{"Id":"a3c52cbe-90ca-432c-9520-761b60e7d9cb","Tags":["AODDriver.sys"],"Verified":"TRUE","Author":"Takahiro Haruyama","Created":"2023-11-02","MitreID":"T1068","Category":"vulnerable driver","Commands":{"Command":"sc.exe create AODDriversys binPath= C:\\windows\\temp\\AODDriversys.sys type=kernel && sc.exe start AODDriversys","Description":"The Carbon Black Threat Analysis Unit (TAU) discovered 34 unique vulnerable drivers (237 file hashes) accepting firmware access. Six allow kernel memory access. All give full control of the devices to non-admin users. By exploiting the vulnerable drivers, an attacker without the system privilege may erase/alter firmware, and/or elevate privileges. As of the time of writing in October 2023, the filenames of the vulnerable drivers have not been made public until now.","OperatingSystem":"Windows 10","Privileges":"kernel","Usecase":"Elevate privileges"},"Resources":["https://blogs.vmware.com/security/2023/10/hunting-vulnerable-kernel-drivers.html"],"Detection":[{"type":"yara_signature","value":"https://github.com/magicsword-io/LOLDrivers/blob/main/detections/yara/yara-rules_vuln_drivers_strict_renamed.yar"},{"type":"sigma_hash","value":"https://github.com/magicsword-io/LOLDrivers/blob/main/detections/sigma/driver_load_win_vuln_drivers.yml"},{"type":"sigma_names","value":"https://github.com/magicsword-io/LOLDrivers/blob/main/detections/sigma/driver_load_win_vuln_drivers_names.yml"},{"type":"sysmon_hash_detect","value":"https://github.com/magicsword-io/LOLDrivers/blob/main/detections/sysmon/sysmon_config_vulnerable_hashes.xml"},{"type":"sysmon_hash_block","value":"https://github.com/magicsword-io/LOLDrivers/blob/main/detections/sysmon/sysmon_config_vulnerable_hashes_block.xml"}],"Acknowledgement":{"Handle":"","Person":""},"KnownVulnerableSamples":[{"Company":"Advanced Micro Devices","Date":"","Description":"AMD OverDrive Service Driver","FileVersion":"4.2.0 built by: WinDDK","Filename":"","MD5":"2faa725dd9bb22b2100e3010f8a72182","MachineType":"I386","OriginalFilename":"AODDriver2.sys","Product":"AMD OverDrive Service Driver","ProductVersion":"4.2.0","Publisher":"","SHA1":"5ce273aa80ed3b0394e593a999059096682736ae","SHA256":"070ff602cccaaef9e2b094e03983fd7f1bf0c0326612eb76593eabbf1bda9103","Signature":"","Imphash":"48028b3b694466c1c0eb1d91ef5c02cb","Authentihash":{"MD5":"28eeecde23e284924186b1c40f263fb1","SHA1":"84a576d26cfb5dac55308ab00c3b6a5558f162ca","SHA256":"42f468244050bafdcfc061c0eb468fd78267f93404b8703353d68fdca8b4355e"},"RichPEHeaderHash":{"MD5":"cf562e2b6816b28c3f2b643926edbdc6","SHA1":"5d846f8e38c47c50502ecf7956350a9b57a899ce","SHA256":"0cb77c25ac0071844595a395458ade87e448e27fe1e27f4552c367ff175d92ce"},"Sections":{".text":{"Entropy":6.345833281265631,"Virtual Size":"0x6a58"},".rdata":{"Entropy":4.147807313596107,"Virtual Size":"0x404"},".data":{"Entropy":2.753667292506314,"Virtual Size":"0x20928"},"PAGE":{"Entropy":6.275414385698134,"Virtual Size":"0x13d3"},"INIT":{"Entropy":5.698144849789103,"Virtual Size":"0x666"},".rsrc":{"Entropy":3.279344075574124,"Virtual Size":"0x3b0"},".reloc":{"Entropy":5.619199574410783,"Virtual Size":"0x80a"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2012-11-21 02:46:49","InternalName":"AODDriver2.sys","Copyright":"Copyright © 2012 AMD, Inc.","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["MmMapLockedPagesSpecifyCache","MmMapIoSpace","DbgPrint","KeDelayExecutionThread","memcpy","strncmp","ExFreePoolWithTag","ExAllocatePoolWithTag","IofCompleteRequest","KeLeaveCriticalRegion","MmUnmapIoSpace","_allshl","_aullshr","IoDeleteDevice","IoDeleteSymbolicLink","RtlInitUnicodeString","IoCreateSymbolicLink","KeTickCount","KeBugCheckEx","memset","IoAllocateMdl","MmBuildMdlForNonPagedPool","MmUnmapLockedPages","IoFreeMdl","KeEnterCriticalRegion","MmGetSystemRoutineAddress","ZwClose","ZwSetSecurityObject","ObOpenObjectByPointer","IoDeviceObjectType","IoCreateDevice","RtlGetDaclSecurityDescriptor","RtlGetSaclSecurityDescriptor","RtlGetGroupSecurityDescriptor","RtlGetOwnerSecurityDescriptor","_snwprintf","RtlLengthSecurityDescriptor","SeCaptureSecurityDescriptor","SeExports","IoIsWdmVersionAvailable","_wcsnicmp","RtlAddAccessAllowedAce","RtlLengthSid","wcschr","RtlAbsoluteToSelfRelativeSD","RtlSetDaclSecurityDescriptor","RtlCreateSecurityDescriptor","ZwOpenKey","ZwCreateKey","ZwQueryValueKey","ZwSetValueKey","RtlFreeUnicodeString","READ_PORT_UCHAR","WRITE_PORT_USHORT","READ_PORT_USHORT","HalSetBusDataByOffset","HalGetBusDataByOffset","WRITE_PORT_UCHAR","WRITE_PORT_ULONG","READ_PORT_ULONG"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA , G2","ValidFrom":"2012-12-21 00:00:00","ValidTo":"2020-12-30 23:59:59","Signature":"03099b8f79ef7f5930aaef68b5fae3091dbb4f82065d375fa6529f168dea1c9209446ef56deb587c30e8f9698d23730b126f47a9ae3911f82ab19bb01ac38eeb599600adce0c4db2d031a6085c2a7afce27a1d574ca86518e979406225966ec7c7376a8321088e41eaddd9573f1d7749872a16065ea6386a2212a35119837eb6","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"7e93ebfb7cc64e59ea4b9a77d406fc3b","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"d0785ad36e427c92b19f6826ab1e8020","SHA1":"365b7a9c21bd9373e49052c3e7b3e4646ddd4d43","SHA256":"c2abb7484da91a658548de089d52436175fdb760a1387d225611dc0613a1e2ff","SHA384":"eab4fe5ef90e0de4a6aa3a27769a5e879f588df5e4785aa4104debd1f81e19ea56d33e3a16e5facf99f68b5d8e3d287b"}},{"Subject":"C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer , G4","ValidFrom":"2012-10-18 00:00:00","ValidTo":"2020-12-29 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"0ecff438c8febf356e04d86a981b1a50","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"e9d38360b914c8863f6cba3ee58764d3","SHA1":"4cba8eae47b6bf76f20b3504b98b8f062694a89b","SHA256":"88901d86a4cc1f1bb193d08e1fb63d27452e63f83e228c657ab1a92e4ade3976","SHA384":"e9f2a75334a9e336c5a4712eadee88d0374b0fdc273262f4e65c9040ad2793067cc076696db5279a478773485e285652"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009,2 CA","ValidFrom":"2009-05-21 00:00:00","ValidTo":"2019-05-20 23:59:59","Signature":"8b03c0dd94d841a26169b015a878c730c6903c7e42f724b6e4837317047f04109ca1e2fa812febc0ca44e772e050b6551020836e9692e49a516ab43731dca52deb8c00c71d4fe74d32ba85f84ebefa675565f06abe7aca64381a101078457631f3867a030f60c2b35d9df68b6676821b59e183e5bd49a53856e5de41770e580f","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"655226e1b22e18e1590f2985ac22e75c","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"650704c342850095f3288eaf791147d4","SHA1":"4cdc38c800761463749c3cbd94a12f32e49877bf","SHA256":"07b8f662558ec85b71b43a79c6e94698144f4ced2308af21e7ba1e5d461da214","SHA384":"2a271d052213438467d09d60eaa4010c8642fff3eb0070e0cf9969428713c8fdc066b90996d594dd3136f5bd0af5a22a"}},{"Subject":"C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority","ValidFrom":"2006-05-23 17:01:29","ValidTo":"2016-05-23 17:11:29","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"610c120600000000001b","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"53c41bc1164e09e0cd1617a5bf913efd","SHA1":"93c03aac8951d494ecd5696b1c08658541b18727","SHA256":"40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b","SHA384":"f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"}},{"Subject":"C=US, ST=Texas, L=Austin, O=Advanced Micro Devices, Inc., OU=Digital ID Class 3 , Microsoft Software Validation v2, OU=Developer Systems Support, CN=Advanced Micro Devices, Inc.","ValidFrom":"2010-04-13 00:00:00","ValidTo":"2013-04-24 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"30ac31a0f3257e0b0cabcbadeba5534c","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"c57ab6c4a315c3e64b5f571ad90cc9ba","SHA1":"4d719c5e6fc053d4fbce935cde7bccae6d5df476","SHA256":"b48a4bfe89e6334cb2cdec4b69e68f86ddea6792cce7d04cfafb35cfef322d55","SHA384":"7e2cdde91aa8144c99ec10257cfd0b97f328be961eecd8fdf682f009db1d241f7159a61546fedcadc6d9c29ea64b715e"}}],"Signer":[{"SerialNumber":"30ac31a0f3257e0b0cabcbadeba5534c","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009,2 CA","Version":1}]}],"LoadsDespiteHVCI":"FALSE"},{"Company":"","Date":"","Description":"","FileVersion":"","Filename":"","MD5":"03c9d5f24fd65ad57de2d8a2c7960a70","MachineType":"I386","OriginalFilename":"","Product":"","ProductVersion":"","Publisher":"","SHA1":"e5bfb18f63fcfb7dc09b0292602112ea7837ef7a","SHA256":"33d7046a5d41f4010ad5df632577154ed223dac2ab0ca2da57dbf1724db45a57","Signature":"","Imphash":"30c0ed518c03fa46fa0bfe76f2db0e42","Authentihash":{"MD5":"f431c34b502d259aa61092efb68bea83","SHA1":"d4cb7f2539b32d0445dc1fb21c022e244fe8a7e7","SHA256":"cb3dd0482092eb019dc11797dcf09f69fb3f06330e1fba0047678b226b57c2cd"},"RichPEHeaderHash":{"MD5":"e05185bbeea3ae7160d3f3360a7ba693","SHA1":"f1d8734b79d02b2f2107bd538efe879ab3d12be2","SHA256":"502f51c76faf81cc365d9aaa0235137a67d05492ce5ec81ecdb62f097bc1d6d7"},"Sections":{".text":{"Entropy":6.452178872181208,"Virtual Size":"0x85e"},".rdata":{"Entropy":4.289115492033144,"Virtual Size":"0xd7"},".data":{"Entropy":3.0560579622127317,"Virtual Size":"0x58"},"INIT":{"Entropy":5.339345499877285,"Virtual Size":"0x2c2"},".reloc":{"Entropy":3.8816129331502913,"Virtual Size":"0xb8"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2007-10-11 03:52:30","InternalName":"","Copyright":"","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["IoDeleteDevice","IoDeleteSymbolicLink","RtlInitUnicodeString","IofCompleteRequest","IoCreateDevice","KeTickCount","DbgPrint","MmMapIoSpace","IoAllocateMdl","MmBuildMdlForNonPagedPool","MmMapLockedPages","MmUnmapIoSpace","MmUnmapLockedPages","IoCreateSymbolicLink","IoFreeMdl","WRITE_PORT_USHORT","WRITE_PORT_UCHAR","READ_PORT_ULONG","READ_PORT_USHORT","READ_PORT_UCHAR","HalGetBusDataByOffset","HalSetBusDataByOffset","WRITE_PORT_ULONG"],"Signatures":{},"LoadsDespiteHVCI":"TRUE"},{"Company":"Advanced Micro Devices","Date":"","Description":"AMD OverDrive Service Driver","FileVersion":"3.1.0 built by: WinDDK","Filename":"","MD5":"43ed1d08c19626688db34f63e55114fb","MachineType":"AMD64","OriginalFilename":"AODDriver.sys","Product":"AMD OverDrive Service Driver","ProductVersion":"3.1.0","Publisher":"","SHA1":"0f2fdfb249c260c892334e62ab77ac88fcb8b5e4","SHA256":"3c11dec1571253594d64619d8efc8c0212897be84a75a8646c578e665f58bf5d","Signature":"","Imphash":"7716b766e630388f64de1961719be3d4","Authentihash":{"MD5":"f3a6f467fb2f1a7f65285aa0e4d24990","SHA1":"fc8f64827ea4a6a787ea304f3dfc599ec1cd935a","SHA256":"2381e9fc518488f51e3ec49d5ca4e59d10727d20678067ca147e50b0c4294f9a"},"RichPEHeaderHash":{"MD5":"4b7abf8a2b876e7a0cfb31a545f93905","SHA1":"ea9e8b33f0974ee05802b3a4048bb4abd2338c1d","SHA256":"3e994a531dab8425b1e3a06f3b06b555cb68bed46665bb2c7ecdfbe0f8f1d76b"},"Sections":{".text":{"Entropy":5.509930238195589,"Virtual Size":"0x24ac"},".rdata":{"Entropy":3.889894025473051,"Virtual Size":"0x190"},".data":{"Entropy":1.2478157323570183,"Virtual Size":"0x184"},".pdata":{"Entropy":3.2784012760465573,"Virtual Size":"0x90"},"INIT":{"Entropy":4.922009201916293,"Virtual Size":"0x300"},".rsrc":{"Entropy":3.249834790290215,"Virtual Size":"0x3a8"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2009-09-02 22:41:48","InternalName":"AODDriver.sys","Copyright":"Copyright 2009 AMD, Inc.","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["MmBuildMdlForNonPagedPool","IoFreeMdl","MmMapIoSpace","IofCompleteRequest","IoCreateSymbolicLink","IoCreateDevice","MmAllocateContiguousMemorySpecifyCache","MmUnmapIoSpace","IoAllocateMdl","MmUnmapLockedPages","IoDeleteSymbolicLink","MmFreeContiguousMemorySpecifyCache","MmMapLockedPages","KeBugCheckEx","IoDeleteDevice","DbgPrint","RtlInitUnicodeString","HalSetBusDataByOffset","HalGetBusDataByOffset"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer , G2","ValidFrom":"2007-06-15 00:00:00","ValidTo":"2012-06-14 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"3825d7faf861af9ef490e726b5d65ad5","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"d6c7684e9aaa508cf268335f83afe040","SHA1":"18066d20ad92409c567cdfde745279ff71c75226","SHA256":"a612fb22ce8be6dab75e47c98508f98496583e79c9c97b936a8caee9ea9f3fff","SHA384":"35c249d6ad0261a6229b2a727067ac6ba32a5d24b30b9249051f748c7735fbe2ec2ef26a702c50df1790fbe32a65aee7"}},{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA","ValidFrom":"2003-12-04 00:00:00","ValidTo":"2013-12-03 23:59:59","Signature":"4a6bf9ea58c2441c318979992b96bf82ac01d61c4ccdb08a586edf0829a35ec8ca9313e704520def47272f0038b0e4c9934e9ad4226215f73f37214f703180f18b3887b3e8e89700fecf55964e24d2a9274e7aaeb76141f32acee7c9d95eddbb2b853eb59db5d9e157ffbeb4c57ef5cf0c9ef097fe2bd33b521b1b3827f73f4a","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"47bf1995df8d524643f7db6d480d31a4","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"518d2ea8a21e879c942d504824ac211c","SHA1":"21ce87d827077e61abddf2beba69fde5432ea031","SHA256":"1ec3b4f02e03930a470020e0e48d24b84678bb558f46182888d870541f5e25c7","SHA384":"53e346bbde23779a5d116cc9d86fdd71c97b1f1b343439f8a11aa1d3c87af63864bb8488a5aeb2d0c26a6a1e0b15f03f"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)04, CN=VeriSign Class 3 Code Signing 2004 CA","ValidFrom":"2004-07-16 00:00:00","ValidTo":"2014-07-15 23:59:59","Signature":"ae3a17b84a7b55fa6455ec40a4ed494190999c89bcaf2e1dca7823f91c190f7feb68bc32d98838dedc3fd389b43fb18296f1a45abaed2e26d3de7c016e000a00a4069211480940f91c1879672324e0bbd5e150ae1bf50edde02e81cd80a36c524f9175558aba22f2d2ea4175882f63557d1e545a9559cad93481c05f5ef67ab5","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"4191a15a3978dfcf496566381d4c75c2","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"41011f8d0e7c7a6408334ca387914c61","SHA1":"c7fc1727f5b75a6421a1f95c73bbdb23580c48e5","SHA256":"88dd3952638ee82738c03168e6fd863fe4eab1059ee5e2926ad8cb587c255dc0","SHA384":"a00aa5ed457c41e37967882644d63366bae014f03a986576d8514164d7027acf7d0b5e03d764db2558f60db148954459"}},{"Subject":"C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority","ValidFrom":"2006-05-23 17:01:29","ValidTo":"2016-05-23 17:11:29","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"610c120600000000001b","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"53c41bc1164e09e0cd1617a5bf913efd","SHA1":"93c03aac8951d494ecd5696b1c08658541b18727","SHA256":"40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b","SHA384":"f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"}},{"Subject":"C=US, ST=Texas, L=Austin, O=Advanced Micro Devices, Inc., OU=Digital ID Class 3 , Microsoft Software Validation v2, OU=Developer Systems Support, CN=Advanced Micro Devices, Inc.","ValidFrom":"2009-03-16 00:00:00","ValidTo":"2010-04-25 23:59:59","Signature":"3e4ab0d305f4d1d51e1a4a3eb11333809b402b73d0aa7b85bf2441dca235e6dc1593ca4911caf8aa005d7354f3cc77ac4772753a326000c07fd110d3fa9f54780f2e1c22b092015b05399db9f8267bfa686a7663d7ca7e9ac2d918fbbed2be29d33295267ffb0c4f8ace264c25d2c3f3a60bf9cc43b37790a15f3285bb0c10d2043be5cd9cf4714bb4a56e2450400d1cf82271da5ff3302441ce1cadcc90892ebd42b4b927275afe95e0ef51cb3f1e5c6556ae2a64711476add0f6d4d152660a7fdcd1000ab8945d080512dbe34198d8f71357435e432878a202749b8b175d91b610893f8051385964f6dd57aaa7682d6ecc807264cb3028f4aaf0d7764f42ba","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"08b96c67a275ff544980bbc72a39a6d1","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"0e3acf9c17f4e2159356533e5a841b34","SHA1":"ecdc54b7d61942d3eaf86be64af4f9837f4f90dd","SHA256":"651f3eea445efd8ad06dc1e7e6b795ae44ca4e10818de60ce2e44e19a38934ae","SHA384":"901a764d8606471e7e40fbc4397021712e80be985a0fa87743aab684ad5344cfb7508c862029263395075e082f3716c1"}}],"Signer":[{"SerialNumber":"08b96c67a275ff544980bbc72a39a6d1","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)04, CN=VeriSign Class 3 Code Signing 2004 CA","Version":1}]}],"LoadsDespiteHVCI":"FALSE"},{"Company":"","Date":"","Description":"","FileVersion":"","Filename":"","MD5":"1a6e12c2d11e208bdf72a8962120fae7","MachineType":"AMD64","OriginalFilename":"","Product":"","ProductVersion":"","Publisher":"","SHA1":"17d28a90ef4d3dbb083371f99943ff938f3b39f6","SHA256":"478bcb750017cb6541f3dd0d08a47370f3c92eec998bc3825b5d8e08ee831b70","Signature":"","Imphash":"cb8397a3262c80b558aff93ab75b6a7b","Authentihash":{"MD5":"b5d2eb2549f75a4a1ced7a0df90fb96e","SHA1":"9a329362e340fc8363e67fb5f23a8391cb83bf00","SHA256":"ffd548833a96c2c5f8410b22fc110d10b36a47eb0b16b3d2e7edb82c3cabf97b"},"RichPEHeaderHash":{"MD5":"66fe3419e37146017c0136838261ae2e","SHA1":"39b5dd38cef5d8d3c26653e09ab8d05f33356d7d","SHA256":"f5d27359070c7e45be06e3694e8c1b0da1a227c12d2057af063c9efc6c781a69"},"Sections":{".text":{"Entropy":6.45699898094285,"Virtual Size":"0x11bc"},".rdata":{"Entropy":4.115325486972536,"Virtual Size":"0x174"},".data":{"Entropy":1.2099429743974393,"Virtual Size":"0x170"},".pdata":{"Entropy":3.098579861712073,"Virtual Size":"0x48"},"INIT":{"Entropy":4.910053868611627,"Virtual Size":"0x300"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2008-10-13 00:38:55","InternalName":"","Copyright":"","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["MmMapIoSpace","IofCompleteRequest","IoCreateSymbolicLink","IoCreateDevice","MmAllocateContiguousMemorySpecifyCache","DbgPrint","IoAllocateMdl","IoFreeMdl","IoDeleteSymbolicLink","MmFreeContiguousMemorySpecifyCache","MmMapLockedPages","RtlInitUnicodeString","IoDeleteDevice","KeBugCheckEx","MmBuildMdlForNonPagedPool","MmUnmapLockedPages","MmUnmapIoSpace","HalSetBusDataByOffset","HalGetBusDataByOffset"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer , G2","ValidFrom":"2007-06-15 00:00:00","ValidTo":"2012-06-14 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"3825d7faf861af9ef490e726b5d65ad5","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"d6c7684e9aaa508cf268335f83afe040","SHA1":"18066d20ad92409c567cdfde745279ff71c75226","SHA256":"a612fb22ce8be6dab75e47c98508f98496583e79c9c97b936a8caee9ea9f3fff","SHA384":"35c249d6ad0261a6229b2a727067ac6ba32a5d24b30b9249051f748c7735fbe2ec2ef26a702c50df1790fbe32a65aee7"}},{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA","ValidFrom":"2003-12-04 00:00:00","ValidTo":"2013-12-03 23:59:59","Signature":"4a6bf9ea58c2441c318979992b96bf82ac01d61c4ccdb08a586edf0829a35ec8ca9313e704520def47272f0038b0e4c9934e9ad4226215f73f37214f703180f18b3887b3e8e89700fecf55964e24d2a9274e7aaeb76141f32acee7c9d95eddbb2b853eb59db5d9e157ffbeb4c57ef5cf0c9ef097fe2bd33b521b1b3827f73f4a","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"47bf1995df8d524643f7db6d480d31a4","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"518d2ea8a21e879c942d504824ac211c","SHA1":"21ce87d827077e61abddf2beba69fde5432ea031","SHA256":"1ec3b4f02e03930a470020e0e48d24b84678bb558f46182888d870541f5e25c7","SHA384":"53e346bbde23779a5d116cc9d86fdd71c97b1f1b343439f8a11aa1d3c87af63864bb8488a5aeb2d0c26a6a1e0b15f03f"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)04, CN=VeriSign Class 3 Code Signing 2004 CA","ValidFrom":"2004-07-16 00:00:00","ValidTo":"2014-07-15 23:59:59","Signature":"ae3a17b84a7b55fa6455ec40a4ed494190999c89bcaf2e1dca7823f91c190f7feb68bc32d98838dedc3fd389b43fb18296f1a45abaed2e26d3de7c016e000a00a4069211480940f91c1879672324e0bbd5e150ae1bf50edde02e81cd80a36c524f9175558aba22f2d2ea4175882f63557d1e545a9559cad93481c05f5ef67ab5","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"4191a15a3978dfcf496566381d4c75c2","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"41011f8d0e7c7a6408334ca387914c61","SHA1":"c7fc1727f5b75a6421a1f95c73bbdb23580c48e5","SHA256":"88dd3952638ee82738c03168e6fd863fe4eab1059ee5e2926ad8cb587c255dc0","SHA384":"a00aa5ed457c41e37967882644d63366bae014f03a986576d8514164d7027acf7d0b5e03d764db2558f60db148954459"}},{"Subject":"C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority","ValidFrom":"2006-05-23 17:01:29","ValidTo":"2016-05-23 17:11:29","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"610c120600000000001b","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"53c41bc1164e09e0cd1617a5bf913efd","SHA1":"93c03aac8951d494ecd5696b1c08658541b18727","SHA256":"40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b","SHA384":"f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"}},{"Subject":"C=US, ST=Texas, L=Austin, O=Advanced Micro Devices, Inc., OU=Digital ID Class 3 , Microsoft Software Validation v2, OU=Developer Systems Support, CN=Advanced Micro Devices, Inc.","ValidFrom":"2008-03-25 00:00:00","ValidTo":"2009-04-25 23:59:59","Signature":"6759952967d6b966a479b5d2a71f4538e5b85fcfa2fcf6e928a38db964549ad6ec0145beaf8a60d003289cc5c008d516304fdcf4d12314b376b1cad8fe01df20303aa5f2c1bb66606dd559bb32dc457d3c8a964fe583a4f46988b88c290ee4b395ab74c6d899b1d977b84b1287452698dc17a8e525efd00f2d38815dd2f7219700843913aba313065892d5cfa46bf2bd9784e2c376baab05df21627f157f965b6d994fcf0200cc571055ceb574105dced576de506934972f1f05228a14945e892440094792c5fd1eea9cfaf9f47c9891a39b449e6eee76e63ac9ce69d683ad0eaa75874cbf1b733eb96567e3942282496cf711ca6fa358b4304f859023f3c305","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"19201e5ae135ce9c8c77ce0c7b8aca13","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"c3e7ab8689bcb94bf19962ac62d0b128","SHA1":"819ee906219f1a26914b21966f8786e3bff26d27","SHA256":"1f89c47ace545ddf40ab216be9421ee28f41454971765b10ec44bb6a9f64b517","SHA384":"8a0821981d0234783a635d480ae4c02c91ef91a03fd6f397692d93af21a9895124c7e900a23a9feab53d7700828be654"}}],"Signer":[{"SerialNumber":"19201e5ae135ce9c8c77ce0c7b8aca13","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)04, CN=VeriSign Class 3 Code Signing 2004 CA","Version":1}]}],"LoadsDespiteHVCI":"FALSE"},{"Company":"","Date":"","Description":"","FileVersion":"","Filename":"","MD5":"21ca6a013a75fcf6f930d4b08803973a","MachineType":"I386","OriginalFilename":"","Product":"","ProductVersion":"","Publisher":"","SHA1":"b3b523504af5228c49060ec8dea9f8adce05e117","SHA256":"49ae47b6b4d5e1b791b89e0395659d42a29a79c3e6ec52cbfcb9f9cef857a9dd","Signature":"","Imphash":"7f8c74638fcf297f8216aa5b184f61d6","Authentihash":{"MD5":"da65f47b65a05396e9d3e53872af5b50","SHA1":"4a726544ef24840f38af646c3f1609e51f42c7d8","SHA256":"d033f5c0a764aa7ecff779cf7fe13140d7d8eb1645dd212f408ed2fa119e3b47"},"RichPEHeaderHash":{"MD5":"7b6e9fff0c17beb2de05b732b6800597","SHA1":"f045b276f6d77d8ca42c76f8335e63835aa85297","SHA256":"5172569455079adb7c446a73d81b19b5e885fed04154be7e0ef45373c1326831"},"Sections":{".text":{"Entropy":6.3442987839687275,"Virtual Size":"0xc9a"},".rdata":{"Entropy":4.401680420662313,"Virtual Size":"0xed"},".data":{"Entropy":2.9823054054437197,"Virtual Size":"0x58"},"INIT":{"Entropy":5.374480349290966,"Virtual Size":"0x344"},".reloc":{"Entropy":4.499060646383309,"Virtual Size":"0xe8"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2008-10-13 00:42:32","InternalName":"","Copyright":"","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["MmMapIoSpace","IofCompleteRequest","DbgPrint","memcpy","_allmul","MmUnmapIoSpace","IoDeleteSymbolicLink","RtlInitUnicodeString","IoCreateSymbolicLink","IoCreateDevice","KeTickCount","memset","MmAllocateContiguousMemorySpecifyCache","IoAllocateMdl","MmBuildMdlForNonPagedPool","MmMapLockedPages","MmUnmapLockedPages","IoFreeMdl","IoDeleteDevice","MmFreeContiguousMemorySpecifyCache","WRITE_PORT_ULONG","WRITE_PORT_USHORT","WRITE_PORT_UCHAR","READ_PORT_ULONG","READ_PORT_USHORT","READ_PORT_UCHAR","HalSetBusDataByOffset","HalGetBusDataByOffset"],"Signatures":{},"LoadsDespiteHVCI":"TRUE"},{"Company":"","Date":"","Description":"","FileVersion":"","Filename":"","MD5":"f160ecce1500a5a5877c123584e86b17","MachineType":"AMD64","OriginalFilename":"","Product":"","ProductVersion":"","Publisher":"","SHA1":"dda8c7e852fe07d67c110dab163354a2a85f44a5","SHA256":"4ace6dded819e87f3686af2006cb415ed75554881a28c54de606975c41975112","Signature":"","Imphash":"cb8397a3262c80b558aff93ab75b6a7b","Authentihash":{"MD5":"b5d2eb2549f75a4a1ced7a0df90fb96e","SHA1":"9a329362e340fc8363e67fb5f23a8391cb83bf00","SHA256":"ffd548833a96c2c5f8410b22fc110d10b36a47eb0b16b3d2e7edb82c3cabf97b"},"RichPEHeaderHash":{"MD5":"66fe3419e37146017c0136838261ae2e","SHA1":"39b5dd38cef5d8d3c26653e09ab8d05f33356d7d","SHA256":"f5d27359070c7e45be06e3694e8c1b0da1a227c12d2057af063c9efc6c781a69"},"Sections":{".text":{"Entropy":6.45699898094285,"Virtual Size":"0x11bc"},".rdata":{"Entropy":4.115325486972536,"Virtual Size":"0x174"},".data":{"Entropy":1.2099429743974393,"Virtual Size":"0x170"},".pdata":{"Entropy":3.098579861712073,"Virtual Size":"0x48"},"INIT":{"Entropy":4.910053868611627,"Virtual Size":"0x300"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2008-10-13 00:38:55","InternalName":"","Copyright":"","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["MmMapIoSpace","IofCompleteRequest","IoCreateSymbolicLink","IoCreateDevice","MmAllocateContiguousMemorySpecifyCache","DbgPrint","IoAllocateMdl","IoFreeMdl","IoDeleteSymbolicLink","MmFreeContiguousMemorySpecifyCache","MmMapLockedPages","RtlInitUnicodeString","IoDeleteDevice","KeBugCheckEx","MmBuildMdlForNonPagedPool","MmUnmapLockedPages","MmUnmapIoSpace","HalSetBusDataByOffset","HalGetBusDataByOffset"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer , G2","ValidFrom":"2007-06-15 00:00:00","ValidTo":"2012-06-14 23:59:59","Signature":"50c54bc82480dfe40d24c2de1ab1a102a1a6822d0c831581370a820e2cb05a1761b5d805fe88dbf19191b3561a40a6eb92be3839b07536743a984fe437ba9989ca95421db0b9c7a08d57e0fad5640442354e01d133a217c84daa27c7f2e1864c02384d8378c6fc53e0ebe00687dda4969e5e0c98e2a5bebf8285c360e1dfad28d8c7a54b64dac71b5bbdac3908d53822a1338b2f8a9aebbc07213f44410907b5651c24bc48d34480eba1cfc902b414cf54c716a3805cf9793e5d727d88179e2c43a2ca53ce7d3df62a3ab84f9400a56d0a835df95e53f418b3570f70c3fbf5ad95a00e17dec4168060c90f2b6e8604f1ebf47827d105c5ee345b5eb94932f233","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"3825d7faf861af9ef490e726b5d65ad5","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"d6c7684e9aaa508cf268335f83afe040","SHA1":"18066d20ad92409c567cdfde745279ff71c75226","SHA256":"a612fb22ce8be6dab75e47c98508f98496583e79c9c97b936a8caee9ea9f3fff","SHA384":"35c249d6ad0261a6229b2a727067ac6ba32a5d24b30b9249051f748c7735fbe2ec2ef26a702c50df1790fbe32a65aee7"}},{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA","ValidFrom":"2003-12-04 00:00:00","ValidTo":"2013-12-03 23:59:59","Signature":"4a6bf9ea58c2441c318979992b96bf82ac01d61c4ccdb08a586edf0829a35ec8ca9313e704520def47272f0038b0e4c9934e9ad4226215f73f37214f703180f18b3887b3e8e89700fecf55964e24d2a9274e7aaeb76141f32acee7c9d95eddbb2b853eb59db5d9e157ffbeb4c57ef5cf0c9ef097fe2bd33b521b1b3827f73f4a","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"47bf1995df8d524643f7db6d480d31a4","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"518d2ea8a21e879c942d504824ac211c","SHA1":"21ce87d827077e61abddf2beba69fde5432ea031","SHA256":"1ec3b4f02e03930a470020e0e48d24b84678bb558f46182888d870541f5e25c7","SHA384":"53e346bbde23779a5d116cc9d86fdd71c97b1f1b343439f8a11aa1d3c87af63864bb8488a5aeb2d0c26a6a1e0b15f03f"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)04, CN=VeriSign Class 3 Code Signing 2004 CA","ValidFrom":"2004-07-16 00:00:00","ValidTo":"2014-07-15 23:59:59","Signature":"ae3a17b84a7b55fa6455ec40a4ed494190999c89bcaf2e1dca7823f91c190f7feb68bc32d98838dedc3fd389b43fb18296f1a45abaed2e26d3de7c016e000a00a4069211480940f91c1879672324e0bbd5e150ae1bf50edde02e81cd80a36c524f9175558aba22f2d2ea4175882f63557d1e545a9559cad93481c05f5ef67ab5","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"4191a15a3978dfcf496566381d4c75c2","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"41011f8d0e7c7a6408334ca387914c61","SHA1":"c7fc1727f5b75a6421a1f95c73bbdb23580c48e5","SHA256":"88dd3952638ee82738c03168e6fd863fe4eab1059ee5e2926ad8cb587c255dc0","SHA384":"a00aa5ed457c41e37967882644d63366bae014f03a986576d8514164d7027acf7d0b5e03d764db2558f60db148954459"}},{"Subject":"C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority","ValidFrom":"2006-05-23 17:01:29","ValidTo":"2016-05-23 17:11:29","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"610c120600000000001b","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"53c41bc1164e09e0cd1617a5bf913efd","SHA1":"93c03aac8951d494ecd5696b1c08658541b18727","SHA256":"40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b","SHA384":"f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"}},{"Subject":"C=US, ST=Texas, L=Austin, O=Advanced Micro Devices, Inc., OU=Digital ID Class 3 , Microsoft Software Validation v2, OU=Developer Systems Support, CN=Advanced Micro Devices, Inc.","ValidFrom":"2008-03-25 00:00:00","ValidTo":"2009-04-25 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"19201e5ae135ce9c8c77ce0c7b8aca13","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"c3e7ab8689bcb94bf19962ac62d0b128","SHA1":"819ee906219f1a26914b21966f8786e3bff26d27","SHA256":"1f89c47ace545ddf40ab216be9421ee28f41454971765b10ec44bb6a9f64b517","SHA384":"8a0821981d0234783a635d480ae4c02c91ef91a03fd6f397692d93af21a9895124c7e900a23a9feab53d7700828be654"}}],"Signer":[{"SerialNumber":"19201e5ae135ce9c8c77ce0c7b8aca13","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)04, CN=VeriSign Class 3 Code Signing 2004 CA","Version":1}]}],"LoadsDespiteHVCI":"FALSE"},{"Company":"Advanced Micro Devices","Date":"","Description":"AMD OverDrive Service Driver","FileVersion":"3.1.0 built by: WinDDK","Filename":"","MD5":"b934322c68c30dceca96c0274a51f7b0","MachineType":"AMD64","OriginalFilename":"AODDriver.sys","Product":"AMD OverDrive Service Driver","ProductVersion":"3.1.0","Publisher":"","SHA1":"18938e0d924ee7c0febdbf2676a099e828182c1c","SHA256":"5a0b10a9e662a0b0eeb951ffd2a82cc71d30939a78daebd26b3f58bb24351ac9","Signature":"","Imphash":"7f53340c91c108efedb5b8678c5207b3","Authentihash":{"MD5":"bc5b3e62168d06b6581755afd6fd4f5d","SHA1":"01c9d8a69065cbc8aba2d00ed69628e3b847b167","SHA256":"129bfa559bde499f748cffc218f2b7ec4b22ee3114ceae8e386fbbe4e58e4523"},"RichPEHeaderHash":{"MD5":"0155d1c1b94fe61e7564fe4047feb613","SHA1":"84da935966036af991bb9e5f9ea6b4e73fad9c57","SHA256":"e396b4c3a0494aea766275eecb482347acd598e904ef6e2963f34aa3061afc24"},"Sections":{".text":{"Entropy":5.979993977618507,"Virtual Size":"0x7243"},".rdata":{"Entropy":4.440197935949107,"Virtual Size":"0x7b4"},".data":{"Entropy":1.6792243032035326,"Virtual Size":"0x209e8"},".pdata":{"Entropy":4.53127514673866,"Virtual Size":"0x3fc"},"PAGE":{"Entropy":6.249029457903788,"Virtual Size":"0x19f7"},"INIT":{"Entropy":5.244528886331704,"Virtual Size":"0x66c"},".rsrc":{"Entropy":3.2616129475774747,"Virtual Size":"0x3a8"},".reloc":{"Entropy":1.2072398645622462,"Virtual Size":"0x60"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2010-03-04 05:58:24","InternalName":"AODDriver.sys","Copyright":"Copyright 2009 AMD, Inc.","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["MmMapLockedPages","MmUnmapIoSpace","MmBuildMdlForNonPagedPool","IoFreeMdl","MmMapIoSpace","ExAllocatePoolWithTag","ExFreePoolWithTag","MmUnmapLockedPages","RtlInitUnicodeString","IoDeleteDevice","KeEnterCriticalRegion","IofCompleteRequest","IoCreateSymbolicLink","IoDeleteSymbolicLink","KeLeaveCriticalRegion","KeBugCheckEx","IoAllocateMdl","DbgPrint","strncmp","MmGetSystemRoutineAddress","IoCreateDevice","ZwClose","ObOpenObjectByPointer","ZwSetSecurityObject","IoDeviceObjectType","_snwprintf","RtlLengthSecurityDescriptor","SeCaptureSecurityDescriptor","RtlCreateSecurityDescriptor","RtlSetDaclSecurityDescriptor","RtlAbsoluteToSelfRelativeSD","IoIsWdmVersionAvailable","SeExports","wcschr","_wcsnicmp","RtlLengthSid","RtlAddAccessAllowedAce","RtlGetSaclSecurityDescriptor","RtlGetDaclSecurityDescriptor","RtlGetGroupSecurityDescriptor","RtlGetOwnerSecurityDescriptor","RtlFreeUnicodeString","ZwOpenKey","ZwCreateKey","ZwQueryValueKey","ZwSetValueKey","HalGetBusDataByOffset","HalSetBusDataByOffset","KeStallExecutionProcessor"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer , G2","ValidFrom":"2007-06-15 00:00:00","ValidTo":"2012-06-14 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"3825d7faf861af9ef490e726b5d65ad5","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"d6c7684e9aaa508cf268335f83afe040","SHA1":"18066d20ad92409c567cdfde745279ff71c75226","SHA256":"a612fb22ce8be6dab75e47c98508f98496583e79c9c97b936a8caee9ea9f3fff","SHA384":"35c249d6ad0261a6229b2a727067ac6ba32a5d24b30b9249051f748c7735fbe2ec2ef26a702c50df1790fbe32a65aee7"}},{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA","ValidFrom":"2003-12-04 00:00:00","ValidTo":"2013-12-03 23:59:59","Signature":"4a6bf9ea58c2441c318979992b96bf82ac01d61c4ccdb08a586edf0829a35ec8ca9313e704520def47272f0038b0e4c9934e9ad4226215f73f37214f703180f18b3887b3e8e89700fecf55964e24d2a9274e7aaeb76141f32acee7c9d95eddbb2b853eb59db5d9e157ffbeb4c57ef5cf0c9ef097fe2bd33b521b1b3827f73f4a","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"47bf1995df8d524643f7db6d480d31a4","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"518d2ea8a21e879c942d504824ac211c","SHA1":"21ce87d827077e61abddf2beba69fde5432ea031","SHA256":"1ec3b4f02e03930a470020e0e48d24b84678bb558f46182888d870541f5e25c7","SHA384":"53e346bbde23779a5d116cc9d86fdd71c97b1f1b343439f8a11aa1d3c87af63864bb8488a5aeb2d0c26a6a1e0b15f03f"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)04, CN=VeriSign Class 3 Code Signing 2004 CA","ValidFrom":"2004-07-16 00:00:00","ValidTo":"2014-07-15 23:59:59","Signature":"ae3a17b84a7b55fa6455ec40a4ed494190999c89bcaf2e1dca7823f91c190f7feb68bc32d98838dedc3fd389b43fb18296f1a45abaed2e26d3de7c016e000a00a4069211480940f91c1879672324e0bbd5e150ae1bf50edde02e81cd80a36c524f9175558aba22f2d2ea4175882f63557d1e545a9559cad93481c05f5ef67ab5","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"4191a15a3978dfcf496566381d4c75c2","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"41011f8d0e7c7a6408334ca387914c61","SHA1":"c7fc1727f5b75a6421a1f95c73bbdb23580c48e5","SHA256":"88dd3952638ee82738c03168e6fd863fe4eab1059ee5e2926ad8cb587c255dc0","SHA384":"a00aa5ed457c41e37967882644d63366bae014f03a986576d8514164d7027acf7d0b5e03d764db2558f60db148954459"}},{"Subject":"C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority","ValidFrom":"2006-05-23 17:01:29","ValidTo":"2016-05-23 17:11:29","Signature":"01e446b33b457f7513877e5f43de468ecb8abdb64741bccccc7491d8ce395195a4a6b547c0efd2da7b8f5711f4328c7ccd3fee42da04214af7c843884a6f5cca14fc4bd19f4cbdd4556ecc02be0da6888f8609baa425bde8b0f0fa8b714e67b0cb82a8d78e55f737ebf03e88efe4e08afd1c6e2e61414875b4b02c1d28d8490fd715f02473253ccc880cde284c6554fe5eae8cea19ad2c51b29b3a47f53c80350117e24987d6544afb4bab07bcbf7d79cfbf35005cbb9ecffc82891b39a05197b6dec0b307ff449644c0342a195cabeef03bec294eb513c537857e75d5b4d60d066eb5d26c237167eaf1718eaf4e74aa0cf9ecbf4c58fa5e909b6d39cb86883f8b1ca81632d5fe6db9f1f8b3ead791f6364778c0272a15c768d6f4c5fc4f4ec8673f102d409ff11ec96148e7a703fc31730cf04688fe56da492995ef09daa3e5beef60ecd954a0599c28bd54ef66157f874c84dba60e95672e517b3439b641c28c846826dc240209e7818e0a972defeea7b998a60f818dc710b5e1ed982f486f53854964789bec5dac970b5526c3efba8dc8d1a52f5a7f936b611a339b18b8a26210de24ea76e12f43ebecdd7c12342489da2855aee5754e312b6763b6a8d7ab730a03cec5ea593fc7eb2a45aea8625b2f009939abb45f73c308ec80118f470e8f2a1343e191066255bbffba3da9a93d260faeca7d628b155589d694344dd665","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"610c120600000000001b","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"53c41bc1164e09e0cd1617a5bf913efd","SHA1":"93c03aac8951d494ecd5696b1c08658541b18727","SHA256":"40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b","SHA384":"f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"}},{"Subject":"C=US, ST=Texas, L=Austin, O=Advanced Micro Devices, Inc., OU=Digital ID Class 3 , Microsoft Software Validation v2, OU=Developer Systems Support, CN=Advanced Micro Devices, Inc.","ValidFrom":"2009-03-16 00:00:00","ValidTo":"2010-04-25 23:59:59","Signature":"3e4ab0d305f4d1d51e1a4a3eb11333809b402b73d0aa7b85bf2441dca235e6dc1593ca4911caf8aa005d7354f3cc77ac4772753a326000c07fd110d3fa9f54780f2e1c22b092015b05399db9f8267bfa686a7663d7ca7e9ac2d918fbbed2be29d33295267ffb0c4f8ace264c25d2c3f3a60bf9cc43b37790a15f3285bb0c10d2043be5cd9cf4714bb4a56e2450400d1cf82271da5ff3302441ce1cadcc90892ebd42b4b927275afe95e0ef51cb3f1e5c6556ae2a64711476add0f6d4d152660a7fdcd1000ab8945d080512dbe34198d8f71357435e432878a202749b8b175d91b610893f8051385964f6dd57aaa7682d6ecc807264cb3028f4aaf0d7764f42ba","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"08b96c67a275ff544980bbc72a39a6d1","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"0e3acf9c17f4e2159356533e5a841b34","SHA1":"ecdc54b7d61942d3eaf86be64af4f9837f4f90dd","SHA256":"651f3eea445efd8ad06dc1e7e6b795ae44ca4e10818de60ce2e44e19a38934ae","SHA384":"901a764d8606471e7e40fbc4397021712e80be985a0fa87743aab684ad5344cfb7508c862029263395075e082f3716c1"}}],"Signer":[{"SerialNumber":"08b96c67a275ff544980bbc72a39a6d1","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)04, CN=VeriSign Class 3 Code Signing 2004 CA","Version":1}]}],"LoadsDespiteHVCI":"FALSE"},{"Company":"","Date":"","Description":"","FileVersion":"","Filename":"","MD5":"fe3fb6719e86481a3514ab9e00a55bcf","MachineType":"AMD64","OriginalFilename":"","Product":"","ProductVersion":"","Publisher":"","SHA1":"e8311ba74bc6b35b1171b81056d0148913b1d61c","SHA256":"5daa8fa3b5db2e6225a2effea41af95fe7ffc579550c4081c8028ed33bc023b8","Signature":"","Imphash":"7716b766e630388f64de1961719be3d4","Authentihash":{"MD5":"59bd50b9577bdfca5452e158725b96a1","SHA1":"3099e0d37fd0ee97738cf271bae3793a91b88382","SHA256":"5640179b9cffc3517d322ac2c0bc1258b563f65ebb1b67eb22ecf7f3a0500c7d"},"RichPEHeaderHash":{"MD5":"a0f0847c87019909402cfe54fcd1841b","SHA1":"29fa0c52693fa3116724916ca0406a83c944046c","SHA256":"bf0d703bd016cb194240c7e227262c9c5df925f3f6ba8edbde7263a8af4deb8c"},"Sections":{".text":{"Entropy":5.503715409035299,"Virtual Size":"0x252c"},".rdata":{"Entropy":3.9173848730896146,"Virtual Size":"0x190"},".data":{"Entropy":1.2478157323570183,"Virtual Size":"0x184"},".pdata":{"Entropy":3.3414996533186425,"Virtual Size":"0x90"},"INIT":{"Entropy":4.922009201916293,"Virtual Size":"0x300"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2009-03-18 03:59:35","InternalName":"","Copyright":"","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["MmBuildMdlForNonPagedPool","IoFreeMdl","MmMapIoSpace","IofCompleteRequest","IoCreateSymbolicLink","IoCreateDevice","MmAllocateContiguousMemorySpecifyCache","MmUnmapIoSpace","IoAllocateMdl","MmUnmapLockedPages","IoDeleteSymbolicLink","MmFreeContiguousMemorySpecifyCache","MmMapLockedPages","KeBugCheckEx","IoDeleteDevice","DbgPrint","RtlInitUnicodeString","HalSetBusDataByOffset","HalGetBusDataByOffset"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer , G2","ValidFrom":"2007-06-15 00:00:00","ValidTo":"2012-06-14 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"3825d7faf861af9ef490e726b5d65ad5","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"d6c7684e9aaa508cf268335f83afe040","SHA1":"18066d20ad92409c567cdfde745279ff71c75226","SHA256":"a612fb22ce8be6dab75e47c98508f98496583e79c9c97b936a8caee9ea9f3fff","SHA384":"35c249d6ad0261a6229b2a727067ac6ba32a5d24b30b9249051f748c7735fbe2ec2ef26a702c50df1790fbe32a65aee7"}},{"Subject":"C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA","ValidFrom":"2003-12-04 00:00:00","ValidTo":"2013-12-03 23:59:59","Signature":"4a6bf9ea58c2441c318979992b96bf82ac01d61c4ccdb08a586edf0829a35ec8ca9313e704520def47272f0038b0e4c9934e9ad4226215f73f37214f703180f18b3887b3e8e89700fecf55964e24d2a9274e7aaeb76141f32acee7c9d95eddbb2b853eb59db5d9e157ffbeb4c57ef5cf0c9ef097fe2bd33b521b1b3827f73f4a","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"47bf1995df8d524643f7db6d480d31a4","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"518d2ea8a21e879c942d504824ac211c","SHA1":"21ce87d827077e61abddf2beba69fde5432ea031","SHA256":"1ec3b4f02e03930a470020e0e48d24b84678bb558f46182888d870541f5e25c7","SHA384":"53e346bbde23779a5d116cc9d86fdd71c97b1f1b343439f8a11aa1d3c87af63864bb8488a5aeb2d0c26a6a1e0b15f03f"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)04, CN=VeriSign Class 3 Code Signing 2004 CA","ValidFrom":"2004-07-16 00:00:00","ValidTo":"2014-07-15 23:59:59","Signature":"ae3a17b84a7b55fa6455ec40a4ed494190999c89bcaf2e1dca7823f91c190f7feb68bc32d98838dedc3fd389b43fb18296f1a45abaed2e26d3de7c016e000a00a4069211480940f91c1879672324e0bbd5e150ae1bf50edde02e81cd80a36c524f9175558aba22f2d2ea4175882f63557d1e545a9559cad93481c05f5ef67ab5","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"4191a15a3978dfcf496566381d4c75c2","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"41011f8d0e7c7a6408334ca387914c61","SHA1":"c7fc1727f5b75a6421a1f95c73bbdb23580c48e5","SHA256":"88dd3952638ee82738c03168e6fd863fe4eab1059ee5e2926ad8cb587c255dc0","SHA384":"a00aa5ed457c41e37967882644d63366bae014f03a986576d8514164d7027acf7d0b5e03d764db2558f60db148954459"}},{"Subject":"C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority","ValidFrom":"2006-05-23 17:01:29","ValidTo":"2016-05-23 17:11:29","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"610c120600000000001b","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"53c41bc1164e09e0cd1617a5bf913efd","SHA1":"93c03aac8951d494ecd5696b1c08658541b18727","SHA256":"40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b","SHA384":"f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"}},{"Subject":"C=US, ST=Texas, L=Austin, O=Advanced Micro Devices, Inc., OU=Digital ID Class 3 , Microsoft Software Validation v2, OU=Developer Systems Support, CN=Advanced Micro Devices, Inc.","ValidFrom":"2008-03-25 00:00:00","ValidTo":"2009-04-25 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"19201e5ae135ce9c8c77ce0c7b8aca13","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"c3e7ab8689bcb94bf19962ac62d0b128","SHA1":"819ee906219f1a26914b21966f8786e3bff26d27","SHA256":"1f89c47ace545ddf40ab216be9421ee28f41454971765b10ec44bb6a9f64b517","SHA384":"8a0821981d0234783a635d480ae4c02c91ef91a03fd6f397692d93af21a9895124c7e900a23a9feab53d7700828be654"}}],"Signer":[{"SerialNumber":"19201e5ae135ce9c8c77ce0c7b8aca13","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)04, CN=VeriSign Class 3 Code Signing 2004 CA","Version":1}]}],"LoadsDespiteHVCI":"FALSE"},{"Company":"Advanced Micro Devices","Date":"","Description":"AMD OverDrive Service Driver","FileVersion":"3.1.0 built by: WinDDK","Filename":"","MD5":"0ad87bba19f0b71ccb2d32239abd49ec","MachineType":"I386","OriginalFilename":"AODDriver.sys","Product":"AMD OverDrive Service Driver","ProductVersion":"3.1.0","Publisher":"","SHA1":"e0ee5ea6693c26f21b143ef9b133f53efe443b1e","SHA256":"7a1105548bfc4b0a1b7b891cde0356d39b6633975cbcd0f2e2d8e31b3646d2ca","Signature":"","Imphash":"51ecd9b363fde1f003f4b4f20c874b1b","Authentihash":{"MD5":"7f337e0d90850309bb5bc8a847ee6336","SHA1":"fcbbd7b4d138e4f2c2a23c32437e96e87af2019a","SHA256":"84683c840af3440b8b40d34088ec852e092f882ca558409d8338f1f5f46d2741"},"RichPEHeaderHash":{"MD5":"bd7a01ea7c446f987bb6d13427a7dcbd","SHA1":"3ad11abd65ff30a08c2868c40adddffdabd7f59e","SHA256":"805c20389793e8dfe93d80e0305e1bb39c2244c17c311a5a24653c4f0ca3b0f3"},"Sections":{".text":{"Entropy":6.39180750596254,"Virtual Size":"0xe56"},".rdata":{"Entropy":4.418847616255422,"Virtual Size":"0x113"},".data":{"Entropy":2.9792814698224577,"Virtual Size":"0x64"},"INIT":{"Entropy":5.370857082848018,"Virtual Size":"0x344"},".rsrc":{"Entropy":3.2533017908220914,"Virtual Size":"0x3a8"},".reloc":{"Entropy":4.577010549473324,"Virtual Size":"0x102"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2009-08-31 02:17:54","InternalName":"AODDriver.sys","Copyright":"Copyright 2009 AMD, Inc.","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["MmMapIoSpace","IofCompleteRequest","DbgPrint","memcpy","_allmul","MmUnmapIoSpace","IoDeleteSymbolicLink","RtlInitUnicodeString","IoCreateSymbolicLink","IoCreateDevice","KeTickCount","memset","MmAllocateContiguousMemorySpecifyCache","IoAllocateMdl","MmBuildMdlForNonPagedPool","MmMapLockedPages","MmUnmapLockedPages","IoFreeMdl","IoDeleteDevice","MmFreeContiguousMemorySpecifyCache","WRITE_PORT_USHORT","WRITE_PORT_UCHAR","READ_PORT_USHORT","READ_PORT_UCHAR","HalSetBusDataByOffset","HalGetBusDataByOffset","READ_PORT_ULONG","WRITE_PORT_ULONG"],"Signatures":{},"LoadsDespiteHVCI":"TRUE"},{"Company":"Advanced Micro Devices","Date":"","Description":"AMD OverDrive Service Driver","FileVersion":"3.2.0 built by: WinDDK","Filename":"","MD5":"5bd30b502168013c9ea03a5c2f1c9776","MachineType":"I386","OriginalFilename":"AODDriver.sys","Product":"AMD OverDrive Service Driver","ProductVersion":"3.2.0","Publisher":"","SHA1":"7b4c922415e13deaf54bb2771f2ae30814ee1d14","SHA256":"81d54ebef1716e195955046ffded498a5a7e325bf83e7847893aa3b0b3776d05","Signature":"","Imphash":"2430f988dcdc3828f6079e1e2cc71dc8","Authentihash":{"MD5":"08641141599e00b60cf7f5b4f16c7410","SHA1":"c2e6ad05c0bcf694f024a3fc561dc987e4a28396","SHA256":"6fcb7131bc940fc01dc5444a1ae18bf299e92c3155a783629007cf2a61cda9db"},"RichPEHeaderHash":{"MD5":"2662aedd17c15379c7db511e8f9bd9e4","SHA1":"26f001ebeb7725509010d35a01c168c3823045ef","SHA256":"df0075725093273960a58e1f0d05ecb624b7ee6c84308d589ecc33516f359f44"},"Sections":{".text":{"Entropy":6.3339595908349065,"Virtual Size":"0x5928"},".rdata":{"Entropy":4.173164731434227,"Virtual Size":"0x403"},".data":{"Entropy":2.267399253551173,"Virtual Size":"0x20868"},"PAGE":{"Entropy":6.257618384310238,"Virtual Size":"0x13d3"},"INIT":{"Entropy":5.678310099271175,"Virtual Size":"0x65c"},".rsrc":{"Entropy":3.265297786841924,"Virtual Size":"0x3a8"},".reloc":{"Entropy":5.4358651010980035,"Virtual Size":"0x724"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2010-03-04 05:41:36","InternalName":"AODDriver.sys","Copyright":"Copyright 2010 AMD, Inc.","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["DbgPrint","memcpy","strncmp","ExFreePoolWithTag","ExAllocatePoolWithTag","IofCompleteRequest","KeLeaveCriticalRegion","KeEnterCriticalRegion","MmMapIoSpace","_aullshr","IoDeleteDevice","IoDeleteSymbolicLink","RtlInitUnicodeString","IoCreateSymbolicLink","KeTickCount","KeBugCheckEx","MmUnmapIoSpace","memset","IoAllocateMdl","MmBuildMdlForNonPagedPool","MmMapLockedPages","MmUnmapLockedPages","IoFreeMdl","_allshl","MmGetSystemRoutineAddress","ZwClose","ZwSetSecurityObject","ObOpenObjectByPointer","IoDeviceObjectType","IoCreateDevice","RtlGetDaclSecurityDescriptor","RtlGetSaclSecurityDescriptor","RtlGetGroupSecurityDescriptor","RtlGetOwnerSecurityDescriptor","_snwprintf","RtlLengthSecurityDescriptor","SeCaptureSecurityDescriptor","SeExports","IoIsWdmVersionAvailable","_wcsnicmp","RtlAddAccessAllowedAce","RtlLengthSid","wcschr","RtlAbsoluteToSelfRelativeSD","RtlSetDaclSecurityDescriptor","RtlCreateSecurityDescriptor","ZwOpenKey","ZwCreateKey","ZwQueryValueKey","ZwSetValueKey","RtlFreeUnicodeString","HalSetBusDataByOffset","KeStallExecutionProcessor","WRITE_PORT_USHORT","READ_PORT_USHORT","HalGetBusDataByOffset","READ_PORT_UCHAR","WRITE_PORT_UCHAR","WRITE_PORT_ULONG","READ_PORT_ULONG"],"Signatures":{},"LoadsDespiteHVCI":"TRUE"},{"Company":"","Date":"","Description":"","FileVersion":"","Filename":"","MD5":"c5b8e612360277ac70aa328432a99fd6","MachineType":"AMD64","OriginalFilename":"","Product":"","ProductVersion":"","Publisher":"","SHA1":"f5bafebfbfb67a022452870289ac7849e9ee1f61","SHA256":"8a982eed9cbc724d50a9ddf4f74ecbcd67b4fdcd9c2bb1795bc88c2d9caf7506","Signature":"","Imphash":"2d7766896629499b1484227afaf43dd7","Authentihash":{"MD5":"84420ea7b0d040aaaff4d2a2743a5eaf","SHA1":"23ac84bd285d1e6d2598b4eea65aac22015a76ef","SHA256":"79247cd973878500461753431f1528ed35e5f85a8978bf68ac211335ffcae27a"},"RichPEHeaderHash":{"MD5":"286a69fb620218141a9b16dad2b8cbce","SHA1":"861734a40513d6dc58092803d4f757788f54f1e5","SHA256":"37813c3a77f50a0b9f4a252dada342da204ad6a12289a34afc261f71b0260e41"},"Sections":{".text":{"Entropy":6.349610588453567,"Virtual Size":"0x9ac"},".rdata":{"Entropy":4.061114097772852,"Virtual Size":"0x14c"},".data":{"Entropy":1.2599999127892403,"Virtual Size":"0x164"},".pdata":{"Entropy":2.9347883731581965,"Virtual Size":"0x3c"},"INIT":{"Entropy":4.917368719792384,"Virtual Size":"0x2a0"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2007-10-11 02:26:50","InternalName":"","Copyright":"","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["IoCreateDevice","DbgPrint","IoAllocateMdl","MmUnmapLockedPages","IoDeleteSymbolicLink","MmMapLockedPages","IoCreateSymbolicLink","IoDeleteDevice","MmUnmapIoSpace","MmBuildMdlForNonPagedPool","IoFreeMdl","KeBugCheckEx","IofCompleteRequest","RtlInitUnicodeString","MmMapIoSpace","HalSetBusDataByOffset","HalGetBusDataByOffset"],"Signatures":{},"LoadsDespiteHVCI":"TRUE"},{"Company":"","Date":"","Description":"","FileVersion":"","Filename":"","MD5":"cd1c8a66e885b7a8b464094395566a46","MachineType":"I386","OriginalFilename":"","Product":"","ProductVersion":"","Publisher":"","SHA1":"1ab702c495cb7832d4cc1ff896277fa56ed8f30d","SHA256":"ef438a754fd940d145cc5d658ddac666a06871d71652b258946c21efe4b7e517","Signature":"","Imphash":"c1579e4266fbdc47a5abc493a2d9d597","Authentihash":{"MD5":"f398a5cf97cb3693c094d0c0560f4f5b","SHA1":"81282dd51b710f930a5f8d4da65521be1d06fc63","SHA256":"b0e2a4bf10a9428888e043fa40f7af74a963ed663c6bf4e2f136e39c41f606db"},"RichPEHeaderHash":{"MD5":"54b6a604b4251abf94808f2aef00530b","SHA1":"ce8e475ab534da3662b415b5fd8ba15fcae42644","SHA256":"1606453b435fa703e3a3629aeed9f4caa13e42d8195dbf02c61a65e44ecda37c"},"Sections":{".text":{"Entropy":5.8759004602052185,"Virtual Size":"0x19e8"},".rdata":{"Entropy":4.327608614099631,"Virtual Size":"0xec"},".data":{"Entropy":2.9823054054437197,"Virtual Size":"0x58"},"INIT":{"Entropy":5.352903638927322,"Virtual Size":"0x354"},".reloc":{"Entropy":5.003048441234915,"Virtual Size":"0x12e"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2008-08-25 05:01:19","InternalName":"","Copyright":"","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["MmMapIoSpace","IofCompleteRequest","DbgPrint","memcpy","_allshl","_aullshr","MmUnmapIoSpace","IoDeleteSymbolicLink","RtlInitUnicodeString","IoCreateSymbolicLink","IoCreateDevice","KeTickCount","memset","MmAllocateContiguousMemorySpecifyCache","IoAllocateMdl","MmBuildMdlForNonPagedPool","MmMapLockedPages","MmUnmapLockedPages","IoFreeMdl","IoDeleteDevice","MmFreeContiguousMemorySpecifyCache","READ_PORT_USHORT","READ_PORT_ULONG","WRITE_PORT_UCHAR","WRITE_PORT_USHORT","WRITE_PORT_ULONG","HalGetBusDataByOffset","HalSetBusDataByOffset","READ_PORT_UCHAR"],"Signatures":{},"LoadsDespiteHVCI":"TRUE"},{"Company":"Advanced Micro Devices","Date":"","Description":"AMD OverDrive Service Driver","FileVersion":"4.2.0 built by: WinDDK","Filename":"","MD5":"5f44a01ccc530b34051b9d0ccb5bb842","MachineType":"AMD64","OriginalFilename":"AODDriver2.sys","Product":"AMD OverDrive Service Driver","ProductVersion":"4.2.0","Publisher":"","SHA1":"c520a368c472869c3dc356a7bcfa88046352e4d9","SHA256":"f4dc11b7922bf2674ca9673638e7fe4e26aceb0ebdc528e6d10c8676e555d7b2","Signature":"","Imphash":"f119bff607049d431d0968fbaf6532f3","Authentihash":{"MD5":"3958bf0abbaf2cb70708bc790b89840a","SHA1":"7686074bc96fc23d94c2347c11fae073d86ac401","SHA256":"4ce5523dea824b2f2d4d442a9016d0f1b7cc52dce58a1740f4c43fd28e1c6dcb"},"RichPEHeaderHash":{"MD5":"99ea20d88305d842158e8ece088b2db5","SHA1":"524b29f6ff12bee8807cdd3bb9f3b24747442c69","SHA256":"fefa148316d60d3d1cb5312c3fae4714b60ba980573233f69c6bfe550121f16b"},"Sections":{".text":{"Entropy":5.998614310617645,"Virtual Size":"0x85b3"},".rdata":{"Entropy":4.472276868641076,"Virtual Size":"0x7e8"},".data":{"Entropy":2.0281268782469555,"Virtual Size":"0x20aa8"},".pdata":{"Entropy":4.554564217032994,"Virtual Size":"0x45c"},"PAGE":{"Entropy":6.24816999610764,"Virtual Size":"0x19f7"},"INIT":{"Entropy":5.236459840907012,"Virtual Size":"0x676"},".rsrc":{"Entropy":3.2685600262773464,"Virtual Size":"0x3b0"},".reloc":{"Entropy":1.2072398645622462,"Virtual Size":"0x60"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2012-11-21 02:47:09","InternalName":"AODDriver2.sys","Copyright":"Copyright © 2012 AMD, Inc.","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["KeDelayExecutionThread","MmMapLockedPagesSpecifyCache","MmMapIoSpace","MmUnmapLockedPages","DbgPrint","IoAllocateMdl","ExAllocatePoolWithTag","IoFreeMdl","strncmp","IoCreateSymbolicLink","IoDeleteSymbolicLink","KeLeaveCriticalRegion","RtlInitUnicodeString","IoDeleteDevice","KeEnterCriticalRegion","IofCompleteRequest","KeBugCheckEx","MmBuildMdlForNonPagedPool","ExFreePoolWithTag","MmUnmapIoSpace","MmGetSystemRoutineAddress","IoCreateDevice","ZwClose","ObOpenObjectByPointer","ZwSetSecurityObject","IoDeviceObjectType","_snwprintf","RtlLengthSecurityDescriptor","SeCaptureSecurityDescriptor","RtlCreateSecurityDescriptor","RtlSetDaclSecurityDescriptor","RtlAbsoluteToSelfRelativeSD","IoIsWdmVersionAvailable","SeExports","wcschr","_wcsnicmp","RtlLengthSid","RtlAddAccessAllowedAce","RtlGetSaclSecurityDescriptor","RtlGetDaclSecurityDescriptor","RtlGetGroupSecurityDescriptor","RtlGetOwnerSecurityDescriptor","RtlFreeUnicodeString","ZwOpenKey","ZwCreateKey","ZwQueryValueKey","ZwSetValueKey","HalSetBusDataByOffset","HalGetBusDataByOffset"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA , G2","ValidFrom":"2012-12-21 00:00:00","ValidTo":"2020-12-30 23:59:59","Signature":"03099b8f79ef7f5930aaef68b5fae3091dbb4f82065d375fa6529f168dea1c9209446ef56deb587c30e8f9698d23730b126f47a9ae3911f82ab19bb01ac38eeb599600adce0c4db2d031a6085c2a7afce27a1d574ca86518e979406225966ec7c7376a8321088e41eaddd9573f1d7749872a16065ea6386a2212a35119837eb6","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"7e93ebfb7cc64e59ea4b9a77d406fc3b","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"d0785ad36e427c92b19f6826ab1e8020","SHA1":"365b7a9c21bd9373e49052c3e7b3e4646ddd4d43","SHA256":"c2abb7484da91a658548de089d52436175fdb760a1387d225611dc0613a1e2ff","SHA384":"eab4fe5ef90e0de4a6aa3a27769a5e879f588df5e4785aa4104debd1f81e19ea56d33e3a16e5facf99f68b5d8e3d287b"}},{"Subject":"C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer , G4","ValidFrom":"2012-10-18 00:00:00","ValidTo":"2020-12-29 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"0ecff438c8febf356e04d86a981b1a50","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"e9d38360b914c8863f6cba3ee58764d3","SHA1":"4cba8eae47b6bf76f20b3504b98b8f062694a89b","SHA256":"88901d86a4cc1f1bb193d08e1fb63d27452e63f83e228c657ab1a92e4ade3976","SHA384":"e9f2a75334a9e336c5a4712eadee88d0374b0fdc273262f4e65c9040ad2793067cc076696db5279a478773485e285652"}},{"Subject":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009,2 CA","ValidFrom":"2009-05-21 00:00:00","ValidTo":"2019-05-20 23:59:59","Signature":"8b03c0dd94d841a26169b015a878c730c6903c7e42f724b6e4837317047f04109ca1e2fa812febc0ca44e772e050b6551020836e9692e49a516ab43731dca52deb8c00c71d4fe74d32ba85f84ebefa675565f06abe7aca64381a101078457631f3867a030f60c2b35d9df68b6676821b59e183e5bd49a53856e5de41770e580f","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"655226e1b22e18e1590f2985ac22e75c","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"650704c342850095f3288eaf791147d4","SHA1":"4cdc38c800761463749c3cbd94a12f32e49877bf","SHA256":"07b8f662558ec85b71b43a79c6e94698144f4ced2308af21e7ba1e5d461da214","SHA384":"2a271d052213438467d09d60eaa4010c8642fff3eb0070e0cf9969428713c8fdc066b90996d594dd3136f5bd0af5a22a"}},{"Subject":"C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority","ValidFrom":"2006-05-23 17:01:29","ValidTo":"2016-05-23 17:11:29","Signature":"01e446b33b457f7513877e5f43de468ecb8abdb64741bccccc7491d8ce395195a4a6b547c0efd2da7b8f5711f4328c7ccd3fee42da04214af7c843884a6f5cca14fc4bd19f4cbdd4556ecc02be0da6888f8609baa425bde8b0f0fa8b714e67b0cb82a8d78e55f737ebf03e88efe4e08afd1c6e2e61414875b4b02c1d28d8490fd715f02473253ccc880cde284c6554fe5eae8cea19ad2c51b29b3a47f53c80350117e24987d6544afb4bab07bcbf7d79cfbf35005cbb9ecffc82891b39a05197b6dec0b307ff449644c0342a195cabeef03bec294eb513c537857e75d5b4d60d066eb5d26c237167eaf1718eaf4e74aa0cf9ecbf4c58fa5e909b6d39cb86883f8b1ca81632d5fe6db9f1f8b3ead791f6364778c0272a15c768d6f4c5fc4f4ec8673f102d409ff11ec96148e7a703fc31730cf04688fe56da492995ef09daa3e5beef60ecd954a0599c28bd54ef66157f874c84dba60e95672e517b3439b641c28c846826dc240209e7818e0a972defeea7b998a60f818dc710b5e1ed982f486f53854964789bec5dac970b5526c3efba8dc8d1a52f5a7f936b611a339b18b8a26210de24ea76e12f43ebecdd7c12342489da2855aee5754e312b6763b6a8d7ab730a03cec5ea593fc7eb2a45aea8625b2f009939abb45f73c308ec80118f470e8f2a1343e191066255bbffba3da9a93d260faeca7d628b155589d694344dd665","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"610c120600000000001b","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"53c41bc1164e09e0cd1617a5bf913efd","SHA1":"93c03aac8951d494ecd5696b1c08658541b18727","SHA256":"40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b","SHA384":"f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"}},{"Subject":"C=US, ST=Texas, L=Austin, O=Advanced Micro Devices, Inc., OU=Digital ID Class 3 , Microsoft Software Validation v2, OU=Developer Systems Support, CN=Advanced Micro Devices, Inc.","ValidFrom":"2010-04-13 00:00:00","ValidTo":"2013-04-24 23:59:59","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"30ac31a0f3257e0b0cabcbadeba5534c","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"c57ab6c4a315c3e64b5f571ad90cc9ba","SHA1":"4d719c5e6fc053d4fbce935cde7bccae6d5df476","SHA256":"b48a4bfe89e6334cb2cdec4b69e68f86ddea6792cce7d04cfafb35cfef322d55","SHA384":"7e2cdde91aa8144c99ec10257cfd0b97f328be961eecd8fdf682f009db1d241f7159a61546fedcadc6d9c29ea64b715e"}}],"Signer":[{"SerialNumber":"30ac31a0f3257e0b0cabcbadeba5534c","Issuer":"C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009,2 CA","Version":1}]}],"LoadsDespiteHVCI":"FALSE"}]}