Description
The Carbon Black Threat Analysis Unit (TAU) discovered 34 unique vulnerable drivers (237 file hashes) accepting firmware access. Six allow kernel memory access. All give full control of the devices to non-admin users. By exploiting the vulnerable drivers, an attacker without the system privilege may erase/alter firmware, and/or elevate privileges. As of the time of writing in October 2023, the filenames of the vulnerable drivers have not been made public until now.
- UUID: e769d1f6-8a38-426f-b5e7-447241204ee1
- Created: 2023-11-02
- Author: Takahiro Haruyama
- Acknowledgement: |
DownloadBlock
This download link contains the vulnerable driver!
Commands
sc.exe create GEDevDrvSYS binPath= C:\windows\temp\GEDevDrvSYS.sys type=kernel && sc.exe start GEDevDrvSYS
Use Case | Privileges | Operating System |
---|
Elevate privileges | kernel | Windows 10 |
Detections
Sigma 🛡️
Expand
Names
detects loading using name only
Hashes
detects loading using hashes only
Resources
https://blogs.vmware.com/security/2023/10/hunting-vulnerable-kernel-drivers.htmlKnown Vulnerable Samples
Download
Certificates
Expand
Certificate 3825d7faf861af9ef490e726b5d65ad5
Field | Value |
---|
ToBeSigned (TBS) MD5 | d6c7684e9aaa508cf268335f83afe040 |
ToBeSigned (TBS) SHA1 | 18066d20ad92409c567cdfde745279ff71c75226 |
ToBeSigned (TBS) SHA256 | a612fb22ce8be6dab75e47c98508f98496583e79c9c97b936a8caee9ea9f3fff |
Subject | C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer , G2 |
ValidFrom | 2007-06-15 00:00:00 |
ValidTo | 2012-06-14 23:59:59 |
Signature | 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 |
SignatureAlgorithmOID | 1.2.840.113549.1.1.5 |
IsCertificateAuthority | False |
SerialNumber | 3825d7faf861af9ef490e726b5d65ad5 |
Version | 3 |
Certificate 47bf1995df8d524643f7db6d480d31a4
Field | Value |
---|
ToBeSigned (TBS) MD5 | 518d2ea8a21e879c942d504824ac211c |
ToBeSigned (TBS) SHA1 | 21ce87d827077e61abddf2beba69fde5432ea031 |
ToBeSigned (TBS) SHA256 | 1ec3b4f02e03930a470020e0e48d24b84678bb558f46182888d870541f5e25c7 |
Subject | C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA |
ValidFrom | 2003-12-04 00:00:00 |
ValidTo | 2013-12-03 23:59:59 |
Signature | 4a6bf9ea58c2441c318979992b96bf82ac01d61c4ccdb08a586edf0829a35ec8ca9313e704520def47272f0038b0e4c9934e9ad4226215f73f37214f703180f18b3887b3e8e89700fecf55964e24d2a9274e7aaeb76141f32acee7c9d95eddbb2b853eb59db5d9e157ffbeb4c57ef5cf0c9ef097fe2bd33b521b1b3827f73f4a |
SignatureAlgorithmOID | 1.2.840.113549.1.1.5 |
IsCertificateAuthority | True |
SerialNumber | 47bf1995df8d524643f7db6d480d31a4 |
Version | 3 |
Certificate 696d42a62da190c8cebe0345810f5372
Field | Value |
---|
ToBeSigned (TBS) MD5 | cbfc054efc981779e2e5d9f25ff0f537 |
ToBeSigned (TBS) SHA1 | b8b92324d6493e199f87f074f7b91c9ddab2658a |
ToBeSigned (TBS) SHA256 | 5996b03c1b8d5ae1fad121a487989abf91ac4ad550540591009183df9cffce29 |
Subject | C=CA, ST=Alberta, L=Edmonton, O=GE , OU=Digital ID Class 3 , Microsoft Software Validation v2, OU=Intelligent Platforms, CN=GE |
ValidFrom | 2010-04-08 00:00:00 |
ValidTo | 2013-04-07 23:59:59 |
Signature | 606daddb4410cea2602a13f4cf09dd9f7e3a02d740e874e42ef5f07a35d558e14b846c2df6ae7246bd61f883bd9bd9ec5664460e36de7eac97df14700074798e840a8080a70511eb08988459cba7398cdcaf6aff86e226d53eb0c32d1c2178200b44d474847033a7cd3fcb8b5ccc9126d75d35701687c83f16c6d83e1ad99c5394216cde89b2d706a83b353da7d0d1a9939fd37f2d25f85edafeffa7552d67ba4115e2977106d1986470e3eacea1396493a8f346683f2743c83a15033c57f22e6b80eb6ee51951e847f045227089e72bee8c8abc469f64f8f8aef283b4059a3a58eb5695d916c9b73a6587bb4c3ed71882f40a4ee2b9c5b7e0482e075bd8f755 |
SignatureAlgorithmOID | 1.2.840.113549.1.1.5 |
IsCertificateAuthority | False |
SerialNumber | 696d42a62da190c8cebe0345810f5372 |
Version | 3 |
Certificate 655226e1b22e18e1590f2985ac22e75c
Field | Value |
---|
ToBeSigned (TBS) MD5 | 650704c342850095f3288eaf791147d4 |
ToBeSigned (TBS) SHA1 | 4cdc38c800761463749c3cbd94a12f32e49877bf |
ToBeSigned (TBS) SHA256 | 07b8f662558ec85b71b43a79c6e94698144f4ced2308af21e7ba1e5d461da214 |
Subject | C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009,2 CA |
ValidFrom | 2009-05-21 00:00:00 |
ValidTo | 2019-05-20 23:59:59 |
Signature | 8b03c0dd94d841a26169b015a878c730c6903c7e42f724b6e4837317047f04109ca1e2fa812febc0ca44e772e050b6551020836e9692e49a516ab43731dca52deb8c00c71d4fe74d32ba85f84ebefa675565f06abe7aca64381a101078457631f3867a030f60c2b35d9df68b6676821b59e183e5bd49a53856e5de41770e580f |
SignatureAlgorithmOID | 1.2.840.113549.1.1.5 |
IsCertificateAuthority | True |
SerialNumber | 655226e1b22e18e1590f2985ac22e75c |
Version | 3 |
Certificate 610c120600000000001b
Field | Value |
---|
ToBeSigned (TBS) MD5 | 53c41bc1164e09e0cd1617a5bf913efd |
ToBeSigned (TBS) SHA1 | 93c03aac8951d494ecd5696b1c08658541b18727 |
ToBeSigned (TBS) SHA256 | 40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b |
Subject | C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority |
ValidFrom | 2006-05-23 17:01:29 |
ValidTo | 2016-05-23 17:11:29 |
Signature | 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 |
SignatureAlgorithmOID | 1.2.840.113549.1.1.5 |
IsCertificateAuthority | True |
SerialNumber | 610c120600000000001b |
Version | 3 |
Imports
Expand
Imported Functions
Expand
- MmBuildMdlForNonPagedPool
- MmMapLockedPagesSpecifyCache
- IoAllocateMdl
- RtlCopyUnicodeString
- MmMapIoSpace
- MmUnmapIoSpace
- IoFreeMdl
- KeBugCheckEx
- MmUnmapLockedPages
- __C_specific_handler
- WdfVersionBindClass
- WdfVersionBind
- WdfVersionUnbind
- WdfVersionUnbindClass
Exported Functions
Expand
Sections
Expand
- .text
- .rdata
- .data
- .pdata
- PAGE
- INIT
- .rsrc
- .reloc
Signature
Expand
{
"Certificates": [
{
"IsCertificateAuthority": false,
"SerialNumber": "3825d7faf861af9ef490e726b5d65ad5",
"Signature": "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",
"SignatureAlgorithmOID": "1.2.840.113549.1.1.5",
"Subject": "C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer , G2",
"TBS": {
"MD5": "d6c7684e9aaa508cf268335f83afe040",
"SHA1": "18066d20ad92409c567cdfde745279ff71c75226",
"SHA256": "a612fb22ce8be6dab75e47c98508f98496583e79c9c97b936a8caee9ea9f3fff",
"SHA384": "35c249d6ad0261a6229b2a727067ac6ba32a5d24b30b9249051f748c7735fbe2ec2ef26a702c50df1790fbe32a65aee7"
},
"ValidFrom": "2007-06-15 00:00:00",
"ValidTo": "2012-06-14 23:59:59",
"Version": 3
},
{
"IsCertificateAuthority": true,
"SerialNumber": "47bf1995df8d524643f7db6d480d31a4",
"Signature": "4a6bf9ea58c2441c318979992b96bf82ac01d61c4ccdb08a586edf0829a35ec8ca9313e704520def47272f0038b0e4c9934e9ad4226215f73f37214f703180f18b3887b3e8e89700fecf55964e24d2a9274e7aaeb76141f32acee7c9d95eddbb2b853eb59db5d9e157ffbeb4c57ef5cf0c9ef097fe2bd33b521b1b3827f73f4a",
"SignatureAlgorithmOID": "1.2.840.113549.1.1.5",
"Subject": "C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA",
"TBS": {
"MD5": "518d2ea8a21e879c942d504824ac211c",
"SHA1": "21ce87d827077e61abddf2beba69fde5432ea031",
"SHA256": "1ec3b4f02e03930a470020e0e48d24b84678bb558f46182888d870541f5e25c7",
"SHA384": "53e346bbde23779a5d116cc9d86fdd71c97b1f1b343439f8a11aa1d3c87af63864bb8488a5aeb2d0c26a6a1e0b15f03f"
},
"ValidFrom": "2003-12-04 00:00:00",
"ValidTo": "2013-12-03 23:59:59",
"Version": 3
},
{
"IsCertificateAuthority": false,
"SerialNumber": "696d42a62da190c8cebe0345810f5372",
"Signature": "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",
"SignatureAlgorithmOID": "1.2.840.113549.1.1.5",
"Subject": "C=CA, ST=Alberta, L=Edmonton, O=GE , OU=Digital ID Class 3 , Microsoft Software Validation v2, OU=Intelligent Platforms, CN=GE ",
"TBS": {
"MD5": "cbfc054efc981779e2e5d9f25ff0f537",
"SHA1": "b8b92324d6493e199f87f074f7b91c9ddab2658a",
"SHA256": "5996b03c1b8d5ae1fad121a487989abf91ac4ad550540591009183df9cffce29",
"SHA384": "0171dd207a27c93502245917d4bdda2afcf14ceebc3cf3bff95f1d90a5befe675372a5732f5efe975bec23df6593b97e"
},
"ValidFrom": "2010-04-08 00:00:00",
"ValidTo": "2013-04-07 23:59:59",
"Version": 3
},
{
"IsCertificateAuthority": true,
"SerialNumber": "655226e1b22e18e1590f2985ac22e75c",
"Signature": "8b03c0dd94d841a26169b015a878c730c6903c7e42f724b6e4837317047f04109ca1e2fa812febc0ca44e772e050b6551020836e9692e49a516ab43731dca52deb8c00c71d4fe74d32ba85f84ebefa675565f06abe7aca64381a101078457631f3867a030f60c2b35d9df68b6676821b59e183e5bd49a53856e5de41770e580f",
"SignatureAlgorithmOID": "1.2.840.113549.1.1.5",
"Subject": "C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009,2 CA",
"TBS": {
"MD5": "650704c342850095f3288eaf791147d4",
"SHA1": "4cdc38c800761463749c3cbd94a12f32e49877bf",
"SHA256": "07b8f662558ec85b71b43a79c6e94698144f4ced2308af21e7ba1e5d461da214",
"SHA384": "2a271d052213438467d09d60eaa4010c8642fff3eb0070e0cf9969428713c8fdc066b90996d594dd3136f5bd0af5a22a"
},
"ValidFrom": "2009-05-21 00:00:00",
"ValidTo": "2019-05-20 23:59:59",
"Version": 3
},
{
"IsCertificateAuthority": true,
"SerialNumber": "610c120600000000001b",
"Signature": "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",
"SignatureAlgorithmOID": "1.2.840.113549.1.1.5",
"Subject": "C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority",
"TBS": {
"MD5": "53c41bc1164e09e0cd1617a5bf913efd",
"SHA1": "93c03aac8951d494ecd5696b1c08658541b18727",
"SHA256": "40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b",
"SHA384": "f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"
},
"ValidFrom": "2006-05-23 17:01:29",
"ValidTo": "2016-05-23 17:11:29",
"Version": 3
}
],
"CertificatesInfo": "",
"Signer": [
{
"Issuer": "C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009,2 CA",
"SerialNumber": "696d42a62da190c8cebe0345810f5372",
"Version": 1
}
],
"SignerInfo": ""
}
Download
Certificates
Expand
Certificate 7e93ebfb7cc64e59ea4b9a77d406fc3b
Field | Value |
---|
ToBeSigned (TBS) MD5 | d0785ad36e427c92b19f6826ab1e8020 |
ToBeSigned (TBS) SHA1 | 365b7a9c21bd9373e49052c3e7b3e4646ddd4d43 |
ToBeSigned (TBS) SHA256 | c2abb7484da91a658548de089d52436175fdb760a1387d225611dc0613a1e2ff |
Subject | C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA , G2 |
ValidFrom | 2012-12-21 00:00:00 |
ValidTo | 2020-12-30 23:59:59 |
Signature | 03099b8f79ef7f5930aaef68b5fae3091dbb4f82065d375fa6529f168dea1c9209446ef56deb587c30e8f9698d23730b126f47a9ae3911f82ab19bb01ac38eeb599600adce0c4db2d031a6085c2a7afce27a1d574ca86518e979406225966ec7c7376a8321088e41eaddd9573f1d7749872a16065ea6386a2212a35119837eb6 |
SignatureAlgorithmOID | 1.2.840.113549.1.1.5 |
IsCertificateAuthority | True |
SerialNumber | 7e93ebfb7cc64e59ea4b9a77d406fc3b |
Version | 3 |
Certificate 0ecff438c8febf356e04d86a981b1a50
Field | Value |
---|
ToBeSigned (TBS) MD5 | e9d38360b914c8863f6cba3ee58764d3 |
ToBeSigned (TBS) SHA1 | 4cba8eae47b6bf76f20b3504b98b8f062694a89b |
ToBeSigned (TBS) SHA256 | 88901d86a4cc1f1bb193d08e1fb63d27452e63f83e228c657ab1a92e4ade3976 |
Subject | C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer , G4 |
ValidFrom | 2012-10-18 00:00:00 |
ValidTo | 2020-12-29 23:59:59 |
Signature | 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 |
SignatureAlgorithmOID | 1.2.840.113549.1.1.5 |
IsCertificateAuthority | False |
SerialNumber | 0ecff438c8febf356e04d86a981b1a50 |
Version | 3 |
Certificate 21d1e9203b5d6fc7379869075104849a
Field | Value |
---|
ToBeSigned (TBS) MD5 | 769eb6a61bfee7586c6fc6d3f8e6980a |
ToBeSigned (TBS) SHA1 | a96b34cfe8a09e8dd8c33eafe4b2043abadcd595 |
ToBeSigned (TBS) SHA256 | f368351de9da350b7cee666ef8e555b979a530f129787ac09cad25f9138954fe |
Subject | C=CA, ST=Alberta, L=Edmonton, O=GE Intelligent Platforms Canada Company, CN=GE Intelligent Platforms Canada Company |
ValidFrom | 2016-01-29 00:00:00 |
ValidTo | 2019-01-28 23:59:59 |
Signature | 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 |
SignatureAlgorithmOID | 1.2.840.113549.1.1.11 |
IsCertificateAuthority | False |
SerialNumber | 21d1e9203b5d6fc7379869075104849a |
Version | 3 |
Certificate 3d78d7f9764960b2617df4f01eca862a
Field | Value |
---|
ToBeSigned (TBS) MD5 | 1f056ff7d5f874984dc605402b7cb042 |
ToBeSigned (TBS) SHA1 | bdb348353a2203deb4b767914fa1bd7248dd728b |
ToBeSigned (TBS) SHA256 | a08e79c386083d875014c409c13d144e0a24386132980df11ff59737c8489eb1 |
Subject | C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 SHA256 Code Signing CA |
ValidFrom | 2013-12-10 00:00:00 |
ValidTo | 2023-12-09 23:59:59 |
Signature | 13851a1e69a937f7a0bda4af7e1d6153fe9d8c5e0ca6751e781723ddfdec1a035539fb7195c7655aa78e30d2445a61db706fda2105c22e73ba49f1d193fe5dc9cd5e03e0899e3f741ed7f7388ba9d6cfbb352f3358a89256d1c84d3b82e6798416fc28b0b147f31da23eee87d9a67fa456a53fad842e29de7cbca8aaa33d0401eaba93a20e502229174c87e43a115fd6a425899b056b2fb4c9014c277b0bac190522a060153fdac9fb4d4c8ffb726777fd2794c7ba350e8849fe8dfd28af4a12bd0db39705de440c15fa362b03dcc15001f1a1115d14e5e2bd274b54be2b845e0fa6c374050aef97c38922b11f77f3bdcd43d4f14ca93fb58b84af64f2d01421 |
SignatureAlgorithmOID | 1.2.840.113549.1.1.11 |
IsCertificateAuthority | True |
SerialNumber | 3d78d7f9764960b2617df4f01eca862a |
Version | 3 |
Certificate 611993e400000000001c
Field | Value |
---|
ToBeSigned (TBS) MD5 | 78a717e082dcc1cda3458d917e677d14 |
ToBeSigned (TBS) SHA1 | 4a872e0e51f9b304469cd1dedb496ee9b8b983a4 |
ToBeSigned (TBS) SHA256 | 317fa1d234ebc49040ebc5e8746f8997471496051b185a91bdd9dfbb23fab5f8 |
Subject | C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. , For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority , G5 |
ValidFrom | 2011-02-22 19:25:17 |
ValidTo | 2021-02-22 19:35:17 |
Signature | 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 |
SignatureAlgorithmOID | 1.2.840.113549.1.1.5 |
IsCertificateAuthority | True |
SerialNumber | 611993e400000000001c |
Version | 3 |
Imports
Expand
Imported Functions
Expand
- MmBuildMdlForNonPagedPool
- MmMapLockedPagesSpecifyCache
- IoAllocateMdl
- RtlCopyUnicodeString
- MmMapIoSpace
- MmUnmapIoSpace
- IoFreeMdl
- KeBugCheckEx
- MmUnmapLockedPages
- __C_specific_handler
- WdfVersionBindClass
- WdfVersionBind
- WdfVersionUnbind
- WdfVersionUnbindClass
Exported Functions
Expand
Sections
Expand
- .text
- .rdata
- .data
- .pdata
- PAGE
- INIT
- .rsrc
- .reloc
Signature
Expand
{
"Certificates": [
{
"IsCertificateAuthority": false,
"SerialNumber": "3825d7faf861af9ef490e726b5d65ad5",
"Signature": "50c54bc82480dfe40d24c2de1ab1a102a1a6822d0c831581370a820e2cb05a1761b5d805fe88dbf19191b3561a40a6eb92be3839b07536743a984fe437ba9989ca95421db0b9c7a08d57e0fad5640442354e01d133a217c84daa27c7f2e1864c02384d8378c6fc53e0ebe00687dda4969e5e0c98e2a5bebf8285c360e1dfad28d8c7a54b64dac71b5bbdac3908d53822a1338b2f8a9aebbc07213f44410907b5651c24bc48d34480eba1cfc902b414cf54c716a3805cf9793e5d727d88179e2c43a2ca53ce7d3df62a3ab84f9400a56d0a835df95e53f418b3570f70c3fbf5ad95a00e17dec4168060c90f2b6e8604f1ebf47827d105c5ee345b5eb94932f233",
"SignatureAlgorithmOID": "1.2.840.113549.1.1.5",
"Subject": "C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer , G2",
"TBS": {
"MD5": "d6c7684e9aaa508cf268335f83afe040",
"SHA1": "18066d20ad92409c567cdfde745279ff71c75226",
"SHA256": "a612fb22ce8be6dab75e47c98508f98496583e79c9c97b936a8caee9ea9f3fff",
"SHA384": "35c249d6ad0261a6229b2a727067ac6ba32a5d24b30b9249051f748c7735fbe2ec2ef26a702c50df1790fbe32a65aee7"
},
"ValidFrom": "2007-06-15 00:00:00",
"ValidTo": "2012-06-14 23:59:59",
"Version": 3
},
{
"IsCertificateAuthority": true,
"SerialNumber": "47bf1995df8d524643f7db6d480d31a4",
"Signature": "4a6bf9ea58c2441c318979992b96bf82ac01d61c4ccdb08a586edf0829a35ec8ca9313e704520def47272f0038b0e4c9934e9ad4226215f73f37214f703180f18b3887b3e8e89700fecf55964e24d2a9274e7aaeb76141f32acee7c9d95eddbb2b853eb59db5d9e157ffbeb4c57ef5cf0c9ef097fe2bd33b521b1b3827f73f4a",
"SignatureAlgorithmOID": "1.2.840.113549.1.1.5",
"Subject": "C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA",
"TBS": {
"MD5": "518d2ea8a21e879c942d504824ac211c",
"SHA1": "21ce87d827077e61abddf2beba69fde5432ea031",
"SHA256": "1ec3b4f02e03930a470020e0e48d24b84678bb558f46182888d870541f5e25c7",
"SHA384": "53e346bbde23779a5d116cc9d86fdd71c97b1f1b343439f8a11aa1d3c87af63864bb8488a5aeb2d0c26a6a1e0b15f03f"
},
"ValidFrom": "2003-12-04 00:00:00",
"ValidTo": "2013-12-03 23:59:59",
"Version": 3
},
{
"IsCertificateAuthority": false,
"SerialNumber": "696d42a62da190c8cebe0345810f5372",
"Signature": "606daddb4410cea2602a13f4cf09dd9f7e3a02d740e874e42ef5f07a35d558e14b846c2df6ae7246bd61f883bd9bd9ec5664460e36de7eac97df14700074798e840a8080a70511eb08988459cba7398cdcaf6aff86e226d53eb0c32d1c2178200b44d474847033a7cd3fcb8b5ccc9126d75d35701687c83f16c6d83e1ad99c5394216cde89b2d706a83b353da7d0d1a9939fd37f2d25f85edafeffa7552d67ba4115e2977106d1986470e3eacea1396493a8f346683f2743c83a15033c57f22e6b80eb6ee51951e847f045227089e72bee8c8abc469f64f8f8aef283b4059a3a58eb5695d916c9b73a6587bb4c3ed71882f40a4ee2b9c5b7e0482e075bd8f755",
"SignatureAlgorithmOID": "1.2.840.113549.1.1.5",
"Subject": "C=CA, ST=Alberta, L=Edmonton, O=GE , OU=Digital ID Class 3 , Microsoft Software Validation v2, OU=Intelligent Platforms, CN=GE ",
"TBS": {
"MD5": "cbfc054efc981779e2e5d9f25ff0f537",
"SHA1": "b8b92324d6493e199f87f074f7b91c9ddab2658a",
"SHA256": "5996b03c1b8d5ae1fad121a487989abf91ac4ad550540591009183df9cffce29",
"SHA384": "0171dd207a27c93502245917d4bdda2afcf14ceebc3cf3bff95f1d90a5befe675372a5732f5efe975bec23df6593b97e"
},
"ValidFrom": "2010-04-08 00:00:00",
"ValidTo": "2013-04-07 23:59:59",
"Version": 3
},
{
"IsCertificateAuthority": true,
"SerialNumber": "655226e1b22e18e1590f2985ac22e75c",
"Signature": "8b03c0dd94d841a26169b015a878c730c6903c7e42f724b6e4837317047f04109ca1e2fa812febc0ca44e772e050b6551020836e9692e49a516ab43731dca52deb8c00c71d4fe74d32ba85f84ebefa675565f06abe7aca64381a101078457631f3867a030f60c2b35d9df68b6676821b59e183e5bd49a53856e5de41770e580f",
"SignatureAlgorithmOID": "1.2.840.113549.1.1.5",
"Subject": "C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009,2 CA",
"TBS": {
"MD5": "650704c342850095f3288eaf791147d4",
"SHA1": "4cdc38c800761463749c3cbd94a12f32e49877bf",
"SHA256": "07b8f662558ec85b71b43a79c6e94698144f4ced2308af21e7ba1e5d461da214",
"SHA384": "2a271d052213438467d09d60eaa4010c8642fff3eb0070e0cf9969428713c8fdc066b90996d594dd3136f5bd0af5a22a"
},
"ValidFrom": "2009-05-21 00:00:00",
"ValidTo": "2019-05-20 23:59:59",
"Version": 3
},
{
"IsCertificateAuthority": true,
"SerialNumber": "610c120600000000001b",
"Signature": "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",
"SignatureAlgorithmOID": "1.2.840.113549.1.1.5",
"Subject": "C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority",
"TBS": {
"MD5": "53c41bc1164e09e0cd1617a5bf913efd",
"SHA1": "93c03aac8951d494ecd5696b1c08658541b18727",
"SHA256": "40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b",
"SHA384": "f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"
},
"ValidFrom": "2006-05-23 17:01:29",
"ValidTo": "2016-05-23 17:11:29",
"Version": 3
}
],
"CertificatesInfo": "",
"Signer": [
{
"Issuer": "C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009,2 CA",
"SerialNumber": "696d42a62da190c8cebe0345810f5372",
"Version": 1
}
],
"SignerInfo": ""
}
Download
Certificates
Expand
Certificate 7e93ebfb7cc64e59ea4b9a77d406fc3b
Field | Value |
---|
ToBeSigned (TBS) MD5 | d0785ad36e427c92b19f6826ab1e8020 |
ToBeSigned (TBS) SHA1 | 365b7a9c21bd9373e49052c3e7b3e4646ddd4d43 |
ToBeSigned (TBS) SHA256 | c2abb7484da91a658548de089d52436175fdb760a1387d225611dc0613a1e2ff |
Subject | C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA , G2 |
ValidFrom | 2012-12-21 00:00:00 |
ValidTo | 2020-12-30 23:59:59 |
Signature | 03099b8f79ef7f5930aaef68b5fae3091dbb4f82065d375fa6529f168dea1c9209446ef56deb587c30e8f9698d23730b126f47a9ae3911f82ab19bb01ac38eeb599600adce0c4db2d031a6085c2a7afce27a1d574ca86518e979406225966ec7c7376a8321088e41eaddd9573f1d7749872a16065ea6386a2212a35119837eb6 |
SignatureAlgorithmOID | 1.2.840.113549.1.1.5 |
IsCertificateAuthority | True |
SerialNumber | 7e93ebfb7cc64e59ea4b9a77d406fc3b |
Version | 3 |
Certificate 0ecff438c8febf356e04d86a981b1a50
Field | Value |
---|
ToBeSigned (TBS) MD5 | e9d38360b914c8863f6cba3ee58764d3 |
ToBeSigned (TBS) SHA1 | 4cba8eae47b6bf76f20b3504b98b8f062694a89b |
ToBeSigned (TBS) SHA256 | 88901d86a4cc1f1bb193d08e1fb63d27452e63f83e228c657ab1a92e4ade3976 |
Subject | C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer , G4 |
ValidFrom | 2012-10-18 00:00:00 |
ValidTo | 2020-12-29 23:59:59 |
Signature | 783bb4912a004cf08f62303778a38427076f18b2de25dca0d49403aa864e259f9a40031cddcee379cb216806dab632b46dbff42c266333e449646d0de6c3670ef705a4356c7c8916c6e9b2dfb2e9dd20c6710fcd9574dcb65cdebd371f4378e678b5cd280420a3aaf14bc48829910e80d111fcdd5c766e4f5e0e4546416e0db0ea389ab13ada097110fc1c79b4807bac69f4fd9cb60c162bf17f5b093d9b5be216ca13816d002e380da8298f2ce1b2f45aa901af159c2c2f491bdb22bbc3fe789451c386b182885df03db451a179332b2e7bb9dc20091371eb6a195bcfe8a530572c89493fb9cf7fc9bf3e226863539abd6974acc51d3c7f92e0c3bc1cd80475 |
SignatureAlgorithmOID | 1.2.840.113549.1.1.5 |
IsCertificateAuthority | False |
SerialNumber | 0ecff438c8febf356e04d86a981b1a50 |
Version | 3 |
Certificate 21d1e9203b5d6fc7379869075104849a
Field | Value |
---|
ToBeSigned (TBS) MD5 | 769eb6a61bfee7586c6fc6d3f8e6980a |
ToBeSigned (TBS) SHA1 | a96b34cfe8a09e8dd8c33eafe4b2043abadcd595 |
ToBeSigned (TBS) SHA256 | f368351de9da350b7cee666ef8e555b979a530f129787ac09cad25f9138954fe |
Subject | C=CA, ST=Alberta, L=Edmonton, O=GE Intelligent Platforms Canada Company, CN=GE Intelligent Platforms Canada Company |
ValidFrom | 2016-01-29 00:00:00 |
ValidTo | 2019-01-28 23:59:59 |
Signature | 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 |
SignatureAlgorithmOID | 1.2.840.113549.1.1.11 |
IsCertificateAuthority | False |
SerialNumber | 21d1e9203b5d6fc7379869075104849a |
Version | 3 |
Certificate 3d78d7f9764960b2617df4f01eca862a
Field | Value |
---|
ToBeSigned (TBS) MD5 | 1f056ff7d5f874984dc605402b7cb042 |
ToBeSigned (TBS) SHA1 | bdb348353a2203deb4b767914fa1bd7248dd728b |
ToBeSigned (TBS) SHA256 | a08e79c386083d875014c409c13d144e0a24386132980df11ff59737c8489eb1 |
Subject | C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 SHA256 Code Signing CA |
ValidFrom | 2013-12-10 00:00:00 |
ValidTo | 2023-12-09 23:59:59 |
Signature | 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 |
SignatureAlgorithmOID | 1.2.840.113549.1.1.11 |
IsCertificateAuthority | True |
SerialNumber | 3d78d7f9764960b2617df4f01eca862a |
Version | 3 |
Certificate 611993e400000000001c
Field | Value |
---|
ToBeSigned (TBS) MD5 | 78a717e082dcc1cda3458d917e677d14 |
ToBeSigned (TBS) SHA1 | 4a872e0e51f9b304469cd1dedb496ee9b8b983a4 |
ToBeSigned (TBS) SHA256 | 317fa1d234ebc49040ebc5e8746f8997471496051b185a91bdd9dfbb23fab5f8 |
Subject | C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. , For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority , G5 |
ValidFrom | 2011-02-22 19:25:17 |
ValidTo | 2021-02-22 19:35:17 |
Signature | 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 |
SignatureAlgorithmOID | 1.2.840.113549.1.1.5 |
IsCertificateAuthority | True |
SerialNumber | 611993e400000000001c |
Version | 3 |
Imports
Expand
- ntoskrnl.exe
- HAL.dll
- WDFLDR.SYS
Imported Functions
Expand
- RtlUnwind
- KeBugCheckEx
- KeTickCount
- memcpy
- MmMapIoSpace
- IoAllocateMdl
- MmBuildMdlForNonPagedPool
- RtlCopyUnicodeString
- MmMapLockedPagesSpecifyCache
- MmUnmapLockedPages
- IoFreeMdl
- MmUnmapIoSpace
- memset
- READ_PORT_USHORT
- WRITE_PORT_USHORT
- READ_PORT_UCHAR
- WRITE_PORT_ULONG
- READ_PORT_ULONG
- WRITE_PORT_UCHAR
- WdfVersionBindClass
- WdfVersionUnbindClass
- WdfVersionBind
- WdfVersionUnbind
Exported Functions
Expand
Sections
Expand
- .text
- .rdata
- .data
- PAGE
- INIT
- .rsrc
- .reloc
Signature
Expand
{
"Certificates": [
{
"IsCertificateAuthority": false,
"SerialNumber": "3825d7faf861af9ef490e726b5d65ad5",
"Signature": "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",
"SignatureAlgorithmOID": "1.2.840.113549.1.1.5",
"Subject": "C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer , G2",
"TBS": {
"MD5": "d6c7684e9aaa508cf268335f83afe040",
"SHA1": "18066d20ad92409c567cdfde745279ff71c75226",
"SHA256": "a612fb22ce8be6dab75e47c98508f98496583e79c9c97b936a8caee9ea9f3fff",
"SHA384": "35c249d6ad0261a6229b2a727067ac6ba32a5d24b30b9249051f748c7735fbe2ec2ef26a702c50df1790fbe32a65aee7"
},
"ValidFrom": "2007-06-15 00:00:00",
"ValidTo": "2012-06-14 23:59:59",
"Version": 3
},
{
"IsCertificateAuthority": true,
"SerialNumber": "47bf1995df8d524643f7db6d480d31a4",
"Signature": "4a6bf9ea58c2441c318979992b96bf82ac01d61c4ccdb08a586edf0829a35ec8ca9313e704520def47272f0038b0e4c9934e9ad4226215f73f37214f703180f18b3887b3e8e89700fecf55964e24d2a9274e7aaeb76141f32acee7c9d95eddbb2b853eb59db5d9e157ffbeb4c57ef5cf0c9ef097fe2bd33b521b1b3827f73f4a",
"SignatureAlgorithmOID": "1.2.840.113549.1.1.5",
"Subject": "C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA",
"TBS": {
"MD5": "518d2ea8a21e879c942d504824ac211c",
"SHA1": "21ce87d827077e61abddf2beba69fde5432ea031",
"SHA256": "1ec3b4f02e03930a470020e0e48d24b84678bb558f46182888d870541f5e25c7",
"SHA384": "53e346bbde23779a5d116cc9d86fdd71c97b1f1b343439f8a11aa1d3c87af63864bb8488a5aeb2d0c26a6a1e0b15f03f"
},
"ValidFrom": "2003-12-04 00:00:00",
"ValidTo": "2013-12-03 23:59:59",
"Version": 3
},
{
"IsCertificateAuthority": false,
"SerialNumber": "696d42a62da190c8cebe0345810f5372",
"Signature": "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",
"SignatureAlgorithmOID": "1.2.840.113549.1.1.5",
"Subject": "C=CA, ST=Alberta, L=Edmonton, O=GE , OU=Digital ID Class 3 , Microsoft Software Validation v2, OU=Intelligent Platforms, CN=GE ",
"TBS": {
"MD5": "cbfc054efc981779e2e5d9f25ff0f537",
"SHA1": "b8b92324d6493e199f87f074f7b91c9ddab2658a",
"SHA256": "5996b03c1b8d5ae1fad121a487989abf91ac4ad550540591009183df9cffce29",
"SHA384": "0171dd207a27c93502245917d4bdda2afcf14ceebc3cf3bff95f1d90a5befe675372a5732f5efe975bec23df6593b97e"
},
"ValidFrom": "2010-04-08 00:00:00",
"ValidTo": "2013-04-07 23:59:59",
"Version": 3
},
{
"IsCertificateAuthority": true,
"SerialNumber": "655226e1b22e18e1590f2985ac22e75c",
"Signature": "8b03c0dd94d841a26169b015a878c730c6903c7e42f724b6e4837317047f04109ca1e2fa812febc0ca44e772e050b6551020836e9692e49a516ab43731dca52deb8c00c71d4fe74d32ba85f84ebefa675565f06abe7aca64381a101078457631f3867a030f60c2b35d9df68b6676821b59e183e5bd49a53856e5de41770e580f",
"SignatureAlgorithmOID": "1.2.840.113549.1.1.5",
"Subject": "C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009,2 CA",
"TBS": {
"MD5": "650704c342850095f3288eaf791147d4",
"SHA1": "4cdc38c800761463749c3cbd94a12f32e49877bf",
"SHA256": "07b8f662558ec85b71b43a79c6e94698144f4ced2308af21e7ba1e5d461da214",
"SHA384": "2a271d052213438467d09d60eaa4010c8642fff3eb0070e0cf9969428713c8fdc066b90996d594dd3136f5bd0af5a22a"
},
"ValidFrom": "2009-05-21 00:00:00",
"ValidTo": "2019-05-20 23:59:59",
"Version": 3
},
{
"IsCertificateAuthority": true,
"SerialNumber": "610c120600000000001b",
"Signature": "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",
"SignatureAlgorithmOID": "1.2.840.113549.1.1.5",
"Subject": "C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority",
"TBS": {
"MD5": "53c41bc1164e09e0cd1617a5bf913efd",
"SHA1": "93c03aac8951d494ecd5696b1c08658541b18727",
"SHA256": "40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b",
"SHA384": "f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"
},
"ValidFrom": "2006-05-23 17:01:29",
"ValidTo": "2016-05-23 17:11:29",
"Version": 3
}
],
"CertificatesInfo": "",
"Signer": [
{
"Issuer": "C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009,2 CA",
"SerialNumber": "696d42a62da190c8cebe0345810f5372",
"Version": 1
}
],
"SignerInfo": ""
}
Download
Certificates
Expand
Certificate 3825d7faf861af9ef490e726b5d65ad5
Field | Value |
---|
ToBeSigned (TBS) MD5 | d6c7684e9aaa508cf268335f83afe040 |
ToBeSigned (TBS) SHA1 | 18066d20ad92409c567cdfde745279ff71c75226 |
ToBeSigned (TBS) SHA256 | a612fb22ce8be6dab75e47c98508f98496583e79c9c97b936a8caee9ea9f3fff |
Subject | C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer , G2 |
ValidFrom | 2007-06-15 00:00:00 |
ValidTo | 2012-06-14 23:59:59 |
Signature | 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 |
SignatureAlgorithmOID | 1.2.840.113549.1.1.5 |
IsCertificateAuthority | False |
SerialNumber | 3825d7faf861af9ef490e726b5d65ad5 |
Version | 3 |
Certificate 47bf1995df8d524643f7db6d480d31a4
Field | Value |
---|
ToBeSigned (TBS) MD5 | 518d2ea8a21e879c942d504824ac211c |
ToBeSigned (TBS) SHA1 | 21ce87d827077e61abddf2beba69fde5432ea031 |
ToBeSigned (TBS) SHA256 | 1ec3b4f02e03930a470020e0e48d24b84678bb558f46182888d870541f5e25c7 |
Subject | C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA |
ValidFrom | 2003-12-04 00:00:00 |
ValidTo | 2013-12-03 23:59:59 |
Signature | 4a6bf9ea58c2441c318979992b96bf82ac01d61c4ccdb08a586edf0829a35ec8ca9313e704520def47272f0038b0e4c9934e9ad4226215f73f37214f703180f18b3887b3e8e89700fecf55964e24d2a9274e7aaeb76141f32acee7c9d95eddbb2b853eb59db5d9e157ffbeb4c57ef5cf0c9ef097fe2bd33b521b1b3827f73f4a |
SignatureAlgorithmOID | 1.2.840.113549.1.1.5 |
IsCertificateAuthority | True |
SerialNumber | 47bf1995df8d524643f7db6d480d31a4 |
Version | 3 |
Certificate 696d42a62da190c8cebe0345810f5372
Field | Value |
---|
ToBeSigned (TBS) MD5 | cbfc054efc981779e2e5d9f25ff0f537 |
ToBeSigned (TBS) SHA1 | b8b92324d6493e199f87f074f7b91c9ddab2658a |
ToBeSigned (TBS) SHA256 | 5996b03c1b8d5ae1fad121a487989abf91ac4ad550540591009183df9cffce29 |
Subject | C=CA, ST=Alberta, L=Edmonton, O=GE , OU=Digital ID Class 3 , Microsoft Software Validation v2, OU=Intelligent Platforms, CN=GE |
ValidFrom | 2010-04-08 00:00:00 |
ValidTo | 2013-04-07 23:59:59 |
Signature | 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 |
SignatureAlgorithmOID | 1.2.840.113549.1.1.5 |
IsCertificateAuthority | False |
SerialNumber | 696d42a62da190c8cebe0345810f5372 |
Version | 3 |
Certificate 655226e1b22e18e1590f2985ac22e75c
Field | Value |
---|
ToBeSigned (TBS) MD5 | 650704c342850095f3288eaf791147d4 |
ToBeSigned (TBS) SHA1 | 4cdc38c800761463749c3cbd94a12f32e49877bf |
ToBeSigned (TBS) SHA256 | 07b8f662558ec85b71b43a79c6e94698144f4ced2308af21e7ba1e5d461da214 |
Subject | C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009,2 CA |
ValidFrom | 2009-05-21 00:00:00 |
ValidTo | 2019-05-20 23:59:59 |
Signature | 8b03c0dd94d841a26169b015a878c730c6903c7e42f724b6e4837317047f04109ca1e2fa812febc0ca44e772e050b6551020836e9692e49a516ab43731dca52deb8c00c71d4fe74d32ba85f84ebefa675565f06abe7aca64381a101078457631f3867a030f60c2b35d9df68b6676821b59e183e5bd49a53856e5de41770e580f |
SignatureAlgorithmOID | 1.2.840.113549.1.1.5 |
IsCertificateAuthority | True |
SerialNumber | 655226e1b22e18e1590f2985ac22e75c |
Version | 3 |
Imports
Expand
- ntoskrnl.exe
- HAL.dll
- WDFLDR.SYS
Imported Functions
Expand
- RtlUnwind
- KeBugCheckEx
- KeTickCount
- memcpy
- MmMapIoSpace
- IoAllocateMdl
- MmBuildMdlForNonPagedPool
- RtlCopyUnicodeString
- MmMapLockedPagesSpecifyCache
- MmUnmapLockedPages
- IoFreeMdl
- MmUnmapIoSpace
- memset
- READ_PORT_USHORT
- WRITE_PORT_USHORT
- READ_PORT_UCHAR
- WRITE_PORT_ULONG
- READ_PORT_ULONG
- WRITE_PORT_UCHAR
- WdfVersionBindClass
- WdfVersionUnbindClass
- WdfVersionBind
- WdfVersionUnbind
Exported Functions
Expand
Sections
Expand
- .text
- .rdata
- .data
- PAGE
- INIT
- .rsrc
- .reloc
Signature
Expand
{
"Certificates": [
{
"IsCertificateAuthority": false,
"SerialNumber": "3825d7faf861af9ef490e726b5d65ad5",
"Signature": "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",
"SignatureAlgorithmOID": "1.2.840.113549.1.1.5",
"Subject": "C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer , G2",
"TBS": {
"MD5": "d6c7684e9aaa508cf268335f83afe040",
"SHA1": "18066d20ad92409c567cdfde745279ff71c75226",
"SHA256": "a612fb22ce8be6dab75e47c98508f98496583e79c9c97b936a8caee9ea9f3fff",
"SHA384": "35c249d6ad0261a6229b2a727067ac6ba32a5d24b30b9249051f748c7735fbe2ec2ef26a702c50df1790fbe32a65aee7"
},
"ValidFrom": "2007-06-15 00:00:00",
"ValidTo": "2012-06-14 23:59:59",
"Version": 3
},
{
"IsCertificateAuthority": true,
"SerialNumber": "47bf1995df8d524643f7db6d480d31a4",
"Signature": "4a6bf9ea58c2441c318979992b96bf82ac01d61c4ccdb08a586edf0829a35ec8ca9313e704520def47272f0038b0e4c9934e9ad4226215f73f37214f703180f18b3887b3e8e89700fecf55964e24d2a9274e7aaeb76141f32acee7c9d95eddbb2b853eb59db5d9e157ffbeb4c57ef5cf0c9ef097fe2bd33b521b1b3827f73f4a",
"SignatureAlgorithmOID": "1.2.840.113549.1.1.5",
"Subject": "C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA",
"TBS": {
"MD5": "518d2ea8a21e879c942d504824ac211c",
"SHA1": "21ce87d827077e61abddf2beba69fde5432ea031",
"SHA256": "1ec3b4f02e03930a470020e0e48d24b84678bb558f46182888d870541f5e25c7",
"SHA384": "53e346bbde23779a5d116cc9d86fdd71c97b1f1b343439f8a11aa1d3c87af63864bb8488a5aeb2d0c26a6a1e0b15f03f"
},
"ValidFrom": "2003-12-04 00:00:00",
"ValidTo": "2013-12-03 23:59:59",
"Version": 3
},
{
"IsCertificateAuthority": false,
"SerialNumber": "696d42a62da190c8cebe0345810f5372",
"Signature": "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",
"SignatureAlgorithmOID": "1.2.840.113549.1.1.5",
"Subject": "C=CA, ST=Alberta, L=Edmonton, O=GE , OU=Digital ID Class 3 , Microsoft Software Validation v2, OU=Intelligent Platforms, CN=GE ",
"TBS": {
"MD5": "cbfc054efc981779e2e5d9f25ff0f537",
"SHA1": "b8b92324d6493e199f87f074f7b91c9ddab2658a",
"SHA256": "5996b03c1b8d5ae1fad121a487989abf91ac4ad550540591009183df9cffce29",
"SHA384": "0171dd207a27c93502245917d4bdda2afcf14ceebc3cf3bff95f1d90a5befe675372a5732f5efe975bec23df6593b97e"
},
"ValidFrom": "2010-04-08 00:00:00",
"ValidTo": "2013-04-07 23:59:59",
"Version": 3
},
{
"IsCertificateAuthority": true,
"SerialNumber": "655226e1b22e18e1590f2985ac22e75c",
"Signature": "8b03c0dd94d841a26169b015a878c730c6903c7e42f724b6e4837317047f04109ca1e2fa812febc0ca44e772e050b6551020836e9692e49a516ab43731dca52deb8c00c71d4fe74d32ba85f84ebefa675565f06abe7aca64381a101078457631f3867a030f60c2b35d9df68b6676821b59e183e5bd49a53856e5de41770e580f",
"SignatureAlgorithmOID": "1.2.840.113549.1.1.5",
"Subject": "C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009,2 CA",
"TBS": {
"MD5": "650704c342850095f3288eaf791147d4",
"SHA1": "4cdc38c800761463749c3cbd94a12f32e49877bf",
"SHA256": "07b8f662558ec85b71b43a79c6e94698144f4ced2308af21e7ba1e5d461da214",
"SHA384": "2a271d052213438467d09d60eaa4010c8642fff3eb0070e0cf9969428713c8fdc066b90996d594dd3136f5bd0af5a22a"
},
"ValidFrom": "2009-05-21 00:00:00",
"ValidTo": "2019-05-20 23:59:59",
"Version": 3
},
{
"IsCertificateAuthority": true,
"SerialNumber": "610c120600000000001b",
"Signature": "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",
"SignatureAlgorithmOID": "1.2.840.113549.1.1.5",
"Subject": "C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority",
"TBS": {
"MD5": "53c41bc1164e09e0cd1617a5bf913efd",
"SHA1": "93c03aac8951d494ecd5696b1c08658541b18727",
"SHA256": "40bddadac24dc61ca4fb5cab2a2bc5d876bc36808311039a7a3e1a4066f7489b",
"SHA384": "f51d4e75ba638f7314cd59b8d6d45f3b34d35ce6986e9d205cd6f333e8e8d8e9c91f636e6bc84731b6661673f40963d8"
},
"ValidFrom": "2006-05-23 17:01:29",
"ValidTo": "2016-05-23 17:11:29",
"Version": 3
}
],
"CertificatesInfo": "",
"Signer": [
{
"Issuer": "C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009,2 CA",
"SerialNumber": "696d42a62da190c8cebe0345810f5372",
"Version": 1
}
],
"SignerInfo": ""
}
source
last_updated: 2024-09-26