Description PGPwded.sys in Symantec Encryption Desktop and Symantec Endpoint Encryption is affected by CVE-2019-9702. The storage filter exposes raw-disk read and write IOCTLs 0x8002206C and 0x80022070. Public research shows that a low-privileged user can reach these operations through a trusted PGP process, overwrite sectors backing protected system files, and gain SYSTEM execution after reboot. Symantec Encryption Desktop is affected in all versions and Symantec Endpoint Encryption is affected before 11.3.0.
UUID : 1a0fab94-f4a7-48c2-a2f4-72d19c382642Created : 2026-08-31Author : Michael HaagAcknowledgement : fluffycats31 | @fluffycats31 Download
This download link contains the vulnerable driver!
Block PGPwded.sys across your endpoints Add this driver to your block policy in minutes with MagicSword, threat-driven application control. Free for up to 100 endpoints.
Start Blocking for Free Commands sc.exe create PGPwded type= kernel binPath= C:\\windows\\temp\\PGPwded.sys && sc.exe start PGPwded
Use Case Privileges Operating System Elevate privileges User Windows
Detections Sigma 🛡️ Expand Names
detects loading using name only
Hashes
detects loading using hashes only
Resources https://github.com/magicsword-io/LOLDrivers/issues/409 https://github.com/fluffycats31/vulnerable-drivers https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/0/0/symsa1485 https://nvd.nist.gov/vuln/detail/CVE-2019-9702 https://github.com/DavidCarliez/CVE-2019-9702_Symantec_Encryption_Desktop_LPE_PoC CVE CVE-2019-9702 Known Vulnerable Samples Download
Certificates Expand Certificate 08ad40b260d29c4c9f5ecda9bd93aed9 Field Value ToBeSigned (TBS) MD5 5d8003a64dfa5a4d88365da1566038cb ToBeSigned (TBS) SHA1 79465b56bc7ad55a37bdf633943da8bfc84db228 ToBeSigned (TBS) SHA256 84bdc82e2f2a7f7aaa782667dac556ffcb2b33240c1f9c0a00a3264526a98332 Subject C=US, O=DigiCert, Inc., CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 ValidFrom 2021-04-29 00:00:00 ValidTo 2036-04-28 23:59:59 Signature 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 SignatureAlgorithmOID 1.2.840.113549.1.1.12 IsCertificateAuthority True SerialNumber 08ad40b260d29c4c9f5ecda9bd93aed9 Version 3
Certificate 090c3aaa41901d6ad321fddea91e1366 Field Value ToBeSigned (TBS) MD5 c5a9b13894baa951ef81c2b092800154 ToBeSigned (TBS) SHA1 fcd2e70f37161140c551364aeda08fd0460212f2 ToBeSigned (TBS) SHA256 2bd8039f7bab429ce858701eae8e80f453b1f824923511c96af7e6a1f4a7df1e Subject C=US, ST=California, L=San Jose, O=Broadcom Inc, CN=Broadcom Inc ValidFrom 2023-03-20 00:00:00 ValidTo 2026-03-19 23:59:59 Signature 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 SignatureAlgorithmOID 1.2.840.113549.1.1.11 IsCertificateAuthority False SerialNumber 090c3aaa41901d6ad321fddea91e1366 Version 3
Imports Expand Imported Functions Expand NtFsControlFile DbgPrint RtlInitializeBitMap RtlClearBits RtlSetBits RtlAreBitsClear RtlAreBitsSet RtlInitUnicodeString RtlEqualUnicodeString KeEnterCriticalRegion KeLeaveCriticalRegion MmBuildMdlForNonPagedPool MmAllocateContiguousMemory MmFreeContiguousMemory IoAllocateMdl PsSetLoadImageNotifyRoutine NtBuildNumber KeInitializeEvent KeWaitForSingleObject ExInterlockedInsertTailList ExInterlockedRemoveHeadList IoBuildDeviceIoControlRequest IofCallDriver IoGetDeviceObjectPointer IoAllocateWorkItem IoFreeWorkItem IoQueueWorkItem ExQueryDepthSList ExpInterlockedPopEntrySList ExpInterlockedPushEntrySList ExInitializeNPagedLookasideList KeInitializeDpc KeInitializeTimer KeCancelTimer KeSetTimer ExAllocatePoolWithTag ExFreePoolWithTag ExQueueWorkItem ExCreateCallback ExRegisterCallback ObfDereferenceObject ZwPowerInformation RtlInitAnsiString RtlDeleteRegistryValue RtlCompareUnicodeString RtlCopyUnicodeString RtlAppendUnicodeStringToString RtlGetVersion KeSetEvent ExAllocatePool MmGetSystemRoutineAddress ObReferenceObjectByHandle ObfReferenceObject ZwClose ZwCreateKey ZwOpenKey ZwDeleteValueKey ZwQueryValueKey ZwSetValueKey PsGetCurrentProcessId ObOpenObjectByPointer ObQueryNameString IoGetDeviceProperty KeClearEvent KeResetEvent IoInitializeRemoveLockEx InitSafeBootMode _purecall IoBuildSynchronousFsdRequest KeReleaseSemaphore MmMapIoSpace MmUnmapIoSpace PsGetVersion IofCompleteRequest IoCreateDevice IoCreateSymbolicLink IoDeleteDevice IoGetCurrentProcess IoRegisterShutdownNotification ZwOpenSymbolicLinkObject ZwQuerySymbolicLinkObject ZwDeviceIoControlFile NtCreateFile ZwCreateEvent ExEventObjectType MmMapLockedPagesSpecifyCache KeInitializeSemaphore ExAcquireFastMutex ExReleaseFastMutex ExInitializeResourceLite ExAcquireResourceSharedLite ExAcquireResourceExclusiveLite ExReleaseResourceLite ExDeleteResourceLite PsCreateSystemThread wcsstr _wcsicmp ZwCreateFile ZwReadFile ZwWriteFile ZwQueryVolumeInformationFile NtQueryInformationFile NtSetInformationFile NtClose ZwDeleteFile MmUnlockPages MmUnmapLockedPages IoBuildAsynchronousFsdRequest IoFreeIrp IoFreeMdl ObReferenceObjectByPointer PsThreadType ObOpenObjectByName ExSemaphoreObjectType IoAttachDeviceToDeviceStack IoDetachDevice IoAcquireRemoveLockEx IoReleaseRemoveLockEx IoReleaseRemoveLockAndWaitEx PoCallDriver PoStartNextPowerIrp VerSetConditionMask RtlVerifyVersionInfo tolower RtlTimeFieldsToTime ExSystemTimeToLocalTime _strnicmp wcschr RtlCheckRegistryKey ZwOpenFile _vsnwprintf IoAllocateIrp ZwDeleteKey ZwEnumerateKey ZwEnumerateValueKey RtlFreeUnicodeString RtlUpcaseUnicodeString Exported Functions Expand Sections Expand .text LOCKCODE .rdata .data .pdata LOCKDATA bghkprms INIT .rsrc .reloc Signature Expand {
"Certificates": [
{
"CertificateType": "CA",
"IsCA": true,
"IsCertificateAuthority": true,
"IsCodeSigning": true,
"SerialNumber": "08ad40b260d29c4c9f5ecda9bd93aed9",
"Signature": "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",
"SignatureAlgorithmOID": "1.2.840.113549.1.1.12",
"Subject": "C=US, O=DigiCert, Inc., CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1",
"TBS": {
"MD5": "5d8003a64dfa5a4d88365da1566038cb",
"SHA1": "79465b56bc7ad55a37bdf633943da8bfc84db228",
"SHA256": "84bdc82e2f2a7f7aaa782667dac556ffcb2b33240c1f9c0a00a3264526a98332",
"SHA384": "65b1d4076a89ae273f57e6eeedecb3eae129b4168f76fa7671914cdf461d542255c59d9b85b916ae0ca6fc0fcf7a8e64"
},
"ValidFrom": "2021-04-29 00:00:00",
"ValidTo": "2036-04-28 23:59:59",
"Version": 3
},
{
"CertificateType": "Leaf (Code Signing)",
"IsCA": false,
"IsCertificateAuthority": false,
"IsCodeSigning": true,
"SerialNumber": "090c3aaa41901d6ad321fddea91e1366",
"Signature": "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",
"SignatureAlgorithmOID": "1.2.840.113549.1.1.11",
"Subject": "C=US, ST=California, L=San Jose, O=Broadcom Inc, CN=Broadcom Inc",
"TBS": {
"MD5": "c5a9b13894baa951ef81c2b092800154",
"SHA1": "fcd2e70f37161140c551364aeda08fd0460212f2",
"SHA256": "2bd8039f7bab429ce858701eae8e80f453b1f824923511c96af7e6a1f4a7df1e",
"SHA384": "e21db8148aad738da556a69292561419f1278df1988e56d0f60921b92bd04bd1b3f748e4315c37bcde2f143f7e6f73a7"
},
"ValidFrom": "2023-03-20 00:00:00",
"ValidTo": "2026-03-19 23:59:59",
"Version": 3
}
],
"CertificatesInfo": "",
"Signer": [
{
"Issuer": "C=US, O=DigiCert, Inc., CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1",
"SerialNumber": "090c3aaa41901d6ad321fddea91e1366",
"Version": 1
}
],
"SignerInfo": ""
}
Download
Certificates Expand Certificate 7b46246b3b56ee913595ac77d43f7239 Field Value ToBeSigned (TBS) MD5 253489f34f86f42e16b9ce03c1b9a65f ToBeSigned (TBS) SHA1 546abee7c949014efb7f8bb005d4219c62f6cc95 ToBeSigned (TBS) SHA256 b16f9608f6e5d9137363713a045b43c00912464a201fa01bf2ef1d0ddc4dcd32 Subject C=US, ST=California, L=San Jose, O=Broadcom Inc, OU=SED, CN=Broadcom Inc ValidFrom 2020-04-28 00:00:00 ValidTo 2023-04-29 23:59:59 Signature 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 SignatureAlgorithmOID 1.2.840.113549.1.1.11 IsCertificateAuthority False SerialNumber 7b46246b3b56ee913595ac77d43f7239 Version 3
Certificate 3d78d7f9764960b2617df4f01eca862a Field Value ToBeSigned (TBS) MD5 1f056ff7d5f874984dc605402b7cb042 ToBeSigned (TBS) SHA1 bdb348353a2203deb4b767914fa1bd7248dd728b ToBeSigned (TBS) SHA256 a08e79c386083d875014c409c13d144e0a24386132980df11ff59737c8489eb1 Subject C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 SHA256 Code Signing CA ValidFrom 2013-12-10 00:00:00 ValidTo 2023-12-09 23:59:59 Signature 13851a1e69a937f7a0bda4af7e1d6153fe9d8c5e0ca6751e781723ddfdec1a035539fb7195c7655aa78e30d2445a61db706fda2105c22e73ba49f1d193fe5dc9cd5e03e0899e3f741ed7f7388ba9d6cfbb352f3358a89256d1c84d3b82e6798416fc28b0b147f31da23eee87d9a67fa456a53fad842e29de7cbca8aaa33d0401eaba93a20e502229174c87e43a115fd6a425899b056b2fb4c9014c277b0bac190522a060153fdac9fb4d4c8ffb726777fd2794c7ba350e8849fe8dfd28af4a12bd0db39705de440c15fa362b03dcc15001f1a1115d14e5e2bd274b54be2b845e0fa6c374050aef97c38922b11f77f3bdcd43d4f14ca93fb58b84af64f2d01421 SignatureAlgorithmOID 1.2.840.113549.1.1.11 IsCertificateAuthority True SerialNumber 3d78d7f9764960b2617df4f01eca862a Version 3
Certificate 611993e400000000001c Field Value ToBeSigned (TBS) MD5 78a717e082dcc1cda3458d917e677d14 ToBeSigned (TBS) SHA1 4a872e0e51f9b304469cd1dedb496ee9b8b983a4 ToBeSigned (TBS) SHA256 317fa1d234ebc49040ebc5e8746f8997471496051b185a91bdd9dfbb23fab5f8 Subject C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. , For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority , G5 ValidFrom 2011-02-22 19:25:17 ValidTo 2021-02-22 19:35:17 Signature 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 SignatureAlgorithmOID 1.2.840.113549.1.1.5 IsCertificateAuthority True SerialNumber 611993e400000000001c Version 3
Imports Expand Imported Functions Expand KeLeaveCriticalRegion KeEnterCriticalRegion RtlEqualUnicodeString RtlInitUnicodeString NtBuildNumber DbgPrint MmBuildMdlForNonPagedPool MmFreeContiguousMemory IoAllocateMdl MmAllocateContiguousMemory PsSetLoadImageNotifyRoutine KeWaitForSingleObject IofCallDriver IoBuildDeviceIoControlRequest KeInitializeEvent ExInterlockedRemoveHeadList IoFreeWorkItem IoGetDeviceObjectPointer IoQueueWorkItem IoAllocateWorkItem ExInterlockedInsertTailList ExpInterlockedPopEntrySList ExpInterlockedPushEntrySList ExQueryDepthSList ExDeleteNPagedLookasideList ExInitializeNPagedLookasideList ZwPowerInformation ExUnregisterCallback ExFreePoolWithTag KeSetTimer KeCancelTimer ExQueueWorkItem ExAllocatePoolWithTag ObfDereferenceObject ExRegisterCallback ExCreateCallback KeInitializeDpc KeInitializeTimer RtlCopyUnicodeString RtlAppendUnicodeStringToString RtlCompareUnicodeString ZwOpenKey ZwClose ZwDeleteValueKey ZwCreateKey ZwSetValueKey ZwQueryValueKey ObReferenceObjectByHandle KeSetEvent ObOpenObjectByPointer RtlGetVersion RtlInitAnsiString RtlDeleteRegistryValue MmGetSystemRoutineAddress PsGetCurrentProcessId ObQueryNameString ObfReferenceObject KeDelayExecutionThread IoGetDeviceProperty IoInitializeRemoveLockEx InitSafeBootMode KeClearEvent KeResetEvent _purecall IoBuildSynchronousFsdRequest MmUnmapIoSpace MmMapIoSpace IoRegisterShutdownNotification IoDeleteDevice IoCreateSymbolicLink IoCreateDevice IoDeleteSymbolicLink ExEventObjectType ZwCreateEvent ZwDeviceIoControlFile NtCreateFile KeReleaseSemaphore ZwQuerySymbolicLinkObject ZwOpenSymbolicLinkObject PsGetVersion IoGetCurrentProcess PsCreateSystemThread IofCompleteRequest MmMapLockedPagesSpecifyCache PsTerminateSystemThread ExAcquireFastMutex ExReleaseFastMutex KeAcquireSpinLockRaiseToDpc KeReleaseSpinLock KeInitializeSemaphore ExInitializeResourceLite ExDeleteResourceLite ExAcquireResourceSharedLite ExReleaseResourceLite ExAcquireResourceExclusiveLite ObReferenceObjectByPointer PsThreadType IoBuildAsynchronousFsdRequest IoFreeIrp IoFreeMdl MmUnlockPages MmUnmapLockedPages KeReadStateSemaphore ExSemaphoreObjectType ObInsertObject ObCreateObject ObOpenObjectByName PoStartNextPowerIrp PoCallDriver IoAttachDeviceToDeviceStack IoReleaseRemoveLockEx IoDetachDevice IoReleaseRemoveLockAndWaitEx IoAcquireRemoveLockEx RtlVerifyVersionInfo VerSetConditionMask KeQueryActiveProcessors NtFsControlFile RtlInitializeBitMap RtlSetBits RtlAreBitsClear RtlClearBits RtlAreBitsSet _wcsicmp ZwQueryVolumeInformationFile tolower NtQueryInformationFile ZwReadFile ZwCreateFile wcsstr ZwWriteFile NtSetInformationFile ZwDeleteFile NtClose RtlTimeFieldsToTime ExSystemTimeToLocalTime _strnicmp _vsnwprintf RtlCheckRegistryKey ZwOpenFile wcschr ZwEnumerateValueKey ZwEnumerateKey ZwDeleteKey IoAllocateIrp RtlFreeUnicodeString RtlUpcaseUnicodeString Exported Functions Expand Sections Expand .text LOCKCODE INIT .rdata .data .pdata LOCKDATA bghkprms .rsrc .reloc Signature Expand {
"Certificates": [
{
"CertificateType": "CA",
"IsCA": true,
"IsCertificateAuthority": true,
"IsCodeSigning": true,
"SerialNumber": "08ad40b260d29c4c9f5ecda9bd93aed9",
"Signature": "3a23443d8d0876ee8fbc3a99d356e0021aa5f84834f32cb6e67466f79472b100caaf6c302713129e90449f4bfd9ea37c26d537bc3a5d486d95d53f49f427bb16814550fd9cbdb685e0767e3771cb22f75aaa90cff5936ae3eb20d1d55079889a8a8ac1b6bda148187edcd8801a111918cd61998156f6c9e376e7c4e41b5f43f83e94ff76393d9ed499cf4add28eb5f26a1955848d51afed7273ffd90d17686dd1cb0605cf30da8eee089a1bd39e1384eda6ebb369dfbe521535ac3cae96af1a23edb43b833c84f38149299f5ddce546dd95d02141f40337c03e295b2c221757352cb46d8c4341ca2a54b8dcd6f76372c853f1ace26e918be9007b0437f9588208270f0cccaeffd29355c1f893855f7378a8b09a1cb0be9311aff2e195c3971e1be9ca70a06d62667b792e64e5fde7aac49cf2ea47492addb3ca49c861fe3c1561b2b23ff8fb5ea887b706be6a0bafd3a3f45a6c4e81691528b41c048844b964dab4440e38df01528ceedf11856072a2f10c40c08643c338fae288c3ccb8f880b0dbf3bf4ce1e7b8eefb5ebcbb7f07713e6e7283fac12aea52f226c41f9825c1566cc6c0ecac586c3f626330c074ba0d307026a6a4030484b34a85120bbad1b8508e2590d6dca05502bea4a1c9ea5fda0a71f0674e7f2d65290fdaf854821f9573bb49c03ed8645f4b4616ebf68e2266086eac8afa9fe941de7631b3a8656784e",
"SignatureAlgorithmOID": "1.2.840.113549.1.1.12",
"Subject": "C=US, O=DigiCert, Inc., CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1",
"TBS": {
"MD5": "5d8003a64dfa5a4d88365da1566038cb",
"SHA1": "79465b56bc7ad55a37bdf633943da8bfc84db228",
"SHA256": "84bdc82e2f2a7f7aaa782667dac556ffcb2b33240c1f9c0a00a3264526a98332",
"SHA384": "65b1d4076a89ae273f57e6eeedecb3eae129b4168f76fa7671914cdf461d542255c59d9b85b916ae0ca6fc0fcf7a8e64"
},
"ValidFrom": "2021-04-29 00:00:00",
"ValidTo": "2036-04-28 23:59:59",
"Version": 3
},
{
"CertificateType": "Leaf (Code Signing)",
"IsCA": false,
"IsCertificateAuthority": false,
"IsCodeSigning": true,
"SerialNumber": "090c3aaa41901d6ad321fddea91e1366",
"Signature": "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",
"SignatureAlgorithmOID": "1.2.840.113549.1.1.11",
"Subject": "C=US, ST=California, L=San Jose, O=Broadcom Inc, CN=Broadcom Inc",
"TBS": {
"MD5": "c5a9b13894baa951ef81c2b092800154",
"SHA1": "fcd2e70f37161140c551364aeda08fd0460212f2",
"SHA256": "2bd8039f7bab429ce858701eae8e80f453b1f824923511c96af7e6a1f4a7df1e",
"SHA384": "e21db8148aad738da556a69292561419f1278df1988e56d0f60921b92bd04bd1b3f748e4315c37bcde2f143f7e6f73a7"
},
"ValidFrom": "2023-03-20 00:00:00",
"ValidTo": "2026-03-19 23:59:59",
"Version": 3
}
],
"CertificatesInfo": "",
"Signer": [
{
"Issuer": "C=US, O=DigiCert, Inc., CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1",
"SerialNumber": "090c3aaa41901d6ad321fddea91e1366",
"Version": 1
}
],
"SignerInfo": ""
}
Download
Certificates Expand Certificate 7e93ebfb7cc64e59ea4b9a77d406fc3b Field Value ToBeSigned (TBS) MD5 d0785ad36e427c92b19f6826ab1e8020 ToBeSigned (TBS) SHA1 365b7a9c21bd9373e49052c3e7b3e4646ddd4d43 ToBeSigned (TBS) SHA256 c2abb7484da91a658548de089d52436175fdb760a1387d225611dc0613a1e2ff Subject C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA , G2 ValidFrom 2012-12-21 00:00:00 ValidTo 2020-12-30 23:59:59 Signature 03099b8f79ef7f5930aaef68b5fae3091dbb4f82065d375fa6529f168dea1c9209446ef56deb587c30e8f9698d23730b126f47a9ae3911f82ab19bb01ac38eeb599600adce0c4db2d031a6085c2a7afce27a1d574ca86518e979406225966ec7c7376a8321088e41eaddd9573f1d7749872a16065ea6386a2212a35119837eb6 SignatureAlgorithmOID 1.2.840.113549.1.1.5 IsCertificateAuthority True SerialNumber 7e93ebfb7cc64e59ea4b9a77d406fc3b Version 3
Certificate 0ecff438c8febf356e04d86a981b1a50 Field Value ToBeSigned (TBS) MD5 e9d38360b914c8863f6cba3ee58764d3 ToBeSigned (TBS) SHA1 4cba8eae47b6bf76f20b3504b98b8f062694a89b ToBeSigned (TBS) SHA256 88901d86a4cc1f1bb193d08e1fb63d27452e63f83e228c657ab1a92e4ade3976 Subject C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer , G4 ValidFrom 2012-10-18 00:00:00 ValidTo 2020-12-29 23:59:59 Signature 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 SignatureAlgorithmOID 1.2.840.113549.1.1.5 IsCertificateAuthority False SerialNumber 0ecff438c8febf356e04d86a981b1a50 Version 3
Certificate 14baa0a5163f9626e487698c694a601c Field Value ToBeSigned (TBS) MD5 b425014bae4d5988cedaae5d11f3e437 ToBeSigned (TBS) SHA1 5be6aed597874b88e9ba5c5b97a634d208c7ac9f ToBeSigned (TBS) SHA256 65c7117461ee4aca3f4054db5654866449498f460a24e801268aac7f7128b567 Subject C=US, ST=California, L=Mountain View, O=Symantec Corporation, OU=DATA LOSS PREVENTION, CN=Symantec Corporation ValidFrom 2017-11-06 00:00:00 ValidTo 2019-01-07 23:59:59 Signature 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 SignatureAlgorithmOID 1.2.840.113549.1.1.5 IsCertificateAuthority False SerialNumber 14baa0a5163f9626e487698c694a601c Version 3
Certificate 611993e400000000001c Field Value ToBeSigned (TBS) MD5 78a717e082dcc1cda3458d917e677d14 ToBeSigned (TBS) SHA1 4a872e0e51f9b304469cd1dedb496ee9b8b983a4 ToBeSigned (TBS) SHA256 317fa1d234ebc49040ebc5e8746f8997471496051b185a91bdd9dfbb23fab5f8 Subject C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. , For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority , G5 ValidFrom 2011-02-22 19:25:17 ValidTo 2021-02-22 19:35:17 Signature 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 SignatureAlgorithmOID 1.2.840.113549.1.1.5 IsCertificateAuthority True SerialNumber 611993e400000000001c Version 3
Certificate 5200e5aa2556fc1a86ed96c9d44b33c7 Field Value ToBeSigned (TBS) MD5 b30c31a572b0409383ed3fbe17e56e81 ToBeSigned (TBS) SHA1 4843a82ed3b1f2bfbee9671960e1940c942f688d ToBeSigned (TBS) SHA256 03cda47a6e654ed85d932714fc09ce4874600eda29ec6628cfbaeb155cab78c9 Subject C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA ValidFrom 2010-02-08 00:00:00 ValidTo 2020-02-07 23:59:59 Signature 5622e634a4c461cb48b901ad56a8640fd98c91c4bbcc0ce5ad7aa0227fdf47384a2d6cd17f711a7cec70a9b1f04fe40f0c53fa155efe749849248581261c911447b04c638cbba134d4c645e80d85267303d0a98c646ddc7192e645056015595139fc58146bfed4a4ed796b080c4172e737220609be23e93f449a1ee9619dccb1905cfc3dd28dac423d6536d4b43d40288f9b10cf2326cc4b20cb901f5d8c4c34ca3cd8e537d66fa520bd34eb26d9ae0de7c59af7a1b42191336f86e858bb257c740e58fe751b633fce317c9b8f1b969ec55376845b9cad91faaced93ba5dc82153c2825363af120d5087111b3d5452968a2c9c3d921a089a052ec793a54891d3 SignatureAlgorithmOID 1.2.840.113549.1.1.5 IsCertificateAuthority True SerialNumber 5200e5aa2556fc1a86ed96c9d44b33c7 Version 3
Imports Expand Imported Functions Expand KeLeaveCriticalRegion KeEnterCriticalRegion RtlEqualUnicodeString RtlInitUnicodeString NtBuildNumber DbgPrint MmBuildMdlForNonPagedPool MmFreeContiguousMemory IoAllocateMdl MmAllocateContiguousMemory PsSetLoadImageNotifyRoutine KeWaitForSingleObject IofCallDriver IoBuildDeviceIoControlRequest KeInitializeEvent ExInterlockedRemoveHeadList IoFreeWorkItem IoGetDeviceObjectPointer IoQueueWorkItem IoAllocateWorkItem ExInterlockedInsertTailList ExpInterlockedPopEntrySList ExpInterlockedPushEntrySList ExQueryDepthSList ExDeleteNPagedLookasideList ExInitializeNPagedLookasideList ZwPowerInformation ExUnregisterCallback ExFreePoolWithTag KeSetTimer KeCancelTimer ExQueueWorkItem ExAllocatePoolWithTag ObfDereferenceObject ExRegisterCallback ExCreateCallback KeInitializeDpc KeInitializeTimer RtlCopyUnicodeString RtlAppendUnicodeStringToString RtlCompareUnicodeString ZwOpenKey ZwClose ZwDeleteValueKey ZwCreateKey ZwSetValueKey ZwQueryValueKey ObReferenceObjectByHandle KeSetEvent ObOpenObjectByPointer RtlGetVersion RtlInitAnsiString RtlDeleteRegistryValue MmGetSystemRoutineAddress PsGetCurrentProcessId ObQueryNameString ObfReferenceObject KeDelayExecutionThread IoGetDeviceProperty IoInitializeRemoveLockEx InitSafeBootMode KeClearEvent KeResetEvent _purecall IoBuildSynchronousFsdRequest MmUnmapIoSpace MmMapIoSpace IoRegisterShutdownNotification IoDeleteDevice IoCreateSymbolicLink IoCreateDevice IoDeleteSymbolicLink ExEventObjectType ZwCreateEvent ZwDeviceIoControlFile NtCreateFile KeReleaseSemaphore ZwQuerySymbolicLinkObject ZwOpenSymbolicLinkObject PsGetVersion IoGetCurrentProcess PsCreateSystemThread IofCompleteRequest MmMapLockedPagesSpecifyCache PsTerminateSystemThread ExAcquireFastMutex ExReleaseFastMutex KeAcquireSpinLockRaiseToDpc KeReleaseSpinLock KeInitializeSemaphore ExInitializeResourceLite ExDeleteResourceLite ExAcquireResourceSharedLite ExReleaseResourceLite ExAcquireResourceExclusiveLite ObReferenceObjectByPointer PsThreadType IoBuildAsynchronousFsdRequest IoFreeIrp IoFreeMdl MmUnlockPages MmUnmapLockedPages KeReadStateSemaphore ExSemaphoreObjectType ObInsertObject ObCreateObject ObOpenObjectByName PoStartNextPowerIrp PoCallDriver IoAttachDeviceToDeviceStack IoReleaseRemoveLockEx IoDetachDevice IoReleaseRemoveLockAndWaitEx IoAcquireRemoveLockEx RtlVerifyVersionInfo VerSetConditionMask KeQueryActiveProcessors NtFsControlFile RtlInitializeBitMap RtlSetBits RtlAreBitsClear RtlClearBits RtlAreBitsSet _wcsicmp ZwQueryVolumeInformationFile tolower NtQueryInformationFile ZwReadFile ZwCreateFile wcsstr ZwWriteFile NtSetInformationFile ZwDeleteFile NtClose RtlTimeFieldsToTime ExSystemTimeToLocalTime _strnicmp _vsnwprintf RtlCheckRegistryKey ZwOpenFile wcschr ZwEnumerateValueKey ZwEnumerateKey ZwDeleteKey IoAllocateIrp RtlFreeUnicodeString RtlUpcaseUnicodeString Exported Functions Expand Sections Expand .text LOCKCODE INIT .rdata .data .pdata LOCKDATA bghkprms .rsrc .reloc Signature Expand {
"Certificates": [
{
"CertificateType": "CA",
"IsCA": true,
"IsCertificateAuthority": true,
"IsCodeSigning": true,
"SerialNumber": "08ad40b260d29c4c9f5ecda9bd93aed9",
"Signature": "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",
"SignatureAlgorithmOID": "1.2.840.113549.1.1.12",
"Subject": "C=US, O=DigiCert, Inc., CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1",
"TBS": {
"MD5": "5d8003a64dfa5a4d88365da1566038cb",
"SHA1": "79465b56bc7ad55a37bdf633943da8bfc84db228",
"SHA256": "84bdc82e2f2a7f7aaa782667dac556ffcb2b33240c1f9c0a00a3264526a98332",
"SHA384": "65b1d4076a89ae273f57e6eeedecb3eae129b4168f76fa7671914cdf461d542255c59d9b85b916ae0ca6fc0fcf7a8e64"
},
"ValidFrom": "2021-04-29 00:00:00",
"ValidTo": "2036-04-28 23:59:59",
"Version": 3
},
{
"CertificateType": "Leaf (Code Signing)",
"IsCA": false,
"IsCertificateAuthority": false,
"IsCodeSigning": true,
"SerialNumber": "090c3aaa41901d6ad321fddea91e1366",
"Signature": "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",
"SignatureAlgorithmOID": "1.2.840.113549.1.1.11",
"Subject": "C=US, ST=California, L=San Jose, O=Broadcom Inc, CN=Broadcom Inc",
"TBS": {
"MD5": "c5a9b13894baa951ef81c2b092800154",
"SHA1": "fcd2e70f37161140c551364aeda08fd0460212f2",
"SHA256": "2bd8039f7bab429ce858701eae8e80f453b1f824923511c96af7e6a1f4a7df1e",
"SHA384": "e21db8148aad738da556a69292561419f1278df1988e56d0f60921b92bd04bd1b3f748e4315c37bcde2f143f7e6f73a7"
},
"ValidFrom": "2023-03-20 00:00:00",
"ValidTo": "2026-03-19 23:59:59",
"Version": 3
}
],
"CertificatesInfo": "",
"Signer": [
{
"Issuer": "C=US, O=DigiCert, Inc., CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1",
"SerialNumber": "090c3aaa41901d6ad321fddea91e1366",
"Version": 1
}
],
"SignerInfo": ""
}
Download
Certificates Expand Certificate 7e93ebfb7cc64e59ea4b9a77d406fc3b Field Value ToBeSigned (TBS) MD5 d0785ad36e427c92b19f6826ab1e8020 ToBeSigned (TBS) SHA1 365b7a9c21bd9373e49052c3e7b3e4646ddd4d43 ToBeSigned (TBS) SHA256 c2abb7484da91a658548de089d52436175fdb760a1387d225611dc0613a1e2ff Subject C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA , G2 ValidFrom 2012-12-21 00:00:00 ValidTo 2020-12-30 23:59:59 Signature 03099b8f79ef7f5930aaef68b5fae3091dbb4f82065d375fa6529f168dea1c9209446ef56deb587c30e8f9698d23730b126f47a9ae3911f82ab19bb01ac38eeb599600adce0c4db2d031a6085c2a7afce27a1d574ca86518e979406225966ec7c7376a8321088e41eaddd9573f1d7749872a16065ea6386a2212a35119837eb6 SignatureAlgorithmOID 1.2.840.113549.1.1.5 IsCertificateAuthority True SerialNumber 7e93ebfb7cc64e59ea4b9a77d406fc3b Version 3
Certificate 0ecff438c8febf356e04d86a981b1a50 Field Value ToBeSigned (TBS) MD5 e9d38360b914c8863f6cba3ee58764d3 ToBeSigned (TBS) SHA1 4cba8eae47b6bf76f20b3504b98b8f062694a89b ToBeSigned (TBS) SHA256 88901d86a4cc1f1bb193d08e1fb63d27452e63f83e228c657ab1a92e4ade3976 Subject C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer , G4 ValidFrom 2012-10-18 00:00:00 ValidTo 2020-12-29 23:59:59 Signature 783bb4912a004cf08f62303778a38427076f18b2de25dca0d49403aa864e259f9a40031cddcee379cb216806dab632b46dbff42c266333e449646d0de6c3670ef705a4356c7c8916c6e9b2dfb2e9dd20c6710fcd9574dcb65cdebd371f4378e678b5cd280420a3aaf14bc48829910e80d111fcdd5c766e4f5e0e4546416e0db0ea389ab13ada097110fc1c79b4807bac69f4fd9cb60c162bf17f5b093d9b5be216ca13816d002e380da8298f2ce1b2f45aa901af159c2c2f491bdb22bbc3fe789451c386b182885df03db451a179332b2e7bb9dc20091371eb6a195bcfe8a530572c89493fb9cf7fc9bf3e226863539abd6974acc51d3c7f92e0c3bc1cd80475 SignatureAlgorithmOID 1.2.840.113549.1.1.5 IsCertificateAuthority False SerialNumber 0ecff438c8febf356e04d86a981b1a50 Version 3
Certificate 14baa0a5163f9626e487698c694a601c Field Value ToBeSigned (TBS) MD5 b425014bae4d5988cedaae5d11f3e437 ToBeSigned (TBS) SHA1 5be6aed597874b88e9ba5c5b97a634d208c7ac9f ToBeSigned (TBS) SHA256 65c7117461ee4aca3f4054db5654866449498f460a24e801268aac7f7128b567 Subject C=US, ST=California, L=Mountain View, O=Symantec Corporation, OU=DATA LOSS PREVENTION, CN=Symantec Corporation ValidFrom 2017-11-06 00:00:00 ValidTo 2019-01-07 23:59:59 Signature 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 SignatureAlgorithmOID 1.2.840.113549.1.1.5 IsCertificateAuthority False SerialNumber 14baa0a5163f9626e487698c694a601c Version 3
Certificate 611993e400000000001c Field Value ToBeSigned (TBS) MD5 78a717e082dcc1cda3458d917e677d14 ToBeSigned (TBS) SHA1 4a872e0e51f9b304469cd1dedb496ee9b8b983a4 ToBeSigned (TBS) SHA256 317fa1d234ebc49040ebc5e8746f8997471496051b185a91bdd9dfbb23fab5f8 Subject C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. , For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority , G5 ValidFrom 2011-02-22 19:25:17 ValidTo 2021-02-22 19:35:17 Signature 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 SignatureAlgorithmOID 1.2.840.113549.1.1.5 IsCertificateAuthority True SerialNumber 611993e400000000001c Version 3
Certificate 5200e5aa2556fc1a86ed96c9d44b33c7 Field Value ToBeSigned (TBS) MD5 b30c31a572b0409383ed3fbe17e56e81 ToBeSigned (TBS) SHA1 4843a82ed3b1f2bfbee9671960e1940c942f688d ToBeSigned (TBS) SHA256 03cda47a6e654ed85d932714fc09ce4874600eda29ec6628cfbaeb155cab78c9 Subject C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA ValidFrom 2010-02-08 00:00:00 ValidTo 2020-02-07 23:59:59 Signature 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 SignatureAlgorithmOID 1.2.840.113549.1.1.5 IsCertificateAuthority True SerialNumber 5200e5aa2556fc1a86ed96c9d44b33c7 Version 3
Imports Expand Imported Functions Expand KeLeaveCriticalRegion KeEnterCriticalRegion RtlEqualUnicodeString RtlInitUnicodeString NtBuildNumber DbgPrint MmBuildMdlForNonPagedPool MmFreeContiguousMemory IoAllocateMdl MmAllocateContiguousMemory PsSetLoadImageNotifyRoutine KeWaitForSingleObject IofCallDriver IoBuildDeviceIoControlRequest KeInitializeEvent ExInterlockedRemoveHeadList IoFreeWorkItem IoGetDeviceObjectPointer IoQueueWorkItem IoAllocateWorkItem ExInterlockedInsertTailList ExpInterlockedPopEntrySList ExpInterlockedPushEntrySList ExQueryDepthSList ExDeleteNPagedLookasideList ExInitializeNPagedLookasideList ZwPowerInformation ExUnregisterCallback ExFreePoolWithTag KeSetTimer KeCancelTimer ExQueueWorkItem ExAllocatePoolWithTag ObfDereferenceObject ExRegisterCallback ExCreateCallback KeInitializeDpc KeInitializeTimer RtlCopyUnicodeString RtlAppendUnicodeStringToString RtlCompareUnicodeString ZwOpenKey ZwClose ZwDeleteValueKey ZwCreateKey ZwSetValueKey ZwQueryValueKey ObReferenceObjectByHandle KeSetEvent ObOpenObjectByPointer RtlGetVersion RtlInitAnsiString RtlDeleteRegistryValue MmGetSystemRoutineAddress PsGetCurrentProcessId ObQueryNameString ObfReferenceObject KeDelayExecutionThread IoGetDeviceProperty IoInitializeRemoveLockEx InitSafeBootMode KeClearEvent KeResetEvent _purecall IoBuildSynchronousFsdRequest MmUnmapIoSpace MmMapIoSpace IoRegisterShutdownNotification IoDeleteDevice IoCreateSymbolicLink IoCreateDevice IoDeleteSymbolicLink ExEventObjectType ZwCreateEvent ZwDeviceIoControlFile NtCreateFile KeReleaseSemaphore ZwQuerySymbolicLinkObject ZwOpenSymbolicLinkObject PsGetVersion IoGetCurrentProcess PsCreateSystemThread IofCompleteRequest MmMapLockedPagesSpecifyCache PsTerminateSystemThread ExAcquireFastMutex ExReleaseFastMutex KeAcquireSpinLockRaiseToDpc KeReleaseSpinLock KeInitializeSemaphore ExInitializeResourceLite ExDeleteResourceLite ExAcquireResourceSharedLite ExReleaseResourceLite ExAcquireResourceExclusiveLite ObReferenceObjectByPointer PsThreadType IoBuildAsynchronousFsdRequest IoFreeIrp IoFreeMdl MmUnlockPages MmUnmapLockedPages KeReadStateSemaphore ExSemaphoreObjectType ObInsertObject ObCreateObject ObOpenObjectByName PoStartNextPowerIrp PoCallDriver IoAttachDeviceToDeviceStack IoReleaseRemoveLockEx IoDetachDevice IoReleaseRemoveLockAndWaitEx IoAcquireRemoveLockEx RtlVerifyVersionInfo VerSetConditionMask KeQueryActiveProcessors NtFsControlFile RtlInitializeBitMap RtlSetBits RtlAreBitsClear RtlClearBits RtlAreBitsSet _wcsicmp ZwQueryVolumeInformationFile tolower NtQueryInformationFile ZwReadFile ZwCreateFile wcsstr ZwWriteFile NtSetInformationFile ZwDeleteFile NtClose RtlTimeFieldsToTime ExSystemTimeToLocalTime _strnicmp _vsnwprintf RtlCheckRegistryKey ZwOpenFile wcschr ZwEnumerateValueKey ZwEnumerateKey ZwDeleteKey IoAllocateIrp RtlFreeUnicodeString RtlUpcaseUnicodeString Exported Functions Expand Sections Expand .text LOCKCODE INIT .rdata .data .pdata LOCKDATA bghkprms .rsrc .reloc Signature Expand {
"Certificates": [
{
"CertificateType": "CA",
"IsCA": true,
"IsCertificateAuthority": true,
"IsCodeSigning": true,
"SerialNumber": "08ad40b260d29c4c9f5ecda9bd93aed9",
"Signature": "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",
"SignatureAlgorithmOID": "1.2.840.113549.1.1.12",
"Subject": "C=US, O=DigiCert, Inc., CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1",
"TBS": {
"MD5": "5d8003a64dfa5a4d88365da1566038cb",
"SHA1": "79465b56bc7ad55a37bdf633943da8bfc84db228",
"SHA256": "84bdc82e2f2a7f7aaa782667dac556ffcb2b33240c1f9c0a00a3264526a98332",
"SHA384": "65b1d4076a89ae273f57e6eeedecb3eae129b4168f76fa7671914cdf461d542255c59d9b85b916ae0ca6fc0fcf7a8e64"
},
"ValidFrom": "2021-04-29 00:00:00",
"ValidTo": "2036-04-28 23:59:59",
"Version": 3
},
{
"CertificateType": "Leaf (Code Signing)",
"IsCA": false,
"IsCertificateAuthority": false,
"IsCodeSigning": true,
"SerialNumber": "090c3aaa41901d6ad321fddea91e1366",
"Signature": "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",
"SignatureAlgorithmOID": "1.2.840.113549.1.1.11",
"Subject": "C=US, ST=California, L=San Jose, O=Broadcom Inc, CN=Broadcom Inc",
"TBS": {
"MD5": "c5a9b13894baa951ef81c2b092800154",
"SHA1": "fcd2e70f37161140c551364aeda08fd0460212f2",
"SHA256": "2bd8039f7bab429ce858701eae8e80f453b1f824923511c96af7e6a1f4a7df1e",
"SHA384": "e21db8148aad738da556a69292561419f1278df1988e56d0f60921b92bd04bd1b3f748e4315c37bcde2f143f7e6f73a7"
},
"ValidFrom": "2023-03-20 00:00:00",
"ValidTo": "2026-03-19 23:59:59",
"Version": 3
}
],
"CertificatesInfo": "",
"Signer": [
{
"Issuer": "C=US, O=DigiCert, Inc., CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1",
"SerialNumber": "090c3aaa41901d6ad321fddea91e1366",
"Version": 1
}
],
"SignerInfo": ""
}
Download
Certificates Expand Certificate 08ad40b260d29c4c9f5ecda9bd93aed9 Field Value ToBeSigned (TBS) MD5 5d8003a64dfa5a4d88365da1566038cb ToBeSigned (TBS) SHA1 79465b56bc7ad55a37bdf633943da8bfc84db228 ToBeSigned (TBS) SHA256 84bdc82e2f2a7f7aaa782667dac556ffcb2b33240c1f9c0a00a3264526a98332 Subject C=US, O=DigiCert, Inc., CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 ValidFrom 2021-04-29 00:00:00 ValidTo 2036-04-28 23:59:59 Signature 3a23443d8d0876ee8fbc3a99d356e0021aa5f84834f32cb6e67466f79472b100caaf6c302713129e90449f4bfd9ea37c26d537bc3a5d486d95d53f49f427bb16814550fd9cbdb685e0767e3771cb22f75aaa90cff5936ae3eb20d1d55079889a8a8ac1b6bda148187edcd8801a111918cd61998156f6c9e376e7c4e41b5f43f83e94ff76393d9ed499cf4add28eb5f26a1955848d51afed7273ffd90d17686dd1cb0605cf30da8eee089a1bd39e1384eda6ebb369dfbe521535ac3cae96af1a23edb43b833c84f38149299f5ddce546dd95d02141f40337c03e295b2c221757352cb46d8c4341ca2a54b8dcd6f76372c853f1ace26e918be9007b0437f9588208270f0cccaeffd29355c1f893855f7378a8b09a1cb0be9311aff2e195c3971e1be9ca70a06d62667b792e64e5fde7aac49cf2ea47492addb3ca49c861fe3c1561b2b23ff8fb5ea887b706be6a0bafd3a3f45a6c4e81691528b41c048844b964dab4440e38df01528ceedf11856072a2f10c40c08643c338fae288c3ccb8f880b0dbf3bf4ce1e7b8eefb5ebcbb7f07713e6e7283fac12aea52f226c41f9825c1566cc6c0ecac586c3f626330c074ba0d307026a6a4030484b34a85120bbad1b8508e2590d6dca05502bea4a1c9ea5fda0a71f0674e7f2d65290fdaf854821f9573bb49c03ed8645f4b4616ebf68e2266086eac8afa9fe941de7631b3a8656784e SignatureAlgorithmOID 1.2.840.113549.1.1.12 IsCertificateAuthority True SerialNumber 08ad40b260d29c4c9f5ecda9bd93aed9 Version 3
Certificate 090c3aaa41901d6ad321fddea91e1366 Field Value ToBeSigned (TBS) MD5 c5a9b13894baa951ef81c2b092800154 ToBeSigned (TBS) SHA1 fcd2e70f37161140c551364aeda08fd0460212f2 ToBeSigned (TBS) SHA256 2bd8039f7bab429ce858701eae8e80f453b1f824923511c96af7e6a1f4a7df1e Subject C=US, ST=California, L=San Jose, O=Broadcom Inc, CN=Broadcom Inc ValidFrom 2023-03-20 00:00:00 ValidTo 2026-03-19 23:59:59 Signature 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 SignatureAlgorithmOID 1.2.840.113549.1.1.11 IsCertificateAuthority False SerialNumber 090c3aaa41901d6ad321fddea91e1366 Version 3
Imports Expand Imported Functions Expand NtFsControlFile DbgPrint RtlInitializeBitMap RtlClearBits RtlSetBits RtlAreBitsClear RtlAreBitsSet RtlInitUnicodeString RtlEqualUnicodeString KeEnterCriticalRegion KeLeaveCriticalRegion MmBuildMdlForNonPagedPool MmAllocateContiguousMemory MmFreeContiguousMemory IoAllocateMdl PsSetLoadImageNotifyRoutine NtBuildNumber KeInitializeEvent KeWaitForSingleObject ExInterlockedInsertTailList ExInterlockedRemoveHeadList IoBuildDeviceIoControlRequest IofCallDriver IoGetDeviceObjectPointer IoAllocateWorkItem IoFreeWorkItem IoQueueWorkItem ExQueryDepthSList ExpInterlockedPopEntrySList ExpInterlockedPushEntrySList ExInitializeNPagedLookasideList KeInitializeDpc KeInitializeTimer KeCancelTimer KeSetTimer ExAllocatePoolWithTag ExFreePoolWithTag ExQueueWorkItem ExCreateCallback ExRegisterCallback ObfDereferenceObject ZwPowerInformation RtlInitAnsiString RtlDeleteRegistryValue RtlCompareUnicodeString RtlCopyUnicodeString RtlAppendUnicodeStringToString RtlGetVersion KeSetEvent ExAllocatePool MmGetSystemRoutineAddress ObReferenceObjectByHandle ObfReferenceObject ZwClose ZwCreateKey ZwOpenKey ZwDeleteValueKey ZwQueryValueKey ZwSetValueKey PsGetCurrentProcessId ObOpenObjectByPointer ObQueryNameString IoGetDeviceProperty KeClearEvent KeResetEvent IoInitializeRemoveLockEx InitSafeBootMode _purecall IoBuildSynchronousFsdRequest KeReleaseSemaphore MmMapIoSpace MmUnmapIoSpace PsGetVersion IofCompleteRequest IoCreateDevice IoCreateSymbolicLink IoDeleteDevice IoGetCurrentProcess IoRegisterShutdownNotification ZwOpenSymbolicLinkObject ZwQuerySymbolicLinkObject ZwDeviceIoControlFile NtCreateFile ZwCreateEvent ExEventObjectType MmMapLockedPagesSpecifyCache KeInitializeSemaphore ExAcquireFastMutex ExReleaseFastMutex ExInitializeResourceLite ExAcquireResourceSharedLite ExAcquireResourceExclusiveLite ExReleaseResourceLite ExDeleteResourceLite PsCreateSystemThread wcsstr _wcsicmp ZwCreateFile ZwReadFile ZwWriteFile ZwQueryVolumeInformationFile NtQueryInformationFile NtSetInformationFile NtClose ZwDeleteFile MmUnlockPages MmUnmapLockedPages IoBuildAsynchronousFsdRequest IoFreeIrp IoFreeMdl ObReferenceObjectByPointer PsThreadType ObOpenObjectByName ExSemaphoreObjectType IoAttachDeviceToDeviceStack IoDetachDevice IoAcquireRemoveLockEx IoReleaseRemoveLockEx IoReleaseRemoveLockAndWaitEx PoCallDriver PoStartNextPowerIrp VerSetConditionMask RtlVerifyVersionInfo tolower RtlTimeFieldsToTime ExSystemTimeToLocalTime _strnicmp wcschr RtlCheckRegistryKey ZwOpenFile _vsnwprintf IoAllocateIrp ZwDeleteKey ZwEnumerateKey ZwEnumerateValueKey RtlFreeUnicodeString RtlUpcaseUnicodeString Exported Functions Expand Sections Expand .text LOCKCODE .rdata .data .pdata LOCKDATA bghkprms INIT .rsrc .reloc Signature Expand {
"Certificates": [
{
"CertificateType": "CA",
"IsCA": true,
"IsCertificateAuthority": true,
"IsCodeSigning": true,
"SerialNumber": "08ad40b260d29c4c9f5ecda9bd93aed9",
"Signature": "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",
"SignatureAlgorithmOID": "1.2.840.113549.1.1.12",
"Subject": "C=US, O=DigiCert, Inc., CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1",
"TBS": {
"MD5": "5d8003a64dfa5a4d88365da1566038cb",
"SHA1": "79465b56bc7ad55a37bdf633943da8bfc84db228",
"SHA256": "84bdc82e2f2a7f7aaa782667dac556ffcb2b33240c1f9c0a00a3264526a98332",
"SHA384": "65b1d4076a89ae273f57e6eeedecb3eae129b4168f76fa7671914cdf461d542255c59d9b85b916ae0ca6fc0fcf7a8e64"
},
"ValidFrom": "2021-04-29 00:00:00",
"ValidTo": "2036-04-28 23:59:59",
"Version": 3
},
{
"CertificateType": "Leaf (Code Signing)",
"IsCA": false,
"IsCertificateAuthority": false,
"IsCodeSigning": true,
"SerialNumber": "090c3aaa41901d6ad321fddea91e1366",
"Signature": "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",
"SignatureAlgorithmOID": "1.2.840.113549.1.1.11",
"Subject": "C=US, ST=California, L=San Jose, O=Broadcom Inc, CN=Broadcom Inc",
"TBS": {
"MD5": "c5a9b13894baa951ef81c2b092800154",
"SHA1": "fcd2e70f37161140c551364aeda08fd0460212f2",
"SHA256": "2bd8039f7bab429ce858701eae8e80f453b1f824923511c96af7e6a1f4a7df1e",
"SHA384": "e21db8148aad738da556a69292561419f1278df1988e56d0f60921b92bd04bd1b3f748e4315c37bcde2f143f7e6f73a7"
},
"ValidFrom": "2023-03-20 00:00:00",
"ValidTo": "2026-03-19 23:59:59",
"Version": 3
}
],
"CertificatesInfo": "",
"Signer": [
{
"Issuer": "C=US, O=DigiCert, Inc., CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1",
"SerialNumber": "090c3aaa41901d6ad321fddea91e1366",
"Version": 1
}
],
"SignerInfo": ""
}
source
last_updated: 2026-08-31
