advscheduler.exe - msitoexe.exe - Advanced Task Scheduler

info
MZ
PE
resources
strings
imports
foremost
version info
signature
hexdump
disasm
log
discuss
donate

filename	advscheduler.exe
size	53976888 (0x3379f38)
md5	b77e9c9f57c04df7a9172ace4b63b937

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x108

Rich Header

lib id	version	times used
11	9782	1
14	7299	22
10	9782	113
19	8034	2
1	0	96
93	4035	13
21	8168	1
22	8168	2
0	0	47
22	9782	4
6	1735	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	4
TimeDateStamp	0x549f9a00
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x10f
Magic	0x10b
LinkerVersion	6.0
SizeOfCode	0xe000
SizeOfInitializedData	0x3368000
SizeOfUninitializedData	0
AddressOfEntryPoint	0x6165
BaseOfCode	0x1000
BaseOfData	0xf000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x1000
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x3379000
SizeOfHeaders	0x1000
CheckSum	0x3381e43
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v6.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0xdcfc	0xe000	R-X CODE
.rdata	0xf000	0xfc2	0x1000	R-- IDATA
.data	0x10000	0x42fc4	0x41000	RW- IDATA
.rsrc	0x53000	0x3325b5c	0x3326000	R-- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0xf7f8	0xa0
RESOURCE	0x53000	0x3325b5c
EXCEPTION	0	0
SECURITY	0x3377000	0x2f38
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0xf000	0x16c
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
ICON	#1	744	1252
ICON	#2	296	1252
ICON	#3	5672	1252
ICON	#4	3752	1252
ICON	#5	2216	1252
ICON	#6	1736	1252
ICON	#7	1384	1252
ICON	#8	32970	1252
ICON	#9	16936	1252
ICON	#10	9640	1252
ICON	#11	4264	1252
ICON	#12	2440	1252
ICON	#13	1128	1252
STRING	#7	1286	1252
STRING	#63	1134	1252
STRING	#64	826	1252
RCDATA	#1000	540672	1252
RCDATA	#1001	22776543	1252
RCDATA	#1002	540672	1252
RCDATA	#1003	540672	1252
RCDATA	#1004	540672	1252
RCDATA	#1005	540672	1252
RCDATA	#1006	540672	1252
RCDATA	#1007	561152	1252
RCDATA	#1008	24153269	1252
RCDATA	#1009	561152	1252
RCDATA	#1010	561152	1252
RCDATA	#1011	561152	1252
RCDATA	#1012	561152	1252
RCDATA	#1013	561152	1252
GROUP_ICON	#1	188	1252
VERSION	#1	836	1252
MANIFEST	#1	1874	1252

id	lang	string
100	0	Windows Installer is required for this installation package. The Microsoft® Windows® Installer (MSI) is the application installation and configuration service for Windows. To download Windows Installer 2.0, please use the link below. To continue this installation, start it again when Windows Installer is installed on your computer.
101	0	http://support.microsoft.com/kb/KbView/305496
102	0	http://www.microsoft.com/en-us/download/details.aspx?id=11176
103	0	The installation file is either corrupted or does not support your processor architecture.
104	0	Select a folder where you want to extract the installation files for
105	0	Preparing for installation
1000	0	Intel\1033\{3758542B-5BCE-4FF1-B4D2-134F3C29A789}\Advanced Task Scheduler
1001	0	cab\1000;1002;1003;1004;1005;1006\main.cab
1002	0	Intel\1036\{3758542B-5BCE-4FF1-B4D2-134F3C29A789}\Advanced Task Scheduler
1003	0	Intel\1031\{3758542B-5BCE-4FF1-B4D2-134F3C29A789}\Advanced Task Scheduler
1004	0	Intel\1046\{3758542B-5BCE-4FF1-B4D2-134F3C29A789}\Advanced Task Scheduler
1005	0	Intel\1038\{3758542B-5BCE-4FF1-B4D2-134F3C29A789}\Advanced Task Scheduler
1006	0	Intel\1049\{3758542B-5BCE-4FF1-B4D2-134F3C29A789}\Advanced Task Scheduler
1007	0	x64\1033\{3712BD8A-C92D-4D24-939D-C7EF04D7EA97}\Advanced Task Scheduler
1008	0	cab\1007;1009;1010;1011;1012;1013\main.cab
1009	0	x64\1036\{3712BD8A-C92D-4D24-939D-C7EF04D7EA97}\Advanced Task Scheduler
1010	0	x64\1031\{3712BD8A-C92D-4D24-939D-C7EF04D7EA97}\Advanced Task Scheduler
1011	0	x64\1046\{3712BD8A-C92D-4D24-939D-C7EF04D7EA97}\Advanced Task Scheduler
1012	0	x64\1038\{3712BD8A-C92D-4D24-939D-C7EF04D7EA97}\Advanced Task Scheduler
1013	0	x64\1049\{3712BD8A-C92D-4D24-939D-C7EF04D7EA97}\Advanced Task Scheduler

module_name	hint	ord	function_name
GDI32.dll	526		SelectObject
ADVAPI32.dll	459		RegCloseKey
COMCTL32.dll		17
ole32.dll	59		CoInitialize
ole32.dll	16		CoCreateInstance
KERNEL32.dll	238		FlushFileBuffers
KERNEL32.dll	693		ReadFile
KERNEL32.dll	322		GetCurrentProcess
KERNEL32.dll	789		SetErrorMode
KERNEL32.dll	166		EnumResourceNamesW
KERNEL32.dll	504		GlobalAlloc
KERNEL32.dll	613		LockResource
KERNEL32.dll	599		LoadResource
KERNEL32.dll	853		SizeofResource
KERNEL32.dll	483		GetUserDefaultLCID
KERNEL32.dll	932		WriteFile
KERNEL32.dll	52		CloseHandle
KERNEL32.dll	369		GetLastError
KERNEL32.dll	808		SetLastError
KERNEL32.dll	511		GlobalFree
KERNEL32.dll	522		GlobalUnlock
KERNEL32.dll	515		GlobalLock
KERNEL32.dll	206		FindClose
KERNEL32.dll	250		FreeResource
KERNEL32.dll	346		GetExitCodeProcess
KERNEL32.dll	912		WaitForSingleObject
KERNEL32.dll	488		GetVersion
KERNEL32.dll	600		LocalAlloc
KERNEL32.dll	604		LocalFree
KERNEL32.dll	185		ExitProcess
KERNEL32.dll	594		LoadLibraryA
KERNEL32.dll	960		lstrcmpA
KERNEL32.dll	383		GetModuleHandleA
KERNEL32.dll	528		HeapAlloc
KERNEL32.dll	419		GetProcessHeap
KERNEL32.dll	897		VirtualAlloc
KERNEL32.dll	902		VirtualProtect
KERNEL32.dll	899		VirtualFree
KERNEL32.dll	563		IsBadReadPtr
KERNEL32.dll	534		HeapFree
KERNEL32.dll	248		FreeLibrary
KERNEL32.dll	823		SetStdHandle
KERNEL32.dll	442		GetStringTypeA
KERNEL32.dll	403		GetOEMCP
KERNEL32.dll	253		GetACP
KERNEL32.dll	795		SetFilePointer
KERNEL32.dll	580		LCMapStringA
KERNEL32.dll	552		InterlockedDecrement
KERNEL32.dll	556		InterlockedIncrement
KERNEL32.dll	538		HeapReAlloc
KERNEL32.dll	439		GetStartupInfoA
KERNEL32.dll	272		GetCommandLineA
KERNEL32.dll	547		InitializeCriticalSection
KERNEL32.dll	129		DeleteCriticalSection
KERNEL32.dll	152		EnterCriticalSection
KERNEL32.dll	593		LeaveCriticalSection
KERNEL32.dll	381		GetModuleFileNameA
KERNEL32.dll	344		GetEnvironmentVariableA
KERNEL32.dll	489		GetVersionExA
KERNEL32.dll	532		HeapDestroy
KERNEL32.dll	530		HeapCreate
KERNEL32.dll	727		RtlUnwind
KERNEL32.dll	862		TerminateProcess
KERNEL32.dll	878		UnhandledExceptionFilter
KERNEL32.dll	246		FreeEnvironmentStringsA
KERNEL32.dll	341		GetEnvironmentStrings
KERNEL32.dll	804		SetHandleCount
KERNEL32.dll	441		GetStdHandle
KERNEL32.dll	358		GetFileType
KERNEL32.dll	326		GetCurrentThreadId
KERNEL32.dll	870		TlsSetValue
KERNEL32.dll	867		TlsAlloc
KERNEL32.dll	869		TlsGetValue
USER32.dll	479		MessageBoxA
USER32.dll	198		EndDialog
USER32.dll	634		SetTimer
USER32.dll	13		BeginPaint
USER32.dll	200		EndPaint
USER32.dll	437		KillTimer
USER32.dll	268		GetDC
USER32.dll	554		ReleaseDC
USER32.dll	349		GetSystemMetrics
USER32.dll	643		SetWindowPos
SHELL32.dll	75		SHGetMalloc

StringTable 040904E2

CompanyName	Southsoftware.com
FileDescription	Advanced Task Scheduler
FileVersion	4.4.0.615
InternalName	Advanced Task Scheduler
LegalCopyright	Copyright (C) Southsoftware.com, 2002-2015
OriginalFilename	msitoexe.exe
ProductName	Advanced Task Scheduler
ProductVersion	4.4.0.615

VS_FIXEDFILEINFO

FileVersion	4.4.0.615
ProductVersion	4.4.0.615
StrucVersion	0x10000
FileFlagsMask	0
FileFlags	0
FileOS	0x40004
FileType	1
FileSubtype	0

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO RSA Code Signing CA

serial: 6E66B3A9221397740C167425B2FAE0D2

Certificates (3)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Object
        Validity
            Not Before: Dec 31 00:00:00 2015 GMT
            Not After : Jul  9 18:40:36 2019 GMT
        Subject: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO SHA-1 Time Stamping Signer
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e9:3d:df:d7:37:08:c9:1e:38:b2:52:53:42:
                    6d:22:f1:b1:c4:06:04:6b:9e:fd:82:74:50:43:7d:
                    c6:a0:bb:1f:4e:f9:02:71:26:b1:ef:43:d8:83:8c:
                    48:fc:e7:0f:97:7a:9a:eb:9c:de:a6:a3:0e:3b:1c:
                    44:18:75:8e:78:a5:17:69:fe:49:18:a4:e2:bb:5c:
                    4e:fe:8e:2a:54:7a:50:f0:d5:f6:cc:91:e7:99:79:
                    d7:de:79:94:d7:96:33:fe:0e:83:be:22:bf:63:16:
                    2c:a3:dd:28:1b:af:3d:ab:ea:97:d2:f1:bf:04:10:
                    e7:3d:48:45:fd:1f:68:65:c1:7f:59:99:69:c0:22:
                    31:0c:62:6e:a7:5c:65:01:21:b0:63:c4:22:18:27:
                    ee:e6:fc:d2:00:3d:47:2e:a8:b8:86:56:5d:04:dc:
                    13:17:25:6e:1c:df:44:0f:15:cd:b7:db:a5:57:76:
                    42:6f:00:68:82:99:d2:e3:c1:de:f0:8b:94:57:4c:
                    ec:08:90:22:21:ce:22:2b:98:0c:42:e6:42:93:94:
                    98:93:ef:fd:06:d9:3f:bc:5b:9b:54:3c:20:b1:ee:
                    6a:d6:47:7a:c5:ab:80:e9:30:9a:de:f1:a4:3f:55:
                    4d:0a:09:34:8a:75:29:d2:69:ad:97:0f:50:bf:f8:
                    ca:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:DA:ED:64:74:14:9C:14:3C:AB:DD:99:A9:BD:5B:28:4D:8B:3C:C9:D8

            X509v3 Subject Key Identifier: 
                8E:6B:2D:33:6B:F4:33:A7:93:B3:13:9A:A5:E0:0A:F7:12:35:6A:88
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.usertrust.com/UTN-USERFirst-Object.crl

            Authority Information Access: 
                OCSP - URI:http://ocsp.usertrust.com

    Signature Algorithm: sha1WithRSAEncryption
         ba:33:24:40:40:8c:7c:db:58:9f:b3:60:98:b2:f5:c0:31:fe:
         eb:1f:6e:50:f6:0a:e0:e4:e6:81:ad:26:87:a2:df:fd:b3:da:
         f4:73:f3:00:fb:29:1b:89:1b:15:3e:db:6b:52:93:2b:c4:ac:
         39:81:d7:3c:67:57:9a:39:36:e0:28:08:9a:e3:39:4f:9b:89:
         09:7f:7b:c5:61:7f:59:89:32:25:0a:6a:ae:1a:3e:f0:a2:27:
         a8:b6:c3:b8:87:f7:16:04:48:41:3d:5c:d8:ec:9f:4d:20:31:
         04:d9:65:a1:ed:cd:69:07:53:16:3d:dd:36:02:0a:88:eb:40:
         e5:06:30:0b:b8:16:4b:dc:ef:bc:55:09:ff:c6:3e:12:2e:76:
         b3:dc:ce:42:ef:f9:76:57:e1:b7:0a:05:40:98:58:9a:5d:71:
         16:93:71:8c:65:81:ea:6f:f3:89:f7:fb:73:ad:b4:e7:bf:d9:
         8e:6f:aa:0b:4f:25:f3:b8:e1:d5:dd:75:98:68:81:f8:aa:c0:
         d1:80:c2:c4:c4:39:89:c1:f6:c9:9e:6c:d7:74:f9:d9:97:f8:
         4f:c2:9a:0a:cd:5e:8f:f8:19:e9:e0:a5:9f:c4:f0:92:21:e6:
         2d:79:25:c9:22:f9:c3:f0:3a:84:57:ad:3a:16:f4:63:94:10:
         1d:5d:d0:c6

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:66:b3:a9:22:13:97:74:0c:16:74:25:b2:fa:e0:d2
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Code Signing CA
        Validity
            Not Before: Feb 17 00:00:00 2016 GMT
            Not After : Jul 11 23:59:59 2018 GMT
        Subject: C=RU/postalCode=410012, ST=Saratov, L=Saratov/street=PO Box 375, O=Vadim Belov, CN=Vadim Belov
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:30:63:c9:75:3d:e5:44:48:ad:db:59:89:84:
                    d0:8f:0b:25:2f:15:10:67:aa:ef:a3:e8:57:b8:dd:
                    4d:f0:a4:69:94:c8:a7:a0:19:f4:95:ee:8c:9e:f5:
                    bb:e0:c9:50:6a:d2:ec:6f:d7:cc:6b:7b:e3:95:7a:
                    9c:ad:93:ba:9f:50:5a:54:3d:ce:6f:ff:65:f1:e6:
                    f5:cf:8b:90:08:14:fb:1e:2f:ac:a9:72:b9:68:01:
                    da:6e:d2:d7:fe:df:e9:98:42:81:20:e8:30:47:ad:
                    0a:95:d6:c3:32:f8:d4:7a:06:66:41:dc:2a:47:69:
                    5e:c4:c1:e7:9b:86:dc:e3:35:ee:0a:d2:26:3b:94:
                    f2:5c:73:11:05:5e:32:c5:18:6f:7e:f5:82:57:72:
                    d0:8c:1f:fe:21:fb:5f:91:09:bb:09:9f:73:1b:5b:
                    df:33:75:c1:71:d4:16:a1:69:95:1a:1b:ca:19:a3:
                    c9:1d:db:76:06:50:15:4d:f5:0c:da:a7:81:ae:13:
                    ef:f7:80:6e:fd:c7:fa:62:be:8d:2b:09:e2:3e:48:
                    a4:ae:13:a0:cd:69:8f:5d:7d:e5:8d:1e:c6:82:6b:
                    45:8d:96:07:78:31:93:4f:2f:a8:83:5c:1c:3c:5e:
                    a9:c8:db:33:00:c2:81:1e:ef:8d:14:80:ee:4e:96:
                    6b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:29:91:60:FF:8A:4D:FA:EB:F9:A6:6A:B8:CF:F9:E6:4B:BD:49:CE:12

            X509v3 Subject Key Identifier: 
                B5:75:C6:87:6D:58:16:BD:4C:9F:81:F4:C1:93:73:51:48:E8:ED:D1
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                Code Signing
            Netscape Cert Type: 
                Object Signing
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.6449.1.2.1.3.2
                  CPS: https://secure.comodo.net/CPS

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.comodoca.com/COMODORSACodeSigningCA.crl

            Authority Information Access: 
                CA Issuers - URI:http://crt.comodoca.com/COMODORSACodeSigningCA.crt
                OCSP - URI:http://ocsp.comodoca.com

    Signature Algorithm: sha256WithRSAEncryption
         69:27:b4:44:2d:d4:3e:fe:91:71:e8:68:7c:2a:1f:02:7d:ca:
         b0:22:91:ff:19:d8:4e:7b:6e:2d:2c:d2:f9:32:0e:cd:f3:47:
         76:39:27:bf:7e:fb:0b:2f:2a:60:73:4e:11:68:8b:92:3b:9f:
         b2:58:49:42:b4:c8:74:4a:24:ee:c3:ee:a5:e2:54:b8:df:48:
         c1:ac:49:98:2d:40:51:95:b8:14:46:6f:78:fc:4d:f2:b2:7d:
         96:d5:84:9f:9a:92:a0:49:ef:2d:37:0c:0e:5b:bc:09:8c:86:
         b2:85:23:3f:8d:d4:48:ba:ba:1f:be:a8:6a:35:48:37:e7:af:
         b1:9a:3d:8c:83:bc:39:03:52:4f:f9:33:45:9d:db:54:7a:ce:
         c9:45:18:f6:70:5e:91:49:9f:3c:42:6e:27:96:c4:0f:01:8e:
         dd:bc:b5:e7:d2:0c:6a:51:6e:fe:86:86:e2:7c:4e:0e:32:e3:
         26:ef:1a:8f:82:f2:47:b3:72:a3:a9:bd:3f:f7:27:00:73:0c:
         29:e6:cf:9e:7a:3a:48:32:a8:ae:14:e2:67:ce:66:cc:1f:1d:
         4f:3a:22:45:9b:05:f7:be:3f:de:0d:99:c8:25:00:70:57:67:
         88:e0:0a:bb:c3:99:2a:36:62:b8:fa:ed:98:c7:ec:b5:5c:bb:
         8f:ad:4a:fb

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
        Signature Algorithm: sha384WithRSAEncryption
        Issuer: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Certification Authority
        Validity
            Not Before: May  9 00:00:00 2013 GMT
            Not After : May  8 23:59:59 2028 GMT
        Subject: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Code Signing CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:98:90:63:77:91:34:7f:8a:d1:dd:e9:67:31:
                    11:eb:cc:1e:fd:31:1d:b3:b9:62:57:3f:93:bc:5b:
                    e3:9f:1e:24:32:11:27:6b:bc:51:91:a7:cf:9e:9e:
                    25:b3:5f:81:a8:18:0f:1d:1e:20:30:0e:fb:61:7b:
                    86:09:b3:e3:fd:a2:68:9d:1c:2c:9d:bf:72:e3:e4:
                    75:a0:e5:35:23:8e:c9:8a:ee:1a:0c:64:c7:d8:42:
                    a1:7b:b5:52:03:4b:3a:b0:8e:23:4b:4b:63:e0:22:
                    94:37:7b:d5:79:90:0a:14:18:51:2c:e6:fe:c1:12:
                    f0:1c:3f:61:61:0a:8c:a2:dc:f6:c3:30:aa:cd:28:
                    18:75:48:c1:79:5a:08:cd:bb:8c:55:8c:f7:d4:76:
                    90:3a:33:46:50:73:98:5c:f4:85:4a:6b:0f:80:dd:
                    5e:d6:bd:fd:a9:2f:c0:25:f5:f9:78:d7:8d:5f:10:
                    c2:44:55:3c:90:3c:31:46:cb:70:ae:07:a9:0a:e3:
                    af:c1:01:6f:90:1a:23:e2:5f:38:db:c6:08:5d:47:
                    b3:83:41:f0:2e:00:37:14:b9:12:aa:79:92:52:cd:
                    87:0f:7b:d8:62:29:a4:7e:30:bd:1b:b5:8c:72:b4:
                    48:f2:e3:e8:21:f9:5e:4c:62:79:8b:02:06:9f:7f:
                    d5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:BB:AF:7E:02:3D:FA:A6:F1:3C:84:8E:AD:EE:38:98:EC:D9:32:32:D4

            X509v3 Subject Key Identifier: 
                29:91:60:FF:8A:4D:FA:EB:F9:A6:6A:B8:CF:F9:E6:4B:BD:49:CE:12
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.comodoca.com/COMODORSACertificationAuthority.crl

            Authority Information Access: 
                CA Issuers - URI:http://crt.comodoca.com/COMODORSAAddTrustCA.crt
                OCSP - URI:http://ocsp.comodoca.com

    Signature Algorithm: sha384WithRSAEncryption
         02:3f:02:39:c3:ee:f8:ca:3b:89:de:0c:6d:4d:b1:f1:4e:92:
         4f:af:c2:38:2c:04:cc:c5:63:11:ab:09:63:af:ab:a2:d7:02:
         3f:cc:6f:19:c3:3d:d6:1a:08:94:ff:25:d8:a9:88:a7:2b:10:
         1a:e0:9b:b1:07:22:1a:51:1c:3a:d4:e1:e9:09:bf:e6:24:74:
         af:1e:7b:16:31:6e:23:ef:54:51:2d:52:02:e2:75:08:05:4c:
         f1:b7:51:e1:51:00:c6:87:f6:6c:ee:10:44:76:57:6a:f1:df:
         58:6b:21:aa:49:d4:7c:37:4e:bd:ff:b6:75:54:40:18:36:57:
         67:11:cd:4f:02:e4:fe:f3:da:fc:75:17:db:ec:b7:f7:65:09:
         23:49:1f:43:57:83:ea:7e:20:77:61:c8:4d:f2:bb:65:4d:a8:
         f7:85:45:07:af:7a:69:27:65:90:29:40:8b:df:7b:3a:51:39:
         8c:a8:1f:70:79:ad:6d:42:20:a2:cf:0c:6c:03:8c:4c:cd:73:
         07:94:e7:5a:8e:3a:04:ba:a2:a1:7c:1f:cb:63:3a:15:a7:d4:
         15:1b:a7:52:47:32:a9:f4:bf:64:47:d1:aa:1f:53:4e:32:30:
         73:c2:6f:b7:78:82:9d:5c:ff:46:bb:6b:22:1d:88:0b:f8:1b:
         aa:34:a6:fc:8c:f5:dd:7f:65:8c:8c:31:57:31:d0:36:ec:47:
         a1:cf:cb:8b:a8:ef:1c:18:58:c5:06:77:ca:4b:9b:51:af:4c:
         08:4a:7a:8f:e2:a3:52:e2:8e:8e:cc:26:e4:b2:d8:e5:38:c2:
         a8:ed:c6:81:9c:35:6b:a9:58:61:4a:0a:97:b4:4b:42:b6:55:
         9d:be:99:e7:70:6d:59:f8:6d:2a:0c:7f:19:60:5f:0c:9a:88:
         6c:30:ac:52:09:90:16:1b:ff:2b:9d:db:d0:20:ca:89:ea:28:
         7e:32:8e:19:df:7b:48:33:1e:d7:65:f8:ae:c9:f8:83:14:93:
         76:7d:64:d0:8e:ce:be:35:7d:ff:72:31:4d:9f:9e:bd:1e:6c:
         2f:a8:8f:0c:06:50:fb:8c:27:b3:76:c9:f4:e6:d7:c3:34:e2:
         8c:87:21:86:61:fe:bf:55:74:e1:21:77:03:0a:68:6c:bb:e4:
         c9:a9:e6:cf:59:25:eb:7c:ec:45:0e:79:66:68:e8:22:cd:b8:
         ef:98:85:4d:96:11:3c:09:8a:d0:7f:bc:28:28:13:fb:6a:ca:
         54:8d:92:5c:cd:c2:65:98:06:9e:ce:48:5b:d4:b5:37:93:46:
         41:7c:07:dd:cf:fa:43:ef:ba:67:61:ff:7d:49:e0:bb:30:7d:
         5c:80:e3:e6:16:39:4b:a7

pkcs7-signedData

SHA1: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15
- :

SHA1

65 18 f8 8c 1b 58 9f c4 b6 78 a8 eb a6 d2 13 7b |e....X...x.....{| 7f c4 b2 71 |...q |

Certificates

Certificate #0
- 2
  - 16:88:F0:39:25:5E:63:8E:69:14:39:07:E6:33:0B
  - RSA-SHA1: nil
  - Issuer
    - C: US
    - ST: UT
    - L: Salt Lake City
    - O: The USERTRUST Network
    - OU: http://www.usertrust.com
    - CN: UTN-USERFirst-Object
  - 2015-12-31 00:00:00 UTC: 2019-07-09 18:40:36 UTC
  - Subject
    - C: GB
    - ST: Greater Manchester
    - L: Salford
    - O: COMODO CA Limited
    - CN: COMODO SHA-1 Time Stamping Signer
  - #5
    - rsaEncryption: nil
    - E9:E9:3D:DF:D7:37:08:C9:1E:38:B2:52:53:42:6D:22:
      F1:B1:C4:06:04:6B:9E:FD:82:74:50:43:7D:C6:A0:BB:
      1F:4E:F9:02:71:26:B1:EF:43:D8:83:8C:48:FC:E7:0F:
      97:7A:9A:EB:9C:DE:A6:A3:0E:3B:1C:44:18:75:8E:78:
      A5:17:69:FE:49:18:A4:E2:BB:5C:4E:FE:8E:2A:54:7A:
      50:F0:D5:F6:CC:91:E7:99:79:D7:DE:79:94:D7:96:33:
      FE:0E:83:BE:22:BF:63:16:2C:A3:DD:28:1B:AF:3D:AB:
      EA:97:D2:F1:BF:04:10:E7:3D:48:45:FD:1F:68:65:C1:
      7F:59:99:69:C0:22:31:0C:62:6E:A7:5C:65:01:21:B0:
      63:C4:22:18:27:EE:E6:FC:D2:00:3D:47:2E:A8:B8:86:
      56:5D:04:DC:13:17:25:6E:1C:DF:44:0F:15:CD:B7:DB:
      A5:57:76:42:6F:00:68:82:99:D2:E3:C1:DE:F0:8B:94:
      57:4C:EC:08:90:22:21:CE:22:2B:98:0C:42:E6:42:93:
      94:98:93:EF:FD:06:D9:3F:BC:5B:9B:54:3C:20:B1:EE:
      6A:D6:47:7A:C5:AB:80:E9:30:9A:DE:F1:A4:3F:55:4D:
      0A:09:34:8A:75:29:D2:69:AD:97:0F:50:BF:F8:CA:09: 0x010001
  - #6
    - authorityKeyIdentifier:
```
da ed 64 74 14 9c 14 3c  ab dd 99 a9 bd 5b 28 4d  |..dt...<.....[(M|
8b 3c c9 d8                                       |.<..            |
```
    - subjectKeyIdentifier:
```
8e 6b 2d 33 6b f4 33 a7  93 b3 13 9a a5 e0 0a f7  |.k-3k.3.........|
12 35 6a 88                                       |.5j.            |
```
    - keyUsage: true, 0xc0
    - basicConstraints
      - true
      - nil
    - extendedKeyUsage: true, timeStamping
    - crlDistributionPoints: http://crl.usertrust.com/UTN-USERFirst-Object.crl
    - authorityInfoAccess
      - OCSP: http://ocsp.usertrust.com
- RSA-SHA1:
```
ba 33 24 40 40 8c 7c db  58 9f b3 60 98 b2 f5 c0  |.3$@@.|.X..`....|
31 fe eb 1f 6e 50 f6 0a  e0 e4 e6 81 ad 26 87 a2  |1...nP.......&..|
df fd b3 da f4 73 f3 00  fb 29 1b 89 1b 15 3e db  |.....s...)....>.|
6b 52 93 2b c4 ac 39 81  d7 3c 67 57 9a 39 36 e0  |kR.+..9....'......|
16 04 48 41 3d 5c d8 ec  9f 4d 20 31 04 d9 65 a1  |..HA=\...M 1..e.|
ed cd 69 07 53 16 3d dd  36 02 0a 88 eb 40 e5 06  |..i.S.=.6....@..|
30 0b b8 16 4b dc ef bc  55 09 ff c6 3e 12 2e 76  |0...K...U...>..v|
b3 dc ce 42 ef f9 76 57  e1 b7 0a 05 40 98 58 9a  |...B..vW....@.X.|
5d 71 16 93 71 8c 65 81  ea 6f f3 89 f7 fb 73 ad  |]q..q.e..o....s.|
b4 e7 bf d9 8e 6f aa 0b  4f 25 f3 b8 e1 d5 dd 75  |.....o..O%.....u|
98 68 81 f8 aa c0 d1 80  c2 c4 c4 39 89 c1 f6 c9  |.h.........9....|
9e 6c d7 74 f9 d9 97 f8  4f c2 9a 0a cd 5e 8f f8  |.l.t....O....^..|
19 e9 e0 a5 9f c4 f0 92  21 e6 2d 79 25 c9 22 f9  |........!.-y%.".|
c3 f0 3a 84 57 ad 3a 16  f4 63 94 10 1d 5d d0 c6  |..:.W.:..c...]..|
```
Certificate #1
- 2
  - 6E:66:B3:A9:22:13:97:74:0C:16:74:25:B2:FA:E0:D2
  - RSA-SHA256: nil
  - Issuer
    - C: GB
    - ST: Greater Manchester
    - L: Salford
    - O: COMODO CA Limited
    - CN: COMODO RSA Code Signing CA
  - 2016-02-17 00:00:00 UTC: 2018-07-11 23:59:59 UTC
  - Subject
    - C: RU
    - postalCode: 410012
    - ST: Saratov
    - L: Saratov
    - street: PO Box 375
    - O: Vadim Belov
    - CN: Vadim Belov
  - #5
    - rsaEncryption: nil
    - E8:30:63:C9:75:3D:E5:44:48:AD:DB:59:89:84:D0:8F:
      0B:25:2F:15:10:67:AA:EF:A3:E8:57:B8:DD:4D:F0:A4:
      69:94:C8:A7:A0:19:F4:95:EE:8C:9E:F5:BB:E0:C9:50:
      6A:D2:EC:6F:D7:CC:6B:7B:E3:95:7A:9C:AD:93:BA:9F:
      50:5A:54:3D:CE:6F:FF:65:F1:E6:F5:CF:8B:90:08:14:
      FB:1E:2F:AC:A9:72:B9:68:01:DA:6E:D2:D7:FE:DF:E9:
      98:42:81:20:E8:30:47:AD:0A:95:D6:C3:32:F8:D4:7A:
      06:66:41:DC:2A:47:69:5E:C4:C1:E7:9B:86:DC:E3:35:
      EE:0A:D2:26:3B:94:F2:5C:73:11:05:5E:32:C5:18:6F:
      7E:F5:82:57:72:D0:8C:1F:FE:21:FB:5F:91:09:BB:09:
      9F:73:1B:5B:DF:33:75:C1:71:D4:16:A1:69:95:1A:1B:
      CA:19:A3:C9:1D:DB:76:06:50:15:4D:F5:0C:DA:A7:81:
      AE:13:EF:F7:80:6E:FD:C7:FA:62:BE:8D:2B:09:E2:3E:
      48:A4:AE:13:A0:CD:69:8F:5D:7D:E5:8D:1E:C6:82:6B:
      45:8D:96:07:78:31:93:4F:2F:A8:83:5C:1C:3C:5E:A9:
      C8:DB:33:00:C2:81:1E:EF:8D:14:80:EE:4E:96:6B:CD: 0x010001
  - #6
    - authorityKeyIdentifier:
```
29 91 60 ff 8a 4d fa eb  f9 a6 6a b8 cf f9 e6 4b  |).`..M....j....K|
bd 49 ce 12                                       |.I..            |
```
    - subjectKeyIdentifier:
```
b5 75 c6 87 6d 58 16 bd  4c 9f 81 f4 c1 93 73 51  |.u..mX..L.....sQ|
48 e8 ed d1                                       |H...            |
```
    - keyUsage: true, 0x80
    - basicConstraints
      - true
      - nil
    - extendedKeyUsage: codeSigning
    - nsCertType: 0x10
    - certificatePolicies
      - 1.3.6.1.4.1.6449.1.2.1.3.2
        id-qt-cps: https://secure.comodo.net/CPS
    - crlDistributionPoints: http://crl.comodoca.com/COMODORSACodeSigningCA.crl
    - authorityInfoAccess
      - #0
        caIssuers: http://crt.comodoca.com/COMODORSACodeSigningCA.crt
        OCSP: http://ocsp.comodoca.com
- RSA-SHA256:
```
69 27 b4 44 2d d4 3e fe  91 71 e8 68 7c 2a 1f 02  |i'.D-.>..q.h|*..|
7d ca b0 22 91 ff 19 d8  4e 7b 6e 2d 2c d2 f9 32  |}.."....N{n-,..2|
0e cd f3 47 76 39 27 bf  7e fb 0b 2f 2a 60 73 4e  |...Gv9'.~../*`sN|
11 68 8b 92 3b 9f b2 58  49 42 b4 c8 74 4a 24 ee  |.h..;..XIB..tJ$.|
c3 ee a5 e2 54 b8 df 48  c1 ac 49 98 2d 40 51 95  |....T..H..I.-@Q.|
b8 14 46 6f 78 fc 4d f2  b2 7d 96 d5 84 9f 9a 92  |..Fox.M..}......|
a0 49 ef 2d 37 0c 0e 5b  bc 09 8c 86 b2 85 23 3f  |.I.-7..[......#?|
8d d4 48 ba ba 1f be a8  6a 35 48 37 e7 af b1 9a  |..H.....j5H7....|
3d 8c 83 bc 39 03 52 4f  f9 33 45 9d db 54 7a ce  |=...9.RO.3E..Tz.|
c9 45 18 f6 70 5e 91 49  9f 3c 42 6e 27 96 c4 0f  |.E..p^.I.
```

Certificate #2

2
- 2E:7C:87:CC:0E:93:4A:52:FE:94:FD:1C:B7:CD:34:AF
- RSA-SHA384: nil
- Issuer
  - C: GB
  - ST: Greater Manchester
  - L: Salford
  - O: COMODO CA Limited
  - CN: COMODO RSA Certification Authority
- 2013-05-09 00:00:00 UTC: 2028-05-08 23:59:59 UTC
- Subject
  - C: GB
  - ST: Greater Manchester
  - L: Salford
  - O: COMODO CA Limited
  - CN: COMODO RSA Code Signing CA
- #5
  - rsaEncryption: nil
  - A6:98:90:63:77:91:34:7F:8A:D1:DD:E9:67:31:11:EB:
    CC:1E:FD:31:1D:B3:B9:62:57:3F:93:BC:5B:E3:9F:1E:
    24:32:11:27:6B:BC:51:91:A7:CF:9E:9E:25:B3:5F:81:
    A8:18:0F:1D:1E:20:30:0E:FB:61:7B:86:09:B3:E3:FD:
    A2:68:9D:1C:2C:9D:BF:72:E3:E4:75:A0:E5:35:23:8E:
    C9:8A:EE:1A:0C:64:C7:D8:42:A1:7B:B5:52:03:4B:3A:
    B0:8E:23:4B:4B:63:E0:22:94:37:7B:D5:79:90:0A:14:
    18:51:2C:E6:FE:C1:12:F0:1C:3F:61:61:0A:8C:A2:DC:
    F6:C3:30:AA:CD:28:18:75:48:C1:79:5A:08:CD:BB:8C:
    55:8C:F7:D4:76:90:3A:33:46:50:73:98:5C:F4:85:4A:
    6B:0F:80:DD:5E:D6:BD:FD:A9:2F:C0:25:F5:F9:78:D7:
    8D:5F:10:C2:44:55:3C:90:3C:31:46:CB:70:AE:07:A9:
    0A:E3:AF:C1:01:6F:90:1A:23:E2:5F:38:DB:C6:08:5D:
    47:B3:83:41:F0:2E:00:37:14:B9:12:AA:79:92:52:CD:
    87:0F:7B:D8:62:29:A4:7E:30:BD:1B:B5:8C:72:B4:48:
    F2:E3:E8:21:F9:5E:4C:62:79:8B:02:06:9F:7F:D5:0B: 0x010001
- #6
  - authorityKeyIdentifier:
```
bb af 7e 02 3d fa a6 f1  3c 84 8e ad ee 38 98 ec  |..~.=...<....8..|
d9 32 32 d4                                       |.22.            |
```
  - subjectKeyIdentifier:
```
29 91 60 ff 8a 4d fa eb  f9 a6 6a b8 cf f9 e6 4b  |).`..M....j....K|
bd 49 ce 12                                       |.I..            |
```
  - keyUsage: true, 0x86
  - basicConstraints
    - true
    - true: 0
  - extendedKeyUsage: codeSigning
  - certificatePolicies: anyPolicy
  - crlDistributionPoints: http://crl.comodoca.com/COMODORSACertificationAuthority.crl
  - authorityInfoAccess
    - #0
      - caIssuers: http://crt.comodoca.com/COMODORSAAddTrustCA.crt
      - OCSP: http://ocsp.comodoca.com

RSA-SHA384:

02 3f 02 39 c3 ee f8 ca  3b 89 de 0c 6d 4d b1 f1  |.?.9....;...mM..|
4e 92 4f af c2 38 2c 04  cc c5 63 11 ab 09 63 af  |N.O..8,...c...c.|
ab a2 d7 02 3f cc 6f 19  c3 3d d6 1a 08 94 ff 25  |....?.o..=.....%|
d8 a9 88 a7 2b 10 1a e0  9b b1 07 22 1a 51 1c 3a  |....+......".Q.:|
d4 e1 e9 09 bf e6 24 74  af 1e 7b 16 31 6e 23 ef  |......$t..{.1n#.|
54 51 2d 52 02 e2 75 08  05 4c f1 b7 51 e1 51 00  |TQ-R..u..L..Q.Q.|
c6 87 f6 6c ee 10 44 76  57 6a f1 df 58 6b 21 aa  |...l..DvWj..Xk!.|
49 d4 7c 37 4e bd ff b6  75 54 40 18 36 57 67 11  |I.|7N...uT@.6Wg.|
cd 4f 02 e4 fe f3 da fc  75 17 db ec b7 f7 65 09  |.O......u.....e.|
23 49 1f 43 57 83 ea 7e  20 77 61 c8 4d f2 bb 65  |#I.CW..~ wa.M..e|
4d a8 f7 85 45 07 af 7a  69 27 65 90 29 40 8b df  |M...E..zi'e.)@..|
7b 3a 51 39 8c a8 1f 70  79 ad 6d 42 20 a2 cf 0c  |{:Q9...py.mB ...|
6c 03 8c 4c cd 73 07 94  e7 5a 8e 3a 04 ba a2 a1  |l..L.s...Z.:....|
7c 1f cb 63 3a 15 a7 d4  15 1b a7 52 47 32 a9 f4  ||..c:......RG2..|
bf 64 47 d1 aa 1f 53 4e  32 30 73 c2 6f b7 78 82  |.dG...SN20s.o.x.|
9d 5c ff 46 bb 6b 22 1d  88 0b f8 1b aa 34 a6 fc  |.\.F.k"......4..|
8c f5 dd 7f 65 8c 8c 31  57 31 d0 36 ec 47 a1 cf  |....e..1W1.6.G..|
cb 8b a8 ef 1c 18 58 c5  06 77 ca 4b 9b 51 af 4c  |......X..w.K.Q.L|
08 4a 7a 8f e2 a3 52 e2  8e 8e cc 26 e4 b2 d8 e5  |.Jz...R....&....|
38 c2 a8 ed c6 81 9c 35  6b a9 58 61 4a 0a 97 b4  |8......5k.XaJ...|
4b 42 b6 55 9d be 99 e7  70 6d 59 f8 6d 2a 0c 7f  |KB.U....pmY.m*..|
19 60 5f 0c 9a 88 6c 30  ac 52 09 90 16 1b ff 2b  |.`_...l0.R.....+|
9d db d0 20 ca 89 ea 28  7e 32 8e 19 df 7b 48 33  |... ...(~2...{H3|
1e d7 65 f8 ae c9 f8 83  14 93 76 7d 64 d0 8e ce  |..e.......v}d...|
be 35 7d ff 72 31 4d 9f  9e bd 1e 6c 2f a8 8f 0c  |.5}.r1M....l/...|
06 50 fb 8c 27 b3 76 c9  f4 e6 d7 c3 34 e2 8c 87  |.P..'.v.....4...|
21 86 61 fe bf 55 74 e1  21 77 03 0a 68 6c bb e4  |!.a..Ut.!w..hl..|
c9 a9 e6 cf 59 25 eb 7c  ec 45 0e 79 66 68 e8 22  |....Y%.|.E.yfh."|
cd b8 ef 98 85 4d 96 11  3c 09 8a d0 7f bc 28 28  |.....M..<.....((|
13 fb 6a ca 54 8d 92 5c  cd c2 65 98 06 9e ce 48  |..j.T..\..e....H|
5b d4 b5 37 93 46 41 7c  07 dd cf fa 43 ef ba 67  |[..7.FA|....C..g|
61 ff 7d 49 e0 bb 30 7d  5c 80 e3 e6 16 39 4b a7  |a.}I..0}\....9K.|

Signer

1
unnamed
- #0
  - C: GB
  - ST: Greater Manchester
  - L: Salford
  - O: COMODO CA Limited
  - CN: COMODO RSA Code Signing CA
- 6E:66:B3:A9:22:13:97:74:0C:16:74:25:B2:FA:E0:D2
SHA1: nil

1.3.6.1.4.1.311.2.1.12
- nil
contentType: 1.3.6.1.4.1.311.2.1.4
1.3.6.1.4.1.311.2.1.11: msCodeInd

messageDigest:

ce 28 ea 41 3e 9f 5a a2  89 c5 e8 cd 47 e6 88 fc  |.(.A>.Z.....G...|
58 42 28 a7                                       |XB(.            |

rsaEncryption:

44 a2 48 b7 39 fe 50 fa  7c e8 ae f3 e0 98 1a 72  |D.H.9.P.|......r|
36 b8 4c 03 69 96 8c cc  43 46 ac f9 d9 ea b5 4f  |6.L.i...CF.....O|
99 56 1e 0b 87 84 0d f8  f4 6c 68 68 74 93 c6 76  |.V.......lhht..v|
9a 42 18 52 29 22 c3 35  c3 a3 d9 71 a1 2d b0 f7  |.B.R)".5...q.-..|
d1 b4 58 ee 07 38 50 60  46 2c b8 dd 10 b6 c3 cb  |..X..8P`F,......|
15 ce b1 53 c9 11 8b d1  f1 6e f1 a2 9d 7b f0 fd  |...S.....n...{..|
64 c9 8c 7b d3 e2 f7 8c  c7 d6 ab 79 9c 13 62 04  |d..{.......y..b.|
94 56 73 26 0d 32 a7 06  e9 d9 6a de 47 83 34 51  |.Vs&.2....j.G.4Q|
2b 16 a7 c1 a7 be 49 c8  48 c9 0e 0f ea 68 7d 28  |+.....I.H....h}(|
4a 2d f6 86 d2 01 03 99  f3 c5 4f ad fe ee 5f a3  |J-........O..._.|
53 78 0a 4a 53 1e df 4a  f8 0c 9b c4 fa 6d ba ba  |Sx.JS..J.....m..|
e8 fa 07 1d 1b 77 22 8e  07 67 95 4e 6b 7e 10 ae  |.....w"..g.Nk~..|
55 e3 b8 c7 7f 79 26 ce  88 e4 9c 11 e0 b7 9a bc  |U....y&.........|
88 7e 20 15 06 e3 e1 de  3d c7 da 23 37 61 a8 72  |.~ .....=..#7a.r|
4b 12 7f 0d db 0f df 0b  f2 3c 19 16 18 db a2 77  |K........<.....w|
5a 45 97 93 84 3b 17 5e  b1 27 c2 e1 b7 de 85 1d  |ZE...;.^.'......|

countersignature

unnamed
- #0
  - C: US
  - ST: UT
  - L: Salt Lake City
  - O: The USERTRUST Network
  - OU: http://www.usertrust.com
  - CN: UTN-USERFirst-Object
- 16:88:F0:39:25:5E:63:8E:69:14:39:07:E6:33:0B
SHA1: nil

contentType: pkcs7-data
signingTime: 2016-08-28 11:46:24 UTC

messageDigest:

25 33 a2 4f c0 37 11 90  7e 68 43 c5 40 a5 8a ef  |%3.O.7..~hC.@...|
6f ab bf fe                                       |o...            |

rsaEncryption:

99 26 a2 3a c5 02 4d c2  29 18 50 8f 52 a5 46 aa  |.&.:..M.).P.R.F.|
d8 7a d0 cb 3a 0f 97 f4  2e 3f 46 b6 cb 1c a5 25  |.z..:....?F....%|
ea 45 39 c4 27 7d c5 e8  9c 53 a2 c3 9f 18 db 6c  |.E9.'}...S.....l|
82 22 63 f9 e6 af d0 c9  1f b7 87 eb 5f 7b 72 16  |."c........._{r.|
78 4d e3 35 89 d7 d2 83  ea 02 b1 72 b2 47 41 41  |xM.5.......r.GAA|
c7 d4 ab be ac 10 28 eb  75 c7 bb 44 05 08 ad df  |......(.u..D....|
ab 34 b2 35 94 f8 e8 6a  b6 26 5d 1c 18 74 e8 c4  |.4.5...j.&]..t..|
2b 59 88 2e c0 8a 08 df  0b 60 95 11 b7 a7 c0 86  |+Y.......`......|
67 d8 97 5f 6f 8d de 54  73 cb b8 1b f9 bc 8b db  |g.._o..Ts.......|
d7 51 3d d0 8f 2e d5 e6  c6 53 5e 01 b2 0b 35 0f  |.Q=......S^...5.|
8a 97 92 fb a6 4a e6 fa  7b 71 9a 28 61 dc d8 65  |.....J..{q.(a..e|
87 56 d4 1e c5 3b 47 55  b7 07 46 36 29 06 99 99  |.V...;GU..F6)...|
21 fe cc f5 da 57 10 0a  8e a8 80 d3 6d 51 bb cf  |!....W......mQ..|
f0 af 45 c3 f5 78 28 2c  97 0a 17 e6 2e 1a f6 e4  |..E..x(,........|
f6 27 d4 59 47 36 ce 93  98 f0 3c cc 5a b8 aa d1  |.'.YG6....<.Z...|
67 08 a3 7b 95 b7 6b 62  86 f1 82 80 b5 97 05 b9  |g..{..kb........|

1.3.6.1.4.1.311.2.4.1

pkcs7-signedData

SHA256: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15
- :

SHA256

44 eb c5 60 9d a2 dc ce 7e 5a 68 91 f7 74 36 e3 |D..`....~Zh..t6.| 83 5c 2b 0b 53 b5 c0 20 31 bc 5a 30 70 ea 6c d1 |.\+.S.. 1.Z0p.l.|

Certificates

Certificate #0
- 2
  - 6E:66:B3:A9:22:13:97:74:0C:16:74:25:B2:FA:E0:D2
  - RSA-SHA256: nil
  - Issuer
    - C: GB
    - ST: Greater Manchester
    - L: Salford
    - O: COMODO CA Limited
    - CN: COMODO RSA Code Signing CA
  - 2016-02-17 00:00:00 UTC: 2018-07-11 23:59:59 UTC
  - Subject
    - C: RU
    - postalCode: 410012
    - ST: Saratov
    - L: Saratov
    - street: PO Box 375
    - O: Vadim Belov
    - CN: Vadim Belov
  - #5
    - rsaEncryption: nil
    - E8:30:63:C9:75:3D:E5:44:48:AD:DB:59:89:84:D0:8F:
      0B:25:2F:15:10:67:AA:EF:A3:E8:57:B8:DD:4D:F0:A4:
      69:94:C8:A7:A0:19:F4:95:EE:8C:9E:F5:BB:E0:C9:50:
      6A:D2:EC:6F:D7:CC:6B:7B:E3:95:7A:9C:AD:93:BA:9F:
      50:5A:54:3D:CE:6F:FF:65:F1:E6:F5:CF:8B:90:08:14:
      FB:1E:2F:AC:A9:72:B9:68:01:DA:6E:D2:D7:FE:DF:E9:
      98:42:81:20:E8:30:47:AD:0A:95:D6:C3:32:F8:D4:7A:
      06:66:41:DC:2A:47:69:5E:C4:C1:E7:9B:86:DC:E3:35:
      EE:0A:D2:26:3B:94:F2:5C:73:11:05:5E:32:C5:18:6F:
      7E:F5:82:57:72:D0:8C:1F:FE:21:FB:5F:91:09:BB:09:
      9F:73:1B:5B:DF:33:75:C1:71:D4:16:A1:69:95:1A:1B:
      CA:19:A3:C9:1D:DB:76:06:50:15:4D:F5:0C:DA:A7:81:
      AE:13:EF:F7:80:6E:FD:C7:FA:62:BE:8D:2B:09:E2:3E:
      48:A4:AE:13:A0:CD:69:8F:5D:7D:E5:8D:1E:C6:82:6B:
      45:8D:96:07:78:31:93:4F:2F:A8:83:5C:1C:3C:5E:A9:
      C8:DB:33:00:C2:81:1E:EF:8D:14:80:EE:4E:96:6B:CD: 0x010001
  - #6
    - authorityKeyIdentifier:
```
29 91 60 ff 8a 4d fa eb  f9 a6 6a b8 cf f9 e6 4b  |).`..M....j....K|
bd 49 ce 12                                       |.I..            |
```
    - subjectKeyIdentifier:
```
b5 75 c6 87 6d 58 16 bd  4c 9f 81 f4 c1 93 73 51  |.u..mX..L.....sQ|
48 e8 ed d1                                       |H...            |
```
    - keyUsage: true, 0x80
    - basicConstraints
      - true
      - nil
    - extendedKeyUsage: codeSigning
    - nsCertType: 0x10
    - certificatePolicies
      - 1.3.6.1.4.1.6449.1.2.1.3.2
        id-qt-cps: https://secure.comodo.net/CPS
    - crlDistributionPoints: http://crl.comodoca.com/COMODORSACodeSigningCA.crl
    - authorityInfoAccess
      - #0
        caIssuers: http://crt.comodoca.com/COMODORSACodeSigningCA.crt
        OCSP: http://ocsp.comodoca.com
- RSA-SHA256:
```
69 27 b4 44 2d d4 3e fe  91 71 e8 68 7c 2a 1f 02  |i'.D-.>..q.h|*..|
7d ca b0 22 91 ff 19 d8  4e 7b 6e 2d 2c d2 f9 32  |}.."....N{n-,..2|
0e cd f3 47 76 39 27 bf  7e fb 0b 2f 2a 60 73 4e  |...Gv9'.~../*`sN|
11 68 8b 92 3b 9f b2 58  49 42 b4 c8 74 4a 24 ee  |.h..;..XIB..tJ$.|
c3 ee a5 e2 54 b8 df 48  c1 ac 49 98 2d 40 51 95  |....T..H..I.-@Q.|
b8 14 46 6f 78 fc 4d f2  b2 7d 96 d5 84 9f 9a 92  |..Fox.M..}......|
a0 49 ef 2d 37 0c 0e 5b  bc 09 8c 86 b2 85 23 3f  |.I.-7..[......#?|
8d d4 48 ba ba 1f be a8  6a 35 48 37 e7 af b1 9a  |..H.....j5H7....|
3d 8c 83 bc 39 03 52 4f  f9 33 45 9d db 54 7a ce  |=...9.RO.3E..Tz.|
c9 45 18 f6 70 5e 91 49  9f 3c 42 6e 27 96 c4 0f  |.E..p^.I.
```

Certificate #1

2
- 2E:7C:87:CC:0E:93:4A:52:FE:94:FD:1C:B7:CD:34:AF
- RSA-SHA384: nil
- Issuer
  - C: GB
  - ST: Greater Manchester
  - L: Salford
  - O: COMODO CA Limited
  - CN: COMODO RSA Certification Authority
- 2013-05-09 00:00:00 UTC: 2028-05-08 23:59:59 UTC
- Subject
  - C: GB
  - ST: Greater Manchester
  - L: Salford
  - O: COMODO CA Limited
  - CN: COMODO RSA Code Signing CA
- #5
  - rsaEncryption: nil
  - A6:98:90:63:77:91:34:7F:8A:D1:DD:E9:67:31:11:EB:
    CC:1E:FD:31:1D:B3:B9:62:57:3F:93:BC:5B:E3:9F:1E:
    24:32:11:27:6B:BC:51:91:A7:CF:9E:9E:25:B3:5F:81:
    A8:18:0F:1D:1E:20:30:0E:FB:61:7B:86:09:B3:E3:FD:
    A2:68:9D:1C:2C:9D:BF:72:E3:E4:75:A0:E5:35:23:8E:
    C9:8A:EE:1A:0C:64:C7:D8:42:A1:7B:B5:52:03:4B:3A:
    B0:8E:23:4B:4B:63:E0:22:94:37:7B:D5:79:90:0A:14:
    18:51:2C:E6:FE:C1:12:F0:1C:3F:61:61:0A:8C:A2:DC:
    F6:C3:30:AA:CD:28:18:75:48:C1:79:5A:08:CD:BB:8C:
    55:8C:F7:D4:76:90:3A:33:46:50:73:98:5C:F4:85:4A:
    6B:0F:80:DD:5E:D6:BD:FD:A9:2F:C0:25:F5:F9:78:D7:
    8D:5F:10:C2:44:55:3C:90:3C:31:46:CB:70:AE:07:A9:
    0A:E3:AF:C1:01:6F:90:1A:23:E2:5F:38:DB:C6:08:5D:
    47:B3:83:41:F0:2E:00:37:14:B9:12:AA:79:92:52:CD:
    87:0F:7B:D8:62:29:A4:7E:30:BD:1B:B5:8C:72:B4:48:
    F2:E3:E8:21:F9:5E:4C:62:79:8B:02:06:9F:7F:D5:0B: 0x010001
- #6
  - authorityKeyIdentifier:
```
bb af 7e 02 3d fa a6 f1  3c 84 8e ad ee 38 98 ec  |..~.=...<....8..|
d9 32 32 d4                                       |.22.            |
```
  - subjectKeyIdentifier:
```
29 91 60 ff 8a 4d fa eb  f9 a6 6a b8 cf f9 e6 4b  |).`..M....j....K|
bd 49 ce 12                                       |.I..            |
```
  - keyUsage: true, 0x86
  - basicConstraints
    - true
    - true: 0
  - extendedKeyUsage: codeSigning
  - certificatePolicies: anyPolicy
  - crlDistributionPoints: http://crl.comodoca.com/COMODORSACertificationAuthority.crl
  - authorityInfoAccess
    - #0
      - caIssuers: http://crt.comodoca.com/COMODORSAAddTrustCA.crt
      - OCSP: http://ocsp.comodoca.com

RSA-SHA384:

02 3f 02 39 c3 ee f8 ca  3b 89 de 0c 6d 4d b1 f1  |.?.9....;...mM..|
4e 92 4f af c2 38 2c 04  cc c5 63 11 ab 09 63 af  |N.O..8,...c...c.|
ab a2 d7 02 3f cc 6f 19  c3 3d d6 1a 08 94 ff 25  |....?.o..=.....%|
d8 a9 88 a7 2b 10 1a e0  9b b1 07 22 1a 51 1c 3a  |....+......".Q.:|
d4 e1 e9 09 bf e6 24 74  af 1e 7b 16 31 6e 23 ef  |......$t..{.1n#.|
54 51 2d 52 02 e2 75 08  05 4c f1 b7 51 e1 51 00  |TQ-R..u..L..Q.Q.|
c6 87 f6 6c ee 10 44 76  57 6a f1 df 58 6b 21 aa  |...l..DvWj..Xk!.|
49 d4 7c 37 4e bd ff b6  75 54 40 18 36 57 67 11  |I.|7N...uT@.6Wg.|
cd 4f 02 e4 fe f3 da fc  75 17 db ec b7 f7 65 09  |.O......u.....e.|
23 49 1f 43 57 83 ea 7e  20 77 61 c8 4d f2 bb 65  |#I.CW..~ wa.M..e|
4d a8 f7 85 45 07 af 7a  69 27 65 90 29 40 8b df  |M...E..zi'e.)@..|
7b 3a 51 39 8c a8 1f 70  79 ad 6d 42 20 a2 cf 0c  |{:Q9...py.mB ...|
6c 03 8c 4c cd 73 07 94  e7 5a 8e 3a 04 ba a2 a1  |l..L.s...Z.:....|
7c 1f cb 63 3a 15 a7 d4  15 1b a7 52 47 32 a9 f4  ||..c:......RG2..|
bf 64 47 d1 aa 1f 53 4e  32 30 73 c2 6f b7 78 82  |.dG...SN20s.o.x.|
9d 5c ff 46 bb 6b 22 1d  88 0b f8 1b aa 34 a6 fc  |.\.F.k"......4..|
8c f5 dd 7f 65 8c 8c 31  57 31 d0 36 ec 47 a1 cf  |....e..1W1.6.G..|
cb 8b a8 ef 1c 18 58 c5  06 77 ca 4b 9b 51 af 4c  |......X..w.K.Q.L|
08 4a 7a 8f e2 a3 52 e2  8e 8e cc 26 e4 b2 d8 e5  |.Jz...R....&....|
38 c2 a8 ed c6 81 9c 35  6b a9 58 61 4a 0a 97 b4  |8......5k.XaJ...|
4b 42 b6 55 9d be 99 e7  70 6d 59 f8 6d 2a 0c 7f  |KB.U....pmY.m*..|
19 60 5f 0c 9a 88 6c 30  ac 52 09 90 16 1b ff 2b  |.`_...l0.R.....+|
9d db d0 20 ca 89 ea 28  7e 32 8e 19 df 7b 48 33  |... ...(~2...{H3|
1e d7 65 f8 ae c9 f8 83  14 93 76 7d 64 d0 8e ce  |..e.......v}d...|
be 35 7d ff 72 31 4d 9f  9e bd 1e 6c 2f a8 8f 0c  |.5}.r1M....l/...|
06 50 fb 8c 27 b3 76 c9  f4 e6 d7 c3 34 e2 8c 87  |.P..'.v.....4...|
21 86 61 fe bf 55 74 e1  21 77 03 0a 68 6c bb e4  |!.a..Ut.!w..hl..|
c9 a9 e6 cf 59 25 eb 7c  ec 45 0e 79 66 68 e8 22  |....Y%.|.E.yfh."|
cd b8 ef 98 85 4d 96 11  3c 09 8a d0 7f bc 28 28  |.....M..<.....((|
13 fb 6a ca 54 8d 92 5c  cd c2 65 98 06 9e ce 48  |..j.T..\..e....H|
5b d4 b5 37 93 46 41 7c  07 dd cf fa 43 ef ba 67  |[..7.FA|....C..g|
61 ff 7d 49 e0 bb 30 7d  5c 80 e3 e6 16 39 4b a7  |a.}I..0}\....9K.|

Signer

1
unnamed
- #0
  - C: GB
  - ST: Greater Manchester
  - L: Salford
  - O: COMODO CA Limited
  - CN: COMODO RSA Code Signing CA
- 6E:66:B3:A9:22:13:97:74:0C:16:74:25:B2:FA:E0:D2
SHA256: nil

1.3.6.1.4.1.311.2.1.12
- nil
1.2.840.113549.1.9.25.4: 1
contentType: 1.3.6.1.4.1.311.2.1.4
1.3.6.1.4.1.311.2.1.11: msCodeInd

messageDigest:

1d 3c 80 98 a4 46 51 14  bd 0b 57 7f cb 85 9e 74  |.<...FQ...W....t|
08 2b 3a 32 e3 af d2 2d  c2 ce b0 5c 05 6b 90 63  |.+:2...-...\.k.c|

rsaEncryption:

59 97 eb e3 91 cb 35 a1  b5 91 f6 12 03 76 71 c9  |Y.....5......vq.|
e4 3c 15 40 b2 95 63 88  30 aa 56 f2 bb 85 53 e2  |.<.@..c.0.V...S.|
c7 f6 e0 f7 9c 1d 87 1a  eb 5c 7e 7f af c8 c1 7a  |.........\~....z|
32 58 6e a7 15 0a 22 d9  1e 38 94 c7 a4 e9 b4 15  |2Xn..."..8......|
9b f6 57 c2 a6 21 7c e5  93 b4 0e 33 ce b7 fa 6a  |..W..!|....3...j|
93 68 3a b4 10 30 2d 27  ae 57 7a d4 fd 85 e0 12  |.h:..0-'.Wz.....|
7e 4d 4a c0 0b 80 0e 2d  a9 97 dc 37 4c 3a 2b d6  |~MJ....-...7L:+.|
cb 3b ab 92 70 a0 1e c2  e2 94 f9 be db e2 34 d7  |.;..p.........4.|
e6 14 bb f2 76 48 ce d8  c8 5e bf 5e bc 2b 93 32  |....vH...^.^.+.2|
d3 b6 92 b0 11 7c 85 59  d1 c4 82 fa 08 ed c6 07  |.....|.Y........|
74 59 51 33 53 90 55 5f  06 33 18 9c 52 e8 ba 41  |tYQ3S.U_.3..R..A|
fa e2 83 71 7a a5 eb c5  a3 bc 1e f6 58 ba e7 3f  |...qz.......X..?|
f7 f1 d3 3b 32 36 08 7d  e7 b4 6d 12 15 f0 16 f8  |...;26.}..m.....|
e1 bd 4e de e3 c2 ee 71  c1 0c bd 4b d3 d1 db ba  |..N....q...K....|
7a 84 ad fc d3 af 4a 6c  8e 39 c8 f5 a0 c8 70 db  |z.....Jl.9....p.|
f7 de db b8 18 47 43 ce  3b 72 34 32 6c ca 48 92  |.....GC.;r42l.H.|

1.3.6.1.4.1.311.3.3.1

pkcs7-signedData

SHA256: nil
id-smime-ct-TSTInfo
- 1
  - 1.3.6.1.4.1.4146.2.3
  - SHA256
    - 52 a2 67 a3 dd a6 d4 3f 94 f0 fe 71 15 4e f8 d5 |R.g....?...q.N..| 70 57 e3 8d eb 65 bb 34 ab 4c 8d 5f 8f a4 af ef |pW...e.4.L._....|
  - 60:6E:E1:DA:5A:68:0A:7D:C9:26:D0:FD:24:83:62:99:
    D7:E3:BC:21
  - 2016-08-28 11:46:25 UTC
  - Subject
    - C: SG
    - O: GMO GlobalSign Pte Ltd
    - CN: GlobalSign TSA for Advanced - G2

unnamed

Certificate #0

2
- 11:21:06:F1:0F:CE:68:F0:9B:FA:E5:5B:18:CD:8F:20:
  01:77
- RSA-SHA256: nil
- Issuer
  - C: BE
  - O: GlobalSign nv-sa
  - CN: GlobalSign Timestamping CA - SHA256 - G2
- 2016-05-24 00:00:00 UTC: 2027-06-24 00:00:00 UTC
- Subject
  - C: SG
  - O: GMO GlobalSign Pte Ltd
  - CN: GlobalSign TSA for Advanced - G2
- #5
  - rsaEncryption: nil
  - B7:C7:92:8A:28:D8:F3:91:CB:50:0D:5D:EB:29:44:C1:
    82:59:A5:CA:64:CE:BD:83:B5:51:E5:94:CC:6E:80:9A:
    17:6C:DC:FF:62:E6:36:43:5E:01:C2:0C:64:8D:CA:77:
    9E:F6:5D:77:45:B9:5E:C8:24:EB:41:37:11:66:37:AC:
    C8:CD:74:9B:CC:B3:EF:4C:E2:7F:1B:CE:73:BE:C9:96:
    9D:35:1E:7C:F7:54:F7:6C:EC:A0:12:D6:AE:99:9D:63:
    C4:78:5F:59:A9:2E:22:F5:C3:27:D8:B2:5B:45:63:27:
    90:FF:8C:B1:3D:A9:B4:F3:0E:C0:F1:20:65:06:89:9D:
    03:1C:A3:B0:52:41:85:34:EB:BC:CB:CE:54:F6:12:FE:
    B3:01:89:4A:A6:FA:54:C5:1F:FB:D3:1C:C0:E3:BF:97:
    E3:3F:D0:1B:F9:40:C7:1B:D5:EB:26:7C:43:30:C7:70:
    F2:78:11:AA:85:4E:A5:0E:0D:00:4A:3A:11:77:A3:CA:
    23:01:80:9E:C8:93:56:5D:46:CC:8A:D8:D2:AA:0A:84:
    85:B2:89:5B:D5:32:CE:41:7B:18:4E:54:CA:AB:D1:52:
    5E:12:D3:24:9E:56:F3:0C:8F:DD:BD:92:8E:79:D5:41:
    89:C3:A3:A0:E5:91:FC:C7:67:9D:87:33:CE:71:32:73: 0x010001
- #6
  - keyUsage: true, 0x80
  - certificatePolicies
    - 1.3.6.1.4.1.4146.1.30
      - id-qt-cps: https://www.globalsign.com/repository/
  - basicConstraints
    - nil
  - extendedKeyUsage: true, timeStamping
  - crlDistributionPoints: http://crl.globalsign.com/gs/gstimestampingsha2g2.crl
  - authorityInfoAccess
    - caIssuers: http://secure.globalsign.com/cacert/gstimestampingsha2g2.crt
  - subjectKeyIdentifier:
```
2d 6e 6e d1 8d e5 03 80  ee e7 63 e9 a7 d9 da 0b  |-nn.......c.....|
3c 57 22 3d                                       |authorityKeyIdentifier: 92 21 a7 4a 95 5d 64 b0  9b b4 1e e6 00 37 47 e6  |.!.J.]d......7G.|
9d 41 2b 4c                                       |.A+L            |
```

RSA-SHA256:

57 9d 53 e4 dd ee a5 2c  de e4 bf 62 80 a2 61 86  |W.S....,...b..a.|
4a 9f 9b 9d 24 23 30 9b  8f 27 87 2f fa 04 59 ce  |J...$#0..'./..Y.|
70 88 3d 46 52 77 c4 9b  45 d2 8f bd b7 21 18 49  |p.=FRw..E....!.I|
d8 2e 87 ff 92 2e 77 f9  3f 0a f9 a0 21 5c 13 4f  |......w.?...!\.O|
e4 84 2b 28 87 cc 5c 15  b9 13 ab e2 12 55 c3 f8  |..+(..\......U..|
45 1e 49 19 ce aa 75 0f  21 e8 ef 51 fc 34 2c 0b  |E.I...u.!..Q.4,.|
32 05 09 b2 e4 16 69 ad  d9 2e 7e e1 fc 2d 48 bf  |2.....i...~..-H.|
1a d3 74 35 01 3a df 30  43 70 67 7a 38 d7 ba 11  |..t5.:.0Cpgz8...|
c2 56 fb 31 48 ba 5b f1  21 12 62 e0 76 89 91 1f  |.V.1H.[.!.b.v...|
49 38 d4 58 4d 79 09 8a  a9 da 6f 02 d6 ad e4 da  |I8.XMy....o.....|
89 7d 4c d9 b1 30 70 40  6a db 45 ba 53 76 90 dc  |.}L..0p@j.E.Sv..|
4b 42 16 21 cf e4 d2 58  94 d4 55 65 9b 76 03 ac  |KB.!...X..Ue.v..|
ae 18 08 b6 83 12 8c 41  3e 5f 80 45 64 c8 89 d4  |.......A>_.Ed...|
33 17 a1 a1 4c bd 3f c4  92 fe 7f 85 f2 be b1 ac  |3...L.?.........|
d7 f6 9e cb ce 13 2a ee  02 43 4f fc ff 70 35 34  |......*..CO..p54|
a3 33 7c cf e2 0d 32 24  20 7c 00 3e a3 32 11 de  |.3|...2$ |.>.2..|

2
- 04:00:00:00:00:01:31:89:C6:50:04
- RSA-SHA256: nil
- #2
  - OU: GlobalSign Root CA - R3
  - O: GlobalSign
  - CN: GlobalSign
- 2011-08-02 10:00:00 UTC: 2029-03-29 10:00:00 UTC
- Subject
  - C: BE
  - O: GlobalSign nv-sa
  - CN: GlobalSign Timestamping CA - SHA256 - G2
- #5
  - rsaEncryption: nil
  - AA:9B:8E:C3:AB:11:51:25:01:B6:96:94:E2:4F:D8:C1:
    08:F6:46:23:D9:45:C5:95:97:5B:AB:1A:BF:D2:6C:57:
    C9:33:06:1F:A0:0F:C6:3C:7E:53:48:7A:BF:9D:87:9E:
    AF:EE:C3:8C:47:E1:42:EC:E3:E3:A1:4A:6C:0C:17:C4:
    A6:C1:B9:CD:5B:F1:1E:44:89:8E:FE:0B:DE:21:58:13:
    EE:4D:C8:C5:67:0B:1C:B2:B3:F1:34:76:91:A2:CB:07:
    6D:37:C5:A0:47:26:02:15:A4:90:91:A9:79:9E:D7:EB:
    57:9D:2B:7C:22:D8:14:D7:F1:07:1E:78:22:36:6B:77:
    79:AF:AF:F9:7F:8E:4E:E1:B5:08:31:FD:EA:ED:4B:71:
    62:8C:23:F1:03:39:8F:44:79:B6:76:03:57:9E:AD:2F:
    08:46:DC:D2:8C:BC:F4:8E:74:CE:C8:68:69:51:76:11:
    8B:0F:5D:24:5B:19:54:3D:26:CC:40:8D:82:27:1B:59:
    20:7D:59:F6:93:80:8E:F8:2A:38:FD:6B:A0:40:65:1F:
    57:76:CC:5B:8E:04:4F:2C:A8:DB:84:50:13:4F:C6:DC:
    8B:B9:F8:DD:69:4C:88:EB:9C:7B:30:26:FC:7A:58:BB:
    59:BC:14:72:92:81:57:B7:76:C9:D8:80:0A:80:6E:09: 0x010001
- #6
  - keyUsage: true, 6
  - basicConstraints
    - true
    - true: 0
  - subjectKeyIdentifier:
```
92 21 a7 4a 95 5d 64 b0  9b b4 1e e6 00 37 47 e6  |.!.J.]d......7G.|
9d 41 2b 4c                                       |.A+L            |
```
  - certificatePolicies
    - anyPolicy
      - id-qt-cps: https://www.globalsign.com/repository/
  - crlDistributionPoints: http://crl.globalsign.net/root-r3.crl
  - authorityKeyIdentifier:
```
8f f0 4b 7f a8 2e 45 24  ae 4d 50 fa 63 9a 8b de  |..K...E$.MP.c...|
e2 dd 1b bc                                       |....            |
```

RSA-SHA256:

04 56 82 4a 7c d0 ce c9  bf 36 66 d1 be 35 9e 93  |.V.J|....6f..5..|
6c 97 e8 06 ce 31 18 59  f9 6c 41 5f 80 2e c0 42  |l....1.Y.lA_...B|
25 b8 18 c7 fc d4 b1 37  c4 68 a0 cf 28 6a 03 74  |%......7.h..(j.t|
4b 63 97 85 77 61 3b d7  2f e3 f5 bd 33 a2 92 7d  |Kc..wa;./...3..}|
11 1f 9e 8a 6c ef 2c b0  f4 62 8d 36 73 d1 16 36  |....l.,..b.6s..6|
f1 bc 5e ec b4 80 98 78  fc d2 76 79 e8 e1 21 94  |..^....x..vy..!.|
e0 1f c4 a2 e1 aa 67 db  b3 9c 73 e5 40 22 cf 39  |......g...s.@".9|
ce db e6 77 95 a7 bb b2  cb f6 19 86 9d 9f c8 d4  |...w............|
98 05 b2 71 6f 4e 75 ae  f1 3d 64 6a 3b 5e 4e 46  |...qoNu..=dj;^NF|
a6 2a 5d 08 92 f1 a3 f3  1d 74 bf 62 0d 23 8c 5c  |.*]......t.b.#.\|
2a 38 95 d2 c0 d5 cd cf  88 da 1f 28 b5 ba 81 69  |*8.........(...i|
64 2a b5 a6 a2 d5 73 af  dc 46 db 04 ae 91 d7 6e  |d*....s..F.....n|
c5 98 ba d4 47 c4 56 74  80 47 78 58 8c be ef 2b  |....G.Vt.GxX...+|
fd ec 6c bf d1 94 f7 bf  50 e0 7b e0 90 fd 20 18  |..l.....P.{... .|
78 18 22 5d 08 2e 8c 1c  a0 97 f3 1d 99 7d a3 9d  |x."].........}..|
91 d3 06 44 4e 04 6e 7a  1c 20 e3 36 f0 b6 50 b9  |...DN.nz. .6..P.|

unnamed
- #0
  - C: BE
  - O: GlobalSign nv-sa
  - CN: GlobalSign Timestamping CA - SHA256 - G2
- 11:21:06:F1:0F:CE:68:F0:9B:FA:E5:5B:18:CD:8F:20:
  01:77
SHA256: nil

contentType: id-smime-ct-TSTInfo
signingTime: 2016-08-28 11:46:25 UTC

messageDigest:

8c a5 76 bc f3 6a 00 f1  09 32 98 fa bd 82 a2 1b  |..v..j...2......|
40 6e b2 ae ee 90 25 d7  56 2b 40 21 ae 08 d3 2d  |@n....%.V+@!...-|

id-smime-aa-signingCertificate
- 7d 55 d8 e7 5a 56 a2 fc 73 82 43 f7 b8 54 87 5c |}U..ZV..s.C..T.\| 5c b5 2a 0d |\.*. |
  - unnamed
    - #0
      - C: BE
      - O: GlobalSign nv-sa
      - CN: GlobalSign Timestamping CA - SHA256 - G2
    - 11:21:06:F1:0F:CE:68:F0:9B:FA:E5:5B:18:CD:8F:20:
      01:77

rsaEncryption:

7d cb 5b c7 b4 e3 8c f0  43 68 bf 12 48 34 dc db  |}.[.....Ch..H4..|
85 32 62 49 be d3 9d e2  3d ad a9 a2 4b 80 79 f6  |.2bI....=...K.y.|
62 60 7b 74 4a 04 21 f6  88 e5 7d 11 cc 7c e8 7f  |b`{tJ.!...}..|..|
98 40 84 63 03 e9 7c 87  cb 46 a6 0a 4c a5 8e 91  |.@.c..|..F..L...|
a2 e0 16 f2 2f 06 3c 22  35 92 d1 46 95 ef 82 ad  |..../.<"5..F....|
3c 49 4a 50 8c df cc 20  a1 f7 99 fa 2c 9e f5 b1  |...q0|
b9 25 3c f4 4d fe 53 55  b9 ab d2 43 7c 0f 18 25  |.%<.M.SU...C|..%|
d3 c9 10 50 94 52 7c b2  fb 24 be da 5e ac 00 24  |...P.R|..$..^..$|
67 0f 5a 5c 53 73 a5 fe  b0 5b 4a 33 c3 5d 58 94  |g.Z\Ss...[J3.]X.|
4b 9c 23 97 6e e2 9b 3e  0d 3f cb e0 c3 98 42 31  |K.#.n..>.?....B1|
1c b3 ee 67 dd 4b 9e 90  79 1f f4 f9 d6 f4 f7 25  |...g.K..y......%|
41 c8 47 30 95 8b aa 2d  3e c4 aa 99 a0 8e d1 be  |A.G0...->.......|
63 b8 8f 18 81 35 ce a3  a6 94 f0 92 7c a4 91 ef  |c....5......|...|
ad 88 20 29 3f 97 3b 65  0d 73 e5 b1 15 4d c8 36  |.. )?.;e.s...M.6|
d6 54 55 2b 6d 1d 15 b4  41 fd bc 06 b2 71 20 7c  |.TU+m...A....q ||

show previews

offset	size	type	comment
15c1	15	HTM		#
10980	249856	DLL	12/07/2004 07:24:00	#
55488	32970	PNG	(256 x 256)	#
7d870	52246	BMP	(164 x 312)	#
8a870	29846	BMP	(493 x 58)	#
93870	118784	DLL	04/04/2015 13:03:33	#
b1870	113152	DLL	10/05/2007 13:19:08	#
cd870	113152	DLL	10/05/2007 13:19:08	#
16ba350	52246	BMP	(164 x 312)	#
16c7350	29846	BMP	(493 x 58)	#
16d0350	118784	DLL	04/04/2015 13:03:33	#
16ee350	113152	DLL	10/05/2007 13:19:08	#
170a350	113152	DLL	10/05/2007 13:19:08	#
173e350	52246	BMP	(164 x 312)	#
174b350	29846	BMP	(493 x 58)	#
1754350	118784	DLL	04/04/2015 13:03:33	#
1772350	113152	DLL	10/05/2007 13:19:08	#
178e350	113152	DLL	10/05/2007 13:19:08	#
17c2350	52246	BMP	(164 x 312)	#
17cf350	29846	BMP	(493 x 58)	#
17d8350	118784	DLL	04/04/2015 13:03:33	#
17f6350	113152	DLL	10/05/2007 13:19:08	#
1812350	113152	DLL	10/05/2007 13:19:08	#
1846350	52246	BMP	(164 x 312)	#
1853350	29846	BMP	(493 x 58)	#
185c350	118784	DLL	04/04/2015 13:03:33	#
187a350	113152	DLL	10/05/2007 13:19:08	#
1896350	113152	DLL	10/05/2007 13:19:08	#
18ca350	52246	BMP	(164 x 312)	#
18d7350	29846	BMP	(493 x 58)	#
18e0350	118784	DLL	04/04/2015 13:03:33	#
18fe350	113152	DLL	10/05/2007 13:19:08	#
191a350	113152	DLL	10/05/2007 13:19:08	#
194e350	52246	BMP	(164 x 312)	#
195b350	29846	BMP	(493 x 58)	#
1987350	113152	DLL	10/05/2007 13:19:08	#
19a3350	113152	DLL	10/05/2007 13:19:08	#
30e0008	52246	BMP	(164 x 312)	#
30ed008	29846	BMP	(493 x 58)	#
3119008	113152	DLL	10/05/2007 13:19:08	#
3135008	113152	DLL	10/05/2007 13:19:08	#
3169008	52246	BMP	(164 x 312)	#
3176008	29846	BMP	(493 x 58)	#
31a2008	113152	DLL	10/05/2007 13:19:08	#
31be008	113152	DLL	10/05/2007 13:19:08	#
31f2008	52246	BMP	(164 x 312)	#
31ff008	29846	BMP	(493 x 58)	#
322b008	113152	DLL	10/05/2007 13:19:08	#
3247008	113152	DLL	10/05/2007 13:19:08	#
327b008	52246	BMP	(164 x 312)	#
3288008	29846	BMP	(493 x 58)	#
32b4008	113152	DLL	10/05/2007 13:19:08	#
32d0008	113152	DLL	10/05/2007 13:19:08	#
3304008	52246	BMP	(164 x 312)	#
3311008	29846	BMP	(493 x 58)	#
333d008	113152	DLL	10/05/2007 13:19:08	#
3359008	113152	DLL	10/05/2007 13:19:08	#
3374a08	21808	BIN	overlay data past EOF	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] ignoring invalid PEdump::BITMAPINFOHEADER

advscheduler.exe- msitoexe.exe - Advanced Task Scheduler

MZ Header

Rich Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 040904E2

VS_FIXEDFILEINFO

Signers (1)

Certificates (3)

advscheduler.exe
- msitoexe.exe - Advanced Task Scheduler