filenamePackageV.exe
size381968 (0x5d410)
md511033fe49e144984b82ae16ce1221cd0
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavW32S.Adware.RelevantKnowledge-2 FOUND
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xe8

Rich Header

lib idversiontimes used
1255072730
10950727171
9540352
93403517
10227
1105072797
124507271
120507271

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections4
TimeDateStamp0x4e53e054
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x103
Magic0x10b
LinkerVersion8.0
SizeOfCode0x32000
SizeOfInitializedData0x29000
SizeOfUninitializedData0
AddressOfEntryPoint0x1a567
BaseOfCode0x1000
BaseOfData0x33000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x1000
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x5e000
SizeOfHeaders0x1000
CheckSum0x5f299
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

namevavsizeraw sizeflags
.text0x10000x31c9e0x32000R-X CODE
.rdata0x330000xc0440xd000R-- IDATA
.data0x400000x45e40x3000RW- IDATA
.rsrc0x450000x187a80x19000R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x3e2780x8c
RESOURCE0x450000x187a8
EXCEPTION00
SECURITY0x5c0000x1410
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x3a5c00x40
Bound_IAT00
IAT0x330000x274
Delay_IAT00
CLR_Header00
typenamesizecp
PAYLOAD#109992091252
VERSION#17161252
MANIFEST#1861252
module_namehintordfunction_name
VERSION.dll10VerQueryValueA
KERNEL32.dll613LockResource
KERNEL32.dll599LoadResource
KERNEL32.dll227FindResourceA
KERNEL32.dll383GetModuleHandleA
KERNEL32.dll131DeleteFileA
KERNEL32.dll854Sleep
KERNEL32.dll52CloseHandle
KERNEL32.dll479GetTickCount
KERNEL32.dll910WaitForMultipleObjects
KERNEL32.dll248FreeLibrary
KERNEL32.dll416GetProcAddress
KERNEL32.dll594LoadLibraryA
KERNEL32.dll467GetTempFileNameA
KERNEL32.dll469GetTempPathA
KERNEL32.dll79CreateEventA
KERNEL32.dll646OpenProcess
KERNEL32.dll853SizeofResource
KERNEL32.dll381GetModuleFileNameA
KERNEL32.dll322GetCurrentProcess
KERNEL32.dll549InitializeSListHead
KERNEL32.dll664Process32Next
KERNEL32.dll662Process32First
KERNEL32.dll114CreateToolhelp32Snapshot
KERNEL32.dll866Thread32Next
KERNEL32.dll865Thread32First
KERNEL32.dll557InterlockedPopEntrySList
KERNEL32.dll912WaitForSingleObject
KERNEL32.dll556InterlockedIncrement
KERNEL32.dll552InterlockedDecrement
KERNEL32.dll558InterlockedPushEntrySList
KERNEL32.dll534HeapFree
KERNEL32.dll419GetProcessHeap
KERNEL32.dll59CompareStringW
KERNEL32.dll58CompareStringA
KERNEL32.dll243FormatMessageA
KERNEL32.dll972lstrlenA
KERNEL32.dll600LocalAlloc
KERNEL32.dll623MoveFileExA
KERNEL32.dll499GetWindowsDirectoryA
KERNEL32.dll937WritePrivateProfileStringA
KERNEL32.dll489GetVersionExA
KERNEL32.dll488GetVersion
KERNEL32.dll369GetLastError
KERNEL32.dll916WideCharToMultiByte
KERNEL32.dll629MultiByteToWideChar
KERNEL32.dll553InterlockedExchange
KERNEL32.dll604LocalFree
KERNEL32.dll326GetCurrentThreadId
KERNEL32.dll842SetUnhandledExceptionFilter
KERNEL32.dll129DeleteCriticalSection
KERNEL32.dll547InitializeCriticalSection
KERNEL32.dll593LeaveCriticalSection
KERNEL32.dll152EnterCriticalSection
KERNEL32.dll323GetCurrentProcessId
KERNEL32.dll881UnmapViewOfFile
KERNEL32.dll276GetComputerNameA
KERNEL32.dll616MapViewOfFile
KERNEL32.dll84CreateFileMappingA
KERNEL32.dll932WriteFile
KERNEL32.dll795SetFilePointer
KERNEL32.dll83CreateFileA
KERNEL32.dll371GetLocalTime
KERNEL32.dll458GetSystemTimeAsFileTime
KERNEL32.dll790SetEvent
KERNEL32.dll719ResetEvent
KERNEL32.dll706ReleaseMutex
KERNEL32.dll707ReleaseSemaphore
KERNEL32.dll96CreateMutexA
KERNEL32.dll107CreateSemaphoreA
KERNEL32.dll474GetThreadLocale
KERNEL32.dll676QueryPerformanceFrequency
KERNEL32.dll675QueryPerformanceCounter
KERNEL32.dll327GetDateFormatA
KERNEL32.dll480GetTimeFormatA
KERNEL32.dll528HeapAlloc
KERNEL32.dll679RaiseException
KERNEL32.dll862TerminateProcess
KERNEL32.dll878UnhandledExceptionFilter
KERNEL32.dll569IsDebuggerPresent
KERNEL32.dll727RtlUnwind
KERNEL32.dll538HeapReAlloc
KERNEL32.dll897VirtualAlloc
KERNEL32.dll904VirtualQuery
KERNEL32.dll272GetCommandLineA
KERNEL32.dll439GetStartupInfoA
KERNEL32.dll186ExitThread
KERNEL32.dll111CreateThread
KERNEL32.dll580LCMapStringA
KERNEL32.dll581LCMapStringW
KERNEL32.dll260GetCPInfo
KERNEL32.dll185ExitProcess
KERNEL32.dll869TlsGetValue
KERNEL32.dll867TlsAlloc
KERNEL32.dll870TlsSetValue
KERNEL32.dll868TlsFree
KERNEL32.dll808SetLastError
KERNEL32.dll540HeapSize
KERNEL32.dll532HeapDestroy
KERNEL32.dll530HeapCreate
KERNEL32.dll899VirtualFree
KERNEL32.dll441GetStdHandle
KERNEL32.dll804SetHandleCount
KERNEL32.dll358GetFileType
KERNEL32.dll290GetConsoleCP
KERNEL32.dll307GetConsoleMode
KERNEL32.dll238FlushFileBuffers
KERNEL32.dll693ReadFile
KERNEL32.dll246FreeEnvironmentStringsA
KERNEL32.dll341GetEnvironmentStrings
KERNEL32.dll247FreeEnvironmentStringsW
KERNEL32.dll343GetEnvironmentStringsW
KERNEL32.dll482GetTimeZoneInformation
KERNEL32.dll253GetACP
KERNEL32.dll403GetOEMCP
KERNEL32.dll575IsValidCodePage
KERNEL32.dll372GetLocaleInfoA
KERNEL32.dll442GetStringTypeA
KERNEL32.dll445GetStringTypeW
KERNEL32.dll483GetUserDefaultLCID
KERNEL32.dll175EnumSystemLocalesA
KERNEL32.dll577IsValidLocale
KERNEL32.dll921WriteConsoleA
KERNEL32.dll309GetConsoleOutputCP
KERNEL32.dll931WriteConsoleW
KERNEL32.dll823SetStdHandle
KERNEL32.dll373GetLocaleInfoW
KERNEL32.dll86CreateFileW
KERNEL32.dll784SetEndOfFile
KERNEL32.dll787SetEnvironmentVariableA
USER32.dll650SetWindowsHookExA
USER32.dll686UnhookWindowsHookEx
USER32.dll727wsprintfA
ADVAPI32.dll492RegOpenKeyExA
ADVAPI32.dll516RegSetValueExA
ADVAPI32.dll575SetSecurityInfo
ADVAPI32.dll307InitializeAcl
ADVAPI32.dll428OpenProcessToken
ADVAPI32.dll335LookupPrivilegeValueA
ADVAPI32.dll28AdjustTokenPrivileges
ADVAPI32.dll503RegQueryValueExA
ADVAPI32.dll459RegCloseKey
ole32.dll60CoInitializeEx
ole32.dll61CoInitializeSecurity
ole32.dll96CoSetProxyBlanket
ole32.dll105CoUninitialize
ole32.dll16CoCreateInstance
OLEAUT32.dll6
OLEAUT32.dll8
OLEAUT32.dll9
OLEAUT32.dll2

StringTable 040904b0

CompanyNameT M R G , INC.
FileDescriptionrkverify
FileVersion0, 2, 3, 17
InternalNamerkverify
LegalCopyrightCopyright (C) 2007-2010
OriginalFilenamerkverify.exe
ProductNamerkverify
ProductVersion0, 2, 3, 17

VS_FIXEDFILEINFO

FileVersion0.2.3.17
ProductVersion0.2.3.17
StrucVersion0x10000
FileFlagsMask0x17
FileFlags0
FileOS4
FileType1
FileSubtype0

Signers (1)

issuer: /C=US/O=Thawte, Inc./CN=Thawte Code Signing CA - G2
serial: 3E610C00C4D725B9689279CC88EEA594

Certificates (4)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA
        Validity
            Not Before: Jun 15 00:00:00 2007 GMT
            Not After : Jun 14 23:59:59 2012 GMT
        Subject: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:c4:b5:f2:52:15:bc:88:86:60:29:16:4a:5b:2f:
                    4b:91:6b:87:91:f3:35:54:58:35:ea:d1:36:5e:62:
                    4d:52:51:34:71:c2:7b:66:1d:89:c8:dd:2a:c4:6a:
                    0a:f6:37:d9:98:74:91:f6:92:ae:b0:b5:76:96:f1:
                    a9:4a:63:45:47:2e:6b:0b:92:4e:4b:2b:8c:ee:58:
                    4a:8b:d4:07:e4:1a:2c:f8:82:aa:58:d9:cd:42:f3:
                    2d:c0:75:de:8d:ab:c7:8e:1d:9a:6c:4c:08:95:1e:
                    de:db:ef:67:e1:72:c2:49:c2:9e:60:3c:e1:e2:be:
                    16:a3:63:78:69:14:7b:ad:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.verisign.com/tss-ca.crl
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation
            X509v3 Subject Alternative Name: 
                DirName:/CN=TSA1-2
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        50:c5:4b:c8:24:80:df:e4:0d:24:c2:de:1a:b1:a1:02:a1:a6:
        82:2d:0c:83:15:81:37:0a:82:0e:2c:b0:5a:17:61:b5:d8:05:
        fe:88:db:f1:91:91:b3:56:1a:40:a6:eb:92:be:38:39:b0:75:
        36:74:3a:98:4f:e4:37:ba:99:89:ca:95:42:1d:b0:b9:c7:a0:
        8d:57:e0:fa:d5:64:04:42:35:4e:01:d1:33:a2:17:c8:4d:aa:
        27:c7:f2:e1:86:4c:02:38:4d:83:78:c6:fc:53:e0:eb:e0:06:
        87:dd:a4:96:9e:5e:0c:98:e2:a5:be:bf:82:85:c3:60:e1:df:
        ad:28:d8:c7:a5:4b:64:da:c7:1b:5b:bd:ac:39:08:d5:38:22:
        a1:33:8b:2f:8a:9a:eb:bc:07:21:3f:44:41:09:07:b5:65:1c:
        24:bc:48:d3:44:80:eb:a1:cf:c9:02:b4:14:cf:54:c7:16:a3:
        80:5c:f9:79:3e:5d:72:7d:88:17:9e:2c:43:a2:ca:53:ce:7d:
        3d:f6:2a:3a:b8:4f:94:00:a5:6d:0a:83:5d:f9:5e:53:f4:18:
        b3:57:0f:70:c3:fb:f5:ad:95:a0:0e:17:de:c4:16:80:60:c9:
        0f:2b:6e:86:04:f1:eb:f4:78:27:d1:05:c5:ee:34:5b:5e:b9:
        49:32:f2:33

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
        Validity
            Not Before: Dec  4 00:00:00 2003 GMT
            Not After : Dec  3 23:59:59 2013 GMT
        Subject: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a9:ca:b2:a4:cc:cd:20:af:0a:7d:89:ac:87:75:
                    f0:b4:4e:f1:df:c1:0f:bf:67:61:bd:a3:64:1c:da:
                    bb:f9:ca:33:ab:84:30:89:58:7e:8c:db:6b:dd:36:
                    9e:0f:bf:d1:ec:78:f2:77:a6:7e:6f:3c:bf:93:af:
                    0d:ba:68:f4:6c:94:ca:bd:52:2d:ab:48:3d:f5:b6:
                    d5:5d:5f:1b:02:9f:fa:2f:6b:1e:a4:f7:a3:9a:a6:
                    1a:c8:02:e1:7f:4c:52:e3:0e:60:ec:40:1c:7e:b9:
                    0d:de:3f:c7:b4:df:87:bd:5f:7a:6a:31:2e:03:99:
                    81:13:a8:47:20:ce:31:73:0d:57:2d:cd:78:34:33:
                    95:12:99:12:b9:de:68:2f:aa:e6:e3:c2:8a:8c:2a:
                    c3:8b:21:87:66:bd:83:58:57:6f:75:bf:3c:aa:26:
                    87:5d:ca:10:15:3c:9f:84:ea:54:c1:0a:6e:c4:fe:
                    c5:4a:dd:b9:07:11:97:22:7c:db:3e:27:d1:1e:78:
                    ec:9f:31:c9:f1:e6:22:19:db:c4:b3:47:43:9a:1a:
                    5f:a0:1e:90:e4:5e:f5:ee:7c:f1:7d:ab:62:01:8f:
                    f5:4d:0b:de:d0:22:56:a8:95:cd:ae:88:76:ae:ee:
                    ba:0d:f3:e4:4d:d9:a0:fb:68:a0:ae:14:3b:b3:87:
                    c1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.verisign.com/ThawteTimestampingCA.crl
            X509v3 Extended Key Usage: 
                Time Stamping
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=TSA2048-1-53
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        4a:6b:f9:ea:58:c2:44:1c:31:89:79:99:2b:96:bf:82:ac:01:
        d6:1c:4c:cd:b0:8a:58:6e:df:08:29:a3:5e:c8:ca:93:13:e7:
        04:52:0d:ef:47:27:2f:00:38:b0:e4:c9:93:4e:9a:d4:22:62:
        15:f7:3f:37:21:4f:70:31:80:f1:8b:38:87:b3:e8:e8:97:00:
        fe:cf:55:96:4e:24:d2:a9:27:4e:7a:ae:b7:61:41:f3:2a:ce:
        e7:c9:d9:5e:dd:bb:2b:85:3e:b5:9d:b5:d9:e1:57:ff:be:b4:
        c5:7e:f5:cf:0c:9e:f0:97:fe:2b:d3:3b:52:1b:1b:38:27:f7:
        3f:4a

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:61:0c:00:c4:d7:25:b9:68:92:79:cc:88:ee:a5:94
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=Thawte, Inc., CN=Thawte Code Signing CA - G2
        Validity
            Not Before: Jul 21 00:00:00 2011 GMT
            Not After : Jan 11 23:59:59 2013 GMT
        Subject: C=US, ST=Virginia, L=Reston, O=TMRG, Inc., CN=TMRG, Inc.
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d7:73:72:fd:21:60:49:51:24:b2:3d:49:d5:45:
                    3b:d2:61:36:b2:34:e6:53:02:fa:0e:85:71:a3:b0:
                    80:f6:52:4d:89:06:c4:63:32:33:de:c6:d9:72:d5:
                    73:c5:69:50:98:2b:e5:73:0d:f9:93:13:95:5f:78:
                    5d:a8:e9:e3:2f:d9:7e:18:5f:24:89:4b:63:94:7f:
                    22:7d:a0:5d:f3:a8:92:99:08:de:d9:33:24:40:87:
                    7b:ae:7e:3c:d2:c4:e8:55:b2:d3:6e:78:1d:e1:39:
                    48:1e:03:38:9e:17:77:16:2d:9c:33:f5:f9:57:24:
                    f4:00:0f:8b:4a:2a:ad:2c:d2:0f:f3:07:01:ad:e3:
                    12:b9:e7:0c:92:31:27:6a:33:2f:39:63:ab:fe:f5:
                    c4:98:af:2b:f8:f5:00:be:15:4d:45:72:75:90:77:
                    42:18:ae:ac:fd:d7:f4:a4:68:97:0f:57:7a:5e:f6:
                    49:7f:c1:05:88:96:74:8e:70:ea:02:b9:c6:9e:f7:
                    ed:4e:be:d0:bc:7b:1d:98:58:0f:e0:a8:0f:42:64:
                    39:f3:ae:ba:e0:73:52:6f:78:ba:eb:52:fe:cd:ab:
                    16:86:f1:fc:5d:0b:05:f3:76:9e:ee:b4:35:37:d3:
                    56:1d:6c:c0:3a:97:b1:6f:17:0a:c7:d2:43:f0:02:
                    6d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://cs-g2-crl.thawte.com/ThawteCSG2.crl
            X509v3 Extended Key Usage: 
                Code Signing, Microsoft Commercial Code Signing
            2.5.29.4: 
                0.0.0..
+.....7.......
            Authority Information Access: 
                OCSP - URI:http://ocsp.thawte.com
            Netscape Cert Type: 
                Object Signing
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        a1:51:77:bf:f7:8b:c8:b1:a8:2b:9e:3c:0c:9c:5b:0b:d9:f3:
        2c:d2:62:19:af:e6:d8:f0:29:a1:5e:7f:c1:e8:73:41:8e:a0:
        8c:60:92:78:1a:ce:45:92:b1:3c:1b:73:31:fb:d9:bd:b5:fb:
        b3:ae:ad:7c:f0:41:86:e3:f0:94:2c:47:24:72:b6:7e:6c:e1:
        20:d4:a2:c9:46:76:d0:29:c6:e6:42:65:2d:22:e3:fb:84:d4:
        d4:d6:06:7e:54:23:e4:cb:7d:33:32:0b:e8:29:e9:db:03:6e:
        57:3f:0a:a7:d7:8e:a0:8f:5b:62:f5:97:e6:bc:87:ba:df:45:
        d5:7d:e2:4c:d4:73:f4:87:e9:0a:08:64:69:3b:0b:c8:09:c0:
        74:fb:14:25:e4:9e:9e:3e:1c:cd:4e:9a:fd:ac:5c:75:87:6c:
        4e:94:f2:92:aa:8b:25:81:0b:41:4b:33:6d:48:9a:a8:b7:ab:
        50:9b:85:2d:4e:79:e7:3c:9d:4b:72:b3:ac:2f:26:a8:03:15:
        61:6b:df:09:73:3f:b8:7b:df:99:75:1b:1e:11:ef:18:dc:97:
        b8:a7:6b:3e:5e:9b:33:9b:e7:3e:6d:e9:54:09:e6:e9:e0:ff:
        a8:70:68:8e:97:1c:5f:2b:88:07:37:ec:94:4a:26:f4:05:1d:
        52:57:5a:77

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:97:4d:78:73:a5:bc:ab:0d:2f:b3:70:19:2f:ce:5e
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2006 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA
        Validity
            Not Before: Feb  8 00:00:00 2010 GMT
            Not After : Feb  7 23:59:59 2020 GMT
        Subject: C=US, O=Thawte, Inc., CN=Thawte Code Signing CA - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b7:8b:cf:75:5b:9f:25:da:7e:39:b0:93:db:38:
                    d3:a9:23:d0:82:fa:e9:24:7e:5c:0b:8e:83:f8:e6:
                    7a:59:e6:a3:c5:98:a7:99:d2:44:ff:00:a6:a5:39:
                    04:8a:da:29:88:ea:db:a2:f3:1c:99:15:26:c2:b1:
                    f4:fc:e1:0c:47:a9:09:11:06:0a:20:92:b9:c7:a0:
                    04:8c:5c:94:19:ab:5b:25:2c:1d:62:7e:70:0d:ce:
                    61:6c:dd:2b:82:c9:ce:5d:48:5f:f7:c2:be:bc:41:
                    23:1e:4f:29:5d:d7:4f:bc:f4:c5:2a:fc:63:e6:7c:
                    26:4e:99:a7:79:41:9e:10:4a:7a:79:c9:c6:86:f7:
                    86:95:d2:26:ce:3c:18:2a:d6:7c:ce:af:cd:ad:bb:
                    f7:82:2c:70:26:37:45:e5:0f:47:22:c6:01:28:bd:
                    2e:83:5c:6a:a4:47:c1:e7:d0:d8:6b:81:46:3f:21:
                    17:f5:07:c5:43:5a:a6:67:2c:b8:7b:60:11:b5:83:
                    ee:f5:74:0a:72:71:44:3d:58:fe:e8:1a:ab:38:c3:
                    59:db:7f:6e:38:7d:76:c7:72:69:98:36:96:57:d3:
                    66:1c:d2:54:91:04:2e:54:19:b0:dc:3d:b5:22:5e:
                    86:d5:2a:7e:20:df:5d:e6:7a:b1:65:fe:c5:02:4e:
                    31:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.thawte.com/ThawtePCA.crl
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                OCSP - URI:http://ocsp.thawte.com
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, Code Signing
            X509v3 Subject Alternative Name: 
                DirName:/CN=VeriSignMPKI-2-10
            X509v3 Subject Key Identifier: 
                D4:0D:65:3F:7A:BD:34:C6:FE:47:E7:4C:0D:C0:BD:F2:DE:15:AB:71
            X509v3 Authority Key Identifier: 
                7B:5B:45:CF:AF:CE:CB:7A:FD:31:92:1A:6A:B6:F3:46:EB:57:48:50
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        56:fe:53:5c:e1:c7:9e:bc:a7:ed:7e:53:6d:6a:14:4b:51:8c:
        40:5e:80:5f:aa:a4:e8:2f:ef:38:c8:04:c9:ca:3e:cf:df:3a:
        58:4e:b0:d4:b6:63:c5:29:57:fa:02:05:9a:45:4d:68:db:2a:
        1b:d4:34:3d:9f:00:c3:5a:cb:95:49:a5:6e:e1:b0:c5:fc:41:
        4d:41:4a:6f:d3:77:c8:d7:38:8d:e4:19:de:18:f3:1f:15:65:
        83:6d:45:0c:53:f9:0a:9a:2e:a5:5d:bf:6f:32:81:18:92:19:
        6a:55:00:ad:63:1c:52:06:7e:55:d9:29:68:ae:4a:7c:18:9a:
        79:88:6b:23:23:d8:27:38:2a:29:87:76:ca:fb:c7:b6:62:23:
        1f:ed:7a:56:4c:dd:9c:32:5b:f5:3d:0c:46:18:95:3b:2a:23:
        68:83:64:41:d9:00:6d:0f:19:24:15:68:72:bd:c5:71:67:6e:
        ac:4c:db:90:eb:51:a5:1a:62:07:d0:be:6a:00:47:3c:72:2f:
        ec:4f:61:3e:73:85:ce:5a:0a:b7:ba:c0:1c:13:75:e3:22:39:
        28:dd:6d:1d:09:46:9d:4f:ba:e8:40:81:91:c6:a4:ce:94:72:
        1b:01:cf:2a:6e:15:67:95:89:ae:7d:b7:b7:cd:f9:0a:3d:75:
        b6:6b:3c:25
pkcs7-signedData
  • 1
    • MD5: nil
    • 1.3.6.1.4.1.311.2.1.4
      • #0
        • 1.3.6.1.4.1.311.2.1.15
          • : 
            00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |
        • MD5
          • 62 f3 58 a4 6c 13 e2 33  29 cf 27 50 06 10 09 a4  |b.X.l..3).'P....|
    • Certificates
      • Certificate #0
        • 2
          • 38:25:D7:FA:F8:61:AF:9E:F4:90:E7:26:B5:D6:5A:D5
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • O: VeriSign, Inc.
            • CN: VeriSign Time Stamping Services CA
          • 2007-06-15 00:00:00 UTC: 2012-06-14 23:59:59 UTC
          • Subject
            • C: US
            • O: VeriSign, Inc.
            • CN: VeriSign Time Stamping Services Signer - G2
          • #5
            • rsaEncryption: nil
            • C4:B5:F2:52:15:BC:88:86:60:29:16:4A:5B:2F:4B:91:
              6B:87:91:F3:35:54:58:35:EA:D1:36:5E:62:4D:52:51:
              34:71:C2:7B:66:1D:89:C8:DD:2A:C4:6A:0A:F6:37:D9:
              98:74:91:F6:92:AE:B0:B5:76:96:F1:A9:4A:63:45:47:
              2E:6B:0B:92:4E:4B:2B:8C:EE:58:4A:8B:D4:07:E4:1A:
              2C:F8:82:AA:58:D9:CD:42:F3:2D:C0:75:DE:8D:AB:C7:
              8E:1D:9A:6C:4C:08:95:1E:DE:DB:EF:67:E1:72:C2:49:
              C2:9E:60:3C:E1:E2:BE:16:A3:63:78:69:14:7B:AD:2D              : 0x010001
          • X509v3 extensions
            • authorityInfoAccess
              • OCSP: http://ocsp.verisign.com
            • basicConstraints
              • true
              • nil
            • crlDistributionPoints: http://crl.verisign.com/tss-ca.crl
            • extendedKeyUsage: true, timeStamping
            • keyUsage: true, 0xc0
            • subjectAltName
              • CN: TSA1-2
        • RSA-SHA1: 
          50 c5 4b c8 24 80 df e4  0d 24 c2 de 1a b1 a1 02  |P.K.$....$......|
a1 a6 82 2d 0c 83 15 81  37 0a 82 0e 2c b0 5a 17  |...-....7...,.Z.|
61 b5 d8 05 fe 88 db f1  91 91 b3 56 1a 40 a6 eb  |a..........V.@..|
92 be 38 39 b0 75 36 74  3a 98 4f e4 37 ba 99 89  |..89.u6t:.O.7...|
ca 95 42 1d b0 b9 c7 a0  8d 57 e0 fa d5 64 04 42  |..B......W...d.B|
35 4e 01 d1 33 a2 17 c8  4d aa 27 c7 f2 e1 86 4c  |5N..3...M.'....L|
02 38 4d 83 78 c6 fc 53  e0 eb e0 06 87 dd a4 96  |.8M.x..S........|
9e 5e 0c 98 e2 a5 be bf  82 85 c3 60 e1 df ad 28  |.^.........`...(|
d8 c7 a5 4b 64 da c7 1b  5b bd ac 39 08 d5 38 22  |...Kd...[..9..8"|
a1 33 8b 2f 8a 9a eb bc  07 21 3f 44 41 09 07 b5  |.3./.....!?DA...|
65 1c 24 bc 48 d3 44 80  eb a1 cf c9 02 b4 14 cf  |e.$.H.D.........|
54 c7 16 a3 80 5c f9 79  3e 5d 72 7d 88 17 9e 2c  |T....\.y>]r}...,|
43 a2 ca 53 ce 7d 3d f6  2a 3a b8 4f 94 00 a5 6d  |C..S.}=.*:.O...m|
0a 83 5d f9 5e 53 f4 18  b3 57 0f 70 c3 fb f5 ad  |..].^S...W.p....|
95 a0 0e 17 de c4 16 80  60 c9 0f 2b 6e 86 04 f1  |........`..+n...|
eb f4 78 27 d1 05 c5 ee  34 5b 5e b9 49 32 f2 33  |..x'....4[^.I2.3|
      • Certificate #1
        • 2
          • 47:BF:19:95:DF:8D:52:46:43:F7:DB:6D:48:0D:31:A4
          • RSA-SHA1: nil
          • Issuer
            • C: ZA
            • ST: Western Cape
            • L: Durbanville
            • O: Thawte
            • OU: Thawte Certification
            • CN: Thawte Timestamping CA
          • 2003-12-04 00:00:00 UTC: 2013-12-03 23:59:59 UTC
          • Subject
            • C: US
            • O: VeriSign, Inc.
            • CN: VeriSign Time Stamping Services CA
          • #5
            • rsaEncryption: nil
            • A9:CA:B2:A4:CC:CD:20:AF:0A:7D:89:AC:87:75:F0:B4:
              4E:F1:DF:C1:0F:BF:67:61:BD:A3:64:1C:DA:BB:F9:CA:
              33:AB:84:30:89:58:7E:8C:DB:6B:DD:36:9E:0F:BF:D1:
              EC:78:F2:77:A6:7E:6F:3C:BF:93:AF:0D:BA:68:F4:6C:
              94:CA:BD:52:2D:AB:48:3D:F5:B6:D5:5D:5F:1B:02:9F:
              FA:2F:6B:1E:A4:F7:A3:9A:A6:1A:C8:02:E1:7F:4C:52:
              E3:0E:60:EC:40:1C:7E:B9:0D:DE:3F:C7:B4:DF:87:BD:
              5F:7A:6A:31:2E:03:99:81:13:A8:47:20:CE:31:73:0D:
              57:2D:CD:78:34:33:95:12:99:12:B9:DE:68:2F:AA:E6:
              E3:C2:8A:8C:2A:C3:8B:21:87:66:BD:83:58:57:6F:75:
              BF:3C:AA:26:87:5D:CA:10:15:3C:9F:84:EA:54:C1:0A:
              6E:C4:FE:C5:4A:DD:B9:07:11:97:22:7C:DB:3E:27:D1:
              1E:78:EC:9F:31:C9:F1:E6:22:19:DB:C4:B3:47:43:9A:
              1A:5F:A0:1E:90:E4:5E:F5:EE:7C:F1:7D:AB:62:01:8F:
              F5:4D:0B:DE:D0:22:56:A8:95:CD:AE:88:76:AE:EE:BA:
              0D:F3:E4:4D:D9:A0:FB:68:A0:AE:14:3B:B3:87:C1:BB              : 0x010001
          • X509v3 extensions
            • authorityInfoAccess
              • OCSP: http://ocsp.verisign.com
            • basicConstraints
              • true
              • true: 0
            • crlDistributionPoints: http://crl.verisign.com/ThawteTimestampingCA.crl
            • extendedKeyUsage: timeStamping
            • keyUsage: true, 6
            • subjectAltName
              • CN: TSA2048-1-53
        • RSA-SHA1: 
          4a 6b f9 ea 58 c2 44 1c  31 89 79 99 2b 96 bf 82  |Jk..X.D.1.y.+...|
ac 01 d6 1c 4c cd b0 8a  58 6e df 08 29 a3 5e c8  |....L...Xn..).^.|
ca 93 13 e7 04 52 0d ef  47 27 2f 00 38 b0 e4 c9  |.....R..G'/.8...|
93 4e 9a d4 22 62 15 f7  3f 37 21 4f 70 31 80 f1  |.N.."b..?7!Op1..|
8b 38 87 b3 e8 e8 97 00  fe cf 55 96 4e 24 d2 a9  |.8........U.N$..|
27 4e 7a ae b7 61 41 f3  2a ce e7 c9 d9 5e dd bb  |'Nz..aA.*....^..|
2b 85 3e b5 9d b5 d9 e1  57 ff be b4 c5 7e f5 cf  |+.>.....W....~..|
0c 9e f0 97 fe 2b d3 3b  52 1b 1b 38 27 f7 3f 4a  |.....+.;R..8'.?J|
      • Certificate #2
        • 2
          • 3E:61:0C:00:C4:D7:25:B9:68:92:79:CC:88:EE:A5:94
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • O: Thawte, Inc.
            • CN: Thawte Code Signing CA - G2
          • 2011-07-21 00:00:00 UTC: 2013-01-11 23:59:59 UTC
          • Subject
            • C: US
            • ST: Virginia
            • L: Reston
            • O: TMRG, Inc.
            • CN: TMRG, Inc.
          • #5
            • rsaEncryption: nil
            • D7:73:72:FD:21:60:49:51:24:B2:3D:49:D5:45:3B:D2:
              61:36:B2:34:E6:53:02:FA:0E:85:71:A3:B0:80:F6:52:
              4D:89:06:C4:63:32:33:DE:C6:D9:72:D5:73:C5:69:50:
              98:2B:E5:73:0D:F9:93:13:95:5F:78:5D:A8:E9:E3:2F:
              D9:7E:18:5F:24:89:4B:63:94:7F:22:7D:A0:5D:F3:A8:
              92:99:08:DE:D9:33:24:40:87:7B:AE:7E:3C:D2:C4:E8:
              55:B2:D3:6E:78:1D:E1:39:48:1E:03:38:9E:17:77:16:
              2D:9C:33:F5:F9:57:24:F4:00:0F:8B:4A:2A:AD:2C:D2:
              0F:F3:07:01:AD:E3:12:B9:E7:0C:92:31:27:6A:33:2F:
              39:63:AB:FE:F5:C4:98:AF:2B:F8:F5:00:BE:15:4D:45:
              72:75:90:77:42:18:AE:AC:FD:D7:F4:A4:68:97:0F:57:
              7A:5E:F6:49:7F:C1:05:88:96:74:8E:70:EA:02:B9:C6:
              9E:F7:ED:4E:BE:D0:BC:7B:1D:98:58:0F:E0:A8:0F:42:
              64:39:F3:AE:BA:E0:73:52:6F:78:BA:EB:52:FE:CD:AB:
              16:86:F1:FC:5D:0B:05:F3:76:9E:EE:B4:35:37:D3:56:
              1D:6C:C0:3A:97:B1:6F:17:0A:C7:D2:43:F0:02:6D:25              : 0x010001
          • X509v3 extensions
            • basicConstraints
              • true
              • nil
            • crlDistributionPoints: http://cs-g2-crl.thawte.com/ThawteCSG2.crl
            • extendedKeyUsage
              • codeSigning: msCodeCom
            • 2.5.29.4
              • msCodeCom: 0x80
            • authorityInfoAccess
              • OCSP: http://ocsp.thawte.com
            • nsCertType: 0x10
        • RSA-SHA1: 
          a1 51 77 bf f7 8b c8 b1  a8 2b 9e 3c 0c 9c 5b 0b  |.Qw......+.<..[.|
d9 f3 2c d2 62 19 af e6  d8 f0 29 a1 5e 7f c1 e8  |..,.b.....).^...|
73 41 8e a0 8c 60 92 78  1a ce 45 92 b1 3c 1b 73  |sA...`.x..E..<.s|
31 fb d9 bd b5 fb b3 ae  ad 7c f0 41 86 e3 f0 94  |1........|.A....|
2c 47 24 72 b6 7e 6c e1  20 d4 a2 c9 46 76 d0 29  |,G$r.~l. ...Fv.)|
c6 e6 42 65 2d 22 e3 fb  84 d4 d4 d6 06 7e 54 23  |..Be-".......~T#|
e4 cb 7d 33 32 0b e8 29  e9 db 03 6e 57 3f 0a a7  |..}32..)...nW?..|
d7 8e a0 8f 5b 62 f5 97  e6 bc 87 ba df 45 d5 7d  |....[b.......E.}|
e2 4c d4 73 f4 87 e9 0a  08 64 69 3b 0b c8 09 c0  |.L.s.....di;....|
74 fb 14 25 e4 9e 9e 3e  1c cd 4e 9a fd ac 5c 75  |t..%...>..N...\u|
87 6c 4e 94 f2 92 aa 8b  25 81 0b 41 4b 33 6d 48  |.lN.....%..AK3mH|
9a a8 b7 ab 50 9b 85 2d  4e 79 e7 3c 9d 4b 72 b3  |....P..-Ny.<.Kr.|
ac 2f 26 a8 03 15 61 6b  df 09 73 3f b8 7b df 99  |./&...ak..s?.{..|
75 1b 1e 11 ef 18 dc 97  b8 a7 6b 3e 5e 9b 33 9b  |u.........k>^.3.|
e7 3e 6d e9 54 09 e6 e9  e0 ff a8 70 68 8e 97 1c  |.>m.T......ph...|
5f 2b 88 07 37 ec 94 4a  26 f4 05 1d 52 57 5a 77  |_+..7..J&...RWZw|
      • Certificate #3
        • 2
          • 47:97:4D:78:73:A5:BC:AB:0D:2F:B3:70:19:2F:CE:5E
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • O: thawte, Inc.
            • OU: Certification Services Division
            • OU: (c) 2006 thawte, Inc. - For authorized use only
            • CN: thawte Primary Root CA
          • 2010-02-08 00:00:00 UTC: 2020-02-07 23:59:59 UTC
          • Subject
            • C: US
            • O: Thawte, Inc.
            • CN: Thawte Code Signing CA - G2
          • #5
            • rsaEncryption: nil
            • B7:8B:CF:75:5B:9F:25:DA:7E:39:B0:93:DB:38:D3:A9:
              23:D0:82:FA:E9:24:7E:5C:0B:8E:83:F8:E6:7A:59:E6:
              A3:C5:98:A7:99:D2:44:FF:00:A6:A5:39:04:8A:DA:29:
              88:EA:DB:A2:F3:1C:99:15:26:C2:B1:F4:FC:E1:0C:47:
              A9:09:11:06:0A:20:92:B9:C7:A0:04:8C:5C:94:19:AB:
              5B:25:2C:1D:62:7E:70:0D:CE:61:6C:DD:2B:82:C9:CE:
              5D:48:5F:F7:C2:BE:BC:41:23:1E:4F:29:5D:D7:4F:BC:
              F4:C5:2A:FC:63:E6:7C:26:4E:99:A7:79:41:9E:10:4A:
              7A:79:C9:C6:86:F7:86:95:D2:26:CE:3C:18:2A:D6:7C:
              CE:AF:CD:AD:BB:F7:82:2C:70:26:37:45:E5:0F:47:22:
              C6:01:28:BD:2E:83:5C:6A:A4:47:C1:E7:D0:D8:6B:81:
              46:3F:21:17:F5:07:C5:43:5A:A6:67:2C:B8:7B:60:11:
              B5:83:EE:F5:74:0A:72:71:44:3D:58:FE:E8:1A:AB:38:
              C3:59:DB:7F:6E:38:7D:76:C7:72:69:98:36:96:57:D3:
              66:1C:D2:54:91:04:2E:54:19:B0:DC:3D:B5:22:5E:86:
              D5:2A:7E:20:DF:5D:E6:7A:B1:65:FE:C5:02:4E:31:2D              : 0x010001
          • X509v3 extensions
            • basicConstraints
              • true
              • true: 0
            • crlDistributionPoints: http://crl.thawte.com/ThawtePCA.crl
            • keyUsage: true, 6
            • authorityInfoAccess
              • OCSP: http://ocsp.thawte.com
            • extendedKeyUsage
              • clientAuth: codeSigning
            • subjectAltName
              • CN: VeriSignMPKI-2-10
            • subjectKeyIdentifier: 
              d4 0d 65 3f 7a bd 34 c6  fe 47 e7 4c 0d c0 bd f2  |..e?z.4..G.L....|
de 15 ab 71                                       |...q            |
            • authorityKeyIdentifier: 
              7b 5b 45 cf af ce cb 7a  fd 31 92 1a 6a b6 f3 46  |{[E....z.1..j..F|
eb 57 48 50                                       |.WHP            |
        • RSA-SHA1: 
          56 fe 53 5c e1 c7 9e bc  a7 ed 7e 53 6d 6a 14 4b  |V.S\......~Smj.K|
51 8c 40 5e 80 5f aa a4  e8 2f ef 38 c8 04 c9 ca  |Q.@^._.../.8....|
3e cf df 3a 58 4e b0 d4  b6 63 c5 29 57 fa 02 05  |>..:XN...c.)W...|
9a 45 4d 68 db 2a 1b d4  34 3d 9f 00 c3 5a cb 95  |.EMh.*..4=...Z..|
49 a5 6e e1 b0 c5 fc 41  4d 41 4a 6f d3 77 c8 d7  |I.n....AMAJo.w..|
38 8d e4 19 de 18 f3 1f  15 65 83 6d 45 0c 53 f9  |8........e.mE.S.|
0a 9a 2e a5 5d bf 6f 32  81 18 92 19 6a 55 00 ad  |....].o2....jU..|
63 1c 52 06 7e 55 d9 29  68 ae 4a 7c 18 9a 79 88  |c.R.~U.)h.J|..y.|
6b 23 23 d8 27 38 2a 29  87 76 ca fb c7 b6 62 23  |k##.'8*).v....b#|
1f ed 7a 56 4c dd 9c 32  5b f5 3d 0c 46 18 95 3b  |..zVL..2[.=.F..;|
2a 23 68 83 64 41 d9 00  6d 0f 19 24 15 68 72 bd  |*#h.dA..m..$.hr.|
c5 71 67 6e ac 4c db 90  eb 51 a5 1a 62 07 d0 be  |.qgn.L...Q..b...|
6a 00 47 3c 72 2f ec 4f  61 3e 73 85 ce 5a 0a b7  |j.Gs..Z..|
ba c0 1c 13 75 e3 22 39  28 dd 6d 1d 09 46 9d 4f  |....u."9(.m..F.O|
ba e8 40 81 91 c6 a4 ce  94 72 1b 01 cf 2a 6e 15  |..@......r...*n.|
67 95 89 ae 7d b7 b7 cd  f9 0a 3d 75 b6 6b 3c 25  |g...}.....=u.k<%|
    • 1
      • unnamed
        • #0
          • C: US
          • O: Thawte, Inc.
          • CN: Thawte Code Signing CA - G2
        • 3E:61:0C:00:C4:D7:25:B9:68:92:79:CC:88:EE:A5:94
      • MD5: nil
      • #2
        • 1.3.6.1.4.1.311.2.1.12
          • nil
        • contentType: 1.3.6.1.4.1.311.2.1.4
        • 1.3.6.1.4.1.311.2.1.11: msCodeCom
        • messageDigest: 
          a5 75 11 6e 74 50 e8 ad  08 12 a8 38 d7 20 24 43  |.u.ntP.....8. $C|
      • rsaEncryption: 
        49 49 85 59 b2 68 4c 1e  40 15 52 f1 97 17 40 57  |II.Y.hL.@.R...@W|
8d d5 97 14 ab b4 3d 57  a8 fd 71 6f 90 42 f1 b7  |......=W..qo.B..|
a6 c0 33 75 76 64 16 19  ed 19 b8 7b df 9b 37 bf  |..3uvd.....{..7.|
37 69 4a 9c 1a a6 4c fb  17 a4 27 ed cd 99 47 be  |7iJ...L...'...G.|
e8 14 fe e4 5b c9 1e 77  8f 44 ac 9b db f2 f5 cd  |....[..w.D......|
01 e4 2e 9c 83 8b c6 83  f7 94 7c 8e 1a 4b a8 be  |..........|..K..|
c9 4f 52 40 5d c9 1e 39  ef 7b 78 b0 08 76 03 e6  |.OR@]..9.{x..v..|
df a9 76 53 3a 9b ee b3  13 8d 85 aa 3a c8 27 01  |..vS:.......:.'.|
97 d6 42 51 49 ad 39 64  d5 49 2d a3 db e8 9a a6  |..BQI.9d.I-.....|
05 0e 35 ea 8f 1d d2 c8  28 35 a7 ac 33 ec 78 27  |..5.....(5..3.x'|
3a 25 42 2e b4 79 b6 5d  99 ba 2f 8a c7 9b a5 72  |:%B..y.]../....r|
b1 c3 e9 85 4e 60 97 45  58 22 61 c9 59 24 ee 18  |....N`.EX"a.Y$..|
dc 45 4e 7f 49 70 8c c6  86 d7 f7 04 72 62 b3 ea  |.EN.Ip......rb..|
48 44 1f fa 99 64 67 d0  7f d5 be eb b7 e3 f6 a3  |HD...dg.........|
9c 65 fa af b9 5f c9 73  11 8d 67 7a 78 a1 14 77  |.e..._.s..gzx..w|
b1 23 49 66 73 36 6c e0  1c 62 45 34 ef 62 95 54  |.#Ifs6l..bE4.b.T|
      • countersignature
        • 1
          • unnamed
            • #0
              • C: US
              • O: VeriSign, Inc.
              • CN: VeriSign Time Stamping Services CA
            • 38:25:D7:FA:F8:61:AF:9E:F4:90:E7:26:B5:D6:5A:D5
          • SHA1: nil
          • #2
            • contentType: pkcs7-data
            • signingTime: 2011-08-23 17:17:10 UTC
            • messageDigest: 
              14 23 36 f2 ab 8b d6 ae  f4 14 e7 9e ec ea df 25  |.#6............%|
b4 99 74 e8                                       |..t.            |
          • rsaEncryption: 
            b5 18 f8 e8 36 c2 f0 a7  4d d2 98 66 04 07 11 14  |....6...M..f....|
bf 6b 83 2f da e2 81 87  22 6a 37 88 78 e9 1c 55  |.k./...."j7.x..U|
c2 fb e7 0a 74 b8 c9 85  e2 fd 4b 51 5f 10 c7 b7  |....t.....KQ_...|
5b 8a 05 aa a8 56 b6 e6  f2 ca 8e b0 f4 19 1b 44  |[....V.........D|
7c b4 d9 e7 b6 9a 5f f4  7d f8 0e 63 a7 90 63 75  ||....._.}..c..cu|
e8 ca 2b e1 c8 4d 52 4c  1c 3b d3 83 d5 7a 8c 63  |..+..MRL.;...z.c|
38 a2 d8 43 27 00 98 6f  64 07 a6 cf 74 ab b4 15  |8..C'..od...t...|
f2 96 1c f3 ef 03 e8 6d  70 da 64 ab b7 2a 96 cc  |.......mp.d..*..|
offsetsizetypecomment
0376832EXE08/23/2011 17:16:04#
15c115HTM#
5c0005136PKCS7Authenticode Signature#
Scanning the drive for archives:
1 file, 381968 bytes (374 KiB)


--
Type = PE
Physical Size = 381968
CPU = x86
Characteristics = Executable 32-bit NoRelocs
Created = 2011-08-23 17:16:04
Headers Size = 4096
Checksum = 389785
Name = rkverify.exe
Image Size = 385024
Section Alignment = 4096
File Alignment = 4096
Code Size = 204800
Initialized Data Size = 167936
Uninitialized Data Size = 0
Linker Version = 8.0
OS Version = 4.0
Image Version = 0.0
Subsystem Version = 4.0
Subsystem = Windows GUI
Stack Reserve = 1048576
Stack Commit = 4096
Heap Reserve = 1048576
Heap Commit = 4096
Image Base = 4194304
Comment = FileVersion: 0.2.3.17
FileVersion: 0, 2, 3, 17
ProductVersion: 0.2.3.17
ProductVersion: 0, 2, 3, 17
CompanyName: T M R G  , INC.
FileDescription: rkverify
InternalName: rkverify
LegalCopyright: Copyright (C) 2007-2010
OriginalFilename: rkverify.exe
ProductName: rkverify
----
Path = .rsrc/PAYLOAD/109
Size = 99209
Packed Size = 99209
--
Path = .rsrc/PAYLOAD/109
Type = gzip
Headers Size = 29

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
2011-08-23 17:13:43 .....       201744        99209  InstallMonitor.dll
------------------- ----- ------------ ------------  ------------------------
2011-08-23 17:13:43             201744        99209  1 files
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK