoGetDeviceProperty","RtlCompareUnicodeString","ObfDereferenceObject","IoGetDeviceAttachmentBaseRef","PsGetVersion","MmIsAddressValid","RtlFreeUnicodeString","IoGetDeviceObjectPointer","RtlAnsiStringToUnicodeString","RtlInitAnsiString","KeWaitForSingleObject","RtlInitUnicodeString","IoBuildDeviceIoControlRequest","KeInitializeEvent","MmUnmapIoSpace","READ_REGISTER_BUFFER_UCHAR","MmMapIoSpace","READ_REGISTER_BUFFER_ULONG","WRITE_REGISTER_ULONG","WRITE_REGISTER_UCHAR","KeSetTimer","KeInitializeTimerEx","_allmul","SeReleaseSubjectContext","SeTokenIsAdmin","SeCaptureSubjectContext","KeTickCount","KeBugCheckEx","RtlUnwind","IoDeleteSymbolicLink","IofCallDriver","IoDeleteDevice","HalGetBusDataByOffset","HalSetBusDataByOffset"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Time Stamping Signer","ValidFrom":"2015-05-05 00:00:00","ValidTo":"2015-12-31 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"009feac811b0f16247a5fc20d80523ace6","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"b6aa9cf28bcfc9f07ec1069fb425ab61","SHA1":"ca7a166fcd53878ba5a38d4cac37c63513cfc1fa","SHA256":"711394fc49f8948a831f687d42ced6b18514f57786ecc6cdbc3c3eb72e568a40","SHA384":"ca01f9c9ed4e1ddff7126b7bbf618bc8132429886ca563f86655429e928739c621b9fdea6e04a623712cbb998c5c7d77"}},{"Subject":"??=HK, ??=Private Organization, serialNumber=1848744, C=HK, ST=Hong Kong, L=Hong Kong, O=QIHU 360 SOFTWARE CO. LIMITED, CN=QIHU 360 SOFTWARE CO. LIMITED","ValidFrom":"2013-05-21 00:00:00","ValidTo":"2016-05-20 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"541fda68b5e95006f2fec51bea326365","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"f741ec6836bb74e2370476618157c432","SHA1":"a392f40f4b3dc57727804cbeef660bbf9e2fbb69","SHA256":"faf712aafed949a99bad324e153686c3e94f25ed38ecadbee3e7650f23bea634","SHA384":"d2935b45e517522578d0a44e3654896b3dd991aef0091a60a1d22d3c695b07b4d8e9c0b36bab3b44c1fe1c12cf225f91"}},{"Subject":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Extended Validation Code Signing CA","ValidFrom":"2012-06-07 00:00:00","ValidTo":"2022-06-06 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"6c59efa9e100e10ee306ba8fe0292559","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"cc806ac6ce6822cccc165d63c1b8fa37","SHA1":"261a24e7b2648867017e7e852258ef87ab84c5f1","SHA256":"a8b0af15f217006b33f9beafe49e22f7263776bdb82c268c97c4441a6c7357e6","SHA384":"ce7e869a43aa2e17b7e4c0d78cabbca7b40d22c86e132153234d39b00ae426ceeef56c6ee8312f5ffda5c3f629a5dee1"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. , For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority , G5","ValidFrom":"2011-02-22 19:25:17","ValidTo":"2021-02-22 19:35:17","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"611993e400000000001c","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"78a717e082dcc1cda3458d917e677d14","SHA1":"4a872e0e51f9b304469cd1dedb496ee9b8b983a4","SHA256":"317fa1d234ebc49040ebc5e8746f8997471496051b185a91bdd9dfbb23fab5f8","SHA384":"b71052da4eb9157c8c1a5d7f55df19d69b9128598b72fcca608e5b7cc7d64c43c5504b9c86355a6dc22ee40c88cc385c"}}],"Signer":[{"SerialNumber":"541fda68b5e95006f2fec51bea326365","Issuer":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Extended Validation Code Signing CA","Version":1}]}],"LoadsDespiteHVCI":"TRUE"},{"Company":"ludashi.com","Date":"","Description":"Ludashi System Driver","FileVersion":"1.1019.1025.918","Filename":"","MD5":"dbde0572d702d0a05c0d509d5624a4d7","MachineType":"AMD64","OriginalFilename":"ComputerZ.Sys","Product":"鲁大师","ProductVersion":"1.1019.1025.918","Publisher":"","SHA1":"0e030cf5e5996f0778452567e144f75936dc278f","SHA256":"7553c76b006bd2c75af4e4ee00a02279d3f1f5d691e7dbdc955eac46fd3614c3","Signature":"","Imphash":"45acfe4a83f61d872fb904a1f08ef991","Authentihash":{"MD5":"cc904107340f6a24999ea4e8c3717933","SHA1":"3f4b83ed3a3029d901279b2dd3b122f3837f9791","SHA256":"00b3ac33836f15ea53e81746ffa7c2888dc3c98492b59a97ba5a0a64166900d0"},"RichPEHeaderHash":{"MD5":"369b42cc2a67af6af9086da6ffff224a","SHA1":"faa1e445e08c48afd368888eee7dafc4f4b8e756","SHA256":"0fbf35185d37556f33a210f8b1588995dda49566ec6acea4f087d01af61d6be8"},"Sections":{".text":{"Entropy":6.340612666300623,"Virtual Size":"0x3c9e"},".rdata":{"Entropy":4.6479305755089175,"Virtual Size":"0x3ec"},".data":{"Entropy":0.31187978478105094,"Virtual Size":"0x1ec"},".pdata":{"Entropy":4.126649534842723,"Virtual Size":"0x210"},"INIT":{"Entropy":5.157425678373815,"Virtual Size":"0x48c"},".rsrc":{"Entropy":3.6051192721485097,"Virtual Size":"0x498"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2020-02-26 01:35:59","InternalName":"ComputerZ.Sys","Copyright":"版权所有 (C) 2010-2019 www.ludashi.com","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["RtlGetVersion","IofCompleteRequest","IoCreateSymbolicLink","IoCreateDevice","_wcsicmp","IoGetDeviceAttachmentBaseRef","PsGetVersion","ObfDereferenceObject","IoGetDeviceProperty","RtlAnsiStringToUnicodeString","RtlInitAnsiString","RtlFreeUnicodeString","IoDeleteDevice","MmIsAddressValid","IoBuildDeviceIoControlRequest","KeInitializeEvent","KeWaitForSingleObject","IofCallDriver","MmUnmapIoSpace","MmMapIoSpace","SeTokenIsAdmin","SeReleaseSubjectContext","KeDelayExecutionThread","SeCaptureSubjectContext","KeBugCheckEx","RtlInitUnicodeString","IoGetDeviceObjectPointer","IoDeleteSymbolicLink","__C_specific_handler","HalSetBusDataByOffset","HalGetBusDataByOffset"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=BE, O=GlobalSign nv,sa, CN=GlobalSign Timestamping CA , G2","ValidFrom":"2011-04-13 10:00:00","ValidTo":"2028-01-28 12:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"0400000000012f4ee152d7","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"e140543fe3256027cfa79fc3c19c1776","SHA1":"c655f94eb1ecc93de319fc0c9a2dc6c5ec063728","SHA256":"3ca71e85908ff67368e4dc00253f5691b9e6d50c966e7784143d75fb92aa3448","SHA384":"d9d366f9328f2b55ee19a32cc5fd5148b81d764282fe5dc196c872ae249caa51d2c212ef39f33945dfe0cda81925e326"}},{"Subject":"C=SG, O=GMO GlobalSign Pte Ltd, CN=GlobalSign TSA for MS Authenticode , G2","ValidFrom":"2016-05-24 00:00:00","ValidTo":"2027-06-24 00:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"1121d699a764973ef1f8427ee919cc534114","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"acb5170547d76873f1e4ff18ed5de2eb","SHA1":"bd6e261e75b807381bada7287de04d259258a5fa","SHA256":"4783380498acf592286ef2dea0fcc5bdea3f54d5e374d3e3497df9d5f662cfb6","SHA384":"4f428f115cf3d008248f15f32007fc7c54bd454e1b48b765776b4c87c23ab8818d8fbcbb3646d35eca012b025260a3b8"}},{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root CA","ValidFrom":"2011-04-15 19:41:37","ValidTo":"2021-04-15 19:51:37","Signature":"5cf5b22d02ceed01b53512d813f7aa4014c7a15ca08a55ed7e55ea6ac457176fd04722423658efc5ac61c5f62c52ce6ae6c80d85dab334420ea40225182672b92a4ea57e4b16f2a0e40c449ce24d9af474f0f927a6699031c244654348c74869d0fc8409f286140ac22996857f11eb8713176ed3ec6bff1d578ab17b1ea5a07ce9a27a68e5fac6b161d67263fa379163835599f81d614f0c6fa3f7bcb1152acc8d85e31417ef7e49443fb022c0f0acbe2fdbe10c86b0f4585c5a10a94bcdf3448a4652083e0a6210e9459504b78b8d4b074f500db7bbe7fb8ca27878c6c53b7663b2cfe521845a66fce04c79834ecfa8ee700586587cc29cd73ca3ad3c7e76625c87d0ed7cd5c55b1421f4be75a275d2e9e15ad020307841624d6b5e6e1b1710244ad8588775d015d762bbfd185665842561977faad49df4f35d6da031c2e19e02ac3e90c3327ee832903416d08b14cf95accee58c54a265b8bfed186a57073ed3e79a4a2f081a041c49871a8ae61b08a365d81c31c50d9cbab368ddf45076160675fec403e7d13edfdc862e10027e661296534e7af3365879b12042d8963f35be3f8ef2999743f5e40ce13c68728c8d49d75a52b573fb7a35943a61b08482c04885c19732d39b725fa0d2348f7ef0467cf28c7294c707b0d7b5b230b81965f09c8327b0a0abd0a2727e050fb3aeddb95b9b42bcc32663456b86f11d4643edc8","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"611cb28a000000000026","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"983a0c315a50542362f2bd6a5d71c8d0","SHA1":"8047f476001f5cb16a661d2a3fd0c3576168f5e2","SHA256":"5f6a519ed2e35cd0fa1cdfc90f4387162c36287bbf9e4d6648251d99542a9e83","SHA384":"5f014b60511ddab3247ef0b3c03fe82c622237ba76015e2911d1adc50dc632d56ebd1ee532f3c2b6cbfe68d80a2c91dc"}},{"Subject":"C=CN, ST=Sichuan, L=Chengdu, O=Chengdu Qilu Technology Co. Ltd., CN=Chengdu Qilu Technology Co. Ltd.","ValidFrom":"2019-10-30 00:00:00","ValidTo":"2020-11-03 12:00:00","Signature":"80ee76d13f2fab06a2e811245b28f1703b9646b2f61b12f0a3228986b95263b331e554864a4586e25bb25b8a0440c95894533db4c8e94baf5f85a5eb4fbd3ec5522110006304e43bb09fb9ebb5e82cfd2ec889a21a5f490378cf36274a66a150f2ac58e92d86b711e271aef2eaf38ffe5fcfa1c7b8554caa9b640ed1c55cd69649bd86e74691f34132571e42067fa061d7a7b4e9f0579515902f32eb9dfcc5b1bf3de043361aa55e91776173893d666e9d6b0973f8273bc229c68dff1edbac5b9c6a648092a0ad2cc4bbd1efcc5f56bd0c9b7c50f3573eae1c684832596ce5cc67323d3d8ceb1c296bfc873140660edec06d8c627d124aef4d02fbdaef263091","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"0a3a9f12d727bbf01199e74e0a5c7d8a","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"4e1dd44417986e6b087613679af48015","SHA1":"78273dbcf8cf746b5bdeccc6931246ea716adaea","SHA256":"b437120e22b1250fec3ae5f55b0b431a2e4ac527c551cfba59cc58793ce29897","SHA384":"d77f55a27f83c72814b7cd7c0ee7b3a29428c15c5fc8e3d478d7f0abdd37be30cdbe618845a7c358a4a43e75ceac5750"}},{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Code Signing CA,1","ValidFrom":"2011-02-11 12:00:00","ValidTo":"2026-02-10 12:00:00","Signature":"7b721d64ff88c83ac1b7e9e7a9c487bbdb9492d7905933fa2b87dea85b80253f138f9b831b7c43c4e68cdf393ec315ecb0da3b21257b24c1725db84791811346fa9c3f6a5138deb425cbf0abdfc528015479104624d1380f26a161904dbabd28e63ff1c4aa9bf6da35534fc9f23dd36cdc23edaaa04d6709f33a803d3cfb364c90e776a4ddf23abf56352fa24c65e8e0d4dad1c7c8916a2d234f373b199418d4d59c103cd5b11c19ff8fc86b9b9ef8ae9c999678d1cd9c51155b4226725a8d0a4a239240e886de22c2933ad49b68a6df297f06b93c0ebd9fc4869c82474271328609997209794b9d7169f541ff7f397764f1848dbe8b1eb27d68a3a590b10cff","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"0fa8490615d700a0be2176fdc5ec6dbd","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"a9a31555bbc92b6033975c5428fb3679","SHA1":"47f4b9898631773231b32844ec0d49990ac4eb1e","SHA256":"c826846e4b1d73edb7561ab1b41c949354e237a91e82fe1be5b7e2e1701f52d1","SHA384":"86f49574f368a561914a52d7ae043ec6784ef8c718960700f834e123594605d25d39f1ad45f1eb5052c9567f3edd0e16"}}],"Signer":[{"SerialNumber":"0a3a9f12d727bbf01199e74e0a5c7d8a","Issuer":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Code Signing CA,1","Version":1}]}],"LoadsDespiteHVCI":"TRUE"},{"Company":"360.cn","Date":"","Description":"Ludashi System Driver","FileVersion":"1.6.14.1024","Filename":"","MD5":"e0528f756bbb2ab83c60f9fd6f541e42","MachineType":"AMD64","OriginalFilename":"ComputerZ.Sys","Product":"鲁大师","ProductVersion":"1.6.14.1024","Publisher":"","SHA1":"c4b6e2351a72311a6e8f71186b218951a27fb97f","SHA256":"767ef5c831f92d92f2bfc3e6ea7fd76d11999eeea24cb464fd62e73132ed564b","Signature":"","Imphash":"8605f70bcc472025c2e78082388ed00b","Authentihash":{"MD5":"a7035f3985620574571ad276844d7970","SHA1":"45e94d477a543e200db0d33e9dc4dfd8e93eb585","SHA256":"df1fa63048807a9372a9b29baa712ef3c448ae28fc2c7da559714e40b1321a4d"},"RichPEHeaderHash":{"MD5":"826de2c3aea31053da9da897889f3348","SHA1":"a1633512b0e89a25159b9307359ddf6e5f2f7bed","SHA256":"9ddf0cd70876bc913f0f2cd63a8089e05955a0285f0b909b89d6fe840c7d580d"},"Sections":{".text":{"Entropy":6.30553749810269,"Virtual Size":"0x34be"},".rdata":{"Entropy":4.675721408522755,"Virtual Size":"0x3b4"},".data":{"Entropy":0.3458408061738237,"Virtual Size":"0x1b4"},".pdata":{"Entropy":4.075026803040252,"Virtual Size":"0x1e0"},"INIT":{"Entropy":5.142209393966882,"Virtual Size":"0x4d0"},".rsrc":{"Entropy":3.542055847545116,"Virtual Size":"0x480"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2014-12-08 05:37:06","InternalName":"ComputerZ.Sys","Copyright":"版权所有 (C) 2010-2014 www.ludashi.com","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["IofCompleteRequest","IoCreateSymbolicLink","IoCreateDevice","ExAllocatePoolWithTag","ExFreePoolWithTag","IoGetDeviceAttachmentBaseRef","PsGetVersion","RtlCompareUnicodeString","ObfDereferenceObject","IoGetDeviceProperty","RtlAnsiStringToUnicodeString","RtlInitAnsiString","RtlFreeUnicodeString","IoDeleteDevice","MmIsAddressValid","IoBuildDeviceIoControlRequest","KeInitializeEvent","KeWaitForSingleObject","IofCallDriver","MmUnmapIoSpace","MmMapIoSpace","SeTokenIsAdmin","SeReleaseSubjectContext","SeCaptureSubjectContext","KeSetTimer","KeInitializeTimerEx","KeBugCheckEx","RtlInitUnicodeString","IoGetDeviceObjectPointer","IoDeleteSymbolicLink","__C_specific_handler","HalSetBusDataByOffset","HalGetBusDataByOffset"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Time Stamping Signer","ValidFrom":"2010-05-10 00:00:00","ValidTo":"2015-05-10 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"478a8efb59e1d83f0ce142d2a28707be","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"f13ede9179075999ef7f856ec31e364b","SHA1":"2f09867166e6107e17808317f5c8d4ee157f45bc","SHA256":"089a2c4c6ac7432020acdb65c33bf39130da6f37c002ba79128bd4c94e4fa101","SHA384":"67be6d358f4ecd0726163603a404db9d78c340951d43fd608482cd89a2de7f9566f0ce45f8222f420003157cb266b939"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. , For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority , G5","ValidFrom":"2006-11-08 00:00:00","ValidTo":"2021-11-07 23:59:59","Signature":"1302ddf8e88600f25af8f8200c59886207cecef74ef9bb59a198e5e138dd4ebc6618d3adeb18f20dc96d3e4a9420c33cbabd6554c6af44b310ad2c6b3eabd707b6b88163c5f95e2ee52a67cecd330c2ad7895603231fb3bee83a0859b4ec4535f78a5bff66cf50afc66d578d1978b7b9a2d157ea1f9a4bafbac98e127ec6bdff","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"250ce8e030612e9f2b89f7054d7cf8fd","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"918d9eb6a6cd36c531eceb926170a7e1","SHA1":"0ae95700d65e6f59715aa47048993ca7858e676a","SHA256":"47c46e6eaa3780eace3d0d891346cd373359d246b21a957219dbab4c8f37c166","SHA384":"e54017c93ba52f012cc15aeb3bcbce1e90a0006ff8dca231a24fc572926770f63213343f538003407bed3463fa9c4a85"}},{"Subject":"C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority","ValidFrom":"2006-05-23 17:01:29","ValidTo":"2016-05-23 17:11:29","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"610c120600000000001b","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"53c41bc1164e09e0cd1617a5bf913efd","SHA1":"93c03aac8951d494ecd5696b1c08658541b18727","SHA256":"40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b","SHA384":"f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"}},{"Subject":"C=CN, ST=Beijing, L=Beijing, O=Qihoo 360 Software (Beijing) Company Limited, OU=Digital ID Class 3 , Microsoft Software Validation v2, OU=Tech. Dev. Dept., CN=Qihoo 360 Software (Beijing) Company Limited","ValidFrom":"2013-03-11 00:00:00","ValidTo":"2016-03-10 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"51bd5d8e45b82a0210f17fe4c5233468","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"ad73c81b3174cc055d9718b2145a3d1f","SHA1":"0cb9e92828857976774a9fe96c016cdc67a25e6d","SHA256":"2c5d88401dfeec2ebf814e09d0d0faec9d109a503d427da4a7f3e0dec5ae0b6c","SHA384":"48c38329eb7f200be0d48acddabdb93c354dd1b8b3c3ce955a23638a4e2e32dd7d0f3a4f227a2b6382adc95e746cc411"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","ValidFrom":"2010-02-08 00:00:00","ValidTo":"2020-02-07 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"5200e5aa2556fc1a86ed96c9d44b33c7","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"b30c31a572b0409383ed3fbe17e56e81","SHA1":"4843a82ed3b1f2bfbee9671960e1940c942f688d","SHA256":"03cda47a6e654ed85d932714fc09ce4874600eda29ec6628cfbaeb155cab78c9","SHA384":"bbda8407c4f9fc4e54d772f1c7fb9d30bc97e1f97ecd51c443063d1fa0644e266328781776cd5c44896c457c75f4d7da"}}],"Signer":[{"SerialNumber":"51bd5d8e45b82a0210f17fe4c5233468","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","Version":1}]}],"LoadsDespiteHVCI":"FALSE"},{"Company":"360.cn","Date":"","Description":"Ludashi System Driver","FileVersion":"1.6.13.1019","Filename":"","MD5":"d76b56b79b1c95e8dcd7ee88cb0d25ab","MachineType":"AMD64","OriginalFilename":"ComputerZ.Sys","Product":"鲁大师","ProductVersion":"1.6.13.1019","Publisher":"","SHA1":"97941faf575e43e59fe8ee167de457c2cf75c9eb","SHA256":"8047859a7a886bcf4e666494bd03a6be9ce18e20dc72df0e5b418d180efef250","Signature":"","Imphash":"fffbca93e6322995552b841c7d65b033","Authentihash":{"MD5":"50a21ac6e74c060dd86734ecab8979c2","SHA1":"2e1ffe5098066ba2e3a62e000081eceb21b70b69","SHA256":"665512fdf31d81504e6540e94d8f1b39f3e56932054a9b83aa4a45360e1c5477"},"RichPEHeaderHash":{"MD5":"7f4fe28fbea8250d1d89c107bf8aa820","SHA1":"2c88a39230384654a89546d9eae4394786648eeb","SHA256":"ac21ab9c51c4a7d30efd0f08fc44428e2d46890849b3413fc8c4a4239c468130"},"Sections":{".text":{"Entropy":6.341986627844097,"Virtual Size":"0x2b5e"},".rdata":{"Entropy":4.614804254541534,"Virtual Size":"0x32c"},".data":{"Entropy":0.41099431917639,"Virtual Size":"0x164"},".pdata":{"Entropy":3.99339070054653,"Virtual Size":"0x1a4"},"INIT":{"Entropy":5.1042520300899135,"Virtual Size":"0x470"},".rsrc":{"Entropy":3.567653628026684,"Virtual Size":"0x480"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2013-07-22 03:47:25","InternalName":"ComputerZ.Sys","Copyright":"版权所有 (C) 2010-2013 www.ludashi.com","Imports":["ntoskrnl.exe"],"ExportedFunctions":"","ImportedFunctions":["IoDeleteSymbolicLink","RtlInitUnicodeString","IoDeleteDevice","IofCompleteRequest","IoCreateSymbolicLink","IoCreateDevice","ExAllocatePoolWithTag","ExFreePoolWithTag","IoGetDeviceAttachmentBaseRef","PsGetVersion","RtlCompareUnicodeString","ObfDereferenceObject","IoGetDeviceProperty","RtlAnsiStringToUnicodeString","RtlInitAnsiString","RtlFreeUnicodeString","IoGetDeviceObjectPointer","MmIsAddressValid","IoBuildDeviceIoControlRequest","KeInitializeEvent","KeWaitForSingleObject","IofCallDriver","MmUnmapIoSpace","MmMapIoSpace","SeTokenIsAdmin","SeReleaseSubjectContext","SeCaptureSubjectContext","KeSetTimer","KeInitializeTimerEx","KeBugCheckEx","__C_specific_handler"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Time Stamping Signer","ValidFrom":"2010-05-10 00:00:00","ValidTo":"2015-05-10 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"478a8efb59e1d83f0ce142d2a28707be","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"f13ede9179075999ef7f856ec31e364b","SHA1":"2f09867166e6107e17808317f5c8d4ee157f45bc","SHA256":"089a2c4c6ac7432020acdb65c33bf39130da6f37c002ba79128bd4c94e4fa101","SHA384":"67be6d358f4ecd0726163603a404db9d78c340951d43fd608482cd89a2de7f9566f0ce45f8222f420003157cb266b939"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. , For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority , G5","ValidFrom":"2006-11-08 00:00:00","ValidTo":"2021-11-07 23:59:59","Signature":"1302ddf8e88600f25af8f8200c59886207cecef74ef9bb59a198e5e138dd4ebc6618d3adeb18f20dc96d3e4a9420c33cbabd6554c6af44b310ad2c6b3eabd707b6b88163c5f95e2ee52a67cecd330c2ad7895603231fb3bee83a0859b4ec4535f78a5bff66cf50afc66d578d1978b7b9a2d157ea1f9a4bafbac98e127ec6bdff","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"250ce8e030612e9f2b89f7054d7cf8fd","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"918d9eb6a6cd36c531eceb926170a7e1","SHA1":"0ae95700d65e6f59715aa47048993ca7858e676a","SHA256":"47c46e6eaa3780eace3d0d891346cd373359d246b21a957219dbab4c8f37c166","SHA384":"e54017c93ba52f012cc15aeb3bcbce1e90a0006ff8dca231a24fc572926770f63213343f538003407bed3463fa9c4a85"}},{"Subject":"C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority","ValidFrom":"2006-05-23 17:01:29","ValidTo":"2016-05-23 17:11:29","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"610c120600000000001b","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"53c41bc1164e09e0cd1617a5bf913efd","SHA1":"93c03aac8951d494ecd5696b1c08658541b18727","SHA256":"40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b","SHA384":"f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"}},{"Subject":"C=CN, ST=Beijing, L=Beijing, O=Qihoo 360 Software (Beijing) Company Limited, OU=Digital ID Class 3 , Microsoft Software Validation v2, OU=Tech. Dev. Dept., CN=Qihoo 360 Software (Beijing) Company Limited","ValidFrom":"2013-03-11 00:00:00","ValidTo":"2016-03-10 23:59:59","Signature":"b1e984808fbc7d3658d18d137c68f1277611af3e98408e495fd55de202bc04f7dc44ae362658e6b5f9dd97b5b383b94723bae937b8fb9e75bb92317a85bcee1989c90c318216da71629f3147ae647502e71e360d16b7cf7006927282265eb0014300650595d1cccc07ed28d9df246055981cec3485bc3173aef9b76912a6cbb2766fa5363e1fc0a91d4679db92e1e1b8dc84e1a14de55324d522670f9e574714b2959ea7a89db456e3debd34d35bbe6403389421ac76615e4ce194990b325132fa62279f31e86fb7043627343fef7118672d5f1ce4666a594d746bb3c69bf123f27c6cb24079fc490a382286d4e85fc118ca9a4612dda448b84a25bcd0fa2cf1","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"51bd5d8e45b82a0210f17fe4c5233468","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"ad73c81b3174cc055d9718b2145a3d1f","SHA1":"0cb9e92828857976774a9fe96c016cdc67a25e6d","SHA256":"2c5d88401dfeec2ebf814e09d0d0faec9d109a503d427da4a7f3e0dec5ae0b6c","SHA384":"48c38329eb7f200be0d48acddabdb93c354dd1b8b3c3ce955a23638a4e2e32dd7d0f3a4f227a2b6382adc95e746cc411"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","ValidFrom":"2010-02-08 00:00:00","ValidTo":"2020-02-07 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"5200e5aa2556fc1a86ed96c9d44b33c7","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"b30c31a572b0409383ed3fbe17e56e81","SHA1":"4843a82ed3b1f2bfbee9671960e1940c942f688d","SHA256":"03cda47a6e654ed85d932714fc09ce4874600eda29ec6628cfbaeb155cab78c9","SHA384":"bbda8407c4f9fc4e54d772f1c7fb9d30bc97e1f97ecd51c443063d1fa0644e266328781776cd5c44896c457c75f4d7da"}}],"Signer":[{"SerialNumber":"51bd5d8e45b82a0210f17fe4c5233468","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","Version":1}]}],"LoadsDespiteHVCI":"FALSE"},{"Company":"ludashi.com","Date":"","Description":"Ludashi System Driver","FileVersion":"1.6.15.1045","Filename":"","MD5":"a71020c6d6d42c5000e9993425247e06","MachineType":"AMD64","OriginalFilename":"ComputerZ.Sys","Product":"鲁大师","ProductVersion":"1.6.15.1045","Publisher":"","SHA1":"ec0c3c61a293a90f36db5f8ed91cbf33c2b14a19","SHA256":"8781589c77df2330a0085866a455d3ef64e4771eb574a211849784fdfa765040","Signature":"","Imphash":"fbfa302bf7eb5d615d0968541ee49ce4","Authentihash":{"MD5":"98a39fd9543c26e95548235dbed6f6ee","SHA1":"55a83548224d9dc156e1ba4b4bd1400cad060009","SHA256":"aac9c11490da2ad5316469aa91943b42d019b51ff6f1d9d9767260abd075bb8f"},"RichPEHeaderHash":{"MD5":"931e927cdf1c24d5817bff89dab85a64","SHA1":"4cd801fca152bbe24f5f38fd11ceb6376bcef450","SHA256":"7122c2c491e45b9bc338bcc38386cc39217d647ee94adc68881890034b241fb2"},"Sections":{".text":{"Entropy":6.323647044082133,"Virtual Size":"0x36fe"},".rdata":{"Entropy":4.706224571856012,"Virtual Size":"0x3b4"},".data":{"Entropy":0.34051109993725664,"Virtual Size":"0x1bc"},".pdata":{"Entropy":4.140010388960332,"Virtual Size":"0x1e0"},"INIT":{"Entropy":5.131166362174372,"Virtual Size":"0x4e8"},".rsrc":{"Entropy":3.574245952532775,"Virtual Size":"0x488"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2015-09-05 23:28:20","InternalName":"ComputerZ.Sys","Copyright":"版权所有 (C) 2010-2015 www.ludashi.com","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["RtlGetVersion","IofCompleteRequest","IoCreateSymbolicLink","IoCreateDevice","ExAllocatePoolWithTag","ExFreePoolWithTag","IoGetDeviceAttachmentBaseRef","PsGetVersion","RtlCompareUnicodeString","ObfDereferenceObject","IoGetDeviceProperty","RtlAnsiStringToUnicodeString","RtlInitAnsiString","RtlFreeUnicodeString","IoDeleteDevice","MmIsAddressValid","IoBuildDeviceIoControlRequest","KeInitializeEvent","KeWaitForSingleObject","IofCallDriver","MmUnmapIoSpace","MmMapIoSpace","SeTokenIsAdmin","SeReleaseSubjectContext","SeCaptureSubjectContext","KeSetTimer","KeInitializeTimerEx","KeBugCheckEx","RtlInitUnicodeString","IoGetDeviceObjectPointer","IoDeleteSymbolicLink","__C_specific_handler","HalSetBusDataByOffset","HalGetBusDataByOffset"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Time Stamping Signer","ValidFrom":"2015-05-05 00:00:00","ValidTo":"2015-12-31 23:59:59","Signature":"0dbbad60111bb5f00dcce6483a7a3e0e33dc1cb9ead620fea34dd0cc764ee818d879dfd34f9a4264238a29728a3a6c66a63c3a17a8704565c673c3d0ce8954fbac690f58b019cb869f7eb97eeb5192bf9bddebd165f0257b887cdebda5c8b51451bcc081308a85387be679fe67559387fe4fe88d0eedf37292b5c289806dd159e31d0deab138ee039d0019a5ab219b79c3ccc23e687ebdc94d694db46451fbb22874e25389ce9dfaade2dbceab7b7e064474fd0aa3c9b7a730cd49d29264f122a6b828457479e9a7ce3b33f98350947d68c01d49c760787a3c6426d5befa0a6de41ee109538fa9c523acc79d614221f02c1671493b10af2c6f1ae631f114fd6c","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"009feac811b0f16247a5fc20d80523ace6","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"b6aa9cf28bcfc9f07ec1069fb425ab61","SHA1":"ca7a166fcd53878ba5a38d4cac37c63513cfc1fa","SHA256":"711394fc49f8948a831f687d42ced6b18514f57786ecc6cdbc3c3eb72e568a40","SHA384":"ca01f9c9ed4e1ddff7126b7bbf618bc8132429886ca563f86655429e928739c621b9fdea6e04a623712cbb998c5c7d77"}},{"Subject":"??=HK, ??=Private Organization, serialNumber=1848744, C=HK, ST=Hong Kong, L=Hong Kong, O=QIHU 360 SOFTWARE CO. LIMITED, CN=QIHU 360 SOFTWARE CO. LIMITED","ValidFrom":"2013-05-21 00:00:00","ValidTo":"2016-05-20 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"541fda68b5e95006f2fec51bea326365","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"f741ec6836bb74e2370476618157c432","SHA1":"a392f40f4b3dc57727804cbeef660bbf9e2fbb69","SHA256":"faf712aafed949a99bad324e153686c3e94f25ed38ecadbee3e7650f23bea634","SHA384":"d2935b45e517522578d0a44e3654896b3dd991aef0091a60a1d22d3c695b07b4d8e9c0b36bab3b44c1fe1c12cf225f91"}},{"Subject":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Extended Validation Code Signing CA","ValidFrom":"2012-06-07 00:00:00","ValidTo":"2022-06-06 23:59:59","Signature":"6af31dbc5f4dde03f949491dad3d761c96ba1b43e6f48602427578c70cc2e59dc4344f0ea9e94ab4be418487eaf487b44cdb10493bf7df1590ba84f8b747eb5b6550f3a34a7110167b1ce1f5d6edbf50566ff899b3a951b646aec697e0e79b0c153ebb287b31a300f32e8b8748128982ef095f490c909ec8f696a37b9a7513c847f03e3f6f0b50296c2b784c30fce4600c1340d63875a9077964fdca3ce4ef48930be00a48ff076b3b0283d166d5b9e198f40e9f69c42e552e01967d7e840c80767536cbfd4661f469cc1a9d642bba046ee91152da1299a15ab083c4bc4780a6274d007a36033cbe619863cb9f05ee8085eedd9592f7ee50d463dc8fa42479bf","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"6c59efa9e100e10ee306ba8fe0292559","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"cc806ac6ce6822cccc165d63c1b8fa37","SHA1":"261a24e7b2648867017e7e852258ef87ab84c5f1","SHA256":"a8b0af15f217006b33f9beafe49e22f7263776bdb82c268c97c4441a6c7357e6","SHA384":"ce7e869a43aa2e17b7e4c0d78cabbca7b40d22c86e132153234d39b00ae426ceeef56c6ee8312f5ffda5c3f629a5dee1"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. , For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority , G5","ValidFrom":"2011-02-22 19:25:17","ValidTo":"2021-02-22 19:35:17","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"611993e400000000001c","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"78a717e082dcc1cda3458d917e677d14","SHA1":"4a872e0e51f9b304469cd1dedb496ee9b8b983a4","SHA256":"317fa1d234ebc49040ebc5e8746f8997471496051b185a91bdd9dfbb23fab5f8","SHA384":"b71052da4eb9157c8c1a5d7f55df19d69b9128598b72fcca608e5b7cc7d64c43c5504b9c86355a6dc22ee40c88cc385c"}}],"Signer":[{"SerialNumber":"541fda68b5e95006f2fec51bea326365","Issuer":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Extended Validation Code Signing CA","Version":1}]}],"LoadsDespiteHVCI":"TRUE"},{"Company":"鲁大师","Date":"","Description":"Ludashi System Driver","FileVersion":"1.3.10.831","Filename":"","MD5":"7c983b4e66c4697ad3ce7efc9166b505","MachineType":"I386","OriginalFilename":"ComputerZ.Sys","Product":"Ludashi System Driver","ProductVersion":"1.3.10.831","Publisher":"","SHA1":"c9522cf7f6d6637aaff096b4b16b0d81f6ee1c37","SHA256":"898e07cf276ec2090b3e7ca7c192cc0fa10d6f13d989ef1cb5826ca9ce25b289","Signature":"","Imphash":"b142d772a67c40535c8d8fabb6861748","Authentihash":{"MD5":"0409d64beac16333feb5bf09a356c1d7","SHA1":"d9482598bd5adb287f06a8ff3d755060e9dab4fc","SHA256":"aea066ef46a44a082e437c0fd68671ad77ee626f5864a0c2060e8fb970493635"},"RichPEHeaderHash":{"MD5":"45205f6fbd955e6f411225db2c836af9","SHA1":"123f4b488a573fbe556339280d0485feb65fc9a1","SHA256":"a59884d16bd282a5d177da9ed228fe715c89a3682deeced17bd47246b0ad7e6a"},"Sections":{".text":{"Entropy":6.335177184348483,"Virtual Size":"0xd70"},".rdata":{"Entropy":4.100383532062172,"Virtual Size":"0x164"},".data":{"Entropy":2.5,"Virtual Size":"0x8"},"INIT":{"Entropy":5.3767437075552635,"Virtual Size":"0x30e"},".rsrc":{"Entropy":3.453089760048433,"Virtual Size":"0x3e8"},".reloc":{"Entropy":4.119974163480037,"Virtual Size":"0xde"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2010-09-01 04:09:24","InternalName":"ComputerZ.Sys","Copyright":"Copyright (C) 2008-2010 www.ludashi.com","Imports":["ntoskrnl.exe"],"ExportedFunctions":"","ImportedFunctions":["IoDeleteDevice","IoDeleteSymbolicLink","RtlInitUnicodeString","_except_handler3","MmUnmapIoSpace","MmMapIoSpace","READ_REGISTER_BUFFER_ULONG","WRITE_REGISTER_ULONG","WRITE_REGISTER_UCHAR","IofCompleteRequest","IoCreateSymbolicLink","IoCreateDevice","ObfDereferenceObject","MmIsAddressValid","RtlFreeUnicodeString","IoGetDeviceObjectPointer","RtlAnsiStringToUnicodeString","RtlInitAnsiString","PsGetVersion","KeWaitForSingleObject","IofCallDriver","IoBuildDeviceIoControlRequest","KeInitializeEvent","KeTickCount","KeBugCheckEx"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer , G2","ValidFrom":"2007-06-15 00:00:00","ValidTo":"2012-06-14 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"3825d7faf861af9ef490e726b5d65ad5","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"d6c7684e9aaa508cf268335f83afe040","SHA1":"18066d20ad92409c567cdfde745279ff71c75226","SHA256":"a612fb22ce8be6dab75e47c98508f98496583e79c9c97b936a8caee9ea9f3fff","SHA384":"35c249d6ad0261a6229b2a727067ac6ba32a5d24b30b9249051f748c7735fbe2ec2ef26a702c50df1790fbe32a65aee7"}},{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA","ValidFrom":"2003-12-04 00:00:00","ValidTo":"2013-12-03 23:59:59","Signature":"4a6bf9ea58c2441c318979992b96bf82ac01d61c4ccdb08a586edf0829a35ec8ca9313e704520def47272f0038b0e4c9934e9ad4226215f73f37214f703180f18b3887b3e8e89700fecf55964e24d2a9274e7aaeb76141f32acee7c9d95eddbb2b853eb59db5d9e157ffbeb4c57ef5cf0c9ef097fe2bd33b521b1b3827f73f4a","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"47bf1995df8d524643f7db6d480d31a4","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"518d2ea8a21e879c942d504824ac211c","SHA1":"21ce87d827077e61abddf2beba69fde5432ea031","SHA256":"1ec3b4f02e03930a470020e0e48d24b84678bb558f46182888d870541f5e25c7","SHA384":"53e346bbde23779a5d116cc9d86fdd71c97b1f1b343439f8a11aa1d3c87af63864bb8488a5aeb2d0c26a6a1e0b15f03f"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009,2 CA","ValidFrom":"2009-05-21 00:00:00","ValidTo":"2019-05-20 23:59:59","Signature":"8b03c0dd94d841a26169b015a878c730c6903c7e42f724b6e4837317047f04109ca1e2fa812febc0ca44e772e050b6551020836e9692e49a516ab43731dca52deb8c00c71d4fe74d32ba85f84ebefa675565f06abe7aca64381a101078457631f3867a030f60c2b35d9df68b6676821b59e183e5bd49a53856e5de41770e580f","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"655226e1b22e18e1590f2985ac22e75c","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"650704c342850095f3288eaf791147d4","SHA1":"4cdc38c800761463749c3cbd94a12f32e49877bf","SHA256":"07b8f662558ec85b71b43a79c6e94698144f4ced2308af21e7ba1e5d461da214","SHA384":"2a271d052213438467d09d60eaa4010c8642fff3eb0070e0cf9969428713c8fdc066b90996d594dd3136f5bd0af5a22a"}},{"Subject":"C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority","ValidFrom":"2006-05-23 17:01:29","ValidTo":"2016-05-23 17:11:29","Signature":"01e446b33b457f7513877e5f43de468ecb8abdb64741bccccc7491d8ce395195a4a6b547c0efd2da7b8f5711f4328c7ccd3fee42da04214af7c843884a6f5cca14fc4bd19f4cbdd4556ecc02be0da6888f8609baa425bde8b0f0fa8b714e67b0cb82a8d78e55f737ebf03e88efe4e08afd1c6e2e61414875b4b02c1d28d8490fd715f02473253ccc880cde284c6554fe5eae8cea19ad2c51b29b3a47f53c80350117e24987d6544afb4bab07bcbf7d79cfbf35005cbb9ecffc82891b39a05197b6dec0b307ff449644c0342a195cabeef03bec294eb513c537857e75d5b4d60d066eb5d26c237167eaf1718eaf4e74aa0cf9ecbf4c58fa5e909b6d39cb86883f8b1ca81632d5fe6db9f1f8b3ead791f6364778c0272a15c768d6f4c5fc4f4ec8673f102d409ff11ec96148e7a703fc31730cf04688fe56da492995ef09daa3e5beef60ecd954a0599c28bd54ef66157f874c84dba60e95672e517b3439b641c28c846826dc240209e7818e0a972defeea7b998a60f818dc710b5e1ed982f486f53854964789bec5dac970b5526c3efba8dc8d1a52f5a7f936b611a339b18b8a26210de24ea76e12f43ebecdd7c12342489da2855aee5754e312b6763b6a8d7ab730a03cec5ea593fc7eb2a45aea8625b2f009939abb45f73c308ec80118f470e8f2a1343e191066255bbffba3da9a93d260faeca7d628b155589d694344dd665","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"610c120600000000001b","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"53c41bc1164e09e0cd1617a5bf913efd","SHA1":"93c03aac8951d494ecd5696b1c08658541b18727","SHA256":"40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b","SHA384":"f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"}},{"Subject":"C=CN, ST=Sichuan, L=Chengdu, O=Chengdu Qiying Technology Co.,Ltd., OU=Digital ID Class 3 , Microsoft Software Validation v2, CN=Chengdu Qiying Technology Co.,Ltd.","ValidFrom":"2010-03-31 00:00:00","ValidTo":"2011-03-31 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"61359ac44514d781769fd643666b4572","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"416fc5d0038211bf34811efeff6d562f","SHA1":"e0acbd39e2fa410a22c96e2a3eaea4342a626f40","SHA256":"843e587edb9c53b2fbbf84cd90b217af016da1330905b25c16bb059a26b5726e","SHA384":"1a1167bbac2b00e60c10a4c1dc1d0f5105c42582b1a39e05a1d60710d97a24c6ff76fe73700f0fb0e1e03f27aebb7697"}}],"Signer":[{"SerialNumber":"61359ac44514d781769fd643666b4572","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009,2 CA","Version":1}]}],"LoadsDespiteHVCI":"FALSE"},{"Company":"360.cn","Date":"","Description":"Ludashi System Driver","FileVersion":"1.6.12.1018","Filename":"","MD5":"2c47725db0c5eb5c2ecc32ff208bceb6","MachineType":"I386","OriginalFilename":"ComputerZ.Sys","Product":"360硬件大师","ProductVersion":"1.6.12.1018","Publisher":"","SHA1":"55777e18eb95b6c9c3e6df903f0ac36056fa83da","SHA256":"8d3347c93dff62eecdde22ccc6ba3ce8c0446874738488527ea76d0645341409","Signature":"","Imphash":"f9b9487f25a2c1e08c02f391387c5323","Authentihash":{"MD5":"354edd67437778970468a5bdd16186f7","SHA1":"9122dd6d5a86c5324768bd68b02770a39d591e8e","SHA256":"665b45ff2a2054ffdb3ea55031802c1d7fd3db843ecbcf74b227e0200b37cd56"},"RichPEHeaderHash":{"MD5":"9c097c5f0dbfddee14b43b091fd5d78d","SHA1":"67b637975685265ef26bda5b8bae555ba81a7f0c","SHA256":"95b228876243446bbf5a24243dccd159e39c09cd4001f7d385c5234f79be7b53"},"Sections":{".text":{"Entropy":6.3509986625630095,"Virtual Size":"0x2710"},".rdata":{"Entropy":4.048623584523366,"Virtual Size":"0x194"},".data":{"Entropy":1.1225846798245738,"Virtual Size":"0x50"},"INIT":{"Entropy":5.474429971377343,"Virtual Size":"0x448"},".rsrc":{"Entropy":3.5283745729717517,"Virtual Size":"0x3b0"},".reloc":{"Entropy":5.265565775816046,"Virtual Size":"0x1d8"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2012-11-07 05:16:34","InternalName":"ComputerZ.Sys","Copyright":"版权所有 (C) 2010-2012 360.cn","Imports":["ntoskrnl.exe"],"ExportedFunctions":"","ImportedFunctions":["IoDeleteDevice","IoDeleteSymbolicLink","RtlInitUnicodeString","IofCompleteRequest","IoCreateSymbolicLink","IoCreateDevice","ExFreePoolWithTag","ExAllocatePoolWithTag","IoGetDeviceProperty","RtlCompareUnicodeString","ObfDereferenceObject","IoGetDeviceAttachmentBaseRef","PsGetVersion","MmIsAddressValid","RtlFreeUnicodeString","IoGetDeviceObjectPointer","RtlAnsiStringToUnicodeString","RtlInitAnsiString","KeWaitForSingleObject","IofCallDriver","IoBuildDeviceIoControlRequest","KeInitializeEvent","MmUnmapIoSpace","READ_REGISTER_BUFFER_UCHAR","MmMapIoSpace","READ_REGISTER_BUFFER_ULONG","WRITE_REGISTER_ULONG","WRITE_REGISTER_UCHAR","KeSetTimer","KeInitializeTimerEx","_allmul","SeReleaseSubjectContext","SeTokenIsAdmin","SeCaptureSubjectContext","KeTickCount","KeBugCheckEx","RtlUnwind"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer , G3","ValidFrom":"2012-05-01 00:00:00","ValidTo":"2012-12-31 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"79a2a585f9d1154213d9b83ef6b68ded","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"e6d820afb23af20a65cf0b03247ea05e","SHA1":"7a8f7c37453f99390ee1e94bb5d3d1cba3a0eea7","SHA256":"7e722dc40e6b9abf8c20aa4d887e34b6d2c6b8cbe53a055d49bf9f5e946e0d27","SHA384":"7e14609969a388d38d227df1dbb9ce086c9a820142c94fd1a28ef2835a8aa528aef4c6399bce344d79adb5f3dad86afa"}},{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA","ValidFrom":"2003-12-04 00:00:00","ValidTo":"2013-12-03 23:59:59","Signature":"4a6bf9ea58c2441c318979992b96bf82ac01d61c4ccdb08a586edf0829a35ec8ca9313e704520def47272f0038b0e4c9934e9ad4226215f73f37214f703180f18b3887b3e8e89700fecf55964e24d2a9274e7aaeb76141f32acee7c9d95eddbb2b853eb59db5d9e157ffbeb4c57ef5cf0c9ef097fe2bd33b521b1b3827f73f4a","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"47bf1995df8d524643f7db6d480d31a4","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"518d2ea8a21e879c942d504824ac211c","SHA1":"21ce87d827077e61abddf2beba69fde5432ea031","SHA256":"1ec3b4f02e03930a470020e0e48d24b84678bb558f46182888d870541f5e25c7","SHA384":"53e346bbde23779a5d116cc9d86fdd71c97b1f1b343439f8a11aa1d3c87af63864bb8488a5aeb2d0c26a6a1e0b15f03f"}},{"Subject":"C=CN, ST=Beijing, L=Beijing, O=360.cn, OU=Digital ID Class 3 , Microsoft Software Validation v2, CN=360.cn","ValidFrom":"2010-03-16 00:00:00","ValidTo":"2013-03-15 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"74f2958d31d03eb042f9081555305277","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"4f5c7d4f95e9d6a9749876f33ae138c4","SHA1":"3666bdaf7b0d6a9019d5111e2ffd0bf06587dd58","SHA256":"f5b44adb5d25d0e309ae2f5db3f1e2428ef0b7332f8afcc2086786485aa7c162","SHA384":"ae0b037429f9c36e2925d6be76b2535f8a66c6d81b07252c63ce74af493bb31d5d52c276de95cdc4c71ba56bdf7148e4"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009,2 CA","ValidFrom":"2009-05-21 00:00:00","ValidTo":"2019-05-20 23:59:59","Signature":"8b03c0dd94d841a26169b015a878c730c6903c7e42f724b6e4837317047f04109ca1e2fa812febc0ca44e772e050b6551020836e9692e49a516ab43731dca52deb8c00c71d4fe74d32ba85f84ebefa675565f06abe7aca64381a101078457631f3867a030f60c2b35d9df68b6676821b59e183e5bd49a53856e5de41770e580f","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"655226e1b22e18e1590f2985ac22e75c","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"650704c342850095f3288eaf791147d4","SHA1":"4cdc38c800761463749c3cbd94a12f32e49877bf","SHA256":"07b8f662558ec85b71b43a79c6e94698144f4ced2308af21e7ba1e5d461da214","SHA384":"2a271d052213438467d09d60eaa4010c8642fff3eb0070e0cf9969428713c8fdc066b90996d594dd3136f5bd0af5a22a"}}],"Signer":[{"SerialNumber":"74f2958d31d03eb042f9081555305277","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009,2 CA","Version":1}]}],"LoadsDespiteHVCI":"FALSE"},{"Company":"360.cn","Date":"","Description":"Ludashi System Driver","FileVersion":"1.6.11.415","Filename":"","MD5":"44499d3cab387aa78a4a6eca2ac181fb","MachineType":"AMD64","OriginalFilename":"ComputerZ.Sys","Product":"360硬件大师","ProductVersion":"1.6.11.415","Publisher":"","SHA1":"db3ce886a47027c09bb668c7049362ab86c82ceb","SHA256":"a34e45e5bbec861e937aefb3cbb7c8818f72df2082029e43264c2b361424cbb1","Signature":"","Imphash":"fffbca93e6322995552b841c7d65b033","Authentihash":{"MD5":"2ed9b1d5cc2f688a6b836c4be1a64981","SHA1":"970b6f1cc81ce6cb7fb2e2f5d9f3b159dce86c10","SHA256":"19f89530b8caf720c91c82977132bb1fb2afe695b426b51a1ae1b35570805f32"},"RichPEHeaderHash":{"MD5":"c6a84fd8b9ad9825f80dad9cd0c9e192","SHA1":"2955d54729fcdec5454796a4decd2ce2fd49f167","SHA256":"d409b635f972a6ced87c5ac14d62792a70f26f226099fc41075fbcea4daf6f29"},"Sections":{".text":{"Entropy":6.333816389043476,"Virtual Size":"0x280e"},".rdata":{"Entropy":4.645005881454265,"Virtual Size":"0x308"},".data":{"Entropy":0.41099431917639,"Virtual Size":"0x164"},".pdata":{"Entropy":3.898904923251171,"Virtual Size":"0x180"},"INIT":{"Entropy":5.095356237769951,"Virtual Size":"0x470"},".rsrc":{"Entropy":3.5180039714066043,"Virtual Size":"0x3b0"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2011-04-15 05:21:45","InternalName":"ComputerZ.Sys","Copyright":"版权所有 (C) 2010-2011 360.cn","Imports":["ntoskrnl.exe"],"ExportedFunctions":"","ImportedFunctions":["IoDeleteSymbolicLink","RtlInitUnicodeString","IoDeleteDevice","IofCompleteRequest","IoCreateSymbolicLink","IoCreateDevice","ExAllocatePoolWithTag","ExFreePoolWithTag","IoGetDeviceAttachmentBaseRef","PsGetVersion","RtlCompareUnicodeString","ObfDereferenceObject","IoGetDeviceProperty","RtlAnsiStringToUnicodeString","RtlInitAnsiString","RtlFreeUnicodeString","IoGetDeviceObjectPointer","MmIsAddressValid","IoBuildDeviceIoControlRequest","KeInitializeEvent","KeWaitForSingleObject","IofCallDriver","MmUnmapIoSpace","MmMapIoSpace","SeTokenIsAdmin","SeReleaseSubjectContext","SeCaptureSubjectContext","KeSetTimer","KeInitializeTimerEx","KeBugCheckEx","__C_specific_handler"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer , G2","ValidFrom":"2007-06-15 00:00:00","ValidTo":"2012-06-14 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"3825d7faf861af9ef490e726b5d65ad5","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"d6c7684e9aaa508cf268335f83afe040","SHA1":"18066d20ad92409c567cdfde745279ff71c75226","SHA256":"a612fb22ce8be6dab75e47c98508f98496583e79c9c97b936a8caee9ea9f3fff","SHA384":"35c249d6ad0261a6229b2a727067ac6ba32a5d24b30b9249051f748c7735fbe2ec2ef26a702c50df1790fbe32a65aee7"}},{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA","ValidFrom":"2003-12-04 00:00:00","ValidTo":"2013-12-03 23:59:59","Signature":"4a6bf9ea58c2441c318979992b96bf82ac01d61c4ccdb08a586edf0829a35ec8ca9313e704520def47272f0038b0e4c9934e9ad4226215f73f37214f703180f18b3887b3e8e89700fecf55964e24d2a9274e7aaeb76141f32acee7c9d95eddbb2b853eb59db5d9e157ffbeb4c57ef5cf0c9ef097fe2bd33b521b1b3827f73f4a","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"47bf1995df8d524643f7db6d480d31a4","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"518d2ea8a21e879c942d504824ac211c","SHA1":"21ce87d827077e61abddf2beba69fde5432ea031","SHA256":"1ec3b4f02e03930a470020e0e48d24b84678bb558f46182888d870541f5e25c7","SHA384":"53e346bbde23779a5d116cc9d86fdd71c97b1f1b343439f8a11aa1d3c87af63864bb8488a5aeb2d0c26a6a1e0b15f03f"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. , For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority , G5","ValidFrom":"2006-11-08 00:00:00","ValidTo":"2021-11-07 23:59:59","Signature":"1302ddf8e88600f25af8f8200c59886207cecef74ef9bb59a198e5e138dd4ebc6618d3adeb18f20dc96d3e4a9420c33cbabd6554c6af44b310ad2c6b3eabd707b6b88163c5f95e2ee52a67cecd330c2ad7895603231fb3bee83a0859b4ec4535f78a5bff66cf50afc66d578d1978b7b9a2d157ea1f9a4bafbac98e127ec6bdff","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"250ce8e030612e9f2b89f7054d7cf8fd","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"918d9eb6a6cd36c531eceb926170a7e1","SHA1":"0ae95700d65e6f59715aa47048993ca7858e676a","SHA256":"47c46e6eaa3780eace3d0d891346cd373359d246b21a957219dbab4c8f37c166","SHA384":"e54017c93ba52f012cc15aeb3bcbce1e90a0006ff8dca231a24fc572926770f63213343f538003407bed3463fa9c4a85"}},{"Subject":"C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority","ValidFrom":"2006-05-23 17:01:29","ValidTo":"2016-05-23 17:11:29","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"610c120600000000001b","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"53c41bc1164e09e0cd1617a5bf913efd","SHA1":"93c03aac8951d494ecd5696b1c08658541b18727","SHA256":"40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b","SHA384":"f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"}},{"Subject":"C=CN, ST=Sichuan, L=Chengdu, O=Chengdu Qiying Technology Co.,Ltd., OU=Digital ID Class 3 , Microsoft Software Validation v2, CN=Chengdu Qiying Technology Co.,Ltd.","ValidFrom":"2011-03-24 00:00:00","ValidTo":"2012-04-21 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"4eb872f0c388229ae038b56303fcfdd5","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"08ba4b408576a45f9ae47b3bb6bee468","SHA1":"8701103a3c6f007be112d5f0d1cdfe32f73d1c02","SHA256":"8ba1e1472491da70d5de5d5b6e754d3217893f3abea2877e228c0bfccf07e8b2","SHA384":"d63bb928f6a887680169cb72c13b8a402c574766848035406c9fb119643f7f7a04852ccdfbddf0ff673d7189e4aa09f4"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","ValidFrom":"2010-02-08 00:00:00","ValidTo":"2020-02-07 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"5200e5aa2556fc1a86ed96c9d44b33c7","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"b30c31a572b0409383ed3fbe17e56e81","SHA1":"4843a82ed3b1f2bfbee9671960e1940c942f688d","SHA256":"03cda47a6e654ed85d932714fc09ce4874600eda29ec6628cfbaeb155cab78c9","SHA384":"bbda8407c4f9fc4e54d772f1c7fb9d30bc97e1f97ecd51c443063d1fa0644e266328781776cd5c44896c457c75f4d7da"}}],"Signer":[{"SerialNumber":"4eb872f0c388229ae038b56303fcfdd5","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","Version":1}]}],"LoadsDespiteHVCI":"FALSE"},{"Company":"360.cn","Date":"","Description":"Ludashi System Driver","FileVersion":"1.6.11.1008","Filename":"","MD5":"637f2708da54e792c27f1141d5bb09cd","MachineType":"I386","OriginalFilename":"ComputerZ.Sys","Product":"360硬件大师","ProductVersion":"1.6.11.1008","Publisher":"","SHA1":"dc393d30453daa1f853f47797e48c142ac77a37b","SHA256":"a97b404aae301048e0600693457c3320d33f395e9312938831bc5a0e808f2e67","Signature":"","Imphash":"f9b9487f25a2c1e08c02f391387c5323","Authentihash":{"MD5":"0a03c413e989714fc0d43f4174cb29c7","SHA1":"6777ce9e28ffe884bec45588db510295995c3eb7","SHA256":"87279855c17e3924ebfa07f51c1312d0e107f990f4ae174807ac4814da6179ac"},"RichPEHeaderHash":{"MD5":"2b333a796628f5a6167204d8386db243","SHA1":"42eee62246749bc7f1c13620a762c056e9d0a754","SHA256":"78a5ad5e597ace30219e94d7082fb7d502c98948841e6885741e72d94d058d3b"},"Sections":{".text":{"Entropy":6.33722266411958,"Virtual Size":"0x25ec"},".rdata":{"Entropy":4.055089931454665,"Virtual Size":"0x194"},".data":{"Entropy":0.9185644431995964,"Virtual Size":"0x40"},"INIT":{"Entropy":5.440242429774388,"Virtual Size":"0x448"},".rsrc":{"Entropy":3.5259556360992286,"Virtual Size":"0x3b0"},".reloc":{"Entropy":5.274136623805015,"Virtual Size":"0x1d2"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2011-10-08 00:15:21","InternalName":"ComputerZ.Sys","Copyright":"版权所有 (C) 2010-2011 360.cn","Imports":["ntoskrnl.exe"],"ExportedFunctions":"","ImportedFunctions":["IoDeleteDevice","IoDeleteSymbolicLink","RtlInitUnicodeString","IofCompleteRequest","IoCreateSymbolicLink","IoCreateDevice","ExFreePoolWithTag","ExAllocatePoolWithTag","IoGetDeviceProperty","RtlCompareUnicodeString","ObfDereferenceObject","IoGetDeviceAttachmentBaseRef","PsGetVersion","MmIsAddressValid","RtlFreeUnicodeString","IoGetDeviceObjectPointer","RtlAnsiStringToUnicodeString","RtlInitAnsiString","KeWaitForSingleObject","IofCallDriver","IoBuildDeviceIoControlRequest","KeInitializeEvent","MmUnmapIoSpace","READ_REGISTER_BUFFER_UCHAR","MmMapIoSpace","READ_REGISTER_BUFFER_ULONG","WRITE_REGISTER_ULONG","WRITE_REGISTER_UCHAR","KeSetTimer","KeInitializeTimerEx","_allmul","SeReleaseSubjectContext","SeTokenIsAdmin","SeCaptureSubjectContext","KeTickCount","KeBugCheckEx","RtlUnwind"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer , G2","ValidFrom":"2007-06-15 00:00:00","ValidTo":"2012-06-14 23:59:59","Signature":"50c54bc82480dfe40d24c2de1ab1a102a1a6822d0c831581370a820e2cb05a1761b5d805fe88dbf19191b3561a40a6eb92be3839b07536743a984fe437ba9989ca95421db0b9c7a08d57e0fad5640442354e01d133a217c84daa27c7f2e1864c02384d8378c6fc53e0ebe00687dda4969e5e0c98e2a5bebf8285c360e1dfad28d8c7a54b64dac71b5bbdac3908d53822a1338b2f8a9aebbc07213f44410907b5651c24bc48d34480eba1cfc902b414cf54c716a3805cf9793e5d727d88179e2c43a2ca53ce7d3df62a3ab84f9400a56d0a835df95e53f418b3570f70c3fbf5ad95a00e17dec4168060c90f2b6e8604f1ebf47827d105c5ee345b5eb94932f233","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"3825d7faf861af9ef490e726b5d65ad5","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"d6c7684e9aaa508cf268335f83afe040","SHA1":"18066d20ad92409c567cdfde745279ff71c75226","SHA256":"a612fb22ce8be6dab75e47c98508f98496583e79c9c97b936a8caee9ea9f3fff","SHA384":"35c249d6ad0261a6229b2a727067ac6ba32a5d24b30b9249051f748c7735fbe2ec2ef26a702c50df1790fbe32a65aee7"}},{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA","ValidFrom":"2003-12-04 00:00:00","ValidTo":"2013-12-03 23:59:59","Signature":"4a6bf9ea58c2441c318979992b96bf82ac01d61c4ccdb08a586edf0829a35ec8ca9313e704520def47272f0038b0e4c9934e9ad4226215f73f37214f703180f18b3887b3e8e89700fecf55964e24d2a9274e7aaeb76141f32acee7c9d95eddbb2b853eb59db5d9e157ffbeb4c57ef5cf0c9ef097fe2bd33b521b1b3827f73f4a","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"47bf1995df8d524643f7db6d480d31a4","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"518d2ea8a21e879c942d504824ac211c","SHA1":"21ce87d827077e61abddf2beba69fde5432ea031","SHA256":"1ec3b4f02e03930a470020e0e48d24b84678bb558f46182888d870541f5e25c7","SHA384":"53e346bbde23779a5d116cc9d86fdd71c97b1f1b343439f8a11aa1d3c87af63864bb8488a5aeb2d0c26a6a1e0b15f03f"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. , For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority , G5","ValidFrom":"2006-11-08 00:00:00","ValidTo":"2021-11-07 23:59:59","Signature":"1302ddf8e88600f25af8f8200c59886207cecef74ef9bb59a198e5e138dd4ebc6618d3adeb18f20dc96d3e4a9420c33cbabd6554c6af44b310ad2c6b3eabd707b6b88163c5f95e2ee52a67cecd330c2ad7895603231fb3bee83a0859b4ec4535f78a5bff66cf50afc66d578d1978b7b9a2d157ea1f9a4bafbac98e127ec6bdff","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"250ce8e030612e9f2b89f7054d7cf8fd","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"918d9eb6a6cd36c531eceb926170a7e1","SHA1":"0ae95700d65e6f59715aa47048993ca7858e676a","SHA256":"47c46e6eaa3780eace3d0d891346cd373359d246b21a957219dbab4c8f37c166","SHA384":"e54017c93ba52f012cc15aeb3bcbce1e90a0006ff8dca231a24fc572926770f63213343f538003407bed3463fa9c4a85"}},{"Subject":"C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority","ValidFrom":"2006-05-23 17:01:29","ValidTo":"2016-05-23 17:11:29","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"610c120600000000001b","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"53c41bc1164e09e0cd1617a5bf913efd","SHA1":"93c03aac8951d494ecd5696b1c08658541b18727","SHA256":"40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b","SHA384":"f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"}},{"Subject":"C=CN, ST=Sichuan, L=Chengdu, O=Chengdu Qiying Technology Co.,Ltd., OU=Digital ID Class 3 , Microsoft Software Validation v2, CN=Chengdu Qiying Technology Co.,Ltd.","ValidFrom":"2011-03-24 00:00:00","ValidTo":"2012-04-21 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"4eb872f0c388229ae038b56303fcfdd5","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"08ba4b408576a45f9ae47b3bb6bee468","SHA1":"8701103a3c6f007be112d5f0d1cdfe32f73d1c02","SHA256":"8ba1e1472491da70d5de5d5b6e754d3217893f3abea2877e228c0bfccf07e8b2","SHA384":"d63bb928f6a887680169cb72c13b8a402c574766848035406c9fb119643f7f7a04852ccdfbddf0ff673d7189e4aa09f4"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","ValidFrom":"2010-02-08 00:00:00","ValidTo":"2020-02-07 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"5200e5aa2556fc1a86ed96c9d44b33c7","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"b30c31a572b0409383ed3fbe17e56e81","SHA1":"4843a82ed3b1f2bfbee9671960e1940c942f688d","SHA256":"03cda47a6e654ed85d932714fc09ce4874600eda29ec6628cfbaeb155cab78c9","SHA384":"bbda8407c4f9fc4e54d772f1c7fb9d30bc97e1f97ecd51c443063d1fa0644e266328781776cd5c44896c457c75f4d7da"}}],"Signer":[{"SerialNumber":"4eb872f0c388229ae038b56303fcfdd5","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","Version":1}]}],"LoadsDespiteHVCI":"FALSE"},{"Company":"360.cn","Date":"","Description":"Ludashi System Driver","FileVersion":"1.6.14.1021","Filename":"","MD5":"3f29f651a3c4ff5ce16d61deccf46618","MachineType":"AMD64","OriginalFilename":"ComputerZ.Sys","Product":"鲁大师","ProductVersion":"1.6.14.1021","Publisher":"","SHA1":"cb0bc86d437ab78c1fbefdaf1af965522ebdd65d","SHA256":"bc453d428fc224960fa8cbbaf90c86ce9b4c8c30916ad56e525ab19b6516424e","Signature":"","Imphash":"fffbca93e6322995552b841c7d65b033","Authentihash":{"MD5":"8537ac04b83bb2ce5905e04cbbabe409","SHA1":"d5c80e72827bea03340b9f23c46c8a00fe9d20f8","SHA256":"a4c9fdd68c1f70df223d50d849fb83d11b1abc2256b8916e195f32360bb647ad"},"RichPEHeaderHash":{"MD5":"7f4fe28fbea8250d1d89c107bf8aa820","SHA1":"2c88a39230384654a89546d9eae4394786648eeb","SHA256":"ac21ab9c51c4a7d30efd0f08fc44428e2d46890849b3413fc8c4a4239c468130"},"Sections":{".text":{"Entropy":6.318474008501602,"Virtual Size":"0x2fae"},".rdata":{"Entropy":4.600644395447569,"Virtual Size":"0x33c"},".data":{"Entropy":0.3888300330017545,"Virtual Size":"0x17c"},".pdata":{"Entropy":4.038325406004775,"Virtual Size":"0x1c8"},"INIT":{"Entropy":5.1042520300899135,"Virtual Size":"0x470"},".rsrc":{"Entropy":3.558317788181056,"Virtual Size":"0x480"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2014-02-24 21:36:50","InternalName":"ComputerZ.Sys","Copyright":"版权所有 (C) 2010-2014 www.ludashi.com","Imports":["ntoskrnl.exe"],"ExportedFunctions":"","ImportedFunctions":["IoDeleteSymbolicLink","RtlInitUnicodeString","IoDeleteDevice","IofCompleteRequest","IoCreateSymbolicLink","IoCreateDevice","ExAllocatePoolWithTag","ExFreePoolWithTag","IoGetDeviceAttachmentBaseRef","PsGetVersion","RtlCompareUnicodeString","ObfDereferenceObject","IoGetDeviceProperty","RtlAnsiStringToUnicodeString","RtlInitAnsiString","RtlFreeUnicodeString","IoGetDeviceObjectPointer","MmIsAddressValid","IoBuildDeviceIoControlRequest","KeInitializeEvent","KeWaitForSingleObject","IofCallDriver","MmUnmapIoSpace","MmMapIoSpace","SeTokenIsAdmin","SeReleaseSubjectContext","SeCaptureSubjectContext","KeSetTimer","KeInitializeTimerEx","KeBugCheckEx","__C_specific_handler"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Time Stamping Signer","ValidFrom":"2010-05-10 00:00:00","ValidTo":"2015-05-10 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"478a8efb59e1d83f0ce142d2a28707be","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"f13ede9179075999ef7f856ec31e364b","SHA1":"2f09867166e6107e17808317f5c8d4ee157f45bc","SHA256":"089a2c4c6ac7432020acdb65c33bf39130da6f37c002ba79128bd4c94e4fa101","SHA384":"67be6d358f4ecd0726163603a404db9d78c340951d43fd608482cd89a2de7f9566f0ce45f8222f420003157cb266b939"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. , For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority , G5","ValidFrom":"2006-11-08 00:00:00","ValidTo":"2021-11-07 23:59:59","Signature":"1302ddf8e88600f25af8f8200c59886207cecef74ef9bb59a198e5e138dd4ebc6618d3adeb18f20dc96d3e4a9420c33cbabd6554c6af44b310ad2c6b3eabd707b6b88163c5f95e2ee52a67cecd330c2ad7895603231fb3bee83a0859b4ec4535f78a5bff66cf50afc66d578d1978b7b9a2d157ea1f9a4bafbac98e127ec6bdff","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"250ce8e030612e9f2b89f7054d7cf8fd","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"918d9eb6a6cd36c531eceb926170a7e1","SHA1":"0ae95700d65e6f59715aa47048993ca7858e676a","SHA256":"47c46e6eaa3780eace3d0d891346cd373359d246b21a957219dbab4c8f37c166","SHA384":"e54017c93ba52f012cc15aeb3bcbce1e90a0006ff8dca231a24fc572926770f63213343f538003407bed3463fa9c4a85"}},{"Subject":"C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority","ValidFrom":"2006-05-23 17:01:29","ValidTo":"2016-05-23 17:11:29","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"610c120600000000001b","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"53c41bc1164e09e0cd1617a5bf913efd","SHA1":"93c03aac8951d494ecd5696b1c08658541b18727","SHA256":"40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b","SHA384":"f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"}},{"Subject":"C=CN, ST=Beijing, L=Beijing, O=Qihoo 360 Software (Beijing) Company Limited, OU=Digital ID Class 3 , Microsoft Software Validation v2, OU=Tech. Dev. Dept., CN=Qihoo 360 Software (Beijing) Company Limited","ValidFrom":"2013-03-11 00:00:00","ValidTo":"2016-03-10 23:59:59","Signature":"b1e984808fbc7d3658d18d137c68f1277611af3e98408e495fd55de202bc04f7dc44ae362658e6b5f9dd97b5b383b94723bae937b8fb9e75bb92317a85bcee1989c90c318216da71629f3147ae647502e71e360d16b7cf7006927282265eb0014300650595d1cccc07ed28d9df246055981cec3485bc3173aef9b76912a6cbb2766fa5363e1fc0a91d4679db92e1e1b8dc84e1a14de55324d522670f9e574714b2959ea7a89db456e3debd34d35bbe6403389421ac76615e4ce194990b325132fa62279f31e86fb7043627343fef7118672d5f1ce4666a594d746bb3c69bf123f27c6cb24079fc490a382286d4e85fc118ca9a4612dda448b84a25bcd0fa2cf1","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"51bd5d8e45b82a0210f17fe4c5233468","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"ad73c81b3174cc055d9718b2145a3d1f","SHA1":"0cb9e92828857976774a9fe96c016cdc67a25e6d","SHA256":"2c5d88401dfeec2ebf814e09d0d0faec9d109a503d427da4a7f3e0dec5ae0b6c","SHA384":"48c38329eb7f200be0d48acddabdb93c354dd1b8b3c3ce955a23638a4e2e32dd7d0f3a4f227a2b6382adc95e746cc411"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","ValidFrom":"2010-02-08 00:00:00","ValidTo":"2020-02-07 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"5200e5aa2556fc1a86ed96c9d44b33c7","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"b30c31a572b0409383ed3fbe17e56e81","SHA1":"4843a82ed3b1f2bfbee9671960e1940c942f688d","SHA256":"03cda47a6e654ed85d932714fc09ce4874600eda29ec6628cfbaeb155cab78c9","SHA384":"bbda8407c4f9fc4e54d772f1c7fb9d30bc97e1f97ecd51c443063d1fa0644e266328781776cd5c44896c457c75f4d7da"}}],"Signer":[{"SerialNumber":"51bd5d8e45b82a0210f17fe4c5233468","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","Version":1}]}],"LoadsDespiteHVCI":"FALSE"},{"Company":"360.cn","Date":"","Description":"Ludashi System Driver","FileVersion":"1.6.11.1129","Filename":"","MD5":"639252292bb40b3f10f8a6842aee3cd4","MachineType":"I386","OriginalFilename":"ComputerZ.Sys","Product":"360硬件大师","ProductVersion":"1.6.11.1129","Publisher":"","SHA1":"283c7dc5b029dbc41027df16716ec12761a53df8","SHA256":"c186967cc4f2a0cb853c9796d3ea416d233e48e735f02b1bb013967964e89778","Signature":"","Imphash":"f9b9487f25a2c1e08c02f391387c5323","Authentihash":{"MD5":"f178294b652c780d5966a83b20fc39fe","SHA1":"a039b1b3f9bc2f71a37fb0270076d17f03e9a73a","SHA256":"a787df19468ba5fce5de825983251507867c6d3ff72d93e19466f2201013bab9"},"RichPEHeaderHash":{"MD5":"2b333a796628f5a6167204d8386db243","SHA1":"42eee62246749bc7f1c13620a762c056e9d0a754","SHA256":"78a5ad5e597ace30219e94d7082fb7d502c98948841e6885741e72d94d058d3b"},"Sections":{".text":{"Entropy":6.335180585490983,"Virtual Size":"0x261c"},".rdata":{"Entropy":4.035903421740524,"Virtual Size":"0x194"},".data":{"Entropy":0.9185644431995964,"Virtual Size":"0x40"},"INIT":{"Entropy":5.440242429774388,"Virtual Size":"0x448"},".rsrc":{"Entropy":3.5254013224830625,"Virtual Size":"0x3b0"},".reloc":{"Entropy":5.2921858814119345,"Virtual Size":"0x1d4"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2011-11-30 05:27:03","InternalName":"ComputerZ.Sys","Copyright":"版权所有 (C) 2010-2011 360.cn","Imports":["ntoskrnl.exe"],"ExportedFunctions":"","ImportedFunctions":["IoDeleteDevice","IoDeleteSymbolicLink","RtlInitUnicodeString","IofCompleteRequest","IoCreateSymbolicLink","IoCreateDevice","ExFreePoolWithTag","ExAllocatePoolWithTag","IoGetDeviceProperty","RtlCompareUnicodeString","ObfDereferenceObject","IoGetDeviceAttachmentBaseRef","PsGetVersion","MmIsAddressValid","RtlFreeUnicodeString","IoGetDeviceObjectPointer","RtlAnsiStringToUnicodeString","RtlInitAnsiString","KeWaitForSingleObject","IofCallDriver","IoBuildDeviceIoControlRequest","KeInitializeEvent","MmUnmapIoSpace","READ_REGISTER_BUFFER_UCHAR","MmMapIoSpace","READ_REGISTER_BUFFER_ULONG","WRITE_REGISTER_ULONG","WRITE_REGISTER_UCHAR","KeSetTimer","KeInitializeTimerEx","_allmul","SeReleaseSubjectContext","SeTokenIsAdmin","SeCaptureSubjectContext","KeTickCount","KeBugCheckEx","RtlUnwind"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer , G2","ValidFrom":"2007-06-15 00:00:00","ValidTo":"2012-06-14 23:59:59","Signature":"50c54bc82480dfe40d24c2de1ab1a102a1a6822d0c831581370a820e2cb05a1761b5d805fe88dbf19191b3561a40a6eb92be3839b07536743a984fe437ba9989ca95421db0b9c7a08d57e0fad5640442354e01d133a217c84daa27c7f2e1864c02384d8378c6fc53e0ebe00687dda4969e5e0c98e2a5bebf8285c360e1dfad28d8c7a54b64dac71b5bbdac3908d53822a1338b2f8a9aebbc07213f44410907b5651c24bc48d34480eba1cfc902b414cf54c716a3805cf9793e5d727d88179e2c43a2ca53ce7d3df62a3ab84f9400a56d0a835df95e53f418b3570f70c3fbf5ad95a00e17dec4168060c90f2b6e8604f1ebf47827d105c5ee345b5eb94932f233","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"3825d7faf861af9ef490e726b5d65ad5","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"d6c7684e9aaa508cf268335f83afe040","SHA1":"18066d20ad92409c567cdfde745279ff71c75226","SHA256":"a612fb22ce8be6dab75e47c98508f98496583e79c9c97b936a8caee9ea9f3fff","SHA384":"35c249d6ad0261a6229b2a727067ac6ba32a5d24b30b9249051f748c7735fbe2ec2ef26a702c50df1790fbe32a65aee7"}},{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA","ValidFrom":"2003-12-04 00:00:00","ValidTo":"2013-12-03 23:59:59","Signature":"4a6bf9ea58c2441c318979992b96bf82ac01d61c4ccdb08a586edf0829a35ec8ca9313e704520def47272f0038b0e4c9934e9ad4226215f73f37214f703180f18b3887b3e8e89700fecf55964e24d2a9274e7aaeb76141f32acee7c9d95eddbb2b853eb59db5d9e157ffbeb4c57ef5cf0c9ef097fe2bd33b521b1b3827f73f4a","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"47bf1995df8d524643f7db6d480d31a4","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"518d2ea8a21e879c942d504824ac211c","SHA1":"21ce87d827077e61abddf2beba69fde5432ea031","SHA256":"1ec3b4f02e03930a470020e0e48d24b84678bb558f46182888d870541f5e25c7","SHA384":"53e346bbde23779a5d116cc9d86fdd71c97b1f1b343439f8a11aa1d3c87af63864bb8488a5aeb2d0c26a6a1e0b15f03f"}},{"Subject":"C=CN, ST=Beijing, L=Beijing, O=360.cn, OU=Digital ID Class 3 , Microsoft Software Validation v2, CN=360.cn","ValidFrom":"2010-03-16 00:00:00","ValidTo":"2013-03-15 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"74f2958d31d03eb042f9081555305277","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"4f5c7d4f95e9d6a9749876f33ae138c4","SHA1":"3666bdaf7b0d6a9019d5111e2ffd0bf06587dd58","SHA256":"f5b44adb5d25d0e309ae2f5db3f1e2428ef0b7332f8afcc2086786485aa7c162","SHA384":"ae0b037429f9c36e2925d6be76b2535f8a66c6d81b07252c63ce74af493bb31d5d52c276de95cdc4c71ba56bdf7148e4"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009,2 CA","ValidFrom":"2009-05-21 00:00:00","ValidTo":"2019-05-20 23:59:59","Signature":"8b03c0dd94d841a26169b015a878c730c6903c7e42f724b6e4837317047f04109ca1e2fa812febc0ca44e772e050b6551020836e9692e49a516ab43731dca52deb8c00c71d4fe74d32ba85f84ebefa675565f06abe7aca64381a101078457631f3867a030f60c2b35d9df68b6676821b59e183e5bd49a53856e5de41770e580f","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"655226e1b22e18e1590f2985ac22e75c","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"650704c342850095f3288eaf791147d4","SHA1":"4cdc38c800761463749c3cbd94a12f32e49877bf","SHA256":"07b8f662558ec85b71b43a79c6e94698144f4ced2308af21e7ba1e5d461da214","SHA384":"2a271d052213438467d09d60eaa4010c8642fff3eb0070e0cf9969428713c8fdc066b90996d594dd3136f5bd0af5a22a"}},{"Subject":"C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority","ValidFrom":"2006-05-23 17:01:29","ValidTo":"2016-05-23 17:11:29","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"610c120600000000001b","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"53c41bc1164e09e0cd1617a5bf913efd","SHA1":"93c03aac8951d494ecd5696b1c08658541b18727","SHA256":"40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b","SHA384":"f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"}}],"Signer":[{"SerialNumber":"74f2958d31d03eb042f9081555305277","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009,2 CA","Version":1}]}],"LoadsDespiteHVCI":"FALSE"},{"Company":"鲁大师","Date":"","Description":"Ludashi System Driver","FileVersion":"1.3.9.1105","Filename":"","MD5":"fc90bcc43daa48882be359a17b71abf7","MachineType":"I386","OriginalFilename":"ComputerZ.Sys","Product":"Ludashi System Driver","ProductVersion":"1.3.9.1105","Publisher":"","SHA1":"fd87b70f94674b02d62bb01ae6e62d75c618f5c8","SHA256":"c586befc3fd561fcbf1cf706214ae2adaa43ce9ba760efd548d581f60deafc65","Signature":"","Imphash":"aa01c534155ce919d797860feb531eae","Authentihash":{"MD5":"feae6741229e64efb2889fcd6d6bc131","SHA1":"ff8da3c092493ef21ee39716a235017983c4613a","SHA256":"91e5f702691772cd1291ffbd2b645f06fda3b7b2c31c04ca28a3f4d728875cc6"},"RichPEHeaderHash":{"MD5":"cae87838f37604d4b8f003c0d590e5bb","SHA1":"d4b28c31e80907f6bd84fe8e4314d668c210445e","SHA256":"4e1ad16067127d28cb204ff3ff60dca828193d4db6e512c22680378e86e17b85"},"Sections":{".text":{"Entropy":6.352607635573136,"Virtual Size":"0xe2e"},".rdata":{"Entropy":3.7784703382082094,"Virtual Size":"0x174"},".data":{"Entropy":3,"Virtual Size":"0x8"},"INIT":{"Entropy":5.294788001273783,"Virtual Size":"0x2d4"},".rsrc":{"Entropy":3.4637488906864458,"Virtual Size":"0x3e8"},".reloc":{"Entropy":4.279777518236358,"Virtual Size":"0xde"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2009-11-05 01:10:36","InternalName":"ComputerZ.Sys","Copyright":"Copyright (C) 2008-2009 www.ludashi.com","Imports":["ntoskrnl.exe"],"ExportedFunctions":"","ImportedFunctions":["IoDeleteDevice","IoDeleteSymbolicLink","RtlInitUnicodeString","MmUnmapIoSpace","MmMapIoSpace","READ_REGISTER_BUFFER_ULONG","IofCompleteRequest","IoCreateSymbolicLink","IoCreateDevice","ObfDereferenceObject","MmIsAddressValid","RtlFreeUnicodeString","IoGetDeviceObjectPointer","RtlAnsiStringToUnicodeString","RtlInitAnsiString","PsGetVersion","memset","KeWaitForSingleObject","IofCallDriver","IoBuildDeviceIoControlRequest","KeInitializeEvent","KeTickCount","KeBugCheckEx","RtlUnwind"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer , G2","ValidFrom":"2007-06-15 00:00:00","ValidTo":"2012-06-14 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"3825d7faf861af9ef490e726b5d65ad5","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"d6c7684e9aaa508cf268335f83afe040","SHA1":"18066d20ad92409c567cdfde745279ff71c75226","SHA256":"a612fb22ce8be6dab75e47c98508f98496583e79c9c97b936a8caee9ea9f3fff","SHA384":"35c249d6ad0261a6229b2a727067ac6ba32a5d24b30b9249051f748c7735fbe2ec2ef26a702c50df1790fbe32a65aee7"}},{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA","ValidFrom":"2003-12-04 00:00:00","ValidTo":"2013-12-03 23:59:59","Signature":"4a6bf9ea58c2441c318979992b96bf82ac01d61c4ccdb08a586edf0829a35ec8ca9313e704520def47272f0038b0e4c9934e9ad4226215f73f37214f703180f18b3887b3e8e89700fecf55964e24d2a9274e7aaeb76141f32acee7c9d95eddbb2b853eb59db5d9e157ffbeb4c57ef5cf0c9ef097fe2bd33b521b1b3827f73f4a","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"47bf1995df8d524643f7db6d480d31a4","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"518d2ea8a21e879c942d504824ac211c","SHA1":"21ce87d827077e61abddf2beba69fde5432ea031","SHA256":"1ec3b4f02e03930a470020e0e48d24b84678bb558f46182888d870541f5e25c7","SHA384":"53e346bbde23779a5d116cc9d86fdd71c97b1f1b343439f8a11aa1d3c87af63864bb8488a5aeb2d0c26a6a1e0b15f03f"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)04, CN=VeriSign Class 3 Code Signing 2004 CA","ValidFrom":"2004-07-16 00:00:00","ValidTo":"2014-07-15 23:59:59","Signature":"ae3a17b84a7b55fa6455ec40a4ed494190999c89bcaf2e1dca7823f91c190f7feb68bc32d98838dedc3fd389b43fb18296f1a45abaed2e26d3de7c016e000a00a4069211480940f91c1879672324e0bbd5e150ae1bf50edde02e81cd80a36c524f9175558aba22f2d2ea4175882f63557d1e545a9559cad93481c05f5ef67ab5","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"4191a15a3978dfcf496566381d4c75c2","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"41011f8d0e7c7a6408334ca387914c61","SHA1":"c7fc1727f5b75a6421a1f95c73bbdb23580c48e5","SHA256":"88dd3952638ee82738c03168e6fd863fe4eab1059ee5e2926ad8cb587c255dc0","SHA384":"a00aa5ed457c41e37967882644d63366bae014f03a986576d8514164d7027acf7d0b5e03d764db2558f60db148954459"}},{"Subject":"C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority","ValidFrom":"2006-05-23 17:01:29","ValidTo":"2016-05-23 17:11:29","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"610c120600000000001b","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"53c41bc1164e09e0cd1617a5bf913efd","SHA1":"93c03aac8951d494ecd5696b1c08658541b18727","SHA256":"40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b","SHA384":"f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"}},{"Subject":"C=CN, ST=Sichuan, L=Chengdu, O=Chengdu Ceshi Technology Co., Ltd., OU=Digital ID Class 3 , Microsoft Software Validation v2, CN=Chengdu Ceshi Technology Co., Ltd.","ValidFrom":"2009-04-15 00:00:00","ValidTo":"2010-04-15 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"2b7f0f1afe0f348edec71b75a47165b8","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"051f7966823abbbf31c49631ca95b4c5","SHA1":"3b53e6177f766345accfa2ec3124a18e0a025e17","SHA256":"b4e6bd3ca86f6af669589e3f15b86387655214e7d7312835ffd23a6618cee060","SHA384":"f86eada997b14af71058b08a8d7a3699cd2bb7e59a88faa104694fddd0ccd31ac01ad6fa633b19b69b730b2bc360af46"}}],"Signer":[{"SerialNumber":"2b7f0f1afe0f348edec71b75a47165b8","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)04, CN=VeriSign Class 3 Code Signing 2004 CA","Version":1}]}],"LoadsDespiteHVCI":"FALSE"},{"Company":"ludashi.com","Date":"","Description":"Ludashi System Driver","FileVersion":"1.6.15.1040","Filename":"","MD5":"b3f132ce34207b7be899f4978276b66d","MachineType":"AMD64","OriginalFilename":"ComputerZ.Sys","Product":"鲁大师","ProductVersion":"1.6.15.1040","Publisher":"","SHA1":"64ab599d34c26f53afe076a84c54db7ba1a53def","SHA256":"c6a5663f20e5cee2c92dee43a0f2868fb0af299f842410f4473dcde7abcb6413","Signature":"","Imphash":"8605f70bcc472025c2e78082388ed00b","Authentihash":{"MD5":"7d373fafa023e5b902445344dd3d77a7","SHA1":"cd7bada894ae8d5f33743aae9dbd8bfe9a2a174c","SHA256":"72805e13777a39b440ef381720c0491e6091f9cb6c7b387be33ca5491fcfbfbd"},"RichPEHeaderHash":{"MD5":"826de2c3aea31053da9da897889f3348","SHA1":"a1633512b0e89a25159b9307359ddf6e5f2f7bed","SHA256":"9ddf0cd70876bc913f0f2cd63a8089e05955a0285f0b909b89d6fe840c7d580d"},"Sections":{".text":{"Entropy":6.310750560250082,"Virtual Size":"0x35ce"},".rdata":{"Entropy":4.686623509854251,"Virtual Size":"0x39c"},".data":{"Entropy":0.3458408061738237,"Virtual Size":"0x1b4"},".pdata":{"Entropy":4.151701495382954,"Virtual Size":"0x1e0"},"INIT":{"Entropy":5.142822127329028,"Virtual Size":"0x4d0"},".rsrc":{"Entropy":3.5686810464191256,"Virtual Size":"0x488"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2015-08-24 00:29:24","InternalName":"ComputerZ.Sys","Copyright":"版权所有 (C) 2010-2015 www.ludashi.com","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["IofCompleteRequest","IoCreateSymbolicLink","IoCreateDevice","ExAllocatePoolWithTag","ExFreePoolWithTag","IoGetDeviceAttachmentBaseRef","PsGetVersion","RtlCompareUnicodeString","ObfDereferenceObject","IoGetDeviceProperty","RtlAnsiStringToUnicodeString","RtlInitAnsiString","RtlFreeUnicodeString","IoDeleteDevice","MmIsAddressValid","IoBuildDeviceIoControlRequest","KeInitializeEvent","KeWaitForSingleObject","IofCallDriver","MmUnmapIoSpace","MmMapIoSpace","SeTokenIsAdmin","SeReleaseSubjectContext","SeCaptureSubjectContext","KeSetTimer","KeInitializeTimerEx","KeBugCheckEx","RtlInitUnicodeString","IoGetDeviceObjectPointer","IoDeleteSymbolicLink","__C_specific_handler","HalSetBusDataByOffset","HalGetBusDataByOffset"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Time Stamping Signer","ValidFrom":"2015-05-05 00:00:00","ValidTo":"2015-12-31 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"009feac811b0f16247a5fc20d80523ace6","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"b6aa9cf28bcfc9f07ec1069fb425ab61","SHA1":"ca7a166fcd53878ba5a38d4cac37c63513cfc1fa","SHA256":"711394fc49f8948a831f687d42ced6b18514f57786ecc6cdbc3c3eb72e568a40","SHA384":"ca01f9c9ed4e1ddff7126b7bbf618bc8132429886ca563f86655429e928739c621b9fdea6e04a623712cbb998c5c7d77"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. , For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority , G5","ValidFrom":"2006-11-08 00:00:00","ValidTo":"2021-11-07 23:59:59","Signature":"1302ddf8e88600f25af8f8200c59886207cecef74ef9bb59a198e5e138dd4ebc6618d3adeb18f20dc96d3e4a9420c33cbabd6554c6af44b310ad2c6b3eabd707b6b88163c5f95e2ee52a67cecd330c2ad7895603231fb3bee83a0859b4ec4535f78a5bff66cf50afc66d578d1978b7b9a2d157ea1f9a4bafbac98e127ec6bdff","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"250ce8e030612e9f2b89f7054d7cf8fd","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"918d9eb6a6cd36c531eceb926170a7e1","SHA1":"0ae95700d65e6f59715aa47048993ca7858e676a","SHA256":"47c46e6eaa3780eace3d0d891346cd373359d246b21a957219dbab4c8f37c166","SHA384":"e54017c93ba52f012cc15aeb3bcbce1e90a0006ff8dca231a24fc572926770f63213343f538003407bed3463fa9c4a85"}},{"Subject":"C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority","ValidFrom":"2006-05-23 17:01:29","ValidTo":"2016-05-23 17:11:29","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"610c120600000000001b","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"53c41bc1164e09e0cd1617a5bf913efd","SHA1":"93c03aac8951d494ecd5696b1c08658541b18727","SHA256":"40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b","SHA384":"f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"}},{"Subject":"C=CN, ST=Beijing, L=Beijing, O=Qihoo 360 Software (Beijing) Company Limited, OU=Digital ID Class 3 , Microsoft Software Validation v2, OU=Tech. Dev. Dept., CN=Qihoo 360 Software (Beijing) Company Limited","ValidFrom":"2013-03-11 00:00:00","ValidTo":"2016-03-10 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"51bd5d8e45b82a0210f17fe4c5233468","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"ad73c81b3174cc055d9718b2145a3d1f","SHA1":"0cb9e92828857976774a9fe96c016cdc67a25e6d","SHA256":"2c5d88401dfeec2ebf814e09d0d0faec9d109a503d427da4a7f3e0dec5ae0b6c","SHA384":"48c38329eb7f200be0d48acddabdb93c354dd1b8b3c3ce955a23638a4e2e32dd7d0f3a4f227a2b6382adc95e746cc411"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","ValidFrom":"2010-02-08 00:00:00","ValidTo":"2020-02-07 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"5200e5aa2556fc1a86ed96c9d44b33c7","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"b30c31a572b0409383ed3fbe17e56e81","SHA1":"4843a82ed3b1f2bfbee9671960e1940c942f688d","SHA256":"03cda47a6e654ed85d932714fc09ce4874600eda29ec6628cfbaeb155cab78c9","SHA384":"bbda8407c4f9fc4e54d772f1c7fb9d30bc97e1f97ecd51c443063d1fa0644e266328781776cd5c44896c457c75f4d7da"}}],"Signer":[{"SerialNumber":"51bd5d8e45b82a0210f17fe4c5233468","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","Version":1}]}],"LoadsDespiteHVCI":"FALSE"},{"Company":"鲁大师","Date":"","Description":"Ludashi System Driver","FileVersion":"1.3.10.1110","Filename":"","MD5":"ce952204558ea66ec1a9632dcbdde8bd","MachineType":"I386","OriginalFilename":"ComputerZ.Sys","Product":"Ludashi System Driver","ProductVersion":"1.3.10.1110","Publisher":"","SHA1":"c01caaa74439af49ca81cb5b200a167e7d32343c","SHA256":"d474ea066d416ded9ed8501c285ca6b1c26a1d1c813c8f6bd5523eeb66c5d01e","Signature":"","Imphash":"acdf419d1d03923be256205b9c33eec8","Authentihash":{"MD5":"0c383d55d6fa8e2617b6576fc6c26f83","SHA1":"bbf5d261f70a96bfed808c1525c91ca82680c4fa","SHA256":"0bfed811a8ae3fa634372f74f0d70de1e0183612e91f56ae034486571b55b88b"},"RichPEHeaderHash":{"MD5":"19962c683a9e4a8752954532c9445e48","SHA1":"7adf0d8b3f45c5eb88ec426db75afc14f37c8126","SHA256":"6dbfa0e86b36df26a770b0989b94ec7e5c3708697e0ff505b24e0714efec53ee"},"Sections":{".text":{"Entropy":6.3467107013847945,"Virtual Size":"0x11be"},".rdata":{"Entropy":4.061093791616953,"Virtual Size":"0x184"},".data":{"Entropy":3,"Virtual Size":"0x8"},"INIT":{"Entropy":5.341650162403427,"Virtual Size":"0x30c"},".rsrc":{"Entropy":3.450819425338008,"Virtual Size":"0x3e8"},".reloc":{"Entropy":4.180737038875145,"Virtual Size":"0xf8"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2010-11-23 05:33:00","InternalName":"ComputerZ.Sys","Copyright":"Copyright (C) 2008-2010 www.ludashi.com","Imports":["ntoskrnl.exe"],"ExportedFunctions":"","ImportedFunctions":["IoDeleteDevice","IoDeleteSymbolicLink","RtlInitUnicodeString","MmUnmapIoSpace","MmMapIoSpace","READ_REGISTER_BUFFER_ULONG","WRITE_REGISTER_ULONG","WRITE_REGISTER_UCHAR","IofCompleteRequest","IoCreateSymbolicLink","IoCreateDevice","ObfDereferenceObject","MmIsAddressValid","RtlFreeUnicodeString","IoGetDeviceObjectPointer","RtlAnsiStringToUnicodeString","RtlInitAnsiString","PsGetVersion","memset","KeWaitForSingleObject","IofCallDriver","IoBuildDeviceIoControlRequest","KeInitializeEvent","KeTickCount","KeBugCheckEx","RtlUnwind"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer , G2","ValidFrom":"2007-06-15 00:00:00","ValidTo":"2012-06-14 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"3825d7faf861af9ef490e726b5d65ad5","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"d6c7684e9aaa508cf268335f83afe040","SHA1":"18066d20ad92409c567cdfde745279ff71c75226","SHA256":"a612fb22ce8be6dab75e47c98508f98496583e79c9c97b936a8caee9ea9f3fff","SHA384":"35c249d6ad0261a6229b2a727067ac6ba32a5d24b30b9249051f748c7735fbe2ec2ef26a702c50df1790fbe32a65aee7"}},{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA","ValidFrom":"2003-12-04 00:00:00","ValidTo":"2013-12-03 23:59:59","Signature":"4a6bf9ea58c2441c318979992b96bf82ac01d61c4ccdb08a586edf0829a35ec8ca9313e704520def47272f0038b0e4c9934e9ad4226215f73f37214f703180f18b3887b3e8e89700fecf55964e24d2a9274e7aaeb76141f32acee7c9d95eddbb2b853eb59db5d9e157ffbeb4c57ef5cf0c9ef097fe2bd33b521b1b3827f73f4a","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"47bf1995df8d524643f7db6d480d31a4","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"518d2ea8a21e879c942d504824ac211c","SHA1":"21ce87d827077e61abddf2beba69fde5432ea031","SHA256":"1ec3b4f02e03930a470020e0e48d24b84678bb558f46182888d870541f5e25c7","SHA384":"53e346bbde23779a5d116cc9d86fdd71c97b1f1b343439f8a11aa1d3c87af63864bb8488a5aeb2d0c26a6a1e0b15f03f"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009,2 CA","ValidFrom":"2009-05-21 00:00:00","ValidTo":"2019-05-20 23:59:59","Signature":"8b03c0dd94d841a26169b015a878c730c6903c7e42f724b6e4837317047f04109ca1e2fa812febc0ca44e772e050b6551020836e9692e49a516ab43731dca52deb8c00c71d4fe74d32ba85f84ebefa675565f06abe7aca64381a101078457631f3867a030f60c2b35d9df68b6676821b59e183e5bd49a53856e5de41770e580f","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"655226e1b22e18e1590f2985ac22e75c","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"650704c342850095f3288eaf791147d4","SHA1":"4cdc38c800761463749c3cbd94a12f32e49877bf","SHA256":"07b8f662558ec85b71b43a79c6e94698144f4ced2308af21e7ba1e5d461da214","SHA384":"2a271d052213438467d09d60eaa4010c8642fff3eb0070e0cf9969428713c8fdc066b90996d594dd3136f5bd0af5a22a"}},{"Subject":"C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority","ValidFrom":"2006-05-23 17:01:29","ValidTo":"2016-05-23 17:11:29","Signature":"01e446b33b457f7513877e5f43de468ecb8abdb64741bccccc7491d8ce395195a4a6b547c0efd2da7b8f5711f4328c7ccd3fee42da04214af7c843884a6f5cca14fc4bd19f4cbdd4556ecc02be0da6888f8609baa425bde8b0f0fa8b714e67b0cb82a8d78e55f737ebf03e88efe4e08afd1c6e2e61414875b4b02c1d28d8490fd715f02473253ccc880cde284c6554fe5eae8cea19ad2c51b29b3a47f53c80350117e24987d6544afb4bab07bcbf7d79cfbf35005cbb9ecffc82891b39a05197b6dec0b307ff449644c0342a195cabeef03bec294eb513c537857e75d5b4d60d066eb5d26c237167eaf1718eaf4e74aa0cf9ecbf4c58fa5e909b6d39cb86883f8b1ca81632d5fe6db9f1f8b3ead791f6364778c0272a15c768d6f4c5fc4f4ec8673f102d409ff11ec96148e7a703fc31730cf04688fe56da492995ef09daa3e5beef60ecd954a0599c28bd54ef66157f874c84dba60e95672e517b3439b641c28c846826dc240209e7818e0a972defeea7b998a60f818dc710b5e1ed982f486f53854964789bec5dac970b5526c3efba8dc8d1a52f5a7f936b611a339b18b8a26210de24ea76e12f43ebecdd7c12342489da2855aee5754e312b6763b6a8d7ab730a03cec5ea593fc7eb2a45aea8625b2f009939abb45f73c308ec80118f470e8f2a1343e191066255bbffba3da9a93d260faeca7d628b155589d694344dd665","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"610c120600000000001b","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"53c41bc1164e09e0cd1617a5bf913efd","SHA1":"93c03aac8951d494ecd5696b1c08658541b18727","SHA256":"40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b","SHA384":"f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"}},{"Subject":"C=CN, ST=Sichuan, L=Chengdu, O=Chengdu Qiying Technology Co.,Ltd., OU=Digital ID Class 3 , Microsoft Software Validation v2, CN=Chengdu Qiying Technology Co.,Ltd.","ValidFrom":"2010-03-31 00:00:00","ValidTo":"2011-03-31 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"61359ac44514d781769fd643666b4572","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"416fc5d0038211bf34811efeff6d562f","SHA1":"e0acbd39e2fa410a22c96e2a3eaea4342a626f40","SHA256":"843e587edb9c53b2fbbf84cd90b217af016da1330905b25c16bb059a26b5726e","SHA384":"1a1167bbac2b00e60c10a4c1dc1d0f5105c42582b1a39e05a1d60710d97a24c6ff76fe73700f0fb0e1e03f27aebb7697"}}],"Signer":[{"SerialNumber":"61359ac44514d781769fd643666b4572","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009,2 CA","Version":1}]}],"LoadsDespiteHVCI":"FALSE"},{"Company":"鲁大师","Date":"","Description":"Ludashi System Driver","FileVersion":"1.3.10.1110","Filename":"","MD5":"bdfe1f0346c066971e1f3d96f7fdaa2c","MachineType":"I386","OriginalFilename":"ComputerZ.Sys","Product":"Ludashi System Driver","ProductVersion":"1.3.10.1110","Publisher":"","SHA1":"d06d119579156b1ec732c50f0f64358762eb631a","SHA256":"d6801e845d380c809d0da8c7a5d3cd2faa382875ae72f5f7af667a34df25fbf7","Signature":"","Imphash":"acdf419d1d03923be256205b9c33eec8","Authentihash":{"MD5":"7e3a7e0aa2a05e6977102c6eabd8fef4","SHA1":"73f7e600c871a9ff1ad6854a0f4c183233c34e6a","SHA256":"b4341b5814bf1b0291739f00c359f9dc1e3b8a66dede099086f9760f7f4e0885"},"RichPEHeaderHash":{"MD5":"19962c683a9e4a8752954532c9445e48","SHA1":"7adf0d8b3f45c5eb88ec426db75afc14f37c8126","SHA256":"6dbfa0e86b36df26a770b0989b94ec7e5c3708697e0ff505b24e0714efec53ee"},"Sections":{".text":{"Entropy":6.364745855647945,"Virtual Size":"0x11ee"},".rdata":{"Entropy":4.089644233624162,"Virtual Size":"0x184"},".data":{"Entropy":3,"Virtual Size":"0x8"},"INIT":{"Entropy":5.341650162403427,"Virtual Size":"0x30c"},".rsrc":{"Entropy":3.450819425338008,"Virtual Size":"0x3e8"},".reloc":{"Entropy":4.2069468941720505,"Virtual Size":"0xf8"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2010-11-10 03:33:15","InternalName":"ComputerZ.Sys","Copyright":"Copyright (C) 2008-2010 www.ludashi.com","Imports":["ntoskrnl.exe"],"ExportedFunctions":"","ImportedFunctions":["IoDeleteDevice","IoDeleteSymbolicLink","RtlInitUnicodeString","MmUnmapIoSpace","MmMapIoSpace","READ_REGISTER_BUFFER_ULONG","WRITE_REGISTER_ULONG","WRITE_REGISTER_UCHAR","IofCompleteRequest","IoCreateSymbolicLink","IoCreateDevice","ObfDereferenceObject","MmIsAddressValid","RtlFreeUnicodeString","IoGetDeviceObjectPointer","RtlAnsiStringToUnicodeString","RtlInitAnsiString","PsGetVersion","memset","KeWaitForSingleObject","IofCallDriver","IoBuildDeviceIoControlRequest","KeInitializeEvent","KeTickCount","KeBugCheckEx","RtlUnwind"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer , G2","ValidFrom":"2007-06-15 00:00:00","ValidTo":"2012-06-14 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"3825d7faf861af9ef490e726b5d65ad5","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"d6c7684e9aaa508cf268335f83afe040","SHA1":"18066d20ad92409c567cdfde745279ff71c75226","SHA256":"a612fb22ce8be6dab75e47c98508f98496583e79c9c97b936a8caee9ea9f3fff","SHA384":"35c249d6ad0261a6229b2a727067ac6ba32a5d24b30b9249051f748c7735fbe2ec2ef26a702c50df1790fbe32a65aee7"}},{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA","ValidFrom":"2003-12-04 00:00:00","ValidTo":"2013-12-03 23:59:59","Signature":"4a6bf9ea58c2441c318979992b96bf82ac01d61c4ccdb08a586edf0829a35ec8ca9313e704520def47272f0038b0e4c9934e9ad4226215f73f37214f703180f18b3887b3e8e89700fecf55964e24d2a9274e7aaeb76141f32acee7c9d95eddbb2b853eb59db5d9e157ffbeb4c57ef5cf0c9ef097fe2bd33b521b1b3827f73f4a","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"47bf1995df8d524643f7db6d480d31a4","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"518d2ea8a21e879c942d504824ac211c","SHA1":"21ce87d827077e61abddf2beba69fde5432ea031","SHA256":"1ec3b4f02e03930a470020e0e48d24b84678bb558f46182888d870541f5e25c7","SHA384":"53e346bbde23779a5d116cc9d86fdd71c97b1f1b343439f8a11aa1d3c87af63864bb8488a5aeb2d0c26a6a1e0b15f03f"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009,2 CA","ValidFrom":"2009-05-21 00:00:00","ValidTo":"2019-05-20 23:59:59","Signature":"8b03c0dd94d841a26169b015a878c730c6903c7e42f724b6e4837317047f04109ca1e2fa812febc0ca44e772e050b6551020836e9692e49a516ab43731dca52deb8c00c71d4fe74d32ba85f84ebefa675565f06abe7aca64381a101078457631f3867a030f60c2b35d9df68b6676821b59e183e5bd49a53856e5de41770e580f","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"655226e1b22e18e1590f2985ac22e75c","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"650704c342850095f3288eaf791147d4","SHA1":"4cdc38c800761463749c3cbd94a12f32e49877bf","SHA256":"07b8f662558ec85b71b43a79c6e94698144f4ced2308af21e7ba1e5d461da214","SHA384":"2a271d052213438467d09d60eaa4010c8642fff3eb0070e0cf9969428713c8fdc066b90996d594dd3136f5bd0af5a22a"}},{"Subject":"C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority","ValidFrom":"2006-05-23 17:01:29","ValidTo":"2016-05-23 17:11:29","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"610c120600000000001b","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"53c41bc1164e09e0cd1617a5bf913efd","SHA1":"93c03aac8951d494ecd5696b1c08658541b18727","SHA256":"40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b","SHA384":"f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"}},{"Subject":"C=CN, ST=Sichuan, L=Chengdu, O=Chengdu Qiying Technology Co.,Ltd., OU=Digital ID Class 3 , Microsoft Software Validation v2, CN=Chengdu Qiying Technology Co.,Ltd.","ValidFrom":"2010-03-31 00:00:00","ValidTo":"2011-03-31 23:59:59","Signature":"1faadccc76ce27891191f3b98a4feaac1220aa61f9a07540f1de38346f466d20bb5ecda07db57aaffc5b472a5d47f928fb717b5d407aff12311fe9cac2daa7fca057a85d34058cf2c02ae2c5168e7f99c7d065b9cd2ac1beda4c9d7fdf0caf7030b821b71bae2a0d17ccbc829b469407cddec7a1fbf93d8c0364b79231b978b227ea09dc6be8d83da1b430c6a1945254bdc987341ac9bccc93c74eb006e9960a38e74815a549617678b00857098adbac42783d88babc75de8e1569fe05b4c74a79e2e423e296b4f1585db891a257dd4b82167cbc8efcd6ae322c0d778036a8fd4b549e736ba03dff6c3a8835b9279fab3639b610554c87bfa6630d8b7a07e6c3","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"61359ac44514d781769fd643666b4572","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"416fc5d0038211bf34811efeff6d562f","SHA1":"e0acbd39e2fa410a22c96e2a3eaea4342a626f40","SHA256":"843e587edb9c53b2fbbf84cd90b217af016da1330905b25c16bb059a26b5726e","SHA384":"1a1167bbac2b00e60c10a4c1dc1d0f5105c42582b1a39e05a1d60710d97a24c6ff76fe73700f0fb0e1e03f27aebb7697"}}],"Signer":[{"SerialNumber":"61359ac44514d781769fd643666b4572","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009,2 CA","Version":1}]}],"LoadsDespiteHVCI":"FALSE"},{"Company":"360.cn","Date":"","Description":"Ludashi System Driver","FileVersion":"1.6.14.1024","Filename":"","MD5":"0e2fc7e7f85c980eb698b9e468c20366","MachineType":"I386","OriginalFilename":"ComputerZ.Sys","Product":"鲁大师","ProductVersion":"1.6.14.1024","Publisher":"","SHA1":"8e64c32bcfd70361956674f45964a8b0c8aa6388","SHA256":"d9a73df5ac5c68ef5b37a67e5e649332da0f649c3bb6828f70b65c0a2e7d3a23","Signature":"","Imphash":"6e7cd05c0da9f82449a8b3795418ee00","Authentihash":{"MD5":"8b71320c51bc83ac75e151f50945e118","SHA1":"560de162671236fd597968e7dddb41fc6a8c4f58","SHA256":"a9b98a8234d3e560feef5ec88f35960f631d111351d7085c011e055dfec7d3ce"},"RichPEHeaderHash":{"MD5":"d1a79229c378e2371e92e26510f9d7dc","SHA1":"59d47b012da8415f780a06d0204294a48affa1ab","SHA256":"cc6c4013bb762de8a20b4e2f725a9388fab9c386c3e86a5e30c1cc4429c6a525"},"Sections":{".text":{"Entropy":6.333106844428541,"Virtual Size":"0x2f10"},".rdata":{"Entropy":4.036294101880538,"Virtual Size":"0x1a4"},".data":{"Entropy":0.6683247346784849,"Virtual Size":"0x98"},"INIT":{"Entropy":5.463535624918923,"Virtual Size":"0x4a0"},".rsrc":{"Entropy":3.5356852207889973,"Virtual Size":"0x480"},".reloc":{"Entropy":5.769235644091667,"Virtual Size":"0x266"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2014-12-08 05:37:05","InternalName":"ComputerZ.Sys","Copyright":"版权所有 (C) 2010-2014 www.ludashi.com","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["IofCompleteRequest","IoCreateSymbolicLink","IoCreateDevice","ExFreePoolWithTag","ExAllocatePoolWithTag","IoGetDeviceProperty","RtlCompareUnicodeString","ObfDereferenceObject","IoGetDeviceAttachmentBaseRef","PsGetVersion","MmIsAddressValid","RtlFreeUnicodeString","IoGetDeviceObjectPointer","RtlAnsiStringToUnicodeString","RtlInitAnsiString","KeWaitForSingleObject","IofCallDriver","RtlInitUnicodeString","KeInitializeEvent","MmUnmapIoSpace","READ_REGISTER_BUFFER_UCHAR","MmMapIoSpace","READ_REGISTER_BUFFER_ULONG","WRITE_REGISTER_ULONG","WRITE_REGISTER_UCHAR","KeSetTimer","KeInitializeTimerEx","_allmul","SeReleaseSubjectContext","SeTokenIsAdmin","SeCaptureSubjectContext","KeTickCount","KeBugCheckEx","RtlUnwind","IoDeleteSymbolicLink","IoBuildDeviceIoControlRequest","IoDeleteDevice","HalGetBusDataByOffset","HalSetBusDataByOffset"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Time Stamping Signer","ValidFrom":"2010-05-10 00:00:00","ValidTo":"2015-05-10 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"478a8efb59e1d83f0ce142d2a28707be","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"f13ede9179075999ef7f856ec31e364b","SHA1":"2f09867166e6107e17808317f5c8d4ee157f45bc","SHA256":"089a2c4c6ac7432020acdb65c33bf39130da6f37c002ba79128bd4c94e4fa101","SHA384":"67be6d358f4ecd0726163603a404db9d78c340951d43fd608482cd89a2de7f9566f0ce45f8222f420003157cb266b939"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. , For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority , G5","ValidFrom":"2006-11-08 00:00:00","ValidTo":"2021-11-07 23:59:59","Signature":"1302ddf8e88600f25af8f8200c59886207cecef74ef9bb59a198e5e138dd4ebc6618d3adeb18f20dc96d3e4a9420c33cbabd6554c6af44b310ad2c6b3eabd707b6b88163c5f95e2ee52a67cecd330c2ad7895603231fb3bee83a0859b4ec4535f78a5bff66cf50afc66d578d1978b7b9a2d157ea1f9a4bafbac98e127ec6bdff","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"250ce8e030612e9f2b89f7054d7cf8fd","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"918d9eb6a6cd36c531eceb926170a7e1","SHA1":"0ae95700d65e6f59715aa47048993ca7858e676a","SHA256":"47c46e6eaa3780eace3d0d891346cd373359d246b21a957219dbab4c8f37c166","SHA384":"e54017c93ba52f012cc15aeb3bcbce1e90a0006ff8dca231a24fc572926770f63213343f538003407bed3463fa9c4a85"}},{"Subject":"C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority","ValidFrom":"2006-05-23 17:01:29","ValidTo":"2016-05-23 17:11:29","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"610c120600000000001b","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"53c41bc1164e09e0cd1617a5bf913efd","SHA1":"93c03aac8951d494ecd5696b1c08658541b18727","SHA256":"40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b","SHA384":"f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"}},{"Subject":"C=CN, ST=Beijing, L=Beijing, O=Qihoo 360 Software (Beijing) Company Limited, OU=Digital ID Class 3 , Microsoft Software Validation v2, OU=Tech. Dev. Dept., CN=Qihoo 360 Software (Beijing) Company Limited","ValidFrom":"2013-03-11 00:00:00","ValidTo":"2016-03-10 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"51bd5d8e45b82a0210f17fe4c5233468","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"ad73c81b3174cc055d9718b2145a3d1f","SHA1":"0cb9e92828857976774a9fe96c016cdc67a25e6d","SHA256":"2c5d88401dfeec2ebf814e09d0d0faec9d109a503d427da4a7f3e0dec5ae0b6c","SHA384":"48c38329eb7f200be0d48acddabdb93c354dd1b8b3c3ce955a23638a4e2e32dd7d0f3a4f227a2b6382adc95e746cc411"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","ValidFrom":"2010-02-08 00:00:00","ValidTo":"2020-02-07 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"5200e5aa2556fc1a86ed96c9d44b33c7","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"b30c31a572b0409383ed3fbe17e56e81","SHA1":"4843a82ed3b1f2bfbee9671960e1940c942f688d","SHA256":"03cda47a6e654ed85d932714fc09ce4874600eda29ec6628cfbaeb155cab78c9","SHA384":"bbda8407c4f9fc4e54d772f1c7fb9d30bc97e1f97ecd51c443063d1fa0644e266328781776cd5c44896c457c75f4d7da"}}],"Signer":[{"SerialNumber":"51bd5d8e45b82a0210f17fe4c5233468","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","Version":1}]}],"LoadsDespiteHVCI":"FALSE"},{"Company":"鲁大师","Date":"","Description":"Ludashi System Driver","FileVersion":"1.3.9.1105","Filename":"","MD5":"88aada8325a3659736b3a7201c825664","MachineType":"AMD64","OriginalFilename":"ComputerZ.Sys","Product":"Ludashi System Driver","ProductVersion":"1.3.9.1105","Publisher":"","SHA1":"8ab7e9ba3c26bcd5d6d0646c6d2b2693e22aac1c","SHA256":"dda2a604bb94a274e23f0005f0aa330d45ca1ea25111746fb46fa5ef6d155b1d","Signature":"","Imphash":"27db67ffa112f866f1d34c32226e09cf","Authentihash":{"MD5":"a25d690f609d1b0e5dd2da02616e0a2b","SHA1":"0c668a995df9692dec2d59ef26753f29acd5e297","SHA256":"6b2f669c6fb1e839ba146b416021ddfb7bf4785558113e11ac2c8a0e3399f338"},"RichPEHeaderHash":{"MD5":"7b1c99c236873465ebf3f83c0b906e75","SHA1":"4857d06778ad9056d809af1172ea476881ed3799","SHA256":"a55fa087c5e3bf1ee84222bc5dfa802c66154991b986544a7be7590292868c09"},"Sections":{".text":{"Entropy":6.202454741665463,"Virtual Size":"0xf64"},".rdata":{"Entropy":4.238026200350393,"Virtual Size":"0x1d4"},".data":{"Entropy":0.5159719988134768,"Virtual Size":"0x110"},".pdata":{"Entropy":3.419443099002428,"Virtual Size":"0x84"},"INIT":{"Entropy":4.995083190050232,"Virtual Size":"0x31a"},".rsrc":{"Entropy":3.4645037781886088,"Virtual Size":"0x3e8"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2009-11-05 01:13:28","InternalName":"ComputerZ.Sys","Copyright":"Copyright (C) 2008-2009 www.ludashi.com","Imports":["ntoskrnl.exe"],"ExportedFunctions":"","ImportedFunctions":["IoDeleteSymbolicLink","RtlInitUnicodeString","IoDeleteDevice","MmUnmapIoSpace","MmMapIoSpace","IofCompleteRequest","IoCreateSymbolicLink","IoCreateDevice","IoBuildDeviceIoControlRequest","RtlAnsiStringToUnicodeString","KeInitializeEvent","RtlInitAnsiString","RtlFreeUnicodeString","IoGetDeviceObjectPointer","KeWaitForSingleObject","PsGetVersion","MmIsAddressValid","ObfDereferenceObject","IofCallDriver","KeBugCheckEx","__C_specific_handler"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer , G2","ValidFrom":"2007-06-15 00:00:00","ValidTo":"2012-06-14 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"3825d7faf861af9ef490e726b5d65ad5","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"d6c7684e9aaa508cf268335f83afe040","SHA1":"18066d20ad92409c567cdfde745279ff71c75226","SHA256":"a612fb22ce8be6dab75e47c98508f98496583e79c9c97b936a8caee9ea9f3fff","SHA384":"35c249d6ad0261a6229b2a727067ac6ba32a5d24b30b9249051f748c7735fbe2ec2ef26a702c50df1790fbe32a65aee7"}},{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA","ValidFrom":"2003-12-04 00:00:00","ValidTo":"2013-12-03 23:59:59","Signature":"4a6bf9ea58c2441c318979992b96bf82ac01d61c4ccdb08a586edf0829a35ec8ca9313e704520def47272f0038b0e4c9934e9ad4226215f73f37214f703180f18b3887b3e8e89700fecf55964e24d2a9274e7aaeb76141f32acee7c9d95eddbb2b853eb59db5d9e157ffbeb4c57ef5cf0c9ef097fe2bd33b521b1b3827f73f4a","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"47bf1995df8d524643f7db6d480d31a4","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"518d2ea8a21e879c942d504824ac211c","SHA1":"21ce87d827077e61abddf2beba69fde5432ea031","SHA256":"1ec3b4f02e03930a470020e0e48d24b84678bb558f46182888d870541f5e25c7","SHA384":"53e346bbde23779a5d116cc9d86fdd71c97b1f1b343439f8a11aa1d3c87af63864bb8488a5aeb2d0c26a6a1e0b15f03f"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)04, CN=VeriSign Class 3 Code Signing 2004 CA","ValidFrom":"2004-07-16 00:00:00","ValidTo":"2014-07-15 23:59:59","Signature":"ae3a17b84a7b55fa6455ec40a4ed494190999c89bcaf2e1dca7823f91c190f7feb68bc32d98838dedc3fd389b43fb18296f1a45abaed2e26d3de7c016e000a00a4069211480940f91c1879672324e0bbd5e150ae1bf50edde02e81cd80a36c524f9175558aba22f2d2ea4175882f63557d1e545a9559cad93481c05f5ef67ab5","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"4191a15a3978dfcf496566381d4c75c2","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"41011f8d0e7c7a6408334ca387914c61","SHA1":"c7fc1727f5b75a6421a1f95c73bbdb23580c48e5","SHA256":"88dd3952638ee82738c03168e6fd863fe4eab1059ee5e2926ad8cb587c255dc0","SHA384":"a00aa5ed457c41e37967882644d63366bae014f03a986576d8514164d7027acf7d0b5e03d764db2558f60db148954459"}},{"Subject":"C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority","ValidFrom":"2006-05-23 17:01:29","ValidTo":"2016-05-23 17:11:29","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"610c120600000000001b","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"53c41bc1164e09e0cd1617a5bf913efd","SHA1":"93c03aac8951d494ecd5696b1c08658541b18727","SHA256":"40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b","SHA384":"f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"}},{"Subject":"C=CN, ST=Sichuan, L=Chengdu, O=Chengdu Ceshi Technology Co., Ltd., OU=Digital ID Class 3 , Microsoft Software Validation v2, CN=Chengdu Ceshi Technology Co., Ltd.","ValidFrom":"2009-04-15 00:00:00","ValidTo":"2010-04-15 23:59:59","Signature":"549eec17f9cd3716a7cc614eea198f2b8d9edba364f12ab4125f12eb4cac123dcce01a74d1ce495e315634056aed2da25796b5d76d087c574f1c167b2173ae89fd2f4422570d34fe9d190cd180540b3740315368b662331b6bd21801d6ea7799fad9e98ae700043fc390c7d80d5380ec9c8be85c61af32f9e68b3b8a7bddcf92838656239378c10dbeb53d4a24717aa5bb88fa27029fdfea789cb9aaa2c4085caaf6e31f1c9b346c9fd6d88202494e10966a806c4b56127c41da7a57704cff33b4b104ce07efcbf2e72abee09654b2fc9b862439bb6dac6551acda2c8b0a8ad6b40f33912eb2964be9668a08c6b8121b2b96f619e5b6bbaf1d033d3fb80403b6","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"2b7f0f1afe0f348edec71b75a47165b8","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"051f7966823abbbf31c49631ca95b4c5","SHA1":"3b53e6177f766345accfa2ec3124a18e0a025e17","SHA256":"b4e6bd3ca86f6af669589e3f15b86387655214e7d7312835ffd23a6618cee060","SHA384":"f86eada997b14af71058b08a8d7a3699cd2bb7e59a88faa104694fddd0ccd31ac01ad6fa633b19b69b730b2bc360af46"}}],"Signer":[{"SerialNumber":"2b7f0f1afe0f348edec71b75a47165b8","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)04, CN=VeriSign Class 3 Code Signing 2004 CA","Version":1}]}],"LoadsDespiteHVCI":"FALSE"},{"Company":"360.cn","Date":"","Description":"Ludashi System Driver","FileVersion":"1.6.12.302","Filename":"","MD5":"6e1faeee0ebfcb384208772410fe1e86","MachineType":"I386","OriginalFilename":"ComputerZ.Sys","Product":"360硬件大师","ProductVersion":"1.6.12.302","Publisher":"","SHA1":"a55b709cec2288384b12eafa8be4930e7c075ec9","SHA256":"dee384604d2d0018473941acbefe553711ded7344a4932daeffb876fe2fa0233","Signature":"","Imphash":"f9b9487f25a2c1e08c02f391387c5323","Authentihash":{"MD5":"229ae045b7af8ec1e5e1352c9064f6b0","SHA1":"d336748cf32abb5b1ff6ee2a7ffc8435e77a232f","SHA256":"7436cb59411572a6194bfffad9f9e5194107da417457d4e20a6ef1d58491e3c9"},"RichPEHeaderHash":{"MD5":"9c097c5f0dbfddee14b43b091fd5d78d","SHA1":"67b637975685265ef26bda5b8bae555ba81a7f0c","SHA256":"95b228876243446bbf5a24243dccd159e39c09cd4001f7d385c5234f79be7b53"},"Sections":{".text":{"Entropy":6.3440095192973835,"Virtual Size":"0x2680"},".rdata":{"Entropy":4.065343603093077,"Virtual Size":"0x194"},".data":{"Entropy":1.1225846798245738,"Virtual Size":"0x50"},"INIT":{"Entropy":5.474429971377343,"Virtual Size":"0x448"},".rsrc":{"Entropy":3.5064826808358283,"Virtual Size":"0x3b0"},".reloc":{"Entropy":5.288228242708726,"Virtual Size":"0x1d8"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2012-03-02 02:49:05","InternalName":"ComputerZ.Sys","Copyright":"版权所有 (C) 2010-2012 360.cn","Imports":["ntoskrnl.exe"],"ExportedFunctions":"","ImportedFunctions":["IoDeleteDevice","IoDeleteSymbolicLink","RtlInitUnicodeString","IofCompleteRequest","IoCreateSymbolicLink","IoCreateDevice","ExFreePoolWithTag","ExAllocatePoolWithTag","IoGetDeviceProperty","RtlCompareUnicodeString","ObfDereferenceObject","IoGetDeviceAttachmentBaseRef","PsGetVersion","MmIsAddressValid","RtlFreeUnicodeString","IoGetDeviceObjectPointer","RtlAnsiStringToUnicodeString","RtlInitAnsiString","KeWaitForSingleObject","IofCallDriver","IoBuildDeviceIoControlRequest","KeInitializeEvent","MmUnmapIoSpace","READ_REGISTER_BUFFER_UCHAR","MmMapIoSpace","READ_REGISTER_BUFFER_ULONG","WRITE_REGISTER_ULONG","WRITE_REGISTER_UCHAR","KeSetTimer","KeInitializeTimerEx","_allmul","SeReleaseSubjectContext","SeTokenIsAdmin","SeCaptureSubjectContext","KeTickCount","KeBugCheckEx","RtlUnwind"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer , G2","ValidFrom":"2007-06-15 00:00:00","ValidTo":"2012-06-14 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"3825d7faf861af9ef490e726b5d65ad5","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"d6c7684e9aaa508cf268335f83afe040","SHA1":"18066d20ad92409c567cdfde745279ff71c75226","SHA256":"a612fb22ce8be6dab75e47c98508f98496583e79c9c97b936a8caee9ea9f3fff","SHA384":"35c249d6ad0261a6229b2a727067ac6ba32a5d24b30b9249051f748c7735fbe2ec2ef26a702c50df1790fbe32a65aee7"}},{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA","ValidFrom":"2003-12-04 00:00:00","ValidTo":"2013-12-03 23:59:59","Signature":"4a6bf9ea58c2441c318979992b96bf82ac01d61c4ccdb08a586edf0829a35ec8ca9313e704520def47272f0038b0e4c9934e9ad4226215f73f37214f703180f18b3887b3e8e89700fecf55964e24d2a9274e7aaeb76141f32acee7c9d95eddbb2b853eb59db5d9e157ffbeb4c57ef5cf0c9ef097fe2bd33b521b1b3827f73f4a","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"47bf1995df8d524643f7db6d480d31a4","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"518d2ea8a21e879c942d504824ac211c","SHA1":"21ce87d827077e61abddf2beba69fde5432ea031","SHA256":"1ec3b4f02e03930a470020e0e48d24b84678bb558f46182888d870541f5e25c7","SHA384":"53e346bbde23779a5d116cc9d86fdd71c97b1f1b343439f8a11aa1d3c87af63864bb8488a5aeb2d0c26a6a1e0b15f03f"}},{"Subject":"C=CN, ST=Beijing, L=Beijing, O=360.cn, OU=Digital ID Class 3 , Microsoft Software Validation v2, CN=360.cn","ValidFrom":"2010-03-16 00:00:00","ValidTo":"2013-03-15 23:59:59","Signature":"1d035b2e51207ee0aaa7a8618092198204b6614406a8f9057f4160de8e165777f5c7d7f1f3ba768043881dbabc4a1ffa7d3044d7f5ef0f2658173fce2a1735ba9034873c94c7865ec78160b9b00815e253a60a2eeea8b8f68cc144d47419046c97fdbf690ac7755e84230dfa0e8f4f1aaccf8f6589d9ad9f160988f4c8cc5a73c4241c74ea6770042ed7496fd6b7aa7ae64c3741aa3a1f004c75d2a9f25e0d1ac53e9dd13d2067c963a9eb089517a9d4b5a805f1d9c72c61efea0b898eaf9fb2c6e23e785c00e0b6f53e91ba0f343060ee50bdb7e41c17b25cc389e12022d1388b6af77d3031eb65febf236b795b500a49e1fe6ad9139ad09ababb9fcea00f3b","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"74f2958d31d03eb042f9081555305277","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"4f5c7d4f95e9d6a9749876f33ae138c4","SHA1":"3666bdaf7b0d6a9019d5111e2ffd0bf06587dd58","SHA256":"f5b44adb5d25d0e309ae2f5db3f1e2428ef0b7332f8afcc2086786485aa7c162","SHA384":"ae0b037429f9c36e2925d6be76b2535f8a66c6d81b07252c63ce74af493bb31d5d52c276de95cdc4c71ba56bdf7148e4"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009,2 CA","ValidFrom":"2009-05-21 00:00:00","ValidTo":"2019-05-20 23:59:59","Signature":"8b03c0dd94d841a26169b015a878c730c6903c7e42f724b6e4837317047f04109ca1e2fa812febc0ca44e772e050b6551020836e9692e49a516ab43731dca52deb8c00c71d4fe74d32ba85f84ebefa675565f06abe7aca64381a101078457631f3867a030f60c2b35d9df68b6676821b59e183e5bd49a53856e5de41770e580f","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"655226e1b22e18e1590f2985ac22e75c","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"650704c342850095f3288eaf791147d4","SHA1":"4cdc38c800761463749c3cbd94a12f32e49877bf","SHA256":"07b8f662558ec85b71b43a79c6e94698144f4ced2308af21e7ba1e5d461da214","SHA384":"2a271d052213438467d09d60eaa4010c8642fff3eb0070e0cf9969428713c8fdc066b90996d594dd3136f5bd0af5a22a"}},{"Subject":"C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority","ValidFrom":"2006-05-23 17:01:29","ValidTo":"2016-05-23 17:11:29","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"610c120600000000001b","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"53c41bc1164e09e0cd1617a5bf913efd","SHA1":"93c03aac8951d494ecd5696b1c08658541b18727","SHA256":"40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b","SHA384":"f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"}}],"Signer":[{"SerialNumber":"74f2958d31d03eb042f9081555305277","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009,2 CA","Version":1}]}],"LoadsDespiteHVCI":"FALSE"},{"Company":"鲁大师","Date":"","Description":"Ludashi System Driver","FileVersion":"1.3.10.1110","Filename":"","MD5":"65ad6a7c43f8d566afd5676f9447b6c1","MachineType":"AMD64","OriginalFilename":"ComputerZ.Sys","Product":"Ludashi System Driver","ProductVersion":"1.3.10.1110","Publisher":"","SHA1":"24aafe3c727c6a3bd1942db78327ada8fcb8c084","SHA256":"e502c2736825ea0380dd42effaa48105a201d4146e79de00713b8d3aaa98cd65","Signature":"","Imphash":"27db67ffa112f866f1d34c32226e09cf","Authentihash":{"MD5":"1d350d0940bb74230d092af7a3869c5e","SHA1":"3e8ead037c4e891f9fa2905be2f803c34daaca6d","SHA256":"f025ad896e6048a329aecb506503a79bc4d2717350f2c0bb7aec8fa52d31ba93"},"RichPEHeaderHash":{"MD5":"712c9acf9249f9b6194f890ef2c4677e","SHA1":"4db43c2a0f66a029cd8f5df58124ac8f43b4437b","SHA256":"617aebfb52124be4fe9394332dc751e1c916480a1fa87489bcf116bdc9d97d92"},"Sections":{".text":{"Entropy":6.226350839208789,"Virtual Size":"0x13a4"},".rdata":{"Entropy":4.469573099091931,"Virtual Size":"0x210"},".data":{"Entropy":0.5159719988134768,"Virtual Size":"0x110"},".pdata":{"Entropy":3.506157334789634,"Virtual Size":"0x9c"},"INIT":{"Entropy":4.9733676409967105,"Virtual Size":"0x31a"},".rsrc":{"Entropy":3.448470909792412,"Virtual Size":"0x3e8"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2010-11-23 05:32:57","InternalName":"ComputerZ.Sys","Copyright":"Copyright (C) 2008-2010 www.ludashi.com","Imports":["ntoskrnl.exe"],"ExportedFunctions":"","ImportedFunctions":["IoDeleteSymbolicLink","RtlInitUnicodeString","IoDeleteDevice","MmUnmapIoSpace","MmMapIoSpace","IofCompleteRequest","IoCreateSymbolicLink","IoCreateDevice","IoBuildDeviceIoControlRequest","RtlAnsiStringToUnicodeString","KeInitializeEvent","RtlInitAnsiString","RtlFreeUnicodeString","IoGetDeviceObjectPointer","KeWaitForSingleObject","PsGetVersion","MmIsAddressValid","ObfDereferenceObject","IofCallDriver","KeBugCheckEx","__C_specific_handler"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer , G2","ValidFrom":"2007-06-15 00:00:00","ValidTo":"2012-06-14 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"3825d7faf861af9ef490e726b5d65ad5","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"d6c7684e9aaa508cf268335f83afe040","SHA1":"18066d20ad92409c567cdfde745279ff71c75226","SHA256":"a612fb22ce8be6dab75e47c98508f98496583e79c9c97b936a8caee9ea9f3fff","SHA384":"35c249d6ad0261a6229b2a727067ac6ba32a5d24b30b9249051f748c7735fbe2ec2ef26a702c50df1790fbe32a65aee7"}},{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA","ValidFrom":"2003-12-04 00:00:00","ValidTo":"2013-12-03 23:59:59","Signature":"4a6bf9ea58c2441c318979992b96bf82ac01d61c4ccdb08a586edf0829a35ec8ca9313e704520def47272f0038b0e4c9934e9ad4226215f73f37214f703180f18b3887b3e8e89700fecf55964e24d2a9274e7aaeb76141f32acee7c9d95eddbb2b853eb59db5d9e157ffbeb4c57ef5cf0c9ef097fe2bd33b521b1b3827f73f4a","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"47bf1995df8d524643f7db6d480d31a4","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"518d2ea8a21e879c942d504824ac211c","SHA1":"21ce87d827077e61abddf2beba69fde5432ea031","SHA256":"1ec3b4f02e03930a470020e0e48d24b84678bb558f46182888d870541f5e25c7","SHA384":"53e346bbde23779a5d116cc9d86fdd71c97b1f1b343439f8a11aa1d3c87af63864bb8488a5aeb2d0c26a6a1e0b15f03f"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009,2 CA","ValidFrom":"2009-05-21 00:00:00","ValidTo":"2019-05-20 23:59:59","Signature":"8b03c0dd94d841a26169b015a878c730c6903c7e42f724b6e4837317047f04109ca1e2fa812febc0ca44e772e050b6551020836e9692e49a516ab43731dca52deb8c00c71d4fe74d32ba85f84ebefa675565f06abe7aca64381a101078457631f3867a030f60c2b35d9df68b6676821b59e183e5bd49a53856e5de41770e580f","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"655226e1b22e18e1590f2985ac22e75c","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"650704c342850095f3288eaf791147d4","SHA1":"4cdc38c800761463749c3cbd94a12f32e49877bf","SHA256":"07b8f662558ec85b71b43a79c6e94698144f4ced2308af21e7ba1e5d461da214","SHA384":"2a271d052213438467d09d60eaa4010c8642fff3eb0070e0cf9969428713c8fdc066b90996d594dd3136f5bd0af5a22a"}},{"Subject":"C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority","ValidFrom":"2006-05-23 17:01:29","ValidTo":"2016-05-23 17:11:29","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"610c120600000000001b","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"53c41bc1164e09e0cd1617a5bf913efd","SHA1":"93c03aac8951d494ecd5696b1c08658541b18727","SHA256":"40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b","SHA384":"f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"}},{"Subject":"C=CN, ST=Sichuan, L=Chengdu, O=Chengdu Qiying Technology Co.,Ltd., OU=Digital ID Class 3 , Microsoft Software Validation v2, CN=Chengdu Qiying Technology Co.,Ltd.","ValidFrom":"2010-03-31 00:00:00","ValidTo":"2011-03-31 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"61359ac44514d781769fd643666b4572","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"416fc5d0038211bf34811efeff6d562f","SHA1":"e0acbd39e2fa410a22c96e2a3eaea4342a626f40","SHA256":"843e587edb9c53b2fbbf84cd90b217af016da1330905b25c16bb059a26b5726e","SHA384":"1a1167bbac2b00e60c10a4c1dc1d0f5105c42582b1a39e05a1d60710d97a24c6ff76fe73700f0fb0e1e03f27aebb7697"}}],"Signer":[{"SerialNumber":"61359ac44514d781769fd643666b4572","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009,2 CA","Version":1}]}],"LoadsDespiteHVCI":"FALSE"},{"Company":"ludashi.com","Date":"","Description":"Ludashi System Driver","FileVersion":"1.6.15.1045","Filename":"","MD5":"7671bbf15b7a8c8f59a0c42a1765136a","MachineType":"I386","OriginalFilename":"ComputerZ.Sys","Product":"鲁大师","ProductVersion":"1.6.15.1045","Publisher":"","SHA1":"9f5453c36aa03760d935e062ac9e1f548d14e894","SHA256":"e642d82c5cde2bc40a204736b5b8d6578e8e2b893877ae0508cfa3371fc254dc","Signature":"","Imphash":"a53b095a8d7366075d445892070cde51","Authentihash":{"MD5":"55f05d6f7d05be2f6570b52ee06507e1","SHA1":"9a861ad1b13314a3637e16b286911d54db02a4bc","SHA256":"bcf3c0762d6600506ff3b2f13ac6d978041b0b50131b3a564a558611dd3b96df"},"RichPEHeaderHash":{"MD5":"36d79e4bc2a15ca68d83887d15f8f3b0","SHA1":"8ae8df369a94635efe2cd11c5a54829a352887c5","SHA256":"c7e19135c0e8c6b70db667044a45444ec135e550845f32f0b49fa08cfe0a9e7e"},"Sections":{".text":{"Entropy":6.3753294877462245,"Virtual Size":"0x3190"},".rdata":{"Entropy":4.088208142934422,"Virtual Size":"0x1a4"},".data":{"Entropy":0.6406837316805838,"Virtual Size":"0xa0"},"INIT":{"Entropy":5.453105414777541,"Virtual Size":"0x4b4"},".rsrc":{"Entropy":3.57239965128271,"Virtual Size":"0x488"},".reloc":{"Entropy":5.767403415227798,"Virtual Size":"0x282"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2015-09-05 23:28:18","InternalName":"ComputerZ.Sys","Copyright":"版权所有 (C) 2010-2015 www.ludashi.com","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["IofCompleteRequest","RtlGetVersion","IoCreateSymbolicLink","IoCreateDevice","ExFreePoolWithTag","ExAllocatePoolWithTag","IoGetDeviceProperty","RtlCompareUnicodeString","ObfDereferenceObject","IoGetDeviceAttachmentBaseRef","PsGetVersion","MmIsAddressValid","RtlFreeUnicodeString","IoGetDeviceObjectPointer","RtlAnsiStringToUnicodeString","RtlInitAnsiString","KeWaitForSingleObject","RtlInitUnicodeString","IoBuildDeviceIoControlRequest","KeInitializeEvent","MmUnmapIoSpace","READ_REGISTER_BUFFER_UCHAR","MmMapIoSpace","READ_REGISTER_BUFFER_ULONG","WRITE_REGISTER_ULONG","WRITE_REGISTER_UCHAR","KeSetTimer","KeInitializeTimerEx","_allmul","SeReleaseSubjectContext","SeTokenIsAdmin","SeCaptureSubjectContext","KeTickCount","KeBugCheckEx","RtlUnwind","IoDeleteSymbolicLink","IofCallDriver","IoDeleteDevice","HalGetBusDataByOffset","HalSetBusDataByOffset"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Time Stamping Signer","ValidFrom":"2015-05-05 00:00:00","ValidTo":"2015-12-31 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"009feac811b0f16247a5fc20d80523ace6","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"b6aa9cf28bcfc9f07ec1069fb425ab61","SHA1":"ca7a166fcd53878ba5a38d4cac37c63513cfc1fa","SHA256":"711394fc49f8948a831f687d42ced6b18514f57786ecc6cdbc3c3eb72e568a40","SHA384":"ca01f9c9ed4e1ddff7126b7bbf618bc8132429886ca563f86655429e928739c621b9fdea6e04a623712cbb998c5c7d77"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. , For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority , G5","ValidFrom":"2006-11-08 00:00:00","ValidTo":"2021-11-07 23:59:59","Signature":"1302ddf8e88600f25af8f8200c59886207cecef74ef9bb59a198e5e138dd4ebc6618d3adeb18f20dc96d3e4a9420c33cbabd6554c6af44b310ad2c6b3eabd707b6b88163c5f95e2ee52a67cecd330c2ad7895603231fb3bee83a0859b4ec4535f78a5bff66cf50afc66d578d1978b7b9a2d157ea1f9a4bafbac98e127ec6bdff","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"250ce8e030612e9f2b89f7054d7cf8fd","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"918d9eb6a6cd36c531eceb926170a7e1","SHA1":"0ae95700d65e6f59715aa47048993ca7858e676a","SHA256":"47c46e6eaa3780eace3d0d891346cd373359d246b21a957219dbab4c8f37c166","SHA384":"e54017c93ba52f012cc15aeb3bcbce1e90a0006ff8dca231a24fc572926770f63213343f538003407bed3463fa9c4a85"}},{"Subject":"C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority","ValidFrom":"2006-05-23 17:01:29","ValidTo":"2016-05-23 17:11:29","Signature":"01e446b33b457f7513877e5f43de468ecb8abdb64741bccccc7491d8ce395195a4a6b547c0efd2da7b8f5711f4328c7ccd3fee42da04214af7c843884a6f5cca14fc4bd19f4cbdd4556ecc02be0da6888f8609baa425bde8b0f0fa8b714e67b0cb82a8d78e55f737ebf03e88efe4e08afd1c6e2e61414875b4b02c1d28d8490fd715f02473253ccc880cde284c6554fe5eae8cea19ad2c51b29b3a47f53c80350117e24987d6544afb4bab07bcbf7d79cfbf35005cbb9ecffc82891b39a05197b6dec0b307ff449644c0342a195cabeef03bec294eb513c537857e75d5b4d60d066eb5d26c237167eaf1718eaf4e74aa0cf9ecbf4c58fa5e909b6d39cb86883f8b1ca81632d5fe6db9f1f8b3ead791f6364778c0272a15c768d6f4c5fc4f4ec8673f102d409ff11ec96148e7a703fc31730cf04688fe56da492995ef09daa3e5beef60ecd954a0599c28bd54ef66157f874c84dba60e95672e517b3439b641c28c846826dc240209e7818e0a972defeea7b998a60f818dc710b5e1ed982f486f53854964789bec5dac970b5526c3efba8dc8d1a52f5a7f936b611a339b18b8a26210de24ea76e12f43ebecdd7c12342489da2855aee5754e312b6763b6a8d7ab730a03cec5ea593fc7eb2a45aea8625b2f009939abb45f73c308ec80118f470e8f2a1343e191066255bbffba3da9a93d260faeca7d628b155589d694344dd665","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"610c120600000000001b","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"53c41bc1164e09e0cd1617a5bf913efd","SHA1":"93c03aac8951d494ecd5696b1c08658541b18727","SHA256":"40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b","SHA384":"f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"}},{"Subject":"C=CN, ST=Beijing, L=Beijing, O=Qihoo 360 Software (Beijing) Company Limited, OU=Digital ID Class 3 , Microsoft Software Validation v2, OU=Tech. Dev. Dept., CN=Qihoo 360 Software (Beijing) Company Limited","ValidFrom":"2013-03-11 00:00:00","ValidTo":"2016-03-10 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"51bd5d8e45b82a0210f17fe4c5233468","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"ad73c81b3174cc055d9718b2145a3d1f","SHA1":"0cb9e92828857976774a9fe96c016cdc67a25e6d","SHA256":"2c5d88401dfeec2ebf814e09d0d0faec9d109a503d427da4a7f3e0dec5ae0b6c","SHA384":"48c38329eb7f200be0d48acddabdb93c354dd1b8b3c3ce955a23638a4e2e32dd7d0f3a4f227a2b6382adc95e746cc411"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","ValidFrom":"2010-02-08 00:00:00","ValidTo":"2020-02-07 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"5200e5aa2556fc1a86ed96c9d44b33c7","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"b30c31a572b0409383ed3fbe17e56e81","SHA1":"4843a82ed3b1f2bfbee9671960e1940c942f688d","SHA256":"03cda47a6e654ed85d932714fc09ce4874600eda29ec6628cfbaeb155cab78c9","SHA384":"bbda8407c4f9fc4e54d772f1c7fb9d30bc97e1f97ecd51c443063d1fa0644e266328781776cd5c44896c457c75f4d7da"}}],"Signer":[{"SerialNumber":"51bd5d8e45b82a0210f17fe4c5233468","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","Version":1}]}],"LoadsDespiteHVCI":"FALSE"},{"Company":"ludashi.com","Date":"","Description":"Ludashi System Driver","FileVersion":"1.6.15.1045","Filename":"","MD5":"aa2ef08d48b66bd814280976614468a7","MachineType":"AMD64","OriginalFilename":"ComputerZ.Sys","Product":"鲁大师","ProductVersion":"1.6.15.1045","Publisher":"","SHA1":"59aead65b240a163ad47b2d1cf33cdb330608317","SHA256":"ed3448152bcacf20d7c33e9194c89d5304dee3fba16034dd0cc03a3374e63c91","Signature":"","Imphash":"fbfa302bf7eb5d615d0968541ee49ce4","Authentihash":{"MD5":"98a39fd9543c26e95548235dbed6f6ee","SHA1":"55a83548224d9dc156e1ba4b4bd1400cad060009","SHA256":"aac9c11490da2ad5316469aa91943b42d019b51ff6f1d9d9767260abd075bb8f"},"RichPEHeaderHash":{"MD5":"931e927cdf1c24d5817bff89dab85a64","SHA1":"4cd801fca152bbe24f5f38fd11ceb6376bcef450","SHA256":"7122c2c491e45b9bc338bcc38386cc39217d647ee94adc68881890034b241fb2"},"Sections":{".text":{"Entropy":6.323647044082133,"Virtual Size":"0x36fe"},".rdata":{"Entropy":4.706224571856012,"Virtual Size":"0x3b4"},".data":{"Entropy":0.34051109993725664,"Virtual Size":"0x1bc"},".pdata":{"Entropy":4.140010388960332,"Virtual Size":"0x1e0"},"INIT":{"Entropy":5.131166362174372,"Virtual Size":"0x4e8"},".rsrc":{"Entropy":3.574245952532775,"Virtual Size":"0x488"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2015-09-05 23:28:20","InternalName":"ComputerZ.Sys","Copyright":"版权所有 (C) 2010-2015 www.ludashi.com","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["RtlGetVersion","IofCompleteRequest","IoCreateSymbolicLink","IoCreateDevice","ExAllocatePoolWithTag","ExFreePoolWithTag","IoGetDeviceAttachmentBaseRef","PsGetVersion","RtlCompareUnicodeString","ObfDereferenceObject","IoGetDeviceProperty","RtlAnsiStringToUnicodeString","RtlInitAnsiString","RtlFreeUnicodeString","IoDeleteDevice","MmIsAddressValid","IoBuildDeviceIoControlRequest","KeInitializeEvent","KeWaitForSingleObject","IofCallDriver","MmUnmapIoSpace","MmMapIoSpace","SeTokenIsAdmin","SeReleaseSubjectContext","SeCaptureSubjectContext","KeSetTimer","KeInitializeTimerEx","KeBugCheckEx","RtlInitUnicodeString","IoGetDeviceObjectPointer","IoDeleteSymbolicLink","__C_specific_handler","HalSetBusDataByOffset","HalGetBusDataByOffset"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Time Stamping Signer","ValidFrom":"2015-05-05 00:00:00","ValidTo":"2015-12-31 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"009feac811b0f16247a5fc20d80523ace6","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"b6aa9cf28bcfc9f07ec1069fb425ab61","SHA1":"ca7a166fcd53878ba5a38d4cac37c63513cfc1fa","SHA256":"711394fc49f8948a831f687d42ced6b18514f57786ecc6cdbc3c3eb72e568a40","SHA384":"ca01f9c9ed4e1ddff7126b7bbf618bc8132429886ca563f86655429e928739c621b9fdea6e04a623712cbb998c5c7d77"}},{"Subject":"??=HK, ??=Private Organization, serialNumber=1848744, C=HK, ST=Hong Kong, L=Hong Kong, O=QIHU 360 SOFTWARE CO. LIMITED, CN=QIHU 360 SOFTWARE CO. LIMITED","ValidFrom":"2013-05-21 00:00:00","ValidTo":"2016-05-20 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"541fda68b5e95006f2fec51bea326365","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"f741ec6836bb74e2370476618157c432","SHA1":"a392f40f4b3dc57727804cbeef660bbf9e2fbb69","SHA256":"faf712aafed949a99bad324e153686c3e94f25ed38ecadbee3e7650f23bea634","SHA384":"d2935b45e517522578d0a44e3654896b3dd991aef0091a60a1d22d3c695b07b4d8e9c0b36bab3b44c1fe1c12cf225f91"}},{"Subject":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Extended Validation Code Signing CA","ValidFrom":"2012-06-07 00:00:00","ValidTo":"2022-06-06 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"6c59efa9e100e10ee306ba8fe0292559","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"cc806ac6ce6822cccc165d63c1b8fa37","SHA1":"261a24e7b2648867017e7e852258ef87ab84c5f1","SHA256":"a8b0af15f217006b33f9beafe49e22f7263776bdb82c268c97c4441a6c7357e6","SHA384":"ce7e869a43aa2e17b7e4c0d78cabbca7b40d22c86e132153234d39b00ae426ceeef56c6ee8312f5ffda5c3f629a5dee1"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. , For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority , G5","ValidFrom":"2011-02-22 19:25:17","ValidTo":"2021-02-22 19:35:17","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"611993e400000000001c","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"78a717e082dcc1cda3458d917e677d14","SHA1":"4a872e0e51f9b304469cd1dedb496ee9b8b983a4","SHA256":"317fa1d234ebc49040ebc5e8746f8997471496051b185a91bdd9dfbb23fab5f8","SHA384":"b71052da4eb9157c8c1a5d7f55df19d69b9128598b72fcca608e5b7cc7d64c43c5504b9c86355a6dc22ee40c88cc385c"}}],"Signer":[{"SerialNumber":"541fda68b5e95006f2fec51bea326365","Issuer":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Extended Validation Code Signing CA","Version":1}]}],"LoadsDespiteHVCI":"TRUE"},{"Company":"ludashi.com","Date":"","Description":"Ludashi System Driver","FileVersion":"1.6.15.1040","Filename":"","MD5":"2399e6f7f868d05623be03a616b4811e","MachineType":"I386","OriginalFilename":"ComputerZ.Sys","Product":"鲁大师","ProductVersion":"1.6.15.1040","Publisher":"","SHA1":"3b1f1e96fc8a7eb93b14b1213f797f164a313cee","SHA256":"f14da8aa5c8eea8df63cf935481d673fdf3847f5701c310abf4023f9d80ad57d","Signature":"","Imphash":"6e7cd05c0da9f82449a8b3795418ee00","Authentihash":{"MD5":"7f772e4bc503225174de47d826f34529","SHA1":"769f3d19d1d1fad58ef06c23e7958b03222a2166","SHA256":"bbb894950dc19c804c44a7dce8fe9a7267311e992421faffa8912f8b8b4dc09e"},"RichPEHeaderHash":{"MD5":"d1a79229c378e2371e92e26510f9d7dc","SHA1":"59d47b012da8415f780a06d0204294a48affa1ab","SHA256":"cc6c4013bb762de8a20b4e2f725a9388fab9c386c3e86a5e30c1cc4429c6a525"},"Sections":{".text":{"Entropy":6.35776976846777,"Virtual Size":"0x3030"},".rdata":{"Entropy":4.051905757372494,"Virtual Size":"0x1a4"},".data":{"Entropy":0.6683247346784849,"Virtual Size":"0x98"},"INIT":{"Entropy":5.458003678104233,"Virtual Size":"0x4a0"},".rsrc":{"Entropy":3.5668347451690603,"Virtual Size":"0x488"},".reloc":{"Entropy":5.752765178414186,"Virtual Size":"0x276"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2015-08-24 00:29:22","InternalName":"ComputerZ.Sys","Copyright":"版权所有 (C) 2010-2015 www.ludashi.com","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["IofCompleteRequest","IoCreateSymbolicLink","IoCreateDevice","ExFreePoolWithTag","ExAllocatePoolWithTag","IoGetDeviceProperty","RtlCompareUnicodeString","ObfDereferenceObject","IoGetDeviceAttachmentBaseRef","PsGetVersion","MmIsAddressValid","RtlFreeUnicodeString","IoGetDeviceObjectPointer","RtlAnsiStringToUnicodeString","RtlInitAnsiString","KeWaitForSingleObject","IofCallDriver","RtlInitUnicodeString","KeInitializeEvent","MmUnmapIoSpace","READ_REGISTER_BUFFER_UCHAR","MmMapIoSpace","READ_REGISTER_BUFFER_ULONG","WRITE_REGISTER_ULONG","WRITE_REGISTER_UCHAR","KeSetTimer","KeInitializeTimerEx","_allmul","SeReleaseSubjectContext","SeTokenIsAdmin","SeCaptureSubjectContext","KeTickCount","KeBugCheckEx","RtlUnwind","IoDeleteSymbolicLink","IoBuildDeviceIoControlRequest","IoDeleteDevice","HalGetBusDataByOffset","HalSetBusDataByOffset"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Time Stamping Signer","ValidFrom":"2015-05-05 00:00:00","ValidTo":"2015-12-31 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"009feac811b0f16247a5fc20d80523ace6","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"b6aa9cf28bcfc9f07ec1069fb425ab61","SHA1":"ca7a166fcd53878ba5a38d4cac37c63513cfc1fa","SHA256":"711394fc49f8948a831f687d42ced6b18514f57786ecc6cdbc3c3eb72e568a40","SHA384":"ca01f9c9ed4e1ddff7126b7bbf618bc8132429886ca563f86655429e928739c621b9fdea6e04a623712cbb998c5c7d77"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. , For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority , G5","ValidFrom":"2006-11-08 00:00:00","ValidTo":"2021-11-07 23:59:59","Signature":"1302ddf8e88600f25af8f8200c59886207cecef74ef9bb59a198e5e138dd4ebc6618d3adeb18f20dc96d3e4a9420c33cbabd6554c6af44b310ad2c6b3eabd707b6b88163c5f95e2ee52a67cecd330c2ad7895603231fb3bee83a0859b4ec4535f78a5bff66cf50afc66d578d1978b7b9a2d157ea1f9a4bafbac98e127ec6bdff","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"250ce8e030612e9f2b89f7054d7cf8fd","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"918d9eb6a6cd36c531eceb926170a7e1","SHA1":"0ae95700d65e6f59715aa47048993ca7858e676a","SHA256":"47c46e6eaa3780eace3d0d891346cd373359d246b21a957219dbab4c8f37c166","SHA384":"e54017c93ba52f012cc15aeb3bcbce1e90a0006ff8dca231a24fc572926770f63213343f538003407bed3463fa9c4a85"}},{"Subject":"C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority","ValidFrom":"2006-05-23 17:01:29","ValidTo":"2016-05-23 17:11:29","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"610c120600000000001b","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"53c41bc1164e09e0cd1617a5bf913efd","SHA1":"93c03aac8951d494ecd5696b1c08658541b18727","SHA256":"40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b","SHA384":"f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"}},{"Subject":"C=CN, ST=Beijing, L=Beijing, O=Qihoo 360 Software (Beijing) Company Limited, OU=Digital ID Class 3 , Microsoft Software Validation v2, OU=Tech. Dev. Dept., CN=Qihoo 360 Software (Beijing) Company Limited","ValidFrom":"2013-03-11 00:00:00","ValidTo":"2016-03-10 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"51bd5d8e45b82a0210f17fe4c5233468","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"ad73c81b3174cc055d9718b2145a3d1f","SHA1":"0cb9e92828857976774a9fe96c016cdc67a25e6d","SHA256":"2c5d88401dfeec2ebf814e09d0d0faec9d109a503d427da4a7f3e0dec5ae0b6c","SHA384":"48c38329eb7f200be0d48acddabdb93c354dd1b8b3c3ce955a23638a4e2e32dd7d0f3a4f227a2b6382adc95e746cc411"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","ValidFrom":"2010-02-08 00:00:00","ValidTo":"2020-02-07 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"5200e5aa2556fc1a86ed96c9d44b33c7","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"b30c31a572b0409383ed3fbe17e56e81","SHA1":"4843a82ed3b1f2bfbee9671960e1940c942f688d","SHA256":"03cda47a6e654ed85d932714fc09ce4874600eda29ec6628cfbaeb155cab78c9","SHA384":"bbda8407c4f9fc4e54d772f1c7fb9d30bc97e1f97ecd51c443063d1fa0644e266328781776cd5c44896c457c75f4d7da"}}],"Signer":[{"SerialNumber":"51bd5d8e45b82a0210f17fe4c5233468","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","Version":1}]}],"LoadsDespiteHVCI":"FALSE"},{"Company":"ludashi.com","Date":"","Description":"Ludashi System Driver","FileVersion":"1.6.16.1000","Filename":"","MD5":"88d2143ae62878dada3aa0a6d8f7cea8","MachineType":"AMD64","OriginalFilename":"ComputerZ.Sys","Product":"鲁大师","ProductVersion":"1.6.16.1000","Publisher":"","SHA1":"195b91a1a43de8bfb52a4869fbf53d7a226a6559","SHA256":"f93e0d776481c4ded177d5e4aebb27f30f0d47dcb4a1448aee8b66099ac686e1","Signature":"","Imphash":"fbfa302bf7eb5d615d0968541ee49ce4","Authentihash":{"MD5":"319150f8644a8a012bc781ef949912f4","SHA1":"04513e47cd38886aaa7d7f044e95d6f96b481779","SHA256":"3eea0723a9007f5a85382cd2e92d9f9cc94bb9e2f7fbb6d99a7c70c8527caa5a"},"RichPEHeaderHash":{"MD5":"931e927cdf1c24d5817bff89dab85a64","SHA1":"4cd801fca152bbe24f5f38fd11ceb6376bcef450","SHA256":"7122c2c491e45b9bc338bcc38386cc39217d647ee94adc68881890034b241fb2"},"Sections":{".text":{"Entropy":6.336289155647874,"Virtual Size":"0x36ee"},".rdata":{"Entropy":4.6891440937887054,"Virtual Size":"0x3a4"},".data":{"Entropy":0.3458408061738237,"Virtual Size":"0x1b4"},".pdata":{"Entropy":4.149526841065974,"Virtual Size":"0x1e0"},"INIT":{"Entropy":5.1298643613195445,"Virtual Size":"0x4e8"},".rsrc":{"Entropy":3.5641654969859053,"Virtual Size":"0x488"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2016-02-26 03:48:33","InternalName":"ComputerZ.Sys","Copyright":"版权所有 (C) 2010-2016 www.ludashi.com","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["RtlGetVersion","IofCompleteRequest","IoCreateSymbolicLink","IoCreateDevice","ExAllocatePoolWithTag","ExFreePoolWithTag","IoGetDeviceAttachmentBaseRef","PsGetVersion","RtlCompareUnicodeString","ObfDereferenceObject","IoGetDeviceProperty","RtlAnsiStringToUnicodeString","RtlInitAnsiString","RtlFreeUnicodeString","IoDeleteDevice","MmIsAddressValid","IoBuildDeviceIoControlRequest","KeInitializeEvent","KeWaitForSingleObject","IofCallDriver","MmUnmapIoSpace","MmMapIoSpace","SeTokenIsAdmin","SeReleaseSubjectContext","SeCaptureSubjectContext","KeSetTimer","KeInitializeTimerEx","KeBugCheckEx","RtlInitUnicodeString","IoGetDeviceObjectPointer","IoDeleteSymbolicLink","__C_specific_handler","HalSetBusDataByOffset","HalGetBusDataByOffset"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA , G2","ValidFrom":"2012-12-21 00:00:00","ValidTo":"2020-12-30 23:59:59","Signature":"03099b8f79ef7f5930aaef68b5fae3091dbb4f82065d375fa6529f168dea1c9209446ef56deb587c30e8f9698d23730b126f47a9ae3911f82ab19bb01ac38eeb599600adce0c4db2d031a6085c2a7afce27a1d574ca86518e979406225966ec7c7376a8321088e41eaddd9573f1d7749872a16065ea6386a2212a35119837eb6","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"7e93ebfb7cc64e59ea4b9a77d406fc3b","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"d0785ad36e427c92b19f6826ab1e8020","SHA1":"365b7a9c21bd9373e49052c3e7b3e4646ddd4d43","SHA256":"c2abb7484da91a658548de089d52436175fdb760a1387d225611dc0613a1e2ff","SHA384":"eab4fe5ef90e0de4a6aa3a27769a5e879f588df5e4785aa4104debd1f81e19ea56d33e3a16e5facf99f68b5d8e3d287b"}},{"Subject":"C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer , G4","ValidFrom":"2012-10-18 00:00:00","ValidTo":"2020-12-29 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"0ecff438c8febf356e04d86a981b1a50","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"e9d38360b914c8863f6cba3ee58764d3","SHA1":"4cba8eae47b6bf76f20b3504b98b8f062694a89b","SHA256":"88901d86a4cc1f1bb193d08e1fb63d27452e63f83e228c657ab1a92e4ade3976","SHA384":"e9f2a75334a9e336c5a4712eadee88d0374b0fdc273262f4e65c9040ad2793067cc076696db5279a478773485e285652"}},{"Subject":"C=CN, ST=Beijing, L=Beijing, O=Qihoo 360 Software (Beijing) Company Limited, OU=Tech. Dev. Dept., CN=Qihoo 360 Software (Beijing) Company Limited","ValidFrom":"2016-01-06 00:00:00","ValidTo":"2019-03-28 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"26279f0f2f11970dccf63eba88f2d4c4","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"fbebdc165d8f4616444075e0a48855e6","SHA1":"f6bf44f1acae05fc1638190459485da95f4ed1ec","SHA256":"6917dc56b04b2bd7a75f0987ee27c832dc62298b698b585a4c2c07eb890b6528","SHA384":"c857fb61de8d13e1ac649fbaa4d69acd293d8542cd380411db8bbe2fdc3b9d98c607d0d267081fac285dd33e9141f329"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. , For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority , G5","ValidFrom":"2011-02-22 19:25:17","ValidTo":"2021-02-22 19:35:17","Signature":"812a82168c34672be503eb347b8ca2a3508af45586f11e8c8eae7dee0319ce72951848ad6211fd20fd3f4706015ae2e06f8c152c4e3c6a506c0b36a3cf7a0d9c42bc5cf819d560e369e6e22341678c6883762b8f93a32ab57fbe59fba9c9b2268fcaa2f3821b983e919527978661ee5b5d076bcd86a8e26580a8e215e2b2be23056aba0cf347934daca48c077939c061123a050d89a3ec9f578984fbecca7c47661491d8b60f195de6b84aacbc47c8714396e63220a5dc7786fd3ce38b71db7b9b03fcb71d3264eb1652a043a3fa2ead59924e7cc7f233424838513a7c38c71b242228401e1a461f17db18f7f027356cb863d9cdb9645d2ba55eefc629b4f2c7f821cc04ba57fd01b6abc667f9e7d3997ff4f522fa72f5fdff3a1c423aa1f98018a5ee8d1cd4669e4501feaaeefffb178f30f7f1cd29c59decb5d549003d85b8cbbb933a276a49c030ae66c9f723283276f9a48356c848ce5a96aaa0cc0cc47fb48e97af6de35427c39f86c0d6e473089705dbd054625e0348c2d59f7fa7668cd09db04fd4d3985f4b7ac97fb22952d01280c70f54b61e67cdc6a06c110384d34875e72afeb03b6e0a3aa66b769905a3f177686133144706fc537f52bd92145c4a246a678caf8d90aad0f679211b93267cc3ce1ebd883892ae45c6196a4950b305f8ae59378a6a250394b1598150e8ba8380b72335f476b9671d5918ad208d94","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"611993e400000000001c","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"78a717e082dcc1cda3458d917e677d14","SHA1":"4a872e0e51f9b304469cd1dedb496ee9b8b983a4","SHA256":"317fa1d234ebc49040ebc5e8746f8997471496051b185a91bdd9dfbb23fab5f8","SHA384":"b71052da4eb9157c8c1a5d7f55df19d69b9128598b72fcca608e5b7cc7d64c43c5504b9c86355a6dc22ee40c88cc385c"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","ValidFrom":"2010-02-08 00:00:00","ValidTo":"2020-02-07 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"5200e5aa2556fc1a86ed96c9d44b33c7","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"b30c31a572b0409383ed3fbe17e56e81","SHA1":"4843a82ed3b1f2bfbee9671960e1940c942f688d","SHA256":"03cda47a6e654ed85d932714fc09ce4874600eda29ec6628cfbaeb155cab78c9","SHA384":"bbda8407c4f9fc4e54d772f1c7fb9d30bc97e1f97ecd51c443063d1fa0644e266328781776cd5c44896c457c75f4d7da"}}],"Signer":[{"SerialNumber":"26279f0f2f11970dccf63eba88f2d4c4","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","Version":1}]}],"LoadsDespiteHVCI":"FALSE"},{"Company":"ludashi.com","Date":"","Description":"Ludashi System Driver","FileVersion":"1.6.16.1005","Filename":"","MD5":"0ac31915ec9a6b7d4d4bba8fe6d60ff7","MachineType":"AMD64","OriginalFilename":"ComputerZ.Sys","Product":"鲁大师","ProductVersion":"1.6.16.1005","Publisher":"","SHA1":"5c88d9fcc491c7f1078c224e1d6c9f5bda8f3d8a","SHA256":"fa77a472e95c4d0a2271e5d7253a85af25c07719df26941b39082cfc0733071a","Signature":"","Imphash":"fbfa302bf7eb5d615d0968541ee49ce4","Authentihash":{"MD5":"8ab57a309eded5eb8ccfc7fd6712ee47","SHA1":"fe0db53751edd272612f58bd8afc8ee844f65937","SHA256":"694385b46b72e65604afd251fba3c8febb42225343d38feecec3f424ce45f2c3"},"RichPEHeaderHash":{"MD5":"931e927cdf1c24d5817bff89dab85a64","SHA1":"4cd801fca152bbe24f5f38fd11ceb6376bcef450","SHA256":"7122c2c491e45b9bc338bcc38386cc39217d647ee94adc68881890034b241fb2"},"Sections":{".text":{"Entropy":6.329458453101564,"Virtual Size":"0x36ae"},".rdata":{"Entropy":4.666070935125919,"Virtual Size":"0x3c4"},".data":{"Entropy":0.3458408061738237,"Virtual Size":"0x1b4"},".pdata":{"Entropy":4.0276869939886195,"Virtual Size":"0x1e0"},"INIT":{"Entropy":5.134900403524605,"Virtual Size":"0x4e8"},".rsrc":{"Entropy":3.571306375348106,"Virtual Size":"0x488"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2016-04-18 22:27:28","InternalName":"ComputerZ.Sys","Copyright":"版权所有 (C) 2010-2016 www.ludashi.com","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["RtlGetVersion","IofCompleteRequest","IoCreateSymbolicLink","IoCreateDevice","ExAllocatePoolWithTag","ExFreePoolWithTag","IoGetDeviceAttachmentBaseRef","PsGetVersion","RtlCompareUnicodeString","ObfDereferenceObject","IoGetDeviceProperty","RtlAnsiStringToUnicodeString","RtlInitAnsiString","RtlFreeUnicodeString","IoDeleteDevice","MmIsAddressValid","IoBuildDeviceIoControlRequest","KeInitializeEvent","KeWaitForSingleObject","IofCallDriver","MmUnmapIoSpace","MmMapIoSpace","SeTokenIsAdmin","SeReleaseSubjectContext","SeCaptureSubjectContext","KeSetTimer","KeInitializeTimerEx","KeBugCheckEx","RtlInitUnicodeString","IoGetDeviceObjectPointer","IoDeleteSymbolicLink","__C_specific_handler","HalSetBusDataByOffset","HalGetBusDataByOffset"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA , G2","ValidFrom":"2012-12-21 00:00:00","ValidTo":"2020-12-30 23:59:59","Signature":"03099b8f79ef7f5930aaef68b5fae3091dbb4f82065d375fa6529f168dea1c9209446ef56deb587c30e8f9698d23730b126f47a9ae3911f82ab19bb01ac38eeb599600adce0c4db2d031a6085c2a7afce27a1d574ca86518e979406225966ec7c7376a8321088e41eaddd9573f1d7749872a16065ea6386a2212a35119837eb6","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"7e93ebfb7cc64e59ea4b9a77d406fc3b","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"d0785ad36e427c92b19f6826ab1e8020","SHA1":"365b7a9c21bd9373e49052c3e7b3e4646ddd4d43","SHA256":"c2abb7484da91a658548de089d52436175fdb760a1387d225611dc0613a1e2ff","SHA384":"eab4fe5ef90e0de4a6aa3a27769a5e879f588df5e4785aa4104debd1f81e19ea56d33e3a16e5facf99f68b5d8e3d287b"}},{"Subject":"C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer , G4","ValidFrom":"2012-10-18 00:00:00","ValidTo":"2020-12-29 23:59:59","Signature":"783bb4912a004cf08f62303778a38427076f18b2de25dca0d49403aa864e259f9a40031cddcee379cb216806dab632b46dbff42c266333e449646d0de6c3670ef705a4356c7c8916c6e9b2dfb2e9dd20c6710fcd9574dcb65cdebd371f4378e678b5cd280420a3aaf14bc48829910e80d111fcdd5c766e4f5e0e4546416e0db0ea389ab13ada097110fc1c79b4807bac69f4fd9cb60c162bf17f5b093d9b5be216ca13816d002e380da8298f2ce1b2f45aa901af159c2c2f491bdb22bbc3fe789451c386b182885df03db451a179332b2e7bb9dc20091371eb6a195bcfe8a530572c89493fb9cf7fc9bf3e226863539abd6974acc51d3c7f92e0c3bc1cd80475","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"0ecff438c8febf356e04d86a981b1a50","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"e9d38360b914c8863f6cba3ee58764d3","SHA1":"4cba8eae47b6bf76f20b3504b98b8f062694a89b","SHA256":"88901d86a4cc1f1bb193d08e1fb63d27452e63f83e228c657ab1a92e4ade3976","SHA384":"e9f2a75334a9e336c5a4712eadee88d0374b0fdc273262f4e65c9040ad2793067cc076696db5279a478773485e285652"}},{"Subject":"C=CN, ST=Beijing, L=Beijing, O=Qihoo 360 Software (Beijing) Company Limited, OU=Tech. Dev. Dept., CN=Qihoo 360 Software (Beijing) Company Limited","ValidFrom":"2016-01-06 00:00:00","ValidTo":"2019-03-28 23:59:59","Signature":"14deff13d888b68e8fe51fe761e94a08cc7e9223861f3cf61f51f8629fc2011ae3a3b5af2efaea5120a92b16a2e3da99181ce1a741fb2cfb8dcd78c869ad25911476c9e2bcb28159a9161851e3e46c2828ca7f89bd36b454e49ef28a6d87563bced3277710e9147ec817efd71301e868158e2c9d7a6310f112134054629047fe8637cf4fe1c21a0ad29b388f0031a1e13e4f9b06dc81351d8de4bf8fc9adf748105315d0f67c9c4e391f42abdb51877347685bc072e3bb649899bb8b4697f6d48269a53576fa82f3e0a9552c03b645c07f832ddf3545877ac64f8610d861d54e3ec1c09f3586f1b78564a618e3c761409ac9c84d0a9c8cbaba46d7b11cba1dfb","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"26279f0f2f11970dccf63eba88f2d4c4","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"fbebdc165d8f4616444075e0a48855e6","SHA1":"f6bf44f1acae05fc1638190459485da95f4ed1ec","SHA256":"6917dc56b04b2bd7a75f0987ee27c832dc62298b698b585a4c2c07eb890b6528","SHA384":"c857fb61de8d13e1ac649fbaa4d69acd293d8542cd380411db8bbe2fdc3b9d98c607d0d267081fac285dd33e9141f329"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. , For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority , G5","ValidFrom":"2011-02-22 19:25:17","ValidTo":"2021-02-22 19:35:17","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"611993e400000000001c","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"78a717e082dcc1cda3458d917e677d14","SHA1":"4a872e0e51f9b304469cd1dedb496ee9b8b983a4","SHA256":"317fa1d234ebc49040ebc5e8746f8997471496051b185a91bdd9dfbb23fab5f8","SHA384":"b71052da4eb9157c8c1a5d7f55df19d69b9128598b72fcca608e5b7cc7d64c43c5504b9c86355a6dc22ee40c88cc385c"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","ValidFrom":"2010-02-08 00:00:00","ValidTo":"2020-02-07 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"5200e5aa2556fc1a86ed96c9d44b33c7","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"b30c31a572b0409383ed3fbe17e56e81","SHA1":"4843a82ed3b1f2bfbee9671960e1940c942f688d","SHA256":"03cda47a6e654ed85d932714fc09ce4874600eda29ec6628cfbaeb155cab78c9","SHA384":"bbda8407c4f9fc4e54d772f1c7fb9d30bc97e1f97ecd51c443063d1fa0644e266328781776cd5c44896c457c75f4d7da"}}],"Signer":[{"SerialNumber":"26279f0f2f11970dccf63eba88f2d4c4","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA","Version":1}]}],"LoadsDespiteHVCI":"FALSE"}]}