filenameXZDesktop_4003_1.0.1.32.exe
size4211224 (0x404218)
md5089ffaf3b7b1071f2455a86dc2a51f7f
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x118

Rich Header

lib idversiontimes used
2414011651
24340116197
2424011638
2592670627
2602670637
2612670669
131307294
1473072929
10346
205609301
2652703075
255270301
258270301

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x5d259a38
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x102
Magic0x10b
LinkerVersion14.16
SizeOfCode0x84600
SizeOfInitializedData0x37e000
SizeOfUninitializedData0
AddressOfEntryPoint0x4cebb
BaseOfCode0x1000
BaseOfData0x86000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.1
ImageVersion0.0
SubsystemVersion5.1
Reserved10
SizeOfImage0x409000
SizeOfHeaders0x400
CheckSum0x40431c
Subsystem2
DllCharacteristics0x8140
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

namevavsizeraw sizeflags
.text0x10000x8456b0x84600R-X CODE
.rdata0x860000x224740x22600R-- IDATA
.data0xa90000x49fc0x1a00RW- IDATA
.rsrc0xae0000x353ba80x353c00R-- IDATA
.reloc0x4020000x62b80x6400R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0xa65cc0x12c
RESOURCE0xae0000x353ba8
EXCEPTION00
SECURITY0x402a000x1818
BASERELOC0x4020000x62b8
DEBUG0xa21100x54
ARCHITECTURE00
GLOBALPTR00
TLS0xa22080x18
LOAD_CONFIG0xa21680x40
Bound_IAT00
IAT0x860000x55c
Delay_IAT00
CLR_Header00

TLS

raw
start		raw
end		indexcallbkszero
fill		flags
0x4a3ea80x4a3eb00x4aafc80x4865d000x300000
typenamesizecp
LUAGLOBAL_VAR.LUAC18281252
LUAINSTSCRIPT.LUAC186751252
LUAUNINSTSCRIPT.LUAC92671252
PNG#301134641252
PNG#30233701252
PNG#30332161252
PNG#30430721252
PNG#30532891252
PNG#307134041252
PNG#30875801252
PNG#309239071252
PNG#310145301252
PNG#31128621252
PNG#31228631252
PNG#31578981252
PNG#316134041252
PNG#34032761252
PNG#34149381252
PNG#34250341252
XMLLAYOUT.XML103261252
_7ZAPP.7Z31964481252
ICON#17441252
ICON#22961252
ICON#337521252
ICON#422161252
ICON#513841252
ICON#630991252
ICON#7676241252
ICON#8169361252
ICON#996401252
ICON#1067601252
ICON#1142641252
ICON#1224401252
ICON#1317201252
ICON#1411281252
DIALOG#1291141252
STRING#9561252
GROUP_ICON#1282021252
VERSION#113561252
idlangstring
1282052DTLInstaller
module_namehintordfunction_name
KERNEL32.dll1346lstrcmpW
KERNEL32.dll1345lstrcmpA
KERNEL32.dll190CreateToolhelp32Snapshot
KERNEL32.dll448GetCurrentProcess
KERNEL32.dll918Process32FirstW
KERNEL32.dll920Process32NextW
KERNEL32.dll520GetLogicalDriveStringsW
KERNEL32.dll928QueryDosDeviceW
KERNEL32.dll1273WaitForSingleObject
KERNEL32.dll1216TerminateProcess
KERNEL32.dll447GetCurrentDirectoryW
KERNEL32.dll1101SetCurrentDirectoryW
KERNEL32.dll302FindClose
KERNEL32.dll507GetFullPathNameW
KERNEL32.dll313FindFirstFileW
KERNEL32.dll1358lstrlenW
KERNEL32.dll1121SetFileAttributesW
KERNEL32.dll214DeleteFileW
KERNEL32.dll325FindNextFileW
KERNEL32.dll1027RemoveDirectoryW
KERNEL32.dll281ExitProcess
KERNEL32.dll1263VirtualProtect
KERNEL32.dll864MoveFileExW
KERNEL32.dll1202Sleep
KERNEL32.dll1111SetEnvironmentVariableW
KERNEL32.dll674GetVersion
KERNEL32.dll840LocalFree
KERNEL32.dll391GetCommandLineW
KERNEL32.dll643GetTempFileNameW
KERNEL32.dll1113SetEvent
KERNEL32.dll133CreateEventW
KERNEL32.dll521GetLogicalDrives
KERNEL32.dll467GetDriveTypeW
KERNEL32.dll1351lstrcpyA
KERNEL32.dll1352lstrcpyW
KERNEL32.dll1357lstrlenA
KERNEL32.dll870MulDiv
KERNEL32.dll600GetProfileIntA
KERNEL32.dll691GlobalAlloc
KERNEL32.dll702GlobalLock
KERNEL32.dll1316WriteConsoleW
KERNEL32.dll1159SetStdHandle
KERNEL32.dll1110SetEnvironmentVariableA
KERNEL32.dll353FreeEnvironmentStringsW
KERNEL32.dll474GetEnvironmentStringsW
KERNEL32.dll390GetCommandLineA
KERNEL32.dll567GetOEMCP
KERNEL32.dll778IsValidCodePage
KERNEL32.dll308FindFirstFileExW
KERNEL32.dll161CreatePipe
KERNEL32.dll487GetFileAttributesExW
KERNEL32.dll479GetExitCodeProcess
KERNEL32.dll343FlushFileBuffers
KERNEL32.dll664GetTimeZoneInformation
KERNEL32.dll958ReadConsoleW
KERNEL32.dll831LoadLibraryW
KERNEL32.dll410GetConsoleCP
KERNEL32.dll271EnumSystemLocalesW
KERNEL32.dll667GetUserDefaultLCID
KERNEL32.dll780IsValidLocale
KERNEL32.dll663GetTimeFormatW
KERNEL32.dll456GetDateFormatW
KERNEL32.dll499GetFileType
KERNEL32.dll360GetACP
KERNEL32.dll218DeleteTimerQueueTimer
KERNEL32.dll164CreateProcessA
KERNEL32.dll232DuplicateHandle
KERNEL32.dll645GetTempPathW
KERNEL32.dll936QueryPerformanceFrequency
KERNEL32.dll535GetModuleHandleExW
KERNEL32.dll355FreeLibraryAndExitThread
KERNEL32.dll282ExitThread
KERNEL32.dll181CreateThread
KERNEL32.dll1048RtlUnwind
KERNEL32.dll490GetFileAttributesW
KERNEL32.dll1130SetFileTime
KERNEL32.dll129CreateDirectoryW
KERNEL32.dll449GetCurrentProcessId
KERNEL32.dll935QueryPerformanceCounter
KERNEL32.dll611GetStartupInfoW
KERNEL32.dll1189SetUnhandledExceptionFilter
KERNEL32.dll1235UnhandledExceptionFilter
KERNEL32.dll1274WaitForSingleObjectEx
KERNEL32.dll1039ResetEvent
KERNEL32.dll349FormatMessageA
KERNEL32.dll531GetModuleFileNameA
KERNEL32.dll370GetCPInfo
KERNEL32.dll518GetLocaleInfoW
KERNEL32.dll813LCMapStringW
KERNEL32.dll100CompareStringW
KERNEL32.dll633GetSystemTimeAsFileTime
KERNEL32.dll1222TlsFree
KERNEL32.dll1224TlsSetValue
KERNEL32.dll1223TlsGetValue
KERNEL32.dll1221TlsAlloc
KERNEL32.dll617GetStringTypeW
KERNEL32.dll829LoadLibraryExA
KERNEL32.dll1260VirtualFree
KERNEL32.dll1257VirtualAlloc
KERNEL32.dll772IsProcessorFeaturePresent
KERNEL32.dll344FlushInstructionCache
KERNEL32.dll753InterlockedPushEntrySList
KERNEL32.dll752InterlockedPopEntrySList
KERNEL32.dll743InitializeSListHead
KERNEL32.dll1139SetLastError
KERNEL32.dll357FreeResource
KERNEL32.dll751InterlockedIncrement
KERNEL32.dll747InterlockedDecrement
KERNEL32.dll209DeleteCriticalSection
KERNEL32.dll739InitializeCriticalSectionAndSpinCount
KERNEL32.dll532GetModuleFileNameW
KERNEL32.dll830LoadLibraryExW
KERNEL32.dll1349lstrcmpiW
KERNEL32.dll536GetModuleHandleW
KERNEL32.dll1297WideCharToMultiByte
KERNEL32.dll871MultiByteToWideChar
KERNEL32.dll453GetCurrentThreadId
KERNEL32.dll238EnterCriticalSection
KERNEL32.dll945RaiseException
KERNEL32.dll825LeaveCriticalSection
KERNEL32.dll896OpenProcess
KERNEL32.dll514GetLastError
KERNEL32.dll143CreateFileW
KERNEL32.dll158CreateMutexW
KERNEL32.dll906OutputDebugStringW
KERNEL32.dll586GetProcessHeap
KERNEL32.dll715HeapAlloc
KERNEL32.dll719HeapFree
KERNEL32.dll722HeapReAlloc
KERNEL32.dll724HeapSize
KERNEL32.dll718HeapDestroy
KERNEL32.dll333FindResourceExW
KERNEL32.dll334FindResourceW
KERNEL32.dll833LoadResource
KERNEL32.dll852LockResource
KERNEL32.dll1201SizeofResource
KERNEL32.dll1127SetFilePointerEx
KERNEL32.dll1126SetFilePointer
KERNEL32.dll82CloseHandle
KERNEL32.dll1317WriteFile
KERNEL32.dll768IsDebuggerPresent
KERNEL32.dll462GetDiskFreeSpaceExW
KERNEL32.dll285ExpandEnvironmentStringsW
KERNEL32.dll354FreeLibrary
KERNEL32.dll612GetStdHandle
KERNEL32.dll581GetProcAddress
KERNEL32.dll960ReadFile
KERNEL32.dll428GetConsoleMode
KERNEL32.dll1107SetEndOfFile
USER32.dll250FindWindowW
USER32.dll746SwitchToThisWindow
USER32.dll420GetWindowThreadProcessId
USER32.dll495LoadImageW
USER32.dll382GetSystemMetrics
USER32.dll636SendMessageW
USER32.dll710SetWindowPos
USER32.dll708SetWindowLongW
USER32.dll406GetWindowLongW
USER32.dll715SetWindowTextW
USER32.dll521MapWindowPoints
USER32.dll276GetClientRect
USER32.dll356GetParent
USER32.dll412GetWindowRect
USER32.dll351GetMonitorInfoW
USER32.dll538MonitorFromWindow
USER32.dll398GetWindow
USER32.dll699SetTimer
USER32.dll566PostMessageW
USER32.dll465IsIconic
USER32.dll576PtInRect
USER32.dll289GetDC
USER32.dll613ReleaseDC
USER32.dll782UpdateLayeredWindow
USER32.dll461IsDialogMessageW
USER32.dll567PostQuitMessage
USER32.dll288GetCursorPos
USER32.dll621ScreenToClient
USER32.dll648SetCursor
USER32.dll491LoadCursorW
USER32.dll166DestroyWindow
USER32.dll49CharNextW
USER32.dll156DefWindowProcW
USER32.dll270GetClassInfoW
USER32.dll590RegisterClassW
USER32.dll735ShowWindow
USER32.dll175DispatchMessageW
USER32.dll764TranslateMessage
USER32.dll349GetMessageW
USER32.dll563PeekMessageW
USER32.dll774UnregisterClassW
USER32.dll99CreateDialogParamW
USER32.dll483KillTimer
USER32.dll533MessageBoxW
USER32.dll256GetActiveWindow
USER32.dll612ReleaseCapture
USER32.dll640SetCapture
USER32.dll242EnumWindows
USER32.dll266GetCaretPos
USER32.dll506LoadStringW
USER32.dll162DestroyCursor
USER32.dll71ClientToScreen
USER32.dll625ScrollWindowEx
USER32.dll642SetCaretPos
USER32.dll425HideCaret
USER32.dll729ShowCaret
USER32.dll89CreateCaret
USER32.dll785UpdateWindow
USER32.dll689SetScrollPos
USER32.dll690SetScrollRange
USER32.dll215EnableScrollBar
USER32.dll732ShowScrollBar
USER32.dll446InvalidateRect
USER32.dll437InflateRect
USER32.dll445IntersectRect
USER32.dll300GetFocus
USER32.dll295GetDlgItem
USER32.dll317GetKeyState
USER32.dll291GetDesktopWindow
USER32.dll299GetDoubleClickTime
USER32.dll379GetSysColor
USER32.dll468IsRectEmpty
USER32.dll245ExitWindowsEx
USER32.dll549OffsetRect
GDI32.dll48CreateCompatibleDC
GDI32.dll631SelectObject
GDI32.dll230DeleteObject
GDI32.dll64CreateFontIndirectW
GDI32.dll164DPtoLP
GDI32.dll79CreateRectRgn
GDI32.dll310ExtSelectClipRgn
GDI32.dll19BitBlt
GDI32.dll550GetTextMetricsW
GDI32.dll411GdiSetBatchLimit
GDI32.dll459GetDeviceCaps
GDI32.dll509GetObjectW
GDI32.dll525GetStockObject
GDI32.dll53CreateDIBSection
GDI32.dll227DeleteDC
ADVAPI32.dll503OpenProcessToken
ADVAPI32.dll694SetSecurityDescriptorDacl
ADVAPI32.dll92ControlService
ADVAPI32.dll713StartServiceW
ADVAPI32.dll552QueryServiceStatus
ADVAPI32.dll507OpenServiceW
ADVAPI32.dll505OpenSCManagerW
ADVAPI32.dll87CloseServiceHandle
ADVAPI32.dll622RegQueryValueExW
ADVAPI32.dll31AdjustTokenPrivileges
ADVAPI32.dll407LookupPrivilegeValueW
ADVAPI32.dll584RegDeleteValueW
ADVAPI32.dll569RegCreateKeyExW
ADVAPI32.dll638RegSetValueExW
ADVAPI32.dll609RegOpenKeyExW
ADVAPI32.dll591RegEnumKeyExW
ADVAPI32.dll616RegQueryInfoKeyW
ADVAPI32.dll560RegCloseKey
ADVAPI32.dll580RegDeleteKeyW
ADVAPI32.dll375InitializeSecurityDescriptor
SHELL32.dll215SHGetPathFromIDListW
SHELL32.dll123SHBrowseForFolderW
SHELL32.dll225SHGetSpecialFolderPathW
SHELL32.dll172SHFileOperationW
SHELL32.dll290ShellExecuteW
SHELL32.dll165
SHELL32.dll289ShellExecuteExW
SHELL32.dll6CommandLineToArgvW
ole32.dll345RevokeDragDrop
ole32.dll329OleUninitialize
ole32.dll104CoTaskMemFree
ole32.dll134CreateStreamOnHGlobal
ole32.dll306OleInitialize
ole32.dll62CoInitialize
ole32.dll108CoUninitialize
ole32.dll16CoCreateInstance
ole32.dll103CoTaskMemAlloc
ole32.dll343RegisterDragDrop
ole32.dll105CoTaskMemRealloc
OLEAUT32.dll277
OLEAUT32.dll6
SHLWAPI.dll139PathRemoveFileSpecW
SHLWAPI.dll91PathIsDirectoryW
SHLWAPI.dll115PathIsURLW
SHLWAPI.dll58PathCombineW
SHLWAPI.dll85PathGetDriveNumberW
SHLWAPI.dll133PathRemoveBackslashW
SHLWAPI.dll69PathFileExistsW
COMCTL32.dll123InitCommonControlsEx
COMCTL32.dll146_TrackMouseEvent
MSIMG32.dllAlphaBlend
gdiplus.dll91GdipCreateFromHDC
gdiplus.dll144GdipDeleteGraphics
gdiplus.dll629GdiplusStartup
gdiplus.dll628GdiplusShutdown
gdiplus.dll33GdipAlloc
gdiplus.dll237GdipFree
gdiplus.dll185GdipDrawImageRectRect
gdiplus.dll99GdipCreateImageAttributes
gdiplus.dll153GdipDisposeImageAttributes
gdiplus.dll525GdipSetImageAttributesColorMatrix
gdiplus.dll229GdipFillRectangleI
gdiplus.dll474GdipReleaseDC
gdiplus.dll257GdipGetDC
gdiplus.dll248GdipGetClipBoundsI
gdiplus.dll290GdipGetImageHeight
gdiplus.dll536GdipSetInterpolationMode
gdiplus.dll301GdipGetInterpolationMode
gdiplus.dll439GdipLoadImageFromStream
gdiplus.dll152GdipDisposeImage
gdiplus.dll54GdipCloneImage
gdiplus.dll476GdipResetClip
gdiplus.dll511GdipSetClipRect
gdiplus.dll142GdipDeleteFont
gdiplus.dll87GdipCreateFontFamilyFromName
gdiplus.dll143GdipDeleteFontFamily
gdiplus.dll275GdipGetGenericFontFamilySansSerif
gdiplus.dll86GdipCreateFont
gdiplus.dll50GdipCloneBrush
gdiplus.dll138GdipDeleteBrush
gdiplus.dll130GdipCreateSolidFill
gdiplus.dll178GdipDrawImagePointRectI
gdiplus.dll200GdipDrawString
gdiplus.dll596GdipSetTextRenderingHint
gdiplus.dll398GdipGetTextRenderingHint
gdiplus.dll300GdipGetImageWidth
PSAPI.DLL20GetProcessImageFileNameW
urlmon.dll104URLDownloadToFileW
IMM32.dll104ImmReleaseContext
IMM32.dll116ImmSetCompositionWindow
IMM32.dll56ImmGetContext

StringTable 040904b0

CompanyName深圳市常青藤软件科技有限公司
FileDescription小智桌面安装程序
FileVersion1.0.1.32
InternalNameDTLInstaller
LegalCopyrightCopyright (C) 2019 深圳市常青藤软件科技有限公司。保留所有权利。
ProductName小智桌面
ProductVersion1.0.1.32

VS_FIXEDFILEINFO

FileVersion1.0.1.32
ProductVersion1.0.1.32
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType1
FileSubtype0

Signers (1)

issuer: /C=US/O=Symantec Corporation/OU=Symantec Trust Network/CN=Symantec Class 3 SHA256 Code Signing CA
serial: 0534999424F7A932BD62D5D19E4D34F6

Certificates (4)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
        Validity
            Not Before: Dec 21 00:00:00 2012 GMT
            Not After : Dec 30 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:b3:49:54:4b:97:1c:12:0a:d8:25:79:91:
                    22:57:2a:6f:dc:b8:26:c4:43:73:6b:c2:bf:2e:50:
                    5a:fb:14:c2:76:8e:43:01:25:43:b4:a1:e2:45:f4:
                    e8:b7:7b:c3:74:cc:22:d7:b4:94:00:02:f7:4d:ed:
                    bf:b4:b7:44:24:6b:cd:5f:45:3b:d1:44:ce:43:12:
                    73:17:82:8b:69:b4:2b:cb:99:1e:ac:72:1b:26:4d:
                    71:1f:b1:31:dd:fb:51:61:02:53:a6:aa:f5:49:2c:
                    05:78:45:a5:2f:89:ce:e7:99:e7:fe:8c:e2:57:3f:
                    3d:c6:92:dc:4a:f8:7b:33:e4:79:0a:fb:f0:75:88:
                    41:9c:ff:c5:03:51:99:aa:d7:6c:9f:93:69:87:65:
                    29:83:85:c2:60:14:c4:c8:c9:3b:14:da:c0:81:f0:
                    1f:0d:74:de:92:22:ab:ca:f7:fb:74:7c:27:e6:f7:
                    4a:1b:7f:a7:c3:9e:2d:ae:8a:ea:a6:e6:aa:27:16:
                    7d:61:f7:98:71:11:bc:e2:50:a1:4b:e5:5d:fa:e5:
                    0e:a7:2c:9f:aa:65:20:d3:d8:96:e8:c8:7c:a5:4e:
                    48:44:ff:19:e2:44:07:92:0b:d7:68:84:80:5d:6a:
                    78:64:45:cd:60:46:7e:54:c1:13:7c:c5:79:f1:c9:
                    c1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD
            Authority Information Access: 
                OCSP - URI:http://ocsp.thawte.com
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.thawte.com/ThawteTimestampingCA.crl
            X509v3 Extended Key Usage: 
                Time Stamping
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-1
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        03:09:9b:8f:79:ef:7f:59:30:aa:ef:68:b5:fa:e3:09:1d:bb:
        4f:82:06:5d:37:5f:a6:52:9f:16:8d:ea:1c:92:09:44:6e:f5:
        6d:eb:58:7c:30:e8:f9:69:8d:23:73:0b:12:6f:47:a9:ae:39:
        11:f8:2a:b1:9b:b0:1a:c3:8e:eb:59:96:00:ad:ce:0c:4d:b2:
        d0:31:a6:08:5c:2a:7a:fc:e2:7a:1d:57:4c:a8:65:18:e9:79:
        40:62:25:96:6e:c7:c7:37:6a:83:21:08:8e:41:ea:dd:d9:57:
        3f:1d:77:49:87:2a:16:06:5e:a6:38:6a:22:12:a3:51:19:83:
        7e:b6

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Validity
            Not Before: Oct 18 00:00:00 2012 GMT
            Not After : Dec 29 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer - G4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a2:63:0b:39:44:b8:bb:23:a7:44:49:bb:0e:ff:
                    a1:f0:61:0a:53:93:b0:98:db:ad:2c:0f:4a:c5:6e:
                    ff:86:3c:53:55:0f:15:ce:04:3f:2b:fd:a9:96:96:
                    d9:be:61:79:0b:5b:c9:4c:86:76:e5:e0:43:4b:22:
                    95:ee:c2:2b:43:c1:9f:d8:68:b4:8e:40:4f:ee:85:
                    38:b9:11:c5:23:f2:64:58:f0:15:32:6f:4e:57:a1:
                    ae:88:a4:02:d7:2a:1e:cd:4b:e1:dd:63:d5:17:89:
                    32:5b:b0:5e:99:5a:a8:9d:28:50:0e:17:ee:96:db:
                    61:3b:45:51:1d:cf:12:56:0b:92:47:fc:ab:ae:f6:
                    66:3d:47:ac:70:72:e7:92:e7:5f:cd:10:b9:c4:83:
                    64:94:19:bd:25:80:e1:e8:d2:22:a5:d0:ba:02:7a:
                    a1:77:93:5b:65:c3:ee:17:74:bc:41:86:2a:dc:08:
                    4c:8c:92:8c:91:2d:9e:77:44:1f:68:d6:a8:74:77:
                    db:0e:5b:32:8b:56:8b:33:bd:d9:63:c8:49:9d:3a:
                    c5:c5:ea:33:0b:d2:f1:a3:1b:f4:8b:be:d9:b3:57:
                    8b:3b:de:04:a7:7a:22:b2:24:ae:2e:c7:70:c5:be:
                    4e:83:26:08:fb:0b:bd:a9:4f:99:08:e1:10:28:72:
                    aa:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                OCSP - URI:http://ts-ocsp.ws.symantec.com
                CA Issuers - URI:http://ts-aia.ws.symantec.com/tss-ca-g2.cer
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://ts-crl.ws.symantec.com/tss-ca-g2.crl
            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-2
            X509v3 Subject Key Identifier: 
                46:C6:69:A3:0E:4A:14:1E:D5:4C:DA:52:63:17:3F:5E:36:BC:0D:E6
            X509v3 Authority Key Identifier: 
                5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        78:3b:b4:91:2a:00:4c:f0:8f:62:30:37:78:a3:84:27:07:6f:
        18:b2:de:25:dc:a0:d4:94:03:aa:86:4e:25:9f:9a:40:03:1c:
        dd:ce:e3:79:cb:21:68:06:da:b6:32:b4:6d:bf:f4:2c:26:63:
        33:e4:49:64:6d:0d:e6:c3:67:0e:f7:05:a4:35:6c:7c:89:16:
        c6:e9:b2:df:b2:e9:dd:20:c6:71:0f:cd:95:74:dc:b6:5c:de:
        bd:37:1f:43:78:e6:78:b5:cd:28:04:20:a3:aa:f1:4b:c4:88:
        29:91:0e:80:d1:11:fc:dd:5c:76:6e:4f:5e:0e:45:46:41:6e:
        0d:b0:ea:38:9a:b1:3a:da:09:71:10:fc:1c:79:b4:80:7b:ac:
        69:f4:fd:9c:b6:0c:16:2b:f1:7f:5b:09:3d:9b:5b:e2:16:ca:
        13:81:6d:00:2e:38:0d:a8:29:8f:2c:e1:b2:f4:5a:a9:01:af:
        15:9c:2c:2f:49:1b:db:22:bb:c3:fe:78:94:51:c3:86:b1:82:
        88:5d:f0:3d:b4:51:a1:79:33:2b:2e:7b:b9:dc:20:09:13:71:
        eb:6a:19:5b:cf:e8:a5:30:57:2c:89:49:3f:b9:cf:7f:c9:bf:
        3e:22:68:63:53:9a:bd:69:74:ac:c5:1d:3c:7f:92:e0:c3:bc:
        1c:d8:04:75

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:34:99:94:24:f7:a9:32:bd:62:d5:d1:9e:4d:34:f6
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 SHA256 Code Signing CA
        Validity
            Not Before: Nov 21 00:00:00 2016 GMT
            Not After : Nov 21 23:59:59 2019 GMT
        Subject: C=CN, ST=Guangdong, L=Shenzhen, O=IVY (ShenZhen) Software Technology Co., Ltd., OU=IT Dept, CN=IVY (ShenZhen) Software Technology Co., Ltd.
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b2:06:48:f8:06:d6:2a:6e:2a:85:7d:3f:ac:17:
                    08:ce:fd:39:0d:14:25:4d:07:50:49:ed:48:45:f9:
                    69:88:2b:f7:54:16:27:1f:11:78:40:d3:86:bc:c1:
                    a8:b6:d1:d7:47:db:20:b3:d2:24:bf:fb:d1:85:1e:
                    56:36:4b:5f:22:8e:39:0b:21:c1:e3:00:5d:7c:4d:
                    e4:61:9c:98:17:1d:00:bf:6a:56:24:72:9b:db:b0:
                    1e:52:36:a4:ed:09:6e:fb:fb:d4:87:36:48:e0:a8:
                    3f:52:6c:6a:0f:9d:4f:2c:16:aa:d5:be:c5:6e:6d:
                    10:c7:19:75:a0:ac:63:36:97:f5:d9:65:28:49:90:
                    47:56:93:58:5c:0b:24:27:37:d6:a5:04:1b:95:fe:
                    8b:55:73:59:15:39:3d:dc:8d:a6:f5:4c:62:32:b0:
                    31:4c:86:36:ef:aa:1a:72:e9:5f:f7:b0:df:da:b5:
                    0f:1b:6e:a4:79:43:2e:60:32:a2:b2:39:0b:7c:dc:
                    39:98:a2:bb:ac:96:94:f0:cc:36:48:70:4a:79:3a:
                    d6:0f:7d:69:a1:a1:b0:e4:6a:f3:76:be:41:3b:35:
                    f4:90:b1:ed:34:79:2f:e7:66:c1:7c:5f:87:36:9f:
                    55:14:28:65:eb:ea:0b:a2:8c:76:3d:bc:30:00:33:
                    1c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://sv.symcb.com/sv.crl
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.4.1
                  CPS: https://d.symcb.com/cps
                  User Notice:
                    Explicit Text: https://d.symcb.com/rpa
            X509v3 Extended Key Usage: 
                Code Signing
            Authority Information Access: 
                OCSP - URI:http://sv.symcd.com
                CA Issuers - URI:http://sv.symcb.com/sv.crt
            X509v3 Authority Key Identifier: 
                96:3B:53:F0:79:33:97:AF:7D:83:EF:2E:2B:CC:CA:B7:86:1E:72:66
            X509v3 Subject Key Identifier: 
                EC:1F:F6:6E:6F:4F:4F:E7:78:78:9B:B2:FE:4C:D6:35:A5:46:C5:DE
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        55:a1:c9:5d:0d:65:fe:da:ae:c2:30:30:c7:4f:4c:26:ea:56:
        c6:d3:63:3b:4c:71:d4:ea:cd:cb:7a:20:8b:66:da:6d:09:e4:
        51:1b:b4:bf:f4:5c:73:ce:4a:3e:79:ee:f0:8a:1c:86:01:8b:
        d7:80:f0:6b:1c:87:94:ff:51:25:5d:bc:e4:8d:7c:9e:86:fe:
        45:c9:20:2b:92:e4:76:74:0e:e1:5e:eb:94:8b:88:92:a5:e4:
        65:df:c2:c8:3f:5b:79:6b:aa:68:14:71:12:7d:a6:54:c0:8c:
        74:2f:a0:7c:d6:58:ad:be:11:41:db:ff:67:64:33:7f:ef:04:
        a3:3a:17:3b:92:9b:0d:82:4a:b6:a7:71:9e:8d:bc:e7:79:f7:
        77:c0:cf:07:4e:d4:ca:e8:7c:4a:bc:d3:3d:24:75:cc:06:8a:
        1a:ef:24:6d:20:72:af:eb:3d:55:41:e9:de:c7:5e:71:e4:ef:
        92:cf:12:b4:dc:c2:fd:4d:41:f5:42:bd:07:20:b9:62:d3:dc:
        1d:6b:b2:fe:d2:2f:07:d0:6a:ec:50:4a:e2:8d:51:c7:6c:b6:
        3a:a1:3d:ac:2f:05:84:52:e4:fd:df:c9:e3:c4:e9:c1:7b:1f:
        33:fa:0e:66:96:28:15:1c:0c:ff:b6:fd:da:cb:29:05:6a:1b:
        e6:be:42:78

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
        Validity
            Not Before: Dec 10 00:00:00 2013 GMT
            Not After : Dec  9 23:59:59 2023 GMT
        Subject: C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 SHA256 Code Signing CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:97:83:1e:00:16:af:2c:b1:d2:08:c4:d7:68:93:
                    51:60:1e:71:f6:e2:47:b4:db:58:4d:23:62:6a:b4:
                    bf:5a:1b:51:f7:a3:0d:18:77:68:bb:d8:36:ab:2f:
                    21:50:da:9e:f3:e7:5f:27:4e:0b:c2:97:c8:09:70:
                    93:a9:da:5c:0d:4e:a4:0d:91:a0:b4:ec:14:ce:91:
                    72:54:2e:ce:a3:db:44:e9:52:1b:3f:41:3c:ca:4a:
                    e4:aa:c0:e8:39:ab:53:cc:21:d0:cc:cf:7f:9b:e6:
                    c2:cc:58:6a:82:15:ee:3d:36:cf:1c:c5:97:07:24:
                    8e:f1:7b:be:31:2d:3d:6e:dc:b5:99:42:9f:4b:61:
                    95:5f:1c:70:ee:17:7d:db:8b:e5:61:89:78:c7:68:
                    1b:af:11:78:1a:98:ae:c4:55:47:53:d9:b3:32:d6:
                    a1:0e:46:40:c5:97:92:8a:d1:53:a7:99:5b:85:35:
                    57:d3:ea:93:62:61:20:0a:c7:30:77:24:11:4d:62:
                    83:b6:ba:7b:68:82:31:ee:65:ca:df:f9:d5:8d:b2:
                    35:dc:8c:2b:6f:6a:72:5c:60:84:9c:f2:0c:94:5e:
                    c0:56:52:00:48:cc:d3:f8:a5:7d:de:2f:d7:13:e4:
                    38:a8:84:d5:46:b8:13:86:c2:1b:9d:ea:5a:38:dd:
                    9b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access: 
                OCSP - URI:http://s2.symcb.com
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: http://www.symauth.com/cps
                  User Notice:
                    Explicit Text: http://www.symauth.com/rpa
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://s1.symcb.com/pca3-g5.crl
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, Code Signing
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=SymantecPKI-1-567
            X509v3 Subject Key Identifier: 
                96:3B:53:F0:79:33:97:AF:7D:83:EF:2E:2B:CC:CA:B7:86:1E:72:66
            X509v3 Authority Key Identifier: 
                7F:D3:65:A7:C2:DD:EC:BB:F0:30:09:F3:43:39:FA:02:AF:33:31:33
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        13:85:1a:1e:69:a9:37:f7:a0:bd:a4:af:7e:1d:61:53:fe:9d:
        8c:5e:0c:a6:75:1e:78:17:23:dd:fd:ec:1a:03:55:39:fb:71:
        95:c7:65:5a:a7:8e:30:d2:44:5a:61:db:70:6f:da:21:05:c2:
        2e:73:ba:49:f1:d1:93:fe:5d:c9:cd:5e:03:e0:89:9e:3f:74:
        1e:d7:f7:38:8b:a9:d6:cf:bb:35:2f:33:58:a8:92:56:d1:c8:
        4d:3b:82:e6:79:84:16:fc:28:b0:b1:47:f3:1d:a2:3e:ee:87:
        d9:a6:7f:a4:56:a5:3f:ad:84:2e:29:de:7c:bc:a8:aa:a3:3d:
        04:01:ea:ba:93:a2:0e:50:22:29:17:4c:87:e4:3a:11:5f:d6:
        a4:25:89:9b:05:6b:2f:b4:c9:01:4c:27:7b:0b:ac:19:05:22:
        a0:60:15:3f:da:c9:fb:4d:4c:8f:fb:72:67:77:fd:27:94:c7:
        ba:35:0e:88:49:fe:8d:fd:28:af:4a:12:bd:0d:b3:97:05:de:
        44:0c:15:fa:36:2b:03:dc:c1:50:01:f1:a1:11:5d:14:e5:e2:
        bd:27:4b:54:be:2b:84:5e:0f:a6:c3:74:05:0a:ef:97:c3:89:
        22:b1:1f:77:f3:bd:cd:43:d4:f1:4c:a9:3f:b5:8b:84:af:64:
        f2:d0:14:21
pkcs7-signedData
  • 1
    • SHA1: nil
    • 1.3.6.1.4.1.311.2.1.4
      • #0
        • 1.3.6.1.4.1.311.2.1.15
          • : 
            00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |
        • SHA1
          • bb 73 8e 01 94 5f d9 95  b8 18 85 db 1f 05 40 a8  |.s..._........@.|
97 de ba 6a                                       |...j            |
    • Certificates
      • Certificate #0
        • 2
          • 7E:93:EB:FB:7C:C6:4E:59:EA:4B:9A:77:D4:06:FC:3B
          • RSA-SHA1: nil
          • Issuer
            • C: ZA
            • ST: Western Cape
            • L: Durbanville
            • O: Thawte
            • OU: Thawte Certification
            • CN: Thawte Timestamping CA
          • 2012-12-21 00:00:00 UTC: 2020-12-30 23:59:59 UTC
          • Subject
            • C: US
            • O: Symantec Corporation
            • CN: Symantec Time Stamping Services CA - G2
          • #5
            • rsaEncryption: nil
            • B1:AC:B3:49:54:4B:97:1C:12:0A:D8:25:79:91:22:57:
              2A:6F:DC:B8:26:C4:43:73:6B:C2:BF:2E:50:5A:FB:14:
              C2:76:8E:43:01:25:43:B4:A1:E2:45:F4:E8:B7:7B:C3:
              74:CC:22:D7:B4:94:00:02:F7:4D:ED:BF:B4:B7:44:24:
              6B:CD:5F:45:3B:D1:44:CE:43:12:73:17:82:8B:69:B4:
              2B:CB:99:1E:AC:72:1B:26:4D:71:1F:B1:31:DD:FB:51:
              61:02:53:A6:AA:F5:49:2C:05:78:45:A5:2F:89:CE:E7:
              99:E7:FE:8C:E2:57:3F:3D:C6:92:DC:4A:F8:7B:33:E4:
              79:0A:FB:F0:75:88:41:9C:FF:C5:03:51:99:AA:D7:6C:
              9F:93:69:87:65:29:83:85:C2:60:14:C4:C8:C9:3B:14:
              DA:C0:81:F0:1F:0D:74:DE:92:22:AB:CA:F7:FB:74:7C:
              27:E6:F7:4A:1B:7F:A7:C3:9E:2D:AE:8A:EA:A6:E6:AA:
              27:16:7D:61:F7:98:71:11:BC:E2:50:A1:4B:E5:5D:FA:
              E5:0E:A7:2C:9F:AA:65:20:D3:D8:96:E8:C8:7C:A5:4E:
              48:44:FF:19:E2:44:07:92:0B:D7:68:84:80:5D:6A:78:
              64:45:CD:60:46:7E:54:C1:13:7C:C5:79:F1:C9:C1:71              : 0x010001
          • #6
            • subjectKeyIdentifier: 
              5f 9a f5 6e 5c cc cc 74  9a d4 dd 7d ef 3f db ec  |_..n\..t...}.?..|
4c 80 2e dd                                       |L...            |
            • authorityInfoAccess
              • OCSP: http://ocsp.thawte.com
            • basicConstraints
              • true
              • true: 0
            • crlDistributionPoints: http://crl.thawte.com/ThawteTimestampingCA.crl
            • extendedKeyUsage: timeStamping
            • keyUsage: true, 6
            • subjectAltName
              • CN: TimeStamp-2048-1
        • RSA-SHA1: 
          03 09 9b 8f 79 ef 7f 59  30 aa ef 68 b5 fa e3 09  |....y..Y0..h....|
1d bb 4f 82 06 5d 37 5f  a6 52 9f 16 8d ea 1c 92  |..O..]7_.R......|
09 44 6e f5 6d eb 58 7c  30 e8 f9 69 8d 23 73 0b  |.Dn.m.X|0..i.#s.|
12 6f 47 a9 ae 39 11 f8  2a b1 9b b0 1a c3 8e eb  |.oG..9..*.......|
59 96 00 ad ce 0c 4d b2  d0 31 a6 08 5c 2a 7a fc  |Y.....M..1..\*z.|
e2 7a 1d 57 4c a8 65 18  e9 79 40 62 25 96 6e c7  |.z.WL.e..y@b%.n.|
c7 37 6a 83 21 08 8e 41  ea dd d9 57 3f 1d 77 49  |.7j.!..A...W?.wI|
87 2a 16 06 5e a6 38 6a  22 12 a3 51 19 83 7e b6  |.*..^.8j"..Q..~.|
      • Certificate #1
        • 2
          • 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • O: Symantec Corporation
            • CN: Symantec Time Stamping Services CA - G2
          • 2012-10-18 00:00:00 UTC: 2020-12-29 23:59:59 UTC
          • Subject
            • C: US
            • O: Symantec Corporation
            • CN: Symantec Time Stamping Services Signer - G4
          • #5
            • rsaEncryption: nil
            • A2:63:0B:39:44:B8:BB:23:A7:44:49:BB:0E:FF:A1:F0:
              61:0A:53:93:B0:98:DB:AD:2C:0F:4A:C5:6E:FF:86:3C:
              53:55:0F:15:CE:04:3F:2B:FD:A9:96:96:D9:BE:61:79:
              0B:5B:C9:4C:86:76:E5:E0:43:4B:22:95:EE:C2:2B:43:
              C1:9F:D8:68:B4:8E:40:4F:EE:85:38:B9:11:C5:23:F2:
              64:58:F0:15:32:6F:4E:57:A1:AE:88:A4:02:D7:2A:1E:
              CD:4B:E1:DD:63:D5:17:89:32:5B:B0:5E:99:5A:A8:9D:
              28:50:0E:17:EE:96:DB:61:3B:45:51:1D:CF:12:56:0B:
              92:47:FC:AB:AE:F6:66:3D:47:AC:70:72:E7:92:E7:5F:
              CD:10:B9:C4:83:64:94:19:BD:25:80:E1:E8:D2:22:A5:
              D0:BA:02:7A:A1:77:93:5B:65:C3:EE:17:74:BC:41:86:
              2A:DC:08:4C:8C:92:8C:91:2D:9E:77:44:1F:68:D6:A8:
              74:77:DB:0E:5B:32:8B:56:8B:33:BD:D9:63:C8:49:9D:
              3A:C5:C5:EA:33:0B:D2:F1:A3:1B:F4:8B:BE:D9:B3:57:
              8B:3B:DE:04:A7:7A:22:B2:24:AE:2E:C7:70:C5:BE:4E:
              83:26:08:FB:0B:BD:A9:4F:99:08:E1:10:28:72:AA:CD              : 0x010001
          • X509v3 extensions
            • basicConstraints
              • true
              • nil
            • extendedKeyUsage: true, timeStamping
            • keyUsage: true, 0x80
            • authorityInfoAccess
              • #0
                • OCSP: http://ts-ocsp.ws.symantec.com
                • caIssuers: http://ts-aia.ws.symantec.com/tss-ca-g2.cer
            • crlDistributionPoints: http://ts-crl.ws.symantec.com/tss-ca-g2.crl
            • subjectAltName
              • CN: TimeStamp-2048-2
            • subjectKeyIdentifier: 
              46 c6 69 a3 0e 4a 14 1e  d5 4c da 52 63 17 3f 5e  |F.i..J...L.Rc.?^|
36 bc 0d e6                                       |6...            |
            • authorityKeyIdentifier: 
              5f 9a f5 6e 5c cc cc 74  9a d4 dd 7d ef 3f db ec  |_..n\..t...}.?..|
4c 80 2e dd                                       |L...            |
        • RSA-SHA1: 
          78 3b b4 91 2a 00 4c f0  8f 62 30 37 78 a3 84 27  |x;..*.L..b07x..'|
07 6f 18 b2 de 25 dc a0  d4 94 03 aa 86 4e 25 9f  |.o...%.......N%.|
9a 40 03 1c dd ce e3 79  cb 21 68 06 da b6 32 b4  |.@.....y.!h...2.|
6d bf f4 2c 26 63 33 e4  49 64 6d 0d e6 c3 67 0e  |m..,&c3.Idm...g.|
f7 05 a4 35 6c 7c 89 16  c6 e9 b2 df b2 e9 dd 20  |...5l|......... |
c6 71 0f cd 95 74 dc b6  5c de bd 37 1f 43 78 e6  |.q...t..\..7.Cx.|
78 b5 cd 28 04 20 a3 aa  f1 4b c4 88 29 91 0e 80  |x..(. ...K..)...|
d1 11 fc dd 5c 76 6e 4f  5e 0e 45 46 41 6e 0d b0  |....\vnO^.EFAn..|
ea 38 9a b1 3a da 09 71  10 fc 1c 79 b4 80 7b ac  |.8..:..q...y..{.|
69 f4 fd 9c b6 0c 16 2b  f1 7f 5b 09 3d 9b 5b e2  |i......+..[.=.[.|
16 ca 13 81 6d 00 2e 38  0d a8 29 8f 2c e1 b2 f4  |....m..8..).,...|
5a a9 01 af 15 9c 2c 2f  49 1b db 22 bb c3 fe 78  |Z.....,/I.."...x|
94 51 c3 86 b1 82 88 5d  f0 3d b4 51 a1 79 33 2b  |.Q.....].=.Q.y3+|
2e 7b b9 dc 20 09 13 71  eb 6a 19 5b cf e8 a5 30  |.{.. ..q.j.[...0|
57 2c 89 49 3f b9 cf 7f  c9 bf 3e 22 68 63 53 9a  |W,.I?.....>"hcS.|
bd 69 74 ac c5 1d 3c 7f  92 e0 c3 bc 1c d8 04 75  |.it...<........u|
      • Certificate #2
        • 2
          • 05:34:99:94:24:F7:A9:32:BD:62:D5:D1:9E:4D:34:F6
          • RSA-SHA256: nil
          • Issuer
            • C: US
            • O: Symantec Corporation
            • OU: Symantec Trust Network
            • CN: Symantec Class 3 SHA256 Code Signing CA
          • 2016-11-21 00:00:00 UTC: 2019-11-21 23:59:59 UTC
          • Subject
            • C: CN
            • ST: Guangdong
            • L: Shenzhen
            • O: IVY (ShenZhen) Software Technology Co., Ltd.
            • OU: IT Dept
            • CN: IVY (ShenZhen) Software Technology Co., Ltd.
          • #5
            • rsaEncryption: nil
            • B2:06:48:F8:06:D6:2A:6E:2A:85:7D:3F:AC:17:08:CE:
              FD:39:0D:14:25:4D:07:50:49:ED:48:45:F9:69:88:2B:
              F7:54:16:27:1F:11:78:40:D3:86:BC:C1:A8:B6:D1:D7:
              47:DB:20:B3:D2:24:BF:FB:D1:85:1E:56:36:4B:5F:22:
              8E:39:0B:21:C1:E3:00:5D:7C:4D:E4:61:9C:98:17:1D:
              00:BF:6A:56:24:72:9B:DB:B0:1E:52:36:A4:ED:09:6E:
              FB:FB:D4:87:36:48:E0:A8:3F:52:6C:6A:0F:9D:4F:2C:
              16:AA:D5:BE:C5:6E:6D:10:C7:19:75:A0:AC:63:36:97:
              F5:D9:65:28:49:90:47:56:93:58:5C:0B:24:27:37:D6:
              A5:04:1B:95:FE:8B:55:73:59:15:39:3D:DC:8D:A6:F5:
              4C:62:32:B0:31:4C:86:36:EF:AA:1A:72:E9:5F:F7:B0:
              DF:DA:B5:0F:1B:6E:A4:79:43:2E:60:32:A2:B2:39:0B:
              7C:DC:39:98:A2:BB:AC:96:94:F0:CC:36:48:70:4A:79:
              3A:D6:0F:7D:69:A1:A1:B0:E4:6A:F3:76:BE:41:3B:35:
              F4:90:B1:ED:34:79:2F:E7:66:C1:7C:5F:87:36:9F:55:
              14:28:65:EB:EA:0B:A2:8C:76:3D:BC:30:00:33:1C:BB              : 0x010001
          • X509v3 extensions
            • basicConstraints
              • nil
            • keyUsage: true, 0x80
            • crlDistributionPoints: http://sv.symcb.com/sv.crl
            • certificatePolicies
              • 2.23.140.1.4.1
                • #0
                  • id-qt-cps: https://d.symcb.com/cps
                  • id-qt-unotice: https://d.symcb.com/rpa
            • extendedKeyUsage: codeSigning
            • authorityInfoAccess
              • #0
                • OCSP: http://sv.symcd.com
                • caIssuers: http://sv.symcb.com/sv.crt
            • authorityKeyIdentifier: 
              96 3b 53 f0 79 33 97 af  7d 83 ef 2e 2b cc ca b7  |.;S.y3..}...+...|
86 1e 72 66                                       |..rf            |
            • subjectKeyIdentifier: 
              ec 1f f6 6e 6f 4f 4f e7  78 78 9b b2 fe 4c d6 35  |...noOO.xx...L.5|
a5 46 c5 de                                       |.F..            |
        • RSA-SHA256: 
          55 a1 c9 5d 0d 65 fe da  ae c2 30 30 c7 4f 4c 26  |U..].e....00.OL&|
ea 56 c6 d3 63 3b 4c 71  d4 ea cd cb 7a 20 8b 66  |.V..c;Lq....z .f|
da 6d 09 e4 51 1b b4 bf  f4 5c 73 ce 4a 3e 79 ee  |.m..Q....\s.J>y.|
f0 8a 1c 86 01 8b d7 80  f0 6b 1c 87 94 ff 51 25  |.........k....Q%|
5d bc e4 8d 7c 9e 86 fe  45 c9 20 2b 92 e4 76 74  |]...|...E. +..vt|
0e e1 5e eb 94 8b 88 92  a5 e4 65 df c2 c8 3f 5b  |..^.......e...?[|
79 6b aa 68 14 71 12 7d  a6 54 c0 8c 74 2f a0 7c  |yk.h.q.}.T..t/.||
d6 58 ad be 11 41 db ff  67 64 33 7f ef 04 a3 3a  |.X...A..gd3....:|
17 3b 92 9b 0d 82 4a b6  a7 71 9e 8d bc e7 79 f7  |.;....J..q....y.|
77 c0 cf 07 4e d4 ca e8  7c 4a bc d3 3d 24 75 cc  |w...N...|J..=$u.|
06 8a 1a ef 24 6d 20 72  af eb 3d 55 41 e9 de c7  |....$m r..=UA...|
5e 71 e4 ef 92 cf 12 b4  dc c2 fd 4d 41 f5 42 bd  |^q.........MA.B.|
07 20 b9 62 d3 dc 1d 6b  b2 fe d2 2f 07 d0 6a ec  |. .b...k.../..j.|
50 4a e2 8d 51 c7 6c b6  3a a1 3d ac 2f 05 84 52  |PJ..Q.l.:.=./..R|
e4 fd df c9 e3 c4 e9 c1  7b 1f 33 fa 0e 66 96 28  |........{.3..f.(|
15 1c 0c ff b6 fd da cb  29 05 6a 1b e6 be 42 78  |........).j...Bx|
      • Certificate #3
        • 2
          • 3D:78:D7:F9:76:49:60:B2:61:7D:F4:F0:1E:CA:86:2A
          • RSA-SHA256: nil
          • Issuer
            • C: US
            • O: VeriSign, Inc.
            • OU: VeriSign Trust Network
            • OU: (c) 2006 VeriSign, Inc. - For authorized use only
            • CN: VeriSign Class 3 Public Primary Certification Authority - G5
          • 2013-12-10 00:00:00 UTC: 2023-12-09 23:59:59 UTC
          • Subject
            • C: US
            • O: Symantec Corporation
            • OU: Symantec Trust Network
            • CN: Symantec Class 3 SHA256 Code Signing CA
          • #5
            • rsaEncryption: nil
            • 97:83:1E:00:16:AF:2C:B1:D2:08:C4:D7:68:93:51:60:
              1E:71:F6:E2:47:B4:DB:58:4D:23:62:6A:B4:BF:5A:1B:
              51:F7:A3:0D:18:77:68:BB:D8:36:AB:2F:21:50:DA:9E:
              F3:E7:5F:27:4E:0B:C2:97:C8:09:70:93:A9:DA:5C:0D:
              4E:A4:0D:91:A0:B4:EC:14:CE:91:72:54:2E:CE:A3:DB:
              44:E9:52:1B:3F:41:3C:CA:4A:E4:AA:C0:E8:39:AB:53:
              CC:21:D0:CC:CF:7F:9B:E6:C2:CC:58:6A:82:15:EE:3D:
              36:CF:1C:C5:97:07:24:8E:F1:7B:BE:31:2D:3D:6E:DC:
              B5:99:42:9F:4B:61:95:5F:1C:70:EE:17:7D:DB:8B:E5:
              61:89:78:C7:68:1B:AF:11:78:1A:98:AE:C4:55:47:53:
              D9:B3:32:D6:A1:0E:46:40:C5:97:92:8A:D1:53:A7:99:
              5B:85:35:57:D3:EA:93:62:61:20:0A:C7:30:77:24:11:
              4D:62:83:B6:BA:7B:68:82:31:EE:65:CA:DF:F9:D5:8D:
              B2:35:DC:8C:2B:6F:6A:72:5C:60:84:9C:F2:0C:94:5E:
              C0:56:52:00:48:CC:D3:F8:A5:7D:DE:2F:D7:13:E4:38:
              A8:84:D5:46:B8:13:86:C2:1B:9D:EA:5A:38:DD:9B:DB              : 0x010001
          • X509v3 extensions
            • authorityInfoAccess
              • OCSP: http://s2.symcb.com
            • basicConstraints
              • true
              • true: 0
            • certificatePolicies
              • 2.16.840.1.113733.1.7.23.3
                • #0
                  • id-qt-cps: http://www.symauth.com/cps
                  • id-qt-unotice: http://www.symauth.com/rpa
            • crlDistributionPoints: http://s1.symcb.com/pca3-g5.crl
            • extendedKeyUsage
              • clientAuth: codeSigning
            • keyUsage: true, 6
            • subjectAltName
              • CN: SymantecPKI-1-567
            • subjectKeyIdentifier: 
              96 3b 53 f0 79 33 97 af  7d 83 ef 2e 2b cc ca b7  |.;S.y3..}...+...|
86 1e 72 66                                       |..rf            |
            • authorityKeyIdentifier: 
              7f d3 65 a7 c2 dd ec bb  f0 30 09 f3 43 39 fa 02  |..e......0..C9..|
af 33 31 33                                       |.313            |
        • RSA-SHA256: 
          13 85 1a 1e 69 a9 37 f7  a0 bd a4 af 7e 1d 61 53  |....i.7.....~.aS|
fe 9d 8c 5e 0c a6 75 1e  78 17 23 dd fd ec 1a 03  |...^..u.x.#.....|
55 39 fb 71 95 c7 65 5a  a7 8e 30 d2 44 5a 61 db  |U9.q..eZ..0.DZa.|
70 6f da 21 05 c2 2e 73  ba 49 f1 d1 93 fe 5d c9  |po.!...s.I....].|
cd 5e 03 e0 89 9e 3f 74  1e d7 f7 38 8b a9 d6 cf  |.^....?t...8....|
bb 35 2f 33 58 a8 92 56  d1 c8 4d 3b 82 e6 79 84  |.5/3X..V..M;..y.|
16 fc 28 b0 b1 47 f3 1d  a2 3e ee 87 d9 a6 7f a4  |..(..G...>......|
56 a5 3f ad 84 2e 29 de  7c bc a8 aa a3 3d 04 01  |V.?...).|....=..|
ea ba 93 a2 0e 50 22 29  17 4c 87 e4 3a 11 5f d6  |.....P").L..:._.|
a4 25 89 9b 05 6b 2f b4  c9 01 4c 27 7b 0b ac 19  |.%...k/...L'{...|
05 22 a0 60 15 3f da c9  fb 4d 4c 8f fb 72 67 77  |.".`.?...ML..rgw|
fd 27 94 c7 ba 35 0e 88  49 fe 8d fd 28 af 4a 12  |.'...5..I...(.J.|
bd 0d b3 97 05 de 44 0c  15 fa 36 2b 03 dc c1 50  |......D...6+...P|
01 f1 a1 11 5d 14 e5 e2  bd 27 4b 54 be 2b 84 5e  |....]....'KT.+.^|
0f a6 c3 74 05 0a ef 97  c3 89 22 b1 1f 77 f3 bd  |...t......"..w..|
cd 43 d4 f1 4c a9 3f b5  8b 84 af 64 f2 d0 14 21  |.C..L.?....d...!|
    • Signer
      • 1
      • unnamed
        • #0
          • C: US
          • O: Symantec Corporation
          • OU: Symantec Trust Network
          • CN: Symantec Class 3 SHA256 Code Signing CA
        • 05:34:99:94:24:F7:A9:32:BD:62:D5:D1:9E:4D:34:F6
      • SHA1: nil
      • #3
        • contentType: 1.3.6.1.4.1.311.2.1.4
        • 1.3.6.1.4.1.311.2.1.11: msCodeInd
        • messageDigest: 
          44 2f bf c5 7e fa 2d c1  80 2d 81 87 be 27 80 44  |D/..~.-..-...'.D|
16 5c e5 63                                       |.\.c            |
        • 1.3.6.1.4.1.311.2.1.12: 
          00 58 00 5a 00 44 00 65  00 73 00 6b 00 74 00 6f  |.X.Z.D.e.s.k.t.o|
00 70 00 5f 00 53 00 65  00 74 00 75 00 70        |.p._.S.e.t.u.p  |
      • rsaEncryption: 
        1b 63 fd 5f 36 de 22 52  4c ed 32 10 02 3e 0f c6  |.c._6."RL.2..>..|
de b6 1b c1 2c dd e5 94  1c 94 bc cd 90 a1 ce e9  |....,...........|
2c e3 0e 55 bd 5f 2a c8  3f 99 a1 62 88 72 5a 8d  |,..U._*.?..b.rZ.|
6d b2 75 33 41 07 27 a9  13 20 6c 67 fc ed 21 50  |m.u3A.'.. lg..!P|
bf 39 2f 32 8a 9c 31 94  4d b4 30 ae 5e 26 17 4c  |.9/2..1.M.0.^&.L|
6c 1c 01 7e 14 8f bc a9  19 17 6a b7 b3 22 f7 4a  |l..~......j..".J|
eb 7d 63 0c de 9d ff f0  1e f8 f0 7f 19 aa b5 99  |.}c.............|
c7 e1 03 a6 be c0 c3 94  b2 d3 e3 c4 4a 46 0b ed  |............JF..|
e0 4d f1 86 ac 1a c1 1b  66 6c 4c 2c bf 1f 0e 30  |.M......flL,...0|
e8 25 a9 77 60 4d 1a b8  27 30 54 ee b3 08 06 63  |.%.w`M..'0T....c|
5a fa fd a7 d6 2e 34 4b  b1 52 ce e4 7d 54 27 a8  |Z.....4K.R..}T'.|
10 64 8c e6 f2 26 f5 b2  aa 2f 8a 38 3b e2 f6 40  |.d...&.../.8;..@|
a9 0d 9c e7 88 bb 58 7e  ec 26 9c 7e e1 f2 09 1f  |......X~.&.~....|
70 b4 5d f8 80 2d 8c 35  a9 1b 14 f1 ab 3f ed 64  |p.]..-.5.....?.d|
b5 46 27 34 37 8a af 18  19 a0 fa f3 bd 9a 41 4b  |.F'47.........AK|
d5 cc 1c 23 c9 49 5c 7b  44 a2 61 a6 fb 47 f0 69  |...#.I\{D.a..G.i|
      • countersignature
        • 1
          • unnamed
            • #0
              • C: US
              • O: Symantec Corporation
              • CN: Symantec Time Stamping Services CA - G2
            • 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
          • SHA1: nil
          • #2
            • contentType: pkcs7-data
            • signingTime: 2019-07-15 05:37:14 UTC
            • messageDigest: 
              cc aa 16 f1 81 ee 61 91  47 cd 40 40 30 64 fd e0  |......a.G.@@0d..|
65 2a f9 c8                                       |e*..            |
          • rsaEncryption: 
            83 d0 8e c0 50 9f 5f fa  d0 38 ad 18 fa 1a 05 cc  |....P._..8......|
19 9d e0 64 c8 30 89 10  14 74 03 cb bd d6 57 58  |...d.0...t....WX|
a5 7e 10 b0 52 e9 e3 0e  88 7a 9e f9 71 47 c1 28  |.~..R....z..qG.(|
58 23 6a 4b 94 b9 6e 67  fd 38 4f 7c ce 68 8d d2  |X#jK..ng.8O|.h..|
00 9a 0e 96 1a e2 8e b5  5e 4f 34 b8 f9 42 21 90  |........^O4..B!.|
f7 ee 18 c4 73 63 51 2e  d1 36 b0 97 39 cc dd 37  |....scQ..6..9..7|
ea f3 25 36 e3 f1 c4 16  31 99 23 be 47 7d b9 3e  |..%6....1.#.G}.>|
54 3b d0 eb 1c 68 3c a7  27 73 ff 88 06 02 db 9c  |T;...h<.'s......|
37 12 39 93 10 ed 92 ac  2e 31 ea 5e 2b 72 5d 09  |7.9......1.^+r].|
bf 92 8c ee 30 d0 99 68  2d bb b2 68 97 6d 45 bb  |....0..h-..h.mE.|
ce 57 b7 96 7c b1 44 af  15 a7 77 41 0d 35 41 89  |.W..|.D...wA.5A.|
e9 f8 36 1e 5e bb 8d 1e  cc d4 c3 9e d6 d0 34 ae  |..6.^.........4.|
69 25 a6 66 98 cd 44 40  e5 ce 3d 0f 70 bc e7 57  |i%.f..D@..=.p..W|
09 16 5a eb 6d 21 88 ae  d2 9b 47 90 e3 5b 5d 57  |..Z.m!....G..[]W|
68 67 46 f0 55 4c 5f b8  86 01 d8 b0 a9 ca 80 f0  |hgF.UL_.........|
db dd 45 fe 90 25 c9 2d  11 20 74 0c f5 ce 5b e4  |..E..%.-. t...[.|
offsetsizetypecomment
15c115HTM#
b072c13464PNG(600 x 430)#
b3bc43370PNG(80 x 20)#
b48f03216PNG(96 x 16)#
b55803072PNG(532 x 32)#
b61803289PNG(148 x 32)#
b6e5c13404PNG(600 x 430)#
ba2b87580PNG(680 x 45)#
bc05423907PNG(1200 x 430)#
c1db814530PNG(600 x 430)#
c567c2862PNG(560 x 15)#
c61ac2863PNG(560 x 15)#
c6cdc7898PNG(680 x 45)#
c8bb813404PNG(600 x 430)#
cc0143276PNG(320 x 220)#
ccce04938PNG(360 x 35)#
ce02c5034PNG(360 x 35)#
3e03183099PNG(256 x 256)#
3e0f33144101BINoverlay data past EOF#
Scanning the drive for archives:
1 file, 4211224 bytes (4113 KiB)


--
Type = PE
Physical Size = 4211224
CPU = x86
Characteristics = Executable 32-bit
Created = 2019-07-10 07:56:40
Headers Size = 1024
Checksum = 4211484
Image Size = 4231168
Section Alignment = 4096
File Alignment = 512
Code Size = 542208
Initialized Data Size = 3661824
Uninitialized Data Size = 0
Linker Version = 14.16
OS Version = 5.1
Image Version = 0.0
Subsystem Version = 5.1
Subsystem = Windows GUI
DLL Characteristics = Relocated NX-Compatible TerminalServerAware
Stack Reserve = 1048576
Stack Commit = 4096
Heap Reserve = 1048576
Heap Commit = 4096
Image Base = 4194304
Comment = FileVersion: 1.0.1.32
ProductVersion: 1.0.1.32
CompanyName: 深圳市常青藤软件科技有限公司
FileDescription: 小智桌面安装程序
InternalName: DTLInstaller
LegalCopyright: Copyright (C) 2019 深圳市常青藤软件科技有限公司。保留所有权利。
ProductName: 小智桌面
----
Path = .rsrc/_7Z/APP.7Z
Size = 3196448
Packed Size = 3196448
--
Path = .rsrc/_7Z/APP.7Z
Open WARNING: Can not open the file as [7z] archive
Type = zip
ERRORS:
Headers Error
Unconfirmed start of archive
WARNINGS:
There are data after the end of archive
Offset = 58184
Physical Size = 58653
Tail Size = 3079611

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
2019-07-15 10:08:16 .....         2880         2892  Images/desktop/virtualdir_new_Btn.png
2019-07-15 10:08:16 .....         2974         2986  Images/desktop/virtualdir_unlock_Btn.png
2019-07-15 10:08:16 .....         2931         2943  Images/desktop/virtualdir_untop_Btn.png
2019-07-15 10:08:16 .....         3036         3048  Images/desktop/virtual_delete.png
2019-07-15 10:08:16 .....         2838         2850  Images/desktop/virtual_dir_bk.png
2019-07-15 10:08:16 .....         2872         2884  Images/desktop/virtual_menu.png
2019-07-15 10:08:16 .....         2938         2950  Images/desktop/virtual_menu_down.png
2019-07-15 10:08:16 .....         2940         2952  Images/desktop/virtual_menu_expland.png
2019-07-15 10:08:16 .....         2921         2933  Images/desktop/virtual_menu_up.png
2019-07-15 10:08:16 .....         2884         2896  Images/desktop/virtual_mode_list.png
2019-07-15 10:08:16 .....         2915         2927  Images/desktop/virtual_sort.png
2019-07-15 10:08:16 .....         2929         2941  Images/desktop/virtual_top.png
2019-07-15 10:08:16 .....         2897         2909  Images/Panel/bk_logo.png
2019-07-15 10:08:16 .....         4101         4113  Images/Panel/bk_tips.png
2019-07-15 10:08:16 .....         2880         2892  Images/Panel/btn_add.png
2019-07-15 10:08:16 .....         2947         2959  Images/Panel/btn_close.png
2019-07-15 10:08:16 .....         3370         3382  Images/Panel/btn_close_gray.png
2019-07-15 10:08:16 .....         2880         2892  Images/Panel/btn_menu.png
2019-07-15 10:08:16 .....         3124         3136  Images/Panel/btn_more.png
------------------- ----- ------------ ------------  ------------------------
2019-07-15 10:08:16              57257        57485  19 files

Warnings: 2

Errors: 1
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] ignoring invalid PEdump::BITMAPINFOHEADER
[?] can't find file_offset of VA 0xaafc8