filenameQvodSetup5.exe
size423856 (0x677b0)
md55eca75795122a6a102e41c0874519f72
typePE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
mimetypeapplication/x-dosexec
clamavWin.Trojan.Sality-45445 FOUND
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xe0

Rich Header

lib idversiontimes used
1255072728
1145072767
10950727197
1235072725
10325
1105072784
124507271
120507271

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections3
TimeDateStamp0x528594e2
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x103
Magic0x10b
LinkerVersion8.0
SizeOfCode0x5d000
SizeOfInitializedData0xa000
SizeOfUninitializedData0x5c000
AddressOfEntryPoint0xb92b0
BaseOfCode0x5d000
BaseOfData0xba000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0xc4000
SizeOfHeaders0x1000
CheckSum0x71258
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

UPX v0.89.6 - v1.02 / v1.05 - v1.22

This file is packed with UPX. Analysis will be incomplete without unpacking.
We can unpack it for you.

»» Analyze unpacked file

Sections

namevavsizeraw sizeflags
UPX00x10000x5c0000RWX UDATA
UPX10x5d0000x5d0000x5c600RWX IDATA
.rsrc0xba0000xa0000x9400RW- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0xc2f540x2d8
RESOURCE0xba0000x8f54
EXCEPTION00
SECURITY0x65e000x19b0
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0xc322c0x48
Bound_IAT00
IAT00
Delay_IAT00
CLR_Header00
typenamesizecp
PNG#231991401252
PNG#23228611252
PNG#233243531252
PNG#23437131252
PNG#23531481252
PNG#2369601252
PNG#23710691252
PNG#23810651252
PNG#23935481252
PNG#24028531252
PNG#241286441252
PNG#24253521252
ICON#113841252
ICON#2169361252
ICON#396401252
ICON#442641252
ICON#511281252
MENU#202481252
DIALOG#129441252
STRING#81121252
STRING#92041252
STRING#102221252
STRING#18361252
STRING#69361252
GROUP_ICON#128761252
VERSION#19081252
MANIFEST#18101252
idlangstring
1122052
44 3e 9f 0d 44 9b 8a fe  ff 2b c8 6b 1b b5 67 0b  |D>..D....+.k..g.|
45 54 4a 2d f5 51 ab 24  4c 93 cc 09 b8 15 92 f0  |ETJ-.Q.$L.......|
ff 99 34 56 30 8e 55 91  28 3e 1e 8d 62 14 7f 5f  |..4V0.U.(>..b.._|
f5 ff ff d6 c2 53 03 bb  b0 8b 80 44 32 89 ea aa  |.....S.....D2...|
2a d4 36 35 c1 30 8c 2e  5c 4a 48 df 87 ff ff ff  |*.65.0..\JH.....|
15 b0 9e e7 41 94 44 f0  a3 f8 b7 01 df f7 91 b7  |....A.D.........|
1d 64 f3 79 f4 f7 f7 c3  b5 6d cc ff ff ff 0d 76  |.d.y.....m.....v|
1282052
7f 1c 89 e1 92 9a 38 56  73 0d b3 84 80 cc 65 90  |......8Vs.....e.|
f1 fd 62 5b d9 72 de cb  70 ff ff ff ff ae 32 6e  |..b[.r..p.....2n|
8e 22 2a a6 26 cb 72 26  4a 31 f4 a0 d0 e4 a5 90  |."*.&.r&J1......|
0a c8 c0 39 c3 46 92 6e  8f 8c 88 9b ce ff ff 01  |...9.F.n........|
fe fa 36 75 be 89 83 d8  22 e8 e6 bf 3c 2b 7e ee  |..6u...."...<+~.|
ca 96 4f 46 23 fc 2f 19  ff ff ff ff 95 6f d2 e2  |..OF#./......o..|
b8 c2 de b0 b3 ff c5 ff  ef 97 5b ef df bc 67 f0  |..........[...g.|
60 68 9d f7 87 2e d3 d2  e0 26 86 d1 ff 2b 8c ff  |`h.......&...+..|
80 36 1b 40 f6 3b 77 6e  cf 1c 7d d7 17 3e 78 ca  |.6.@.;wn..}..>x.|
a5 ef 58 de ff ff ff ff  7c 8e a1 b3 c8 38 eb d5  |..X.....|....8..|
34 75 fe 27 f5 d5 91 f3  36 fc ef 7b bf f1 a5 1f  |4u.'....6..{....|
6c fc e1 91 5a ed 6f 04  bf e3 ff ff 99 bc 9b ea  |l...Z.o.........|
1d b4 f6 11 c1 af 94 d2  26 21 c9 f3              |........&!..    |
1442052
a5 88 9a ae b5 21 76 02  a3 09 ff ff ff ff c5 77  |.....!v........w|
64 ef 50 fe 60 3a eb f6  69 9c a8 52 b3 9b 70 3b  |d.P.`:..i..R..p;|
b2 a1 3a 32 b7 26 69 34  4d a3 95 ae dd fc ff ff  |..:2.&i4M.......|
ff ff 97 67 9d 92 8c e9  cb 30 b6 d6 01 1d 83 98  |...g.....0......|
d2 14 04 bd f4 99 f2 b6  ef fe ed 77 5f fa e5 83  |...........w_...|
cf b7 ff df a4 ff 6f 45  50 fc a7 5c ba a2 42 48  |......oEP..\..BH|
32 c4 24 f7 ac 41 84 b9  5c cb ed f7 dc c0 ff 82  |2.$..A..\.......|
ff ff 6b 64 ec 94 55 9a  f1 c1 04 34 7e d2 76 08  |..kd..U....4~.v.|
1f 9d 35 1b 8b ff ff ff  2f c8 5c 36 33 aa 58 a2  |..5...../.\63.X.|
d4 fa 2c 1d 0d 68 8c 95  4a c5 ae 27 41 2e 77 d6  |..,..h..J..'A.w.|
f7 c1 73 19 cc 64 ff ff  2f fa 1c 73 b8 86 cb 8e  |..s..d../..s....|
7d b1 38 5e 23 e0 69 db  c6 cb dd bd d8 7d f0 10  |}.8^#.i......}..|
f2 8c c1 d7 5f 64 40 ff  75 08 5d 07 d7 38 18 d7  |...._d@.u.]..8..|
d0 e8 d2 17 90 c2 78 2b  20 a5 87 3a eb 98        |......x+ ..:..  |
2722052￿鈗䡼⬔ᣍ䯎拖႑ឨ∞޾뛏￰￿᎐⁾藍
10882052ጒﻢ⎊枊豥夑㜩짌￾忿琦艒세愃黿
module_namehintordfunction_name
KERNEL32.DLLLoadLibraryA
KERNEL32.DLLGetProcAddress
KERNEL32.DLLVirtualProtect
KERNEL32.DLLVirtualAlloc
KERNEL32.DLLVirtualFree
KERNEL32.DLLExitProcess
ADVAPI32.dllRegCloseKey
GDI32.dllDeleteDC
gdiplus.dllGdipFree
IPHLPAPI.DLLGetAdaptersInfo
ole32.dllCoInitialize
OLEAUT32.dll2
SHELL32.dllSHFileOperationW
SHLWAPI.dllStrStrIA
USER32.dllEndPaint
VERSION.dllVerQueryValueA
WS2_32.dll2

StringTable 040904b0

CompanyNameShenzhen QVOD Technology Co.,Ltd
FileDescriptionQvodInstall Module
FileVersion5,2,0,0
InternalNameQvodSetup5
LegalCopyrightCopyright (C) 2006 - 2013 Shenzhen QVOD Technology Co.,Ltd. All rights reserved.
OriginalFilenameQvodSetup5.exe
ProductNameQvodInstall Module
ProductVersion5, 2, 0, 0

VS_FIXEDFILEINFO

FileVersion5.2.0.0
ProductVersion5.2.0.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS4
FileType2
FileSubtype0

Signers (1)

issuer: /C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa (c)10/CN=VeriSign Class 3 Code Signing 2010 CA
serial: 5062CBF9284543F8BECAA682EB4E2871

Certificates (4)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
        Validity
            Not Before: Dec 21 00:00:00 2012 GMT
            Not After : Dec 30 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:b3:49:54:4b:97:1c:12:0a:d8:25:79:91:
                    22:57:2a:6f:dc:b8:26:c4:43:73:6b:c2:bf:2e:50:
                    5a:fb:14:c2:76:8e:43:01:25:43:b4:a1:e2:45:f4:
                    e8:b7:7b:c3:74:cc:22:d7:b4:94:00:02:f7:4d:ed:
                    bf:b4:b7:44:24:6b:cd:5f:45:3b:d1:44:ce:43:12:
                    73:17:82:8b:69:b4:2b:cb:99:1e:ac:72:1b:26:4d:
                    71:1f:b1:31:dd:fb:51:61:02:53:a6:aa:f5:49:2c:
                    05:78:45:a5:2f:89:ce:e7:99:e7:fe:8c:e2:57:3f:
                    3d:c6:92:dc:4a:f8:7b:33:e4:79:0a:fb:f0:75:88:
                    41:9c:ff:c5:03:51:99:aa:d7:6c:9f:93:69:87:65:
                    29:83:85:c2:60:14:c4:c8:c9:3b:14:da:c0:81:f0:
                    1f:0d:74:de:92:22:ab:ca:f7:fb:74:7c:27:e6:f7:
                    4a:1b:7f:a7:c3:9e:2d:ae:8a:ea:a6:e6:aa:27:16:
                    7d:61:f7:98:71:11:bc:e2:50:a1:4b:e5:5d:fa:e5:
                    0e:a7:2c:9f:aa:65:20:d3:d8:96:e8:c8:7c:a5:4e:
                    48:44:ff:19:e2:44:07:92:0b:d7:68:84:80:5d:6a:
                    78:64:45:cd:60:46:7e:54:c1:13:7c:c5:79:f1:c9:
                    c1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD
            Authority Information Access: 
                OCSP - URI:http://ocsp.thawte.com

            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.thawte.com/ThawteTimestampingCA.crl

            X509v3 Extended Key Usage: 
                Time Stamping
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-1
    Signature Algorithm: sha1WithRSAEncryption
         03:09:9b:8f:79:ef:7f:59:30:aa:ef:68:b5:fa:e3:09:1d:bb:
         4f:82:06:5d:37:5f:a6:52:9f:16:8d:ea:1c:92:09:44:6e:f5:
         6d:eb:58:7c:30:e8:f9:69:8d:23:73:0b:12:6f:47:a9:ae:39:
         11:f8:2a:b1:9b:b0:1a:c3:8e:eb:59:96:00:ad:ce:0c:4d:b2:
         d0:31:a6:08:5c:2a:7a:fc:e2:7a:1d:57:4c:a8:65:18:e9:79:
         40:62:25:96:6e:c7:c7:37:6a:83:21:08:8e:41:ea:dd:d9:57:
         3f:1d:77:49:87:2a:16:06:5e:a6:38:6a:22:12:a3:51:19:83:
         7e:b6
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Validity
            Not Before: Oct 18 00:00:00 2012 GMT
            Not After : Dec 29 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer - G4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:63:0b:39:44:b8:bb:23:a7:44:49:bb:0e:ff:
                    a1:f0:61:0a:53:93:b0:98:db:ad:2c:0f:4a:c5:6e:
                    ff:86:3c:53:55:0f:15:ce:04:3f:2b:fd:a9:96:96:
                    d9:be:61:79:0b:5b:c9:4c:86:76:e5:e0:43:4b:22:
                    95:ee:c2:2b:43:c1:9f:d8:68:b4:8e:40:4f:ee:85:
                    38:b9:11:c5:23:f2:64:58:f0:15:32:6f:4e:57:a1:
                    ae:88:a4:02:d7:2a:1e:cd:4b:e1:dd:63:d5:17:89:
                    32:5b:b0:5e:99:5a:a8:9d:28:50:0e:17:ee:96:db:
                    61:3b:45:51:1d:cf:12:56:0b:92:47:fc:ab:ae:f6:
                    66:3d:47:ac:70:72:e7:92:e7:5f:cd:10:b9:c4:83:
                    64:94:19:bd:25:80:e1:e8:d2:22:a5:d0:ba:02:7a:
                    a1:77:93:5b:65:c3:ee:17:74:bc:41:86:2a:dc:08:
                    4c:8c:92:8c:91:2d:9e:77:44:1f:68:d6:a8:74:77:
                    db:0e:5b:32:8b:56:8b:33:bd:d9:63:c8:49:9d:3a:
                    c5:c5:ea:33:0b:d2:f1:a3:1b:f4:8b:be:d9:b3:57:
                    8b:3b:de:04:a7:7a:22:b2:24:ae:2e:c7:70:c5:be:
                    4e:83:26:08:fb:0b:bd:a9:4f:99:08:e1:10:28:72:
                    aa:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                OCSP - URI:http://ts-ocsp.ws.symantec.com
                CA Issuers - URI:http://ts-aia.ws.symantec.com/tss-ca-g2.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ts-crl.ws.symantec.com/tss-ca-g2.crl

            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-2
            X509v3 Subject Key Identifier: 
                46:C6:69:A3:0E:4A:14:1E:D5:4C:DA:52:63:17:3F:5E:36:BC:0D:E6
            X509v3 Authority Key Identifier: 
                keyid:5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD

    Signature Algorithm: sha1WithRSAEncryption
         78:3b:b4:91:2a:00:4c:f0:8f:62:30:37:78:a3:84:27:07:6f:
         18:b2:de:25:dc:a0:d4:94:03:aa:86:4e:25:9f:9a:40:03:1c:
         dd:ce:e3:79:cb:21:68:06:da:b6:32:b4:6d:bf:f4:2c:26:63:
         33:e4:49:64:6d:0d:e6:c3:67:0e:f7:05:a4:35:6c:7c:89:16:
         c6:e9:b2:df:b2:e9:dd:20:c6:71:0f:cd:95:74:dc:b6:5c:de:
         bd:37:1f:43:78:e6:78:b5:cd:28:04:20:a3:aa:f1:4b:c4:88:
         29:91:0e:80:d1:11:fc:dd:5c:76:6e:4f:5e:0e:45:46:41:6e:
         0d:b0:ea:38:9a:b1:3a:da:09:71:10:fc:1c:79:b4:80:7b:ac:
         69:f4:fd:9c:b6:0c:16:2b:f1:7f:5b:09:3d:9b:5b:e2:16:ca:
         13:81:6d:00:2e:38:0d:a8:29:8f:2c:e1:b2:f4:5a:a9:01:af:
         15:9c:2c:2f:49:1b:db:22:bb:c3:fe:78:94:51:c3:86:b1:82:
         88:5d:f0:3d:b4:51:a1:79:33:2b:2e:7b:b9:dc:20:09:13:71:
         eb:6a:19:5b:cf:e8:a5:30:57:2c:89:49:3f:b9:cf:7f:c9:bf:
         3e:22:68:63:53:9a:bd:69:74:ac:c5:1d:3c:7f:92:e0:c3:bc:
         1c:d8:04:75
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:62:cb:f9:28:45:43:f8:be:ca:a6:82:eb:4e:28:71
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA
        Validity
            Not Before: Apr 28 00:00:00 2013 GMT
            Not After : Jul 28 23:59:59 2015 GMT
        Subject: C=CN, ST=guangdong, L=shenzhen, O=Shenzhen QVOD Technology Co.,Ltd, OU=Digital ID Class 3 - Microsoft Software Validation v2, OU=Digital ID Class 3 - Microsoft Software Validation v2, CN=Shenzhen QVOD Technology Co.,Ltd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:10:f5:e9:90:64:68:f8:dc:8a:69:d4:c6:a4:
                    c6:46:84:a8:43:8f:ed:d2:ab:9c:39:ce:fd:71:75:
                    55:ef:ff:24:37:ca:ae:85:e9:74:5d:25:23:9b:5d:
                    2c:fa:0c:fb:68:c6:4f:0d:b9:a7:67:87:10:6f:a8:
                    aa:10:88:94:b4:38:13:a6:89:9e:fb:24:67:1e:73:
                    ad:31:74:1b:1f:cf:01:2c:a8:36:9e:24:6a:64:f9:
                    9b:a0:71:75:5c:0b:d2:3b:a4:c5:07:da:f9:b6:7c:
                    89:64:84:92:29:83:47:c7:88:74:e7:55:9a:33:e0:
                    69:39:e6:c0:e9:d1:ea:d0:99:51:fb:41:b2:c1:68:
                    29:c6:c8:4e:7d:57:62:4f:01:35:45:fe:a7:9a:a7:
                    4d:86:03:e0:63:a8:4d:85:d7:de:3b:bc:e5:80:93:
                    a6:18:34:00:9a:70:37:82:ba:2b:93:9e:24:67:08:
                    1d:98:cd:59:22:88:46:3a:7f:6a:45:2a:c8:cd:80:
                    41:b2:fb:51:e8:4b:15:83:cb:26:84:1b:30:5b:2f:
                    ee:79:32:24:e0:db:73:e8:f1:7b:30:97:6c:c3:da:
                    7e:75:e1:60:48:93:a3:47:10:ff:37:56:6b:10:9f:
                    44:7c:f1:0f:96:58:40:9a:6e:e5:30:e2:25:b2:6a:
                    25:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://csc3-2010-crl.verisign.com/CSC3-2010.crl

            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/rpa

            X509v3 Extended Key Usage: 
                Code Signing
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com
                CA Issuers - URI:http://csc3-2010-aia.verisign.com/CSC3-2010.cer

            X509v3 Authority Key Identifier: 
                keyid:CF:99:A9:EA:7B:26:F4:4B:C9:8E:8F:D7:F0:05:26:EF:E3:D2:A7:9D

            Netscape Cert Type: 
                Object Signing
            1.3.6.1.4.1.311.2.1.27: 
                0.......
    Signature Algorithm: sha1WithRSAEncryption
         9f:4f:6f:ad:9f:10:36:70:d3:f6:a2:52:7c:74:2a:c1:31:87:
         15:d0:cb:fc:5c:e1:bf:4d:1f:07:86:57:ae:85:b9:5c:b7:f0:
         e2:82:9d:cf:c5:f6:89:bd:3b:be:e8:7e:47:75:01:05:d1:19:
         70:8b:b0:90:10:e3:3a:96:1a:d8:18:22:af:5d:c0:bc:6b:7d:
         e9:60:86:cd:6a:46:04:3f:e5:d4:f0:4c:3d:ea:74:4b:c3:e2:
         dd:2b:cb:f5:5e:d5:b4:ba:14:da:0e:a8:1c:4e:35:bb:c3:cf:
         cf:7b:a7:51:8d:4b:09:5f:0e:2f:75:d9:de:63:b5:1c:bc:25:
         18:5a:eb:33:64:90:68:2d:b2:1a:16:a2:27:72:8e:d8:c0:ff:
         55:9d:56:d1:01:80:f4:47:6a:86:4e:d5:07:ba:21:75:1b:6d:
         7f:8d:53:5c:66:ea:6c:4b:23:47:bc:e4:27:15:de:53:31:b1:
         d2:7e:8a:31:52:22:4f:61:60:e7:c9:05:2f:ec:be:1a:84:0d:
         96:ea:92:e2:fd:1d:a1:f7:84:d5:70:0c:1d:f8:94:32:5d:cd:
         b3:62:86:d3:df:2b:7b:f6:7c:28:c3:45:4e:ee:1f:e3:07:f6:
         cb:f7:7c:a7:9d:57:38:43:99:60:b1:9e:40:9e:15:a8:94:e0:
         b2:a9:f6:d2
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
        Validity
            Not Before: Feb  8 00:00:00 2010 GMT
            Not After : Feb  7 23:59:59 2020 GMT
        Subject: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:23:4b:5e:a5:d7:8a:bb:32:e9:d4:57:f7:ef:
                    e4:c7:26:7e:ad:19:98:fe:a8:9d:7d:94:f6:36:6b:
                    10:d7:75:81:30:7f:04:68:7f:cb:2b:75:1e:cd:1d:
                    08:8c:df:69:94:a7:37:a3:9c:7b:80:e0:99:e1:ee:
                    37:4d:5f:ce:3b:14:ee:86:d4:d0:f5:27:35:bc:25:
                    0b:38:a7:8c:63:9d:17:a3:08:a5:ab:b0:fb:cd:6a:
                    62:82:4c:d5:21:da:1b:d9:f1:e3:84:3b:8a:2a:4f:
                    85:5b:90:01:4f:c9:a7:76:10:7f:27:03:7c:be:ae:
                    7e:7d:c1:dd:f9:05:bc:1b:48:9c:69:e7:c0:a4:3c:
                    3c:41:00:3e:df:96:e5:c5:e4:94:71:d6:55:01:c7:
                    00:26:4a:40:3c:b5:a1:26:a9:0c:a7:6d:80:8e:90:
                    25:7b:cf:bf:3f:1c:eb:2f:96:fa:e5:87:77:c6:b5:
                    56:b2:7a:3b:54:30:53:1b:df:62:34:ff:1e:d1:f4:
                    5a:93:28:85:e5:4c:17:4e:7e:5b:fd:a4:93:99:7f:
                    df:cd:ef:a4:75:ef:ef:15:f6:47:e7:f8:19:72:d8:
                    2e:34:1a:a6:b4:a7:4c:7e:bd:bb:4f:0c:3d:57:f1:
                    30:d6:a6:36:8e:d6:80:76:d7:19:2e:a5:cd:7e:34:
                    2d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/cps
                  User Notice:
                    Explicit Text: https://www.verisign.com/rpa

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            1.3.6.1.5.5.7.1.12: 
                0_.].[0Y0W0U..image/gif0!0.0...+..............k...j.H.,{..0%.#http://logo.verisign.com/vslogo.gif
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.verisign.com/pca3-g5.crl

            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com

            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, Code Signing
            X509v3 Subject Alternative Name: 
                DirName:/CN=VeriSignMPKI-2-8
            X509v3 Subject Key Identifier: 
                CF:99:A9:EA:7B:26:F4:4B:C9:8E:8F:D7:F0:05:26:EF:E3:D2:A7:9D
            X509v3 Authority Key Identifier: 
                keyid:7F:D3:65:A7:C2:DD:EC:BB:F0:30:09:F3:43:39:FA:02:AF:33:31:33

    Signature Algorithm: sha1WithRSAEncryption
         56:22:e6:34:a4:c4:61:cb:48:b9:01:ad:56:a8:64:0f:d9:8c:
         91:c4:bb:cc:0c:e5:ad:7a:a0:22:7f:df:47:38:4a:2d:6c:d1:
         7f:71:1a:7c:ec:70:a9:b1:f0:4f:e4:0f:0c:53:fa:15:5e:fe:
         74:98:49:24:85:81:26:1c:91:14:47:b0:4c:63:8c:bb:a1:34:
         d4:c6:45:e8:0d:85:26:73:03:d0:a9:8c:64:6d:dc:71:92:e6:
         45:05:60:15:59:51:39:fc:58:14:6b:fe:d4:a4:ed:79:6b:08:
         0c:41:72:e7:37:22:06:09:be:23:e9:3f:44:9a:1e:e9:61:9d:
         cc:b1:90:5c:fc:3d:d2:8d:ac:42:3d:65:36:d4:b4:3d:40:28:
         8f:9b:10:cf:23:26:cc:4b:20:cb:90:1f:5d:8c:4c:34:ca:3c:
         d8:e5:37:d6:6f:a5:20:bd:34:eb:26:d9:ae:0d:e7:c5:9a:f7:
         a1:b4:21:91:33:6f:86:e8:58:bb:25:7c:74:0e:58:fe:75:1b:
         63:3f:ce:31:7c:9b:8f:1b:96:9e:c5:53:76:84:5b:9c:ad:91:
         fa:ac:ed:93:ba:5d:c8:21:53:c2:82:53:63:af:12:0d:50:87:
         11:1b:3d:54:52:96:8a:2c:9c:3d:92:1a:08:9a:05:2e:c7:93:
         a5:48:91:d3
pkcs7-signedData
  • 1
    • SHA1: nil
    • 1.3.6.1.4.1.311.2.1.4
      • #0
        • 1.3.6.1.4.1.311.2.1.15
          • : 
            00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |
        • SHA1
          • c8 d2 47 bf 8c 72 34 8f  cb 64 1d 4e 93 67 9a cd  |..G..r4..d.N.g..|
2d be 49 0a                                       |-.I.            |
    • Certificates
      • Certificate #0
        • 2
          • 7E:93:EB:FB:7C:C6:4E:59:EA:4B:9A:77:D4:06:FC:3B
          • RSA-SHA1: nil
          • Issuer
            • C: ZA
            • ST: Western Cape
            • L: Durbanville
            • O: Thawte
            • OU: Thawte Certification
            • CN: Thawte Timestamping CA
          • 2012-12-21 00:00:00 UTC: 2020-12-30 23:59:59 UTC
          • Subject
            • C: US
            • O: Symantec Corporation
            • CN: Symantec Time Stamping Services CA - G2
          • #5
            • rsaEncryption: nil
            • B1:AC:B3:49:54:4B:97:1C:12:0A:D8:25:79:91:22:57:
              2A:6F:DC:B8:26:C4:43:73:6B:C2:BF:2E:50:5A:FB:14:
              C2:76:8E:43:01:25:43:B4:A1:E2:45:F4:E8:B7:7B:C3:
              74:CC:22:D7:B4:94:00:02:F7:4D:ED:BF:B4:B7:44:24:
              6B:CD:5F:45:3B:D1:44:CE:43:12:73:17:82:8B:69:B4:
              2B:CB:99:1E:AC:72:1B:26:4D:71:1F:B1:31:DD:FB:51:
              61:02:53:A6:AA:F5:49:2C:05:78:45:A5:2F:89:CE:E7:
              99:E7:FE:8C:E2:57:3F:3D:C6:92:DC:4A:F8:7B:33:E4:
              79:0A:FB:F0:75:88:41:9C:FF:C5:03:51:99:AA:D7:6C:
              9F:93:69:87:65:29:83:85:C2:60:14:C4:C8:C9:3B:14:
              DA:C0:81:F0:1F:0D:74:DE:92:22:AB:CA:F7:FB:74:7C:
              27:E6:F7:4A:1B:7F:A7:C3:9E:2D:AE:8A:EA:A6:E6:AA:
              27:16:7D:61:F7:98:71:11:BC:E2:50:A1:4B:E5:5D:FA:
              E5:0E:A7:2C:9F:AA:65:20:D3:D8:96:E8:C8:7C:A5:4E:
              48:44:FF:19:E2:44:07:92:0B:D7:68:84:80:5D:6A:78:
              64:45:CD:60:46:7E:54:C1:13:7C:C5:79:F1:C9:C1:71              : 0x010001
          • #6
            • subjectKeyIdentifier: 
              5f 9a f5 6e 5c cc cc 74  9a d4 dd 7d ef 3f db ec  |_..n\..t...}.?..|
4c 80 2e dd                                       |L...            |
            • authorityInfoAccess
              • OCSP: http://ocsp.thawte.com
            • basicConstraints
              • true
              • true: 0
            • crlDistributionPoints: http://crl.thawte.com/ThawteTimestampingCA.crl
            • extendedKeyUsage: timeStamping
            • keyUsage: true, 6
            • subjectAltName
              • CN: TimeStamp-2048-1
        • RSA-SHA1: 
          03 09 9b 8f 79 ef 7f 59  30 aa ef 68 b5 fa e3 09  |....y..Y0..h....|
1d bb 4f 82 06 5d 37 5f  a6 52 9f 16 8d ea 1c 92  |..O..]7_.R......|
09 44 6e f5 6d eb 58 7c  30 e8 f9 69 8d 23 73 0b  |.Dn.m.X|0..i.#s.|
12 6f 47 a9 ae 39 11 f8  2a b1 9b b0 1a c3 8e eb  |.oG..9..*.......|
59 96 00 ad ce 0c 4d b2  d0 31 a6 08 5c 2a 7a fc  |Y.....M..1..\*z.|
e2 7a 1d 57 4c a8 65 18  e9 79 40 62 25 96 6e c7  |.z.WL.e..y@b%.n.|
c7 37 6a 83 21 08 8e 41  ea dd d9 57 3f 1d 77 49  |.7j.!..A...W?.wI|
87 2a 16 06 5e a6 38 6a  22 12 a3 51 19 83 7e b6  |.*..^.8j"..Q..~.|
      • Certificate #1
        • 2
          • 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • O: Symantec Corporation
            • CN: Symantec Time Stamping Services CA - G2
          • 2012-10-18 00:00:00 UTC: 2020-12-29 23:59:59 UTC
          • Subject
            • C: US
            • O: Symantec Corporation
            • CN: Symantec Time Stamping Services Signer - G4
          • #5
            • rsaEncryption: nil
            • A2:63:0B:39:44:B8:BB:23:A7:44:49:BB:0E:FF:A1:F0:
              61:0A:53:93:B0:98:DB:AD:2C:0F:4A:C5:6E:FF:86:3C:
              53:55:0F:15:CE:04:3F:2B:FD:A9:96:96:D9:BE:61:79:
              0B:5B:C9:4C:86:76:E5:E0:43:4B:22:95:EE:C2:2B:43:
              C1:9F:D8:68:B4:8E:40:4F:EE:85:38:B9:11:C5:23:F2:
              64:58:F0:15:32:6F:4E:57:A1:AE:88:A4:02:D7:2A:1E:
              CD:4B:E1:DD:63:D5:17:89:32:5B:B0:5E:99:5A:A8:9D:
              28:50:0E:17:EE:96:DB:61:3B:45:51:1D:CF:12:56:0B:
              92:47:FC:AB:AE:F6:66:3D:47:AC:70:72:E7:92:E7:5F:
              CD:10:B9:C4:83:64:94:19:BD:25:80:E1:E8:D2:22:A5:
              D0:BA:02:7A:A1:77:93:5B:65:C3:EE:17:74:BC:41:86:
              2A:DC:08:4C:8C:92:8C:91:2D:9E:77:44:1F:68:D6:A8:
              74:77:DB:0E:5B:32:8B:56:8B:33:BD:D9:63:C8:49:9D:
              3A:C5:C5:EA:33:0B:D2:F1:A3:1B:F4:8B:BE:D9:B3:57:
              8B:3B:DE:04:A7:7A:22:B2:24:AE:2E:C7:70:C5:BE:4E:
              83:26:08:FB:0B:BD:A9:4F:99:08:E1:10:28:72:AA:CD              : 0x010001
          • X509v3 extensions
            • basicConstraints
              • true
              • nil
            • extendedKeyUsage: true, timeStamping
            • keyUsage: true, 0x80
            • authorityInfoAccess
              • #0
                • OCSP: http://ts-ocsp.ws.symantec.com
                • caIssuers: http://ts-aia.ws.symantec.com/tss-ca-g2.cer
            • crlDistributionPoints: http://ts-crl.ws.symantec.com/tss-ca-g2.crl
            • subjectAltName
              • CN: TimeStamp-2048-2
            • subjectKeyIdentifier: 
              46 c6 69 a3 0e 4a 14 1e  d5 4c da 52 63 17 3f 5e  |F.i..J...L.Rc.?^|
36 bc 0d e6                                       |6...            |
            • authorityKeyIdentifier: 
              5f 9a f5 6e 5c cc cc 74  9a d4 dd 7d ef 3f db ec  |_..n\..t...}.?..|
4c 80 2e dd                                       |L...            |
        • RSA-SHA1: 
          78 3b b4 91 2a 00 4c f0  8f 62 30 37 78 a3 84 27  |x;..*.L..b07x..'|
07 6f 18 b2 de 25 dc a0  d4 94 03 aa 86 4e 25 9f  |.o...%.......N%.|
9a 40 03 1c dd ce e3 79  cb 21 68 06 da b6 32 b4  |.@.....y.!h...2.|
6d bf f4 2c 26 63 33 e4  49 64 6d 0d e6 c3 67 0e  |m..,&c3.Idm...g.|
f7 05 a4 35 6c 7c 89 16  c6 e9 b2 df b2 e9 dd 20  |...5l|......... |
c6 71 0f cd 95 74 dc b6  5c de bd 37 1f 43 78 e6  |.q...t..\..7.Cx.|
78 b5 cd 28 04 20 a3 aa  f1 4b c4 88 29 91 0e 80  |x..(. ...K..)...|
d1 11 fc dd 5c 76 6e 4f  5e 0e 45 46 41 6e 0d b0  |....\vnO^.EFAn..|
ea 38 9a b1 3a da 09 71  10 fc 1c 79 b4 80 7b ac  |.8..:..q...y..{.|
69 f4 fd 9c b6 0c 16 2b  f1 7f 5b 09 3d 9b 5b e2  |i......+..[.=.[.|
16 ca 13 81 6d 00 2e 38  0d a8 29 8f 2c e1 b2 f4  |....m..8..).,...|
5a a9 01 af 15 9c 2c 2f  49 1b db 22 bb c3 fe 78  |Z.....,/I.."...x|
94 51 c3 86 b1 82 88 5d  f0 3d b4 51 a1 79 33 2b  |.Q.....].=.Q.y3+|
2e 7b b9 dc 20 09 13 71  eb 6a 19 5b cf e8 a5 30  |.{.. ..q.j.[...0|
57 2c 89 49 3f b9 cf 7f  c9 bf 3e 22 68 63 53 9a  |W,.I?.....>"hcS.|
bd 69 74 ac c5 1d 3c 7f  92 e0 c3 bc 1c d8 04 75  |.it...<........u|
      • Certificate #2
        • 2
          • 50:62:CB:F9:28:45:43:F8:BE:CA:A6:82:EB:4E:28:71
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • O: VeriSign, Inc.
            • OU: VeriSign Trust Network
            • OU: Terms of use at https://www.verisign.com/rpa (c)10
            • CN: VeriSign Class 3 Code Signing 2010 CA
          • 2013-04-28 00:00:00 UTC: 2015-07-28 23:59:59 UTC
          • Subject
            • C: CN
            • ST: guangdong
            • L: shenzhen
            • O: Shenzhen QVOD Technology Co.,Ltd
            • OU: Digital ID Class 3 - Microsoft Software Validation v2
            • OU: Digital ID Class 3 - Microsoft Software Validation v2
            • CN: Shenzhen QVOD Technology Co.,Ltd
          • #5
            • rsaEncryption: nil
            • ED:10:F5:E9:90:64:68:F8:DC:8A:69:D4:C6:A4:C6:46:
              84:A8:43:8F:ED:D2:AB:9C:39:CE:FD:71:75:55:EF:FF:
              24:37:CA:AE:85:E9:74:5D:25:23:9B:5D:2C:FA:0C:FB:
              68:C6:4F:0D:B9:A7:67:87:10:6F:A8:AA:10:88:94:B4:
              38:13:A6:89:9E:FB:24:67:1E:73:AD:31:74:1B:1F:CF:
              01:2C:A8:36:9E:24:6A:64:F9:9B:A0:71:75:5C:0B:D2:
              3B:A4:C5:07:DA:F9:B6:7C:89:64:84:92:29:83:47:C7:
              88:74:E7:55:9A:33:E0:69:39:E6:C0:E9:D1:EA:D0:99:
              51:FB:41:B2:C1:68:29:C6:C8:4E:7D:57:62:4F:01:35:
              45:FE:A7:9A:A7:4D:86:03:E0:63:A8:4D:85:D7:DE:3B:
              BC:E5:80:93:A6:18:34:00:9A:70:37:82:BA:2B:93:9E:
              24:67:08:1D:98:CD:59:22:88:46:3A:7F:6A:45:2A:C8:
              CD:80:41:B2:FB:51:E8:4B:15:83:CB:26:84:1B:30:5B:
              2F:EE:79:32:24:E0:DB:73:E8:F1:7B:30:97:6C:C3:DA:
              7E:75:E1:60:48:93:A3:47:10:FF:37:56:6B:10:9F:44:
              7C:F1:0F:96:58:40:9A:6E:E5:30:E2:25:B2:6A:25:D3              : 0x010001
          • X509v3 extensions
            • basicConstraints
              • nil
            • keyUsage: true, 0x80
            • crlDistributionPoints: http://csc3-2010-crl.verisign.com/CSC3-2010.crl
            • certificatePolicies
              • 2.16.840.1.113733.1.7.23.3
                • id-qt-cps: https://www.verisign.com/rpa
            • extendedKeyUsage: codeSigning
            • authorityInfoAccess
              • #0
                • OCSP: http://ocsp.verisign.com
                • caIssuers: http://csc3-2010-aia.verisign.com/CSC3-2010.cer
            • authorityKeyIdentifier: 
              cf 99 a9 ea 7b 26 f4 4b  c9 8e 8f d7 f0 05 26 ef  |....{&.K......&.|
e3 d2 a7 9d                                       |....            |
            • nsCertType: 0x10
            • 1.3.6.1.4.1.311.2.1.27
              • false: true
        • RSA-SHA1: 
          9f 4f 6f ad 9f 10 36 70  d3 f6 a2 52 7c 74 2a c1  |.Oo...6p...R|t*.|
31 87 15 d0 cb fc 5c e1  bf 4d 1f 07 86 57 ae 85  |1.....\..M...W..|
b9 5c b7 f0 e2 82 9d cf  c5 f6 89 bd 3b be e8 7e  |.\..........;..~|
47 75 01 05 d1 19 70 8b  b0 90 10 e3 3a 96 1a d8  |Gu....p.....:...|
18 22 af 5d c0 bc 6b 7d  e9 60 86 cd 6a 46 04 3f  |.".]..k}.`..jF.?|
e5 d4 f0 4c 3d ea 74 4b  c3 e2 dd 2b cb f5 5e d5  |...L=.tK...+..^.|
b4 ba 14 da 0e a8 1c 4e  35 bb c3 cf cf 7b a7 51  |.......N5....{.Q|
8d 4b 09 5f 0e 2f 75 d9  de 63 b5 1c bc 25 18 5a  |.K._./u..c...%.Z|
eb 33 64 90 68 2d b2 1a  16 a2 27 72 8e d8 c0 ff  |.3d.h-....'r....|
55 9d 56 d1 01 80 f4 47  6a 86 4e d5 07 ba 21 75  |U.V....Gj.N...!u|
1b 6d 7f 8d 53 5c 66 ea  6c 4b 23 47 bc e4 27 15  |.m..S\f.lK#G..'.|
de 53 31 b1 d2 7e 8a 31  52 22 4f 61 60 e7 c9 05  |.S1..~.1R"Oa`...|
2f ec be 1a 84 0d 96 ea  92 e2 fd 1d a1 f7 84 d5  |/...............|
70 0c 1d f8 94 32 5d cd  b3 62 86 d3 df 2b 7b f6  |p....2]..b...+{.|
7c 28 c3 45 4e ee 1f e3  07 f6 cb f7 7c a7 9d 57  ||(.EN.......|..W|
38 43 99 60 b1 9e 40 9e  15 a8 94 e0 b2 a9 f6 d2  |8C.`..@.........|
      • Certificate #3
        • 2
          • 52:00:E5:AA:25:56:FC:1A:86:ED:96:C9:D4:4B:33:C7
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • O: VeriSign, Inc.
            • OU: VeriSign Trust Network
            • OU: (c) 2006 VeriSign, Inc. - For authorized use only
            • CN: VeriSign Class 3 Public Primary Certification Authority - G5
          • 2010-02-08 00:00:00 UTC: 2020-02-07 23:59:59 UTC
          • Subject
            • C: US
            • O: VeriSign, Inc.
            • OU: VeriSign Trust Network
            • OU: Terms of use at https://www.verisign.com/rpa (c)10
            • CN: VeriSign Class 3 Code Signing 2010 CA
          • #5
            • rsaEncryption: nil
            • F5:23:4B:5E:A5:D7:8A:BB:32:E9:D4:57:F7:EF:E4:C7:
              26:7E:AD:19:98:FE:A8:9D:7D:94:F6:36:6B:10:D7:75:
              81:30:7F:04:68:7F:CB:2B:75:1E:CD:1D:08:8C:DF:69:
              94:A7:37:A3:9C:7B:80:E0:99:E1:EE:37:4D:5F:CE:3B:
              14:EE:86:D4:D0:F5:27:35:BC:25:0B:38:A7:8C:63:9D:
              17:A3:08:A5:AB:B0:FB:CD:6A:62:82:4C:D5:21:DA:1B:
              D9:F1:E3:84:3B:8A:2A:4F:85:5B:90:01:4F:C9:A7:76:
              10:7F:27:03:7C:BE:AE:7E:7D:C1:DD:F9:05:BC:1B:48:
              9C:69:E7:C0:A4:3C:3C:41:00:3E:DF:96:E5:C5:E4:94:
              71:D6:55:01:C7:00:26:4A:40:3C:B5:A1:26:A9:0C:A7:
              6D:80:8E:90:25:7B:CF:BF:3F:1C:EB:2F:96:FA:E5:87:
              77:C6:B5:56:B2:7A:3B:54:30:53:1B:DF:62:34:FF:1E:
              D1:F4:5A:93:28:85:E5:4C:17:4E:7E:5B:FD:A4:93:99:
              7F:DF:CD:EF:A4:75:EF:EF:15:F6:47:E7:F8:19:72:D8:
              2E:34:1A:A6:B4:A7:4C:7E:BD:BB:4F:0C:3D:57:F1:30:
              D6:A6:36:8E:D6:80:76:D7:19:2E:A5:CD:7E:34:2D:89              : 0x010001
          • X509v3 extensions
            • basicConstraints
              • true
              • true: 0
            • certificatePolicies
              • 2.16.840.1.113733.1.7.23.3
                • #0
                  • id-qt-cps: https://www.verisign.com/cps
                  • id-qt-unotice: https://www.verisign.com/rpa
            • keyUsage: true, 6
            • 1.3.6.1.5.5.7.1.12
              • image/gif
                • SHA1: 
                  8f e5 d3 1a 86 ac 8d 8e  6b c3 cf 80 6a d4 48 18  |........k...j.H.|
2c 7b 19 2e                                       |,{..            |
                • http://logo.verisign.com/vslogo.gif
            • crlDistributionPoints: http://crl.verisign.com/pca3-g5.crl
            • authorityInfoAccess
              • OCSP: http://ocsp.verisign.com
            • extendedKeyUsage
              • clientAuth: codeSigning
            • subjectAltName
              • CN: VeriSignMPKI-2-8
            • subjectKeyIdentifier: 
              cf 99 a9 ea 7b 26 f4 4b  c9 8e 8f d7 f0 05 26 ef  |....{&.K......&.|
e3 d2 a7 9d                                       |....            |
            • authorityKeyIdentifier: 
              7f d3 65 a7 c2 dd ec bb  f0 30 09 f3 43 39 fa 02  |..e......0..C9..|
af 33 31 33                                       |.313            |
        • RSA-SHA1: 
          56 22 e6 34 a4 c4 61 cb  48 b9 01 ad 56 a8 64 0f  |V".4..a.H...V.d.|
d9 8c 91 c4 bb cc 0c e5  ad 7a a0 22 7f df 47 38  |.........z."..G8|
4a 2d 6c d1 7f 71 1a 7c  ec 70 a9 b1 f0 4f e4 0f  |J-l..q.|.p...O..|
0c 53 fa 15 5e fe 74 98  49 24 85 81 26 1c 91 14  |.S..^.t.I$..&...|
47 b0 4c 63 8c bb a1 34  d4 c6 45 e8 0d 85 26 73  |G.Lc...4..E...&s|
03 d0 a9 8c 64 6d dc 71  92 e6 45 05 60 15 59 51  |....dm.q..E.`.YQ|
39 fc 58 14 6b fe d4 a4  ed 79 6b 08 0c 41 72 e7  |9.X.k....yk..Ar.|
37 22 06 09 be 23 e9 3f  44 9a 1e e9 61 9d cc b1  |7"...#.?D...a...|
90 5c fc 3d d2 8d ac 42  3d 65 36 d4 b4 3d 40 28  |.\.=...B=e6..=@(|
8f 9b 10 cf 23 26 cc 4b  20 cb 90 1f 5d 8c 4c 34  |....#&.K ...].L4|
ca 3c d8 e5 37 d6 6f a5  20 bd 34 eb 26 d9 ae 0d  |.<..7.o. .4.&...|
e7 c5 9a f7 a1 b4 21 91  33 6f 86 e8 58 bb 25 7c  |......!.3o..X.%||
74 0e 58 fe 75 1b 63 3f  ce 31 7c 9b 8f 1b 96 9e  |t.X.u.c?.1|.....|
c5 53 76 84 5b 9c ad 91  fa ac ed 93 ba 5d c8 21  |.Sv.[........].!|
53 c2 82 53 63 af 12 0d  50 87 11 1b 3d 54 52 96  |S..Sc...P...=TR.|
8a 2c 9c 3d 92 1a 08 9a  05 2e c7 93 a5 48 91 d3  |.,.=.........H..|
    • Signer
      • 1
      • unnamed
        • #0
          • C: US
          • O: VeriSign, Inc.
          • OU: VeriSign Trust Network
          • OU: Terms of use at https://www.verisign.com/rpa (c)10
          • CN: VeriSign Class 3 Code Signing 2010 CA
        • 50:62:CB:F9:28:45:43:F8:BE:CA:A6:82:EB:4E:28:71
      • SHA1: nil
      • #3
        • contentType: 1.3.6.1.4.1.311.2.1.4
        • 1.3.6.1.4.1.311.2.1.11: msCodeInd
        • messageDigest: 
          84 36 91 bd ad 6a 95 f6  da 3a a3 51 c6 7a cb 95  |.6...j...:.Q.z..|
c5 09 a9 75                                       |...u            |
        • 1.3.6.1.4.1.311.2.1.12
          • 00 51 00 56 00 4f 00 44                           |.Q.V.O.D        |
            : http://www.qvod.com
      • rsaEncryption: 
        07 49 fc 1a 80 6e 79 4f  05 59 85 1e 2e 1d b5 b1  |.I...nyO.Y......|
3c 8f 8b fb 38 21 72 7b  d2 09 10 a7 27 d2 e7 e9  |<...8!r{....'...|
3f e7 e4 38 bc 2d 8e f6  38 a9 0e a2 26 eb 66 bd  |?..8.-..8...&.f.|
2e a4 23 42 a2 cd 02 e9  9e d9 c6 c0 45 72 3b 6c  |..#B........Er;l|
8b 35 02 66 9e 1e 1c 56  cb c3 21 b9 31 a4 59 25  |.5.f...V..!.1.Y%|
5e d5 a6 9a 4e 41 d2 a0  ce b4 86 fe ec 8d 50 4b  |^...NA........PK|
de 9c 8c 0f d2 aa 8f 3a  ca 76 5a 8e 8d 57 7f 68  |.......:.vZ..W.h|
50 40 83 5e 26 74 a8 27  35 24 30 71 8a 26 02 c3  |P@.^&t.'5$0q.&..|
b0 c7 e1 b8 20 e6 5b 35  54 47 72 6f 0f 72 26 05  |.... .[5TGro.r&.|
ec 2c ed 38 83 eb 14 5c  ad e9 98 77 39 89 f0 69  |.,.8...\...w9..i|
56 42 02 bd 15 70 7d 0e  fa 01 92 91 5f 53 87 6f  |VB...p}....._S.o|
d3 00 38 18 03 b6 6a 02  cb 25 62 b6 cf a1 36 f4  |..8...j..%b...6.|
23 da 8c bc f7 3b 91 12  e2 ce 2e 5c aa f8 37 cc  |#....;.....\..7.|
9f 9e ec fa ec 49 ee 5b  b3 64 87 20 4e 56 d5 7a  |.....I.[.d. NV.z|
9a 04 a2 9f 5d b3 fe 6e  ea 45 e9 63 94 d6 8f 2f  |....]..n.E.c.../|
8e c7 9b e1 42 2f 9a 2f  eb c3 c2 02 35 77 22 65  |....B/./....5w"e|
      • countersignature
        • 1
          • unnamed
            • #0
              • C: US
              • O: Symantec Corporation
              • CN: Symantec Time Stamping Services CA - G2
            • 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
          • SHA1: nil
          • #2
            • contentType: pkcs7-data
            • signingTime: 2013-11-15 03:29:11 UTC
            • messageDigest: 
              61 b2 02 f9 93 2e 12 dc  17 a4 a0 95 28 c3 13 29  |a...........(..)|
7c 72 d4 a3                                       ||r..            |
          • rsaEncryption: 
            6e e5 db 91 66 a6 53 6c  c0 0c 1e b3 b0 d7 6c 11  |n...f.Sl......l.|
ee 07 1e 49 fa b1 30 04  77 e5 5f 08 2e 70 04 ad  |...I..0.w._..p..|
f0 73 13 6e 6d a0 b6 08  06 71 21 35 80 51 bd 9c  |.s.nm....q!5.Q..|
9f 4b f6 0c e2 a2 17 5d  08 93 6a 80 0a 9c 12 f3  |.K.....]..j.....|
a6 84 ce bb 7c 16 24 f2  77 fe 5c 79 03 f5 da a5  |....|.$.w.\y....|
9a 12 e1 ec 45 7c 1e 90  c3 02 90 f0 63 25 51 1a  |....E|......c%Q.|
eb b7 3b 33 ae 41 34 fa  a4 f0 e2 c0 50 eb 49 ae  |..;3.A4.....P.I.|
16 bc 19 df 4e e3 d9 36  e6 a3 ba ec 1d cf 80 b1  |....N..6........|
b1 2a b6 30 10 84 c5 25  21 23 5a 42 83 6a ab a1  |.*.0...%!#ZB.j..|
75 22 53 14 e3 8d 18 a4  20 e0 18 31 54 e1 68 f1  |u"S..... ..1T.h.|
cc 1a d9 25 86 22 a1 81  28 f9 0c ce 12 b9 57 ad  |...%."..(.....W.|
9b b9 a7 b7 fb 3d 6a 4a  89 fd 65 eb 43 cb 6b 89  |.....=jJ..e.C.k.|
a4 b9 e7 8a 76 4c b0 b8  07 29 b9 d3 a3 1c 4e f2  |....vL...)....N.|
8a 9d f5 ac c6 47 d3 21  dc 81 73 4c 9b a7 d2 25  |.....G.!..sL...%|
b1 85 2b 03 b1 6c 9d a6  f5 c0 3d 70 89 a8 db d1  |..+..l....=p....|
6a fd aa 25 ab c3 84 67  68 a0 bb 2e 4e 48 ab 74  |j..%...gh...NH.t|
offsetsizetypecomment
0417280EXE11/15/2013 03:28:34#
15c115HTM#
65e006576PKCS7Authenticode Signature#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable







[!] string size(31880) > stringtable size(112). truncated to 110
[!] cannot convert "\x9F\rD\x9B\x8A\xFE\xFF+\xC8k\e\xB5g\vET"... to UTF-16
[!] string size(14590) > stringtable size(204). truncated to 202
[!] cannot convert "\x89\xE1\x92\x9A8Vs\r\xB3\x84\x80\xCCe\x90\xF1\xFD"... to UTF-16
[!] string size(69962) > stringtable size(222). truncated to 220
[!] cannot convert "\x9A\xAE\xB5!v\x02\xA3\t\xFF\xFF\xFF\xFF\xC5wd\xEF"... to UTF-16
[!] string size(17358) > stringtable size(36). truncated to 34
[!] string size(25476) > stringtable size(36). truncated to 34