filenamedwprot.sys
size385208 (0x5e0b8)
md5c2e26b11980081be703d5b245b042ac8
typePE32+ executable (native) x86-64, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf0

Rich Header

lib idversiontimes used
128507271
10197
123507277
125507273
131307292
109507273
149307292
1373072929
148307291
145307291

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x8664
NumberOfSections9
TimeDateStamp0x531076e0
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xf0
Characteristics0x22
Magic0x20b
LinkerVersion9.0
SizeOfCode0x4b800
SizeOfInitializedData0x11800
SizeOfUninitializedData0
AddressOfEntryPoint0x5f9fc
BaseOfCode0x1000
ImageBase0x10000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion6.1
ImageVersion6.1
SubsystemVersion6.0
Reserved10
SizeOfImage0x64000
SizeOfHeaders0x400
CheckSum0x60d1e
Subsystem1
DllCharacteristics0x80
SizeOfStackReserve0x40000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ 6.0 - 8.0

Sections

namevavsizeraw sizeflags
.text0x10000x39a50x3a00R-X CODE
NONPAGED0x50000x500f0x5200R-X CODE
.rdata0xb0000x355c0x3600R-- IDATA
.data0xf0000xb41b0xa400RW- IDATA
.pdata0x1b0000x20c40x2200R-- IDATA
PAGE0x1e0000x3c1820x3c200R-X CODE
INIT0x5b0000x69c80x6a00RWX CODE DISCARDABLE
.rsrc0x620000x4680x600R-- IDATA DISCARDABLE
.reloc0x630000x3240x400R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0x6022c0x50
RESOURCE0x620000x468
EXCEPTION0x1b0000x20c4
SECURITY0x5c2000x1eb8
BASERELOC0x630000x98
DEBUG0xb6000x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0xb0000x5f0
Delay_IAT00
CLR_Header00
typenamesizecp
MESSAGETABLE#11760
VERSION#17920
module_namehintordfunction_name
ntoskrnl.exe133ExFreePoolWithTag
ntoskrnl.exe347FsRtlRegisterFileSystemFilterCallbacks
ntoskrnl.exe631IoWMIWriteEvent
ntoskrnl.exe702KeInitializeMutex
ntoskrnl.exe510IoGetRequestorProcess
ntoskrnl.exe937NtBuildNumber
ntoskrnl.exe1326RtlInitUnicodeString
ntoskrnl.exe461IoDeleteDevice
ntoskrnl.exe868MmGetSystemRoutineAddress
ntoskrnl.exe1411RtlQueryRegistryValues
ntoskrnl.exe1788ZwSetValueKey
ntoskrnl.exe806KeUnstackDetachProcess
ntoskrnl.exe756KeReleaseMutex
ntoskrnl.exe1295RtlFreeUnicodeString
ntoskrnl.exe1649ZwClose
ntoskrnl.exe639IofCompleteRequest
ntoskrnl.exe812KeWaitForSingleObject
ntoskrnl.exe1144PsInitialSystemProcess
ntoskrnl.exe1221RtlCompareMemory
ntoskrnl.exe450IoCreateSymbolicLink
ntoskrnl.exe440IoCreateDevice
ntoskrnl.exe1671ZwDeleteKey
ntoskrnl.exe796KeStackAttachProcess
ntoskrnl.exe638IofCallDriver
ntoskrnl.exe1706ZwOpenKey
ntoskrnl.exe138ExGetPreviousMode
ntoskrnl.exe492IoGetCurrentProcess
ntoskrnl.exe515IoGetTopLevelIrp
ntoskrnl.exe163ExQueueWorkItem
ntoskrnl.exe604IoThreadToProcess
ntoskrnl.exe1082ProbeForRead
ntoskrnl.exe174ExReleaseFastMutex
ntoskrnl.exe141ExInitializeNPagedLookasideList
ntoskrnl.exe90ExAcquireFastMutex
ntoskrnl.exe1342RtlIntegerToUnicodeString
ntoskrnl.exe781KeSetEvent
ntoskrnl.exe1083ProbeForWrite
ntoskrnl.exe1160PsReferencePrimaryToken
ntoskrnl.exe217ExpInterlockedPushEntrySList
ntoskrnl.exe698KeInitializeEvent
ntoskrnl.exe523IoIs32bitProcess
ntoskrnl.exe216ExpInterlockedPopEntrySList
ntoskrnl.exe1272RtlEqualUnicodeString
ntoskrnl.exe115ExDeletePagedLookasideList
ntoskrnl.exe885MmMapLockedPagesSpecifyCache
ntoskrnl.exe496IoGetDeviceObjectPointer
ntoskrnl.exe1078PoStartNextPowerIrp
ntoskrnl.exe609IoUnregisterPlugPlayNotification
ntoskrnl.exe161ExQueryDepthSList
ntoskrnl.exe1059PoCallDriver
ntoskrnl.exe116ExDeleteResourceLite
ntoskrnl.exe1099PsGetCurrentProcessId
ntoskrnl.exe142ExInitializePagedLookasideList
ntoskrnl.exe1051ObfDereferenceObject
ntoskrnl.exe144ExInitializeResourceLite
ntoskrnl.exe1475RtlUpcaseUnicodeChar
ntoskrnl.exe608IoUnregisterFsRegistrationChange
ntoskrnl.exe1121PsGetProcessId
ntoskrnl.exe114ExDeleteNPagedLookasideList
ntoskrnl.exe553IoRegisterFsRegistrationChange
ntoskrnl.exe1249RtlDelete
ntoskrnl.exe1254RtlDeleteNoSplay
ntoskrnl.exe360FsRtlRemovePerStreamContext
ntoskrnl.exe291FsRtlInsertPerStreamContext
ntoskrnl.exe313FsRtlLookupPerStreamContextInternal
ntoskrnl.exe1491RtlVolumeDeviceToDosName
ntoskrnl.exe486IoGetAttachedDevice
ntoskrnl.exe464IoDetachDevice
ntoskrnl.exe674KeDelayExecutionThread
ntoskrnl.exe1052ObfReferenceObject
ntoskrnl.exe1205RtlAppendUnicodeToString
ntoskrnl.exe476IoFileObjectType
ntoskrnl.exe1729ZwQueryDirectoryFile
ntoskrnl.exe1204RtlAppendUnicodeStringToString
ntoskrnl.exe594IoSetTopLevelIrp
ntoskrnl.exe1041ObReferenceObjectByHandle
ntoskrnl.exe481IoFreeIrp
ntoskrnl.exe405IoAllocateIrp
ntoskrnl.exe1237RtlCopyUnicodeString
ntoskrnl.exe1038ObOpenObjectByPointer
ntoskrnl.exe463IoDeleteSymbolicLink
ntoskrnl.exe445IoCreateFileSpecifyDeviceObjectHint
ntoskrnl.exe1704ZwOpenFile
ntoskrnl.exe420IoBuildSynchronousFsdRequest
ntoskrnl.exe92ExAcquireResourceExclusiveLite
ntoskrnl.exe1157PsProcessType
ntoskrnl.exe633IoWriteErrorLogEntry
ntoskrnl.exe721KeLeaveCriticalRegion
ntoskrnl.exe1238RtlCreateAcl
ntoskrnl.exe1154PsLookupProcessByProcessId
ntoskrnl.exe1826_wcsnicmp
ntoskrnl.exe1754ZwReadFile
ntoskrnl.exe1432RtlSetDaclSecurityDescriptor
ntoskrnl.exe1697ZwMapViewOfSection
ntoskrnl.exe1234RtlCopySid
ntoskrnl.exe1750ZwQuerySystemInformation
ntoskrnl.exe404IoAllocateErrorLogEntry
ntoskrnl.exe1193RtlAddAccessAllowedAce
ntoskrnl.exe680KeEnterCriticalRegion
ntoskrnl.exe1436RtlSetSaclSecurityDescriptor
ntoskrnl.exe1796ZwUnmapViewOfSection
ntoskrnl.exe93ExAcquireResourceSharedLite
ntoskrnl.exe1686ZwFreeVirtualMemory
ntoskrnl.exe1781ZwSetInformationProcess
ntoskrnl.exe180ExReleaseResourceLite
ntoskrnl.exe1406RtlPrefixUnicodeString
ntoskrnl.exe1681ZwEnumerateValueKey
ntoskrnl.exe1784ZwSetSecurityObject
ntoskrnl.exe1189PsThreadType
ntoskrnl.exe1528SeExports
ntoskrnl.exe1737ZwQueryInformationProcess
ntoskrnl.exe1104PsGetCurrentThreadId
ntoskrnl.exe1663ZwCreateSection
ntoskrnl.exe1321RtlImageNtHeader
ntoskrnl.exe1735ZwQueryInformationFile
ntoskrnl.exe527IoIsSystemThread
ntoskrnl.exe1156PsLookupThreadByThreadId
ntoskrnl.exe1133PsGetProcessWow64Process
ntoskrnl.exe1679ZwEnumerateKey
ntoskrnl.exe1373RtlLengthSid
ntoskrnl.exe1242RtlCreateSecurityDescriptor
ntoskrnl.exe1628ZwAllocateVirtualMemory
ntoskrnl.exe395InitSafeBootMode
ntoskrnl.exe1043ObReferenceObjectByPointer
ntoskrnl.exe1703ZwOpenEvent
ntoskrnl.exe1303RtlGetElementGenericTable
ntoskrnl.exe1179PsSetLoadImageNotifyRoutine
ntoskrnl.exe1811_snwprintf
ntoskrnl.exe694KeInitializeApc
ntoskrnl.exe712KeInsertQueueApc
ntoskrnl.exe1252RtlDeleteElementGenericTable
ntoskrnl.exe1173PsSetCreateProcessNotifyRoutine
ntoskrnl.exe923MmUserProbeAddress
ntoskrnl.exe1377RtlLookupElementGenericTable
ntoskrnl.exe1164PsRemoveLoadImageNotifyRoutine
ntoskrnl.exe1224RtlCompareUnicodeString
ntoskrnl.exe255FsRtlDissectName
ntoskrnl.exe800KeTestAlertThread
ntoskrnl.exe1363RtlIsGenericTableEmpty
ntoskrnl.exe1329RtlInitializeGenericTable
ntoskrnl.exe1334RtlInsertElementGenericTable
ntoskrnl.exe1812_stricmp
ntoskrnl.exe418IoBuildDeviceIoControlRequest
ntoskrnl.exe1037ObOpenObjectByName
ntoskrnl.exe1320RtlImageDirectoryEntryToData
ntoskrnl.exe117ExDesktopObjectType
ntoskrnl.exe1042ObReferenceObjectByName
ntoskrnl.exe905MmSectionObjectType
ntoskrnl.exe759KeReleaseSpinLock
ntoskrnl.exe661KeAcquireSpinLockRaiseToDpc
ntoskrnl.exe670KeBugCheckEx
ntoskrnl.exe1660ZwCreateKey
ntoskrnl.exe626IoWMIRegistrationControl
ntoskrnl.exe1442RtlStringFromGUID
ntoskrnl.exe109ExAllocatePoolWithTag
ntoskrnl.exe872MmIsAddressValid
ntoskrnl.exe911MmSystemRangeStart
ntoskrnl.exe1201RtlAnsiStringToUnicodeString
ntoskrnl.exe1203RtlAppendStringToString
ntoskrnl.exe1749ZwQuerySymbolicLinkObject
ntoskrnl.exe1365RtlIsNameLegalDOS8Dot3
ntoskrnl.exe1853strchr
ntoskrnl.exe1322RtlInitAnsiString
ntoskrnl.exe1325RtlInitString
ntoskrnl.exe825LpcPortObjectType
ntoskrnl.exe1713ZwOpenSymbolicLinkObject
ntoskrnl.exe1701ZwOpenDirectoryObject
ntoskrnl.exe1039ObQueryNameString
ntoskrnl.exe470IoDriverObjectType
ntoskrnl.exe1751ZwQueryValueKey
ntoskrnl.exe1730ZwQueryDirectoryObject
ntoskrnl.exe415IoAttachDeviceToDeviceStack
ntoskrnl.exe1747ZwQuerySection
ntoskrnl.exe725KeNumberProcessors
ntoskrnl.exe876MmIsNonPagedSystemAddressValid
ntoskrnl.exe1712ZwOpenSection
ntoskrnl.exe1744ZwQueryKey
ntoskrnl.exe1546SeQueryInformationToken
ntoskrnl.exe1545SeQueryAuthenticationIdToken
ntoskrnl.exe557IoReleaseCancelSpinLock
ntoskrnl.exe514IoGetStackLimits
ntoskrnl.exe1801__C_specific_handler
HAL.dll46HalRequestSoftwareInterrupt
HAL.dll74KeQueryPerformanceCounter
TDI.SYS42TdiMapUserRequest
TDI.SYS38TdiDeregisterPnPHandlers
TDI.SYS52TdiRegisterPnPHandlers

StringTable 000004B0

CompanyNameDoctor Web, Ltd.
FileDescriptionDr.Web Protection for Windows
FileVersion9.1.0.02280
InternalNamedwprot.sys
LegalCopyrightCopyright Doctor Web, Ltd., 1992-2014
OriginalFilenamedwprot.sys
ProductNameDr.Web Anti-Virus
ProductVersion9.1.0

VS_FIXEDFILEINFO

FileVersion9.1.0.2280
ProductVersion9.1.0.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags8
FileOS0x40004
FileType3
FileSubtype7

Signers (1)

issuer: /C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa (c)10/CN=VeriSign Class 3 Code Signing 2010 CA
serial: 33769228D3F9ECCED66039B90199AC5D

Certificates (5)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
        Validity
            Not Before: Dec 21 00:00:00 2012 GMT
            Not After : Dec 30 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:b3:49:54:4b:97:1c:12:0a:d8:25:79:91:
                    22:57:2a:6f:dc:b8:26:c4:43:73:6b:c2:bf:2e:50:
                    5a:fb:14:c2:76:8e:43:01:25:43:b4:a1:e2:45:f4:
                    e8:b7:7b:c3:74:cc:22:d7:b4:94:00:02:f7:4d:ed:
                    bf:b4:b7:44:24:6b:cd:5f:45:3b:d1:44:ce:43:12:
                    73:17:82:8b:69:b4:2b:cb:99:1e:ac:72:1b:26:4d:
                    71:1f:b1:31:dd:fb:51:61:02:53:a6:aa:f5:49:2c:
                    05:78:45:a5:2f:89:ce:e7:99:e7:fe:8c:e2:57:3f:
                    3d:c6:92:dc:4a:f8:7b:33:e4:79:0a:fb:f0:75:88:
                    41:9c:ff:c5:03:51:99:aa:d7:6c:9f:93:69:87:65:
                    29:83:85:c2:60:14:c4:c8:c9:3b:14:da:c0:81:f0:
                    1f:0d:74:de:92:22:ab:ca:f7:fb:74:7c:27:e6:f7:
                    4a:1b:7f:a7:c3:9e:2d:ae:8a:ea:a6:e6:aa:27:16:
                    7d:61:f7:98:71:11:bc:e2:50:a1:4b:e5:5d:fa:e5:
                    0e:a7:2c:9f:aa:65:20:d3:d8:96:e8:c8:7c:a5:4e:
                    48:44:ff:19:e2:44:07:92:0b:d7:68:84:80:5d:6a:
                    78:64:45:cd:60:46:7e:54:c1:13:7c:c5:79:f1:c9:
                    c1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD
            Authority Information Access: 
                OCSP - URI:http://ocsp.thawte.com

            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.thawte.com/ThawteTimestampingCA.crl

            X509v3 Extended Key Usage: 
                Time Stamping
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-1
    Signature Algorithm: sha1WithRSAEncryption
         03:09:9b:8f:79:ef:7f:59:30:aa:ef:68:b5:fa:e3:09:1d:bb:
         4f:82:06:5d:37:5f:a6:52:9f:16:8d:ea:1c:92:09:44:6e:f5:
         6d:eb:58:7c:30:e8:f9:69:8d:23:73:0b:12:6f:47:a9:ae:39:
         11:f8:2a:b1:9b:b0:1a:c3:8e:eb:59:96:00:ad:ce:0c:4d:b2:
         d0:31:a6:08:5c:2a:7a:fc:e2:7a:1d:57:4c:a8:65:18:e9:79:
         40:62:25:96:6e:c7:c7:37:6a:83:21:08:8e:41:ea:dd:d9:57:
         3f:1d:77:49:87:2a:16:06:5e:a6:38:6a:22:12:a3:51:19:83:
         7e:b6
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Validity
            Not Before: Oct 18 00:00:00 2012 GMT
            Not After : Dec 29 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer - G4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:63:0b:39:44:b8:bb:23:a7:44:49:bb:0e:ff:
                    a1:f0:61:0a:53:93:b0:98:db:ad:2c:0f:4a:c5:6e:
                    ff:86:3c:53:55:0f:15:ce:04:3f:2b:fd:a9:96:96:
                    d9:be:61:79:0b:5b:c9:4c:86:76:e5:e0:43:4b:22:
                    95:ee:c2:2b:43:c1:9f:d8:68:b4:8e:40:4f:ee:85:
                    38:b9:11:c5:23:f2:64:58:f0:15:32:6f:4e:57:a1:
                    ae:88:a4:02:d7:2a:1e:cd:4b:e1:dd:63:d5:17:89:
                    32:5b:b0:5e:99:5a:a8:9d:28:50:0e:17:ee:96:db:
                    61:3b:45:51:1d:cf:12:56:0b:92:47:fc:ab:ae:f6:
                    66:3d:47:ac:70:72:e7:92:e7:5f:cd:10:b9:c4:83:
                    64:94:19:bd:25:80:e1:e8:d2:22:a5:d0:ba:02:7a:
                    a1:77:93:5b:65:c3:ee:17:74:bc:41:86:2a:dc:08:
                    4c:8c:92:8c:91:2d:9e:77:44:1f:68:d6:a8:74:77:
                    db:0e:5b:32:8b:56:8b:33:bd:d9:63:c8:49:9d:3a:
                    c5:c5:ea:33:0b:d2:f1:a3:1b:f4:8b:be:d9:b3:57:
                    8b:3b:de:04:a7:7a:22:b2:24:ae:2e:c7:70:c5:be:
                    4e:83:26:08:fb:0b:bd:a9:4f:99:08:e1:10:28:72:
                    aa:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                OCSP - URI:http://ts-ocsp.ws.symantec.com
                CA Issuers - URI:http://ts-aia.ws.symantec.com/tss-ca-g2.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ts-crl.ws.symantec.com/tss-ca-g2.crl

            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-2
            X509v3 Subject Key Identifier: 
                46:C6:69:A3:0E:4A:14:1E:D5:4C:DA:52:63:17:3F:5E:36:BC:0D:E6
            X509v3 Authority Key Identifier: 
                keyid:5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD

    Signature Algorithm: sha1WithRSAEncryption
         78:3b:b4:91:2a:00:4c:f0:8f:62:30:37:78:a3:84:27:07:6f:
         18:b2:de:25:dc:a0:d4:94:03:aa:86:4e:25:9f:9a:40:03:1c:
         dd:ce:e3:79:cb:21:68:06:da:b6:32:b4:6d:bf:f4:2c:26:63:
         33:e4:49:64:6d:0d:e6:c3:67:0e:f7:05:a4:35:6c:7c:89:16:
         c6:e9:b2:df:b2:e9:dd:20:c6:71:0f:cd:95:74:dc:b6:5c:de:
         bd:37:1f:43:78:e6:78:b5:cd:28:04:20:a3:aa:f1:4b:c4:88:
         29:91:0e:80:d1:11:fc:dd:5c:76:6e:4f:5e:0e:45:46:41:6e:
         0d:b0:ea:38:9a:b1:3a:da:09:71:10:fc:1c:79:b4:80:7b:ac:
         69:f4:fd:9c:b6:0c:16:2b:f1:7f:5b:09:3d:9b:5b:e2:16:ca:
         13:81:6d:00:2e:38:0d:a8:29:8f:2c:e1:b2:f4:5a:a9:01:af:
         15:9c:2c:2f:49:1b:db:22:bb:c3:fe:78:94:51:c3:86:b1:82:
         88:5d:f0:3d:b4:51:a1:79:33:2b:2e:7b:b9:dc:20:09:13:71:
         eb:6a:19:5b:cf:e8:a5:30:57:2c:89:49:3f:b9:cf:7f:c9:bf:
         3e:22:68:63:53:9a:bd:69:74:ac:c5:1d:3c:7f:92:e0:c3:bc:
         1c:d8:04:75
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:76:92:28:d3:f9:ec:ce:d6:60:39:b9:01:99:ac:5d
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA
        Validity
            Not Before: Aug 29 00:00:00 2011 GMT
            Not After : Oct  6 23:59:59 2014 GMT
        Subject: C=RU, ST=Saint-Petersburg, O=Doctor Web Ltd., OU=Digital ID Class 3 - Microsoft Software Validation v2, CN=Doctor Web Ltd.
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:80:c1:17:12:a1:a2:ba:88:85:47:29:e7:ed:
                    8e:ce:23:db:a5:90:ac:6d:4f:aa:20:52:8b:72:32:
                    11:d9:1b:d2:21:a4:37:64:a6:41:98:95:90:9e:ab:
                    6e:d9:5b:b7:ca:84:ff:a7:47:dd:13:5c:19:50:98:
                    8c:c2:4a:ed:70:9e:3f:a0:c6:9d:90:20:a3:5f:c9:
                    12:6a:d7:5b:68:f9:6e:c0:de:6c:1c:64:f0:e5:d6:
                    73:4d:bf:78:fd:7a:cb:2c:6c:9a:57:66:43:df:42:
                    ee:1d:6d:a9:db:f0:8d:0d:c8:d2:45:73:8f:cb:7e:
                    3d:24:4c:8a:f3:b9:d7:c5:b3:44:30:b7:01:8f:51:
                    37:dc:41:fd:7c:aa:59:27:32:47:c0:1e:c3:9f:94:
                    af:eb:53:32:6f:9d:01:c2:7b:26:67:5e:2d:aa:9d:
                    d3:b9:4e:01:db:56:84:ad:ad:b3:a7:f9:1d:2d:8c:
                    8b:b2:8b:95:89:f0:53:21:4f:44:d3:bd:c8:8c:27:
                    fc:52:7a:85:cb:f9:9e:2e:94:4c:05:e9:c9:f4:c9:
                    0d:1b:66:37:a6:ba:6d:54:f1:12:a4:82:ae:f8:1c:
                    06:7b:c1:73:64:9e:5e:41:92:ec:9e:c9:44:50:a5:
                    2a:78:68:e3:b8:2d:cc:b5:0c:d4:e1:24:4c:7f:b9:
                    fb:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://csc3-2010-crl.verisign.com/CSC3-2010.crl

            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/rpa

            X509v3 Extended Key Usage: 
                Code Signing
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com
                CA Issuers - URI:http://csc3-2010-aia.verisign.com/CSC3-2010.cer

            X509v3 Authority Key Identifier: 
                keyid:CF:99:A9:EA:7B:26:F4:4B:C9:8E:8F:D7:F0:05:26:EF:E3:D2:A7:9D

            Netscape Cert Type: 
                Object Signing
            1.3.6.1.4.1.311.2.1.27: 
                0.......
    Signature Algorithm: sha1WithRSAEncryption
         5b:06:d6:32:dc:ff:90:ee:3b:ca:59:f3:e9:30:38:d0:c9:55:
         a6:4d:00:f1:90:1e:5a:d1:0d:b6:c6:bd:d6:13:43:87:a8:c8:
         08:34:a1:dd:64:7d:1f:ce:32:9f:bc:d5:01:9e:92:c2:79:05:
         cd:99:ad:b9:cf:38:45:d9:41:fc:01:66:56:eb:bf:16:f0:36:
         7b:3f:89:7b:80:9d:a0:3c:2e:53:35:fc:48:5a:b5:06:28:b7:
         79:25:40:4e:94:21:51:68:e2:30:98:c5:06:f7:52:b3:9e:f4:
         19:43:36:b1:a0:a2:0d:c4:e1:63:7e:3e:b3:c9:50:15:75:7b:
         5b:50:46:39:b9:8f:12:be:0f:0e:47:f5:a1:39:37:35:99:3b:
         35:ee:27:b7:f8:54:5e:7d:4d:f5:c3:dc:da:e6:30:2f:a8:c2:
         79:fb:f6:82:d9:44:a0:c6:b1:7d:c1:b5:35:b3:3c:09:38:0a:
         36:79:54:4a:2f:6a:c5:73:b5:ba:7c:e8:b5:c8:a5:be:4f:7a:
         ec:f3:20:62:93:15:81:fa:18:e7:b6:ce:9f:b3:c8:78:ae:0a:
         60:59:52:e7:a6:b2:11:62:05:18:6c:d7:fe:ec:b6:af:b7:b3:
         03:16:dc:a7:fd:1d:6d:25:64:19:c9:2f:67:d9:16:a1:20:cb:
         2a:7f:d5:31
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:19:93:e4:00:00:00:00:00:1c
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Code Verification Root
        Validity
            Not Before: Feb 22 19:25:17 2011 GMT
            Not After : Feb 22 19:35:17 2021 GMT
        Subject: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:24:08:08:29:7a:35:9e:60:0c:aa:e7:4b:3b:
                    4e:dc:7c:bc:3c:45:1c:bb:2b:e0:fe:29:02:f9:57:
                    08:a3:64:85:15:27:f5:f1:ad:c8:31:89:5d:22:e8:
                    2a:aa:a6:42:b3:8f:f8:b9:55:b7:b1:b7:4b:b3:fe:
                    8f:7e:07:57:ec:ef:43:db:66:62:15:61:cf:60:0d:
                    a4:d8:de:f8:e0:c3:62:08:3d:54:13:eb:49:ca:59:
                    54:85:26:e5:2b:8f:1b:9f:eb:f5:a1:91:c2:33:49:
                    d8:43:63:6a:52:4b:d2:8f:e8:70:51:4d:d1:89:69:
                    7b:c7:70:f6:b3:dc:12:74:db:7b:5d:4b:56:d3:96:
                    bf:15:77:a1:b0:f4:a2:25:f2:af:1c:92:67:18:e5:
                    f4:06:04:ef:90:b9:e4:00:e4:dd:3a:b5:19:ff:02:
                    ba:f4:3c:ee:e0:8b:eb:37:8b:ec:f4:d7:ac:f2:f6:
                    f0:3d:af:dd:75:91:33:19:1d:1c:40:cb:74:24:19:
                    21:93:d9:14:fe:ac:2a:52:c7:8f:d5:04:49:e4:8d:
                    63:47:88:3c:69:83:cb:fe:47:bd:2b:7e:4f:c5:95:
                    ae:0e:9d:d4:d1:43:c0:67:73:e3:14:08:7e:e5:3f:
                    9f:73:b8:33:0a:cf:5d:3f:34:87:96:8a:ee:53:e8:
                    25:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: 
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier: 
                7F:D3:65:A7:C2:DD:EC:BB:F0:30:09:F3:43:39:FA:02:AF:33:31:33
            X509v3 Authority Key Identifier: 
                keyid:62:FB:0A:21:5B:7F:43:6E:11:DA:09:54:50:6B:F5:D2:96:71:F1:9E

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/MicrosoftCodeVerifRoot.crl

    Signature Algorithm: sha1WithRSAEncryption
         81:2a:82:16:8c:34:67:2b:e5:03:eb:34:7b:8c:a2:a3:50:8a:
         f4:55:86:f1:1e:8c:8e:ae:7d:ee:03:19:ce:72:95:18:48:ad:
         62:11:fd:20:fd:3f:47:06:01:5a:e2:e0:6f:8c:15:2c:4e:3c:
         6a:50:6c:0b:36:a3:cf:7a:0d:9c:42:bc:5c:f8:19:d5:60:e3:
         69:e6:e2:23:41:67:8c:68:83:76:2b:8f:93:a3:2a:b5:7f:be:
         59:fb:a9:c9:b2:26:8f:ca:a2:f3:82:1b:98:3e:91:95:27:97:
         86:61:ee:5b:5d:07:6b:cd:86:a8:e2:65:80:a8:e2:15:e2:b2:
         be:23:05:6a:ba:0c:f3:47:93:4d:ac:a4:8c:07:79:39:c0:61:
         12:3a:05:0d:89:a3:ec:9f:57:89:84:fb:ec:ca:7c:47:66:14:
         91:d8:b6:0f:19:5d:e6:b8:4a:ac:bc:47:c8:71:43:96:e6:32:
         20:a5:dc:77:86:fd:3c:e3:8b:71:db:7b:9b:03:fc:b7:1d:32:
         64:eb:16:52:a0:43:a3:fa:2e:ad:59:92:4e:7c:c7:f2:33:42:
         48:38:51:3a:7c:38:c7:1b:24:22:28:40:1e:1a:46:1f:17:db:
         18:f7:f0:27:35:6c:b8:63:d9:cd:b9:64:5d:2b:a5:5e:ef:c6:
         29:b4:f2:c7:f8:21:cc:04:ba:57:fd:01:b6:ab:c6:67:f9:e7:
         d3:99:7f:f4:f5:22:fa:72:f5:fd:ff:3a:1c:42:3a:a1:f9:80:
         18:a5:ee:8d:1c:d4:66:9e:45:01:fe:aa:ee:ff:fb:17:8f:30:
         f7:f1:cd:29:c5:9d:ec:b5:d5:49:00:3d:85:b8:cb:bb:93:3a:
         27:6a:49:c0:30:ae:66:c9:f7:23:28:32:76:f9:a4:83:56:c8:
         48:ce:5a:96:aa:a0:cc:0c:c4:7f:b4:8e:97:af:6d:e3:54:27:
         c3:9f:86:c0:d6:e4:73:08:97:05:db:d0:54:62:5e:03:48:c2:
         d5:9f:7f:a7:66:8c:d0:9d:b0:4f:d4:d3:98:5f:4b:7a:c9:7f:
         b2:29:52:d0:12:80:c7:0f:54:b6:1e:67:cd:c6:a0:6c:11:03:
         84:d3:48:75:e7:2a:fe:b0:3b:6e:0a:3a:a6:6b:76:99:05:a3:
         f1:77:68:61:33:14:47:06:fc:53:7f:52:bd:92:14:5c:4a:24:
         6a:67:8c:af:8d:90:aa:d0:f6:79:21:1b:93:26:7c:c3:ce:1e:
         bd:88:38:92:ae:45:c6:19:6a:49:50:b3:05:f8:ae:59:37:8a:
         6a:25:03:94:b1:59:81:50:e8:ba:83:80:b7:23:35:f4:76:b9:
         67:1d:59:18:ad:20:8d:94
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
        Validity
            Not Before: Feb  8 00:00:00 2010 GMT
            Not After : Feb  7 23:59:59 2020 GMT
        Subject: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:23:4b:5e:a5:d7:8a:bb:32:e9:d4:57:f7:ef:
                    e4:c7:26:7e:ad:19:98:fe:a8:9d:7d:94:f6:36:6b:
                    10:d7:75:81:30:7f:04:68:7f:cb:2b:75:1e:cd:1d:
                    08:8c:df:69:94:a7:37:a3:9c:7b:80:e0:99:e1:ee:
                    37:4d:5f:ce:3b:14:ee:86:d4:d0:f5:27:35:bc:25:
                    0b:38:a7:8c:63:9d:17:a3:08:a5:ab:b0:fb:cd:6a:
                    62:82:4c:d5:21:da:1b:d9:f1:e3:84:3b:8a:2a:4f:
                    85:5b:90:01:4f:c9:a7:76:10:7f:27:03:7c:be:ae:
                    7e:7d:c1:dd:f9:05:bc:1b:48:9c:69:e7:c0:a4:3c:
                    3c:41:00:3e:df:96:e5:c5:e4:94:71:d6:55:01:c7:
                    00:26:4a:40:3c:b5:a1:26:a9:0c:a7:6d:80:8e:90:
                    25:7b:cf:bf:3f:1c:eb:2f:96:fa:e5:87:77:c6:b5:
                    56:b2:7a:3b:54:30:53:1b:df:62:34:ff:1e:d1:f4:
                    5a:93:28:85:e5:4c:17:4e:7e:5b:fd:a4:93:99:7f:
                    df:cd:ef:a4:75:ef:ef:15:f6:47:e7:f8:19:72:d8:
                    2e:34:1a:a6:b4:a7:4c:7e:bd:bb:4f:0c:3d:57:f1:
                    30:d6:a6:36:8e:d6:80:76:d7:19:2e:a5:cd:7e:34:
                    2d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/cps
                  User Notice:
                    Explicit Text: https://www.verisign.com/rpa

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            1.3.6.1.5.5.7.1.12: 
                0_.].[0Y0W0U..image/gif0!0.0...+..............k...j.H.,{..0%.#http://logo.verisign.com/vslogo.gif
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.verisign.com/pca3-g5.crl

            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com

            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, Code Signing
            X509v3 Subject Alternative Name: 
                DirName:/CN=VeriSignMPKI-2-8
            X509v3 Subject Key Identifier: 
                CF:99:A9:EA:7B:26:F4:4B:C9:8E:8F:D7:F0:05:26:EF:E3:D2:A7:9D
            X509v3 Authority Key Identifier: 
                keyid:7F:D3:65:A7:C2:DD:EC:BB:F0:30:09:F3:43:39:FA:02:AF:33:31:33

    Signature Algorithm: sha1WithRSAEncryption
         56:22:e6:34:a4:c4:61:cb:48:b9:01:ad:56:a8:64:0f:d9:8c:
         91:c4:bb:cc:0c:e5:ad:7a:a0:22:7f:df:47:38:4a:2d:6c:d1:
         7f:71:1a:7c:ec:70:a9:b1:f0:4f:e4:0f:0c:53:fa:15:5e:fe:
         74:98:49:24:85:81:26:1c:91:14:47:b0:4c:63:8c:bb:a1:34:
         d4:c6:45:e8:0d:85:26:73:03:d0:a9:8c:64:6d:dc:71:92:e6:
         45:05:60:15:59:51:39:fc:58:14:6b:fe:d4:a4:ed:79:6b:08:
         0c:41:72:e7:37:22:06:09:be:23:e9:3f:44:9a:1e:e9:61:9d:
         cc:b1:90:5c:fc:3d:d2:8d:ac:42:3d:65:36:d4:b4:3d:40:28:
         8f:9b:10:cf:23:26:cc:4b:20:cb:90:1f:5d:8c:4c:34:ca:3c:
         d8:e5:37:d6:6f:a5:20:bd:34:eb:26:d9:ae:0d:e7:c5:9a:f7:
         a1:b4:21:91:33:6f:86:e8:58:bb:25:7c:74:0e:58:fe:75:1b:
         63:3f:ce:31:7c:9b:8f:1b:96:9e:c5:53:76:84:5b:9c:ad:91:
         fa:ac:ed:93:ba:5d:c8:21:53:c2:82:53:63:af:12:0d:50:87:
         11:1b:3d:54:52:96:8a:2c:9c:3d:92:1a:08:9a:05:2e:c7:93:
         a5:48:91:d3
pkcs7-signedData
  • 1
    • SHA1: nil
    • 1.3.6.1.4.1.311.2.1.4
      • #0
        • 1.3.6.1.4.1.311.2.1.15
          • : 
            00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |
        • SHA1
          • 64 c2 cf d0 28 31 56 7c  b7 9c 70 78 fe 8c 04 30  |d...(1V|..px...0|
96 a7 57 da                                       |..W.            |
    • Certificates
      • Certificate #0
        • 2
          • 7E:93:EB:FB:7C:C6:4E:59:EA:4B:9A:77:D4:06:FC:3B
          • RSA-SHA1: nil
          • Issuer
            • C: ZA
            • ST: Western Cape
            • L: Durbanville
            • O: Thawte
            • OU: Thawte Certification
            • CN: Thawte Timestamping CA
          • 2012-12-21 00:00:00 UTC: 2020-12-30 23:59:59 UTC
          • Subject
            • C: US
            • O: Symantec Corporation
            • CN: Symantec Time Stamping Services CA - G2
          • #5
            • rsaEncryption: nil
            • B1:AC:B3:49:54:4B:97:1C:12:0A:D8:25:79:91:22:57:
              2A:6F:DC:B8:26:C4:43:73:6B:C2:BF:2E:50:5A:FB:14:
              C2:76:8E:43:01:25:43:B4:A1:E2:45:F4:E8:B7:7B:C3:
              74:CC:22:D7:B4:94:00:02:F7:4D:ED:BF:B4:B7:44:24:
              6B:CD:5F:45:3B:D1:44:CE:43:12:73:17:82:8B:69:B4:
              2B:CB:99:1E:AC:72:1B:26:4D:71:1F:B1:31:DD:FB:51:
              61:02:53:A6:AA:F5:49:2C:05:78:45:A5:2F:89:CE:E7:
              99:E7:FE:8C:E2:57:3F:3D:C6:92:DC:4A:F8:7B:33:E4:
              79:0A:FB:F0:75:88:41:9C:FF:C5:03:51:99:AA:D7:6C:
              9F:93:69:87:65:29:83:85:C2:60:14:C4:C8:C9:3B:14:
              DA:C0:81:F0:1F:0D:74:DE:92:22:AB:CA:F7:FB:74:7C:
              27:E6:F7:4A:1B:7F:A7:C3:9E:2D:AE:8A:EA:A6:E6:AA:
              27:16:7D:61:F7:98:71:11:BC:E2:50:A1:4B:E5:5D:FA:
              E5:0E:A7:2C:9F:AA:65:20:D3:D8:96:E8:C8:7C:A5:4E:
              48:44:FF:19:E2:44:07:92:0B:D7:68:84:80:5D:6A:78:
              64:45:CD:60:46:7E:54:C1:13:7C:C5:79:F1:C9:C1:71              : 0x010001
          • #6
            • subjectKeyIdentifier: 
              5f 9a f5 6e 5c cc cc 74  9a d4 dd 7d ef 3f db ec  |_..n\..t...}.?..|
4c 80 2e dd                                       |L...            |
            • authorityInfoAccess
              • OCSP: http://ocsp.thawte.com
            • basicConstraints
              • true
              • true: 0
            • crlDistributionPoints: http://crl.thawte.com/ThawteTimestampingCA.crl
            • extendedKeyUsage: timeStamping
            • keyUsage: true, 6
            • subjectAltName
              • CN: TimeStamp-2048-1
        • RSA-SHA1: 
          03 09 9b 8f 79 ef 7f 59  30 aa ef 68 b5 fa e3 09  |....y..Y0..h....|
1d bb 4f 82 06 5d 37 5f  a6 52 9f 16 8d ea 1c 92  |..O..]7_.R......|
09 44 6e f5 6d eb 58 7c  30 e8 f9 69 8d 23 73 0b  |.Dn.m.X|0..i.#s.|
12 6f 47 a9 ae 39 11 f8  2a b1 9b b0 1a c3 8e eb  |.oG..9..*.......|
59 96 00 ad ce 0c 4d b2  d0 31 a6 08 5c 2a 7a fc  |Y.....M..1..\*z.|
e2 7a 1d 57 4c a8 65 18  e9 79 40 62 25 96 6e c7  |.z.WL.e..y@b%.n.|
c7 37 6a 83 21 08 8e 41  ea dd d9 57 3f 1d 77 49  |.7j.!..A...W?.wI|
87 2a 16 06 5e a6 38 6a  22 12 a3 51 19 83 7e b6  |.*..^.8j"..Q..~.|
      • Certificate #1
        • 2
          • 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • O: Symantec Corporation
            • CN: Symantec Time Stamping Services CA - G2
          • 2012-10-18 00:00:00 UTC: 2020-12-29 23:59:59 UTC
          • Subject
            • C: US
            • O: Symantec Corporation
            • CN: Symantec Time Stamping Services Signer - G4
          • #5
            • rsaEncryption: nil
            • A2:63:0B:39:44:B8:BB:23:A7:44:49:BB:0E:FF:A1:F0:
              61:0A:53:93:B0:98:DB:AD:2C:0F:4A:C5:6E:FF:86:3C:
              53:55:0F:15:CE:04:3F:2B:FD:A9:96:96:D9:BE:61:79:
              0B:5B:C9:4C:86:76:E5:E0:43:4B:22:95:EE:C2:2B:43:
              C1:9F:D8:68:B4:8E:40:4F:EE:85:38:B9:11:C5:23:F2:
              64:58:F0:15:32:6F:4E:57:A1:AE:88:A4:02:D7:2A:1E:
              CD:4B:E1:DD:63:D5:17:89:32:5B:B0:5E:99:5A:A8:9D:
              28:50:0E:17:EE:96:DB:61:3B:45:51:1D:CF:12:56:0B:
              92:47:FC:AB:AE:F6:66:3D:47:AC:70:72:E7:92:E7:5F:
              CD:10:B9:C4:83:64:94:19:BD:25:80:E1:E8:D2:22:A5:
              D0:BA:02:7A:A1:77:93:5B:65:C3:EE:17:74:BC:41:86:
              2A:DC:08:4C:8C:92:8C:91:2D:9E:77:44:1F:68:D6:A8:
              74:77:DB:0E:5B:32:8B:56:8B:33:BD:D9:63:C8:49:9D:
              3A:C5:C5:EA:33:0B:D2:F1:A3:1B:F4:8B:BE:D9:B3:57:
              8B:3B:DE:04:A7:7A:22:B2:24:AE:2E:C7:70:C5:BE:4E:
              83:26:08:FB:0B:BD:A9:4F:99:08:E1:10:28:72:AA:CD              : 0x010001
          • X509v3 extensions
            • basicConstraints
              • true
              • nil
            • extendedKeyUsage: true, timeStamping
            • keyUsage: true, 0x80
            • authorityInfoAccess
              • #0
                • OCSP: http://ts-ocsp.ws.symantec.com
                • caIssuers: http://ts-aia.ws.symantec.com/tss-ca-g2.cer
            • crlDistributionPoints: http://ts-crl.ws.symantec.com/tss-ca-g2.crl
            • subjectAltName
              • CN: TimeStamp-2048-2
            • subjectKeyIdentifier: 
              46 c6 69 a3 0e 4a 14 1e  d5 4c da 52 63 17 3f 5e  |F.i..J...L.Rc.?^|
36 bc 0d e6                                       |6...            |
            • authorityKeyIdentifier: 
              5f 9a f5 6e 5c cc cc 74  9a d4 dd 7d ef 3f db ec  |_..n\..t...}.?..|
4c 80 2e dd                                       |L...            |
        • RSA-SHA1: 
          78 3b b4 91 2a 00 4c f0  8f 62 30 37 78 a3 84 27  |x;..*.L..b07x..'|
07 6f 18 b2 de 25 dc a0  d4 94 03 aa 86 4e 25 9f  |.o...%.......N%.|
9a 40 03 1c dd ce e3 79  cb 21 68 06 da b6 32 b4  |.@.....y.!h...2.|
6d bf f4 2c 26 63 33 e4  49 64 6d 0d e6 c3 67 0e  |m..,&c3.Idm...g.|
f7 05 a4 35 6c 7c 89 16  c6 e9 b2 df b2 e9 dd 20  |...5l|......... |
c6 71 0f cd 95 74 dc b6  5c de bd 37 1f 43 78 e6  |.q...t..\..7.Cx.|
78 b5 cd 28 04 20 a3 aa  f1 4b c4 88 29 91 0e 80  |x..(. ...K..)...|
d1 11 fc dd 5c 76 6e 4f  5e 0e 45 46 41 6e 0d b0  |....\vnO^.EFAn..|
ea 38 9a b1 3a da 09 71  10 fc 1c 79 b4 80 7b ac  |.8..:..q...y..{.|
69 f4 fd 9c b6 0c 16 2b  f1 7f 5b 09 3d 9b 5b e2  |i......+..[.=.[.|
16 ca 13 81 6d 00 2e 38  0d a8 29 8f 2c e1 b2 f4  |....m..8..).,...|
5a a9 01 af 15 9c 2c 2f  49 1b db 22 bb c3 fe 78  |Z.....,/I.."...x|
94 51 c3 86 b1 82 88 5d  f0 3d b4 51 a1 79 33 2b  |.Q.....].=.Q.y3+|
2e 7b b9 dc 20 09 13 71  eb 6a 19 5b cf e8 a5 30  |.{.. ..q.j.[...0|
57 2c 89 49 3f b9 cf 7f  c9 bf 3e 22 68 63 53 9a  |W,.I?.....>"hcS.|
bd 69 74 ac c5 1d 3c 7f  92 e0 c3 bc 1c d8 04 75  |.it...<........u|
      • Certificate #2
        • 2
          • 33:76:92:28:D3:F9:EC:CE:D6:60:39:B9:01:99:AC:5D
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • O: VeriSign, Inc.
            • OU: VeriSign Trust Network
            • OU: Terms of use at https://www.verisign.com/rpa (c)10
            • CN: VeriSign Class 3 Code Signing 2010 CA
          • 2011-08-29 00:00:00 UTC: 2014-10-06 23:59:59 UTC
          • Subject
            • C: RU
            • ST: Saint-Petersburg
            • O: Doctor Web Ltd.
            • OU: Digital ID Class 3 - Microsoft Software Validation v2
            • CN: Doctor Web Ltd.
          • #5
            • rsaEncryption: nil
            • BD:80:C1:17:12:A1:A2:BA:88:85:47:29:E7:ED:8E:CE:
              23:DB:A5:90:AC:6D:4F:AA:20:52:8B:72:32:11:D9:1B:
              D2:21:A4:37:64:A6:41:98:95:90:9E:AB:6E:D9:5B:B7:
              CA:84:FF:A7:47:DD:13:5C:19:50:98:8C:C2:4A:ED:70:
              9E:3F:A0:C6:9D:90:20:A3:5F:C9:12:6A:D7:5B:68:F9:
              6E:C0:DE:6C:1C:64:F0:E5:D6:73:4D:BF:78:FD:7A:CB:
              2C:6C:9A:57:66:43:DF:42:EE:1D:6D:A9:DB:F0:8D:0D:
              C8:D2:45:73:8F:CB:7E:3D:24:4C:8A:F3:B9:D7:C5:B3:
              44:30:B7:01:8F:51:37:DC:41:FD:7C:AA:59:27:32:47:
              C0:1E:C3:9F:94:AF:EB:53:32:6F:9D:01:C2:7B:26:67:
              5E:2D:AA:9D:D3:B9:4E:01:DB:56:84:AD:AD:B3:A7:F9:
              1D:2D:8C:8B:B2:8B:95:89:F0:53:21:4F:44:D3:BD:C8:
              8C:27:FC:52:7A:85:CB:F9:9E:2E:94:4C:05:E9:C9:F4:
              C9:0D:1B:66:37:A6:BA:6D:54:F1:12:A4:82:AE:F8:1C:
              06:7B:C1:73:64:9E:5E:41:92:EC:9E:C9:44:50:A5:2A:
              78:68:E3:B8:2D:CC:B5:0C:D4:E1:24:4C:7F:B9:FB:F7              : 0x010001
          • X509v3 extensions
            • basicConstraints
              • nil
            • keyUsage: true, 0x80
            • crlDistributionPoints: http://csc3-2010-crl.verisign.com/CSC3-2010.crl
            • certificatePolicies
              • 2.16.840.1.113733.1.7.23.3
                • id-qt-cps: https://www.verisign.com/rpa
            • extendedKeyUsage: codeSigning
            • authorityInfoAccess
              • #0
                • OCSP: http://ocsp.verisign.com
                • caIssuers: http://csc3-2010-aia.verisign.com/CSC3-2010.cer
            • authorityKeyIdentifier: 
              cf 99 a9 ea 7b 26 f4 4b  c9 8e 8f d7 f0 05 26 ef  |....{&.K......&.|
e3 d2 a7 9d                                       |....            |
            • nsCertType: 0x10
            • 1.3.6.1.4.1.311.2.1.27
              • false: true
        • RSA-SHA1: 
          5b 06 d6 32 dc ff 90 ee  3b ca 59 f3 e9 30 38 d0  |[..2....;.Y..08.|
c9 55 a6 4d 00 f1 90 1e  5a d1 0d b6 c6 bd d6 13  |.U.M....Z.......|
43 87 a8 c8 08 34 a1 dd  64 7d 1f ce 32 9f bc d5  |C....4..d}..2...|
01 9e 92 c2 79 05 cd 99  ad b9 cf 38 45 d9 41 fc  |....y......8E.A.|
01 66 56 eb bf 16 f0 36  7b 3f 89 7b 80 9d a0 3c  |.fV....6{?.{...<|
2e 53 35 fc 48 5a b5 06  28 b7 79 25 40 4e 94 21  |.S5.HZ..(.y%@N.!|
51 68 e2 30 98 c5 06 f7  52 b3 9e f4 19 43 36 b1  |Qh.0....R....C6.|
a0 a2 0d c4 e1 63 7e 3e  b3 c9 50 15 75 7b 5b 50  |.....c~>..P.u{[P|
46 39 b9 8f 12 be 0f 0e  47 f5 a1 39 37 35 99 3b  |F9......G..975.;|
35 ee 27 b7 f8 54 5e 7d  4d f5 c3 dc da e6 30 2f  |5.'..T^}M.....0/|
a8 c2 79 fb f6 82 d9 44  a0 c6 b1 7d c1 b5 35 b3  |..y....D...}..5.|
3c 09 38 0a 36 79 54 4a  2f 6a c5 73 b5 ba 7c e8  |<.8.6yTJ/j.s..|.|
b5 c8 a5 be 4f 7a ec f3  20 62 93 15 81 fa 18 e7  |....Oz.. b......|
b6 ce 9f b3 c8 78 ae 0a  60 59 52 e7 a6 b2 11 62  |.....x..`YR....b|
05 18 6c d7 fe ec b6 af  b7 b3 03 16 dc a7 fd 1d  |..l.............|
6d 25 64 19 c9 2f 67 d9  16 a1 20 cb 2a 7f d5 31  |m%d../g... .*..1|
      • Certificate #3
        • 2
          • 61:19:93:E4:00:00:00:00:00:1C
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • ST: Washington
            • L: Redmond
            • O: Microsoft Corporation
            • CN: Microsoft Code Verification Root
          • 2011-02-22 19:25:17 UTC: 2021-02-22 19:35:17 UTC
          • Subject
            • C: US
            • O: VeriSign, Inc.
            • OU: VeriSign Trust Network
            • OU: (c) 2006 VeriSign, Inc. - For authorized use only
            • CN: VeriSign Class 3 Public Primary Certification Authority - G5
          • #5
            • rsaEncryption: nil
            • AF:24:08:08:29:7A:35:9E:60:0C:AA:E7:4B:3B:4E:DC:
              7C:BC:3C:45:1C:BB:2B:E0:FE:29:02:F9:57:08:A3:64:
              85:15:27:F5:F1:AD:C8:31:89:5D:22:E8:2A:AA:A6:42:
              B3:8F:F8:B9:55:B7:B1:B7:4B:B3:FE:8F:7E:07:57:EC:
              EF:43:DB:66:62:15:61:CF:60:0D:A4:D8:DE:F8:E0:C3:
              62:08:3D:54:13:EB:49:CA:59:54:85:26:E5:2B:8F:1B:
              9F:EB:F5:A1:91:C2:33:49:D8:43:63:6A:52:4B:D2:8F:
              E8:70:51:4D:D1:89:69:7B:C7:70:F6:B3:DC:12:74:DB:
              7B:5D:4B:56:D3:96:BF:15:77:A1:B0:F4:A2:25:F2:AF:
              1C:92:67:18:E5:F4:06:04:EF:90:B9:E4:00:E4:DD:3A:
              B5:19:FF:02:BA:F4:3C:EE:E0:8B:EB:37:8B:EC:F4:D7:
              AC:F2:F6:F0:3D:AF:DD:75:91:33:19:1D:1C:40:CB:74:
              24:19:21:93:D9:14:FE:AC:2A:52:C7:8F:D5:04:49:E4:
              8D:63:47:88:3C:69:83:CB:FE:47:BD:2B:7E:4F:C5:95:
              AE:0E:9D:D4:D1:43:C0:67:73:E3:14:08:7E:E5:3F:9F:
              73:B8:33:0A:CF:5D:3F:34:87:96:8A:EE:53:E8:25:15              : 0x010001
          • #6
            • certificatePolicies: anyPolicy
            • basicConstraints: true, true
            • keyUsage: 0x86
            • subjectKeyIdentifier: 
              7f d3 65 a7 c2 dd ec bb  f0 30 09 f3 43 39 fa 02  |..e......0..C9..|
af 33 31 33                                       |.313            |
            • authorityKeyIdentifier: 
              62 fb 0a 21 5b 7f 43 6e  11 da 09 54 50 6b f5 d2  |b..![.Cn...TPk..|
96 71 f1 9e                                       |.q..            |
            • crlDistributionPoints: http://crl.microsoft.com/pki/crl/products/MicrosoftCodeVerifRoot.crl
        • RSA-SHA1: 
          81 2a 82 16 8c 34 67 2b  e5 03 eb 34 7b 8c a2 a3  |.*...4g+...4{...|
50 8a f4 55 86 f1 1e 8c  8e ae 7d ee 03 19 ce 72  |P..U......}....r|
95 18 48 ad 62 11 fd 20  fd 3f 47 06 01 5a e2 e0  |..H.b.. .?G..Z..|
6f 8c 15 2c 4e 3c 6a 50  6c 0b 36 a3 cf 7a 0d 9c  |o..,N..'..a.[|
5d 07 6b cd 86 a8 e2 65  80 a8 e2 15 e2 b2 be 23  |].k....e.......#|
05 6a ba 0c f3 47 93 4d  ac a4 8c 07 79 39 c0 61  |.j...G.M....y9.a|
12 3a 05 0d 89 a3 ec 9f  57 89 84 fb ec ca 7c 47  |.:......W.....|G|
66 14 91 d8 b6 0f 19 5d  e6 b8 4a ac bc 47 c8 71  |f......]..J..G.q|
43 96 e6 32 20 a5 dc 77  86 fd 3c e3 8b 71 db 7b  |C..2 ..w..<..q.{|
9b 03 fc b7 1d 32 64 eb  16 52 a0 43 a3 fa 2e ad  |.....2d..R.C....|
59 92 4e 7c c7 f2 33 42  48 38 51 3a 7c 38 c7 1b  |Y.N|..3BH8Q:|8..|
24 22 28 40 1e 1a 46 1f  17 db 18 f7 f0 27 35 6c  |$"(@..F......'5l|
b8 63 d9 cd b9 64 5d 2b  a5 5e ef c6 29 b4 f2 c7  |.c...d]+.^..)...|
f8 21 cc 04 ba 57 fd 01  b6 ab c6 67 f9 e7 d3 99  |.!...W.....g....|
7f f4 f5 22 fa 72 f5 fd  ff 3a 1c 42 3a a1 f9 80  |...".r...:.B:...|
18 a5 ee 8d 1c d4 66 9e  45 01 fe aa ee ff fb 17  |......f.E.......|
8f 30 f7 f1 cd 29 c5 9d  ec b5 d5 49 00 3d 85 b8  |.0...).....I.=..|
cb bb 93 3a 27 6a 49 c0  30 ae 66 c9 f7 23 28 32  |...:'jI.0.f..#(2|
76 f9 a4 83 56 c8 48 ce  5a 96 aa a0 cc 0c c4 7f  |v...V.H.Z.......|
b4 8e 97 af 6d e3 54 27  c3 9f 86 c0 d6 e4 73 08  |....m.T'......s.|
97 05 db d0 54 62 5e 03  48 c2 d5 9f 7f a7 66 8c  |....Tb^.H.....f.|
d0 9d b0 4f d4 d3 98 5f  4b 7a c9 7f b2 29 52 d0  |...O..._Kz...)R.|
12 80 c7 0f 54 b6 1e 67  cd c6 a0 6c 11 03 84 d3  |....T..g...l....|
48 75 e7 2a fe b0 3b 6e  0a 3a a6 6b 76 99 05 a3  |Hu.*..;n.:.kv...|
f1 77 68 61 33 14 47 06  fc 53 7f 52 bd 92 14 5c  |.wha3.G..S.R...\|
4a 24 6a 67 8c af 8d 90  aa d0 f6 79 21 1b 93 26  |J$jg.......y!..&|
7c c3 ce 1e bd 88 38 92  ae 45 c6 19 6a 49 50 b3  ||.....8..E..jIP.|
05 f8 ae 59 37 8a 6a 25  03 94 b1 59 81 50 e8 ba  |...Y7.j%...Y.P..|
83 80 b7 23 35 f4 76 b9  67 1d 59 18 ad 20 8d 94  |...#5.v.g.Y.. ..|
      • Certificate #4
        • 2
          • 52:00:E5:AA:25:56:FC:1A:86:ED:96:C9:D4:4B:33:C7
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • O: VeriSign, Inc.
            • OU: VeriSign Trust Network
            • OU: (c) 2006 VeriSign, Inc. - For authorized use only
            • CN: VeriSign Class 3 Public Primary Certification Authority - G5
          • 2010-02-08 00:00:00 UTC: 2020-02-07 23:59:59 UTC
          • Subject
            • C: US
            • O: VeriSign, Inc.
            • OU: VeriSign Trust Network
            • OU: Terms of use at https://www.verisign.com/rpa (c)10
            • CN: VeriSign Class 3 Code Signing 2010 CA
          • #5
            • rsaEncryption: nil
            • F5:23:4B:5E:A5:D7:8A:BB:32:E9:D4:57:F7:EF:E4:C7:
              26:7E:AD:19:98:FE:A8:9D:7D:94:F6:36:6B:10:D7:75:
              81:30:7F:04:68:7F:CB:2B:75:1E:CD:1D:08:8C:DF:69:
              94:A7:37:A3:9C:7B:80:E0:99:E1:EE:37:4D:5F:CE:3B:
              14:EE:86:D4:D0:F5:27:35:BC:25:0B:38:A7:8C:63:9D:
              17:A3:08:A5:AB:B0:FB:CD:6A:62:82:4C:D5:21:DA:1B:
              D9:F1:E3:84:3B:8A:2A:4F:85:5B:90:01:4F:C9:A7:76:
              10:7F:27:03:7C:BE:AE:7E:7D:C1:DD:F9:05:BC:1B:48:
              9C:69:E7:C0:A4:3C:3C:41:00:3E:DF:96:E5:C5:E4:94:
              71:D6:55:01:C7:00:26:4A:40:3C:B5:A1:26:A9:0C:A7:
              6D:80:8E:90:25:7B:CF:BF:3F:1C:EB:2F:96:FA:E5:87:
              77:C6:B5:56:B2:7A:3B:54:30:53:1B:DF:62:34:FF:1E:
              D1:F4:5A:93:28:85:E5:4C:17:4E:7E:5B:FD:A4:93:99:
              7F:DF:CD:EF:A4:75:EF:EF:15:F6:47:E7:F8:19:72:D8:
              2E:34:1A:A6:B4:A7:4C:7E:BD:BB:4F:0C:3D:57:F1:30:
              D6:A6:36:8E:D6:80:76:D7:19:2E:A5:CD:7E:34:2D:89              : 0x010001
          • X509v3 extensions
            • basicConstraints
              • true
              • true: 0
            • certificatePolicies
              • 2.16.840.1.113733.1.7.23.3
                • #0
                  • id-qt-cps: https://www.verisign.com/cps
                  • id-qt-unotice: https://www.verisign.com/rpa
            • keyUsage: true, 6
            • 1.3.6.1.5.5.7.1.12
              • image/gif
                • SHA1: 
                  8f e5 d3 1a 86 ac 8d 8e  6b c3 cf 80 6a d4 48 18  |........k...j.H.|
2c 7b 19 2e                                       |,{..            |
                • http://logo.verisign.com/vslogo.gif
            • crlDistributionPoints: http://crl.verisign.com/pca3-g5.crl
            • authorityInfoAccess
              • OCSP: http://ocsp.verisign.com
            • extendedKeyUsage
              • clientAuth: codeSigning
            • subjectAltName
              • CN: VeriSignMPKI-2-8
            • subjectKeyIdentifier: 
              cf 99 a9 ea 7b 26 f4 4b  c9 8e 8f d7 f0 05 26 ef  |....{&.K......&.|
e3 d2 a7 9d                                       |....            |
            • authorityKeyIdentifier: 
              7f d3 65 a7 c2 dd ec bb  f0 30 09 f3 43 39 fa 02  |..e......0..C9..|
af 33 31 33                                       |.313            |
        • RSA-SHA1: 
          56 22 e6 34 a4 c4 61 cb  48 b9 01 ad 56 a8 64 0f  |V".4..a.H...V.d.|
d9 8c 91 c4 bb cc 0c e5  ad 7a a0 22 7f df 47 38  |.........z."..G8|
4a 2d 6c d1 7f 71 1a 7c  ec 70 a9 b1 f0 4f e4 0f  |J-l..q.|.p...O..|
0c 53 fa 15 5e fe 74 98  49 24 85 81 26 1c 91 14  |.S..^.t.I$..&...|
47 b0 4c 63 8c bb a1 34  d4 c6 45 e8 0d 85 26 73  |G.Lc...4..E...&s|
03 d0 a9 8c 64 6d dc 71  92 e6 45 05 60 15 59 51  |....dm.q..E.`.YQ|
39 fc 58 14 6b fe d4 a4  ed 79 6b 08 0c 41 72 e7  |9.X.k....yk..Ar.|
37 22 06 09 be 23 e9 3f  44 9a 1e e9 61 9d cc b1  |7"...#.?D...a...|
90 5c fc 3d d2 8d ac 42  3d 65 36 d4 b4 3d 40 28  |.\.=...B=e6..=@(|
8f 9b 10 cf 23 26 cc 4b  20 cb 90 1f 5d 8c 4c 34  |....#&.K ...].L4|
ca 3c d8 e5 37 d6 6f a5  20 bd 34 eb 26 d9 ae 0d  |.<..7.o. .4.&...|
e7 c5 9a f7 a1 b4 21 91  33 6f 86 e8 58 bb 25 7c  |......!.3o..X.%||
74 0e 58 fe 75 1b 63 3f  ce 31 7c 9b 8f 1b 96 9e  |t.X.u.c?.1|.....|
c5 53 76 84 5b 9c ad 91  fa ac ed 93 ba 5d c8 21  |.Sv.[........].!|
53 c2 82 53 63 af 12 0d  50 87 11 1b 3d 54 52 96  |S..Sc...P...=TR.|
8a 2c 9c 3d 92 1a 08 9a  05 2e c7 93 a5 48 91 d3  |.,.=.........H..|
    • Signer
      • 1
      • unnamed
        • #0
          • C: US
          • O: VeriSign, Inc.
          • OU: VeriSign Trust Network
          • OU: Terms of use at https://www.verisign.com/rpa (c)10
          • CN: VeriSign Class 3 Code Signing 2010 CA
        • 33:76:92:28:D3:F9:EC:CE:D6:60:39:B9:01:99:AC:5D
      • SHA1: nil
      • #3
        • 1.3.6.1.4.1.311.2.1.12
          • nil
        • contentType: 1.3.6.1.4.1.311.2.1.4
        • 1.3.6.1.4.1.311.2.1.11: msCodeInd
        • messageDigest: 
          84 17 d1 04 64 fe 70 4b  18 b9 20 3b 09 66 67 a7  |....d.pK.. ;.fg.|
22 84 15 1c                                       |"...            |
      • rsaEncryption: 
        39 5d 4a 94 f8 b1 01 fc  28 bb b4 4a 2a 5d b0 51  |9]J.....(..J*].Q|
4c b1 72 58 12 68 2d ff  57 8c 30 56 37 23 77 81  |L.rX.h-.W.0V7#w.|
4c 8d ac f4 bc ad bc 9a  b4 eb ae 58 7f e2 f1 0b  |L..........X....|
aa 84 59 1c 30 f5 2d 44  55 d3 09 3a 2b 7e 09 70  |..Y.0.-DU..:+~.p|
8d 32 92 64 d3 94 4e 32  50 90 ba d4 1d 00 2a e0  |.2.d..N2P.....*.|
2c 69 0a 8d 97 0b 90 c9  4b 5b ef ae 19 89 d8 e8  |,i......K[......|
c7 f9 e0 80 60 82 ff 76  67 a4 df 27 64 e8 8e 15  |....`..vg..'d...|
70 d4 fd ce c9 e7 e1 de  ab 46 2e 6c 88 cc e8 3f  |p........F.l...?|
4c 97 aa d2 f3 e0 6f 90  a9 aa 1c 94 1d 09 c3 5a  |L.....o........Z|
1b 17 ab 88 e8 7c 18 31  db ec 00 fb a0 84 d3 7c  |.....|.1.......||
0e a2 2f 10 fa c4 57 cc  72 8f a2 09 2b f1 a7 27  |../...W.r...+..'|
82 ff d4 ac 68 3f 40 a1  20 7f bd fb ff 67 df a5  |....h?@. ....g..|
d2 e6 f7 d5 c8 ab 39 8a  8b 0f b5 3b 7c d4 88 c3  |......9....;|...|
95 bc bf 98 e5 9e 57 37  67 2b fb c8 75 3e be 31  |......W7g+..u>.1|
b2 5d 4a ad f1 b7 29 d3  5a c7 79 a3 15 62 70 c5  |.]J...).Z.y..bp.|
82 06 65 6a 98 f4 50 42  2f 1b 53 22 1e 83 a6 77  |..ej..PB/.S"...w|
      • countersignature
        • 1
          • unnamed
            • #0
              • C: US
              • O: Symantec Corporation
              • CN: Symantec Time Stamping Services CA - G2
            • 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
          • SHA1: nil
          • #2
            • contentType: pkcs7-data
            • signingTime: 2014-02-28 11:45:36 UTC
            • messageDigest: 
              24 b8 27 0a d1 01 57 dc  b1 15 af d7 bd 5c 09 d3  |$.'...W......\..|
1b ef d8 27                                       |...'            |
          • rsaEncryption: 
            90 e2 49 95 16 39 1c 22  5a b4 35 e7 ce a3 d5 22  |..I..9."Z.5...."|
18 ad e2 1e 7f be f3 7d  d3 29 29 3d dc c4 8d 4f  |.......}.))=...O|
35 ee 14 51 6e 48 cd 09  d0 0e eb 42 23 78 e0 29  |5..QnH.....B#x.)|
9f a6 ed d5 c4 08 98 1e  97 a3 98 c7 d7 61 03 11  |.............a..|
53 18 78 84 e9 50 08 a1  c2 02 46 aa 3f 1c 2a 69  |S.x..P....F.?.*i|
b6 98 3b 44 7f 30 52 ff  38 c3 ae 97 5d b6 38 6c  |..;D.0R.8...].8l|
ec ce 24 6a a4 0a 3b 8c  2f bf 4f f0 af 22 0c ae  |..$j..;./.O.."..|
1a 53 fa 4c 61 24 cf 14  83 02 59 ec ea 51 59 cb  |.S.La$....Y..QY.|
32 3e ea e9 c9 f3 93 9b  7e be 44 88 f9 61 c8 31  |2>......~.D..a.1|
7f a6 11 47 79 2d ab ca  7f 11 88 f8 89 ca a5 3f  |...Gy-.........?|
0b c7 ed 08 d7 8c 52 45  99 9f c0 d2 9a 30 9e d4  |......RE.....0..|
06 95 54 47 7f 86 f7 c0  9b 94 2f 37 24 3c b6 13  |..TG....../7$<..|
f5 64 c0 75 65 c2 e7 a1  39 96 d9 2c 0f 2c fe 99  |.d.ue...9..,.,..|
00 38 94 f8 cb 3c a7 90  fe 76 e7 5a 80 66 de f7  |.8...<...v.Z.f..|
71 5f 06 15 bb 5e b8 25  0f 63 28 97 6c 3b f9 71  |q_...^.%.c(.l;.q|
97 c2 80 57 4d 38 1a 19  6b bf d2 ae 81 31 37 cd  |...WM8..k....17.|
offsetsizetypecomment
15c115HTM#
1200017248DLL02/28/2014 11:45:26#
16360294232BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable







everything is OK