SBFTIKREQF.bin - rrgtret55sffs

info
MZ
PE
resources
strings
imports
exports
foremost
version info
signature
hexdump
disasm
log
discuss
donate

filename	SBFTIKREQF.bin
size	1313712 (0x140bb0)
md5	fd7ab8b76b848378b04fa7bc6965fed9

type	PE32 executable (DLL) (console) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x50
blocks_in_file	2
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0xf
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0x1a
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x100

DOS stub

00000000: ba 10 00 0e 1f b4 09 cd  21 b8 01 4c cd 21 90 90  |........!..L.!..|
00000010: 54 68 69 73 20 70 72 6f  67 72 61 6d 20 6d 75 73  |This program mus|
00000020: 74 20 62 65 20 72 75 6e  20 75 6e 64 65 72 20 57  |t be run under W|
00000030: 69 6e 33 32 0d 0a 24 37  00 00 00 00 00 00 00 00  |in32..$7........|
00000040: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
000000c0:

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	0xa
TimeDateStamp	0x5d362231
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0xa18e
Magic	0x10b
LinkerVersion	2.25
SizeOfCode	0x116200
SizeOfInitializedData	0x29a00
SizeOfUninitializedData	0
AddressOfEntryPoint	0x117ab0
BaseOfCode	0x1000
BaseOfData	0x118000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	5.0
ImageVersion	0.0
SubsystemVersion	5.0
Reserved1	0
SizeOfImage	0x14c000
SizeOfHeaders	0x400
CheckSum	0x145d27
Subsystem	3
DllCharacteristics	0
SizeOfStackReserve	0
SizeOfStackCommit	0
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

Borland Delphi 2006

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x11540c	0x115600	R-X CODE
.itext	0x117000	0xb18	0xc00	R-X CODE
.data	0x118000	0x6b4c	0x6c00	RW- IDATA
.bss	0x11f000	0x5f24	0	RW-
.idata	0x125000	0x1260	0x1400	RW- IDATA
.didata	0x127000	0x394	0x400	RW- IDATA
.edata	0x128000	0xd2	0x200	R-- IDATA
.rdata	0x129000	0x45	0x200	R-- IDATA
.reloc	0x12a000	0x1c824	0x1ca00	R-- IDATA DISCARDABLE
.rsrc	0x147000	0x4800	0x4800	R-- IDATA

Data Directory

type	va	size
EXPORT	0x128000	0xd2
IMPORT	0x125000	0x1260
RESOURCE	0x147000	0x4800
EXCEPTION	0	0
SECURITY	0x140000	0xbb0
BASERELOC	0x12a000	0x1c824
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x125378	0x2b0
Delay_IAT	0x127000	0x394
CLR_Header	0	0

show previews

type	name	size
STRING	#4083	748
STRING	#4084	1024
STRING	#4085	680
STRING	#4086	184
STRING	#4087	208
STRING	#4088	852
STRING	#4089	940
STRING	#4090	852
STRING	#4091	836
STRING	#4092	1260
STRING	#4093	660
STRING	#4094	1272
STRING	#4095	956
STRING	#4096	1044
RCDATA	BMP	2692
RCDATA	DVCLAL	16
RCDATA	PACKAGEINFO	912
RCDATA	PLATFORMTARGETS	2
VERSION	#1	824
MANIFEST	#1	1197

id	lang	string
65312	0	Execution of request terminated with unknown error
65313	0	Error querying headers: (%d) %s
65314	0	Error obtaining session handle
65315	0	Error sending data: (%d) %s
65316	0	Error receiving data: (%d) %s
65317	0	Error connecting to server: %s
65318	0	Error opening request: (%d) %s
65319	0	Error adding header: (%d) %s
65320	0	Error removing header: (%d) %s
65321	0	Error reading data: (%d) %s
65322	0	Error setting timeout for the request: (%d) %s
65328	0	Invalid StringBaseIndex
65329	0	Operation Cancelled
65330	0	Scheme "%s" already registered for %s
65331	0	Credential without user and password
65332	0	Platform-dependant function not implemented
65333	0	Scheme-dependant function not implemented
65334	0	Method already assigned
65335	0	URL already assigned
65336	0	Invalid URL: "%s"
65337	0	Maximum number of redirections (%d) exceeded
65338	0	Error getting Server Certificate
65339	0	Server Certificate Invalid or not present
65340	0	Server Certificate not accepted
65341	0	Empty certificate list
65342	0	Unspecified certificate from client
65343	0	Client rejected the certificate
65344	0	Sunday
65345	0	Monday
65346	0	Tuesday
65347	0	Wednesday
65348	0	Thursday
65349	0	Friday
65350	0	Saturday
65351	0	Invalid source array
65352	0	Invalid destination array
65353	0	Character index out of bounds (%d)
65354	0	Start index out of bounds (%d)
65355	0	Invalid count (%d)
65356	0	Invalid destination index (%d)
65357	0	Invalid code page
65358	0	Invalid encoding name
65359	0	No mapping for the Unicode character exists in the target multi-byte code page
65360	0	April
65361	0	May
65362	0	June
65363	0	July
65364	0	August
65365	0	September
65366	0	October
65367	0	November
65368	0	December
65369	0	Sun
65370	0	Mon
65371	0	Tue
65372	0	Wed
65373	0	Thu
65374	0	Fri
65375	0	Sat
65376	0	A call to an OS function failed
65377	0	Jan
65378	0	Feb
65379	0	Mar
65380	0	Apr
65381	0	May
65382	0	Jun
65383	0	Jul
65384	0	Aug
65385	0	Sep
65386	0	Oct
65387	0	Nov
65388	0	Dec
65389	0	January
65390	0	February
65391	0	March
65392	0	Invalid argument
65393	0	Invalid variant type
65394	0	Operation not supported
65395	0	Unexpected variant error
65396	0	External exception %x
65397	0	Assertion failed
65398	0	Interface not supported
65399	0	Exception in safecall method
65400	0	Object lock not owned
65401	0	Monitor support function not initialized
65402	0	Feature not implemented
65403	0	Method called on disposed object
65404	0	%s (%s, line %d)
65405	0	Abstract Error
65406	0	Access violation at address %p in module '%s'. %s of address %p
65407	0	System Error. Code: %d. %s%s
65408	0	No argument for format '%s'
65409	0	Variant method calls not supported
65410	0	Read
65411	0	Write
65412	0	Execution
65413	0	Invalid access
65414	0	Error creating variant or safe array
65415	0	Variant or safe array index out of bounds
65416	0	Variant or safe array is locked
65417	0	Invalid variant type conversion
65418	0	Invalid variant operation
65419	0	Invalid NULL variant operation
65420	0	Invalid variant operation (%s%.8x) %s
65421	0	Could not convert variant of type (%s) into type (%s)
65422	0	Overflow while converting variant of type (%s) into type (%s)
65423	0	Variant overflow
65424	0	Range check error
65425	0	Integer overflow
65426	0	Invalid floating point operation
65427	0	Floating point division by zero
65428	0	Floating point overflow
65429	0	Floating point underflow
65430	0	Invalid pointer operation
65431	0	Invalid class typecast
65432	0	Access violation at address %p. %s of address %p
65433	0	Access violation
65434	0	Stack overflow
65435	0	Control-C hit
65436	0	Privileged instruction
65437	0	Exception %s in module %s at %p. %s%s
65438	0	Application Error
65439	0	Format '%s' invalid or incompatible with argument
65440	0	Cannot call BeginInvoke on a TComponent in the process of destruction
65441	0	'%s' is not a valid integer value
65442	0	'%s' is not a valid integer value for %s type
65443	0	'%d.%d' is not a valid timestamp
65444	0	Invalid argument to time encode
65445	0	Invalid argument to date encode
65446	0	Out of memory
65447	0	I/O error %d
65448	0	File not found
65449	0	Invalid filename
65450	0	Too many open files
65451	0	File access denied
65452	0	Read beyond end of file
65453	0	Disk full
65454	0	Invalid numeric input
65455	0	Division by zero
65456	0	Windows 8
65457	0	Windows 8.1
65458	0	Windows 10
65459	0	Observer is not supported
65460	0	Cannot have multiple single cast observers added to the observers collection
65461	0	The object does not implement the observer interface
65462	0	No single cast observer with ID %d was added to the observer collection
65463	0	No multi cast observer with ID %d was added to the observer collection
65464	0	Invalid date string: %s
65465	0	Invalid time string: %s
65466	0	Invalid time Offset string: %s
65467	0	Error decoding URL style (%%XX) encoded string at position %d
65468	0	Invalid URL encoded character (%s) at position %d
65469	0	Cannot start a task that has already completed
65470	0	One or more errors occurred
65471	0	Must wait on at least one event
65472	0	%s (Version %d.%d, Build %d, %5:s)
65473	0	%s Service Pack %4:d (Version %1:d.%2:d, Build %3:d, %5:s)
65474	0	32-bit Edition
65475	0	64-bit Edition
65476	0	Windows
65477	0	Windows Vista
65478	0	Windows Server 2008
65479	0	Windows 7
65480	0	Windows Server 2008 R2
65481	0	Windows 2000
65482	0	Windows XP
65483	0	Windows Server 2003
65484	0	Windows Server 2003 R2
65485	0	Windows Server 2012
65486	0	Windows Server 2012 R2
65487	0	Windows Server 2016
65488	0	Cannot call Start on a running or suspended thread
65489	0	Parameter %s cannot be a negative value
65490	0	The given "%s" local time is invalid (situated within the missing period prior to DST).
65491	0	Source and Destination arrays must not be the same
65492	0	Invalid Timeout value: %s
65493	0	SpinCount out of range. Must be between 0 and %d
65494	0	Timespan too long
65495	0	Value cannot be NaN
65496	0	Argument out of range
65497	0	Unbalanced stack or queue operation
65498	0	Item not found
65499	0	Duplicates not allowed
65500	0	Insufficient RTTI available to support this operation
65501	0	Parameter count mismatch
65502	0	Type '%s' is not declared in the interface section of a unit
65503	0	VAR and OUT arguments must match parameter type exactly
65504	0	List index out of bounds (%d)
65505	0	Out of memory while expanding memory stream
65506	0	%s has not been registered as a COM class
65507	0	Error reading %s%s%s: %s
65508	0	Stream read error
65509	0	Property is read-only
65510	0	Failed to set data for '%s'
65511	0	Resource %s not found
65512	0	%s.Seek not implemented
65513	0	Operation not allowed on sorted list
65514	0	Property %s does not exist
65515	0	Stream write error
65516	0	Thread creation error: %s
65517	0	Thread Error: %s (%d)
65518	0	Cannot terminate an externally created thread
65519	0	Cannot wait for an externally created thread
65520	0	Ancestor for '%s' not found
65521	0	Cannot assign a %s to a %s
65522	0	Can't write to a read-only resource stream
65523	0	CheckSynchronize called from thread $%x, which is NOT the main thread
65524	0	Class %s not found
65525	0	List does not allow duplicates ($0%x)
65526	0	A component named %s already exists
65527	0	String list does not allow duplicates
65528	0	Cannot create file "%s". %s
65529	0	Cannot open file "%s". %s
65530	0	''%s'' is not a valid component name
65531	0	Invalid property value
65532	0	Invalid property path
65533	0	Invalid property value
65534	0	List capacity out of bounds (%d)
65535	0	List count out of bounds (%d)

module_name	hint	ord	function_name
kernel32.dll			GetACP
kernel32.dll			CloseHandle
kernel32.dll			LocalFree
kernel32.dll			SizeofResource
kernel32.dll			VirtualProtect
kernel32.dll			TlsAlloc
kernel32.dll			TerminateThread
kernel32.dll			QueryPerformanceFrequency
kernel32.dll			IsDebuggerPresent
kernel32.dll			VirtualFree
kernel32.dll			GetFullPathNameW
kernel32.dll			GetProcessHeap
kernel32.dll			ExitProcess
kernel32.dll			HeapAlloc
kernel32.dll			GetCPInfoExW
kernel32.dll			RtlUnwind
kernel32.dll			GetCPInfo
kernel32.dll			GetStdHandle
kernel32.dll			GetTimeZoneInformation
kernel32.dll			GetModuleHandleW
kernel32.dll			FreeLibrary
kernel32.dll			HeapDestroy
kernel32.dll			ReadFile
kernel32.dll			CreateProcessW
kernel32.dll			GetLastError
kernel32.dll			GetModuleFileNameW
kernel32.dll			SetLastError
kernel32.dll			FindResourceW
kernel32.dll			CreateThread
kernel32.dll			CompareStringW
kernel32.dll			CreateMutexW
kernel32.dll			LoadLibraryA
kernel32.dll			ResetEvent
kernel32.dll			GetVersion
kernel32.dll			FreeResource
kernel32.dll			RaiseException
kernel32.dll			FormatMessageW
kernel32.dll			SwitchToThread
kernel32.dll			GetExitCodeThread
kernel32.dll			OutputDebugStringW
kernel32.dll			GetCurrentThread
kernel32.dll			IsBadReadPtr
kernel32.dll			LoadLibraryExW
kernel32.dll			LockResource
kernel32.dll			FileTimeToSystemTime
kernel32.dll			GetCurrentThreadId
kernel32.dll			UnhandledExceptionFilter
kernel32.dll			VirtualQuery
kernel32.dll			VirtualQueryEx
kernel32.dll			GlobalFree
kernel32.dll			Sleep
kernel32.dll			EnterCriticalSection
kernel32.dll			SetFilePointer
kernel32.dll			LoadResource
kernel32.dll			SuspendThread
kernel32.dll			GetTickCount
kernel32.dll			GetStartupInfoW
kernel32.dll			InitializeCriticalSection
kernel32.dll			GetThreadPriority
kernel32.dll			SetThreadPriority
kernel32.dll			GetCurrentProcess
kernel32.dll			VirtualAlloc
kernel32.dll			GetSystemInfo
kernel32.dll			GetCommandLineW
kernel32.dll			LeaveCriticalSection
kernel32.dll			GetProcAddress
kernel32.dll			ResumeThread
kernel32.dll			GetVersionExW
kernel32.dll			VerifyVersionInfoW
kernel32.dll			HeapCreate
kernel32.dll			LCMapStringW
kernel32.dll			VerSetConditionMask
kernel32.dll			GetDiskFreeSpaceW
kernel32.dll			FindFirstFileW
kernel32.dll			GetUserDefaultUILanguage
kernel32.dll			TlsFree
kernel32.dll			lstrlenW
kernel32.dll			QueryPerformanceCounter
kernel32.dll			SetEndOfFile
kernel32.dll			HeapFree
kernel32.dll			WideCharToMultiByte
kernel32.dll			FindClose
kernel32.dll			MultiByteToWideChar
kernel32.dll			SetEvent
kernel32.dll			CreateFileW
kernel32.dll			GetLocaleInfoW
kernel32.dll			GetLocalTime
kernel32.dll			GetEnvironmentVariableW
kernel32.dll			WaitForSingleObject
kernel32.dll			WriteFile
kernel32.dll			ExitThread
kernel32.dll			CreatePipe
kernel32.dll			DeleteCriticalSection
kernel32.dll			TlsGetValue
kernel32.dll			GetDateFormatW
kernel32.dll			IsValidLocale
kernel32.dll			TlsSetValue
kernel32.dll			GetSystemDefaultUILanguage
kernel32.dll			EnumCalendarInfoW
kernel32.dll			LocalAlloc
kernel32.dll			CreateEventW
kernel32.dll			SetThreadLocale
kernel32.dll			GetThreadLocale
shell32.dll			ShellExecuteW
version.dll			GetFileVersionInfoSizeW
version.dll			VerQueryValueW
version.dll			GetFileVersionInfoW
user32.dll			CharUpperBuffW
user32.dll			CharNextW
user32.dll			MsgWaitForMultipleObjects
user32.dll			CharLowerBuffW
user32.dll			LoadStringW
user32.dll			CharUpperW
user32.dll			PeekMessageW
user32.dll			GetSystemMetrics
user32.dll			MessageBoxW
oleaut32.dll			SysAllocStringLen
oleaut32.dll			SafeArrayPtrOfIndex
oleaut32.dll			VariantCopy
oleaut32.dll			SafeArrayGetLBound
oleaut32.dll			SafeArrayGetUBound
oleaut32.dll			VariantInit
oleaut32.dll			VariantClear
oleaut32.dll			SysFreeString
oleaut32.dll			SysReAllocStringLen
oleaut32.dll			VariantChangeType
oleaut32.dll			SafeArrayCreate
msvcrt.dll			memcpy
netapi32.dll			NetWkstaGetInfo
netapi32.dll			NetApiBufferFree
advapi32.dll			RegSetValueExW
advapi32.dll			OpenThreadToken
advapi32.dll			RegOpenKeyExW
advapi32.dll			OpenProcessToken
advapi32.dll			AllocateAndInitializeSid
advapi32.dll			FreeSid
advapi32.dll			EqualSid
advapi32.dll			RegFlushKey
advapi32.dll			RegQueryValueExW
advapi32.dll			GetTokenInformation
advapi32.dll			RegCloseKey
advapi32.dll			InitializeSecurityDescriptor
advapi32.dll			RegCreateKeyExW
advapi32.dll			SetSecurityDescriptorDacl
winhttp.dll			WinHttpGetIEProxyConfigForCurrentUser
winhttp.dll			WinHttpSetTimeouts
winhttp.dll			WinHttpSetStatusCallback
winhttp.dll			WinHttpConnect
winhttp.dll			WinHttpReceiveResponse
winhttp.dll			WinHttpQueryAuthSchemes
winhttp.dll			WinHttpGetProxyForUrl
winhttp.dll			WinHttpReadData
winhttp.dll			WinHttpCloseHandle
winhttp.dll			WinHttpQueryHeaders
winhttp.dll			WinHttpOpenRequest
winhttp.dll			WinHttpAddRequestHeaders
winhttp.dll			WinHttpOpen
winhttp.dll			WinHttpWriteData
winhttp.dll			WinHttpSetCredentials
winhttp.dll			WinHttpQueryDataAvailable
winhttp.dll			WinHttpSetOption
winhttp.dll			WinHttpSendRequest
winhttp.dll			WinHttpQueryOption

ord	entry_va	function_name
1	0x122640	dbkFCallWrapperAddr
2	0xf498	__dbk_fcall_wrapper
3	0x56d1c	TMethodImplementationIntercept
4	0x11256c	JYHMLFFX
5	0x11252c	BWWHIYVG
6	0x112524	YXGVULFK

module_name	restdll.dll
flags	0
timestamp	0
version	0.0
ordinal_base	1
nFunctions	6
nNames	6
Names(6)	0x128040
Functions(6)	0x128028
NameOrdinals(6)	0x128058

StringTable 040804E5

CompanyName	rrgtret55sffs
FileDescription	rrgtret55sffs
FileVersion	1.2.0.2
InternalName	rrgtret55sffs
LegalCopyright	rrgtret55sffs
LegalTrademarks	rrgtret55sffs
OriginalFilename	rrgtret55sffs
ProgramID	rrgtret55sffs
ProductName	rrgtret55sffs
ProductVersion	1.2.0.2

VS_FIXEDFILEINFO

FileVersion	1.2.0.2
ProductVersion	1.2.0.2
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	4
FileType	1
FileSubtype	0

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=US/O=thawte, Inc./CN=thawte SHA256 Code Signing CA

serial: 58A567403C7F07924B63952A219DA067

Certificates (2)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:a5:67:40:3c:7f:07:92:4b:63:95:2a:21:9d:a0:67
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=thawte, Inc., CN=thawte SHA256 Code Signing CA
        Validity
            Not Before: Jul 16 00:00:00 2019 GMT
            Not After : Jul 15 23:59:59 2020 GMT
        Subject: C=GB, L=ALDERSHOT, O=HAB CLUB LTD, CN=HAB CLUB LTD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ce:c6:06:5e:fc:17:9b:29:69:58:1b:81:ab:
                    31:fa:09:14:74:08:8c:01:dc:ed:0a:26:c2:a4:b7:
                    aa:7f:a6:35:67:c3:1d:b4:30:d4:d6:7d:c1:f5:53:
                    77:2e:58:ec:ca:ac:b3:20:a0:7c:23:9c:af:e8:6a:
                    77:00:d4:c1:d1:4a:ff:fd:c2:ed:07:97:f6:4a:e9:
                    a4:23:56:24:6d:a8:57:dc:4c:4d:20:56:09:ac:1d:
                    97:f0:83:22:b8:e2:20:2a:84:4e:53:13:ca:39:23:
                    54:29:ff:da:7e:eb:d7:f8:fa:4a:1c:c0:99:8a:5e:
                    d7:f8:05:b8:dc:8d:c2:d8:fb:93:2f:f2:6d:8c:4a:
                    28:06:8e:b1:5a:40:d6:df:eb:72:b2:9f:bd:54:a9:
                    64:ba:08:b5:83:5b:f3:44:67:78:b5:4f:e0:76:a6:
                    f9:8c:2d:45:4b:12:14:54:89:97:4b:37:e5:f3:9a:
                    f4:95:1f:5b:cd:83:56:bd:4e:56:ba:ae:e0:ad:f8:
                    a2:38:86:e3:55:ec:1f:ce:fa:94:1e:7c:c6:a6:2f:
                    7f:dd:42:92:6f:2a:ef:3e:a1:b6:85:d5:db:6a:cc:
                    89:fb:b7:83:b4:7d:b7:cd:96:d4:c4:bb:21:98:81:
                    7c:50:26:86:8c:db:15:0a:89:14:44:d4:30:9b:96:
                    60:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Authority Key Identifier: 
                keyid:57:86:9B:54:B8:BE:A6:29:8A:E4:F6:C2:E2:13:18:89:85:CD:DC:B7

            X509v3 Subject Key Identifier: 
                72:0A:8F:F7:AE:05:06:B8:DD:4C:76:73:9C:F1:D1:36:CE:CB:0D:C2
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://tl.symcb.com/tl.crl

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.4.1
                  CPS: https://www.thawte.com/cps
                  User Notice:
                    Explicit Text: https://www.thawte.com/repository

            Authority Information Access: 
                OCSP - URI:http://tl.symcd.com
                CA Issuers - URI:http://tl.symcb.com/tl.crt

    Signature Algorithm: sha256WithRSAEncryption
         36:87:2f:73:94:e9:54:b1:30:94:de:cd:4f:f9:2a:b1:a3:3e:
         5a:54:cc:7d:1a:38:06:c2:ae:d0:ea:9a:d6:8e:15:6b:cd:4d:
         ce:96:19:96:a6:cf:a3:38:97:dd:09:7c:d8:2e:44:45:bd:9c:
         e3:21:64:59:57:82:4d:ca:8b:11:c7:1c:df:ad:25:d4:83:8e:
         80:c7:ee:9f:03:30:ed:69:7a:c8:30:7b:b0:db:73:82:bb:09:
         20:e9:8f:61:1f:4a:92:0d:4d:fb:bc:dd:7d:98:27:8c:e2:1e:
         bc:7a:52:f0:ec:79:12:c4:3c:a7:b9:3d:42:df:1e:28:bb:be:
         34:54:43:12:fb:9c:44:50:b0:7c:78:73:85:94:d3:47:f7:f2:
         33:fe:d0:7e:d1:3f:2d:56:3e:18:45:08:96:c6:31:26:aa:1d:
         74:a4:8b:8b:4b:da:18:31:50:56:6f:1d:39:61:64:9f:7a:c3:
         84:cd:dd:40:fd:4a:a5:db:eb:35:47:14:a8:de:42:ab:16:0a:
         69:24:e3:83:8e:2d:a3:b2:54:fb:aa:d3:0d:6a:c0:e5:cc:4a:
         fb:22:e6:d1:1f:ec:29:18:e7:56:47:2d:d2:b5:9e:7e:b6:5d:
         42:18:42:92:97:c0:29:2d:ee:e7:5f:db:3c:94:e5:5e:be:c5:
         08:04:fb:58

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:a0:b7:36:95:dd:b1:af:c2:3b:2b:9a:18:ee:54:cb
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2006 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA
        Validity
            Not Before: Dec 10 00:00:00 2013 GMT
            Not After : Dec  9 23:59:59 2023 GMT
        Subject: C=US, O=thawte, Inc., CN=thawte SHA256 Code Signing CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:55:02:4c:17:05:e9:d0:66:c3:fc:28:ad:d3:
                    c0:fe:ef:e0:e9:7e:d4:1e:f6:aa:1b:91:46:fd:f5:
                    16:ed:98:07:53:fa:ba:87:1b:7d:9e:1f:01:27:ab:
                    b9:d2:67:ca:b7:10:25:53:f4:e3:be:9b:90:b8:ed:
                    23:5c:42:ef:64:25:58:e5:88:22:1a:be:f5:c7:ae:
                    f5:be:8a:b1:11:11:93:1a:22:a9:74:69:c1:74:b6:
                    68:87:a7:83:30:f9:64:f1:b1:e3:38:3e:f4:d6:c1:
                    fc:12:fe:73:57:17:35:57:8a:dd:50:8d:03:f8:66:
                    cd:ca:76:83:13:c8:d7:0e:71:1d:e4:63:c9:ba:17:
                    f8:d1:b9:e4:88:d2:2c:28:c8:21:20:0d:41:b7:0b:
                    e2:2f:c2:80:e6:88:7b:53:6c:c3:44:63:81:7f:68:
                    47:8c:2b:2a:cf:5b:f4:8c:49:61:ba:69:85:fd:6b:
                    00:78:05:26:69:13:30:80:38:4e:f1:5a:55:c9:c5:
                    50:d6:aa:38:89:47:43:5c:fe:4d:73:a5:49:c5:93:
                    69:fe:77:96:9a:af:f3:8c:0e:57:ba:33:d9:0e:c6:
                    42:d3:03:77:c4:bb:39:ad:91:f9:f3:f7:96:5c:3a:
                    64:a6:ed:27:57:c1:e8:40:f3:53:f2:be:29:34:fe:
                    5f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access: 
                OCSP - URI:http://t2.symcb.com

            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://t1.symcb.com/ThawtePCA.crl

            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, Code Signing
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=SymantecPKI-1-568
            X509v3 Subject Key Identifier: 
                57:86:9B:54:B8:BE:A6:29:8A:E4:F6:C2:E2:13:18:89:85:CD:DC:B7
            X509v3 Authority Key Identifier: 
                keyid:7B:5B:45:CF:AF:CE:CB:7A:FD:31:92:1A:6A:B6:F3:46:EB:57:48:50

    Signature Algorithm: sha256WithRSAEncryption
         24:3b:f5:d7:a0:36:13:c7:43:fe:f0:09:87:68:d1:98:31:6e:
         12:e4:3f:1e:1f:96:7b:6b:4c:1e:87:9e:8b:c5:6c:a3:b1:0c:
         7b:50:92:d5:81:9c:b1:8f:2c:29:b7:ee:f9:91:05:b9:8e:41:
         f1:2c:f6:d0:59:2d:98:e0:b9:ea:80:01:47:40:95:b8:3d:9d:
         03:bd:79:bb:35:b6:ad:9c:4c:27:f6:67:45:10:c9:c5:bc:87:
         4e:55:7b:d2:87:bb:dd:dc:30:ef:c6:d4:6c:cc:99:35:6d:1c:
         e0:60:d3:cd:68:8f:29:59:4b:89:96:08:46:c9:8e:fc:75:4f:
         c5:dc:09:cc:4e:27:8b:44:cd:07:bc:ac:04:e0:b5:33:a5:87:
         9f:f4:dd:73:0c:91:ea:12:81:6f:e3:75:f0:1e:b5:93:6c:44:
         17:d5:3e:97:c9:bd:07:2c:56:77:1f:85:dd:46:e8:bf:de:2c:
         81:94:a3:f7:e5:b7:a7:c1:37:9f:75:ca:55:77:4d:5e:36:29:
         ca:85:d8:45:41:72:57:75:c0:79:5b:fa:34:10:06:6d:64:20:
         42:b7:3a:c8:1f:1d:46:64:02:5f:c6:47:be:f0:c4:3a:28:54:
         da:f6:1e:4f:9a:a2:19:43:a4:6f:49:f8:fc:5e:42:20:28:84:
         8b:47:20:6e

pkcs7-signedData

SHA1: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15
- :

SHA1

77 ce 10 cb e8 47 35 90 8b 7f f6 45 9c 25 2e 2c |w....G5....E.%.,| fc 7a 38 4a |.z8J |

Certificates
- Certificate #0
  - 2
    - 58:A5:67:40:3C:7F:07:92:4B:63:95:2A:21:9D:A0:67
    - RSA-SHA256: nil
    - Issuer
      - C: US
      - O: thawte, Inc.
      - CN: thawte SHA256 Code Signing CA
    - 2019-07-16 00:00:00 UTC: 2020-07-15 23:59:59 UTC
    - Subject
      - C: GB
      - L: ALDERSHOT
      - O: HAB CLUB LTD
      - CN: HAB CLUB LTD
    - #5
      - rsaEncryption: nil
      - BE:CE:C6:06:5E:FC:17:9B:29:69:58:1B:81:AB:31:FA:
        09:14:74:08:8C:01:DC:ED:0A:26:C2:A4:B7:AA:7F:A6:
        35:67:C3:1D:B4:30:D4:D6:7D:C1:F5:53:77:2E:58:EC:
        CA:AC:B3:20:A0:7C:23:9C:AF:E8:6A:77:00:D4:C1:D1:
        4A:FF:FD:C2:ED:07:97:F6:4A:E9:A4:23:56:24:6D:A8:
        57:DC:4C:4D:20:56:09:AC:1D:97:F0:83:22:B8:E2:20:
        2A:84:4E:53:13:CA:39:23:54:29:FF:DA:7E:EB:D7:F8:
        FA:4A:1C:C0:99:8A:5E:D7:F8:05:B8:DC:8D:C2:D8:FB:
        93:2F:F2:6D:8C:4A:28:06:8E:B1:5A:40:D6:DF:EB:72:
        B2:9F:BD:54:A9:64:BA:08:B5:83:5B:F3:44:67:78:B5:
        4F:E0:76:A6:F9:8C:2D:45:4B:12:14:54:89:97:4B:37:
        E5:F3:9A:F4:95:1F:5B:CD:83:56:BD:4E:56:BA:AE:E0:
        AD:F8:A2:38:86:E3:55:EC:1F:CE:FA:94:1E:7C:C6:A6:
        2F:7F:DD:42:92:6F:2A:EF:3E:A1:B6:85:D5:DB:6A:CC:
        89:FB:B7:83:B4:7D:B7:CD:96:D4:C4:BB:21:98:81:7C:
        50:26:86:8C:DB:15:0A:89:14:44:D4:30:9B:96:60:A7: 0x010001
    - X509v3 extensions
      - basicConstraints
        nil
      - authorityKeyIdentifier:
        57 86 9b 54 b8 be a6 29 8a e4 f6 c2 e2 13 18 89 |W..T...)........| 85 cd dc b7 |.... |
      - subjectKeyIdentifier:
        72 0a 8f f7 ae 05 06 b8 dd 4c 76 73 9c f1 d1 36 |r........Lvs...6| ce cb 0d c2 |.... |
      - crlDistributionPoints: http://tl.symcb.com/tl.crl
      - keyUsage: true, 0x80
      - extendedKeyUsage: codeSigning
      - certificatePolicies
        2.23.140.1.4.1
        #0
        id-qt-cps: https://www.thawte.com/cps
        id-qt-unotice: https://www.thawte.com/repository
      - authorityInfoAccess
        #0
        OCSP: http://tl.symcd.com
        caIssuers: http://tl.symcb.com/tl.crt
  - RSA-SHA256:
```
36 87 2f 73 94 e9 54 b1  30 94 de cd 4f f9 2a b1  |6./s..T.0...O.*.|
a3 3e 5a 54 cc 7d 1a 38  06 c2 ae d0 ea 9a d6 8e  |.>ZT.}.8........|
15 6b cd 4d ce 96 19 96  a6 cf a3 38 97 dd 09 7c  |.k.M.......8...||
d8 2e 44 45 bd 9c e3 21  64 59 57 82 4d ca 8b 11  |..DE...!dYW.M...|
c7 1c df ad 25 d4 83 8e  80 c7 ee 9f 03 30 ed 69  |....%........0.i|
7a c8 30 7b b0 db 73 82  bb 09 20 e9 8f 61 1f 4a  |z.0{..s... ..a.J|
92 0d 4d fb bc dd 7d 98  27 8c e2 1e bc 7a 52 f0  |..M...}.'....zR.|
ec 79 12 c4 3c a7 b9 3d  42 df 1e 28 bb be 34 54  |.y..<..=B..(..4T|
43 12 fb 9c 44 50 b0 7c  78 73 85 94 d3 47 f7 f2  |C...DP.|xs...G..|
33 fe d0 7e d1 3f 2d 56  3e 18 45 08 96 c6 31 26  |3..~.?-V>.E...1&|
aa 1d 74 a4 8b 8b 4b da  18 31 50 56 6f 1d 39 61  |..t...K..1PVo.9a|
64 9f 7a c3 84 cd dd 40  fd 4a a5 db eb 35 47 14  |d.z....@.J...5G.|
a8 de 42 ab 16 0a 69 24  e3 83 8e 2d a3 b2 54 fb  |..B...i$...-..T.|
aa d3 0d 6a c0 e5 cc 4a  fb 22 e6 d1 1f ec 29 18  |...j...J."....).|
e7 56 47 2d d2 b5 9e 7e  b6 5d 42 18 42 92 97 c0  |.VG-...~.]B.B...|
29 2d ee e7 5f db 3c 94  e5 5e be c5 08 04 fb 58  |)-.._.<..^.....X|
```
- Certificate #1
  - 2
    - 71:A0:B7:36:95:DD:B1:AF:C2:3B:2B:9A:18:EE:54:CB
    - RSA-SHA256: nil
    - Issuer
      - C: US
      - O: thawte, Inc.
      - OU: Certification Services Division
      - OU: (c) 2006 thawte, Inc. - For authorized use only
      - CN: thawte Primary Root CA
    - 2013-12-10 00:00:00 UTC: 2023-12-09 23:59:59 UTC
    - Subject
      - C: US
      - O: thawte, Inc.
      - CN: thawte SHA256 Code Signing CA
    - #5
      - rsaEncryption: nil
      - 9B:55:02:4C:17:05:E9:D0:66:C3:FC:28:AD:D3:C0:FE:
        EF:E0:E9:7E:D4:1E:F6:AA:1B:91:46:FD:F5:16:ED:98:
        07:53:FA:BA:87:1B:7D:9E:1F:01:27:AB:B9:D2:67:CA:
        B7:10:25:53:F4:E3:BE:9B:90:B8:ED:23:5C:42:EF:64:
        25:58:E5:88:22:1A:BE:F5:C7:AE:F5:BE:8A:B1:11:11:
        93:1A:22:A9:74:69:C1:74:B6:68:87:A7:83:30:F9:64:
        F1:B1:E3:38:3E:F4:D6:C1:FC:12:FE:73:57:17:35:57:
        8A:DD:50:8D:03:F8:66:CD:CA:76:83:13:C8:D7:0E:71:
        1D:E4:63:C9:BA:17:F8:D1:B9:E4:88:D2:2C:28:C8:21:
        20:0D:41:B7:0B:E2:2F:C2:80:E6:88:7B:53:6C:C3:44:
        63:81:7F:68:47:8C:2B:2A:CF:5B:F4:8C:49:61:BA:69:
        85:FD:6B:00:78:05:26:69:13:30:80:38:4E:F1:5A:55:
        C9:C5:50:D6:AA:38:89:47:43:5C:FE:4D:73:A5:49:C5:
        93:69:FE:77:96:9A:AF:F3:8C:0E:57:BA:33:D9:0E:C6:
        42:D3:03:77:C4:BB:39:AD:91:F9:F3:F7:96:5C:3A:64:
        A6:ED:27:57:C1:E8:40:F3:53:F2:BE:29:34:FE:5F:F9: 0x010001
    - X509v3 extensions
      - authorityInfoAccess
        OCSP: http://t2.symcb.com
      - basicConstraints
        true
        true: 0
      - crlDistributionPoints: http://t1.symcb.com/ThawtePCA.crl
      - extendedKeyUsage
        clientAuth: codeSigning
      - keyUsage: true, 6
      - subjectAltName
        CN: SymantecPKI-1-568
      - subjectKeyIdentifier:
        57 86 9b 54 b8 be a6 29 8a e4 f6 c2 e2 13 18 89 |W..T...)........| 85 cd dc b7 |.... |
      - authorityKeyIdentifier:
        7b 5b 45 cf af ce cb 7a fd 31 92 1a 6a b6 f3 46 |{[E....z.1..j..F| eb 57 48 50 |.WHP |
  - RSA-SHA256:
```
24 3b f5 d7 a0 36 13 c7  43 fe f0 09 87 68 d1 98  |$;...6..C....h..|
31 6e 12 e4 3f 1e 1f 96  7b 6b 4c 1e 87 9e 8b c5  |1n..?...{kL.....|
6c a3 b1 0c 7b 50 92 d5  81 9c b1 8f 2c 29 b7 ee  |l...{P......,)..|
f9 91 05 b9 8e 41 f1 2c  f6 d0 59 2d 98 e0 b9 ea  |.....A.,..Y-....|
80 01 47 40 95 b8 3d 9d  03 bd 79 bb 35 b6 ad 9c  |..G@..=...y.5...|
4c 27 f6 67 45 10 c9 c5  bc 87 4e 55 7b d2 87 bb  |L'.gE.....NU{...|
dd dc 30 ef c6 d4 6c cc  99 35 6d 1c e0 60 d3 cd  |..0...l..5m..`..|
68 8f 29 59 4b 89 96 08  46 c9 8e fc 75 4f c5 dc  |h.)YK...F...uO..|
09 cc 4e 27 8b 44 cd 07  bc ac 04 e0 b5 33 a5 87  |..N'.D.......3..|
9f f4 dd 73 0c 91 ea 12  81 6f e3 75 f0 1e b5 93  |...s.....o.u....|
6c 44 17 d5 3e 97 c9 bd  07 2c 56 77 1f 85 dd 46  |lD..>....,Vw...F|
e8 bf de 2c 81 94 a3 f7  e5 b7 a7 c1 37 9f 75 ca  |...,........7.u.|
55 77 4d 5e 36 29 ca 85  d8 45 41 72 57 75 c0 79  |UwM^6)...EArWu.y|
5b fa 34 10 06 6d 64 20  42 b7 3a c8 1f 1d 46 64  |[.4..md B.:...Fd|
02 5f c6 47 be f0 c4 3a  28 54 da f6 1e 4f 9a a2  |._.G...:(T...O..|
19 43 a4 6f 49 f8 fc 5e  42 20 28 84 8b 47 20 6e  |.C.oI..^B (..G n|
```

Signer

1
unnamed
- #0
  - C: US
  - O: thawte, Inc.
  - CN: thawte SHA256 Code Signing CA
- 58:A5:67:40:3C:7F:07:92:4B:63:95:2A:21:9D:A0:67
SHA1: nil

1.3.6.1.4.1.311.2.1.12
- nil
contentType: 1.3.6.1.4.1.311.2.1.4
1.3.6.1.4.1.311.2.1.11: msCodeInd

messageDigest:

ea 77 28 e8 39 da e8 dd  07 ac d4 b7 b7 37 d3 b7  |.w(.9........7..|
9e bc e0 c8                                       |....            |

rsaEncryption:

88 fe a0 b6 d7 5c 64 53  5b 4c cc 41 4f fa 1d d1  |.....\dS[L.AO...|
fb 66 53 42 10 cb b1 e9  60 eb 62 27 07 c1 cb b7  |.fSB....`.b'....|
02 eb a1 93 57 2e 82 a3  44 84 9c 32 32 af f8 e2  |....W...D..22...|
99 4e 20 cb 03 1a 11 7d  c1 f1 1f e9 d2 26 62 49  |.N ....}.....&bI|
c6 d6 1d 0b 24 fb 29 79  ec ea 05 a1 97 c4 51 e6  |....$.)y......Q.|
16 30 4a 3f dd a7 32 96  25 bd 16 57 06 0c 76 95  |.0J?..2.%..W..v.|
4e 6b c0 4c a1 a0 8d bd  10 97 a7 6e 29 46 82 5d  |Nk.L.......n)F.]|
b2 28 82 25 a1 85 ac d0  be ce ae 5b f5 72 7e 44  |.(.%.......[.r~D|
46 13 ee e0 cb d6 36 e0  16 77 4d af f6 59 26 0d  |F.....6..wM..Y&.|
c4 ba cd d2 da f4 f8 de  d4 11 38 4b 3e 40 5b 71  |..........8K>@[q|
65 8d 59 2e 72 2c 82 f7  7f 79 1b 0e 2e 54 c1 47  |e.Y.r,...y...T.G|
5f 30 60 67 d8 1a 82 81  f8 65 e6 36 68 50 14 be  |_0`g.....e.6hP..|
c2 b1 f6 1b 08 3e 07 fe  86 5c b3 51 1a 03 7c da  |.....>...\.Q..|.|
7c 10 65 36 fd 88 4d aa  ae 41 c7 8b 32 e4 3e 47  ||.e6..M..A..2.>G|
f0 f7 95 55 c4 c9 d9 e1  7b 7a f8 14 83 04 0e 47  |...U....{z.....G|
fa 23 2e 8e ec 15 02 79  c1 34 73 b3 8f 96 7e 92  |.#.....y.4s...~.|