lantern-installer-beta .exe

info
MZ
PE
resources
imports
foremost
7zip
signature
hexdump
disasm
log
discuss
donate

filename	lantern-installer-beta .exe
size	5865184 (0x597ee0)
md5	0ca6c5fb6000f924cdc48cb83df00207

type	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, Nullsoft Installer self-extracting archive
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	7
TimeDateStamp	0x55686697
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x30f
Magic	0x10b
LinkerVersion	2.25
SizeOfCode	0x8800
SizeOfInitializedData	0xb400
SizeOfUninitializedData	0x48c00
AddressOfEntryPoint	0x416d
BaseOfCode	0x1000
BaseOfData	0xa000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	6.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0xac000
SizeOfHeaders	0x400
CheckSum	0x5a57a5
Subsystem	2
DllCharacteristics	0x8000
SizeOfStackReserve	0x200000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x8658	0x8800	R-X CODE
.data	0xa000	0x108	0x200	RW- IDATA
.rdata	0xb000	0x6a90	0x6c00	R-- IDATA
.bss	0x12000	0x48bc0	0	RW- UDATA
.idata	0x5b000	0x1304	0x1400	RW- IDATA
.ndata	0x5d000	0x44000	0x2000	RW- IDATA
.rsrc	0xa1000	0xa3e0	0xa400	RW- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x5b000	0x1304
RESOURCE	0xa1000	0xa3e0
EXCEPTION	0	0
SECURITY	0x596270	0x1c70
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size
ICON	#1	16936
ICON	#2	9640
ICON	#3	4264
ICON	#4	1384
ICON	#5	1128
ICON	#6	744
ICON	#7	296
DIALOG	#105	574
DIALOG	#106	260
DIALOG	#111	238
DIALOG	#205	574
DIALOG	#206	260
DIALOG	#211	238
DIALOG	#305	554
DIALOG	#306	240
DIALOG	#311	218
DIALOG	#405	558
DIALOG	#406	244
DIALOG	#411	222
DIALOG	#505	554
DIALOG	#506	240
DIALOG	#511	218
GROUP_ICON	#103	104
MANIFEST	#1	947

module_name	hint	function_name
ADVAPI32.dll	568	RegCloseKey
ADVAPI32.dll	576	RegCreateKeyExA
ADVAPI32.dll	581	RegDeleteKeyA
ADVAPI32.dll	591	RegDeleteValueA
ADVAPI32.dll	597	RegEnumKeyA
ADVAPI32.dll	601	RegEnumValueA
ADVAPI32.dll	616	RegOpenKeyExA
ADVAPI32.dll	629	RegQueryValueExA
ADVAPI32.dll	645	RegSetValueExA
COMCTL32.DLL	59	ImageList_AddMasked
COMCTL32.DLL	62	ImageList_Create
COMCTL32.DLL	63	ImageList_Destroy
COMCTL32.DLL	94	InitCommonControls
GDI32.dll	30	CreateBrushIndirect
GDI32.dll	47	CreateFontIndirectA
GDI32.dll	75	DeleteObject
GDI32.dll	168	GetDeviceCaps
GDI32.dll	305	SelectObject
GDI32.dll	311	SetBkColor
GDI32.dll	312	SetBkMode
GDI32.dll	348	SetTextColor
KERNEL32.dll	83	CloseHandle
KERNEL32.dll	97	CompareFileTime
KERNEL32.dll	114	CopyFileA
KERNEL32.dll	126	CreateDirectoryA
KERNEL32.dll	139	CreateFileA
KERNEL32.dll	167	CreateProcessA
KERNEL32.dll	183	CreateThread
KERNEL32.dll	214	DeleteFileA
KERNEL32.dll	282	ExitProcess
KERNEL32.dll	285	ExpandEnvironmentStringsA
KERNEL32.dll	304	FindClose
KERNEL32.dll	308	FindFirstFileA
KERNEL32.dll	325	FindNextFileA
KERNEL32.dll	356	FreeLibrary
KERNEL32.dll	394	GetCommandLineA
KERNEL32.dll	452	GetCurrentProcess
KERNEL32.dll	464	GetDiskFreeSpaceA
KERNEL32.dll	482	GetExitCodeProcess
KERNEL32.dll	486	GetFileAttributesA
KERNEL32.dll	497	GetFileSize
KERNEL32.dll	505	GetFullPathNameA
KERNEL32.dll	515	GetLastError
KERNEL32.dll	531	GetModuleFileNameA
KERNEL32.dll	533	GetModuleHandleA
KERNEL32.dll	577	GetPrivateProfileStringA
KERNEL32.dll	581	GetProcAddress
KERNEL32.dll	610	GetShortPathNameA
KERNEL32.dll	625	GetSystemDirectoryA
KERNEL32.dll	645	GetTempFileNameA
KERNEL32.dll	647	GetTempPathA
KERNEL32.dll	663	GetTickCount
KERNEL32.dll	677	GetVersion
KERNEL32.dll	689	GetWindowsDirectoryA
KERNEL32.dll	695	GlobalAlloc
KERNEL32.dll	702	GlobalFree
KERNEL32.dll	706	GlobalLock
KERNEL32.dll	714	GlobalUnlock
KERNEL32.dll	809	LoadLibraryA
KERNEL32.dll	810	LoadLibraryExA
KERNEL32.dll	844	MoveFileA
KERNEL32.dll	852	MulDiv
KERNEL32.dll	853	MultiByteToWideChar
KERNEL32.dll	941	ReadFile
KERNEL32.dll	964	RemoveDirectoryA
KERNEL32.dll	991	SearchPathA
KERNEL32.dll	1040	SetCurrentDirectoryA
KERNEL32.dll	1052	SetErrorMode
KERNEL32.dll	1057	SetFileAttributesA
KERNEL32.dll	1065	SetFilePointer
KERNEL32.dll	1069	SetFileTime
KERNEL32.dll	1140	Sleep
KERNEL32.dll	1218	WaitForSingleObject
KERNEL32.dll	1262	WriteFile
KERNEL32.dll	1268	WritePrivateProfileStringA
KERNEL32.dll	1289	lstrcatA
KERNEL32.dll	1292	lstrcmpA
KERNEL32.dll	1295	lstrcmpiA
KERNEL32.dll	1301	lstrcpynA
KERNEL32.dll	1304	lstrlenA
ole32.dll	16	CoCreateInstance
ole32.dll	106	CoTaskMemFree
ole32.dll	248	OleInitialize
ole32.dll	271	OleUninitialize
SHELL32.dll	125	SHBrowseForFolderA
SHELL32.dll	174	SHFileOperationA
SHELL32.dll	191	SHGetFileInfoA
SHELL32.dll	216	SHGetPathFromIDListA
SHELL32.dll	226	SHGetSpecialFolderLocation
SHELL32.dll	302	ShellExecuteA
USER32.dll	6	AppendMenuA
USER32.dll	11	BeginPaint
USER32.dll	24	CallWindowProcA
USER32.dll	39	CharNextA
USER32.dll	42	CharPrevA
USER32.dll	53	CheckDlgButton
USER32.dll	61	CloseClipboard
USER32.dll	81	CreateDialogParamA
USER32.dll	90	CreatePopupMenu
USER32.dll	91	CreateWindowExA
USER32.dll	135	DefWindowProcA
USER32.dll	145	DestroyWindow
USER32.dll	148	DialogBoxParamA
USER32.dll	150	DispatchMessageA
USER32.dll	173	DrawTextA
USER32.dll	178	EmptyClipboard
USER32.dll	179	EnableMenuItem
USER32.dll	181	EnableWindow
USER32.dll	183	EndDialog
USER32.dll	185	EndPaint
USER32.dll	209	ExitWindowsEx
USER32.dll	210	FillRect
USER32.dll	212	FindWindowExA
USER32.dll	228	GetClassInfoA
USER32.dll	237	GetClientRect
USER32.dll	249	GetDC
USER32.dll	254	GetDlgItem
USER32.dll	256	GetDlgItemTextA
USER32.dll	299	GetMessagePos
USER32.dll	327	GetSysColor
USER32.dll	329	GetSystemMenu
USER32.dll	330	GetSystemMetrics
USER32.dll	346	GetWindowLongA
USER32.dll	352	GetWindowRect
USER32.dll	374	InvalidateRect
USER32.dll	398	IsWindow
USER32.dll	399	IsWindowEnabled
USER32.dll	401	IsWindowVisible
USER32.dll	407	LoadBitmapA
USER32.dll	409	LoadCursorA
USER32.dll	415	LoadImageA
USER32.dll	441	MessageBoxIndirectA
USER32.dll	459	OpenClipboard
USER32.dll	468	PeekMessageA
USER32.dll	472	PostQuitMessage
USER32.dll	483	RegisterClassA
USER32.dll	504	ScreenToClient
USER32.dll	512	SendMessageA
USER32.dll	515	SendMessageTimeoutA
USER32.dll	524	SetClassLongA
USER32.dll	527	SetClipboardData
USER32.dll	529	SetCursor
USER32.dll	534	SetDlgItemTextA
USER32.dll	538	SetForegroundWindow
USER32.dll	568	SetTimer
USER32.dll	574	SetWindowLongA
USER32.dll	577	SetWindowPos
USER32.dll	579	SetWindowTextA
USER32.dll	590	ShowWindow
USER32.dll	596	SystemParametersInfoA
USER32.dll	607	TrackPopupMenu
USER32.dll	644	wsprintfA
VERSION.dll		GetFileVersionInfoA
VERSION.dll	1	GetFileVersionInfoSizeA
VERSION.dll	10	VerQueryValueA

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./OU=http:\/\/certs.godaddy.com\/repository\//CN=Go Daddy Secure Certificate Authority - G2

serial: ADB434A2E8564782

Certificates (5)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ad:b4:34:a2:e8:56:47:82
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., OU=http:\/\/certs.godaddy.com\/repository\/, CN=Go Daddy Secure Certificate Authority - G2
        Validity
            Not Before: Aug 21 15:29:38 2015 GMT
            Not After : Jun 11 22:24:51 2016 GMT
        Subject: C=US, ST=California, L=Los Angeles, O=Brave New Software Project, Inc., CN=Brave New Software Project, Inc.
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c5:e4:5e:67:45:47:0d:0f:bf:5d:81:07:84:5a:
                    b4:92:b4:fe:6b:ff:bf:9a:58:42:92:02:7f:eb:4e:
                    4a:98:f5:ea:06:ff:2a:a3:97:f5:88:ae:82:f9:34:
                    3c:ef:6e:b8:27:86:7d:cb:0d:2d:47:07:1d:63:5f:
                    e8:7e:91:fb:4f:2c:2a:de:90:4e:81:fa:e7:9c:ff:
                    60:16:da:ae:43:fb:60:cd:59:28:ad:0d:0b:e7:5c:
                    3d:1c:b6:77:70:28:e9:68:ba:68:7c:86:b3:b6:06:
                    c2:23:3b:02:4f:a9:15:37:1e:92:77:fe:0a:05:2b:
                    93:86:13:04:9c:fe:69:bb:95:b1:af:8f:e5:ba:32:
                    29:4d:e5:44:5f:39:63:40:cc:6a:5f:ee:7c:21:27:
                    97:63:1e:92:c4:b5:f1:e5:58:23:d4:80:7a:34:9c:
                    23:83:ba:f8:37:38:3f:cd:41:f4:66:40:96:8f:7a:
                    c3:5a:8e:a2:b4:8a:1e:a3:ad:68:fa:13:d0:02:31:
                    f6:dd:30:8a:3a:7f:12:b1:a7:a3:a1:cc:a0:0a:b7:
                    0e:73:b6:aa:7c:6b:95:33:71:ee:1f:1b:57:b2:36:
                    0f:a8:93:15:1e:25:ca:a2:c8:bd:1d:c1:e8:e4:10:
                    02:3d:3d:05:92:b6:48:c3:3d:e4:e9:5c:b5:87:b9:
                    c1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.godaddy.com/gdig2s5-0.crl
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.114413.1.7.23.2
                  CPS: http://certificates.godaddy.com/repository/
            Authority Information Access: 
                OCSP - URI:http://ocsp.godaddy.com/
                CA Issuers - URI:http://certificates.godaddy.com/repository/gdig2.crt
            X509v3 Authority Key Identifier: 
                40:C2:BD:27:8E:CC:34:83:30:A2:33:D7:FB:6C:B3:F0:B4:2C:80:CE
            X509v3 Subject Key Identifier: 
                CE:40:53:CF:DC:8F:16:68:D4:05:43:8D:08:1D:33:E7:57:B5:46:D4
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        99:ec:4a:26:98:8e:11:8d:24:55:de:61:eb:23:e2:6c:13:90:
        7a:fd:a7:29:6c:90:18:89:44:dd:7d:56:0a:9c:6e:c0:6f:9c:
        52:ab:52:b4:8c:68:8b:89:67:da:bb:86:35:9e:84:48:25:78:
        8f:91:b1:f7:76:0b:40:4d:74:59:5e:5b:d4:07:2e:08:12:42:
        d0:17:4a:fd:98:64:3a:a7:e6:4e:62:a6:45:70:9a:8c:d7:8d:
        69:4a:f5:b4:7d:bd:a5:30:42:41:ce:be:37:4a:0b:44:bc:c9:
        54:d4:64:45:19:2d:69:6d:ff:c9:80:ce:52:bb:08:5b:31:82:
        83:1e:2e:67:7b:ae:7f:dc:7f:8e:b4:73:f0:50:66:be:4e:34:
        9b:36:20:8d:35:47:15:00:a6:86:18:c2:82:d7:97:9a:18:b1:
        7c:1e:2b:7f:e6:94:c2:2e:5d:00:9e:7b:a3:0e:b5:a8:fa:9e:
        89:83:7a:89:39:89:45:c2:d9:6d:c0:68:65:71:dc:cb:ac:f6:
        dc:b8:c9:74:91:a9:fb:0f:44:cc:e6:5b:29:3d:90:08:b5:49:
        ef:3f:3e:91:8d:81:84:a7:81:8e:8f:a0:ae:66:53:91:3f:ec:
        43:48:73:40:50:17:73:70:f8:31:09:de:fc:de:1b:fb:98:19:
        3c:14:e6:5e

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., CN=Go Daddy Root Certificate Authority - G2
        Validity
            Not Before: May  3 07:00:00 2011 GMT
            Not After : May  3 07:00:00 2031 GMT
        Subject: C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., OU=http:\/\/certs.godaddy.com\/repository\/, CN=Go Daddy Secure Certificate Authority - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b9:e0:cb:10:d4:af:76:bd:d4:93:62:eb:30:64:
                    b8:81:08:6c:c3:04:d9:62:17:8e:2f:ff:3e:65:cf:
                    8f:ce:62:e6:3c:52:1c:da:16:45:4b:55:ab:78:6b:
                    63:83:62:90:ce:0f:69:6c:99:c8:1a:14:8b:4c:cc:
                    45:33:ea:88:dc:9e:a3:af:2b:fe:80:61:9d:79:57:
                    c4:cf:2e:f4:3f:30:3c:5d:47:fc:9a:16:bc:c3:37:
                    96:41:51:8e:11:4b:54:f8:28:be:d0:8c:be:f0:30:
                    38:1e:f3:b0:26:f8:66:47:63:6d:de:71:26:47:8f:
                    38:47:53:d1:46:1d:b4:e3:dc:00:ea:45:ac:bd:bc:
                    71:d9:aa:6f:00:db:db:cd:30:3a:79:4f:5f:4c:47:
                    f8:1d:ef:5b:c2:c4:9d:60:3b:b1:b2:43:91:d8:a4:
                    33:4e:ea:b3:d6:27:4f:ad:25:8a:a5:c6:f4:d5:d0:
                    a6:ae:74:05:64:57:88:b5:44:55:d4:2d:2a:3a:3e:
                    f8:b8:bd:e9:32:0a:02:94:64:c4:16:3a:50:f1:4a:
                    ae:e7:79:33:af:0c:20:07:7f:e8:df:04:39:c2:69:
                    02:6c:63:52:fa:77:c1:1b:c8:74:87:c8:b9:93:18:
                    50:54:35:4b:69:4e:bc:3b:d3:49:2e:1f:dc:c1:d2:
                    52:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier: 
                40:C2:BD:27:8E:CC:34:83:30:A2:33:D7:FB:6C:B3:F0:B4:2C:80:CE
            X509v3 Authority Key Identifier: 
                3A:9A:85:07:10:67:28:B6:EF:F6:BD:05:41:6E:20:C1:94:DA:0F:DE
            Authority Information Access: 
                OCSP - URI:http://ocsp.godaddy.com/
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.godaddy.com/gdroot-g2.crl
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: https://certs.godaddy.com/repository/
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        08:7e:6c:93:10:c8:38:b8:96:a9:90:4b:ff:a1:5f:4f:04:ef:
        6c:3e:9c:88:06:c9:50:8f:a6:73:f7:57:31:1b:be:bc:e4:2f:
        db:f8:ba:d3:5b:e0:b4:e7:e6:79:62:0e:0c:a2:d7:6a:63:73:
        31:b5:f5:a8:48:a4:3b:08:2d:a2:5d:90:d7:b4:7c:25:4f:11:
        56:30:c4:b6:44:9d:7b:2c:9d:e5:5e:e6:ef:0c:61:aa:bf:e4:
        2a:1b:ee:84:9e:b8:83:7d:c1:43:ce:44:a7:13:70:0d:91:1f:
        f4:c8:13:ad:83:60:d9:d8:72:a8:73:24:1e:b5:ac:22:0e:ca:
        17:89:62:58:44:1b:ab:89:25:01:00:0f:cd:c4:1b:62:db:51:
        b4:d3:0f:51:2a:9b:f4:bc:73:fc:76:ce:36:a4:cd:d9:d8:2c:
        ea:ae:9b:f5:2a:b2:90:d1:4d:75:18:8a:3f:8a:41:90:23:7d:
        5b:4b:fe:a4:03:58:9b:46:b2:c3:60:60:83:f8:7d:50:41:ce:
        c2:a1:90:c3:bb:ef:02:2f:d2:15:54:ee:44:15:d9:0a:ae:a7:
        8a:33:ed:b1:2d:76:36:26:dc:04:eb:9f:f7:61:1f:15:dc:87:
        6f:ee:46:96:28:ad:a1:26:7d:0a:09:a7:2e:04:a3:8d:bc:f8:
        bc:04:30:01

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1828629 (0x1be715)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=The Go Daddy Group, Inc., OU=Go Daddy Class 2 Certification Authority
        Validity
            Not Before: Jan  1 07:00:00 2014 GMT
            Not After : May 30 07:00:00 2031 GMT
        Subject: C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., CN=Go Daddy Root Certificate Authority - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:bf:71:62:08:f1:fa:59:34:f7:1b:c9:18:a3:f7:
                    80:49:58:e9:22:83:13:a6:c5:20:43:01:3b:84:f1:
                    e6:85:49:9f:27:ea:f6:84:1b:4e:a0:b4:db:70:98:
                    c7:32:01:b1:05:3e:07:4e:ee:f4:fa:4f:2f:59:30:
                    22:e7:ab:19:56:6b:e2:80:07:fc:f3:16:75:80:39:
                    51:7b:e5:f9:35:b6:74:4e:a9:8d:82:13:e4:b6:3f:
                    a9:03:83:fa:a2:be:8a:15:6a:7f:de:0b:c3:b6:19:
                    14:05:ca:ea:c3:a8:04:94:3b:46:7c:32:0d:f3:00:
                    66:22:c8:8d:69:6d:36:8c:11:18:b7:d3:b2:1c:60:
                    b4:38:fa:02:8c:ce:d3:dd:46:07:de:0a:3e:eb:5d:
                    7c:c8:7c:fb:b0:2b:53:a4:92:62:69:51:25:05:61:
                    1a:44:81:8c:2c:a9:43:96:23:df:ac:3a:81:9a:0e:
                    29:c5:1c:a9:e9:5d:1e:b6:9e:9e:30:0a:39:ce:f1:
                    88:80:fb:4b:5d:cc:32:ec:85:62:43:25:34:02:56:
                    27:01:91:b4:3b:70:2a:3f:6e:b1:e8:9c:88:01:7d:
                    9f:d4:f9:db:53:6d:60:9d:bf:2c:e7:58:ab:b8:5f:
                    46:fc:ce:c4:1b:03:3c:09:eb:49:31:5c:69:46:b3:
                    e0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier: 
                3A:9A:85:07:10:67:28:B6:EF:F6:BD:05:41:6E:20:C1:94:DA:0F:DE
            X509v3 Authority Key Identifier: 
                D2:C4:B0:D2:91:D4:4C:11:71:B3:61:CB:3D:A1:FE:DD:A8:6A:D4:E3
            Authority Information Access: 
                OCSP - URI:http://ocsp.godaddy.com/
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.godaddy.com/gdroot.crl
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: https://certs.godaddy.com/repository/
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        59:0b:53:bd:92:86:11:a7:24:7b:ed:5b:31:cf:1d:1f:6c:70:
        c5:b8:6e:be:4e:bb:f6:be:97:50:e1:30:7f:ba:28:5c:62:94:
        c2:e3:7e:33:f7:fb:42:76:85:db:95:1c:8c:22:58:75:09:0c:
        88:65:67:39:0a:16:09:c5:a0:38:97:a4:c5:23:93:3f:b4:18:
        a6:01:06:44:91:e3:a7:69:27:b4:5a:25:7f:3a:b7:32:cd:dd:
        84:ff:2a:38:29:33:a4:dd:67:b2:85:fe:a1:88:20:1c:50:89:
        c8:dc:2a:f6:42:03:37:4c:e6:88:df:d5:af:24:f2:b1:c3:df:
        cc:b5:ec:e0:99:5e:b7:49:54:20:3c:94:18:0c:c7:1c:52:18:
        49:a4:6d:e1:b3:58:0b:c9:d8:ec:d9:ae:1c:32:8e:28:70:0d:
        e2:fe:a6:17:9e:84:0f:bd:57:70:b3:5a:e9:1f:a0:86:53:bb:
        ef:7c:ff:69:0b:e0:48:c3:b7:93:0b:c8:0a:54:c4:ac:5d:14:
        67:37:6c:ca:a5:2f:31:08:37:aa:6e:6f:8c:bc:9b:e2:57:5d:
        24:81:af:97:97:9c:84:ad:6c:ac:37:4c:66:f3:61:91:11:20:
        e4:be:30:9f:7a:a4:29:09:b0:e1:34:5f:64:77:18:40:51:df:
        8c:30:a6:af

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Validity
            Not Before: Oct 18 00:00:00 2012 GMT
            Not After : Dec 29 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer - G4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a2:63:0b:39:44:b8:bb:23:a7:44:49:bb:0e:ff:
                    a1:f0:61:0a:53:93:b0:98:db:ad:2c:0f:4a:c5:6e:
                    ff:86:3c:53:55:0f:15:ce:04:3f:2b:fd:a9:96:96:
                    d9:be:61:79:0b:5b:c9:4c:86:76:e5:e0:43:4b:22:
                    95:ee:c2:2b:43:c1:9f:d8:68:b4:8e:40:4f:ee:85:
                    38:b9:11:c5:23:f2:64:58:f0:15:32:6f:4e:57:a1:
                    ae:88:a4:02:d7:2a:1e:cd:4b:e1:dd:63:d5:17:89:
                    32:5b:b0:5e:99:5a:a8:9d:28:50:0e:17:ee:96:db:
                    61:3b:45:51:1d:cf:12:56:0b:92:47:fc:ab:ae:f6:
                    66:3d:47:ac:70:72:e7:92:e7:5f:cd:10:b9:c4:83:
                    64:94:19:bd:25:80:e1:e8:d2:22:a5:d0:ba:02:7a:
                    a1:77:93:5b:65:c3:ee:17:74:bc:41:86:2a:dc:08:
                    4c:8c:92:8c:91:2d:9e:77:44:1f:68:d6:a8:74:77:
                    db:0e:5b:32:8b:56:8b:33:bd:d9:63:c8:49:9d:3a:
                    c5:c5:ea:33:0b:d2:f1:a3:1b:f4:8b:be:d9:b3:57:
                    8b:3b:de:04:a7:7a:22:b2:24:ae:2e:c7:70:c5:be:
                    4e:83:26:08:fb:0b:bd:a9:4f:99:08:e1:10:28:72:
                    aa:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                OCSP - URI:http://ts-ocsp.ws.symantec.com
                CA Issuers - URI:http://ts-aia.ws.symantec.com/tss-ca-g2.cer
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://ts-crl.ws.symantec.com/tss-ca-g2.crl
            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-2
            X509v3 Subject Key Identifier: 
                46:C6:69:A3:0E:4A:14:1E:D5:4C:DA:52:63:17:3F:5E:36:BC:0D:E6
            X509v3 Authority Key Identifier: 
                5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        78:3b:b4:91:2a:00:4c:f0:8f:62:30:37:78:a3:84:27:07:6f:
        18:b2:de:25:dc:a0:d4:94:03:aa:86:4e:25:9f:9a:40:03:1c:
        dd:ce:e3:79:cb:21:68:06:da:b6:32:b4:6d:bf:f4:2c:26:63:
        33:e4:49:64:6d:0d:e6:c3:67:0e:f7:05:a4:35:6c:7c:89:16:
        c6:e9:b2:df:b2:e9:dd:20:c6:71:0f:cd:95:74:dc:b6:5c:de:
        bd:37:1f:43:78:e6:78:b5:cd:28:04:20:a3:aa:f1:4b:c4:88:
        29:91:0e:80:d1:11:fc:dd:5c:76:6e:4f:5e:0e:45:46:41:6e:
        0d:b0:ea:38:9a:b1:3a:da:09:71:10:fc:1c:79:b4:80:7b:ac:
        69:f4:fd:9c:b6:0c:16:2b:f1:7f:5b:09:3d:9b:5b:e2:16:ca:
        13:81:6d:00:2e:38:0d:a8:29:8f:2c:e1:b2:f4:5a:a9:01:af:
        15:9c:2c:2f:49:1b:db:22:bb:c3:fe:78:94:51:c3:86:b1:82:
        88:5d:f0:3d:b4:51:a1:79:33:2b:2e:7b:b9:dc:20:09:13:71:
        eb:6a:19:5b:cf:e8:a5:30:57:2c:89:49:3f:b9:cf:7f:c9:bf:
        3e:22:68:63:53:9a:bd:69:74:ac:c5:1d:3c:7f:92:e0:c3:bc:
        1c:d8:04:75

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
        Validity
            Not Before: Dec 21 00:00:00 2012 GMT
            Not After : Dec 30 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:b3:49:54:4b:97:1c:12:0a:d8:25:79:91:
                    22:57:2a:6f:dc:b8:26:c4:43:73:6b:c2:bf:2e:50:
                    5a:fb:14:c2:76:8e:43:01:25:43:b4:a1:e2:45:f4:
                    e8:b7:7b:c3:74:cc:22:d7:b4:94:00:02:f7:4d:ed:
                    bf:b4:b7:44:24:6b:cd:5f:45:3b:d1:44:ce:43:12:
                    73:17:82:8b:69:b4:2b:cb:99:1e:ac:72:1b:26:4d:
                    71:1f:b1:31:dd:fb:51:61:02:53:a6:aa:f5:49:2c:
                    05:78:45:a5:2f:89:ce:e7:99:e7:fe:8c:e2:57:3f:
                    3d:c6:92:dc:4a:f8:7b:33:e4:79:0a:fb:f0:75:88:
                    41:9c:ff:c5:03:51:99:aa:d7:6c:9f:93:69:87:65:
                    29:83:85:c2:60:14:c4:c8:c9:3b:14:da:c0:81:f0:
                    1f:0d:74:de:92:22:ab:ca:f7:fb:74:7c:27:e6:f7:
                    4a:1b:7f:a7:c3:9e:2d:ae:8a:ea:a6:e6:aa:27:16:
                    7d:61:f7:98:71:11:bc:e2:50:a1:4b:e5:5d:fa:e5:
                    0e:a7:2c:9f:aa:65:20:d3:d8:96:e8:c8:7c:a5:4e:
                    48:44:ff:19:e2:44:07:92:0b:d7:68:84:80:5d:6a:
                    78:64:45:cd:60:46:7e:54:c1:13:7c:c5:79:f1:c9:
                    c1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD
            Authority Information Access: 
                OCSP - URI:http://ocsp.thawte.com
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.thawte.com/ThawteTimestampingCA.crl
            X509v3 Extended Key Usage: 
                Time Stamping
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-1
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        03:09:9b:8f:79:ef:7f:59:30:aa:ef:68:b5:fa:e3:09:1d:bb:
        4f:82:06:5d:37:5f:a6:52:9f:16:8d:ea:1c:92:09:44:6e:f5:
        6d:eb:58:7c:30:e8:f9:69:8d:23:73:0b:12:6f:47:a9:ae:39:
        11:f8:2a:b1:9b:b0:1a:c3:8e:eb:59:96:00:ad:ce:0c:4d:b2:
        d0:31:a6:08:5c:2a:7a:fc:e2:7a:1d:57:4c:a8:65:18:e9:79:
        40:62:25:96:6e:c7:c7:37:6a:83:21:08:8e:41:ea:dd:d9:57:
        3f:1d:77:49:87:2a:16:06:5e:a6:38:6a:22:12:a3:51:19:83:
        7e:b6

pkcs7-signedData

SHA1: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15

00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |

SHA1

f6 e3 dd ad ad dc d6 85 de b0 46 96 c0 94 76 49 |..........F...vI| c8 36 18 cc |.6.. |

Certificates
- Certificate #0
  - 2
    - AD:B4:34:A2:E8:56:47:82
    - RSA-SHA256: nil
    - Issuer
      - C: US
      - ST: Arizona
      - L: Scottsdale
      - O: GoDaddy.com, Inc.
      - OU: http://certs.godaddy.com/repository/
      - CN: Go Daddy Secure Certificate Authority - G2
    - 2015-08-21 15:29:38 UTC: 2016-06-11 22:24:51 UTC
    - Subject
      - C: US
      - ST: California
      - L: Los Angeles
      - O: Brave New Software Project, Inc.
      - CN: Brave New Software Project, Inc.
    - #5
      - rsaEncryption: nil
      - C5:E4:5E:67:45:47:0D:0F:BF:5D:81:07:84:5A:B4:92:
        B4:FE:6B:FF:BF:9A:58:42:92:02:7F:EB:4E:4A:98:F5:
        EA:06:FF:2A:A3:97:F5:88:AE:82:F9:34:3C:EF:6E:B8:
        27:86:7D:CB:0D:2D:47:07:1D:63:5F:E8:7E:91:FB:4F:
        2C:2A:DE:90:4E:81:FA:E7:9C:FF:60:16:DA:AE:43:FB:
        60:CD:59:28:AD:0D:0B:E7:5C:3D:1C:B6:77:70:28:E9:
        68:BA:68:7C:86:B3:B6:06:C2:23:3B:02:4F:A9:15:37:
        1E:92:77:FE:0A:05:2B:93:86:13:04:9C:FE:69:BB:95:
        B1:AF:8F:E5:BA:32:29:4D:E5:44:5F:39:63:40:CC:6A:
        5F:EE:7C:21:27:97:63:1E:92:C4:B5:F1:E5:58:23:D4:
        80:7A:34:9C:23:83:BA:F8:37:38:3F:CD:41:F4:66:40:
        96:8F:7A:C3:5A:8E:A2:B4:8A:1E:A3:AD:68:FA:13:D0:
        02:31:F6:DD:30:8A:3A:7F:12:B1:A7:A3:A1:CC:A0:0A:
        B7:0E:73:B6:AA:7C:6B:95:33:71:EE:1F:1B:57:B2:36:
        0F:A8:93:15:1E:25:CA:A2:C8:BD:1D:C1:E8:E4:10:02:
        3D:3D:05:92:B6:48:C3:3D:E4:E9:5C:B5:87:B9:C1:1D: 0x010001
    - X509v3 extensions
      - basicConstraints
        true
        nil
      - extendedKeyUsage: codeSigning
      - keyUsage: true, 0x80
      - crlDistributionPoints: http://crl.godaddy.com/gdig2s5-0.crl
      - certificatePolicies
        2.16.840.1.114413.1.7.23.2
        id-qt-cps: http://certificates.godaddy.com/repository/
      - authorityInfoAccess
        #0
        OCSP: http://ocsp.godaddy.com/
        caIssuers: http://certificates.godaddy.com/repository/gdig2.crt
      - authorityKeyIdentifier:
        40 c2 bd 27 8e cc 34 83 30 a2 33 d7 fb 6c b3 f0 |@..'..4.0.3..l..| b4 2c 80 ce |.,.. |
      - subjectKeyIdentifier:
        ce 40 53 cf dc 8f 16 68 d4 05 43 8d 08 1d 33 e7 |.@S....h..C...3.| 57 b5 46 d4 |W.F. |
  - RSA-SHA256:
```
99 ec 4a 26 98 8e 11 8d  24 55 de 61 eb 23 e2 6c  |..J&....$U.a.#.l|
13 90 7a fd a7 29 6c 90  18 89 44 dd 7d 56 0a 9c  |..z..)l...D.}V..|
6e c0 6f 9c 52 ab 52 b4  8c 68 8b 89 67 da bb 86  |n.o.R.R..h..g...|
35 9e 84 48 25 78 8f 91  b1 f7 76 0b 40 4d 74 59  |5..H%x....v.@MtY|
5e 5b d4 07 2e 08 12 42  d0 17 4a fd 98 64 3a a7  |^[.....B..J..d:.|
e6 4e 62 a6 45 70 9a 8c  d7 8d 69 4a f5 b4 7d bd  |.Nb.Ep....iJ..}.|
a5 30 42 41 ce be 37 4a  0b 44 bc c9 54 d4 64 45  |.0BA..7J.D..T.dE|
19 2d 69 6d ff c9 80 ce  52 bb 08 5b 31 82 83 1e  |.-im....R..[1...|
2e 67 7b ae 7f dc 7f 8e  b4 73 f0 50 66 be 4e 34  |.g{......s.Pf.N4|
9b 36 20 8d 35 47 15 00  a6 86 18 c2 82 d7 97 9a  |.6 .5G..........|
18 b1 7c 1e 2b 7f e6 94  c2 2e 5d 00 9e 7b a3 0e  |..|.+.....]..{..|
b5 a8 fa 9e 89 83 7a 89  39 89 45 c2 d9 6d c0 68  |......z.9.E..m.h|
65 71 dc cb ac f6 dc b8  c9 74 91 a9 fb 0f 44 cc  |eq.......t....D.|
e6 5b 29 3d 90 08 b5 49  ef 3f 3e 91 8d 81 84 a7  |.[)=...I.?>.....|
81 8e 8f a0 ae 66 53 91  3f ec 43 48 73 40 50 17  |.....fS.?.CHs@P.|
73 70 f8 31 09 de fc de  1b fb 98 19 3c 14 e6 5e  |sp.1........<..^|
```
- Certificate #1
  - 2
    - 7
    - RSA-SHA256: nil
    - Issuer
      - C: US
      - ST: Arizona
      - L: Scottsdale
      - O: GoDaddy.com, Inc.
      - CN: Go Daddy Root Certificate Authority - G2
    - 2011-05-03 07:00:00 UTC: 2031-05-03 07:00:00 UTC
    - Subject
      - C: US
      - ST: Arizona
      - L: Scottsdale
      - O: GoDaddy.com, Inc.
      - OU: http://certs.godaddy.com/repository/
      - CN: Go Daddy Secure Certificate Authority - G2
    - #5
      - rsaEncryption: nil
      - B9:E0:CB:10:D4:AF:76:BD:D4:93:62:EB:30:64:B8:81:
        08:6C:C3:04:D9:62:17:8E:2F:FF:3E:65:CF:8F:CE:62:
        E6:3C:52:1C:DA:16:45:4B:55:AB:78:6B:63:83:62:90:
        CE:0F:69:6C:99:C8:1A:14:8B:4C:CC:45:33:EA:88:DC:
        9E:A3:AF:2B:FE:80:61:9D:79:57:C4:CF:2E:F4:3F:30:
        3C:5D:47:FC:9A:16:BC:C3:37:96:41:51:8E:11:4B:54:
        F8:28:BE:D0:8C:BE:F0:30:38:1E:F3:B0:26:F8:66:47:
        63:6D:DE:71:26:47:8F:38:47:53:D1:46:1D:B4:E3:DC:
        00:EA:45:AC:BD:BC:71:D9:AA:6F:00:DB:DB:CD:30:3A:
        79:4F:5F:4C:47:F8:1D:EF:5B:C2:C4:9D:60:3B:B1:B2:
        43:91:D8:A4:33:4E:EA:B3:D6:27:4F:AD:25:8A:A5:C6:
        F4:D5:D0:A6:AE:74:05:64:57:88:B5:44:55:D4:2D:2A:
        3A:3E:F8:B8:BD:E9:32:0A:02:94:64:C4:16:3A:50:F1:
        4A:AE:E7:79:33:AF:0C:20:07:7F:E8:DF:04:39:C2:69:
        02:6C:63:52:FA:77:C1:1B:C8:74:87:C8:B9:93:18:50:
        54:35:4B:69:4E:BC:3B:D3:49:2E:1F:DC:C1:D2:52:FB: 0x010001
    - X509v3 extensions
      - basicConstraints: true, true
      - keyUsage: true, 6
      - subjectKeyIdentifier:
        40 c2 bd 27 8e cc 34 83 30 a2 33 d7 fb 6c b3 f0 |@..'..4.0.3..l..| b4 2c 80 ce |.,.. |
      - authorityKeyIdentifier:
        3a 9a 85 07 10 67 28 b6 ef f6 bd 05 41 6e 20 c1 |:....g(.....An .| 94 da 0f de |.... |
      - authorityInfoAccess
        OCSP: http://ocsp.godaddy.com/
      - crlDistributionPoints: http://crl.godaddy.com/gdroot-g2.crl
      - certificatePolicies
        anyPolicy
        id-qt-cps: https://certs.godaddy.com/repository/
  - RSA-SHA256:
```
08 7e 6c 93 10 c8 38 b8  96 a9 90 4b ff a1 5f 4f  |.~l...8....K.._O|
04 ef 6c 3e 9c 88 06 c9  50 8f a6 73 f7 57 31 1b  |..l>....P..s.W1.|
be bc e4 2f db f8 ba d3  5b e0 b4 e7 e6 79 62 0e  |.../....[....yb.|
0c a2 d7 6a 63 73 31 b5  f5 a8 48 a4 3b 08 2d a2  |...jcs1...H.;.-.|
5d 90 d7 b4 7c 25 4f 11  56 30 c4 b6 44 9d 7b 2c  |]...|%O.V0..D.{,|
9d e5 5e e6 ef 0c 61 aa  bf e4 2a 1b ee 84 9e b8  |..^...a...*.....|
83 7d c1 43 ce 44 a7 13  70 0d 91 1f f4 c8 13 ad  |.}.C.D..p.......|
83 60 d9 d8 72 a8 73 24  1e b5 ac 22 0e ca 17 89  |.`..r.s$..."....|
62 58 44 1b ab 89 25 01  00 0f cd c4 1b 62 db 51  |bXD...%......b.Q|
b4 d3 0f 51 2a 9b f4 bc  73 fc 76 ce 36 a4 cd d9  |...Q*...s.v.6...|
d8 2c ea ae 9b f5 2a b2  90 d1 4d 75 18 8a 3f 8a  |.,....*...Mu..?.|
41 90 23 7d 5b 4b fe a4  03 58 9b 46 b2 c3 60 60  |A.#}[K...X.F..``|
83 f8 7d 50 41 ce c2 a1  90 c3 bb ef 02 2f d2 15  |..}PA......../..|
54 ee 44 15 d9 0a ae a7  8a 33 ed b1 2d 76 36 26  |T.D......3..-v6&|
dc 04 eb 9f f7 61 1f 15  dc 87 6f ee 46 96 28 ad  |.....a....o.F.(.|
a1 26 7d 0a 09 a7 2e 04  a3 8d bc f8 bc 04 30 01  |.&}...........0.|
```
- Certificate #2
  - 2
    - 0x1BE715
    - RSA-SHA256: nil
    - Issuer
      - C: US
      - O: The Go Daddy Group, Inc.
      - OU: Go Daddy Class 2 Certification Authority
    - 2014-01-01 07:00:00 UTC: 2031-05-30 07:00:00 UTC
    - Subject
      - C: US
      - ST: Arizona
      - L: Scottsdale
      - O: GoDaddy.com, Inc.
      - CN: Go Daddy Root Certificate Authority - G2
    - #5
      - rsaEncryption: nil
      - BF:71:62:08:F1:FA:59:34:F7:1B:C9:18:A3:F7:80:49:
        58:E9:22:83:13:A6:C5:20:43:01:3B:84:F1:E6:85:49:
        9F:27:EA:F6:84:1B:4E:A0:B4:DB:70:98:C7:32:01:B1:
        05:3E:07:4E:EE:F4:FA:4F:2F:59:30:22:E7:AB:19:56:
        6B:E2:80:07:FC:F3:16:75:80:39:51:7B:E5:F9:35:B6:
        74:4E:A9:8D:82:13:E4:B6:3F:A9:03:83:FA:A2:BE:8A:
        15:6A:7F:DE:0B:C3:B6:19:14:05:CA:EA:C3:A8:04:94:
        3B:46:7C:32:0D:F3:00:66:22:C8:8D:69:6D:36:8C:11:
        18:B7:D3:B2:1C:60:B4:38:FA:02:8C:CE:D3:DD:46:07:
        DE:0A:3E:EB:5D:7C:C8:7C:FB:B0:2B:53:A4:92:62:69:
        51:25:05:61:1A:44:81:8C:2C:A9:43:96:23:DF:AC:3A:
        81:9A:0E:29:C5:1C:A9:E9:5D:1E:B6:9E:9E:30:0A:39:
        CE:F1:88:80:FB:4B:5D:CC:32:EC:85:62:43:25:34:02:
        56:27:01:91:B4:3B:70:2A:3F:6E:B1:E8:9C:88:01:7D:
        9F:D4:F9:DB:53:6D:60:9D:BF:2C:E7:58:AB:B8:5F:46:
        FC:CE:C4:1B:03:3C:09:EB:49:31:5C:69:46:B3:E0:47: 0x010001
    - X509v3 extensions
      - basicConstraints: true, true
      - keyUsage: true, 6
      - subjectKeyIdentifier:
        3a 9a 85 07 10 67 28 b6 ef f6 bd 05 41 6e 20 c1 |:....g(.....An .| 94 da 0f de |.... |
      - authorityKeyIdentifier:
        d2 c4 b0 d2 91 d4 4c 11 71 b3 61 cb 3d a1 fe dd |......L.q.a.=...| a8 6a d4 e3 |.j.. |
      - authorityInfoAccess
        OCSP: http://ocsp.godaddy.com/
      - crlDistributionPoints: http://crl.godaddy.com/gdroot.crl
      - certificatePolicies
        anyPolicy
        id-qt-cps: https://certs.godaddy.com/repository/
  - RSA-SHA256:
```
59 0b 53 bd 92 86 11 a7  24 7b ed 5b 31 cf 1d 1f  |Y.S.....${.[1...|
6c 70 c5 b8 6e be 4e bb  f6 be 97 50 e1 30 7f ba  |lp..n.N....P.0..|
28 5c 62 94 c2 e3 7e 33  f7 fb 42 76 85 db 95 1c  |(\b...~3..Bv....|
8c 22 58 75 09 0c 88 65  67 39 0a 16 09 c5 a0 38  |."Xu...eg9.....8|
97 a4 c5 23 93 3f b4 18  a6 01 06 44 91 e3 a7 69  |...#.?.....D...i|
27 b4 5a 25 7f 3a b7 32  cd dd 84 ff 2a 38 29 33  |'.Z%.:.2....*8)3|
a4 dd 67 b2 85 fe a1 88  20 1c 50 89 c8 dc 2a f6  |..g..... .P...*.|
42 03 37 4c e6 88 df d5  af 24 f2 b1 c3 df cc b5  |B.7L.....$......|
ec e0 99 5e b7 49 54 20  3c 94 18 0c c7 1c 52 18  |...^.IT <.....R.|
49 a4 6d e1 b3 58 0b c9  d8 ec d9 ae 1c 32 8e 28  |I.m..X.......2.(|
70 0d e2 fe a6 17 9e 84  0f bd 57 70 b3 5a e9 1f  |p.........Wp.Z..|
a0 86 53 bb ef 7c ff 69  0b e0 48 c3 b7 93 0b c8  |..S..|.i..H.....|
0a 54 c4 ac 5d 14 67 37  6c ca a5 2f 31 08 37 aa  |.T..].g7l../1.7.|
6e 6f 8c bc 9b e2 57 5d  24 81 af 97 97 9c 84 ad  |no....W]$.......|
6c ac 37 4c 66 f3 61 91  11 20 e4 be 30 9f 7a a4  |l.7Lf.a.. ..0.z.|
29 09 b0 e1 34 5f 64 77  18 40 51 df 8c 30 a6 af  |)...4_dw.@Q..0..|
```
- Certificate #3
  - 2
    - 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - O: Symantec Corporation
      - CN: Symantec Time Stamping Services CA - G2
    - 2012-10-18 00:00:00 UTC: 2020-12-29 23:59:59 UTC
    - Subject
      - C: US
      - O: Symantec Corporation
      - CN: Symantec Time Stamping Services Signer - G4
    - #5
      - rsaEncryption: nil
      - A2:63:0B:39:44:B8:BB:23:A7:44:49:BB:0E:FF:A1:F0:
        61:0A:53:93:B0:98:DB:AD:2C:0F:4A:C5:6E:FF:86:3C:
        53:55:0F:15:CE:04:3F:2B:FD:A9:96:96:D9:BE:61:79:
        0B:5B:C9:4C:86:76:E5:E0:43:4B:22:95:EE:C2:2B:43:
        C1:9F:D8:68:B4:8E:40:4F:EE:85:38:B9:11:C5:23:F2:
        64:58:F0:15:32:6F:4E:57:A1:AE:88:A4:02:D7:2A:1E:
        CD:4B:E1:DD:63:D5:17:89:32:5B:B0:5E:99:5A:A8:9D:
        28:50:0E:17:EE:96:DB:61:3B:45:51:1D:CF:12:56:0B:
        92:47:FC:AB:AE:F6:66:3D:47:AC:70:72:E7:92:E7:5F:
        CD:10:B9:C4:83:64:94:19:BD:25:80:E1:E8:D2:22:A5:
        D0:BA:02:7A:A1:77:93:5B:65:C3:EE:17:74:BC:41:86:
        2A:DC:08:4C:8C:92:8C:91:2D:9E:77:44:1F:68:D6:A8:
        74:77:DB:0E:5B:32:8B:56:8B:33:BD:D9:63:C8:49:9D:
        3A:C5:C5:EA:33:0B:D2:F1:A3:1B:F4:8B:BE:D9:B3:57:
        8B:3B:DE:04:A7:7A:22:B2:24:AE:2E:C7:70:C5:BE:4E:
        83:26:08:FB:0B:BD:A9:4F:99:08:E1:10:28:72:AA:CD: 0x010001
    - X509v3 extensions
      - basicConstraints
        true
        nil
      - extendedKeyUsage: true, timeStamping
      - keyUsage: true, 0x80
      - authorityInfoAccess
        #0
        OCSP: http://ts-ocsp.ws.symantec.com
        caIssuers: http://ts-aia.ws.symantec.com/tss-ca-g2.cer
      - crlDistributionPoints: http://ts-crl.ws.symantec.com/tss-ca-g2.crl
      - subjectAltName
        CN: TimeStamp-2048-2
      - subjectKeyIdentifier:
        46 c6 69 a3 0e 4a 14 1e d5 4c da 52 63 17 3f 5e |F.i..J...L.Rc.?^| 36 bc 0d e6 |6... |
      - authorityKeyIdentifier:
        5f 9a f5 6e 5c cc cc 74 9a d4 dd 7d ef 3f db ec |_..n\..t...}.?..| 4c 80 2e dd |L... |
  - RSA-SHA1:
```
78 3b b4 91 2a 00 4c f0  8f 62 30 37 78 a3 84 27  |x;..*.L..b07x..'|
07 6f 18 b2 de 25 dc a0  d4 94 03 aa 86 4e 25 9f  |.o...%.......N%.|
9a 40 03 1c dd ce e3 79  cb 21 68 06 da b6 32 b4  |.@.....y.!h...2.|
6d bf f4 2c 26 63 33 e4  49 64 6d 0d e6 c3 67 0e  |m..,&c3.Idm...g.|
f7 05 a4 35 6c 7c 89 16  c6 e9 b2 df b2 e9 dd 20  |...5l|......... |
c6 71 0f cd 95 74 dc b6  5c de bd 37 1f 43 78 e6  |.q...t..\..7.Cx.|
78 b5 cd 28 04 20 a3 aa  f1 4b c4 88 29 91 0e 80  |x..(. ...K..)...|
d1 11 fc dd 5c 76 6e 4f  5e 0e 45 46 41 6e 0d b0  |....\vnO^.EFAn..|
ea 38 9a b1 3a da 09 71  10 fc 1c 79 b4 80 7b ac  |.8..:..q...y..{.|
69 f4 fd 9c b6 0c 16 2b  f1 7f 5b 09 3d 9b 5b e2  |i......+..[.=.[.|
16 ca 13 81 6d 00 2e 38  0d a8 29 8f 2c e1 b2 f4  |....m..8..).,...|
5a a9 01 af 15 9c 2c 2f  49 1b db 22 bb c3 fe 78  |Z.....,/I.."...x|
94 51 c3 86 b1 82 88 5d  f0 3d b4 51 a1 79 33 2b  |.Q.....].=.Q.y3+|
2e 7b b9 dc 20 09 13 71  eb 6a 19 5b cf e8 a5 30  |.{.. ..q.j.[...0|
57 2c 89 49 3f b9 cf 7f  c9 bf 3e 22 68 63 53 9a  |W,.I?.....>"hcS.|
bd 69 74 ac c5 1d 3c 7f  92 e0 c3 bc 1c d8 04 75  |.it...<........u|
```
- Certificate #4
  - 2
    - 7E:93:EB:FB:7C:C6:4E:59:EA:4B:9A:77:D4:06:FC:3B
    - RSA-SHA1: nil
    - Issuer
      - C: ZA
      - ST: Western Cape
      - L: Durbanville
      - O: Thawte
      - OU: Thawte Certification
      - CN: Thawte Timestamping CA
    - 2012-12-21 00:00:00 UTC: 2020-12-30 23:59:59 UTC
    - Subject
      - C: US
      - O: Symantec Corporation
      - CN: Symantec Time Stamping Services CA - G2
    - #5
      - rsaEncryption: nil
      - B1:AC:B3:49:54:4B:97:1C:12:0A:D8:25:79:91:22:57:
        2A:6F:DC:B8:26:C4:43:73:6B:C2:BF:2E:50:5A:FB:14:
        C2:76:8E:43:01:25:43:B4:A1:E2:45:F4:E8:B7:7B:C3:
        74:CC:22:D7:B4:94:00:02:F7:4D:ED:BF:B4:B7:44:24:
        6B:CD:5F:45:3B:D1:44:CE:43:12:73:17:82:8B:69:B4:
        2B:CB:99:1E:AC:72:1B:26:4D:71:1F:B1:31:DD:FB:51:
        61:02:53:A6:AA:F5:49:2C:05:78:45:A5:2F:89:CE:E7:
        99:E7:FE:8C:E2:57:3F:3D:C6:92:DC:4A:F8:7B:33:E4:
        79:0A:FB:F0:75:88:41:9C:FF:C5:03:51:99:AA:D7:6C:
        9F:93:69:87:65:29:83:85:C2:60:14:C4:C8:C9:3B:14:
        DA:C0:81:F0:1F:0D:74:DE:92:22:AB:CA:F7:FB:74:7C:
        27:E6:F7:4A:1B:7F:A7:C3:9E:2D:AE:8A:EA:A6:E6:AA:
        27:16:7D:61:F7:98:71:11:BC:E2:50:A1:4B:E5:5D:FA:
        E5:0E:A7:2C:9F:AA:65:20:D3:D8:96:E8:C8:7C:A5:4E:
        48:44:FF:19:E2:44:07:92:0B:D7:68:84:80:5D:6A:78:
        64:45:CD:60:46:7E:54:C1:13:7C:C5:79:F1:C9:C1:71: 0x010001
    - #6
      - subjectKeyIdentifier:
        5f 9a f5 6e 5c cc cc 74 9a d4 dd 7d ef 3f db ec |_..n\..t...}.?..| 4c 80 2e dd |L... |
      - authorityInfoAccess
        OCSP: http://ocsp.thawte.com
      - basicConstraints
        true
        true: 0
      - crlDistributionPoints: http://crl.thawte.com/ThawteTimestampingCA.crl
      - extendedKeyUsage: timeStamping
      - keyUsage: true, 6
      - subjectAltName
        CN: TimeStamp-2048-1
  - RSA-SHA1:
```
03 09 9b 8f 79 ef 7f 59  30 aa ef 68 b5 fa e3 09  |....y..Y0..h....|
1d bb 4f 82 06 5d 37 5f  a6 52 9f 16 8d ea 1c 92  |..O..]7_.R......|
09 44 6e f5 6d eb 58 7c  30 e8 f9 69 8d 23 73 0b  |.Dn.m.X|0..i.#s.|
12 6f 47 a9 ae 39 11 f8  2a b1 9b b0 1a c3 8e eb  |.oG..9..*.......|
59 96 00 ad ce 0c 4d b2  d0 31 a6 08 5c 2a 7a fc  |Y.....M..1..\*z.|
e2 7a 1d 57 4c a8 65 18  e9 79 40 62 25 96 6e c7  |.z.WL.e..y@b%.n.|
c7 37 6a 83 21 08 8e 41  ea dd d9 57 3f 1d 77 49  |.7j.!..A...W?.wI|
87 2a 16 06 5e a6 38 6a  22 12 a3 51 19 83 7e b6  |.*..^.8j"..Q..~.|
```

Signer

1
unnamed
- #0
  - C: US
  - ST: Arizona
  - L: Scottsdale
  - O: GoDaddy.com, Inc.
  - OU: http://certs.godaddy.com/repository/
  - CN: Go Daddy Secure Certificate Authority - G2
- AD:B4:34:A2:E8:56:47:82
SHA1: nil
#3
- contentType: 1.3.6.1.4.1.311.2.1.4
- 1.3.6.1.4.1.311.2.1.12: Lantern
- signingTime: 2016-05-17 18:53:11 UTC
- 1.3.6.1.4.1.311.2.1.11: msCodeInd
- messageDigest:
```
03 46 3b 70 6e eb e4 06  42 17 90 34 91 38 58 1a  |.F;pn...B..4.8X.|
6a a8 c6 e6                                       |j...            |
```

rsaEncryption:

7c ed 59 e4 bd 3f ac 95  ad 02 7b a8 c6 9e 62 80  ||.Y..?....{...b.|
55 b0 df 26 75 79 d6 72  37 00 a7 77 4f bc 7c 57  |U..&uy.r7..wO.|W|
de 7a 9c 1b 94 9a 5b 2e  78 8c 31 df 48 12 cc f2  |.z....[.x.1.H...|
bc 31 4f dd 20 a2 3e c5  01 6d 1d 4d 26 56 bd e3  |.1O. .>..m.M&V..|
af 21 cf 86 49 ca 7a c1  72 10 58 4c 08 72 f8 68  |.!..I.z.r.XL.r.h|
80 d1 81 25 26 40 b9 29  05 32 9d 39 71 c2 f4 51  |...%&@.).2.9q..Q|
c7 0b 11 4e 7a ab 48 42  55 63 7e 8a 62 0a 38 ae  |...Nz.HBUc~.b.8.|
1e 77 aa f8 d3 ac 61 bd  b3 63 3e fc 7d f8 63 68  |.w....a..c>.}.ch|
a1 1a 18 6b cc c4 c6 d9  3b 04 07 03 61 43 06 a0  |...k....;...aC..|
1e fa 05 b6 8c e2 8a b2  de 06 4d f2 5f df d4 84  |..........M._...|
c6 60 50 97 c0 32 92 17  0b 6e 09 37 4d 41 81 92  |.`P..2...n.7MA..|
28 fd e6 8d f9 48 b8 e6  c5 15 70 cd a2 a4 f7 8f  |(....H....p.....|
69 4e 2f 4c 26 61 17 92  5b d2 01 d9 bd af b4 29  |iN/L&a..[......)|
82 df f4 5c ef f9 72 2a  d3 01 58 1d ad 8e 2b 0e  |...\..r*..X...+.|
a8 a9 54 87 4b 54 bf 85  9b 84 ff 17 d5 78 2d 54  |..T.KT.......x-T|
f6 50 0a fd 8d a3 a9 31  75 53 b6 21 19 95 d9 28  |.P.....1uS.!...(|

countersignature

unnamed
- #0
  - C: US
  - O: Symantec Corporation
  - CN: Symantec Time Stamping Services CA - G2
- 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
SHA1: nil

contentType: pkcs7-data
signingTime: 2016-05-17 18:53:12 UTC

messageDigest:

83 a7 d1 bc cf 76 72 89  37 f3 f7 b6 86 a8 86 2c  |.....vr.7......,|
5c 51 af f2                                       |\Q..            |

rsaEncryption:

86 b6 0b 13 b9 0d f7 61  e9 20 37 30 10 ae 6c 0c  |.......a. 70..l.|
31 c8 06 20 cf 65 1b f4  f4 61 29 ed 3a b3 af c5  |1.. .e...a).:...|
ce c8 f3 6a e2 51 17 54  62 ff 7d 45 32 09 37 df  |...j.Q.Tb.}E2.7.|
e9 3c 20 eb 9b 40 bc f3  c4 3a 3d 7e c2 31 72 22  |.< ..@...:=~.1r"|
b8 58 ad f0 c6 7a af ab  2d dd 11 05 d9 9f 44 26  |.X...z..-.....D&|
7a 25 98 dc a2 c8 1b f3  a2 ce 0a 94 f3 7a c2 40  |z%...........z.@|
45 52 0a d1 18 2c b4 ad  75 45 1d 22 be 9b de 7c  |ER...,..uE."...||
39 78 17 80 32 fc ff 84  49 48 92 2a 22 ef 04 88  |9x..2...IH.*"...|
b7 ee a7 5e 88 25 7b a2  e6 18 50 3e 4a c8 a4 b7  |...^.%{...P>J...|
43 6f fc c0 5c d2 f2 cf  7a 13 07 bb 5f 35 55 eb  |Co..\...z..._5U.|
3b 0a f3 43 f0 d5 4a 5e  3a c3 0a 25 f4 b0 f1 86  |;..C..J^:..%....|
87 31 42 24 29 00 84 8a  a9 a6 d7 7b e2 41 28 27  |.1B$)......{.A('|
fc 93 65 18 48 f7 23 6f  92 49 d9 79 6c fa fa 3b  |..e.H.#o.I.yl..;|
e9 82 db c2 74 69 37 1b  4d 2f 80 05 63 9f b5 ec  |....ti7.M/..c...|
ce 25 0d 20 40 20 82 19  46 38 aa db 84 ce 22 11  |.%. @ ..F8....".|
01 b2 86 0f d4 ad 70 55  60 36 59 6e 83 f0 e1 9c  |......pU`6Yn....|

show previews

offset	size	type	comment
0	119296	EXE	05/29/2015 13:16:07	#
15c1	15	HTM		#
1d200	5745888	BIN	overlay data past EOF	#

Scanning the drive for archives:
1 file, 5865184 bytes (5728 KiB)


--
Type = PE
Physical Size = 5865184
CPU = x86
Characteristics = Executable 32-bit NoRelocs NoLineNums NoLocalSyms NoDebugInfo
Created = 2015-05-29 13:16:07
Headers Size = 1024
Checksum = 5920677
Image Size = 704512
Section Alignment = 4096
File Alignment = 512
Code Size = 34816
Initialized Data Size = 46080
Uninitialized Data Size = 297984
Linker Version = 2.25
OS Version = 4.0
Image Version = 6.0
Subsystem Version = 4.0
Subsystem = Windows GUI
DLL Characteristics = TerminalServerAware
Stack Reserve = 2097152
Stack Commit = 4096
Heap Reserve = 1048576
Heap Commit = 4096
Image Base = 4194304
----
Path = [0]
Size = 5738608
Packed Size = 5738608
Virtual Size = 5738608
Offset = 119296
--
Path = [0]
Type = Nsis
Physical Size = 5738608
Method = Deflate
Solid = -
Headers Size = 24003
Embedded Stub Size = 0
SubType = NSIS-2

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
2016-05-17 18:53:06 .....                   5701494  lantern.exe
2016-01-25 20:02:34 .....                      7546  lantern.ico
2016-05-17 18:53:04 .....           12           12  .packaged-lantern.yaml
2016-05-17 18:53:04 .....            2            2  lantern.yaml
                    .....                      3460  $PLUGINSDIR/ShellExecAsUser.dll
                    .....                      9591  uninstall.exe.nsis
------------------- ----- ------------ ------------  ------------------------
2016-05-17 18:53:06                 14      5722105  6 files

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] ignoring invalid PEdump::BITMAPINFOHEADER