{"Id":"b8339454-0e84-4a5b-92d0-6a626ced6677","Tags":["ngiodriver.sys"],"Verified":"TRUE","Author":"Takahiro Haruyama","Created":"2023-11-02","MitreID":"T1068","Category":"vulnerable driver","Commands":{"Command":"sc.exe create ngiodriversys binPath= C:\\windows\\temp\\ngiodriversys.sys type=kernel && sc.exe start ngiodriversys","Description":"The Carbon Black Threat Analysis Unit (TAU) discovered 34 unique vulnerable drivers (237 file hashes) accepting firmware access. Six allow kernel memory access. All give full control of the devices to non-admin users. By exploiting the vulnerable drivers, an attacker without the system privilege may erase/alter firmware, and/or elevate privileges. As of the time of writing in October 2023, the filenames of the vulnerable drivers have not been made public until now.","OperatingSystem":"Windows 10","Privileges":"kernel","Usecase":"Elevate privileges"},"Resources":["https://blogs.vmware.com/security/2023/10/hunting-vulnerable-kernel-drivers.html"],"Detection":[{"type":"yara_signature","value":"https://github.com/magicsword-io/LOLDrivers/blob/main/detections/yara/yara-rules_vuln_drivers_strict_renamed.yar"},{"type":"sigma_hash","value":"https://github.com/magicsword-io/LOLDrivers/blob/main/detections/sigma/driver_load_win_vuln_drivers.yml"},{"type":"sigma_names","value":"https://github.com/magicsword-io/LOLDrivers/blob/main/detections/sigma/driver_load_win_vuln_drivers_names.yml"},{"type":"sysmon_hash_detect","value":"https://github.com/magicsword-io/LOLDrivers/blob/main/detections/sysmon/sysmon_config_vulnerable_hashes.xml"},{"type":"sysmon_hash_block","value":"https://github.com/magicsword-io/LOLDrivers/blob/main/detections/sysmon/sysmon_config_vulnerable_hashes_block.xml"}],"Acknowledgement":{"Handle":"","Person":""},"KnownVulnerableSamples":[{"Company":"AVAST Software","Date":"","Description":"avast! NG setup helper driver","FileVersion":"10.0.0.1126","Filename":"","MD5":"55cd6b46ac25bbe01245f2270a0d6cb8","MachineType":"I386","OriginalFilename":"ngiodriver.sys","Product":"avast! NG","ProductVersion":"10.0.0.1126","Publisher":"","SHA1":"004d9353f334e42c79a12c3a31785a96f330bbef","SHA256":"1072beb3ff6b191b3df1a339e3a8c87a8dc5eae727f2b993ea51b448e837636a","Signature":"","Imphash":"77d6a7153b3015318622b793227fb394","Authentihash":{"MD5":"d26fd7449ea970328d9031e1e47268cc","SHA1":"c460bb927c2280514e0fb6b338d4a3c17f6b6cb6","SHA256":"bcaeac1a4a51b210bfc5ebdb6f797797299a171e0b6d50aa8f9bcdb45a51d629"},"RichPEHeaderHash":{"MD5":"d03ce7f3d8a2783451f05b4403d9604d","SHA1":"0fdce12b0545eb789a7b5b4f0a5252e2c00ed751","SHA256":"dc268a553b869447a30f54911700122d2852afeaaa6baa3f861a88805a6133b4"},"Sections":{".text":{"Entropy":6.056939913721446,"Virtual Size":"0x71e"},".rdata":{"Entropy":3.9101123432270892,"Virtual Size":"0x184"},".data":{"Entropy":2.709147917027245,"Virtual Size":"0x18"},"INIT":{"Entropy":5.107139443195506,"Virtual Size":"0x1fa"},".rsrc":{"Entropy":3.325570857263718,"Virtual Size":"0x378"},".reloc":{"Entropy":3.985156363771524,"Virtual Size":"0xb4"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2014-09-17 12:10:49","InternalName":"ngiodriver.sys","Copyright":"Copyright (c) 2012 AVAST Software","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["RtlUnwind","IoCreateDevice","IoCreateSymbolicLink","IofCompleteRequest","RtlInitUnicodeString","IoDeleteSymbolicLink","KeTickCount","IoDeleteDevice","KeBugCheckEx","WRITE_PORT_USHORT","WRITE_PORT_UCHAR","READ_PORT_ULONG","READ_PORT_USHORT","READ_PORT_UCHAR","WRITE_PORT_ULONG"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA","ValidFrom":"2011-04-15 19:45:33","ValidTo":"2021-04-15 19:55:33","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"61204db4000000000027","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"8e3ffc222fbcebdbb8b23115ab259be7","SHA1":"ee20bff28ffe13be731c294c90d6ded5aae0ec0e","SHA256":"59826b69bc8c28118c96323b627da59aaca0b142cc5d8bad25a8fcfd399aa821","SHA384":"f2dab7e56a33298654924501499487f6ba72c7d9477476a186e1ed7a9be031fade0e35ac09eff5e56bbbab95ae5374e7"}},{"Subject":"C=US, O=DigiCert, CN=DigiCert Timestamp Responder","ValidFrom":"2014-05-20 00:00:00","ValidTo":"2015-06-03 00:00:00","Signature":"104090b3719ff01e3b02dc3fbc4c15e70e3912c08640161aa065c8935bc307b0a488440f9094475e35c305b2fed89d1ed4f4b77ec607215e660fe535b2a41f042a4230e6274f276234c06694c2022f4779264a9d4a5c04b50448f32b79491a4714bc16e5c7b8675020bdacc4b4fdab21802c60a61bab7cef073c40ee69184dd627e23459e1294223b33d439d6e1e97c4dd82f8f2a114f88dfc667d64ec40370104de4c554e3fd322f846cf2e58c0cbb0a5bee0e51b8b485cb2119102ccb95cecfd1e7525fe7e2516ba2c12841fdbf10ef90453b2f84d9c06463371758686e3540fd7ebb3d558af2b5a87c4a0300d33c6a6f130bed5fb7f35bec6e28fd919ef94","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"06640146e980e00e60a14d8f444a5958","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"1ce10b1105b364202a574393fd9e4280","SHA1":"073c25f235a4b3939e4bc5873e657292b3c505d0","SHA256":"3ab244526b2e0d4a28ed2948871de3ff07edeea8132c26512de0aabcdc3a7c93","SHA384":"50d55882cb1aa3a572baa998c671c40f0392128aa5cab9bc753776db07e0ad86fb050acc523a0a0dc642243d8e259d1d"}},{"Subject":"C=CZ, L=Praha 4, O=AVAST Software a.s., CN=AVAST Software a.s.","ValidFrom":"2013-07-12 00:00:00","ValidTo":"2016-09-14 12:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"0ef5eca7bd31cfc3a7f8e6259b423359","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"a174efe24e7df3e8690e8c4ce8411cc6","SHA1":"191c63936fab86e7d3d618c583c63e82c7ca4749","SHA256":"c83b811214d81590d30916b415a8ba7df9f25a467fb9431c46a6cf70b8459189","SHA384":"6f24c9264b1b1c240ed172101c32d11ca71c0a133c1484d403337475fc1bc68e9ab3656b14046cb5c4ff1a1dfeda301f"}},{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance Code Signing CA,1","ValidFrom":"2011-02-11 12:00:00","ValidTo":"2026-02-10 12:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"02c4d1e58a4a680c568da3047e7e4d5f","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"829995f702421dea833a24fb2c7f4442","SHA1":"1d7e838accd498c2e5ba9373af819ec097bb955c","SHA256":"92914d016cc46e125e50c4bd0bd7f72db87eed4ba68f3c589b4e86aa563108db","SHA384":"dbb72e38c3bc17b08aa00535ebd48502058ce6ecfd24bd4dd45c7b33e3d523510a4a649d86dfc77436c58754bd0754ea"}},{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID CA,1","ValidFrom":"2006-11-10 00:00:00","ValidTo":"2021-11-10 00:00:00","Signature":"46503ec9b72824a7381db65b29af52cf52e93147ab565c7bd50d0b41b3efec751f7438f2b25c61a29c95c350e482b923d1ba3a8672ad3878ac755d1717347247859456d1ebbb368477cc24a5f3041955a9e7e3e7ab62cdfb8b2d90c2c0d2b594bd5e4fb105d20e3d1aa9145ba6863162a8a833e49b39a7c4f5ce1d7876942573e42aabcf9c764bed5fc24b16e44b704c00891efcc579bc4c1257fe5fe11ebc025da8fefb07384f0dc65d91b90f6745cdd683ede7920d8db1698c4ffb59e0230fd2aaae007cee9c420ecf91d727b716ee0fc3bd7c0aa0ee2c08558522b8eb181a4dfc2a21ad49318347957771dcb11b4b4b1c109c7714c19d4f2f5a9508291026","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"06fdf9039603adea000aeb3f27bbba1b","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"4e5ad189638cf52ba9cd881d4d44668c","SHA1":"cdc115e98d798b33904c820d63cc1e1afc19251d","SHA256":"37560fb9d548ab62cc3ed4669a4ab74828b5a108e67e829937ffb2d10a5f78dd","SHA384":"173bfb77183785621ef15f43ea807338cea6a02e8183317d9ef050c7237adda3fa2a5bdcd5a4c96da9f2c55900675b9f"}}],"Signer":[{"SerialNumber":"0ef5eca7bd31cfc3a7f8e6259b423359","Issuer":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance Code Signing CA,1","Version":1}]}],"LoadsDespiteHVCI":"FALSE"},{"Company":"AVAST Software","Date":"","Description":"avast! NG setup helper driver","FileVersion":"10.0.0.37","Filename":"","MD5":"c9b046a6961957cc6c93a5192d3e61e3","MachineType":"I386","OriginalFilename":"ngiodriver.sys","Product":"Avast NG","ProductVersion":"10.0.0.37","Publisher":"","SHA1":"55cffb0ef56e52686b0c407b94bbea3701d6eccd","SHA256":"1a450ae0c9258ab0ae64f126f876b5feed63498db729ec61d06ed280e6c46f67","Signature":"","Imphash":"77d6a7153b3015318622b793227fb394","Authentihash":{"MD5":"c789170cbd24ffed5bd8eb6b6cf17c0d","SHA1":"1510703a1e99a2c0d52ee37c196da09563d08bab","SHA256":"8e1f3b15e4e5003a563bf8742558f5dc48fd0fe20238efe759001bf226f234ff"},"RichPEHeaderHash":{"MD5":"d03ce7f3d8a2783451f05b4403d9604d","SHA1":"0fdce12b0545eb789a7b5b4f0a5252e2c00ed751","SHA256":"dc268a553b869447a30f54911700122d2852afeaaa6baa3f861a88805a6133b4"},"Sections":{".text":{"Entropy":6.056939913721446,"Virtual Size":"0x71e"},".rdata":{"Entropy":3.905215089284073,"Virtual Size":"0x184"},".data":{"Entropy":2.709147917027245,"Virtual Size":"0x18"},"INIT":{"Entropy":5.107139443195506,"Virtual Size":"0x1fa"},".rsrc":{"Entropy":3.2958748933867295,"Virtual Size":"0x370"},".reloc":{"Entropy":3.985156363771524,"Virtual Size":"0xb4"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2014-10-13 05:23:33","InternalName":"ngiodriver.sys","Copyright":"Copyright (c) 2014 AVAST Software","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["RtlUnwind","IoCreateDevice","IoCreateSymbolicLink","IofCompleteRequest","RtlInitUnicodeString","IoDeleteSymbolicLink","KeTickCount","IoDeleteDevice","KeBugCheckEx","WRITE_PORT_USHORT","WRITE_PORT_UCHAR","READ_PORT_ULONG","READ_PORT_USHORT","READ_PORT_UCHAR","WRITE_PORT_ULONG"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA","ValidFrom":"2011-04-15 19:45:33","ValidTo":"2021-04-15 19:55:33","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"61204db4000000000027","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"8e3ffc222fbcebdbb8b23115ab259be7","SHA1":"ee20bff28ffe13be731c294c90d6ded5aae0ec0e","SHA256":"59826b69bc8c28118c96323b627da59aaca0b142cc5d8bad25a8fcfd399aa821","SHA384":"f2dab7e56a33298654924501499487f6ba72c7d9477476a186e1ed7a9be031fade0e35ac09eff5e56bbbab95ae5374e7"}},{"Subject":"C=US, O=DigiCert, CN=DigiCert Timestamp Responder","ValidFrom":"2014-05-20 00:00:00","ValidTo":"2015-06-03 00:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"06640146e980e00e60a14d8f444a5958","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"1ce10b1105b364202a574393fd9e4280","SHA1":"073c25f235a4b3939e4bc5873e657292b3c505d0","SHA256":"3ab244526b2e0d4a28ed2948871de3ff07edeea8132c26512de0aabcdc3a7c93","SHA384":"50d55882cb1aa3a572baa998c671c40f0392128aa5cab9bc753776db07e0ad86fb050acc523a0a0dc642243d8e259d1d"}},{"Subject":"C=CZ, L=Praha 4, O=AVAST Software a.s., CN=AVAST Software a.s.","ValidFrom":"2013-07-12 00:00:00","ValidTo":"2016-09-14 12:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"0ef5eca7bd31cfc3a7f8e6259b423359","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"a174efe24e7df3e8690e8c4ce8411cc6","SHA1":"191c63936fab86e7d3d618c583c63e82c7ca4749","SHA256":"c83b811214d81590d30916b415a8ba7df9f25a467fb9431c46a6cf70b8459189","SHA384":"6f24c9264b1b1c240ed172101c32d11ca71c0a133c1484d403337475fc1bc68e9ab3656b14046cb5c4ff1a1dfeda301f"}},{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance Code Signing CA,1","ValidFrom":"2011-02-11 12:00:00","ValidTo":"2026-02-10 12:00:00","Signature":"49eb7c60beaeefc97cb3c5ba4b64df1669e286fa29d9de98857d406626332f4455aaaa90e935700a34bed3ae542e8e6500d67a32203e6c26b898a939b1bc95c7aae9f5ee4666c6b3e812f8b3979dff74588234997550ac448fe892ce7d8b0f3196c7dcd31130987416c6e56b4576a39401cd33007a48f66f8631c9562b3322d5f801b644ce8cb4ca88d2e416e3e7f6e23ee109c09d7943437f555c05ad9310c62c0d6bc09eea78e5d277d6b8da9a987fba4c922b9dbda488b1ddafc34cd2979b03c6ae5f1b440f333715e3cbff2f56d316a45b55679da2cadb346c0c734ab57ba4b6b3e935027870ec007acbfc4b4f2236bb1484c98f91dd0f3c758cca0b88e7","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"02c4d1e58a4a680c568da3047e7e4d5f","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"829995f702421dea833a24fb2c7f4442","SHA1":"1d7e838accd498c2e5ba9373af819ec097bb955c","SHA256":"92914d016cc46e125e50c4bd0bd7f72db87eed4ba68f3c589b4e86aa563108db","SHA384":"dbb72e38c3bc17b08aa00535ebd48502058ce6ecfd24bd4dd45c7b33e3d523510a4a649d86dfc77436c58754bd0754ea"}},{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID CA,1","ValidFrom":"2006-11-10 00:00:00","ValidTo":"2021-11-10 00:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"06fdf9039603adea000aeb3f27bbba1b","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"4e5ad189638cf52ba9cd881d4d44668c","SHA1":"cdc115e98d798b33904c820d63cc1e1afc19251d","SHA256":"37560fb9d548ab62cc3ed4669a4ab74828b5a108e67e829937ffb2d10a5f78dd","SHA384":"173bfb77183785621ef15f43ea807338cea6a02e8183317d9ef050c7237adda3fa2a5bdcd5a4c96da9f2c55900675b9f"}}],"Signer":[{"SerialNumber":"0ef5eca7bd31cfc3a7f8e6259b423359","Issuer":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance Code Signing CA,1","Version":1}]}],"LoadsDespiteHVCI":"FALSE"},{"Company":"AVAST Software","Date":"","Description":"avast! NG setup helper driver","FileVersion":"10.0.0.52","Filename":"","MD5":"dff6c75c9754a6be61a47a273364cdf7","MachineType":"I386","OriginalFilename":"ngiodriver.sys","Product":"Avast NG","ProductVersion":"10.0.0.52","Publisher":"","SHA1":"74bf2ec32cb881424a79e99709071870148d242d","SHA256":"2ad8c38f6e0ca6c93abe3228c8a5d4299430ce0a2eeb80c914326c75ba8a33f9","Signature":"","Imphash":"77d6a7153b3015318622b793227fb394","Authentihash":{"MD5":"0acfad4dc34bee8aa8643d1bb8eb4706","SHA1":"21769bde84bbbaa6a58d08ab269a983d4b6bd8d3","SHA256":"a01529ce82033d94802a3e0cc6a361d51200588068f5bd4f0a08ea05e061240f"},"RichPEHeaderHash":{"MD5":"d03ce7f3d8a2783451f05b4403d9604d","SHA1":"0fdce12b0545eb789a7b5b4f0a5252e2c00ed751","SHA256":"dc268a553b869447a30f54911700122d2852afeaaa6baa3f861a88805a6133b4"},"Sections":{".text":{"Entropy":6.056939913721446,"Virtual Size":"0x71e"},".rdata":{"Entropy":3.9245701795014107,"Virtual Size":"0x184"},".data":{"Entropy":2.709147917027245,"Virtual Size":"0x18"},"INIT":{"Entropy":5.107139443195506,"Virtual Size":"0x1fa"},".rsrc":{"Entropy":3.2844637070458584,"Virtual Size":"0x370"},".reloc":{"Entropy":3.985156363771524,"Virtual Size":"0xb4"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2014-10-21 06:07:45","InternalName":"ngiodriver.sys","Copyright":"Copyright (c) 2014 AVAST Software","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["RtlUnwind","IoCreateDevice","IoCreateSymbolicLink","IofCompleteRequest","RtlInitUnicodeString","IoDeleteSymbolicLink","KeTickCount","IoDeleteDevice","KeBugCheckEx","WRITE_PORT_USHORT","WRITE_PORT_UCHAR","READ_PORT_ULONG","READ_PORT_USHORT","READ_PORT_UCHAR","WRITE_PORT_ULONG"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA","ValidFrom":"2011-04-15 19:45:33","ValidTo":"2021-04-15 19:55:33","Signature":"208cc159ed6f9c6b2dc14a3e751d454c41501cbd80ead9b0928b062a133f53169e56396a8a63b6782479f57db8b947a10a96c2f6cbbda2669f06e1acd279090efd3cdcac020c70af3f1bec787ed4eb4b056026d973619121edb06863e09712ab6fa012edd99fd2da273cb3e456f9d1d4810f71bd427ca689dccdd5bd95a2abf193117de8ac3129a85d6670419dfc75c9d5b31a392ad08505508bac91cac493cb71a59da4946f580cfa6e20c40831b5859d7e81f9d23dca5b18856c0a86ec22091ba574344f7f28bc954aab1db698b05d09a477767eefa78e5d84f61824cbd16da6c3a19cc2107580ff9d32fde6cf433a82f7ce8fe1722a9b62b75fed951a395c2f946d48b7015f332fbbdc2d73348904420a1c8b79f9a3fa17effaa11a10dfe0b2c195eb5c0c05973b353e18884ddb6cbf24898dc8bdd89f7b393a24a0d5dfd1f34a1a97f6a66f7a1fb090a9b3ac013991d361b764f13e573803afce7ad2b590f5aedc3999d5b63c97eda6cb16c77d6b2a4c9094e64c54fd1ecd20ecce689c8758e96160beeb0ec9d5197d9fe978bd0eac2175078fa96ee08c6a2a6b9ce3e765bcbc2d3c6ddc04dc67453632af0481bca8006e614c95c55cd48e8e9f2fc13274bdbd11650307cdefb75e0257da86d41a2834af8849b2cfa5dd82566f68aa14e25954feffeaeeefea9270226081e32523c09fcc0f49b235aa58c33ac3d9169410","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"61204db4000000000027","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"8e3ffc222fbcebdbb8b23115ab259be7","SHA1":"ee20bff28ffe13be731c294c90d6ded5aae0ec0e","SHA256":"59826b69bc8c28118c96323b627da59aaca0b142cc5d8bad25a8fcfd399aa821","SHA384":"f2dab7e56a33298654924501499487f6ba72c7d9477476a186e1ed7a9be031fade0e35ac09eff5e56bbbab95ae5374e7"}},{"Subject":"C=US, O=DigiCert, CN=DigiCert Timestamp Responder","ValidFrom":"2014-05-20 00:00:00","ValidTo":"2015-06-03 00:00:00","Signature":"104090b3719ff01e3b02dc3fbc4c15e70e3912c08640161aa065c8935bc307b0a488440f9094475e35c305b2fed89d1ed4f4b77ec607215e660fe535b2a41f042a4230e6274f276234c06694c2022f4779264a9d4a5c04b50448f32b79491a4714bc16e5c7b8675020bdacc4b4fdab21802c60a61bab7cef073c40ee69184dd627e23459e1294223b33d439d6e1e97c4dd82f8f2a114f88dfc667d64ec40370104de4c554e3fd322f846cf2e58c0cbb0a5bee0e51b8b485cb2119102ccb95cecfd1e7525fe7e2516ba2c12841fdbf10ef90453b2f84d9c06463371758686e3540fd7ebb3d558af2b5a87c4a0300d33c6a6f130bed5fb7f35bec6e28fd919ef94","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"06640146e980e00e60a14d8f444a5958","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"1ce10b1105b364202a574393fd9e4280","SHA1":"073c25f235a4b3939e4bc5873e657292b3c505d0","SHA256":"3ab244526b2e0d4a28ed2948871de3ff07edeea8132c26512de0aabcdc3a7c93","SHA384":"50d55882cb1aa3a572baa998c671c40f0392128aa5cab9bc753776db07e0ad86fb050acc523a0a0dc642243d8e259d1d"}},{"Subject":"C=CZ, L=Praha 4, O=AVAST Software a.s., CN=AVAST Software a.s.","ValidFrom":"2013-07-12 00:00:00","ValidTo":"2016-09-14 12:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"0ef5eca7bd31cfc3a7f8e6259b423359","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"a174efe24e7df3e8690e8c4ce8411cc6","SHA1":"191c63936fab86e7d3d618c583c63e82c7ca4749","SHA256":"c83b811214d81590d30916b415a8ba7df9f25a467fb9431c46a6cf70b8459189","SHA384":"6f24c9264b1b1c240ed172101c32d11ca71c0a133c1484d403337475fc1bc68e9ab3656b14046cb5c4ff1a1dfeda301f"}},{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance Code Signing CA,1","ValidFrom":"2011-02-11 12:00:00","ValidTo":"2026-02-10 12:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"02c4d1e58a4a680c568da3047e7e4d5f","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"829995f702421dea833a24fb2c7f4442","SHA1":"1d7e838accd498c2e5ba9373af819ec097bb955c","SHA256":"92914d016cc46e125e50c4bd0bd7f72db87eed4ba68f3c589b4e86aa563108db","SHA384":"dbb72e38c3bc17b08aa00535ebd48502058ce6ecfd24bd4dd45c7b33e3d523510a4a649d86dfc77436c58754bd0754ea"}},{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID CA,1","ValidFrom":"2006-11-10 00:00:00","ValidTo":"2021-11-10 00:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"06fdf9039603adea000aeb3f27bbba1b","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"4e5ad189638cf52ba9cd881d4d44668c","SHA1":"cdc115e98d798b33904c820d63cc1e1afc19251d","SHA256":"37560fb9d548ab62cc3ed4669a4ab74828b5a108e67e829937ffb2d10a5f78dd","SHA384":"173bfb77183785621ef15f43ea807338cea6a02e8183317d9ef050c7237adda3fa2a5bdcd5a4c96da9f2c55900675b9f"}}],"Signer":[{"SerialNumber":"0ef5eca7bd31cfc3a7f8e6259b423359","Issuer":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance Code Signing CA,1","Version":1}]}],"LoadsDespiteHVCI":"FALSE"},{"Company":"AVAST Software","Date":"","Description":"avast! NG setup helper driver","FileVersion":"10.0.0.320","Filename":"","MD5":"9b5533c4af38759d167d5399e83b475f","MachineType":"AMD64","OriginalFilename":"ngiodriver.sys","Product":"Avast NG","ProductVersion":"10.0.0.320","Publisher":"","SHA1":"446130c61555e5c9224197963d32e108cd899ea0","SHA256":"42b31b850894bf917372ff50fbe1aff3990331e8bd03840d75e29dcc1026c180","Signature":"","Imphash":"4946030efb34ab167180563899d5eb27","Authentihash":{"MD5":"8cd81f87d7e8fc85cc973760e0e809e3","SHA1":"61a13395f07b8ecd7edabb39752f649126bb6942","SHA256":"0afba623a3ae2726112c6458c212bb48b210566851b7604ed3fbb880ffd3859f"},"RichPEHeaderHash":{"MD5":"3d3e3c06f22b077f34b7f8e8196b2790","SHA1":"628a053ed6e2a87a4807eaf0cd7ed14e5cd8f058","SHA256":"860ee8d0e7d1e4d6a65146446cc9d4be77516c78acce16561d873738dcebff08"},"Sections":{".text":{"Entropy":6.198311756810645,"Virtual Size":"0xb3e"},"chipsec_":{"Entropy":4.840890178551545,"Virtual Size":"0x12a"},".rdata":{"Entropy":4.428801397559138,"Virtual Size":"0x1c4"},".data":{"Entropy":0.4804878386624626,"Virtual Size":"0x128"},".pdata":{"Entropy":3.439172789195522,"Virtual Size":"0x90"},"INIT":{"Entropy":4.862221827985665,"Virtual Size":"0x1de"},".rsrc":{"Entropy":3.2989978879129764,"Virtual Size":"0x378"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2015-09-16 11:19:19","InternalName":"ngiodriver.sys","Copyright":"Copyright (c) 2014 AVAST Software","Imports":["ntoskrnl.exe"],"ExportedFunctions":"","ImportedFunctions":["IoDeleteSymbolicLink","RtlInitUnicodeString","IoDeleteDevice","MmUnmapIoSpace","MmMapIoSpace","IofCompleteRequest","IoCreateSymbolicLink","IoCreateDevice","ExFreePoolWithTag","KeBugCheckEx","__C_specific_handler"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA","ValidFrom":"2011-04-15 19:45:33","ValidTo":"2021-04-15 19:55:33","Signature":"208cc159ed6f9c6b2dc14a3e751d454c41501cbd80ead9b0928b062a133f53169e56396a8a63b6782479f57db8b947a10a96c2f6cbbda2669f06e1acd279090efd3cdcac020c70af3f1bec787ed4eb4b056026d973619121edb06863e09712ab6fa012edd99fd2da273cb3e456f9d1d4810f71bd427ca689dccdd5bd95a2abf193117de8ac3129a85d6670419dfc75c9d5b31a392ad08505508bac91cac493cb71a59da4946f580cfa6e20c40831b5859d7e81f9d23dca5b18856c0a86ec22091ba574344f7f28bc954aab1db698b05d09a477767eefa78e5d84f61824cbd16da6c3a19cc2107580ff9d32fde6cf433a82f7ce8fe1722a9b62b75fed951a395c2f946d48b7015f332fbbdc2d73348904420a1c8b79f9a3fa17effaa11a10dfe0b2c195eb5c0c05973b353e18884ddb6cbf24898dc8bdd89f7b393a24a0d5dfd1f34a1a97f6a66f7a1fb090a9b3ac013991d361b764f13e573803afce7ad2b590f5aedc3999d5b63c97eda6cb16c77d6b2a4c9094e64c54fd1ecd20ecce689c8758e96160beeb0ec9d5197d9fe978bd0eac2175078fa96ee08c6a2a6b9ce3e765bcbc2d3c6ddc04dc67453632af0481bca8006e614c95c55cd48e8e9f2fc13274bdbd11650307cdefb75e0257da86d41a2834af8849b2cfa5dd82566f68aa14e25954feffeaeeefea9270226081e32523c09fcc0f49b235aa58c33ac3d9169410","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"61204db4000000000027","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"8e3ffc222fbcebdbb8b23115ab259be7","SHA1":"ee20bff28ffe13be731c294c90d6ded5aae0ec0e","SHA256":"59826b69bc8c28118c96323b627da59aaca0b142cc5d8bad25a8fcfd399aa821","SHA384":"f2dab7e56a33298654924501499487f6ba72c7d9477476a186e1ed7a9be031fade0e35ac09eff5e56bbbab95ae5374e7"}},{"Subject":"C=US, O=DigiCert, CN=DigiCert Timestamp Responder","ValidFrom":"2014-10-22 00:00:00","ValidTo":"2024-10-22 00:00:00","Signature":"9d257e1b334db226815c9b86ce23200f8087e588ffffb1d46a2c31ed3a17197117cda91bbc5a1639009de36c84e45a40fbde06018c37fa9bb19d247efe20a457ad5bb79ab06026ea6957215d342f1f71b0839419056b359010a07b97c7f63fe7e21141a6bd62d9f0273d381d286f3a5209f0ec7062d3624bb0e073a692c0d38e31d82fe36d171306eee403b614abf38f43a7719d21dd14ca155d9241daf90f81d199740d26c40e7f1bb5f5a0f1c677062815e9d893e55516f0bb0aab1cdb5c482766c8a38b0a1ce595daaec42e59a061dddaf36da261e98a0b6dec1218bdf755544003922b6bc251c20a48afb0d46ee0f4140a3a1be38f3dcaaf6a8d7bdcd844","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"03019a023aff58b16bd6d5eae617f066","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"a752afee44f017e8d74e3f3eb7914ae3","SHA1":"8eca80a6b80e9c69dcef7745748524afb8019e2d","SHA256":"82560fa7efec30b5ff82af643e6f3bf3d46868bbd5e7d76f93db185e9e3553a1","SHA384":"e8b11408c88f877ade4ca51114a175fb5dfd2d18d2a66be547c1c9e080fa8f592c7870e30dfab1c04d234993dd0907f3"}},{"Subject":"C=CZ, L=Praha 4, O=AVAST Software a.s., CN=AVAST Software a.s.","ValidFrom":"2013-07-12 00:00:00","ValidTo":"2016-09-14 12:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"0ef5eca7bd31cfc3a7f8e6259b423359","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"a174efe24e7df3e8690e8c4ce8411cc6","SHA1":"191c63936fab86e7d3d618c583c63e82c7ca4749","SHA256":"c83b811214d81590d30916b415a8ba7df9f25a467fb9431c46a6cf70b8459189","SHA384":"6f24c9264b1b1c240ed172101c32d11ca71c0a133c1484d403337475fc1bc68e9ab3656b14046cb5c4ff1a1dfeda301f"}},{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance Code Signing CA,1","ValidFrom":"2011-02-11 12:00:00","ValidTo":"2026-02-10 12:00:00","Signature":"49eb7c60beaeefc97cb3c5ba4b64df1669e286fa29d9de98857d406626332f4455aaaa90e935700a34bed3ae542e8e6500d67a32203e6c26b898a939b1bc95c7aae9f5ee4666c6b3e812f8b3979dff74588234997550ac448fe892ce7d8b0f3196c7dcd31130987416c6e56b4576a39401cd33007a48f66f8631c9562b3322d5f801b644ce8cb4ca88d2e416e3e7f6e23ee109c09d7943437f555c05ad9310c62c0d6bc09eea78e5d277d6b8da9a987fba4c922b9dbda488b1ddafc34cd2979b03c6ae5f1b440f333715e3cbff2f56d316a45b55679da2cadb346c0c734ab57ba4b6b3e935027870ec007acbfc4b4f2236bb1484c98f91dd0f3c758cca0b88e7","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"02c4d1e58a4a680c568da3047e7e4d5f","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"829995f702421dea833a24fb2c7f4442","SHA1":"1d7e838accd498c2e5ba9373af819ec097bb955c","SHA256":"92914d016cc46e125e50c4bd0bd7f72db87eed4ba68f3c589b4e86aa563108db","SHA384":"dbb72e38c3bc17b08aa00535ebd48502058ce6ecfd24bd4dd45c7b33e3d523510a4a649d86dfc77436c58754bd0754ea"}},{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID CA,1","ValidFrom":"2006-11-10 00:00:00","ValidTo":"2021-11-10 00:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"06fdf9039603adea000aeb3f27bbba1b","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"4e5ad189638cf52ba9cd881d4d44668c","SHA1":"cdc115e98d798b33904c820d63cc1e1afc19251d","SHA256":"37560fb9d548ab62cc3ed4669a4ab74828b5a108e67e829937ffb2d10a5f78dd","SHA384":"173bfb77183785621ef15f43ea807338cea6a02e8183317d9ef050c7237adda3fa2a5bdcd5a4c96da9f2c55900675b9f"}}],"Signer":[{"SerialNumber":"0ef5eca7bd31cfc3a7f8e6259b423359","Issuer":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance Code Signing CA,1","Version":1}]}],"LoadsDespiteHVCI":"FALSE"},{"Company":"AVAST Software","Date":"","Description":"avast! NG setup helper driver","FileVersion":"10.0.0.33","Filename":"","MD5":"ef1afb3a5ddad6795721f824690b4a69","MachineType":"AMD64","OriginalFilename":"ngiodriver.sys","Product":"Avast NG","ProductVersion":"10.0.0.33","Publisher":"","SHA1":"1a8b737dff81aa9e338b1fce0dc96ee7ee467bd5","SHA256":"5e3bc2d7bc56971457d642458563435c7e5c9c3c7c079ef5abeb6a61fb4d52ea","Signature":"","Imphash":"54e54063abbf1edaa9cf9ed8a18916d6","Authentihash":{"MD5":"d0bb0781a6e2a7e3bad16ea1575cf109","SHA1":"61dad2a81e7d2dc7f4df7497a2e36879df4db47d","SHA256":"458efd66c94cd83cbd190d72c329b6c0cec3387802db8ca3cd530a84f80ce2b8"},"RichPEHeaderHash":{"MD5":"978894e6fdeb83ae522a0e9a0b62a758","SHA1":"6feb616c5946bcb01cc190e0a41cd82a6ed227c9","SHA256":"74b9f053c667fdfb1b1bfdec577609a0678120a076af174b0274bbc7e0759f67"},"Sections":{".text":{"Entropy":5.672024429269039,"Virtual Size":"0x3ce"},".rdata":{"Entropy":4.312204457145491,"Virtual Size":"0x150"},".data":{"Entropy":0.5159719988134768,"Virtual Size":"0x110"},".pdata":{"Entropy":3.091743235994535,"Virtual Size":"0x54"},"INIT":{"Entropy":4.839367877915433,"Virtual Size":"0x190"},".rsrc":{"Entropy":3.2890567115685476,"Virtual Size":"0x370"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2014-10-09 13:09:52","InternalName":"ngiodriver.sys","Copyright":"Copyright (c) 2014 AVAST Software","Imports":["ntoskrnl.exe"],"ExportedFunctions":"","ImportedFunctions":["IoDeleteSymbolicLink","RtlInitUnicodeString","IoDeleteDevice","IofCompleteRequest","IoCreateSymbolicLink","IoCreateDevice","KeBugCheckEx","__C_specific_handler"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA","ValidFrom":"2011-04-15 19:45:33","ValidTo":"2021-04-15 19:55:33","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"61204db4000000000027","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"8e3ffc222fbcebdbb8b23115ab259be7","SHA1":"ee20bff28ffe13be731c294c90d6ded5aae0ec0e","SHA256":"59826b69bc8c28118c96323b627da59aaca0b142cc5d8bad25a8fcfd399aa821","SHA384":"f2dab7e56a33298654924501499487f6ba72c7d9477476a186e1ed7a9be031fade0e35ac09eff5e56bbbab95ae5374e7"}},{"Subject":"C=US, O=DigiCert, CN=DigiCert Timestamp Responder","ValidFrom":"2014-05-20 00:00:00","ValidTo":"2015-06-03 00:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"06640146e980e00e60a14d8f444a5958","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"1ce10b1105b364202a574393fd9e4280","SHA1":"073c25f235a4b3939e4bc5873e657292b3c505d0","SHA256":"3ab244526b2e0d4a28ed2948871de3ff07edeea8132c26512de0aabcdc3a7c93","SHA384":"50d55882cb1aa3a572baa998c671c40f0392128aa5cab9bc753776db07e0ad86fb050acc523a0a0dc642243d8e259d1d"}},{"Subject":"C=CZ, L=Praha 4, O=AVAST Software a.s., CN=AVAST Software a.s.","ValidFrom":"2013-07-12 00:00:00","ValidTo":"2016-09-14 12:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"0ef5eca7bd31cfc3a7f8e6259b423359","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"a174efe24e7df3e8690e8c4ce8411cc6","SHA1":"191c63936fab86e7d3d618c583c63e82c7ca4749","SHA256":"c83b811214d81590d30916b415a8ba7df9f25a467fb9431c46a6cf70b8459189","SHA384":"6f24c9264b1b1c240ed172101c32d11ca71c0a133c1484d403337475fc1bc68e9ab3656b14046cb5c4ff1a1dfeda301f"}},{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance Code Signing CA,1","ValidFrom":"2011-02-11 12:00:00","ValidTo":"2026-02-10 12:00:00","Signature":"49eb7c60beaeefc97cb3c5ba4b64df1669e286fa29d9de98857d406626332f4455aaaa90e935700a34bed3ae542e8e6500d67a32203e6c26b898a939b1bc95c7aae9f5ee4666c6b3e812f8b3979dff74588234997550ac448fe892ce7d8b0f3196c7dcd31130987416c6e56b4576a39401cd33007a48f66f8631c9562b3322d5f801b644ce8cb4ca88d2e416e3e7f6e23ee109c09d7943437f555c05ad9310c62c0d6bc09eea78e5d277d6b8da9a987fba4c922b9dbda488b1ddafc34cd2979b03c6ae5f1b440f333715e3cbff2f56d316a45b55679da2cadb346c0c734ab57ba4b6b3e935027870ec007acbfc4b4f2236bb1484c98f91dd0f3c758cca0b88e7","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"02c4d1e58a4a680c568da3047e7e4d5f","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"829995f702421dea833a24fb2c7f4442","SHA1":"1d7e838accd498c2e5ba9373af819ec097bb955c","SHA256":"92914d016cc46e125e50c4bd0bd7f72db87eed4ba68f3c589b4e86aa563108db","SHA384":"dbb72e38c3bc17b08aa00535ebd48502058ce6ecfd24bd4dd45c7b33e3d523510a4a649d86dfc77436c58754bd0754ea"}},{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID CA,1","ValidFrom":"2006-11-10 00:00:00","ValidTo":"2021-11-10 00:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"06fdf9039603adea000aeb3f27bbba1b","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"4e5ad189638cf52ba9cd881d4d44668c","SHA1":"cdc115e98d798b33904c820d63cc1e1afc19251d","SHA256":"37560fb9d548ab62cc3ed4669a4ab74828b5a108e67e829937ffb2d10a5f78dd","SHA384":"173bfb77183785621ef15f43ea807338cea6a02e8183317d9ef050c7237adda3fa2a5bdcd5a4c96da9f2c55900675b9f"}}],"Signer":[{"SerialNumber":"0ef5eca7bd31cfc3a7f8e6259b423359","Issuer":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance Code Signing CA,1","Version":1}]}],"LoadsDespiteHVCI":"FALSE"},{"Company":"AVAST Software","Date":"","Description":"avast! NG setup helper driver","FileVersion":"11.0.0.362","Filename":"","MD5":"0199a59af05d9986842ecbdee3884f0c","MachineType":"I386","OriginalFilename":"ngiodriver.sys","Product":"Avast NG","ProductVersion":"11.0.0.362","Publisher":"","SHA1":"dbe26c67a4cabba16d339a1b256ca008effcf6c8","SHA256":"5fae7e491b0d919f0b551e15e0942ac7772f2889722684aea32cff369e975879","Signature":"","Imphash":"5a50a9a44f5d36af5df1bde995d22e42","Authentihash":{"MD5":"fe41e3b2fedc16b11bbb2b9160f4fd21","SHA1":"b6647c0c30b3e2727baf21d7f3c6bd928d6ec517","SHA256":"b508921632475b1aadf6194b2f3feea72959b60675dcb44bbc3f8e363f8485ea"},"RichPEHeaderHash":{"MD5":"a5a0fc36d8a5c0082e09b75e3ec4dce3","SHA1":"807d4c627badd43df483d25ee76859fa0b9e26d0","SHA256":"547155fab99e250db4bf1ad48ce77caa5e5a347e1028706e3846b21c0d5e0072"},"Sections":{".text":{"Entropy":6.189655500565374,"Virtual Size":"0xbaa"},".rdata":{"Entropy":3.9824191987808986,"Virtual Size":"0x1a4"},".data":{"Entropy":2.0577277787393187,"Virtual Size":"0x24"},".crtdata":{"Entropy":0,"Virtual Size":"0x8"},"INIT":{"Entropy":5.286355706336742,"Virtual Size":"0x318"},".rsrc":{"Entropy":3.3064480646422245,"Virtual Size":"0x378"},".reloc":{"Entropy":4.103562901241629,"Virtual Size":"0x118"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2015-11-30 08:07:29","InternalName":"ngiodriver.sys","Copyright":"Copyright (c) 2014 AVAST Software","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["MmMapIoSpace","memcpy","WRITE_REGISTER_BUFFER_UCHAR","WRITE_REGISTER_BUFFER_USHORT","WRITE_REGISTER_BUFFER_ULONG","IofCompleteRequest","READ_REGISTER_BUFFER_ULONG","IoCreateDevice","ExFreePoolWithTag","KeTickCount","RtlUnwind","READ_REGISTER_BUFFER_USHORT","READ_REGISTER_BUFFER_UCHAR","MmUnmapIoSpace","RtlInitUnicodeString","IoDeleteSymbolicLink","IoCreateSymbolicLink","IoDeleteDevice","KeBugCheckEx","WRITE_PORT_USHORT","WRITE_PORT_UCHAR","READ_PORT_ULONG","READ_PORT_USHORT","READ_PORT_UCHAR","WRITE_PORT_ULONG"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA","ValidFrom":"2011-04-15 19:45:33","ValidTo":"2021-04-15 19:55:33","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"61204db4000000000027","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"8e3ffc222fbcebdbb8b23115ab259be7","SHA1":"ee20bff28ffe13be731c294c90d6ded5aae0ec0e","SHA256":"59826b69bc8c28118c96323b627da59aaca0b142cc5d8bad25a8fcfd399aa821","SHA384":"f2dab7e56a33298654924501499487f6ba72c7d9477476a186e1ed7a9be031fade0e35ac09eff5e56bbbab95ae5374e7"}},{"Subject":"C=US, O=DigiCert, CN=DigiCert Timestamp Responder","ValidFrom":"2014-10-22 00:00:00","ValidTo":"2024-10-22 00:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"03019a023aff58b16bd6d5eae617f066","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"a752afee44f017e8d74e3f3eb7914ae3","SHA1":"8eca80a6b80e9c69dcef7745748524afb8019e2d","SHA256":"82560fa7efec30b5ff82af643e6f3bf3d46868bbd5e7d76f93db185e9e3553a1","SHA384":"e8b11408c88f877ade4ca51114a175fb5dfd2d18d2a66be547c1c9e080fa8f592c7870e30dfab1c04d234993dd0907f3"}},{"Subject":"C=CZ, L=Praha 4, O=AVAST Software a.s., CN=AVAST Software a.s.","ValidFrom":"2013-07-12 00:00:00","ValidTo":"2016-09-14 12:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"0ef5eca7bd31cfc3a7f8e6259b423359","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"a174efe24e7df3e8690e8c4ce8411cc6","SHA1":"191c63936fab86e7d3d618c583c63e82c7ca4749","SHA256":"c83b811214d81590d30916b415a8ba7df9f25a467fb9431c46a6cf70b8459189","SHA384":"6f24c9264b1b1c240ed172101c32d11ca71c0a133c1484d403337475fc1bc68e9ab3656b14046cb5c4ff1a1dfeda301f"}},{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance Code Signing CA,1","ValidFrom":"2011-02-11 12:00:00","ValidTo":"2026-02-10 12:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"02c4d1e58a4a680c568da3047e7e4d5f","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"829995f702421dea833a24fb2c7f4442","SHA1":"1d7e838accd498c2e5ba9373af819ec097bb955c","SHA256":"92914d016cc46e125e50c4bd0bd7f72db87eed4ba68f3c589b4e86aa563108db","SHA384":"dbb72e38c3bc17b08aa00535ebd48502058ce6ecfd24bd4dd45c7b33e3d523510a4a649d86dfc77436c58754bd0754ea"}},{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID CA,1","ValidFrom":"2006-11-10 00:00:00","ValidTo":"2021-11-10 00:00:00","Signature":"46503ec9b72824a7381db65b29af52cf52e93147ab565c7bd50d0b41b3efec751f7438f2b25c61a29c95c350e482b923d1ba3a8672ad3878ac755d1717347247859456d1ebbb368477cc24a5f3041955a9e7e3e7ab62cdfb8b2d90c2c0d2b594bd5e4fb105d20e3d1aa9145ba6863162a8a833e49b39a7c4f5ce1d7876942573e42aabcf9c764bed5fc24b16e44b704c00891efcc579bc4c1257fe5fe11ebc025da8fefb07384f0dc65d91b90f6745cdd683ede7920d8db1698c4ffb59e0230fd2aaae007cee9c420ecf91d727b716ee0fc3bd7c0aa0ee2c08558522b8eb181a4dfc2a21ad49318347957771dcb11b4b4b1c109c7714c19d4f2f5a9508291026","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"06fdf9039603adea000aeb3f27bbba1b","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"4e5ad189638cf52ba9cd881d4d44668c","SHA1":"cdc115e98d798b33904c820d63cc1e1afc19251d","SHA256":"37560fb9d548ab62cc3ed4669a4ab74828b5a108e67e829937ffb2d10a5f78dd","SHA384":"173bfb77183785621ef15f43ea807338cea6a02e8183317d9ef050c7237adda3fa2a5bdcd5a4c96da9f2c55900675b9f"}}],"Signer":[{"SerialNumber":"0ef5eca7bd31cfc3a7f8e6259b423359","Issuer":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance Code Signing CA,1","Version":1}]}],"LoadsDespiteHVCI":"FALSE"},{"Company":"AVAST Software","Date":"","Description":"avast! NG setup helper driver","FileVersion":"10.0.0.207","Filename":"","MD5":"b9cf3294c13cdea624ab95ca3e2e483f","MachineType":"AMD64","OriginalFilename":"ngiodriver.sys","Product":"Avast NG","ProductVersion":"10.0.0.207","Publisher":"","SHA1":"c127c4d0917f54cee13a61c6c0029c95ae0746cf","SHA256":"733789d0a253e8d80cc3240e365b8d4274e510e36007f6e4b5fd13b07b084c3e","Signature":"","Imphash":"4946030efb34ab167180563899d5eb27","Authentihash":{"MD5":"2210ca089694abf5a488069b328d09a5","SHA1":"bc66119471ea7f5335cb2a267ab5d372b74da418","SHA256":"c23ac21bfcf3bd7f76d4f3b91844ab35427a1a2d3bbaf93f7916edf7569e4b22"},"RichPEHeaderHash":{"MD5":"3d3e3c06f22b077f34b7f8e8196b2790","SHA1":"628a053ed6e2a87a4807eaf0cd7ed14e5cd8f058","SHA256":"860ee8d0e7d1e4d6a65146446cc9d4be77516c78acce16561d873738dcebff08"},"Sections":{".text":{"Entropy":6.198311756810645,"Virtual Size":"0xb3e"},"chipsec_":{"Entropy":4.840890178551545,"Virtual Size":"0x12a"},".rdata":{"Entropy":4.407448555845858,"Virtual Size":"0x1c4"},".data":{"Entropy":0.4804878386624626,"Virtual Size":"0x128"},".pdata":{"Entropy":3.439172789195522,"Virtual Size":"0x90"},"INIT":{"Entropy":4.862221827985665,"Virtual Size":"0x1de"},".rsrc":{"Entropy":3.287881363246984,"Virtual Size":"0x378"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2015-04-17 08:27:33","InternalName":"ngiodriver.sys","Copyright":"Copyright (c) 2014 AVAST Software","Imports":["ntoskrnl.exe"],"ExportedFunctions":"","ImportedFunctions":["IoDeleteSymbolicLink","RtlInitUnicodeString","IoDeleteDevice","MmUnmapIoSpace","MmMapIoSpace","IofCompleteRequest","IoCreateSymbolicLink","IoCreateDevice","ExFreePoolWithTag","KeBugCheckEx","__C_specific_handler"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA","ValidFrom":"2011-04-15 19:45:33","ValidTo":"2021-04-15 19:55:33","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"61204db4000000000027","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"8e3ffc222fbcebdbb8b23115ab259be7","SHA1":"ee20bff28ffe13be731c294c90d6ded5aae0ec0e","SHA256":"59826b69bc8c28118c96323b627da59aaca0b142cc5d8bad25a8fcfd399aa821","SHA384":"f2dab7e56a33298654924501499487f6ba72c7d9477476a186e1ed7a9be031fade0e35ac09eff5e56bbbab95ae5374e7"}},{"Subject":"C=US, O=DigiCert, CN=DigiCert Timestamp Responder","ValidFrom":"2014-10-22 00:00:00","ValidTo":"2024-10-22 00:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"03019a023aff58b16bd6d5eae617f066","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"a752afee44f017e8d74e3f3eb7914ae3","SHA1":"8eca80a6b80e9c69dcef7745748524afb8019e2d","SHA256":"82560fa7efec30b5ff82af643e6f3bf3d46868bbd5e7d76f93db185e9e3553a1","SHA384":"e8b11408c88f877ade4ca51114a175fb5dfd2d18d2a66be547c1c9e080fa8f592c7870e30dfab1c04d234993dd0907f3"}},{"Subject":"C=CZ, L=Praha 4, O=AVAST Software a.s., CN=AVAST Software a.s.","ValidFrom":"2013-07-12 00:00:00","ValidTo":"2016-09-14 12:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"0ef5eca7bd31cfc3a7f8e6259b423359","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"a174efe24e7df3e8690e8c4ce8411cc6","SHA1":"191c63936fab86e7d3d618c583c63e82c7ca4749","SHA256":"c83b811214d81590d30916b415a8ba7df9f25a467fb9431c46a6cf70b8459189","SHA384":"6f24c9264b1b1c240ed172101c32d11ca71c0a133c1484d403337475fc1bc68e9ab3656b14046cb5c4ff1a1dfeda301f"}},{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance Code Signing CA,1","ValidFrom":"2011-02-11 12:00:00","ValidTo":"2026-02-10 12:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"02c4d1e58a4a680c568da3047e7e4d5f","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"829995f702421dea833a24fb2c7f4442","SHA1":"1d7e838accd498c2e5ba9373af819ec097bb955c","SHA256":"92914d016cc46e125e50c4bd0bd7f72db87eed4ba68f3c589b4e86aa563108db","SHA384":"dbb72e38c3bc17b08aa00535ebd48502058ce6ecfd24bd4dd45c7b33e3d523510a4a649d86dfc77436c58754bd0754ea"}},{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID CA,1","ValidFrom":"2006-11-10 00:00:00","ValidTo":"2021-11-10 00:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"06fdf9039603adea000aeb3f27bbba1b","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"4e5ad189638cf52ba9cd881d4d44668c","SHA1":"cdc115e98d798b33904c820d63cc1e1afc19251d","SHA256":"37560fb9d548ab62cc3ed4669a4ab74828b5a108e67e829937ffb2d10a5f78dd","SHA384":"173bfb77183785621ef15f43ea807338cea6a02e8183317d9ef050c7237adda3fa2a5bdcd5a4c96da9f2c55900675b9f"}}],"Signer":[{"SerialNumber":"0ef5eca7bd31cfc3a7f8e6259b423359","Issuer":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance Code Signing CA,1","Version":1}]}],"LoadsDespiteHVCI":"FALSE"},{"Company":"AVAST Software","Date":"","Description":"avast! NG setup helper driver","FileVersion":"10.0.0.69","Filename":"","MD5":"ac591a3b4df82a589edbb236263ec70a","MachineType":"AMD64","OriginalFilename":"ngiodriver.sys","Product":"Avast NG","ProductVersion":"10.0.0.69","Publisher":"","SHA1":"cef5a329f7a36c76a546d9528e57245127f37246","SHA256":"85fdd255c5d7add25fd7cd502221387a5e11f02144753890218dd31a8333a1a3","Signature":"","Imphash":"54e54063abbf1edaa9cf9ed8a18916d6","Authentihash":{"MD5":"e278ffc1e930a5172a0176efd8935663","SHA1":"4ecd1d1613858f8da007852df88979ec7183198a","SHA256":"22901319d041f2650d1ade9a8f66f7e6993800d1c20e6014b7da6642d0e8d90e"},"RichPEHeaderHash":{"MD5":"978894e6fdeb83ae522a0e9a0b62a758","SHA1":"6feb616c5946bcb01cc190e0a41cd82a6ed227c9","SHA256":"74b9f053c667fdfb1b1bfdec577609a0678120a076af174b0274bbc7e0759f67"},"Sections":{".text":{"Entropy":5.672024429269039,"Virtual Size":"0x3ce"},".rdata":{"Entropy":4.330780572979379,"Virtual Size":"0x150"},".data":{"Entropy":0.5159719988134768,"Virtual Size":"0x110"},".pdata":{"Entropy":3.091743235994535,"Virtual Size":"0x54"},"INIT":{"Entropy":4.839367877915433,"Virtual Size":"0x190"},".rsrc":{"Entropy":3.290471612134271,"Virtual Size":"0x370"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2014-11-06 07:23:17","InternalName":"ngiodriver.sys","Copyright":"Copyright (c) 2014 AVAST Software","Imports":["ntoskrnl.exe"],"ExportedFunctions":"","ImportedFunctions":["IoDeleteSymbolicLink","RtlInitUnicodeString","IoDeleteDevice","IofCompleteRequest","IoCreateSymbolicLink","IoCreateDevice","KeBugCheckEx","__C_specific_handler"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA","ValidFrom":"2011-04-15 19:45:33","ValidTo":"2021-04-15 19:55:33","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"61204db4000000000027","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"8e3ffc222fbcebdbb8b23115ab259be7","SHA1":"ee20bff28ffe13be731c294c90d6ded5aae0ec0e","SHA256":"59826b69bc8c28118c96323b627da59aaca0b142cc5d8bad25a8fcfd399aa821","SHA384":"f2dab7e56a33298654924501499487f6ba72c7d9477476a186e1ed7a9be031fade0e35ac09eff5e56bbbab95ae5374e7"}},{"Subject":"C=US, O=DigiCert, CN=DigiCert Timestamp Responder","ValidFrom":"2014-10-22 00:00:00","ValidTo":"2024-10-22 00:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"03019a023aff58b16bd6d5eae617f066","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"a752afee44f017e8d74e3f3eb7914ae3","SHA1":"8eca80a6b80e9c69dcef7745748524afb8019e2d","SHA256":"82560fa7efec30b5ff82af643e6f3bf3d46868bbd5e7d76f93db185e9e3553a1","SHA384":"e8b11408c88f877ade4ca51114a175fb5dfd2d18d2a66be547c1c9e080fa8f592c7870e30dfab1c04d234993dd0907f3"}},{"Subject":"C=CZ, L=Praha 4, O=AVAST Software a.s., CN=AVAST Software a.s.","ValidFrom":"2013-07-12 00:00:00","ValidTo":"2016-09-14 12:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"0ef5eca7bd31cfc3a7f8e6259b423359","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"a174efe24e7df3e8690e8c4ce8411cc6","SHA1":"191c63936fab86e7d3d618c583c63e82c7ca4749","SHA256":"c83b811214d81590d30916b415a8ba7df9f25a467fb9431c46a6cf70b8459189","SHA384":"6f24c9264b1b1c240ed172101c32d11ca71c0a133c1484d403337475fc1bc68e9ab3656b14046cb5c4ff1a1dfeda301f"}},{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance Code Signing CA,1","ValidFrom":"2011-02-11 12:00:00","ValidTo":"2026-02-10 12:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"02c4d1e58a4a680c568da3047e7e4d5f","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"829995f702421dea833a24fb2c7f4442","SHA1":"1d7e838accd498c2e5ba9373af819ec097bb955c","SHA256":"92914d016cc46e125e50c4bd0bd7f72db87eed4ba68f3c589b4e86aa563108db","SHA384":"dbb72e38c3bc17b08aa00535ebd48502058ce6ecfd24bd4dd45c7b33e3d523510a4a649d86dfc77436c58754bd0754ea"}},{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID CA,1","ValidFrom":"2006-11-10 00:00:00","ValidTo":"2021-11-10 00:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"06fdf9039603adea000aeb3f27bbba1b","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"4e5ad189638cf52ba9cd881d4d44668c","SHA1":"cdc115e98d798b33904c820d63cc1e1afc19251d","SHA256":"37560fb9d548ab62cc3ed4669a4ab74828b5a108e67e829937ffb2d10a5f78dd","SHA384":"173bfb77183785621ef15f43ea807338cea6a02e8183317d9ef050c7237adda3fa2a5bdcd5a4c96da9f2c55900675b9f"}}],"Signer":[{"SerialNumber":"0ef5eca7bd31cfc3a7f8e6259b423359","Issuer":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance Code Signing CA,1","Version":1}]}],"LoadsDespiteHVCI":"FALSE"},{"Company":"AVAST Software","Date":"","Description":"avast! NG setup helper driver","FileVersion":"10.0.0.320","Filename":"","MD5":"8fcf90cb5f9cb7205c075c662720f762","MachineType":"I386","OriginalFilename":"ngiodriver.sys","Product":"Avast NG","ProductVersion":"10.0.0.320","Publisher":"","SHA1":"b91c34bb846fd5b2f13f627b7da16c78e3ee7b0f","SHA256":"c0c52425dd90f36d110952c665e5b644bb1092f952942c07bb4da998c9ce6e5b","Signature":"","Imphash":"5a50a9a44f5d36af5df1bde995d22e42","Authentihash":{"MD5":"515da95540a55208f24ca8bbfca6f81a","SHA1":"89452c4ecea9cd1119f1fd3d2ee2dd073d2df45d","SHA256":"1748436f8e9c251b2c0d1a33499a1aa1a06ae961e1c9911e8c172fe297ab1feb"},"RichPEHeaderHash":{"MD5":"a5a0fc36d8a5c0082e09b75e3ec4dce3","SHA1":"807d4c627badd43df483d25ee76859fa0b9e26d0","SHA256":"547155fab99e250db4bf1ad48ce77caa5e5a347e1028706e3846b21c0d5e0072"},"Sections":{".text":{"Entropy":6.189655500565374,"Virtual Size":"0xbaa"},".rdata":{"Entropy":4.019233282303429,"Virtual Size":"0x1a4"},".data":{"Entropy":2.0577277787393187,"Virtual Size":"0x24"},".crtdata":{"Entropy":0,"Virtual Size":"0x8"},"INIT":{"Entropy":5.286355706336742,"Virtual Size":"0x318"},".rsrc":{"Entropy":3.3014097228792787,"Virtual Size":"0x378"},".reloc":{"Entropy":4.103562901241629,"Virtual Size":"0x118"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2015-09-16 11:19:17","InternalName":"ngiodriver.sys","Copyright":"Copyright (c) 2014 AVAST Software","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["MmMapIoSpace","memcpy","WRITE_REGISTER_BUFFER_UCHAR","WRITE_REGISTER_BUFFER_USHORT","WRITE_REGISTER_BUFFER_ULONG","IofCompleteRequest","READ_REGISTER_BUFFER_ULONG","IoCreateDevice","ExFreePoolWithTag","KeTickCount","RtlUnwind","READ_REGISTER_BUFFER_USHORT","READ_REGISTER_BUFFER_UCHAR","MmUnmapIoSpace","RtlInitUnicodeString","IoDeleteSymbolicLink","IoCreateSymbolicLink","IoDeleteDevice","KeBugCheckEx","WRITE_PORT_USHORT","WRITE_PORT_UCHAR","READ_PORT_ULONG","READ_PORT_USHORT","READ_PORT_UCHAR","WRITE_PORT_ULONG"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA","ValidFrom":"2011-04-15 19:45:33","ValidTo":"2021-04-15 19:55:33","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"61204db4000000000027","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"8e3ffc222fbcebdbb8b23115ab259be7","SHA1":"ee20bff28ffe13be731c294c90d6ded5aae0ec0e","SHA256":"59826b69bc8c28118c96323b627da59aaca0b142cc5d8bad25a8fcfd399aa821","SHA384":"f2dab7e56a33298654924501499487f6ba72c7d9477476a186e1ed7a9be031fade0e35ac09eff5e56bbbab95ae5374e7"}},{"Subject":"C=US, O=DigiCert, CN=DigiCert Timestamp Responder","ValidFrom":"2014-10-22 00:00:00","ValidTo":"2024-10-22 00:00:00","Signature":"9d257e1b334db226815c9b86ce23200f8087e588ffffb1d46a2c31ed3a17197117cda91bbc5a1639009de36c84e45a40fbde06018c37fa9bb19d247efe20a457ad5bb79ab06026ea6957215d342f1f71b0839419056b359010a07b97c7f63fe7e21141a6bd62d9f0273d381d286f3a5209f0ec7062d3624bb0e073a692c0d38e31d82fe36d171306eee403b614abf38f43a7719d21dd14ca155d9241daf90f81d199740d26c40e7f1bb5f5a0f1c677062815e9d893e55516f0bb0aab1cdb5c482766c8a38b0a1ce595daaec42e59a061dddaf36da261e98a0b6dec1218bdf755544003922b6bc251c20a48afb0d46ee0f4140a3a1be38f3dcaaf6a8d7bdcd844","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"03019a023aff58b16bd6d5eae617f066","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"a752afee44f017e8d74e3f3eb7914ae3","SHA1":"8eca80a6b80e9c69dcef7745748524afb8019e2d","SHA256":"82560fa7efec30b5ff82af643e6f3bf3d46868bbd5e7d76f93db185e9e3553a1","SHA384":"e8b11408c88f877ade4ca51114a175fb5dfd2d18d2a66be547c1c9e080fa8f592c7870e30dfab1c04d234993dd0907f3"}},{"Subject":"C=CZ, L=Praha 4, O=AVAST Software a.s., CN=AVAST Software a.s.","ValidFrom":"2013-07-12 00:00:00","ValidTo":"2016-09-14 12:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"0ef5eca7bd31cfc3a7f8e6259b423359","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"a174efe24e7df3e8690e8c4ce8411cc6","SHA1":"191c63936fab86e7d3d618c583c63e82c7ca4749","SHA256":"c83b811214d81590d30916b415a8ba7df9f25a467fb9431c46a6cf70b8459189","SHA384":"6f24c9264b1b1c240ed172101c32d11ca71c0a133c1484d403337475fc1bc68e9ab3656b14046cb5c4ff1a1dfeda301f"}},{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance Code Signing CA,1","ValidFrom":"2011-02-11 12:00:00","ValidTo":"2026-02-10 12:00:00","Signature":"49eb7c60beaeefc97cb3c5ba4b64df1669e286fa29d9de98857d406626332f4455aaaa90e935700a34bed3ae542e8e6500d67a32203e6c26b898a939b1bc95c7aae9f5ee4666c6b3e812f8b3979dff74588234997550ac448fe892ce7d8b0f3196c7dcd31130987416c6e56b4576a39401cd33007a48f66f8631c9562b3322d5f801b644ce8cb4ca88d2e416e3e7f6e23ee109c09d7943437f555c05ad9310c62c0d6bc09eea78e5d277d6b8da9a987fba4c922b9dbda488b1ddafc34cd2979b03c6ae5f1b440f333715e3cbff2f56d316a45b55679da2cadb346c0c734ab57ba4b6b3e935027870ec007acbfc4b4f2236bb1484c98f91dd0f3c758cca0b88e7","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"02c4d1e58a4a680c568da3047e7e4d5f","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"829995f702421dea833a24fb2c7f4442","SHA1":"1d7e838accd498c2e5ba9373af819ec097bb955c","SHA256":"92914d016cc46e125e50c4bd0bd7f72db87eed4ba68f3c589b4e86aa563108db","SHA384":"dbb72e38c3bc17b08aa00535ebd48502058ce6ecfd24bd4dd45c7b33e3d523510a4a649d86dfc77436c58754bd0754ea"}},{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID CA,1","ValidFrom":"2006-11-10 00:00:00","ValidTo":"2021-11-10 00:00:00","Signature":"46503ec9b72824a7381db65b29af52cf52e93147ab565c7bd50d0b41b3efec751f7438f2b25c61a29c95c350e482b923d1ba3a8672ad3878ac755d1717347247859456d1ebbb368477cc24a5f3041955a9e7e3e7ab62cdfb8b2d90c2c0d2b594bd5e4fb105d20e3d1aa9145ba6863162a8a833e49b39a7c4f5ce1d7876942573e42aabcf9c764bed5fc24b16e44b704c00891efcc579bc4c1257fe5fe11ebc025da8fefb07384f0dc65d91b90f6745cdd683ede7920d8db1698c4ffb59e0230fd2aaae007cee9c420ecf91d727b716ee0fc3bd7c0aa0ee2c08558522b8eb181a4dfc2a21ad49318347957771dcb11b4b4b1c109c7714c19d4f2f5a9508291026","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"06fdf9039603adea000aeb3f27bbba1b","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"4e5ad189638cf52ba9cd881d4d44668c","SHA1":"cdc115e98d798b33904c820d63cc1e1afc19251d","SHA256":"37560fb9d548ab62cc3ed4669a4ab74828b5a108e67e829937ffb2d10a5f78dd","SHA384":"173bfb77183785621ef15f43ea807338cea6a02e8183317d9ef050c7237adda3fa2a5bdcd5a4c96da9f2c55900675b9f"}}],"Signer":[{"SerialNumber":"0ef5eca7bd31cfc3a7f8e6259b423359","Issuer":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance Code Signing CA,1","Version":1}]}],"LoadsDespiteHVCI":"FALSE"},{"Company":"AVAST Software","Date":"","Description":"avast! NG setup helper driver","FileVersion":"10.0.0.52","Filename":"","MD5":"ef18d594c862d6d3704b777fa3445ac2","MachineType":"AMD64","OriginalFilename":"ngiodriver.sys","Product":"Avast NG","ProductVersion":"10.0.0.52","Publisher":"","SHA1":"8795df6494b724d9f279f007db33c24c27a91d08","SHA256":"d0e4d3e1f5d5942aaf2c72631e9490eecc4d295ee78c323d8fe05092e5b788eb","Signature":"","Imphash":"54e54063abbf1edaa9cf9ed8a18916d6","Authentihash":{"MD5":"18051086d5898a69063f70148bd1c1d1","SHA1":"9c39cb449962d1facd910d68707c4cce8a1e95e0","SHA256":"bb3b45506d203aafb4ef28586c0655cd2e9095e6238a8ccf76ab6eb6113b4476"},"RichPEHeaderHash":{"MD5":"978894e6fdeb83ae522a0e9a0b62a758","SHA1":"6feb616c5946bcb01cc190e0a41cd82a6ed227c9","SHA256":"74b9f053c667fdfb1b1bfdec577609a0678120a076af174b0274bbc7e0759f67"},"Sections":{".text":{"Entropy":5.672024429269039,"Virtual Size":"0x3ce"},".rdata":{"Entropy":4.280195863389052,"Virtual Size":"0x150"},".data":{"Entropy":0.5159719988134768,"Virtual Size":"0x110"},".pdata":{"Entropy":3.091743235994535,"Virtual Size":"0x54"},"INIT":{"Entropy":4.839367877915433,"Virtual Size":"0x190"},".rsrc":{"Entropy":3.2853215337528625,"Virtual Size":"0x370"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2014-10-21 06:07:46","InternalName":"ngiodriver.sys","Copyright":"Copyright (c) 2014 AVAST Software","Imports":["ntoskrnl.exe"],"ExportedFunctions":"","ImportedFunctions":["IoDeleteSymbolicLink","RtlInitUnicodeString","IoDeleteDevice","IofCompleteRequest","IoCreateSymbolicLink","IoCreateDevice","KeBugCheckEx","__C_specific_handler"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA","ValidFrom":"2011-04-15 19:45:33","ValidTo":"2021-04-15 19:55:33","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"61204db4000000000027","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"8e3ffc222fbcebdbb8b23115ab259be7","SHA1":"ee20bff28ffe13be731c294c90d6ded5aae0ec0e","SHA256":"59826b69bc8c28118c96323b627da59aaca0b142cc5d8bad25a8fcfd399aa821","SHA384":"f2dab7e56a33298654924501499487f6ba72c7d9477476a186e1ed7a9be031fade0e35ac09eff5e56bbbab95ae5374e7"}},{"Subject":"C=US, O=DigiCert, CN=DigiCert Timestamp Responder","ValidFrom":"2014-05-20 00:00:00","ValidTo":"2015-06-03 00:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"06640146e980e00e60a14d8f444a5958","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"1ce10b1105b364202a574393fd9e4280","SHA1":"073c25f235a4b3939e4bc5873e657292b3c505d0","SHA256":"3ab244526b2e0d4a28ed2948871de3ff07edeea8132c26512de0aabcdc3a7c93","SHA384":"50d55882cb1aa3a572baa998c671c40f0392128aa5cab9bc753776db07e0ad86fb050acc523a0a0dc642243d8e259d1d"}},{"Subject":"C=CZ, L=Praha 4, O=AVAST Software a.s., CN=AVAST Software a.s.","ValidFrom":"2013-07-12 00:00:00","ValidTo":"2016-09-14 12:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"0ef5eca7bd31cfc3a7f8e6259b423359","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"a174efe24e7df3e8690e8c4ce8411cc6","SHA1":"191c63936fab86e7d3d618c583c63e82c7ca4749","SHA256":"c83b811214d81590d30916b415a8ba7df9f25a467fb9431c46a6cf70b8459189","SHA384":"6f24c9264b1b1c240ed172101c32d11ca71c0a133c1484d403337475fc1bc68e9ab3656b14046cb5c4ff1a1dfeda301f"}},{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance Code Signing CA,1","ValidFrom":"2011-02-11 12:00:00","ValidTo":"2026-02-10 12:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"02c4d1e58a4a680c568da3047e7e4d5f","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"829995f702421dea833a24fb2c7f4442","SHA1":"1d7e838accd498c2e5ba9373af819ec097bb955c","SHA256":"92914d016cc46e125e50c4bd0bd7f72db87eed4ba68f3c589b4e86aa563108db","SHA384":"dbb72e38c3bc17b08aa00535ebd48502058ce6ecfd24bd4dd45c7b33e3d523510a4a649d86dfc77436c58754bd0754ea"}},{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID CA,1","ValidFrom":"2006-11-10 00:00:00","ValidTo":"2021-11-10 00:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"06fdf9039603adea000aeb3f27bbba1b","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"4e5ad189638cf52ba9cd881d4d44668c","SHA1":"cdc115e98d798b33904c820d63cc1e1afc19251d","SHA256":"37560fb9d548ab62cc3ed4669a4ab74828b5a108e67e829937ffb2d10a5f78dd","SHA384":"173bfb77183785621ef15f43ea807338cea6a02e8183317d9ef050c7237adda3fa2a5bdcd5a4c96da9f2c55900675b9f"}}],"Signer":[{"SerialNumber":"0ef5eca7bd31cfc3a7f8e6259b423359","Issuer":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance Code Signing CA,1","Version":1}]}],"LoadsDespiteHVCI":"FALSE"},{"Company":"AVAST Software","Date":"","Description":"avast! NG setup helper driver","FileVersion":"10.0.0.207","Filename":"","MD5":"9988fc825675d4d3e2298537fc78e303","MachineType":"I386","OriginalFilename":"ngiodriver.sys","Product":"Avast NG","ProductVersion":"10.0.0.207","Publisher":"","SHA1":"184729ec2ffd0928a408255a23b3f532ffb3db3d","SHA256":"d1463b7fec911c10a8c96d84eb7c0f9e95fa488d826647a591a38c0593f812a4","Signature":"","Imphash":"5a50a9a44f5d36af5df1bde995d22e42","Authentihash":{"MD5":"6fde5f69ec06e982a64db3b46dd5db94","SHA1":"d65d3bc92a641a1b21f04c002553c66adcb644c5","SHA256":"ec81b458b41c9732341ec8cde57b9b7c7bb776b3bc08f45f2c815c3692072d04"},"RichPEHeaderHash":{"MD5":"a5a0fc36d8a5c0082e09b75e3ec4dce3","SHA1":"807d4c627badd43df483d25ee76859fa0b9e26d0","SHA256":"547155fab99e250db4bf1ad48ce77caa5e5a347e1028706e3846b21c0d5e0072"},"Sections":{".text":{"Entropy":6.189655500565374,"Virtual Size":"0xbaa"},".rdata":{"Entropy":4.008552445849762,"Virtual Size":"0x1a4"},".data":{"Entropy":2.0577277787393187,"Virtual Size":"0x24"},".crtdata":{"Entropy":0,"Virtual Size":"0x8"},"INIT":{"Entropy":5.286355706336742,"Virtual Size":"0x318"},".rsrc":{"Entropy":3.2902931982132864,"Virtual Size":"0x378"},".reloc":{"Entropy":4.103562901241629,"Virtual Size":"0x118"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2015-04-17 08:27:32","InternalName":"ngiodriver.sys","Copyright":"Copyright (c) 2014 AVAST Software","Imports":["ntoskrnl.exe","HAL.dll"],"ExportedFunctions":"","ImportedFunctions":["MmMapIoSpace","memcpy","WRITE_REGISTER_BUFFER_UCHAR","WRITE_REGISTER_BUFFER_USHORT","WRITE_REGISTER_BUFFER_ULONG","IofCompleteRequest","READ_REGISTER_BUFFER_ULONG","IoCreateDevice","ExFreePoolWithTag","KeTickCount","RtlUnwind","READ_REGISTER_BUFFER_USHORT","READ_REGISTER_BUFFER_UCHAR","MmUnmapIoSpace","RtlInitUnicodeString","IoDeleteSymbolicLink","IoCreateSymbolicLink","IoDeleteDevice","KeBugCheckEx","WRITE_PORT_USHORT","WRITE_PORT_UCHAR","READ_PORT_ULONG","READ_PORT_USHORT","READ_PORT_UCHAR","WRITE_PORT_ULONG"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA","ValidFrom":"2011-04-15 19:45:33","ValidTo":"2021-04-15 19:55:33","Signature":"208cc159ed6f9c6b2dc14a3e751d454c41501cbd80ead9b0928b062a133f53169e56396a8a63b6782479f57db8b947a10a96c2f6cbbda2669f06e1acd279090efd3cdcac020c70af3f1bec787ed4eb4b056026d973619121edb06863e09712ab6fa012edd99fd2da273cb3e456f9d1d4810f71bd427ca689dccdd5bd95a2abf193117de8ac3129a85d6670419dfc75c9d5b31a392ad08505508bac91cac493cb71a59da4946f580cfa6e20c40831b5859d7e81f9d23dca5b18856c0a86ec22091ba574344f7f28bc954aab1db698b05d09a477767eefa78e5d84f61824cbd16da6c3a19cc2107580ff9d32fde6cf433a82f7ce8fe1722a9b62b75fed951a395c2f946d48b7015f332fbbdc2d73348904420a1c8b79f9a3fa17effaa11a10dfe0b2c195eb5c0c05973b353e18884ddb6cbf24898dc8bdd89f7b393a24a0d5dfd1f34a1a97f6a66f7a1fb090a9b3ac013991d361b764f13e573803afce7ad2b590f5aedc3999d5b63c97eda6cb16c77d6b2a4c9094e64c54fd1ecd20ecce689c8758e96160beeb0ec9d5197d9fe978bd0eac2175078fa96ee08c6a2a6b9ce3e765bcbc2d3c6ddc04dc67453632af0481bca8006e614c95c55cd48e8e9f2fc13274bdbd11650307cdefb75e0257da86d41a2834af8849b2cfa5dd82566f68aa14e25954feffeaeeefea9270226081e32523c09fcc0f49b235aa58c33ac3d9169410","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"61204db4000000000027","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"8e3ffc222fbcebdbb8b23115ab259be7","SHA1":"ee20bff28ffe13be731c294c90d6ded5aae0ec0e","SHA256":"59826b69bc8c28118c96323b627da59aaca0b142cc5d8bad25a8fcfd399aa821","SHA384":"f2dab7e56a33298654924501499487f6ba72c7d9477476a186e1ed7a9be031fade0e35ac09eff5e56bbbab95ae5374e7"}},{"Subject":"C=US, O=DigiCert, CN=DigiCert Timestamp Responder","ValidFrom":"2014-10-22 00:00:00","ValidTo":"2024-10-22 00:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"03019a023aff58b16bd6d5eae617f066","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"a752afee44f017e8d74e3f3eb7914ae3","SHA1":"8eca80a6b80e9c69dcef7745748524afb8019e2d","SHA256":"82560fa7efec30b5ff82af643e6f3bf3d46868bbd5e7d76f93db185e9e3553a1","SHA384":"e8b11408c88f877ade4ca51114a175fb5dfd2d18d2a66be547c1c9e080fa8f592c7870e30dfab1c04d234993dd0907f3"}},{"Subject":"C=CZ, L=Praha 4, O=AVAST Software a.s., CN=AVAST Software a.s.","ValidFrom":"2013-07-12 00:00:00","ValidTo":"2016-09-14 12:00:00","Signature":"28dd038a8b1824ec13bb52ab16db006635fa9e07b6a3949d67a660fb46e38bcbef83aeeab5bbc0a0e92ef7f64a04c9647d000c66c4a3fbced041e347bfccb1dcac87a0ee04423b5419f1023142565d7f4f168f3e545b0c8d549bf702fd40cc5e22bf2728876072963a3c79cd7c0125473339b923a053ad14d6d56fb6693a1598995c47ab681f32f36f0ce8a49b0b93f61dbe5d0aaa1dab8f9ee928794e43ed0defe3d1b5834345ece88408deae457f7a990c5ed000f53ed5d70815aa08e3e2b6b72d5c48a30339fd204e1c8619e120ce5d21cba14ec2f299cedb4f02075489b1ed3d6a6bf266d1db1fdfb2d36f480dd5b05211185adf06e6745115e8c0b58600","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"0ef5eca7bd31cfc3a7f8e6259b423359","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"a174efe24e7df3e8690e8c4ce8411cc6","SHA1":"191c63936fab86e7d3d618c583c63e82c7ca4749","SHA256":"c83b811214d81590d30916b415a8ba7df9f25a467fb9431c46a6cf70b8459189","SHA384":"6f24c9264b1b1c240ed172101c32d11ca71c0a133c1484d403337475fc1bc68e9ab3656b14046cb5c4ff1a1dfeda301f"}},{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance Code Signing CA,1","ValidFrom":"2011-02-11 12:00:00","ValidTo":"2026-02-10 12:00:00","Signature":"49eb7c60beaeefc97cb3c5ba4b64df1669e286fa29d9de98857d406626332f4455aaaa90e935700a34bed3ae542e8e6500d67a32203e6c26b898a939b1bc95c7aae9f5ee4666c6b3e812f8b3979dff74588234997550ac448fe892ce7d8b0f3196c7dcd31130987416c6e56b4576a39401cd33007a48f66f8631c9562b3322d5f801b644ce8cb4ca88d2e416e3e7f6e23ee109c09d7943437f555c05ad9310c62c0d6bc09eea78e5d277d6b8da9a987fba4c922b9dbda488b1ddafc34cd2979b03c6ae5f1b440f333715e3cbff2f56d316a45b55679da2cadb346c0c734ab57ba4b6b3e935027870ec007acbfc4b4f2236bb1484c98f91dd0f3c758cca0b88e7","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"02c4d1e58a4a680c568da3047e7e4d5f","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"829995f702421dea833a24fb2c7f4442","SHA1":"1d7e838accd498c2e5ba9373af819ec097bb955c","SHA256":"92914d016cc46e125e50c4bd0bd7f72db87eed4ba68f3c589b4e86aa563108db","SHA384":"dbb72e38c3bc17b08aa00535ebd48502058ce6ecfd24bd4dd45c7b33e3d523510a4a649d86dfc77436c58754bd0754ea"}},{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID CA,1","ValidFrom":"2006-11-10 00:00:00","ValidTo":"2021-11-10 00:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"06fdf9039603adea000aeb3f27bbba1b","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"4e5ad189638cf52ba9cd881d4d44668c","SHA1":"cdc115e98d798b33904c820d63cc1e1afc19251d","SHA256":"37560fb9d548ab62cc3ed4669a4ab74828b5a108e67e829937ffb2d10a5f78dd","SHA384":"173bfb77183785621ef15f43ea807338cea6a02e8183317d9ef050c7237adda3fa2a5bdcd5a4c96da9f2c55900675b9f"}}],"Signer":[{"SerialNumber":"0ef5eca7bd31cfc3a7f8e6259b423359","Issuer":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance Code Signing CA,1","Version":1}]}],"LoadsDespiteHVCI":"FALSE"},{"Company":"AVAST Software","Date":"","Description":"avast! NG setup helper driver","FileVersion":"10.0.0.1126","Filename":"","MD5":"fa0d1fca7c5b44ce3b799389434fcaa5","MachineType":"AMD64","OriginalFilename":"ngiodriver.sys","Product":"avast! NG","ProductVersion":"10.0.0.1126","Publisher":"","SHA1":"8146ed4a9c9a2f7e7aeae0a0539610c3c1cd3563","SHA256":"e8eb1c821dbf56bde05c0c49f6d560021628df89c29192058ce68907e7048994","Signature":"","Imphash":"54e54063abbf1edaa9cf9ed8a18916d6","Authentihash":{"MD5":"d90c2ebafebef8826bc3d20ebdf462da","SHA1":"66003ac9ead8e3c7a1576ab2b8d0c30cec811953","SHA256":"783a127c470a136b07a41bdaf2d78a8e4e73c3fca1a124d33d5f8653ef887d30"},"RichPEHeaderHash":{"MD5":"978894e6fdeb83ae522a0e9a0b62a758","SHA1":"6feb616c5946bcb01cc190e0a41cd82a6ed227c9","SHA256":"74b9f053c667fdfb1b1bfdec577609a0678120a076af174b0274bbc7e0759f67"},"Sections":{".text":{"Entropy":5.672024429269039,"Virtual Size":"0x3ce"},".rdata":{"Entropy":4.287538534250268,"Virtual Size":"0x150"},".data":{"Entropy":0.5159719988134768,"Virtual Size":"0x110"},".pdata":{"Entropy":3.091743235994535,"Virtual Size":"0x54"},"INIT":{"Entropy":4.839367877915433,"Virtual Size":"0x190"},".rsrc":{"Entropy":3.326420955802191,"Virtual Size":"0x378"}},"MagicHeader":"50 45 0 0","CreationTimestamp":"2014-09-17 12:10:49","InternalName":"ngiodriver.sys","Copyright":"Copyright (c) 2012 AVAST Software","Imports":["ntoskrnl.exe"],"ExportedFunctions":"","ImportedFunctions":["IoDeleteSymbolicLink","RtlInitUnicodeString","IoDeleteDevice","IofCompleteRequest","IoCreateSymbolicLink","IoCreateDevice","KeBugCheckEx","__C_specific_handler"],"Signatures":[{"CertificatesInfo":"","SignerInfo":"","Certificates":[{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA","ValidFrom":"2011-04-15 19:45:33","ValidTo":"2021-04-15 19:55:33","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"61204db4000000000027","Version":3,"CertificateType":"CA","IsCodeSigning":false,"IsCA":true,"TBS":{"MD5":"8e3ffc222fbcebdbb8b23115ab259be7","SHA1":"ee20bff28ffe13be731c294c90d6ded5aae0ec0e","SHA256":"59826b69bc8c28118c96323b627da59aaca0b142cc5d8bad25a8fcfd399aa821","SHA384":"f2dab7e56a33298654924501499487f6ba72c7d9477476a186e1ed7a9be031fade0e35ac09eff5e56bbbab95ae5374e7"}},{"Subject":"C=US, O=DigiCert, CN=DigiCert Timestamp Responder","ValidFrom":"2014-05-20 00:00:00","ValidTo":"2015-06-03 00:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"06640146e980e00e60a14d8f444a5958","Version":3,"CertificateType":"Intermediate","IsCodeSigning":false,"IsCA":false,"TBS":{"MD5":"1ce10b1105b364202a574393fd9e4280","SHA1":"073c25f235a4b3939e4bc5873e657292b3c505d0","SHA256":"3ab244526b2e0d4a28ed2948871de3ff07edeea8132c26512de0aabcdc3a7c93","SHA384":"50d55882cb1aa3a572baa998c671c40f0392128aa5cab9bc753776db07e0ad86fb050acc523a0a0dc642243d8e259d1d"}},{"Subject":"C=CZ, L=Praha 4, O=AVAST Software a.s., CN=AVAST Software a.s.","ValidFrom":"2013-07-12 00:00:00","ValidTo":"2016-09-14 12:00:00","Signature":"28dd038a8b1824ec13bb52ab16db006635fa9e07b6a3949d67a660fb46e38bcbef83aeeab5bbc0a0e92ef7f64a04c9647d000c66c4a3fbced041e347bfccb1dcac87a0ee04423b5419f1023142565d7f4f168f3e545b0c8d549bf702fd40cc5e22bf2728876072963a3c79cd7c0125473339b923a053ad14d6d56fb6693a1598995c47ab681f32f36f0ce8a49b0b93f61dbe5d0aaa1dab8f9ee928794e43ed0defe3d1b5834345ece88408deae457f7a990c5ed000f53ed5d70815aa08e3e2b6b72d5c48a30339fd204e1c8619e120ce5d21cba14ec2f299cedb4f02075489b1ed3d6a6bf266d1db1fdfb2d36f480dd5b05211185adf06e6745115e8c0b58600","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":false,"SerialNumber":"0ef5eca7bd31cfc3a7f8e6259b423359","Version":3,"CertificateType":"Leaf (Code Signing)","IsCodeSigning":true,"IsCA":false,"TBS":{"MD5":"a174efe24e7df3e8690e8c4ce8411cc6","SHA1":"191c63936fab86e7d3d618c583c63e82c7ca4749","SHA256":"c83b811214d81590d30916b415a8ba7df9f25a467fb9431c46a6cf70b8459189","SHA384":"6f24c9264b1b1c240ed172101c32d11ca71c0a133c1484d403337475fc1bc68e9ab3656b14046cb5c4ff1a1dfeda301f"}},{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance Code Signing CA,1","ValidFrom":"2011-02-11 12:00:00","ValidTo":"2026-02-10 12:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"02c4d1e58a4a680c568da3047e7e4d5f","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"829995f702421dea833a24fb2c7f4442","SHA1":"1d7e838accd498c2e5ba9373af819ec097bb955c","SHA256":"92914d016cc46e125e50c4bd0bd7f72db87eed4ba68f3c589b4e86aa563108db","SHA384":"dbb72e38c3bc17b08aa00535ebd48502058ce6ecfd24bd4dd45c7b33e3d523510a4a649d86dfc77436c58754bd0754ea"}},{"Subject":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID CA,1","ValidFrom":"2006-11-10 00:00:00","ValidTo":"2021-11-10 00:00:00","Signature":"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","SignatureAlgorithmOID":"1.2.840.113549.1.1.5","IsCertificateAuthority":true,"SerialNumber":"06fdf9039603adea000aeb3f27bbba1b","Version":3,"CertificateType":"CA","IsCodeSigning":true,"IsCA":true,"TBS":{"MD5":"4e5ad189638cf52ba9cd881d4d44668c","SHA1":"cdc115e98d798b33904c820d63cc1e1afc19251d","SHA256":"37560fb9d548ab62cc3ed4669a4ab74828b5a108e67e829937ffb2d10a5f78dd","SHA384":"173bfb77183785621ef15f43ea807338cea6a02e8183317d9ef050c7237adda3fa2a5bdcd5a4c96da9f2c55900675b9f"}}],"Signer":[{"SerialNumber":"0ef5eca7bd31cfc3a7f8e6259b423359","Issuer":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance Code Signing CA,1","Version":1}]}],"LoadsDespiteHVCI":"FALSE"}]}