Description
Confirmed vulnerable driver from Microsoft Block List
- UUID: 0e3b0052-18c7-4c8b-a064-a1332df07af2
- Created: 2023-07-22
- Author: Michael Haag
- Acknowledgement: |
DownloadBlock
Use Case | Privileges | Operating System |
---|
Elevate privileges | kernel | Windows |
Detections
YARA 🏹
Expand
Sigma 🛡️
Expand
Names
detects loading using name only
Hashes
detects loading using hashes only
Resources
https://gist.github.com/mgraeber-rc/1bde6a2a83237f17b463d051d32e802cCVE
Known Vulnerable Samples
Download
Certificates
Expand
Certificate 611cb28a000000000026
Field | Value |
---|
ToBeSigned (TBS) MD5 | 983a0c315a50542362f2bd6a5d71c8d0 |
ToBeSigned (TBS) SHA1 | 8047f476001f5cb16a661d2a3fd0c3576168f5e2 |
ToBeSigned (TBS) SHA256 | 5f6a519ed2e35cd0fa1cdfc90f4387162c36287bbf9e4d6648251d99542a9e83 |
Subject | C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root CA |
ValidFrom | 2011-04-15 19:41:37 |
ValidTo | 2021-04-15 19:51:37 |
Signature | 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 |
SignatureAlgorithmOID | 1.2.840.113549.1.1.5 |
IsCertificateAuthority | True |
SerialNumber | 611cb28a000000000026 |
Version | 3 |
Certificate 0dd7d4a785990584d8c0837659173272
Field | Value |
---|
ToBeSigned (TBS) MD5 | 559c170b8f735dd1ba8c3946354c4fa5 |
ToBeSigned (TBS) SHA1 | e7432e65001ca5e56478ee25ae9906981432ee75 |
ToBeSigned (TBS) SHA256 | 1c6140780d5210fb89e1dd3005184e03dc52740266a921035b1f836b5af0d32a |
Subject | C=CN, ST=, L=, O=, CN= |
ValidFrom | 2020-04-07 00:00:00 |
ValidTo | 2023-04-12 12:00:00 |
Signature | 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 |
SignatureAlgorithmOID | 1.2.840.113549.1.1.5 |
IsCertificateAuthority | False |
SerialNumber | 0dd7d4a785990584d8c0837659173272 |
Version | 3 |
Certificate 03019a023aff58b16bd6d5eae617f066
Field | Value |
---|
ToBeSigned (TBS) MD5 | a752afee44f017e8d74e3f3eb7914ae3 |
ToBeSigned (TBS) SHA1 | 8eca80a6b80e9c69dcef7745748524afb8019e2d |
ToBeSigned (TBS) SHA256 | 82560fa7efec30b5ff82af643e6f3bf3d46868bbd5e7d76f93db185e9e3553a1 |
Subject | C=US, O=DigiCert, CN=DigiCert Timestamp Responder |
ValidFrom | 2014-10-22 00:00:00 |
ValidTo | 2024-10-22 00:00:00 |
Signature | 9d257e1b334db226815c9b86ce23200f8087e588ffffb1d46a2c31ed3a17197117cda91bbc5a1639009de36c84e45a40fbde06018c37fa9bb19d247efe20a457ad5bb79ab06026ea6957215d342f1f71b0839419056b359010a07b97c7f63fe7e21141a6bd62d9f0273d381d286f3a5209f0ec7062d3624bb0e073a692c0d38e31d82fe36d171306eee403b614abf38f43a7719d21dd14ca155d9241daf90f81d199740d26c40e7f1bb5f5a0f1c677062815e9d893e55516f0bb0aab1cdb5c482766c8a38b0a1ce595daaec42e59a061dddaf36da261e98a0b6dec1218bdf755544003922b6bc251c20a48afb0d46ee0f4140a3a1be38f3dcaaf6a8d7bdcd844 |
SignatureAlgorithmOID | 1.2.840.113549.1.1.5 |
IsCertificateAuthority | False |
SerialNumber | 03019a023aff58b16bd6d5eae617f066 |
Version | 3 |
Certificate 0fa8490615d700a0be2176fdc5ec6dbd
Field | Value |
---|
ToBeSigned (TBS) MD5 | a9a31555bbc92b6033975c5428fb3679 |
ToBeSigned (TBS) SHA1 | 47f4b9898631773231b32844ec0d49990ac4eb1e |
ToBeSigned (TBS) SHA256 | c826846e4b1d73edb7561ab1b41c949354e237a91e82fe1be5b7e2e1701f52d1 |
Subject | C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Code Signing CA,1 |
ValidFrom | 2011-02-11 12:00:00 |
ValidTo | 2026-02-10 12:00:00 |
Signature | 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 |
SignatureAlgorithmOID | 1.2.840.113549.1.1.5 |
IsCertificateAuthority | True |
SerialNumber | 0fa8490615d700a0be2176fdc5ec6dbd |
Version | 3 |
Certificate 06fdf9039603adea000aeb3f27bbba1b
Field | Value |
---|
ToBeSigned (TBS) MD5 | 4e5ad189638cf52ba9cd881d4d44668c |
ToBeSigned (TBS) SHA1 | cdc115e98d798b33904c820d63cc1e1afc19251d |
ToBeSigned (TBS) SHA256 | 37560fb9d548ab62cc3ed4669a4ab74828b5a108e67e829937ffb2d10a5f78dd |
Subject | C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID CA,1 |
ValidFrom | 2006-11-10 00:00:00 |
ValidTo | 2021-11-10 00:00:00 |
Signature | 46503ec9b72824a7381db65b29af52cf52e93147ab565c7bd50d0b41b3efec751f7438f2b25c61a29c95c350e482b923d1ba3a8672ad3878ac755d1717347247859456d1ebbb368477cc24a5f3041955a9e7e3e7ab62cdfb8b2d90c2c0d2b594bd5e4fb105d20e3d1aa9145ba6863162a8a833e49b39a7c4f5ce1d7876942573e42aabcf9c764bed5fc24b16e44b704c00891efcc579bc4c1257fe5fe11ebc025da8fefb07384f0dc65d91b90f6745cdd683ede7920d8db1698c4ffb59e0230fd2aaae007cee9c420ecf91d727b716ee0fc3bd7c0aa0ee2c08558522b8eb181a4dfc2a21ad49318347957771dcb11b4b4b1c109c7714c19d4f2f5a9508291026 |
SignatureAlgorithmOID | 1.2.840.113549.1.1.5 |
IsCertificateAuthority | True |
SerialNumber | 06fdf9039603adea000aeb3f27bbba1b |
Version | 3 |
Imports
Expand
- ntoskrnl.exe
- HAL.dll
- fwpkclnt.sys
- NDIS.SYS
Imported Functions
Expand
- ExDeleteNPagedLookasideList
- memcpy
- ZwQueryValueKey
- RtlUnwind
- ZwSetSecurityObject
- KeBugCheckEx
- KeTickCount
- _allmul
- _aulldiv
- KeQuerySystemTime
- ExUuidCreate
- swprintf_s
- KeInitializeEvent
- PsCreateSystemThread
- ZwSetInformationThread
- ObReferenceObjectByHandle
- RtlAppendUnicodeToString
- IoCreateDevice
- IoCreateSymbolicLink
- PsTerminateSystemThread
- MmGetSystemRoutineAddress
- PsLookupProcessByProcessId
- IoAllocateMdl
- MmBuildMdlForNonPagedPool
- IoReleaseCancelSpinLock
- PsGetCurrentProcessId
- IofCompleteRequest
- IoDeleteSymbolicLink
- IoDeleteDevice
- KeWaitForSingleObject
- ObfDereferenceObject
- MmAllocatePagesForMdl
- MmMapLockedPagesSpecifyCache
- MmFreePagesFromMdl
- MmUnmapLockedPages
- KeSetEvent
- ObOpenObjectByPointer
- RtlLengthSid
- SeExports
- RtlCreateAcl
- RtlAddAccessAllowedAce
- RtlCreateSecurityDescriptor
- RtlSetDaclSecurityDescriptor
- IoFreeMdl
- ExInitializeNPagedLookasideList
- InterlockedPushEntrySList
- InterlockedPopEntrySList
- _aullrem
- ExFreePoolWithTag
- memset
- ExAllocatePoolWithTag
- RtlInitUnicodeString
- ZwOpenKey
- ZwClose
- KeAcquireInStackQueuedSpinLock
- KeGetCurrentIrql
- KeReleaseInStackQueuedSpinLock
- FwpsFreeNetBufferList0
- FwpmEngineOpen0
- FwpmProviderAdd0
- FwpmSubLayerDeleteByKey0
- FwpmProviderContextDeleteByKey0
- FwpsAcquireClassifyHandle0
- FwpsQueryPacketInjectionState0
- FwpsFlowAssociateContext0
- FwpmSubLayerAdd0
- FwpmSubLayerCreateEnumHandle0
- FwpmFreeMemory0
- FwpmSubLayerEnum0
- FwpmSubLayerDestroyEnumHandle0
- FwpmCalloutAdd0
- FwpmFilterAdd0
- FwpmTransactionBegin0
- FwpmEngineClose0
- FwpmTransactionCommit0
- FwpmTransactionAbort0
- FwpsCalloutRegister1
- FwpsCalloutUnregisterByKey0
- FwpsPendClassify0
- FwpsInjectionHandleCreate0
- FwpsCopyStreamDataToBuffer0
- FwpsInjectNetworkReceiveAsync0
- FwpsAcquireWritableLayerDataPointer0
- FwpsApplyModifiedLayerData0
- FwpsAllocateNetBufferAndNetBufferList0
- FwpsInjectTransportSendAsync0
- FwpsConstructIpHeaderForTransportPacket0
- FwpsInjectNetworkSendAsync0
- FwpsInjectTransportReceiveAsync0
- FwpsFreeCloneNetBufferList0
- FwpsInjectionHandleDestroy0
- FwpsFlowRemoveContext0
- FwpsCloneStreamData0
- FwpsCompleteClassify0
- FwpsReleaseClassifyHandle0
- FwpsDiscardClonedStreamData0
- FwpsStreamInjectAsync0
- FwpmBfeStateGet0
- FwpmBfeStateSubscribeChanges0
- FwpmBfeStateUnsubscribeChanges0
- NdisFreeGenericObject
- NdisInitializeEvent
- NdisWaitEvent
- NdisFreeNetBufferListPool
- NdisAdvanceNetBufferDataStart
- NdisRetreatNetBufferDataStart
- NdisAllocateNetBufferListPool
- NdisAllocateGenericObject
- NdisGetDataBuffer
Exported Functions
Expand
Sections
Expand
- .text
- .rdata
- .data
- INIT
- .rsrc
- .reloc
Signature
Expand
{
"Certificates": [
{
"IsCertificateAuthority": true,
"SerialNumber": "611cb28a000000000026",
"Signature": "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",
"SignatureAlgorithmOID": "1.2.840.113549.1.1.5",
"Subject": "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root CA",
"TBS": {
"MD5": "983a0c315a50542362f2bd6a5d71c8d0",
"SHA1": "8047f476001f5cb16a661d2a3fd0c3576168f5e2",
"SHA256": "5f6a519ed2e35cd0fa1cdfc90f4387162c36287bbf9e4d6648251d99542a9e83",
"SHA384": "5f014b60511ddab3247ef0b3c03fe82c622237ba76015e2911d1adc50dc632d56ebd1ee532f3c2b6cbfe68d80a2c91dc"
},
"ValidFrom": "2011-04-15 19:41:37",
"ValidTo": "2021-04-15 19:51:37",
"Version": 3
},
{
"IsCertificateAuthority": false,
"SerialNumber": "0dd7d4a785990584d8c0837659173272",
"Signature": "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",
"SignatureAlgorithmOID": "1.2.840.113549.1.1.5",
"Subject": "C=CN, ST=, L=, O=, CN=",
"TBS": {
"MD5": "559c170b8f735dd1ba8c3946354c4fa5",
"SHA1": "e7432e65001ca5e56478ee25ae9906981432ee75",
"SHA256": "1c6140780d5210fb89e1dd3005184e03dc52740266a921035b1f836b5af0d32a",
"SHA384": "545ad02c12154f939f80b6f4b9d7ae888550220af82ec3f0a42805c8f6e6d7e57dbe62c80a8f8ec35a894acce2f68d9f"
},
"ValidFrom": "2020-04-07 00:00:00",
"ValidTo": "2023-04-12 12:00:00",
"Version": 3
},
{
"IsCertificateAuthority": false,
"SerialNumber": "03019a023aff58b16bd6d5eae617f066",
"Signature": "9d257e1b334db226815c9b86ce23200f8087e588ffffb1d46a2c31ed3a17197117cda91bbc5a1639009de36c84e45a40fbde06018c37fa9bb19d247efe20a457ad5bb79ab06026ea6957215d342f1f71b0839419056b359010a07b97c7f63fe7e21141a6bd62d9f0273d381d286f3a5209f0ec7062d3624bb0e073a692c0d38e31d82fe36d171306eee403b614abf38f43a7719d21dd14ca155d9241daf90f81d199740d26c40e7f1bb5f5a0f1c677062815e9d893e55516f0bb0aab1cdb5c482766c8a38b0a1ce595daaec42e59a061dddaf36da261e98a0b6dec1218bdf755544003922b6bc251c20a48afb0d46ee0f4140a3a1be38f3dcaaf6a8d7bdcd844",
"SignatureAlgorithmOID": "1.2.840.113549.1.1.5",
"Subject": "C=US, O=DigiCert, CN=DigiCert Timestamp Responder",
"TBS": {
"MD5": "a752afee44f017e8d74e3f3eb7914ae3",
"SHA1": "8eca80a6b80e9c69dcef7745748524afb8019e2d",
"SHA256": "82560fa7efec30b5ff82af643e6f3bf3d46868bbd5e7d76f93db185e9e3553a1",
"SHA384": "e8b11408c88f877ade4ca51114a175fb5dfd2d18d2a66be547c1c9e080fa8f592c7870e30dfab1c04d234993dd0907f3"
},
"ValidFrom": "2014-10-22 00:00:00",
"ValidTo": "2024-10-22 00:00:00",
"Version": 3
},
{
"IsCertificateAuthority": true,
"SerialNumber": "0fa8490615d700a0be2176fdc5ec6dbd",
"Signature": "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",
"SignatureAlgorithmOID": "1.2.840.113549.1.1.5",
"Subject": "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Code Signing CA,1",
"TBS": {
"MD5": "a9a31555bbc92b6033975c5428fb3679",
"SHA1": "47f4b9898631773231b32844ec0d49990ac4eb1e",
"SHA256": "c826846e4b1d73edb7561ab1b41c949354e237a91e82fe1be5b7e2e1701f52d1",
"SHA384": "86f49574f368a561914a52d7ae043ec6784ef8c718960700f834e123594605d25d39f1ad45f1eb5052c9567f3edd0e16"
},
"ValidFrom": "2011-02-11 12:00:00",
"ValidTo": "2026-02-10 12:00:00",
"Version": 3
},
{
"IsCertificateAuthority": true,
"SerialNumber": "06fdf9039603adea000aeb3f27bbba1b",
"Signature": "46503ec9b72824a7381db65b29af52cf52e93147ab565c7bd50d0b41b3efec751f7438f2b25c61a29c95c350e482b923d1ba3a8672ad3878ac755d1717347247859456d1ebbb368477cc24a5f3041955a9e7e3e7ab62cdfb8b2d90c2c0d2b594bd5e4fb105d20e3d1aa9145ba6863162a8a833e49b39a7c4f5ce1d7876942573e42aabcf9c764bed5fc24b16e44b704c00891efcc579bc4c1257fe5fe11ebc025da8fefb07384f0dc65d91b90f6745cdd683ede7920d8db1698c4ffb59e0230fd2aaae007cee9c420ecf91d727b716ee0fc3bd7c0aa0ee2c08558522b8eb181a4dfc2a21ad49318347957771dcb11b4b4b1c109c7714c19d4f2f5a9508291026",
"SignatureAlgorithmOID": "1.2.840.113549.1.1.5",
"Subject": "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID CA,1",
"TBS": {
"MD5": "4e5ad189638cf52ba9cd881d4d44668c",
"SHA1": "cdc115e98d798b33904c820d63cc1e1afc19251d",
"SHA256": "37560fb9d548ab62cc3ed4669a4ab74828b5a108e67e829937ffb2d10a5f78dd",
"SHA384": "173bfb77183785621ef15f43ea807338cea6a02e8183317d9ef050c7237adda3fa2a5bdcd5a4c96da9f2c55900675b9f"
},
"ValidFrom": "2006-11-10 00:00:00",
"ValidTo": "2021-11-10 00:00:00",
"Version": 3
}
],
"CertificatesInfo": "",
"Signer": [
{
"Issuer": "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Code Signing CA,1",
"SerialNumber": "0dd7d4a785990584d8c0837659173272",
"Version": 1
}
],
"SignerInfo": ""
}
Download
Certificates
Expand
Certificate 611cb28a000000000026
Field | Value |
---|
ToBeSigned (TBS) MD5 | 983a0c315a50542362f2bd6a5d71c8d0 |
ToBeSigned (TBS) SHA1 | 8047f476001f5cb16a661d2a3fd0c3576168f5e2 |
ToBeSigned (TBS) SHA256 | 5f6a519ed2e35cd0fa1cdfc90f4387162c36287bbf9e4d6648251d99542a9e83 |
Subject | C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root CA |
ValidFrom | 2011-04-15 19:41:37 |
ValidTo | 2021-04-15 19:51:37 |
Signature | 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 |
SignatureAlgorithmOID | 1.2.840.113549.1.1.5 |
IsCertificateAuthority | True |
SerialNumber | 611cb28a000000000026 |
Version | 3 |
Certificate 0dd7d4a785990584d8c0837659173272
Field | Value |
---|
ToBeSigned (TBS) MD5 | 559c170b8f735dd1ba8c3946354c4fa5 |
ToBeSigned (TBS) SHA1 | e7432e65001ca5e56478ee25ae9906981432ee75 |
ToBeSigned (TBS) SHA256 | 1c6140780d5210fb89e1dd3005184e03dc52740266a921035b1f836b5af0d32a |
Subject | C=CN, ST=, L=, O=, CN= |
ValidFrom | 2020-04-07 00:00:00 |
ValidTo | 2023-04-12 12:00:00 |
Signature | 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 |
SignatureAlgorithmOID | 1.2.840.113549.1.1.5 |
IsCertificateAuthority | False |
SerialNumber | 0dd7d4a785990584d8c0837659173272 |
Version | 3 |
Certificate 03019a023aff58b16bd6d5eae617f066
Field | Value |
---|
ToBeSigned (TBS) MD5 | a752afee44f017e8d74e3f3eb7914ae3 |
ToBeSigned (TBS) SHA1 | 8eca80a6b80e9c69dcef7745748524afb8019e2d |
ToBeSigned (TBS) SHA256 | 82560fa7efec30b5ff82af643e6f3bf3d46868bbd5e7d76f93db185e9e3553a1 |
Subject | C=US, O=DigiCert, CN=DigiCert Timestamp Responder |
ValidFrom | 2014-10-22 00:00:00 |
ValidTo | 2024-10-22 00:00:00 |
Signature | 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 |
SignatureAlgorithmOID | 1.2.840.113549.1.1.5 |
IsCertificateAuthority | False |
SerialNumber | 03019a023aff58b16bd6d5eae617f066 |
Version | 3 |
Certificate 0fa8490615d700a0be2176fdc5ec6dbd
Field | Value |
---|
ToBeSigned (TBS) MD5 | a9a31555bbc92b6033975c5428fb3679 |
ToBeSigned (TBS) SHA1 | 47f4b9898631773231b32844ec0d49990ac4eb1e |
ToBeSigned (TBS) SHA256 | c826846e4b1d73edb7561ab1b41c949354e237a91e82fe1be5b7e2e1701f52d1 |
Subject | C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Code Signing CA,1 |
ValidFrom | 2011-02-11 12:00:00 |
ValidTo | 2026-02-10 12:00:00 |
Signature | 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 |
SignatureAlgorithmOID | 1.2.840.113549.1.1.5 |
IsCertificateAuthority | True |
SerialNumber | 0fa8490615d700a0be2176fdc5ec6dbd |
Version | 3 |
Certificate 06fdf9039603adea000aeb3f27bbba1b
Field | Value |
---|
ToBeSigned (TBS) MD5 | 4e5ad189638cf52ba9cd881d4d44668c |
ToBeSigned (TBS) SHA1 | cdc115e98d798b33904c820d63cc1e1afc19251d |
ToBeSigned (TBS) SHA256 | 37560fb9d548ab62cc3ed4669a4ab74828b5a108e67e829937ffb2d10a5f78dd |
Subject | C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID CA,1 |
ValidFrom | 2006-11-10 00:00:00 |
ValidTo | 2021-11-10 00:00:00 |
Signature | 46503ec9b72824a7381db65b29af52cf52e93147ab565c7bd50d0b41b3efec751f7438f2b25c61a29c95c350e482b923d1ba3a8672ad3878ac755d1717347247859456d1ebbb368477cc24a5f3041955a9e7e3e7ab62cdfb8b2d90c2c0d2b594bd5e4fb105d20e3d1aa9145ba6863162a8a833e49b39a7c4f5ce1d7876942573e42aabcf9c764bed5fc24b16e44b704c00891efcc579bc4c1257fe5fe11ebc025da8fefb07384f0dc65d91b90f6745cdd683ede7920d8db1698c4ffb59e0230fd2aaae007cee9c420ecf91d727b716ee0fc3bd7c0aa0ee2c08558522b8eb181a4dfc2a21ad49318347957771dcb11b4b4b1c109c7714c19d4f2f5a9508291026 |
SignatureAlgorithmOID | 1.2.840.113549.1.1.5 |
IsCertificateAuthority | True |
SerialNumber | 06fdf9039603adea000aeb3f27bbba1b |
Version | 3 |
Imports
Expand
- fwpkclnt.sys
- NDIS.SYS
- ntoskrnl.exe
Imported Functions
Expand
- FwpmFreeMemory0
- FwpmEngineOpen0
- FwpmEngineClose0
- FwpmTransactionBegin0
- FwpmTransactionCommit0
- FwpmTransactionAbort0
- FwpmProviderAdd0
- FwpmProviderContextDeleteByKey0
- FwpmSubLayerAdd0
- FwpmSubLayerDeleteByKey0
- FwpmSubLayerCreateEnumHandle0
- FwpmSubLayerEnum0
- FwpmSubLayerDestroyEnumHandle0
- FwpmCalloutAdd0
- FwpmFilterAdd0
- FwpsFlowAbort0
- FwpsInjectionHandleCreate0
- FwpsInjectionHandleDestroy0
- FwpsRedirectHandleCreate0
- FwpsFreeNetBufferList0
- FwpsFreeCloneNetBufferList0
- FwpsInjectNetworkSendAsync0
- FwpsConstructIpHeaderForTransportPacket0
- FwpsInjectTransportSendAsync0
- FwpsInjectTransportReceiveAsync0
- FwpsInjectNetworkReceiveAsync0
- FwpsStreamInjectAsync0
- FwpsCopyStreamDataToBuffer0
- FwpmBfeStateGet0
- FwpmBfeStateSubscribeChanges0
- FwpmBfeStateUnsubscribeChanges0
- FwpsFlowRemoveContext0
- FwpsCompleteClassify0
- FwpsRedirectHandleDestroy0
- FwpsCloneStreamData0
- FwpsDiscardClonedStreamData0
- FwpsQueryPacketInjectionState0
- FwpsApplyModifiedLayerData0
- FwpsAcquireWritableLayerDataPointer0
- FwpsReleaseClassifyHandle0
- FwpsAcquireClassifyHandle0
- FwpsFlowAssociateContext0
- FwpsCalloutUnregisterByKey0
- FwpsPendClassify0
- FwpsCalloutRegister1
- FwpsAllocateNetBufferAndNetBufferList0
- NdisAllocateNetBufferListPool
- NdisFreeNetBufferListPool
- NdisWaitEvent
- NdisInitializeEvent
- NdisFreeGenericObject
- NdisAllocateGenericObject
- NdisGetDataBuffer
- NdisAdvanceNetBufferDataStart
- NdisRetreatNetBufferDataStart
- KeAcquireInStackQueuedSpinLock
- KeReleaseInStackQueuedSpinLock
- ExAllocatePoolWithTag
- ExUuidCreate
- swprintf_s
- RtlInitUnicodeString
- MmGetSystemRoutineAddress
- RtlAppendUnicodeToString
- RtlCreateSecurityDescriptor
- RtlSetDaclSecurityDescriptor
- KeInitializeEvent
- KeSetEvent
- KeWaitForSingleObject
- KeInitializeSpinLock
- ExFreePoolWithTag
- ExQueryDepthSList
- ExpInterlockedPopEntrySList
- ExpInterlockedPushEntrySList
- ExInitializeNPagedLookasideList
- ExDeleteNPagedLookasideList
- MmBuildMdlForNonPagedPool
- MmMapLockedPagesSpecifyCache
- MmUnmapLockedPages
- MmAllocatePagesForMdl
- MmFreePagesFromMdl
- PsCreateSystemThread
- PsTerminateSystemThread
- IoAllocateMdl
- IofCompleteRequest
- IoCreateDevice
- IoCreateSymbolicLink
- IoDeleteDevice
- IoDeleteSymbolicLink
- IoFreeMdl
- IoReleaseCancelSpinLock
- ObReferenceObjectByHandle
- ObfDereferenceObject
- ZwClose
- ZwOpenKey
- ZwQueryValueKey
- PsGetCurrentProcessId
- ZwSetInformationThread
- RtlLengthSid
- RtlCreateAcl
- RtlAddAccessAllowedAce
- PsLookupProcessByProcessId
- ObOpenObjectByPointer
- ZwSetSecurityObject
- __C_specific_handler
- SeExports
- RtlGetVersion
Exported Functions
Expand
Sections
Expand
- .text
- .rdata
- .data
- .pdata
- INIT
- .rsrc
- .reloc
Signature
Expand
{
"Certificates": [
{
"IsCertificateAuthority": true,
"SerialNumber": "611cb28a000000000026",
"Signature": "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",
"SignatureAlgorithmOID": "1.2.840.113549.1.1.5",
"Subject": "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root CA",
"TBS": {
"MD5": "983a0c315a50542362f2bd6a5d71c8d0",
"SHA1": "8047f476001f5cb16a661d2a3fd0c3576168f5e2",
"SHA256": "5f6a519ed2e35cd0fa1cdfc90f4387162c36287bbf9e4d6648251d99542a9e83",
"SHA384": "5f014b60511ddab3247ef0b3c03fe82c622237ba76015e2911d1adc50dc632d56ebd1ee532f3c2b6cbfe68d80a2c91dc"
},
"ValidFrom": "2011-04-15 19:41:37",
"ValidTo": "2021-04-15 19:51:37",
"Version": 3
},
{
"IsCertificateAuthority": false,
"SerialNumber": "0dd7d4a785990584d8c0837659173272",
"Signature": "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",
"SignatureAlgorithmOID": "1.2.840.113549.1.1.5",
"Subject": "C=CN, ST=, L=, O=, CN=",
"TBS": {
"MD5": "559c170b8f735dd1ba8c3946354c4fa5",
"SHA1": "e7432e65001ca5e56478ee25ae9906981432ee75",
"SHA256": "1c6140780d5210fb89e1dd3005184e03dc52740266a921035b1f836b5af0d32a",
"SHA384": "545ad02c12154f939f80b6f4b9d7ae888550220af82ec3f0a42805c8f6e6d7e57dbe62c80a8f8ec35a894acce2f68d9f"
},
"ValidFrom": "2020-04-07 00:00:00",
"ValidTo": "2023-04-12 12:00:00",
"Version": 3
},
{
"IsCertificateAuthority": false,
"SerialNumber": "03019a023aff58b16bd6d5eae617f066",
"Signature": "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",
"SignatureAlgorithmOID": "1.2.840.113549.1.1.5",
"Subject": "C=US, O=DigiCert, CN=DigiCert Timestamp Responder",
"TBS": {
"MD5": "a752afee44f017e8d74e3f3eb7914ae3",
"SHA1": "8eca80a6b80e9c69dcef7745748524afb8019e2d",
"SHA256": "82560fa7efec30b5ff82af643e6f3bf3d46868bbd5e7d76f93db185e9e3553a1",
"SHA384": "e8b11408c88f877ade4ca51114a175fb5dfd2d18d2a66be547c1c9e080fa8f592c7870e30dfab1c04d234993dd0907f3"
},
"ValidFrom": "2014-10-22 00:00:00",
"ValidTo": "2024-10-22 00:00:00",
"Version": 3
},
{
"IsCertificateAuthority": true,
"SerialNumber": "0fa8490615d700a0be2176fdc5ec6dbd",
"Signature": "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",
"SignatureAlgorithmOID": "1.2.840.113549.1.1.5",
"Subject": "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Code Signing CA,1",
"TBS": {
"MD5": "a9a31555bbc92b6033975c5428fb3679",
"SHA1": "47f4b9898631773231b32844ec0d49990ac4eb1e",
"SHA256": "c826846e4b1d73edb7561ab1b41c949354e237a91e82fe1be5b7e2e1701f52d1",
"SHA384": "86f49574f368a561914a52d7ae043ec6784ef8c718960700f834e123594605d25d39f1ad45f1eb5052c9567f3edd0e16"
},
"ValidFrom": "2011-02-11 12:00:00",
"ValidTo": "2026-02-10 12:00:00",
"Version": 3
},
{
"IsCertificateAuthority": true,
"SerialNumber": "06fdf9039603adea000aeb3f27bbba1b",
"Signature": "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",
"SignatureAlgorithmOID": "1.2.840.113549.1.1.5",
"Subject": "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID CA,1",
"TBS": {
"MD5": "4e5ad189638cf52ba9cd881d4d44668c",
"SHA1": "cdc115e98d798b33904c820d63cc1e1afc19251d",
"SHA256": "37560fb9d548ab62cc3ed4669a4ab74828b5a108e67e829937ffb2d10a5f78dd",
"SHA384": "173bfb77183785621ef15f43ea807338cea6a02e8183317d9ef050c7237adda3fa2a5bdcd5a4c96da9f2c55900675b9f"
},
"ValidFrom": "2006-11-10 00:00:00",
"ValidTo": "2021-11-10 00:00:00",
"Version": 3
}
],
"CertificatesInfo": "",
"Signer": [
{
"Issuer": "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Code Signing CA,1",
"SerialNumber": "0dd7d4a785990584d8c0837659173272",
"Version": 1
}
],
"SignerInfo": ""
}
source
last_updated: 2024-09-26