52955eb1-8cf4-41f3-b998-5e2e6d3aa258

Windows_CPU_Temperature_Component.sys :inline

Description

Windows_CPU_Temperature_Component.sys is a vulnerable kernel driver from the KeServiceDescriptorTable/vulnerable-drivers repository. The driver exposes dangerous kernel primitives to usermode.

  • UUID: 52955eb1-8cf4-41f3-b998-5e2e6d3aa258
  • Created: 2026-04-17
  • Author: Michael Haag
  • Acknowledgement: fluffycats31 | [@rainbowdynamix, @DbgPrint, @fluffycats31](https://twitter.com/@rainbowdynamix, @DbgPrint, @fluffycats31)

Download

This download link contains the vulnerable driver!

Block Windows_CPU_Temperature_Component.sys across your endpoints

Add this driver to your block policy in minutes with MagicSword, threat-driven application control. Free for up to 100 endpoints.

Start Blocking for Free

Commands

sc.exe create Windows_CPU_Temperature_Component binPath=C:\windows\temp\Windows_CPU_Temperature_Component.sys type=kernel && sc.exe start Windows_CPU_Temperature_Component
Use CasePrivilegesOperating System
Elevate privilegeskernelWindows 10

Detections

YARA 🏹

Expand

Exact Match

with header and size limitation

Threat Hunting

without header and size limitation

Renamed

for renamed driver files

Sigma 🛡️

Expand

Names

detects loading using name only

Hashes

detects loading using hashes only

Sysmon 🔎

Expand

Block

on hashes

Alert

on hashes

Resources


  • https://github.com/magicsword-io/LOLDrivers/issues/325
  • https://github.com/KeServiceDescriptorTable/vulnerable-drivers
  • https://github.com/fluffycats31/vulnerable-drivers

    • Known Vulnerable Samples

    PropertyValue
    FilenameWindows_CPU_Temperature_Component.sys
    Creation Timestamp2019-01-20 20:09:42
    MD53215e7615124e528f039bc02872789e9
    SHA10a642db605ce0d393dadc945afb11609e407f8d2
    SHA2564cea52c32579869d0209f18ced0b9cc9ad8f86cac29e0fb63b3d60eb64801bda
    Authentihash MD594a672ff56b28d340a26a985a1f56ea6
    Authentihash SHA1f4963744672fd85f4cae30ef1f1d3c9bef317a27
    Authentihash SHA256590822bd1b935237555d2d03e0535e835cfac71c0cf9dbbc4b0c8061e4106049
    RichPEHeaderHash MD51472665604fe2c6c202077ecf6c1365f
    RichPEHeaderHash SHA1da5b1a822055714c3c432f44120771fd5b56f9c1
    RichPEHeaderHash SHA2563ab219821835b9557e278eae5845c84b2d87e07a7aaaaa1ddb64f3a1c8962e83
    CompanyGuangzhou Shirui Electronics
    Descriptionseewo - Windows CPU Temperature Component
    ProductWindows CPU Temperature Component

    Download

    Certificates

    Expand
    Certificate 08ad40b260d29c4c9f5ecda9bd93aed9
    FieldValue
    ToBeSigned (TBS) MD55d8003a64dfa5a4d88365da1566038cb
    ToBeSigned (TBS) SHA179465b56bc7ad55a37bdf633943da8bfc84db228
    ToBeSigned (TBS) SHA25684bdc82e2f2a7f7aaa782667dac556ffcb2b33240c1f9c0a00a3264526a98332
    SubjectC=US, O=DigiCert, Inc., CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1
    ValidFrom2021-04-29 00:00:00
    ValidTo2036-04-28 23:59:59
    Signature3a23443d8d0876ee8fbc3a99d356e0021aa5f84834f32cb6e67466f79472b100caaf6c302713129e90449f4bfd9ea37c26d537bc3a5d486d95d53f49f427bb16814550fd9cbdb685e0767e3771cb22f75aaa90cff5936ae3eb20d1d55079889a8a8ac1b6bda148187edcd8801a111918cd61998156f6c9e376e7c4e41b5f43f83e94ff76393d9ed499cf4add28eb5f26a1955848d51afed7273ffd90d17686dd1cb0605cf30da8eee089a1bd39e1384eda6ebb369dfbe521535ac3cae96af1a23edb43b833c84f38149299f5ddce546dd95d02141f40337c03e295b2c221757352cb46d8c4341ca2a54b8dcd6f76372c853f1ace26e918be9007b0437f9588208270f0cccaeffd29355c1f893855f7378a8b09a1cb0be9311aff2e195c3971e1be9ca70a06d62667b792e64e5fde7aac49cf2ea47492addb3ca49c861fe3c1561b2b23ff8fb5ea887b706be6a0bafd3a3f45a6c4e81691528b41c048844b964dab4440e38df01528ceedf11856072a2f10c40c08643c338fae288c3ccb8f880b0dbf3bf4ce1e7b8eefb5ebcbb7f07713e6e7283fac12aea52f226c41f9825c1566cc6c0ecac586c3f626330c074ba0d307026a6a4030484b34a85120bbad1b8508e2590d6dca05502bea4a1c9ea5fda0a71f0674e7f2d65290fdaf854821f9573bb49c03ed8645f4b4616ebf68e2266086eac8afa9fe941de7631b3a8656784e
    SignatureAlgorithmOID1.2.840.113549.1.1.12
    IsCertificateAuthorityTrue
    SerialNumber08ad40b260d29c4c9f5ecda9bd93aed9
    Version3
    Certificate 099ede31beb50c82c547b68ecf141785
    FieldValue
    ToBeSigned (TBS) MD51fac3ecb3e5e32f18362891c42ffebfb
    ToBeSigned (TBS) SHA17cb0c4e9addde5b784bd67f2ee922f6a51e7748b
    ToBeSigned (TBS) SHA2564f1fdbb319d6edc0514f9abf82ef59e1f35ba2c5bdcdbe12479f94210c95e97e
    SubjectJURISDICTION_OF_INCORPORATION_C=CN, JURISDICTION_OF_INCORPORATION_SP=Guangdong Province, JURISDICTION_OF_INCORPORATION_L=Guangzhou, BUSINESS_CATEGORY=Private Organization, serialNumber=914401016756828477, C=CN, ST=Guangdong Province, L=Guangzhou, O=Guangzhou Shirui Electronics Co., Ltd., OU=IT Dept, CN=Guangzhou Shirui Electronics Co., Ltd.
    ValidFrom2023-02-06 00:00:00
    ValidTo2025-09-16 23:59:59
    Signature42014c6c7e9753716e84d868d1fda3541294c3f2f808ee4460501fbd56124c29af1ce246669f0a8fd3f98bb4b46aa7763931992d5aaf453727143c494a4ea9e47e7489c4c84898dc19023297ce2b2817265680ab667e865039fc4d1caad393159dd2cacd3f7e5eb8dae0b7433277e5aa134813b4ce9a9194f6f9d992aae0efb357658ccfdf14d121f35dc220169200aa66491c9c9c97399cc907c3811f1725bc66159a0739f9edd5019cddb3b4b1b9ae7dab3c5d73a5152cd1314b5e221f8f08e5d6092ead3f84cd4ad26ab9884061930ef7771d68c07f8b04f0d06dfb181d80072eb34ebf2d69f67c44482e39e8985e545daa17fcf43332c49e97f48d707dc4deadeaec2f56fad9cba67c8551c5abdf81916e2e185cf3b8cc90afe5e58938ed49669d16d673876632cf46b0fe4584ab66a55e0fbc6779df1c00d2ea318459f6da394d96f8410cd0d68aa2b067cfbd861b350294c3c630dc253e56d02beeb15d8b0c9b522f9abd9c550a6a9075b8d14b8cc7eb6b56100b82892c4019b2112505dfa550dd769829f3ed072695b12e944194331449e8401008203bd7ead8b1150c9925971e1070b712c0855e2c182af2f1ba2c3333e2313edb28c9ce3b74508131574c90bbda129949880ff0c2338123d5743b1229dd4658198fe302e2894d20bd34d5597deb83828eee1716fadd45d26e03bfe612dc96952314d8b1dc0e1a4c6b
    SignatureAlgorithmOID1.2.840.113549.1.1.11
    IsCertificateAuthorityFalse
    SerialNumber099ede31beb50c82c547b68ecf141785
    Version3

    Imports

    Expand
    • ntoskrnl.exe
    • HAL.dll

    Imported Functions

    Expand
    • IofCompleteRequest
    • IoCreateDevice
    • IoCreateSymbolicLink
    • IoDeleteDevice
    • MmUnmapIoSpace
    • _vsnwprintf
    • __C_specific_handler
    • KeBugCheckEx
    • MmMapIoSpace
    • IoDeleteSymbolicLink
    • RtlInitUnicodeString
    • HalSetBusDataByOffset
    • HalGetBusDataByOffset

    Exported Functions

    Expand

    Sections

    Expand
    • .text
    • .rdata
    • .data
    • .pdata
    • .gfids
    • INIT
    • .rsrc
    • .reloc

    Signature

    Expand
    {
  "Certificates": [
    {
      "CertificateType": "CA",
      "IsCA": true,
      "IsCertificateAuthority": true,
      "IsCodeSigning": true,
      "SerialNumber": "08ad40b260d29c4c9f5ecda9bd93aed9",
      "Signature": "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",
      "SignatureAlgorithmOID": "1.2.840.113549.1.1.12",
      "Subject": "C=US, O=DigiCert, Inc., CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1",
      "TBS": {
        "MD5": "5d8003a64dfa5a4d88365da1566038cb",
        "SHA1": "79465b56bc7ad55a37bdf633943da8bfc84db228",
        "SHA256": "84bdc82e2f2a7f7aaa782667dac556ffcb2b33240c1f9c0a00a3264526a98332",
        "SHA384": "65b1d4076a89ae273f57e6eeedecb3eae129b4168f76fa7671914cdf461d542255c59d9b85b916ae0ca6fc0fcf7a8e64"
      },
      "ValidFrom": "2021-04-29 00:00:00",
      "ValidTo": "2036-04-28 23:59:59",
      "Version": 3
    },
    {
      "CertificateType": "Leaf (Code Signing)",
      "IsCA": false,
      "IsCertificateAuthority": false,
      "IsCodeSigning": true,
      "SerialNumber": "099ede31beb50c82c547b68ecf141785",
      "Signature": "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",
      "SignatureAlgorithmOID": "1.2.840.113549.1.1.11",
      "Subject": "JURISDICTION_OF_INCORPORATION_C=CN, JURISDICTION_OF_INCORPORATION_SP=Guangdong Province, JURISDICTION_OF_INCORPORATION_L=Guangzhou, BUSINESS_CATEGORY=Private Organization, serialNumber=914401016756828477, C=CN, ST=Guangdong Province, L=Guangzhou, O=Guangzhou Shirui Electronics Co., Ltd., OU=IT Dept, CN=Guangzhou Shirui Electronics Co., Ltd.",
      "TBS": {
        "MD5": "1fac3ecb3e5e32f18362891c42ffebfb",
        "SHA1": "7cb0c4e9addde5b784bd67f2ee922f6a51e7748b",
        "SHA256": "4f1fdbb319d6edc0514f9abf82ef59e1f35ba2c5bdcdbe12479f94210c95e97e",
        "SHA384": "ebd8834b77600e86187ce6f9f9bb6cf9bddd95e5d2ae478c3ff935bcece1d4ca8db7e3c0e87f77985060a8d475669bff"
      },
      "ValidFrom": "2023-02-06 00:00:00",
      "ValidTo": "2025-09-16 23:59:59",
      "Version": 3
    }
  ],
  "CertificatesInfo": "",
  "Signer": [
    {
      "Issuer": "C=US, O=DigiCert, Inc., CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1",
      "SerialNumber": "099ede31beb50c82c547b68ecf141785",
      "Version": 1
    }
  ],
  "SignerInfo": ""
}
    PropertyValue
    FilenameWindows_CPU_Temperature_Component.sys
    Creation Timestamp2019-01-20 20:09:42
    MD5877227519255e3dce43b479651242875
    SHA1dc68f8d3648e95c5b75d4938b47e5b90d52d874f
    SHA2563e4c9190b8c1b00e7d53f92cef0b66c16594cc26773ba8d5d682a5468ea86e00
    Authentihash MD594a672ff56b28d340a26a985a1f56ea6
    Authentihash SHA1f4963744672fd85f4cae30ef1f1d3c9bef317a27
    Authentihash SHA256590822bd1b935237555d2d03e0535e835cfac71c0cf9dbbc4b0c8061e4106049
    RichPEHeaderHash MD51472665604fe2c6c202077ecf6c1365f
    RichPEHeaderHash SHA1da5b1a822055714c3c432f44120771fd5b56f9c1
    RichPEHeaderHash SHA2563ab219821835b9557e278eae5845c84b2d87e07a7aaaaa1ddb64f3a1c8962e83
    CompanyGuangzhou Shirui Electronics
    Descriptionseewo - Windows CPU Temperature Component
    ProductWindows CPU Temperature Component

    Download

    Certificates

    Expand
    Certificate 0400000000013189c65004
    FieldValue
    ToBeSigned (TBS) MD5b80eafbb56fdf468b7ec6fde1fd3f03b
    ToBeSigned (TBS) SHA18e47f540dfa60c5349b5303668b736cf367872ef
    ToBeSigned (TBS) SHA2562f0469d37aae631ac9fe1c38a1169b8bb2b188d89433cd8ece92bf5b4b5c691c
    SubjectC=BE, O=GlobalSign nv,sa, CN=GlobalSign Timestamping CA , SHA256 , G2
    ValidFrom2011-08-02 10:00:00
    ValidTo2029-03-29 10:00:00
    Signature0456824a7cd0cec9bf3666d1be359e936c97e806ce311859f96c415f802ec04225b818c7fcd4b137c468a0cf286a03744b63978577613bd72fe3f5bd33a2927d111f9e8a6cef2cb0f4628d3673d11636f1bc5eecb4809878fcd27679e8e12194e01fc4a2e1aa67dbb39c73e54022cf39cedbe67795a7bbb2cbf619869d9fc8d49805b2716f4e75aef13d646a3b5e4e46a62a5d0892f1a3f31d74bf620d238c5c2a3895d2c0d5cdcf88da1f28b5ba8169642ab5a6a2d573afdc46db04ae91d76ec598bad447c45674804778588cbeef2bfdec6cbfd194f7bf50e07be090fd20187818225d082e8c1ca097f31d997da39d91d306444e046e7a1c20e336f0b650b9
    SignatureAlgorithmOID1.2.840.113549.1.1.11
    IsCertificateAuthorityTrue
    SerialNumber0400000000013189c65004
    Version3
    Certificate 2454b87f1e1453ad37faa178
    FieldValue
    ToBeSigned (TBS) MD5e48d125e08460474d2622743f09f1841
    ToBeSigned (TBS) SHA1f2a552dcc396e432febde950095a56206559656d
    ToBeSigned (TBS) SHA2567046fd89933dffa31bd6ea13d90eeac33f63fd22283495ba403bcb8c74dd4149
    SubjectCN=GlobalSign TSA for MS Authenticode advanced , G2
    ValidFrom2018-02-19 00:00:00
    ValidTo2029-03-18 10:00:00
    Signature247250a50cbc4009a6c1f4d5826a4e415fcec78839d3e47cf9226c3878b8f4baf76be124eb9d7ccd48ac8becb5764c8fdc82690896e7bae167b6f0a6bf180842e1ebcd195839a5116123d619d700e9bbd2f95f41fb043efe8a20600cd14f235a191a18efd8c6ded65f54a17a93e1b67785c0fbb146c409ae2f53fb959c8e26e24ae4c4e63c35efbac6d9b9c5cdcd079b63bb3d0f61bc557c2310b58c8aa3d26845b140baa0dd3c1b1540b849786fe594c06d564b3cf6122ad485f3481305e1bb30450a41b77c926ebe4e926082ca5b64e655d3d207de9d5f9ba101ed9bf0c35dbb19f0180c9aa01ce96a080b3de96697a7751e0fbf28d709230de216fabaf334
    SignatureAlgorithmOID1.2.840.113549.1.1.11
    IsCertificateAuthorityFalse
    SerialNumber2454b87f1e1453ad37faa178
    Version3
    Certificate 191a32cb759c97b8cfac118dd5127f49
    FieldValue
    ToBeSigned (TBS) MD5788b61bd26da89253179e3de2cdb527f
    ToBeSigned (TBS) SHA17d06f16e7bf21bce4f71c2cb7a3e74351451bf69
    ToBeSigned (TBS) SHA256b3c925b4048c3f7c444d248a2b101186b57cba39596eb5dce0e17a4ee4b32f19
    SubjectC=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Extended Validation Code Signing CA , G2
    ValidFrom2014-03-04 00:00:00
    ValidTo2024-03-03 23:59:59
    Signature3f5b19f3fa13d575382a5aee9f5aa04ca91dc5cc94eede15fef5106ea41ba56483541858c40b28a185c34e74e5ff897cfed5ed3cba719f5602268f162a88feb0a32722ce4be2388e00a63a865f9de53ea8de644941744121fd07c88417da1d653082cb264f39d60427a481b14b49c3238b7e02321827b7ab0bf31872b6a4ee67066f38a6588de0f17e5da460c6a8e5505fe0e8bae28f9958b6b5a0a876f1a2f11c8841727e52979b0a36998d50f701eb3ce7f0226ae5358c63368a1ab1d967665f971aefa8209df02fba6cced9948500f158f17dc97c22b5075d02c6e60bbfab9393ff27188e33367e5734f1c3af04c184f156b3e8878336f8d30a31dc6e2c6d
    SignatureAlgorithmOID1.2.840.113549.1.1.11
    IsCertificateAuthorityTrue
    SerialNumber191a32cb759c97b8cfac118dd5127f49
    Version3
    Certificate 611993e400000000001c
    FieldValue
    ToBeSigned (TBS) MD578a717e082dcc1cda3458d917e677d14
    ToBeSigned (TBS) SHA14a872e0e51f9b304469cd1dedb496ee9b8b983a4
    ToBeSigned (TBS) SHA256317fa1d234ebc49040ebc5e8746f8997471496051b185a91bdd9dfbb23fab5f8
    SubjectC=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. , For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority , G5
    ValidFrom2011-02-22 19:25:17
    ValidTo2021-02-22 19:35:17
    Signature812a82168c34672be503eb347b8ca2a3508af45586f11e8c8eae7dee0319ce72951848ad6211fd20fd3f4706015ae2e06f8c152c4e3c6a506c0b36a3cf7a0d9c42bc5cf819d560e369e6e22341678c6883762b8f93a32ab57fbe59fba9c9b2268fcaa2f3821b983e919527978661ee5b5d076bcd86a8e26580a8e215e2b2be23056aba0cf347934daca48c077939c061123a050d89a3ec9f578984fbecca7c47661491d8b60f195de6b84aacbc47c8714396e63220a5dc7786fd3ce38b71db7b9b03fcb71d3264eb1652a043a3fa2ead59924e7cc7f233424838513a7c38c71b242228401e1a461f17db18f7f027356cb863d9cdb9645d2ba55eefc629b4f2c7f821cc04ba57fd01b6abc667f9e7d3997ff4f522fa72f5fdff3a1c423aa1f98018a5ee8d1cd4669e4501feaaeefffb178f30f7f1cd29c59decb5d549003d85b8cbbb933a276a49c030ae66c9f723283276f9a48356c848ce5a96aaa0cc0cc47fb48e97af6de35427c39f86c0d6e473089705dbd054625e0348c2d59f7fa7668cd09db04fd4d3985f4b7ac97fb22952d01280c70f54b61e67cdc6a06c110384d34875e72afeb03b6e0a3aa66b769905a3f177686133144706fc537f52bd92145c4a246a678caf8d90aad0f679211b93267cc3ce1ebd883892ae45c6196a4950b305f8ae59378a6a250394b1598150e8ba8380b72335f476b9671d5918ad208d94
    SignatureAlgorithmOID1.2.840.113549.1.1.5
    IsCertificateAuthorityTrue
    SerialNumber611993e400000000001c
    Version3
    Certificate 20d35ce0f766e1cbb977ab572a5ab018
    FieldValue
    ToBeSigned (TBS) MD587b7fa58b71058984d762b43f6881991
    ToBeSigned (TBS) SHA104a5590166c200be2b3ca89a8f9451dde5545371
    ToBeSigned (TBS) SHA256617937326ab383cbb9a94d672f390fea7f0574827aa8143f117c5e411414324d
    SubjectJURISDICTION_OF_INCORPORATION_C=CN, JURISDICTION_OF_INCORPORATION_SP=Guangdong, JURISDICTION_OF_INCORPORATION_L=Guangzhou, BUSINESS_CATEGORY=Private Organization, serialNumber=914401016756828477, C=CN, ST=广东, L=广州, O=Guangzhou Shirui Electronics Co., Ltd, OU=IT, CN=Guangzhou Shirui Electronics Co., Ltd
    ValidFrom2017-09-11 00:00:00
    ValidTo2020-09-10 23:59:59
    Signatureca3e56962d04432116beef060847f66d20fada3b0efdd1ac1d6d40c86e162d24a5a5f172afa07c0fb18ffb9f5a264bee8407174b453ba65ead945be3d26829ccff99d500bac73b45429db01712bf878e6dac01eb030f5499667209452468aee11387f082b0c10ca227e7f08b311453af247b0c4046970d300745c8990e1cd6d53242cf58a5217173219f80be31da74502d1848897c1aa1dc771f1a39dca02325604bfc9675f89eafb54423a7346b4d79f8ec958cfbdd261152d0cbd4f2023d7e658978eecc811e15c66f92abfa0fcd6fe86279b0ac0aa3ea41bca2d0d5f31e74c6af2ccfc16e61a92784b16948bde16f9635de1d39a95dbf769faf0cdafeba19
    SignatureAlgorithmOID1.2.840.113549.1.1.11
    IsCertificateAuthorityFalse
    SerialNumber20d35ce0f766e1cbb977ab572a5ab018
    Version3

    Imports

    Expand
    • ntoskrnl.exe
    • HAL.dll

    Imported Functions

    Expand
    • IofCompleteRequest
    • IoCreateDevice
    • IoCreateSymbolicLink
    • IoDeleteDevice
    • MmUnmapIoSpace
    • _vsnwprintf
    • __C_specific_handler
    • KeBugCheckEx
    • MmMapIoSpace
    • IoDeleteSymbolicLink
    • RtlInitUnicodeString
    • HalSetBusDataByOffset
    • HalGetBusDataByOffset

    Exported Functions

    Expand

    Sections

    Expand
    • .text
    • .rdata
    • .data
    • .pdata
    • .gfids
    • INIT
    • .rsrc
    • .reloc

    Signature

    Expand
    {
  "Certificates": [
    {
      "CertificateType": "CA",
      "IsCA": true,
      "IsCertificateAuthority": true,
      "IsCodeSigning": true,
      "SerialNumber": "08ad40b260d29c4c9f5ecda9bd93aed9",
      "Signature": "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",
      "SignatureAlgorithmOID": "1.2.840.113549.1.1.12",
      "Subject": "C=US, O=DigiCert, Inc., CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1",
      "TBS": {
        "MD5": "5d8003a64dfa5a4d88365da1566038cb",
        "SHA1": "79465b56bc7ad55a37bdf633943da8bfc84db228",
        "SHA256": "84bdc82e2f2a7f7aaa782667dac556ffcb2b33240c1f9c0a00a3264526a98332",
        "SHA384": "65b1d4076a89ae273f57e6eeedecb3eae129b4168f76fa7671914cdf461d542255c59d9b85b916ae0ca6fc0fcf7a8e64"
      },
      "ValidFrom": "2021-04-29 00:00:00",
      "ValidTo": "2036-04-28 23:59:59",
      "Version": 3
    },
    {
      "CertificateType": "Leaf (Code Signing)",
      "IsCA": false,
      "IsCertificateAuthority": false,
      "IsCodeSigning": true,
      "SerialNumber": "099ede31beb50c82c547b68ecf141785",
      "Signature": "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",
      "SignatureAlgorithmOID": "1.2.840.113549.1.1.11",
      "Subject": "JURISDICTION_OF_INCORPORATION_C=CN, JURISDICTION_OF_INCORPORATION_SP=Guangdong Province, JURISDICTION_OF_INCORPORATION_L=Guangzhou, BUSINESS_CATEGORY=Private Organization, serialNumber=914401016756828477, C=CN, ST=Guangdong Province, L=Guangzhou, O=Guangzhou Shirui Electronics Co., Ltd., OU=IT Dept, CN=Guangzhou Shirui Electronics Co., Ltd.",
      "TBS": {
        "MD5": "1fac3ecb3e5e32f18362891c42ffebfb",
        "SHA1": "7cb0c4e9addde5b784bd67f2ee922f6a51e7748b",
        "SHA256": "4f1fdbb319d6edc0514f9abf82ef59e1f35ba2c5bdcdbe12479f94210c95e97e",
        "SHA384": "ebd8834b77600e86187ce6f9f9bb6cf9bddd95e5d2ae478c3ff935bcece1d4ca8db7e3c0e87f77985060a8d475669bff"
      },
      "ValidFrom": "2023-02-06 00:00:00",
      "ValidTo": "2025-09-16 23:59:59",
      "Version": 3
    }
  ],
  "CertificatesInfo": "",
  "Signer": [
    {
      "Issuer": "C=US, O=DigiCert, Inc., CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1",
      "SerialNumber": "099ede31beb50c82c547b68ecf141785",
      "Version": 1
    }
  ],
  "SignerInfo": ""
}

    source

    last_updated: 2026-08-31