Dialog42.exe - Dialog42

info
MZ
PE
resources
imports
exports
foremost
version info
signature
hexdump
disasm
log
discuss
donate

filename	Dialog42.exe
size	63552 (0xf840)
md5	4798721a4ffca47f20bfeb9eaa999984

type	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x50
blocks_in_file	2
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0xf
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0x1a
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x200

DOS stub

00000000: ba 10 00 0e 1f b4 09 cd  21 b8 01 4c cd 21 90 90  |........!..L.!..|
00000010: 54 68 69 73 20 70 72 6f  67 72 61 6d 20 6d 75 73  |This program mus|
00000020: 74 20 62 65 20 72 75 6e  20 75 6e 64 65 72 20 57  |t be run under W|
00000030: 69 6e 33 32 0d 0a 24 37  00 00 00 00 00 00 00 00  |in32..$7........|
00000040: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
000001c0:

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	8
TimeDateStamp	0x4bad0b4b
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x30e
Magic	0x10b
LinkerVersion	5.0
SizeOfCode	0x8000
SizeOfInitializedData	0x3000
SizeOfUninitializedData	0
AddressOfEntryPoint	0x1000
BaseOfCode	0x1000
BaseOfData	0x9000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x12000
SizeOfHeaders	0x600
CheckSum	0x14658
Subsystem	2
DllCharacteristics	0x80
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x2000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

Borland C++ for Win32 1999

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x8000	0x7800	R-X CODE
.data	0x9000	0x3000	0x2600	RW- IDATA
.tls	0xc000	0x1000	0x200	RW- IDATA
.rdata	0xd000	0x1000	0x200	R-- IDATA SHARED
.idata	0xe000	0x1000	0x600	R-- IDATA
.edata	0xf000	0x1000	0x200	R-- IDATA
.rsrc	0x10000	0x1000	0x1000	R-- IDATA
.reloc	0x11000	0x1000	0x800	R-- IDATA SHARED

Data Directory

type	va	size
EXPORT	0xf000	0x6c
IMPORT	0xe000	0x49e
RESOURCE	0x10000	0x1000
EXCEPTION	0	0
SECURITY	0xc800	0x3040
BASERELOC	0x11000	0x784
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0xd000	0x18
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0	0
CLR_Header	0	0

TLS

raw start	raw end	index	callbks	zero fill	flags
0x40c000	0x40c09c	0x40910f	0x40d010	0	0

show previews

type	name	size
ICON	#1	2216
DIALOG	#101	296
RCDATA	DVCLAL	16
GROUP_ICON	#1000	20
VERSION	#1	852

module_name	hint	ord	function_name
KERNEL32.DLL			CloseHandle
KERNEL32.DLL			CreateFileA
KERNEL32.DLL			ExitProcess
KERNEL32.DLL			GetACP
KERNEL32.DLL			GetCPInfo
KERNEL32.DLL			GetCommandLineA
KERNEL32.DLL			GetCurrentThreadId
KERNEL32.DLL			GetEnvironmentStrings
KERNEL32.DLL			GetFileType
KERNEL32.DLL			GetLastError
KERNEL32.DLL			GetLocalTime
KERNEL32.DLL			GetModuleFileNameA
KERNEL32.DLL			GetModuleHandleA
KERNEL32.DLL			GetOEMCP
KERNEL32.DLL			GetProcAddress
KERNEL32.DLL			GetProcessHeap
KERNEL32.DLL			GetStartupInfoA
KERNEL32.DLL			GetStdHandle
KERNEL32.DLL			GetStringTypeW
KERNEL32.DLL			GetVersion
KERNEL32.DLL			GetVersionExA
KERNEL32.DLL			GlobalMemoryStatus
KERNEL32.DLL			HeapAlloc
KERNEL32.DLL			HeapFree
KERNEL32.DLL			LoadLibraryA
KERNEL32.DLL			RaiseException
KERNEL32.DLL			RtlUnwind
KERNEL32.DLL			SetConsoleCtrlHandler
KERNEL32.DLL			SetFilePointer
KERNEL32.DLL			SetHandleCount
KERNEL32.DLL			TlsAlloc
KERNEL32.DLL			TlsFree
KERNEL32.DLL			TlsGetValue
KERNEL32.DLL			TlsSetValue
KERNEL32.DLL			UnhandledExceptionFilter
KERNEL32.DLL			VirtualAlloc
KERNEL32.DLL			VirtualFree
KERNEL32.DLL			WriteFile
USER32.DLL			DialogBoxParamA
USER32.DLL			EndDialog
USER32.DLL			EnumThreadWindows
USER32.DLL			LoadIconA
USER32.DLL			MessageBoxA
USER32.DLL			SendMessageA
USER32.DLL			wsprintfA

ord	entry_va	function_name
1	0x1059	__GetExceptDLLinfo
2	0x911c	___CPPdebugHook

module_name	Dialog42.exe
flags	0
timestamp	0
version	0.0
ordinal_base	1
nFunctions	2
nNames	2
Names(2)	0xf030
Functions(2)	0xf028
NameOrdinals(2)	0xf038

StringTable 00000000

CompanyName	Didier Stevens (https://DidierStevens.com)
FileDescription	Dialog42
FileVersion	0.0.0.1
LegalCopyright	Public domain
OriginalFilename	Dialog42.exe
ProductName	Dialog42
ProductVersion	0.0.0.1
Comments	Use this program to find the meaning of life. Use at your own risk.

VS_FIXEDFILEINFO

FileVersion	0.0.0.1
ProductVersion	0.0.0.1
StrucVersion	0x10000
FileFlagsMask	0
FileFlags	0
FileOS	4
FileType	1
FileSubtype	0

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=BE/O=GlobalSign nv-sa/CN=GlobalSign CodeSigning CA - G2

serial: 11217D70E4686EF1AAFDFABFEC6F31F4830B

Certificates (2)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:00:00:00:00:01:2f:4e:e1:35:5c
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA
        Validity
            Not Before: Apr 13 10:00:00 2011 GMT
            Not After : Apr 13 10:00:00 2019 GMT
        Subject: C=BE, O=GlobalSign nv-sa, CN=GlobalSign CodeSigning CA - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4f:14:e7:10:be:d7:26:72:ab:36:97:ef:53:
                    bf:42:84:5e:58:d1:8a:28:fc:43:46:6f:7e:28:44:
                    50:0b:75:5d:00:d7:3c:0a:44:9e:20:6a:a4:f7:45:
                    4a:37:60:a3:6e:3f:12:fa:6d:fa:b6:46:c3:6a:a3:
                    b8:0c:27:28:02:57:28:d1:50:f7:61:39:55:b8:c3:
                    e1:25:86:52:3c:bf:05:1d:d7:b3:9a:f8:9a:24:31:
                    49:d5:a2:a9:e2:d3:91:ab:3e:3c:73:ef:f6:29:f1:
                    c8:35:d0:30:7b:7f:4e:92:a5:06:8f:87:e2:ce:f5:
                    c1:63:66:ac:18:69:2a:c1:5e:bb:5a:e8:6e:95:ff:
                    3b:80:62:9d:99:c7:c7:2f:66:d5:fd:62:1a:82:55:
                    5a:c6:fa:40:77:8e:c9:30:3c:1b:f0:f2:35:b8:6c:
                    59:9c:fd:e9:d6:ca:b4:40:1e:f7:04:ca:d1:67:a9:
                    74:e3:a5:08:54:d9:83:35:3b:8e:8c:23:0c:75:b6:
                    de:86:4a:9e:1a:3e:0a:50:49:38:9c:d2:a8:90:bf:
                    98:fa:c8:8c:2b:27:11:7e:2a:fb:ce:de:a9:ae:38:
                    93:22:fa:a6:ec:fb:5c:61:76:c3:44:d6:cc:0c:7e:
                    2f:6d:06:80:a2:74:40:bb:b7:1f:f4:3b:d7:73:54:
                    1f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Subject Key Identifier: 
                08:6E:D8:B6:9C:8A:BF:ED:3E:D7:C3:74:5D:CC:80:1F:A8:2F:50:7A
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: https://www.globalsign.com/repository/

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.globalsign.net/root.crl

            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 Authority Key Identifier: 
                keyid:60:7B:66:1A:45:0D:97:CA:89:50:2F:7D:04:CD:34:A8:FF:FC:FD:4B

    Signature Algorithm: sha1WithRSAEncryption
         22:5c:c5:dd:3d:f4:0b:70:d8:e3:f5:e7:c5:8e:09:01:bb:b1:
         96:36:5c:5a:07:ad:c7:a8:44:49:51:25:7a:ae:0d:a4:19:3b:
         92:9c:cf:b9:42:26:bb:3b:6c:97:e7:c7:ce:11:6d:68:91:da:
         8d:6d:f1:53:4d:54:38:8c:61:f3:c8:82:76:69:be:81:32:0b:
         31:c3:6c:c9:9e:20:0a:58:2f:f0:48:fe:7e:48:07:aa:d7:43:
         58:94:73:54:04:31:a9:78:0d:3b:8c:b0:70:c1:3d:7e:d7:bd:
         2f:2a:c3:e2:f5:8f:0c:90:dc:6b:a5:c8:be:68:5e:5d:6d:f8:
         78:d2:be:49:95:1e:15:78:08:91:fb:34:c8:be:84:ad:bc:e0:
         c6:dd:18:db:f3:ca:f0:7b:c2:14:3c:18:b8:03:ba:95:3e:21:
         1e:3f:60:69:7a:7f:6a:03:9e:8d:4a:f9:f0:28:2c:30:84:5e:
         ec:26:72:42:b1:6d:cb:64:c3:12:8c:d6:84:4b:67:41:7c:b1:
         03:17:78:09:e3:ad:a8:b6:96:2d:a4:7e:80:03:4f:88:f7:c1:
         6b:5a:46:15:cd:2c:19:8b:d8:70:9c:e5:2d:49:88:60:72:a8:
         a4:19:52:70:43:5e:da:d6:46:03:b0:68:0e:24:ef:4a:f6:0b:
         25:24:ef:24

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:21:7d:70:e4:68:6e:f1:aa:fd:fa:bf:ec:6f:31:f4:83:0b
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign CodeSigning CA - G2
        Validity
            Not Before: Aug 20 21:21:30 2014 GMT
            Not After : Nov 20 21:21:30 2016 GMT
        Subject: C=BE, L=Sint-Agatha-Berchem, O=Didier Stevens Labs, CN=Didier Stevens Labs/emailAddress=didier@didierstevenslabs.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:21:78:53:01:1b:43:bf:3a:ff:b1:bc:47:32:
                    c7:19:8c:7f:88:e0:d5:57:f3:8d:be:93:7e:b3:d3:
                    f7:ae:64:b3:5d:fc:e5:eb:91:d3:86:80:84:02:4a:
                    fb:6c:78:a0:3c:25:c7:e9:71:b4:3e:ba:af:db:8d:
                    fa:f5:8b:21:b5:8f:be:22:0e:fe:4d:74:86:ce:5b:
                    e0:28:46:d4:ae:2a:0e:1b:fb:f1:04:98:b7:fa:4b:
                    e7:9f:4e:88:ce:e7:63:88:bc:dc:49:c0:7b:bb:b5:
                    50:ae:56:33:e4:2a:20:0f:03:bd:0e:08:4f:dc:8b:
                    11:af:40:64:f5:76:d9:e5:63:82:2c:49:2a:46:ae:
                    ed:73:c1:cc:b9:ac:42:6a:7d:71:91:e8:e9:4c:7f:
                    2d:cf:08:2b:61:5f:96:88:46:55:73:c1:8a:50:83:
                    2a:5f:55:a6:28:17:12:a0:19:e9:73:b5:31:1f:7b:
                    8b:7a:41:d5:0b:02:8d:01:72:57:90:41:a6:0d:8c:
                    5f:78:01:dd:b5:60:4d:e7:7b:68:b0:a5:86:bf:27:
                    bb:53:b7:ab:88:5b:52:9c:2a:47:ed:e6:3c:13:8c:
                    73:33:12:ed:8b:21:e6:9a:7c:21:e5:ef:9d:a4:de:
                    7d:80:a9:bb:24:12:61:5e:78:01:9b:33:e2:1d:d3:
                    75:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.4146.1.50
                  CPS: https://www.globalsign.com/repository/

            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.globalsign.com/gs/gscodesigng2.crl

            Authority Information Access: 
                CA Issuers - URI:http://secure.globalsign.com/cacert/gscodesigng2.crt
                OCSP - URI:http://ocsp2.globalsign.com/gscodesigng2

            X509v3 Subject Key Identifier: 
                9F:AE:17:8C:86:79:95:F5:2A:06:16:7A:8A:EE:A7:2C:8F:AB:D7:C2
            X509v3 Authority Key Identifier: 
                keyid:08:6E:D8:B6:9C:8A:BF:ED:3E:D7:C3:74:5D:CC:80:1F:A8:2F:50:7A

    Signature Algorithm: sha1WithRSAEncryption
         60:25:bc:5b:48:28:86:82:55:94:c5:e1:7f:6c:9c:cc:5a:d9:
         76:54:58:78:d3:11:b1:12:8a:73:ab:bb:eb:7e:ae:0e:ff:f8:
         c5:e5:eb:77:7a:12:ee:a2:13:9f:60:b1:c3:b7:5c:fa:6c:64:
         5a:4e:29:34:d1:1b:d6:84:69:12:45:d1:9e:c3:4e:19:d8:41:
         39:fe:61:b7:55:7d:02:a4:df:94:fc:2b:af:86:83:0a:b7:41:
         35:bb:ad:8b:2f:d3:23:0f:71:23:30:46:ee:dc:2d:d9:dd:5b:
         eb:37:7e:62:22:03:35:a6:e3:28:b5:8e:70:b4:e4:45:15:0a:
         54:f6:16:11:38:90:38:1f:6f:2c:26:77:53:d3:bc:52:ba:7b:
         e1:b0:20:9d:0c:80:1f:57:3e:8c:d1:3f:c3:f4:e8:ba:13:e3:
         9f:3e:af:8a:02:79:e0:0b:07:cb:99:d5:06:94:84:32:78:18:
         d8:d2:15:cc:58:fc:3a:a4:23:ec:fb:05:ce:47:60:8b:59:61:
         bf:7d:33:98:cb:a7:a7:a5:25:bf:a6:5e:92:05:20:48:ed:c4:
         57:68:f2:3e:cf:53:89:3e:c6:34:ad:62:dc:00:a9:31:2c:af:
         dd:6f:13:da:e1:bf:de:03:21:d4:7a:3d:55:00:43:d9:ee:b2:
         5d:c5:89:ce

pkcs7-signedData

SHA1: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15
- :

SHA1

e8 42 5c 76 a1 21 28 c4 b0 45 b4 3e b2 f6 d8 a5 |.B\v.!(..E.>....| 85 42 5e 3f |.B^? |

Certificates
- Certificate #0
  - 2
    - 04:00:00:00:00:01:2F:4E:E1:35:5C
    - RSA-SHA1: nil
    - Issuer
      - C: BE
      - O: GlobalSign nv-sa
      - OU: Root CA
      - CN: GlobalSign Root CA
    - 2011-04-13 10:00:00 UTC: 2019-04-13 10:00:00 UTC
    - Subject
      - C: BE
      - O: GlobalSign nv-sa
      - CN: GlobalSign CodeSigning CA - G2
    - #5
      - rsaEncryption: nil
      - B2:4F:14:E7:10:BE:D7:26:72:AB:36:97:EF:53:BF:42:
        84:5E:58:D1:8A:28:FC:43:46:6F:7E:28:44:50:0B:75:
        5D:00:D7:3C:0A:44:9E:20:6A:A4:F7:45:4A:37:60:A3:
        6E:3F:12:FA:6D:FA:B6:46:C3:6A:A3:B8:0C:27:28:02:
        57:28:D1:50:F7:61:39:55:B8:C3:E1:25:86:52:3C:BF:
        05:1D:D7:B3:9A:F8:9A:24:31:49:D5:A2:A9:E2:D3:91:
        AB:3E:3C:73:EF:F6:29:F1:C8:35:D0:30:7B:7F:4E:92:
        A5:06:8F:87:E2:CE:F5:C1:63:66:AC:18:69:2A:C1:5E:
        BB:5A:E8:6E:95:FF:3B:80:62:9D:99:C7:C7:2F:66:D5:
        FD:62:1A:82:55:5A:C6:FA:40:77:8E:C9:30:3C:1B:F0:
        F2:35:B8:6C:59:9C:FD:E9:D6:CA:B4:40:1E:F7:04:CA:
        D1:67:A9:74:E3:A5:08:54:D9:83:35:3B:8E:8C:23:0C:
        75:B6:DE:86:4A:9E:1A:3E:0A:50:49:38:9C:D2:A8:90:
        BF:98:FA:C8:8C:2B:27:11:7E:2A:FB:CE:DE:A9:AE:38:
        93:22:FA:A6:EC:FB:5C:61:76:C3:44:D6:CC:0C:7E:2F:
        6D:06:80:A2:74:40:BB:B7:1F:F4:3B:D7:73:54:1F:F3: 0x010001
    - #6
      - keyUsage: true, 6
      - basicConstraints
        true
        true: 0
      - subjectKeyIdentifier:
        08 6e d8 b6 9c 8a bf ed 3e d7 c3 74 5d cc 80 1f |.n......>..t]...| a8 2f 50 7a |./Pz |
      - certificatePolicies
        anyPolicy
        id-qt-cps: https://www.globalsign.com/repository/
      - crlDistributionPoints: http://crl.globalsign.net/root.crl
      - extendedKeyUsage: codeSigning
      - authorityKeyIdentifier:
        60 7b 66 1a 45 0d 97 ca 89 50 2f 7d 04 cd 34 a8 |`{f.E....P/}..4.| ff fc fd 4b |...K |
  - RSA-SHA1:
```
22 5c c5 dd 3d f4 0b 70  d8 e3 f5 e7 c5 8e 09 01  |"\..=..p........|
bb b1 96 36 5c 5a 07 ad  c7 a8 44 49 51 25 7a ae  |...6\Z....DIQ%z.|
0d a4 19 3b 92 9c cf b9  42 26 bb 3b 6c 97 e7 c7  |...;....B&.;l...|
ce 11 6d 68 91 da 8d 6d  f1 53 4d 54 38 8c 61 f3  |..mh...m.SMT8.a.|
c8 82 76 69 be 81 32 0b  31 c3 6c c9 9e 20 0a 58  |..vi..2.1.l.. .X|
2f f0 48 fe 7e 48 07 aa  d7 43 58 94 73 54 04 31  |/.H.~H...CX.sT.1|
a9 78 0d 3b 8c b0 70 c1  3d 7e d7 bd 2f 2a c3 e2  |.x.;..p.=~../*..|
f5 8f 0c 90 dc 6b a5 c8  be 68 5e 5d 6d f8 78 d2  |.....k...h^]m.x.|
be 49 95 1e 15 78 08 91  fb 34 c8 be 84 ad bc e0  |.I...x...4......|
c6 dd 18 db f3 ca f0 7b  c2 14 3c 18 b8 03 ba 95  |.......{..<.....|
3e 21 1e 3f 60 69 7a 7f  6a 03 9e 8d 4a f9 f0 28  |>!.?`iz.j...J..(|
2c 30 84 5e ec 26 72 42  b1 6d cb 64 c3 12 8c d6  |,0.^.&rB.m.d....|
84 4b 67 41 7c b1 03 17  78 09 e3 ad a8 b6 96 2d  |.KgA|...x......-|
a4 7e 80 03 4f 88 f7 c1  6b 5a 46 15 cd 2c 19 8b  |.~..O...kZF..,..|
d8 70 9c e5 2d 49 88 60  72 a8 a4 19 52 70 43 5e  |.p..-I.`r...RpC^|
da d6 46 03 b0 68 0e 24  ef 4a f6 0b 25 24 ef 24  |..F..h.$.J..%$.$|
```
- Certificate #1
  - 2
    - 11:21:7D:70:E4:68:6E:F1:AA:FD:FA:BF:EC:6F:31:F4:
      83:0B
    - RSA-SHA1: nil
    - Issuer
      - C: BE
      - O: GlobalSign nv-sa
      - CN: GlobalSign CodeSigning CA - G2
    - 2014-08-20 21:21:30 UTC: 2016-11-20 21:21:30 UTC
    - Subject
      - C: BE
      - L: Sint-Agatha-Berchem
      - O: Didier Stevens Labs
      - CN: Didier Stevens Labs
      - emailAddress: didier@didierstevenslabs.com
    - #5
      - rsaEncryption: nil
      - B8:21:78:53:01:1B:43:BF:3A:FF:B1:BC:47:32:C7:19:
        8C:7F:88:E0:D5:57:F3:8D:BE:93:7E:B3:D3:F7:AE:64:
        B3:5D:FC:E5:EB:91:D3:86:80:84:02:4A:FB:6C:78:A0:
        3C:25:C7:E9:71:B4:3E:BA:AF:DB:8D:FA:F5:8B:21:B5:
        8F:BE:22:0E:FE:4D:74:86:CE:5B:E0:28:46:D4:AE:2A:
        0E:1B:FB:F1:04:98:B7:FA:4B:E7:9F:4E:88:CE:E7:63:
        88:BC:DC:49:C0:7B:BB:B5:50:AE:56:33:E4:2A:20:0F:
        03:BD:0E:08:4F:DC:8B:11:AF:40:64:F5:76:D9:E5:63:
        82:2C:49:2A:46:AE:ED:73:C1:CC:B9:AC:42:6A:7D:71:
        91:E8:E9:4C:7F:2D:CF:08:2B:61:5F:96:88:46:55:73:
        C1:8A:50:83:2A:5F:55:A6:28:17:12:A0:19:E9:73:B5:
        31:1F:7B:8B:7A:41:D5:0B:02:8D:01:72:57:90:41:A6:
        0D:8C:5F:78:01:DD:B5:60:4D:E7:7B:68:B0:A5:86:BF:
        27:BB:53:B7:AB:88:5B:52:9C:2A:47:ED:E6:3C:13:8C:
        73:33:12:ED:8B:21:E6:9A:7C:21:E5:EF:9D:A4:DE:7D:
        80:A9:BB:24:12:61:5E:78:01:9B:33:E2:1D:D3:75:ED: 0x010001
    - #6
      - keyUsage: true, 0x80
      - certificatePolicies
        1.3.6.1.4.1.4146.1.50
        id-qt-cps: https://www.globalsign.com/repository/
      - basicConstraints
        nil
      - extendedKeyUsage: codeSigning
      - crlDistributionPoints: http://crl.globalsign.com/gs/gscodesigng2.crl
      - authorityInfoAccess
        #0
        caIssuers: http://secure.globalsign.com/cacert/gscodesigng2.crt
        OCSP: http://ocsp2.globalsign.com/gscodesigng2
      - subjectKeyIdentifier:
        9f ae 17 8c 86 79 95 f5 2a 06 16 7a 8a ee a7 2c |.....y..*..z...,| 8f ab d7 c2 |.... |
      - authorityKeyIdentifier:
        08 6e d8 b6 9c 8a bf ed 3e d7 c3 74 5d cc 80 1f |.n......>..t]...| a8 2f 50 7a |./Pz |
  - RSA-SHA1:
```
60 25 bc 5b 48 28 86 82  55 94 c5 e1 7f 6c 9c cc  |`%.[H(..U....l..|
5a d9 76 54 58 78 d3 11  b1 12 8a 73 ab bb eb 7e  |Z.vTXx.....s...~|
ae 0e ff f8 c5 e5 eb 77  7a 12 ee a2 13 9f 60 b1  |.......wz.....`.|
c3 b7 5c fa 6c 64 5a 4e  29 34 d1 1b d6 84 69 12  |..\.ldZN)4....i.|
45 d1 9e c3 4e 19 d8 41  39 fe 61 b7 55 7d 02 a4  |E...N..A9.a.U}..|
df 94 fc 2b af 86 83 0a  b7 41 35 bb ad 8b 2f d3  |...+.....A5.../.|
23 0f 71 23 30 46 ee dc  2d d9 dd 5b eb 37 7e 62  |#.q#0F..-..[.7~b|
22 03 35 a6 e3 28 b5 8e  70 b4 e4 45 15 0a 54 f6  |".5..(..p..E..T.|
16 11 38 90 38 1f 6f 2c  26 77 53 d3 bc 52 ba 7b  |..8.8.o,&wS..R.{|
e1 b0 20 9d 0c 80 1f 57  3e 8c d1 3f c3 f4 e8 ba  |.. ....W>..?....|
13 e3 9f 3e af 8a 02 79  e0 0b 07 cb 99 d5 06 94  |...>...y........|
84 32 78 18 d8 d2 15 cc  58 fc 3a a4 23 ec fb 05  |.2x.....X.:.#...|
ce 47 60 8b 59 61 bf 7d  33 98 cb a7 a7 a5 25 bf  |.G`.Ya.}3.....%.|
a6 5e 92 05 20 48 ed c4  57 68 f2 3e cf 53 89 3e  |.^.. H..Wh.>.S.>|
c6 34 ad 62 dc 00 a9 31  2c af dd 6f 13 da e1 bf  |.4.b...1,..o....|
de 03 21 d4 7a 3d 55 00  43 d9 ee b2 5d c5 89 ce  |..!.z=U.C...]...|
```

Signer

1
unnamed
- #0
  - C: BE
  - O: GlobalSign nv-sa
  - CN: GlobalSign CodeSigning CA - G2
- 11:21:7D:70:E4:68:6E:F1:AA:FD:FA:BF:EC:6F:31:F4:
  83:0B
SHA1: nil

1.3.6.1.4.1.311.2.1.12
- nil
contentType: 1.3.6.1.4.1.311.2.1.4
1.3.6.1.4.1.311.2.1.11: msCodeInd

messageDigest:

38 99 f1 30 bb 12 e5 d8  63 c7 07 67 48 6c 49 ce  |8..0....c..gHlI.|
71 ce 8b 2f                                       |q../            |

rsaEncryption:

6c 71 46 d7 30 3f e5 b7  08 eb 06 40 5e 92 23 a3  |lqF.0?.....@^.#.|
d1 ee 74 ea 89 09 ec 65  5c 3b 77 f4 52 a4 90 cf  |..t....e\;w.R...|
8e 18 42 4d c7 7c 54 19  2d eb d0 11 69 cc b2 01  |..BM.|T.-...i...|
3d e0 fc 70 1e ea 4f 61  86 40 9c f9 33 25 43 67  |=..p..Oa.@..3%Cg|
92 11 bb 89 1c 21 2e fd  d0 a0 cf 64 79 de f9 fa  |.....!.....dy...|
9a 12 ef 06 66 4e 8d 95  c5 f4 28 a7 03 a9 33 b6  |....fN....(...3.|
cb 5d 73 54 79 71 82 b8  51 a9 e2 8c a1 d5 43 df  |.]sTyq..Q.....C.|
1b 9a 71 41 73 0c cd e8  91 75 6b 98 33 7a a3 e2  |..qAs....uk.3z..|
d0 14 27 23 f2 97 e2 79  bb fa 1d 58 2b 96 9b 60  |..'#...y...X+..`|
6c 3e c8 4c 8b 77 76 74  0f 3a b2 87 23 74 18 33  |l>.L.wvt.:..#t.3|
d7 84 59 97 19 24 10 28  fd b6 25 f6 1f 4e 00 53  |..Y..$.(..%..N.S|
46 7d cf ef c3 53 a5 14  5d 11 ef 04 3b 0c 5a 3e  |F}...S..]...;.Z>|
21 f6 7b 75 ec 9e 38 90  ad 6e 16 ec 31 9a 2c 7e  |!.{u..8..n..1.,~|
15 59 67 f8 11 c2 c6 60  f0 fa 85 ab e6 54 52 ab  |.Yg....`.....TR.|
33 a9 f6 68 47 79 62 2e  5c 8a 05 30 82 28 35 12  |3..hGyb.\..0.(5.|
b4 e6 32 e9 5a 06 b8 44  61 2b 81 d2 95 79 57 9c  |..2.Z..Da+...yW.|

1.3.6.1.4.1.311.3.3.1

pkcs7-signedData

SHA1: nil
id-smime-ct-TSTInfo
- 1
  - 1.3.6.1.4.1.4146.2.2
  - SHA1
    - d3 02 c3 3f 39 b1 d1 ca 10 0b 04 db 58 fb 9c f1 |...?9.......X...| b1 9b 83 17 |.... |
  - 60:77:B5:6E:62:F3:C8:68:B3:91:73:23:A3:40:2D:3F:
    F0:57:6B:F2
  - 2014-08-21 19:01:31 UTC
  - Subject
    - C: SG
    - O: GMO GlobalSign Pte Ltd
    - CN: GlobalSign TSA for Standard - G1

Certificates

Certificate #0
- 2
  - 11:21:22:31:90:C8:F2:13:3F:6F:93:C7:23:14:F0:92:
    E6:5C
  - RSA-SHA1: nil
  - Issuer
    - C: BE
    - O: GlobalSign nv-sa
    - CN: GlobalSign Timestamping CA - G2
  - 2013-08-23 00:00:00 UTC: 2024-09-23 00:00:00 UTC
  - Subject
    - C: SG
    - O: GMO GlobalSign Pte Ltd
    - CN: GlobalSign TSA for Standard - G1
  - #5
    - rsaEncryption: nil
    - A4:B6:C2:4C:45:0E:E2:B0:6C:25:9E:82:77:74:0F:4D:
      C4:79:A1:E7:4D:37:53:78:34:6F:86:CA:BB:A4:32:B4:
      2D:C1:2A:AA:63:FB:F5:6B:FF:B8:29:59:89:11:3F:DB:
      7A:3A:38:C2:8E:29:81:23:D4:33:0D:20:A5:E4:14:31:
      64:8C:FE:A8:6C:E5:12:3F:D8:9C:98:96:9E:85:BD:DE:
      EF:86:C0:1A:BE:CB:D3:8D:B5:52:E7:25:DA:2D:02:71:
      72:24:F7:AC:DE:63:C4:6B:39:E6:34:F4:42:C9:1E:EB:
      2C:F5:14:4C:99:78:7D:DB:CF:F4:8A:A3:88:5A:A1:E4:
      38:79:BA:3F:89:3E:11:D9:8E:52:EE:CE:27:99:E0:EC:
      58:A8:1E:B2:14:F8:68:BA:6F:2D:00:D4:92:09:40:1A:
      D9:02:E6:9C:25:5A:D0:B8:D3:72:DF:0E:6C:A9:FD:F5:
      9D:DD:A0:83:1B:7A:81:98:40:50:F1:60:B6:30:6B:25:
      95:DB:BA:DC:81:DE:FA:8F:8C:C3:58:B2:0F:2E:F5:B0:
      98:37:01:CE:0A:1D:F7:F1:BC:AB:9B:40:AD:74:8F:70:
      94:25:9F:0B:CA:B4:FF:CE:35:97:00:7B:D9:5A:81:69:
      C2:DA:C9:A1:75:BA:1E:CE:C4:17:35:1B:B1:CB:CB:4D: 0x010001
  - #6
    - keyUsage: true, 0x80
    - certificatePolicies
      - 1.3.6.1.4.1.4146.1.30
        id-qt-cps: https://www.globalsign.com/repository/
    - basicConstraints
      - nil
    - extendedKeyUsage: true, timeStamping
    - crlDistributionPoints: http://crl.globalsign.com/gs/gstimestampingg2.crl
    - authorityInfoAccess
      - caIssuers: http://secure.globalsign.com/cacert/gstimestampingg2.crt
    - subjectKeyIdentifier:
```
4f 35 41 b5 f9 4a 92 ce  48 29 50 4b 03 2c b3 77  |O5A..J..H)PK.,.w|
fa 2a 40 b4                                       |.*@.            |
```
    - authorityKeyIdentifier:
```
46 d8 3e ff dc e3 be ff  83 e6 f4 85 9b b0 dd 6a  |F.>............j|
d6 14 a9 c1                                       |....            |
```
- RSA-SHA1:
```
90 7c 32 f8 95 17 07 2c  ca d9 cc ca 31 0d a3 18  |.|2....,....1...|
b1 c6 d7 89 14 26 70 7d  c7 30 9c bd 93 bb a3 48  |.....&p}.0.....H|
e9 20 ee 85 0a 64 b6 24  7a bf c7 4d 5d a7 60 8e  |. ...d.$z..M].`.|
aa ed a4 26 7e 9e cb ab  23 27 16 51 2d 98 fc 23  |...&~...#'.Q-..#|
5a 6c a3 8d ea 72 98 cb  25 5d eb 3c 8a c9 10 ff  |Zl...r..%].<....|
2d 3e d7 eb 9f 98 1d 82  99 a3 63 a2 56 da 5d 50  |->........c.V.]P|
d3 d7 36 f5 31 98 00 37  43 77 e2 10 ad 04 f1 3c  |..6.1..7Cw.....<|
97 55 90 cb b6 40 ae f5  20 07 4a 4e e2 e8 57 ad  |.U...@.. .JN..W.|
6e 4c 73 5a 8c 6f da 7f  e5 52 57 52 eb 99 42 4d  |nLsZ.o...RWR..BM|
d7 eb 75 4c 75 f3 12 3c  94 ca a2 6a 76 3b 72 ff  |..uLu..<...jv;r.|
18 58 30 af 8b 8a 73 1b  dc 3b ec a8 5c 1e 0a c4  |.X0...s..;..\...|
29 bd 7f 47 39 c6 a2 b3  26 80 9c b6 86 da c5 bf  |)..G9...&.......|
dd 64 d4 70 7e f1 48 33  34 de fb 99 1f d7 28 24  |.d.p~.H34.....($|
ef b2 5e 1d 9d ea 0e 02  ef 0f b5 13 d1 bc 9a 38  |..^............8|
cd 83 55 04 94 d0 22 67  2d 2e c2 32 11 ce a5 7f  |..U..."g-..2....|
7d aa c0 be 39 7c 10 2c  c1 ea 80 42 9c 98 37 8c  |}...9|.,...B..7.|
```

Certificate #1

2
- 04:00:00:00:00:01:2F:4E:E1:52:D7
- RSA-SHA1: nil
- Issuer
  - C: BE
  - O: GlobalSign nv-sa
  - OU: Root CA
  - CN: GlobalSign Root CA
- 2011-04-13 10:00:00 UTC: 2028-01-28 12:00:00 UTC
- Subject
  - C: BE
  - O: GlobalSign nv-sa
  - CN: GlobalSign Timestamping CA - G2
- #5
  - rsaEncryption: nil
  - 94:EF:65:F8:B5:57:9F:A0:53:0D:34:06:EB:09:1F:B7:
    47:18:6A:CB:F0:5B:E4:FF:27:A5:34:D1:F7:89:1A:BF:
    9E:B1:CD:12:41:6E:66:D4:81:A0:85:8B:64:5A:46:2F:
    99:A0:8D:77:B1:E2:BC:5C:DD:22:D7:6A:67:D0:BB:E8:
    CA:74:DE:8B:4F:0D:B0:52:E5:90:5B:EB:47:0E:F1:E7:
    9F:9C:0B:90:65:3E:17:96:30:45:72:6D:39:A1:17:36:
    CA:B9:A0:8C:1B:4F:08:19:F6:81:31:AD:61:16:A4:62:
    E6:B4:40:9E:C3:FC:FB:95:F6:FB:B5:2E:95:81:98:E0:
    EF:C5:EB:D8:02:59:78:77:F7:AA:E3:52:6B:50:91:29:
    C5:FC:F7:CD:93:65:D2:60:61:22:F2:06:FB:32:DD:16:
    51:FA:0E:FD:8A:30:F0:17:09:A7:BB:F3:04:AE:AB:90:
    E7:6C:DF:7A:A9:F4:EF:C4:62:27:5F:6F:99:6D:38:74:
    AA:11:8B:DA:DF:C7:14:4C:E9:85:B2:EC:C2:7D:4A:26:
    8F:E7:56:BA:A6:E0:CF:92:53:80:74:F4:03:EC:68:B2:
    60:BC:84:20:00:83:1B:A1:EE:B4:74:05:C1:29:8E:62:
    D0:47:B1:FA:F0:53:CC:18:F9:2E:3B:F9:70:7E:B4:25: 0x010001
- #6
  - keyUsage: true, 6
  - basicConstraints
    - true
    - true: 0
  - subjectKeyIdentifier:
```
46 d8 3e ff dc e3 be ff  83 e6 f4 85 9b b0 dd 6a  |F.>............j|
d6 14 a9 c1                                       |....            |
```
  - certificatePolicies
    - anyPolicy
      - id-qt-cps: https://www.globalsign.com/repository/
  - crlDistributionPoints: http://crl.globalsign.net/root.crl
  - authorityKeyIdentifier:
```
60 7b 66 1a 45 0d 97 ca  89 50 2f 7d 04 cd 34 a8  |`{f.E....P/}..4.|
ff fc fd 4b                                       |...K            |
```

RSA-SHA1:

4e 5e 56 90 1e 46 b4 d9  49 31 f3 bb 17 39 28 1b  |N^V..F..I1...9(.|
c2 16 dd fd 41 dc 09 05  04 9b 6f b2 a2 9a d6 99  |....A.....o.....|
2e 40 99 00 55 b5 ea 3f  a5 20 76 d3 86 34 d4 17  |.@..U..?. v..4..|
cc 55 3a c7 82 ee ef a8  ba bc d8 06 9f 15 50 df  |.U:...........P.|
cd 16 7b 52 3a 02 d7 19  1a fd af f0 78 5c e0 4b  |..{R:.......x\.K|
c5 18 df 3a 24 1e da ac  b8 a9 58 04 02 07 30 db  |...:$.....X...0.|
b0 12 5e fe 31 be f0 04  48 f4 f0 70 f8 3a 5e 56  |..^.1...H..p.:^V|
83 cf 3d fb 0d bc f4 c5  ed 97 9d b9 d4 db a5 27  |..=............'|
84 e3 38 9b 8b a7 35 86  44 20 a4 3b 6d a4 6a 0b  |..8...5.D .;m.j.|
a1 83 fd 28 eb da ef 28  f6 cc 88 5d fb 0a 3b 00  |...(...(...]..;.|
ab e0 21 eb e2 2f 35 6c  0f 8e 34 45 97 eb a2 f7  |..!../5l..4E....|
99 33 35 7e cb 9a 8a bb  45 4d e7 3f 9f c2 d9 8a  |.35~....EM.?....|
fa 65 b2 6e c7 7e 65 ff  e8 92 e1 2c 31 a2 f7 b0  |.e.n.~e....,1...|
27 36 48 8f 26 6f 3b ee  4d 76 1f 79 c3 e5 7f 96  |'6H.&o;.Mv.y....|
35 bc 2d 0e cc 01 b0 8e  7f ff 51 80 80 a7 92 d4  |5.-.......Q.....|
b3 44 46 64 8c 87 4f 16  63 07 31 4b 63 b0 df f3  |.DFd..O.c.1Kc...|

unnamed
- #0
  - C: BE
  - O: GlobalSign nv-sa
  - CN: GlobalSign Timestamping CA - G2
- 11:21:22:31:90:C8:F2:13:3F:6F:93:C7:23:14:F0:92:
  E6:5C
SHA1: nil

contentType: id-smime-ct-TSTInfo
signingTime: 2014-08-21 19:01:31 UTC

messageDigest:

43 e7 e1 fd 0f 65 7a be  b1 c7 36 77 42 9c 09 d4  |C....ez...6wB...|
1d e7 59 ed                                       |..Y.            |

id-smime-aa-signingCertificate
- 49 63 c7 14 21 93 35 d0 4e 7a f0 39 ed 43 97 e5 |Ic..!.5.Nz.9.C..| a9 bc 55 3f |..U? |
  - unnamed
    - #0
      - C: BE
      - O: GlobalSign nv-sa
      - CN: GlobalSign Timestamping CA - G2
    - 11:21:22:31:90:C8:F2:13:3F:6F:93:C7:23:14:F0:92:
      E6:5C

rsaEncryption:

08 6a b5 2d 15 de 5b 8e  2b af 17 e3 eb 1a 7c 88  |.j.-..[.+.....|.|
9c 37 ee e4 f5 4b 09 22  7a 97 23 14 ec cd e6 23  |.7...K."z.#....#|
1d d2 b4 48 5b bf 8a c3  67 fb de b2 5b 00 7f c0  |...H[...g...[...|
2e de 5b 97 b0 ab 50 1f  8e 96 e3 f7 a7 cf 77 7c  |..[...P.......w||
dc a6 d5 d6 f2 b3 1b 42  44 d7 66 51 ab a3 d2 10  |.......BD.fQ....|
c5 71 9c b9 09 d1 ca f2  b6 a1 7b 21 ca 10 9e 99  |.q........{!....|
26 dd 1a 7c 3c 03 7a 02  64 4c 21 43 84 6c 4f 80  |&..|<.z.dL!C.lO.|
e7 15 bd 5e 5f 54 b3 df  c0 f9 d9 9a b5 bc 86 5d  |...^_T.........]|
93 c8 77 0d 35 d6 0b 5e  91 4d 65 d8 6b 72 21 eb  |..w.5..^.Me.kr!.|
25 c5 8f e6 71 5b b1 6f  07 89 3e 89 f3 98 2a bb  |%...q[.o..>...*.|
14 47 a9 d8 e2 fb 6f ce  ff 40 60 ec 11 56 ba e4  |.G....o..@`..V..|
64 32 1a 2c 3e 59 ac 68  bf 4c 63 37 91 22 6c a9  |d2.,>Y.h.Lc7."l.|
1e 75 43 b5 83 80 03 b0  e9 56 90 13 2c 84 36 3f  |.uC......V..,.6?|
11 4f e4 85 be 6a d7 6b  93 cc b4 43 e9 3a 8d 86  |.O...j.k...C.:..|
0d 0f fe 35 13 ad 31 d1  00 9d e6 9d 82 38 7e 8e  |...5..1......8~.|
c2 fc 08 94 9f e7 3e 3e  c3 66 63 fc 63 a5 8c ec  |......>>.fc.c...|

1.3.6.1.4.1.311.2.4.1

pkcs7-signedData

SHA1: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15
- :

SHA1

af af 8b a7 8c 5a e9 2a d2 94 cf 0c 67 e7 99 98 |.....Z.*....g...| f5 33 ad 83 |.3.. |

Certificates
- Certificate #0
  - 2
    - 04:00:00:00:00:01:2F:4E:E1:35:5C
    - RSA-SHA1: nil
    - Issuer
      - C: BE
      - O: GlobalSign nv-sa
      - OU: Root CA
      - CN: GlobalSign Root CA
    - 2011-04-13 10:00:00 UTC: 2019-04-13 10:00:00 UTC
    - Subject
      - C: BE
      - O: GlobalSign nv-sa
      - CN: GlobalSign CodeSigning CA - G2
    - #5
      - rsaEncryption: nil
      - B2:4F:14:E7:10:BE:D7:26:72:AB:36:97:EF:53:BF:42:
        84:5E:58:D1:8A:28:FC:43:46:6F:7E:28:44:50:0B:75:
        5D:00:D7:3C:0A:44:9E:20:6A:A4:F7:45:4A:37:60:A3:
        6E:3F:12:FA:6D:FA:B6:46:C3:6A:A3:B8:0C:27:28:02:
        57:28:D1:50:F7:61:39:55:B8:C3:E1:25:86:52:3C:BF:
        05:1D:D7:B3:9A:F8:9A:24:31:49:D5:A2:A9:E2:D3:91:
        AB:3E:3C:73:EF:F6:29:F1:C8:35:D0:30:7B:7F:4E:92:
        A5:06:8F:87:E2:CE:F5:C1:63:66:AC:18:69:2A:C1:5E:
        BB:5A:E8:6E:95:FF:3B:80:62:9D:99:C7:C7:2F:66:D5:
        FD:62:1A:82:55:5A:C6:FA:40:77:8E:C9:30:3C:1B:F0:
        F2:35:B8:6C:59:9C:FD:E9:D6:CA:B4:40:1E:F7:04:CA:
        D1:67:A9:74:E3:A5:08:54:D9:83:35:3B:8E:8C:23:0C:
        75:B6:DE:86:4A:9E:1A:3E:0A:50:49:38:9C:D2:A8:90:
        BF:98:FA:C8:8C:2B:27:11:7E:2A:FB:CE:DE:A9:AE:38:
        93:22:FA:A6:EC:FB:5C:61:76:C3:44:D6:CC:0C:7E:2F:
        6D:06:80:A2:74:40:BB:B7:1F:F4:3B:D7:73:54:1F:F3: 0x010001
    - #6
      - keyUsage: true, 6
      - basicConstraints
        true
        true: 0
      - subjectKeyIdentifier:
        08 6e d8 b6 9c 8a bf ed 3e d7 c3 74 5d cc 80 1f |.n......>..t]...| a8 2f 50 7a |./Pz |
      - certificatePolicies
        anyPolicy
        id-qt-cps: https://www.globalsign.com/repository/
      - crlDistributionPoints: http://crl.globalsign.net/root.crl
      - extendedKeyUsage: codeSigning
      - authorityKeyIdentifier:
        60 7b 66 1a 45 0d 97 ca 89 50 2f 7d 04 cd 34 a8 |`{f.E....P/}..4.| ff fc fd 4b |...K |
  - RSA-SHA1:
```
22 5c c5 dd 3d f4 0b 70  d8 e3 f5 e7 c5 8e 09 01  |"\..=..p........|
bb b1 96 36 5c 5a 07 ad  c7 a8 44 49 51 25 7a ae  |...6\Z....DIQ%z.|
0d a4 19 3b 92 9c cf b9  42 26 bb 3b 6c 97 e7 c7  |...;....B&.;l...|
ce 11 6d 68 91 da 8d 6d  f1 53 4d 54 38 8c 61 f3  |..mh...m.SMT8.a.|
c8 82 76 69 be 81 32 0b  31 c3 6c c9 9e 20 0a 58  |..vi..2.1.l.. .X|
2f f0 48 fe 7e 48 07 aa  d7 43 58 94 73 54 04 31  |/.H.~H...CX.sT.1|
a9 78 0d 3b 8c b0 70 c1  3d 7e d7 bd 2f 2a c3 e2  |.x.;..p.=~../*..|
f5 8f 0c 90 dc 6b a5 c8  be 68 5e 5d 6d f8 78 d2  |.....k...h^]m.x.|
be 49 95 1e 15 78 08 91  fb 34 c8 be 84 ad bc e0  |.I...x...4......|
c6 dd 18 db f3 ca f0 7b  c2 14 3c 18 b8 03 ba 95  |.......{..<.....|
3e 21 1e 3f 60 69 7a 7f  6a 03 9e 8d 4a f9 f0 28  |>!.?`iz.j...J..(|
2c 30 84 5e ec 26 72 42  b1 6d cb 64 c3 12 8c d6  |,0.^.&rB.m.d....|
84 4b 67 41 7c b1 03 17  78 09 e3 ad a8 b6 96 2d  |.KgA|...x......-|
a4 7e 80 03 4f 88 f7 c1  6b 5a 46 15 cd 2c 19 8b  |.~..O...kZF..,..|
d8 70 9c e5 2d 49 88 60  72 a8 a4 19 52 70 43 5e  |.p..-I.`r...RpC^|
da d6 46 03 b0 68 0e 24  ef 4a f6 0b 25 24 ef 24  |..F..h.$.J..%$.$|
```
- Certificate #1
  - 2
    - 11:21:7D:70:E4:68:6E:F1:AA:FD:FA:BF:EC:6F:31:F4:
      83:0B
    - RSA-SHA1: nil
    - Issuer
      - C: BE
      - O: GlobalSign nv-sa
      - CN: GlobalSign CodeSigning CA - G2
    - 2014-08-20 21:21:30 UTC: 2016-11-20 21:21:30 UTC
    - Subject
      - C: BE
      - L: Sint-Agatha-Berchem
      - O: Didier Stevens Labs
      - CN: Didier Stevens Labs
      - emailAddress: didier@didierstevenslabs.com
    - #5
      - rsaEncryption: nil
      - B8:21:78:53:01:1B:43:BF:3A:FF:B1:BC:47:32:C7:19:
        8C:7F:88:E0:D5:57:F3:8D:BE:93:7E:B3:D3:F7:AE:64:
        B3:5D:FC:E5:EB:91:D3:86:80:84:02:4A:FB:6C:78:A0:
        3C:25:C7:E9:71:B4:3E:BA:AF:DB:8D:FA:F5:8B:21:B5:
        8F:BE:22:0E:FE:4D:74:86:CE:5B:E0:28:46:D4:AE:2A:
        0E:1B:FB:F1:04:98:B7:FA:4B:E7:9F:4E:88:CE:E7:63:
        88:BC:DC:49:C0:7B:BB:B5:50:AE:56:33:E4:2A:20:0F:
        03:BD:0E:08:4F:DC:8B:11:AF:40:64:F5:76:D9:E5:63:
        82:2C:49:2A:46:AE:ED:73:C1:CC:B9:AC:42:6A:7D:71:
        91:E8:E9:4C:7F:2D:CF:08:2B:61:5F:96:88:46:55:73:
        C1:8A:50:83:2A:5F:55:A6:28:17:12:A0:19:E9:73:B5:
        31:1F:7B:8B:7A:41:D5:0B:02:8D:01:72:57:90:41:A6:
        0D:8C:5F:78:01:DD:B5:60:4D:E7:7B:68:B0:A5:86:BF:
        27:BB:53:B7:AB:88:5B:52:9C:2A:47:ED:E6:3C:13:8C:
        73:33:12:ED:8B:21:E6:9A:7C:21:E5:EF:9D:A4:DE:7D:
        80:A9:BB:24:12:61:5E:78:01:9B:33:E2:1D:D3:75:ED: 0x010001
    - #6
      - keyUsage: true, 0x80
      - certificatePolicies
        1.3.6.1.4.1.4146.1.50
        id-qt-cps: https://www.globalsign.com/repository/
      - basicConstraints
        nil
      - extendedKeyUsage: codeSigning
      - crlDistributionPoints: http://crl.globalsign.com/gs/gscodesigng2.crl
      - authorityInfoAccess
        #0
        caIssuers: http://secure.globalsign.com/cacert/gscodesigng2.crt
        OCSP: http://ocsp2.globalsign.com/gscodesigng2
      - subjectKeyIdentifier:
        9f ae 17 8c 86 79 95 f5 2a 06 16 7a 8a ee a7 2c |.....y..*..z...,| 8f ab d7 c2 |.... |
      - authorityKeyIdentifier:
        08 6e d8 b6 9c 8a bf ed 3e d7 c3 74 5d cc 80 1f |.n......>..t]...| a8 2f 50 7a |./Pz |
  - RSA-SHA1:
```
60 25 bc 5b 48 28 86 82  55 94 c5 e1 7f 6c 9c cc  |`%.[H(..U....l..|
5a d9 76 54 58 78 d3 11  b1 12 8a 73 ab bb eb 7e  |Z.vTXx.....s...~|
ae 0e ff f8 c5 e5 eb 77  7a 12 ee a2 13 9f 60 b1  |.......wz.....`.|
c3 b7 5c fa 6c 64 5a 4e  29 34 d1 1b d6 84 69 12  |..\.ldZN)4....i.|
45 d1 9e c3 4e 19 d8 41  39 fe 61 b7 55 7d 02 a4  |E...N..A9.a.U}..|
df 94 fc 2b af 86 83 0a  b7 41 35 bb ad 8b 2f d3  |...+.....A5.../.|
23 0f 71 23 30 46 ee dc  2d d9 dd 5b eb 37 7e 62  |#.q#0F..-..[.7~b|
22 03 35 a6 e3 28 b5 8e  70 b4 e4 45 15 0a 54 f6  |".5..(..p..E..T.|
16 11 38 90 38 1f 6f 2c  26 77 53 d3 bc 52 ba 7b  |..8.8.o,&wS..R.{|
e1 b0 20 9d 0c 80 1f 57  3e 8c d1 3f c3 f4 e8 ba  |.. ....W>..?....|
13 e3 9f 3e af 8a 02 79  e0 0b 07 cb 99 d5 06 94  |...>...y........|
84 32 78 18 d8 d2 15 cc  58 fc 3a a4 23 ec fb 05  |.2x.....X.:.#...|
ce 47 60 8b 59 61 bf 7d  33 98 cb a7 a7 a5 25 bf  |.G`.Ya.}3.....%.|
a6 5e 92 05 20 48 ed c4  57 68 f2 3e cf 53 89 3e  |.^.. H..Wh.>.S.>|
c6 34 ad 62 dc 00 a9 31  2c af dd 6f 13 da e1 bf  |.4.b...1,..o....|
de 03 21 d4 7a 3d 55 00  43 d9 ee b2 5d c5 89 ce  |..!.z=U.C...]...|
```

Signer

1
unnamed
- #0
  - C: BE
  - O: GlobalSign nv-sa
  - CN: GlobalSign CodeSigning CA - G2
- 11:21:7D:70:E4:68:6E:F1:AA:FD:FA:BF:EC:6F:31:F4:
  83:0B
SHA1: nil

1.3.6.1.4.1.311.2.1.12
- nil
1.2.840.113549.1.9.25.4: 1
contentType: 1.3.6.1.4.1.311.2.1.4
1.3.6.1.4.1.311.2.1.11: msCodeInd

messageDigest:

fc af 4b 4a 78 ae 34 10  08 43 fb b7 62 8b 9c 26  |..KJx.4..C..b..&|
c1 e9 a2 24                                       |...$            |

rsaEncryption:

42 6f bb 2e 4b 09 e0 4f  63 4e 17 a4 ac 0d c6 f9  |Bo..K..OcN......|
97 56 58 f2 e3 28 40 f1  12 85 77 1a c4 25 e6 9a  |.VX..(@...w..%..|
14 bf 0e 19 6d a5 4d 56  1b c5 76 05 9a d2 9a 37  |....m.MV..v....7|
5b 1b 2c 1b db 2d d5 0a  5d 3b 78 a5 9f 36 2a 32  |[.,..-..];x..6*2|
ca 9b 4b d4 87 ce 6a 2e  d2 0b 8e 73 4d c9 bf fb  |..K...j....sM...|
7c 1d 00 64 df d2 69 07  ef 83 c4 96 2e fb c9 7e  ||..d..i........~|
0c 9a 1e a2 60 a7 24 63  72 9b 25 ac 9d 3d f8 3e  |....`.$cr.%..=.>|
e9 1f aa 19 c6 b9 4a 9c  0d cd b6 b0 9c 43 54 3a  |......J......CT:|
26 b6 41 13 b2 3c be 2d  96 47 d8 a6 83 e3 e8 08  |&.A..<.-.G......|
4c 04 10 78 8d a5 11 b1  1f e4 5a ee 42 e3 4b ad  |L..x......Z.B.K.|
35 57 09 7d 05 ac 08 c2  c0 a2 16 be 23 a4 c7 c4  |5W.}........#...|
a5 9d 36 00 cb 22 67 cc  8d b8 ac aa e4 32 c7 fd  |..6.."g......2..|
34 71 45 9f 35 ee de 0e  67 5d 07 49 ae d8 fc 83  |4qE.5...g].I....|
ce 32 d6 10 80 48 b3 c7  36 66 22 98 9f c3 c2 f7  |.2...H..6f".....|
3c aa d2 eb 00 87 58 c9  98 1f a9 52 24 86 af 2d  |<.....X....R$..-|
e6 a0 b0 39 a9 82 19 7c  8a a7 47 e0 cb 1b b3 1d  |...9...|..G.....|

1.3.6.1.4.1.311.3.3.1

pkcs7-signedData

SHA1: nil
id-smime-ct-TSTInfo
- 1
  - 1.3.6.1.4.1.4146.2.2
  - SHA1
    - 92 a9 c6 62 71 eb 2f e0 2a 8f 64 f0 c2 ad 23 f7 |...bq./.*.d...#.| e7 eb 53 50 |..SP |
  - 04:79:D7:97:00:19:9E:75:C8:3C:51:F7:15:54:A5:B8:
    79:10:26:26
  - 2014-08-21 19:01:50 UTC
  - Subject
    - C: SG
    - O: GMO GlobalSign Pte Ltd
    - CN: GlobalSign TSA for Standard - G1

Certificates

Certificate #0
- 2
  - 11:21:22:31:90:C8:F2:13:3F:6F:93:C7:23:14:F0:92:
    E6:5C
  - RSA-SHA1: nil
  - Issuer
    - C: BE
    - O: GlobalSign nv-sa
    - CN: GlobalSign Timestamping CA - G2
  - 2013-08-23 00:00:00 UTC: 2024-09-23 00:00:00 UTC
  - Subject
    - C: SG
    - O: GMO GlobalSign Pte Ltd
    - CN: GlobalSign TSA for Standard - G1
  - #5
    - rsaEncryption: nil
    - A4:B6:C2:4C:45:0E:E2:B0:6C:25:9E:82:77:74:0F:4D:
      C4:79:A1:E7:4D:37:53:78:34:6F:86:CA:BB:A4:32:B4:
      2D:C1:2A:AA:63:FB:F5:6B:FF:B8:29:59:89:11:3F:DB:
      7A:3A:38:C2:8E:29:81:23:D4:33:0D:20:A5:E4:14:31:
      64:8C:FE:A8:6C:E5:12:3F:D8:9C:98:96:9E:85:BD:DE:
      EF:86:C0:1A:BE:CB:D3:8D:B5:52:E7:25:DA:2D:02:71:
      72:24:F7:AC:DE:63:C4:6B:39:E6:34:F4:42:C9:1E:EB:
      2C:F5:14:4C:99:78:7D:DB:CF:F4:8A:A3:88:5A:A1:E4:
      38:79:BA:3F:89:3E:11:D9:8E:52:EE:CE:27:99:E0:EC:
      58:A8:1E:B2:14:F8:68:BA:6F:2D:00:D4:92:09:40:1A:
      D9:02:E6:9C:25:5A:D0:B8:D3:72:DF:0E:6C:A9:FD:F5:
      9D:DD:A0:83:1B:7A:81:98:40:50:F1:60:B6:30:6B:25:
      95:DB:BA:DC:81:DE:FA:8F:8C:C3:58:B2:0F:2E:F5:B0:
      98:37:01:CE:0A:1D:F7:F1:BC:AB:9B:40:AD:74:8F:70:
      94:25:9F:0B:CA:B4:FF:CE:35:97:00:7B:D9:5A:81:69:
      C2:DA:C9:A1:75:BA:1E:CE:C4:17:35:1B:B1:CB:CB:4D: 0x010001
  - #6
    - keyUsage: true, 0x80
    - certificatePolicies
      - 1.3.6.1.4.1.4146.1.30
        id-qt-cps: https://www.globalsign.com/repository/
    - basicConstraints
      - nil
    - extendedKeyUsage: true, timeStamping
    - crlDistributionPoints: http://crl.globalsign.com/gs/gstimestampingg2.crl
    - authorityInfoAccess
      - caIssuers: http://secure.globalsign.com/cacert/gstimestampingg2.crt
    - subjectKeyIdentifier:
```
4f 35 41 b5 f9 4a 92 ce  48 29 50 4b 03 2c b3 77  |O5A..J..H)PK.,.w|
fa 2a 40 b4                                       |.*@.            |
```
    - authorityKeyIdentifier:
```
46 d8 3e ff dc e3 be ff  83 e6 f4 85 9b b0 dd 6a  |F.>............j|
d6 14 a9 c1                                       |....            |
```
- RSA-SHA1:
```
90 7c 32 f8 95 17 07 2c  ca d9 cc ca 31 0d a3 18  |.|2....,....1...|
b1 c6 d7 89 14 26 70 7d  c7 30 9c bd 93 bb a3 48  |.....&p}.0.....H|
e9 20 ee 85 0a 64 b6 24  7a bf c7 4d 5d a7 60 8e  |. ...d.$z..M].`.|
aa ed a4 26 7e 9e cb ab  23 27 16 51 2d 98 fc 23  |...&~...#'.Q-..#|
5a 6c a3 8d ea 72 98 cb  25 5d eb 3c 8a c9 10 ff  |Zl...r..%].<....|
2d 3e d7 eb 9f 98 1d 82  99 a3 63 a2 56 da 5d 50  |->........c.V.]P|
d3 d7 36 f5 31 98 00 37  43 77 e2 10 ad 04 f1 3c  |..6.1..7Cw.....<|
97 55 90 cb b6 40 ae f5  20 07 4a 4e e2 e8 57 ad  |.U...@.. .JN..W.|
6e 4c 73 5a 8c 6f da 7f  e5 52 57 52 eb 99 42 4d  |nLsZ.o...RWR..BM|
d7 eb 75 4c 75 f3 12 3c  94 ca a2 6a 76 3b 72 ff  |..uLu..<...jv;r.|
18 58 30 af 8b 8a 73 1b  dc 3b ec a8 5c 1e 0a c4  |.X0...s..;..\...|
29 bd 7f 47 39 c6 a2 b3  26 80 9c b6 86 da c5 bf  |)..G9...&.......|
dd 64 d4 70 7e f1 48 33  34 de fb 99 1f d7 28 24  |.d.p~.H34.....($|
ef b2 5e 1d 9d ea 0e 02  ef 0f b5 13 d1 bc 9a 38  |..^............8|
cd 83 55 04 94 d0 22 67  2d 2e c2 32 11 ce a5 7f  |..U..."g-..2....|
7d aa c0 be 39 7c 10 2c  c1 ea 80 42 9c 98 37 8c  |}...9|.,...B..7.|
```

Certificate #1

2
- 04:00:00:00:00:01:2F:4E:E1:52:D7
- RSA-SHA1: nil
- Issuer
  - C: BE
  - O: GlobalSign nv-sa
  - OU: Root CA
  - CN: GlobalSign Root CA
- 2011-04-13 10:00:00 UTC: 2028-01-28 12:00:00 UTC
- Subject
  - C: BE
  - O: GlobalSign nv-sa
  - CN: GlobalSign Timestamping CA - G2
- #5
  - rsaEncryption: nil
  - 94:EF:65:F8:B5:57:9F:A0:53:0D:34:06:EB:09:1F:B7:
    47:18:6A:CB:F0:5B:E4:FF:27:A5:34:D1:F7:89:1A:BF:
    9E:B1:CD:12:41:6E:66:D4:81:A0:85:8B:64:5A:46:2F:
    99:A0:8D:77:B1:E2:BC:5C:DD:22:D7:6A:67:D0:BB:E8:
    CA:74:DE:8B:4F:0D:B0:52:E5:90:5B:EB:47:0E:F1:E7:
    9F:9C:0B:90:65:3E:17:96:30:45:72:6D:39:A1:17:36:
    CA:B9:A0:8C:1B:4F:08:19:F6:81:31:AD:61:16:A4:62:
    E6:B4:40:9E:C3:FC:FB:95:F6:FB:B5:2E:95:81:98:E0:
    EF:C5:EB:D8:02:59:78:77:F7:AA:E3:52:6B:50:91:29:
    C5:FC:F7:CD:93:65:D2:60:61:22:F2:06:FB:32:DD:16:
    51:FA:0E:FD:8A:30:F0:17:09:A7:BB:F3:04:AE:AB:90:
    E7:6C:DF:7A:A9:F4:EF:C4:62:27:5F:6F:99:6D:38:74:
    AA:11:8B:DA:DF:C7:14:4C:E9:85:B2:EC:C2:7D:4A:26:
    8F:E7:56:BA:A6:E0:CF:92:53:80:74:F4:03:EC:68:B2:
    60:BC:84:20:00:83:1B:A1:EE:B4:74:05:C1:29:8E:62:
    D0:47:B1:FA:F0:53:CC:18:F9:2E:3B:F9:70:7E:B4:25: 0x010001
- #6
  - keyUsage: true, 6
  - basicConstraints
    - true
    - true: 0
  - subjectKeyIdentifier:
```
46 d8 3e ff dc e3 be ff  83 e6 f4 85 9b b0 dd 6a  |F.>............j|
d6 14 a9 c1                                       |....            |
```
  - certificatePolicies
    - anyPolicy
      - id-qt-cps: https://www.globalsign.com/repository/
  - crlDistributionPoints: http://crl.globalsign.net/root.crl
  - authorityKeyIdentifier:
```
60 7b 66 1a 45 0d 97 ca  89 50 2f 7d 04 cd 34 a8  |`{f.E....P/}..4.|
ff fc fd 4b                                       |...K            |
```

RSA-SHA1:

4e 5e 56 90 1e 46 b4 d9  49 31 f3 bb 17 39 28 1b  |N^V..F..I1...9(.|
c2 16 dd fd 41 dc 09 05  04 9b 6f b2 a2 9a d6 99  |....A.....o.....|
2e 40 99 00 55 b5 ea 3f  a5 20 76 d3 86 34 d4 17  |.@..U..?. v..4..|
cc 55 3a c7 82 ee ef a8  ba bc d8 06 9f 15 50 df  |.U:...........P.|
cd 16 7b 52 3a 02 d7 19  1a fd af f0 78 5c e0 4b  |..{R:.......x\.K|
c5 18 df 3a 24 1e da ac  b8 a9 58 04 02 07 30 db  |...:$.....X...0.|
b0 12 5e fe 31 be f0 04  48 f4 f0 70 f8 3a 5e 56  |..^.1...H..p.:^V|
83 cf 3d fb 0d bc f4 c5  ed 97 9d b9 d4 db a5 27  |..=............'|
84 e3 38 9b 8b a7 35 86  44 20 a4 3b 6d a4 6a 0b  |..8...5.D .;m.j.|
a1 83 fd 28 eb da ef 28  f6 cc 88 5d fb 0a 3b 00  |...(...(...]..;.|
ab e0 21 eb e2 2f 35 6c  0f 8e 34 45 97 eb a2 f7  |..!../5l..4E....|
99 33 35 7e cb 9a 8a bb  45 4d e7 3f 9f c2 d9 8a  |.35~....EM.?....|
fa 65 b2 6e c7 7e 65 ff  e8 92 e1 2c 31 a2 f7 b0  |.e.n.~e....,1...|
27 36 48 8f 26 6f 3b ee  4d 76 1f 79 c3 e5 7f 96  |'6H.&o;.Mv.y....|
35 bc 2d 0e cc 01 b0 8e  7f ff 51 80 80 a7 92 d4  |5.-.......Q.....|
b3 44 46 64 8c 87 4f 16  63 07 31 4b 63 b0 df f3  |.DFd..O.c.1Kc...|

unnamed
- #0
  - C: BE
  - O: GlobalSign nv-sa
  - CN: GlobalSign Timestamping CA - G2
- 11:21:22:31:90:C8:F2:13:3F:6F:93:C7:23:14:F0:92:
  E6:5C
SHA1: nil

contentType: id-smime-ct-TSTInfo
signingTime: 2014-08-21 19:01:50 UTC

messageDigest:

67 f0 de 64 95 f8 0f c0  8a b2 3c 01 4f bf db ce  |g..d......<.O...|
8f d1 3e 4b                                       |..>K            |

id-smime-aa-signingCertificate
- 49 63 c7 14 21 93 35 d0 4e 7a f0 39 ed 43 97 e5 |Ic..!.5.Nz.9.C..| a9 bc 55 3f |..U? |
  - unnamed
    - #0
      - C: BE
      - O: GlobalSign nv-sa
      - CN: GlobalSign Timestamping CA - G2
    - 11:21:22:31:90:C8:F2:13:3F:6F:93:C7:23:14:F0:92:
      E6:5C

rsaEncryption:

0c 89 3f 61 58 80 f9 db  8c 38 ae d2 7c 64 52 00  |..?aX....8..|dR.|
8e 29 1f 06 57 ba 28 bf  67 49 d1 58 dd 2b 8f 60  |.)..W.(.gI.X.+.`|
e4 ea 13 c7 30 3f a0 06  e3 a3 c2 a7 9b 55 54 90  |....0?.......UT.|
88 e1 8d 0f 61 6b d8 e1  da 55 62 f9 eb ba d2 ec  |....ak...Ub.....|
ca dd cd 1c ce 56 c4 a1  55 f3 fe cf fd 01 eb 48  |.....V..U......H|
13 e1 f6 ab 6d b6 70 8d  43 15 34 5b dd 50 c0 f6  |....m.p.C.4[.P..|
99 3b 82 ad 89 cd f5 95  c4 64 95 b9 de d9 2f 02  |.;.......d..../.|
56 41 9d 5f 3c 7c 77 c6  64 bf 73 f6 9f be 1b 48  |VA._<|w.d.s....H|
ae fd 29 81 24 7c 63 85  19 4d f0 13 54 f1 e7 49  |..).$|c..M..T..I|
ea 0c ff b2 d1 10 d2 80  4b b4 7c cc 48 6c 4f 97  |........K.|.HlO.|
40 91 e8 3e 8c 02 6c 49  ce c0 e7 14 f5 23 54 60  |@..>..lI.....#T`|
6d 06 2f c6 93 64 28 52  26 02 1f 35 7f a3 03 0f  |m./..d(R&..5....|
a8 73 c7 7c 62 f9 0a 77  af 86 e0 4c 02 99 d1 15  |.s.|b..w...L....|
4d c1 be 00 21 3f b6 31  27 a4 b0 ff ef cb 43 4f  |M...!?.1'.....CO|
4f 69 9b 07 b0 0b 95 17  fc 3d ed 1c 3f c2 83 79  |Oi.......=..?..y|
fd 04 41 1f 4b 64 b9 b5  f7 9f f2 c4 da bb a1 08  |..A.Kd..........|

show previews

offset	size	type	comment
0	51200	EXE	03/26/2010 19:30:19	#
15c1	15	HTM		#
c800	12352	PKCS7	Authenticode Signature	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

Dialog42.exe- Dialog42

MZ Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

TLS

StringTable 00000000

VS_FIXEDFILEINFO

Signers (1)

Certificates (2)

Dialog42.exe
- Dialog42