amt_omiga-plus.exe - Worker.exe

info
MZ
PE
resources
imports
foremost
version info
signature
hexdump
disasm
log
discuss
donate

filename	amt_omiga-plus.exe
size	308776 (0x4b628)
md5	e8653b16b0b8390c8e8395b7d46f2502

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xf8

Rich Header

lib id	version	times used
205	50929	16
206	50929	121
207	50929	46
147	30729	13
1	0	134
211	61030	11
201	61030	1
151	0	1
204	61030	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	5
TimeDateStamp	0x547e9cf7
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x102
Magic	0x10b
LinkerVersion	11.0
SizeOfCode	0x17a00
SizeOfInitializedData	0x31a00
SizeOfUninitializedData	0
AddressOfEntryPoint	0xc3d0
BaseOfCode	0x1000
BaseOfData	0x19000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	5.1
ImageVersion	0.0
SubsystemVersion	5.1
Reserved1	0
SizeOfImage	0x4e000
SizeOfHeaders	0x400
CheckSum	0x56f07
Subsystem	2
DllCharacteristics	0x8140
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x179fa	0x17a00	R-X CODE
.rdata	0x19000	0x996a	0x9a00	R-- IDATA
.data	0x23000	0x43bc	0x2600	RW- IDATA
.rsrc	0x28000	0x20f30	0x21000	R-- IDATA
.reloc	0x49000	0x48ac	0x4a00	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x21ef8	0x8c
RESOURCE	0x28000	0x20f30
EXCEPTION	0	0
SECURITY	0x49800	0x1e28
BASERELOC	0x49000	0x1860
DEBUG	0x19230	0x38
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0x20ab8	0x40
Bound_IAT	0	0
IAT	0x19000	0x1cc
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
JIEYADLL	#104	132608	1252
VERSION	#1	1708	1252
MANIFEST	#1	392	1252

module_name	hint	function_name
SHLWAPI.dll	73	PathFindFileNameW
SHLWAPI.dll	68	PathFileExistsA
SHLWAPI.dll	69	PathFileExistsW
VERSION.dll	5	GetFileVersionInfoSizeW
VERSION.dll	14	VerQueryValueW
VERSION.dll	6	GetFileVersionInfoW
KERNEL32.dll	906	OutputDebugStringW
KERNEL32.dll	158	CreateMutexW
KERNEL32.dll	514	GetLastError
KERNEL32.dll	82	CloseHandle
KERNEL32.dll	831	LoadLibraryW
KERNEL32.dll	581	GetProcAddress
KERNEL32.dll	354	FreeLibrary
KERNEL32.dll	391	GetCommandLineW
KERNEL32.dll	536	GetModuleHandleW
KERNEL32.dll	390	GetCommandLineA
KERNEL32.dll	645	GetTempPathW
KERNEL32.dll	313	FindFirstFileW
KERNEL32.dll	325	FindNextFileW
KERNEL32.dll	864	MoveFileExW
KERNEL32.dll	214	DeleteFileW
KERNEL32.dll	302	FindClose
KERNEL32.dll	1027	RemoveDirectoryW
KERNEL32.dll	532	GetModuleFileNameW
KERNEL32.dll	334	FindResourceW
KERNEL32.dll	833	LoadResource
KERNEL32.dll	357	FreeResource
KERNEL32.dll	1159	SetStdHandle
KERNEL32.dll	578	GetPrivateProfileStringW
KERNEL32.dll	1323	WritePrivateProfileStringW
KERNEL32.dll	659	GetTickCount
KERNEL32.dll	1202	Sleep
KERNEL32.dll	531	GetModuleFileNameA
KERNEL32.dll	136	CreateFileA
KERNEL32.dll	496	GetFileSize
KERNEL32.dll	620	GetSystemDefaultLangID
KERNEL32.dll	1297	WideCharToMultiByte
KERNEL32.dll	871	MultiByteToWideChar
KERNEL32.dll	168	CreateProcessW
KERNEL32.dll	1273	WaitForSingleObject
KERNEL32.dll	852	LockResource
KERNEL32.dll	1201	SizeofResource
KERNEL32.dll	479	GetExitCodeProcess
KERNEL32.dll	448	GetCurrentProcess
KERNEL32.dll	679	GetVolumeInformationW
KERNEL32.dll	143	CreateFileW
KERNEL32.dll	691	GlobalAlloc
KERNEL32.dll	221	DeviceIoControl
KERNEL32.dll	698	GlobalFree
KERNEL32.dll	960	ReadFile
KERNEL32.dll	1317	WriteFile
KERNEL32.dll	813	LCMapStringW
KERNEL32.dll	1316	WriteConsoleW
KERNEL32.dll	1107	SetEndOfFile
KERNEL32.dll	617	GetStringTypeW
KERNEL32.dll	643	GetTempFileNameW
KERNEL32.dll	1127	SetFilePointerEx
KERNEL32.dll	234	EncodePointer
KERNEL32.dll	202	DecodePointer
KERNEL32.dll	719	HeapFree
KERNEL32.dll	715	HeapAlloc
KERNEL32.dll	768	IsDebuggerPresent
KERNEL32.dll	772	IsProcessorFeaturePresent
KERNEL32.dll	945	RaiseException
KERNEL32.dll	1048	RtlUnwind
KERNEL32.dll	747	InterlockedDecrement
KERNEL32.dll	281	ExitProcess
KERNEL32.dll	535	GetModuleHandleExW
KERNEL32.dll	21	AreFileApisANSI
KERNEL32.dll	724	HeapSize
KERNEL32.dll	612	GetStdHandle
KERNEL32.dll	586	GetProcessHeap
KERNEL32.dll	1139	SetLastError
KERNEL32.dll	751	InterlockedIncrement
KERNEL32.dll	453	GetCurrentThreadId
KERNEL32.dll	238	EnterCriticalSection
KERNEL32.dll	825	LeaveCriticalSection
KERNEL32.dll	739	InitializeCriticalSectionAndSpinCount
KERNEL32.dll	428	GetConsoleMode
KERNEL32.dll	958	ReadConsoleW
KERNEL32.dll	410	GetConsoleCP
KERNEL32.dll	343	FlushFileBuffers
KERNEL32.dll	209	DeleteCriticalSection
KERNEL32.dll	1235	UnhandledExceptionFilter
KERNEL32.dll	1189	SetUnhandledExceptionFilter
KERNEL32.dll	1216	TerminateProcess
KERNEL32.dll	1221	TlsAlloc
KERNEL32.dll	1223	TlsGetValue
KERNEL32.dll	1224	TlsSetValue
KERNEL32.dll	1222	TlsFree
KERNEL32.dll	611	GetStartupInfoW
KERNEL32.dll	499	GetFileType
KERNEL32.dll	935	QueryPerformanceCounter
KERNEL32.dll	449	GetCurrentProcessId
KERNEL32.dll	633	GetSystemTimeAsFileTime
KERNEL32.dll	474	GetEnvironmentStringsW
KERNEL32.dll	353	FreeEnvironmentStringsW
KERNEL32.dll	830	LoadLibraryExW
KERNEL32.dll	778	IsValidCodePage
KERNEL32.dll	360	GetACP
KERNEL32.dll	567	GetOEMCP
KERNEL32.dll	370	GetCPInfo
KERNEL32.dll	722	HeapReAlloc
USER32.dll	819	wsprintfW
ADVAPI32.dll	622	RegQueryValueExW
ADVAPI32.dll	560	RegCloseKey
ADVAPI32.dll	609	RegOpenKeyExW
SHELL32.dll	289	ShellExecuteExW
SHELL32.dll	141	SHCreateDirectoryExW

StringTable 080904b0

CompanyName	One Syn
FileDescription	Syn worker
FileVersion	6,3,7601,1372
InternalName	Worker.exe
LegalCopyright	One Syn
OriginalFilename	Worker.exe
ProductName	2262_amt_omiga-plusingpadingpadingpadingpadingpadingpadingpadingpadingpadingpadingpadingpading
ProductVersion	6,3,7601,1372

VS_FIXEDFILEINFO

FileVersion	6.3.7601.1372
ProductVersion	6.3.7601.1372
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	1
FileSubtype	0

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=CN/O=WoSign CA Limited/CN=WoSign Class 2 Code Signing CA

serial: 26954AE19A551B1D622A23C25DBE2503

Certificates (5)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
        Validity
            Not Before: Dec 21 00:00:00 2012 GMT
            Not After : Dec 30 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:b3:49:54:4b:97:1c:12:0a:d8:25:79:91:
                    22:57:2a:6f:dc:b8:26:c4:43:73:6b:c2:bf:2e:50:
                    5a:fb:14:c2:76:8e:43:01:25:43:b4:a1:e2:45:f4:
                    e8:b7:7b:c3:74:cc:22:d7:b4:94:00:02:f7:4d:ed:
                    bf:b4:b7:44:24:6b:cd:5f:45:3b:d1:44:ce:43:12:
                    73:17:82:8b:69:b4:2b:cb:99:1e:ac:72:1b:26:4d:
                    71:1f:b1:31:dd:fb:51:61:02:53:a6:aa:f5:49:2c:
                    05:78:45:a5:2f:89:ce:e7:99:e7:fe:8c:e2:57:3f:
                    3d:c6:92:dc:4a:f8:7b:33:e4:79:0a:fb:f0:75:88:
                    41:9c:ff:c5:03:51:99:aa:d7:6c:9f:93:69:87:65:
                    29:83:85:c2:60:14:c4:c8:c9:3b:14:da:c0:81:f0:
                    1f:0d:74:de:92:22:ab:ca:f7:fb:74:7c:27:e6:f7:
                    4a:1b:7f:a7:c3:9e:2d:ae:8a:ea:a6:e6:aa:27:16:
                    7d:61:f7:98:71:11:bc:e2:50:a1:4b:e5:5d:fa:e5:
                    0e:a7:2c:9f:aa:65:20:d3:d8:96:e8:c8:7c:a5:4e:
                    48:44:ff:19:e2:44:07:92:0b:d7:68:84:80:5d:6a:
                    78:64:45:cd:60:46:7e:54:c1:13:7c:c5:79:f1:c9:
                    c1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD
            Authority Information Access: 
                OCSP - URI:http://ocsp.thawte.com

            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.thawte.com/ThawteTimestampingCA.crl

            X509v3 Extended Key Usage: 
                Time Stamping
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-1
    Signature Algorithm: sha1WithRSAEncryption
         03:09:9b:8f:79:ef:7f:59:30:aa:ef:68:b5:fa:e3:09:1d:bb:
         4f:82:06:5d:37:5f:a6:52:9f:16:8d:ea:1c:92:09:44:6e:f5:
         6d:eb:58:7c:30:e8:f9:69:8d:23:73:0b:12:6f:47:a9:ae:39:
         11:f8:2a:b1:9b:b0:1a:c3:8e:eb:59:96:00:ad:ce:0c:4d:b2:
         d0:31:a6:08:5c:2a:7a:fc:e2:7a:1d:57:4c:a8:65:18:e9:79:
         40:62:25:96:6e:c7:c7:37:6a:83:21:08:8e:41:ea:dd:d9:57:
         3f:1d:77:49:87:2a:16:06:5e:a6:38:6a:22:12:a3:51:19:83:
         7e:b6

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:95:4a:e1:9a:55:1b:1d:62:2a:23:c2:5d:be:25:03
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=CN, O=WoSign CA Limited, CN=WoSign Class 2 Code Signing CA
        Validity
            Not Before: Nov 24 03:00:56 2014 GMT
            Not After : Jul 24 03:00:56 2015 GMT
        Subject: C=CN, ST=\xE5\x8C\x97\xE4\xBA\xAC\xE5\xB8\x82, L=\xE5\x8C\x97\xE4\xBA\xAC\xE5\xB8\x82, CN=Ma Lin
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:76:fa:eb:c5:d6:34:4a:d1:92:8b:09:d8:4e:
                    51:4d:34:98:73:8e:0a:ad:43:df:97:82:cd:ea:f3:
                    90:12:aa:c2:62:90:82:e1:b5:bb:92:99:95:e8:2e:
                    ca:f0:21:ec:dd:bc:9c:92:6b:6e:89:9b:93:0e:58:
                    d0:8b:89:91:59:d8:42:02:3d:48:23:a5:c0:9d:b1:
                    22:fc:3f:76:92:07:52:4e:f4:2e:6d:09:c6:07:e7:
                    80:72:88:d1:9c:39:71:25:26:e7:c0:b7:fc:6a:fb:
                    fa:4c:9e:90:31:02:c3:bc:8d:1f:56:c7:ba:17:89:
                    b5:40:cf:d6:37:63:83:07:6a:2e:53:c9:f9:59:dc:
                    e0:be:2d:df:56:d7:b8:73:0d:21:48:73:47:0f:01:
                    f1:95:49:51:b9:67:c6:cf:40:52:d3:b9:a4:23:d0:
                    00:bd:f4:02:01:b2:0e:2e:b6:18:b2:f1:ed:65:ea:
                    ef:c4:a7:2f:ea:af:40:06:0d:07:08:60:6a:0d:e2:
                    1a:b1:79:30:f7:d0:a7:1a:cd:63:41:89:95:36:20:
                    7c:d8:bb:ac:a7:9a:f9:6e:d2:36:d0:76:58:97:06:
                    d8:e7:a9:e0:1b:12:c5:d7:59:e3:51:5b:bc:4a:be:
                    1e:c1:fa:26:0e:c2:4d:aa:62:62:ec:1b:16:a0:b0:
                    68:d1
                Exponent: 3 (0x3)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage: 
                Code Signing, Microsoft Commercial Code Signing
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Subject Key Identifier: 
                24:19:E4:8A:5B:56:B6:8E:12:45:82:8C:E5:77:E3:10:B3:20:E1:48
            X509v3 Authority Key Identifier: 
                keyid:57:0C:65:A9:31:CE:A7:38:8C:1F:B3:6E:71:45:C4:D0:5D:35:A0:2D

            Authority Information Access: 
                OCSP - URI:http://ocsp1.wosign.com/class2/code/ca1
                CA Issuers - URI:http://aia1.wosign.com/class2.code.ca1.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crls1.wosign.com/ca1-code-2.crl

            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.36305.1.2.3.1.2
                  CPS: http://www.wosign.com/policy/

    Signature Algorithm: sha1WithRSAEncryption
         a2:d0:5b:37:7f:83:d5:dc:ae:c2:b3:9d:ff:1e:7a:42:89:7d:
         38:98:2d:be:85:05:53:d7:71:e6:21:7d:3d:ec:73:49:ee:bb:
         bf:fc:1d:c5:cd:83:e6:c3:ee:6c:bf:b6:b9:66:92:dc:c7:cb:
         00:f5:bd:f9:27:02:a7:44:f8:31:8f:32:43:5b:9c:d1:60:fa:
         7c:dc:64:aa:7e:13:34:2c:4b:50:d2:ef:d6:cf:c4:dc:c4:a2:
         04:cf:f5:ae:fd:80:24:e4:1a:14:70:35:12:81:a3:1b:14:c3:
         06:ae:ad:5b:4d:71:3e:3c:53:33:8e:08:3d:14:d4:f7:4f:ea:
         cf:70:c4:78:3b:57:19:59:64:a9:8b:d5:aa:2a:0a:78:ef:3e:
         9b:e2:ec:95:68:bd:9a:68:27:b7:3e:40:50:29:aa:29:2e:bd:
         9a:67:85:97:47:b8:82:e7:20:f8:0f:aa:b5:4c:a6:c9:fe:5a:
         27:6d:19:e9:8a:ef:33:24:5d:fb:18:2c:08:c5:00:9c:56:69:
         d2:3f:2b:e0:bd:88:75:a2:f0:0e:ce:ae:c4:ac:24:c6:33:52:
         76:45:15:be:d6:f3:7d:e3:e3:02:44:2e:7a:c3:53:95:06:1e:
         a3:ff:4f:ad:f3:6d:f1:df:6c:f8:44:c8:a1:ce:a2:2c:50:a7:
         7b:81:81:3b

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Validity
            Not Before: Oct 18 00:00:00 2012 GMT
            Not After : Dec 29 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer - G4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:63:0b:39:44:b8:bb:23:a7:44:49:bb:0e:ff:
                    a1:f0:61:0a:53:93:b0:98:db:ad:2c:0f:4a:c5:6e:
                    ff:86:3c:53:55:0f:15:ce:04:3f:2b:fd:a9:96:96:
                    d9:be:61:79:0b:5b:c9:4c:86:76:e5:e0:43:4b:22:
                    95:ee:c2:2b:43:c1:9f:d8:68:b4:8e:40:4f:ee:85:
                    38:b9:11:c5:23:f2:64:58:f0:15:32:6f:4e:57:a1:
                    ae:88:a4:02:d7:2a:1e:cd:4b:e1:dd:63:d5:17:89:
                    32:5b:b0:5e:99:5a:a8:9d:28:50:0e:17:ee:96:db:
                    61:3b:45:51:1d:cf:12:56:0b:92:47:fc:ab:ae:f6:
                    66:3d:47:ac:70:72:e7:92:e7:5f:cd:10:b9:c4:83:
                    64:94:19:bd:25:80:e1:e8:d2:22:a5:d0:ba:02:7a:
                    a1:77:93:5b:65:c3:ee:17:74:bc:41:86:2a:dc:08:
                    4c:8c:92:8c:91:2d:9e:77:44:1f:68:d6:a8:74:77:
                    db:0e:5b:32:8b:56:8b:33:bd:d9:63:c8:49:9d:3a:
                    c5:c5:ea:33:0b:d2:f1:a3:1b:f4:8b:be:d9:b3:57:
                    8b:3b:de:04:a7:7a:22:b2:24:ae:2e:c7:70:c5:be:
                    4e:83:26:08:fb:0b:bd:a9:4f:99:08:e1:10:28:72:
                    aa:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                OCSP - URI:http://ts-ocsp.ws.symantec.com
                CA Issuers - URI:http://ts-aia.ws.symantec.com/tss-ca-g2.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ts-crl.ws.symantec.com/tss-ca-g2.crl

            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-2
            X509v3 Subject Key Identifier: 
                46:C6:69:A3:0E:4A:14:1E:D5:4C:DA:52:63:17:3F:5E:36:BC:0D:E6
            X509v3 Authority Key Identifier: 
                keyid:5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD

    Signature Algorithm: sha1WithRSAEncryption
         78:3b:b4:91:2a:00:4c:f0:8f:62:30:37:78:a3:84:27:07:6f:
         18:b2:de:25:dc:a0:d4:94:03:aa:86:4e:25:9f:9a:40:03:1c:
         dd:ce:e3:79:cb:21:68:06:da:b6:32:b4:6d:bf:f4:2c:26:63:
         33:e4:49:64:6d:0d:e6:c3:67:0e:f7:05:a4:35:6c:7c:89:16:
         c6:e9:b2:df:b2:e9:dd:20:c6:71:0f:cd:95:74:dc:b6:5c:de:
         bd:37:1f:43:78:e6:78:b5:cd:28:04:20:a3:aa:f1:4b:c4:88:
         29:91:0e:80:d1:11:fc:dd:5c:76:6e:4f:5e:0e:45:46:41:6e:
         0d:b0:ea:38:9a:b1:3a:da:09:71:10:fc:1c:79:b4:80:7b:ac:
         69:f4:fd:9c:b6:0c:16:2b:f1:7f:5b:09:3d:9b:5b:e2:16:ca:
         13:81:6d:00:2e:38:0d:a8:29:8f:2c:e1:b2:f4:5a:a9:01:af:
         15:9c:2c:2f:49:1b:db:22:bb:c3:fe:78:94:51:c3:86:b1:82:
         88:5d:f0:3d:b4:51:a1:79:33:2b:2e:7b:b9:dc:20:09:13:71:
         eb:6a:19:5b:cf:e8:a5:30:57:2c:89:49:3f:b9:cf:7f:c9:bf:
         3e:22:68:63:53:9a:bd:69:74:ac:c5:1d:3c:7f:92:e0:c3:bc:
         1c:d8:04:75

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:e7:3b:77:32:8e:5c:a0:aa:57:f8:65:68:dc:f6:e8
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=CN, O=WoSign CA Limited, CN=Certification Authority of WoSign
        Validity
            Not Before: Aug  8 01:00:05 2009 GMT
            Not After : Aug  8 01:00:05 2024 GMT
        Subject: C=CN, O=WoSign CA Limited, CN=WoSign Class 2 Code Signing CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c9:15:e2:40:81:6f:56:ba:aa:56:55:28:dd:
                    ab:4b:be:83:fc:a1:aa:72:48:f3:f8:51:fd:be:0e:
                    b1:d8:25:f0:cd:5f:bc:4f:24:7b:78:72:68:2f:74:
                    71:db:c1:16:4a:2b:a8:dc:b9:1c:e5:c3:73:5a:4e:
                    35:4d:c3:91:34:2a:1a:1c:8a:38:34:8f:9a:c1:55:
                    dc:74:51:f7:b9:cb:26:73:bf:c8:62:70:f4:35:36:
                    23:00:77:80:06:71:7b:76:c1:cd:f1:a9:1a:9c:78:
                    6f:ab:58:58:55:a8:f9:92:86:4a:83:85:c6:d5:86:
                    6b:68:58:80:b5:d0:2e:60:f0:d4:fa:b3:3d:32:fb:
                    d3:63:ce:f2:7e:11:dc:e0:d1:91:23:b0:cc:7c:52:
                    b5:6d:d4:5d:75:a7:0c:18:f1:af:25:f6:4c:67:2d:
                    5e:6f:9b:47:99:db:34:7a:c5:43:32:2a:a7:64:69:
                    81:48:4b:b7:1f:e4:5a:db:e7:cc:18:d8:ba:77:2f:
                    5d:dd:ed:09:2a:33:95:27:c2:58:91:0f:b0:dc:ae:
                    88:ef:12:e3:68:99:1f:b4:87:9e:28:2c:84:82:aa:
                    7a:f3:fd:d9:cf:00:8c:b4:55:fe:3b:9e:38:65:8b:
                    24:26:8a:62:90:c0:dd:17:08:4f:bc:ae:28:f8:a6:
                    02:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                Code Signing, Microsoft Commercial Code Signing
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crls1.wosign.com/ca1.crl

            Authority Information Access: 
                OCSP - URI:http://ocsp1.wosign.com/ca1
                CA Issuers - URI:http://aia1.wosign.com/ca1-class2-code.cer

            X509v3 Subject Key Identifier: 
                57:0C:65:A9:31:CE:A7:38:8C:1F:B3:6E:71:45:C4:D0:5D:35:A0:2D
            X509v3 Authority Key Identifier: 
                keyid:E1:66:CF:0E:D1:F1:B3:4B:B7:06:20:14:FE:87:12:D5:F6:FE:FB:3E

            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.36305.1.2.3
                  CPS: http://www.wosign.com/policy/

    Signature Algorithm: sha1WithRSAEncryption
         07:1c:8c:f9:9f:7f:79:58:98:9c:cf:13:5b:15:4f:bb:d9:d3:
         81:94:cf:56:c8:27:39:87:e2:d0:3b:e1:c0:bd:4b:86:93:4e:
         eb:d5:09:56:17:99:be:8e:71:63:45:bb:2f:d5:6e:8b:7f:70:
         ef:0f:e7:e9:cf:5b:a8:41:26:aa:47:96:87:78:3d:6e:1e:16:
         35:9e:0d:9c:b7:bb:54:2a:4a:01:4d:f4:cc:d9:0b:d5:37:c2:
         43:92:02:bb:40:bd:75:3e:19:03:4d:32:bf:aa:9c:62:d6:46:
         d6:53:4d:2c:9f:55:67:27:b0:0f:14:75:cd:8f:c2:b3:7f:b4:
         9c:eb:54:3b:05:1e:fa:ff:10:c4:e7:b9:be:42:e4:79:28:00:
         16:0a:35:8a:67:a8:ec:be:ec:2c:81:7e:fd:47:cb:9c:e4:06:
         c9:11:4d:e8:6e:9b:77:6a:43:65:d8:cf:1d:f6:0f:27:84:76:
         3c:19:84:70:e4:3c:2c:f7:2c:1d:90:57:68:34:88:46:b0:6b:
         1c:03:1f:00:af:aa:37:5a:89:4e:2a:70:82:49:50:c7:9a:4a:
         ec:46:a9:73:68:12:12:23:3c:8e:0c:bd:05:54:67:01:f6:e5:
         12:2f:5b:73:d2:64:ca:98:54:ac:c2:d8:8b:44:b2:0c:0d:22:
         2c:3b:0d:93:c0:36:ea:ff:99:62:2f:a9:ee:96:48:21:9a:63:
         48:66:37:49:ca:59:f0:cb:0e:08:ff:5b:48:3c:6d:09:2e:cd:
         97:33:ed:fe:6f:6a:21:cc:23:c7:96:fd:db:7f:2b:09:15:41:
         73:b4:65:09:7a:5a:9d:80:fd:ea:9b:95:ea:57:57:3e:91:ba:
         bb:e6:f8:c7:dc:1d:f1:53:f5:61:52:e3:44:90:56:e3:fc:4f:
         4b:d9:f9:0d:4b:25:25:cf:ff:27:0c:48:ae:f6:47:ab:88:45:
         98:a1:b7:de:38:53:31:9e:d3:94:36:4d:0f:c5:a8:00:5d:c4:
         b2:1f:76:6d:02:f2:c7:e2:b1:35:24:5d:2e:40:4d:01:17:46:
         2d:56:5f:b4:ce:d9:46:09:2f:32:29:ef:4e:de:48:2e:a0:98:
         4b:c0:1e:18:8c:04:7c:a1:85:ce:7a:90:6e:ee:50:0a:fc:90:
         fc:75:05:81:a6:31:3d:9f:2b:5b:eb:f4:18:26:8a:58:69:ae:
         0f:e6:2b:bb:44:4f:e3:30:25:b0:75:e0:20:e0:2b:29:50:5e:
         c2:c7:f8:34:49:bf:f2:12:73:f9:c7:f3:80:80:1c:2d:1c:19:
         48:92:a4:3e:be:24:4c:ec:f2:cc:18:e1:11:2b:a9:41:17:01:
         15:75:53:64:5b:6f:87:f1

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:06:19:4e:5a:f8:a1:7f:34:33:23:fe:1c:83:6a:4a
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=IL, O=StartCom Ltd., OU=Secure Digital Certificate Signing, CN=StartCom Certification Authority
        Validity
            Not Before: Sep 17 22:46:36 2006 GMT
            Not After : Dec 31 23:59:59 2019 GMT
        Subject: C=CN, O=WoSign CA Limited, CN=Certification Authority of WoSign
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (4096 bit)
                Modulus:
                    00:bd:ca:8d:ac:b8:91:15:56:97:7b:6b:5c:7a:c2:
                    de:6b:d9:a1:b0:c3:10:23:fa:a7:a1:b2:cc:31:fa:
                    3e:d9:a6:29:6f:16:3d:e0:6b:f8:b8:40:5f:db:39:
                    a8:00:7a:8b:a0:4d:54:7d:c2:22:78:fc:8e:09:b8:
                    a8:85:d7:cc:95:97:4b:74:d8:9e:7e:f0:00:e4:0e:
                    89:ae:49:28:44:1a:10:99:32:0f:25:88:53:a4:0d:
                    b3:0f:12:08:16:0b:03:71:27:1c:7f:e1:db:d2:fd:
                    67:68:c4:05:5d:0a:0e:5d:70:d7:d8:97:a0:bc:53:
                    41:9a:91:8d:f4:9e:36:66:7a:7e:56:c1:90:5f:e6:
                    b1:68:20:36:a4:8c:24:2c:2c:47:0b:59:76:66:30:
                    b5:be:de:ed:8f:f8:9d:d3:bb:01:30:e6:f2:f3:0e:
                    e0:2c:92:80:f3:85:f9:28:8a:b4:54:2e:9a:ed:f7:
                    76:fc:15:68:16:eb:4a:6c:eb:2e:12:8f:d4:cf:fe:
                    0c:c7:5c:1d:0b:7e:05:32:be:5e:b0:09:2a:42:d5:
                    c9:4e:90:b3:59:0d:bb:7a:7e:cd:d5:08:5a:b4:7f:
                    d8:1c:69:11:f9:27:0f:7b:06:af:54:83:18:7b:e1:
                    dd:54:7a:51:68:6e:77:fc:c6:bf:52:4a:66:46:a1:
                    b2:67:1a:bb:a3:4f:77:a0:be:5d:ff:fc:56:0b:43:
                    72:77:90:ca:9e:f9:f2:39:f5:0d:a9:f4:ea:d7:e7:
                    b3:10:2f:30:42:37:21:cc:30:70:c9:86:98:0f:cc:
                    58:4d:83:bb:7d:e5:1a:a5:37:8d:b6:ac:32:97:00:
                    3a:63:71:24:1e:9e:37:c4:ff:74:d4:37:c0:e2:fe:
                    88:46:60:11:dd:08:3f:50:36:ab:b8:7a:a4:95:62:
                    6a:6e:b0:ca:6a:21:5a:69:f3:f3:fb:1d:70:39:95:
                    f3:a7:6e:a6:81:89:a1:88:c5:3b:71:ca:a3:52:ee:
                    83:bb:fd:a0:77:f4:e4:6f:e7:42:db:6d:4a:99:8a:
                    34:48:bc:17:dc:e4:80:08:22:b6:f2:31:c0:3f:04:
                    3e:eb:9f:20:79:d6:b8:06:64:64:02:31:d7:a9:cd:
                    52:fb:84:45:69:09:00:2a:dc:55:8b:c4:06:46:4b:
                    c0:4a:1d:09:5b:39:28:fd:a9:ab:ce:00:f9:2e:48:
                    4b:26:e6:30:4c:a5:58:ca:b4:44:82:4f:e7:91:1e:
                    33:c3:b0:93:ff:11:fc:81:d2:ca:1f:71:29:dd:76:
                    4f:92:25:af:1d:81:b7:0f:2f:8c:c3:06:cc:2f:27:
                    a3:4a:e4:0e:99:ba:7c:1e:45:1f:7f:aa:19:45:96:
                    fd:fc:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:2
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier: 
                E1:66:CF:0E:D1:F1:B3:4B:B7:06:20:14:FE:87:12:D5:F6:FE:FB:3E
            X509v3 Authority Key Identifier: 
                keyid:4E:0B:EF:1A:A4:40:5B:A5:17:69:87:30:CA:34:68:43:D0:41:AE:F2

            Authority Information Access: 
                OCSP - URI:http://ocsp.startssl.com/ca
                CA Issuers - URI:http://aia.startssl.com/certs/ca.crt

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.startssl.com/sfsca.crl

    Signature Algorithm: sha1WithRSAEncryption
         39:ad:da:00:4d:0a:fc:69:cf:d3:18:db:67:27:a0:5e:0f:f3:
         91:26:ce:78:3f:be:32:60:71:22:34:d3:c9:48:57:d5:da:ee:
         4a:3f:cd:00:5f:31:5f:82:29:58:21:2f:13:a8:3f:2f:86:34:
         57:f2:20:f8:3d:af:da:45:ca:01:8d:c9:66:a7:b9:36:68:28:
         ea:ed:7a:5e:c4:7e:61:a2:1c:b9:2b:a7:ae:40:1a:3c:9f:7b:
         e3:c8:6e:fa:f9:90:2c:fa:30:de:e3:18:36:09:34:b5:01:0e:
         62:d7:12:a4:b3:e7:68:79:25:c6:76:72:2c:33:04:b3:74:9d:
         58:d2:54:2d:29:19:1c:aa:f9:aa:cf:b3:b6:73:b3:4b:3b:5c:
         aa:37:31:b8:c3:ff:1f:ba:c2:c8:98:ca:34:0e:16:63:48:e3:
         3d:b9:ef:c6:01:3a:6c:ae:7c:14:40:89:c4:79:45:76:c2:8c:
         5e:50:c1:76:97:b3:d2:61:ee:ec:5e:13:04:5e:5b:72:6e:b6:
         76:7a:75:e1:7f:94:09:e8:d7:92:44:31:a6:1b:01:73:ee:a2:
         6e:b6:6d:24:1c:a5:ff:70:10:9a:f6:36:c4:ea:e3:2c:b0:e4:
         39:fc:c1:89:a2:a8:e9:78:cc:19:a9:63:e5:64:7b:32:13:de:
         15:47:73:39:9c:ad:7a:c3:f6:7f:1a:fe:a2:da:7a:a0:c0:23:
         94:e8:e6:0f:30:32:40:24:2c:9b:f2:2c:6f:56:64:fd:d0:23:
         ca:58:8e:5d:db:ea:63:f9:33:6e:76:a3:b9:1b:64:a6:7c:ea:
         08:91:cc:75:d7:2c:d5:c7:17:e8:f6:a9:aa:94:d9:3b:5e:49:
         79:64:ad:0e:a8:b5:8a:8e:1e:d0:e2:e2:5a:a2:48:bf:23:38:
         47:12:f8:9c:c2:7b:f9:be:03:4b:11:d3:e0:0d:cc:08:7a:0e:
         2c:cf:98:6f:e1:99:0a:e5:ac:d8:75:83:c5:3b:8c:ca:cc:81:
         30:11:3a:3b:c5:9b:3d:98:01:d5:44:b7:2d:3f:8d:b5:e2:92:
         36:9f:53:aa:f5:f5:2b:f1:60:08:a7:a1:02:18:83:33:04:76:
         bb:34:b0:3f:c9:7c:a5:63:a3:c7:0e:4a:12:00:29:ec:a2:72:
         e3:f5:8b:8f:ab:be:36:07:dd:3a:6d:7c:4a:02:cb:c1:2a:b5:
         b6:2b:bf:b2:fc:dd:f4:e5:0e:dc:d3:4d:21:8a:71:72:45:24:
         1c:27:f5:df:86:21:e1:d7:2c:ba:c8:d4:03:53:7f:86:fe:b7:
         47:41:68:db:61:9c:14:57:9b:bb:87:b7:2c:f2:da:7b:49:bd:
         f9:2a:b9:27:6f:14:ff:95

pkcs7-signedData

SHA1: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15

00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |

SHA1

48 b1 85 5c 38 a9 26 79 d1 18 7c d3 0c 40 a2 73 |H..\8.&y..|..@.s| e3 af 7f cd |.... |

Certificates

Certificate #0
- 2
  - 7E:93:EB:FB:7C:C6:4E:59:EA:4B:9A:77:D4:06:FC:3B
  - RSA-SHA1: nil
  - Issuer
    - C: ZA
    - ST: Western Cape
    - L: Durbanville
    - O: Thawte
    - OU: Thawte Certification
    - CN: Thawte Timestamping CA
  - 2012-12-21 00:00:00 UTC: 2020-12-30 23:59:59 UTC
  - Subject
    - C: US
    - O: Symantec Corporation
    - CN: Symantec Time Stamping Services CA - G2
  - #5
    - rsaEncryption: nil
    - B1:AC:B3:49:54:4B:97:1C:12:0A:D8:25:79:91:22:57:
      2A:6F:DC:B8:26:C4:43:73:6B:C2:BF:2E:50:5A:FB:14:
      C2:76:8E:43:01:25:43:B4:A1:E2:45:F4:E8:B7:7B:C3:
      74:CC:22:D7:B4:94:00:02:F7:4D:ED:BF:B4:B7:44:24:
      6B:CD:5F:45:3B:D1:44:CE:43:12:73:17:82:8B:69:B4:
      2B:CB:99:1E:AC:72:1B:26:4D:71:1F:B1:31:DD:FB:51:
      61:02:53:A6:AA:F5:49:2C:05:78:45:A5:2F:89:CE:E7:
      99:E7:FE:8C:E2:57:3F:3D:C6:92:DC:4A:F8:7B:33:E4:
      79:0A:FB:F0:75:88:41:9C:FF:C5:03:51:99:AA:D7:6C:
      9F:93:69:87:65:29:83:85:C2:60:14:C4:C8:C9:3B:14:
      DA:C0:81:F0:1F:0D:74:DE:92:22:AB:CA:F7:FB:74:7C:
      27:E6:F7:4A:1B:7F:A7:C3:9E:2D:AE:8A:EA:A6:E6:AA:
      27:16:7D:61:F7:98:71:11:BC:E2:50:A1:4B:E5:5D:FA:
      E5:0E:A7:2C:9F:AA:65:20:D3:D8:96:E8:C8:7C:A5:4E:
      48:44:FF:19:E2:44:07:92:0B:D7:68:84:80:5D:6A:78:
      64:45:CD:60:46:7E:54:C1:13:7C:C5:79:F1:C9:C1:71: 0x010001
  - #6
    - subjectKeyIdentifier:
```
5f 9a f5 6e 5c cc cc 74  9a d4 dd 7d ef 3f db ec  |_..n\..t...}.?..|
4c 80 2e dd                                       |L...            |
```
    - authorityInfoAccess
      - OCSP: http://ocsp.thawte.com
    - basicConstraints
      - true
      - true: 0
    - crlDistributionPoints: http://crl.thawte.com/ThawteTimestampingCA.crl
    - extendedKeyUsage: timeStamping
    - keyUsage: true, 6
    - subjectAltName
      - CN: TimeStamp-2048-1
- RSA-SHA1:
```
03 09 9b 8f 79 ef 7f 59  30 aa ef 68 b5 fa e3 09  |....y..Y0..h....|
1d bb 4f 82 06 5d 37 5f  a6 52 9f 16 8d ea 1c 92  |..O..]7_.R......|
09 44 6e f5 6d eb 58 7c  30 e8 f9 69 8d 23 73 0b  |.Dn.m.X|0..i.#s.|
12 6f 47 a9 ae 39 11 f8  2a b1 9b b0 1a c3 8e eb  |.oG..9..*.......|
59 96 00 ad ce 0c 4d b2  d0 31 a6 08 5c 2a 7a fc  |Y.....M..1..\*z.|
e2 7a 1d 57 4c a8 65 18  e9 79 40 62 25 96 6e c7  |.z.WL.e..y@b%.n.|
c7 37 6a 83 21 08 8e 41  ea dd d9 57 3f 1d 77 49  |.7j.!..A...W?.wI|
87 2a 16 06 5e a6 38 6a  22 12 a3 51 19 83 7e b6  |.*..^.8j"..Q..~.|
```

Certificate #1

2
- 26:95:4A:E1:9A:55:1B:1D:62:2A:23:C2:5D:BE:25:03
- RSA-SHA1: nil
- Issuer
  - C: CN
  - O: WoSign CA Limited
  - CN: WoSign Class 2 Code Signing CA
- 2014-11-24 03:00:56 UTC: 2015-07-24 03:00:56 UTC
- Subject
  - C: CN
  - ST:
```
e5 8c 97 e4 ba ac e5 b8  82                       |.........       |
```
  - L:
```
e5 8c 97 e4 ba ac e5 b8  82                       |.........       |
```
  - CN: Ma Lin
- #5
  - rsaEncryption: nil
  - DA:76:FA:EB:C5:D6:34:4A:D1:92:8B:09:D8:4E:51:4D:
    34:98:73:8E:0A:AD:43:DF:97:82:CD:EA:F3:90:12:AA:
    C2:62:90:82:E1:B5:BB:92:99:95:E8:2E:CA:F0:21:EC:
    DD:BC:9C:92:6B:6E:89:9B:93:0E:58:D0:8B:89:91:59:
    D8:42:02:3D:48:23:A5:C0:9D:B1:22:FC:3F:76:92:07:
    52:4E:F4:2E:6D:09:C6:07:E7:80:72:88:D1:9C:39:71:
    25:26:E7:C0:B7:FC:6A:FB:FA:4C:9E:90:31:02:C3:BC:
    8D:1F:56:C7:BA:17:89:B5:40:CF:D6:37:63:83:07:6A:
    2E:53:C9:F9:59:DC:E0:BE:2D:DF:56:D7:B8:73:0D:21:
    48:73:47:0F:01:F1:95:49:51:B9:67:C6:CF:40:52:D3:
    B9:A4:23:D0:00:BD:F4:02:01:B2:0E:2E:B6:18:B2:F1:
    ED:65:EA:EF:C4:A7:2F:EA:AF:40:06:0D:07:08:60:6A:
    0D:E2:1A:B1:79:30:F7:D0:A7:1A:CD:63:41:89:95:36:
    20:7C:D8:BB:AC:A7:9A:F9:6E:D2:36:D0:76:58:97:06:
    D8:E7:A9:E0:1B:12:C5:D7:59:E3:51:5B:BC:4A:BE:1E:
    C1:FA:26:0E:C2:4D:AA:62:62:EC:1B:16:A0:B0:68:D1: 3
- #6
  - keyUsage: true, 0x80
  - extendedKeyUsage
    - codeSigning: msCodeCom
  - basicConstraints
    - nil
  - subjectKeyIdentifier:
```
24 19 e4 8a 5b 56 b6 8e  12 45 82 8c e5 77 e3 10  |$...[V...E...w..|
b3 20 e1 48                                       |. .H            |
```
  - authorityKeyIdentifier:
```
57 0c 65 a9 31 ce a7 38  8c 1f b3 6e 71 45 c4 d0  |W.e.1..8...nqE..|
5d 35 a0 2d                                       |]5.-            |
```
  - authorityInfoAccess
    - #0
      - OCSP: http://ocsp1.wosign.com/class2/code/ca1
      - caIssuers: http://aia1.wosign.com/class2.code.ca1.cer
  - crlDistributionPoints: http://crls1.wosign.com/ca1-code-2.crl
  - certificatePolicies
    - 1.3.6.1.4.1.36305.1.2.3.1.2
      - id-qt-cps: http://www.wosign.com/policy/

RSA-SHA1:

a2 d0 5b 37 7f 83 d5 dc  ae c2 b3 9d ff 1e 7a 42  |..[7..........zB|
89 7d 38 98 2d be 85 05  53 d7 71 e6 21 7d 3d ec  |.}8.-...S.q.!}=.|
73 49 ee bb bf fc 1d c5  cd 83 e6 c3 ee 6c bf b6  |sI...........l..|
b9 66 92 dc c7 cb 00 f5  bd f9 27 02 a7 44 f8 31  |.f........'..D.1|
8f 32 43 5b 9c d1 60 fa  7c dc 64 aa 7e 13 34 2c  |.2C[..`.|.d.~.4,|
4b 50 d2 ef d6 cf c4 dc  c4 a2 04 cf f5 ae fd 80  |KP..............|
24 e4 1a 14 70 35 12 81  a3 1b 14 c3 06 ae ad 5b  |$...p5.........[|
4d 71 3e 3c 53 33 8e 08  3d 14 d4 f7 4f ea cf 70  |Mq>|
9b e2 ec 95 68 bd 9a 68  27 b7 3e 40 50 29 aa 29  |....h..h'.>@P).)|
2e bd 9a 67 85 97 47 b8  82 e7 20 f8 0f aa b5 4c  |...g..G... ....L|
a6 c9 fe 5a 27 6d 19 e9  8a ef 33 24 5d fb 18 2c  |...Z'm....3$]..,|
08 c5 00 9c 56 69 d2 3f  2b e0 bd 88 75 a2 f0 0e  |....Vi.?+...u...|
ce ae c4 ac 24 c6 33 52  76 45 15 be d6 f3 7d e3  |....$.3RvE....}.|
e3 02 44 2e 7a c3 53 95  06 1e a3 ff 4f ad f3 6d  |..D.z.S.....O..m|
f1 df 6c f8 44 c8 a1 ce  a2 2c 50 a7 7b 81 81 3b  |..l.D....,P.{..;|

Certificate #2
- 2
  - 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
  - RSA-SHA1: nil
  - Issuer
    - C: US
    - O: Symantec Corporation
    - CN: Symantec Time Stamping Services CA - G2
  - 2012-10-18 00:00:00 UTC: 2020-12-29 23:59:59 UTC
  - Subject
    - C: US
    - O: Symantec Corporation
    - CN: Symantec Time Stamping Services Signer - G4
  - #5
    - rsaEncryption: nil
    - A2:63:0B:39:44:B8:BB:23:A7:44:49:BB:0E:FF:A1:F0:
      61:0A:53:93:B0:98:DB:AD:2C:0F:4A:C5:6E:FF:86:3C:
      53:55:0F:15:CE:04:3F:2B:FD:A9:96:96:D9:BE:61:79:
      0B:5B:C9:4C:86:76:E5:E0:43:4B:22:95:EE:C2:2B:43:
      C1:9F:D8:68:B4:8E:40:4F:EE:85:38:B9:11:C5:23:F2:
      64:58:F0:15:32:6F:4E:57:A1:AE:88:A4:02:D7:2A:1E:
      CD:4B:E1:DD:63:D5:17:89:32:5B:B0:5E:99:5A:A8:9D:
      28:50:0E:17:EE:96:DB:61:3B:45:51:1D:CF:12:56:0B:
      92:47:FC:AB:AE:F6:66:3D:47:AC:70:72:E7:92:E7:5F:
      CD:10:B9:C4:83:64:94:19:BD:25:80:E1:E8:D2:22:A5:
      D0:BA:02:7A:A1:77:93:5B:65:C3:EE:17:74:BC:41:86:
      2A:DC:08:4C:8C:92:8C:91:2D:9E:77:44:1F:68:D6:A8:
      74:77:DB:0E:5B:32:8B:56:8B:33:BD:D9:63:C8:49:9D:
      3A:C5:C5:EA:33:0B:D2:F1:A3:1B:F4:8B:BE:D9:B3:57:
      8B:3B:DE:04:A7:7A:22:B2:24:AE:2E:C7:70:C5:BE:4E:
      83:26:08:FB:0B:BD:A9:4F:99:08:E1:10:28:72:AA:CD: 0x010001
  - X509v3 extensions
    - basicConstraints
      - true
      - nil
    - extendedKeyUsage: true, timeStamping
    - keyUsage: true, 0x80
    - authorityInfoAccess
      - #0
        OCSP: http://ts-ocsp.ws.symantec.com
        caIssuers: http://ts-aia.ws.symantec.com/tss-ca-g2.cer
    - crlDistributionPoints: http://ts-crl.ws.symantec.com/tss-ca-g2.crl
    - subjectAltName
      - CN: TimeStamp-2048-2
    - subjectKeyIdentifier:
```
46 c6 69 a3 0e 4a 14 1e  d5 4c da 52 63 17 3f 5e  |F.i..J...L.Rc.?^|
36 bc 0d e6                                       |6...            |
```
    - authorityKeyIdentifier:
```
5f 9a f5 6e 5c cc cc 74  9a d4 dd 7d ef 3f db ec  |_..n\..t...}.?..|
4c 80 2e dd                                       |L...            |
```
- RSA-SHA1:
```
78 3b b4 91 2a 00 4c f0  8f 62 30 37 78 a3 84 27  |x;..*.L..b07x..'|
07 6f 18 b2 de 25 dc a0  d4 94 03 aa 86 4e 25 9f  |.o...%.......N%.|
9a 40 03 1c dd ce e3 79  cb 21 68 06 da b6 32 b4  |.@.....y.!h...2.|
6d bf f4 2c 26 63 33 e4  49 64 6d 0d e6 c3 67 0e  |m..,&c3.Idm...g.|
f7 05 a4 35 6c 7c 89 16  c6 e9 b2 df b2 e9 dd 20  |...5l|......... |
c6 71 0f cd 95 74 dc b6  5c de bd 37 1f 43 78 e6  |.q...t..\..7.Cx.|
78 b5 cd 28 04 20 a3 aa  f1 4b c4 88 29 91 0e 80  |x..(. ...K..)...|
d1 11 fc dd 5c 76 6e 4f  5e 0e 45 46 41 6e 0d b0  |....\vnO^.EFAn..|
ea 38 9a b1 3a da 09 71  10 fc 1c 79 b4 80 7b ac  |.8..:..q...y..{.|
69 f4 fd 9c b6 0c 16 2b  f1 7f 5b 09 3d 9b 5b e2  |i......+..[.=.[.|
16 ca 13 81 6d 00 2e 38  0d a8 29 8f 2c e1 b2 f4  |....m..8..).,...|
5a a9 01 af 15 9c 2c 2f  49 1b db 22 bb c3 fe 78  |Z.....,/I.."...x|
94 51 c3 86 b1 82 88 5d  f0 3d b4 51 a1 79 33 2b  |.Q.....].=.Q.y3+|
2e 7b b9 dc 20 09 13 71  eb 6a 19 5b cf e8 a5 30  |.{.. ..q.j.[...0|
57 2c 89 49 3f b9 cf 7f  c9 bf 3e 22 68 63 53 9a  |W,.I?.....>"hcS.|
bd 69 74 ac c5 1d 3c 7f  92 e0 c3 bc 1c d8 04 75  |.it...<........u|
```

Certificate #3

2
- 25:E7:3B:77:32:8E:5C:A0:AA:57:F8:65:68:DC:F6:E8
- RSA-SHA1: nil
- Issuer
  - C: CN
  - O: WoSign CA Limited
  - CN: Certification Authority of WoSign
- 2009-08-08 01:00:05 UTC: 2024-08-08 01:00:05 UTC
- Subject
  - C: CN
  - O: WoSign CA Limited
  - CN: WoSign Class 2 Code Signing CA
- #5
  - rsaEncryption: nil
  - AF:C9:15:E2:40:81:6F:56:BA:AA:56:55:28:DD:AB:4B:
    BE:83:FC:A1:AA:72:48:F3:F8:51:FD:BE:0E:B1:D8:25:
    F0:CD:5F:BC:4F:24:7B:78:72:68:2F:74:71:DB:C1:16:
    4A:2B:A8:DC:B9:1C:E5:C3:73:5A:4E:35:4D:C3:91:34:
    2A:1A:1C:8A:38:34:8F:9A:C1:55:DC:74:51:F7:B9:CB:
    26:73:BF:C8:62:70:F4:35:36:23:00:77:80:06:71:7B:
    76:C1:CD:F1:A9:1A:9C:78:6F:AB:58:58:55:A8:F9:92:
    86:4A:83:85:C6:D5:86:6B:68:58:80:B5:D0:2E:60:F0:
    D4:FA:B3:3D:32:FB:D3:63:CE:F2:7E:11:DC:E0:D1:91:
    23:B0:CC:7C:52:B5:6D:D4:5D:75:A7:0C:18:F1:AF:25:
    F6:4C:67:2D:5E:6F:9B:47:99:DB:34:7A:C5:43:32:2A:
    A7:64:69:81:48:4B:B7:1F:E4:5A:DB:E7:CC:18:D8:BA:
    77:2F:5D:DD:ED:09:2A:33:95:27:C2:58:91:0F:B0:DC:
    AE:88:EF:12:E3:68:99:1F:B4:87:9E:28:2C:84:82:AA:
    7A:F3:FD:D9:CF:00:8C:B4:55:FE:3B:9E:38:65:8B:24:
    26:8A:62:90:C0:DD:17:08:4F:BC:AE:28:F8:A6:02:35: 0x010001
- #6
  - keyUsage: true, 6
  - extendedKeyUsage
    - codeSigning: msCodeCom
  - basicConstraints
    - true
    - true: 0
  - crlDistributionPoints: http://crls1.wosign.com/ca1.crl
  - authorityInfoAccess
    - #0
      - OCSP: http://ocsp1.wosign.com/ca1
      - caIssuers: http://aia1.wosign.com/ca1-class2-code.cer
  - subjectKeyIdentifier:
```
57 0c 65 a9 31 ce a7 38  8c 1f b3 6e 71 45 c4 d0  |W.e.1..8...nqE..|
5d 35 a0 2d                                       |]5.-            |
```
  - authorityKeyIdentifier:
```
e1 66 cf 0e d1 f1 b3 4b  b7 06 20 14 fe 87 12 d5  |.f.....K.. .....|
f6 fe fb 3e                                       |...>            |
```
  - certificatePolicies
    - 1.3.6.1.4.1.36305.1.2.3
      - id-qt-cps: http://www.wosign.com/policy/

RSA-SHA1:

07 1c 8c f9 9f 7f 79 58  98 9c cf 13 5b 15 4f bb  |......yX....[.O.|
d9 d3 81 94 cf 56 c8 27  39 87 e2 d0 3b e1 c0 bd  |.....V.'9...;...|
4b 86 93 4e eb d5 09 56  17 99 be 8e 71 63 45 bb  |K..N...V....qcE.|
2f d5 6e 8b 7f 70 ef 0f  e7 e9 cf 5b a8 41 26 aa  |/.n..p.....[.A&.|
47 96 87 78 3d 6e 1e 16  35 9e 0d 9c b7 bb 54 2a  |G..x=n..5.....T*|
4a 01 4d f4 cc d9 0b d5  37 c2 43 92 02 bb 40 bd  |J.M.....7.C...@.|
75 3e 19 03 4d 32 bf aa  9c 62 d6 46 d6 53 4d 2c  |u>..M2...b.F.SM,|
9f 55 67 27 b0 0f 14 75  cd 8f c2 b3 7f b4 9c eb  |.Ug'...u........|
54 3b 05 1e fa ff 10 c4  e7 b9 be 42 e4 79 28 00  |T;.........B.y(.|
16 0a 35 8a 67 a8 ec be  ec 2c 81 7e fd 47 cb 9c  |..5.g....,.~.G..|
e4 06 c9 11 4d e8 6e 9b  77 6a 43 65 d8 cf 1d f6  |....M.n.wjCe....|
0f 27 84 76 3c 19 84 70  e4 3c 2c f7 2c 1d 90 57  |.'.v<..p.<,.,..W|
68 34 88 46 b0 6b 1c 03  1f 00 af aa 37 5a 89 4e  |h4.F.k......7Z.N|
2a 70 82 49 50 c7 9a 4a  ec 46 a9 73 68 12 12 23  |*p.IP..J.F.sh..#|
3c 8e 0c bd 05 54 67 01  f6 e5 12 2f 5b 73 d2 64  |<....Tg..../[s.d|
ca 98 54 ac c2 d8 8b 44  b2 0c 0d 22 2c 3b 0d 93  |..T....D...",;..|
c0 36 ea ff 99 62 2f a9  ee 96 48 21 9a 63 48 66  |.6...b/...H!.cHf|
37 49 ca 59 f0 cb 0e 08  ff 5b 48 3c 6d 09 2e cd  |7I.Y.....[H.........S.aR.|
44 90 56 e3 fc 4f 4b d9  f9 0d 4b 25 25 cf ff 27  |D.V..OK...K%%..'|
0c 48 ae f6 47 ab 88 45  98 a1 b7 de 38 53 31 9e  |.H..G..E....8S1.|
d3 94 36 4d 0f c5 a8 00  5d c4 b2 1f 76 6d 02 f2  |..6M....]...vm..|
c7 e2 b1 35 24 5d 2e 40  4d 01 17 46 2d 56 5f b4  |...5$].@M..F-V_.|
ce d9 46 09 2f 32 29 ef  4e de 48 2e a0 98 4b c0  |..F./2).N.H...K.|
1e 18 8c 04 7c a1 85 ce  7a 90 6e ee 50 0a fc 90  |....|...z.n.P...|
fc 75 05 81 a6 31 3d 9f  2b 5b eb f4 18 26 8a 58  |.u...1=.+[...&.X|
69 ae 0f e6 2b bb 44 4f  e3 30 25 b0 75 e0 20 e0  |i...+.DO.0%.u. .|
2b 29 50 5e c2 c7 f8 34  49 bf f2 12 73 f9 c7 f3  |+)P^...4I...s...|
80 80 1c 2d 1c 19 48 92  a4 3e be 24 4c ec f2 cc  |...-..H..>.$L...|
18 e1 11 2b a9 41 17 01  15 75 53 64 5b 6f 87 f1  |...+.A...uSd[o..|

Certificate #4

2
- 1D:06:19:4E:5A:F8:A1:7F:34:33:23:FE:1C:83:6A:4A
- RSA-SHA1: nil
- Issuer
  - C: IL
  - O: StartCom Ltd.
  - OU: Secure Digital Certificate Signing
  - CN: StartCom Certification Authority
- 2006-09-17 22:46:36 UTC: 2019-12-31 23:59:59 UTC
- Subject
  - C: CN
  - O: WoSign CA Limited
  - CN: Certification Authority of WoSign
- #5
  - rsaEncryption: nil
  - BD:CA:8D:AC:B8:91:15:56:97:7B:6B:5C:7A:C2:DE:6B:
    D9:A1:B0:C3:10:23:FA:A7:A1:B2:CC:31:FA:3E:D9:A6:
    29:6F:16:3D:E0:6B:F8:B8:40:5F:DB:39:A8:00:7A:8B:
    A0:4D:54:7D:C2:22:78:FC:8E:09:B8:A8:85:D7:CC:95:
    97:4B:74:D8:9E:7E:F0:00:E4:0E:89:AE:49:28:44:1A:
    10:99:32:0F:25:88:53:A4:0D:B3:0F:12:08:16:0B:03:
    71:27:1C:7F:E1:DB:D2:FD:67:68:C4:05:5D:0A:0E:5D:
    70:D7:D8:97:A0:BC:53:41:9A:91:8D:F4:9E:36:66:7A:
    7E:56:C1:90:5F:E6:B1:68:20:36:A4:8C:24:2C:2C:47:
    0B:59:76:66:30:B5:BE:DE:ED:8F:F8:9D:D3:BB:01:30:
    E6:F2:F3:0E:E0:2C:92:80:F3:85:F9:28:8A:B4:54:2E:
    9A:ED:F7:76:FC:15:68:16:EB:4A:6C:EB:2E:12:8F:D4:
    CF:FE:0C:C7:5C:1D:0B:7E:05:32:BE:5E:B0:09:2A:42:
    D5:C9:4E:90:B3:59:0D:BB:7A:7E:CD:D5:08:5A:B4:7F:
    D8:1C:69:11:F9:27:0F:7B:06:AF:54:83:18:7B:E1:DD:
    54:7A:51:68:6E:77:FC:C6:BF:52:4A:66:46:A1:B2:67:
    1A:BB:A3:4F:77:A0:BE:5D:FF:FC:56:0B:43:72:77:90:
    CA:9E:F9:F2:39:F5:0D:A9:F4:EA:D7:E7:B3:10:2F:30:
    42:37:21:CC:30:70:C9:86:98:0F:CC:58:4D:83:BB:7D:
    E5:1A:A5:37:8D:B6:AC:32:97:00:3A:63:71:24:1E:9E:
    37:C4:FF:74:D4:37:C0:E2:FE:88:46:60:11:DD:08:3F:
    50:36:AB:B8:7A:A4:95:62:6A:6E:B0:CA:6A:21:5A:69:
    F3:F3:FB:1D:70:39:95:F3:A7:6E:A6:81:89:A1:88:C5:
    3B:71:CA:A3:52:EE:83:BB:FD:A0:77:F4:E4:6F:E7:42:
    DB:6D:4A:99:8A:34:48:BC:17:DC:E4:80:08:22:B6:F2:
    31:C0:3F:04:3E:EB:9F:20:79:D6:B8:06:64:64:02:31:
    D7:A9:CD:52:FB:84:45:69:09:00:2A:DC:55:8B:C4:06:
    46:4B:C0:4A:1D:09:5B:39:28:FD:A9:AB:CE:00:F9:2E:
    48:4B:26:E6:30:4C:A5:58:CA:B4:44:82:4F:E7:91:1E:
    33:C3:B0:93:FF:11:FC:81:D2:CA:1F:71:29:DD:76:4F:
    92:25:AF:1D:81:B7:0F:2F:8C:C3:06:CC:2F:27:A3:4A:
    E4:0E:99:BA:7C:1E:45:1F:7F:AA:19:45:96:FD:FC:3D: 0x010001
- X509v3 extensions
  - basicConstraints
    - true
    - true: 2
  - keyUsage: true, 6
  - subjectKeyIdentifier:
```
e1 66 cf 0e d1 f1 b3 4b  b7 06 20 14 fe 87 12 d5  |.f.....K.. .....|
f6 fe fb 3e                                       |...>            |
```
  - authorityKeyIdentifier:
```
4e 0b ef 1a a4 40 5b a5  17 69 87 30 ca 34 68 43  |N....@[..i.0.4hC|
d0 41 ae f2                                       |.A..            |
```
  - authorityInfoAccess
    - #0
      - OCSP: http://ocsp.startssl.com/ca
      - caIssuers: http://aia.startssl.com/certs/ca.crt
  - crlDistributionPoints: http://crl.startssl.com/sfsca.crl

RSA-SHA1:

39 ad da 00 4d 0a fc 69  cf d3 18 db 67 27 a0 5e  |9...M..i....g'.^|
0f f3 91 26 ce 78 3f be  32 60 71 22 34 d3 c9 48  |...&.x?.2`q"4..H|
57 d5 da ee 4a 3f cd 00  5f 31 5f 82 29 58 21 2f  |W...J?.._1_.)X!/|
13 a8 3f 2f 86 34 57 f2  20 f8 3d af da 45 ca 01  |..?/.4W. .=..E..|
8d c9 66 a7 b9 36 68 28  ea ed 7a 5e c4 7e 61 a2  |..f..6h(..z^.~a.|
1c b9 2b a7 ae 40 1a 3c  9f 7b e3 c8 6e fa f9 90  |..+..@.<.{..n...|
2c fa 30 de e3 18 36 09  34 b5 01 0e 62 d7 12 a4  |,.0...6.4...b...|
b3 e7 68 79 25 c6 76 72  2c 33 04 b3 74 9d 58 d2  |..hy%.vr,3..t.X.|
54 2d 29 19 1c aa f9 aa  cf b3 b6 73 b3 4b 3b 5c  |T-)........s.K;\|
aa 37 31 b8 c3 ff 1f ba  c2 c8 98 ca 34 0e 16 63  |.71.........4..c|
48 e3 3d b9 ef c6 01 3a  6c ae 7c 14 40 89 c4 79  |H.=....:l.|.@..y|
45 76 c2 8c 5e 50 c1 76  97 b3 d2 61 ee ec 5e 13  |Ev..^P.v...a..^.|
04 5e 5b 72 6e b6 76 7a  75 e1 7f 94 09 e8 d7 92  |.^[rn.vzu.......|
44 31 a6 1b 01 73 ee a2  6e b6 6d 24 1c a5 ff 70  |D1...s..n.m$...p|
10 9a f6 36 c4 ea e3 2c  b0 e4 39 fc c1 89 a2 a8  |...6...,..9.....|
e9 78 cc 19 a9 63 e5 64  7b 32 13 de 15 47 73 39  |.x...c.d{2...Gs9|
9c ad 7a c3 f6 7f 1a fe  a2 da 7a a0 c0 23 94 e8  |..z.......z..#..|
e6 0f 30 32 40 24 2c 9b  f2 2c 6f 56 64 fd d0 23  |..02@$,..,oVd..#|
ca 58 8e 5d db ea 63 f9  33 6e 76 a3 b9 1b 64 a6  |.X.]..c.3nv...d.|
7c ea 08 91 cc 75 d7 2c  d5 c7 17 e8 f6 a9 aa 94  ||....u.,........|
d9 3b 5e 49 79 64 ad 0e  a8 b5 8a 8e 1e d0 e2 e2  |.;^Iyd..........|
5a a2 48 bf 23 38 47 12  f8 9c c2 7b f9 be 03 4b  |Z.H.#8G....{...K|
11 d3 e0 0d cc 08 7a 0e  2c cf 98 6f e1 99 0a e5  |......z.,..o....|
ac d8 75 83 c5 3b 8c ca  cc 81 30 11 3a 3b c5 9b  |..u..;....0.:;..|
3d 98 01 d5 44 b7 2d 3f  8d b5 e2 92 36 9f 53 aa  |=...D.-?....6.S.|
f5 f5 2b f1 60 08 a7 a1  02 18 83 33 04 76 bb 34  |..+.`......3.v.4|
b0 3f c9 7c a5 63 a3 c7  0e 4a 12 00 29 ec a2 72  |.?.|.c...J..)..r|
e3 f5 8b 8f ab be 36 07  dd 3a 6d 7c 4a 02 cb c1  |......6..:m|J...|
2a b5 b6 2b bf b2 fc dd  f4 e5 0e dc d3 4d 21 8a  |*..+.........M!.|
71 72 45 24 1c 27 f5 df  86 21 e1 d7 2c ba c8 d4  |qrE$.'...!..,...|
03 53 7f 86 fe b7 47 41  68 db 61 9c 14 57 9b bb  |.S....GAh.a..W..|
87 b7 2c f2 da 7b 49 bd  f9 2a b9 27 6f 14 ff 95  |..,..{I..*.'o...|

unnamed
- #0
  - C: CN
  - O: WoSign CA Limited
  - CN: WoSign Class 2 Code Signing CA
- 26:95:4A:E1:9A:55:1B:1D:62:2A:23:C2:5D:BE:25:03
SHA1: nil

contentType: 1.3.6.1.4.1.311.2.1.4
1.3.6.1.4.1.311.2.1.11: msCodeCom

messageDigest:

6a d5 7c 1a c0 ee 66 cf  5f 8d fb df 60 5f f3 4b  |j.|...f._...`_.K|
9a c5 4e bf                                       |..N.            |

1.3.6.1.4.1.311.2.1.12

00 44 00 6f 00 77 00 6e 00 6c 00 6f 00 61 00 64 |.D.o.w.n.l.o.a.d| 00 65 00 72 |.e.r |
: Downloader

rsaEncryption:

8b 24 90 9e c6 4b b5 25  e5 c2 89 cd 8b e4 42 1d  |.$...K.%......B.|
5c c3 5e 9b 9a b6 08 91  4b 9f 0f f3 3f b4 c6 f0  |\.^.....K...?...|
8f 4c 71 72 12 6d 98 51  19 62 a7 31 66 3e a2 20  |.Lqr.m.Q.b.1f>. |
51 31 53 19 25 7c e9 ba  60 2e d4 c5 db 0b 2a 7f  |Q1S.%|..`.....*.|
b5 93 60 d1 ec 87 e8 05  83 e7 9a 97 d2 54 fd 83  |..`..........T..|
0e ce 1f 16 db 2d 64 cb  48 d8 c9 44 c3 dc 40 fb  |.....-d.H..D..@.|
a5 6c 38 91 aa 90 53 79  26 4a 4f 89 80 57 cd ce  |.l8...Sy&JO..W..|
40 55 7d a2 f0 68 bb b8  95 e9 71 df 91 4f 87 b4  |@U}..h....q..O..|
77 51 6f 87 8a 12 ea f0  01 34 1a 5e dd cb 97 b9  |wQo......4.^....|
06 ec 88 b1 6e 03 46 2f  17 f6 72 3b c6 7f 23 78  |....n.F/..r;..#x|
9d 01 2e 22 35 26 6a af  14 b2 0a 3a a3 9e e2 1f  |..."5&j....:....|
92 98 8b 0e bb 69 91 fa  90 41 77 1f b1 30 71 93  |.....i...Aw..0q.|
8d a4 f0 55 48 3b 1b 6d  bd 90 18 fd 5a 5c 68 20  |...UH;.m....Z\h |
cd 44 f6 ed 7c c6 8e 82  76 fe 95 61 e4 90 60 df  |.D..|...v..a..`.|
1f e6 79 0e 64 27 11 87  ba c0 18 79 f0 3f 85 f4  |..y.d'.....y.?..|
f5 06 67 05 33 f2 9b f5  8f 94 23 a8 da b4 12 37  |..g.3.....#....7|

countersignature

unnamed
- #0
  - C: US
  - O: Symantec Corporation
  - CN: Symantec Time Stamping Services CA - G2
- 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
SHA1: nil

contentType: pkcs7-data
signingTime: 2014-12-16 05:49:42 UTC

messageDigest:

05 65 8f 90 ce 02 9e 83  b9 39 25 89 19 fc ef dc  |.e.......9%.....|
37 81 b5 af                                       |7...            |

rsaEncryption:

37 ff 5a b1 a4 e2 85 6e  31 4f c0 c2 b5 1b 6d 4f  |7.Z....n1O....mO|
83 f4 e5 4e b0 09 a9 2b  b0 ea 66 82 a7 2f 0a 99  |...N...+..f../..|
ba 5a 3f 79 b0 a6 42 2e  8c 03 9b f0 df 45 e2 bc  |.Z?y..B......E..|
63 05 65 ec ae ca d8 2b  25 f2 be 1e 5a e3 cc c4  |c.e....+%...Z...|
87 ce ec 6a 7b a0 ca 85  41 f3 6d fc ae 88 d8 22  |...j{...A.m...."|
fc 13 42 64 7d f8 c8 b4  45 df 24 df 79 c2 b9 52  |..Bd}...E.$.y..R|
8d fe 69 2c a4 d2 ab a3  93 79 e3 8f ee 8e e5 d6  |..i,.....y......|
33 28 28 d9 1c 7f 5c ab  b4 aa 92 0a 20 7e db ee  |3((...\..... ~..|
fe dc 3a 89 1a c5 53 47  bf b0 fa 2a 0c 6f 1f 2b  |..:...SG...*.o.+|
75 79 74 4d 40 ca bb 18  43 97 c3 bc 3f 48 38 e8  |uytM@...C...?H8.|
6a a0 62 aa 47 e4 a8 da  62 3d 07 6b 61 30 12 5f  |j.b.G...b=.ka0._|
36 a9 9d c1 ec 6c 29 6d  0c 50 f8 a6 4f 4f 3d da  |6....l)m.P..OO=.|
e9 2a 48 f3 cd b9 6d 19  ea 56 a0 66 c8 ed 53 9a  |.*H...m..V.f..S.|
93 c5 eb 54 a4 a2 68 a9  36 5a 8a 45 73 4d 9b 70  |...T..h.6Z.EsM.p|
1c e6 8b 0c 84 bb 79 d8  d9 fe 6f f8 35 00 3c da  |......y...o.5.<.|
b8 1a ce 95 13 bf 17 b7  ba 36 6e 5d 2d a8 57 d1  |.........6n]-.W.|

show previews

offset	size	type	comment
0	301056	EXE	12/03/2014 05:17:43	#
15c1	15	HTM		#
49800	7720	PKCS7	Authenticode Signature	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

amt_omiga-plus.exe- Worker.exe - Syn worker

MZ Header

Rich Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 080904b0

VS_FIXEDFILEINFO

Signers (1)

Certificates (5)

amt_omiga-plus.exe
- Worker.exe - Syn worker