QQPCDownload140059.exe - 7ZSfxMod_x86.exe

info
MZ
PE
resources
imports
foremost
7zip
version info
signature
hexdump
disasm
log
discuss
donate

filename	QQPCDownload140059.exe
size	1938560 (0x1d9480)
md5	0523fcdd19f48da18711e8d6810fd289

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x60
blocks_in_file	1
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xe8

Rich Header

lib id	version	times used
4	8047	2
11	8047	1
14	7299	7
10	8047	11
147	30729	15
1	0	196
149	30729	1
131	30729	7
132	30729	45
148	21022	1
145	30729	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 52 65  |........!..L.!Re|
00000010: 71 75 69 72 65 20 57 69  6e 64 6f 77 73 0d 0a 24  |quire Windows..$|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	4
TimeDateStamp	0x4ddbcbb1
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x103
Magic	0x10b
LinkerVersion	9.0
SizeOfCode	0x11a00
SizeOfInitializedData	0x4c400
SizeOfUninitializedData	0
AddressOfEntryPoint	0x123df
BaseOfCode	0x1000
BaseOfData	0x13000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	5.0
ImageVersion	0.0
SubsystemVersion	5.0
Reserved1	0
SizeOfImage	0x63000
SizeOfHeaders	0x400
CheckSum	0x1e482d
Subsystem	2
DllCharacteristics	0x8000
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v6.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x11913	0x11a00	R-X CODE
.rdata	0x13000	0x352c	0x3600	R-- IDATA
.data	0x17000	0x296c	0x800	RW- IDATA
.rsrc	0x1a000	0x4852c	0x48600	R-- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x1550c	0xb4
RESOURCE	0x1a000	0x4852c
EXCEPTION	0	0
SECURITY	0x1d7648	0x1e38
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x13000	0x310
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
ICON	#1	296	1252
ICON	#2	3752	1252
ICON	#3	2216	1252
ICON	#4	1384	1252
ICON	#5	270376	1252
ICON	#6	9640	1252
ICON	#7	4264	1252
ICON	#8	1128	1252
GROUP_ICON	#101	118	1252
VERSION	#1	844	1252
MANIFEST	#1	1574	1252

module_name	hint	ord	function_name
COMCTL32.dll		17
KERNEL32.dll	490		GetFileAttributesW
KERNEL32.dll	129		CreateDirectoryW
KERNEL32.dll	1317		WriteFile
KERNEL32.dll	612		GetStdHandle
KERNEL32.dll	1260		VirtualFree
KERNEL32.dll	536		GetModuleHandleW
KERNEL32.dll	581		GetProcAddress
KERNEL32.dll	828		LoadLibraryA
KERNEL32.dll	852		LockResource
KERNEL32.dll	833		LoadResource
KERNEL32.dll	1201		SizeofResource
KERNEL32.dll	332		FindResourceExA
KERNEL32.dll	870		MulDiv
KERNEL32.dll	698		GlobalFree
KERNEL32.dll	691		GlobalAlloc
KERNEL32.dll	1348		lstrcmpiA
KERNEL32.dll	619		GetSystemDefaultLCID
KERNEL32.dll	622		GetSystemDefaultUILanguage
KERNEL32.dll	670		GetUserDefaultUILanguage
KERNEL32.dll	1358		lstrlenW
KERNEL32.dll	1349		lstrcmpiW
KERNEL32.dll	476		GetEnvironmentVariableW
KERNEL32.dll	1346		lstrcmpW
KERNEL32.dll	704		GlobalMemoryStatusEx
KERNEL32.dll	1257		VirtualAlloc
KERNEL32.dll	871		MultiByteToWideChar
KERNEL32.dll	1297		WideCharToMultiByte
KERNEL32.dll	285		ExpandEnvironmentStringsW
KERNEL32.dll	1357		lstrlenA
KERNEL32.dll	1027		RemoveDirectoryW
KERNEL32.dll	302		FindClose
KERNEL32.dll	325		FindNextFileW
KERNEL32.dll	214		DeleteFileW
KERNEL32.dll	313		FindFirstFileW
KERNEL32.dll	1175		SetThreadLocale
KERNEL32.dll	515		GetLocalTime
KERNEL32.dll	633		GetSystemTimeAsFileTime
KERNEL32.dll	645		GetTempPathW
KERNEL32.dll	1111		SetEnvironmentVariableW
KERNEL32.dll	82		CloseHandle
KERNEL32.dll	143		CreateFileW
KERNEL32.dll	467		GetDriveTypeW
KERNEL32.dll	1101		SetCurrentDirectoryW
KERNEL32.dll	532		GetModuleFileNameW
KERNEL32.dll	391		GetCommandLineW
KERNEL32.dll	676		GetVersionExW
KERNEL32.dll	133		CreateEventW
KERNEL32.dll	1113		SetEvent
KERNEL32.dll	1039		ResetEvent
KERNEL32.dll	738		InitializeCriticalSection
KERNEL32.dll	1217		TerminateThread
KERNEL32.dll	1043		ResumeThread
KERNEL32.dll	1210		SuspendThread
KERNEL32.dll	759		IsBadReadPtr
KERNEL32.dll	840		LocalFree
KERNEL32.dll	1352		lstrcpyW
KERNEL32.dll	350		FormatMessageW
KERNEL32.dll	624		GetSystemDirectoryW
KERNEL32.dll	209		DeleteCriticalSection
KERNEL32.dll	496		GetFileSize
KERNEL32.dll	1126		SetFilePointer
KERNEL32.dll	960		ReadFile
KERNEL32.dll	1130		SetFileTime
KERNEL32.dll	1107		SetEndOfFile
KERNEL32.dll	238		EnterCriticalSection
KERNEL32.dll	825		LeaveCriticalSection
KERNEL32.dll	1271		WaitForMultipleObjects
KERNEL32.dll	533		GetModuleHandleA
KERNEL32.dll	1213		SystemTimeToFileTime
KERNEL32.dll	514		GetLastError
KERNEL32.dll	181		CreateThread
KERNEL32.dll	1273		WaitForSingleObject
KERNEL32.dll	480		GetExitCodeThread
KERNEL32.dll	1202		Sleep
KERNEL32.dll	1139		SetLastError
KERNEL32.dll	1121		SetFileAttributesW
KERNEL32.dll	462		GetDiskFreeSpaceExW
KERNEL32.dll	1343		lstrcatW
KERNEL32.dll	281		ExitProcess
KERNEL32.dll	96		CompareFileTime
KERNEL32.dll	610		GetStartupInfoA
USER32.dll	636		SendMessageW
USER32.dll	60		CharUpperW
USER32.dll	166		DestroyWindow
USER32.dll	613		ReleaseDC
USER32.dll	483		KillTimer
USER32.dll	175		DispatchMessageW
USER32.dll	349		GetMessageW
USER32.dll	699		SetTimer
USER32.dll	110		CreateWindowExW
USER32.dll	819		wsprintfW
USER32.dll	621		ScreenToClient
USER32.dll	412		GetWindowRect
USER32.dll	356		GetParent
USER32.dll	381		GetSystemMenu
USER32.dll	214		EnableMenuItem
USER32.dll	216		EnableWindow
USER32.dll	525		MessageBeep
USER32.dll	493		LoadIconW
USER32.dll	495		LoadImageW
USER32.dll	821		wvsprintfW
USER32.dll	475		IsWindow
USER32.dll	156		DefWindowProcW
USER32.dll	30		CallWindowProcW
USER32.dll	200		DrawIconEx
USER32.dll	170		DialogBoxIndirectParamW
USER32.dll	398		GetWindow
USER32.dll	71		ClientToScreen
USER32.dll	289		GetDC
USER32.dll	208		DrawTextW
USER32.dll	735		ShowWindow
USER32.dll	748		SystemParametersInfoW
USER32.dll	658		SetFocus
USER32.dll	708		SetWindowLongW
USER32.dll	382		GetSystemMetrics
USER32.dll	276		GetClientRect
USER32.dll	295		GetDlgItem
USER32.dll	317		GetKeyState
USER32.dll	818		wsprintfA
USER32.dll	526		MessageBoxA
USER32.dll	715		SetWindowTextW
USER32.dll	379		GetSysColor
USER32.dll	418		GetWindowTextLengthW
USER32.dll	419		GetWindowTextW
USER32.dll	273		GetClassNameA
USER32.dll	406		GetWindowLongW
USER32.dll	84		CopyImage
USER32.dll	710		SetWindowPos
USER32.dll	402		GetWindowDC
USER32.dll	218		EndDialog
USER32.dll	331		GetMenu
GDI32.dll	452		GetCurrentObject
GDI32.dll	691		StretchBlt
GDI32.dll	674		SetStretchBltMode
GDI32.dll	47		CreateCompatibleBitmap
GDI32.dll	631		SelectObject
GDI32.dll	48		CreateCompatibleDC
GDI32.dll	509		GetObjectW
GDI32.dll	459		GetDeviceCaps
GDI32.dll	230		DeleteObject
GDI32.dll	64		CreateFontIndirectW
GDI32.dll	227		DeleteDC
SHELL32.dll	189		SHGetFileInfoW
SHELL32.dll	123		SHBrowseForFolderW
SHELL32.dll	215		SHGetPathFromIDListW
SHELL32.dll	207		SHGetMalloc
SHELL32.dll	290		ShellExecuteW
SHELL32.dll	225		SHGetSpecialFolderPathW
SHELL32.dll	289		ShellExecuteExW
ole32.dll	62		CoInitialize
ole32.dll	134		CreateStreamOnHGlobal
ole32.dll	16		CoCreateInstance
OLEAUT32.dll		9
OLEAUT32.dll		418
OLEAUT32.dll		2
MSVCRT.dll	129		__set_app_type
MSVCRT.dll	111		__p__fmode
MSVCRT.dll	106		__p__commode
MSVCRT.dll	157		_adjust_fdiv
MSVCRT.dll	131		__setusermatherr
MSVCRT.dll	271		_initterm
MSVCRT.dll	88		__getmainargs
MSVCRT.dll	143		_acmdln
MSVCRT.dll	585		exit
MSVCRT.dll	72		_XcptFilter
MSVCRT.dll	211		_exit
MSVCRT.dll	14		public: virtual __thiscall type_info::~type_info(void) ??1type_info@@UAE@XZ
MSVCRT.dll	390		_onexit
MSVCRT.dll	85		__dllonexit
MSVCRT.dll	65		_CxxThrowException
MSVCRT.dll	166		_beginthreadex
MSVCRT.dll	37		int (__cdecl__cdecl _set_new_handler(int (__cdecl)(unsigned int)))(unsigned int) ?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
MSVCRT.dll	665		memset
MSVCRT.dll	494		_wcsnicmp
MSVCRT.dll	558		_wtol
MSVCRT.dll	704		strncmp
MSVCRT.dll	657		malloc
MSVCRT.dll	664		memmove
MSVCRT.dll	739		wcscpy
MSVCRT.dll	663		memcpy
MSVCRT.dll	606		free
MSVCRT.dll	662		memcmp
MSVCRT.dll	402		_purecall
MSVCRT.dll	15		void * __cdecl operator new(unsigned int) ??2@YAPAXI@Z
MSVCRT.dll	16		void __cdecl operator delete(void *) ??3@YAXPAX@Z
MSVCRT.dll	202		_except_handler3
MSVCRT.dll	183		_controlfp

StringTable 000004b0

CompanyName	Oleg N. Scherbakov
FileDescription	7z Setup SFX (x86)
FileVersion	1.4.1.2100
InternalName	7ZSfxMod
LegalCopyright	Copyright © 2005-2010 Oleg N. Scherbakov
OriginalFilename	7ZSfxMod_x86.exe
PrivateBuild	2011-04-28
ProductName	7-Zip SFX
ProductVersion	1.4.1.2100

VS_FIXEDFILEINFO

FileVersion	1.4.1.2100
ProductVersion	1.4.1.2100
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	8
FileOS	0x40004
FileType	1
FileSubtype	0

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa (c)10/CN=VeriSign Class 3 Code Signing 2010 CA

serial: 7170BD93CF3F189AE6452B514C49340E

Certificates (5)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
        Validity
            Not Before: Dec 21 00:00:00 2012 GMT
            Not After : Dec 30 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:b3:49:54:4b:97:1c:12:0a:d8:25:79:91:
                    22:57:2a:6f:dc:b8:26:c4:43:73:6b:c2:bf:2e:50:
                    5a:fb:14:c2:76:8e:43:01:25:43:b4:a1:e2:45:f4:
                    e8:b7:7b:c3:74:cc:22:d7:b4:94:00:02:f7:4d:ed:
                    bf:b4:b7:44:24:6b:cd:5f:45:3b:d1:44:ce:43:12:
                    73:17:82:8b:69:b4:2b:cb:99:1e:ac:72:1b:26:4d:
                    71:1f:b1:31:dd:fb:51:61:02:53:a6:aa:f5:49:2c:
                    05:78:45:a5:2f:89:ce:e7:99:e7:fe:8c:e2:57:3f:
                    3d:c6:92:dc:4a:f8:7b:33:e4:79:0a:fb:f0:75:88:
                    41:9c:ff:c5:03:51:99:aa:d7:6c:9f:93:69:87:65:
                    29:83:85:c2:60:14:c4:c8:c9:3b:14:da:c0:81:f0:
                    1f:0d:74:de:92:22:ab:ca:f7:fb:74:7c:27:e6:f7:
                    4a:1b:7f:a7:c3:9e:2d:ae:8a:ea:a6:e6:aa:27:16:
                    7d:61:f7:98:71:11:bc:e2:50:a1:4b:e5:5d:fa:e5:
                    0e:a7:2c:9f:aa:65:20:d3:d8:96:e8:c8:7c:a5:4e:
                    48:44:ff:19:e2:44:07:92:0b:d7:68:84:80:5d:6a:
                    78:64:45:cd:60:46:7e:54:c1:13:7c:c5:79:f1:c9:
                    c1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD
            Authority Information Access: 
                OCSP - URI:http://ocsp.thawte.com

            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.thawte.com/ThawteTimestampingCA.crl

            X509v3 Extended Key Usage: 
                Time Stamping
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-1
    Signature Algorithm: sha1WithRSAEncryption
         03:09:9b:8f:79:ef:7f:59:30:aa:ef:68:b5:fa:e3:09:1d:bb:
         4f:82:06:5d:37:5f:a6:52:9f:16:8d:ea:1c:92:09:44:6e:f5:
         6d:eb:58:7c:30:e8:f9:69:8d:23:73:0b:12:6f:47:a9:ae:39:
         11:f8:2a:b1:9b:b0:1a:c3:8e:eb:59:96:00:ad:ce:0c:4d:b2:
         d0:31:a6:08:5c:2a:7a:fc:e2:7a:1d:57:4c:a8:65:18:e9:79:
         40:62:25:96:6e:c7:c7:37:6a:83:21:08:8e:41:ea:dd:d9:57:
         3f:1d:77:49:87:2a:16:06:5e:a6:38:6a:22:12:a3:51:19:83:
         7e:b6

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Validity
            Not Before: Oct 18 00:00:00 2012 GMT
            Not After : Dec 29 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer - G4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:63:0b:39:44:b8:bb:23:a7:44:49:bb:0e:ff:
                    a1:f0:61:0a:53:93:b0:98:db:ad:2c:0f:4a:c5:6e:
                    ff:86:3c:53:55:0f:15:ce:04:3f:2b:fd:a9:96:96:
                    d9:be:61:79:0b:5b:c9:4c:86:76:e5:e0:43:4b:22:
                    95:ee:c2:2b:43:c1:9f:d8:68:b4:8e:40:4f:ee:85:
                    38:b9:11:c5:23:f2:64:58:f0:15:32:6f:4e:57:a1:
                    ae:88:a4:02:d7:2a:1e:cd:4b:e1:dd:63:d5:17:89:
                    32:5b:b0:5e:99:5a:a8:9d:28:50:0e:17:ee:96:db:
                    61:3b:45:51:1d:cf:12:56:0b:92:47:fc:ab:ae:f6:
                    66:3d:47:ac:70:72:e7:92:e7:5f:cd:10:b9:c4:83:
                    64:94:19:bd:25:80:e1:e8:d2:22:a5:d0:ba:02:7a:
                    a1:77:93:5b:65:c3:ee:17:74:bc:41:86:2a:dc:08:
                    4c:8c:92:8c:91:2d:9e:77:44:1f:68:d6:a8:74:77:
                    db:0e:5b:32:8b:56:8b:33:bd:d9:63:c8:49:9d:3a:
                    c5:c5:ea:33:0b:d2:f1:a3:1b:f4:8b:be:d9:b3:57:
                    8b:3b:de:04:a7:7a:22:b2:24:ae:2e:c7:70:c5:be:
                    4e:83:26:08:fb:0b:bd:a9:4f:99:08:e1:10:28:72:
                    aa:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                OCSP - URI:http://ts-ocsp.ws.symantec.com
                CA Issuers - URI:http://ts-aia.ws.symantec.com/tss-ca-g2.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ts-crl.ws.symantec.com/tss-ca-g2.crl

            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-2
            X509v3 Subject Key Identifier: 
                46:C6:69:A3:0E:4A:14:1E:D5:4C:DA:52:63:17:3F:5E:36:BC:0D:E6
            X509v3 Authority Key Identifier: 
                keyid:5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD

    Signature Algorithm: sha1WithRSAEncryption
         78:3b:b4:91:2a:00:4c:f0:8f:62:30:37:78:a3:84:27:07:6f:
         18:b2:de:25:dc:a0:d4:94:03:aa:86:4e:25:9f:9a:40:03:1c:
         dd:ce:e3:79:cb:21:68:06:da:b6:32:b4:6d:bf:f4:2c:26:63:
         33:e4:49:64:6d:0d:e6:c3:67:0e:f7:05:a4:35:6c:7c:89:16:
         c6:e9:b2:df:b2:e9:dd:20:c6:71:0f:cd:95:74:dc:b6:5c:de:
         bd:37:1f:43:78:e6:78:b5:cd:28:04:20:a3:aa:f1:4b:c4:88:
         29:91:0e:80:d1:11:fc:dd:5c:76:6e:4f:5e:0e:45:46:41:6e:
         0d:b0:ea:38:9a:b1:3a:da:09:71:10:fc:1c:79:b4:80:7b:ac:
         69:f4:fd:9c:b6:0c:16:2b:f1:7f:5b:09:3d:9b:5b:e2:16:ca:
         13:81:6d:00:2e:38:0d:a8:29:8f:2c:e1:b2:f4:5a:a9:01:af:
         15:9c:2c:2f:49:1b:db:22:bb:c3:fe:78:94:51:c3:86:b1:82:
         88:5d:f0:3d:b4:51:a1:79:33:2b:2e:7b:b9:dc:20:09:13:71:
         eb:6a:19:5b:cf:e8:a5:30:57:2c:89:49:3f:b9:cf:7f:c9:bf:
         3e:22:68:63:53:9a:bd:69:74:ac:c5:1d:3c:7f:92:e0:c3:bc:
         1c:d8:04:75

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority
        Validity
            Not Before: Nov  8 00:00:00 2006 GMT
            Not After : Nov  7 23:59:59 2021 GMT
        Subject: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:24:08:08:29:7a:35:9e:60:0c:aa:e7:4b:3b:
                    4e:dc:7c:bc:3c:45:1c:bb:2b:e0:fe:29:02:f9:57:
                    08:a3:64:85:15:27:f5:f1:ad:c8:31:89:5d:22:e8:
                    2a:aa:a6:42:b3:8f:f8:b9:55:b7:b1:b7:4b:b3:fe:
                    8f:7e:07:57:ec:ef:43:db:66:62:15:61:cf:60:0d:
                    a4:d8:de:f8:e0:c3:62:08:3d:54:13:eb:49:ca:59:
                    54:85:26:e5:2b:8f:1b:9f:eb:f5:a1:91:c2:33:49:
                    d8:43:63:6a:52:4b:d2:8f:e8:70:51:4d:d1:89:69:
                    7b:c7:70:f6:b3:dc:12:74:db:7b:5d:4b:56:d3:96:
                    bf:15:77:a1:b0:f4:a2:25:f2:af:1c:92:67:18:e5:
                    f4:06:04:ef:90:b9:e4:00:e4:dd:3a:b5:19:ff:02:
                    ba:f4:3c:ee:e0:8b:eb:37:8b:ec:f4:d7:ac:f2:f6:
                    f0:3d:af:dd:75:91:33:19:1d:1c:40:cb:74:24:19:
                    21:93:d9:14:fe:ac:2a:52:c7:8f:d5:04:49:e4:8d:
                    63:47:88:3c:69:83:cb:fe:47:bd:2b:7e:4f:c5:95:
                    ae:0e:9d:d4:d1:43:c0:67:73:e3:14:08:7e:e5:3f:
                    9f:73:b8:33:0a:cf:5d:3f:34:87:96:8a:ee:53:e8:
                    25:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.verisign.com/pca3.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: https://www.verisign.com/cps

            X509v3 Subject Key Identifier: 
                7F:D3:65:A7:C2:DD:EC:BB:F0:30:09:F3:43:39:FA:02:AF:33:31:33
            1.3.6.1.5.5.7.1.12: 
                0_.].[0Y0W0U..image/gif0!0.0...+..............k...j.H.,{..0%.#http://logo.verisign.com/vslogo.gif
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com

            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication, Code Signing, Netscape Server Gated Crypto, 2.16.840.1.113733.1.8.1
    Signature Algorithm: sha1WithRSAEncryption
         13:02:dd:f8:e8:86:00:f2:5a:f8:f8:20:0c:59:88:62:07:ce:
         ce:f7:4e:f9:bb:59:a1:98:e5:e1:38:dd:4e:bc:66:18:d3:ad:
         eb:18:f2:0d:c9:6d:3e:4a:94:20:c3:3c:ba:bd:65:54:c6:af:
         44:b3:10:ad:2c:6b:3e:ab:d7:07:b6:b8:81:63:c5:f9:5e:2e:
         e5:2a:67:ce:cd:33:0c:2a:d7:89:56:03:23:1f:b3:be:e8:3a:
         08:59:b4:ec:45:35:f7:8a:5b:ff:66:cf:50:af:c6:6d:57:8d:
         19:78:b7:b9:a2:d1:57:ea:1f:9a:4b:af:ba:c9:8e:12:7e:c6:
         bd:ff

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:70:bd:93:cf:3f:18:9a:e6:45:2b:51:4c:49:34:0e
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA
        Validity
            Not Before: Jan 17 00:00:00 2013 GMT
            Not After : Feb 16 23:59:59 2016 GMT
        Subject: C=CN, ST=guangdong, L=shenzhen, O=Tencent Technology(Shenzhen) Company Limited, OU=Digital ID Class 3 - Microsoft Software Validation v2, CN=Tencent Technology(Shenzhen) Company Limited
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:25:00:5e:7a:9b:96:d3:7c:36:3b:24:16:2f:
                    bb:55:58:cc:3a:e9:86:d5:a5:7b:fa:41:67:0c:98:
                    57:6e:d9:41:34:cc:ad:40:fd:67:e8:9c:47:4c:53:
                    63:d1:5d:dc:bc:7f:a3:a1:40:d9:9b:78:3e:97:3c:
                    12:1a:54:c9:d4:17:42:82:2e:80:bd:05:84:e2:32:
                    db:f0:6c:78:a7:0c:0b:e0:ab:8f:d6:9f:28:11:cd:
                    bc:78:a5:10:3f:61:2c:59:d2:00:57:6a:58:dd:50:
                    c6:73:aa:bc:9d:4c:fa:26:76:fa:e1:a7:32:6b:56:
                    dc:a5:54:6b:82:c7:ee:8e:00:c2:61:4d:11:f5:c5:
                    30:1e:0f:67:09:91:76:d8:d4:f0:ff:86:4b:e9:b8:
                    de:77:fc:f9:7a:0b:0e:f9:2a:20:45:95:c3:8e:f8:
                    7c:b7:aa:64:09:87:4f:15:27:18:c3:30:b2:2d:4a:
                    ab:e5:35:84:15:ff:b8:99:66:48:64:1a:2f:ed:c5:
                    25:42:42:b6:c8:b8:8a:30:67:e3:03:af:50:19:b6:
                    02:93:8f:d8:96:de:6e:5e:20:87:1b:a4:8e:91:fd:
                    47:5b:72:40:5d:1b:6f:a9:43:13:20:fb:cc:03:69:
                    0b:b8:83:68:d4:05:a5:33:d7:36:a4:e9:91:12:fd:
                    41:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://csc3-2010-crl.verisign.com/CSC3-2010.crl

            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/rpa

            X509v3 Extended Key Usage: 
                Code Signing
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com
                CA Issuers - URI:http://csc3-2010-aia.verisign.com/CSC3-2010.cer

            X509v3 Authority Key Identifier: 
                keyid:CF:99:A9:EA:7B:26:F4:4B:C9:8E:8F:D7:F0:05:26:EF:E3:D2:A7:9D

            Netscape Cert Type: 
                Object Signing
            1.3.6.1.4.1.311.2.1.27: 
                0.......
    Signature Algorithm: sha1WithRSAEncryption
         9f:96:59:fc:e8:5d:90:d2:01:d4:b2:19:8f:ad:71:67:0d:f1:
         0a:38:f7:42:ba:56:b1:f9:92:28:31:c4:e9:4c:db:79:f8:77:
         72:be:bd:7d:b0:76:df:c2:e2:ad:10:8c:39:47:c3:0e:db:c4:
         c5:14:aa:a1:9b:96:ef:c2:c4:dd:8a:1b:2e:8a:f2:e9:9f:9c:
         2d:67:77:a3:75:95:5c:c2:69:c1:8a:9e:e3:40:d8:d2:35:aa:
         d0:f4:ef:95:8e:fb:56:fc:28:c0:14:7b:1f:bb:1d:34:18:be:
         5a:53:b8:6b:1f:32:0b:1c:1d:96:72:ae:66:90:80:1a:89:02:
         e8:29:5d:c2:68:9c:4a:b8:d4:fb:4b:cd:e5:6a:0e:05:70:b0:
         9b:3b:3e:7d:83:94:88:21:d9:cc:e1:fe:ef:b3:52:22:b9:ba:
         40:3e:47:bf:f6:bf:0d:b6:f5:53:7b:22:20:1b:05:82:7d:d8:
         40:cc:9e:64:e2:3e:a2:85:56:73:f4:76:87:5e:da:f1:a9:41:
         e0:4b:3b:da:23:58:c1:0b:9d:d2:38:75:4b:fc:39:6e:a7:4f:
         d6:3a:44:09:2b:ca:b2:b3:cf:b0:7f:18:70:ce:a0:f5:75:4d:
         45:c8:2e:19:ea:72:22:7f:35:bd:da:f1:d1:d1:38:3f:fa:2f:
         61:25:a8:fe

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
        Validity
            Not Before: Feb  8 00:00:00 2010 GMT
            Not After : Feb  7 23:59:59 2020 GMT
        Subject: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:23:4b:5e:a5:d7:8a:bb:32:e9:d4:57:f7:ef:
                    e4:c7:26:7e:ad:19:98:fe:a8:9d:7d:94:f6:36:6b:
                    10:d7:75:81:30:7f:04:68:7f:cb:2b:75:1e:cd:1d:
                    08:8c:df:69:94:a7:37:a3:9c:7b:80:e0:99:e1:ee:
                    37:4d:5f:ce:3b:14:ee:86:d4:d0:f5:27:35:bc:25:
                    0b:38:a7:8c:63:9d:17:a3:08:a5:ab:b0:fb:cd:6a:
                    62:82:4c:d5:21:da:1b:d9:f1:e3:84:3b:8a:2a:4f:
                    85:5b:90:01:4f:c9:a7:76:10:7f:27:03:7c:be:ae:
                    7e:7d:c1:dd:f9:05:bc:1b:48:9c:69:e7:c0:a4:3c:
                    3c:41:00:3e:df:96:e5:c5:e4:94:71:d6:55:01:c7:
                    00:26:4a:40:3c:b5:a1:26:a9:0c:a7:6d:80:8e:90:
                    25:7b:cf:bf:3f:1c:eb:2f:96:fa:e5:87:77:c6:b5:
                    56:b2:7a:3b:54:30:53:1b:df:62:34:ff:1e:d1:f4:
                    5a:93:28:85:e5:4c:17:4e:7e:5b:fd:a4:93:99:7f:
                    df:cd:ef:a4:75:ef:ef:15:f6:47:e7:f8:19:72:d8:
                    2e:34:1a:a6:b4:a7:4c:7e:bd:bb:4f:0c:3d:57:f1:
                    30:d6:a6:36:8e:d6:80:76:d7:19:2e:a5:cd:7e:34:
                    2d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/cps
                  User Notice:
                    Explicit Text: https://www.verisign.com/rpa

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            1.3.6.1.5.5.7.1.12: 
                0_.].[0Y0W0U..image/gif0!0.0...+..............k...j.H.,{..0%.#http://logo.verisign.com/vslogo.gif
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.verisign.com/pca3-g5.crl

            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com

            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, Code Signing
            X509v3 Subject Alternative Name: 
                DirName:/CN=VeriSignMPKI-2-8
            X509v3 Subject Key Identifier: 
                CF:99:A9:EA:7B:26:F4:4B:C9:8E:8F:D7:F0:05:26:EF:E3:D2:A7:9D
            X509v3 Authority Key Identifier: 
                keyid:7F:D3:65:A7:C2:DD:EC:BB:F0:30:09:F3:43:39:FA:02:AF:33:31:33

    Signature Algorithm: sha1WithRSAEncryption
         56:22:e6:34:a4:c4:61:cb:48:b9:01:ad:56:a8:64:0f:d9:8c:
         91:c4:bb:cc:0c:e5:ad:7a:a0:22:7f:df:47:38:4a:2d:6c:d1:
         7f:71:1a:7c:ec:70:a9:b1:f0:4f:e4:0f:0c:53:fa:15:5e:fe:
         74:98:49:24:85:81:26:1c:91:14:47:b0:4c:63:8c:bb:a1:34:
         d4:c6:45:e8:0d:85:26:73:03:d0:a9:8c:64:6d:dc:71:92:e6:
         45:05:60:15:59:51:39:fc:58:14:6b:fe:d4:a4:ed:79:6b:08:
         0c:41:72:e7:37:22:06:09:be:23:e9:3f:44:9a:1e:e9:61:9d:
         cc:b1:90:5c:fc:3d:d2:8d:ac:42:3d:65:36:d4:b4:3d:40:28:
         8f:9b:10:cf:23:26:cc:4b:20:cb:90:1f:5d:8c:4c:34:ca:3c:
         d8:e5:37:d6:6f:a5:20:bd:34:eb:26:d9:ae:0d:e7:c5:9a:f7:
         a1:b4:21:91:33:6f:86:e8:58:bb:25:7c:74:0e:58:fe:75:1b:
         63:3f:ce:31:7c:9b:8f:1b:96:9e:c5:53:76:84:5b:9c:ad:91:
         fa:ac:ed:93:ba:5d:c8:21:53:c2:82:53:63:af:12:0d:50:87:
         11:1b:3d:54:52:96:8a:2c:9c:3d:92:1a:08:9a:05:2e:c7:93:
         a5:48:91:d3

pkcs7-signedData

1
- SHA1: nil
- 1.3.6.1.4.1.311.2.1.4
  - #0
    - 1.3.6.1.4.1.311.2.1.15
      - :
        00 3c 00 3c 00 3c 00 4f 00 62 00 73 00 6f 00 6c |.<.<.<.O.b.s.o.l| 00 65 00 74 00 65 00 3e 00 3e 00 3e |.e.t.e.>.>.> |
    - SHA1
      - bf 40 00 7d 8f b4 9f 27 e8 d2 95 6e 48 d8 be b7 |.@.}...'...nH...| bb 09 f2 5b |...[ |
- Certificates
  - Certificate #0
    - 2
      - 7E:93:EB:FB:7C:C6:4E:59:EA:4B:9A:77:D4:06:FC:3B
      - RSA-SHA1: nil
      - Issuer
        C: ZA
        ST: Western Cape
        L: Durbanville
        O: Thawte
        OU: Thawte Certification
        CN: Thawte Timestamping CA
      - 2012-12-21 00:00:00 UTC: 2020-12-30 23:59:59 UTC
      - Subject
        C: US
        O: Symantec Corporation
        CN: Symantec Time Stamping Services CA - G2
      - #5
        rsaEncryption: nil
        B1:AC:B3:49:54:4B:97:1C:12:0A:D8:25:79:91:22:57:
        2A:6F:DC:B8:26:C4:43:73:6B:C2:BF:2E:50:5A:FB:14:
        C2:76:8E:43:01:25:43:B4:A1:E2:45:F4:E8:B7:7B:C3:
        74:CC:22:D7:B4:94:00:02:F7:4D:ED:BF:B4:B7:44:24:
        6B:CD:5F:45:3B:D1:44:CE:43:12:73:17:82:8B:69:B4:
        2B:CB:99:1E:AC:72:1B:26:4D:71:1F:B1:31:DD:FB:51:
        61:02:53:A6:AA:F5:49:2C:05:78:45:A5:2F:89:CE:E7:
        99:E7:FE:8C:E2:57:3F:3D:C6:92:DC:4A:F8:7B:33:E4:
        79:0A:FB:F0:75:88:41:9C:FF:C5:03:51:99:AA:D7:6C:
        9F:93:69:87:65:29:83:85:C2:60:14:C4:C8:C9:3B:14:
        DA:C0:81:F0:1F:0D:74:DE:92:22:AB:CA:F7:FB:74:7C:
        27:E6:F7:4A:1B:7F:A7:C3:9E:2D:AE:8A:EA:A6:E6:AA:
        27:16:7D:61:F7:98:71:11:BC:E2:50:A1:4B:E5:5D:FA:
        E5:0E:A7:2C:9F:AA:65:20:D3:D8:96:E8:C8:7C:A5:4E:
        48:44:FF:19:E2:44:07:92:0B:D7:68:84:80:5D:6A:78:
        64:45:CD:60:46:7E:54:C1:13:7C:C5:79:F1:C9:C1:71: 0x010001
      - #6
        subjectKeyIdentifier:
        5f 9a f5 6e 5c cc cc 74 9a d4 dd 7d ef 3f db ec |_..n\..t...}.?..| 4c 80 2e dd |L... |
        authorityInfoAccess
        OCSP: http://ocsp.thawte.com
        basicConstraints
        true
        true: 0
        crlDistributionPoints: http://crl.thawte.com/ThawteTimestampingCA.crl
        extendedKeyUsage: timeStamping
        keyUsage: true, 6
        subjectAltName
        CN: TimeStamp-2048-1
    - RSA-SHA1:
```
03 09 9b 8f 79 ef 7f 59  30 aa ef 68 b5 fa e3 09  |....y..Y0..h....|
1d bb 4f 82 06 5d 37 5f  a6 52 9f 16 8d ea 1c 92  |..O..]7_.R......|
09 44 6e f5 6d eb 58 7c  30 e8 f9 69 8d 23 73 0b  |.Dn.m.X|0..i.#s.|
12 6f 47 a9 ae 39 11 f8  2a b1 9b b0 1a c3 8e eb  |.oG..9..*.......|
59 96 00 ad ce 0c 4d b2  d0 31 a6 08 5c 2a 7a fc  |Y.....M..1..\*z.|
e2 7a 1d 57 4c a8 65 18  e9 79 40 62 25 96 6e c7  |.z.WL.e..y@b%.n.|
c7 37 6a 83 21 08 8e 41  ea dd d9 57 3f 1d 77 49  |.7j.!..A...W?.wI|
87 2a 16 06 5e a6 38 6a  22 12 a3 51 19 83 7e b6  |.*..^.8j"..Q..~.|
```
  - Certificate #1
    - 2
      - 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
      - RSA-SHA1: nil
      - Issuer
        C: US
        O: Symantec Corporation
        CN: Symantec Time Stamping Services CA - G2
      - 2012-10-18 00:00:00 UTC: 2020-12-29 23:59:59 UTC
      - Subject
        C: US
        O: Symantec Corporation
        CN: Symantec Time Stamping Services Signer - G4
      - #5
        rsaEncryption: nil
        A2:63:0B:39:44:B8:BB:23:A7:44:49:BB:0E:FF:A1:F0:
        61:0A:53:93:B0:98:DB:AD:2C:0F:4A:C5:6E:FF:86:3C:
        53:55:0F:15:CE:04:3F:2B:FD:A9:96:96:D9:BE:61:79:
        0B:5B:C9:4C:86:76:E5:E0:43:4B:22:95:EE:C2:2B:43:
        C1:9F:D8:68:B4:8E:40:4F:EE:85:38:B9:11:C5:23:F2:
        64:58:F0:15:32:6F:4E:57:A1:AE:88:A4:02:D7:2A:1E:
        CD:4B:E1:DD:63:D5:17:89:32:5B:B0:5E:99:5A:A8:9D:
        28:50:0E:17:EE:96:DB:61:3B:45:51:1D:CF:12:56:0B:
        92:47:FC:AB:AE:F6:66:3D:47:AC:70:72:E7:92:E7:5F:
        CD:10:B9:C4:83:64:94:19:BD:25:80:E1:E8:D2:22:A5:
        D0:BA:02:7A:A1:77:93:5B:65:C3:EE:17:74:BC:41:86:
        2A:DC:08:4C:8C:92:8C:91:2D:9E:77:44:1F:68:D6:A8:
        74:77:DB:0E:5B:32:8B:56:8B:33:BD:D9:63:C8:49:9D:
        3A:C5:C5:EA:33:0B:D2:F1:A3:1B:F4:8B:BE:D9:B3:57:
        8B:3B:DE:04:A7:7A:22:B2:24:AE:2E:C7:70:C5:BE:4E:
        83:26:08:FB:0B:BD:A9:4F:99:08:E1:10:28:72:AA:CD: 0x010001
      - X509v3 extensions
        basicConstraints
        true
        nil
        extendedKeyUsage: true, timeStamping
        keyUsage: true, 0x80
        authorityInfoAccess
        #0
        OCSP: http://ts-ocsp.ws.symantec.com
        caIssuers: http://ts-aia.ws.symantec.com/tss-ca-g2.cer
        crlDistributionPoints: http://ts-crl.ws.symantec.com/tss-ca-g2.crl
        subjectAltName
        CN: TimeStamp-2048-2
        subjectKeyIdentifier:
        46 c6 69 a3 0e 4a 14 1e d5 4c da 52 63 17 3f 5e |F.i..J...L.Rc.?^| 36 bc 0d e6 |6... |
        authorityKeyIdentifier:
        5f 9a f5 6e 5c cc cc 74 9a d4 dd 7d ef 3f db ec |_..n\..t...}.?..| 4c 80 2e dd |L... |
    - RSA-SHA1:
```
78 3b b4 91 2a 00 4c f0  8f 62 30 37 78 a3 84 27  |x;..*.L..b07x..'|
07 6f 18 b2 de 25 dc a0  d4 94 03 aa 86 4e 25 9f  |.o...%.......N%.|
9a 40 03 1c dd ce e3 79  cb 21 68 06 da b6 32 b4  |.@.....y.!h...2.|
6d bf f4 2c 26 63 33 e4  49 64 6d 0d e6 c3 67 0e  |m..,&c3.Idm...g.|
f7 05 a4 35 6c 7c 89 16  c6 e9 b2 df b2 e9 dd 20  |...5l|......... |
c6 71 0f cd 95 74 dc b6  5c de bd 37 1f 43 78 e6  |.q...t..\..7.Cx.|
78 b5 cd 28 04 20 a3 aa  f1 4b c4 88 29 91 0e 80  |x..(. ...K..)...|
d1 11 fc dd 5c 76 6e 4f  5e 0e 45 46 41 6e 0d b0  |....\vnO^.EFAn..|
ea 38 9a b1 3a da 09 71  10 fc 1c 79 b4 80 7b ac  |.8..:..q...y..{.|
69 f4 fd 9c b6 0c 16 2b  f1 7f 5b 09 3d 9b 5b e2  |i......+..[.=.[.|
16 ca 13 81 6d 00 2e 38  0d a8 29 8f 2c e1 b2 f4  |....m..8..).,...|
5a a9 01 af 15 9c 2c 2f  49 1b db 22 bb c3 fe 78  |Z.....,/I.."...x|
94 51 c3 86 b1 82 88 5d  f0 3d b4 51 a1 79 33 2b  |.Q.....].=.Q.y3+|
2e 7b b9 dc 20 09 13 71  eb 6a 19 5b cf e8 a5 30  |.{.. ..q.j.[...0|
57 2c 89 49 3f b9 cf 7f  c9 bf 3e 22 68 63 53 9a  |W,.I?.....>"hcS.|
bd 69 74 ac c5 1d 3c 7f  92 e0 c3 bc 1c d8 04 75  |.it...<........u|
```
  - Certificate #2
    - 2
      - 25:0C:E8:E0:30:61:2E:9F:2B:89:F7:05:4D:7C:F8:FD
      - RSA-SHA1: nil
      - Issuer
        C: US
        O: VeriSign, Inc.
        OU: Class 3 Public Primary Certification Authority
      - 2006-11-08 00:00:00 UTC: 2021-11-07 23:59:59 UTC
      - Subject
        C: US
        O: VeriSign, Inc.
        OU: VeriSign Trust Network
        OU: (c) 2006 VeriSign, Inc. - For authorized use only
        CN: VeriSign Class 3 Public Primary Certification Authority - G5
      - #5
        rsaEncryption: nil
        AF:24:08:08:29:7A:35:9E:60:0C:AA:E7:4B:3B:4E:DC:
        7C:BC:3C:45:1C:BB:2B:E0:FE:29:02:F9:57:08:A3:64:
        85:15:27:F5:F1:AD:C8:31:89:5D:22:E8:2A:AA:A6:42:
        B3:8F:F8:B9:55:B7:B1:B7:4B:B3:FE:8F:7E:07:57:EC:
        EF:43:DB:66:62:15:61:CF:60:0D:A4:D8:DE:F8:E0:C3:
        62:08:3D:54:13:EB:49:CA:59:54:85:26:E5:2B:8F:1B:
        9F:EB:F5:A1:91:C2:33:49:D8:43:63:6A:52:4B:D2:8F:
        E8:70:51:4D:D1:89:69:7B:C7:70:F6:B3:DC:12:74:DB:
        7B:5D:4B:56:D3:96:BF:15:77:A1:B0:F4:A2:25:F2:AF:
        1C:92:67:18:E5:F4:06:04:EF:90:B9:E4:00:E4:DD:3A:
        B5:19:FF:02:BA:F4:3C:EE:E0:8B:EB:37:8B:EC:F4:D7:
        AC:F2:F6:F0:3D:AF:DD:75:91:33:19:1D:1C:40:CB:74:
        24:19:21:93:D9:14:FE:AC:2A:52:C7:8F:D5:04:49:E4:
        8D:63:47:88:3C:69:83:CB:FE:47:BD:2B:7E:4F:C5:95:
        AE:0E:9D:D4:D1:43:C0:67:73:E3:14:08:7E:E5:3F:9F:
        73:B8:33:0A:CF:5D:3F:34:87:96:8A:EE:53:E8:25:15: 0x010001
      - X509v3 extensions
        basicConstraints: true, true
        crlDistributionPoints: http://crl.verisign.com/pca3.crl
        keyUsage: true, 6
        certificatePolicies
        anyPolicy
        id-qt-cps: https://www.verisign.com/cps
        subjectKeyIdentifier:
        7f d3 65 a7 c2 dd ec bb f0 30 09 f3 43 39 fa 02 |..e......0..C9..| af 33 31 33 |.313 |
        1.3.6.1.5.5.7.1.12
        image/gif
        SHA1:
        8f e5 d3 1a 86 ac 8d 8e 6b c3 cf 80 6a d4 48 18 |........k...j.H.| 2c 7b 19 2e |,{.. |
        http://logo.verisign.com/vslogo.gif
        authorityInfoAccess
        OCSP: http://ocsp.verisign.com
        extendedKeyUsage
        serverAuth: clientAuth, codeSigning, nsSGC, 2.16.840.1.113733.1.8.1
    - RSA-SHA1:
```
13 02 dd f8 e8 86 00 f2  5a f8 f8 20 0c 59 88 62  |........Z.. .Y.b|
07 ce ce f7 4e f9 bb 59  a1 98 e5 e1 38 dd 4e bc  |....N..Y....8.N.|
66 18 d3 ad eb 18 f2 0d  c9 6d 3e 4a 94 20 c3 3c  |f........m>J. .<|
ba bd 65 54 c6 af 44 b3  10 ad 2c 6b 3e ab d7 07  |..eT..D...,k>...|
b6 b8 81 63 c5 f9 5e 2e  e5 2a 67 ce cd 33 0c 2a  |...c..^..*g..3.*|
d7 89 56 03 23 1f b3 be  e8 3a 08 59 b4 ec 45 35  |..V.#....:.Y..E5|
f7 8a 5b ff 66 cf 50 af  c6 6d 57 8d 19 78 b7 b9  |..[.f.P..mW..x..|
a2 d1 57 ea 1f 9a 4b af  ba c9 8e 12 7e c6 bd ff  |..W...K.....~...|
```
  - Certificate #3
    - 2
      - 71:70:BD:93:CF:3F:18:9A:E6:45:2B:51:4C:49:34:0E
      - RSA-SHA1: nil
      - Issuer
        C: US
        O: VeriSign, Inc.
        OU: VeriSign Trust Network
        OU: Terms of use at https://www.verisign.com/rpa (c)10
        CN: VeriSign Class 3 Code Signing 2010 CA
      - 2013-01-17 00:00:00 UTC: 2016-02-16 23:59:59 UTC
      - Subject
        C: CN
        ST: guangdong
        L: shenzhen
        O: Tencent Technology(Shenzhen) Company Limited
        OU: Digital ID Class 3 - Microsoft Software Validation v2
        CN: Tencent Technology(Shenzhen) Company Limited
      - #5
        rsaEncryption: nil
        F3:25:00:5E:7A:9B:96:D3:7C:36:3B:24:16:2F:BB:55:
        58:CC:3A:E9:86:D5:A5:7B:FA:41:67:0C:98:57:6E:D9:
        41:34:CC:AD:40:FD:67:E8:9C:47:4C:53:63:D1:5D:DC:
        BC:7F:A3:A1:40:D9:9B:78:3E:97:3C:12:1A:54:C9:D4:
        17:42:82:2E:80:BD:05:84:E2:32:DB:F0:6C:78:A7:0C:
        0B:E0:AB:8F:D6:9F:28:11:CD:BC:78:A5:10:3F:61:2C:
        59:D2:00:57:6A:58:DD:50:C6:73:AA:BC:9D:4C:FA:26:
        76:FA:E1:A7:32:6B:56:DC:A5:54:6B:82:C7:EE:8E:00:
        C2:61:4D:11:F5:C5:30:1E:0F:67:09:91:76:D8:D4:F0:
        FF:86:4B:E9:B8:DE:77:FC:F9:7A:0B:0E:F9:2A:20:45:
        95:C3:8E:F8:7C:B7:AA:64:09:87:4F:15:27:18:C3:30:
        B2:2D:4A:AB:E5:35:84:15:FF:B8:99:66:48:64:1A:2F:
        ED:C5:25:42:42:B6:C8:B8:8A:30:67:E3:03:AF:50:19:
        B6:02:93:8F:D8:96:DE:6E:5E:20:87:1B:A4:8E:91:FD:
        47:5B:72:40:5D:1B:6F:A9:43:13:20:FB:CC:03:69:0B:
        B8:83:68:D4:05:A5:33:D7:36:A4:E9:91:12:FD:41:DD: 0x010001
      - X509v3 extensions
        basicConstraints
        nil
        keyUsage: true, 0x80
        crlDistributionPoints: http://csc3-2010-crl.verisign.com/CSC3-2010.crl
        certificatePolicies
        2.16.840.1.113733.1.7.23.3
        id-qt-cps: https://www.verisign.com/rpa
        extendedKeyUsage: codeSigning
        authorityInfoAccess
        #0
        OCSP: http://ocsp.verisign.com
        caIssuers: http://csc3-2010-aia.verisign.com/CSC3-2010.cer
        authorityKeyIdentifier:
        cf 99 a9 ea 7b 26 f4 4b c9 8e 8f d7 f0 05 26 ef |....{&.K......&.| e3 d2 a7 9d |.... |
        nsCertType: 0x10
        1.3.6.1.4.1.311.2.1.27
        false: true
    - RSA-SHA1:
```
9f 96 59 fc e8 5d 90 d2  01 d4 b2 19 8f ad 71 67  |..Y..]........qg|
0d f1 0a 38 f7 42 ba 56  b1 f9 92 28 31 c4 e9 4c  |...8.B.V...(1..L|
db 79 f8 77 72 be bd 7d  b0 76 df c2 e2 ad 10 8c  |.y.wr..}.v......|
39 47 c3 0e db c4 c5 14  aa a1 9b 96 ef c2 c4 dd  |9G..............|
8a 1b 2e 8a f2 e9 9f 9c  2d 67 77 a3 75 95 5c c2  |........-gw.u.\.|
69 c1 8a 9e e3 40 d8 d2  35 aa d0 f4 ef 95 8e fb  |i....@..5.......|
56 fc 28 c0 14 7b 1f bb  1d 34 18 be 5a 53 b8 6b  |V.(..{...4..ZS.k|
1f 32 0b 1c 1d 96 72 ae  66 90 80 1a 89 02 e8 29  |.2....r.f......)|
5d c2 68 9c 4a b8 d4 fb  4b cd e5 6a 0e 05 70 b0  |].h.J...K..j..p.|
9b 3b 3e 7d 83 94 88 21  d9 cc e1 fe ef b3 52 22  |.;>}...!......R"|
b9 ba 40 3e 47 bf f6 bf  0d b6 f5 53 7b 22 20 1b  |..@>G......S{" .|
05 82 7d d8 40 cc 9e 64  e2 3e a2 85 56 73 f4 76  |..}.@..d.>..Vs.v|
87 5e da f1 a9 41 e0 4b  3b da 23 58 c1 0b 9d d2  |.^...A.K;.#X....|
38 75 4b fc 39 6e a7 4f  d6 3a 44 09 2b ca b2 b3  |8uK.9n.O.:D.+...|
cf b0 7f 18 70 ce a0 f5  75 4d 45 c8 2e 19 ea 72  |....p...uME....r|
22 7f 35 bd da f1 d1 d1  38 3f fa 2f 61 25 a8 fe  |".5.....8?./a%..|
```
  - Certificate #4
    - 2
      - 52:00:E5:AA:25:56:FC:1A:86:ED:96:C9:D4:4B:33:C7
      - RSA-SHA1: nil
      - Issuer
        C: US
        O: VeriSign, Inc.
        OU: VeriSign Trust Network
        OU: (c) 2006 VeriSign, Inc. - For authorized use only
        CN: VeriSign Class 3 Public Primary Certification Authority - G5
      - 2010-02-08 00:00:00 UTC: 2020-02-07 23:59:59 UTC
      - Subject
        C: US
        O: VeriSign, Inc.
        OU: VeriSign Trust Network
        OU: Terms of use at https://www.verisign.com/rpa (c)10
        CN: VeriSign Class 3 Code Signing 2010 CA
      - #5
        rsaEncryption: nil
        F5:23:4B:5E:A5:D7:8A:BB:32:E9:D4:57:F7:EF:E4:C7:
        26:7E:AD:19:98:FE:A8:9D:7D:94:F6:36:6B:10:D7:75:
        81:30:7F:04:68:7F:CB:2B:75:1E:CD:1D:08:8C:DF:69:
        94:A7:37:A3:9C:7B:80:E0:99:E1:EE:37:4D:5F:CE:3B:
        14:EE:86:D4:D0:F5:27:35:BC:25:0B:38:A7:8C:63:9D:
        17:A3:08:A5:AB:B0:FB:CD:6A:62:82:4C:D5:21:DA:1B:
        D9:F1:E3:84:3B:8A:2A:4F:85:5B:90:01:4F:C9:A7:76:
        10:7F:27:03:7C:BE:AE:7E:7D:C1:DD:F9:05:BC:1B:48:
        9C:69:E7:C0:A4:3C:3C:41:00:3E:DF:96:E5:C5:E4:94:
        71:D6:55:01:C7:00:26:4A:40:3C:B5:A1:26:A9:0C:A7:
        6D:80:8E:90:25:7B:CF:BF:3F:1C:EB:2F:96:FA:E5:87:
        77:C6:B5:56:B2:7A:3B:54:30:53:1B:DF:62:34:FF:1E:
        D1:F4:5A:93:28:85:E5:4C:17:4E:7E:5B:FD:A4:93:99:
        7F:DF:CD:EF:A4:75:EF:EF:15:F6:47:E7:F8:19:72:D8:
        2E:34:1A:A6:B4:A7:4C:7E:BD:BB:4F:0C:3D:57:F1:30:
        D6:A6:36:8E:D6:80:76:D7:19:2E:A5:CD:7E:34:2D:89: 0x010001
      - X509v3 extensions
        basicConstraints
        true
        true: 0
        certificatePolicies
        2.16.840.1.113733.1.7.23.3
        #0
        id-qt-cps: https://www.verisign.com/cps
        id-qt-unotice: https://www.verisign.com/rpa
        keyUsage: true, 6
        1.3.6.1.5.5.7.1.12
        image/gif
        SHA1:
        8f e5 d3 1a 86 ac 8d 8e 6b c3 cf 80 6a d4 48 18 |........k...j.H.| 2c 7b 19 2e |,{.. |
        http://logo.verisign.com/vslogo.gif
        crlDistributionPoints: http://crl.verisign.com/pca3-g5.crl
        authorityInfoAccess
        OCSP: http://ocsp.verisign.com
        extendedKeyUsage
        clientAuth: codeSigning
        subjectAltName
        CN: VeriSignMPKI-2-8
        subjectKeyIdentifier:
        cf 99 a9 ea 7b 26 f4 4b c9 8e 8f d7 f0 05 26 ef |....{&.K......&.| e3 d2 a7 9d |.... |
        authorityKeyIdentifier:
        7f d3 65 a7 c2 dd ec bb f0 30 09 f3 43 39 fa 02 |..e......0..C9..| af 33 31 33 |.313 |
    - RSA-SHA1:
```
56 22 e6 34 a4 c4 61 cb  48 b9 01 ad 56 a8 64 0f  |V".4..a.H...V.d.|
d9 8c 91 c4 bb cc 0c e5  ad 7a a0 22 7f df 47 38  |.........z."..G8|
4a 2d 6c d1 7f 71 1a 7c  ec 70 a9 b1 f0 4f e4 0f  |J-l..q.|.p...O..|
0c 53 fa 15 5e fe 74 98  49 24 85 81 26 1c 91 14  |.S..^.t.I$..&...|
47 b0 4c 63 8c bb a1 34  d4 c6 45 e8 0d 85 26 73  |G.Lc...4..E...&s|
03 d0 a9 8c 64 6d dc 71  92 e6 45 05 60 15 59 51  |....dm.q..E.`.YQ|
39 fc 58 14 6b fe d4 a4  ed 79 6b 08 0c 41 72 e7  |9.X.k....yk..Ar.|
37 22 06 09 be 23 e9 3f  44 9a 1e e9 61 9d cc b1  |7"...#.?D...a...|
90 5c fc 3d d2 8d ac 42  3d 65 36 d4 b4 3d 40 28  |.\.=...B=e6..=@(|
8f 9b 10 cf 23 26 cc 4b  20 cb 90 1f 5d 8c 4c 34  |....#&.K ...].L4|
ca 3c d8 e5 37 d6 6f a5  20 bd 34 eb 26 d9 ae 0d  |.<..7.o. .4.&...|
e7 c5 9a f7 a1 b4 21 91  33 6f 86 e8 58 bb 25 7c  |......!.3o..X.%||
74 0e 58 fe 75 1b 63 3f  ce 31 7c 9b 8f 1b 96 9e  |t.X.u.c?.1|.....|
c5 53 76 84 5b 9c ad 91  fa ac ed 93 ba 5d c8 21  |.Sv.[........].!|
53 c2 82 53 63 af 12 0d  50 87 11 1b 3d 54 52 96  |S..Sc...P...=TR.|
8a 2c 9c 3d 92 1a 08 9a  05 2e c7 93 a5 48 91 d3  |.,.=.........H..|
```
- Signer
  - 1
  - unnamed
    - #0
      - C: US
      - O: VeriSign, Inc.
      - OU: VeriSign Trust Network
      - OU: Terms of use at https://www.verisign.com/rpa (c)10
      - CN: VeriSign Class 3 Code Signing 2010 CA
    - 71:70:BD:93:CF:3F:18:9A:E6:45:2B:51:4C:49:34:0E
  - SHA1: nil
  - #3
    - 1.3.6.1.4.1.311.2.1.12
      - nil
    - contentType: 1.3.6.1.4.1.311.2.1.4
    - 1.3.6.1.4.1.311.2.1.11: msCodeInd
    - messageDigest:
```
2d e6 2d 3c b5 40 91 31  28 d3 dc 9d be 95 1c 42  |-.-<.@.1(......B|
54 4d b0 29                                       |TM.)            |
```
  - rsaEncryption:
```
12 a6 cd 7d e2 d5 4e 15  e2 6f 46 3b ba 7b cc 6b  |...}..N..oF;.{.k|
41 fe a3 04 30 b0 fe d9  05 5e a5 7b a0 b9 95 77  |A...0....^.{...w|
ed 85 9d d9 ca 83 aa 90  e8 17 a9 4f a6 7d d4 73  |...........O.}.s|
ac 3e 1a 1a 44 9c 5b 83  1f 72 af 2d a8 8e 1e bb  |.>..D.[..r.-....|
a7 45 05 58 7d 4f 5a d5  06 cf ce 07 f9 18 53 4b  |.E.X}OZ.......SK|
d1 db bd 67 17 09 46 1b  05 40 6d cb b8 54 33 e8  |...g..F..@m..T3.|
ef e5 23 f4 80 02 14 2f  ae ab ff 53 b0 93 1e 55  |..#..../...S...U|
16 43 e6 38 af 23 04 aa  3d aa 0e 6e b6 0d 5a 2b  |.C.8.#..=..n..Z+|
e1 60 c3 99 c8 a0 a3 c6  02 c6 a5 65 23 96 f8 ca  |.`.........e#...|
62 39 dd ab ae 9f 6c 70  18 68 45 a5 95 c6 44 09  |b9....lp.hE...D.|
63 66 d8 45 ed 94 80 38  c8 cf a8 4e 7a a4 1a 6b  |cf.E...8...Nz..k|
be bb 66 3d 4a 03 70 f3  02 c7 15 99 c7 3a 21 c7  |..f=J.p......:!.|
a1 22 8a 79 b5 4d cf fe  1f 81 8c e6 73 b2 1d 89  |.".y.M......s...|
fc bc 62 06 dc 5c 16 f6  d7 9d d1 56 1a 94 e9 f2  |..b..\.....V....|
f1 45 8c 9f a9 cf 45 64  03 34 90 1a b3 0b 8e b4  |.E....Ed.4......|
31 c0 09 10 0c c5 6e 81  cc 9c a4 fd 46 67 2e 2e  |1.....n.....Fg..|
```
  - countersignature
    - 1
      - unnamed
        #0
        C: US
        O: Symantec Corporation
        CN: Symantec Time Stamping Services CA - G2
        0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
      - SHA1: nil
      - #2
        contentType: pkcs7-data
        signingTime: 2013-06-03 07:43:36 UTC
        messageDigest:
        f4 b8 91 86 1e 08 fe d5 3a a8 ac 40 34 c5 a0 e5 |........:..@4...| b1 77 60 26 |.w`& |
      - rsaEncryption:
        7a 30 75 85 85 69 6d 87 db 12 ec 10 02 24 e8 bc |z0u..im......$..| 62 0e a8 27 74 a7 76 37 5a 3d 56 70 69 74 92 89 |b..'t.v7Z=Vpit..| 07 91 ef 0a 56 0c 90 e8 fb b4 cb cc 2d 4d ce ce |....V.......-M..| 59 57 29 79 f8 6f 20 d6 ef 16 81 63 b7 52 e2 5e |YW)y.o ....c.R.^| fb 18 e7 81 53 14 2e f0 4b 17 59 eb e2 31 88 77 |....S...K.Y..1.w| c3 b5 9d 9b a2 0e 10 3f 5a f4 de 3b d2 c7 13 99 |.......?Z..;....| 7f 7f 1e 76 a9 b9 d9 a5 03 a4 cb 86 07 ab 05 8a |...v............| 34 ad 72 a1 57 21 d7 02 13 e2 8b 8c 14 8e 72 a2 |4.r.W!........r.| 2a 88 2e 91 66 4d d9 12 70 e6 75 72 ed 0f 8c f9 |*...fM..p.ur....| b6 7a 49 21 3c d9 71 ff 80 ff 0f 23 9b f2 80 b5 |.zI!<.q....#....| 5e b0 d0 00 95 af 4f 86 0d 0e 4b cd 3d 5e de b6 |^.....O...K.=^..| 67 21 6e d6 bb 1a ed 72 6e 57 35 ef 21 5a d8 bc |g!n....rnW5.!Z..| 8b 86 a5 04 2f e6 95 94 92 9a de 1b 16 91 a9 d0 |..../...........| d4 55 61 ec 92 26 bc a3 f9 30 5c 63 61 79 47 7f |.Ua..&...0\cayG.| 3b 83 96 d9 59 76 d7 5c 99 d5 ec b9 01 47 3a 27 |;...Yv.\.....G:'| b8 f0 3a 3e ff 68 0d 29 f5 70 a6 c8 f4 9b 85 89 |..:>.h.).p......|

show previews

offset	size	type	comment
0	385536	EXE	05/24/2011 15:16:01	#
15c1	15	HTM		#
5e200	1553024	BIN	overlay data past EOF	#

Scanning the drive for archives:
1 file, 1938560 bytes (1894 KiB)


--
Type = PE
Physical Size = 1938560
CPU = x86
Characteristics = Executable 32-bit NoRelocs
Created = 2011-05-24 15:16:01
Headers Size = 1024
Checksum = 1984557
Name = 7ZSfxMod_x86.exe
Image Size = 405504
Section Alignment = 4096
File Alignment = 512
Code Size = 72192
Initialized Data Size = 312320
Uninitialized Data Size = 0
Linker Version = 9.0
OS Version = 5.0
Image Version = 0.0
Subsystem Version = 5.0
Subsystem = Windows GUI
DLL Characteristics = TerminalServerAware
Stack Reserve = 1048576
Stack Commit = 4096
Heap Reserve = 1048576
Heap Commit = 4096
Image Base = 4194304
Comment = FileVersion: 1.4.1.2100
ProductVersion: 1.4.1.2100
CompanyName: Oleg N. Scherbakov
FileDescription: 7z Setup SFX (x86)
InternalName: 7ZSfxMod
LegalCopyright: Copyright © 2005-2010 Oleg N. Scherbakov
OriginalFilename: 7ZSfxMod_x86.exe
PrivateBuild: 2011-04-28
ProductName: 7-Zip SFX
----
Path = [0]
Size = 1545288
Packed Size = 1545288
Virtual Size = 1545288
Offset = 385536
--
Path = [0]
Type = 7z
Offset = 604
Physical Size = 1544679
Tail Size = 5
Headers Size = 144
Method = LZMA:6m BCJ
Solid = -
Blocks = 1

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
2013-05-21 02:53:08 ....A      4337336      1544535  QQPCDownload.exe
------------------- ----- ------------ ------------  ------------------------
2013-05-21 02:53:08            4337336      1544535  1 files

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

QQPCDownload140059.exe- 7ZSfxMod_x86.exe - 7z Setup SFX (x86)

MZ Header

Rich Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 000004b0

VS_FIXEDFILEINFO

Signers (1)

Certificates (5)

QQPCDownload140059.exe
- 7ZSfxMod_x86.exe - 7z Setup SFX (x86)