87680018-393b-47b6-8130-6b41bed2bc7c

LnvMSRIO.sys :inline

Description

LnvMSRIO.sys is a Lenovo Dispatcher driver affected by CVE-2025-8061. The tracked 3.0.2.28 through 3.1.0.36 builds predate Lenovo's fixed 3.1.0.41 driver. The WinMsrDev interface exposes physical-memory read and write through IOCTLs 0x9C406104 and 0x9C40A108 and MSR read and write through 0x9C402084 and 0x9C402088, allowing an authenticated local user to execute code with elevated privileges when Memory Integrity is not enabled.

  • UUID: 87680018-393b-47b6-8130-6b41bed2bc7c
  • Created: 2026-06-16
  • Author: Michael Haag
  • Acknowledgement: nasbench, fluffycats31 | [@nasbench, @fluffycats31](https://twitter.com/@nasbench, @fluffycats31)

Download

This download link contains the vulnerable driver!

Block LnvMSRIO.sys across your endpoints

Add this driver to your block policy in minutes with MagicSword, threat-driven application control. Free for up to 100 endpoints.

Start Blocking for Free

Commands

sc.exe create LnvMSRIO binPath=C:\windows\temp\LnvMSRIO.sys type=kernel && sc.exe start LnvMSRIO
Use CasePrivilegesOperating System
Elevate privilegesUserWindows 10, Windows 11

Detections

YARA 🏹

Expand

Exact Match

with header and size limitation

Threat Hunting

without header and size limitation

Renamed

for renamed driver files

Sigma 🛡️

Expand

Names

detects loading using name only

Hashes

detects loading using hashes only

Sysmon 🔎

Expand

Block

on hashes

Alert

on hashes

Resources


  • https://github.com/magicsword-io/LOLDrivers/issues/409
  • https://github.com/fluffycats31/vulnerable-drivers
  • https://github.com/magicsword-io/LOLDrivers/issues/242
  • https://github.com/symeonp/Lenovo-CVE-2025-8061
  • https://blog.quarkslab.com/exploiting-lenovo-driver-cve-2025-8061.html
  • https://nvd.nist.gov/vuln/detail/CVE-2025-8061
  • https://support.lenovo.com/us/en/product_security/LEN-200860
  • https://github.com/segura2010/lenovo-dispatcher-poc
  • https://github.com/spawn451/CVE-2025-8061-Exploit

    • CVE

  • CVE-2025-8061

    • Known Vulnerable Samples

    PropertyValue
    FilenameLnvMSRIO.sys
    Creation Timestamp2025-01-16 23:57:06
    MD596b3465553341b1eb05a2cb2c4140f6b
    SHA109528272cbefb4747bb07cdaed6b6f5cb5d3569f
    SHA256977d3b78bdf5723430e2e21cf1eb515a2335a0e370c76fa2dda4315ba062f429
    Authentihash MD58a08d25e33515c4b8882579d22c58394
    Authentihash SHA15c3d7ee9031623022dd88b244d74ffad2ddae3f5
    Authentihash SHA256654641f7d5e71471cfe67c6afbb443b36d65cb76918ee6c9173ce3002fafe76a
    RichPEHeaderHash MD5c3319e3f7c6a68ca049b678bbf08bc9c
    RichPEHeaderHash SHA1368815c7b4eee4ba4268efef063871e4d71e293f
    RichPEHeaderHash SHA256b71115bbcf299fe5feefa9d302d6146f067da051810758a9309ec8ce707651e3
    CompanyLenovo
    DescriptionLenovo filter driver
    ProductLenovo filter driver
    OriginalFilenameLnvMSRIO.sys

    Download

    Certificates

    Expand
    Certificate 059b1b579e8e2132e23907bda777755c
    FieldValue
    ToBeSigned (TBS) MD541b622dd54995550fdc2f31ea12f8d9b
    ToBeSigned (TBS) SHA1420704040c93dfe9d3ad01a26c07f2be1f4888c1
    ToBeSigned (TBS) SHA2564816e2e9e37ba61e1def6f7a4c623e981c7af355e51349b5554a3d56c5252e24
    SubjectC=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Trusted Root G4
    ValidFrom2013-08-01 12:00:00
    ValidTo2038-01-15 12:00:00
    Signaturebb61d97da96cbe17c4911bc3a1a2008de364680f56cf77ae70f9fd9a4a99b9c9785c0c0c5fe4e61429560b36495d4463e0ad9c9618661b230d3d79e96d6bd654f8d23cc14340ae1d50f552fc903bbb9899696bc7c1a7a868a427dc9df927ae3085b9f6674d3a3e8f5939225344ebc85d03caed507a7d62210a80c87366d1a005605fe8a5b4a7afa8f76d359c7c5a8ad6a23899f3788bf44dd2200bde04ee8c9b4781720dc01432ef30592eaee071f256e46a976f92506d968d687a9ab236147a06f224b9091150d708b1b8897a8423614229e5a3cda22041d7d19c64d9ea26a18b14d74c19b25041713d3f4d7023860c4adc81d2cc3294840d0809971c4fc0ee6b207430d2e03934108521150108e85532de7149d92817504de6be4dd175acd0cafb41b843a5aad3c305444f2c369be2fae245b823536c066f67557f46b54c3f6e285a7926d2a4a86297d21ee2ed4a8bbc1bfd474a0ddf67667eb25b41d03be4f43bf40463e9efc2540051a08a2ac9ce78ccd5ea870418b3ceaf4988aff39299b6b3e6610fd28500e7501ae41b959d19a1b99cb19bb1001eefd00f4f426cc90abcee43fa3a71a5c84d26a535fd895dbc85621d32d2a02b54ed9a57c1dbfa10cf19b78b4a1b8f01b6279553e8b6896d5bbc68d423e88b51a256f9f0a680a0d61eb3bc0f0f537529aaea1377e4de8c8121ad07104711ad873d07d175bccff3667e
    SignatureAlgorithmOID1.2.840.113549.1.1.12
    IsCertificateAuthorityTrue
    SerialNumber059b1b579e8e2132e23907bda777755c
    Version3
    Certificate 08ad40b260d29c4c9f5ecda9bd93aed9
    FieldValue
    ToBeSigned (TBS) MD55d8003a64dfa5a4d88365da1566038cb
    ToBeSigned (TBS) SHA179465b56bc7ad55a37bdf633943da8bfc84db228
    ToBeSigned (TBS) SHA25684bdc82e2f2a7f7aaa782667dac556ffcb2b33240c1f9c0a00a3264526a98332
    SubjectC=US, O=DigiCert, Inc., CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1
    ValidFrom2021-04-29 00:00:00
    ValidTo2036-04-28 23:59:59
    Signature3a23443d8d0876ee8fbc3a99d356e0021aa5f84834f32cb6e67466f79472b100caaf6c302713129e90449f4bfd9ea37c26d537bc3a5d486d95d53f49f427bb16814550fd9cbdb685e0767e3771cb22f75aaa90cff5936ae3eb20d1d55079889a8a8ac1b6bda148187edcd8801a111918cd61998156f6c9e376e7c4e41b5f43f83e94ff76393d9ed499cf4add28eb5f26a1955848d51afed7273ffd90d17686dd1cb0605cf30da8eee089a1bd39e1384eda6ebb369dfbe521535ac3cae96af1a23edb43b833c84f38149299f5ddce546dd95d02141f40337c03e295b2c221757352cb46d8c4341ca2a54b8dcd6f76372c853f1ace26e918be9007b0437f9588208270f0cccaeffd29355c1f893855f7378a8b09a1cb0be9311aff2e195c3971e1be9ca70a06d62667b792e64e5fde7aac49cf2ea47492addb3ca49c861fe3c1561b2b23ff8fb5ea887b706be6a0bafd3a3f45a6c4e81691528b41c048844b964dab4440e38df01528ceedf11856072a2f10c40c08643c338fae288c3ccb8f880b0dbf3bf4ce1e7b8eefb5ebcbb7f07713e6e7283fac12aea52f226c41f9825c1566cc6c0ecac586c3f626330c074ba0d307026a6a4030484b34a85120bbad1b8508e2590d6dca05502bea4a1c9ea5fda0a71f0674e7f2d65290fdaf854821f9573bb49c03ed8645f4b4616ebf68e2266086eac8afa9fe941de7631b3a8656784e
    SignatureAlgorithmOID1.2.840.113549.1.1.12
    IsCertificateAuthorityTrue
    SerialNumber08ad40b260d29c4c9f5ecda9bd93aed9
    Version3
    Certificate 0b60337461b8bb50cbf83e6bea99ea0e
    FieldValue
    ToBeSigned (TBS) MD57ef16cb5545e847cef80aee6db6fb728
    ToBeSigned (TBS) SHA18e8fdcaa9d5943a7cc298815f9144d5aec014de0
    ToBeSigned (TBS) SHA2567d84324a4b209440d8fa048ba61a70ca2e5d4f82881a458c45d50b80e2a40abd
    SubjectC=US, ST=North Carolina, L=Morrisville, O=Lenovo, OU=G29, CN=Lenovo
    ValidFrom2024-10-30 00:00:00
    ValidTo2025-10-29 23:59:59
    Signature88af5de36514a3d179ba4e91a0d9a6ca151f1c7b8c575b838940241ad1c35ddec84196e9c494ba6c4c949028e4bd2f10c019ec49fbecc065d8a39127adbee5d4d2f9103d902f064f1566f065c2dd6ab5b24a7726e6f6980577efefb8667fdc1f9687e9059fbc297abda2954ed0401ac9e73eb8a13f93a9c328e00336e030d144a5c31c319616ec047049616e7751af98b1c5ec06f09fa7f177a02acb60e69bf81294a7c3d69151e77f06a133e8e41f17961a50c750de2eec2dfa2ecff8470005e8c9d441d34bea706993ccf8a6a4b8ff2a6b63eabddb50003dbe361ec6e482d06469332804f196ea8f4faf4268e69a6157116d49da333b9edec3d773882e97f7d25f5323be844407fad9d211974efcb61a8793fffc13ecf1ef71af78634df177f46a3d3315e428de30cffe43c027e21ed555fb45bf764916050d6468ee6527cf3b3b43bba72f9cb98cd8ee1588db70e17acc9fcde65c2590cf0a275bb1a8b7497c2e0c67fbcafde9b75cbdcd68511c52e38e7cf5b07c887db175fcb6264db8a22fe2573ec5fa27d9b0f2c1dcc02ced797819157dc570e3c2739d5b212ea680c6446192baa10b0b4b1113e974e070c7c3fa707584f55623686e851657fc54bc3d27167758580dbdb3a0a1c264921e41eb074b76bc1f0452ddfb3d0cfa0de64f6f7def5c44f1f16cdb4aacfb44b453b859228f36c4ff578197ed9690b152fd2e69
    SignatureAlgorithmOID1.2.840.113549.1.1.11
    IsCertificateAuthorityFalse
    SerialNumber0b60337461b8bb50cbf83e6bea99ea0e
    Version3

    Imports

    Expand
    • FLTMGR.SYS
    • ntoskrnl.exe
    • HAL.dll
    • WDFLDR.SYS

    Imported Functions

    Expand
    • FltRegisterFilter
    • FltUnregisterFilter
    • FltStartFiltering
    • FltCreateCommunicationPort
    • FltCloseCommunicationPort
    • FltCloseClientPort
    • FltSendMessage
    • FltBuildDefaultSecurityDescriptor
    • FltFreeSecurityDescriptor
    • IoCreateDevice
    • IoDeleteDevice
    • IoDeleteSymbolicLink
    • PoRegisterPowerSettingCallback
    • PoUnregisterPowerSettingCallback
    • PsSetCreateProcessNotifyRoutineEx
    • ZwPowerInformation
    • __C_specific_handler
    • RtlInitUnicodeString
    • IofCompleteRequest
    • MmUnmapIoSpace
    • MmMapIoSpace
    • RtlCopyUnicodeString
    • DbgPrintEx
    • ProbeForWrite
    • ProbeForRead
    • ExFreePoolWithTag
    • ExAllocatePool2
    • IoCreateSymbolicLink
    • HalGetBusDataByOffset
    • HalSetBusDataByOffset
    • WdfVersionBind
    • WdfLdrQueryInterface
    • WdfVersionUnbind
    • WdfVersionBindClass
    • WdfVersionUnbindClass

    Exported Functions

    Expand

    Sections

    Expand
    • .text
    • .rdata
    • .data
    • .pdata
    • INIT
    • .rsrc
    • .reloc

    Signature

    Expand
    {
  "Certificates": [
    {
      "CertificateType": "CA",
      "IsCA": true,
      "IsCertificateAuthority": true,
      "IsCodeSigning": false,
      "SerialNumber": "059b1b579e8e2132e23907bda777755c",
      "Signature": "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",
      "SignatureAlgorithmOID": "1.2.840.113549.1.1.12",
      "Subject": "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Trusted Root G4",
      "TBS": {
        "MD5": "41b622dd54995550fdc2f31ea12f8d9b",
        "SHA1": "420704040c93dfe9d3ad01a26c07f2be1f4888c1",
        "SHA256": "4816e2e9e37ba61e1def6f7a4c623e981c7af355e51349b5554a3d56c5252e24",
        "SHA384": "4ea1b34b10b982a96a38915843507820ad632c6aad8343e337b34d660cd8366fa154544ae80668ae1fdf3931d57e1996"
      },
      "ValidFrom": "2013-08-01 12:00:00",
      "ValidTo": "2038-01-15 12:00:00",
      "Version": 3
    },
    {
      "CertificateType": "CA",
      "IsCA": true,
      "IsCertificateAuthority": true,
      "IsCodeSigning": true,
      "SerialNumber": "08ad40b260d29c4c9f5ecda9bd93aed9",
      "Signature": "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",
      "SignatureAlgorithmOID": "1.2.840.113549.1.1.12",
      "Subject": "C=US, O=DigiCert, Inc., CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1",
      "TBS": {
        "MD5": "5d8003a64dfa5a4d88365da1566038cb",
        "SHA1": "79465b56bc7ad55a37bdf633943da8bfc84db228",
        "SHA256": "84bdc82e2f2a7f7aaa782667dac556ffcb2b33240c1f9c0a00a3264526a98332",
        "SHA384": "65b1d4076a89ae273f57e6eeedecb3eae129b4168f76fa7671914cdf461d542255c59d9b85b916ae0ca6fc0fcf7a8e64"
      },
      "ValidFrom": "2021-04-29 00:00:00",
      "ValidTo": "2036-04-28 23:59:59",
      "Version": 3
    },
    {
      "CertificateType": "Leaf (Code Signing)",
      "IsCA": false,
      "IsCertificateAuthority": false,
      "IsCodeSigning": true,
      "SerialNumber": "0b60337461b8bb50cbf83e6bea99ea0e",
      "Signature": "88af5de36514a3d179ba4e91a0d9a6ca151f1c7b8c575b838940241ad1c35ddec84196e9c494ba6c4c949028e4bd2f10c019ec49fbecc065d8a39127adbee5d4d2f9103d902f064f1566f065c2dd6ab5b24a7726e6f6980577efefb8667fdc1f9687e9059fbc297abda2954ed0401ac9e73eb8a13f93a9c328e00336e030d144a5c31c319616ec047049616e7751af98b1c5ec06f09fa7f177a02acb60e69bf81294a7c3d69151e77f06a133e8e41f17961a50c750de2eec2dfa2ecff8470005e8c9d441d34bea706993ccf8a6a4b8ff2a6b63eabddb50003dbe361ec6e482d06469332804f196ea8f4faf4268e69a6157116d49da333b9edec3d773882e97f7d25f5323be844407fad9d211974efcb61a8793fffc13ecf1ef71af78634df177f46a3d3315e428de30cffe43c027e21ed555fb45bf764916050d6468ee6527cf3b3b43bba72f9cb98cd8ee1588db70e17acc9fcde65c2590cf0a275bb1a8b7497c2e0c67fbcafde9b75cbdcd68511c52e38e7cf5b07c887db175fcb6264db8a22fe2573ec5fa27d9b0f2c1dcc02ced797819157dc570e3c2739d5b212ea680c6446192baa10b0b4b1113e974e070c7c3fa707584f55623686e851657fc54bc3d27167758580dbdb3a0a1c264921e41eb074b76bc1f0452ddfb3d0cfa0de64f6f7def5c44f1f16cdb4aacfb44b453b859228f36c4ff578197ed9690b152fd2e69",
      "SignatureAlgorithmOID": "1.2.840.113549.1.1.11",
      "Subject": "C=US, ST=North Carolina, L=Morrisville, O=Lenovo, OU=G29, CN=Lenovo",
      "TBS": {
        "MD5": "7ef16cb5545e847cef80aee6db6fb728",
        "SHA1": "8e8fdcaa9d5943a7cc298815f9144d5aec014de0",
        "SHA256": "7d84324a4b209440d8fa048ba61a70ca2e5d4f82881a458c45d50b80e2a40abd",
        "SHA384": "5c582862ce3cd29630ba8f35068f63f7fc54e1b626e19dd4951413f23d3433381d8266287a91255978359138c22c207d"
      },
      "ValidFrom": "2024-10-30 00:00:00",
      "ValidTo": "2025-10-29 23:59:59",
      "Version": 3
    }
  ],
  "CertificatesInfo": "",
  "Signer": [
    {
      "Issuer": "C=US, O=DigiCert, Inc., CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1",
      "SerialNumber": "0b60337461b8bb50cbf83e6bea99ea0e",
      "Version": 1
    }
  ],
  "SignerInfo": ""
}
    PropertyValue
    FilenameLnvMSRIO.sys
    Creation Timestamp2024-11-20 22:42:05
    MD5517917ff2e5008c791d007cecab5e335
    SHA1f496bc9b6e77fef03f945b48f86b840baf61fe47
    SHA2567023f08c9f99076a5fb82a0f661847e2951800f095fca1793a0e6bd9c949b478
    Authentihash MD574f2be8834f3ac2de12d64b705bf5d08
    Authentihash SHA1b74a2e4f0a40748a9dc136cd7eaceecbfe40bba0
    Authentihash SHA256bcc5394705e552d0312592c507b71a6bd921782f82bb5b4acc721d2f056030a5
    RichPEHeaderHash MD569fd0a1931e95ec5f2a763c14d238399
    RichPEHeaderHash SHA1eca66a34a452e4eade0671b7105f22558f315d1c
    RichPEHeaderHash SHA256cc8f06d333952c06f0ba32f3ef67ad714a7d76ce5377cd2a3bbc2a874c4a89a4
    CompanyLenovo
    DescriptionLenovo filter driver
    ProductLenovo filter driver
    OriginalFilenameLnvMSRIO.sys

    Download

    Certificates

    Expand
    Certificate 059b1b579e8e2132e23907bda777755c
    FieldValue
    ToBeSigned (TBS) MD541b622dd54995550fdc2f31ea12f8d9b
    ToBeSigned (TBS) SHA1420704040c93dfe9d3ad01a26c07f2be1f4888c1
    ToBeSigned (TBS) SHA2564816e2e9e37ba61e1def6f7a4c623e981c7af355e51349b5554a3d56c5252e24
    SubjectC=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Trusted Root G4
    ValidFrom2013-08-01 12:00:00
    ValidTo2038-01-15 12:00:00
    Signaturebb61d97da96cbe17c4911bc3a1a2008de364680f56cf77ae70f9fd9a4a99b9c9785c0c0c5fe4e61429560b36495d4463e0ad9c9618661b230d3d79e96d6bd654f8d23cc14340ae1d50f552fc903bbb9899696bc7c1a7a868a427dc9df927ae3085b9f6674d3a3e8f5939225344ebc85d03caed507a7d62210a80c87366d1a005605fe8a5b4a7afa8f76d359c7c5a8ad6a23899f3788bf44dd2200bde04ee8c9b4781720dc01432ef30592eaee071f256e46a976f92506d968d687a9ab236147a06f224b9091150d708b1b8897a8423614229e5a3cda22041d7d19c64d9ea26a18b14d74c19b25041713d3f4d7023860c4adc81d2cc3294840d0809971c4fc0ee6b207430d2e03934108521150108e85532de7149d92817504de6be4dd175acd0cafb41b843a5aad3c305444f2c369be2fae245b823536c066f67557f46b54c3f6e285a7926d2a4a86297d21ee2ed4a8bbc1bfd474a0ddf67667eb25b41d03be4f43bf40463e9efc2540051a08a2ac9ce78ccd5ea870418b3ceaf4988aff39299b6b3e6610fd28500e7501ae41b959d19a1b99cb19bb1001eefd00f4f426cc90abcee43fa3a71a5c84d26a535fd895dbc85621d32d2a02b54ed9a57c1dbfa10cf19b78b4a1b8f01b6279553e8b6896d5bbc68d423e88b51a256f9f0a680a0d61eb3bc0f0f537529aaea1377e4de8c8121ad07104711ad873d07d175bccff3667e
    SignatureAlgorithmOID1.2.840.113549.1.1.12
    IsCertificateAuthorityTrue
    SerialNumber059b1b579e8e2132e23907bda777755c
    Version3
    Certificate 08ad40b260d29c4c9f5ecda9bd93aed9
    FieldValue
    ToBeSigned (TBS) MD55d8003a64dfa5a4d88365da1566038cb
    ToBeSigned (TBS) SHA179465b56bc7ad55a37bdf633943da8bfc84db228
    ToBeSigned (TBS) SHA25684bdc82e2f2a7f7aaa782667dac556ffcb2b33240c1f9c0a00a3264526a98332
    SubjectC=US, O=DigiCert, Inc., CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1
    ValidFrom2021-04-29 00:00:00
    ValidTo2036-04-28 23:59:59
    Signature3a23443d8d0876ee8fbc3a99d356e0021aa5f84834f32cb6e67466f79472b100caaf6c302713129e90449f4bfd9ea37c26d537bc3a5d486d95d53f49f427bb16814550fd9cbdb685e0767e3771cb22f75aaa90cff5936ae3eb20d1d55079889a8a8ac1b6bda148187edcd8801a111918cd61998156f6c9e376e7c4e41b5f43f83e94ff76393d9ed499cf4add28eb5f26a1955848d51afed7273ffd90d17686dd1cb0605cf30da8eee089a1bd39e1384eda6ebb369dfbe521535ac3cae96af1a23edb43b833c84f38149299f5ddce546dd95d02141f40337c03e295b2c221757352cb46d8c4341ca2a54b8dcd6f76372c853f1ace26e918be9007b0437f9588208270f0cccaeffd29355c1f893855f7378a8b09a1cb0be9311aff2e195c3971e1be9ca70a06d62667b792e64e5fde7aac49cf2ea47492addb3ca49c861fe3c1561b2b23ff8fb5ea887b706be6a0bafd3a3f45a6c4e81691528b41c048844b964dab4440e38df01528ceedf11856072a2f10c40c08643c338fae288c3ccb8f880b0dbf3bf4ce1e7b8eefb5ebcbb7f07713e6e7283fac12aea52f226c41f9825c1566cc6c0ecac586c3f626330c074ba0d307026a6a4030484b34a85120bbad1b8508e2590d6dca05502bea4a1c9ea5fda0a71f0674e7f2d65290fdaf854821f9573bb49c03ed8645f4b4616ebf68e2266086eac8afa9fe941de7631b3a8656784e
    SignatureAlgorithmOID1.2.840.113549.1.1.12
    IsCertificateAuthorityTrue
    SerialNumber08ad40b260d29c4c9f5ecda9bd93aed9
    Version3
    Certificate 0b60337461b8bb50cbf83e6bea99ea0e
    FieldValue
    ToBeSigned (TBS) MD57ef16cb5545e847cef80aee6db6fb728
    ToBeSigned (TBS) SHA18e8fdcaa9d5943a7cc298815f9144d5aec014de0
    ToBeSigned (TBS) SHA2567d84324a4b209440d8fa048ba61a70ca2e5d4f82881a458c45d50b80e2a40abd
    SubjectC=US, ST=North Carolina, L=Morrisville, O=Lenovo, OU=G29, CN=Lenovo
    ValidFrom2024-10-30 00:00:00
    ValidTo2025-10-29 23:59:59
    Signature88af5de36514a3d179ba4e91a0d9a6ca151f1c7b8c575b838940241ad1c35ddec84196e9c494ba6c4c949028e4bd2f10c019ec49fbecc065d8a39127adbee5d4d2f9103d902f064f1566f065c2dd6ab5b24a7726e6f6980577efefb8667fdc1f9687e9059fbc297abda2954ed0401ac9e73eb8a13f93a9c328e00336e030d144a5c31c319616ec047049616e7751af98b1c5ec06f09fa7f177a02acb60e69bf81294a7c3d69151e77f06a133e8e41f17961a50c750de2eec2dfa2ecff8470005e8c9d441d34bea706993ccf8a6a4b8ff2a6b63eabddb50003dbe361ec6e482d06469332804f196ea8f4faf4268e69a6157116d49da333b9edec3d773882e97f7d25f5323be844407fad9d211974efcb61a8793fffc13ecf1ef71af78634df177f46a3d3315e428de30cffe43c027e21ed555fb45bf764916050d6468ee6527cf3b3b43bba72f9cb98cd8ee1588db70e17acc9fcde65c2590cf0a275bb1a8b7497c2e0c67fbcafde9b75cbdcd68511c52e38e7cf5b07c887db175fcb6264db8a22fe2573ec5fa27d9b0f2c1dcc02ced797819157dc570e3c2739d5b212ea680c6446192baa10b0b4b1113e974e070c7c3fa707584f55623686e851657fc54bc3d27167758580dbdb3a0a1c264921e41eb074b76bc1f0452ddfb3d0cfa0de64f6f7def5c44f1f16cdb4aacfb44b453b859228f36c4ff578197ed9690b152fd2e69
    SignatureAlgorithmOID1.2.840.113549.1.1.11
    IsCertificateAuthorityFalse
    SerialNumber0b60337461b8bb50cbf83e6bea99ea0e
    Version3

    Imports

    Expand
    • FLTMGR.SYS
    • ntoskrnl.exe
    • HAL.dll
    • WDFLDR.SYS

    Imported Functions

    Expand
    • FltRegisterFilter
    • FltUnregisterFilter
    • FltStartFiltering
    • FltCreateCommunicationPort
    • FltCloseCommunicationPort
    • FltCloseClientPort
    • FltSendMessage
    • FltBuildDefaultSecurityDescriptor
    • FltFreeSecurityDescriptor
    • IoCreateDevice
    • IoDeleteDevice
    • IoDeleteSymbolicLink
    • PoRegisterPowerSettingCallback
    • PoUnregisterPowerSettingCallback
    • PsSetCreateProcessNotifyRoutineEx
    • ZwPowerInformation
    • __C_specific_handler
    • RtlInitUnicodeString
    • IofCompleteRequest
    • MmUnmapIoSpace
    • MmMapIoSpace
    • RtlCopyUnicodeString
    • DbgPrintEx
    • ProbeForWrite
    • ProbeForRead
    • ExFreePoolWithTag
    • ExAllocatePool2
    • IoCreateSymbolicLink
    • HalGetBusDataByOffset
    • HalSetBusDataByOffset
    • WdfVersionBind
    • WdfLdrQueryInterface
    • WdfVersionUnbind
    • WdfVersionBindClass
    • WdfVersionUnbindClass

    Exported Functions

    Expand

    Sections

    Expand
    • .text
    • .rdata
    • .data
    • .pdata
    • INIT
    • .rsrc
    • .reloc

    Signature

    Expand
    {
  "Certificates": [
    {
      "CertificateType": "CA",
      "IsCA": true,
      "IsCertificateAuthority": true,
      "IsCodeSigning": false,
      "SerialNumber": "059b1b579e8e2132e23907bda777755c",
      "Signature": "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",
      "SignatureAlgorithmOID": "1.2.840.113549.1.1.12",
      "Subject": "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Trusted Root G4",
      "TBS": {
        "MD5": "41b622dd54995550fdc2f31ea12f8d9b",
        "SHA1": "420704040c93dfe9d3ad01a26c07f2be1f4888c1",
        "SHA256": "4816e2e9e37ba61e1def6f7a4c623e981c7af355e51349b5554a3d56c5252e24",
        "SHA384": "4ea1b34b10b982a96a38915843507820ad632c6aad8343e337b34d660cd8366fa154544ae80668ae1fdf3931d57e1996"
      },
      "ValidFrom": "2013-08-01 12:00:00",
      "ValidTo": "2038-01-15 12:00:00",
      "Version": 3
    },
    {
      "CertificateType": "CA",
      "IsCA": true,
      "IsCertificateAuthority": true,
      "IsCodeSigning": true,
      "SerialNumber": "08ad40b260d29c4c9f5ecda9bd93aed9",
      "Signature": "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",
      "SignatureAlgorithmOID": "1.2.840.113549.1.1.12",
      "Subject": "C=US, O=DigiCert, Inc., CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1",
      "TBS": {
        "MD5": "5d8003a64dfa5a4d88365da1566038cb",
        "SHA1": "79465b56bc7ad55a37bdf633943da8bfc84db228",
        "SHA256": "84bdc82e2f2a7f7aaa782667dac556ffcb2b33240c1f9c0a00a3264526a98332",
        "SHA384": "65b1d4076a89ae273f57e6eeedecb3eae129b4168f76fa7671914cdf461d542255c59d9b85b916ae0ca6fc0fcf7a8e64"
      },
      "ValidFrom": "2021-04-29 00:00:00",
      "ValidTo": "2036-04-28 23:59:59",
      "Version": 3
    },
    {
      "CertificateType": "Leaf (Code Signing)",
      "IsCA": false,
      "IsCertificateAuthority": false,
      "IsCodeSigning": true,
      "SerialNumber": "0b60337461b8bb50cbf83e6bea99ea0e",
      "Signature": "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",
      "SignatureAlgorithmOID": "1.2.840.113549.1.1.11",
      "Subject": "C=US, ST=North Carolina, L=Morrisville, O=Lenovo, OU=G29, CN=Lenovo",
      "TBS": {
        "MD5": "7ef16cb5545e847cef80aee6db6fb728",
        "SHA1": "8e8fdcaa9d5943a7cc298815f9144d5aec014de0",
        "SHA256": "7d84324a4b209440d8fa048ba61a70ca2e5d4f82881a458c45d50b80e2a40abd",
        "SHA384": "5c582862ce3cd29630ba8f35068f63f7fc54e1b626e19dd4951413f23d3433381d8266287a91255978359138c22c207d"
      },
      "ValidFrom": "2024-10-30 00:00:00",
      "ValidTo": "2025-10-29 23:59:59",
      "Version": 3
    }
  ],
  "CertificatesInfo": "",
  "Signer": [
    {
      "Issuer": "C=US, O=DigiCert, Inc., CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1",
      "SerialNumber": "0b60337461b8bb50cbf83e6bea99ea0e",
      "Version": 1
    }
  ],
  "SignerInfo": ""
}
    PropertyValue
    FilenameLnvMSRIO.sys
    Creation Timestamp2024-10-09 23:38:50
    MD5e2b952939b8e9d76cff7d130b797a74d
    SHA10186912447648a5e4b9c9c31d718f605d5e5c925
    SHA256245b6ab442a7d53dc30ece28e1c6de727c019669385877cbe929b81aa1a2ad2f
    Authentihash MD50534526a3718f09d57d41ee52bac6925
    Authentihash SHA168969b2b53412322917be77774b3175155f28b71
    Authentihash SHA2565ea22a51f3db36d0fb6f14787a66422b408411f05108c3a75a702eb77870c022
    RichPEHeaderHash MD569fd0a1931e95ec5f2a763c14d238399
    RichPEHeaderHash SHA1eca66a34a452e4eade0671b7105f22558f315d1c
    RichPEHeaderHash SHA256cc8f06d333952c06f0ba32f3ef67ad714a7d76ce5377cd2a3bbc2a874c4a89a4
    CompanyLenovo
    DescriptionLenovo filter driver
    ProductLenovo filter driver
    OriginalFilenameLnvMSRIO.sys

    Download

    Certificates

    Expand
    Certificate 059b1b579e8e2132e23907bda777755c
    FieldValue
    ToBeSigned (TBS) MD541b622dd54995550fdc2f31ea12f8d9b
    ToBeSigned (TBS) SHA1420704040c93dfe9d3ad01a26c07f2be1f4888c1
    ToBeSigned (TBS) SHA2564816e2e9e37ba61e1def6f7a4c623e981c7af355e51349b5554a3d56c5252e24
    SubjectC=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Trusted Root G4
    ValidFrom2013-08-01 12:00:00
    ValidTo2038-01-15 12:00:00
    Signaturebb61d97da96cbe17c4911bc3a1a2008de364680f56cf77ae70f9fd9a4a99b9c9785c0c0c5fe4e61429560b36495d4463e0ad9c9618661b230d3d79e96d6bd654f8d23cc14340ae1d50f552fc903bbb9899696bc7c1a7a868a427dc9df927ae3085b9f6674d3a3e8f5939225344ebc85d03caed507a7d62210a80c87366d1a005605fe8a5b4a7afa8f76d359c7c5a8ad6a23899f3788bf44dd2200bde04ee8c9b4781720dc01432ef30592eaee071f256e46a976f92506d968d687a9ab236147a06f224b9091150d708b1b8897a8423614229e5a3cda22041d7d19c64d9ea26a18b14d74c19b25041713d3f4d7023860c4adc81d2cc3294840d0809971c4fc0ee6b207430d2e03934108521150108e85532de7149d92817504de6be4dd175acd0cafb41b843a5aad3c305444f2c369be2fae245b823536c066f67557f46b54c3f6e285a7926d2a4a86297d21ee2ed4a8bbc1bfd474a0ddf67667eb25b41d03be4f43bf40463e9efc2540051a08a2ac9ce78ccd5ea870418b3ceaf4988aff39299b6b3e6610fd28500e7501ae41b959d19a1b99cb19bb1001eefd00f4f426cc90abcee43fa3a71a5c84d26a535fd895dbc85621d32d2a02b54ed9a57c1dbfa10cf19b78b4a1b8f01b6279553e8b6896d5bbc68d423e88b51a256f9f0a680a0d61eb3bc0f0f537529aaea1377e4de8c8121ad07104711ad873d07d175bccff3667e
    SignatureAlgorithmOID1.2.840.113549.1.1.12
    IsCertificateAuthorityTrue
    SerialNumber059b1b579e8e2132e23907bda777755c
    Version3
    Certificate 08ad40b260d29c4c9f5ecda9bd93aed9
    FieldValue
    ToBeSigned (TBS) MD55d8003a64dfa5a4d88365da1566038cb
    ToBeSigned (TBS) SHA179465b56bc7ad55a37bdf633943da8bfc84db228
    ToBeSigned (TBS) SHA25684bdc82e2f2a7f7aaa782667dac556ffcb2b33240c1f9c0a00a3264526a98332
    SubjectC=US, O=DigiCert, Inc., CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1
    ValidFrom2021-04-29 00:00:00
    ValidTo2036-04-28 23:59:59
    Signature3a23443d8d0876ee8fbc3a99d356e0021aa5f84834f32cb6e67466f79472b100caaf6c302713129e90449f4bfd9ea37c26d537bc3a5d486d95d53f49f427bb16814550fd9cbdb685e0767e3771cb22f75aaa90cff5936ae3eb20d1d55079889a8a8ac1b6bda148187edcd8801a111918cd61998156f6c9e376e7c4e41b5f43f83e94ff76393d9ed499cf4add28eb5f26a1955848d51afed7273ffd90d17686dd1cb0605cf30da8eee089a1bd39e1384eda6ebb369dfbe521535ac3cae96af1a23edb43b833c84f38149299f5ddce546dd95d02141f40337c03e295b2c221757352cb46d8c4341ca2a54b8dcd6f76372c853f1ace26e918be9007b0437f9588208270f0cccaeffd29355c1f893855f7378a8b09a1cb0be9311aff2e195c3971e1be9ca70a06d62667b792e64e5fde7aac49cf2ea47492addb3ca49c861fe3c1561b2b23ff8fb5ea887b706be6a0bafd3a3f45a6c4e81691528b41c048844b964dab4440e38df01528ceedf11856072a2f10c40c08643c338fae288c3ccb8f880b0dbf3bf4ce1e7b8eefb5ebcbb7f07713e6e7283fac12aea52f226c41f9825c1566cc6c0ecac586c3f626330c074ba0d307026a6a4030484b34a85120bbad1b8508e2590d6dca05502bea4a1c9ea5fda0a71f0674e7f2d65290fdaf854821f9573bb49c03ed8645f4b4616ebf68e2266086eac8afa9fe941de7631b3a8656784e
    SignatureAlgorithmOID1.2.840.113549.1.1.12
    IsCertificateAuthorityTrue
    SerialNumber08ad40b260d29c4c9f5ecda9bd93aed9
    Version3
    Certificate 07ea0db629e58978271f50224ec6a2d9
    FieldValue
    ToBeSigned (TBS) MD5fdb1e44856241333527c1aad4f3932fd
    ToBeSigned (TBS) SHA196f91b910bd5be2f2ed088d4b8d0f891d56e0755
    ToBeSigned (TBS) SHA25626e1608fb1c5620aec95b97613e7110d7adbe2a856605c56bede6cc9d26da191
    SubjectC=US, ST=North Carolina, L=Morrisville, O=Lenovo, OU=G29, CN=Lenovo
    ValidFrom2023-11-06 00:00:00
    ValidTo2024-11-05 23:59:59
    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
    SignatureAlgorithmOID1.2.840.113549.1.1.11
    IsCertificateAuthorityFalse
    SerialNumber07ea0db629e58978271f50224ec6a2d9
    Version3

    Imports

    Expand
    • FLTMGR.SYS
    • ntoskrnl.exe
    • HAL.dll
    • WDFLDR.SYS

    Imported Functions

    Expand
    • FltRegisterFilter
    • FltUnregisterFilter
    • FltStartFiltering
    • FltCreateCommunicationPort
    • FltCloseCommunicationPort
    • FltCloseClientPort
    • FltSendMessage
    • FltBuildDefaultSecurityDescriptor
    • FltFreeSecurityDescriptor
    • IoCreateDevice
    • IoDeleteDevice
    • IoDeleteSymbolicLink
    • PoRegisterPowerSettingCallback
    • PoUnregisterPowerSettingCallback
    • PsSetCreateProcessNotifyRoutineEx
    • ZwPowerInformation
    • __C_specific_handler
    • RtlInitUnicodeString
    • IofCompleteRequest
    • MmUnmapIoSpace
    • MmMapIoSpace
    • RtlCopyUnicodeString
    • DbgPrintEx
    • ProbeForWrite
    • ProbeForRead
    • ExFreePoolWithTag
    • ExAllocatePool2
    • IoCreateSymbolicLink
    • HalGetBusDataByOffset
    • HalSetBusDataByOffset
    • WdfVersionBind
    • WdfLdrQueryInterface
    • WdfVersionUnbind
    • WdfVersionBindClass
    • WdfVersionUnbindClass

    Exported Functions

    Expand

    Sections

    Expand
    • .text
    • .rdata
    • .data
    • .pdata
    • INIT
    • .rsrc
    • .reloc

    Signature

    Expand
    {
  "Certificates": [
    {
      "CertificateType": "CA",
      "IsCA": true,
      "IsCertificateAuthority": true,
      "IsCodeSigning": false,
      "SerialNumber": "059b1b579e8e2132e23907bda777755c",
      "Signature": "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",
      "SignatureAlgorithmOID": "1.2.840.113549.1.1.12",
      "Subject": "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Trusted Root G4",
      "TBS": {
        "MD5": "41b622dd54995550fdc2f31ea12f8d9b",
        "SHA1": "420704040c93dfe9d3ad01a26c07f2be1f4888c1",
        "SHA256": "4816e2e9e37ba61e1def6f7a4c623e981c7af355e51349b5554a3d56c5252e24",
        "SHA384": "4ea1b34b10b982a96a38915843507820ad632c6aad8343e337b34d660cd8366fa154544ae80668ae1fdf3931d57e1996"
      },
      "ValidFrom": "2013-08-01 12:00:00",
      "ValidTo": "2038-01-15 12:00:00",
      "Version": 3
    },
    {
      "CertificateType": "CA",
      "IsCA": true,
      "IsCertificateAuthority": true,
      "IsCodeSigning": true,
      "SerialNumber": "08ad40b260d29c4c9f5ecda9bd93aed9",
      "Signature": "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",
      "SignatureAlgorithmOID": "1.2.840.113549.1.1.12",
      "Subject": "C=US, O=DigiCert, Inc., CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1",
      "TBS": {
        "MD5": "5d8003a64dfa5a4d88365da1566038cb",
        "SHA1": "79465b56bc7ad55a37bdf633943da8bfc84db228",
        "SHA256": "84bdc82e2f2a7f7aaa782667dac556ffcb2b33240c1f9c0a00a3264526a98332",
        "SHA384": "65b1d4076a89ae273f57e6eeedecb3eae129b4168f76fa7671914cdf461d542255c59d9b85b916ae0ca6fc0fcf7a8e64"
      },
      "ValidFrom": "2021-04-29 00:00:00",
      "ValidTo": "2036-04-28 23:59:59",
      "Version": 3
    },
    {
      "CertificateType": "Leaf (Code Signing)",
      "IsCA": false,
      "IsCertificateAuthority": false,
      "IsCodeSigning": true,
      "SerialNumber": "0b60337461b8bb50cbf83e6bea99ea0e",
      "Signature": "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",
      "SignatureAlgorithmOID": "1.2.840.113549.1.1.11",
      "Subject": "C=US, ST=North Carolina, L=Morrisville, O=Lenovo, OU=G29, CN=Lenovo",
      "TBS": {
        "MD5": "7ef16cb5545e847cef80aee6db6fb728",
        "SHA1": "8e8fdcaa9d5943a7cc298815f9144d5aec014de0",
        "SHA256": "7d84324a4b209440d8fa048ba61a70ca2e5d4f82881a458c45d50b80e2a40abd",
        "SHA384": "5c582862ce3cd29630ba8f35068f63f7fc54e1b626e19dd4951413f23d3433381d8266287a91255978359138c22c207d"
      },
      "ValidFrom": "2024-10-30 00:00:00",
      "ValidTo": "2025-10-29 23:59:59",
      "Version": 3
    }
  ],
  "CertificatesInfo": "",
  "Signer": [
    {
      "Issuer": "C=US, O=DigiCert, Inc., CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1",
      "SerialNumber": "0b60337461b8bb50cbf83e6bea99ea0e",
      "Version": 1
    }
  ],
  "SignerInfo": ""
}
    PropertyValue
    FilenameLnvMSRIO.sys
    Creation Timestamp2024-03-26 05:24:33
    MD5d60fcf12d1c9a95f2033173c06c2083d
    SHA19d5410a6033c7b3a13c5776ab3ff8160c17bbf20
    SHA256072ca56c765c937358d3e79c9ecd803c40283a0c32fc4c78e08ea1709d7a832f
    Authentihash MD573d16ca31daf80e98727c70566922f64
    Authentihash SHA13c202f71a39adcd6c32a1037fc65cbf04b6dc129
    Authentihash SHA256cf59e0a6588061ca6851ca766d582c9f6d2138d561d67d265cd6bcdafc99449c
    RichPEHeaderHash MD57ecaee1ce6d3fba220bef21fa8e7b894
    RichPEHeaderHash SHA1ed56e4faab57a9fc79e892500dbc7259241deef3
    RichPEHeaderHash SHA2567a755e2684301aad387876047c940375c8a2f9b4eadf2c9d63da36a8fcaec8de
    CompanyLenovo
    DescriptionLenovo filter driver
    ProductLenovo filter driver
    OriginalFilenameLnvMSRIO.sys

    Download

    Certificates

    Expand
    Certificate 08ad40b260d29c4c9f5ecda9bd93aed9
    FieldValue
    ToBeSigned (TBS) MD55d8003a64dfa5a4d88365da1566038cb
    ToBeSigned (TBS) SHA179465b56bc7ad55a37bdf633943da8bfc84db228
    ToBeSigned (TBS) SHA25684bdc82e2f2a7f7aaa782667dac556ffcb2b33240c1f9c0a00a3264526a98332
    SubjectC=US, O=DigiCert, Inc., CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1
    ValidFrom2021-04-29 00:00:00
    ValidTo2036-04-28 23:59:59
    Signature3a23443d8d0876ee8fbc3a99d356e0021aa5f84834f32cb6e67466f79472b100caaf6c302713129e90449f4bfd9ea37c26d537bc3a5d486d95d53f49f427bb16814550fd9cbdb685e0767e3771cb22f75aaa90cff5936ae3eb20d1d55079889a8a8ac1b6bda148187edcd8801a111918cd61998156f6c9e376e7c4e41b5f43f83e94ff76393d9ed499cf4add28eb5f26a1955848d51afed7273ffd90d17686dd1cb0605cf30da8eee089a1bd39e1384eda6ebb369dfbe521535ac3cae96af1a23edb43b833c84f38149299f5ddce546dd95d02141f40337c03e295b2c221757352cb46d8c4341ca2a54b8dcd6f76372c853f1ace26e918be9007b0437f9588208270f0cccaeffd29355c1f893855f7378a8b09a1cb0be9311aff2e195c3971e1be9ca70a06d62667b792e64e5fde7aac49cf2ea47492addb3ca49c861fe3c1561b2b23ff8fb5ea887b706be6a0bafd3a3f45a6c4e81691528b41c048844b964dab4440e38df01528ceedf11856072a2f10c40c08643c338fae288c3ccb8f880b0dbf3bf4ce1e7b8eefb5ebcbb7f07713e6e7283fac12aea52f226c41f9825c1566cc6c0ecac586c3f626330c074ba0d307026a6a4030484b34a85120bbad1b8508e2590d6dca05502bea4a1c9ea5fda0a71f0674e7f2d65290fdaf854821f9573bb49c03ed8645f4b4616ebf68e2266086eac8afa9fe941de7631b3a8656784e
    SignatureAlgorithmOID1.2.840.113549.1.1.12
    IsCertificateAuthorityTrue
    SerialNumber08ad40b260d29c4c9f5ecda9bd93aed9
    Version3
    Certificate 0f1b5575dca88493964e207f27711085
    FieldValue
    ToBeSigned (TBS) MD5e1e032346eb86692663f47e6ed01e573
    ToBeSigned (TBS) SHA1594e3b5564bcc009a61e04375b51a8bbaa2b4f6d
    ToBeSigned (TBS) SHA256a2c2e2432bdc2704f458aa3cf433f4dcd3919c3fb2bf23094a16b6407b1ecbae
    SubjectC=US, ST=North Carolina, L=Morrisville, O=Lenovo, OU=G11, CN=Lenovo
    ValidFrom2023-05-25 00:00:00
    ValidTo2024-05-24 23:59:59
    Signature78fd94096ee1363d53c2df0350cf61b1239b0773407f61ca82098087e5f9cc2ece38a7b9d8e4a68ed334a4da8abb7951add48a4ec781870eaec07510eb3b9590579060d00eff70e06747173412cdca57db7e17e3bb2635a7c17cf14dbc4dfc77fffde1a179b973c305db95e4c0f223b55cc415ea760ccbdcd1fbff3cfdee5a615be485133ceb85e25e6de7bb436d47e44c1c10456f0a5c3d8aa606d52f4996dba43310a21cb2544e3413283a56c5cbd4016ddf152619256758ca0a3aba46da5a9de078b2f4a3658ea000738483ccddf67ea74769b0ae041f34d9ca71a57e9f1acae7934b7318db367a0351e24624ebfd63e9f60197abef5814ff53f764e62434c62a47ca1b9748eb08d42f74d13679265a18a91f375de9dba0cdfab1db130ad2bef53ea52c5ad5a996f1145c3040dca7f2687559491bf17b5ffca59d28ecb228ffbd72916781a9d65738d9aca2b87a5b10f36736d2f6a18705529cb81eefa4550b875e135ace1d42c377c7b9fc76da29dd849034c8566c5859c831511639847f4132ec5b43c013cd0f3b7438c3bdd3f8ea75da750c73a5d90daf443b2d1b3ebd2311e9aee4e52d30072888477c06847db40d55c0f94e097e2004440fb70e4caea9b9b4e2f86964f681751747474977d3bff096186dfea8e1783bffc26e480e5ccd0b4d8f0dd27c5f6665c2970c21665190a0aa23159cce27a444be114b7dd5df
    SignatureAlgorithmOID1.2.840.113549.1.1.11
    IsCertificateAuthorityFalse
    SerialNumber0f1b5575dca88493964e207f27711085
    Version3

    Imports

    Expand
    • FLTMGR.SYS
    • ntoskrnl.exe
    • HAL.dll
    • WDFLDR.SYS

    Imported Functions

    Expand
    • FltRegisterFilter
    • FltUnregisterFilter
    • FltStartFiltering
    • FltCreateCommunicationPort
    • FltCloseCommunicationPort
    • FltCloseClientPort
    • FltSendMessage
    • FltBuildDefaultSecurityDescriptor
    • FltFreeSecurityDescriptor
    • IoCreateDevice
    • IoDeleteDevice
    • IoDeleteSymbolicLink
    • PoRegisterPowerSettingCallback
    • PoUnregisterPowerSettingCallback
    • PsSetCreateProcessNotifyRoutineEx
    • ZwPowerInformation
    • __C_specific_handler
    • RtlInitUnicodeString
    • IofCompleteRequest
    • MmUnmapIoSpace
    • MmMapIoSpace
    • RtlCopyUnicodeString
    • DbgPrintEx
    • ProbeForWrite
    • ProbeForRead
    • ExFreePoolWithTag
    • ExAllocatePool2
    • IoCreateSymbolicLink
    • HalGetBusDataByOffset
    • HalSetBusDataByOffset
    • WdfVersionBind
    • WdfLdrQueryInterface
    • WdfVersionUnbind
    • WdfVersionBindClass
    • WdfVersionUnbindClass

    Exported Functions

    Expand

    Sections

    Expand
    • .text
    • .rdata
    • .data
    • .pdata
    • INIT
    • .rsrc
    • .reloc

    Signature

    Expand
    {
  "Certificates": [
    {
      "CertificateType": "CA",
      "IsCA": true,
      "IsCertificateAuthority": true,
      "IsCodeSigning": false,
      "SerialNumber": "059b1b579e8e2132e23907bda777755c",
      "Signature": "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",
      "SignatureAlgorithmOID": "1.2.840.113549.1.1.12",
      "Subject": "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Trusted Root G4",
      "TBS": {
        "MD5": "41b622dd54995550fdc2f31ea12f8d9b",
        "SHA1": "420704040c93dfe9d3ad01a26c07f2be1f4888c1",
        "SHA256": "4816e2e9e37ba61e1def6f7a4c623e981c7af355e51349b5554a3d56c5252e24",
        "SHA384": "4ea1b34b10b982a96a38915843507820ad632c6aad8343e337b34d660cd8366fa154544ae80668ae1fdf3931d57e1996"
      },
      "ValidFrom": "2013-08-01 12:00:00",
      "ValidTo": "2038-01-15 12:00:00",
      "Version": 3
    },
    {
      "CertificateType": "CA",
      "IsCA": true,
      "IsCertificateAuthority": true,
      "IsCodeSigning": true,
      "SerialNumber": "08ad40b260d29c4c9f5ecda9bd93aed9",
      "Signature": "3a23443d8d0876ee8fbc3a99d356e0021aa5f84834f32cb6e67466f79472b100caaf6c302713129e90449f4bfd9ea37c26d537bc3a5d486d95d53f49f427bb16814550fd9cbdb685e0767e3771cb22f75aaa90cff5936ae3eb20d1d55079889a8a8ac1b6bda148187edcd8801a111918cd61998156f6c9e376e7c4e41b5f43f83e94ff76393d9ed499cf4add28eb5f26a1955848d51afed7273ffd90d17686dd1cb0605cf30da8eee089a1bd39e1384eda6ebb369dfbe521535ac3cae96af1a23edb43b833c84f38149299f5ddce546dd95d02141f40337c03e295b2c221757352cb46d8c4341ca2a54b8dcd6f76372c853f1ace26e918be9007b0437f9588208270f0cccaeffd29355c1f893855f7378a8b09a1cb0be9311aff2e195c3971e1be9ca70a06d62667b792e64e5fde7aac49cf2ea47492addb3ca49c861fe3c1561b2b23ff8fb5ea887b706be6a0bafd3a3f45a6c4e81691528b41c048844b964dab4440e38df01528ceedf11856072a2f10c40c08643c338fae288c3ccb8f880b0dbf3bf4ce1e7b8eefb5ebcbb7f07713e6e7283fac12aea52f226c41f9825c1566cc6c0ecac586c3f626330c074ba0d307026a6a4030484b34a85120bbad1b8508e2590d6dca05502bea4a1c9ea5fda0a71f0674e7f2d65290fdaf854821f9573bb49c03ed8645f4b4616ebf68e2266086eac8afa9fe941de7631b3a8656784e",
      "SignatureAlgorithmOID": "1.2.840.113549.1.1.12",
      "Subject": "C=US, O=DigiCert, Inc., CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1",
      "TBS": {
        "MD5": "5d8003a64dfa5a4d88365da1566038cb",
        "SHA1": "79465b56bc7ad55a37bdf633943da8bfc84db228",
        "SHA256": "84bdc82e2f2a7f7aaa782667dac556ffcb2b33240c1f9c0a00a3264526a98332",
        "SHA384": "65b1d4076a89ae273f57e6eeedecb3eae129b4168f76fa7671914cdf461d542255c59d9b85b916ae0ca6fc0fcf7a8e64"
      },
      "ValidFrom": "2021-04-29 00:00:00",
      "ValidTo": "2036-04-28 23:59:59",
      "Version": 3
    },
    {
      "CertificateType": "Leaf (Code Signing)",
      "IsCA": false,
      "IsCertificateAuthority": false,
      "IsCodeSigning": true,
      "SerialNumber": "0b60337461b8bb50cbf83e6bea99ea0e",
      "Signature": "88af5de36514a3d179ba4e91a0d9a6ca151f1c7b8c575b838940241ad1c35ddec84196e9c494ba6c4c949028e4bd2f10c019ec49fbecc065d8a39127adbee5d4d2f9103d902f064f1566f065c2dd6ab5b24a7726e6f6980577efefb8667fdc1f9687e9059fbc297abda2954ed0401ac9e73eb8a13f93a9c328e00336e030d144a5c31c319616ec047049616e7751af98b1c5ec06f09fa7f177a02acb60e69bf81294a7c3d69151e77f06a133e8e41f17961a50c750de2eec2dfa2ecff8470005e8c9d441d34bea706993ccf8a6a4b8ff2a6b63eabddb50003dbe361ec6e482d06469332804f196ea8f4faf4268e69a6157116d49da333b9edec3d773882e97f7d25f5323be844407fad9d211974efcb61a8793fffc13ecf1ef71af78634df177f46a3d3315e428de30cffe43c027e21ed555fb45bf764916050d6468ee6527cf3b3b43bba72f9cb98cd8ee1588db70e17acc9fcde65c2590cf0a275bb1a8b7497c2e0c67fbcafde9b75cbdcd68511c52e38e7cf5b07c887db175fcb6264db8a22fe2573ec5fa27d9b0f2c1dcc02ced797819157dc570e3c2739d5b212ea680c6446192baa10b0b4b1113e974e070c7c3fa707584f55623686e851657fc54bc3d27167758580dbdb3a0a1c264921e41eb074b76bc1f0452ddfb3d0cfa0de64f6f7def5c44f1f16cdb4aacfb44b453b859228f36c4ff578197ed9690b152fd2e69",
      "SignatureAlgorithmOID": "1.2.840.113549.1.1.11",
      "Subject": "C=US, ST=North Carolina, L=Morrisville, O=Lenovo, OU=G29, CN=Lenovo",
      "TBS": {
        "MD5": "7ef16cb5545e847cef80aee6db6fb728",
        "SHA1": "8e8fdcaa9d5943a7cc298815f9144d5aec014de0",
        "SHA256": "7d84324a4b209440d8fa048ba61a70ca2e5d4f82881a458c45d50b80e2a40abd",
        "SHA384": "5c582862ce3cd29630ba8f35068f63f7fc54e1b626e19dd4951413f23d3433381d8266287a91255978359138c22c207d"
      },
      "ValidFrom": "2024-10-30 00:00:00",
      "ValidTo": "2025-10-29 23:59:59",
      "Version": 3
    }
  ],
  "CertificatesInfo": "",
  "Signer": [
    {
      "Issuer": "C=US, O=DigiCert, Inc., CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1",
      "SerialNumber": "0b60337461b8bb50cbf83e6bea99ea0e",
      "Version": 1
    }
  ],
  "SignerInfo": ""
}
    PropertyValue
    FilenameLnvMSRIO.sys
    Creation Timestamp2024-01-25 19:46:26
    MD541b61cad40d1593fae3a9b61257c55b0
    SHA12511d969c12d56b5d84413af07514d9a0e33c9b9
    SHA256348e7fc97dd20b3db056e3971020da107aa6e82d99be9f04c2d2170f8f39cd58
    Authentihash MD53578b299945dc29364a7360079abf367
    Authentihash SHA1f76d6349f0f0caf98e5c317c25d637aa0a54da29
    Authentihash SHA256bee39425ef2cdda84634519f0b5ed8fd509d62ba88e4484ccd436f2b4b5aef7b
    RichPEHeaderHash MD5956bfec9342c19ff2cf9f1cb20787bd8
    RichPEHeaderHash SHA12714b369011de84e8a1895a14f99d5f277c617fe
    RichPEHeaderHash SHA256f163346df5389eeeaf1c7c13e1077f4e82217d552b1ad2662f7caca8a877c021
    CompanyLenovo
    DescriptionLenovo filter driver
    ProductLenovo filter driver
    OriginalFilenameLnvMSRIO.sys

    Download

    Certificates

    Expand
    Certificate 08ad40b260d29c4c9f5ecda9bd93aed9
    FieldValue
    ToBeSigned (TBS) MD55d8003a64dfa5a4d88365da1566038cb
    ToBeSigned (TBS) SHA179465b56bc7ad55a37bdf633943da8bfc84db228
    ToBeSigned (TBS) SHA25684bdc82e2f2a7f7aaa782667dac556ffcb2b33240c1f9c0a00a3264526a98332
    SubjectC=US, O=DigiCert, Inc., CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1
    ValidFrom2021-04-29 00:00:00
    ValidTo2036-04-28 23:59:59
    Signature3a23443d8d0876ee8fbc3a99d356e0021aa5f84834f32cb6e67466f79472b100caaf6c302713129e90449f4bfd9ea37c26d537bc3a5d486d95d53f49f427bb16814550fd9cbdb685e0767e3771cb22f75aaa90cff5936ae3eb20d1d55079889a8a8ac1b6bda148187edcd8801a111918cd61998156f6c9e376e7c4e41b5f43f83e94ff76393d9ed499cf4add28eb5f26a1955848d51afed7273ffd90d17686dd1cb0605cf30da8eee089a1bd39e1384eda6ebb369dfbe521535ac3cae96af1a23edb43b833c84f38149299f5ddce546dd95d02141f40337c03e295b2c221757352cb46d8c4341ca2a54b8dcd6f76372c853f1ace26e918be9007b0437f9588208270f0cccaeffd29355c1f893855f7378a8b09a1cb0be9311aff2e195c3971e1be9ca70a06d62667b792e64e5fde7aac49cf2ea47492addb3ca49c861fe3c1561b2b23ff8fb5ea887b706be6a0bafd3a3f45a6c4e81691528b41c048844b964dab4440e38df01528ceedf11856072a2f10c40c08643c338fae288c3ccb8f880b0dbf3bf4ce1e7b8eefb5ebcbb7f07713e6e7283fac12aea52f226c41f9825c1566cc6c0ecac586c3f626330c074ba0d307026a6a4030484b34a85120bbad1b8508e2590d6dca05502bea4a1c9ea5fda0a71f0674e7f2d65290fdaf854821f9573bb49c03ed8645f4b4616ebf68e2266086eac8afa9fe941de7631b3a8656784e
    SignatureAlgorithmOID1.2.840.113549.1.1.12
    IsCertificateAuthorityTrue
    SerialNumber08ad40b260d29c4c9f5ecda9bd93aed9
    Version3
    Certificate 0f1b5575dca88493964e207f27711085
    FieldValue
    ToBeSigned (TBS) MD5e1e032346eb86692663f47e6ed01e573
    ToBeSigned (TBS) SHA1594e3b5564bcc009a61e04375b51a8bbaa2b4f6d
    ToBeSigned (TBS) SHA256a2c2e2432bdc2704f458aa3cf433f4dcd3919c3fb2bf23094a16b6407b1ecbae
    SubjectC=US, ST=North Carolina, L=Morrisville, O=Lenovo, OU=G11, CN=Lenovo
    ValidFrom2023-05-25 00:00:00
    ValidTo2024-05-24 23:59:59
    Signature78fd94096ee1363d53c2df0350cf61b1239b0773407f61ca82098087e5f9cc2ece38a7b9d8e4a68ed334a4da8abb7951add48a4ec781870eaec07510eb3b9590579060d00eff70e06747173412cdca57db7e17e3bb2635a7c17cf14dbc4dfc77fffde1a179b973c305db95e4c0f223b55cc415ea760ccbdcd1fbff3cfdee5a615be485133ceb85e25e6de7bb436d47e44c1c10456f0a5c3d8aa606d52f4996dba43310a21cb2544e3413283a56c5cbd4016ddf152619256758ca0a3aba46da5a9de078b2f4a3658ea000738483ccddf67ea74769b0ae041f34d9ca71a57e9f1acae7934b7318db367a0351e24624ebfd63e9f60197abef5814ff53f764e62434c62a47ca1b9748eb08d42f74d13679265a18a91f375de9dba0cdfab1db130ad2bef53ea52c5ad5a996f1145c3040dca7f2687559491bf17b5ffca59d28ecb228ffbd72916781a9d65738d9aca2b87a5b10f36736d2f6a18705529cb81eefa4550b875e135ace1d42c377c7b9fc76da29dd849034c8566c5859c831511639847f4132ec5b43c013cd0f3b7438c3bdd3f8ea75da750c73a5d90daf443b2d1b3ebd2311e9aee4e52d30072888477c06847db40d55c0f94e097e2004440fb70e4caea9b9b4e2f86964f681751747474977d3bff096186dfea8e1783bffc26e480e5ccd0b4d8f0dd27c5f6665c2970c21665190a0aa23159cce27a444be114b7dd5df
    SignatureAlgorithmOID1.2.840.113549.1.1.11
    IsCertificateAuthorityFalse
    SerialNumber0f1b5575dca88493964e207f27711085
    Version3

    Imports

    Expand
    • FLTMGR.SYS
    • ntoskrnl.exe
    • HAL.dll
    • WDFLDR.SYS

    Imported Functions

    Expand
    • FltRegisterFilter
    • FltUnregisterFilter
    • FltStartFiltering
    • FltCreateCommunicationPort
    • FltCloseCommunicationPort
    • FltCloseClientPort
    • FltSendMessage
    • FltBuildDefaultSecurityDescriptor
    • FltFreeSecurityDescriptor
    • IoCreateDevice
    • IoDeleteDevice
    • IoDeleteSymbolicLink
    • PoRegisterPowerSettingCallback
    • PoUnregisterPowerSettingCallback
    • PsSetCreateProcessNotifyRoutineEx
    • ZwPowerInformation
    • __C_specific_handler
    • RtlInitUnicodeString
    • IofCompleteRequest
    • MmUnmapIoSpace
    • MmMapIoSpace
    • RtlCopyUnicodeString
    • DbgPrintEx
    • ProbeForWrite
    • ProbeForRead
    • ExFreePoolWithTag
    • ExAllocatePool2
    • IoCreateSymbolicLink
    • HalGetBusDataByOffset
    • HalSetBusDataByOffset
    • WdfVersionBind
    • WdfLdrQueryInterface
    • WdfVersionUnbind
    • WdfVersionBindClass
    • WdfVersionUnbindClass

    Exported Functions

    Expand

    Sections

    Expand
    • .text
    • .rdata
    • .data
    • .pdata
    • INIT
    • .rsrc
    • .reloc

    Signature

    Expand
    {
  "Certificates": [
    {
      "CertificateType": "CA",
      "IsCA": true,
      "IsCertificateAuthority": true,
      "IsCodeSigning": false,
      "SerialNumber": "059b1b579e8e2132e23907bda777755c",
      "Signature": "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",
      "SignatureAlgorithmOID": "1.2.840.113549.1.1.12",
      "Subject": "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Trusted Root G4",
      "TBS": {
        "MD5": "41b622dd54995550fdc2f31ea12f8d9b",
        "SHA1": "420704040c93dfe9d3ad01a26c07f2be1f4888c1",
        "SHA256": "4816e2e9e37ba61e1def6f7a4c623e981c7af355e51349b5554a3d56c5252e24",
        "SHA384": "4ea1b34b10b982a96a38915843507820ad632c6aad8343e337b34d660cd8366fa154544ae80668ae1fdf3931d57e1996"
      },
      "ValidFrom": "2013-08-01 12:00:00",
      "ValidTo": "2038-01-15 12:00:00",
      "Version": 3
    },
    {
      "CertificateType": "CA",
      "IsCA": true,
      "IsCertificateAuthority": true,
      "IsCodeSigning": true,
      "SerialNumber": "08ad40b260d29c4c9f5ecda9bd93aed9",
      "Signature": "3a23443d8d0876ee8fbc3a99d356e0021aa5f84834f32cb6e67466f79472b100caaf6c302713129e90449f4bfd9ea37c26d537bc3a5d486d95d53f49f427bb16814550fd9cbdb685e0767e3771cb22f75aaa90cff5936ae3eb20d1d55079889a8a8ac1b6bda148187edcd8801a111918cd61998156f6c9e376e7c4e41b5f43f83e94ff76393d9ed499cf4add28eb5f26a1955848d51afed7273ffd90d17686dd1cb0605cf30da8eee089a1bd39e1384eda6ebb369dfbe521535ac3cae96af1a23edb43b833c84f38149299f5ddce546dd95d02141f40337c03e295b2c221757352cb46d8c4341ca2a54b8dcd6f76372c853f1ace26e918be9007b0437f9588208270f0cccaeffd29355c1f893855f7378a8b09a1cb0be9311aff2e195c3971e1be9ca70a06d62667b792e64e5fde7aac49cf2ea47492addb3ca49c861fe3c1561b2b23ff8fb5ea887b706be6a0bafd3a3f45a6c4e81691528b41c048844b964dab4440e38df01528ceedf11856072a2f10c40c08643c338fae288c3ccb8f880b0dbf3bf4ce1e7b8eefb5ebcbb7f07713e6e7283fac12aea52f226c41f9825c1566cc6c0ecac586c3f626330c074ba0d307026a6a4030484b34a85120bbad1b8508e2590d6dca05502bea4a1c9ea5fda0a71f0674e7f2d65290fdaf854821f9573bb49c03ed8645f4b4616ebf68e2266086eac8afa9fe941de7631b3a8656784e",
      "SignatureAlgorithmOID": "1.2.840.113549.1.1.12",
      "Subject": "C=US, O=DigiCert, Inc., CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1",
      "TBS": {
        "MD5": "5d8003a64dfa5a4d88365da1566038cb",
        "SHA1": "79465b56bc7ad55a37bdf633943da8bfc84db228",
        "SHA256": "84bdc82e2f2a7f7aaa782667dac556ffcb2b33240c1f9c0a00a3264526a98332",
        "SHA384": "65b1d4076a89ae273f57e6eeedecb3eae129b4168f76fa7671914cdf461d542255c59d9b85b916ae0ca6fc0fcf7a8e64"
      },
      "ValidFrom": "2021-04-29 00:00:00",
      "ValidTo": "2036-04-28 23:59:59",
      "Version": 3
    },
    {
      "CertificateType": "Leaf (Code Signing)",
      "IsCA": false,
      "IsCertificateAuthority": false,
      "IsCodeSigning": true,
      "SerialNumber": "0b60337461b8bb50cbf83e6bea99ea0e",
      "Signature": "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",
      "SignatureAlgorithmOID": "1.2.840.113549.1.1.11",
      "Subject": "C=US, ST=North Carolina, L=Morrisville, O=Lenovo, OU=G29, CN=Lenovo",
      "TBS": {
        "MD5": "7ef16cb5545e847cef80aee6db6fb728",
        "SHA1": "8e8fdcaa9d5943a7cc298815f9144d5aec014de0",
        "SHA256": "7d84324a4b209440d8fa048ba61a70ca2e5d4f82881a458c45d50b80e2a40abd",
        "SHA384": "5c582862ce3cd29630ba8f35068f63f7fc54e1b626e19dd4951413f23d3433381d8266287a91255978359138c22c207d"
      },
      "ValidFrom": "2024-10-30 00:00:00",
      "ValidTo": "2025-10-29 23:59:59",
      "Version": 3
    }
  ],
  "CertificatesInfo": "",
  "Signer": [
    {
      "Issuer": "C=US, O=DigiCert, Inc., CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1",
      "SerialNumber": "0b60337461b8bb50cbf83e6bea99ea0e",
      "Version": 1
    }
  ],
  "SignerInfo": ""
}
    PropertyValue
    FilenameLnvMSRIO.sys
    Creation Timestamp2023-10-29 20:24:30
    MD548c61e32e034b15c5bbae481d7559272
    SHA10284be084b250a01fc01fdc8d3158ea055ee3bdf
    SHA256358b54bdda20c7459d29857fb815548c00751ef486eed90e3f2e835b0bb42cc4
    Authentihash MD51fc72d1b5cf27bfd8028efec7309199c
    Authentihash SHA1f353f74dcb91f6ca58f09df76977b6f2781b1d8b
    Authentihash SHA25651a3ab7dd44be6daba53b64c3688b5c1c94c9e2ce1065184fe16cac0d97a0fdc
    RichPEHeaderHash MD5b6720e9a5db0b2dbe7ffe7ffe1c70690
    RichPEHeaderHash SHA1a569dbd46682699b8517b83db3e12b1bc2f35bb4
    RichPEHeaderHash SHA256be868093b2ce55a626834a1e15355c2c0df84f01e24993a4c8456afbd2306d1e
    CompanyLenovo
    DescriptionLenovo filter driver
    ProductLenovo filter driver
    OriginalFilenameLnvMSRIO.sys

    Download

    Certificates

    Expand
    Certificate 08ad40b260d29c4c9f5ecda9bd93aed9
    FieldValue
    ToBeSigned (TBS) MD55d8003a64dfa5a4d88365da1566038cb
    ToBeSigned (TBS) SHA179465b56bc7ad55a37bdf633943da8bfc84db228
    ToBeSigned (TBS) SHA25684bdc82e2f2a7f7aaa782667dac556ffcb2b33240c1f9c0a00a3264526a98332
    SubjectC=US, O=DigiCert, Inc., CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1
    ValidFrom2021-04-29 00:00:00
    ValidTo2036-04-28 23:59:59
    Signature3a23443d8d0876ee8fbc3a99d356e0021aa5f84834f32cb6e67466f79472b100caaf6c302713129e90449f4bfd9ea37c26d537bc3a5d486d95d53f49f427bb16814550fd9cbdb685e0767e3771cb22f75aaa90cff5936ae3eb20d1d55079889a8a8ac1b6bda148187edcd8801a111918cd61998156f6c9e376e7c4e41b5f43f83e94ff76393d9ed499cf4add28eb5f26a1955848d51afed7273ffd90d17686dd1cb0605cf30da8eee089a1bd39e1384eda6ebb369dfbe521535ac3cae96af1a23edb43b833c84f38149299f5ddce546dd95d02141f40337c03e295b2c221757352cb46d8c4341ca2a54b8dcd6f76372c853f1ace26e918be9007b0437f9588208270f0cccaeffd29355c1f893855f7378a8b09a1cb0be9311aff2e195c3971e1be9ca70a06d62667b792e64e5fde7aac49cf2ea47492addb3ca49c861fe3c1561b2b23ff8fb5ea887b706be6a0bafd3a3f45a6c4e81691528b41c048844b964dab4440e38df01528ceedf11856072a2f10c40c08643c338fae288c3ccb8f880b0dbf3bf4ce1e7b8eefb5ebcbb7f07713e6e7283fac12aea52f226c41f9825c1566cc6c0ecac586c3f626330c074ba0d307026a6a4030484b34a85120bbad1b8508e2590d6dca05502bea4a1c9ea5fda0a71f0674e7f2d65290fdaf854821f9573bb49c03ed8645f4b4616ebf68e2266086eac8afa9fe941de7631b3a8656784e
    SignatureAlgorithmOID1.2.840.113549.1.1.12
    IsCertificateAuthorityTrue
    SerialNumber08ad40b260d29c4c9f5ecda9bd93aed9
    Version3
    Certificate 0b8688de54be04aee8fe8378c15f9690
    FieldValue
    ToBeSigned (TBS) MD5a91917240e17db90af5cf7d69920d835
    ToBeSigned (TBS) SHA101844787225f9ea2905b1c4696fe73528ab14e3f
    ToBeSigned (TBS) SHA25672d1c774c061fc8867102cf628b55e6eb9985218679c99ea4da8616cabd8559b
    SubjectC=US, ST=North Carolina, L=Morrisville, O=Lenovo, OU=G11, CN=Lenovo
    ValidFrom2022-12-06 00:00:00
    ValidTo2023-12-16 23:59:59
    Signature5bf6a0075d923adb843acdb924e5ef05545808e29402291892f7b30d0376495e955fb4c3e64cbd05bbccf0bc7c32f378cd0c7987f7417ff4c18309c128e831909369240d349bb62192da9e2cffaf35cdeaf5af83a2031ce7a810db0d94af915a6ff9fd04b52af6efd9894820c0eda967998c37bf301faa7781775de988ac463b3df18fcc5326223002896a27ad864ca75c2359510b276c8a44faf89d07b6bc933a3ed9c7420579b700d9d1b562cff7480a80a9d32f4b55d12f0b9d8ba0e1bd79b1170ef309ce149ebca7bc837256d4191bc57510e1ceef92ab76d80649a98b47082f36b997eefc07195ec3c619a2da28b23b5a5120db22bba31719160e72ccb3113df88de7810a1a5d29a1e0edf312eed61c197232e1ba2cefb1a2614ed2f7d04526615e2c0d644e175500d6e9c7fef412633f9e7ffb3ae3557f2fe98d5ebe92729fecf6a558dd6097012742c0e411a698efd158b886e2ccf1264ac21015e355e6aae0142badbca78a3ff3177a3376361479cbd39118198cbe468d2af7f0f87464ad412215cb29fcc3acaf4d42752f535ac08eb223856b1b70aa1533a3396c69351e0b32f4df69dc849a4e0d244ac812ca33a6c8f40ab25c9ef9dab711d982470df9435858effaa2f393b4c490cf9493449a25b6702b1d03432e33ef5ab017fe3bdf21f0fe2d392ecdb00c012ab4412b18886d542eaf3ea8b677fca03d5704ea
    SignatureAlgorithmOID1.2.840.113549.1.1.11
    IsCertificateAuthorityFalse
    SerialNumber0b8688de54be04aee8fe8378c15f9690
    Version3

    Imports

    Expand
    • FLTMGR.SYS
    • ntoskrnl.exe
    • HAL.dll
    • WDFLDR.SYS

    Imported Functions

    Expand
    • FltRegisterFilter
    • FltUnregisterFilter
    • FltStartFiltering
    • FltCreateCommunicationPort
    • FltCloseCommunicationPort
    • FltCloseClientPort
    • FltSendMessage
    • FltBuildDefaultSecurityDescriptor
    • FltFreeSecurityDescriptor
    • IoCreateDevice
    • IoDeleteDevice
    • IoDeleteSymbolicLink
    • PoRegisterPowerSettingCallback
    • PoUnregisterPowerSettingCallback
    • PsSetCreateProcessNotifyRoutineEx
    • ZwPowerInformation
    • __C_specific_handler
    • RtlInitUnicodeString
    • IofCompleteRequest
    • MmUnmapIoSpace
    • MmMapIoSpace
    • RtlCopyUnicodeString
    • DbgPrintEx
    • ProbeForWrite
    • ProbeForRead
    • ExFreePoolWithTag
    • ExAllocatePool2
    • IoCreateSymbolicLink
    • HalGetBusDataByOffset
    • HalSetBusDataByOffset
    • WdfVersionBind
    • WdfLdrQueryInterface
    • WdfVersionUnbind
    • WdfVersionBindClass
    • WdfVersionUnbindClass

    Exported Functions

    Expand

    Sections

    Expand
    • .text
    • .rdata
    • .data
    • .pdata
    • INIT
    • .rsrc
    • .reloc

    Signature

    Expand
    {
  "Certificates": [
    {
      "CertificateType": "CA",
      "IsCA": true,
      "IsCertificateAuthority": true,
      "IsCodeSigning": false,
      "SerialNumber": "059b1b579e8e2132e23907bda777755c",
      "Signature": "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",
      "SignatureAlgorithmOID": "1.2.840.113549.1.1.12",
      "Subject": "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Trusted Root G4",
      "TBS": {
        "MD5": "41b622dd54995550fdc2f31ea12f8d9b",
        "SHA1": "420704040c93dfe9d3ad01a26c07f2be1f4888c1",
        "SHA256": "4816e2e9e37ba61e1def6f7a4c623e981c7af355e51349b5554a3d56c5252e24",
        "SHA384": "4ea1b34b10b982a96a38915843507820ad632c6aad8343e337b34d660cd8366fa154544ae80668ae1fdf3931d57e1996"
      },
      "ValidFrom": "2013-08-01 12:00:00",
      "ValidTo": "2038-01-15 12:00:00",
      "Version": 3
    },
    {
      "CertificateType": "CA",
      "IsCA": true,
      "IsCertificateAuthority": true,
      "IsCodeSigning": true,
      "SerialNumber": "08ad40b260d29c4c9f5ecda9bd93aed9",
      "Signature": "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",
      "SignatureAlgorithmOID": "1.2.840.113549.1.1.12",
      "Subject": "C=US, O=DigiCert, Inc., CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1",
      "TBS": {
        "MD5": "5d8003a64dfa5a4d88365da1566038cb",
        "SHA1": "79465b56bc7ad55a37bdf633943da8bfc84db228",
        "SHA256": "84bdc82e2f2a7f7aaa782667dac556ffcb2b33240c1f9c0a00a3264526a98332",
        "SHA384": "65b1d4076a89ae273f57e6eeedecb3eae129b4168f76fa7671914cdf461d542255c59d9b85b916ae0ca6fc0fcf7a8e64"
      },
      "ValidFrom": "2021-04-29 00:00:00",
      "ValidTo": "2036-04-28 23:59:59",
      "Version": 3
    },
    {
      "CertificateType": "Leaf (Code Signing)",
      "IsCA": false,
      "IsCertificateAuthority": false,
      "IsCodeSigning": true,
      "SerialNumber": "0b60337461b8bb50cbf83e6bea99ea0e",
      "Signature": "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",
      "SignatureAlgorithmOID": "1.2.840.113549.1.1.11",
      "Subject": "C=US, ST=North Carolina, L=Morrisville, O=Lenovo, OU=G29, CN=Lenovo",
      "TBS": {
        "MD5": "7ef16cb5545e847cef80aee6db6fb728",
        "SHA1": "8e8fdcaa9d5943a7cc298815f9144d5aec014de0",
        "SHA256": "7d84324a4b209440d8fa048ba61a70ca2e5d4f82881a458c45d50b80e2a40abd",
        "SHA384": "5c582862ce3cd29630ba8f35068f63f7fc54e1b626e19dd4951413f23d3433381d8266287a91255978359138c22c207d"
      },
      "ValidFrom": "2024-10-30 00:00:00",
      "ValidTo": "2025-10-29 23:59:59",
      "Version": 3
    }
  ],
  "CertificatesInfo": "",
  "Signer": [
    {
      "Issuer": "C=US, O=DigiCert, Inc., CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1",
      "SerialNumber": "0b60337461b8bb50cbf83e6bea99ea0e",
      "Version": 1
    }
  ],
  "SignerInfo": ""
}
    PropertyValue
    FilenameLnvMSRIO.sys
    Creation Timestamp2024-05-19 23:10:19
    MD5936835d0e5e7c0273c06bf2cdcaaa0e9
    SHA1269cc0f1c5222d5147af0dd77102699cbcb5699d
    SHA2569eee4b43ee454fae44e661265de3025561a59060e8969aaeecce79784794ca4d
    Authentihash MD561435a86b2a1051ceebdbc0ae367fc68
    Authentihash SHA19fd899318967abfd5fc29cb67b7c0fa7d30ab8bc
    Authentihash SHA2562da75d8894499204c6cbec258fb1a37668bd80d9007253c2c2fa8599a11d9631
    RichPEHeaderHash MD57ecaee1ce6d3fba220bef21fa8e7b894
    RichPEHeaderHash SHA1ed56e4faab57a9fc79e892500dbc7259241deef3
    RichPEHeaderHash SHA2567a755e2684301aad387876047c940375c8a2f9b4eadf2c9d63da36a8fcaec8de
    CompanyLenovo
    DescriptionLenovo filter driver
    ProductLenovo filter driver
    OriginalFilenameLnvMSRIO.sys

    Download

    Certificates

    Expand
    Certificate 08ad40b260d29c4c9f5ecda9bd93aed9
    FieldValue
    ToBeSigned (TBS) MD55d8003a64dfa5a4d88365da1566038cb
    ToBeSigned (TBS) SHA179465b56bc7ad55a37bdf633943da8bfc84db228
    ToBeSigned (TBS) SHA25684bdc82e2f2a7f7aaa782667dac556ffcb2b33240c1f9c0a00a3264526a98332
    SubjectC=US, O=DigiCert, Inc., CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1
    ValidFrom2021-04-29 00:00:00
    ValidTo2036-04-28 23:59:59
    Signature3a23443d8d0876ee8fbc3a99d356e0021aa5f84834f32cb6e67466f79472b100caaf6c302713129e90449f4bfd9ea37c26d537bc3a5d486d95d53f49f427bb16814550fd9cbdb685e0767e3771cb22f75aaa90cff5936ae3eb20d1d55079889a8a8ac1b6bda148187edcd8801a111918cd61998156f6c9e376e7c4e41b5f43f83e94ff76393d9ed499cf4add28eb5f26a1955848d51afed7273ffd90d17686dd1cb0605cf30da8eee089a1bd39e1384eda6ebb369dfbe521535ac3cae96af1a23edb43b833c84f38149299f5ddce546dd95d02141f40337c03e295b2c221757352cb46d8c4341ca2a54b8dcd6f76372c853f1ace26e918be9007b0437f9588208270f0cccaeffd29355c1f893855f7378a8b09a1cb0be9311aff2e195c3971e1be9ca70a06d62667b792e64e5fde7aac49cf2ea47492addb3ca49c861fe3c1561b2b23ff8fb5ea887b706be6a0bafd3a3f45a6c4e81691528b41c048844b964dab4440e38df01528ceedf11856072a2f10c40c08643c338fae288c3ccb8f880b0dbf3bf4ce1e7b8eefb5ebcbb7f07713e6e7283fac12aea52f226c41f9825c1566cc6c0ecac586c3f626330c074ba0d307026a6a4030484b34a85120bbad1b8508e2590d6dca05502bea4a1c9ea5fda0a71f0674e7f2d65290fdaf854821f9573bb49c03ed8645f4b4616ebf68e2266086eac8afa9fe941de7631b3a8656784e
    SignatureAlgorithmOID1.2.840.113549.1.1.12
    IsCertificateAuthorityTrue
    SerialNumber08ad40b260d29c4c9f5ecda9bd93aed9
    Version3
    Certificate 0f1b5575dca88493964e207f27711085
    FieldValue
    ToBeSigned (TBS) MD5e1e032346eb86692663f47e6ed01e573
    ToBeSigned (TBS) SHA1594e3b5564bcc009a61e04375b51a8bbaa2b4f6d
    ToBeSigned (TBS) SHA256a2c2e2432bdc2704f458aa3cf433f4dcd3919c3fb2bf23094a16b6407b1ecbae
    SubjectC=US, ST=North Carolina, L=Morrisville, O=Lenovo, OU=G11, CN=Lenovo
    ValidFrom2023-05-25 00:00:00
    ValidTo2024-05-24 23:59:59
    Signature78fd94096ee1363d53c2df0350cf61b1239b0773407f61ca82098087e5f9cc2ece38a7b9d8e4a68ed334a4da8abb7951add48a4ec781870eaec07510eb3b9590579060d00eff70e06747173412cdca57db7e17e3bb2635a7c17cf14dbc4dfc77fffde1a179b973c305db95e4c0f223b55cc415ea760ccbdcd1fbff3cfdee5a615be485133ceb85e25e6de7bb436d47e44c1c10456f0a5c3d8aa606d52f4996dba43310a21cb2544e3413283a56c5cbd4016ddf152619256758ca0a3aba46da5a9de078b2f4a3658ea000738483ccddf67ea74769b0ae041f34d9ca71a57e9f1acae7934b7318db367a0351e24624ebfd63e9f60197abef5814ff53f764e62434c62a47ca1b9748eb08d42f74d13679265a18a91f375de9dba0cdfab1db130ad2bef53ea52c5ad5a996f1145c3040dca7f2687559491bf17b5ffca59d28ecb228ffbd72916781a9d65738d9aca2b87a5b10f36736d2f6a18705529cb81eefa4550b875e135ace1d42c377c7b9fc76da29dd849034c8566c5859c831511639847f4132ec5b43c013cd0f3b7438c3bdd3f8ea75da750c73a5d90daf443b2d1b3ebd2311e9aee4e52d30072888477c06847db40d55c0f94e097e2004440fb70e4caea9b9b4e2f86964f681751747474977d3bff096186dfea8e1783bffc26e480e5ccd0b4d8f0dd27c5f6665c2970c21665190a0aa23159cce27a444be114b7dd5df
    SignatureAlgorithmOID1.2.840.113549.1.1.11
    IsCertificateAuthorityFalse
    SerialNumber0f1b5575dca88493964e207f27711085
    Version3

    Imports

    Expand
    • FLTMGR.SYS
    • ntoskrnl.exe
    • HAL.dll
    • WDFLDR.SYS

    Imported Functions

    Expand
    • FltRegisterFilter
    • FltUnregisterFilter
    • FltStartFiltering
    • FltCreateCommunicationPort
    • FltCloseCommunicationPort
    • FltCloseClientPort
    • FltSendMessage
    • FltBuildDefaultSecurityDescriptor
    • FltFreeSecurityDescriptor
    • IoCreateDevice
    • IoDeleteDevice
    • IoDeleteSymbolicLink
    • PoRegisterPowerSettingCallback
    • PoUnregisterPowerSettingCallback
    • PsSetCreateProcessNotifyRoutineEx
    • ZwPowerInformation
    • __C_specific_handler
    • RtlInitUnicodeString
    • IofCompleteRequest
    • MmUnmapIoSpace
    • MmMapIoSpace
    • RtlCopyUnicodeString
    • DbgPrintEx
    • ProbeForWrite
    • ProbeForRead
    • ExFreePoolWithTag
    • ExAllocatePool2
    • IoCreateSymbolicLink
    • HalGetBusDataByOffset
    • HalSetBusDataByOffset
    • WdfVersionBind
    • WdfLdrQueryInterface
    • WdfVersionUnbind
    • WdfVersionBindClass
    • WdfVersionUnbindClass

    Exported Functions

    Expand

    Sections

    Expand
    • .text
    • .rdata
    • .data
    • .pdata
    • INIT
    • .rsrc
    • .reloc

    Signature

    Expand
    {
  "Certificates": [
    {
      "CertificateType": "CA",
      "IsCA": true,
      "IsCertificateAuthority": true,
      "IsCodeSigning": false,
      "SerialNumber": "059b1b579e8e2132e23907bda777755c",
      "Signature": "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",
      "SignatureAlgorithmOID": "1.2.840.113549.1.1.12",
      "Subject": "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Trusted Root G4",
      "TBS": {
        "MD5": "41b622dd54995550fdc2f31ea12f8d9b",
        "SHA1": "420704040c93dfe9d3ad01a26c07f2be1f4888c1",
        "SHA256": "4816e2e9e37ba61e1def6f7a4c623e981c7af355e51349b5554a3d56c5252e24",
        "SHA384": "4ea1b34b10b982a96a38915843507820ad632c6aad8343e337b34d660cd8366fa154544ae80668ae1fdf3931d57e1996"
      },
      "ValidFrom": "2013-08-01 12:00:00",
      "ValidTo": "2038-01-15 12:00:00",
      "Version": 3
    },
    {
      "CertificateType": "CA",
      "IsCA": true,
      "IsCertificateAuthority": true,
      "IsCodeSigning": true,
      "SerialNumber": "08ad40b260d29c4c9f5ecda9bd93aed9",
      "Signature": "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",
      "SignatureAlgorithmOID": "1.2.840.113549.1.1.12",
      "Subject": "C=US, O=DigiCert, Inc., CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1",
      "TBS": {
        "MD5": "5d8003a64dfa5a4d88365da1566038cb",
        "SHA1": "79465b56bc7ad55a37bdf633943da8bfc84db228",
        "SHA256": "84bdc82e2f2a7f7aaa782667dac556ffcb2b33240c1f9c0a00a3264526a98332",
        "SHA384": "65b1d4076a89ae273f57e6eeedecb3eae129b4168f76fa7671914cdf461d542255c59d9b85b916ae0ca6fc0fcf7a8e64"
      },
      "ValidFrom": "2021-04-29 00:00:00",
      "ValidTo": "2036-04-28 23:59:59",
      "Version": 3
    },
    {
      "CertificateType": "Leaf (Code Signing)",
      "IsCA": false,
      "IsCertificateAuthority": false,
      "IsCodeSigning": true,
      "SerialNumber": "0b60337461b8bb50cbf83e6bea99ea0e",
      "Signature": "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",
      "SignatureAlgorithmOID": "1.2.840.113549.1.1.11",
      "Subject": "C=US, ST=North Carolina, L=Morrisville, O=Lenovo, OU=G29, CN=Lenovo",
      "TBS": {
        "MD5": "7ef16cb5545e847cef80aee6db6fb728",
        "SHA1": "8e8fdcaa9d5943a7cc298815f9144d5aec014de0",
        "SHA256": "7d84324a4b209440d8fa048ba61a70ca2e5d4f82881a458c45d50b80e2a40abd",
        "SHA384": "5c582862ce3cd29630ba8f35068f63f7fc54e1b626e19dd4951413f23d3433381d8266287a91255978359138c22c207d"
      },
      "ValidFrom": "2024-10-30 00:00:00",
      "ValidTo": "2025-10-29 23:59:59",
      "Version": 3
    }
  ],
  "CertificatesInfo": "",
  "Signer": [
    {
      "Issuer": "C=US, O=DigiCert, Inc., CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1",
      "SerialNumber": "0b60337461b8bb50cbf83e6bea99ea0e",
      "Version": 1
    }
  ],
  "SignerInfo": ""
}
    PropertyValue
    FilenameLnvMSRIO.sys
    Creation Timestamp2023-11-21 23:05:07
    MD51a2093b0ca0537ecba6d2c83f2d0e6b7
    SHA10f2b82c1ce7c82a542d8d781d596bfaaac9b219a
    SHA256b529b658315577e49b9432ec046263a7feca2d3440aea295937350bc974098c4
    Authentihash MD50eabdf928219d2fc5f0fc2a666b12a78
    Authentihash SHA15762d45f34906d1a357d9cbcc9011229721bf660
    Authentihash SHA256ece308c404c03159df71524bcdf1cc2c8746aa41a773e3584d8fa9ff21d8b763
    RichPEHeaderHash MD5956bfec9342c19ff2cf9f1cb20787bd8
    RichPEHeaderHash SHA12714b369011de84e8a1895a14f99d5f277c617fe
    RichPEHeaderHash SHA256f163346df5389eeeaf1c7c13e1077f4e82217d552b1ad2662f7caca8a877c021
    CompanyLenovo
    DescriptionLenovo filter driver
    ProductLenovo filter driver
    OriginalFilenameLnvMSRIO.sys

    Download

    Certificates

    Expand
    Certificate 08ad40b260d29c4c9f5ecda9bd93aed9
    FieldValue
    ToBeSigned (TBS) MD55d8003a64dfa5a4d88365da1566038cb
    ToBeSigned (TBS) SHA179465b56bc7ad55a37bdf633943da8bfc84db228
    ToBeSigned (TBS) SHA25684bdc82e2f2a7f7aaa782667dac556ffcb2b33240c1f9c0a00a3264526a98332
    SubjectC=US, O=DigiCert, Inc., CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1
    ValidFrom2021-04-29 00:00:00
    ValidTo2036-04-28 23:59:59
    Signature3a23443d8d0876ee8fbc3a99d356e0021aa5f84834f32cb6e67466f79472b100caaf6c302713129e90449f4bfd9ea37c26d537bc3a5d486d95d53f49f427bb16814550fd9cbdb685e0767e3771cb22f75aaa90cff5936ae3eb20d1d55079889a8a8ac1b6bda148187edcd8801a111918cd61998156f6c9e376e7c4e41b5f43f83e94ff76393d9ed499cf4add28eb5f26a1955848d51afed7273ffd90d17686dd1cb0605cf30da8eee089a1bd39e1384eda6ebb369dfbe521535ac3cae96af1a23edb43b833c84f38149299f5ddce546dd95d02141f40337c03e295b2c221757352cb46d8c4341ca2a54b8dcd6f76372c853f1ace26e918be9007b0437f9588208270f0cccaeffd29355c1f893855f7378a8b09a1cb0be9311aff2e195c3971e1be9ca70a06d62667b792e64e5fde7aac49cf2ea47492addb3ca49c861fe3c1561b2b23ff8fb5ea887b706be6a0bafd3a3f45a6c4e81691528b41c048844b964dab4440e38df01528ceedf11856072a2f10c40c08643c338fae288c3ccb8f880b0dbf3bf4ce1e7b8eefb5ebcbb7f07713e6e7283fac12aea52f226c41f9825c1566cc6c0ecac586c3f626330c074ba0d307026a6a4030484b34a85120bbad1b8508e2590d6dca05502bea4a1c9ea5fda0a71f0674e7f2d65290fdaf854821f9573bb49c03ed8645f4b4616ebf68e2266086eac8afa9fe941de7631b3a8656784e
    SignatureAlgorithmOID1.2.840.113549.1.1.12
    IsCertificateAuthorityTrue
    SerialNumber08ad40b260d29c4c9f5ecda9bd93aed9
    Version3
    Certificate 0b8688de54be04aee8fe8378c15f9690
    FieldValue
    ToBeSigned (TBS) MD5a91917240e17db90af5cf7d69920d835
    ToBeSigned (TBS) SHA101844787225f9ea2905b1c4696fe73528ab14e3f
    ToBeSigned (TBS) SHA25672d1c774c061fc8867102cf628b55e6eb9985218679c99ea4da8616cabd8559b
    SubjectC=US, ST=North Carolina, L=Morrisville, O=Lenovo, OU=G11, CN=Lenovo
    ValidFrom2022-12-06 00:00:00
    ValidTo2023-12-16 23:59:59
    Signature5bf6a0075d923adb843acdb924e5ef05545808e29402291892f7b30d0376495e955fb4c3e64cbd05bbccf0bc7c32f378cd0c7987f7417ff4c18309c128e831909369240d349bb62192da9e2cffaf35cdeaf5af83a2031ce7a810db0d94af915a6ff9fd04b52af6efd9894820c0eda967998c37bf301faa7781775de988ac463b3df18fcc5326223002896a27ad864ca75c2359510b276c8a44faf89d07b6bc933a3ed9c7420579b700d9d1b562cff7480a80a9d32f4b55d12f0b9d8ba0e1bd79b1170ef309ce149ebca7bc837256d4191bc57510e1ceef92ab76d80649a98b47082f36b997eefc07195ec3c619a2da28b23b5a5120db22bba31719160e72ccb3113df88de7810a1a5d29a1e0edf312eed61c197232e1ba2cefb1a2614ed2f7d04526615e2c0d644e175500d6e9c7fef412633f9e7ffb3ae3557f2fe98d5ebe92729fecf6a558dd6097012742c0e411a698efd158b886e2ccf1264ac21015e355e6aae0142badbca78a3ff3177a3376361479cbd39118198cbe468d2af7f0f87464ad412215cb29fcc3acaf4d42752f535ac08eb223856b1b70aa1533a3396c69351e0b32f4df69dc849a4e0d244ac812ca33a6c8f40ab25c9ef9dab711d982470df9435858effaa2f393b4c490cf9493449a25b6702b1d03432e33ef5ab017fe3bdf21f0fe2d392ecdb00c012ab4412b18886d542eaf3ea8b677fca03d5704ea
    SignatureAlgorithmOID1.2.840.113549.1.1.11
    IsCertificateAuthorityFalse
    SerialNumber0b8688de54be04aee8fe8378c15f9690
    Version3

    Imports

    Expand
    • FLTMGR.SYS
    • ntoskrnl.exe
    • HAL.dll
    • WDFLDR.SYS

    Imported Functions

    Expand
    • FltRegisterFilter
    • FltUnregisterFilter
    • FltStartFiltering
    • FltCreateCommunicationPort
    • FltCloseCommunicationPort
    • FltCloseClientPort
    • FltSendMessage
    • FltBuildDefaultSecurityDescriptor
    • FltFreeSecurityDescriptor
    • IoCreateDevice
    • IoDeleteDevice
    • IoDeleteSymbolicLink
    • PoRegisterPowerSettingCallback
    • PoUnregisterPowerSettingCallback
    • PsSetCreateProcessNotifyRoutineEx
    • ZwPowerInformation
    • __C_specific_handler
    • RtlInitUnicodeString
    • IofCompleteRequest
    • MmUnmapIoSpace
    • MmMapIoSpace
    • RtlCopyUnicodeString
    • DbgPrintEx
    • ProbeForWrite
    • ProbeForRead
    • ExFreePoolWithTag
    • ExAllocatePool2
    • IoCreateSymbolicLink
    • HalGetBusDataByOffset
    • HalSetBusDataByOffset
    • WdfVersionBind
    • WdfLdrQueryInterface
    • WdfVersionUnbind
    • WdfVersionBindClass
    • WdfVersionUnbindClass

    Exported Functions

    Expand

    Sections

    Expand
    • .text
    • .rdata
    • .data
    • .pdata
    • INIT
    • .rsrc
    • .reloc

    Signature

    Expand
    {
  "Certificates": [
    {
      "CertificateType": "CA",
      "IsCA": true,
      "IsCertificateAuthority": true,
      "IsCodeSigning": false,
      "SerialNumber": "059b1b579e8e2132e23907bda777755c",
      "Signature": "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",
      "SignatureAlgorithmOID": "1.2.840.113549.1.1.12",
      "Subject": "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Trusted Root G4",
      "TBS": {
        "MD5": "41b622dd54995550fdc2f31ea12f8d9b",
        "SHA1": "420704040c93dfe9d3ad01a26c07f2be1f4888c1",
        "SHA256": "4816e2e9e37ba61e1def6f7a4c623e981c7af355e51349b5554a3d56c5252e24",
        "SHA384": "4ea1b34b10b982a96a38915843507820ad632c6aad8343e337b34d660cd8366fa154544ae80668ae1fdf3931d57e1996"
      },
      "ValidFrom": "2013-08-01 12:00:00",
      "ValidTo": "2038-01-15 12:00:00",
      "Version": 3
    },
    {
      "CertificateType": "CA",
      "IsCA": true,
      "IsCertificateAuthority": true,
      "IsCodeSigning": true,
      "SerialNumber": "08ad40b260d29c4c9f5ecda9bd93aed9",
      "Signature": "3a23443d8d0876ee8fbc3a99d356e0021aa5f84834f32cb6e67466f79472b100caaf6c302713129e90449f4bfd9ea37c26d537bc3a5d486d95d53f49f427bb16814550fd9cbdb685e0767e3771cb22f75aaa90cff5936ae3eb20d1d55079889a8a8ac1b6bda148187edcd8801a111918cd61998156f6c9e376e7c4e41b5f43f83e94ff76393d9ed499cf4add28eb5f26a1955848d51afed7273ffd90d17686dd1cb0605cf30da8eee089a1bd39e1384eda6ebb369dfbe521535ac3cae96af1a23edb43b833c84f38149299f5ddce546dd95d02141f40337c03e295b2c221757352cb46d8c4341ca2a54b8dcd6f76372c853f1ace26e918be9007b0437f9588208270f0cccaeffd29355c1f893855f7378a8b09a1cb0be9311aff2e195c3971e1be9ca70a06d62667b792e64e5fde7aac49cf2ea47492addb3ca49c861fe3c1561b2b23ff8fb5ea887b706be6a0bafd3a3f45a6c4e81691528b41c048844b964dab4440e38df01528ceedf11856072a2f10c40c08643c338fae288c3ccb8f880b0dbf3bf4ce1e7b8eefb5ebcbb7f07713e6e7283fac12aea52f226c41f9825c1566cc6c0ecac586c3f626330c074ba0d307026a6a4030484b34a85120bbad1b8508e2590d6dca05502bea4a1c9ea5fda0a71f0674e7f2d65290fdaf854821f9573bb49c03ed8645f4b4616ebf68e2266086eac8afa9fe941de7631b3a8656784e",
      "SignatureAlgorithmOID": "1.2.840.113549.1.1.12",
      "Subject": "C=US, O=DigiCert, Inc., CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1",
      "TBS": {
        "MD5": "5d8003a64dfa5a4d88365da1566038cb",
        "SHA1": "79465b56bc7ad55a37bdf633943da8bfc84db228",
        "SHA256": "84bdc82e2f2a7f7aaa782667dac556ffcb2b33240c1f9c0a00a3264526a98332",
        "SHA384": "65b1d4076a89ae273f57e6eeedecb3eae129b4168f76fa7671914cdf461d542255c59d9b85b916ae0ca6fc0fcf7a8e64"
      },
      "ValidFrom": "2021-04-29 00:00:00",
      "ValidTo": "2036-04-28 23:59:59",
      "Version": 3
    },
    {
      "CertificateType": "Leaf (Code Signing)",
      "IsCA": false,
      "IsCertificateAuthority": false,
      "IsCodeSigning": true,
      "SerialNumber": "0b60337461b8bb50cbf83e6bea99ea0e",
      "Signature": "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",
      "SignatureAlgorithmOID": "1.2.840.113549.1.1.11",
      "Subject": "C=US, ST=North Carolina, L=Morrisville, O=Lenovo, OU=G29, CN=Lenovo",
      "TBS": {
        "MD5": "7ef16cb5545e847cef80aee6db6fb728",
        "SHA1": "8e8fdcaa9d5943a7cc298815f9144d5aec014de0",
        "SHA256": "7d84324a4b209440d8fa048ba61a70ca2e5d4f82881a458c45d50b80e2a40abd",
        "SHA384": "5c582862ce3cd29630ba8f35068f63f7fc54e1b626e19dd4951413f23d3433381d8266287a91255978359138c22c207d"
      },
      "ValidFrom": "2024-10-30 00:00:00",
      "ValidTo": "2025-10-29 23:59:59",
      "Version": 3
    }
  ],
  "CertificatesInfo": "",
  "Signer": [
    {
      "Issuer": "C=US, O=DigiCert, Inc., CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1",
      "SerialNumber": "0b60337461b8bb50cbf83e6bea99ea0e",
      "Version": 1
    }
  ],
  "SignerInfo": ""
}
    PropertyValue
    FilenameLnvMSRIO.sys
    Creation Timestamp2024-01-10 23:11:31
    MD52bc59df4371b1d1bdcdaa2f4dc119f69
    SHA1339da25d115d67b65d2017139856277a86ed2f17
    SHA256e76638b04f49ce7b01ed2b6ef66b2ac0e6a02643f8513344b71dfcb4aea13c79
    Authentihash MD549e73215de1327d237b747fede4767c2
    Authentihash SHA1afe485ab4748d1146ad8a9292c7d9a8f40368e67
    Authentihash SHA256cf8a7fd4ab9e2dadd9c244f01ea10fbc21f6fccd8c03d10c334daad48efa957b
    RichPEHeaderHash MD5956bfec9342c19ff2cf9f1cb20787bd8
    RichPEHeaderHash SHA12714b369011de84e8a1895a14f99d5f277c617fe
    RichPEHeaderHash SHA256f163346df5389eeeaf1c7c13e1077f4e82217d552b1ad2662f7caca8a877c021
    CompanyLenovo
    DescriptionLenovo filter driver
    ProductLenovo filter driver
    OriginalFilenameLnvMSRIO.sys

    Download

    Certificates

    Expand
    Certificate 08ad40b260d29c4c9f5ecda9bd93aed9
    FieldValue
    ToBeSigned (TBS) MD55d8003a64dfa5a4d88365da1566038cb
    ToBeSigned (TBS) SHA179465b56bc7ad55a37bdf633943da8bfc84db228
    ToBeSigned (TBS) SHA25684bdc82e2f2a7f7aaa782667dac556ffcb2b33240c1f9c0a00a3264526a98332
    SubjectC=US, O=DigiCert, Inc., CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1
    ValidFrom2021-04-29 00:00:00
    ValidTo2036-04-28 23:59:59
    Signature3a23443d8d0876ee8fbc3a99d356e0021aa5f84834f32cb6e67466f79472b100caaf6c302713129e90449f4bfd9ea37c26d537bc3a5d486d95d53f49f427bb16814550fd9cbdb685e0767e3771cb22f75aaa90cff5936ae3eb20d1d55079889a8a8ac1b6bda148187edcd8801a111918cd61998156f6c9e376e7c4e41b5f43f83e94ff76393d9ed499cf4add28eb5f26a1955848d51afed7273ffd90d17686dd1cb0605cf30da8eee089a1bd39e1384eda6ebb369dfbe521535ac3cae96af1a23edb43b833c84f38149299f5ddce546dd95d02141f40337c03e295b2c221757352cb46d8c4341ca2a54b8dcd6f76372c853f1ace26e918be9007b0437f9588208270f0cccaeffd29355c1f893855f7378a8b09a1cb0be9311aff2e195c3971e1be9ca70a06d62667b792e64e5fde7aac49cf2ea47492addb3ca49c861fe3c1561b2b23ff8fb5ea887b706be6a0bafd3a3f45a6c4e81691528b41c048844b964dab4440e38df01528ceedf11856072a2f10c40c08643c338fae288c3ccb8f880b0dbf3bf4ce1e7b8eefb5ebcbb7f07713e6e7283fac12aea52f226c41f9825c1566cc6c0ecac586c3f626330c074ba0d307026a6a4030484b34a85120bbad1b8508e2590d6dca05502bea4a1c9ea5fda0a71f0674e7f2d65290fdaf854821f9573bb49c03ed8645f4b4616ebf68e2266086eac8afa9fe941de7631b3a8656784e
    SignatureAlgorithmOID1.2.840.113549.1.1.12
    IsCertificateAuthorityTrue
    SerialNumber08ad40b260d29c4c9f5ecda9bd93aed9
    Version3
    Certificate 0f1b5575dca88493964e207f27711085
    FieldValue
    ToBeSigned (TBS) MD5e1e032346eb86692663f47e6ed01e573
    ToBeSigned (TBS) SHA1594e3b5564bcc009a61e04375b51a8bbaa2b4f6d
    ToBeSigned (TBS) SHA256a2c2e2432bdc2704f458aa3cf433f4dcd3919c3fb2bf23094a16b6407b1ecbae
    SubjectC=US, ST=North Carolina, L=Morrisville, O=Lenovo, OU=G11, CN=Lenovo
    ValidFrom2023-05-25 00:00:00
    ValidTo2024-05-24 23:59:59
    Signature78fd94096ee1363d53c2df0350cf61b1239b0773407f61ca82098087e5f9cc2ece38a7b9d8e4a68ed334a4da8abb7951add48a4ec781870eaec07510eb3b9590579060d00eff70e06747173412cdca57db7e17e3bb2635a7c17cf14dbc4dfc77fffde1a179b973c305db95e4c0f223b55cc415ea760ccbdcd1fbff3cfdee5a615be485133ceb85e25e6de7bb436d47e44c1c10456f0a5c3d8aa606d52f4996dba43310a21cb2544e3413283a56c5cbd4016ddf152619256758ca0a3aba46da5a9de078b2f4a3658ea000738483ccddf67ea74769b0ae041f34d9ca71a57e9f1acae7934b7318db367a0351e24624ebfd63e9f60197abef5814ff53f764e62434c62a47ca1b9748eb08d42f74d13679265a18a91f375de9dba0cdfab1db130ad2bef53ea52c5ad5a996f1145c3040dca7f2687559491bf17b5ffca59d28ecb228ffbd72916781a9d65738d9aca2b87a5b10f36736d2f6a18705529cb81eefa4550b875e135ace1d42c377c7b9fc76da29dd849034c8566c5859c831511639847f4132ec5b43c013cd0f3b7438c3bdd3f8ea75da750c73a5d90daf443b2d1b3ebd2311e9aee4e52d30072888477c06847db40d55c0f94e097e2004440fb70e4caea9b9b4e2f86964f681751747474977d3bff096186dfea8e1783bffc26e480e5ccd0b4d8f0dd27c5f6665c2970c21665190a0aa23159cce27a444be114b7dd5df
    SignatureAlgorithmOID1.2.840.113549.1.1.11
    IsCertificateAuthorityFalse
    SerialNumber0f1b5575dca88493964e207f27711085
    Version3

    Imports

    Expand
    • FLTMGR.SYS
    • ntoskrnl.exe
    • HAL.dll
    • WDFLDR.SYS

    Imported Functions

    Expand
    • FltRegisterFilter
    • FltUnregisterFilter
    • FltStartFiltering
    • FltCreateCommunicationPort
    • FltCloseCommunicationPort
    • FltCloseClientPort
    • FltSendMessage
    • FltBuildDefaultSecurityDescriptor
    • FltFreeSecurityDescriptor
    • IoCreateDevice
    • IoDeleteDevice
    • IoDeleteSymbolicLink
    • PoRegisterPowerSettingCallback
    • PoUnregisterPowerSettingCallback
    • PsSetCreateProcessNotifyRoutineEx
    • ZwPowerInformation
    • __C_specific_handler
    • RtlInitUnicodeString
    • IofCompleteRequest
    • MmUnmapIoSpace
    • MmMapIoSpace
    • RtlCopyUnicodeString
    • DbgPrintEx
    • ProbeForWrite
    • ProbeForRead
    • ExFreePoolWithTag
    • ExAllocatePool2
    • IoCreateSymbolicLink
    • HalGetBusDataByOffset
    • HalSetBusDataByOffset
    • WdfVersionBind
    • WdfLdrQueryInterface
    • WdfVersionUnbind
    • WdfVersionBindClass
    • WdfVersionUnbindClass

    Exported Functions

    Expand

    Sections

    Expand
    • .text
    • .rdata
    • .data
    • .pdata
    • INIT
    • .rsrc
    • .reloc

    Signature

    Expand
    {
  "Certificates": [
    {
      "CertificateType": "CA",
      "IsCA": true,
      "IsCertificateAuthority": true,
      "IsCodeSigning": false,
      "SerialNumber": "059b1b579e8e2132e23907bda777755c",
      "Signature": "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",
      "SignatureAlgorithmOID": "1.2.840.113549.1.1.12",
      "Subject": "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Trusted Root G4",
      "TBS": {
        "MD5": "41b622dd54995550fdc2f31ea12f8d9b",
        "SHA1": "420704040c93dfe9d3ad01a26c07f2be1f4888c1",
        "SHA256": "4816e2e9e37ba61e1def6f7a4c623e981c7af355e51349b5554a3d56c5252e24",
        "SHA384": "4ea1b34b10b982a96a38915843507820ad632c6aad8343e337b34d660cd8366fa154544ae80668ae1fdf3931d57e1996"
      },
      "ValidFrom": "2013-08-01 12:00:00",
      "ValidTo": "2038-01-15 12:00:00",
      "Version": 3
    },
    {
      "CertificateType": "CA",
      "IsCA": true,
      "IsCertificateAuthority": true,
      "IsCodeSigning": true,
      "SerialNumber": "08ad40b260d29c4c9f5ecda9bd93aed9",
      "Signature": "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",
      "SignatureAlgorithmOID": "1.2.840.113549.1.1.12",
      "Subject": "C=US, O=DigiCert, Inc., CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1",
      "TBS": {
        "MD5": "5d8003a64dfa5a4d88365da1566038cb",
        "SHA1": "79465b56bc7ad55a37bdf633943da8bfc84db228",
        "SHA256": "84bdc82e2f2a7f7aaa782667dac556ffcb2b33240c1f9c0a00a3264526a98332",
        "SHA384": "65b1d4076a89ae273f57e6eeedecb3eae129b4168f76fa7671914cdf461d542255c59d9b85b916ae0ca6fc0fcf7a8e64"
      },
      "ValidFrom": "2021-04-29 00:00:00",
      "ValidTo": "2036-04-28 23:59:59",
      "Version": 3
    },
    {
      "CertificateType": "Leaf (Code Signing)",
      "IsCA": false,
      "IsCertificateAuthority": false,
      "IsCodeSigning": true,
      "SerialNumber": "0b60337461b8bb50cbf83e6bea99ea0e",
      "Signature": "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",
      "SignatureAlgorithmOID": "1.2.840.113549.1.1.11",
      "Subject": "C=US, ST=North Carolina, L=Morrisville, O=Lenovo, OU=G29, CN=Lenovo",
      "TBS": {
        "MD5": "7ef16cb5545e847cef80aee6db6fb728",
        "SHA1": "8e8fdcaa9d5943a7cc298815f9144d5aec014de0",
        "SHA256": "7d84324a4b209440d8fa048ba61a70ca2e5d4f82881a458c45d50b80e2a40abd",
        "SHA384": "5c582862ce3cd29630ba8f35068f63f7fc54e1b626e19dd4951413f23d3433381d8266287a91255978359138c22c207d"
      },
      "ValidFrom": "2024-10-30 00:00:00",
      "ValidTo": "2025-10-29 23:59:59",
      "Version": 3
    }
  ],
  "CertificatesInfo": "",
  "Signer": [
    {
      "Issuer": "C=US, O=DigiCert, Inc., CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1",
      "SerialNumber": "0b60337461b8bb50cbf83e6bea99ea0e",
      "Version": 1
    }
  ],
  "SignerInfo": ""
}
    PropertyValue
    FilenameLnvMSRIO.sys
    Creation Timestamp2024-01-25 19:46:26
    MD56352e0b787085eac256c1a8ea41322b7
    SHA1a3a6c2a38f919f3c5d3fa861ff59a6fc40016ffb
    SHA256ec18a0839ff1354dce451926d573e72ce4b2a78782cfceb5b0084e90e77f3220
    Authentihash MD53578b299945dc29364a7360079abf367
    Authentihash SHA1f76d6349f0f0caf98e5c317c25d637aa0a54da29
    Authentihash SHA256bee39425ef2cdda84634519f0b5ed8fd509d62ba88e4484ccd436f2b4b5aef7b
    RichPEHeaderHash MD5956bfec9342c19ff2cf9f1cb20787bd8
    RichPEHeaderHash SHA12714b369011de84e8a1895a14f99d5f277c617fe
    RichPEHeaderHash SHA256f163346df5389eeeaf1c7c13e1077f4e82217d552b1ad2662f7caca8a877c021
    CompanyLenovo
    DescriptionLenovo filter driver
    ProductLenovo filter driver
    OriginalFilenameLnvMSRIO.sys

    Download

    Certificates

    Expand
    Certificate 08ad40b260d29c4c9f5ecda9bd93aed9
    FieldValue
    ToBeSigned (TBS) MD55d8003a64dfa5a4d88365da1566038cb
    ToBeSigned (TBS) SHA179465b56bc7ad55a37bdf633943da8bfc84db228
    ToBeSigned (TBS) SHA25684bdc82e2f2a7f7aaa782667dac556ffcb2b33240c1f9c0a00a3264526a98332
    SubjectC=US, O=DigiCert, Inc., CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1
    ValidFrom2021-04-29 00:00:00
    ValidTo2036-04-28 23:59:59
    Signature3a23443d8d0876ee8fbc3a99d356e0021aa5f84834f32cb6e67466f79472b100caaf6c302713129e90449f4bfd9ea37c26d537bc3a5d486d95d53f49f427bb16814550fd9cbdb685e0767e3771cb22f75aaa90cff5936ae3eb20d1d55079889a8a8ac1b6bda148187edcd8801a111918cd61998156f6c9e376e7c4e41b5f43f83e94ff76393d9ed499cf4add28eb5f26a1955848d51afed7273ffd90d17686dd1cb0605cf30da8eee089a1bd39e1384eda6ebb369dfbe521535ac3cae96af1a23edb43b833c84f38149299f5ddce546dd95d02141f40337c03e295b2c221757352cb46d8c4341ca2a54b8dcd6f76372c853f1ace26e918be9007b0437f9588208270f0cccaeffd29355c1f893855f7378a8b09a1cb0be9311aff2e195c3971e1be9ca70a06d62667b792e64e5fde7aac49cf2ea47492addb3ca49c861fe3c1561b2b23ff8fb5ea887b706be6a0bafd3a3f45a6c4e81691528b41c048844b964dab4440e38df01528ceedf11856072a2f10c40c08643c338fae288c3ccb8f880b0dbf3bf4ce1e7b8eefb5ebcbb7f07713e6e7283fac12aea52f226c41f9825c1566cc6c0ecac586c3f626330c074ba0d307026a6a4030484b34a85120bbad1b8508e2590d6dca05502bea4a1c9ea5fda0a71f0674e7f2d65290fdaf854821f9573bb49c03ed8645f4b4616ebf68e2266086eac8afa9fe941de7631b3a8656784e
    SignatureAlgorithmOID1.2.840.113549.1.1.12
    IsCertificateAuthorityTrue
    SerialNumber08ad40b260d29c4c9f5ecda9bd93aed9
    Version3
    Certificate 0f1b5575dca88493964e207f27711085
    FieldValue
    ToBeSigned (TBS) MD5e1e032346eb86692663f47e6ed01e573
    ToBeSigned (TBS) SHA1594e3b5564bcc009a61e04375b51a8bbaa2b4f6d
    ToBeSigned (TBS) SHA256a2c2e2432bdc2704f458aa3cf433f4dcd3919c3fb2bf23094a16b6407b1ecbae
    SubjectC=US, ST=North Carolina, L=Morrisville, O=Lenovo, OU=G11, CN=Lenovo
    ValidFrom2023-05-25 00:00:00
    ValidTo2024-05-24 23:59:59
    Signature78fd94096ee1363d53c2df0350cf61b1239b0773407f61ca82098087e5f9cc2ece38a7b9d8e4a68ed334a4da8abb7951add48a4ec781870eaec07510eb3b9590579060d00eff70e06747173412cdca57db7e17e3bb2635a7c17cf14dbc4dfc77fffde1a179b973c305db95e4c0f223b55cc415ea760ccbdcd1fbff3cfdee5a615be485133ceb85e25e6de7bb436d47e44c1c10456f0a5c3d8aa606d52f4996dba43310a21cb2544e3413283a56c5cbd4016ddf152619256758ca0a3aba46da5a9de078b2f4a3658ea000738483ccddf67ea74769b0ae041f34d9ca71a57e9f1acae7934b7318db367a0351e24624ebfd63e9f60197abef5814ff53f764e62434c62a47ca1b9748eb08d42f74d13679265a18a91f375de9dba0cdfab1db130ad2bef53ea52c5ad5a996f1145c3040dca7f2687559491bf17b5ffca59d28ecb228ffbd72916781a9d65738d9aca2b87a5b10f36736d2f6a18705529cb81eefa4550b875e135ace1d42c377c7b9fc76da29dd849034c8566c5859c831511639847f4132ec5b43c013cd0f3b7438c3bdd3f8ea75da750c73a5d90daf443b2d1b3ebd2311e9aee4e52d30072888477c06847db40d55c0f94e097e2004440fb70e4caea9b9b4e2f86964f681751747474977d3bff096186dfea8e1783bffc26e480e5ccd0b4d8f0dd27c5f6665c2970c21665190a0aa23159cce27a444be114b7dd5df
    SignatureAlgorithmOID1.2.840.113549.1.1.11
    IsCertificateAuthorityFalse
    SerialNumber0f1b5575dca88493964e207f27711085
    Version3

    Imports

    Expand
    • FLTMGR.SYS
    • ntoskrnl.exe
    • HAL.dll
    • WDFLDR.SYS

    Imported Functions

    Expand
    • FltRegisterFilter
    • FltUnregisterFilter
    • FltStartFiltering
    • FltCreateCommunicationPort
    • FltCloseCommunicationPort
    • FltCloseClientPort
    • FltSendMessage
    • FltBuildDefaultSecurityDescriptor
    • FltFreeSecurityDescriptor
    • IoCreateDevice
    • IoDeleteDevice
    • IoDeleteSymbolicLink
    • PoRegisterPowerSettingCallback
    • PoUnregisterPowerSettingCallback
    • PsSetCreateProcessNotifyRoutineEx
    • ZwPowerInformation
    • __C_specific_handler
    • RtlInitUnicodeString
    • IofCompleteRequest
    • MmUnmapIoSpace
    • MmMapIoSpace
    • RtlCopyUnicodeString
    • DbgPrintEx
    • ProbeForWrite
    • ProbeForRead
    • ExFreePoolWithTag
    • ExAllocatePool2
    • IoCreateSymbolicLink
    • HalGetBusDataByOffset
    • HalSetBusDataByOffset
    • WdfVersionBind
    • WdfLdrQueryInterface
    • WdfVersionUnbind
    • WdfVersionBindClass
    • WdfVersionUnbindClass

    Exported Functions

    Expand

    Sections

    Expand
    • .text
    • .rdata
    • .data
    • .pdata
    • INIT
    • .rsrc
    • .reloc

    Signature

    Expand
    {
  "Certificates": [
    {
      "CertificateType": "CA",
      "IsCA": true,
      "IsCertificateAuthority": true,
      "IsCodeSigning": false,
      "SerialNumber": "059b1b579e8e2132e23907bda777755c",
      "Signature": "bb61d97da96cbe17c4911bc3a1a2008de364680f56cf77ae70f9fd9a4a99b9c9785c0c0c5fe4e61429560b36495d4463e0ad9c9618661b230d3d79e96d6bd654f8d23cc14340ae1d50f552fc903bbb9899696bc7c1a7a868a427dc9df927ae3085b9f6674d3a3e8f5939225344ebc85d03caed507a7d62210a80c87366d1a005605fe8a5b4a7afa8f76d359c7c5a8ad6a23899f3788bf44dd2200bde04ee8c9b4781720dc01432ef30592eaee071f256e46a976f92506d968d687a9ab236147a06f224b9091150d708b1b8897a8423614229e5a3cda22041d7d19c64d9ea26a18b14d74c19b25041713d3f4d7023860c4adc81d2cc3294840d0809971c4fc0ee6b207430d2e03934108521150108e85532de7149d92817504de6be4dd175acd0cafb41b843a5aad3c305444f2c369be2fae245b823536c066f67557f46b54c3f6e285a7926d2a4a86297d21ee2ed4a8bbc1bfd474a0ddf67667eb25b41d03be4f43bf40463e9efc2540051a08a2ac9ce78ccd5ea870418b3ceaf4988aff39299b6b3e6610fd28500e7501ae41b959d19a1b99cb19bb1001eefd00f4f426cc90abcee43fa3a71a5c84d26a535fd895dbc85621d32d2a02b54ed9a57c1dbfa10cf19b78b4a1b8f01b6279553e8b6896d5bbc68d423e88b51a256f9f0a680a0d61eb3bc0f0f537529aaea1377e4de8c8121ad07104711ad873d07d175bccff3667e",
      "SignatureAlgorithmOID": "1.2.840.113549.1.1.12",
      "Subject": "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Trusted Root G4",
      "TBS": {
        "MD5": "41b622dd54995550fdc2f31ea12f8d9b",
        "SHA1": "420704040c93dfe9d3ad01a26c07f2be1f4888c1",
        "SHA256": "4816e2e9e37ba61e1def6f7a4c623e981c7af355e51349b5554a3d56c5252e24",
        "SHA384": "4ea1b34b10b982a96a38915843507820ad632c6aad8343e337b34d660cd8366fa154544ae80668ae1fdf3931d57e1996"
      },
      "ValidFrom": "2013-08-01 12:00:00",
      "ValidTo": "2038-01-15 12:00:00",
      "Version": 3
    },
    {
      "CertificateType": "CA",
      "IsCA": true,
      "IsCertificateAuthority": true,
      "IsCodeSigning": true,
      "SerialNumber": "08ad40b260d29c4c9f5ecda9bd93aed9",
      "Signature": "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",
      "SignatureAlgorithmOID": "1.2.840.113549.1.1.12",
      "Subject": "C=US, O=DigiCert, Inc., CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1",
      "TBS": {
        "MD5": "5d8003a64dfa5a4d88365da1566038cb",
        "SHA1": "79465b56bc7ad55a37bdf633943da8bfc84db228",
        "SHA256": "84bdc82e2f2a7f7aaa782667dac556ffcb2b33240c1f9c0a00a3264526a98332",
        "SHA384": "65b1d4076a89ae273f57e6eeedecb3eae129b4168f76fa7671914cdf461d542255c59d9b85b916ae0ca6fc0fcf7a8e64"
      },
      "ValidFrom": "2021-04-29 00:00:00",
      "ValidTo": "2036-04-28 23:59:59",
      "Version": 3
    },
    {
      "CertificateType": "Leaf (Code Signing)",
      "IsCA": false,
      "IsCertificateAuthority": false,
      "IsCodeSigning": true,
      "SerialNumber": "0b60337461b8bb50cbf83e6bea99ea0e",
      "Signature": "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",
      "SignatureAlgorithmOID": "1.2.840.113549.1.1.11",
      "Subject": "C=US, ST=North Carolina, L=Morrisville, O=Lenovo, OU=G29, CN=Lenovo",
      "TBS": {
        "MD5": "7ef16cb5545e847cef80aee6db6fb728",
        "SHA1": "8e8fdcaa9d5943a7cc298815f9144d5aec014de0",
        "SHA256": "7d84324a4b209440d8fa048ba61a70ca2e5d4f82881a458c45d50b80e2a40abd",
        "SHA384": "5c582862ce3cd29630ba8f35068f63f7fc54e1b626e19dd4951413f23d3433381d8266287a91255978359138c22c207d"
      },
      "ValidFrom": "2024-10-30 00:00:00",
      "ValidTo": "2025-10-29 23:59:59",
      "Version": 3
    }
  ],
  "CertificatesInfo": "",
  "Signer": [
    {
      "Issuer": "C=US, O=DigiCert, Inc., CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1",
      "SerialNumber": "0b60337461b8bb50cbf83e6bea99ea0e",
      "Version": 1
    }
  ],
  "SignerInfo": ""
}

    source

    last_updated: 2026-09-08