AcroRd32.exe - Adobe Reader 9.5

info
MZ
PE
resources
imports
foremost
version info
signature
hexdump
disasm
log
discuss
donate

filename	AcroRd32.exe
size	357840 (0x575d0)
md5	0b81540a7a179f2c3a4abf904e0b5b21

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xf0

Rich Header

lib id	version	times used
126	50327	1
125	50727	2
109	50727	22
123	50727	4
93	4035	11
1	0	157
110	50727	16
124	50727	1
120	50727	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	5
TimeDateStamp	0x5017c048
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x102
Magic	0x10b
LinkerVersion	8.0
SizeOfCode	0x5000
SizeOfInitializedData	0x50000
SizeOfUninitializedData	0
AddressOfEntryPoint	0x4334
BaseOfCode	0x1000
BaseOfData	0x6000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x1000
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x56000
SizeOfHeaders	0x1000
CheckSum	0x67533
Subsystem	2
DllCharacteristics	0x140
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x405e	0x5000	R-X CODE
.rdata	0x6000	0x469e	0x5000	R-- IDATA
.data	0xb000	0x920	0x1000	RW- IDATA
.rsrc	0xc000	0x48f1c	0x49000	R-- IDATA
.reloc	0x55000	0xc5c	0x1000	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x964c	0x8c
RESOURCE	0xc000	0x48f1c
EXCEPTION	0	0
SECURITY	0x56000	0x15d0
BASERELOC	0x55000	0x6f0
DEBUG	0x6290	0x1c
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0x8ef8	0x40
Bound_IAT	0	0
IAT	0x6000	0x258
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
ICON	#1	1640	1252
ICON	#2	744	1252
ICON	#3	296	1252
ICON	#4	3752	1252
ICON	#5	2216	1252
ICON	#6	1384	1252
ICON	#7	270376	1252
ICON	#8	9640	1252
ICON	#9	4264	1252
ICON	#10	1128	1252
RCDATA	API_ADOBE_PUBLIC_KEY	94	1252
RCDATA	T405_ADOBE_PUBLIC_KEY	94	1252
GROUP_ICON	#1	146	1252
VERSION	#1	1102	1252
MANIFEST	#1	949	1252

module_name	hint	function_name
KERNEL32.dll	52	CloseHandle
KERNEL32.dll	881	UnmapViewOfFile
KERNEL32.dll	83	CreateFileA
KERNEL32.dll	905	VirtualQueryEx
KERNEL32.dll	322	GetCurrentProcess
KERNEL32.dll	616	MapViewOfFile
KERNEL32.dll	85	CreateFileMappingW
KERNEL32.dll	350	GetFileAttributesA
KERNEL32.dll	206	FindClose
KERNEL32.dll	220	FindNextFileA
KERNEL32.dll	210	FindFirstFileA
KERNEL32.dll	693	ReadFile
KERNEL32.dll	795	SetFilePointer
KERNEL32.dll	469	GetTempPathA
KERNEL32.dll	499	GetWindowsDirectoryA
KERNEL32.dll	449	GetSystemDirectoryA
KERNEL32.dll	381	GetModuleFileNameA
KERNEL32.dll	853	SizeofResource
KERNEL32.dll	613	LockResource
KERNEL32.dll	599	LoadResource
KERNEL32.dll	230	FindResourceW
KERNEL32.dll	453	GetSystemInfo
KERNEL32.dll	629	MultiByteToWideChar
KERNEL32.dll	382	GetModuleFileNameW
KERNEL32.dll	597	LoadLibraryW
KERNEL32.dll	248	FreeLibrary
KERNEL32.dll	416	GetProcAddress
KERNEL32.dll	450	GetSystemDirectoryW
KERNEL32.dll	386	GetModuleHandleW
KERNEL32.dll	912	WaitForSingleObject
KERNEL32.dll	108	CreateSemaphoreW
KERNEL32.dll	707	ReleaseSemaphore
KERNEL32.dll	538	HeapReAlloc
KERNEL32.dll	534	HeapFree
KERNEL32.dll	528	HeapAlloc
KERNEL32.dll	532	HeapDestroy
KERNEL32.dll	129	DeleteCriticalSection
KERNEL32.dll	547	InitializeCriticalSection
KERNEL32.dll	593	LeaveCriticalSection
KERNEL32.dll	152	EnterCriticalSection
KERNEL32.dll	679	RaiseException
KERNEL32.dll	489	GetVersionExA
KERNEL32.dll	569	IsDebuggerPresent
KERNEL32.dll	653	OutputDebugStringA
KERNEL32.dll	490	GetVersionExW
KERNEL32.dll	540	HeapSize
KERNEL32.dll	419	GetProcessHeap
KERNEL32.dll	326	GetCurrentThreadId
KERNEL32.dll	229	FindResourceExW
KERNEL32.dll	323	GetCurrentProcessId
KERNEL32.dll	474	GetThreadLocale
KERNEL32.dll	372	GetLocaleInfoA
KERNEL32.dll	253	GetACP
KERNEL32.dll	458	GetSystemTimeAsFileTime
KERNEL32.dll	854	Sleep
KERNEL32.dll	550	InterlockedCompareExchange
KERNEL32.dll	440	GetStartupInfoW
KERNEL32.dll	862	TerminateProcess
KERNEL32.dll	878	UnhandledExceptionFilter
KERNEL32.dll	842	SetUnhandledExceptionFilter
KERNEL32.dll	675	QueryPerformanceCounter
KERNEL32.dll	479	GetTickCount
KERNEL32.dll	553	InterlockedExchange
USER32.dll	486	MessageBoxW
USER32.dll	576	SendMessageW
USER32.dll	230	FindWindowW
USER32.dll	691	UnregisterClassA
ADVAPI32.dll	503	RegQueryValueExA
ADVAPI32.dll	491	RegOpenKeyA
ADVAPI32.dll	502	RegQueryValueA
ADVAPI32.dll	494	RegOpenKeyW
ADVAPI32.dll	504	RegQueryValueExW
ADVAPI32.dll	459	RegCloseKey
ADVAPI32.dll	492	RegOpenKeyExA
SHELL32.dll	183	SHGetMalloc
SHELL32.dll	188	SHGetPathFromIDListA
SHELL32.dll	195	SHGetSpecialFolderLocation
MSVCP80.dll	1988	public: class std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> > & __thiscall std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >::erase(unsigned int, unsigned int) ?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
MSVCP80.dll	2477	public: static unsigned int const std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >::npos ?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
MSVCP80.dll	692	public: class std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> > & __thiscall std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >::operator=(char const *) ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
MSVCP80.dll	1517	public: class std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> > & __thiscall std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >::append(class std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> > const &) ?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z
MSVCP80.dll	1521	public: class std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> > & __thiscall std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >::append(char const *) ?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
MSVCP80.dll	377	public: __thiscall std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >(char const *) ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
MSVCP80.dll	382	public: __thiscall std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >(void) ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
MSVCP80.dll	137	bool __cdecl std::operator<<char, struct std::char_traits<char>, class std::allocator<char> >(class std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> > const &, class std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> > const &) ??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
MSVCP80.dll	1581	public: char const * __thiscall std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >::c_str(void)const ?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
MSVCP80.dll	606	public: __thiscall std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >::~basic_string<char, struct std::char_traits<char>, class std::allocator<char> >(void) ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
MSVCP80.dll	370	public: __thiscall std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >(class std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> > const &) ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
MSVCP80.dll	379	public: __thiscall std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >(char const *, unsigned int) ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDI@Z
MSVCR80.dll	15	void * __cdecl operator new(unsigned int) ??2@YAPAXI@Z
MSVCR80.dll	93	_CxxThrowException
MSVCR80.dll	8	public: __thiscall std::exception::exception(class std::exception const &) ??0exception@std@@QAE@ABV01@@Z
MSVCR80.dll	33	void __cdecl operator delete[](void *) ??_V@YAXPAX@Z
MSVCR80.dll	1374	strchr
MSVCR80.dll	1391	strrchr
MSVCR80.dll	1268	free
MSVCR80.dll	1377	strcpy
MSVCR80.dll	1323	malloc
MSVCR80.dll	1383	strlen
MSVCR80.dll	1375	strcmp
MSVCR80.dll	1335	memcpy_s
MSVCR80.dll	1438	wcslen
MSVCR80.dll	1338	memset
MSVCR80.dll	936	_stricmp
MSVCR80.dll	1440	wcsncat_s
MSVCR80.dll	1443	wcsncpy_s
MSVCR80.dll	1446	wcsrchr
MSVCR80.dll	1430	wcscat_s
MSVCR80.dll	67	void __cdecl terminate(void) ?terminate@@YAXXZ
MSVCR80.dll	1011	_unlock
MSVCR80.dll	153	__dllonexit
MSVCR80.dll	370	_encode_pointer
MSVCR80.dll	642	_lock
MSVCR80.dll	808	_onexit
MSVCR80.dll	360	_decode_pointer
MSVCR80.dll	285	_amsg_exit
MSVCR80.dll	255	__wgetmainargs
MSVCR80.dll	308	_cexit
MSVCR80.dll	388	_exit
MSVCR80.dll	105	_XcptFilter
MSVCR80.dll	1244	exit
MSVCR80.dll	1079	_wcmdln
MSVCR80.dll	528	_initterm
MSVCR80.dll	529	_initterm_e
MSVCR80.dll	324	_configthreadlocale
MSVCR80.dll	235	__setusermatherr
MSVCR80.dll	275	_adjust_fdiv
MSVCR80.dll	206	__p__commode
MSVCR80.dll	210	__p__fmode
MSVCR80.dll	232	__set_app_type
MSVCR80.dll	339	_crt_debugger_hook
MSVCR80.dll	54	public: void __thiscall type_info::_type_info_dtor_internal_method(void) ?_type_info_dtor_internal_method@type_info@@QAEXXZ
MSVCR80.dll	379	_except_handler4_common
MSVCR80.dll	535	_invoke_watson
MSVCR80.dll	327	_controlfp_s
MSVCR80.dll	534	_invalid_parameter_noinfo
MSVCR80.dll	9	public: __thiscall std::exception::exception(void) ??0exception@std@@QAE@XZ
MSVCR80.dll	17	void __cdecl operator delete(void *) ??3@YAXPAX@Z
MSVCR80.dll	7	public: __thiscall std::exception::exception(char const * const &, int) ??0exception@std@@QAE@ABQBDH@Z
MSVCR80.dll	70	public: virtual char const * __thiscall std::exception::what(void)const ?what@exception@std@@UBEPBDXZ
MSVCR80.dll	6	public: __thiscall std::exception::exception(char const * const &) ??0exception@std@@QAE@ABQBD@Z
MSVCR80.dll	118	__CxxFrameHandler3
MSVCR80.dll	887	_snprintf
MSVCR80.dll	13	public: virtual __thiscall std::exception::~exception(void) ??1exception@std@@UAE@XZ

StringTable 040904E4

CompanyName	Adobe Systems Incorporated
FileDescription	Adobe Reader 9.5
FileVersion	9.5.2.295
LegalCopyright	Copyright 1984-2010 Adobe Systems Incorporated and its licensors. All rights reserved.
ProductName	Adobe Reader
ProductVersion	9.5.2.295
OriginalFilename	AcroRd32.exe

VS_FIXEDFILEINFO

FileVersion	9.5.2.295
ProductVersion	9.5.2.295
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x50004
FileType	1
FileSubtype	0

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa (c)09/CN=VeriSign Class 3 Code Signing 2009-2 CA

serial: 0290965E913340CDA6634CEF31F7FD07

Certificates (4)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA
        Validity
            Not Before: May  1 00:00:00 2012 GMT
            Not After : Dec 31 23:59:59 2012 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer - G3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (1024 bit)
                Modulus:
                    00:a9:59:66:74:da:3d:8a:7d:7a:d8:fc:f5:80:44:
                    7b:fe:47:6a:14:55:4e:50:47:0b:ec:d3:ed:ce:f6:
                    38:f7:4f:69:b9:b1:f0:b6:78:82:0a:8c:76:16:67:
                    e2:02:ad:b7:0d:a5:8a:f6:03:fc:66:d3:fc:08:2d:
                    cc:b5:73:59:7b:89:dc:33:6e:66:5a:5e:52:37:b4:
                    62:d1:92:59:35:14:8b:45:ac:59:b2:4d:24:a2:98:
                    94:68:42:72:9f:3a:68:e2:6b:8b:9e:22:2d:f4:98:
                    4e:9a:c6:af:b3:e4:a0:ab:3c:28:bf:23:e1:d7:72:
                    a4:f2:10:53:67:ae:77:af:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.verisign.com/tss-ca.crl

            X509v3 Extended Key Usage: critical
                Time Stamping
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Subject Alternative Name: 
                DirName:/CN=TSA1-3
            X509v3 Subject Key Identifier: 
                B4:B7:F1:89:49:26:60:E7:65:EA:73:AE:DC:D3:38:CD:BF:57:92:6F
    Signature Algorithm: sha1WithRSAEncryption
         1e:98:aa:27:b7:78:b5:08:b5:c9:72:6d:b7:df:c0:0e:98:a6:
         35:c4:88:c9:d2:f6:6d:f1:4b:1a:fb:d5:f9:2d:99:00:9e:d1:
         e7:9b:8b:e1:3f:bd:39:80:0c:66:cd:07:bc:5c:98:54:a6:94:
         ba:10:d1:4e:8b:ab:f5:6f:65:cc:67:09:a2:80:7c:52:e8:0e:
         03:d6:6b:7a:c6:05:18:ec:c8:ac:42:7c:07:2c:a7:3d:08:66:
         dc:00:ed:fd:94:1d:73:f2:72:98:93:b1:11:d6:8f:ef:8e:ea:
         ac:f4:96:51:0c:d0:8d:df:31:52:4f:5e:af:7d:a7:4a:75:e6:
         4e:ce:2b:9f:29:2b:e7:cf:5d:9f:03:7e:6e:27:7b:23:ad:62:
         29:66:af:92:e8:2c:ce:bd:9c:7f:dc:cd:17:3c:43:c2:09:3f:
         75:45:c7:9e:e4:d7:60:7f:97:c6:e4:aa:c7:69:f5:fc:cd:74:
         ac:2c:b0:48:c1:50:4e:70:56:1e:b5:35:d3:8e:be:b1:ed:ac:
         bd:fe:0c:ec:85:7d:d5:bb:85:66:44:19:5d:9f:93:eb:82:ba:
         63:9e:d3:7c:61:ff:c8:1b:d9:23:58:7f:30:a3:66:a1:39:26:
         5e:92:c3:3c:cb:37:32:fa:f5:a3:8d:dc:d5:b0:a3:e9:25:36:
         55:d7:81:fa

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
        Validity
            Not Before: Dec  4 00:00:00 2003 GMT
            Not After : Dec  3 23:59:59 2013 GMT
        Subject: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ca:b2:a4:cc:cd:20:af:0a:7d:89:ac:87:75:
                    f0:b4:4e:f1:df:c1:0f:bf:67:61:bd:a3:64:1c:da:
                    bb:f9:ca:33:ab:84:30:89:58:7e:8c:db:6b:dd:36:
                    9e:0f:bf:d1:ec:78:f2:77:a6:7e:6f:3c:bf:93:af:
                    0d:ba:68:f4:6c:94:ca:bd:52:2d:ab:48:3d:f5:b6:
                    d5:5d:5f:1b:02:9f:fa:2f:6b:1e:a4:f7:a3:9a:a6:
                    1a:c8:02:e1:7f:4c:52:e3:0e:60:ec:40:1c:7e:b9:
                    0d:de:3f:c7:b4:df:87:bd:5f:7a:6a:31:2e:03:99:
                    81:13:a8:47:20:ce:31:73:0d:57:2d:cd:78:34:33:
                    95:12:99:12:b9:de:68:2f:aa:e6:e3:c2:8a:8c:2a:
                    c3:8b:21:87:66:bd:83:58:57:6f:75:bf:3c:aa:26:
                    87:5d:ca:10:15:3c:9f:84:ea:54:c1:0a:6e:c4:fe:
                    c5:4a:dd:b9:07:11:97:22:7c:db:3e:27:d1:1e:78:
                    ec:9f:31:c9:f1:e6:22:19:db:c4:b3:47:43:9a:1a:
                    5f:a0:1e:90:e4:5e:f5:ee:7c:f1:7d:ab:62:01:8f:
                    f5:4d:0b:de:d0:22:56:a8:95:cd:ae:88:76:ae:ee:
                    ba:0d:f3:e4:4d:d9:a0:fb:68:a0:ae:14:3b:b3:87:
                    c1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com

            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.verisign.com/ThawteTimestampingCA.crl

            X509v3 Extended Key Usage: 
                Time Stamping
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=TSA2048-1-53
    Signature Algorithm: sha1WithRSAEncryption
         4a:6b:f9:ea:58:c2:44:1c:31:89:79:99:2b:96:bf:82:ac:01:
         d6:1c:4c:cd:b0:8a:58:6e:df:08:29:a3:5e:c8:ca:93:13:e7:
         04:52:0d:ef:47:27:2f:00:38:b0:e4:c9:93:4e:9a:d4:22:62:
         15:f7:3f:37:21:4f:70:31:80:f1:8b:38:87:b3:e8:e8:97:00:
         fe:cf:55:96:4e:24:d2:a9:27:4e:7a:ae:b7:61:41:f3:2a:ce:
         e7:c9:d9:5e:dd:bb:2b:85:3e:b5:9d:b5:d9:e1:57:ff:be:b4:
         c5:7e:f5:cf:0c:9e:f0:97:fe:2b:d3:3b:52:1b:1b:38:27:f7:
         3f:4a

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority
        Validity
            Not Before: May 21 00:00:00 2009 GMT
            Not After : May 20 23:59:59 2019 GMT
        Subject: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009-2 CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:67:1d:b4:60:aa:10:49:6f:56:17:7c:66:c9:
                    5e:86:0d:d5:f1:ac:a7:71:83:8e:8b:89:f8:88:04:
                    89:15:06:ba:2d:84:21:95:e4:d1:9c:50:4c:fb:d2:
                    22:bd:da:f2:b2:35:3b:1e:8f:c3:09:fb:fc:13:2e:
                    5a:bf:89:7c:3d:3b:25:1e:f6:f3:58:7b:9c:f4:01:
                    b5:c6:0a:b8:80:ce:be:27:74:61:67:27:4d:6a:e5:
                    ec:81:61:58:79:a3:e0:17:10:12:15:27:b0:e1:4d:
                    34:7f:2b:47:20:44:b9:de:66:24:66:8a:cd:4f:ba:
                    1f:c5:38:c8:54:90:e1:72:f6:19:66:75:6a:b9:49:
                    68:cf:38:79:0d:aa:30:a8:db:2c:60:48:9e:d7:aa:
                    14:01:a9:83:d7:38:91:30:39:13:96:03:3a:7c:40:
                    54:b6:ad:e0:2f:1b:83:dc:a8:11:52:3e:02:b3:d7:
                    2b:fd:21:b6:a7:5c:a3:0f:0b:a9:a6:10:50:0e:34:
                    2e:4d:a7:ce:c9:5e:25:d4:8c:bc:f3:6e:7c:29:bc:
                    01:5d:fc:31:87:5a:d5:8c:85:67:58:88:19:a0:bf:
                    35:f0:ea:2b:a3:21:e7:90:f6:83:e5:a8:ed:60:78:
                    5e:7b:60:83:fd:57:0b:5d:41:0d:63:54:60:d6:43:
                    21:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/cps
                  User Notice:
                    Explicit Text: https://www.verisign.com/rpa

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            1.3.6.1.5.5.7.1.12: 
                0_.].[0Y0W0U..image/gif0!0.0...+..............k...j.H.,{..0%.#http://logo.verisign.com/vslogo.gif
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, Code Signing
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.verisign.com/pca3.crl

            X509v3 Subject Alternative Name: 
                DirName:/CN=Class3CA2048-1-55
            X509v3 Subject Key Identifier: 
                97:D0:6B:A8:26:70:C8:A1:3F:94:1F:08:2D:C4:35:9B:A4:A1:1E:F2
    Signature Algorithm: sha1WithRSAEncryption
         8b:03:c0:dd:94:d8:41:a2:61:69:b0:15:a8:78:c7:30:c6:90:
         3c:7e:42:f7:24:b6:e4:83:73:17:04:7f:04:10:9c:a1:e2:fa:
         81:2f:eb:c0:ca:44:e7:72:e0:50:b6:55:10:20:83:6e:96:92:
         e4:9a:51:6a:b4:37:31:dc:a5:2d:eb:8c:00:c7:1d:4f:e7:4d:
         32:ba:85:f8:4e:be:fa:67:55:65:f0:6a:be:7a:ca:64:38:1a:
         10:10:78:45:76:31:f3:86:7a:03:0f:60:c2:b3:5d:9d:f6:8b:
         66:76:82:1b:59:e1:83:e5:bd:49:a5:38:56:e5:de:41:77:0e:
         58:0f

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:90:96:5e:91:33:40:cd:a6:63:4c:ef:31:f7:fd:07
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009-2 CA
        Validity
            Not Before: Sep 28 00:00:00 2009 GMT
            Not After : Nov  4 23:59:59 2012 GMT
        Subject: C=US, ST=California, L=San Jose, O=Adobe Systems, Incorporated, OU=Digital ID Class 3 - Microsoft Software Validation v2, OU=Acrobat Engineering, CN=Adobe Systems, Incorporated
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (1024 bit)
                Modulus:
                    00:c1:89:6e:2b:51:e0:54:b5:b1:9a:0a:d3:98:36:
                    31:d9:5f:97:2e:8c:85:c7:9f:8d:30:c7:51:57:0d:
                    ae:77:fe:69:9b:d4:03:11:1b:dd:e4:4c:ce:26:1e:
                    af:9d:66:62:8a:c3:fd:5c:bf:98:36:17:1a:5c:3a:
                    8f:b0:e6:cc:ea:0c:67:67:36:f8:1b:9e:c1:8e:4b:
                    0a:a8:49:a8:8e:61:4f:80:05:d3:9e:f0:6f:4f:35:
                    59:7f:ac:92:7e:85:cd:95:6b:ee:ba:9a:d9:e4:d8:
                    46:7f:1c:d9:4d:e5:b7:90:6b:f7:8c:c8:3e:35:94:
                    fd:4b:de:e2:7b:22:53:24:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://csc3-2009-2-crl.verisign.com/CSC3-2009-2.crl

            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/rpa

            X509v3 Extended Key Usage: 
                Code Signing
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com
                CA Issuers - URI:http://csc3-2009-2-aia.verisign.com/CSC3-2009-2.cer

            X509v3 Authority Key Identifier: 
                keyid:97:D0:6B:A8:26:70:C8:A1:3F:94:1F:08:2D:C4:35:9B:A4:A1:1E:F2

            Netscape Cert Type: 
                Object Signing
            1.3.6.1.4.1.311.2.1.27: 
                0.......
    Signature Algorithm: sha1WithRSAEncryption
         39:ed:1c:1c:e6:e5:18:7b:c5:68:c5:49:4b:cf:3b:0d:f9:3e:
         77:be:3c:e5:87:d1:90:3d:d3:4c:d0:ff:57:aa:90:f9:d4:b5:
         4c:a2:0e:ad:56:25:25:1f:78:80:51:eb:1d:78:43:94:97:47:
         33:0a:f9:e6:ef:b6:26:52:17:e8:75:7b:29:80:d9:f9:06:d9:
         d4:2f:93:dc:2c:d3:97:27:29:80:62:95:47:46:fd:da:91:90:
         3d:7e:b4:1e:b2:b7:42:d1:e6:51:51:4a:9a:28:fa:e5:b9:f7:
         57:92:8b:07:4a:ff:2f:a4:a1:b8:1c:f1:0d:bb:ae:dc:46:cb:
         1d:af:2d:35:00:ce:f1:65:4f:53:41:2e:d8:30:d1:6a:49:24:
         d1:98:10:f8:3d:9f:ed:05:a6:7f:ca:97:e8:5c:32:bb:9d:8f:
         d3:b9:b8:ec:99:73:bf:91:c2:9d:dc:e6:7d:de:8a:3e:4a:0f:
         29:a0:6e:ed:2e:46:34:a1:4b:5b:62:ae:22:9c:1c:08:2f:bb:
         4c:bc:75:e7:1f:16:c2:52:d7:f4:6d:ca:a1:1b:d1:f7:5f:4f:
         a5:5b:32:3a:e0:9e:87:df:1e:87:be:14:a1:13:3a:08:30:09:
         96:46:0e:5b:f7:da:e0:6a:78:bc:aa:c5:59:13:99:4c:6d:55:
         f8:e9:f9:7d

pkcs7-signedData

1
- SHA1: nil
- 1.3.6.1.4.1.311.2.1.4
  - #0
    - 1.3.6.1.4.1.311.2.1.15
      - :
        00 3c 00 3c 00 3c 00 4f 00 62 00 73 00 6f 00 6c |.<.<.<.O.b.s.o.l| 00 65 00 74 00 65 00 3e 00 3e 00 3e |.e.t.e.>.>.> |
    - SHA1
      - 9a 55 76 55 dd a9 7e bb 67 66 1a 25 56 24 3e a6 |.UvU..~.gf.%V$>.| 44 ce 46 a4 |D.F. |
- Certificates
  - Certificate #0
    - 2
      - 79:A2:A5:85:F9:D1:15:42:13:D9:B8:3E:F6:B6:8D:ED
      - RSA-SHA1: nil
      - Issuer
        C: US
        O: VeriSign, Inc.
        CN: VeriSign Time Stamping Services CA
      - 2012-05-01 00:00:00 UTC: 2012-12-31 23:59:59 UTC
      - Subject
        C: US
        O: Symantec Corporation
        CN: Symantec Time Stamping Services Signer - G3
      - #5
        rsaEncryption: nil
        A9:59:66:74:DA:3D:8A:7D:7A:D8:FC:F5:80:44:7B:FE:
        47:6A:14:55:4E:50:47:0B:EC:D3:ED:CE:F6:38:F7:4F:
        69:B9:B1:F0:B6:78:82:0A:8C:76:16:67:E2:02:AD:B7:
        0D:A5:8A:F6:03:FC:66:D3:FC:08:2D:CC:B5:73:59:7B:
        89:DC:33:6E:66:5A:5E:52:37:B4:62:D1:92:59:35:14:
        8B:45:AC:59:B2:4D:24:A2:98:94:68:42:72:9F:3A:68:
        E2:6B:8B:9E:22:2D:F4:98:4E:9A:C6:AF:B3:E4:A0:AB:
        3C:28:BF:23:E1:D7:72:A4:F2:10:53:67:AE:77:AF:51: 0x010001
      - X509v3 extensions
        basicConstraints
        true
        nil
        crlDistributionPoints: http://crl.verisign.com/tss-ca.crl
        extendedKeyUsage: true, timeStamping
        authorityInfoAccess
        OCSP: http://ocsp.verisign.com
        keyUsage: true, 0x80
        subjectAltName
        CN: TSA1-3
        subjectKeyIdentifier:
        b4 b7 f1 89 49 26 60 e7 65 ea 73 ae dc d3 38 cd |....I&`.e.s...8.| bf 57 92 6f |.W.o |
    - RSA-SHA1:
```
1e 98 aa 27 b7 78 b5 08  b5 c9 72 6d b7 df c0 0e  |...'.x....rm....|
98 a6 35 c4 88 c9 d2 f6  6d f1 4b 1a fb d5 f9 2d  |..5.....m.K....-|
99 00 9e d1 e7 9b 8b e1  3f bd 39 80 0c 66 cd 07  |........?.9..f..|
bc 5c 98 54 a6 94 ba 10  d1 4e 8b ab f5 6f 65 cc  |.\.T.....N...oe.|
67 09 a2 80 7c 52 e8 0e  03 d6 6b 7a c6 05 18 ec  |g...|R....kz....|
c8 ac 42 7c 07 2c a7 3d  08 66 dc 00 ed fd 94 1d  |..B|.,.=.f......|
73 f2 72 98 93 b1 11 d6  8f ef 8e ea ac f4 96 51  |s.r............Q|
0c d0 8d df 31 52 4f 5e  af 7d a7 4a 75 e6 4e ce  |....1RO^.}.Ju.N.|
2b 9f 29 2b e7 cf 5d 9f  03 7e 6e 27 7b 23 ad 62  |+.)+..]..~n'{#.b|
29 66 af 92 e8 2c ce bd  9c 7f dc cd 17 3c 43 c2  |)f...,.......
```
  - Certificate #1
    - 2
      - 47:BF:19:95:DF:8D:52:46:43:F7:DB:6D:48:0D:31:A4
      - RSA-SHA1: nil
      - Issuer
        C: ZA
        ST: Western Cape
        L: Durbanville
        O: Thawte
        OU: Thawte Certification
        CN: Thawte Timestamping CA
      - 2003-12-04 00:00:00 UTC: 2013-12-03 23:59:59 UTC
      - Subject
        C: US
        O: VeriSign, Inc.
        CN: VeriSign Time Stamping Services CA
      - #5
        rsaEncryption: nil
        A9:CA:B2:A4:CC:CD:20:AF:0A:7D:89:AC:87:75:F0:B4:
        4E:F1:DF:C1:0F:BF:67:61:BD:A3:64:1C:DA:BB:F9:CA:
        33:AB:84:30:89:58:7E:8C:DB:6B:DD:36:9E:0F:BF:D1:
        EC:78:F2:77:A6:7E:6F:3C:BF:93:AF:0D:BA:68:F4:6C:
        94:CA:BD:52:2D:AB:48:3D:F5:B6:D5:5D:5F:1B:02:9F:
        FA:2F:6B:1E:A4:F7:A3:9A:A6:1A:C8:02:E1:7F:4C:52:
        E3:0E:60:EC:40:1C:7E:B9:0D:DE:3F:C7:B4:DF:87:BD:
        5F:7A:6A:31:2E:03:99:81:13:A8:47:20:CE:31:73:0D:
        57:2D:CD:78:34:33:95:12:99:12:B9:DE:68:2F:AA:E6:
        E3:C2:8A:8C:2A:C3:8B:21:87:66:BD:83:58:57:6F:75:
        BF:3C:AA:26:87:5D:CA:10:15:3C:9F:84:EA:54:C1:0A:
        6E:C4:FE:C5:4A:DD:B9:07:11:97:22:7C:DB:3E:27:D1:
        1E:78:EC:9F:31:C9:F1:E6:22:19:DB:C4:B3:47:43:9A:
        1A:5F:A0:1E:90:E4:5E:F5:EE:7C:F1:7D:AB:62:01:8F:
        F5:4D:0B:DE:D0:22:56:A8:95:CD:AE:88:76:AE:EE:BA:
        0D:F3:E4:4D:D9:A0:FB:68:A0:AE:14:3B:B3:87:C1:BB: 0x010001
      - X509v3 extensions
        authorityInfoAccess
        OCSP: http://ocsp.verisign.com
        basicConstraints
        true
        true: 0
        crlDistributionPoints: http://crl.verisign.com/ThawteTimestampingCA.crl
        extendedKeyUsage: timeStamping
        keyUsage: true, 6
        subjectAltName
        CN: TSA2048-1-53
    - RSA-SHA1:
```
4a 6b f9 ea 58 c2 44 1c  31 89 79 99 2b 96 bf 82  |Jk..X.D.1.y.+...|
ac 01 d6 1c 4c cd b0 8a  58 6e df 08 29 a3 5e c8  |....L...Xn..).^.|
ca 93 13 e7 04 52 0d ef  47 27 2f 00 38 b0 e4 c9  |.....R..G'/.8...|
93 4e 9a d4 22 62 15 f7  3f 37 21 4f 70 31 80 f1  |.N.."b..?7!Op1..|
8b 38 87 b3 e8 e8 97 00  fe cf 55 96 4e 24 d2 a9  |.8........U.N$..|
27 4e 7a ae b7 61 41 f3  2a ce e7 c9 d9 5e dd bb  |'Nz..aA.*....^..|
2b 85 3e b5 9d b5 d9 e1  57 ff be b4 c5 7e f5 cf  |+.>.....W....~..|
0c 9e f0 97 fe 2b d3 3b  52 1b 1b 38 27 f7 3f 4a  |.....+.;R..8'.?J|
```
  - Certificate #2
    - 2
      - 65:52:26:E1:B2:2E:18:E1:59:0F:29:85:AC:22:E7:5C
      - RSA-SHA1: nil
      - Issuer
        C: US
        O: VeriSign, Inc.
        OU: Class 3 Public Primary Certification Authority
      - 2009-05-21 00:00:00 UTC: 2019-05-20 23:59:59 UTC
      - Subject
        C: US
        O: VeriSign, Inc.
        OU: VeriSign Trust Network
        OU: Terms of use at https://www.verisign.com/rpa (c)09
        CN: VeriSign Class 3 Code Signing 2009-2 CA
      - #5
        rsaEncryption: nil
        BE:67:1D:B4:60:AA:10:49:6F:56:17:7C:66:C9:5E:86:
        0D:D5:F1:AC:A7:71:83:8E:8B:89:F8:88:04:89:15:06:
        BA:2D:84:21:95:E4:D1:9C:50:4C:FB:D2:22:BD:DA:F2:
        B2:35:3B:1E:8F:C3:09:FB:FC:13:2E:5A:BF:89:7C:3D:
        3B:25:1E:F6:F3:58:7B:9C:F4:01:B5:C6:0A:B8:80:CE:
        BE:27:74:61:67:27:4D:6A:E5:EC:81:61:58:79:A3:E0:
        17:10:12:15:27:B0:E1:4D:34:7F:2B:47:20:44:B9:DE:
        66:24:66:8A:CD:4F:BA:1F:C5:38:C8:54:90:E1:72:F6:
        19:66:75:6A:B9:49:68:CF:38:79:0D:AA:30:A8:DB:2C:
        60:48:9E:D7:AA:14:01:A9:83:D7:38:91:30:39:13:96:
        03:3A:7C:40:54:B6:AD:E0:2F:1B:83:DC:A8:11:52:3E:
        02:B3:D7:2B:FD:21:B6:A7:5C:A3:0F:0B:A9:A6:10:50:
        0E:34:2E:4D:A7:CE:C9:5E:25:D4:8C:BC:F3:6E:7C:29:
        BC:01:5D:FC:31:87:5A:D5:8C:85:67:58:88:19:A0:BF:
        35:F0:EA:2B:A3:21:E7:90:F6:83:E5:A8:ED:60:78:5E:
        7B:60:83:FD:57:0B:5D:41:0D:63:54:60:D6:43:21:EF: 0x010001
      - X509v3 extensions
        basicConstraints
        true
        true: 0
        certificatePolicies
        2.16.840.1.113733.1.7.23.3
        #0
        id-qt-cps: https://www.verisign.com/cps
        id-qt-unotice: https://www.verisign.com/rpa
        keyUsage: true, 6
        1.3.6.1.5.5.7.1.12
        image/gif
        SHA1:
        8f e5 d3 1a 86 ac 8d 8e 6b c3 cf 80 6a d4 48 18 |........k...j.H.| 2c 7b 19 2e |,{.. |
        http://logo.verisign.com/vslogo.gif
        extendedKeyUsage
        clientAuth: codeSigning
        authorityInfoAccess
        OCSP: http://ocsp.verisign.com
        crlDistributionPoints: http://crl.verisign.com/pca3.crl
        subjectAltName
        CN: Class3CA2048-1-55
        subjectKeyIdentifier:
        97 d0 6b a8 26 70 c8 a1 3f 94 1f 08 2d c4 35 9b |..k.&p..?...-.5.| a4 a1 1e f2 |.... |
    - RSA-SHA1:
```
8b 03 c0 dd 94 d8 41 a2  61 69 b0 15 a8 78 c7 30  |......A.ai...x.0|
c6 90 3c 7e 42 f7 24 b6  e4 83 73 17 04 7f 04 10  |..<~B.$...s.....|
9c a1 e2 fa 81 2f eb c0  ca 44 e7 72 e0 50 b6 55  |...../...D.r.P.U|
10 20 83 6e 96 92 e4 9a  51 6a b4 37 31 dc a5 2d  |. .n....Qj.71..-|
eb 8c 00 c7 1d 4f e7 4d  32 ba 85 f8 4e be fa 67  |.....O.M2...N..g|
55 65 f0 6a be 7a ca 64  38 1a 10 10 78 45 76 31  |Ue.j.z.d8...xEv1|
f3 86 7a 03 0f 60 c2 b3  5d 9d f6 8b 66 76 82 1b  |..z..`..]...fv..|
59 e1 83 e5 bd 49 a5 38  56 e5 de 41 77 0e 58 0f  |Y....I.8V..Aw.X.|
```
  - Certificate #3
    - 2
      - 02:90:96:5E:91:33:40:CD:A6:63:4C:EF:31:F7:FD:07
      - RSA-SHA1: nil
      - Issuer
        C: US
        O: VeriSign, Inc.
        OU: VeriSign Trust Network
        OU: Terms of use at https://www.verisign.com/rpa (c)09
        CN: VeriSign Class 3 Code Signing 2009-2 CA
      - 2009-09-28 00:00:00 UTC: 2012-11-04 23:59:59 UTC
      - Subject
        C: US
        ST: California
        L: San Jose
        O: Adobe Systems, Incorporated
        OU: Digital ID Class 3 - Microsoft Software Validation v2
        OU: Acrobat Engineering
        CN: Adobe Systems, Incorporated
      - #5
        rsaEncryption: nil
        C1:89:6E:2B:51:E0:54:B5:B1:9A:0A:D3:98:36:31:D9:
        5F:97:2E:8C:85:C7:9F:8D:30:C7:51:57:0D:AE:77:FE:
        69:9B:D4:03:11:1B:DD:E4:4C:CE:26:1E:AF:9D:66:62:
        8A:C3:FD:5C:BF:98:36:17:1A:5C:3A:8F:B0:E6:CC:EA:
        0C:67:67:36:F8:1B:9E:C1:8E:4B:0A:A8:49:A8:8E:61:
        4F:80:05:D3:9E:F0:6F:4F:35:59:7F:AC:92:7E:85:CD:
        95:6B:EE:BA:9A:D9:E4:D8:46:7F:1C:D9:4D:E5:B7:90:
        6B:F7:8C:C8:3E:35:94:FD:4B:DE:E2:7B:22:53:24:B9: 0x010001
      - X509v3 extensions
        basicConstraints
        nil
        keyUsage: true, 0x80
        crlDistributionPoints: http://csc3-2009-2-crl.verisign.com/CSC3-2009-2.crl
        certificatePolicies
        2.16.840.1.113733.1.7.23.3
        id-qt-cps: https://www.verisign.com/rpa
        extendedKeyUsage: codeSigning
        authorityInfoAccess
        #0
        OCSP: http://ocsp.verisign.com
        caIssuers: http://csc3-2009-2-aia.verisign.com/CSC3-2009-2.cer
        authorityKeyIdentifier:
        97 d0 6b a8 26 70 c8 a1 3f 94 1f 08 2d c4 35 9b |..k.&p..?...-.5.| a4 a1 1e f2 |.... |
        nsCertType: 0x10
        1.3.6.1.4.1.311.2.1.27
        false: true
    - RSA-SHA1:
```
39 ed 1c 1c e6 e5 18 7b  c5 68 c5 49 4b cf 3b 0d  |9......{.h.IK.;.|
f9 3e 77 be 3c e5 87 d1  90 3d d3 4c d0 ff 57 aa  |.>w.<....=.L..W.|
90 f9 d4 b5 4c a2 0e ad  56 25 25 1f 78 80 51 eb  |....L...V%%.x.Q.|
1d 78 43 94 97 47 33 0a  f9 e6 ef b6 26 52 17 e8  |.xC..G3.....&R..|
75 7b 29 80 d9 f9 06 d9  d4 2f 93 dc 2c d3 97 27  |u{)....../..,..'|
29 80 62 95 47 46 fd da  91 90 3d 7e b4 1e b2 b7  |).b.GF....=~....|
42 d1 e6 51 51 4a 9a 28  fa e5 b9 f7 57 92 8b 07  |B..QQJ.(....W...|
4a ff 2f a4 a1 b8 1c f1  0d bb ae dc 46 cb 1d af  |J./.........F...|
2d 35 00 ce f1 65 4f 53  41 2e d8 30 d1 6a 49 24  |-5...eOSA..0.jI$|
d1 98 10 f8 3d 9f ed 05  a6 7f ca 97 e8 5c 32 bb  |....=........\2.|
9d 8f d3 b9 b8 ec 99 73  bf 91 c2 9d dc e6 7d de  |.......s......}.|
8a 3e 4a 0f 29 a0 6e ed  2e 46 34 a1 4b 5b 62 ae  |.>J.).n..F4.K[b.|
22 9c 1c 08 2f bb 4c bc  75 e7 1f 16 c2 52 d7 f4  |".../.L.u....R..|
6d ca a1 1b d1 f7 5f 4f  a5 5b 32 3a e0 9e 87 df  |m....._O.[2:....|
1e 87 be 14 a1 13 3a 08  30 09 96 46 0e 5b f7 da  |......:.0..F.[..|
e0 6a 78 bc aa c5 59 13  99 4c 6d 55 f8 e9 f9 7d  |.jx...Y..LmU...}|
```
- Signer
  - 1
  - unnamed
    - #0
      - C: US
      - O: VeriSign, Inc.
      - OU: VeriSign Trust Network
      - OU: Terms of use at https://www.verisign.com/rpa (c)09
      - CN: VeriSign Class 3 Code Signing 2009-2 CA
    - 02:90:96:5E:91:33:40:CD:A6:63:4C:EF:31:F7:FD:07
  - SHA1: nil
  - #3
    - contentType: 1.3.6.1.4.1.311.2.1.4
    - 1.3.6.1.4.1.311.2.1.11: msCodeInd
    - messageDigest:
```
5e c8 48 3a 2c 55 bc 66  01 61 52 36 b8 db 33 71  |^.H:,U.f.aR6..3q|
aa 1f d9 9f                                       |....            |
```
    - 1.3.6.1.4.1.311.2.1.12:
```
00 41 00 64 00 6f 00 62  00 65 00 20 00 52 00 65  |.A.d.o.b.e. .R.e|
00 61 00 64 00 65 00 72  00 20 00 41 00 70 00 70  |.a.d.e.r. .A.p.p|
00 6c 00 69 00 63 00 61  00 74 00 69 00 6f 00 6e  |.l.i.c.a.t.i.o.n|
```
  - rsaEncryption:
```
47 ad b9 20 3b f1 22 59  a3 77 9f fb 66 b6 df 2f  |G.. ;."Y.w..f../|
67 47 f8 e6 84 03 da 13  20 7d 60 15 69 1d 1a c8  |gG...... }`.i...|
20 61 20 e5 cc e2 ad a4  1a 89 ab 1a 7d d7 8f be  | a .........}...|
a5 d4 b9 61 67 70 06 d9  c6 07 7e 67 96 09 f8 17  |...agp....~g....|
e6 71 d1 8f 4e 82 13 7c  51 90 f0 8b 86 97 d0 1c  |.q..N..|Q.......|
4f ee b8 83 46 f6 86 b5  61 28 e8 41 f0 11 07 f4  |O...F...a(.A....|
86 dd 8f a1 e4 90 f4 d8  f0 30 91 02 b7 92 83 26  |.........0.....&|
b1 4d 64 ef 2a 51 aa 83  78 91 94 fc 40 91 cc 11  |.Md.*Q..x...@...|
```
  - countersignature
    - 1
      - unnamed
        #0
        C: US
        O: VeriSign, Inc.
        CN: VeriSign Time Stamping Services CA
        79:A2:A5:85:F9:D1:15:42:13:D9:B8:3E:F6:B6:8D:ED
      - SHA1: nil
      - #2
        contentType: pkcs7-data
        signingTime: 2012-07-31 11:24:06 UTC
        messageDigest:
        cb 43 31 17 8a d3 6e ce 36 99 ca 98 e6 70 c6 63 |.C1...n.6....p.c| ed 14 28 03 |..(. |
      - rsaEncryption:
        8a e7 0e 82 4e 11 7d c1 a8 9b 02 c5 6f 9f 7c c3 |....N.}.....o.|.| 07 80 2b 87 3b 06 35 f7 2f 46 d6 eb 8a 8a b2 e3 |..+.;.5./F......| a6 f6 b2 b5 92 ac 42 e8 ac c2 be 5b 23 e7 df 5d |......B....[#..]| f6 dd db 8f d7 2a b6 9d 13 39 3e bc f9 6c 61 f0 |.....*...9>..la.| 7c 1e fd 70 5d 49 cd ef 2c 6e e3 62 64 95 6d dd ||..p]I..,n.bd.m.| ff 20 8e c5 86 37 c5 a6 e5 e0 db 2e 5d 10 24 20 |. ...7......].$ | 1f 74 3c 9e d2 76 d7 fb f6 11 ce f6 24 6e c5 35 |.t<..v......$n.5| 7e 3a 31 75 c0 83 aa e5 4d 1c 36 fa 7b f1 2e 07 |~:1u....M.6.{...|

show previews

offset	size	type	comment
0	352256	EXE	07/31/2012 11:23:52	#
15c1	15	HTM		#
56000	5584	PKCS7	Authenticode Signature	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] invalid VS_VERSIONINFO child type "B\x00u\x00i\x00"

AcroRd32.exe- Adobe Reader 9.5

MZ Header

Rich Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 040904E4

VS_FIXEDFILEINFO

Signers (1)

Certificates (4)

AcroRd32.exe
- Adobe Reader 9.5