avengine.dll - AV engine loader

info
MZ
PE
resources
imports
exports
foremost
version info
signature
hexdump
disasm
log
discuss
donate

filename	avengine.dll
size	469848 (0x72b58)
md5	470ef49cb6152de8eafe014f8d653051

type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x100

Rich Header

lib id	version	times used
126	50327	2
125	50727	1
110	50727	4
109	50727	13
123	50727	4
123	40310	9
1	0	183
114	50727	51
122	50727	1
124	50727	1
120	50727	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x8664
NumberOfSections	6
TimeDateStamp	0x4f55e1c4
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xf0
Characteristics	0x2022
Magic	0x20b
LinkerVersion	8.0
SizeOfCode	0x46e00
SizeOfInitializedData	0x2a200
SizeOfUninitializedData	0
AddressOfEntryPoint	0x47430
BaseOfCode	0x1000
ImageBase	0x180000000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	5.2
Reserved1	0
SizeOfImage	0x76000
SizeOfHeaders	0x400
CheckSum	0x7b62e
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x46d0c	0x46e00	R-X CODE
.rdata	0x48000	0x1f010	0x1f200	R-- IDATA
.data	0x68000	0x3a90	0x3400	RW- IDATA
.pdata	0x6c000	0x6330	0x6400	R-- IDATA
.rsrc	0x73000	0x5f4	0x600	R-- IDATA
.reloc	0x74000	0x11d0	0x1200	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0x66fa0	0x70
IMPORT	0x65844	0x8c
RESOURCE	0x73000	0x5f4
EXCEPTION	0x6c000	0x6330
SECURITY	0x71400	0x1758
BASERELOC	0x74000	0xa20
DEBUG	0x48620	0x1c
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x48000	0x548
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
VERSION	#1	1020	1252
MANIFEST	#2	342	1252

module_name	hint	function_name
VERSION.dll	10	VerQueryValueA
VERSION.dll		GetFileVersionInfoA
VERSION.dll	1	GetFileVersionInfoSizeA
PSAPI.DLL	16	GetModuleInformation
PSAPI.DLL	4	EnumProcessModules
KERNEL32.dll	671	QueryPerformanceCounter
KERNEL32.dll	142	DisableThreadLibraryCalls
KERNEL32.dll	720	RtlCaptureContext
KERNEL32.dll	727	RtlLookupFunctionEntry
KERNEL32.dll	734	RtlVirtualUnwind
KERNEL32.dll	565	IsDebuggerPresent
KERNEL32.dll	848	SetUnhandledExceptionFilter
KERNEL32.dll	875	TlsGetValue
KERNEL32.dll	876	TlsSetValue
KERNEL32.dll	325	GetCurrentProcess
KERNEL32.dll	383	GetModuleFileNameA
KERNEL32.dll	460	GetSystemTimeAsFileTime
KERNEL32.dll	421	GetProcessHeap
KERNEL32.dll	530	HeapAlloc
KERNEL32.dll	536	HeapFree
KERNEL32.dll	371	GetLastError
KERNEL32.dll	593	LoadLibraryW
KERNEL32.dll	418	GetProcAddress
KERNEL32.dll	251	FreeLibrary
KERNEL32.dll	860	Sleep
KERNEL32.dll	54	CloseHandle
KERNEL32.dll	83	CreateEventW
KERNEL32.dll	549	InitializeCriticalSection
KERNEL32.dll	132	DeleteCriticalSection
KERNEL32.dll	155	EnterCriticalSection
KERNEL32.dll	589	LeaveCriticalSection
KERNEL32.dll	873	TlsAlloc
KERNEL32.dll	874	TlsFree
KERNEL32.dll	532	HeapCreate
KERNEL32.dll	534	HeapDestroy
KERNEL32.dll	718	ResumeThread
KERNEL32.dll	797	SetEvent
KERNEL32.dll	715	ResetEvent
KERNEL32.dll	918	WaitForSingleObject
KERNEL32.dll	150	DuplicateHandle
KERNEL32.dll	328	GetCurrentThread
KERNEL32.dll	480	GetThreadTimes
KERNEL32.dll	481	GetTickCount
KERNEL32.dll	329	GetCurrentThreadId
KERNEL32.dll	646	OpenThread
KERNEL32.dll	862	SuspendThread
KERNEL32.dll	473	GetThreadContext
KERNEL32.dll	838	SetThreadContext
KERNEL32.dll	540	HeapReAlloc
KERNEL32.dll	209	FindClose
KERNEL32.dll	216	FindFirstFileW
KERNEL32.dll	81	CreateDirectoryW
KERNEL32.dll	224	FindNextFileW
KERNEL32.dll	135	DeleteFileW
KERNEL32.dll	719	RtlAddFunctionTable
KERNEL32.dll	724	RtlDeleteFunctionTable
KERNEL32.dll	141	DeviceIoControl
KERNEL32.dll	365	GetFullPathNameW
KERNEL32.dll	86	CreateFileA
KERNEL32.dll	87	CreateFileMappingA
KERNEL32.dll	99	CreateMutexA
KERNEL32.dll	702	ReleaseMutex
KERNEL32.dll	612	MapViewOfFile
KERNEL32.dll	887	UnmapViewOfFile
KERNEL32.dll	82	CreateEventA
KERNEL32.dll	858	SignalObjectAndWait
KERNEL32.dll	663	PulseEvent
KERNEL32.dll	903	VirtualAlloc
KERNEL32.dll	455	GetSystemInfo
KERNEL32.dll	905	VirtualFree
KERNEL32.dll	908	VirtualProtect
KERNEL32.dll	796	SetErrorMode
KERNEL32.dll	491	GetVersionExA
KERNEL32.dll	385	GetModuleHandleA
KERNEL32.dll	922	WideCharToMultiByte
KERNEL32.dll	625	MultiByteToWideChar
KERNEL32.dll	938	WriteFile
KERNEL32.dll	689	ReadFile
KERNEL32.dll	241	FlushFileBuffers
KERNEL32.dll	358	GetFileSize
KERNEL32.dll	802	SetFilePointer
KERNEL32.dll	88	CreateFileMappingW
KERNEL32.dll	791	SetEndOfFile
KERNEL32.dll	199	FileTimeToLocalFileTime
KERNEL32.dll	485	GetUserDefaultLCID
KERNEL32.dll	448	GetSystemDefaultLCID
KERNEL32.dll	353	GetFileAttributesA
KERNEL32.dll	738	SearchPathA
KERNEL32.dll	884	UnhandledExceptionFilter
KERNEL32.dll	868	TerminateProcess
KERNEL32.dll	326	GetCurrentProcessId
USER32.dll	40	CharLowerBuffW
USER32.dll	54	CharUpperBuffW
MSVCP80.dll	2896	struct std::_Smanip<__int64> __cdecl std::setw(__int64) ?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
MSVCP80.dll	2886	struct std::_Smanip<__int64> __cdecl std::setprecision(__int64) ?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z
MSVCP80.dll	1656	public: static char * __ptr64 __cdecl std::char_traits<char>::copy(char * __ptr64, char const * __ptr64, unsigned __int64) ?copy@?$char_traits@D@std@@SAPEADPEADPEBD_K@Z
MSVCP80.dll	692	public: class std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> > & __ptr64 __cdecl std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >::operator=(char const * __ptr64) __ptr64 ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV01@PEBD@Z
MSVCP80.dll	2462	public: static char * __ptr64 __cdecl std::char_traits<char>::move(char * __ptr64, char const * __ptr64, unsigned __int64) ?move@?$char_traits@D@std@@SAPEADPEADPEBD_K@Z
MSVCP80.dll	380	public: __cdecl std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >(void) __ptr64 ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ
MSVCP80.dll	370	public: __cdecl std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >(class std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> > const & __ptr64) __ptr64 ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@AEBV01@@Z
MSVCP80.dll	606	public: __cdecl std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >::~basic_string<char, struct std::char_traits<char>, class std::allocator<char> >(void) __ptr64 ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ
MSVCP80.dll	1953	public: class std::_String_const_iterator<char, struct std::char_traits<char>, class std::allocator<char> > __cdecl std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >::end(void)const __ptr64 ?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBA?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
MSVCP80.dll	1488	public: void __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::_Unlock(void) __ptr64 ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAXXZ
MSVCP80.dll	2934	public: int __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::sputc(char) __ptr64 ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
MSVCP80.dll	1583	public: class std::_String_const_iterator<char, struct std::char_traits<char>, class std::allocator<char> > __cdecl std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >::begin(void)const __ptr64 ?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBA?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
MSVCP80.dll	1034	public: void __cdecl std::basic_ostringstream<char, struct std::char_traits<char>, class std::allocator<char> >::`vbase destructor'(void) __ptr64 ??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAXXZ
MSVCP80.dll	2937	public: __int64 __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::sputn(char const * __ptr64, __int64) __ptr64 ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
MSVCP80.dll	1362	public: void __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::_Lock(void) __ptr64 ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAXXZ
MSVCP80.dll	3047	bool __cdecl std::uncaught_exception(void) ?uncaught_exception@std@@YA_NXZ
MSVCP80.dll	2953	public: class std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> > __cdecl std::basic_ostringstream<char, struct std::char_traits<char>, class std::allocator<char> >::str(void)const __ptr64 ?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
MSVCP80.dll	788	public: class std::basic_ostream<char, struct std::char_traits<char> > & __ptr64 __cdecl std::basic_ostream<char, struct std::char_traits<char> >::operator<<(int) __ptr64 ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
MSVCP80.dll	797	public: class std::basic_ostream<char, struct std::char_traits<char> > & __ptr64 __cdecl std::basic_ostream<char, struct std::char_traits<char> >::operator<<(class std::ios_base & __ptr64 (__cdecl*)(class std::ios_base & __ptr64)) __ptr64 ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
MSVCP80.dll	2887	public: void __cdecl std::basic_ios<char, struct std::char_traits<char> >::setstate(int, bool) __ptr64 ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
MSVCP80.dll	359	public: __cdecl std::basic_ostringstream<char, struct std::char_traits<char>, class std::allocator<char> >::basic_ostringstream<char, struct std::char_traits<char>, class std::allocator<char> >(int) __ptr64 ??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@H@Z
MSVCP80.dll	2084	public: class std::basic_ostream<char, struct std::char_traits<char> > & __ptr64 __cdecl std::basic_ostream<char, struct std::char_traits<char> >::flush(void) __ptr64 ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
MSVCP80.dll	1402	public: void __cdecl std::basic_ostream<char, struct std::char_traits<char> >::_Osfx(void) __ptr64 ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
MSVCP80.dll	375	public: __cdecl std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >(char const * __ptr64) __ptr64 ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@PEBD@Z
MSVCR80.dll	69	public: virtual char const * __ptr64 __cdecl std::exception::what(void)const __ptr64 ?what@exception@std@@UEBAPEBDXZ
MSVCR80.dll	763	_purecall
MSVCR80.dll	15	public: virtual __cdecl std::exception::~exception(void) __ptr64 ??1exception@std@@UEAA@XZ
MSVCR80.dll	11	public: __cdecl std::exception::exception(void) __ptr64 ??0exception@std@@QEAA@XZ
MSVCR80.dll	1374	vsprintf_s
MSVCR80.dll	10	public: __cdecl std::exception::exception(class std::exception const & __ptr64) __ptr64 ??0exception@std@@QEAA@AEBV01@@Z
MSVCR80.dll	17	void * __ptr64 __cdecl operator new(unsigned __int64) ??2@YAPEAX_K@Z
MSVCR80.dll	19	void __cdecl operator delete(void * __ptr64) ??3@YAXPEAX@Z
MSVCR80.dll	1340	strrchr
MSVCR80.dll	1279	memmove
MSVCR80.dll	9	public: __cdecl std::exception::exception(char const * __ptr64 const & __ptr64, int) __ptr64 ??0exception@std@@QEAA@AEBQEBDH@Z
MSVCR80.dll	1411	wctomb
MSVCR80.dll	1274	mbtowc
MSVCR80.dll	5	public: __cdecl std::bad_cast::bad_cast(char const * __ptr64) __ptr64 ??0bad_cast@std@@QEAA@PEBD@Z
MSVCR80.dll	4	public: __cdecl std::bad_cast::bad_cast(class std::bad_cast const & __ptr64) __ptr64 ??0bad_cast@std@@QEAA@AEBV01@@Z
MSVCR80.dll	13	public: virtual __cdecl std::bad_cast::~bad_cast(void) __ptr64 ??1bad_cast@std@@UEAA@XZ
MSVCR80.dll	566	_itoa
MSVCR80.dll	777	_resetstkoflw
MSVCR80.dll	246	_beginthreadex
MSVCR80.dll	867	_stricmp
MSVCR80.dll	1277	memcpy
MSVCR80.dll	1276	memcmp
MSVCR80.dll	1281	memset
MSVCR80.dll	1327	strcpy_s
MSVCR80.dll	1386	wcscpy_s
MSVCR80.dll	89	__C_specific_handler
MSVCR80.dll	942	_unlock
MSVCR80.dll	133	__dllonexit
MSVCR80.dll	316	_encode_pointer
MSVCR80.dll	582	_lock
MSVCR80.dll	749	_onexit
MSVCR80.dll	306	_decode_pointer
MSVCR80.dll	982	_vsnprintf_s
MSVCR80.dll	599	_malloc_crt
MSVCR80.dll	471	_initterm
MSVCR80.dll	472	_initterm_e
MSVCR80.dll	1209	free
MSVCR80.dll	317	_encoded_null
MSVCR80.dll	231	_amsg_exit
MSVCR80.dll	90	__CppXcptFilter
MSVCR80.dll	67	void __cdecl terminate(void) ?terminate@@YAXXZ
MSVCR80.dll	56	public: void __cdecl type_info::_type_info_dtor_internal_method(void) __ptr64 ?_type_info_dtor_internal_method@type_info@@QEAAXXZ
MSVCR80.dll	123	__clean_type_info_names_internal
MSVCR80.dll	131	__crt_debugger_hook
MSVCR80.dll	99	__CxxFrameHandler3
MSVCR80.dll	73	_CxxThrowException

ord	entry_va	function_name
1	0x13c30	ekaCanUnloadModule
2	0x13c40	ekaGetObjectFactory

module_name	avengine.dll
flags	0
timestamp	2012-03-06 10:06:54
version	0.0
ordinal_base	1
nFunctions	2
nNames	2
Names(2)	0x66fd0
Functions(2)	0x66fc8
NameOrdinals(2)	0x66fd8

StringTable 040904B0

CompanyName	Kaspersky Lab ZAO
LegalCopyright	© 2012 Kaspersky Lab ZAO. All Rights Reserved.
LegalTrademarks	Registered trademarks and service marks are the property of their respective owners
ProductName	Kaspersky Anti-Virus Engine
ProductVersion	1.2.2.71
FileVersion	1.2.2.71
FileDescription	AV engine loader
InternalName	avengine
OriginalFilename	avengine.dll

VS_FIXEDFILEINFO

FileVersion	1.2.2.71
ProductVersion	1.2.2.71
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	1
FileSubtype	0

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa (c)10/CN=VeriSign Class 3 Code Signing 2010 CA

serial: 16E5A775120300FB3419458B40D40834

Certificates (4)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA
        Validity
            Not Before: Jun 15 00:00:00 2007 GMT
            Not After : Jun 14 23:59:59 2012 GMT
        Subject: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (1024 bit)
                Modulus:
                    00:c4:b5:f2:52:15:bc:88:86:60:29:16:4a:5b:2f:
                    4b:91:6b:87:91:f3:35:54:58:35:ea:d1:36:5e:62:
                    4d:52:51:34:71:c2:7b:66:1d:89:c8:dd:2a:c4:6a:
                    0a:f6:37:d9:98:74:91:f6:92:ae:b0:b5:76:96:f1:
                    a9:4a:63:45:47:2e:6b:0b:92:4e:4b:2b:8c:ee:58:
                    4a:8b:d4:07:e4:1a:2c:f8:82:aa:58:d9:cd:42:f3:
                    2d:c0:75:de:8d:ab:c7:8e:1d:9a:6c:4c:08:95:1e:
                    de:db:ef:67:e1:72:c2:49:c2:9e:60:3c:e1:e2:be:
                    16:a3:63:78:69:14:7b:ad:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com

            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.verisign.com/tss-ca.crl

            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation
            X509v3 Subject Alternative Name: 
                DirName:/CN=TSA1-2
    Signature Algorithm: sha1WithRSAEncryption
         50:c5:4b:c8:24:80:df:e4:0d:24:c2:de:1a:b1:a1:02:a1:a6:
         82:2d:0c:83:15:81:37:0a:82:0e:2c:b0:5a:17:61:b5:d8:05:
         fe:88:db:f1:91:91:b3:56:1a:40:a6:eb:92:be:38:39:b0:75:
         36:74:3a:98:4f:e4:37:ba:99:89:ca:95:42:1d:b0:b9:c7:a0:
         8d:57:e0:fa:d5:64:04:42:35:4e:01:d1:33:a2:17:c8:4d:aa:
         27:c7:f2:e1:86:4c:02:38:4d:83:78:c6:fc:53:e0:eb:e0:06:
         87:dd:a4:96:9e:5e:0c:98:e2:a5:be:bf:82:85:c3:60:e1:df:
         ad:28:d8:c7:a5:4b:64:da:c7:1b:5b:bd:ac:39:08:d5:38:22:
         a1:33:8b:2f:8a:9a:eb:bc:07:21:3f:44:41:09:07:b5:65:1c:
         24:bc:48:d3:44:80:eb:a1:cf:c9:02:b4:14:cf:54:c7:16:a3:
         80:5c:f9:79:3e:5d:72:7d:88:17:9e:2c:43:a2:ca:53:ce:7d:
         3d:f6:2a:3a:b8:4f:94:00:a5:6d:0a:83:5d:f9:5e:53:f4:18:
         b3:57:0f:70:c3:fb:f5:ad:95:a0:0e:17:de:c4:16:80:60:c9:
         0f:2b:6e:86:04:f1:eb:f4:78:27:d1:05:c5:ee:34:5b:5e:b9:
         49:32:f2:33

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
        Validity
            Not Before: Dec  4 00:00:00 2003 GMT
            Not After : Dec  3 23:59:59 2013 GMT
        Subject: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ca:b2:a4:cc:cd:20:af:0a:7d:89:ac:87:75:
                    f0:b4:4e:f1:df:c1:0f:bf:67:61:bd:a3:64:1c:da:
                    bb:f9:ca:33:ab:84:30:89:58:7e:8c:db:6b:dd:36:
                    9e:0f:bf:d1:ec:78:f2:77:a6:7e:6f:3c:bf:93:af:
                    0d:ba:68:f4:6c:94:ca:bd:52:2d:ab:48:3d:f5:b6:
                    d5:5d:5f:1b:02:9f:fa:2f:6b:1e:a4:f7:a3:9a:a6:
                    1a:c8:02:e1:7f:4c:52:e3:0e:60:ec:40:1c:7e:b9:
                    0d:de:3f:c7:b4:df:87:bd:5f:7a:6a:31:2e:03:99:
                    81:13:a8:47:20:ce:31:73:0d:57:2d:cd:78:34:33:
                    95:12:99:12:b9:de:68:2f:aa:e6:e3:c2:8a:8c:2a:
                    c3:8b:21:87:66:bd:83:58:57:6f:75:bf:3c:aa:26:
                    87:5d:ca:10:15:3c:9f:84:ea:54:c1:0a:6e:c4:fe:
                    c5:4a:dd:b9:07:11:97:22:7c:db:3e:27:d1:1e:78:
                    ec:9f:31:c9:f1:e6:22:19:db:c4:b3:47:43:9a:1a:
                    5f:a0:1e:90:e4:5e:f5:ee:7c:f1:7d:ab:62:01:8f:
                    f5:4d:0b:de:d0:22:56:a8:95:cd:ae:88:76:ae:ee:
                    ba:0d:f3:e4:4d:d9:a0:fb:68:a0:ae:14:3b:b3:87:
                    c1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com

            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.verisign.com/ThawteTimestampingCA.crl

            X509v3 Extended Key Usage: 
                Time Stamping
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=TSA2048-1-53
    Signature Algorithm: sha1WithRSAEncryption
         4a:6b:f9:ea:58:c2:44:1c:31:89:79:99:2b:96:bf:82:ac:01:
         d6:1c:4c:cd:b0:8a:58:6e:df:08:29:a3:5e:c8:ca:93:13:e7:
         04:52:0d:ef:47:27:2f:00:38:b0:e4:c9:93:4e:9a:d4:22:62:
         15:f7:3f:37:21:4f:70:31:80:f1:8b:38:87:b3:e8:e8:97:00:
         fe:cf:55:96:4e:24:d2:a9:27:4e:7a:ae:b7:61:41:f3:2a:ce:
         e7:c9:d9:5e:dd:bb:2b:85:3e:b5:9d:b5:d9:e1:57:ff:be:b4:
         c5:7e:f5:cf:0c:9e:f0:97:fe:2b:d3:3b:52:1b:1b:38:27:f7:
         3f:4a

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:e5:a7:75:12:03:00:fb:34:19:45:8b:40:d4:08:34
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA
        Validity
            Not Before: Feb 15 00:00:00 2012 GMT
            Not After : Mar  7 23:59:59 2013 GMT
        Subject: C=RU, ST=Moscow, L=Moscow, O=Kaspersky Lab, OU=Digital ID Class 3 - Microsoft Software Validation v2, OU=Technical dept, CN=Kaspersky Lab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d9:c3:d3:81:46:1a:bf:62:2e:37:6b:b0:0a:
                    92:c5:9c:56:2b:f1:53:07:9c:ad:f9:d2:32:41:d1:
                    98:c0:16:65:08:5b:64:ed:6e:16:a5:15:06:3d:fb:
                    91:fb:e7:32:c1:05:81:fb:9f:87:c9:51:17:41:00:
                    4e:56:bf:80:33:c5:a6:6e:b8:27:e5:f5:85:1d:73:
                    72:67:40:5b:11:63:77:f3:ca:b1:d8:09:f2:35:36:
                    78:5d:d8:bf:a9:66:a0:a3:28:ee:03:20:9c:ef:88:
                    a0:d0:fb:c8:d0:1e:3b:b0:72:12:a4:e8:55:df:32:
                    28:35:92:aa:97:44:1b:2c:b6:06:8f:d9:68:2a:81:
                    c9:a0:67:c7:3e:79:dc:f8:d2:b2:f9:36:95:e5:7f:
                    5a:8e:c0:51:0b:45:81:5d:f9:e3:48:2c:b2:30:a4:
                    59:7b:0b:e8:fe:85:c8:e4:66:a6:9a:2a:89:cc:9c:
                    ac:38:f6:ae:11:6f:87:06:4d:4b:d4:c2:9c:f7:c7:
                    90:4d:ea:fd:72:b6:0e:61:d4:0c:98:1d:e4:a4:98:
                    66:e7:1f:2e:46:80:c3:7c:b6:1a:0c:fc:eb:32:af:
                    c0:91:e3:e2:5c:af:16:86:ca:a7:48:29:11:00:16:
                    0a:ba:05:cb:95:69:d0:a4:cb:4e:35:e4:69:da:47:
                    f4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://csc3-2010-crl.verisign.com/CSC3-2010.crl

            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/rpa

            X509v3 Extended Key Usage: 
                Code Signing
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com
                CA Issuers - URI:http://csc3-2010-aia.verisign.com/CSC3-2010.cer

            X509v3 Authority Key Identifier: 
                keyid:CF:99:A9:EA:7B:26:F4:4B:C9:8E:8F:D7:F0:05:26:EF:E3:D2:A7:9D

            Netscape Cert Type: 
                Object Signing
            1.3.6.1.4.1.311.2.1.27: 
                0.......
    Signature Algorithm: sha1WithRSAEncryption
         72:de:c4:5d:35:a0:54:2b:f7:28:22:fb:10:94:00:29:b7:be:
         49:85:24:a2:6e:10:4d:91:13:88:bd:41:13:1f:30:6b:5f:98:
         e0:d4:da:a3:76:f3:ff:db:9f:8a:92:77:42:bd:eb:1d:a6:d0:
         c5:47:57:ec:66:b5:0e:16:75:75:0a:3e:61:45:ea:2f:b8:ba:
         a2:84:49:2d:79:36:a2:9c:f4:31:65:eb:4f:f7:a5:0c:23:e3:
         21:41:10:97:93:c4:d1:4e:1f:0e:2f:d9:d8:eb:df:cd:de:fc:
         ea:68:df:a1:45:07:94:49:ea:3a:f5:82:32:4b:1c:4a:02:51:
         98:5e:7b:36:22:f6:f0:51:13:9b:77:df:10:36:b8:e5:4d:fe:
         c9:a3:c2:29:32:57:5a:84:cc:96:82:d0:ce:8c:a5:85:6e:d9:
         c0:d3:02:e8:ff:31:71:d9:85:5b:53:a9:25:c0:a9:c9:7b:23:
         ef:cc:9d:c8:db:90:53:1a:b2:46:12:ed:eb:f0:17:96:b9:80:
         76:58:03:2f:a4:5f:d4:aa:ed:a1:23:0a:f9:29:9b:cd:99:30:
         f0:f4:d2:fe:7b:50:b8:99:5f:99:c2:d7:eb:86:1e:a2:4c:60:
         90:cd:ea:8b:c2:10:1e:e4:21:f0:fa:0c:85:5d:3c:6f:e9:d5:
         da:6f:72:f2

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
        Validity
            Not Before: Feb  8 00:00:00 2010 GMT
            Not After : Feb  7 23:59:59 2020 GMT
        Subject: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:23:4b:5e:a5:d7:8a:bb:32:e9:d4:57:f7:ef:
                    e4:c7:26:7e:ad:19:98:fe:a8:9d:7d:94:f6:36:6b:
                    10:d7:75:81:30:7f:04:68:7f:cb:2b:75:1e:cd:1d:
                    08:8c:df:69:94:a7:37:a3:9c:7b:80:e0:99:e1:ee:
                    37:4d:5f:ce:3b:14:ee:86:d4:d0:f5:27:35:bc:25:
                    0b:38:a7:8c:63:9d:17:a3:08:a5:ab:b0:fb:cd:6a:
                    62:82:4c:d5:21:da:1b:d9:f1:e3:84:3b:8a:2a:4f:
                    85:5b:90:01:4f:c9:a7:76:10:7f:27:03:7c:be:ae:
                    7e:7d:c1:dd:f9:05:bc:1b:48:9c:69:e7:c0:a4:3c:
                    3c:41:00:3e:df:96:e5:c5:e4:94:71:d6:55:01:c7:
                    00:26:4a:40:3c:b5:a1:26:a9:0c:a7:6d:80:8e:90:
                    25:7b:cf:bf:3f:1c:eb:2f:96:fa:e5:87:77:c6:b5:
                    56:b2:7a:3b:54:30:53:1b:df:62:34:ff:1e:d1:f4:
                    5a:93:28:85:e5:4c:17:4e:7e:5b:fd:a4:93:99:7f:
                    df:cd:ef:a4:75:ef:ef:15:f6:47:e7:f8:19:72:d8:
                    2e:34:1a:a6:b4:a7:4c:7e:bd:bb:4f:0c:3d:57:f1:
                    30:d6:a6:36:8e:d6:80:76:d7:19:2e:a5:cd:7e:34:
                    2d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/cps
                  User Notice:
                    Explicit Text: https://www.verisign.com/rpa

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            1.3.6.1.5.5.7.1.12: 
                0_.].[0Y0W0U..image/gif0!0.0...+..............k...j.H.,{..0%.#http://logo.verisign.com/vslogo.gif
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.verisign.com/pca3-g5.crl

            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com

            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, Code Signing
            X509v3 Subject Alternative Name: 
                DirName:/CN=VeriSignMPKI-2-8
            X509v3 Subject Key Identifier: 
                CF:99:A9:EA:7B:26:F4:4B:C9:8E:8F:D7:F0:05:26:EF:E3:D2:A7:9D
            X509v3 Authority Key Identifier: 
                keyid:7F:D3:65:A7:C2:DD:EC:BB:F0:30:09:F3:43:39:FA:02:AF:33:31:33

    Signature Algorithm: sha1WithRSAEncryption
         56:22:e6:34:a4:c4:61:cb:48:b9:01:ad:56:a8:64:0f:d9:8c:
         91:c4:bb:cc:0c:e5:ad:7a:a0:22:7f:df:47:38:4a:2d:6c:d1:
         7f:71:1a:7c:ec:70:a9:b1:f0:4f:e4:0f:0c:53:fa:15:5e:fe:
         74:98:49:24:85:81:26:1c:91:14:47:b0:4c:63:8c:bb:a1:34:
         d4:c6:45:e8:0d:85:26:73:03:d0:a9:8c:64:6d:dc:71:92:e6:
         45:05:60:15:59:51:39:fc:58:14:6b:fe:d4:a4:ed:79:6b:08:
         0c:41:72:e7:37:22:06:09:be:23:e9:3f:44:9a:1e:e9:61:9d:
         cc:b1:90:5c:fc:3d:d2:8d:ac:42:3d:65:36:d4:b4:3d:40:28:
         8f:9b:10:cf:23:26:cc:4b:20:cb:90:1f:5d:8c:4c:34:ca:3c:
         d8:e5:37:d6:6f:a5:20:bd:34:eb:26:d9:ae:0d:e7:c5:9a:f7:
         a1:b4:21:91:33:6f:86:e8:58:bb:25:7c:74:0e:58:fe:75:1b:
         63:3f:ce:31:7c:9b:8f:1b:96:9e:c5:53:76:84:5b:9c:ad:91:
         fa:ac:ed:93:ba:5d:c8:21:53:c2:82:53:63:af:12:0d:50:87:
         11:1b:3d:54:52:96:8a:2c:9c:3d:92:1a:08:9a:05:2e:c7:93:
         a5:48:91:d3

pkcs7-signedData

SHA1: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15

00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |

SHA1

1b 5d a4 93 03 cd a2 24 ca ee e6 77 80 dc 14 7d |.].....$...w...}| 96 01 38 3b |..8; |

Certificates
- Certificate #0
  - 2
    - 38:25:D7:FA:F8:61:AF:9E:F4:90:E7:26:B5:D6:5A:D5
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - O: VeriSign, Inc.
      - CN: VeriSign Time Stamping Services CA
    - 2007-06-15 00:00:00 UTC: 2012-06-14 23:59:59 UTC
    - Subject
      - C: US
      - O: VeriSign, Inc.
      - CN: VeriSign Time Stamping Services Signer - G2
    - #5
      - rsaEncryption: nil
      - C4:B5:F2:52:15:BC:88:86:60:29:16:4A:5B:2F:4B:91:
        6B:87:91:F3:35:54:58:35:EA:D1:36:5E:62:4D:52:51:
        34:71:C2:7B:66:1D:89:C8:DD:2A:C4:6A:0A:F6:37:D9:
        98:74:91:F6:92:AE:B0:B5:76:96:F1:A9:4A:63:45:47:
        2E:6B:0B:92:4E:4B:2B:8C:EE:58:4A:8B:D4:07:E4:1A:
        2C:F8:82:AA:58:D9:CD:42:F3:2D:C0:75:DE:8D:AB:C7:
        8E:1D:9A:6C:4C:08:95:1E:DE:DB:EF:67:E1:72:C2:49:
        C2:9E:60:3C:E1:E2:BE:16:A3:63:78:69:14:7B:AD:2D: 0x010001
    - X509v3 extensions
      - authorityInfoAccess
        OCSP: http://ocsp.verisign.com
      - basicConstraints
        true
        nil
      - crlDistributionPoints: http://crl.verisign.com/tss-ca.crl
      - extendedKeyUsage: true, timeStamping
      - keyUsage: true, 0xc0
      - subjectAltName
        CN: TSA1-2
  - RSA-SHA1:
```
50 c5 4b c8 24 80 df e4  0d 24 c2 de 1a b1 a1 02  |P.K.$....$......|
a1 a6 82 2d 0c 83 15 81  37 0a 82 0e 2c b0 5a 17  |...-....7...,.Z.|
61 b5 d8 05 fe 88 db f1  91 91 b3 56 1a 40 a6 eb  |a..........V.@..|
92 be 38 39 b0 75 36 74  3a 98 4f e4 37 ba 99 89  |..89.u6t:.O.7...|
ca 95 42 1d b0 b9 c7 a0  8d 57 e0 fa d5 64 04 42  |..B......W...d.B|
35 4e 01 d1 33 a2 17 c8  4d aa 27 c7 f2 e1 86 4c  |5N..3...M.'....L|
02 38 4d 83 78 c6 fc 53  e0 eb e0 06 87 dd a4 96  |.8M.x..S........|
9e 5e 0c 98 e2 a5 be bf  82 85 c3 60 e1 df ad 28  |.^.........`...(|
d8 c7 a5 4b 64 da c7 1b  5b bd ac 39 08 d5 38 22  |...Kd...[..9..8"|
a1 33 8b 2f 8a 9a eb bc  07 21 3f 44 41 09 07 b5  |.3./.....!?DA...|
65 1c 24 bc 48 d3 44 80  eb a1 cf c9 02 b4 14 cf  |e.$.H.D.........|
54 c7 16 a3 80 5c f9 79  3e 5d 72 7d 88 17 9e 2c  |T....\.y>]r}...,|
43 a2 ca 53 ce 7d 3d f6  2a 3a b8 4f 94 00 a5 6d  |C..S.}=.*:.O...m|
0a 83 5d f9 5e 53 f4 18  b3 57 0f 70 c3 fb f5 ad  |..].^S...W.p....|
95 a0 0e 17 de c4 16 80  60 c9 0f 2b 6e 86 04 f1  |........`..+n...|
eb f4 78 27 d1 05 c5 ee  34 5b 5e b9 49 32 f2 33  |..x'....4[^.I2.3|
```
- Certificate #1
  - 2
    - 47:BF:19:95:DF:8D:52:46:43:F7:DB:6D:48:0D:31:A4
    - RSA-SHA1: nil
    - Issuer
      - C: ZA
      - ST: Western Cape
      - L: Durbanville
      - O: Thawte
      - OU: Thawte Certification
      - CN: Thawte Timestamping CA
    - 2003-12-04 00:00:00 UTC: 2013-12-03 23:59:59 UTC
    - Subject
      - C: US
      - O: VeriSign, Inc.
      - CN: VeriSign Time Stamping Services CA
    - #5
      - rsaEncryption: nil
      - A9:CA:B2:A4:CC:CD:20:AF:0A:7D:89:AC:87:75:F0:B4:
        4E:F1:DF:C1:0F:BF:67:61:BD:A3:64:1C:DA:BB:F9:CA:
        33:AB:84:30:89:58:7E:8C:DB:6B:DD:36:9E:0F:BF:D1:
        EC:78:F2:77:A6:7E:6F:3C:BF:93:AF:0D:BA:68:F4:6C:
        94:CA:BD:52:2D:AB:48:3D:F5:B6:D5:5D:5F:1B:02:9F:
        FA:2F:6B:1E:A4:F7:A3:9A:A6:1A:C8:02:E1:7F:4C:52:
        E3:0E:60:EC:40:1C:7E:B9:0D:DE:3F:C7:B4:DF:87:BD:
        5F:7A:6A:31:2E:03:99:81:13:A8:47:20:CE:31:73:0D:
        57:2D:CD:78:34:33:95:12:99:12:B9:DE:68:2F:AA:E6:
        E3:C2:8A:8C:2A:C3:8B:21:87:66:BD:83:58:57:6F:75:
        BF:3C:AA:26:87:5D:CA:10:15:3C:9F:84:EA:54:C1:0A:
        6E:C4:FE:C5:4A:DD:B9:07:11:97:22:7C:DB:3E:27:D1:
        1E:78:EC:9F:31:C9:F1:E6:22:19:DB:C4:B3:47:43:9A:
        1A:5F:A0:1E:90:E4:5E:F5:EE:7C:F1:7D:AB:62:01:8F:
        F5:4D:0B:DE:D0:22:56:A8:95:CD:AE:88:76:AE:EE:BA:
        0D:F3:E4:4D:D9:A0:FB:68:A0:AE:14:3B:B3:87:C1:BB: 0x010001
    - X509v3 extensions
      - authorityInfoAccess
        OCSP: http://ocsp.verisign.com
      - basicConstraints
        true
        true: 0
      - crlDistributionPoints: http://crl.verisign.com/ThawteTimestampingCA.crl
      - extendedKeyUsage: timeStamping
      - keyUsage: true, 6
      - subjectAltName
        CN: TSA2048-1-53
  - RSA-SHA1:
```
4a 6b f9 ea 58 c2 44 1c  31 89 79 99 2b 96 bf 82  |Jk..X.D.1.y.+...|
ac 01 d6 1c 4c cd b0 8a  58 6e df 08 29 a3 5e c8  |....L...Xn..).^.|
ca 93 13 e7 04 52 0d ef  47 27 2f 00 38 b0 e4 c9  |.....R..G'/.8...|
93 4e 9a d4 22 62 15 f7  3f 37 21 4f 70 31 80 f1  |.N.."b..?7!Op1..|
8b 38 87 b3 e8 e8 97 00  fe cf 55 96 4e 24 d2 a9  |.8........U.N$..|
27 4e 7a ae b7 61 41 f3  2a ce e7 c9 d9 5e dd bb  |'Nz..aA.*....^..|
2b 85 3e b5 9d b5 d9 e1  57 ff be b4 c5 7e f5 cf  |+.>.....W....~..|
0c 9e f0 97 fe 2b d3 3b  52 1b 1b 38 27 f7 3f 4a  |.....+.;R..8'.?J|
```
- Certificate #2
  - 2
    - 16:E5:A7:75:12:03:00:FB:34:19:45:8B:40:D4:08:34
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - O: VeriSign, Inc.
      - OU: VeriSign Trust Network
      - OU: Terms of use at https://www.verisign.com/rpa (c)10
      - CN: VeriSign Class 3 Code Signing 2010 CA
    - 2012-02-15 00:00:00 UTC: 2013-03-07 23:59:59 UTC
    - Subject
      - C: RU
      - ST: Moscow
      - L: Moscow
      - O: Kaspersky Lab
      - OU: Digital ID Class 3 - Microsoft Software Validation v2
      - OU: Technical dept
      - CN: Kaspersky Lab
    - #5
      - rsaEncryption: nil
      - A9:D9:C3:D3:81:46:1A:BF:62:2E:37:6B:B0:0A:92:C5:
        9C:56:2B:F1:53:07:9C:AD:F9:D2:32:41:D1:98:C0:16:
        65:08:5B:64:ED:6E:16:A5:15:06:3D:FB:91:FB:E7:32:
        C1:05:81:FB:9F:87:C9:51:17:41:00:4E:56:BF:80:33:
        C5:A6:6E:B8:27:E5:F5:85:1D:73:72:67:40:5B:11:63:
        77:F3:CA:B1:D8:09:F2:35:36:78:5D:D8:BF:A9:66:A0:
        A3:28:EE:03:20:9C:EF:88:A0:D0:FB:C8:D0:1E:3B:B0:
        72:12:A4:E8:55:DF:32:28:35:92:AA:97:44:1B:2C:B6:
        06:8F:D9:68:2A:81:C9:A0:67:C7:3E:79:DC:F8:D2:B2:
        F9:36:95:E5:7F:5A:8E:C0:51:0B:45:81:5D:F9:E3:48:
        2C:B2:30:A4:59:7B:0B:E8:FE:85:C8:E4:66:A6:9A:2A:
        89:CC:9C:AC:38:F6:AE:11:6F:87:06:4D:4B:D4:C2:9C:
        F7:C7:90:4D:EA:FD:72:B6:0E:61:D4:0C:98:1D:E4:A4:
        98:66:E7:1F:2E:46:80:C3:7C:B6:1A:0C:FC:EB:32:AF:
        C0:91:E3:E2:5C:AF:16:86:CA:A7:48:29:11:00:16:0A:
        BA:05:CB:95:69:D0:A4:CB:4E:35:E4:69:DA:47:F4:8D: 0x010001
    - X509v3 extensions
      - basicConstraints
        nil
      - keyUsage: true, 0x80
      - crlDistributionPoints: http://csc3-2010-crl.verisign.com/CSC3-2010.crl
      - certificatePolicies
        2.16.840.1.113733.1.7.23.3
        id-qt-cps: https://www.verisign.com/rpa
      - extendedKeyUsage: codeSigning
      - authorityInfoAccess
        #0
        OCSP: http://ocsp.verisign.com
        caIssuers: http://csc3-2010-aia.verisign.com/CSC3-2010.cer
      - authorityKeyIdentifier:
        cf 99 a9 ea 7b 26 f4 4b c9 8e 8f d7 f0 05 26 ef |....{&.K......&.| e3 d2 a7 9d |.... |
      - nsCertType: 0x10
      - 1.3.6.1.4.1.311.2.1.27
        false: true
  - RSA-SHA1:
```
72 de c4 5d 35 a0 54 2b  f7 28 22 fb 10 94 00 29  |r..]5.T+.("....)|
b7 be 49 85 24 a2 6e 10  4d 91 13 88 bd 41 13 1f  |..I.$.n.M....A..|
30 6b 5f 98 e0 d4 da a3  76 f3 ff db 9f 8a 92 77  |0k_.....v......w|
42 bd eb 1d a6 d0 c5 47  57 ec 66 b5 0e 16 75 75  |B......GW.f...uu|
0a 3e 61 45 ea 2f b8 ba  a2 84 49 2d 79 36 a2 9c  |.>aE./....I-y6..|
f4 31 65 eb 4f f7 a5 0c  23 e3 21 41 10 97 93 c4  |.1e.O...#.!A....|
d1 4e 1f 0e 2f d9 d8 eb  df cd de fc ea 68 df a1  |.N../........h..|
45 07 94 49 ea 3a f5 82  32 4b 1c 4a 02 51 98 5e  |E..I.:..2K.J.Q.^|
7b 36 22 f6 f0 51 13 9b  77 df 10 36 b8 e5 4d fe  |{6"..Q..w..6..M.|
c9 a3 c2 29 32 57 5a 84  cc 96 82 d0 ce 8c a5 85  |...)2WZ.........|
6e d9 c0 d3 02 e8 ff 31  71 d9 85 5b 53 a9 25 c0  |n......1q..[S.%.|
a9 c9 7b 23 ef cc 9d c8  db 90 53 1a b2 46 12 ed  |..{#......S..F..|
eb f0 17 96 b9 80 76 58  03 2f a4 5f d4 aa ed a1  |......vX./._....|
23 0a f9 29 9b cd 99 30  f0 f4 d2 fe 7b 50 b8 99  |#..)...0....{P..|
5f 99 c2 d7 eb 86 1e a2  4c 60 90 cd ea 8b c2 10  |_.......L`......|
1e e4 21 f0 fa 0c 85 5d  3c 6f e9 d5 da 6f 72 f2  |..!....]
```
- Certificate #3
  - 2
    - 52:00:E5:AA:25:56:FC:1A:86:ED:96:C9:D4:4B:33:C7
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - O: VeriSign, Inc.
      - OU: VeriSign Trust Network
      - OU: (c) 2006 VeriSign, Inc. - For authorized use only
      - CN: VeriSign Class 3 Public Primary Certification Authority - G5
    - 2010-02-08 00:00:00 UTC: 2020-02-07 23:59:59 UTC
    - Subject
      - C: US
      - O: VeriSign, Inc.
      - OU: VeriSign Trust Network
      - OU: Terms of use at https://www.verisign.com/rpa (c)10
      - CN: VeriSign Class 3 Code Signing 2010 CA
    - #5
      - rsaEncryption: nil
      - F5:23:4B:5E:A5:D7:8A:BB:32:E9:D4:57:F7:EF:E4:C7:
        26:7E:AD:19:98:FE:A8:9D:7D:94:F6:36:6B:10:D7:75:
        81:30:7F:04:68:7F:CB:2B:75:1E:CD:1D:08:8C:DF:69:
        94:A7:37:A3:9C:7B:80:E0:99:E1:EE:37:4D:5F:CE:3B:
        14:EE:86:D4:D0:F5:27:35:BC:25:0B:38:A7:8C:63:9D:
        17:A3:08:A5:AB:B0:FB:CD:6A:62:82:4C:D5:21:DA:1B:
        D9:F1:E3:84:3B:8A:2A:4F:85:5B:90:01:4F:C9:A7:76:
        10:7F:27:03:7C:BE:AE:7E:7D:C1:DD:F9:05:BC:1B:48:
        9C:69:E7:C0:A4:3C:3C:41:00:3E:DF:96:E5:C5:E4:94:
        71:D6:55:01:C7:00:26:4A:40:3C:B5:A1:26:A9:0C:A7:
        6D:80:8E:90:25:7B:CF:BF:3F:1C:EB:2F:96:FA:E5:87:
        77:C6:B5:56:B2:7A:3B:54:30:53:1B:DF:62:34:FF:1E:
        D1:F4:5A:93:28:85:E5:4C:17:4E:7E:5B:FD:A4:93:99:
        7F:DF:CD:EF:A4:75:EF:EF:15:F6:47:E7:F8:19:72:D8:
        2E:34:1A:A6:B4:A7:4C:7E:BD:BB:4F:0C:3D:57:F1:30:
        D6:A6:36:8E:D6:80:76:D7:19:2E:A5:CD:7E:34:2D:89: 0x010001
    - X509v3 extensions
      - basicConstraints
        true
        true: 0
      - certificatePolicies
        2.16.840.1.113733.1.7.23.3
        #0
        id-qt-cps: https://www.verisign.com/cps
        id-qt-unotice: https://www.verisign.com/rpa
      - keyUsage: true, 6
      - 1.3.6.1.5.5.7.1.12
        image/gif
        SHA1:
        8f e5 d3 1a 86 ac 8d 8e 6b c3 cf 80 6a d4 48 18 |........k...j.H.| 2c 7b 19 2e |,{.. |
        http://logo.verisign.com/vslogo.gif
      - crlDistributionPoints: http://crl.verisign.com/pca3-g5.crl
      - authorityInfoAccess
        OCSP: http://ocsp.verisign.com
      - extendedKeyUsage
        clientAuth: codeSigning
      - subjectAltName
        CN: VeriSignMPKI-2-8
      - subjectKeyIdentifier:
        cf 99 a9 ea 7b 26 f4 4b c9 8e 8f d7 f0 05 26 ef |....{&.K......&.| e3 d2 a7 9d |.... |
      - authorityKeyIdentifier:
        7f d3 65 a7 c2 dd ec bb f0 30 09 f3 43 39 fa 02 |..e......0..C9..| af 33 31 33 |.313 |
  - RSA-SHA1:
```
56 22 e6 34 a4 c4 61 cb  48 b9 01 ad 56 a8 64 0f  |V".4..a.H...V.d.|
d9 8c 91 c4 bb cc 0c e5  ad 7a a0 22 7f df 47 38  |.........z."..G8|
4a 2d 6c d1 7f 71 1a 7c  ec 70 a9 b1 f0 4f e4 0f  |J-l..q.|.p...O..|
0c 53 fa 15 5e fe 74 98  49 24 85 81 26 1c 91 14  |.S..^.t.I$..&...|
47 b0 4c 63 8c bb a1 34  d4 c6 45 e8 0d 85 26 73  |G.Lc...4..E...&s|
03 d0 a9 8c 64 6d dc 71  92 e6 45 05 60 15 59 51  |....dm.q..E.`.YQ|
39 fc 58 14 6b fe d4 a4  ed 79 6b 08 0c 41 72 e7  |9.X.k....yk..Ar.|
37 22 06 09 be 23 e9 3f  44 9a 1e e9 61 9d cc b1  |7"...#.?D...a...|
90 5c fc 3d d2 8d ac 42  3d 65 36 d4 b4 3d 40 28  |.\.=...B=e6..=@(|
8f 9b 10 cf 23 26 cc 4b  20 cb 90 1f 5d 8c 4c 34  |....#&.K ...].L4|
ca 3c d8 e5 37 d6 6f a5  20 bd 34 eb 26 d9 ae 0d  |.<..7.o. .4.&...|
e7 c5 9a f7 a1 b4 21 91  33 6f 86 e8 58 bb 25 7c  |......!.3o..X.%||
74 0e 58 fe 75 1b 63 3f  ce 31 7c 9b 8f 1b 96 9e  |t.X.u.c?.1|.....|
c5 53 76 84 5b 9c ad 91  fa ac ed 93 ba 5d c8 21  |.Sv.[........].!|
53 c2 82 53 63 af 12 0d  50 87 11 1b 3d 54 52 96  |S..Sc...P...=TR.|
8a 2c 9c 3d 92 1a 08 9a  05 2e c7 93 a5 48 91 d3  |.,.=.........H..|
```

Signer

1
unnamed
- #0
  - C: US
  - O: VeriSign, Inc.
  - OU: VeriSign Trust Network
  - OU: Terms of use at https://www.verisign.com/rpa (c)10
  - CN: VeriSign Class 3 Code Signing 2010 CA
- 16:E5:A7:75:12:03:00:FB:34:19:45:8B:40:D4:08:34
SHA1: nil

1.3.6.1.4.1.311.2.1.12
- nil
contentType: 1.3.6.1.4.1.311.2.1.4
1.3.6.1.4.1.311.2.1.11: msCodeInd

messageDigest:

e2 fc 38 19 cb c9 d2 e8  a9 62 22 a9 12 3a 03 e3  |..8......b"..:..|
84 21 4e 23                                       |.!N#            |

rsaEncryption:

41 b5 39 46 2c f1 23 1f  c8 51 8c 3a 9c 37 da cf  |A.9F,.#..Q.:.7..|
91 b1 4f 88 32 25 21 08  58 f5 6c 07 1e 15 2b 28  |..O.2%!.X.l...+(|
e6 c9 09 49 38 6f 2a 2d  dc a8 ab df e9 e9 7c 21  |...I8o*-......|!|
37 91 b7 72 90 cd 81 24  c2 e6 88 a3 a2 f7 d2 e6  |7..r...$........|
f7 4a 92 cf a6 54 1b b2  09 11 72 c8 37 05 ed cb  |.J...T....r.7...|
06 8a 39 ba ef 04 3a 78  2d e0 cd 64 21 44 30 f9  |..9...:x-..d!D0.|
2f c8 06 2c a0 d1 cf 80  89 88 0e e7 e3 1d bb 0d  |/..,............|
42 59 87 43 f4 58 19 90  9a 4d 88 31 17 d4 08 65  |BY.C.X...M.1...e|
3d 8f ca 2a 07 60 1f 12  42 31 f0 84 73 95 2f 2e  |=..*.`..B1..s./.|
bf d2 d8 cb fb 1b d4 4b  5e ba d4 9a 89 64 cc c5  |.......K^....d..|
c6 c6 e1 0c 43 d9 1a 2f  b9 b0 f2 21 94 42 f7 67  |....C../...!.B.g|
3d f6 38 a9 8f 25 4e a6  1e 43 4f 49 56 ba 29 83  |=.8..%N..COIV.).|
f5 84 69 47 c5 07 fe 35  00 33 4b 3a 45 7b 4e aa  |..iG...5.3K:E{N.|
84 7f 4b be 81 4e 82 5d  23 2e 20 2c a0 ce a2 9d  |..K..N.]#. ,....|
8a 4d 4b 30 3c a6 c5 3f  d2 47 e4 f9 7c e2 39 f0  |.MK0<..?.G..|.9.|
44 4b cc 4c 9a 21 4a 0f  19 a4 47 ea ff dc a8 3f  |DK.L.!J...G....?|

countersignature

unnamed
- #0
  - C: US
  - O: VeriSign, Inc.
  - CN: VeriSign Time Stamping Services CA
- 38:25:D7:FA:F8:61:AF:9E:F4:90:E7:26:B5:D6:5A:D5
SHA1: nil

contentType: pkcs7-data
signingTime: 2012-03-06 10:14:36 UTC