avast_infinity_2_6.exe - Internet Security.exe

info
MZ
PE
resources
imports
foremost
version info
signature
hexdump
disasm
log
discuss
donate

filename	avast_infinity_2_6.exe
size	467576 (0x72278)
md5	11531439dac0bc518a2c8f9b8e5eceb8

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x50
blocks_in_file	2
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0xf
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0x1a
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x100

DOS stub

00000000: ba 10 00 0e 1f b4 09 cd  21 b8 01 4c cd 21 90 90  |........!..L.!..|
00000010: 54 68 69 73 20 70 72 6f  67 72 61 6d 20 6d 75 73  |This program mus|
00000020: 74 20 62 65 20 72 75 6e  20 75 6e 64 65 72 20 57  |t be run under W|
00000030: 69 6e 33 32 0d 0a 24 37  00 00 00 00 00 00 00 00  |in32..$7........|
00000040: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
000000c0:

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	6
TimeDateStamp	0x2a425e19
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x818e
Magic	0x10b
LinkerVersion	2.25
SizeOfCode	0x67000
SizeOfInitializedData	0x9c00
SizeOfUninitializedData	0
AddressOfEntryPoint	0x16c4
BaseOfCode	0x1000
BaseOfData	0x68000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	5.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x76000
SizeOfHeaders	0x400
CheckSum	0x7a2d7
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x4000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
CODE	0x1000	0x66fe4	0x67000	R-X CODE
DATA	0x68000	0x308c	0x3200	RW- IDATA
BSS	0x6c000	0x52d	0	RW-
.idata	0x6d000	0xd52	0xe00	RW- IDATA
.reloc	0x6e000	0x11f4	0x1200	R-- IDATA SHARED
.rsrc	0x70000	0x593f	0x4c00	R-- IDATA SHARED

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x6d000	0xd52
RESOURCE	0x70000	0x593f
EXCEPTION	0	0
SECURITY	0x71200	0x1078
BASERELOC	0x6e000	0x11f4
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
ICON	#1	9640	0
ICON	#2	4264	0
ICON	#3	1128	0
RCDATA	#4676	16	1252
RCDATA	#867	560	1252
RCDATA	#220	123	1252
GROUP_ICON	#129	48	0
VERSION	#1	1284	1252
MANIFEST	#1	811	1252

module_name	hint	ord	function_name
user32.dll			SendMessageCallbackA
user32.dll			FillRect
user32.dll			DialogBoxIndirectParamW
user32.dll			IsCharAlphaNumericA
kernel32.dll			GetVersionExA
kernel32.dll			GetUserGeoID
kernel32.dll			TzSpecificLocalTimeToSystemTime
kernel32.dll			FileTimeToSystemTime
kernel32.dll			SetFileAttributesW
kernel32.dll			OpenFileMappingW
kernel32.dll			GetSystemDefaultLangID
kernel32.dll			CreateEventA
kernel32.dll			GetPriorityClass
kernel32.dll			GetFullPathNameA
kernel32.dll			MapViewOfFileEx
kernel32.dll			CreateWaitableTimerW
kernel32.dll			EnumResourceLanguagesW
kernel32.dll			CopyFileExA
kernel32.dll			GetThreadSelectorEntry
kernel32.dll			PeekConsoleInputA
kernel32.dll			lstrcpynA
kernel32.dll			CreateDirectoryW
kernel32.dll			ReadConsoleInputExW
kernel32.dll			AddRefActCtx
kernel32.dll			GetNamedPipeInfo
kernel32.dll			LocalHandle
kernel32.dll			GlobalSize
kernel32.dll			HeapReAlloc
kernel32.dll			SetDefaultCommConfigW
kernel32.dll			ExpandEnvironmentStringsA
kernel32.dll			SetCommTimeouts
kernel32.dll			BeginUpdateResourceA
kernel32.dll			CancelIo
kernel32.dll			lstrcmpi
kernel32.dll			IsDBCSLeadByteEx
kernel32.dll			HeapAlloc
kernel32.dll			IsWow64Process
kernel32.dll			AllocateUserPhysicalPages
kernel32.dll			SetCommBreak
kernel32.dll			CreateFileA
kernel32.dll			SignalObjectAndWait
kernel32.dll			UpdateResourceW
kernel32.dll			GetCalendarInfoW
kernel32.dll			UpdateResourceA
kernel32.dll			CreateDirectoryExW
kernel32.dll			FatalAppExitW
kernel32.dll			FindFirstChangeNotificationW
kernel32.dll			SetErrorMode
kernel32.dll			FindFirstVolumeA
kernel32.dll			WriteProfileSectionW
kernel32.dll			TzSpecificLocalTimeToSystemTime
kernel32.dll			RegisterWowExec
kernel32.dll			AddConsoleAliasA
kernel32.dll			SetSystemTimeAdjustment
kernel32.dll			MapUserPhysicalPages
kernel32.dll			WriteConsoleOutputA
kernel32.dll			EnumCalendarInfoExW
kernel32.dll			DosDateTimeToFileTime
kernel32.dll			DeleteTimerQueueTimer
kernel32.dll			GetPrivateProfileSectionNamesA
kernel32.dll			LZStart
kernel32.dll			lstrcpyA
kernel32.dll			FindCloseChangeNotification
kernel32.dll			CallNamedPipeA
kernel32.dll			GetExpandedNameA
kernel32.dll			lstrcmpiA
kernel32.dll			LZClose
kernel32.dll			RtlCaptureContext
kernel32.dll			WriteConsoleInputW
kernel32.dll			VirtualQuery
kernel32.dll			LoadLibraryA
kernel32.dll			GetModuleHandleW
kernel32.dll			GlobalAlloc
kernel32.dll			GetCurrentProcessId
user32.dll			SetMenuContextHelpId
user32.dll			GetSysColorBrush
user32.dll			GetShellWindow
user32.dll			GetWindowTextW
user32.dll			IsMenu
user32.dll			SetClipboardViewer
user32.dll			MapWindowPoints
user32.dll			GetMessageTime
user32.dll			SendMessageTimeoutW
user32.dll			SetSystemMenu
user32.dll			MenuWindowProcW
user32.dll			GetKeyState
user32.dll			FlashWindowEx
user32.dll			EnumDesktopsW
user32.dll			GetWindow
user32.dll			WaitForInputIdle
user32.dll			wvsprintfA
user32.dll			UnlockWindowStation
user32.dll			CopyIcon
user32.dll			wsprintfW
user32.dll			DrawTextW
user32.dll			SetKeyboardState
user32.dll			SetSysColors
user32.dll			GetUserObjectSecurity
user32.dll			GetClipboardOwner
user32.dll			MessageBoxTimeoutA
user32.dll			CreateIconFromResourceEx
user32.dll			DrawIcon
user32.dll			DestroyIcon
user32.dll			GetMessagePos
user32.dll			WaitMessage
user32.dll			AdjustWindowRect
user32.dll			CharNextA
user32.dll			CheckDlgButton
user32.dll			IsCharAlphaW
user32.dll			SystemParametersInfoA
user32.dll			GetWindowWord
user32.dll			LoadKeyboardLayoutA
user32.dll			BringWindowToTop
user32.dll			PrivateExtractIconsA
user32.dll			DlgDirListA
user32.dll			GetAsyncKeyState
user32.dll			SendMessageCallbackA
user32.dll			CallMsgFilterA
user32.dll			AnimateWindow
user32.dll			GetClassNameW
user32.dll			CharToOemBuffA
user32.dll			DefWindowProcW
user32.dll			SetDoubleClickTime
user32.dll			GrayStringA
user32.dll			EnumClipboardFormats
user32.dll			GetInternalWindowPos
user32.dll			IsGUIThread

StringTable 040904E4

ProductName	Internet Security
CompanyName	Rashal Alexsandr
FileDescription	Internet Security
FileVersion	3.92.0
InternalName	Internet Security
LegalCopyright	Copyright © Internet Security 1996-2010
OriginalFilename	Internet Security.exe
Comments	PS, VDS или Виртуальный сервер в облаке на SSD дисках Виртуальный или VDS,VPS сервер от VDS64 - это полноценная альтернатива физическому выделенному серверу с большим количеством преимуществ, высокой стабильностью, простоте в управлении и настройке, отка

VS_FIXEDFILEINFO

FileVersion	3.92.0.0
ProductVersion	3.92.0.0
StrucVersion	0x10000
FileFlagsMask	0
FileFlags	0
FileOS	4
FileType	1
FileSubtype	0

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=US/O=Thawte, Inc./CN=Thawte Code Signing CA - G2

serial: 7A7E5E3CC949C470ED95B81AD98FC138

Certificates (3)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:97:4d:78:73:a5:bc:ab:0d:2f:b3:70:19:2f:ce:5e
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2006 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA
        Validity
            Not Before: Feb  8 00:00:00 2010 GMT
            Not After : Feb  7 23:59:59 2020 GMT
        Subject: C=US, O=Thawte, Inc., CN=Thawte Code Signing CA - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b7:8b:cf:75:5b:9f:25:da:7e:39:b0:93:db:38:
                    d3:a9:23:d0:82:fa:e9:24:7e:5c:0b:8e:83:f8:e6:
                    7a:59:e6:a3:c5:98:a7:99:d2:44:ff:00:a6:a5:39:
                    04:8a:da:29:88:ea:db:a2:f3:1c:99:15:26:c2:b1:
                    f4:fc:e1:0c:47:a9:09:11:06:0a:20:92:b9:c7:a0:
                    04:8c:5c:94:19:ab:5b:25:2c:1d:62:7e:70:0d:ce:
                    61:6c:dd:2b:82:c9:ce:5d:48:5f:f7:c2:be:bc:41:
                    23:1e:4f:29:5d:d7:4f:bc:f4:c5:2a:fc:63:e6:7c:
                    26:4e:99:a7:79:41:9e:10:4a:7a:79:c9:c6:86:f7:
                    86:95:d2:26:ce:3c:18:2a:d6:7c:ce:af:cd:ad:bb:
                    f7:82:2c:70:26:37:45:e5:0f:47:22:c6:01:28:bd:
                    2e:83:5c:6a:a4:47:c1:e7:d0:d8:6b:81:46:3f:21:
                    17:f5:07:c5:43:5a:a6:67:2c:b8:7b:60:11:b5:83:
                    ee:f5:74:0a:72:71:44:3d:58:fe:e8:1a:ab:38:c3:
                    59:db:7f:6e:38:7d:76:c7:72:69:98:36:96:57:d3:
                    66:1c:d2:54:91:04:2e:54:19:b0:dc:3d:b5:22:5e:
                    86:d5:2a:7e:20:df:5d:e6:7a:b1:65:fe:c5:02:4e:
                    31:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.thawte.com/ThawtePCA.crl
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                OCSP - URI:http://ocsp.thawte.com
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, Code Signing
            X509v3 Subject Alternative Name: 
                DirName:/CN=VeriSignMPKI-2-10
            X509v3 Subject Key Identifier: 
                D4:0D:65:3F:7A:BD:34:C6:FE:47:E7:4C:0D:C0:BD:F2:DE:15:AB:71
            X509v3 Authority Key Identifier: 
                7B:5B:45:CF:AF:CE:CB:7A:FD:31:92:1A:6A:B6:F3:46:EB:57:48:50
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        56:fe:53:5c:e1:c7:9e:bc:a7:ed:7e:53:6d:6a:14:4b:51:8c:
        40:5e:80:5f:aa:a4:e8:2f:ef:38:c8:04:c9:ca:3e:cf:df:3a:
        58:4e:b0:d4:b6:63:c5:29:57:fa:02:05:9a:45:4d:68:db:2a:
        1b:d4:34:3d:9f:00:c3:5a:cb:95:49:a5:6e:e1:b0:c5:fc:41:
        4d:41:4a:6f:d3:77:c8:d7:38:8d:e4:19:de:18:f3:1f:15:65:
        83:6d:45:0c:53:f9:0a:9a:2e:a5:5d:bf:6f:32:81:18:92:19:
        6a:55:00:ad:63:1c:52:06:7e:55:d9:29:68:ae:4a:7c:18:9a:
        79:88:6b:23:23:d8:27:38:2a:29:87:76:ca:fb:c7:b6:62:23:
        1f:ed:7a:56:4c:dd:9c:32:5b:f5:3d:0c:46:18:95:3b:2a:23:
        68:83:64:41:d9:00:6d:0f:19:24:15:68:72:bd:c5:71:67:6e:
        ac:4c:db:90:eb:51:a5:1a:62:07:d0:be:6a:00:47:3c:72:2f:
        ec:4f:61:3e:73:85:ce:5a:0a:b7:ba:c0:1c:13:75:e3:22:39:
        28:dd:6d:1d:09:46:9d:4f:ba:e8:40:81:91:c6:a4:ce:94:72:
        1b:01:cf:2a:6e:15:67:95:89:ae:7d:b7:b7:cd:f9:0a:3d:75:
        b6:6b:3c:25

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:4e:d5:57:20:d5:ed:ec:49:f4:2f:ce:37:db:2b:6d
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2006 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA
        Validity
            Not Before: Nov 17 00:00:00 2006 GMT
            Not After : Jul 16 23:59:59 2036 GMT
        Subject: C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2006 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ac:a0:f0:fb:80:59:d4:9c:c7:a4:cf:9d:a1:59:
                    73:09:10:45:0c:0d:2c:6e:68:f1:6c:5b:48:68:49:
                    59:37:fc:0b:33:19:c2:77:7f:cc:10:2d:95:34:1c:
                    e6:eb:4d:09:a7:1c:d2:b8:c9:97:36:02:b7:89:d4:
                    24:5f:06:c0:cc:44:94:94:8d:02:62:6f:eb:5a:dd:
                    11:8d:28:9a:5c:84:90:10:7a:0d:bd:74:66:2f:6a:
                    38:a0:e2:d5:54:44:eb:1d:07:9f:07:ba:6f:ee:e9:
                    fd:4e:0b:29:f5:3e:84:a0:01:f1:9c:ab:f8:1c:7e:
                    89:a4:e8:a1:d8:71:65:0d:a3:51:7b:ee:bc:d2:22:
                    60:0d:b9:5b:9d:df:ba:fc:51:5b:0b:af:98:b2:e9:
                    2e:e9:04:e8:62:87:de:2b:c8:d7:4e:c1:4c:64:1e:
                    dd:cf:87:58:ba:4a:4f:ca:68:07:1d:1c:9d:4a:c6:
                    d5:2f:91:cc:7c:71:72:1c:c5:c0:67:eb:32:fd:c9:
                    92:5c:94:da:85:c0:9b:bf:53:7d:2b:09:f4:8c:9d:
                    91:1f:97:6a:52:cb:de:09:36:a4:77:d8:7b:87:50:
                    44:d5:3e:6e:29:69:fb:39:49:26:1e:09:a5:80:7b:
                    40:2d:eb:e8:27:85:c9:fe:61:fd:7e:e6:7c:97:1d:
                    d5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier: 
                7B:5B:45:CF:AF:CE:CB:7A:FD:31:92:1A:6A:B6:F3:46:EB:57:48:50
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        79:11:c0:4b:b3:91:b6:fc:f0:e9:67:d4:0d:6e:45:be:55:e8:
        93:d2:ce:03:3f:ed:da:25:b0:1d:57:cb:1e:3a:76:a0:4c:ec:
        50:76:e8:64:72:0c:a4:a9:f1:b8:8b:d6:d6:87:84:bb:32:e5:
        41:11:c0:77:d9:b3:60:9d:eb:1b:d5:d1:6e:44:44:a9:a6:01:
        ec:55:62:1d:77:b8:5c:8e:48:49:7c:9c:3b:57:11:ac:ad:73:
        37:8e:2f:78:5c:90:68:47:d9:60:60:e6:fc:07:3d:22:20:17:
        c4:f7:16:e9:c4:d8:72:f9:c8:73:7c:df:16:2f:15:a9:3e:fd:
        6a:27:b6:a1:eb:5a:ba:98:1f:d5:e3:4d:64:0a:9d:13:c8:61:
        ba:f5:39:1c:87:ba:b8:bd:7b:22:7f:f6:fe:ac:40:79:e5:ac:
        10:6f:3d:8f:1b:79:76:8b:c4:37:b3:21:18:84:e5:36:00:eb:
        63:20:99:b9:e9:fe:33:04:bb:41:c8:c1:02:f9:44:63:20:9e:
        81:ce:42:d3:d6:3f:2c:76:d3:63:9c:59:dd:8f:a6:e1:0e:a0:
        2e:41:f7:2e:95:47:cf:bc:fd:33:f3:f6:0b:61:7e:7e:91:2b:
        81:47:c2:27:30:ee:a7:10:5d:37:8f:5c:39:2b:e4:04:f0:7b:
        8d:56:8c:68

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:7e:5e:3c:c9:49:c4:70:ed:95:b8:1a:d9:8f:c1:38
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Thawte, Inc., CN=Thawte Code Signing CA - G2
        Validity
            Not Before: Oct 17 00:00:00 2014 GMT
            Not After : Oct 17 23:59:59 2015 GMT
        Subject: C=RU, ST=Moscow region, L=Moscow, O=OOO IT Service, OU=OOO IT Service, CN=OOO IT Service
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d1:53:99:7d:d2:44:f1:93:dc:b4:a7:2d:2f:68:
                    7e:87:31:85:4a:01:02:fc:ca:a1:7f:5c:df:8a:6a:
                    59:0f:6d:08:cd:be:79:30:7e:f1:ba:87:86:1f:4f:
                    68:b1:38:fd:72:c0:34:c7:ec:d0:7b:47:81:a8:4b:
                    75:6f:ed:dd:9f:16:88:f1:f8:39:b7:60:73:ac:f7:
                    7b:2b:e7:bd:25:2d:36:92:89:d2:4d:08:c3:ce:f2:
                    7a:0a:d6:db:3e:ab:e4:c4:4e:03:13:d5:c5:52:d3:
                    30:a4:a7:3a:9d:de:8e:3b:ce:48:97:47:c9:e5:b2:
                    21:a3:34:b6:9c:39:25:30:48:f1:10:a0:b3:3d:af:
                    44:09:08:c6:f2:f4:9c:45:55:99:13:3b:8a:95:be:
                    09:9c:97:de:70:c3:d7:1f:97:76:4c:fd:50:02:72:
                    6b:91:6a:40:a6:2a:2e:2e:f0:27:fd:d9:f7:01:84:
                    24:40:08:9e:ed:72:8b:e1:41:bf:2f:03:c8:8c:3c:
                    86:d0:66:68:d0:5a:f3:f5:a2:bc:ef:0c:7f:10:14:
                    af:c7:92:5d:63:1f:0a:6d:d4:53:a4:86:6c:41:94:
                    14:4e:5f:52:69:a4:51:a7:a2:3f:45:59:e8:ba:a9:
                    ac:26:01:0e:5f:14:9b:ab:f4:c2:89:be:b9:03:2d:
                    4c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Authority Key Identifier: 
                D4:0D:65:3F:7A:BD:34:C6:FE:47:E7:4C:0D:C0:BD:F2:DE:15:AB:71
            X509v3 Subject Key Identifier: 
                AD:35:25:DB:96:C7:BB:CC:82:50:08:06:76:CD:EE:F9:9E:CE:44:A0
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://th.symcb.com/th.crl
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage: 
                Code Signing, Microsoft Commercial Code Signing
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.48.2
                  CPS: https://www.thawte.com/cps
                  User Notice:
                    Explicit Text: https://www.thawte.com/repository
            2.5.29.4: 
                0.0.0..
+.....7.......
            Authority Information Access: 
                OCSP - URI:http://th.symcd.com
                CA Issuers - URI:http://th.symcb.com/th.crt
            Netscape Cert Type: 
                Object Signing
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        6b:05:f1:8b:6a:e6:c1:e7:b1:f3:28:26:9f:49:a1:7f:7c:d1:
        e5:d6:d3:52:7c:c4:40:0c:7b:e9:c5:26:02:85:68:ff:21:bd:
        76:91:a7:7a:3c:74:ab:90:a3:f8:6f:7d:fe:4a:d7:b5:fc:70:
        6d:c8:d1:f6:54:63:db:80:23:27:18:97:12:ac:ba:96:61:25:
        79:13:97:ea:f3:d1:a2:57:6d:f6:72:1f:20:d9:7e:2e:e6:4a:
        da:67:4c:3d:4d:41:07:bb:eb:b7:4b:2d:0d:24:e8:f6:96:a0:
        a6:2a:35:ed:c7:54:fb:d3:28:bc:4d:f0:c3:c4:ea:19:0f:82:
        69:5e:8d:68:27:c0:ad:c0:1c:f5:7a:b1:36:8d:c5:bb:38:28:
        3e:05:cc:7f:ef:93:f8:de:a4:22:ed:81:34:e8:48:c7:65:d9:
        c9:fa:d3:c3:05:71:59:64:44:c1:be:ce:d7:66:f0:a8:6c:91:
        d8:47:06:fe:1f:e2:63:07:db:15:24:da:08:7a:69:49:54:e8:
        65:fb:5a:00:82:a7:af:98:eb:19:64:52:d8:77:11:64:31:c3:
        e2:5a:95:89:17:26:6b:50:4b:aa:11:9d:1d:f5:1d:3f:34:52:
        7d:e1:bf:48:53:35:f8:37:ff:5b:0c:0c:31:58:ac:16:0d:91:
        90:1c:9e:bc

pkcs7-signedData

SHA1: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15

00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |

SHA1

9f 7d 49 e0 c4 4f 62 bd 2b 8f c2 25 8b 30 0d ed |.}I..Ob.+..%.0..| e7 09 f7 a3 |.... |

Certificates
- Certificate #0
  - 2
    - 47:97:4D:78:73:A5:BC:AB:0D:2F:B3:70:19:2F:CE:5E
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - O: thawte, Inc.
      - OU: Certification Services Division
      - OU: (c) 2006 thawte, Inc. - For authorized use only
      - CN: thawte Primary Root CA
    - 2010-02-08 00:00:00 UTC: 2020-02-07 23:59:59 UTC
    - Subject
      - C: US
      - O: Thawte, Inc.
      - CN: Thawte Code Signing CA - G2
    - #5
      - rsaEncryption: nil
      - B7:8B:CF:75:5B:9F:25:DA:7E:39:B0:93:DB:38:D3:A9:
        23:D0:82:FA:E9:24:7E:5C:0B:8E:83:F8:E6:7A:59:E6:
        A3:C5:98:A7:99:D2:44:FF:00:A6:A5:39:04:8A:DA:29:
        88:EA:DB:A2:F3:1C:99:15:26:C2:B1:F4:FC:E1:0C:47:
        A9:09:11:06:0A:20:92:B9:C7:A0:04:8C:5C:94:19:AB:
        5B:25:2C:1D:62:7E:70:0D:CE:61:6C:DD:2B:82:C9:CE:
        5D:48:5F:F7:C2:BE:BC:41:23:1E:4F:29:5D:D7:4F:BC:
        F4:C5:2A:FC:63:E6:7C:26:4E:99:A7:79:41:9E:10:4A:
        7A:79:C9:C6:86:F7:86:95:D2:26:CE:3C:18:2A:D6:7C:
        CE:AF:CD:AD:BB:F7:82:2C:70:26:37:45:E5:0F:47:22:
        C6:01:28:BD:2E:83:5C:6A:A4:47:C1:E7:D0:D8:6B:81:
        46:3F:21:17:F5:07:C5:43:5A:A6:67:2C:B8:7B:60:11:
        B5:83:EE:F5:74:0A:72:71:44:3D:58:FE:E8:1A:AB:38:
        C3:59:DB:7F:6E:38:7D:76:C7:72:69:98:36:96:57:D3:
        66:1C:D2:54:91:04:2E:54:19:B0:DC:3D:B5:22:5E:86:
        D5:2A:7E:20:DF:5D:E6:7A:B1:65:FE:C5:02:4E:31:2D: 0x010001
    - X509v3 extensions
      - basicConstraints
        true
        true: 0
      - crlDistributionPoints: http://crl.thawte.com/ThawtePCA.crl
      - keyUsage: true, 6
      - authorityInfoAccess
        OCSP: http://ocsp.thawte.com
      - extendedKeyUsage
        clientAuth: codeSigning
      - subjectAltName
        CN: VeriSignMPKI-2-10
      - subjectKeyIdentifier:
        d4 0d 65 3f 7a bd 34 c6 fe 47 e7 4c 0d c0 bd f2 |..e?z.4..G.L....| de 15 ab 71 |...q |
      - authorityKeyIdentifier:
        7b 5b 45 cf af ce cb 7a fd 31 92 1a 6a b6 f3 46 |{[E....z.1..j..F| eb 57 48 50 |.WHP |
  - RSA-SHA1:
```
56 fe 53 5c e1 c7 9e bc  a7 ed 7e 53 6d 6a 14 4b  |V.S\......~Smj.K|
51 8c 40 5e 80 5f aa a4  e8 2f ef 38 c8 04 c9 ca  |Q.@^._.../.8....|
3e cf df 3a 58 4e b0 d4  b6 63 c5 29 57 fa 02 05  |>..:XN...c.)W...|
9a 45 4d 68 db 2a 1b d4  34 3d 9f 00 c3 5a cb 95  |.EMh.*..4=...Z..|
49 a5 6e e1 b0 c5 fc 41  4d 41 4a 6f d3 77 c8 d7  |I.n....AMAJo.w..|
38 8d e4 19 de 18 f3 1f  15 65 83 6d 45 0c 53 f9  |8........e.mE.S.|
0a 9a 2e a5 5d bf 6f 32  81 18 92 19 6a 55 00 ad  |....].o2....jU..|
63 1c 52 06 7e 55 d9 29  68 ae 4a 7c 18 9a 79 88  |c.R.~U.)h.J|..y.|
6b 23 23 d8 27 38 2a 29  87 76 ca fb c7 b6 62 23  |k##.'8*).v....b#|
1f ed 7a 56 4c dd 9c 32  5b f5 3d 0c 46 18 95 3b  |..zVL..2[.=.F..;|
2a 23 68 83 64 41 d9 00  6d 0f 19 24 15 68 72 bd  |*#h.dA..m..$.hr.|
c5 71 67 6e ac 4c db 90  eb 51 a5 1a 62 07 d0 be  |.qgn.L...Q..b...|
6a 00 47 3c 72 2f ec 4f  61 3e 73 85 ce 5a 0a b7  |j.Gs..Z..|
ba c0 1c 13 75 e3 22 39  28 dd 6d 1d 09 46 9d 4f  |....u."9(.m..F.O|
ba e8 40 81 91 c6 a4 ce  94 72 1b 01 cf 2a 6e 15  |..@......r...*n.|
67 95 89 ae 7d b7 b7 cd  f9 0a 3d 75 b6 6b 3c 25  |g...}.....=u.k<%|
```
- Certificate #1
  - 2
    - 34:4E:D5:57:20:D5:ED:EC:49:F4:2F:CE:37:DB:2B:6D
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - O: thawte, Inc.
      - OU: Certification Services Division
      - OU: (c) 2006 thawte, Inc. - For authorized use only
      - CN: thawte Primary Root CA
    - 2006-11-17 00:00:00 UTC: 2036-07-16 23:59:59 UTC
    - Subject
      - C: US
      - O: thawte, Inc.
      - OU: Certification Services Division
      - OU: (c) 2006 thawte, Inc. - For authorized use only
      - CN: thawte Primary Root CA
    - #5
      - rsaEncryption: nil
      - AC:A0:F0:FB:80:59:D4:9C:C7:A4:CF:9D:A1:59:73:09:
        10:45:0C:0D:2C:6E:68:F1:6C:5B:48:68:49:59:37:FC:
        0B:33:19:C2:77:7F:CC:10:2D:95:34:1C:E6:EB:4D:09:
        A7:1C:D2:B8:C9:97:36:02:B7:89:D4:24:5F:06:C0:CC:
        44:94:94:8D:02:62:6F:EB:5A:DD:11:8D:28:9A:5C:84:
        90:10:7A:0D:BD:74:66:2F:6A:38:A0:E2:D5:54:44:EB:
        1D:07:9F:07:BA:6F:EE:E9:FD:4E:0B:29:F5:3E:84:A0:
        01:F1:9C:AB:F8:1C:7E:89:A4:E8:A1:D8:71:65:0D:A3:
        51:7B:EE:BC:D2:22:60:0D:B9:5B:9D:DF:BA:FC:51:5B:
        0B:AF:98:B2:E9:2E:E9:04:E8:62:87:DE:2B:C8:D7:4E:
        C1:4C:64:1E:DD:CF:87:58:BA:4A:4F:CA:68:07:1D:1C:
        9D:4A:C6:D5:2F:91:CC:7C:71:72:1C:C5:C0:67:EB:32:
        FD:C9:92:5C:94:DA:85:C0:9B:BF:53:7D:2B:09:F4:8C:
        9D:91:1F:97:6A:52:CB:DE:09:36:A4:77:D8:7B:87:50:
        44:D5:3E:6E:29:69:FB:39:49:26:1E:09:A5:80:7B:40:
        2D:EB:E8:27:85:C9:FE:61:FD:7E:E6:7C:97:1D:D5:9D: 0x010001
    - X509v3 extensions
      - basicConstraints: true, true
      - keyUsage: true, 6
      - subjectKeyIdentifier:
        7b 5b 45 cf af ce cb 7a fd 31 92 1a 6a b6 f3 46 |{[E....z.1..j..F| eb 57 48 50 |.WHP |
  - RSA-SHA1:
```
79 11 c0 4b b3 91 b6 fc  f0 e9 67 d4 0d 6e 45 be  |y..K......g..nE.|
55 e8 93 d2 ce 03 3f ed  da 25 b0 1d 57 cb 1e 3a  |U.....?..%..W..:|
76 a0 4c ec 50 76 e8 64  72 0c a4 a9 f1 b8 8b d6  |v.L.Pv.dr.......|
d6 87 84 bb 32 e5 41 11  c0 77 d9 b3 60 9d eb 1b  |....2.A..w..`...|
d5 d1 6e 44 44 a9 a6 01  ec 55 62 1d 77 b8 5c 8e  |..nDD....Ub.w.\.|
48 49 7c 9c 3b 57 11 ac  ad 73 37 8e 2f 78 5c 90  |HI|.;W...s7./x\.|
68 47 d9 60 60 e6 fc 07  3d 22 20 17 c4 f7 16 e9  |hG.``...=" .....|
c4 d8 72 f9 c8 73 7c df  16 2f 15 a9 3e fd 6a 27  |..r..s|../..>.j'|
b6 a1 eb 5a ba 98 1f d5  e3 4d 64 0a 9d 13 c8 61  |...Z.....Md....a|
ba f5 39 1c 87 ba b8 bd  7b 22 7f f6 fe ac 40 79  |..9.....{"....@y|
e5 ac 10 6f 3d 8f 1b 79  76 8b c4 37 b3 21 18 84  |...o=..yv..7.!..|
e5 36 00 eb 63 20 99 b9  e9 fe 33 04 bb 41 c8 c1  |.6..c ....3..A..|
02 f9 44 63 20 9e 81 ce  42 d3 d6 3f 2c 76 d3 63  |..Dc ...B..?,v.c|
9c 59 dd 8f a6 e1 0e a0  2e 41 f7 2e 95 47 cf bc  |.Y.......A...G..|
fd 33 f3 f6 0b 61 7e 7e  91 2b 81 47 c2 27 30 ee  |.3...a~~.+.G.'0.|
a7 10 5d 37 8f 5c 39 2b  e4 04 f0 7b 8d 56 8c 68  |..]7.\9+...{.V.h|
```
- Certificate #2
  - 2
    - 7A:7E:5E:3C:C9:49:C4:70:ED:95:B8:1A:D9:8F:C1:38
    - RSA-SHA256: nil
    - Issuer
      - C: US
      - O: Thawte, Inc.
      - CN: Thawte Code Signing CA - G2
    - 2014-10-17 00:00:00 UTC: 2015-10-17 23:59:59 UTC
    - Subject
      - C: RU
      - ST: Moscow region
      - L: Moscow
      - O: OOO IT Service
      - OU: OOO IT Service
      - CN: OOO IT Service
    - #5
      - rsaEncryption: nil
      - D1:53:99:7D:D2:44:F1:93:DC:B4:A7:2D:2F:68:7E:87:
        31:85:4A:01:02:FC:CA:A1:7F:5C:DF:8A:6A:59:0F:6D:
        08:CD:BE:79:30:7E:F1:BA:87:86:1F:4F:68:B1:38:FD:
        72:C0:34:C7:EC:D0:7B:47:81:A8:4B:75:6F:ED:DD:9F:
        16:88:F1:F8:39:B7:60:73:AC:F7:7B:2B:E7:BD:25:2D:
        36:92:89:D2:4D:08:C3:CE:F2:7A:0A:D6:DB:3E:AB:E4:
        C4:4E:03:13:D5:C5:52:D3:30:A4:A7:3A:9D:DE:8E:3B:
        CE:48:97:47:C9:E5:B2:21:A3:34:B6:9C:39:25:30:48:
        F1:10:A0:B3:3D:AF:44:09:08:C6:F2:F4:9C:45:55:99:
        13:3B:8A:95:BE:09:9C:97:DE:70:C3:D7:1F:97:76:4C:
        FD:50:02:72:6B:91:6A:40:A6:2A:2E:2E:F0:27:FD:D9:
        F7:01:84:24:40:08:9E:ED:72:8B:E1:41:BF:2F:03:C8:
        8C:3C:86:D0:66:68:D0:5A:F3:F5:A2:BC:EF:0C:7F:10:
        14:AF:C7:92:5D:63:1F:0A:6D:D4:53:A4:86:6C:41:94:
        14:4E:5F:52:69:A4:51:A7:A2:3F:45:59:E8:BA:A9:AC:
        26:01:0E:5F:14:9B:AB:F4:C2:89:BE:B9:03:2D:4C:3D: 0x010001
    - X509v3 extensions
      - basicConstraints
        nil
      - authorityKeyIdentifier:
        d4 0d 65 3f 7a bd 34 c6 fe 47 e7 4c 0d c0 bd f2 |..e?z.4..G.L....| de 15 ab 71 |...q |
      - subjectKeyIdentifier:
        ad 35 25 db 96 c7 bb cc 82 50 08 06 76 cd ee f9 |.5%......P..v...| 9e ce 44 a0 |..D. |
      - crlDistributionPoints: http://th.symcb.com/th.crl
      - keyUsage: true, 0x80
      - extendedKeyUsage
        codeSigning: msCodeCom
      - certificatePolicies
        2.16.840.1.113733.1.7.48.2
        #0
        id-qt-cps: https://www.thawte.com/cps
        id-qt-unotice: https://www.thawte.com/repository
      - 2.5.29.4
        msCodeCom: 0x80
      - authorityInfoAccess
        #0
        OCSP: http://th.symcd.com
        caIssuers: http://th.symcb.com/th.crt
      - nsCertType: 0x10
  - RSA-SHA256:
```
6b 05 f1 8b 6a e6 c1 e7  b1 f3 28 26 9f 49 a1 7f  |k...j.....(&.I..|
7c d1 e5 d6 d3 52 7c c4  40 0c 7b e9 c5 26 02 85  ||....R|.@.{..&..|
68 ff 21 bd 76 91 a7 7a  3c 74 ab 90 a3 f8 6f 7d  |h.!.v..z........"..4.H.|
65 d9 c9 fa d3 c3 05 71  59 64 44 c1 be ce d7 66  |e......qYdD....f|
f0 a8 6c 91 d8 47 06 fe  1f e2 63 07 db 15 24 da  |..l..G....c...$.|
08 7a 69 49 54 e8 65 fb  5a 00 82 a7 af 98 eb 19  |.ziIT.e.Z.......|
64 52 d8 77 11 64 31 c3  e2 5a 95 89 17 26 6b 50  |dR.w.d1..Z...&kP|
4b aa 11 9d 1d f5 1d 3f  34 52 7d e1 bf 48 53 35  |K......?4R}..HS5|
f8 37 ff 5b 0c 0c 31 58  ac 16 0d 91 90 1c 9e bc  |.7.[..1X........|
```

Signer

1
unnamed
- #0
  - C: US
  - O: Thawte, Inc.
  - CN: Thawte Code Signing CA - G2
- 7A:7E:5E:3C:C9:49:C4:70:ED:95:B8:1A:D9:8F:C1:38
SHA1: nil

contentType: 1.3.6.1.4.1.311.2.1.4
signingTime: 2014-12-23 19:44:58 UTC
1.3.6.1.4.1.311.2.1.11: msCodeInd

messageDigest:

aa 72 a6 cb a7 ee 44 2e  aa 6f b3 68 6f ba 21 6e  |.r....D..o.ho.!n|
bb 03 59 6e                                       |..Yn            |

rsaEncryption:

7e ba 09 16 04 fa 77 c5  ca a7 06 3c da bb 70 02  |~.....w....<..p.|
ae 0f 9d 66 bb dd ac 54  db 83 a5 a2 45 bf 53 6b  |...f...T....E.Sk|
22 03 de 8e c5 d3 a4 7f  73 83 9e 25 79 a9 a2 f8  |".......s..%y...|
38 33 04 c3 1a ae ab 3d  60 09 70 29 f9 47 97 f1  |83.....=`.p).G..|
34 02 b2 d6 47 b2 b4 7e  18 05 51 13 b0 b7 0f 3b  |4...G..~..Q....;|
19 43 2b 25 bb d3 63 2b  a5 1d d4 e9 ee d5 f6 99  |.C+%..c+........|
eb a9 cd 4a 33 6e de 64  bd 77 95 a7 c8 5b c4 4d  |...J3n.d.w...[.M|
4c 16 58 07 bf a8 3e 3c  2b 39 de 32 ae 49 8b 71  |L.X...><+9.2.I.q|
9e fb a8 1f 5a 54 27 f3  0d 7a 4c 05 53 b3 b3 a6  |....ZT'..zL.S...|
d3 b8 6d 72 c1 e9 cf df  67 ba d7 db 77 fd f7 64  |..mr....g...w..d|
20 b6 7b a0 86 5f 77 f9  9a 5a fd e3 df 39 4c 08  | .{.._w..Z...9L.|
2f a0 db 3d 90 26 a8 34  25 9c a1 35 52 8f 49 86  |/..=.&.4%..5R.I.|
f2 df c8 e4 7c 27 94 c1  c9 6b 9a 53 75 68 a2 43  |....|'...k.Suh.C|
6c bc b9 7c f5 9b d3 30  f5 d0 b9 eb 95 e6 8d 06  |l..|...0........|
11 71 e6 5a 0a 9a b2 ee  09 39 bb f2 04 db 19 8c  |.q.Z.....9......|
2b 0f 9c 68 ed 1a ec b1  5b 90 cb e1 49 0a 84 f7  |+..h....[...I...|