filenamewStLib64.sys
size61112 (0xeeb8)
md5067afa35d671e96e5a939f784c8f39e8
typePE32+ executable (native) x86-64, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xe0

Rich Header

lib idversiontimes used
1076
147307297
149307291
131307295
137307297
148307291
145307291

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x8664
NumberOfSections6
TimeDateStamp0x52eaf22a
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xf0
Characteristics0x22
Magic0x20b
LinkerVersion9.0
SizeOfCode0xba00
SizeOfInitializedData0x1e00
SizeOfUninitializedData0
AddressOfEntryPoint0xf064
BaseOfCode0x1000
ImageBase0x10000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion6.1
ImageVersion6.1
SubsystemVersion6.1
Reserved10
SizeOfImage0x11000
SizeOfHeaders0x400
CheckSum0x1a0a4
Subsystem1
DllCharacteristics0
SizeOfStackReserve0x40000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000xad9f0xae00R-X CODE
.rdata0xc0000x5f80x600R-- IDATA
.data0xd0000xd100x200RW- IDATA
.pdata0xe0000x5700x600R-- IDATA
INIT0xf0000xae80xc00RWX CODE DISCARDABLE
.rsrc0x100000x3280x400R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0xf0840x50
RESOURCE0x100000x328
EXCEPTION0xe0000x570
SECURITY0xd0000x1eb8
BASERELOC00
DEBUG0xc2800x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0xc0000x278
Delay_IAT00
CLR_Header00
typenamesizecp
VERSION#17120
module_namehintordfunction_name
ntoskrnl.exe712KeBugCheckEx
ntoskrnl.exe1870ZwOpenKey
ntoskrnl.exe1810ZwClose
ntoskrnl.exe1466RtlInitUnicodeString
ntoskrnl.exe214ExUuidCreate
ntoskrnl.exe430IoAllocateMdl
ntoskrnl.exe586IoReleaseCancelSpinLock
ntoskrnl.exe462IoCreateDevice
ntoskrnl.exe956MmFreePagesFromMdl
ntoskrnl.exe1221PsGetCurrentProcessId
ntoskrnl.exe472IoCreateSymbolicLink
ntoskrnl.exe675IofCompleteRequest
ntoskrnl.exe774KeInsertQueueDpc
ntoskrnl.exe976MmMapLockedPagesSpecifyCache
ntoskrnl.exe504IoFreeMdl
ntoskrnl.exe941MmBuildMdlForNonPagedPool
ntoskrnl.exe938MmAllocatePagesForMdl
ntoskrnl.exe756KeInitializeDpc
ntoskrnl.exe1327RtlAppendUnicodeToString
ntoskrnl.exe483IoDeleteDevice
ntoskrnl.exe851KeRemoveQueueDpc
ntoskrnl.exe485IoDeleteSymbolicLink
ntoskrnl.exe1006MmUnmapLockedPages
ntoskrnl.exe697KeAcquireSpinLockRaiseToDpc
ntoskrnl.exe120ExDeleteNPagedLookasideList
ntoskrnl.exe168ExQueryDepthSList
ntoskrnl.exe228ExpInterlockedPopEntrySList
ntoskrnl.exe840KeReleaseSpinLock
ntoskrnl.exe229ExpInterlockedPushEntrySList
ntoskrnl.exe147ExInitializeNPagedLookasideList
ntoskrnl.exe139ExFreePoolWithTag
ntoskrnl.exe115ExAllocatePoolWithTag
ntoskrnl.exe1981__C_specific_handler
ntoskrnl.exe1990_local_unwind
fwpkclnt.sys123FwpsFlowAssociateContext0
fwpkclnt.sys113FwpsCalloutUnregisterByKey0
fwpkclnt.sys82FwpmSubLayerAdd0
fwpkclnt.sys145FwpsQueryPacketInjectionState0
fwpkclnt.sys86FwpmSubLayerEnum0
fwpkclnt.sys92FwpmTransactionCommit0
fwpkclnt.sys83FwpmSubLayerCreateEnumHandle0
fwpkclnt.sys85FwpmSubLayerDestroyEnumHandle0
fwpkclnt.sys12FwpmCalloutAdd0
fwpkclnt.sys106FwpsAllocateCloneNetBufferList0
fwpkclnt.sys90FwpmTransactionAbort0
fwpkclnt.sys26FwpmEngineOpen0
fwpkclnt.sys33FwpmFilterAdd0
fwpkclnt.sys110FwpsCalloutRegister1
fwpkclnt.sys91FwpmTransactionBegin0
fwpkclnt.sys23FwpmEngineClose0
fwpkclnt.sys43FwpmFreeMemory0
fwpkclnt.sys137FwpsInjectionHandleDestroy0
fwpkclnt.sys119FwpsConstructIpHeaderForTransportPacket0
fwpkclnt.sys107FwpsAllocateNetBufferAndNetBufferList0
fwpkclnt.sys136FwpsInjectionHandleCreate0
fwpkclnt.sys133FwpsInjectTransportReceiveAsync0
fwpkclnt.sys8FwpmBfeStateGet0
fwpkclnt.sys9FwpmBfeStateSubscribeChanges0
fwpkclnt.sys11FwpmBfeStateUnsubscribeChanges0
fwpkclnt.sys122FwpsDiscardClonedStreamData0
fwpkclnt.sys151FwpsStreamInjectAsync0
fwpkclnt.sys116FwpsCloneStreamData0
fwpkclnt.sys120FwpsCopyStreamDataToBuffer0
fwpkclnt.sys126FwpsFreeCloneNetBufferList0
fwpkclnt.sys128FwpsFreeNetBufferList0
fwpkclnt.sys134FwpsInjectTransportSendAsync0
fwpkclnt.sys124FwpsFlowRemoveContext0
NDIS.SYS17NdisAllocateGenericObject
NDIS.SYS175NdisGetDataBuffer
NDIS.SYS450NdisWaitEvent
NDIS.SYS27NdisAllocateNetBufferListPool
NDIS.SYS241NdisInitializeEvent
NDIS.SYS415NdisRetreatNetBufferDataStart
NDIS.SYS151NdisFreeGenericObject
NDIS.SYS10NdisAdvanceNetBufferDataStart
NDIS.SYS160NdisFreeNetBufferListPool

StringTable 040904B0

CompanyNameStdLib
FileDescriptionStdLib
FileVersion1.4.3.1 built by: WinDDK
InternalNameStdLib.sys
LegalCopyrightCopyright © 2013 StdLib
OriginalFilenameStdLib.sys
ProductNameStdLib
ProductVersion1.4.3.1

VS_FIXEDFILEINFO

FileVersion1.4.3.1
ProductVersion1.4.3.1
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags8
FileOS0x40004
FileType3
FileSubtype6

Signers (1)

issuer: /C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https:\/\/www.verisign.com\/rpa (c)10/CN=VeriSign Class 3 Code Signing 2010 CA
serial: 5D49818D94FEA0AEA7D9B885C9BACBD7

Certificates (5)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
        Validity
            Not Before: Dec 21 00:00:00 2012 GMT
            Not After : Dec 30 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:b3:49:54:4b:97:1c:12:0a:d8:25:79:91:
                    22:57:2a:6f:dc:b8:26:c4:43:73:6b:c2:bf:2e:50:
                    5a:fb:14:c2:76:8e:43:01:25:43:b4:a1:e2:45:f4:
                    e8:b7:7b:c3:74:cc:22:d7:b4:94:00:02:f7:4d:ed:
                    bf:b4:b7:44:24:6b:cd:5f:45:3b:d1:44:ce:43:12:
                    73:17:82:8b:69:b4:2b:cb:99:1e:ac:72:1b:26:4d:
                    71:1f:b1:31:dd:fb:51:61:02:53:a6:aa:f5:49:2c:
                    05:78:45:a5:2f:89:ce:e7:99:e7:fe:8c:e2:57:3f:
                    3d:c6:92:dc:4a:f8:7b:33:e4:79:0a:fb:f0:75:88:
                    41:9c:ff:c5:03:51:99:aa:d7:6c:9f:93:69:87:65:
                    29:83:85:c2:60:14:c4:c8:c9:3b:14:da:c0:81:f0:
                    1f:0d:74:de:92:22:ab:ca:f7:fb:74:7c:27:e6:f7:
                    4a:1b:7f:a7:c3:9e:2d:ae:8a:ea:a6:e6:aa:27:16:
                    7d:61:f7:98:71:11:bc:e2:50:a1:4b:e5:5d:fa:e5:
                    0e:a7:2c:9f:aa:65:20:d3:d8:96:e8:c8:7c:a5:4e:
                    48:44:ff:19:e2:44:07:92:0b:d7:68:84:80:5d:6a:
                    78:64:45:cd:60:46:7e:54:c1:13:7c:c5:79:f1:c9:
                    c1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD
            Authority Information Access: 
                OCSP - URI:http://ocsp.thawte.com
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.thawte.com/ThawteTimestampingCA.crl
            X509v3 Extended Key Usage: 
                Time Stamping
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-1
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        03:09:9b:8f:79:ef:7f:59:30:aa:ef:68:b5:fa:e3:09:1d:bb:
        4f:82:06:5d:37:5f:a6:52:9f:16:8d:ea:1c:92:09:44:6e:f5:
        6d:eb:58:7c:30:e8:f9:69:8d:23:73:0b:12:6f:47:a9:ae:39:
        11:f8:2a:b1:9b:b0:1a:c3:8e:eb:59:96:00:ad:ce:0c:4d:b2:
        d0:31:a6:08:5c:2a:7a:fc:e2:7a:1d:57:4c:a8:65:18:e9:79:
        40:62:25:96:6e:c7:c7:37:6a:83:21:08:8e:41:ea:dd:d9:57:
        3f:1d:77:49:87:2a:16:06:5e:a6:38:6a:22:12:a3:51:19:83:
        7e:b6

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Validity
            Not Before: Oct 18 00:00:00 2012 GMT
            Not After : Dec 29 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer - G4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a2:63:0b:39:44:b8:bb:23:a7:44:49:bb:0e:ff:
                    a1:f0:61:0a:53:93:b0:98:db:ad:2c:0f:4a:c5:6e:
                    ff:86:3c:53:55:0f:15:ce:04:3f:2b:fd:a9:96:96:
                    d9:be:61:79:0b:5b:c9:4c:86:76:e5:e0:43:4b:22:
                    95:ee:c2:2b:43:c1:9f:d8:68:b4:8e:40:4f:ee:85:
                    38:b9:11:c5:23:f2:64:58:f0:15:32:6f:4e:57:a1:
                    ae:88:a4:02:d7:2a:1e:cd:4b:e1:dd:63:d5:17:89:
                    32:5b:b0:5e:99:5a:a8:9d:28:50:0e:17:ee:96:db:
                    61:3b:45:51:1d:cf:12:56:0b:92:47:fc:ab:ae:f6:
                    66:3d:47:ac:70:72:e7:92:e7:5f:cd:10:b9:c4:83:
                    64:94:19:bd:25:80:e1:e8:d2:22:a5:d0:ba:02:7a:
                    a1:77:93:5b:65:c3:ee:17:74:bc:41:86:2a:dc:08:
                    4c:8c:92:8c:91:2d:9e:77:44:1f:68:d6:a8:74:77:
                    db:0e:5b:32:8b:56:8b:33:bd:d9:63:c8:49:9d:3a:
                    c5:c5:ea:33:0b:d2:f1:a3:1b:f4:8b:be:d9:b3:57:
                    8b:3b:de:04:a7:7a:22:b2:24:ae:2e:c7:70:c5:be:
                    4e:83:26:08:fb:0b:bd:a9:4f:99:08:e1:10:28:72:
                    aa:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                OCSP - URI:http://ts-ocsp.ws.symantec.com
                CA Issuers - URI:http://ts-aia.ws.symantec.com/tss-ca-g2.cer
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://ts-crl.ws.symantec.com/tss-ca-g2.crl
            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-2
            X509v3 Subject Key Identifier: 
                46:C6:69:A3:0E:4A:14:1E:D5:4C:DA:52:63:17:3F:5E:36:BC:0D:E6
            X509v3 Authority Key Identifier: 
                5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        78:3b:b4:91:2a:00:4c:f0:8f:62:30:37:78:a3:84:27:07:6f:
        18:b2:de:25:dc:a0:d4:94:03:aa:86:4e:25:9f:9a:40:03:1c:
        dd:ce:e3:79:cb:21:68:06:da:b6:32:b4:6d:bf:f4:2c:26:63:
        33:e4:49:64:6d:0d:e6:c3:67:0e:f7:05:a4:35:6c:7c:89:16:
        c6:e9:b2:df:b2:e9:dd:20:c6:71:0f:cd:95:74:dc:b6:5c:de:
        bd:37:1f:43:78:e6:78:b5:cd:28:04:20:a3:aa:f1:4b:c4:88:
        29:91:0e:80:d1:11:fc:dd:5c:76:6e:4f:5e:0e:45:46:41:6e:
        0d:b0:ea:38:9a:b1:3a:da:09:71:10:fc:1c:79:b4:80:7b:ac:
        69:f4:fd:9c:b6:0c:16:2b:f1:7f:5b:09:3d:9b:5b:e2:16:ca:
        13:81:6d:00:2e:38:0d:a8:29:8f:2c:e1:b2:f4:5a:a9:01:af:
        15:9c:2c:2f:49:1b:db:22:bb:c3:fe:78:94:51:c3:86:b1:82:
        88:5d:f0:3d:b4:51:a1:79:33:2b:2e:7b:b9:dc:20:09:13:71:
        eb:6a:19:5b:cf:e8:a5:30:57:2c:89:49:3f:b9:cf:7f:c9:bf:
        3e:22:68:63:53:9a:bd:69:74:ac:c5:1d:3c:7f:92:e0:c3:bc:
        1c:d8:04:75

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:49:81:8d:94:fe:a0:ae:a7:d9:b8:85:c9:ba:cb:d7
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https:\/\/www.verisign.com\/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA
        Validity
            Not Before: Sep 19 00:00:00 2013 GMT
            Not After : Sep 19 23:59:59 2015 GMT
        Subject: C=US, ST=California, L=San Diego, O=Whilokii, OU=Digital ID Class 3 - Microsoft Software Validation v2, CN=Whilokii
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:cf:93:67:6a:55:32:64:4a:c9:88:40:54:1c:d9:
                    86:c1:e3:07:3e:92:62:b5:0a:be:46:92:d4:68:a1:
                    0b:ee:49:33:d7:6e:9a:a5:6a:f7:e6:b1:0f:99:6e:
                    79:8d:be:a1:dd:13:2e:31:7b:dd:eb:14:af:5b:d7:
                    cf:d6:af:e4:8c:d7:cd:b3:3e:92:df:e2:1f:3a:2d:
                    39:b4:d9:38:33:6c:e2:a3:15:b6:49:74:f9:66:0f:
                    0c:a7:e1:77:99:5c:cf:e6:6f:bc:bd:b9:72:e7:45:
                    da:d0:1a:41:ee:05:61:f1:12:42:3d:5e:43:eb:48:
                    44:cb:d4:97:b3:ee:2f:8d:dc:78:bc:ca:ea:06:7b:
                    f8:6e:27:96:62:c7:ea:96:05:0e:55:41:56:a1:1b:
                    f2:1e:cb:c0:bd:c7:da:74:d6:f4:d4:16:dc:87:cc:
                    cf:64:cc:82:cb:86:06:e4:6f:8d:7d:6c:7d:26:f7:
                    1b:99:e2:6b:12:bc:10:42:be:57:95:53:26:42:d0:
                    03:7b:d4:90:1b:28:d4:9b:ba:2f:af:3a:5d:a9:2a:
                    ee:a6:b9:03:68:68:08:ff:ff:89:35:ef:87:10:52:
                    72:11:dc:99:b4:3d:67:57:38:7c:bf:64:a3:cd:54:
                    83:f8:4d:e9:63:c6:e8:12:23:76:12:fb:0f:63:9b:
                    dc:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://csc3-2010-crl.verisign.com/CSC3-2010.crl
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/rpa
            X509v3 Extended Key Usage: 
                Code Signing
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com
                CA Issuers - URI:http://csc3-2010-aia.verisign.com/CSC3-2010.cer
            X509v3 Authority Key Identifier: 
                CF:99:A9:EA:7B:26:F4:4B:C9:8E:8F:D7:F0:05:26:EF:E3:D2:A7:9D
            Netscape Cert Type: 
                Object Signing
            1.3.6.1.4.1.311.2.1.27: 
                0.......
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        80:cd:19:50:c4:36:d7:50:52:64:7a:5a:77:5d:af:2c:33:b6:
        b0:f8:1a:b2:f3:5e:2d:d6:cc:28:e0:99:70:04:9c:69:15:d3:
        f3:26:24:73:32:4a:30:bf:44:7f:4f:9f:5e:01:b1:ef:8a:35:
        47:fc:73:63:0e:50:e5:58:d3:51:7b:86:57:f5:62:d5:ca:5b:
        1a:25:7a:83:0d:e7:c1:5f:04:9f:aa:f6:0d:cc:a2:27:cf:da:
        52:34:c7:44:35:88:92:ad:cb:27:5f:c0:ec:dc:26:ab:1c:6c:
        2a:8a:ea:5a:9b:9b:05:73:88:a1:c2:8a:44:28:7c:95:01:96:
        85:62:10:c9:b0:93:7d:ac:8f:7c:96:ef:2d:71:d0:11:b8:fc:
        b5:63:9e:83:ad:a4:b1:d2:b0:02:c4:bd:e7:07:25:b7:65:1e:
        d6:70:1b:b0:70:ea:50:16:72:a4:49:8e:8c:a4:b7:e3:b3:a2:
        20:be:b0:33:86:8e:58:a1:2c:1b:dc:3b:bb:18:21:62:2d:23:
        c0:26:ef:3d:d2:49:72:1d:70:72:79:2a:8b:32:21:45:d1:42:
        25:43:bf:c9:b6:59:91:d0:10:bb:4b:1c:5b:f3:6b:83:9d:9e:
        e1:a7:ac:79:28:35:d2:06:51:45:46:8a:f5:66:f0:75:f0:3d:
        e5:4f:fc:15

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:19:93:e4:00:00:00:00:00:1c
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Code Verification Root
        Validity
            Not Before: Feb 22 19:25:17 2011 GMT
            Not After : Feb 22 19:35:17 2021 GMT
        Subject: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:af:24:08:08:29:7a:35:9e:60:0c:aa:e7:4b:3b:
                    4e:dc:7c:bc:3c:45:1c:bb:2b:e0:fe:29:02:f9:57:
                    08:a3:64:85:15:27:f5:f1:ad:c8:31:89:5d:22:e8:
                    2a:aa:a6:42:b3:8f:f8:b9:55:b7:b1:b7:4b:b3:fe:
                    8f:7e:07:57:ec:ef:43:db:66:62:15:61:cf:60:0d:
                    a4:d8:de:f8:e0:c3:62:08:3d:54:13:eb:49:ca:59:
                    54:85:26:e5:2b:8f:1b:9f:eb:f5:a1:91:c2:33:49:
                    d8:43:63:6a:52:4b:d2:8f:e8:70:51:4d:d1:89:69:
                    7b:c7:70:f6:b3:dc:12:74:db:7b:5d:4b:56:d3:96:
                    bf:15:77:a1:b0:f4:a2:25:f2:af:1c:92:67:18:e5:
                    f4:06:04:ef:90:b9:e4:00:e4:dd:3a:b5:19:ff:02:
                    ba:f4:3c:ee:e0:8b:eb:37:8b:ec:f4:d7:ac:f2:f6:
                    f0:3d:af:dd:75:91:33:19:1d:1c:40:cb:74:24:19:
                    21:93:d9:14:fe:ac:2a:52:c7:8f:d5:04:49:e4:8d:
                    63:47:88:3c:69:83:cb:fe:47:bd:2b:7e:4f:c5:95:
                    ae:0e:9d:d4:d1:43:c0:67:73:e3:14:08:7e:e5:3f:
                    9f:73:b8:33:0a:cf:5d:3f:34:87:96:8a:ee:53:e8:
                    25:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: 
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier: 
                7F:D3:65:A7:C2:DD:EC:BB:F0:30:09:F3:43:39:FA:02:AF:33:31:33
            X509v3 Authority Key Identifier: 
                62:FB:0A:21:5B:7F:43:6E:11:DA:09:54:50:6B:F5:D2:96:71:F1:9E
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/MicrosoftCodeVerifRoot.crl
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        81:2a:82:16:8c:34:67:2b:e5:03:eb:34:7b:8c:a2:a3:50:8a:
        f4:55:86:f1:1e:8c:8e:ae:7d:ee:03:19:ce:72:95:18:48:ad:
        62:11:fd:20:fd:3f:47:06:01:5a:e2:e0:6f:8c:15:2c:4e:3c:
        6a:50:6c:0b:36:a3:cf:7a:0d:9c:42:bc:5c:f8:19:d5:60:e3:
        69:e6:e2:23:41:67:8c:68:83:76:2b:8f:93:a3:2a:b5:7f:be:
        59:fb:a9:c9:b2:26:8f:ca:a2:f3:82:1b:98:3e:91:95:27:97:
        86:61:ee:5b:5d:07:6b:cd:86:a8:e2:65:80:a8:e2:15:e2:b2:
        be:23:05:6a:ba:0c:f3:47:93:4d:ac:a4:8c:07:79:39:c0:61:
        12:3a:05:0d:89:a3:ec:9f:57:89:84:fb:ec:ca:7c:47:66:14:
        91:d8:b6:0f:19:5d:e6:b8:4a:ac:bc:47:c8:71:43:96:e6:32:
        20:a5:dc:77:86:fd:3c:e3:8b:71:db:7b:9b:03:fc:b7:1d:32:
        64:eb:16:52:a0:43:a3:fa:2e:ad:59:92:4e:7c:c7:f2:33:42:
        48:38:51:3a:7c:38:c7:1b:24:22:28:40:1e:1a:46:1f:17:db:
        18:f7:f0:27:35:6c:b8:63:d9:cd:b9:64:5d:2b:a5:5e:ef:c6:
        29:b4:f2:c7:f8:21:cc:04:ba:57:fd:01:b6:ab:c6:67:f9:e7:
        d3:99:7f:f4:f5:22:fa:72:f5:fd:ff:3a:1c:42:3a:a1:f9:80:
        18:a5:ee:8d:1c:d4:66:9e:45:01:fe:aa:ee:ff:fb:17:8f:30:
        f7:f1:cd:29:c5:9d:ec:b5:d5:49:00:3d:85:b8:cb:bb:93:3a:
        27:6a:49:c0:30:ae:66:c9:f7:23:28:32:76:f9:a4:83:56:c8:
        48:ce:5a:96:aa:a0:cc:0c:c4:7f:b4:8e:97:af:6d:e3:54:27:
        c3:9f:86:c0:d6:e4:73:08:97:05:db:d0:54:62:5e:03:48:c2:
        d5:9f:7f:a7:66:8c:d0:9d:b0:4f:d4:d3:98:5f:4b:7a:c9:7f:
        b2:29:52:d0:12:80:c7:0f:54:b6:1e:67:cd:c6:a0:6c:11:03:
        84:d3:48:75:e7:2a:fe:b0:3b:6e:0a:3a:a6:6b:76:99:05:a3:
        f1:77:68:61:33:14:47:06:fc:53:7f:52:bd:92:14:5c:4a:24:
        6a:67:8c:af:8d:90:aa:d0:f6:79:21:1b:93:26:7c:c3:ce:1e:
        bd:88:38:92:ae:45:c6:19:6a:49:50:b3:05:f8:ae:59:37:8a:
        6a:25:03:94:b1:59:81:50:e8:ba:83:80:b7:23:35:f4:76:b9:
        67:1d:59:18:ad:20:8d:94

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
        Validity
            Not Before: Feb  8 00:00:00 2010 GMT
            Not After : Feb  7 23:59:59 2020 GMT
        Subject: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https:\/\/www.verisign.com\/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:f5:23:4b:5e:a5:d7:8a:bb:32:e9:d4:57:f7:ef:
                    e4:c7:26:7e:ad:19:98:fe:a8:9d:7d:94:f6:36:6b:
                    10:d7:75:81:30:7f:04:68:7f:cb:2b:75:1e:cd:1d:
                    08:8c:df:69:94:a7:37:a3:9c:7b:80:e0:99:e1:ee:
                    37:4d:5f:ce:3b:14:ee:86:d4:d0:f5:27:35:bc:25:
                    0b:38:a7:8c:63:9d:17:a3:08:a5:ab:b0:fb:cd:6a:
                    62:82:4c:d5:21:da:1b:d9:f1:e3:84:3b:8a:2a:4f:
                    85:5b:90:01:4f:c9:a7:76:10:7f:27:03:7c:be:ae:
                    7e:7d:c1:dd:f9:05:bc:1b:48:9c:69:e7:c0:a4:3c:
                    3c:41:00:3e:df:96:e5:c5:e4:94:71:d6:55:01:c7:
                    00:26:4a:40:3c:b5:a1:26:a9:0c:a7:6d:80:8e:90:
                    25:7b:cf:bf:3f:1c:eb:2f:96:fa:e5:87:77:c6:b5:
                    56:b2:7a:3b:54:30:53:1b:df:62:34:ff:1e:d1:f4:
                    5a:93:28:85:e5:4c:17:4e:7e:5b:fd:a4:93:99:7f:
                    df:cd:ef:a4:75:ef:ef:15:f6:47:e7:f8:19:72:d8:
                    2e:34:1a:a6:b4:a7:4c:7e:bd:bb:4f:0c:3d:57:f1:
                    30:d6:a6:36:8e:d6:80:76:d7:19:2e:a5:cd:7e:34:
                    2d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/cps
                  User Notice:
                    Explicit Text: https://www.verisign.com/rpa
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            1.3.6.1.5.5.7.1.12: 
                0_.].[0Y0W0U..image/gif0!0.0...+..............k...j.H.,{..0%.#http://logo.verisign.com/vslogo.gif
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.verisign.com/pca3-g5.crl
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, Code Signing
            X509v3 Subject Alternative Name: 
                DirName:/CN=VeriSignMPKI-2-8
            X509v3 Subject Key Identifier: 
                CF:99:A9:EA:7B:26:F4:4B:C9:8E:8F:D7:F0:05:26:EF:E3:D2:A7:9D
            X509v3 Authority Key Identifier: 
                7F:D3:65:A7:C2:DD:EC:BB:F0:30:09:F3:43:39:FA:02:AF:33:31:33
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        56:22:e6:34:a4:c4:61:cb:48:b9:01:ad:56:a8:64:0f:d9:8c:
        91:c4:bb:cc:0c:e5:ad:7a:a0:22:7f:df:47:38:4a:2d:6c:d1:
        7f:71:1a:7c:ec:70:a9:b1:f0:4f:e4:0f:0c:53:fa:15:5e:fe:
        74:98:49:24:85:81:26:1c:91:14:47:b0:4c:63:8c:bb:a1:34:
        d4:c6:45:e8:0d:85:26:73:03:d0:a9:8c:64:6d:dc:71:92:e6:
        45:05:60:15:59:51:39:fc:58:14:6b:fe:d4:a4:ed:79:6b:08:
        0c:41:72:e7:37:22:06:09:be:23:e9:3f:44:9a:1e:e9:61:9d:
        cc:b1:90:5c:fc:3d:d2:8d:ac:42:3d:65:36:d4:b4:3d:40:28:
        8f:9b:10:cf:23:26:cc:4b:20:cb:90:1f:5d:8c:4c:34:ca:3c:
        d8:e5:37:d6:6f:a5:20:bd:34:eb:26:d9:ae:0d:e7:c5:9a:f7:
        a1:b4:21:91:33:6f:86:e8:58:bb:25:7c:74:0e:58:fe:75:1b:
        63:3f:ce:31:7c:9b:8f:1b:96:9e:c5:53:76:84:5b:9c:ad:91:
        fa:ac:ed:93:ba:5d:c8:21:53:c2:82:53:63:af:12:0d:50:87:
        11:1b:3d:54:52:96:8a:2c:9c:3d:92:1a:08:9a:05:2e:c7:93:
        a5:48:91:d3
pkcs7-signedData
  • 1
    • SHA1: nil
    • 1.3.6.1.4.1.311.2.1.4
      • #0
        • 1.3.6.1.4.1.311.2.1.15
          • : 
            00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |
        • SHA1
          • 0e 87 06 06 3e 7c 08 f9  d5 76 06 26 f2 dc 6e f6  |....>|...v.&..n.|
2b 87 2d bb                                       |+.-.            |
    • Certificates
      • Certificate #0
        • 2
          • 7E:93:EB:FB:7C:C6:4E:59:EA:4B:9A:77:D4:06:FC:3B
          • RSA-SHA1: nil
          • Issuer
            • C: ZA
            • ST: Western Cape
            • L: Durbanville
            • O: Thawte
            • OU: Thawte Certification
            • CN: Thawte Timestamping CA
          • 2012-12-21 00:00:00 UTC: 2020-12-30 23:59:59 UTC
          • Subject
            • C: US
            • O: Symantec Corporation
            • CN: Symantec Time Stamping Services CA - G2
          • #5
            • rsaEncryption: nil
            • B1:AC:B3:49:54:4B:97:1C:12:0A:D8:25:79:91:22:57:
              2A:6F:DC:B8:26:C4:43:73:6B:C2:BF:2E:50:5A:FB:14:
              C2:76:8E:43:01:25:43:B4:A1:E2:45:F4:E8:B7:7B:C3:
              74:CC:22:D7:B4:94:00:02:F7:4D:ED:BF:B4:B7:44:24:
              6B:CD:5F:45:3B:D1:44:CE:43:12:73:17:82:8B:69:B4:
              2B:CB:99:1E:AC:72:1B:26:4D:71:1F:B1:31:DD:FB:51:
              61:02:53:A6:AA:F5:49:2C:05:78:45:A5:2F:89:CE:E7:
              99:E7:FE:8C:E2:57:3F:3D:C6:92:DC:4A:F8:7B:33:E4:
              79:0A:FB:F0:75:88:41:9C:FF:C5:03:51:99:AA:D7:6C:
              9F:93:69:87:65:29:83:85:C2:60:14:C4:C8:C9:3B:14:
              DA:C0:81:F0:1F:0D:74:DE:92:22:AB:CA:F7:FB:74:7C:
              27:E6:F7:4A:1B:7F:A7:C3:9E:2D:AE:8A:EA:A6:E6:AA:
              27:16:7D:61:F7:98:71:11:BC:E2:50:A1:4B:E5:5D:FA:
              E5:0E:A7:2C:9F:AA:65:20:D3:D8:96:E8:C8:7C:A5:4E:
              48:44:FF:19:E2:44:07:92:0B:D7:68:84:80:5D:6A:78:
              64:45:CD:60:46:7E:54:C1:13:7C:C5:79:F1:C9:C1:71              : 0x010001
          • #6
            • subjectKeyIdentifier: 
              5f 9a f5 6e 5c cc cc 74  9a d4 dd 7d ef 3f db ec  |_..n\..t...}.?..|
4c 80 2e dd                                       |L...            |
            • authorityInfoAccess
              • OCSP: http://ocsp.thawte.com
            • basicConstraints
              • true
              • true: 0
            • crlDistributionPoints: http://crl.thawte.com/ThawteTimestampingCA.crl
            • extendedKeyUsage: timeStamping
            • keyUsage: true, 6
            • subjectAltName
              • CN: TimeStamp-2048-1
        • RSA-SHA1: 
          03 09 9b 8f 79 ef 7f 59  30 aa ef 68 b5 fa e3 09  |....y..Y0..h....|
1d bb 4f 82 06 5d 37 5f  a6 52 9f 16 8d ea 1c 92  |..O..]7_.R......|
09 44 6e f5 6d eb 58 7c  30 e8 f9 69 8d 23 73 0b  |.Dn.m.X|0..i.#s.|
12 6f 47 a9 ae 39 11 f8  2a b1 9b b0 1a c3 8e eb  |.oG..9..*.......|
59 96 00 ad ce 0c 4d b2  d0 31 a6 08 5c 2a 7a fc  |Y.....M..1..\*z.|
e2 7a 1d 57 4c a8 65 18  e9 79 40 62 25 96 6e c7  |.z.WL.e..y@b%.n.|
c7 37 6a 83 21 08 8e 41  ea dd d9 57 3f 1d 77 49  |.7j.!..A...W?.wI|
87 2a 16 06 5e a6 38 6a  22 12 a3 51 19 83 7e b6  |.*..^.8j"..Q..~.|
      • Certificate #1
        • 2
          • 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • O: Symantec Corporation
            • CN: Symantec Time Stamping Services CA - G2
          • 2012-10-18 00:00:00 UTC: 2020-12-29 23:59:59 UTC
          • Subject
            • C: US
            • O: Symantec Corporation
            • CN: Symantec Time Stamping Services Signer - G4
          • #5
            • rsaEncryption: nil
            • A2:63:0B:39:44:B8:BB:23:A7:44:49:BB:0E:FF:A1:F0:
              61:0A:53:93:B0:98:DB:AD:2C:0F:4A:C5:6E:FF:86:3C:
              53:55:0F:15:CE:04:3F:2B:FD:A9:96:96:D9:BE:61:79:
              0B:5B:C9:4C:86:76:E5:E0:43:4B:22:95:EE:C2:2B:43:
              C1:9F:D8:68:B4:8E:40:4F:EE:85:38:B9:11:C5:23:F2:
              64:58:F0:15:32:6F:4E:57:A1:AE:88:A4:02:D7:2A:1E:
              CD:4B:E1:DD:63:D5:17:89:32:5B:B0:5E:99:5A:A8:9D:
              28:50:0E:17:EE:96:DB:61:3B:45:51:1D:CF:12:56:0B:
              92:47:FC:AB:AE:F6:66:3D:47:AC:70:72:E7:92:E7:5F:
              CD:10:B9:C4:83:64:94:19:BD:25:80:E1:E8:D2:22:A5:
              D0:BA:02:7A:A1:77:93:5B:65:C3:EE:17:74:BC:41:86:
              2A:DC:08:4C:8C:92:8C:91:2D:9E:77:44:1F:68:D6:A8:
              74:77:DB:0E:5B:32:8B:56:8B:33:BD:D9:63:C8:49:9D:
              3A:C5:C5:EA:33:0B:D2:F1:A3:1B:F4:8B:BE:D9:B3:57:
              8B:3B:DE:04:A7:7A:22:B2:24:AE:2E:C7:70:C5:BE:4E:
              83:26:08:FB:0B:BD:A9:4F:99:08:E1:10:28:72:AA:CD              : 0x010001
          • X509v3 extensions
            • basicConstraints
              • true
              • nil
            • extendedKeyUsage: true, timeStamping
            • keyUsage: true, 0x80
            • authorityInfoAccess
              • #0
                • OCSP: http://ts-ocsp.ws.symantec.com
                • caIssuers: http://ts-aia.ws.symantec.com/tss-ca-g2.cer
            • crlDistributionPoints: http://ts-crl.ws.symantec.com/tss-ca-g2.crl
            • subjectAltName
              • CN: TimeStamp-2048-2
            • subjectKeyIdentifier: 
              46 c6 69 a3 0e 4a 14 1e  d5 4c da 52 63 17 3f 5e  |F.i..J...L.Rc.?^|
36 bc 0d e6                                       |6...            |
            • authorityKeyIdentifier: 
              5f 9a f5 6e 5c cc cc 74  9a d4 dd 7d ef 3f db ec  |_..n\..t...}.?..|
4c 80 2e dd                                       |L...            |
        • RSA-SHA1: 
          78 3b b4 91 2a 00 4c f0  8f 62 30 37 78 a3 84 27  |x;..*.L..b07x..'|
07 6f 18 b2 de 25 dc a0  d4 94 03 aa 86 4e 25 9f  |.o...%.......N%.|
9a 40 03 1c dd ce e3 79  cb 21 68 06 da b6 32 b4  |.@.....y.!h...2.|
6d bf f4 2c 26 63 33 e4  49 64 6d 0d e6 c3 67 0e  |m..,&c3.Idm...g.|
f7 05 a4 35 6c 7c 89 16  c6 e9 b2 df b2 e9 dd 20  |...5l|......... |
c6 71 0f cd 95 74 dc b6  5c de bd 37 1f 43 78 e6  |.q...t..\..7.Cx.|
78 b5 cd 28 04 20 a3 aa  f1 4b c4 88 29 91 0e 80  |x..(. ...K..)...|
d1 11 fc dd 5c 76 6e 4f  5e 0e 45 46 41 6e 0d b0  |....\vnO^.EFAn..|
ea 38 9a b1 3a da 09 71  10 fc 1c 79 b4 80 7b ac  |.8..:..q...y..{.|
69 f4 fd 9c b6 0c 16 2b  f1 7f 5b 09 3d 9b 5b e2  |i......+..[.=.[.|
16 ca 13 81 6d 00 2e 38  0d a8 29 8f 2c e1 b2 f4  |....m..8..).,...|
5a a9 01 af 15 9c 2c 2f  49 1b db 22 bb c3 fe 78  |Z.....,/I.."...x|
94 51 c3 86 b1 82 88 5d  f0 3d b4 51 a1 79 33 2b  |.Q.....].=.Q.y3+|
2e 7b b9 dc 20 09 13 71  eb 6a 19 5b cf e8 a5 30  |.{.. ..q.j.[...0|
57 2c 89 49 3f b9 cf 7f  c9 bf 3e 22 68 63 53 9a  |W,.I?.....>"hcS.|
bd 69 74 ac c5 1d 3c 7f  92 e0 c3 bc 1c d8 04 75  |.it...<........u|
      • Certificate #2
        • 2
          • 5D:49:81:8D:94:FE:A0:AE:A7:D9:B8:85:C9:BA:CB:D7
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • O: VeriSign, Inc.
            • OU: VeriSign Trust Network
            • OU: Terms of use at https://www.verisign.com/rpa (c)10
            • CN: VeriSign Class 3 Code Signing 2010 CA
          • 2013-09-19 00:00:00 UTC: 2015-09-19 23:59:59 UTC
          • Subject
            • C: US
            • ST: California
            • L: San Diego
            • O: Whilokii
            • OU: Digital ID Class 3 - Microsoft Software Validation v2
            • CN: Whilokii
          • #5
            • rsaEncryption: nil
            • CF:93:67:6A:55:32:64:4A:C9:88:40:54:1C:D9:86:C1:
              E3:07:3E:92:62:B5:0A:BE:46:92:D4:68:A1:0B:EE:49:
              33:D7:6E:9A:A5:6A:F7:E6:B1:0F:99:6E:79:8D:BE:A1:
              DD:13:2E:31:7B:DD:EB:14:AF:5B:D7:CF:D6:AF:E4:8C:
              D7:CD:B3:3E:92:DF:E2:1F:3A:2D:39:B4:D9:38:33:6C:
              E2:A3:15:B6:49:74:F9:66:0F:0C:A7:E1:77:99:5C:CF:
              E6:6F:BC:BD:B9:72:E7:45:DA:D0:1A:41:EE:05:61:F1:
              12:42:3D:5E:43:EB:48:44:CB:D4:97:B3:EE:2F:8D:DC:
              78:BC:CA:EA:06:7B:F8:6E:27:96:62:C7:EA:96:05:0E:
              55:41:56:A1:1B:F2:1E:CB:C0:BD:C7:DA:74:D6:F4:D4:
              16:DC:87:CC:CF:64:CC:82:CB:86:06:E4:6F:8D:7D:6C:
              7D:26:F7:1B:99:E2:6B:12:BC:10:42:BE:57:95:53:26:
              42:D0:03:7B:D4:90:1B:28:D4:9B:BA:2F:AF:3A:5D:A9:
              2A:EE:A6:B9:03:68:68:08:FF:FF:89:35:EF:87:10:52:
              72:11:DC:99:B4:3D:67:57:38:7C:BF:64:A3:CD:54:83:
              F8:4D:E9:63:C6:E8:12:23:76:12:FB:0F:63:9B:DC:1B              : 0x010001
          • X509v3 extensions
            • basicConstraints
              • nil
            • keyUsage: true, 0x80
            • crlDistributionPoints: http://csc3-2010-crl.verisign.com/CSC3-2010.crl
            • certificatePolicies
              • 2.16.840.1.113733.1.7.23.3
                • id-qt-cps: https://www.verisign.com/rpa
            • extendedKeyUsage: codeSigning
            • authorityInfoAccess
              • #0
                • OCSP: http://ocsp.verisign.com
                • caIssuers: http://csc3-2010-aia.verisign.com/CSC3-2010.cer
            • authorityKeyIdentifier: 
              cf 99 a9 ea 7b 26 f4 4b  c9 8e 8f d7 f0 05 26 ef  |....{&.K......&.|
e3 d2 a7 9d                                       |....            |
            • nsCertType: 0x10
            • 1.3.6.1.4.1.311.2.1.27
              • false: true
        • RSA-SHA1: 
          80 cd 19 50 c4 36 d7 50  52 64 7a 5a 77 5d af 2c  |...P.6.PRdzZw].,|
33 b6 b0 f8 1a b2 f3 5e  2d d6 cc 28 e0 99 70 04  |3......^-..(..p.|
9c 69 15 d3 f3 26 24 73  32 4a 30 bf 44 7f 4f 9f  |.i...&$s2J0.D.O.|
5e 01 b1 ef 8a 35 47 fc  73 63 0e 50 e5 58 d3 51  |^....5G.sc.P.X.Q|
7b 86 57 f5 62 d5 ca 5b  1a 25 7a 83 0d e7 c1 5f  |{.W.b..[.%z...._|
04 9f aa f6 0d cc a2 27  cf da 52 34 c7 44 35 88  |.......'..R4.D5.|
92 ad cb 27 5f c0 ec dc  26 ab 1c 6c 2a 8a ea 5a  |...'_...&..l*..Z|
9b 9b 05 73 88 a1 c2 8a  44 28 7c 95 01 96 85 62  |...s....D(|....b|
10 c9 b0 93 7d ac 8f 7c  96 ef 2d 71 d0 11 b8 fc  |....}..|..-q....|
b5 63 9e 83 ad a4 b1 d2  b0 02 c4 bd e7 07 25 b7  |.c............%.|
65 1e d6 70 1b b0 70 ea  50 16 72 a4 49 8e 8c a4  |e..p..p.P.r.I...|
b7 e3 b3 a2 20 be b0 33  86 8e 58 a1 2c 1b dc 3b  |.... ..3..X.,..;|
bb 18 21 62 2d 23 c0 26  ef 3d d2 49 72 1d 70 72  |..!b-#.&.=.Ir.pr|
79 2a 8b 32 21 45 d1 42  25 43 bf c9 b6 59 91 d0  |y*.2!E.B%C...Y..|
10 bb 4b 1c 5b f3 6b 83  9d 9e e1 a7 ac 79 28 35  |..K.[.k......y(5|
d2 06 51 45 46 8a f5 66  f0 75 f0 3d e5 4f fc 15  |..QEF..f.u.=.O..|
      • Certificate #3
        • 2
          • 61:19:93:E4:00:00:00:00:00:1C
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • ST: Washington
            • L: Redmond
            • O: Microsoft Corporation
            • CN: Microsoft Code Verification Root
          • 2011-02-22 19:25:17 UTC: 2021-02-22 19:35:17 UTC
          • Subject
            • C: US
            • O: VeriSign, Inc.
            • OU: VeriSign Trust Network
            • OU: (c) 2006 VeriSign, Inc. - For authorized use only
            • CN: VeriSign Class 3 Public Primary Certification Authority - G5
          • #5
            • rsaEncryption: nil
            • AF:24:08:08:29:7A:35:9E:60:0C:AA:E7:4B:3B:4E:DC:
              7C:BC:3C:45:1C:BB:2B:E0:FE:29:02:F9:57:08:A3:64:
              85:15:27:F5:F1:AD:C8:31:89:5D:22:E8:2A:AA:A6:42:
              B3:8F:F8:B9:55:B7:B1:B7:4B:B3:FE:8F:7E:07:57:EC:
              EF:43:DB:66:62:15:61:CF:60:0D:A4:D8:DE:F8:E0:C3:
              62:08:3D:54:13:EB:49:CA:59:54:85:26:E5:2B:8F:1B:
              9F:EB:F5:A1:91:C2:33:49:D8:43:63:6A:52:4B:D2:8F:
              E8:70:51:4D:D1:89:69:7B:C7:70:F6:B3:DC:12:74:DB:
              7B:5D:4B:56:D3:96:BF:15:77:A1:B0:F4:A2:25:F2:AF:
              1C:92:67:18:E5:F4:06:04:EF:90:B9:E4:00:E4:DD:3A:
              B5:19:FF:02:BA:F4:3C:EE:E0:8B:EB:37:8B:EC:F4:D7:
              AC:F2:F6:F0:3D:AF:DD:75:91:33:19:1D:1C:40:CB:74:
              24:19:21:93:D9:14:FE:AC:2A:52:C7:8F:D5:04:49:E4:
              8D:63:47:88:3C:69:83:CB:FE:47:BD:2B:7E:4F:C5:95:
              AE:0E:9D:D4:D1:43:C0:67:73:E3:14:08:7E:E5:3F:9F:
              73:B8:33:0A:CF:5D:3F:34:87:96:8A:EE:53:E8:25:15              : 0x010001
          • #6
            • certificatePolicies: anyPolicy
            • basicConstraints: true, true
            • keyUsage: 0x86
            • subjectKeyIdentifier: 
              7f d3 65 a7 c2 dd ec bb  f0 30 09 f3 43 39 fa 02  |..e......0..C9..|
af 33 31 33                                       |.313            |
            • authorityKeyIdentifier: 
              62 fb 0a 21 5b 7f 43 6e  11 da 09 54 50 6b f5 d2  |b..![.Cn...TPk..|
96 71 f1 9e                                       |.q..            |
            • crlDistributionPoints: http://crl.microsoft.com/pki/crl/products/MicrosoftCodeVerifRoot.crl
        • RSA-SHA1: 
          81 2a 82 16 8c 34 67 2b  e5 03 eb 34 7b 8c a2 a3  |.*...4g+...4{...|
50 8a f4 55 86 f1 1e 8c  8e ae 7d ee 03 19 ce 72  |P..U......}....r|
95 18 48 ad 62 11 fd 20  fd 3f 47 06 01 5a e2 e0  |..H.b.. .?G..Z..|
6f 8c 15 2c 4e 3c 6a 50  6c 0b 36 a3 cf 7a 0d 9c  |o..,N..'..a.[|
5d 07 6b cd 86 a8 e2 65  80 a8 e2 15 e2 b2 be 23  |].k....e.......#|
05 6a ba 0c f3 47 93 4d  ac a4 8c 07 79 39 c0 61  |.j...G.M....y9.a|
12 3a 05 0d 89 a3 ec 9f  57 89 84 fb ec ca 7c 47  |.:......W.....|G|
66 14 91 d8 b6 0f 19 5d  e6 b8 4a ac bc 47 c8 71  |f......]..J..G.q|
43 96 e6 32 20 a5 dc 77  86 fd 3c e3 8b 71 db 7b  |C..2 ..w..<..q.{|
9b 03 fc b7 1d 32 64 eb  16 52 a0 43 a3 fa 2e ad  |.....2d..R.C....|
59 92 4e 7c c7 f2 33 42  48 38 51 3a 7c 38 c7 1b  |Y.N|..3BH8Q:|8..|
24 22 28 40 1e 1a 46 1f  17 db 18 f7 f0 27 35 6c  |$"(@..F......'5l|
b8 63 d9 cd b9 64 5d 2b  a5 5e ef c6 29 b4 f2 c7  |.c...d]+.^..)...|
f8 21 cc 04 ba 57 fd 01  b6 ab c6 67 f9 e7 d3 99  |.!...W.....g....|
7f f4 f5 22 fa 72 f5 fd  ff 3a 1c 42 3a a1 f9 80  |...".r...:.B:...|
18 a5 ee 8d 1c d4 66 9e  45 01 fe aa ee ff fb 17  |......f.E.......|
8f 30 f7 f1 cd 29 c5 9d  ec b5 d5 49 00 3d 85 b8  |.0...).....I.=..|
cb bb 93 3a 27 6a 49 c0  30 ae 66 c9 f7 23 28 32  |...:'jI.0.f..#(2|
76 f9 a4 83 56 c8 48 ce  5a 96 aa a0 cc 0c c4 7f  |v...V.H.Z.......|
b4 8e 97 af 6d e3 54 27  c3 9f 86 c0 d6 e4 73 08  |....m.T'......s.|
97 05 db d0 54 62 5e 03  48 c2 d5 9f 7f a7 66 8c  |....Tb^.H.....f.|
d0 9d b0 4f d4 d3 98 5f  4b 7a c9 7f b2 29 52 d0  |...O..._Kz...)R.|
12 80 c7 0f 54 b6 1e 67  cd c6 a0 6c 11 03 84 d3  |....T..g...l....|
48 75 e7 2a fe b0 3b 6e  0a 3a a6 6b 76 99 05 a3  |Hu.*..;n.:.kv...|
f1 77 68 61 33 14 47 06  fc 53 7f 52 bd 92 14 5c  |.wha3.G..S.R...\|
4a 24 6a 67 8c af 8d 90  aa d0 f6 79 21 1b 93 26  |J$jg.......y!..&|
7c c3 ce 1e bd 88 38 92  ae 45 c6 19 6a 49 50 b3  ||.....8..E..jIP.|
05 f8 ae 59 37 8a 6a 25  03 94 b1 59 81 50 e8 ba  |...Y7.j%...Y.P..|
83 80 b7 23 35 f4 76 b9  67 1d 59 18 ad 20 8d 94  |...#5.v.g.Y.. ..|
      • Certificate #4
        • 2
          • 52:00:E5:AA:25:56:FC:1A:86:ED:96:C9:D4:4B:33:C7
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • O: VeriSign, Inc.
            • OU: VeriSign Trust Network
            • OU: (c) 2006 VeriSign, Inc. - For authorized use only
            • CN: VeriSign Class 3 Public Primary Certification Authority - G5
          • 2010-02-08 00:00:00 UTC: 2020-02-07 23:59:59 UTC
          • Subject
            • C: US
            • O: VeriSign, Inc.
            • OU: VeriSign Trust Network
            • OU: Terms of use at https://www.verisign.com/rpa (c)10
            • CN: VeriSign Class 3 Code Signing 2010 CA
          • #5
            • rsaEncryption: nil
            • F5:23:4B:5E:A5:D7:8A:BB:32:E9:D4:57:F7:EF:E4:C7:
              26:7E:AD:19:98:FE:A8:9D:7D:94:F6:36:6B:10:D7:75:
              81:30:7F:04:68:7F:CB:2B:75:1E:CD:1D:08:8C:DF:69:
              94:A7:37:A3:9C:7B:80:E0:99:E1:EE:37:4D:5F:CE:3B:
              14:EE:86:D4:D0:F5:27:35:BC:25:0B:38:A7:8C:63:9D:
              17:A3:08:A5:AB:B0:FB:CD:6A:62:82:4C:D5:21:DA:1B:
              D9:F1:E3:84:3B:8A:2A:4F:85:5B:90:01:4F:C9:A7:76:
              10:7F:27:03:7C:BE:AE:7E:7D:C1:DD:F9:05:BC:1B:48:
              9C:69:E7:C0:A4:3C:3C:41:00:3E:DF:96:E5:C5:E4:94:
              71:D6:55:01:C7:00:26:4A:40:3C:B5:A1:26:A9:0C:A7:
              6D:80:8E:90:25:7B:CF:BF:3F:1C:EB:2F:96:FA:E5:87:
              77:C6:B5:56:B2:7A:3B:54:30:53:1B:DF:62:34:FF:1E:
              D1:F4:5A:93:28:85:E5:4C:17:4E:7E:5B:FD:A4:93:99:
              7F:DF:CD:EF:A4:75:EF:EF:15:F6:47:E7:F8:19:72:D8:
              2E:34:1A:A6:B4:A7:4C:7E:BD:BB:4F:0C:3D:57:F1:30:
              D6:A6:36:8E:D6:80:76:D7:19:2E:A5:CD:7E:34:2D:89              : 0x010001
          • X509v3 extensions
            • basicConstraints
              • true
              • true: 0
            • certificatePolicies
              • 2.16.840.1.113733.1.7.23.3
                • #0
                  • id-qt-cps: https://www.verisign.com/cps
                  • id-qt-unotice: https://www.verisign.com/rpa
            • keyUsage: true, 6
            • 1.3.6.1.5.5.7.1.12
              • image/gif
                • SHA1: 
                  8f e5 d3 1a 86 ac 8d 8e  6b c3 cf 80 6a d4 48 18  |........k...j.H.|
2c 7b 19 2e                                       |,{..            |
                • http://logo.verisign.com/vslogo.gif
            • crlDistributionPoints: http://crl.verisign.com/pca3-g5.crl
            • authorityInfoAccess
              • OCSP: http://ocsp.verisign.com
            • extendedKeyUsage
              • clientAuth: codeSigning
            • subjectAltName
              • CN: VeriSignMPKI-2-8
            • subjectKeyIdentifier: 
              cf 99 a9 ea 7b 26 f4 4b  c9 8e 8f d7 f0 05 26 ef  |....{&.K......&.|
e3 d2 a7 9d                                       |....            |
            • authorityKeyIdentifier: 
              7f d3 65 a7 c2 dd ec bb  f0 30 09 f3 43 39 fa 02  |..e......0..C9..|
af 33 31 33                                       |.313            |
        • RSA-SHA1: 
          56 22 e6 34 a4 c4 61 cb  48 b9 01 ad 56 a8 64 0f  |V".4..a.H...V.d.|
d9 8c 91 c4 bb cc 0c e5  ad 7a a0 22 7f df 47 38  |.........z."..G8|
4a 2d 6c d1 7f 71 1a 7c  ec 70 a9 b1 f0 4f e4 0f  |J-l..q.|.p...O..|
0c 53 fa 15 5e fe 74 98  49 24 85 81 26 1c 91 14  |.S..^.t.I$..&...|
47 b0 4c 63 8c bb a1 34  d4 c6 45 e8 0d 85 26 73  |G.Lc...4..E...&s|
03 d0 a9 8c 64 6d dc 71  92 e6 45 05 60 15 59 51  |....dm.q..E.`.YQ|
39 fc 58 14 6b fe d4 a4  ed 79 6b 08 0c 41 72 e7  |9.X.k....yk..Ar.|
37 22 06 09 be 23 e9 3f  44 9a 1e e9 61 9d cc b1  |7"...#.?D...a...|
90 5c fc 3d d2 8d ac 42  3d 65 36 d4 b4 3d 40 28  |.\.=...B=e6..=@(|
8f 9b 10 cf 23 26 cc 4b  20 cb 90 1f 5d 8c 4c 34  |....#&.K ...].L4|
ca 3c d8 e5 37 d6 6f a5  20 bd 34 eb 26 d9 ae 0d  |.<..7.o. .4.&...|
e7 c5 9a f7 a1 b4 21 91  33 6f 86 e8 58 bb 25 7c  |......!.3o..X.%||
74 0e 58 fe 75 1b 63 3f  ce 31 7c 9b 8f 1b 96 9e  |t.X.u.c?.1|.....|
c5 53 76 84 5b 9c ad 91  fa ac ed 93 ba 5d c8 21  |.Sv.[........].!|
53 c2 82 53 63 af 12 0d  50 87 11 1b 3d 54 52 96  |S..Sc...P...=TR.|
8a 2c 9c 3d 92 1a 08 9a  05 2e c7 93 a5 48 91 d3  |.,.=.........H..|
    • Signer
      • 1
      • unnamed
        • #0
          • C: US
          • O: VeriSign, Inc.
          • OU: VeriSign Trust Network
          • OU: Terms of use at https://www.verisign.com/rpa (c)10
          • CN: VeriSign Class 3 Code Signing 2010 CA
        • 5D:49:81:8D:94:FE:A0:AE:A7:D9:B8:85:C9:BA:CB:D7
      • SHA1: nil
      • #3
        • 1.3.6.1.4.1.311.2.1.12
          • nil
        • contentType: 1.3.6.1.4.1.311.2.1.4
        • 1.3.6.1.4.1.311.2.1.11: msCodeInd
        • messageDigest: 
          c9 11 07 4c 45 74 38 c1  d1 c0 92 61 36 16 4d a7  |...LEt8....a6.M.|
eb 4d bc 36                                       |.M.6            |
      • rsaEncryption: 
        57 61 24 22 3e a5 61 ee  38 b4 36 30 f1 9e 1d 4e  |Wa$">.a.8.60...N|
f9 d1 5a 49 b9 ab 27 8f  a4 eb 01 d5 9b 65 de b3  |..ZI..'......e..|
f3 65 6c 5d ec ed f3 ec  0b 4c a9 b9 5c dd c6 cd  |.el].....L..\...|
9b 84 07 79 d3 66 6e 30  d1 95 f6 35 f2 af 85 7f  |...y.fn0...5....|
e8 fe e4 17 0a f0 87 f7  51 25 81 80 24 cd d3 dc  |........Q%..$...|
8c 76 cc 5a 43 4d 4a ee  2f 95 9d 6e 6b 4a 71 b5  |.v.ZCMJ./..nkJq.|
34 fb c7 a6 e9 cf 14 6d  67 8e 76 2a 93 d5 9a 0b  |4......mg.v*....|
46 9f 5a 15 64 91 f1 81  c2 5a 4a 4a 8a c9 28 64  |F.Z.d....ZJJ..(d|
bb ce c7 69 64 a0 b9 75  ec 1a 3a 47 76 e3 88 94  |...id..u..:Gv...|
18 80 4a a0 a8 a9 94 58  dd bd ab 99 9c f5 f4 58  |..J....X.......X|
bb 37 1a f7 69 2b 28 78  3a e5 b1 41 32 61 2e 0e  |.7..i+(x:..A2a..|
11 16 be 5f 3b 25 f0 5e  2f 64 d2 08 cf 8b 1b b8  |..._;%.^/d......|
fa 22 bc ec 02 0f 10 07  a2 a2 ef 90 5e ff 4d 70  |."..........^.Mp|
0e a9 17 bc 0a df 6d 0e  3c 23 95 a0 db 84 e2 b7  |......m.<#......|
8f 3c e5 4a f1 ea 27 68  36 be 55 25 54 1b a7 70  |.<.J..'h6.U%T..p|
56 c2 9f 71 24 5f 32 fa  d3 e1 0f 2b ef a9 9a b8  |V..q$_2....+....|
      • countersignature
        • 1
          • unnamed
            • #0
              • C: US
              • O: Symantec Corporation
              • CN: Symantec Time Stamping Services CA - G2
            • 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
          • SHA1: nil
          • #2
            • contentType: pkcs7-data
            • signingTime: 2014-03-18 03:25:51 UTC
            • messageDigest: 
              b1 b1 8c 3f 9d 02 8d 2a  c6 5c aa 86 85 65 80 7e  |...?...*.\...e.~|
5e 98 8b bf                                       |^...            |
          • rsaEncryption: 
            8d 7c 09 11 b7 7f e8 fe  69 63 04 0c 83 d9 6d 93  |.|......ic....m.|
95 44 e1 6f 8f 72 88 e5  64 6a ac cc d7 3c e9 32  |.D.o.r..dj...<.2|
21 34 d0 b3 41 3f 9c 56  b3 fa 73 1c 10 1a fe 82  |!4..A?.V..s.....|
3a 31 71 55 5d e5 10 1c  ab c9 28 ab 8d 34 68 58  |:1qU].....(..4hX|
1f 0a 03 6b 12 7c 39 72  bf e5 ae b9 75 1b 9a 3a  |...k.|9r....u..:|
1f 1a 4c 48 df 82 29 fa  6c b7 29 b7 69 79 83 9e  |..LH..).l.).iy..|
6e d1 05 3a fe 6e 9f 3f  68 64 7a 6c 5f 3b 03 c1  |n..:.n.?hdzl_;..|
c9 e7 5a cc 9e 40 4a 87  d8 69 c0 f9 56 1f 2a 28  |..Z..@J..i..V.*(|
dd 58 1d 89 44 22 3f 23  d6 2a d6 c7 22 09 b7 35  |.X..D"?#.*.."..5|
48 31 95 b3 c6 78 07 46  e0 73 95 c4 ff c7 e3 05  |H1...x.F.s......|
20 92 41 30 56 ae 8a 3b  3a 2f cf 67 96 71 3e a1  | .A0V..;:/.g.q>.|
d9 fa cc f2 11 df f1 c8  59 5d 53 3e 2f d2 4e 28  |........Y]S>/.N(|
36 de cc 3d 5e e0 a1 53  f8 28 ba 39 1e fc c1 dc  |6..=^..S.(.9....|
05 7a 88 5d 77 5c 50 6a  06 b5 49 2c 5c 2e b7 e6  |.z.]w\Pj..I,\...|
37 ad b4 6b aa dd 42 3a  d1 98 81 42 8c dc b2 ae  |7..k..B:...B....|
0d 19 41 d2 aa 9d 88 19  79 b8 dd d1 fb b8 5f eb  |..A.....y....._.|
offsetsizetypecomment
15c115HTM#
15d055528BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK