installnp2013.exe - NPSetup.exe - Setup Net Protector Total Internet Security

info
MZ
PE
resources
imports
foremost
7zip
version info
signature
hexdump
disasm
log
discuss
donate

filename	installnp2013.exe
size	231109280 (0xdc672a0)
md5	30a49c5d78ddd8521f76bc4196b24079

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xe8

Rich Header

lib id	version	times used
12	7291	3
14	7299	22
10	8168	119
0	0	11
19	8034	13
1	0	194
11	8168	7
6	1720	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	4
TimeDateStamp	0x529dc7ea
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x10f
Magic	0x10b
LinkerVersion	6.0
SizeOfCode	0x1e000
SizeOfInitializedData	0xdc49000
SizeOfUninitializedData	0
AddressOfEntryPoint	0x12470
BaseOfCode	0x1000
BaseOfData	0x1f000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x1000
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0xdc68000
SizeOfHeaders	0x1000
CheckSum	0xdc76745
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

InstallShield 2000

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x1d82f	0x1e000	R-X CODE
.rdata	0x1f000	0x3a8e	0x4000	R-- IDATA
.data	0x23000	0x8500	0x7000	RW- IDATA
.rsrc	0x2c000	0xdc3bad8	0xdc3c000	R-- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x21a48	0xb4
RESOURCE	0x2c000	0xdc3bad8
EXCEPTION	0	0
SECURITY	0xdc66000	0x12a0
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x1f000	0x2f8
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size
BIN	#138	229952526
BITMAP	#127	4630
BITMAP	#128	4630
BITMAP	#132	88842
BITMAP	#134	402990
BITMAP	#141	62970
BITMAP	#143	5642
ICON	#1	3752
ICON	#2	2216
ICON	#3	1384
ICON	#4	270376
ICON	#5	67624
ICON	#6	38056
ICON	#7	9640
ICON	#8	4264
ICON	#9	1128
DIALOG	#101	906
DIALOG	#102	746
DIALOG	#103	666
DIALOG	#104	494
DIALOG	#109	374
DIALOG	#110	744
DIALOG	#114	466
DIALOG	#124	946
DIALOG	#129	438
DIALOG	#130	72
DIALOG	#136	292
DIALOG	#137	466
GROUP_ICON	#121	132
VERSION	#1	1104
MANIFEST	#1	882

module_name	hint	ord	function_name
KERNEL32.dll	722		WideCharToMultiByte
KERNEL32.dll	247		GetCurrentProcess
KERNEL32.dll	294		GetModuleHandleA
KERNEL32.dll	618		SetFilePointer
KERNEL32.dll	277		GetFileType
KERNEL32.dll	99		DuplicateHandle
KERNEL32.dll	52		CreateFileA
KERNEL32.dll	536		ReadFile
KERNEL32.dll	667		SystemTimeToFileTime
KERNEL32.dll	245		GetCurrentDirectoryA
KERNEL32.dll	95		DosDateTimeToFileTime
KERNEL32.dll	620		SetFileTime
KERNEL32.dll	735		WriteFile
KERNEL32.dll	609		SetEndOfFile
KERNEL32.dll	448		LCMapStringW
KERNEL32.dll	447		LCMapStringA
KERNEL32.dll	477		MoveFileA
KERNEL32.dll	339		GetStringTypeA
KERNEL32.dll	170		FlushFileBuffers
KERNEL32.dll	636		SetStdHandle
KERNEL32.dll	264		GetEnvironmentStringsW
KERNEL32.dll	262		GetEnvironmentStrings
KERNEL32.dll	179		FreeEnvironmentStringsW
KERNEL32.dll	178		FreeEnvironmentStringsA
KERNEL32.dll	305		GetOEMCP
KERNEL32.dll	185		GetACP
KERNEL32.dll	191		GetCPInfo
KERNEL32.dll	559		RtlUnwind
KERNEL32.dll	685		UnhandledExceptionFilter
KERNEL32.dll	676		TlsGetValue
KERNEL32.dll	625		SetLastError
KERNEL32.dll	674		TlsAlloc
KERNEL32.dll	549		ReleaseMutex
KERNEL32.dll	63		CreateMutexA
KERNEL32.dll	163		FindResourceA
KERNEL32.dll	455		LoadResource
KERNEL32.dll	469		LockResource
KERNEL32.dll	661		SizeofResource
KERNEL32.dll	206		GetComputerNameA
KERNEL32.dll	283		GetLocalTime
KERNEL32.dll	456		LocalAlloc
KERNEL32.dll	320		GetProcessHeap
KERNEL32.dll	409		HeapAlloc
KERNEL32.dll	415		HeapFree
KERNEL32.dll	318		GetProcAddress
KERNEL32.dll	605		SetCurrentDirectoryA
KERNEL32.dll	257		GetDiskFreeSpaceExA
KERNEL32.dll	484		MultiByteToWideChar
KERNEL32.dll	289		GetLongPathNameA
KERNEL32.dll	551		RemoveDirectoryA
KERNEL32.dll	148		FindFirstFileA
KERNEL32.dll	157		FindNextFileA
KERNEL32.dll	144		FindClose
KERNEL32.dll	282		GetLastError
KERNEL32.dll	450		LoadLibraryA
KERNEL32.dll	180		FreeLibrary
KERNEL32.dll	662		Sleep
KERNEL32.dll	68		CreateProcessA
KERNEL32.dll	718		WaitForSingleObject
KERNEL32.dll	27		CloseHandle
KERNEL32.dll	357		GetTempPathA
KERNEL32.dll	87		DeleteFileA
KERNEL32.dll	616		SetFileAttributesA
KERNEL32.dll	40		CopyFileA
KERNEL32.dll	478		MoveFileExA
KERNEL32.dll	256		GetDiskFreeSpaceA
KERNEL32.dll	334		GetShortPathNameA
KERNEL32.dll	723		WinExec
KERNEL32.dll	741		WritePrivateProfileStringA
KERNEL32.dll	373		GetVersionExA
KERNEL32.dll	45		CreateDirectoryA
KERNEL32.dll	292		GetModuleFileNameA
KERNEL32.dll	381		GetWindowsDirectoryA
KERNEL32.dll	345		GetSystemDirectoryA
KERNEL32.dll	250		GetCurrentThreadId
KERNEL32.dll	621		SetHandleCount
KERNEL32.dll	699		VirtualAlloc
KERNEL32.dll	703		VirtualFree
KERNEL32.dll	411		HeapCreate
KERNEL32.dll	413		HeapDestroy
KERNEL32.dll	418		HeapReAlloc
KERNEL32.dll	432		InterlockedIncrement
KERNEL32.dll	776		lstrlenA
KERNEL32.dll	342		GetStringTypeW
KERNEL32.dll	501		OutputDebugStringA
KERNEL32.dll	429		InterlockedDecrement
KERNEL32.dll	338		GetStdHandle
KERNEL32.dll	81		DebugBreak
KERNEL32.dll	125		ExitProcess
KERNEL32.dll	670		TerminateProcess
KERNEL32.dll	440		IsBadWritePtr
KERNEL32.dll	437		IsBadReadPtr
KERNEL32.dll	423		HeapValidate
KERNEL32.dll	556		ResumeThread
KERNEL32.dll	74		CreateThread
KERNEL32.dll	677		TlsSetValue
KERNEL32.dll	126		ExitThread
KERNEL32.dll	336		GetStartupInfoA
KERNEL32.dll	202		GetCommandLineA
KERNEL32.dll	372		GetVersion
KERNEL32.dll	426		InitializeCriticalSection
KERNEL32.dll	85		DeleteCriticalSection
KERNEL32.dll	102		EnterCriticalSection
KERNEL32.dll	449		LeaveCriticalSection
USER32.dll	446		MessageBoxA
USER32.dll	22		CallWindowProcA
USER32.dll	187		EndPaint
USER32.dll	405		KillTimer
USER32.dll	594		SetTimer
USER32.dll	618		ShowWindow
USER32.dll	378		InvalidateRect
USER32.dll	12		BeginPaint
USER32.dll	240		GetClientRect
USER32.dll	212		FillRect
USER32.dll	408		LoadBitmapA
USER32.dll	257		GetDlgCtrlID
USER32.dll	556		SetDlgItemTextA
USER32.dll	183		EnableWindow
USER32.dll	260		GetDlgItemTextA
USER32.dll	185		EndDialog
USER32.dll	606		SetWindowTextA
USER32.dll	147		DialogBoxParamA
USER32.dll	379		InvalidateRgn
USER32.dll	263		GetFocus
USER32.dll	166		DrawFocusRect
USER32.dll	258		GetDlgItem
USER32.dll	253		GetDC
USER32.dll	532		SendMessageA
USER32.dll	326		GetSystemMetrics
USER32.dll	603		SetWindowPos
USER32.dll	600		SetWindowLongA
USER32.dll	515		ReleaseDC
USER32.dll	410		LoadCursorA
USER32.dll	550		SetCursor
GDI32.dll	495		SetStretchBltMode
GDI32.dll	77		CreateSolidBrush
GDI32.dll	462		SetBkMode
GDI32.dll	42		CreateCompatibleDC
GDI32.dll	512		StretchBlt
GDI32.dll	54		CreateFontA
GDI32.dll	517		TextOutA
GDI32.dll	499		SetTextColor
GDI32.dll	461		SetBkColor
GDI32.dll	158		ExtTextOutA
GDI32.dll	335		GetObjectA
GDI32.dll	55		CreateFontIndirectA
GDI32.dll	455		SelectObject
GDI32.dll	366		GetTextExtentPoint32A
GDI32.dll	80		DeleteDC
ADVAPI32.dll	222		InitializeAcl
ADVAPI32.dll	379		RegQueryValueExA
ADVAPI32.dll	325		OpenSCManagerA
ADVAPI32.dll	327		OpenServiceA
ADVAPI32.dll	52		CloseServiceHandle
ADVAPI32.dll	53		ControlService
ADVAPI32.dll	215		GetUserNameA
ADVAPI32.dll	200		GetSidLengthRequired
ADVAPI32.dll	224		InitializeSid
ADVAPI32.dll	370		RegOpenKeyExA
ADVAPI32.dll	173		GetLengthSid
ADVAPI32.dll	347		RegCloseKey
ADVAPI32.dll	12		AddAccessAllowedAceEx
ADVAPI32.dll	223		InitializeSecurityDescriptor
ADVAPI32.dll	421		SetSecurityDescriptorDacl
ADVAPI32.dll	388		RegSetKeySecurity
ADVAPI32.dll	351		RegCreateKeyExA
ADVAPI32.dll	364		RegFlushKey
ADVAPI32.dll	24		AllocateAndInitializeSid
ADVAPI32.dll	157		FreeSid
ADVAPI32.dll	350		RegCreateKeyA
ADVAPI32.dll	390		RegSetValueExA
ADVAPI32.dll	369		RegOpenKeyA
SHELL32.dll	57		SHBrowseForFolderA
SHELL32.dll	75		SHGetMalloc
SHELL32.dll	114		ShellExecuteA
SHELL32.dll	80		SHGetPathFromIDListA
ole32.dll	45		CoInitialize
ole32.dll	13		CoCreateInstance
COMCTL32.dll		17
SHLWAPI.dll	27		PathFileExistsA
SHLWAPI.dll	175		StrFormatByteSizeW
SHLWAPI.dll	108		SHDeleteKeyA

StringTable 040904b0

Comments	Installer for Net Protector Total Internet Security
CompanyName	Biz Secure Labs Pvt Ltd.
FileDescription	Setup Net Protector Total Internet Security
FileVersion	2013, 3, 12, 0
InternalName	NPSetup
LegalCopyright	Copyright © 2005-2014
LegalTrademarks
OriginalFilename	NPSetup.exe
PrivateBuild
ProductName	Net Protector Total Internet Security 2014
ProductVersion	2014, 0, 0, 0
SpecialBuild

VS_FIXEDFILEINFO

FileVersion	2013.3.12.0
ProductVersion	2014.0.0.0
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	1
FileSubtype	0

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=BE/O=GlobalSign nv-sa/CN=GlobalSign CodeSigning CA - G2

serial: 1121AF97BA7328C31EE694C249D104D06CDC

Certificates (3)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:00:00:00:00:01:2f:4e:e1:35:5c
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA
        Validity
            Not Before: Apr 13 10:00:00 2011 GMT
            Not After : Apr 13 10:00:00 2019 GMT
        Subject: C=BE, O=GlobalSign nv-sa, CN=GlobalSign CodeSigning CA - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4f:14:e7:10:be:d7:26:72:ab:36:97:ef:53:
                    bf:42:84:5e:58:d1:8a:28:fc:43:46:6f:7e:28:44:
                    50:0b:75:5d:00:d7:3c:0a:44:9e:20:6a:a4:f7:45:
                    4a:37:60:a3:6e:3f:12:fa:6d:fa:b6:46:c3:6a:a3:
                    b8:0c:27:28:02:57:28:d1:50:f7:61:39:55:b8:c3:
                    e1:25:86:52:3c:bf:05:1d:d7:b3:9a:f8:9a:24:31:
                    49:d5:a2:a9:e2:d3:91:ab:3e:3c:73:ef:f6:29:f1:
                    c8:35:d0:30:7b:7f:4e:92:a5:06:8f:87:e2:ce:f5:
                    c1:63:66:ac:18:69:2a:c1:5e:bb:5a:e8:6e:95:ff:
                    3b:80:62:9d:99:c7:c7:2f:66:d5:fd:62:1a:82:55:
                    5a:c6:fa:40:77:8e:c9:30:3c:1b:f0:f2:35:b8:6c:
                    59:9c:fd:e9:d6:ca:b4:40:1e:f7:04:ca:d1:67:a9:
                    74:e3:a5:08:54:d9:83:35:3b:8e:8c:23:0c:75:b6:
                    de:86:4a:9e:1a:3e:0a:50:49:38:9c:d2:a8:90:bf:
                    98:fa:c8:8c:2b:27:11:7e:2a:fb:ce:de:a9:ae:38:
                    93:22:fa:a6:ec:fb:5c:61:76:c3:44:d6:cc:0c:7e:
                    2f:6d:06:80:a2:74:40:bb:b7:1f:f4:3b:d7:73:54:
                    1f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Subject Key Identifier: 
                08:6E:D8:B6:9C:8A:BF:ED:3E:D7:C3:74:5D:CC:80:1F:A8:2F:50:7A
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: https://www.globalsign.com/repository/

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.globalsign.net/root.crl

            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 Authority Key Identifier: 
                keyid:60:7B:66:1A:45:0D:97:CA:89:50:2F:7D:04:CD:34:A8:FF:FC:FD:4B

    Signature Algorithm: sha1WithRSAEncryption
         22:5c:c5:dd:3d:f4:0b:70:d8:e3:f5:e7:c5:8e:09:01:bb:b1:
         96:36:5c:5a:07:ad:c7:a8:44:49:51:25:7a:ae:0d:a4:19:3b:
         92:9c:cf:b9:42:26:bb:3b:6c:97:e7:c7:ce:11:6d:68:91:da:
         8d:6d:f1:53:4d:54:38:8c:61:f3:c8:82:76:69:be:81:32:0b:
         31:c3:6c:c9:9e:20:0a:58:2f:f0:48:fe:7e:48:07:aa:d7:43:
         58:94:73:54:04:31:a9:78:0d:3b:8c:b0:70:c1:3d:7e:d7:bd:
         2f:2a:c3:e2:f5:8f:0c:90:dc:6b:a5:c8:be:68:5e:5d:6d:f8:
         78:d2:be:49:95:1e:15:78:08:91:fb:34:c8:be:84:ad:bc:e0:
         c6:dd:18:db:f3:ca:f0:7b:c2:14:3c:18:b8:03:ba:95:3e:21:
         1e:3f:60:69:7a:7f:6a:03:9e:8d:4a:f9:f0:28:2c:30:84:5e:
         ec:26:72:42:b1:6d:cb:64:c3:12:8c:d6:84:4b:67:41:7c:b1:
         03:17:78:09:e3:ad:a8:b6:96:2d:a4:7e:80:03:4f:88:f7:c1:
         6b:5a:46:15:cd:2c:19:8b:d8:70:9c:e5:2d:49:88:60:72:a8:
         a4:19:52:70:43:5e:da:d6:46:03:b0:68:0e:24:ef:4a:f6:0b:
         25:24:ef:24

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Object
        Validity
            Not Before: May 10 00:00:00 2010 GMT
            Not After : May 10 23:59:59 2015 GMT
        Subject: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Time Stamping Signer
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:35:a0:36:70:22:81:11:c3:b2:83:b9:d3:28:
                    c6:36:cd:25:6b:a9:7b:b2:1c:f6:9b:51:9c:ef:35:
                    f4:ed:08:8e:5e:38:08:f8:77:3c:0a:42:e0:f3:70:
                    dc:a3:d7:ca:f5:4c:0b:cf:ff:22:9c:0a:7e:68:d6:
                    09:a2:2a:84:7b:a6:9d:b4:a9:c1:33:e2:ef:1f:17:
                    48:ca:3a:cd:46:e6:c5:aa:77:bd:e3:77:9a:fa:47:
                    53:40:28:59:43:93:f1:a4:81:ea:ef:80:b5:4f:a7:
                    08:ce:ba:6e:bc:ca:76:0c:97:64:59:86:24:bb:3d:
                    82:90:a8:55:b1:92:d3:a0:a7:05:ac:9f:53:25:08:
                    10:47:99:cd:98:de:68:e5:b4:50:78:a3:af:01:cc:
                    59:43:58:e4:76:6e:7e:ac:c7:e2:9e:1f:4f:b0:47:
                    2d:c8:0c:a3:49:27:80:75:8c:bb:06:91:65:0f:90:
                    9b:f4:ba:d1:81:c8:5c:6a:ec:14:e9:25:09:bf:23:
                    16:f4:95:46:40:40:21:bb:83:96:fd:86:1f:7a:c8:
                    0d:10:8e:a2:f8:19:07:58:7f:9f:bd:37:02:60:f2:
                    a4:e9:9d:44:3f:30:05:e4:a7:70:99:51:9a:e8:17:
                    f1:55:ca:b2:61:89:65:46:a7:6a:f2:58:46:7e:aa:
                    a0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:DA:ED:64:74:14:9C:14:3C:AB:DD:99:A9:BD:5B:28:4D:8B:3C:C9:D8

            X509v3 Subject Key Identifier: 
                2E:2D:B0:0A:44:4A:D3:87:C0:02:07:CE:97:7D:50:62:20:FD:0F:83
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.usertrust.com/UTN-USERFirst-Object.crl

            Authority Information Access: 
                OCSP - URI:http://ocsp.usertrust.com

    Signature Algorithm: sha1WithRSAEncryption
         c8:fb:63:f8:0b:75:75:2c:3a:f1:f2:13:a7:2d:b6:a3:1a:9c:
         ad:01:07:d3:34:8e:77:e0:c2:6e:ae:02:5d:48:4f:a4:d2:21:
         b6:36:fd:2a:35:43:7c:6b:df:80:87:0b:15:f0:76:32:00:b4:
         ce:b5:67:a4:2f:2f:20:1b:9c:54:9e:83:3f:1f:5f:14:95:62:
         82:0f:22:41:22:1f:70:b3:f3:f7:42:de:6c:51:cd:4b:f8:21:
         ac:9b:3b:8c:b1:e5:e6:28:8f:ce:2a:8a:f9:aa:52:4d:8c:5b:
         77:ba:4d:5a:58:db:bb:6a:04:cc:52:1e:9d:e2:28:37:0e:bb:
         e7:0e:91:c7:f8:db:f1:81:98:eb:cd:37:b3:0e:ab:65:d3:62:
         ec:3a:a5:76:eb:13:a8:35:93:c9:2e:0a:01:ec:c0:e8:cc:3d:
         7e:b6:eb:e2:c1:ec:d3:14:92:82:66:87:50:dc:fd:50:97:ac:
         b3:4a:76:73:06:c4:86:11:3a:b3:5f:43:04:52:6f:ea:b3:d0:
         74:36:4c:ca:f1:1b:79:84:37:70:63:ad:74:b9:aa:0e:f3:98:
         b0:86:08:eb:db:e0:1f:8c:10:f2:39:64:9b:ae:4f:0a:2c:92:
         8a:4f:18:b5:91:e5:8d:1a:93:5f:1f:ae:f1:a6:f0:2e:97:d0:
         d2:f6:2b:3c

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:21:af:97:ba:73:28:c3:1e:e6:94:c2:49:d1:04:d0:6c:dc
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign CodeSigning CA - G2
        Validity
            Not Before: Jan 29 12:33:38 2013 GMT
            Not After : Jan 30 12:33:38 2014 GMT
        Subject: C=IN, ST=Maharashtra, L=Pune, O=Biz Secure Labs Pvt. Ltd., OU=Technical, CN=Biz Secure Labs Pvt. Ltd./emailAddress=support@indiaantivirus.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:12:e7:2f:cf:93:ca:66:3d:14:e2:0c:0f:26:
                    83:9f:cc:23:ab:ef:47:fb:12:e5:23:78:54:e2:cd:
                    95:5c:44:2c:a4:b0:88:fe:9f:a7:71:05:b1:99:60:
                    4d:19:23:81:30:ea:9a:5e:6a:20:cc:fe:85:48:08:
                    4a:77:82:48:7a:1e:10:ea:cd:fe:06:33:91:26:2a:
                    a8:81:92:61:8e:19:9f:53:7b:10:26:15:eb:72:97:
                    60:d8:f5:02:f2:60:fd:72:b5:4a:47:0b:79:18:2d:
                    64:19:44:12:ec:95:41:7e:c2:ea:50:30:4e:43:de:
                    d6:78:8a:07:5d:10:6e:1b:53:11:40:dc:26:de:2c:
                    2f:08:96:04:f4:94:29:fd:5f:16:cc:51:ef:81:76:
                    1c:01:8d:7d:22:19:2b:b0:fa:99:ff:8d:e7:93:86:
                    0b:e3:f4:0d:af:3a:6c:25:b0:ba:e2:75:46:46:b9:
                    6b:93:58:2d:39:4e:6e:55:b0:92:4a:19:ca:7b:b1:
                    92:22:ce:4f:e4:00:ae:b1:c6:f4:aa:1d:00:55:8e:
                    09:fb:40:4d:20:63:cf:46:93:08:c7:83:87:62:1d:
                    b5:9e:e6:2a:8b:2d:dc:98:a5:08:5e:f8:5e:b1:3c:
                    de:d6:ad:ff:f3:7f:23:40:19:8c:96:bf:b9:2c:6b:
                    ac:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.4146.1.50
                  CPS: https://www.globalsign.com/repository/

            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.globalsign.com/gs/gscodesigng2.crl

            Authority Information Access: 
                CA Issuers - URI:http://secure.globalsign.com/cacert/gscodesigng2.crt

            X509v3 Subject Key Identifier: 
                CA:21:81:F5:A4:7A:D5:BB:FB:C3:33:74:DF:05:4F:27:56:3A:3E:9D
            X509v3 Authority Key Identifier: 
                keyid:08:6E:D8:B6:9C:8A:BF:ED:3E:D7:C3:74:5D:CC:80:1F:A8:2F:50:7A

    Signature Algorithm: sha1WithRSAEncryption
         5e:d7:4c:8a:df:de:a0:e2:26:24:3b:98:e6:ef:e7:31:3e:c0:
         2c:a9:93:2d:f9:f0:29:6b:22:4e:fd:b3:b3:52:81:52:68:1b:
         0c:e3:d1:53:84:25:bb:32:f6:fe:c3:91:0a:b8:54:5d:b9:fa:
         7f:74:e8:4a:56:5b:c1:2a:88:11:22:02:ce:0b:3e:fa:66:4c:
         a5:65:80:14:ef:12:6e:bd:00:23:41:bf:fa:4c:8c:5b:cb:bd:
         6a:ae:85:1f:77:9b:82:eb:13:94:71:d8:85:ac:a8:82:e1:0c:
         c9:9e:48:0a:36:13:a5:a4:0b:52:92:dc:7e:2b:4e:ca:ab:e7:
         fb:f2:bd:7b:80:6a:47:3a:64:9b:c8:98:51:d2:ed:3e:62:9d:
         8b:5a:7f:91:bb:f4:62:b9:9f:da:86:53:3c:20:7a:d5:8e:5b:
         8a:ec:4f:40:fa:4c:02:bd:13:57:db:a5:33:60:d6:32:23:e3:
         cf:b9:7c:5a:69:dd:13:21:dc:76:af:f7:cd:7c:68:f5:9f:a3:
         a9:97:ef:9d:7d:d3:53:aa:62:eb:d5:59:2f:d2:9f:e0:bd:f2:
         99:5f:c5:c7:f7:97:c3:b0:00:e5:61:99:47:18:0a:5f:0a:b7:
         01:f7:3b:df:e2:ff:f4:00:48:ec:8c:77:fa:ff:0d:e9:33:68:
         90:d6:64:26

pkcs7-signedData

SHA1: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15

00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |

SHA1

d5 90 27 85 fe 4f 0a 23 bf 06 a4 20 b0 58 ba 9b |..'..O.#... .X..| b9 d7 06 5c |...\ |

Certificates
- Certificate #0
  - 2
    - 04:00:00:00:00:01:2F:4E:E1:35:5C
    - RSA-SHA1: nil
    - Issuer
      - C: BE
      - O: GlobalSign nv-sa
      - OU: Root CA
      - CN: GlobalSign Root CA
    - 2011-04-13 10:00:00 UTC: 2019-04-13 10:00:00 UTC
    - Subject
      - C: BE
      - O: GlobalSign nv-sa
      - CN: GlobalSign CodeSigning CA - G2
    - #5
      - rsaEncryption: nil
      - B2:4F:14:E7:10:BE:D7:26:72:AB:36:97:EF:53:BF:42:
        84:5E:58:D1:8A:28:FC:43:46:6F:7E:28:44:50:0B:75:
        5D:00:D7:3C:0A:44:9E:20:6A:A4:F7:45:4A:37:60:A3:
        6E:3F:12:FA:6D:FA:B6:46:C3:6A:A3:B8:0C:27:28:02:
        57:28:D1:50:F7:61:39:55:B8:C3:E1:25:86:52:3C:BF:
        05:1D:D7:B3:9A:F8:9A:24:31:49:D5:A2:A9:E2:D3:91:
        AB:3E:3C:73:EF:F6:29:F1:C8:35:D0:30:7B:7F:4E:92:
        A5:06:8F:87:E2:CE:F5:C1:63:66:AC:18:69:2A:C1:5E:
        BB:5A:E8:6E:95:FF:3B:80:62:9D:99:C7:C7:2F:66:D5:
        FD:62:1A:82:55:5A:C6:FA:40:77:8E:C9:30:3C:1B:F0:
        F2:35:B8:6C:59:9C:FD:E9:D6:CA:B4:40:1E:F7:04:CA:
        D1:67:A9:74:E3:A5:08:54:D9:83:35:3B:8E:8C:23:0C:
        75:B6:DE:86:4A:9E:1A:3E:0A:50:49:38:9C:D2:A8:90:
        BF:98:FA:C8:8C:2B:27:11:7E:2A:FB:CE:DE:A9:AE:38:
        93:22:FA:A6:EC:FB:5C:61:76:C3:44:D6:CC:0C:7E:2F:
        6D:06:80:A2:74:40:BB:B7:1F:F4:3B:D7:73:54:1F:F3: 0x010001
    - #6
      - keyUsage: true, 6
      - basicConstraints
        true
        true: 0
      - subjectKeyIdentifier:
        08 6e d8 b6 9c 8a bf ed 3e d7 c3 74 5d cc 80 1f |.n......>..t]...| a8 2f 50 7a |./Pz |
      - certificatePolicies
        anyPolicy
        id-qt-cps: https://www.globalsign.com/repository/
      - crlDistributionPoints: http://crl.globalsign.net/root.crl
      - extendedKeyUsage: codeSigning
      - authorityKeyIdentifier:
        60 7b 66 1a 45 0d 97 ca 89 50 2f 7d 04 cd 34 a8 |`{f.E....P/}..4.| ff fc fd 4b |...K |
  - RSA-SHA1:
```
22 5c c5 dd 3d f4 0b 70  d8 e3 f5 e7 c5 8e 09 01  |"\..=..p........|
bb b1 96 36 5c 5a 07 ad  c7 a8 44 49 51 25 7a ae  |...6\Z....DIQ%z.|
0d a4 19 3b 92 9c cf b9  42 26 bb 3b 6c 97 e7 c7  |...;....B&.;l...|
ce 11 6d 68 91 da 8d 6d  f1 53 4d 54 38 8c 61 f3  |..mh...m.SMT8.a.|
c8 82 76 69 be 81 32 0b  31 c3 6c c9 9e 20 0a 58  |..vi..2.1.l.. .X|
2f f0 48 fe 7e 48 07 aa  d7 43 58 94 73 54 04 31  |/.H.~H...CX.sT.1|
a9 78 0d 3b 8c b0 70 c1  3d 7e d7 bd 2f 2a c3 e2  |.x.;..p.=~../*..|
f5 8f 0c 90 dc 6b a5 c8  be 68 5e 5d 6d f8 78 d2  |.....k...h^]m.x.|
be 49 95 1e 15 78 08 91  fb 34 c8 be 84 ad bc e0  |.I...x...4......|
c6 dd 18 db f3 ca f0 7b  c2 14 3c 18 b8 03 ba 95  |.......{..<.....|
3e 21 1e 3f 60 69 7a 7f  6a 03 9e 8d 4a f9 f0 28  |>!.?`iz.j...J..(|
2c 30 84 5e ec 26 72 42  b1 6d cb 64 c3 12 8c d6  |,0.^.&rB.m.d....|
84 4b 67 41 7c b1 03 17  78 09 e3 ad a8 b6 96 2d  |.KgA|...x......-|
a4 7e 80 03 4f 88 f7 c1  6b 5a 46 15 cd 2c 19 8b  |.~..O...kZF..,..|
d8 70 9c e5 2d 49 88 60  72 a8 a4 19 52 70 43 5e  |.p..-I.`r...RpC^|
da d6 46 03 b0 68 0e 24  ef 4a f6 0b 25 24 ef 24  |..F..h.$.J..%$.$|
```
- Certificate #1
  - 2
    - 47:8A:8E:FB:59:E1:D8:3F:0C:E1:42:D2:A2:87:07:BE
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - ST: UT
      - L: Salt Lake City
      - O: The USERTRUST Network
      - OU: http://www.usertrust.com
      - CN: UTN-USERFirst-Object
    - 2010-05-10 00:00:00 UTC: 2015-05-10 23:59:59 UTC
    - Subject
      - C: GB
      - ST: Greater Manchester
      - L: Salford
      - O: COMODO CA Limited
      - CN: COMODO Time Stamping Signer
    - #5
      - rsaEncryption: nil
      - BC:35:A0:36:70:22:81:11:C3:B2:83:B9:D3:28:C6:36:
        CD:25:6B:A9:7B:B2:1C:F6:9B:51:9C:EF:35:F4:ED:08:
        8E:5E:38:08:F8:77:3C:0A:42:E0:F3:70:DC:A3:D7:CA:
        F5:4C:0B:CF:FF:22:9C:0A:7E:68:D6:09:A2:2A:84:7B:
        A6:9D:B4:A9:C1:33:E2:EF:1F:17:48:CA:3A:CD:46:E6:
        C5:AA:77:BD:E3:77:9A:FA:47:53:40:28:59:43:93:F1:
        A4:81:EA:EF:80:B5:4F:A7:08:CE:BA:6E:BC:CA:76:0C:
        97:64:59:86:24:BB:3D:82:90:A8:55:B1:92:D3:A0:A7:
        05:AC:9F:53:25:08:10:47:99:CD:98:DE:68:E5:B4:50:
        78:A3:AF:01:CC:59:43:58:E4:76:6E:7E:AC:C7:E2:9E:
        1F:4F:B0:47:2D:C8:0C:A3:49:27:80:75:8C:BB:06:91:
        65:0F:90:9B:F4:BA:D1:81:C8:5C:6A:EC:14:E9:25:09:
        BF:23:16:F4:95:46:40:40:21:BB:83:96:FD:86:1F:7A:
        C8:0D:10:8E:A2:F8:19:07:58:7F:9F:BD:37:02:60:F2:
        A4:E9:9D:44:3F:30:05:E4:A7:70:99:51:9A:E8:17:F1:
        55:CA:B2:61:89:65:46:A7:6A:F2:58:46:7E:AA:A0:07: 0x010001
    - #6
      - authorityKeyIdentifier:
        da ed 64 74 14 9c 14 3c ab dd 99 a9 bd 5b 28 4d |..dt...<.....[(M| 8b 3c c9 d8 |.<.. |
      - subjectKeyIdentifier:
        2e 2d b0 0a 44 4a d3 87 c0 02 07 ce 97 7d 50 62 |.-..DJ.......}Pb| 20 fd 0f 83 | ... |
      - keyUsage: true, 0xc0
      - basicConstraints
        true
        nil
      - extendedKeyUsage: true, timeStamping
      - crlDistributionPoints: http://crl.usertrust.com/UTN-USERFirst-Object.crl
      - authorityInfoAccess
        OCSP: http://ocsp.usertrust.com
  - RSA-SHA1:
```
c8 fb 63 f8 0b 75 75 2c  3a f1 f2 13 a7 2d b6 a3  |..c..uu,:....-..|
1a 9c ad 01 07 d3 34 8e  77 e0 c2 6e ae 02 5d 48  |......4.w..n..]H|
4f a4 d2 21 b6 36 fd 2a  35 43 7c 6b df 80 87 0b  |O..!.6.*5C|k....|
15 f0 76 32 00 b4 ce b5  67 a4 2f 2f 20 1b 9c 54  |..v2....g.// ..T|
9e 83 3f 1f 5f 14 95 62  82 0f 22 41 22 1f 70 b3  |..?._..b.."A".p.|
f3 f7 42 de 6c 51 cd 4b  f8 21 ac 9b 3b 8c b1 e5  |..B.lQ.K.!..;...|
e6 28 8f ce 2a 8a f9 aa  52 4d 8c 5b 77 ba 4d 5a  |.(..*...RM.[w.MZ|
58 db bb 6a 04 cc 52 1e  9d e2 28 37 0e bb e7 0e  |X..j..R...(7....|
91 c7 f8 db f1 81 98 eb  cd 37 b3 0e ab 65 d3 62  |.........7...e.b|
ec 3a a5 76 eb 13 a8 35  93 c9 2e 0a 01 ec c0 e8  |.:.v...5........|
cc 3d 7e b6 eb e2 c1 ec  d3 14 92 82 66 87 50 dc  |.=~.........f.P.|
fd 50 97 ac b3 4a 76 73  06 c4 86 11 3a b3 5f 43  |.P...Jvs....:._C|
04 52 6f ea b3 d0 74 36  4c ca f1 1b 79 84 37 70  |.Ro...t6L...y.7p|
63 ad 74 b9 aa 0e f3 98  b0 86 08 eb db e0 1f 8c  |c.t.............|
10 f2 39 64 9b ae 4f 0a  2c 92 8a 4f 18 b5 91 e5  |..9d..O.,..O....|
8d 1a 93 5f 1f ae f1 a6  f0 2e 97 d0 d2 f6 2b 3c  |..._..........+<|
```
- Certificate #2
  - 2
    - 11:21:AF:97:BA:73:28:C3:1E:E6:94:C2:49:D1:04:D0:
      6C:DC
    - RSA-SHA1: nil
    - Issuer
      - C: BE
      - O: GlobalSign nv-sa
      - CN: GlobalSign CodeSigning CA - G2
    - 2013-01-29 12:33:38 UTC: 2014-01-30 12:33:38 UTC
    - Subject
      - C: IN
      - ST: Maharashtra
      - L: Pune
      - O: Biz Secure Labs Pvt. Ltd.
      - OU: Technical
      - CN: Biz Secure Labs Pvt. Ltd.
      - emailAddress: support@indiaantivirus.com
    - #5
      - rsaEncryption: nil
      - AF:12:E7:2F:CF:93:CA:66:3D:14:E2:0C:0F:26:83:9F:
        CC:23:AB:EF:47:FB:12:E5:23:78:54:E2:CD:95:5C:44:
        2C:A4:B0:88:FE:9F:A7:71:05:B1:99:60:4D:19:23:81:
        30:EA:9A:5E:6A:20:CC:FE:85:48:08:4A:77:82:48:7A:
        1E:10:EA:CD:FE:06:33:91:26:2A:A8:81:92:61:8E:19:
        9F:53:7B:10:26:15:EB:72:97:60:D8:F5:02:F2:60:FD:
        72:B5:4A:47:0B:79:18:2D:64:19:44:12:EC:95:41:7E:
        C2:EA:50:30:4E:43:DE:D6:78:8A:07:5D:10:6E:1B:53:
        11:40:DC:26:DE:2C:2F:08:96:04:F4:94:29:FD:5F:16:
        CC:51:EF:81:76:1C:01:8D:7D:22:19:2B:B0:FA:99:FF:
        8D:E7:93:86:0B:E3:F4:0D:AF:3A:6C:25:B0:BA:E2:75:
        46:46:B9:6B:93:58:2D:39:4E:6E:55:B0:92:4A:19:CA:
        7B:B1:92:22:CE:4F:E4:00:AE:B1:C6:F4:AA:1D:00:55:
        8E:09:FB:40:4D:20:63:CF:46:93:08:C7:83:87:62:1D:
        B5:9E:E6:2A:8B:2D:DC:98:A5:08:5E:F8:5E:B1:3C:DE:
        D6:AD:FF:F3:7F:23:40:19:8C:96:BF:B9:2C:6B:AC:7D: 0x010001
    - #6
      - keyUsage: true, 0x80
      - certificatePolicies
        1.3.6.1.4.1.4146.1.50
        id-qt-cps: https://www.globalsign.com/repository/
      - basicConstraints
        nil
      - extendedKeyUsage: codeSigning
      - crlDistributionPoints: http://crl.globalsign.com/gs/gscodesigng2.crl
      - authorityInfoAccess
        caIssuers: http://secure.globalsign.com/cacert/gscodesigng2.crt
      - subjectKeyIdentifier:
        ca 21 81 f5 a4 7a d5 bb fb c3 33 74 df 05 4f 27 |.!...z....3t..O'| 56 3a 3e 9d |V:>. |
      - authorityKeyIdentifier:
        08 6e d8 b6 9c 8a bf ed 3e d7 c3 74 5d cc 80 1f |.n......>..t]...| a8 2f 50 7a |./Pz |
  - RSA-SHA1:
```
5e d7 4c 8a df de a0 e2  26 24 3b 98 e6 ef e7 31  |^.L.....&$;....1|
3e c0 2c a9 93 2d f9 f0  29 6b 22 4e fd b3 b3 52  |>.,..-..)k"N...R|
81 52 68 1b 0c e3 d1 53  84 25 bb 32 f6 fe c3 91  |.Rh....S.%.2....|
0a b8 54 5d b9 fa 7f 74  e8 4a 56 5b c1 2a 88 11  |..T]...t.JV[.*..|
22 02 ce 0b 3e fa 66 4c  a5 65 80 14 ef 12 6e bd  |"...>.fL.e....n.|
00 23 41 bf fa 4c 8c 5b  cb bd 6a ae 85 1f 77 9b  |.#A..L.[..j...w.|
82 eb 13 94 71 d8 85 ac  a8 82 e1 0c c9 9e 48 0a  |....q.........H.|
36 13 a5 a4 0b 52 92 dc  7e 2b 4e ca ab e7 fb f2  |6....R..~+N.....|
bd 7b 80 6a 47 3a 64 9b  c8 98 51 d2 ed 3e 62 9d  |.{.jG:d...Q..>b.|
8b 5a 7f 91 bb f4 62 b9  9f da 86 53 3c 20 7a d5  |.Z....b....S< z.|
8e 5b 8a ec 4f 40 fa 4c  02 bd 13 57 db a5 33 60  |.[..O@.L...W..3`|
d6 32 23 e3 cf b9 7c 5a  69 dd 13 21 dc 76 af f7  |.2#...|Zi..!.v..|
cd 7c 68 f5 9f a3 a9 97  ef 9d 7d d3 53 aa 62 eb  |.|h.......}.S.b.|
d5 59 2f d2 9f e0 bd f2  99 5f c5 c7 f7 97 c3 b0  |.Y/......_......|
00 e5 61 99 47 18 0a 5f  0a b7 01 f7 3b df e2 ff  |..a.G.._....;...|
f4 00 48 ec 8c 77 fa ff  0d e9 33 68 90 d6 64 26  |..H..w....3h..d&|
```

Signer

1
unnamed
- #0
  - C: BE
  - O: GlobalSign nv-sa
  - CN: GlobalSign CodeSigning CA - G2
- 11:21:AF:97:BA:73:28:C3:1E:E6:94:C2:49:D1:04:D0:
  6C:DC
SHA1: nil

1.3.6.1.4.1.311.2.1.12
- nil
contentType: 1.3.6.1.4.1.311.2.1.4
1.3.6.1.4.1.311.2.1.11: msCodeInd

messageDigest:

a9 6c bc d6 b0 86 e9 22  0b bb 05 33 81 4b eb 1b  |.l....."...3.K..|
3a 57 db eb                                       |:W..            |

rsaEncryption:

25 7a ca 13 b9 bc 60 05  64 3e 6d 85 31 e7 0d b1  |%z....`.d>m.1...|
ff 80 cb 44 14 83 64 3f  31 30 16 1c 4a 3c d3 6f  |...D..d?10..J<.o|
58 8d f0 4e 8c d9 c8 6c  a4 4f f7 18 56 7e 47 ad  |X..N...l.O..V~G.|
5f 29 56 99 b4 98 02 e6  05 81 33 4f 4b 7b 69 1f  |_)V.......3OK{i.|
16 ca 97 73 bc 00 c3 eb  9f 7c 2f 55 5b 85 d9 5f  |...s.....|/U[.._|
4a 5a 61 d1 13 49 49 db  6b ae f7 e9 56 c5 7a b1  |JZa..II.k...V.z.|
7b 9d ff 07 b7 b5 8f b3  8d 95 34 fe 81 77 94 6d  |{.........4..w.m|
f7 cd 5f 82 e2 84 cf 39  52 dc ba cf 5d fa 22 06  |.._....9R...].".|
2e 2c 04 e6 f5 5d c6 88  a2 d2 e1 29 8e 19 5c 2e  |.,...].....)..\.|
8b f5 8c 70 ec 74 a0 45  60 18 b6 ff 25 e9 90 e8  |...p.t.E`...%...|
50 3c 41 ac bc 30 c5 26  22 f2 0e 4a ce 6f 05 af  |P...=...H...|
70 98 b5 b6 98 3c 8a ff  c5 68 e8 7a 60 9e 25 56  |p....<...h.z`.%V|
09 88 0a 1e 9c 8f eb 21  9a b3 5b fd 10 62 0d ab  |.......!..[..b..|

countersignature

unnamed
- #0
  - C: US
  - ST: UT
  - L: Salt Lake City
  - O: The USERTRUST Network
  - OU: http://www.usertrust.com
  - CN: UTN-USERFirst-Object
- 47:8A:8E:FB:59:E1:D8:3F:0C:E1:42:D2:A2:87:07:BE
SHA1: nil

contentType: pkcs7-data
signingTime: 2013-12-03 12:00:58 UTC