TooltabExtension.dll - Mindspark Tooltab Platform

info
MZ
PE
resources
strings
imports
exports
foremost
version info
signature
hexdump
disasm
log
discuss
donate

filename	TooltabExtension.dll
size	273008 (0x42a70)
md5	767737f00455032d893a223b78621f2d

type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x100

Rich Header

lib id	version	times used
171	30319	2
158	40219	25
170	40219	127
171	40219	62
206	65501	8
208	65501	2
203	65501	29
1	0	342
175	40219	18
155	40219	1
154	40219	1
157	40219	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	6
TimeDateStamp	0x5ad8ed9e
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x2102
Magic	0x10b
LinkerVersion	10.0
SizeOfCode	0x26200
SizeOfInitializedData	0x19000
SizeOfUninitializedData	0
AddressOfEntryPoint	0x1733d
BaseOfCode	0x1000
BaseOfData	0x28000
ImageBase	0x10000000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	5.1
ImageVersion	0.0
SubsystemVersion	5.1
Reserved1	0
SizeOfImage	0x47000
SizeOfHeaders	0x400
CheckSum	0x486e3
Subsystem	2
DllCharacteristics	0x140
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v7.0 DLL

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x26130	0x26200	R-X CODE
.rdata	0x28000	0xb1d2	0xb200	R-- IDATA
.data	0x34000	0x50bc	0x2e00	RW- IDATA
.tls	0x3a000	2	0x200	RW- IDATA
.rsrc	0x3b000	0x61a4	0x6200	R-- IDATA
.reloc	0x42000	0x4b62	0x4c00	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0x330e0	0xf2
IMPORT	0x314b8	0x12c
RESOURCE	0x3b000	0x61a4
EXCEPTION	0	0
SECURITY	0x3f600	0x3470
BASERELOC	0x42000	0x2c1c
DEBUG	0x28590	0x1c
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0x2c5a0	0x18
LOAD_CONFIG	0x2c558	0x40
Bound_IAT	0	0
IAT	0x28000	0x504
Delay_IAT	0	0
CLR_Header	0	0

TLS

raw start	raw end	index	callbks	zero fill	flags
0x1003a000	0x1003a001	0x10037a60	0x10028560	0	0

show previews

type	name	size	cp
AFX_DIALOG_LAYOUT	#200	2	1252
AFX_DIALOG_LAYOUT	#201	2	1252
PNG	#201	14911	1252
PNG	#202	3617	1252
REGISTRY	#101	1584	1252
TYPELIB	#1	1700	1252
DIALOG	#200	64	1252
DIALOG	#201	64	1252
STRING	#7	64	1252
RCDATA	#102	140	1252
RCDATA	#103	270	1252
RCDATA	#104	270	1252
RCDATA	#105	270	1252
VERSION	#1	904	1252
MANIFEST	#2	86	1252

id	lang	string
100	1033	TooltabExtension

module_name	hint	ord	function_name
KERNEL32.dll	1394		TlsFree
KERNEL32.dll	143		CompareFileTime
KERNEL32.dll	666		GetPrivateProfileStringW
KERNEL32.dll	341		ExpandEnvironmentStringsW
KERNEL32.dll	1359		SizeofResource
KERNEL32.dll	392		FindResourceExW
KERNEL32.dll	946		LocalFree
KERNEL32.dll	410		FormatMessageW
KERNEL32.dll	684		GetProcessTimes
KERNEL32.dll	668		GetPrivateProfileStructW
KERNEL32.dll	556		GetExitCodeProcess
KERNEL32.dll	1511		WritePrivateProfileStructW
KERNEL32.dll	414		FreeLibrary
KERNEL32.dll	1536		lstrcmpiW
KERNEL32.dll	935		LoadLibraryExW
KERNEL32.dll	199		CreateIoCompletionPort
KERNEL32.dll	557		GetExitCodeThread
KERNEL32.dll	1376		TerminateThread
KERNEL32.dll	720		GetSystemInfo
KERNEL32.dll	1028		PostQueuedCompletionStatus
KERNEL32.dll	1185		ResetEvent
KERNEL32.dll	717		GetSystemDirectoryW
KERNEL32.dll	696		GetQueuedCompletionStatus
KERNEL32.dll	747		GetThreadLocale
KERNEL32.dll	1329		SetThreadLocale
KERNEL32.dll	754		GetTickCount
KERNEL32.dll	165		CopyFileW
KERNEL32.dll	194		CreateFileW
KERNEL32.dll	1483		WideCharToMultiByte
KERNEL32.dll	403		FlushInstructionCache
KERNEL32.dll	521		GetCurrentProcess
KERNEL32.dll	1545		lstrlenW
KERNEL32.dll	611		GetModuleFileNameW
KERNEL32.dll	393		FindResourceW
KERNEL32.dll	939		LoadResource
KERNEL32.dll	957		LockResource
KERNEL32.dll	791		GlobalAlloc
KERNEL32.dll	798		GlobalFree
KERNEL32.dll	801		GlobalHandle
KERNEL32.dll	1290		SetLastError
KERNEL32.dll	1087		RaiseException
KERNEL32.dll	526		GetCurrentThreadId
KERNEL32.dll	179		CreateEventA
KERNEL32.dll	993		OpenEventA
KERNEL32.dll	1502		WriteConsoleW
KERNEL32.dll	1396		TlsSetValue
KERNEL32.dll	709		GetStringTypeW
KERNEL32.dll	918		LCMapStringW
KERNEL32.dll	494		GetConsoleMode
KERNEL32.dll	476		GetConsoleCP
KERNEL32.dll	1196		RtlUnwind
KERNEL32.dll	726		GetSystemTimeAsFileTime
KERNEL32.dll	522		GetCurrentProcessId
KERNEL32.dll	1069		QueryPerformanceCounter
KERNEL32.dll	551		GetEnvironmentStringsW
KERNEL32.dll	413		FreeEnvironmentStringsW
KERNEL32.dll	610		GetModuleFileNameA
KERNEL32.dll	702		GetStartupInfoW
KERNEL32.dll	574		GetFileType
KERNEL32.dll	1286		SetHandleCount
KERNEL32.dll	882		IsValidCodePage
KERNEL32.dll	646		GetOEMCP
KERNEL32.dll	420		GetACP
KERNEL32.dll	435		GetCPInfo
KERNEL32.dll	849		InterlockedDecrement
KERNEL32.dll	853		InterlockedIncrement
KERNEL32.dll	704		GetStdHandle
KERNEL32.dll	337		ExitProcess
KERNEL32.dll	817		HeapCreate
KERNEL32.dll	871		IsDebuggerPresent
KERNEL32.dll	1345		SetUnhandledExceptionFilter
KERNEL32.dll	1408		UnhandledExceptionFilter
KERNEL32.dll	1375		TerminateProcess
KERNEL32.dll	456		GetCommandLineA
KERNEL32.dll	1441		VirtualQuery
KERNEL32.dll	1439		VirtualProtect
KERNEL32.dll	254		DecodePointer
KERNEL32.dll	289		EncodePointer
KERNEL32.dll	232		CreateThread
KERNEL32.dll	338		ExitThread
KERNEL32.dll	402		FlushFileBuffers
KERNEL32.dll	1393		TlsAlloc
KERNEL32.dll	1395		TlsGetValue
KERNEL32.dll	1428		VerSetConditionMask
KERNEL32.dll	1432		VerifyVersionInfoW
KERNEL32.dll	615		GetModuleHandleW
KERNEL32.dll	669		GetProcAddress
KERNEL32.dll	840		InitializeCriticalSectionAndSpinCount
KERNEL32.dll	261		DeleteCriticalSection
KERNEL32.dll	1544		lstrlenA
KERNEL32.dll	977		MultiByteToWideChar
KERNEL32.dll	1533		lstrcmpW
KERNEL32.dll	976		MulDiv
KERNEL32.dll	802		GlobalLock
KERNEL32.dll	1312		SetStdHandle
KERNEL32.dll	809		GlobalUnlock
KERNEL32.dll	1263		SetEvent
KERNEL32.dll	1447		WaitForMultipleObjects
KERNEL32.dll	1449		WaitForSingleObject
KERNEL32.dll	1163		ReleaseMutex
KERNEL32.dll	209		CreateMutexW
KERNEL32.dll	182		CreateEventW
KERNEL32.dll	592		GetLastError
KERNEL32.dll	293		EnterCriticalSection
KERNEL32.dll	930		LeaveCriticalSection
KERNEL32.dll	1275		SetFilePointer
KERNEL32.dll	1360		Sleep
KERNEL32.dll	1103		ReadFile
KERNEL32.dll	1172		RemoveDirectoryW
KERNEL32.dll	360		FindClose
KERNEL32.dll	383		FindNextFileW
KERNEL32.dll	266		DeleteFileW
KERNEL32.dll	1539		lstrcpyW
KERNEL32.dll	371		FindFirstFileW
KERNEL32.dll	1530		lstrcatW
KERNEL32.dll	219		CreateProcessW
KERNEL32.dll	1503		WriteFile
KERNEL32.dll	936		LoadLibraryW
KERNEL32.dll	127		CloseHandle
KERNEL32.dll	1448		WaitForMultipleObjectsEx
KERNEL32.dll	824		HeapSize
KERNEL32.dll	822		HeapReAlloc
KERNEL32.dll	818		HeapDestroy
KERNEL32.dll	854		InterlockedPopEntrySList
KERNEL32.dll	1433		VirtualAlloc
KERNEL32.dll	1436		VirtualFree
KERNEL32.dll	877		IsProcessorFeaturePresent
KERNEL32.dll	815		HeapAlloc
KERNEL32.dll	674		GetProcessHeap
KERNEL32.dll	819		HeapFree
KERNEL32.dll	855		InterlockedPushEntrySList
KERNEL32.dll	847		InterlockedCompareExchange
USER32.dll	595		MoveWindow
USER32.dll	685		ScreenToClient
USER32.dll	73		ClientToScreen
USER32.dll	676		ReleaseCapture
USER32.dll	261		FillRect
USER32.dll	90		CreateAcceleratorTableW
USER32.dll	173		DestroyWindow
USER32.dll	113		CreateWindowExW
USER32.dll	286		GetClassInfoExW
USER32.dll	645		RedrawWindow
USER32.dll	783		SetWindowPos
USER32.dll	49		CharNextW
USER32.dll	293		GetClientRect
USER32.dll	496		InvalidateRgn
USER32.dll	30		CallWindowProcW
USER32.dll	495		InvalidateRect
USER32.dll	308		GetDC
USER32.dll	677		ReleaseDC
USER32.dll	311		GetDesktopWindow
USER32.dll	166		DestroyAcceleratorTable
USER32.dll	833		UnhookWinEvent
USER32.dll	627		PostThreadMessageW
USER32.dll	773		SetWinEventHook
USER32.dll	323		GetForegroundWindow
USER32.dll	529		IsWindow
USER32.dll	291		GetClassNameW
USER32.dll	423		GetSysColor
USER32.dll	700		SendMessageW
USER32.dll	453		GetWindowLongW
USER32.dll	781		SetWindowLongW
USER32.dll	161		DefWindowProcW
USER32.dll	545		LoadCursorW
USER32.dll	649		RegisterClassExW
USER32.dll	467		GetWindowThreadProcessId
USER32.dll	264		FindWindowExW
USER32.dll	534		IsWindowVisible
USER32.dll	378		GetParent
USER32.dll	620		PeekMessageW
USER32.dll	100		CreateDialogIndirectParamW
USER32.dll	27		CallMsgFilterW
USER32.dll	597		MsgWaitForMultipleObjectsEx
USER32.dll	704		SetCapture
USER32.dll	624		PostMessageW
USER32.dll	589		MessageBoxW
USER32.dll	47		CharNextA
USER32.dll	178		DialogBoxParamW
USER32.dll	852		UpdateLayeredWindow
USER32.dll	537		KillTimer
USER32.dll	745		SetParent
USER32.dll	769		SetTimer
USER32.dll	800		ShowWindow
USER32.dll	625		PostQuitMessage
USER32.dll	316		GetDlgItem
USER32.dll	181		DispatchMessageW
USER32.dll	831		TranslateMessage
USER32.dll	371		GetMessageW
USER32.dll	231		EndDialog
USER32.dll	691		SendDlgItemMessageW
USER32.dll	572		MapDialogRect
USER32.dll	777		SetWindowContextHelpId
USER32.dll	675		RegisterWindowMessageW
USER32.dll	465		GetWindowTextLengthW
USER32.dll	466		GetWindowTextW
USER32.dll	788		SetWindowTextW
USER32.dll	14		BeginPaint
USER32.dll	233		EndPaint
USER32.dll	506		IsChild
USER32.dll	322		GetFocus
USER32.dll	724		SetFocus
USER32.dll	443		GetWindow
USER32.dll	840		UnregisterClassA
GDI32.dll	784		StretchBlt
GDI32.dll	54		CreateDIBSection
GDI32.dll	740		SetDIBColorTable
GDI32.dll	86		CreateSolidBrush
GDI32.dll	49		CreateCompatibleDC
GDI32.dll	48		CreateCompatibleBitmap
GDI32.dll	724		SelectObject
GDI32.dll	19		BitBlt
GDI32.dll	267		DeleteDC
GDI32.dll	568		GetStockObject
GDI32.dll	552		GetObjectW
GDI32.dll	502		GetDeviceCaps
GDI32.dll	270		DeleteObject
GDI32.dll	500		GetDIBColorTable
ADVAPI32.dll	620		RegDeleteValueW
ADVAPI32.dll	605		RegCreateKeyExW
ADVAPI32.dll	674		RegSetValueExW
ADVAPI32.dll	627		RegEnumKeyExW
ADVAPI32.dll	616		RegDeleteKeyW
ADVAPI32.dll	658		RegQueryValueExW
ADVAPI32.dll	652		RegQueryInfoKeyW
ADVAPI32.dll	645		RegOpenKeyExW
ADVAPI32.dll	596		RegCloseKey
SHELL32.dll	210		SHGetFolderPathW
ole32.dll	80		CoInitializeEx
ole32.dll	127		CoUninitialize
ole32.dll	382		OleUninitialize
ole32.dll	122		CoTaskMemAlloc
ole32.dll	442		StringFromGUID2
ole32.dll	362		OleLockRunning
ole32.dll	154		CreateStreamOnHGlobal
ole32.dll	26		CoCreateInstance
ole32.dll	51		CoGetClassObject
ole32.dll	10		CLSIDFromProgID
ole32.dll	12		CLSIDFromString
ole32.dll	353		OleInitialize
ole32.dll	56		CoGetCurrentProcess
ole32.dll	108		CoReleaseMarshalData
ole32.dll	123		CoTaskMemFree
ole32.dll	124		CoTaskMemRealloc
ole32.dll	90		CoMarshalInterThreadInterfaceInStream
ole32.dll	79		CoInitialize
ole32.dll	63		CoGetInterfaceAndReleaseStream
ole32.dll	118		CoSetProxyBlanket
ole32.dll	25		CoCreateGuid
OLEAUT32.dll		277
OLEAUT32.dll		313
OLEAUT32.dll		4
OLEAUT32.dll		8
OLEAUT32.dll		161
OLEAUT32.dll		9
OLEAUT32.dll		2
OLEAUT32.dll		6
OLEAUT32.dll		420
OLEAUT32.dll		7
OLEAUT32.dll		162
SHLWAPI.dll	143		PathRemoveFileSpecW
SHLWAPI.dll	335		StrStrIW
SHLWAPI.dll	73		PathFileExistsW
SHLWAPI.dll	145		PathRenameExtensionW
SHLWAPI.dll	59		PathCanonicalizeW
SHLWAPI.dll	238		SHRegGetUSValueW
SHLWAPI.dll	77		PathFindFileNameW
SHLWAPI.dll	363		UrlGetPartW
SHLWAPI.dll	334		StrStrIA
SHLWAPI.dll	42		IsCharSpaceA
SHLWAPI.dll	61		PathCombineW
SHLWAPI.dll	51		PathAddBackslashW
SHLWAPI.dll	184		SHDeleteKeyW
SHLWAPI.dll	55		PathAppendW
gdiplus.dll	628		GdiplusShutdown
gdiplus.dll	629		GdiplusStartup
gdiplus.dll	81		GdipCreateBitmapFromStream
gdiplus.dll	295		GdipGetImagePixelFormat
gdiplus.dll	290		GdipGetImageHeight
gdiplus.dll	300		GdipGetImageWidth
gdiplus.dll	294		GdipGetImagePaletteSize
gdiplus.dll	293		GdipGetImagePalette
gdiplus.dll	43		GdipBitmapLockBits
gdiplus.dll	46		GdipBitmapUnlockBits
gdiplus.dll	80		GdipCreateBitmapFromScan0
gdiplus.dll	54		GdipCloneImage
gdiplus.dll	33		GdipAlloc
gdiplus.dll	237		GdipFree
gdiplus.dll	152		GdipDisposeImage
gdiplus.dll	289		GdipGetImageGraphicsContext
gdiplus.dll	144		GdipDeleteGraphics
gdiplus.dll	176		GdipDrawImageI
MSIMG32.dll	3		TransparentBlt
MSIMG32.dll			AlphaBlend
WININET.dll	153		InternetConnectW
WININET.dll	118		HttpOpenRequestW
WININET.dll	146		InternetCloseHandle
WININET.dll	200		InternetQueryOptionA
WININET.dll	127		HttpSendRequestW
WININET.dll	197		InternetOpenW
OLEACC.dll	4		AccessibleObjectFromEvent
WINTRUST.dll	130		WinVerifyTrust
CRYPT32.dll	199		CryptQueryObject
CRYPT32.dll	183		CryptMsgGetParam
CRYPT32.dll	53		CertFindCertificateInStore
CRYPT32.dll	18		CertCloseStore
CRYPT32.dll	176		CryptMsgClose
CRYPT32.dll	64		CertFreeCertificateContext

ord	entry_va	function_name
1	0x10cf2	A
2	0xb5d3	L
3	0x10dd2	P
4	0x10c33	U
5	0x109d1	DllCanUnloadNow
6	0x109f8	DllGetClassObject
7	0x10aa6	DllInstall
8	0x10a01	DllRegisterServer
9	0x10a29	DllUnregisterServer

module_name	TooltabExtension.dll
flags	0
timestamp	2018-04-19 19:27:24
version	0.0
ordinal_base	1
nFunctions	9
nNames	9
Names(9)	0x3312c
Functions(9)	0x33108
NameOrdinals(9)	0x33150

StringTable 040904b0

CompanyName	Mindspark
FileDescription	Mindspark Tooltab Platform
FileVersion	3.0.0.18109
InternalName	TooltabExtension.dll
LegalCopyright	© 2016 Mindspark Interactive Network, Inc.
OriginalFilename	TooltabExtension.dll
ProductName	Mindspark Tooltab Platform for Internet Explorer
ProductVersion	3.0.59.18109

VS_FIXEDFILEINFO

FileVersion	3.0.0.18109
ProductVersion	3.0.59.18109
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	2
FileSubtype	0

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa (c)10/CN=VeriSign Class 3 Code Signing 2010 CA

serial: 438D4291E43C2DFFEEAAAEE5B6C070B5

Certificates (4)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
        Validity
            Not Before: Dec 21 00:00:00 2012 GMT
            Not After : Dec 30 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:b3:49:54:4b:97:1c:12:0a:d8:25:79:91:
                    22:57:2a:6f:dc:b8:26:c4:43:73:6b:c2:bf:2e:50:
                    5a:fb:14:c2:76:8e:43:01:25:43:b4:a1:e2:45:f4:
                    e8:b7:7b:c3:74:cc:22:d7:b4:94:00:02:f7:4d:ed:
                    bf:b4:b7:44:24:6b:cd:5f:45:3b:d1:44:ce:43:12:
                    73:17:82:8b:69:b4:2b:cb:99:1e:ac:72:1b:26:4d:
                    71:1f:b1:31:dd:fb:51:61:02:53:a6:aa:f5:49:2c:
                    05:78:45:a5:2f:89:ce:e7:99:e7:fe:8c:e2:57:3f:
                    3d:c6:92:dc:4a:f8:7b:33:e4:79:0a:fb:f0:75:88:
                    41:9c:ff:c5:03:51:99:aa:d7:6c:9f:93:69:87:65:
                    29:83:85:c2:60:14:c4:c8:c9:3b:14:da:c0:81:f0:
                    1f:0d:74:de:92:22:ab:ca:f7:fb:74:7c:27:e6:f7:
                    4a:1b:7f:a7:c3:9e:2d:ae:8a:ea:a6:e6:aa:27:16:
                    7d:61:f7:98:71:11:bc:e2:50:a1:4b:e5:5d:fa:e5:
                    0e:a7:2c:9f:aa:65:20:d3:d8:96:e8:c8:7c:a5:4e:
                    48:44:ff:19:e2:44:07:92:0b:d7:68:84:80:5d:6a:
                    78:64:45:cd:60:46:7e:54:c1:13:7c:c5:79:f1:c9:
                    c1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD
            Authority Information Access: 
                OCSP - URI:http://ocsp.thawte.com

            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.thawte.com/ThawteTimestampingCA.crl

            X509v3 Extended Key Usage: 
                Time Stamping
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-1
    Signature Algorithm: sha1WithRSAEncryption
         03:09:9b:8f:79:ef:7f:59:30:aa:ef:68:b5:fa:e3:09:1d:bb:
         4f:82:06:5d:37:5f:a6:52:9f:16:8d:ea:1c:92:09:44:6e:f5:
         6d:eb:58:7c:30:e8:f9:69:8d:23:73:0b:12:6f:47:a9:ae:39:
         11:f8:2a:b1:9b:b0:1a:c3:8e:eb:59:96:00:ad:ce:0c:4d:b2:
         d0:31:a6:08:5c:2a:7a:fc:e2:7a:1d:57:4c:a8:65:18:e9:79:
         40:62:25:96:6e:c7:c7:37:6a:83:21:08:8e:41:ea:dd:d9:57:
         3f:1d:77:49:87:2a:16:06:5e:a6:38:6a:22:12:a3:51:19:83:
         7e:b6

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Validity
            Not Before: Oct 18 00:00:00 2012 GMT
            Not After : Dec 29 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer - G4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:63:0b:39:44:b8:bb:23:a7:44:49:bb:0e:ff:
                    a1:f0:61:0a:53:93:b0:98:db:ad:2c:0f:4a:c5:6e:
                    ff:86:3c:53:55:0f:15:ce:04:3f:2b:fd:a9:96:96:
                    d9:be:61:79:0b:5b:c9:4c:86:76:e5:e0:43:4b:22:
                    95:ee:c2:2b:43:c1:9f:d8:68:b4:8e:40:4f:ee:85:
                    38:b9:11:c5:23:f2:64:58:f0:15:32:6f:4e:57:a1:
                    ae:88:a4:02:d7:2a:1e:cd:4b:e1:dd:63:d5:17:89:
                    32:5b:b0:5e:99:5a:a8:9d:28:50:0e:17:ee:96:db:
                    61:3b:45:51:1d:cf:12:56:0b:92:47:fc:ab:ae:f6:
                    66:3d:47:ac:70:72:e7:92:e7:5f:cd:10:b9:c4:83:
                    64:94:19:bd:25:80:e1:e8:d2:22:a5:d0:ba:02:7a:
                    a1:77:93:5b:65:c3:ee:17:74:bc:41:86:2a:dc:08:
                    4c:8c:92:8c:91:2d:9e:77:44:1f:68:d6:a8:74:77:
                    db:0e:5b:32:8b:56:8b:33:bd:d9:63:c8:49:9d:3a:
                    c5:c5:ea:33:0b:d2:f1:a3:1b:f4:8b:be:d9:b3:57:
                    8b:3b:de:04:a7:7a:22:b2:24:ae:2e:c7:70:c5:be:
                    4e:83:26:08:fb:0b:bd:a9:4f:99:08:e1:10:28:72:
                    aa:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                OCSP - URI:http://ts-ocsp.ws.symantec.com
                CA Issuers - URI:http://ts-aia.ws.symantec.com/tss-ca-g2.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ts-crl.ws.symantec.com/tss-ca-g2.crl

            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-2
            X509v3 Subject Key Identifier: 
                46:C6:69:A3:0E:4A:14:1E:D5:4C:DA:52:63:17:3F:5E:36:BC:0D:E6
            X509v3 Authority Key Identifier: 
                keyid:5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD

    Signature Algorithm: sha1WithRSAEncryption
         78:3b:b4:91:2a:00:4c:f0:8f:62:30:37:78:a3:84:27:07:6f:
         18:b2:de:25:dc:a0:d4:94:03:aa:86:4e:25:9f:9a:40:03:1c:
         dd:ce:e3:79:cb:21:68:06:da:b6:32:b4:6d:bf:f4:2c:26:63:
         33:e4:49:64:6d:0d:e6:c3:67:0e:f7:05:a4:35:6c:7c:89:16:
         c6:e9:b2:df:b2:e9:dd:20:c6:71:0f:cd:95:74:dc:b6:5c:de:
         bd:37:1f:43:78:e6:78:b5:cd:28:04:20:a3:aa:f1:4b:c4:88:
         29:91:0e:80:d1:11:fc:dd:5c:76:6e:4f:5e:0e:45:46:41:6e:
         0d:b0:ea:38:9a:b1:3a:da:09:71:10:fc:1c:79:b4:80:7b:ac:
         69:f4:fd:9c:b6:0c:16:2b:f1:7f:5b:09:3d:9b:5b:e2:16:ca:
         13:81:6d:00:2e:38:0d:a8:29:8f:2c:e1:b2:f4:5a:a9:01:af:
         15:9c:2c:2f:49:1b:db:22:bb:c3:fe:78:94:51:c3:86:b1:82:
         88:5d:f0:3d:b4:51:a1:79:33:2b:2e:7b:b9:dc:20:09:13:71:
         eb:6a:19:5b:cf:e8:a5:30:57:2c:89:49:3f:b9:cf:7f:c9:bf:
         3e:22:68:63:53:9a:bd:69:74:ac:c5:1d:3c:7f:92:e0:c3:bc:
         1c:d8:04:75

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:8d:42:91:e4:3c:2d:ff:ee:aa:ae:e5:b6:c0:70:b5
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA
        Validity
            Not Before: Apr 20 00:00:00 2015 GMT
            Not After : Jun 18 23:59:59 2018 GMT
        Subject: C=US, ST=New York, L=Yonkers, O=Mindspark Interactive Network, CN=Mindspark Interactive Network
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e0:50:6e:90:8a:ae:e9:c7:c7:ee:21:b2:db:
                    dc:19:d1:67:53:a6:13:bc:2b:32:c5:9d:98:7c:46:
                    1a:33:96:2d:7f:a6:52:5d:16:4c:80:17:3a:cd:cd:
                    51:a5:be:0e:0f:ed:c9:26:72:7e:5a:dd:d3:8e:67:
                    70:ad:39:cb:53:c2:89:aa:b4:77:2b:b3:78:e3:f3:
                    36:90:3f:5b:6c:17:cb:27:0d:d8:ff:af:b0:bc:af:
                    57:23:71:ea:84:3d:5e:56:d4:13:de:96:fb:b2:1b:
                    7f:00:d9:ec:aa:09:55:cb:b9:f3:c5:92:57:ab:6d:
                    a8:fe:06:b2:c3:d1:f0:8a:ea:96:56:68:6e:0e:4e:
                    d5:f3:37:59:01:24:15:42:2a:49:27:51:42:f9:1a:
                    6a:78:84:3c:7b:aa:96:eb:30:f2:98:19:de:f5:8e:
                    57:73:15:22:2f:f9:34:9e:0f:2b:68:4b:0c:a8:61:
                    5e:10:22:37:76:ab:de:fb:df:08:4e:bc:c2:d0:74:
                    eb:d5:7e:35:55:69:53:ba:d4:2e:6b:98:b2:9d:8d:
                    c6:73:1e:65:9f:94:d1:a8:a6:27:34:f7:bb:c3:e3:
                    d9:01:cb:0e:2d:a6:40:a0:29:a4:cb:56:9b:05:d8:
                    53:c5:71:06:26:f6:d8:41:c2:ed:23:15:15:9e:64:
                    ba:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://sf.symcb.com/sf.crl

            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://d.symcb.com/cps
                  User Notice:
                    Explicit Text: https://d.symcb.com/rpa

            X509v3 Extended Key Usage: 
                Code Signing
            Authority Information Access: 
                OCSP - URI:http://sf.symcd.com
                CA Issuers - URI:http://sf.symcb.com/sf.crt

            X509v3 Authority Key Identifier: 
                keyid:CF:99:A9:EA:7B:26:F4:4B:C9:8E:8F:D7:F0:05:26:EF:E3:D2:A7:9D

            X509v3 Subject Key Identifier: 
                D5:75:DF:C1:48:06:95:8D:11:B6:3B:9B:06:E9:36:C7:A1:13:F1:AD
            Netscape Cert Type: 
                Object Signing
            1.3.6.1.4.1.311.2.1.27: 
                0.......
    Signature Algorithm: sha1WithRSAEncryption
         ca:65:8b:c6:5c:ff:e4:bc:7d:02:46:7a:8c:07:00:b3:5a:a2:
         10:87:3e:d0:da:46:cb:10:82:c0:78:06:84:0c:1c:3c:d2:cf:
         8a:71:3b:90:01:9a:eb:1a:1e:f9:5a:8a:26:48:32:16:6c:2d:
         68:2e:86:87:29:ff:22:72:a3:aa:8e:82:18:05:d8:a1:5f:9d:
         bf:9d:b7:43:2b:be:7b:90:b9:84:3f:94:9b:17:c8:c7:43:ec:
         3c:22:9b:60:af:26:64:95:3f:6d:a8:e7:ce:64:80:bb:86:4a:
         0a:52:86:ba:ab:67:dc:70:9c:8b:50:b6:de:23:29:70:b9:78:
         a9:ec:10:ae:20:50:aa:63:fc:cd:97:47:de:9f:dc:63:45:5c:
         39:89:25:b6:f8:65:cc:bf:4b:8d:a4:8a:46:4d:37:01:21:f6:
         ab:9a:29:85:33:39:82:18:43:cb:00:12:6e:e3:b7:7b:1a:e5:
         4b:8c:36:45:92:ae:60:db:8c:ba:52:7b:9c:44:81:d6:c8:d0:
         d2:ac:3f:51:dd:d7:85:da:67:85:74:d3:1a:4d:31:d0:bf:35:
         a6:6f:ee:0e:9b:d0:af:62:9f:51:13:54:1b:d9:de:a9:db:49:
         1f:c5:27:c5:26:90:f7:03:03:94:9d:d8:7f:54:37:65:5f:bc:
         14:bc:bd:5d

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
        Validity
            Not Before: Feb  8 00:00:00 2010 GMT
            Not After : Feb  7 23:59:59 2020 GMT
        Subject: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:23:4b:5e:a5:d7:8a:bb:32:e9:d4:57:f7:ef:
                    e4:c7:26:7e:ad:19:98:fe:a8:9d:7d:94:f6:36:6b:
                    10:d7:75:81:30:7f:04:68:7f:cb:2b:75:1e:cd:1d:
                    08:8c:df:69:94:a7:37:a3:9c:7b:80:e0:99:e1:ee:
                    37:4d:5f:ce:3b:14:ee:86:d4:d0:f5:27:35:bc:25:
                    0b:38:a7:8c:63:9d:17:a3:08:a5:ab:b0:fb:cd:6a:
                    62:82:4c:d5:21:da:1b:d9:f1:e3:84:3b:8a:2a:4f:
                    85:5b:90:01:4f:c9:a7:76:10:7f:27:03:7c:be:ae:
                    7e:7d:c1:dd:f9:05:bc:1b:48:9c:69:e7:c0:a4:3c:
                    3c:41:00:3e:df:96:e5:c5:e4:94:71:d6:55:01:c7:
                    00:26:4a:40:3c:b5:a1:26:a9:0c:a7:6d:80:8e:90:
                    25:7b:cf:bf:3f:1c:eb:2f:96:fa:e5:87:77:c6:b5:
                    56:b2:7a:3b:54:30:53:1b:df:62:34:ff:1e:d1:f4:
                    5a:93:28:85:e5:4c:17:4e:7e:5b:fd:a4:93:99:7f:
                    df:cd:ef:a4:75:ef:ef:15:f6:47:e7:f8:19:72:d8:
                    2e:34:1a:a6:b4:a7:4c:7e:bd:bb:4f:0c:3d:57:f1:
                    30:d6:a6:36:8e:d6:80:76:d7:19:2e:a5:cd:7e:34:
                    2d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/cps
                  User Notice:
                    Explicit Text: https://www.verisign.com/rpa

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            1.3.6.1.5.5.7.1.12: 
                0_.].[0Y0W0U..image/gif0!0.0...+..............k...j.H.,{..0%.#http://logo.verisign.com/vslogo.gif
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.verisign.com/pca3-g5.crl

            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com

            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, Code Signing
            X509v3 Subject Alternative Name: 
                DirName:/CN=VeriSignMPKI-2-8
            X509v3 Subject Key Identifier: 
                CF:99:A9:EA:7B:26:F4:4B:C9:8E:8F:D7:F0:05:26:EF:E3:D2:A7:9D
            X509v3 Authority Key Identifier: 
                keyid:7F:D3:65:A7:C2:DD:EC:BB:F0:30:09:F3:43:39:FA:02:AF:33:31:33

    Signature Algorithm: sha1WithRSAEncryption
         56:22:e6:34:a4:c4:61:cb:48:b9:01:ad:56:a8:64:0f:d9:8c:
         91:c4:bb:cc:0c:e5:ad:7a:a0:22:7f:df:47:38:4a:2d:6c:d1:
         7f:71:1a:7c:ec:70:a9:b1:f0:4f:e4:0f:0c:53:fa:15:5e:fe:
         74:98:49:24:85:81:26:1c:91:14:47:b0:4c:63:8c:bb:a1:34:
         d4:c6:45:e8:0d:85:26:73:03:d0:a9:8c:64:6d:dc:71:92:e6:
         45:05:60:15:59:51:39:fc:58:14:6b:fe:d4:a4:ed:79:6b:08:
         0c:41:72:e7:37:22:06:09:be:23:e9:3f:44:9a:1e:e9:61:9d:
         cc:b1:90:5c:fc:3d:d2:8d:ac:42:3d:65:36:d4:b4:3d:40:28:
         8f:9b:10:cf:23:26:cc:4b:20:cb:90:1f:5d:8c:4c:34:ca:3c:
         d8:e5:37:d6:6f:a5:20:bd:34:eb:26:d9:ae:0d:e7:c5:9a:f7:
         a1:b4:21:91:33:6f:86:e8:58:bb:25:7c:74:0e:58:fe:75:1b:
         63:3f:ce:31:7c:9b:8f:1b:96:9e:c5:53:76:84:5b:9c:ad:91:
         fa:ac:ed:93:ba:5d:c8:21:53:c2:82:53:63:af:12:0d:50:87:
         11:1b:3d:54:52:96:8a:2c:9c:3d:92:1a:08:9a:05:2e:c7:93:
         a5:48:91:d3

pkcs7-signedData

SHA1: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15
- :

SHA1

15 a2 cf d8 ff 92 3a 92 8c 17 6d 59 16 cb c1 fd |......:...mY....| cc 24 5b 26 |.$[& |

Certificates
- Certificate #0
  - 2
    - 7E:93:EB:FB:7C:C6:4E:59:EA:4B:9A:77:D4:06:FC:3B
    - RSA-SHA1: nil
    - Issuer
      - C: ZA
      - ST: Western Cape
      - L: Durbanville
      - O: Thawte
      - OU: Thawte Certification
      - CN: Thawte Timestamping CA
    - 2012-12-21 00:00:00 UTC: 2020-12-30 23:59:59 UTC
    - Subject
      - C: US
      - O: Symantec Corporation
      - CN: Symantec Time Stamping Services CA - G2
    - #5
      - rsaEncryption: nil
      - B1:AC:B3:49:54:4B:97:1C:12:0A:D8:25:79:91:22:57:
        2A:6F:DC:B8:26:C4:43:73:6B:C2:BF:2E:50:5A:FB:14:
        C2:76:8E:43:01:25:43:B4:A1:E2:45:F4:E8:B7:7B:C3:
        74:CC:22:D7:B4:94:00:02:F7:4D:ED:BF:B4:B7:44:24:
        6B:CD:5F:45:3B:D1:44:CE:43:12:73:17:82:8B:69:B4:
        2B:CB:99:1E:AC:72:1B:26:4D:71:1F:B1:31:DD:FB:51:
        61:02:53:A6:AA:F5:49:2C:05:78:45:A5:2F:89:CE:E7:
        99:E7:FE:8C:E2:57:3F:3D:C6:92:DC:4A:F8:7B:33:E4:
        79:0A:FB:F0:75:88:41:9C:FF:C5:03:51:99:AA:D7:6C:
        9F:93:69:87:65:29:83:85:C2:60:14:C4:C8:C9:3B:14:
        DA:C0:81:F0:1F:0D:74:DE:92:22:AB:CA:F7:FB:74:7C:
        27:E6:F7:4A:1B:7F:A7:C3:9E:2D:AE:8A:EA:A6:E6:AA:
        27:16:7D:61:F7:98:71:11:BC:E2:50:A1:4B:E5:5D:FA:
        E5:0E:A7:2C:9F:AA:65:20:D3:D8:96:E8:C8:7C:A5:4E:
        48:44:FF:19:E2:44:07:92:0B:D7:68:84:80:5D:6A:78:
        64:45:CD:60:46:7E:54:C1:13:7C:C5:79:F1:C9:C1:71: 0x010001
    - #6
      - subjectKeyIdentifier:
        5f 9a f5 6e 5c cc cc 74 9a d4 dd 7d ef 3f db ec |_..n\..t...}.?..| 4c 80 2e dd |L... |
      - authorityInfoAccess
        OCSP: http://ocsp.thawte.com
      - basicConstraints
        true
        true: 0
      - crlDistributionPoints: http://crl.thawte.com/ThawteTimestampingCA.crl
      - extendedKeyUsage: timeStamping
      - keyUsage: true, 6
      - subjectAltName
        CN: TimeStamp-2048-1
  - RSA-SHA1:
```
03 09 9b 8f 79 ef 7f 59  30 aa ef 68 b5 fa e3 09  |....y..Y0..h....|
1d bb 4f 82 06 5d 37 5f  a6 52 9f 16 8d ea 1c 92  |..O..]7_.R......|
09 44 6e f5 6d eb 58 7c  30 e8 f9 69 8d 23 73 0b  |.Dn.m.X|0..i.#s.|
12 6f 47 a9 ae 39 11 f8  2a b1 9b b0 1a c3 8e eb  |.oG..9..*.......|
59 96 00 ad ce 0c 4d b2  d0 31 a6 08 5c 2a 7a fc  |Y.....M..1..\*z.|
e2 7a 1d 57 4c a8 65 18  e9 79 40 62 25 96 6e c7  |.z.WL.e..y@b%.n.|
c7 37 6a 83 21 08 8e 41  ea dd d9 57 3f 1d 77 49  |.7j.!..A...W?.wI|
87 2a 16 06 5e a6 38 6a  22 12 a3 51 19 83 7e b6  |.*..^.8j"..Q..~.|
```
- Certificate #1
  - 2
    - 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - O: Symantec Corporation
      - CN: Symantec Time Stamping Services CA - G2
    - 2012-10-18 00:00:00 UTC: 2020-12-29 23:59:59 UTC
    - Subject
      - C: US
      - O: Symantec Corporation
      - CN: Symantec Time Stamping Services Signer - G4
    - #5
      - rsaEncryption: nil
      - A2:63:0B:39:44:B8:BB:23:A7:44:49:BB:0E:FF:A1:F0:
        61:0A:53:93:B0:98:DB:AD:2C:0F:4A:C5:6E:FF:86:3C:
        53:55:0F:15:CE:04:3F:2B:FD:A9:96:96:D9:BE:61:79:
        0B:5B:C9:4C:86:76:E5:E0:43:4B:22:95:EE:C2:2B:43:
        C1:9F:D8:68:B4:8E:40:4F:EE:85:38:B9:11:C5:23:F2:
        64:58:F0:15:32:6F:4E:57:A1:AE:88:A4:02:D7:2A:1E:
        CD:4B:E1:DD:63:D5:17:89:32:5B:B0:5E:99:5A:A8:9D:
        28:50:0E:17:EE:96:DB:61:3B:45:51:1D:CF:12:56:0B:
        92:47:FC:AB:AE:F6:66:3D:47:AC:70:72:E7:92:E7:5F:
        CD:10:B9:C4:83:64:94:19:BD:25:80:E1:E8:D2:22:A5:
        D0:BA:02:7A:A1:77:93:5B:65:C3:EE:17:74:BC:41:86:
        2A:DC:08:4C:8C:92:8C:91:2D:9E:77:44:1F:68:D6:A8:
        74:77:DB:0E:5B:32:8B:56:8B:33:BD:D9:63:C8:49:9D:
        3A:C5:C5:EA:33:0B:D2:F1:A3:1B:F4:8B:BE:D9:B3:57:
        8B:3B:DE:04:A7:7A:22:B2:24:AE:2E:C7:70:C5:BE:4E:
        83:26:08:FB:0B:BD:A9:4F:99:08:E1:10:28:72:AA:CD: 0x010001
    - X509v3 extensions
      - basicConstraints
        true
        nil
      - extendedKeyUsage: true, timeStamping
      - keyUsage: true, 0x80
      - authorityInfoAccess
        #0
        OCSP: http://ts-ocsp.ws.symantec.com
        caIssuers: http://ts-aia.ws.symantec.com/tss-ca-g2.cer
      - crlDistributionPoints: http://ts-crl.ws.symantec.com/tss-ca-g2.crl
      - subjectAltName
        CN: TimeStamp-2048-2
      - subjectKeyIdentifier:
        46 c6 69 a3 0e 4a 14 1e d5 4c da 52 63 17 3f 5e |F.i..J...L.Rc.?^| 36 bc 0d e6 |6... |
      - authorityKeyIdentifier:
        5f 9a f5 6e 5c cc cc 74 9a d4 dd 7d ef 3f db ec |_..n\..t...}.?..| 4c 80 2e dd |L... |
  - RSA-SHA1:
```
78 3b b4 91 2a 00 4c f0  8f 62 30 37 78 a3 84 27  |x;..*.L..b07x..'|
07 6f 18 b2 de 25 dc a0  d4 94 03 aa 86 4e 25 9f  |.o...%.......N%.|
9a 40 03 1c dd ce e3 79  cb 21 68 06 da b6 32 b4  |.@.....y.!h...2.|
6d bf f4 2c 26 63 33 e4  49 64 6d 0d e6 c3 67 0e  |m..,&c3.Idm...g.|
f7 05 a4 35 6c 7c 89 16  c6 e9 b2 df b2 e9 dd 20  |...5l|......... |
c6 71 0f cd 95 74 dc b6  5c de bd 37 1f 43 78 e6  |.q...t..\..7.Cx.|
78 b5 cd 28 04 20 a3 aa  f1 4b c4 88 29 91 0e 80  |x..(. ...K..)...|
d1 11 fc dd 5c 76 6e 4f  5e 0e 45 46 41 6e 0d b0  |....\vnO^.EFAn..|
ea 38 9a b1 3a da 09 71  10 fc 1c 79 b4 80 7b ac  |.8..:..q...y..{.|
69 f4 fd 9c b6 0c 16 2b  f1 7f 5b 09 3d 9b 5b e2  |i......+..[.=.[.|
16 ca 13 81 6d 00 2e 38  0d a8 29 8f 2c e1 b2 f4  |....m..8..).,...|
5a a9 01 af 15 9c 2c 2f  49 1b db 22 bb c3 fe 78  |Z.....,/I.."...x|
94 51 c3 86 b1 82 88 5d  f0 3d b4 51 a1 79 33 2b  |.Q.....].=.Q.y3+|
2e 7b b9 dc 20 09 13 71  eb 6a 19 5b cf e8 a5 30  |.{.. ..q.j.[...0|
57 2c 89 49 3f b9 cf 7f  c9 bf 3e 22 68 63 53 9a  |W,.I?.....>"hcS.|
bd 69 74 ac c5 1d 3c 7f  92 e0 c3 bc 1c d8 04 75  |.it...<........u|
```
- Certificate #2
  - 2
    - 43:8D:42:91:E4:3C:2D:FF:EE:AA:AE:E5:B6:C0:70:B5
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - O: VeriSign, Inc.
      - OU: VeriSign Trust Network
      - OU: Terms of use at https://www.verisign.com/rpa (c)10
      - CN: VeriSign Class 3 Code Signing 2010 CA
    - 2015-04-20 00:00:00 UTC: 2018-06-18 23:59:59 UTC
    - Subject
      - C: US
      - ST: New York
      - L: Yonkers
      - O: Mindspark Interactive Network
      - CN: Mindspark Interactive Network
    - #5
      - rsaEncryption: nil
      - 9A:E0:50:6E:90:8A:AE:E9:C7:C7:EE:21:B2:DB:DC:19:
        D1:67:53:A6:13:BC:2B:32:C5:9D:98:7C:46:1A:33:96:
        2D:7F:A6:52:5D:16:4C:80:17:3A:CD:CD:51:A5:BE:0E:
        0F:ED:C9:26:72:7E:5A:DD:D3:8E:67:70:AD:39:CB:53:
        C2:89:AA:B4:77:2B:B3:78:E3:F3:36:90:3F:5B:6C:17:
        CB:27:0D:D8:FF:AF:B0:BC:AF:57:23:71:EA:84:3D:5E:
        56:D4:13:DE:96:FB:B2:1B:7F:00:D9:EC:AA:09:55:CB:
        B9:F3:C5:92:57:AB:6D:A8:FE:06:B2:C3:D1:F0:8A:EA:
        96:56:68:6E:0E:4E:D5:F3:37:59:01:24:15:42:2A:49:
        27:51:42:F9:1A:6A:78:84:3C:7B:AA:96:EB:30:F2:98:
        19:DE:F5:8E:57:73:15:22:2F:F9:34:9E:0F:2B:68:4B:
        0C:A8:61:5E:10:22:37:76:AB:DE:FB:DF:08:4E:BC:C2:
        D0:74:EB:D5:7E:35:55:69:53:BA:D4:2E:6B:98:B2:9D:
        8D:C6:73:1E:65:9F:94:D1:A8:A6:27:34:F7:BB:C3:E3:
        D9:01:CB:0E:2D:A6:40:A0:29:A4:CB:56:9B:05:D8:53:
        C5:71:06:26:F6:D8:41:C2:ED:23:15:15:9E:64:BA:CB: 0x010001
    - X509v3 extensions
      - basicConstraints
        nil
      - keyUsage: true, 0x80
      - crlDistributionPoints: http://sf.symcb.com/sf.crl
      - certificatePolicies
        2.16.840.1.113733.1.7.23.3
        #0
        id-qt-cps: https://d.symcb.com/cps
        id-qt-unotice: https://d.symcb.com/rpa
      - extendedKeyUsage: codeSigning
      - authorityInfoAccess
        #0
        OCSP: http://sf.symcd.com
        caIssuers: http://sf.symcb.com/sf.crt
      - authorityKeyIdentifier:
        cf 99 a9 ea 7b 26 f4 4b c9 8e 8f d7 f0 05 26 ef |....{&.K......&.| e3 d2 a7 9d |.... |
      - subjectKeyIdentifier:
        d5 75 df c1 48 06 95 8d 11 b6 3b 9b 06 e9 36 c7 |.u..H.....;...6.| a1 13 f1 ad |.... |
      - nsCertType: 0x10
      - 1.3.6.1.4.1.311.2.1.27
        false: true
  - RSA-SHA1:
```
ca 65 8b c6 5c ff e4 bc  7d 02 46 7a 8c 07 00 b3  |.e..\...}.Fz....|
5a a2 10 87 3e d0 da 46  cb 10 82 c0 78 06 84 0c  |Z...>..F....x...|
1c 3c d2 cf 8a 71 3b 90  01 9a eb 1a 1e f9 5a 8a  |.<...q;.......Z.|
26 48 32 16 6c 2d 68 2e  86 87 29 ff 22 72 a3 aa  |&H2.l-h...)."r..|
8e 82 18 05 d8 a1 5f 9d  bf 9d b7 43 2b be 7b 90  |......_....C+.{.|
b9 84 3f 94 9b 17 c8 c7  43 ec 3c 22 9b 60 af 26  |..?.....C.<".`.&|
64 95 3f 6d a8 e7 ce 64  80 bb 86 4a 0a 52 86 ba  |d.?m...d...J.R..|
ab 67 dc 70 9c 8b 50 b6  de 23 29 70 b9 78 a9 ec  |.g.p..P..#)p.x..|
10 ae 20 50 aa 63 fc cd  97 47 de 9f dc 63 45 5c  |.. P.c...G...cE\|
39 89 25 b6 f8 65 cc bf  4b 8d a4 8a 46 4d 37 01  |9.%..e..K...FM7.|
21 f6 ab 9a 29 85 33 39  82 18 43 cb 00 12 6e e3  |!...).39..C...n.|
b7 7b 1a e5 4b 8c 36 45  92 ae 60 db 8c ba 52 7b  |.{..K.6E..`...R{|
9c 44 81 d6 c8 d0 d2 ac  3f 51 dd d7 85 da 67 85  |.D......?Q....g.|
74 d3 1a 4d 31 d0 bf 35  a6 6f ee 0e 9b d0 af 62  |t..M1..5.o.....b|
9f 51 13 54 1b d9 de a9  db 49 1f c5 27 c5 26 90  |.Q.T.....I..'.&.|
f7 03 03 94 9d d8 7f 54  37 65 5f bc 14 bc bd 5d  |.......T7e_....]|
```
- Certificate #3
  - 2
    - 52:00:E5:AA:25:56:FC:1A:86:ED:96:C9:D4:4B:33:C7
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - O: VeriSign, Inc.
      - OU: VeriSign Trust Network
      - OU: (c) 2006 VeriSign, Inc. - For authorized use only
      - CN: VeriSign Class 3 Public Primary Certification Authority - G5
    - 2010-02-08 00:00:00 UTC: 2020-02-07 23:59:59 UTC
    - Subject
      - C: US
      - O: VeriSign, Inc.
      - OU: VeriSign Trust Network
      - OU: Terms of use at https://www.verisign.com/rpa (c)10
      - CN: VeriSign Class 3 Code Signing 2010 CA
    - #5
      - rsaEncryption: nil
      - F5:23:4B:5E:A5:D7:8A:BB:32:E9:D4:57:F7:EF:E4:C7:
        26:7E:AD:19:98:FE:A8:9D:7D:94:F6:36:6B:10:D7:75:
        81:30:7F:04:68:7F:CB:2B:75:1E:CD:1D:08:8C:DF:69:
        94:A7:37:A3:9C:7B:80:E0:99:E1:EE:37:4D:5F:CE:3B:
        14:EE:86:D4:D0:F5:27:35:BC:25:0B:38:A7:8C:63:9D:
        17:A3:08:A5:AB:B0:FB:CD:6A:62:82:4C:D5:21:DA:1B:
        D9:F1:E3:84:3B:8A:2A:4F:85:5B:90:01:4F:C9:A7:76:
        10:7F:27:03:7C:BE:AE:7E:7D:C1:DD:F9:05:BC:1B:48:
        9C:69:E7:C0:A4:3C:3C:41:00:3E:DF:96:E5:C5:E4:94:
        71:D6:55:01:C7:00:26:4A:40:3C:B5:A1:26:A9:0C:A7:
        6D:80:8E:90:25:7B:CF:BF:3F:1C:EB:2F:96:FA:E5:87:
        77:C6:B5:56:B2:7A:3B:54:30:53:1B:DF:62:34:FF:1E:
        D1:F4:5A:93:28:85:E5:4C:17:4E:7E:5B:FD:A4:93:99:
        7F:DF:CD:EF:A4:75:EF:EF:15:F6:47:E7:F8:19:72:D8:
        2E:34:1A:A6:B4:A7:4C:7E:BD:BB:4F:0C:3D:57:F1:30:
        D6:A6:36:8E:D6:80:76:D7:19:2E:A5:CD:7E:34:2D:89: 0x010001
    - X509v3 extensions
      - basicConstraints
        true
        true: 0
      - certificatePolicies
        2.16.840.1.113733.1.7.23.3
        #0
        id-qt-cps: https://www.verisign.com/cps
        id-qt-unotice: https://www.verisign.com/rpa
      - keyUsage: true, 6
      - 1.3.6.1.5.5.7.1.12
        image/gif
        SHA1:
        8f e5 d3 1a 86 ac 8d 8e 6b c3 cf 80 6a d4 48 18 |........k...j.H.| 2c 7b 19 2e |,{.. |
        http://logo.verisign.com/vslogo.gif
      - crlDistributionPoints: http://crl.verisign.com/pca3-g5.crl
      - authorityInfoAccess
        OCSP: http://ocsp.verisign.com
      - extendedKeyUsage
        clientAuth: codeSigning
      - subjectAltName
        CN: VeriSignMPKI-2-8
      - subjectKeyIdentifier:
        cf 99 a9 ea 7b 26 f4 4b c9 8e 8f d7 f0 05 26 ef |....{&.K......&.| e3 d2 a7 9d |.... |
      - authorityKeyIdentifier:
        7f d3 65 a7 c2 dd ec bb f0 30 09 f3 43 39 fa 02 |..e......0..C9..| af 33 31 33 |.313 |
  - RSA-SHA1:
```
56 22 e6 34 a4 c4 61 cb  48 b9 01 ad 56 a8 64 0f  |V".4..a.H...V.d.|
d9 8c 91 c4 bb cc 0c e5  ad 7a a0 22 7f df 47 38  |.........z."..G8|
4a 2d 6c d1 7f 71 1a 7c  ec 70 a9 b1 f0 4f e4 0f  |J-l..q.|.p...O..|
0c 53 fa 15 5e fe 74 98  49 24 85 81 26 1c 91 14  |.S..^.t.I$..&...|
47 b0 4c 63 8c bb a1 34  d4 c6 45 e8 0d 85 26 73  |G.Lc...4..E...&s|
03 d0 a9 8c 64 6d dc 71  92 e6 45 05 60 15 59 51  |....dm.q..E.`.YQ|
39 fc 58 14 6b fe d4 a4  ed 79 6b 08 0c 41 72 e7  |9.X.k....yk..Ar.|
37 22 06 09 be 23 e9 3f  44 9a 1e e9 61 9d cc b1  |7"...#.?D...a...|
90 5c fc 3d d2 8d ac 42  3d 65 36 d4 b4 3d 40 28  |.\.=...B=e6..=@(|
8f 9b 10 cf 23 26 cc 4b  20 cb 90 1f 5d 8c 4c 34  |....#&.K ...].L4|
ca 3c d8 e5 37 d6 6f a5  20 bd 34 eb 26 d9 ae 0d  |.<..7.o. .4.&...|
e7 c5 9a f7 a1 b4 21 91  33 6f 86 e8 58 bb 25 7c  |......!.3o..X.%||
74 0e 58 fe 75 1b 63 3f  ce 31 7c 9b 8f 1b 96 9e  |t.X.u.c?.1|.....|
c5 53 76 84 5b 9c ad 91  fa ac ed 93 ba 5d c8 21  |.Sv.[........].!|
53 c2 82 53 63 af 12 0d  50 87 11 1b 3d 54 52 96  |S..Sc...P...=TR.|
8a 2c 9c 3d 92 1a 08 9a  05 2e c7 93 a5 48 91 d3  |.,.=.........H..|
```

Signer

1
unnamed
- #0
  - C: US
  - O: VeriSign, Inc.
  - OU: VeriSign Trust Network
  - OU: Terms of use at https://www.verisign.com/rpa (c)10
  - CN: VeriSign Class 3 Code Signing 2010 CA
- 43:8D:42:91:E4:3C:2D:FF:EE:AA:AE:E5:B6:C0:70:B5
SHA1: nil

1.3.6.1.4.1.311.2.1.12
- nil
contentType: 1.3.6.1.4.1.311.2.1.4
1.3.6.1.4.1.311.2.1.11: msCodeInd

messageDigest:

82 74 7e 55 5f 5f 0e 32  d8 1e 08 c3 9a 97 f1 74  |.t~U__.2.......t|
0e 6c 63 ff                                       |.lc.            |

rsaEncryption:

6d e6 ae b0 ee d2 6b 94  8d 58 c3 f1 e8 32 48 74  |m.....k..X...2Ht|
44 61 18 b4 a2 c4 f3 f3  09 0e 7a 23 4a d4 a7 52  |Da........z#J..R|
6f fe 47 64 68 cc d4 f5  18 98 bf 5d 81 19 eb 26  |o.Gdh......]...&|
50 fd 22 49 2b 12 1b 40  6a 96 e1 a2 53 bd e5 31  |P."I+..@j...S..1|
08 19 ee 70 69 a9 5d 8a  37 f3 9a 2b 0f 7d e5 d4  |...pi.].7..+.}..|
9e 79 49 ec 97 c1 74 a4  ab d0 60 e5 44 bc 98 a8  |.yI...t...`.D...|
f8 f7 aa 34 b1 35 8f 45  7f af 2d 01 6f 9e cf 33  |...4.5.E..-.o..3|
b3 b0 fd 48 60 4c aa 13  4e cd 46 29 cd 30 42 4d  |...H`L..N.F).0BM|
ba 16 1b 06 63 72 fb 03  4a 46 85 58 2e 9c 2e 7f  |....cr..JF.X....|
43 99 0f fc 08 a8 82 b9  58 63 c7 0b 68 f2 e4 65  |C.......Xc..h..e|
08 a0 9b a1 72 9c f5 38  e4 14 70 33 5d a0 27 8b  |....r..8..p3].'.|
13 0d b5 6c 81 da a3 e8  d3 ea d0 06 41 e7 3f b6  |...l........A.?.|
93 64 7a f5 e7 06 a9 d2  69 dc 7d 60 26 7d ff 89  |.dz.....i.}`&}..|
71 f9 5c 7c fd ad 3b af  96 d1 bf 9e c0 fe a4 ef  |q.\|..;.........|
62 1b df be 4d 92 1a 4d  61 9d e0 bc 15 7d d5 88  |b...M..Ma....}..|
f4 41 db 5a cc 52 2d e1  ea 6d 84 9b a3 2f 12 46  |.A.Z.R-..m.../.F|

countersignature

unnamed
- #0
  - C: US
  - O: Symantec Corporation
  - CN: Symantec Time Stamping Services CA - G2
- 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
SHA1: nil

contentType: pkcs7-data
signingTime: 2018-04-19 19:33:28 UTC

messageDigest:

d3 c0 e1 12 e2 44 2b 38  6a cb f6 4a 69 75 f9 0e  |.....D+8j..Jiu..|
2a 58 84 ce                                       |*X..            |

rsaEncryption:

23 75 b1 32 cc 78 eb 59  54 ac dc 31 56 f9 83 56  |#u.2.x.YT..1V..V|
78 13 f5 e0 fc 9b 10 23  e8 b5 3d a1 2e d3 ee 4f  |x......#..=....O|
88 7c 62 6d 02 37 3d 30  0a c7 ba 42 aa f6 56 cd  |.|bm.7=0...B..V.|
bb 6b 0b 67 f4 74 1c 33  e3 04 b7 a2 a0 96 9c 37  |.k.g.t.3.......7|
d4 d6 43 86 2e 26 86 17  5a a1 da 45 4f e9 cb 0d  |..C..&..Z..EO...|
24 c5 e6 3a 6a fb c8 77  b7 a1 8b cf a5 67 24 92  |$..:j..w.....g$.|
1f 39 34 4d 0d 04 c9 d5  31 fc 04 fb 99 40 c3 a6  |.94M....1....@..|
33 53 c4 df 2a 81 85 b5  9a fb 00 95 21 4d ed 84  |3S..*.......!M..|
ec 4f fe b9 4d 21 ac 30  e7 49 c1 2b 37 b1 5a df  |.O..M!.0.I.+7.Z.|
10 1b e4 ac ca 2c ce 5f  43 87 76 e2 90 2d 02 94  |.....,._C.v..-..|
e3 75 a2 b1 40 d5 12 e4  91 13 b0 48 b0 11 7e 3a  |.u..@......H..~:|
38 40 ad 87 c0 a1 96 a3  73 1c e6 1e 61 44 d1 6c  |8@......s...aD.l|
90 82 8a 68 5d e3 d1 65  e8 59 07 ac ad 5e c7 31  |...h]..e.Y...^.1|
e9 bc 73 fd 58 b3 9e d5  12 86 7a 2b 9c 33 d3 16  |..s.X.....z+.3..|
d8 29 9b 83 ba 22 71 81  fa 8c ad d5 cb 28 fd c7  |.)..."q......(..|
78 cf aa 43 de 4f df ee  bd bd 07 65 3b 56 be f3  |x..C.O.....e;V..|

1.3.6.1.4.1.311.2.4.1

pkcs7-signedData

SHA256: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15
- :

SHA256

4b 33 24 56 2e 35 c0 7d 86 04 9e be 99 4a f0 6e |K3$V.5.}.....J.n| 77 15 c5 78 a2 29 d7 63 07 da 1c ac 61 f9 60 53 |w..x.).c....a.`S|

Certificates
- Certificate #0
  - 2
    - 1C:27:E3:62:ED:4E:B2:48:A7:DE:49:78:E8:74:A0:5A
    - RSA-SHA256: nil
    - Issuer
      - C: US
      - O: Symantec Corporation
      - OU: Symantec Trust Network
      - CN: Symantec Class 3 SHA256 Code Signing CA
    - 2016-01-04 00:00:00 UTC: 2019-01-03 23:59:59 UTC
    - Subject
      - C: US
      - ST: New York
      - L: Yonkers
      - O: Mindspark Interactive Network
      - CN: Mindspark Interactive Network
    - #5
      - rsaEncryption: nil
      - A8:0F:F9:B4:D1:C2:04:27:9A:69:2E:5A:96:47:8D:01:
        81:3F:AF:14:74:F1:34:B7:D4:F4:E2:56:F8:6F:30:C7:
        6A:6C:FE:3A:3A:1C:A7:7A:D3:5F:A8:8C:9B:30:41:BB:
        2A:D9:E9:11:C5:C6:39:51:2E:E3:80:2E:C7:6B:86:B3:
        55:1E:30:88:61:93:10:27:21:39:F5:90:BC:51:C9:36:
        06:2D:8F:1C:10:05:B1:24:9C:69:EA:78:46:A2:ED:28:
        D6:D1:96:FB:96:C3:23:DA:7D:A4:E2:98:B7:AE:CF:40:
        79:F5:D8:FE:82:4C:D2:DE:57:D0:8B:AC:74:3D:60:48:
        1C:6F:A2:F9:3F:84:7D:8F:41:68:A0:49:6C:17:98:D1:
        FB:D1:ED:C3:67:D2:24:F3:74:2F:44:5C:91:DA:AA:A9:
        54:93:13:63:4F:5D:0A:41:F8:D3:45:72:4E:F3:29:A6:
        DF:44:55:1F:E3:81:C4:E5:43:2B:98:B8:C5:0B:8A:2C:
        C0:96:9F:17:0C:26:BA:4E:5A:F3:98:CC:05:55:AD:98:
        92:25:29:C5:87:93:D0:30:FE:BA:CA:CB:92:DC:BD:27:
        6E:A5:88:FF:3B:6A:71:09:1D:43:16:53:35:7D:37:65:
        E2:32:95:7D:CB:FB:64:30:56:82:C1:CC:82:E5:34:89: 0x010001
    - X509v3 extensions
      - basicConstraints
        nil
      - keyUsage: true, 0x80
      - crlDistributionPoints: http://sv.symcb.com/sv.crl
      - certificatePolicies
        2.16.840.1.113733.1.7.23.3
        #0
        id-qt-cps: https://d.symcb.com/cps
        id-qt-unotice: https://d.symcb.com/rpa
      - extendedKeyUsage: codeSigning
      - authorityInfoAccess
        #0
        OCSP: http://sv.symcd.com
        caIssuers: http://sv.symcb.com/sv.crt
      - authorityKeyIdentifier:
        96 3b 53 f0 79 33 97 af 7d 83 ef 2e 2b cc ca b7 |.;S.y3..}...+...| 86 1e 72 66 |..rf |
      - subjectKeyIdentifier:
        95 40 6a 53 b0 f2 bb 8e 0c 2b 62 92 c7 3b 58 be |.@jS.....+b..;X.| 7a b0 09 fa |z... |
  - RSA-SHA256:
```
5b c8 b8 53 03 5e b5 29  ed 72 6d fd bf 70 3e 4a  |[..S.^.).rm..p>J|
6e d3 1f a4 1d 6d ff 52  e2 ba 7e 42 20 23 43 1a  |n....m.R..~B #C.|
45 5e 58 1a a8 64 60 96  5b 75 61 b3 98 06 f6 bb  |E^X..d`.[ua.....|
40 6c bd d5 7d 0d a9 9d  db b6 ce 7b 64 cb c8 92  |@l..}......{d...|
9f 11 3d 75 ee ee 0d 9e  e0 83 19 e3 83 5a 37 e9  |..=u.........Z7.|
da 6b ee ab 00 63 f6 ef  aa 5c dc 26 8f 3c 7e e3  |.k...c...\.&.<~.|
0a 25 84 9e b8 1f 10 db  5b 60 e3 21 47 d9 a9 68  |.%......[`.!G..h|
c8 b9 36 e0 e5 c2 a7 24  e6 2e ed 1b f9 c5 02 86  |..6....$........|
87 90 e5 d0 b9 e5 de 07  27 8d cf 39 61 6b 0e 6e  |........'..9ak.n|
77 90 9c f8 3a 3c 10 9b  c7 91 03 30 37 95 a5 16  |w...:<.....07...|
41 ec 97 ef 92 d1 4d 81  a5 bd 89 91 34 3f 12 8b  |A.....M.....4?..|
16 59 28 f6 51 df 65 2f  f6 f8 76 64 aa 45 c3 df  |.Y(.Q.e/..vd.E..|
b6 b3 b8 2d f0 f1 d2 a3  06 14 47 1b 92 24 36 b0  |...-......G..$6.|
f9 e8 18 95 00 62 55 f8  bb cc da d4 33 c2 ac 87  |.....bU.....3...|
ed 9c d7 fc ad cc 7f d7  e0 f7 86 f5 2b 40 a7 e9  |............+@..|
0a a4 c1 5b e2 73 af ff  0f 64 33 4c 2f 68 c5 e8  |...[.s...d3L/h..|
```
- Certificate #1
  - 2
    - 3D:78:D7:F9:76:49:60:B2:61:7D:F4:F0:1E:CA:86:2A
    - RSA-SHA256: nil
    - Issuer
      - C: US
      - O: VeriSign, Inc.
      - OU: VeriSign Trust Network
      - OU: (c) 2006 VeriSign, Inc. - For authorized use only
      - CN: VeriSign Class 3 Public Primary Certification Authority - G5
    - 2013-12-10 00:00:00 UTC: 2023-12-09 23:59:59 UTC
    - Subject
      - C: US
      - O: Symantec Corporation
      - OU: Symantec Trust Network
      - CN: Symantec Class 3 SHA256 Code Signing CA
    - #5
      - rsaEncryption: nil
      - 97:83:1E:00:16:AF:2C:B1:D2:08:C4:D7:68:93:51:60:
        1E:71:F6:E2:47:B4:DB:58:4D:23:62:6A:B4:BF:5A:1B:
        51:F7:A3:0D:18:77:68:BB:D8:36:AB:2F:21:50:DA:9E:
        F3:E7:5F:27:4E:0B:C2:97:C8:09:70:93:A9:DA:5C:0D:
        4E:A4:0D:91:A0:B4:EC:14:CE:91:72:54:2E:CE:A3:DB:
        44:E9:52:1B:3F:41:3C:CA:4A:E4:AA:C0:E8:39:AB:53:
        CC:21:D0:CC:CF:7F:9B:E6:C2:CC:58:6A:82:15:EE:3D:
        36:CF:1C:C5:97:07:24:8E:F1:7B:BE:31:2D:3D:6E:DC:
        B5:99:42:9F:4B:61:95:5F:1C:70:EE:17:7D:DB:8B:E5:
        61:89:78:C7:68:1B:AF:11:78:1A:98:AE:C4:55:47:53:
        D9:B3:32:D6:A1:0E:46:40:C5:97:92:8A:D1:53:A7:99:
        5B:85:35:57:D3:EA:93:62:61:20:0A:C7:30:77:24:11:
        4D:62:83:B6:BA:7B:68:82:31:EE:65:CA:DF:F9:D5:8D:
        B2:35:DC:8C:2B:6F:6A:72:5C:60:84:9C:F2:0C:94:5E:
        C0:56:52:00:48:CC:D3:F8:A5:7D:DE:2F:D7:13:E4:38:
        A8:84:D5:46:B8:13:86:C2:1B:9D:EA:5A:38:DD:9B:DB: 0x010001
    - X509v3 extensions
      - authorityInfoAccess
        OCSP: http://s2.symcb.com
      - basicConstraints
        true
        true: 0
      - certificatePolicies
        2.16.840.1.113733.1.7.23.3
        #0
        id-qt-cps: http://www.symauth.com/cps
        id-qt-unotice: http://www.symauth.com/rpa
      - crlDistributionPoints: http://s1.symcb.com/pca3-g5.crl
      - extendedKeyUsage
        clientAuth: codeSigning
      - keyUsage: true, 6
      - subjectAltName
        CN: SymantecPKI-1-567
      - subjectKeyIdentifier:
        96 3b 53 f0 79 33 97 af 7d 83 ef 2e 2b cc ca b7 |.;S.y3..}...+...| 86 1e 72 66 |..rf |
      - authorityKeyIdentifier:
        7f d3 65 a7 c2 dd ec bb f0 30 09 f3 43 39 fa 02 |..e......0..C9..| af 33 31 33 |.313 |
  - RSA-SHA256:
```
13 85 1a 1e 69 a9 37 f7  a0 bd a4 af 7e 1d 61 53  |....i.7.....~.aS|
fe 9d 8c 5e 0c a6 75 1e  78 17 23 dd fd ec 1a 03  |...^..u.x.#.....|
55 39 fb 71 95 c7 65 5a  a7 8e 30 d2 44 5a 61 db  |U9.q..eZ..0.DZa.|
70 6f da 21 05 c2 2e 73  ba 49 f1 d1 93 fe 5d c9  |po.!...s.I....].|
cd 5e 03 e0 89 9e 3f 74  1e d7 f7 38 8b a9 d6 cf  |.^....?t...8....|
bb 35 2f 33 58 a8 92 56  d1 c8 4d 3b 82 e6 79 84  |.5/3X..V..M;..y.|
16 fc 28 b0 b1 47 f3 1d  a2 3e ee 87 d9 a6 7f a4  |..(..G...>......|
56 a5 3f ad 84 2e 29 de  7c bc a8 aa a3 3d 04 01  |V.?...).|....=..|
ea ba 93 a2 0e 50 22 29  17 4c 87 e4 3a 11 5f d6  |.....P").L..:._.|
a4 25 89 9b 05 6b 2f b4  c9 01 4c 27 7b 0b ac 19  |.%...k/...L'{...|
05 22 a0 60 15 3f da c9  fb 4d 4c 8f fb 72 67 77  |.".`.?...ML..rgw|
fd 27 94 c7 ba 35 0e 88  49 fe 8d fd 28 af 4a 12  |.'...5..I...(.J.|
bd 0d b3 97 05 de 44 0c  15 fa 36 2b 03 dc c1 50  |......D...6+...P|
01 f1 a1 11 5d 14 e5 e2  bd 27 4b 54 be 2b 84 5e  |....]....'KT.+.^|
0f a6 c3 74 05 0a ef 97  c3 89 22 b1 1f 77 f3 bd  |...t......"..w..|
cd 43 d4 f1 4c a9 3f b5  8b 84 af 64 f2 d0 14 21  |.C..L.?....d...!|
```

Signer

1
unnamed
- #0
  - C: US
  - O: Symantec Corporation
  - OU: Symantec Trust Network
  - CN: Symantec Class 3 SHA256 Code Signing CA
- 1C:27:E3:62:ED:4E:B2:48:A7:DE:49:78:E8:74:A0:5A
SHA256: nil

1.3.6.1.4.1.311.2.1.12
- nil
1.2.840.113549.1.9.25.4: 1
contentType: 1.3.6.1.4.1.311.2.1.4
1.3.6.1.4.1.311.2.1.11: msCodeInd

messageDigest:

1f 84 e6 75 09 3f 68 b0  57 61 85 04 11 2f ef cb  |...u.?h.Wa.../..|
90 68 80 aa 0a 9e 84 d6  f5 a4 7e 55 62 5f b4 14  |.h........~Ub_..|

rsaEncryption:

46 ca 48 c7 61 a8 50 82  45 14 cf f0 c4 02 62 22  |F.H.a.P.E.....b"|
99 04 32 a5 b4 83 2a 77  8e 31 a9 c7 4a 77 54 eb  |..2...*w.1..JwT.|
b0 ca 4f f3 48 7f c4 92  49 0e 96 a7 b1 7f 0a c6  |..O.H...I.......|
6c 1f 24 6c e6 d6 25 d0  e7 91 63 38 91 df 4c 1a  |l.$l..%...c8..L.|
ea fa 4b da f8 5a e2 bd  67 b8 55 d4 6e 57 5b 40  |..K..Z..g.U.nW[@|
04 a1 3f e8 98 a4 3d 84  92 ca 24 cd da 1a e6 9a  |..?...=...$.....|
40 ea 80 36 d5 84 7e d2  be b4 aa d3 38 a4 2d 3b  |@..6..~.....8.-;|
9f 53 0a a1 06 ba a3 6f  d4 6c 90 d3 dc ce 9a 05  |.S.....o.l......|
a7 1e fa be ab cf 6b e0  65 9d 56 b5 78 b6 d5 11  |......k.e.V.x...|
c9 95 cf d1 a9 1d a8 f2  2a cf e3 87 33 26 a6 7e  |........*...3&.~|
5e 5b 5a 10 04 fa 2e d6  7f 39 8b 7b 0e cc 22 22  |^[Z......9.{..""|
45 d5 3d c5 80 07 a8 a0  3d cd 72 13 87 f4 08 02  |E.=.....=.r.....|
81 1c 82 40 c8 92 c0 48  59 59 f4 9e a5 04 76 2d  |...@...HYY....v-|
0a f2 a8 50 08 9e d2 13  de ad 74 b4 42 9b fb e0  |...P......t.B...|
12 9f 5a ac e7 94 ce 5d  37 d0 2a f3 35 53 de 81  |..Z....]7.*.5S..|
cf f6 b2 8a 22 30 87 63  7b 2d d6 9a a9 3c 3b 03  |...."0.c{-...<;.|

1.3.6.1.4.1.311.3.3.1

pkcs7-signedData

SHA256
id-smime-ct-TSTInfo
- 1
  - 2.16.840.1.113733.1.7.23.3
  - SHA1
    - 04 5e d9 a9 36 c7 52 a3 34 7d 79 0f 9e c8 83 04 |.^..6.R.4}y.....| b6 d0 |.. |
  - 38:5B:FA:E3:5E:76:06:63:12:77:47:C4:6F:1F:D4:45:
    D2:5D:95:83
  - 2018-04-19 19:33:33 UTC
  - 0x1E
  - #5
    - C: US
    - O: Symantec Corporation
    - OU: Symantec Trust Network
    - CN: Symantec SHA256 TimeStamping Signer - G2
Certificates
- Certificate #0
  - 2
    - 7B:05:B1:D4:49:68:51:44:F7:C9:89:D2:9C:19:9D:12
    - RSA-SHA256: nil
    - Issuer
      - C: US
      - O: VeriSign, Inc.
      - OU: VeriSign Trust Network
      - OU: (c) 2008 VeriSign, Inc. - For authorized use only
      - CN: VeriSign Universal Root Certification Authority
    - 2016-01-12 00:00:00 UTC: 2031-01-11 23:59:59 UTC
    - Subject
      - C: US
      - O: Symantec Corporation
      - OU: Symantec Trust Network
      - CN: Symantec SHA256 TimeStamping CA
    - #5
      - rsaEncryption: nil
      - BB:59:9D:59:55:4F:9D:8C:72:5D:1A:81:A2:EB:55:F3:
        B0:01:AD:3C:71:AC:32:8F:05:6B:86:9A:27:00:32:97:
        6A:4D:C9:64:14:4B:29:BB:C2:D9:29:B9:2E:EC:63:B3:
        E1:CF:3F:0B:56:90:F8:62:1B:7E:EB:A6:07:E2:DE:7F:
        5E:6D:40:38:D4:91:06:E7:41:7C:79:1C:CB:CB:AD:1B:
        BF:D8:95:91:F3:F0:EE:6C:F8:AD:96:39:2E:7F:C1:27:
        B8:78:39:C5:84:A5:ED:ED:AF:87:8E:CE:8D:C7:6D:EA:
        D2:98:B5:3A:1F:1E:39:9D:C3:F4:9A:A8:F4:84:E1:C4:
        D1:7C:71:C6:06:29:B4:3F:E4:83:0D:26:C3:7B:08:3E:
        4D:F9:0A:B7:33:49:FF:CA:3B:D4:F5:B2:9B:4B:E1:88:
        99:1A:F5:C0:E9:33:14:D6:DF:C7:80:DB:91:EE:FE:BC:
        92:57:72:77:F4:CD:A8:CC:FE:09:F5:93:37:BE:95:88:
        6A:C5:DC:F4:B1:4B:D4:CE:E8:09:91:5F:B5:84:79:35:
        8A:78:AC:19:32:8F:23:C1:32:41:1B:59:0E:A9:3E:B1:
        CC:F9:D6:2B:EF:B7:D8:E4:D5:1D:6D:11:3A:92:F6:93:
        C9:9C:E3:48:EE:BB:53:0E:D4:36:97:86:78:C5:A1:37: 0x010001
    - #6
      - keyUsage: true, 6
      - basicConstraints
        true
        true: 0
      - certificatePolicies
        2.16.840.1.113733.1.7.23.3
        #0
        id-qt-cps: https://d.symcb.com/cps
        id-qt-unotice: https://d.symcb.com/rpa
      - authorityInfoAccess
        OCSP: http://s.symcd.com
      - crlDistributionPoints: http://s.symcb.com/universal-root.crl
      - extendedKeyUsage: timeStamping
      - subjectAltName
        CN: TimeStamp-2048-3
      - subjectKeyIdentifier:
        af 63 d6 ca a3 4e 85 72 e0 a7 bc 41 f3 29 a2 38 |.c...N.r...A.).8| 7f 80 75 62 |..ub |
      - authorityKeyIdentifier:
        b6 77 fa 69 48 47 9f 53 12 d5 c2 ea 07 32 76 07 |.w.iHG.S.....2v.| d1 97 07 19 |.... |
  - RSA-SHA256:
```
75 ea b0 2d d5 34 19 5c  32 45 fe 0e e1 d4 4f a6  |u..-.4.\2E....O.|
78 c1 6f d7 ea dd dc 4f  f3 a1 c8 81 88 f7 a7 8f  |x.o....O........|
15 e6 40 29 ad e6 5d f4  a2 d9 56 64 84 71 30 2a  |..@)..]...Vd.q0*|
dd 1e 61 17 66 20 56 06  98 19 8d 5d 71 f2 f8 97  |..a.f V....]q...|
bc 09 fd 1c 91 47 c9 e2  e8 8d 03 fb cc 90 2f d6  |.....G......../.|
0a 6c 4e 33 ec d6 b4 93  c8 4c 90 63 48 39 40 21  |.lN3.....L.cH9@!|
c4 dd d6 6e 89 98 3c b5  98 97 e8 a9 06 b7 09 c9  |...n..<.........|
8f 53 57 41 90 2f e1 1e  4d 4e dc ca 10 78 6c 42  |.SWA./..MN...xlB|
6e f0 b6 c5 f8 61 5c 52  f5 4e f6 6b 8d f7 4a 7a  |n....a\R.N.k..Jz|
be f3 cd fd 03 d7 d9 f6  03 a8 0f e3 53 f7 0a 75  |............S..u|
ec c6 75 2e aa 66 85 04  99 b7 f8 06 57 e1 c6 0e  |..u..f......W...|
f6 e8 af da ec 9b 18 1f  aa b9 e3 3a 00 bf ce 8a  |...........:....|
94 cb 01 db 9e c7 38 bb  0f 52 ab d1 e3 94 03 60  |......8..R.....`|
0a 4d a0 fe 27 6d 14 32  fc 3f 97 40 e1 bf 99 89  |.M..'m.2.?.@....|
db e4 39 14 bd da e4 d3  c3 ea 2b 5a b3 95 58 55  |..9.......+Z..XU|
04 7d c7 9a ec 23 03 8d  85 2a d2 ff ae a9 61 81  |.}...#...*....a.|
```
- Certificate #1
  - 2
    - 54:58:F2:AA:D7:41:D6:44:BC:84:A9:7B:A0:96:52:E6
    - RSA-SHA256: nil
    - Issuer
      - C: US
      - O: Symantec Corporation
      - OU: Symantec Trust Network
      - CN: Symantec SHA256 TimeStamping CA
    - 2017-01-02 00:00:00 UTC: 2028-04-01 23:59:59 UTC
    - Subject
      - C: US
      - O: Symantec Corporation
      - OU: Symantec Trust Network
      - CN: Symantec SHA256 TimeStamping Signer - G2
    - #5
      - rsaEncryption: nil
      - 99:F3:FC:D8:04:09:03:86:F9:D7:5C:A6:93:C0:42:7C:
        EA:7C:63:CF:5D:00:E2:8E:F3:C0:90:DF:8F:29:F5:18:
        EA:94:B7:92:E5:D7:B0:A0:73:81:E8:E9:0A:9B:4A:7C:
        01:FF:9D:8F:A4:39:A7:0E:EA:45:F4:22:0C:3A:70:ED:
        39:45:8B:E4:C5:1B:5C:F0:45:68:46:24:05:63:76:9B:
        1C:FC:9E:6C:2A:B1:56:E5:8A:7F:52:71:AE:F2:35:D5:
        46:23:06:1C:CF:48:2D:1D:B4:CD:B8:D9:76:23:8E:1C:
        FF:3E:BF:BB:06:5C:69:07:A6:65:0E:F8:5E:AE:7D:2E:
        ED:4D:AE:35:EF:C9:D7:00:42:FD:28:95:0E:9F:5D:72:
        42:09:BC:C3:DA:44:D2:ED:CC:47:84:E4:FC:CA:2D:AC:
        58:BE:AE:F7:AE:D9:44:0D:08:B7:C2:77:D6:1A:43:70:
        D1:6E:03:DE:52:92:C4:10:08:71:D9:BA:22:55:F2:1F:
        BC:ED:9B:9D:3B:E2:5E:1D:4C:83:FF:97:0F:7B:0B:E7:
        55:83:4E:D2:0D:EB:BE:D7:EC:AE:6E:47:B9:9F:DF:A5:
        D6:51:BC:04:55:ED:FF:27:70:4C:C9:ED:2A:4B:13:E1:
        B1:B9:4C:0F:C9:01:EE:55:65:5F:69:02:78:66:CB:3F: 0x010001
    - X509v3 extensions
      - basicConstraints
        true
        nil
      - certificatePolicies
        2.16.840.1.113733.1.7.23.3
        #0
        id-qt-cps: https://d.symcb.com/cps
        id-qt-unotice: https://d.symcb.com/rpa
      - crlDistributionPoints: http://ts-crl.ws.symantec.com/sha256-tss-ca.crl
      - extendedKeyUsage: true, timeStamping
      - keyUsage: true, 0x80
      - authorityInfoAccess
        #0
        OCSP: http://ts-ocsp.ws.symantec.com
        caIssuers: http://ts-aia.ws.symantec.com/sha256-tss-ca.cer
      - subjectAltName
        CN: TimeStamp-2048-5
      - subjectKeyIdentifier:
        09 b5 c1 fe 96 72 97 29 43 9a c9 e0 02 ba ae f8 |.....r.)C.......| fd 2f ba f6 |./.. |
      - authorityKeyIdentifier:
        af 63 d6 ca a3 4e 85 72 e0 a7 bc 41 f3 29 a2 38 |.c...N.r...A.).8| 7f 80 75 62 |..ub |
  - RSA-SHA256:
```
17 b3 0a 88 e9 5c 5a 5e  20 6b 3b 0a 15 b2 6c c5  |.....\Z^ k;...l.|
a9 8a 32 87 d3 b1 f4 1c  53 ae 85 be 3f 9b ff d7  |..2.....S...?...|
bc b7 94 85 b4 c7 52 7e  94 e8 bd ed 61 b2 d4 a7  |......R~....a...|
99 e4 c3 c9 93 c1 35 3d  0b e8 68 0a 5d 56 98 bd  |......5=..h.]V..|
b1 22 3b d1 44 7a d7 bf  f0 6d 51 32 8a d5 23 df  |.";.Dz...mQ2..#.|
38 01 37 f6 e2 53 2b 7a  2b 11 8f b7 4d 6c 7a 33  |8.7..S+z+...Mlz3|
03 1b 7c 6b 09 94 17 bb  e4 db 58 d4 21 13 65 e7  |..|k......X.!.e.|
ec d1 25 ca 2c 75 9a 9c  7f fc c9 bb 2a 68 ab c4  |..%.,u......*h..|
7d b4 cf a3 c9 6c a7 d9  c4 00 9c 89 0a 77 91 f4  |}....l.......w..|
4d a2 fb 31 3b 86 6e f6  e6 1f 50 03 86 9b bf cb  |M..1;.n...P.....|
42 ab e6 76 9b 72 5a 11  01 8a c6 ef a5 6f 95 e7  |B..v.rZ......o..|
dd ae ba e6 22 65 f0 18  59 1b 11 c9 cd 80 b7 d8  |...."e..Y.......|
97 47 1f 42 08 f8 ac 71  1f b0 46 53 b3 d4 b2 d5  |.G.B...q..FS....|
a3 ab 50 75 48 12 17 82  ad cf e0 41 4f 32 7e cd  |..PuH......AO2~.|
95 1c bf 91 8a 08 3d a4  a7 67 02 96 df 24 4c a5  |......=..g...$L.|
d0 41 c0 82 60 a3 8a 17  32 4b d3 bc cf a4 b4 8c  |.A..`...2K......|
```

unnamed
- #0
  - C: US
  - O: Symantec Corporation
  - OU: Symantec Trust Network
  - CN: Symantec SHA256 TimeStamping CA
- 54:58:F2:AA:D7:41:D6:44:BC:84:A9:7B:A0:96:52:E6
SHA256

contentType: id-smime-ct-TSTInfo
signingTime: 2018-04-19 19:33:33 UTC

messageDigest:

06 99 5a 59 e5 3f f2 be  b2 d0 f4 95 16 07 43 71  |..ZY.?........Cq|
88 ae 9c 6a 40 e6 8e 44  58 87 17 f7 f3 97 31 22  |...j@..DX.....1"|

id-smime-aa-signingCertificateV2:

cf 7a c1 7a d0 47 ec d5  fd c3 68 22 03 1b 12 d4  |.z.z.G....h"....|
ef 07 8b 6f 2b 4c 5e 6b  a4 1f 8f f2 cf 4b ad 67  |...o+L^k.....K.g|

rsaEncryption

65 d0 02 6b d8 c8 b6 18 82 66 80 88 83 31 c9 d2 |e..k.....f...1..| c0 d9 1b 2f fe ea bc 57 4f cb 33 6a 2d 28 dd 09 |.../...WO.3j-(..| 1e 33 a5 46 55 47 ce 4f 30 95 ec 81 32 b5 fa f6 |.3.FUG.O0...2...| 6d db 03 f2 be 70 b1 a5 51 97 4a 22 23 31 aa 50 |m....p..Q.J"#1.P| f5 b6 f4 77 fb d2 d8 1c d6 72 d6 11 5a f9 31 d5 |...w.....r..Z.1.| 2d ef 1e 72 e6 10 ae d8 6e 30 66 d5 90 87 95 be |-..r....n0f.....| a0 fd 5f 0d 3e 9d 26 a0 d5 f1 62 00 15 9e 5a c7 |.._.>.&...b...Z.| e2 51 06 96 18 19 10 17 f0 62 74 c7 f6 f0 74 46 |.Q.......bt...tF| 03 be f6 bf 2a 80 16 db 43 d0 5b 6a f1 1c 64 a0 |....*...C.[j..d.| 31 0f d0 3f 3d a4 0b ff 7d 2e 78 21 02 5f d6 3c |1..?=...}.x!._.<| 7d 4b 29 8b e8 27 89 d9 39 88 96 78 d3 4f 1a f2 |}K)..'..9..x.O..| d7 6c 4b 47 48 69 67 bc 11 4d 0e f3 48 d8 e0 5e |.lKGHig..M..H..^| e4 67 e2 90 06 02 d9 f7 6c a0 a6 3b b5 c0 4d bb |.g......l..;..M.| df 38 2a 14 ac 48 cb 5d 09 b8 bc 8b 1d a7 9d cd |.8*..H.]........| a2 58 c0 e4 8c 59 4f 01 05 17 c9 54 2d b2 d8 c7 |.X...YO....T-...| b7 00 8a 70 91 93 31 78 e0 3c 1d 98 b6 61 7f b4 |...p..1x.<...a..|

show previews

offset	size	type	comment
0	259584	DLL	04/19/2018 19:27:26	#
15c1	15	HTM		#
34c10	14911	PNG	(322 x 140)	#
38650	3617	PNG	(322 x 140)	#
3f600	13424	PKCS7	Authenticode Signature	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] can't find file_offset of VA 0x37a60

TooltabExtension.dll- Mindspark Tooltab Platform

MZ Header

Rich Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

TLS

StringTable 040904b0

VS_FIXEDFILEINFO

Signers (1)

Certificates (4)

TooltabExtension.dll
- Mindspark Tooltab Platform