fxgame.exe

info
MZ
PE
resources
imports
foremost
signature
hexdump
disasm
log
discuss
donate

filename	fxgame.exe
size	559744 (0x88a80)
md5	0ebba65adf4fec66406149e7e5b4c9e8

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xe8

Rich Header

lib id	version	times used
126	50327	6
125	50727	24
109	50727	139
93	4035	12
123	50727	3
1	0	127
110	50727	67
124	50727	1
120	50727	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	5
TimeDateStamp	0x532ab225
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x122
Magic	0x10b
LinkerVersion	8.0
SizeOfCode	0x37000
SizeOfInitializedData	0x54000
SizeOfUninitializedData	0
AddressOfEntryPoint	0x1233a
BaseOfCode	0x1000
BaseOfData	0x38000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x1000
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x8c000
SizeOfHeaders	0x1000
CheckSum	0x89322
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x365de	0x37000	R-X CODE
.rdata	0x38000	0x60e2	0x7000	R-- IDATA
.data	0x3f000	0x6224	0x2000	RW- IDATA
.rsrc	0x46000	0x422d0	0x43000	R-- IDATA
.reloc	0x89000	0x258a	0x3000	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x3d4cc	0xa0
RESOURCE	0x46000	0x422d0
EXCEPTION	0	0
SECURITY	0x87000	0x1a80
BASERELOC	0x89000	0x2264
DEBUG	0x38260	0x1c
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0x3b4c0	0x40
Bound_IAT	0	0
IAT	0x38000	0x218
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size
MANIFEST	#131	395
ICON	#1	270376
GROUP_ICON	#121	20

module_name	hint	ord	function_name
GPKitClt.dll		1
KERNEL32.dll	904		VirtualQuery
KERNEL32.dll	795		SetFilePointer
KERNEL32.dll	516		GlobalMemoryStatus
KERNEL32.dll	916		WideCharToMultiByte
KERNEL32.dll	453		GetSystemInfo
KERNEL32.dll	490		GetVersionExW
KERNEL32.dll	371		GetLocalTime
KERNEL32.dll	325		GetCurrentThread
KERNEL32.dll	322		GetCurrentProcess
KERNEL32.dll	323		GetCurrentProcessId
KERNEL32.dll	326		GetCurrentThreadId
KERNEL32.dll	86		CreateFileW
KERNEL32.dll	842		SetUnhandledExceptionFilter
KERNEL32.dll	369		GetLastError
KERNEL32.dll	629		MultiByteToWideChar
KERNEL32.dll	350		GetFileAttributesA
KERNEL32.dll	248		FreeLibrary
KERNEL32.dll	416		GetProcAddress
KERNEL32.dll	594		LoadLibraryA
KERNEL32.dll	381		GetModuleFileNameA
KERNEL32.dll	902		VirtualProtect
KERNEL32.dll	361		GetFullPathNameA
KERNEL32.dll	778		SetCurrentDirectoryA
KERNEL32.dll	320		GetCurrentDirectoryA
KERNEL32.dll	479		GetTickCount
KERNEL32.dll	272		GetCommandLineA
KERNEL32.dll	59		CompareStringW
KERNEL32.dll	58		CompareStringA
KERNEL32.dll	482		GetTimeZoneInformation
KERNEL32.dll	784		SetEndOfFile
KERNEL32.dll	931		WriteConsoleW
KERNEL32.dll	309		GetConsoleOutputCP
KERNEL32.dll	921		WriteConsoleA
KERNEL32.dll	553		InterlockedExchange
KERNEL32.dll	373		GetLocaleInfoW
KERNEL32.dll	577		IsValidLocale
KERNEL32.dll	175		EnumSystemLocalesA
KERNEL32.dll	372		GetLocaleInfoA
KERNEL32.dll	483		GetUserDefaultLCID
KERNEL32.dll	83		CreateFileA
KERNEL32.dll	357		GetFileTime
KERNEL32.dll	196		FileTimeToLocalFileTime
KERNEL32.dll	197		FileTimeToSystemTime
KERNEL32.dll	52		CloseHandle
KERNEL32.dll	932		WriteFile
KERNEL32.dll	941		WriteProcessMemory
KERNEL32.dll	327		GetDateFormatA
KERNEL32.dll	480		GetTimeFormatA
KERNEL32.dll	445		GetStringTypeW
KERNEL32.dll	442		GetStringTypeA
KERNEL32.dll	823		SetStdHandle
KERNEL32.dll	547		InitializeCriticalSection
KERNEL32.dll	458		GetSystemTimeAsFileTime
KERNEL32.dll	675		QueryPerformanceCounter
KERNEL32.dll	727		RtlUnwind
KERNEL32.dll	862		TerminateProcess
KERNEL32.dll	878		UnhandledExceptionFilter
KERNEL32.dll	569		IsDebuggerPresent
KERNEL32.dll	679		RaiseException
KERNEL32.dll	534		HeapFree
KERNEL32.dll	152		EnterCriticalSection
KERNEL32.dll	593		LeaveCriticalSection
KERNEL32.dll	489		GetVersionExA
KERNEL32.dll	528		HeapAlloc
KERNEL32.dll	419		GetProcessHeap
KERNEL32.dll	439		GetStartupInfoA
KERNEL32.dll	804		SetHandleCount
KERNEL32.dll	441		GetStdHandle
KERNEL32.dll	358		GetFileType
KERNEL32.dll	129		DeleteCriticalSection
KERNEL32.dll	260		GetCPInfo
KERNEL32.dll	556		InterlockedIncrement
KERNEL32.dll	552		InterlockedDecrement
KERNEL32.dll	253		GetACP
KERNEL32.dll	403		GetOEMCP
KERNEL32.dll	575		IsValidCodePage
KERNEL32.dll	383		GetModuleHandleA
KERNEL32.dll	869		TlsGetValue
KERNEL32.dll	867		TlsAlloc
KERNEL32.dll	870		TlsSetValue
KERNEL32.dll	868		TlsFree
KERNEL32.dll	808		SetLastError
KERNEL32.dll	693		ReadFile
KERNEL32.dll	532		HeapDestroy
KERNEL32.dll	530		HeapCreate
KERNEL32.dll	899		VirtualFree
KERNEL32.dll	192		FatalAppExitA
KERNEL32.dll	897		VirtualAlloc
KERNEL32.dll	538		HeapReAlloc
KERNEL32.dll	580		LCMapStringA
KERNEL32.dll	581		LCMapStringW
KERNEL32.dll	185		ExitProcess
KERNEL32.dll	750		SetConsoleCtrlHandler
KERNEL32.dll	290		GetConsoleCP
KERNEL32.dll	307		GetConsoleMode
KERNEL32.dll	238		FlushFileBuffers
KERNEL32.dll	854		Sleep
KERNEL32.dll	540		HeapSize
KERNEL32.dll	246		FreeEnvironmentStringsA
KERNEL32.dll	341		GetEnvironmentStrings
KERNEL32.dll	247		FreeEnvironmentStringsW
KERNEL32.dll	343		GetEnvironmentStringsW
KERNEL32.dll	787		SetEnvironmentVariableA
USER32.dll	349		GetSystemMetrics
USER32.dll	375		GetWindowTextA
USER32.dll	479		MessageBoxA
USER32.dll	143		DefWindowProcW
USER32.dll	516		PostQuitMessage
USER32.dll	447		LoadIconW
USER32.dll	445		LoadCursorW
USER32.dll	162		DispatchMessageW
USER32.dll	536		RegisterClassExW
USER32.dll	97		CreateWindowExW
USER32.dll	513		PeekMessageW
USER32.dll	682		TranslateMessage
GDI32.dll	421		GetStockObject
ADVAPI32.dll	459		RegCloseKey
ADVAPI32.dll	491		RegOpenKeyA
ADVAPI32.dll	503		RegQueryValueExA
ADVAPI32.dll	477		RegEnumKeyA
dbghelp.dll	26		StackWalk64
dbghelp.dll	47		SymFunctionTableAccess64
dbghelp.dll	59		SymGetModuleBase64
dbghelp.dll	88		SymSetOptions
dbghelp.dll	23		MiniDumpWriteDump
PSAPI.DLL	20		GetProcessMemoryInfo

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=US/O=Thawte, Inc./CN=Thawte Code Signing CA - G2

serial: 24ED4696D3D58E409A6832455C26633A

Certificates (5)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
        Validity
            Not Before: Dec 21 00:00:00 2012 GMT
            Not After : Dec 30 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:b3:49:54:4b:97:1c:12:0a:d8:25:79:91:
                    22:57:2a:6f:dc:b8:26:c4:43:73:6b:c2:bf:2e:50:
                    5a:fb:14:c2:76:8e:43:01:25:43:b4:a1:e2:45:f4:
                    e8:b7:7b:c3:74:cc:22:d7:b4:94:00:02:f7:4d:ed:
                    bf:b4:b7:44:24:6b:cd:5f:45:3b:d1:44:ce:43:12:
                    73:17:82:8b:69:b4:2b:cb:99:1e:ac:72:1b:26:4d:
                    71:1f:b1:31:dd:fb:51:61:02:53:a6:aa:f5:49:2c:
                    05:78:45:a5:2f:89:ce:e7:99:e7:fe:8c:e2:57:3f:
                    3d:c6:92:dc:4a:f8:7b:33:e4:79:0a:fb:f0:75:88:
                    41:9c:ff:c5:03:51:99:aa:d7:6c:9f:93:69:87:65:
                    29:83:85:c2:60:14:c4:c8:c9:3b:14:da:c0:81:f0:
                    1f:0d:74:de:92:22:ab:ca:f7:fb:74:7c:27:e6:f7:
                    4a:1b:7f:a7:c3:9e:2d:ae:8a:ea:a6:e6:aa:27:16:
                    7d:61:f7:98:71:11:bc:e2:50:a1:4b:e5:5d:fa:e5:
                    0e:a7:2c:9f:aa:65:20:d3:d8:96:e8:c8:7c:a5:4e:
                    48:44:ff:19:e2:44:07:92:0b:d7:68:84:80:5d:6a:
                    78:64:45:cd:60:46:7e:54:c1:13:7c:c5:79:f1:c9:
                    c1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD
            Authority Information Access: 
                OCSP - URI:http://ocsp.thawte.com

            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.thawte.com/ThawteTimestampingCA.crl

            X509v3 Extended Key Usage: 
                Time Stamping
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-1
    Signature Algorithm: sha1WithRSAEncryption
         03:09:9b:8f:79:ef:7f:59:30:aa:ef:68:b5:fa:e3:09:1d:bb:
         4f:82:06:5d:37:5f:a6:52:9f:16:8d:ea:1c:92:09:44:6e:f5:
         6d:eb:58:7c:30:e8:f9:69:8d:23:73:0b:12:6f:47:a9:ae:39:
         11:f8:2a:b1:9b:b0:1a:c3:8e:eb:59:96:00:ad:ce:0c:4d:b2:
         d0:31:a6:08:5c:2a:7a:fc:e2:7a:1d:57:4c:a8:65:18:e9:79:
         40:62:25:96:6e:c7:c7:37:6a:83:21:08:8e:41:ea:dd:d9:57:
         3f:1d:77:49:87:2a:16:06:5e:a6:38:6a:22:12:a3:51:19:83:
         7e:b6

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:65:50:08:79:ad:73:e2:30:b9:e0:1d:0d:7f:ac:91
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=ZA, ST=Western Cape, L=Cape Town, O=Thawte Consulting cc, OU=Certification Services Division, CN=Thawte Premium Server CA/emailAddress=premium-server@thawte.com
        Validity
            Not Before: Nov 17 00:00:00 2006 GMT
            Not After : Dec 30 23:59:59 2020 GMT
        Subject: C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2006 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a0:f0:fb:80:59:d4:9c:c7:a4:cf:9d:a1:59:
                    73:09:10:45:0c:0d:2c:6e:68:f1:6c:5b:48:68:49:
                    59:37:fc:0b:33:19:c2:77:7f:cc:10:2d:95:34:1c:
                    e6:eb:4d:09:a7:1c:d2:b8:c9:97:36:02:b7:89:d4:
                    24:5f:06:c0:cc:44:94:94:8d:02:62:6f:eb:5a:dd:
                    11:8d:28:9a:5c:84:90:10:7a:0d:bd:74:66:2f:6a:
                    38:a0:e2:d5:54:44:eb:1d:07:9f:07:ba:6f:ee:e9:
                    fd:4e:0b:29:f5:3e:84:a0:01:f1:9c:ab:f8:1c:7e:
                    89:a4:e8:a1:d8:71:65:0d:a3:51:7b:ee:bc:d2:22:
                    60:0d:b9:5b:9d:df:ba:fc:51:5b:0b:af:98:b2:e9:
                    2e:e9:04:e8:62:87:de:2b:c8:d7:4e:c1:4c:64:1e:
                    dd:cf:87:58:ba:4a:4f:ca:68:07:1d:1c:9d:4a:c6:
                    d5:2f:91:cc:7c:71:72:1c:c5:c0:67:eb:32:fd:c9:
                    92:5c:94:da:85:c0:9b:bf:53:7d:2b:09:f4:8c:9d:
                    91:1f:97:6a:52:cb:de:09:36:a4:77:d8:7b:87:50:
                    44:d5:3e:6e:29:69:fb:39:49:26:1e:09:a5:80:7b:
                    40:2d:eb:e8:27:85:c9:fe:61:fd:7e:e6:7c:97:1d:
                    d5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: https://www.thawte.com/cps

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier: 
                7B:5B:45:CF:AF:CE:CB:7A:FD:31:92:1A:6A:B6:F3:46:EB:57:48:50
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.thawte.com/ThawtePremiumServerCA.crl

    Signature Algorithm: sha1WithRSAEncryption
         84:a8:4c:c9:3e:2a:bc:9a:e2:cc:8f:0b:b2:25:77:c4:61:89:
         89:63:5a:d4:a3:15:40:d4:fb:5e:3f:b4:43:ea:63:17:2b:6b:
         99:74:9e:09:a8:dd:d4:56:15:2e:7a:79:31:5f:63:96:53:1b:
         34:d9:15:ea:4f:6d:70:ca:be:f6:82:a9:ed:da:85:77:cc:76:
         1c:6a:81:0a:21:d8:41:99:7f:5e:2e:82:c1:e8:aa:f7:93:81:
         05:aa:92:b4:1f:b7:9a:c0:07:17:f5:cb:c6:b4:4c:0e:d7:56:
         dc:71:20:74:38:d6:74:c6:d6:8f:6b:af:8b:8d:a0:6c:29:0b:
         61:e0

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:ed:46:96:d3:d5:8e:40:9a:68:32:45:5c:26:63:3a
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=Thawte, Inc., CN=Thawte Code Signing CA - G2
        Validity
            Not Before: Aug  1 00:00:00 2013 GMT
            Not After : Aug  1 23:59:59 2015 GMT
        Subject: C=CN, ST=jiangsu, L=suzhou, O=SuZhou Snail Digital Technology Co., Ltd, OU=IT, CN=SuZhou Snail Digital Technology Co., Ltd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a0:ea:94:0a:eb:ec:9a:d1:77:27:c5:bf:fb:
                    c0:30:5a:2f:e0:a4:aa:9f:89:f8:cd:5d:3f:34:aa:
                    4e:fa:c2:cf:e5:dc:e7:48:dd:3e:5a:3e:5b:ad:b0:
                    23:2e:cc:14:ba:55:61:20:92:8d:f2:75:95:46:4c:
                    60:21:9d:63:5c:18:df:fa:1d:3b:c1:7a:05:66:c1:
                    dc:5c:4c:b2:c9:8f:fa:cd:e6:bb:44:ca:91:9c:18:
                    b5:7c:7c:67:d5:64:65:d9:1b:02:79:34:57:21:36:
                    56:54:85:32:33:4f:ad:a9:8d:6b:77:4b:73:83:d8:
                    38:4c:d9:4e:a5:f3:b2:39:b9:80:82:21:ff:9f:98:
                    78:45:a8:bb:2d:cd:05:e6:f4:5f:9b:2a:93:51:8e:
                    b1:66:f4:c8:0f:bc:45:a8:e4:91:50:10:07:17:b6:
                    de:f5:d7:60:f6:0d:5e:77:85:43:80:4c:7a:10:b6:
                    25:83:da:99:49:3b:d6:7e:0b:56:1f:89:21:df:17:
                    2b:2b:12:b3:ad:35:99:be:0a:75:21:d3:13:8f:87:
                    5a:ed:43:1b:f3:c8:c6:3f:4c:84:86:97:b4:59:88:
                    2b:d4:b0:f8:30:ca:7d:68:65:b5:1f:11:44:17:b3:
                    80:2d:cb:eb:1b:0e:ef:5e:8d:25:06:5d:66:fa:00:
                    0f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://cs-g2-crl.thawte.com/ThawteCSG2.crl

            X509v3 Extended Key Usage: 
                Code Signing, Microsoft Commercial Code Signing
            2.5.29.4: 
                0.0.0..
+.....7.......
            Authority Information Access: 
                OCSP - URI:http://ocsp.thawte.com

            Netscape Cert Type: 
                Object Signing
    Signature Algorithm: sha1WithRSAEncryption
         3c:77:99:38:7b:fe:62:20:b7:ef:ba:41:cb:ac:ad:5d:87:7f:
         41:2e:ca:0b:cd:7e:a2:09:e4:58:91:56:f9:07:03:dd:b7:88:
         ec:41:33:1c:19:fc:c9:fd:29:6c:55:2b:a6:78:2d:f0:66:90:
         b1:d6:70:47:0a:d1:34:97:78:35:ce:99:8a:13:1e:67:d3:3c:
         f1:f8:4d:09:36:48:df:12:bf:ba:76:5a:67:21:2f:03:f3:45:
         c3:cd:2b:a4:b1:50:65:64:a4:f9:d9:91:7e:af:39:1d:aa:a1:
         d1:3c:7b:ee:74:6a:e6:aa:04:01:8c:c1:c4:b8:aa:71:61:21:
         65:39:53:04:1a:e9:77:3a:7d:6e:ce:1d:95:1e:85:83:aa:4a:
         35:1f:73:9b:ee:b2:c7:40:a9:3a:92:26:81:b2:61:30:20:f6:
         f1:85:12:7e:a0:06:7a:30:07:f4:74:db:59:4c:f8:eb:52:38:
         4c:d8:10:ee:0e:13:5e:f6:3a:4f:4b:a8:12:0d:5c:38:cc:d6:
         65:b2:10:61:1a:a7:f9:47:e3:cb:c8:0b:49:0b:06:f9:f9:e1:
         1c:e0:6f:eb:0d:09:d1:ea:d4:92:80:ca:ae:2d:f5:48:af:bf:
         e9:d5:cd:e0:04:db:14:1c:e7:2e:66:e2:9b:b8:98:75:bf:f7:
         ea:14:ef:30

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:97:4d:78:73:a5:bc:ab:0d:2f:b3:70:19:2f:ce:5e
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2006 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA
        Validity
            Not Before: Feb  8 00:00:00 2010 GMT
            Not After : Feb  7 23:59:59 2020 GMT
        Subject: C=US, O=Thawte, Inc., CN=Thawte Code Signing CA - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8b:cf:75:5b:9f:25:da:7e:39:b0:93:db:38:
                    d3:a9:23:d0:82:fa:e9:24:7e:5c:0b:8e:83:f8:e6:
                    7a:59:e6:a3:c5:98:a7:99:d2:44:ff:00:a6:a5:39:
                    04:8a:da:29:88:ea:db:a2:f3:1c:99:15:26:c2:b1:
                    f4:fc:e1:0c:47:a9:09:11:06:0a:20:92:b9:c7:a0:
                    04:8c:5c:94:19:ab:5b:25:2c:1d:62:7e:70:0d:ce:
                    61:6c:dd:2b:82:c9:ce:5d:48:5f:f7:c2:be:bc:41:
                    23:1e:4f:29:5d:d7:4f:bc:f4:c5:2a:fc:63:e6:7c:
                    26:4e:99:a7:79:41:9e:10:4a:7a:79:c9:c6:86:f7:
                    86:95:d2:26:ce:3c:18:2a:d6:7c:ce:af:cd:ad:bb:
                    f7:82:2c:70:26:37:45:e5:0f:47:22:c6:01:28:bd:
                    2e:83:5c:6a:a4:47:c1:e7:d0:d8:6b:81:46:3f:21:
                    17:f5:07:c5:43:5a:a6:67:2c:b8:7b:60:11:b5:83:
                    ee:f5:74:0a:72:71:44:3d:58:fe:e8:1a:ab:38:c3:
                    59:db:7f:6e:38:7d:76:c7:72:69:98:36:96:57:d3:
                    66:1c:d2:54:91:04:2e:54:19:b0:dc:3d:b5:22:5e:
                    86:d5:2a:7e:20:df:5d:e6:7a:b1:65:fe:c5:02:4e:
                    31:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.thawte.com/ThawtePCA.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                OCSP - URI:http://ocsp.thawte.com

            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, Code Signing
            X509v3 Subject Alternative Name: 
                DirName:/CN=VeriSignMPKI-2-10
            X509v3 Subject Key Identifier: 
                D4:0D:65:3F:7A:BD:34:C6:FE:47:E7:4C:0D:C0:BD:F2:DE:15:AB:71
            X509v3 Authority Key Identifier: 
                keyid:7B:5B:45:CF:AF:CE:CB:7A:FD:31:92:1A:6A:B6:F3:46:EB:57:48:50

    Signature Algorithm: sha1WithRSAEncryption
         56:fe:53:5c:e1:c7:9e:bc:a7:ed:7e:53:6d:6a:14:4b:51:8c:
         40:5e:80:5f:aa:a4:e8:2f:ef:38:c8:04:c9:ca:3e:cf:df:3a:
         58:4e:b0:d4:b6:63:c5:29:57:fa:02:05:9a:45:4d:68:db:2a:
         1b:d4:34:3d:9f:00:c3:5a:cb:95:49:a5:6e:e1:b0:c5:fc:41:
         4d:41:4a:6f:d3:77:c8:d7:38:8d:e4:19:de:18:f3:1f:15:65:
         83:6d:45:0c:53:f9:0a:9a:2e:a5:5d:bf:6f:32:81:18:92:19:
         6a:55:00:ad:63:1c:52:06:7e:55:d9:29:68:ae:4a:7c:18:9a:
         79:88:6b:23:23:d8:27:38:2a:29:87:76:ca:fb:c7:b6:62:23:
         1f:ed:7a:56:4c:dd:9c:32:5b:f5:3d:0c:46:18:95:3b:2a:23:
         68:83:64:41:d9:00:6d:0f:19:24:15:68:72:bd:c5:71:67:6e:
         ac:4c:db:90:eb:51:a5:1a:62:07:d0:be:6a:00:47:3c:72:2f:
         ec:4f:61:3e:73:85:ce:5a:0a:b7:ba:c0:1c:13:75:e3:22:39:
         28:dd:6d:1d:09:46:9d:4f:ba:e8:40:81:91:c6:a4:ce:94:72:
         1b:01:cf:2a:6e:15:67:95:89:ae:7d:b7:b7:cd:f9:0a:3d:75:
         b6:6b:3c:25

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Validity
            Not Before: Oct 18 00:00:00 2012 GMT
            Not After : Dec 29 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer - G4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:63:0b:39:44:b8:bb:23:a7:44:49:bb:0e:ff:
                    a1:f0:61:0a:53:93:b0:98:db:ad:2c:0f:4a:c5:6e:
                    ff:86:3c:53:55:0f:15:ce:04:3f:2b:fd:a9:96:96:
                    d9:be:61:79:0b:5b:c9:4c:86:76:e5:e0:43:4b:22:
                    95:ee:c2:2b:43:c1:9f:d8:68:b4:8e:40:4f:ee:85:
                    38:b9:11:c5:23:f2:64:58:f0:15:32:6f:4e:57:a1:
                    ae:88:a4:02:d7:2a:1e:cd:4b:e1:dd:63:d5:17:89:
                    32:5b:b0:5e:99:5a:a8:9d:28:50:0e:17:ee:96:db:
                    61:3b:45:51:1d:cf:12:56:0b:92:47:fc:ab:ae:f6:
                    66:3d:47:ac:70:72:e7:92:e7:5f:cd:10:b9:c4:83:
                    64:94:19:bd:25:80:e1:e8:d2:22:a5:d0:ba:02:7a:
                    a1:77:93:5b:65:c3:ee:17:74:bc:41:86:2a:dc:08:
                    4c:8c:92:8c:91:2d:9e:77:44:1f:68:d6:a8:74:77:
                    db:0e:5b:32:8b:56:8b:33:bd:d9:63:c8:49:9d:3a:
                    c5:c5:ea:33:0b:d2:f1:a3:1b:f4:8b:be:d9:b3:57:
                    8b:3b:de:04:a7:7a:22:b2:24:ae:2e:c7:70:c5:be:
                    4e:83:26:08:fb:0b:bd:a9:4f:99:08:e1:10:28:72:
                    aa:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                OCSP - URI:http://ts-ocsp.ws.symantec.com
                CA Issuers - URI:http://ts-aia.ws.symantec.com/tss-ca-g2.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ts-crl.ws.symantec.com/tss-ca-g2.crl

            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-2
            X509v3 Subject Key Identifier: 
                46:C6:69:A3:0E:4A:14:1E:D5:4C:DA:52:63:17:3F:5E:36:BC:0D:E6
            X509v3 Authority Key Identifier: 
                keyid:5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD

    Signature Algorithm: sha1WithRSAEncryption
         78:3b:b4:91:2a:00:4c:f0:8f:62:30:37:78:a3:84:27:07:6f:
         18:b2:de:25:dc:a0:d4:94:03:aa:86:4e:25:9f:9a:40:03:1c:
         dd:ce:e3:79:cb:21:68:06:da:b6:32:b4:6d:bf:f4:2c:26:63:
         33:e4:49:64:6d:0d:e6:c3:67:0e:f7:05:a4:35:6c:7c:89:16:
         c6:e9:b2:df:b2:e9:dd:20:c6:71:0f:cd:95:74:dc:b6:5c:de:
         bd:37:1f:43:78:e6:78:b5:cd:28:04:20:a3:aa:f1:4b:c4:88:
         29:91:0e:80:d1:11:fc:dd:5c:76:6e:4f:5e:0e:45:46:41:6e:
         0d:b0:ea:38:9a:b1:3a:da:09:71:10:fc:1c:79:b4:80:7b:ac:
         69:f4:fd:9c:b6:0c:16:2b:f1:7f:5b:09:3d:9b:5b:e2:16:ca:
         13:81:6d:00:2e:38:0d:a8:29:8f:2c:e1:b2:f4:5a:a9:01:af:
         15:9c:2c:2f:49:1b:db:22:bb:c3:fe:78:94:51:c3:86:b1:82:
         88:5d:f0:3d:b4:51:a1:79:33:2b:2e:7b:b9:dc:20:09:13:71:
         eb:6a:19:5b:cf:e8:a5:30:57:2c:89:49:3f:b9:cf:7f:c9:bf:
         3e:22:68:63:53:9a:bd:69:74:ac:c5:1d:3c:7f:92:e0:c3:bc:
         1c:d8:04:75

pkcs7-signedData

1
- SHA1: nil
- 1.3.6.1.4.1.311.2.1.4
  - #0
    - 1.3.6.1.4.1.311.2.1.15
      - :
        00 3c 00 3c 00 3c 00 4f 00 62 00 73 00 6f 00 6c |.<.<.<.O.b.s.o.l| 00 65 00 74 00 65 00 3e 00 3e 00 3e |.e.t.e.>.>.> |
    - SHA1
      - 0c af f0 0b f5 bd 23 83 8d e1 ef 4a 9a ec 1f 28 |......#....J...(| a4 30 af 1a |.0.. |
- Certificates
  - Certificate #0
    - 2
      - 7E:93:EB:FB:7C:C6:4E:59:EA:4B:9A:77:D4:06:FC:3B
      - RSA-SHA1: nil
      - Issuer
        C: ZA
        ST: Western Cape
        L: Durbanville
        O: Thawte
        OU: Thawte Certification
        CN: Thawte Timestamping CA
      - 2012-12-21 00:00:00 UTC: 2020-12-30 23:59:59 UTC
      - Subject
        C: US
        O: Symantec Corporation
        CN: Symantec Time Stamping Services CA - G2
      - #5
        rsaEncryption: nil
        B1:AC:B3:49:54:4B:97:1C:12:0A:D8:25:79:91:22:57:
        2A:6F:DC:B8:26:C4:43:73:6B:C2:BF:2E:50:5A:FB:14:
        C2:76:8E:43:01:25:43:B4:A1:E2:45:F4:E8:B7:7B:C3:
        74:CC:22:D7:B4:94:00:02:F7:4D:ED:BF:B4:B7:44:24:
        6B:CD:5F:45:3B:D1:44:CE:43:12:73:17:82:8B:69:B4:
        2B:CB:99:1E:AC:72:1B:26:4D:71:1F:B1:31:DD:FB:51:
        61:02:53:A6:AA:F5:49:2C:05:78:45:A5:2F:89:CE:E7:
        99:E7:FE:8C:E2:57:3F:3D:C6:92:DC:4A:F8:7B:33:E4:
        79:0A:FB:F0:75:88:41:9C:FF:C5:03:51:99:AA:D7:6C:
        9F:93:69:87:65:29:83:85:C2:60:14:C4:C8:C9:3B:14:
        DA:C0:81:F0:1F:0D:74:DE:92:22:AB:CA:F7:FB:74:7C:
        27:E6:F7:4A:1B:7F:A7:C3:9E:2D:AE:8A:EA:A6:E6:AA:
        27:16:7D:61:F7:98:71:11:BC:E2:50:A1:4B:E5:5D:FA:
        E5:0E:A7:2C:9F:AA:65:20:D3:D8:96:E8:C8:7C:A5:4E:
        48:44:FF:19:E2:44:07:92:0B:D7:68:84:80:5D:6A:78:
        64:45:CD:60:46:7E:54:C1:13:7C:C5:79:F1:C9:C1:71: 0x010001
      - #6
        subjectKeyIdentifier:
        5f 9a f5 6e 5c cc cc 74 9a d4 dd 7d ef 3f db ec |_..n\..t...}.?..| 4c 80 2e dd |L... |
        authorityInfoAccess
        OCSP: http://ocsp.thawte.com
        basicConstraints
        true
        true: 0
        crlDistributionPoints: http://crl.thawte.com/ThawteTimestampingCA.crl
        extendedKeyUsage: timeStamping
        keyUsage: true, 6
        subjectAltName
        CN: TimeStamp-2048-1
    - RSA-SHA1:
```
03 09 9b 8f 79 ef 7f 59  30 aa ef 68 b5 fa e3 09  |....y..Y0..h....|
1d bb 4f 82 06 5d 37 5f  a6 52 9f 16 8d ea 1c 92  |..O..]7_.R......|
09 44 6e f5 6d eb 58 7c  30 e8 f9 69 8d 23 73 0b  |.Dn.m.X|0..i.#s.|
12 6f 47 a9 ae 39 11 f8  2a b1 9b b0 1a c3 8e eb  |.oG..9..*.......|
59 96 00 ad ce 0c 4d b2  d0 31 a6 08 5c 2a 7a fc  |Y.....M..1..\*z.|
e2 7a 1d 57 4c a8 65 18  e9 79 40 62 25 96 6e c7  |.z.WL.e..y@b%.n.|
c7 37 6a 83 21 08 8e 41  ea dd d9 57 3f 1d 77 49  |.7j.!..A...W?.wI|
87 2a 16 06 5e a6 38 6a  22 12 a3 51 19 83 7e b6  |.*..^.8j"..Q..~.|
```
  - Certificate #1
    - 2
      - 33:65:50:08:79:AD:73:E2:30:B9:E0:1D:0D:7F:AC:91
      - RSA-SHA1: nil
      - Issuer
        C: ZA
        ST: Western Cape
        L: Cape Town
        O: Thawte Consulting cc
        OU: Certification Services Division
        CN: Thawte Premium Server CA
        emailAddress: premium-server@thawte.com
      - 2006-11-17 00:00:00 UTC: 2020-12-30 23:59:59 UTC
      - Subject
        C: US
        O: thawte, Inc.
        OU: Certification Services Division
        OU: (c) 2006 thawte, Inc. - For authorized use only
        CN: thawte Primary Root CA
      - #5
        rsaEncryption: nil
        AC:A0:F0:FB:80:59:D4:9C:C7:A4:CF:9D:A1:59:73:09:
        10:45:0C:0D:2C:6E:68:F1:6C:5B:48:68:49:59:37:FC:
        0B:33:19:C2:77:7F:CC:10:2D:95:34:1C:E6:EB:4D:09:
        A7:1C:D2:B8:C9:97:36:02:B7:89:D4:24:5F:06:C0:CC:
        44:94:94:8D:02:62:6F:EB:5A:DD:11:8D:28:9A:5C:84:
        90:10:7A:0D:BD:74:66:2F:6A:38:A0:E2:D5:54:44:EB:
        1D:07:9F:07:BA:6F:EE:E9:FD:4E:0B:29:F5:3E:84:A0:
        01:F1:9C:AB:F8:1C:7E:89:A4:E8:A1:D8:71:65:0D:A3:
        51:7B:EE:BC:D2:22:60:0D:B9:5B:9D:DF:BA:FC:51:5B:
        0B:AF:98:B2:E9:2E:E9:04:E8:62:87:DE:2B:C8:D7:4E:
        C1:4C:64:1E:DD:CF:87:58:BA:4A:4F:CA:68:07:1D:1C:
        9D:4A:C6:D5:2F:91:CC:7C:71:72:1C:C5:C0:67:EB:32:
        FD:C9:92:5C:94:DA:85:C0:9B:BF:53:7D:2B:09:F4:8C:
        9D:91:1F:97:6A:52:CB:DE:09:36:A4:77:D8:7B:87:50:
        44:D5:3E:6E:29:69:FB:39:49:26:1E:09:A5:80:7B:40:
        2D:EB:E8:27:85:C9:FE:61:FD:7E:E6:7C:97:1D:D5:9D: 0x010001
      - X509v3 extensions
        basicConstraints: true, true
        certificatePolicies
        anyPolicy
        id-qt-cps: https://www.thawte.com/cps
        keyUsage: true, 6
        subjectKeyIdentifier:
        7b 5b 45 cf af ce cb 7a fd 31 92 1a 6a b6 f3 46 |{[E....z.1..j..F| eb 57 48 50 |.WHP |
        crlDistributionPoints: http://crl.thawte.com/ThawtePremiumServerCA.crl
    - RSA-SHA1:
```
84 a8 4c c9 3e 2a bc 9a  e2 cc 8f 0b b2 25 77 c4  |..L.>*.......%w.|
61 89 89 63 5a d4 a3 15  40 d4 fb 5e 3f b4 43 ea  |a..cZ...@..^?.C.|
63 17 2b 6b 99 74 9e 09  a8 dd d4 56 15 2e 7a 79  |c.+k.t.....V..zy|
31 5f 63 96 53 1b 34 d9  15 ea 4f 6d 70 ca be f6  |1_c.S.4...Omp...|
82 a9 ed da 85 77 cc 76  1c 6a 81 0a 21 d8 41 99  |.....w.v.j..!.A.|
7f 5e 2e 82 c1 e8 aa f7  93 81 05 aa 92 b4 1f b7  |.^..............|
9a c0 07 17 f5 cb c6 b4  4c 0e d7 56 dc 71 20 74  |........L..V.q t|
38 d6 74 c6 d6 8f 6b af  8b 8d a0 6c 29 0b 61 e0  |8.t...k....l).a.|
```
  - Certificate #2
    - 2
      - 24:ED:46:96:D3:D5:8E:40:9A:68:32:45:5C:26:63:3A
      - RSA-SHA1: nil
      - Issuer
        C: US
        O: Thawte, Inc.
        CN: Thawte Code Signing CA - G2
      - 2013-08-01 00:00:00 UTC: 2015-08-01 23:59:59 UTC
      - Subject
        C: CN
        ST: jiangsu
        L: suzhou
        O: SuZhou Snail Digital Technology Co., Ltd
        OU: IT
        CN: SuZhou Snail Digital Technology Co., Ltd
      - #5
        rsaEncryption: nil
        C2:A0:EA:94:0A:EB:EC:9A:D1:77:27:C5:BF:FB:C0:30:
        5A:2F:E0:A4:AA:9F:89:F8:CD:5D:3F:34:AA:4E:FA:C2:
        CF:E5:DC:E7:48:DD:3E:5A:3E:5B:AD:B0:23:2E:CC:14:
        BA:55:61:20:92:8D:F2:75:95:46:4C:60:21:9D:63:5C:
        18:DF:FA:1D:3B:C1:7A:05:66:C1:DC:5C:4C:B2:C9:8F:
        FA:CD:E6:BB:44:CA:91:9C:18:B5:7C:7C:67:D5:64:65:
        D9:1B:02:79:34:57:21:36:56:54:85:32:33:4F:AD:A9:
        8D:6B:77:4B:73:83:D8:38:4C:D9:4E:A5:F3:B2:39:B9:
        80:82:21:FF:9F:98:78:45:A8:BB:2D:CD:05:E6:F4:5F:
        9B:2A:93:51:8E:B1:66:F4:C8:0F:BC:45:A8:E4:91:50:
        10:07:17:B6:DE:F5:D7:60:F6:0D:5E:77:85:43:80:4C:
        7A:10:B6:25:83:DA:99:49:3B:D6:7E:0B:56:1F:89:21:
        DF:17:2B:2B:12:B3:AD:35:99:BE:0A:75:21:D3:13:8F:
        87:5A:ED:43:1B:F3:C8:C6:3F:4C:84:86:97:B4:59:88:
        2B:D4:B0:F8:30:CA:7D:68:65:B5:1F:11:44:17:B3:80:
        2D:CB:EB:1B:0E:EF:5E:8D:25:06:5D:66:FA:00:0F:3F: 0x010001
      - X509v3 extensions
        basicConstraints
        true
        nil
        crlDistributionPoints: http://cs-g2-crl.thawte.com/ThawteCSG2.crl
        extendedKeyUsage
        codeSigning: msCodeCom
        2.5.29.4
        msCodeCom: 0x80
        authorityInfoAccess
        OCSP: http://ocsp.thawte.com
        nsCertType: 0x10
    - RSA-SHA1:
```
3c 77 99 38 7b fe 62 20  b7 ef ba 41 cb ac ad 5d  |
```
  - Certificate #3
    - 2
      - 47:97:4D:78:73:A5:BC:AB:0D:2F:B3:70:19:2F:CE:5E
      - RSA-SHA1: nil
      - Issuer
        C: US
        O: thawte, Inc.
        OU: Certification Services Division
        OU: (c) 2006 thawte, Inc. - For authorized use only
        CN: thawte Primary Root CA
      - 2010-02-08 00:00:00 UTC: 2020-02-07 23:59:59 UTC
      - Subject
        C: US
        O: Thawte, Inc.
        CN: Thawte Code Signing CA - G2
      - #5
        rsaEncryption: nil
        B7:8B:CF:75:5B:9F:25:DA:7E:39:B0:93:DB:38:D3:A9:
        23:D0:82:FA:E9:24:7E:5C:0B:8E:83:F8:E6:7A:59:E6:
        A3:C5:98:A7:99:D2:44:FF:00:A6:A5:39:04:8A:DA:29:
        88:EA:DB:A2:F3:1C:99:15:26:C2:B1:F4:FC:E1:0C:47:
        A9:09:11:06:0A:20:92:B9:C7:A0:04:8C:5C:94:19:AB:
        5B:25:2C:1D:62:7E:70:0D:CE:61:6C:DD:2B:82:C9:CE:
        5D:48:5F:F7:C2:BE:BC:41:23:1E:4F:29:5D:D7:4F:BC:
        F4:C5:2A:FC:63:E6:7C:26:4E:99:A7:79:41:9E:10:4A:
        7A:79:C9:C6:86:F7:86:95:D2:26:CE:3C:18:2A:D6:7C:
        CE:AF:CD:AD:BB:F7:82:2C:70:26:37:45:E5:0F:47:22:
        C6:01:28:BD:2E:83:5C:6A:A4:47:C1:E7:D0:D8:6B:81:
        46:3F:21:17:F5:07:C5:43:5A:A6:67:2C:B8:7B:60:11:
        B5:83:EE:F5:74:0A:72:71:44:3D:58:FE:E8:1A:AB:38:
        C3:59:DB:7F:6E:38:7D:76:C7:72:69:98:36:96:57:D3:
        66:1C:D2:54:91:04:2E:54:19:B0:DC:3D:B5:22:5E:86:
        D5:2A:7E:20:DF:5D:E6:7A:B1:65:FE:C5:02:4E:31:2D: 0x010001
      - X509v3 extensions
        basicConstraints
        true
        true: 0
        crlDistributionPoints: http://crl.thawte.com/ThawtePCA.crl
        keyUsage: true, 6
        authorityInfoAccess
        OCSP: http://ocsp.thawte.com
        extendedKeyUsage
        clientAuth: codeSigning
        subjectAltName
        CN: VeriSignMPKI-2-10
        subjectKeyIdentifier:
        d4 0d 65 3f 7a bd 34 c6 fe 47 e7 4c 0d c0 bd f2 |..e?z.4..G.L....| de 15 ab 71 |...q |
        authorityKeyIdentifier:
        7b 5b 45 cf af ce cb 7a fd 31 92 1a 6a b6 f3 46 |{[E....z.1..j..F| eb 57 48 50 |.WHP |
    - RSA-SHA1:
```
56 fe 53 5c e1 c7 9e bc  a7 ed 7e 53 6d 6a 14 4b  |V.S\......~Smj.K|
51 8c 40 5e 80 5f aa a4  e8 2f ef 38 c8 04 c9 ca  |Q.@^._.../.8....|
3e cf df 3a 58 4e b0 d4  b6 63 c5 29 57 fa 02 05  |>..:XN...c.)W...|
9a 45 4d 68 db 2a 1b d4  34 3d 9f 00 c3 5a cb 95  |.EMh.*..4=...Z..|
49 a5 6e e1 b0 c5 fc 41  4d 41 4a 6f d3 77 c8 d7  |I.n....AMAJo.w..|
38 8d e4 19 de 18 f3 1f  15 65 83 6d 45 0c 53 f9  |8........e.mE.S.|
0a 9a 2e a5 5d bf 6f 32  81 18 92 19 6a 55 00 ad  |....].o2....jU..|
63 1c 52 06 7e 55 d9 29  68 ae 4a 7c 18 9a 79 88  |c.R.~U.)h.J|..y.|
6b 23 23 d8 27 38 2a 29  87 76 ca fb c7 b6 62 23  |k##.'8*).v....b#|
1f ed 7a 56 4c dd 9c 32  5b f5 3d 0c 46 18 95 3b  |..zVL..2[.=.F..;|
2a 23 68 83 64 41 d9 00  6d 0f 19 24 15 68 72 bd  |*#h.dA..m..$.hr.|
c5 71 67 6e ac 4c db 90  eb 51 a5 1a 62 07 d0 be  |.qgn.L...Q..b...|
6a 00 47 3c 72 2f ec 4f  61 3e 73 85 ce 5a 0a b7  |j.Gs..Z..|
ba c0 1c 13 75 e3 22 39  28 dd 6d 1d 09 46 9d 4f  |....u."9(.m..F.O|
ba e8 40 81 91 c6 a4 ce  94 72 1b 01 cf 2a 6e 15  |..@......r...*n.|
67 95 89 ae 7d b7 b7 cd  f9 0a 3d 75 b6 6b 3c 25  |g...}.....=u.k<%|
```
  - Certificate #4
    - 2
      - 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
      - RSA-SHA1: nil
      - Issuer
        C: US
        O: Symantec Corporation
        CN: Symantec Time Stamping Services CA - G2
      - 2012-10-18 00:00:00 UTC: 2020-12-29 23:59:59 UTC
      - Subject
        C: US
        O: Symantec Corporation
        CN: Symantec Time Stamping Services Signer - G4
      - #5
        rsaEncryption: nil
        A2:63:0B:39:44:B8:BB:23:A7:44:49:BB:0E:FF:A1:F0:
        61:0A:53:93:B0:98:DB:AD:2C:0F:4A:C5:6E:FF:86:3C:
        53:55:0F:15:CE:04:3F:2B:FD:A9:96:96:D9:BE:61:79:
        0B:5B:C9:4C:86:76:E5:E0:43:4B:22:95:EE:C2:2B:43:
        C1:9F:D8:68:B4:8E:40:4F:EE:85:38:B9:11:C5:23:F2:
        64:58:F0:15:32:6F:4E:57:A1:AE:88:A4:02:D7:2A:1E:
        CD:4B:E1:DD:63:D5:17:89:32:5B:B0:5E:99:5A:A8:9D:
        28:50:0E:17:EE:96:DB:61:3B:45:51:1D:CF:12:56:0B:
        92:47:FC:AB:AE:F6:66:3D:47:AC:70:72:E7:92:E7:5F:
        CD:10:B9:C4:83:64:94:19:BD:25:80:E1:E8:D2:22:A5:
        D0:BA:02:7A:A1:77:93:5B:65:C3:EE:17:74:BC:41:86:
        2A:DC:08:4C:8C:92:8C:91:2D:9E:77:44:1F:68:D6:A8:
        74:77:DB:0E:5B:32:8B:56:8B:33:BD:D9:63:C8:49:9D:
        3A:C5:C5:EA:33:0B:D2:F1:A3:1B:F4:8B:BE:D9:B3:57:
        8B:3B:DE:04:A7:7A:22:B2:24:AE:2E:C7:70:C5:BE:4E:
        83:26:08:FB:0B:BD:A9:4F:99:08:E1:10:28:72:AA:CD: 0x010001
      - X509v3 extensions
        basicConstraints
        true
        nil
        extendedKeyUsage: true, timeStamping
        keyUsage: true, 0x80
        authorityInfoAccess
        #0
        OCSP: http://ts-ocsp.ws.symantec.com
        caIssuers: http://ts-aia.ws.symantec.com/tss-ca-g2.cer
        crlDistributionPoints: http://ts-crl.ws.symantec.com/tss-ca-g2.crl
        subjectAltName
        CN: TimeStamp-2048-2
        subjectKeyIdentifier:
        46 c6 69 a3 0e 4a 14 1e d5 4c da 52 63 17 3f 5e |F.i..J...L.Rc.?^| 36 bc 0d e6 |6... |
        authorityKeyIdentifier:
        5f 9a f5 6e 5c cc cc 74 9a d4 dd 7d ef 3f db ec |_..n\..t...}.?..| 4c 80 2e dd |L... |
    - RSA-SHA1:
```
78 3b b4 91 2a 00 4c f0  8f 62 30 37 78 a3 84 27  |x;..*.L..b07x..'|
07 6f 18 b2 de 25 dc a0  d4 94 03 aa 86 4e 25 9f  |.o...%.......N%.|
9a 40 03 1c dd ce e3 79  cb 21 68 06 da b6 32 b4  |.@.....y.!h...2.|
6d bf f4 2c 26 63 33 e4  49 64 6d 0d e6 c3 67 0e  |m..,&c3.Idm...g.|
f7 05 a4 35 6c 7c 89 16  c6 e9 b2 df b2 e9 dd 20  |...5l|......... |
c6 71 0f cd 95 74 dc b6  5c de bd 37 1f 43 78 e6  |.q...t..\..7.Cx.|
78 b5 cd 28 04 20 a3 aa  f1 4b c4 88 29 91 0e 80  |x..(. ...K..)...|
d1 11 fc dd 5c 76 6e 4f  5e 0e 45 46 41 6e 0d b0  |....\vnO^.EFAn..|
ea 38 9a b1 3a da 09 71  10 fc 1c 79 b4 80 7b ac  |.8..:..q...y..{.|
69 f4 fd 9c b6 0c 16 2b  f1 7f 5b 09 3d 9b 5b e2  |i......+..[.=.[.|
16 ca 13 81 6d 00 2e 38  0d a8 29 8f 2c e1 b2 f4  |....m..8..).,...|
5a a9 01 af 15 9c 2c 2f  49 1b db 22 bb c3 fe 78  |Z.....,/I.."...x|
94 51 c3 86 b1 82 88 5d  f0 3d b4 51 a1 79 33 2b  |.Q.....].=.Q.y3+|
2e 7b b9 dc 20 09 13 71  eb 6a 19 5b cf e8 a5 30  |.{.. ..q.j.[...0|
57 2c 89 49 3f b9 cf 7f  c9 bf 3e 22 68 63 53 9a  |W,.I?.....>"hcS.|
bd 69 74 ac c5 1d 3c 7f  92 e0 c3 bc 1c d8 04 75  |.it...<........u|
```
- 1
  - unnamed
    - #0
      - C: US
      - O: Thawte, Inc.
      - CN: Thawte Code Signing CA - G2
    - 24:ED:46:96:D3:D5:8E:40:9A:68:32:45:5C:26:63:3A
  - SHA1: nil
  - #2
    - 1.3.6.1.4.1.311.2.1.12
      - nil
    - contentType: 1.3.6.1.4.1.311.2.1.4
    - 1.3.6.1.4.1.311.2.1.11: msCodeCom
    - messageDigest:
```
14 87 0e 89 58 cc 4b 7c  30 2b 36 1d c0 27 59 bb  |....X.K|0+6..'Y.|
98 0f be 71                                       |...q            |
```
  - rsaEncryption:
```
2b ad 56 47 83 ce 99 dc  d0 de b3 15 b3 ae 3b fc  |+.VG..........;.|
bf 23 27 17 1f 8c cf 4b  23 e3 4a 42 73 c9 6e fa  |.#'....K#.JBs.n.|
51 61 53 68 a0 e8 1a 6a  0e bc 46 7c a4 1f 18 b4  |QaSh...j..F|....|
d8 4e a3 66 c3 bb 3c 24  8d 57 09 8f 82 3d 10 2b  |.N.f..<$.W...=.+|
41 89 0c 99 b5 e3 85 76  67 12 b9 67 28 17 83 e8  |A......vg..g(...|
2f b7 0e 54 9a b0 52 fc  7d 97 f1 20 d8 e2 f2 6c  |/..T..R.}.. ...l|
b1 0c fc 04 fb 6d 06 50  c3 8f 3f fa d0 27 a5 b2  |.....m.P..?..'..|
0b bc 0c 0f ce 46 42 d4  74 1b f1 38 2e a3 88 42  |.....FB.t..8...B|
c0 45 f8 5a 22 0d dd 85  7a aa e4 35 c8 b4 36 80  |.E.Z"...z..5..6.|
b9 51 4f a5 93 8b 73 99  74 fe cf ed 60 26 ce 4e  |.QO...s.t...`&.N|
91 c6 cf bf 74 93 4e 1b  77 e4 57 e8 ab 1d 98 08  |....t.N.w.W.....|
9e d0 2a 34 36 ee b0 99  e6 36 33 99 b3 69 cc c2  |..*46....63..i..|
5d 92 5e 90 70 f0 8d 1b  9a 71 be 28 bb 61 ab f5  |].^.p....q.(.a..|
ab 10 3b ba 16 13 ae 70  25 f7 3c a4 6b 49 26 ea  |..;....p%.<.kI&.|
fd 8a 13 37 9d 97 81 46  92 9f 2d c4 08 c2 77 f6  |...7...F..-...w.|
73 6d 0f 4c 7e 45 a5 67  8c 66 b1 ca ba 53 88 a3  |sm.L~E.g.f...S..|
```
  - countersignature
    - 1
      - unnamed
        #0
        C: US
        O: Symantec Corporation
        CN: Symantec Time Stamping Services CA - G2
        0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
      - SHA1: nil
      - #2
        contentType: pkcs7-data
        signingTime: 2014-03-25 07:54:29 UTC
        messageDigest:
        d8 cb c2 8e a4 f6 5a df 87 5d 67 dd 61 c0 22 55 |......Z..]g.a."U| 88 a2 bf 8c |.... |
      - rsaEncryption:
        2f de 37 ec eb 4b 32 b8 a5 77 56 6e 73 4f 5e 05 |/.7..K2..wVnsO^.| d1 47 a1 41 14 13 1c 44 45 78 b7 c3 a0 7b 0a e6 |.G.A...DEx...{..| 97 33 ba 7f 48 b1 1d cf 63 4e 5b 41 2a 01 64 27 |.3..H...cN[A*.d'| c4 8a bd 0f c7 54 9f e6 56 ae e5 e7 3d 96 c2 7a |.....T..V...=..z| 3d 67 0a f9 38 bd 0f 90 4c cf a8 6c 2f 51 7f 6e |=g..8...L..l/Q.n| 51 eb f5 0f cc 09 aa 45 6e c8 c2 e2 b2 0d f8 ad |Q......En.......| 1e 13 f8 82 71 fe bd 25 3b 0a 92 2b af 1e b6 86 |....q..%;..+....| f6 4f fc 19 3e a7 18 90 b6 7b 28 6a 96 0a d4 04 |.O..>....{(j....| e3 2c 67 d8 0f 4a 5f f5 20 41 d0 c4 0f f4 34 39 |.,g..J_. A....49| 64 22 a1 aa 1e b9 ee 67 c0 1a a6 55 37 f6 39 c0 |d".....g...U7.9.| 06 20 e6 ff b3 82 2a 10 6e 82 f6 1b 64 6f a6 6c |. ....*.n...do.l| b1 cb 79 c4 4d 46 da 17 93 f4 e8 06 36 7d 73 4b |..y.MF......6}sK| 6f c5 33 e0 4c d3 48 fd e9 36 f4 dc 06 3d cb cf |o.3.L.H..6...=..| e1 7a f9 71 45 e5 ad 71 92 06 a4 05 a5 67 d1 00 |.z.qE..q.....g..| 85 a6 ff 6d 58 6c e5 b8 c2 73 0b e3 7e df fb 2d |...mXl...s..~..-| c5 74 a3 6a 52 23 6a 99 1f 3c 14 69 06 c4 4f 81 |.t.jR#j..<.i..O.|

show previews

offset	size	type	comment
0	552960	EXE	03/20/2014 09:17:25	#
15c1	15	HTM		#
87000	6784	PKCS7	Authenticode Signature	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK