UpDateIPSW.exe

info
MZ
PE
resources
imports
foremost
version info
signature
hexdump
disasm
log
discuss
donate

filename	UpDateIPSW.exe
size	80784 (0x13b90)
md5	170da57552b67a684251fe67d0899c54

type	PE32 executable (console) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xf8

Rich Header

lib id	version	times used
152	20115	1
158	40219	1
170	40219	19
156	40219	4
171	40219	5
147	30729	5
1	0	157
175	40219	10
154	40219	1
157	40219	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	5
TimeDateStamp	0x549931a8
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x102
Magic	0x10b
LinkerVersion	10.0
SizeOfCode	0xcc00
SizeOfInitializedData	0x5200
SizeOfUninitializedData	0
AddressOfEntryPoint	0xcc4e
BaseOfCode	0x1000
BaseOfData	0xe000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	5.1
ImageVersion	0.0
SubsystemVersion	5.1
Reserved1	0
SizeOfImage	0x15000
SizeOfHeaders	0x400
CheckSum	0x19997
Subsystem	3
DllCharacteristics	0x8140
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0xcb39	0xcc00	R-X CODE
.rdata	0xe000	0x3890	0x3a00	R-- IDATA
.data	0x12000	0x834	0x400	RW- IDATA
.rsrc	0x13000	0x33c	0x400	R-- IDATA
.reloc	0x14000	0xea8	0x1000	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0xffe0	0x64
RESOURCE	0x13000	0x33c
EXCEPTION	0	0
SECURITY	0x12200	0x1990
BASERELOC	0x14000	0xc84
DEBUG	0xe2a0	0x1c
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0xe000	0x270
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
VERSION	#1	320	1252
MANIFEST	#1	346	1252

module_name	hint	function_name
KERNEL32.dll	181	CreateThread
KERNEL32.dll	828	LoadLibraryA
KERNEL32.dll	1110	SetEnvironmentVariableA
KERNEL32.dll	581	GetProcAddress
KERNEL32.dll	475	GetEnvironmentVariableA
KERNEL32.dll	1043	ResumeThread
KERNEL32.dll	1202	Sleep
KERNEL32.dll	202	DecodePointer
KERNEL32.dll	748	InterlockedExchange
KERNEL32.dll	745	InterlockedCompareExchange
KERNEL32.dll	723	HeapSetInformation
KERNEL32.dll	1216	TerminateProcess
KERNEL32.dll	448	GetCurrentProcess
KERNEL32.dll	1235	UnhandledExceptionFilter
KERNEL32.dll	1189	SetUnhandledExceptionFilter
KERNEL32.dll	768	IsDebuggerPresent
KERNEL32.dll	935	QueryPerformanceCounter
KERNEL32.dll	659	GetTickCount
KERNEL32.dll	453	GetCurrentThreadId
KERNEL32.dll	449	GetCurrentProcessId
KERNEL32.dll	633	GetSystemTimeAsFileTime
KERNEL32.dll	234	EncodePointer
ADVAPI32.dll	608	RegOpenKeyExA
ADVAPI32.dll	621	RegQueryValueExA
ADVAPI32.dll	560	RegCloseKey
MSVCP100.dll	3	protected: __thiscall std::basic_ios<char, struct std::char_traits<char> >::basic_ios<char, struct std::char_traits<char> >(void) ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
MSVCP100.dll	601	protected: char * __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::_Pninc(void) ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
MSVCP100.dll	1429	protected: void __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::setp(char , char , char *) ?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
MSVCP100.dll	1430	protected: void __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::setp(char , char ) ?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z
MSVCP100.dll	1266	protected: void __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::pbump(int) ?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
MSVCP100.dll	486	protected: char * __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::_Gninc(void) ?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
MSVCP100.dll	483	protected: char * __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::_Gndec(void) ?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
MSVCP100.dll	882	protected: char * __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::epptr(void)const ?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
MSVCP100.dll	1425	protected: void __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::setg(char , char , char *) ?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
MSVCP100.dll	919	protected: void __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::gbump(int) ?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
MSVCP100.dll	869	protected: char * __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::egptr(void)const ?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
MSVCP100.dll	1272	protected: char * __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::pptr(void)const ?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
MSVCP100.dll	1263	protected: char * __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::pbase(void)const ?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
MSVCP100.dll	1010	protected: char * __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::gptr(void)const ?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
MSVCP100.dll	866	protected: char * __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::eback(void)const ?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
MSVCP100.dll	1254	public: int __thiscall std::codecvt<char, char, int>::out(int &, char const , char const , char const * &, char , char , char * &)const ?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
MSVCP100.dll	1072	public: int __thiscall std::codecvt<char, char, int>::in(int &, char const , char const , char const * &, char , char , char * &)const ?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
MSVCP100.dll	1436	public: void __thiscall std::basic_ios<char, struct std::char_traits<char> >::setstate(int, bool) ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
MSVCP100.dll	117	public: virtual __thiscall std::basic_ios<char, struct std::char_traits<char> >::~basic_ios<char, struct std::char_traits<char> >(void) ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
MSVCP100.dll	1068	protected: virtual void __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::imbue(class std::locale const &) ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
MSVCP100.dll	1420	protected: virtual class std::basic_streambuf<char, struct std::char_traits<char> > * __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::setbuf(char *, __int64) ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
MSVCP100.dll	1592	protected: virtual __int64 __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::xsputn(char const *, __int64) ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
MSVCP100.dll	1589	protected: virtual __int64 __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::xsgetn(char *, __int64) ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
MSVCP100.dll	1546	protected: virtual int __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::uflow(void) ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
MSVCP100.dll	1452	protected: virtual __int64 __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::showmanyc(void) ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
MSVCP100.dll	642	public: virtual void __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::_Unlock(void) ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
MSVCP100.dll	567	public: virtual void __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::_Lock(void) ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
MSVCP100.dll	129	public: virtual __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::~basic_streambuf<char, struct std::char_traits<char> >(void) ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
MSVCP100.dll	1009	public: bool __thiscall std::ios_base::good(void)const ?good@ios_base@std@@QBE_NXZ
MSVCP100.dll	657	public: bool __thiscall std::codecvt_base::always_noconv(void)const ?always_noconv@codecvt_base@std@@QBE_NXZ
MSVCP100.dll	414	public: class std::locale::facet * __thiscall std::locale::facet::_Decref(void) ?_Decref@facet@locale@std@@QAEPAV123@XZ
MSVCP100.dll	499	public: void __thiscall std::locale::facet::_Incref(void) ?_Incref@facet@locale@std@@QAEXXZ
MSVCP100.dll	314	public: __thiscall std::locale::id::operator unsigned int(void) ??Bid@locale@std@@QAEIXZ
MSVCP100.dll	1549	bool __cdecl std::uncaught_exception(void) ?uncaught_exception@std@@YA_NXZ
MSVCP100.dll	1480	public: __int64 __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::sputn(char const *, __int64) ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
MSVCP100.dll	595	public: void __thiscall std::basic_ostream<char, struct std::char_traits<char> >::_Osfx(void) ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
MSVCP100.dll	1525	public: class std::basic_ostream<char, struct std::char_traits<char> > * __thiscall std::basic_ios<char, struct std::char_traits<char> >::tie(void)const ?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
MSVCP100.dll	17	public: __thiscall std::basic_istream<char, struct std::char_traits<char> >::basic_istream<char, struct std::char_traits<char> >(class std::basic_streambuf<char, struct std::char_traits<char> > *, bool) ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
MSVCP100.dll	28	public: __thiscall std::basic_ostream<char, struct std::char_traits<char> >::basic_ostream<char, struct std::char_traits<char> >(class std::basic_streambuf<char, struct std::char_traits<char> > *, bool) ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
MSVCP100.dll	906	public: char __thiscall std::basic_ios<char, struct std::char_traits<char> >::fill(void)const ?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
MSVCP100.dll	665	public: void __thiscall std::basic_ios<char, struct std::char_traits<char> >::clear(int, bool) ?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
MSVCP100.dll	1477	public: int __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::sputc(char) ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
MSVCP100.dll	1518	public: class std::fpos<int> __thiscall std::basic_istream<char, struct std::char_traits<char> >::tellg(void) ?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ
MSVCP100.dll	1397	public: class std::basic_istream<char, struct std::char_traits<char> > & __thiscall std::basic_istream<char, struct std::char_traits<char> >::seekg(__int64, int) ?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
MSVCP100.dll	123	public: virtual __thiscall std::basic_istream<char, struct std::char_traits<char> >::~basic_istream<char, struct std::char_traits<char> >(void) ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
MSVCP100.dll	913	public: class std::basic_ostream<char, struct std::char_traits<char> > & __thiscall std::basic_ostream<char, struct std::char_traits<char> >::flush(void) ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
MSVCP100.dll	264	public: class std::basic_ostream<char, struct std::char_traits<char> > & __thiscall std::basic_ostream<char, struct std::char_traits<char> >::operator<<(int) ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
MSVCP100.dll	271	public: class std::basic_ostream<char, struct std::char_traits<char> > & __thiscall std::basic_ostream<char, struct std::char_traits<char> >::operator<<(class std::basic_ostream<char, struct std::char_traits<char> > & (__cdecl*)(class std::basic_ostream<char, struct std::char_traits<char> > &)) ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
MSVCP100.dll	126	public: virtual __thiscall std::basic_ostream<char, struct std::char_traits<char> >::~basic_ostream<char, struct std::char_traits<char> >(void) ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
MSVCP100.dll	1355	public: class std::basic_streambuf<char, struct std::char_traits<char> > * __thiscall std::basic_ios<char, struct std::char_traits<char> >::rdbuf(void)const ?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
MSVCP100.dll	875	class std::basic_ostream<char, struct std::char_traits<char> > & __cdecl std::endl(class std::basic_ostream<char, struct std::char_traits<char> > &) ?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
MSVCP100.dll	1580	public: __int64 __thiscall std::ios_base::width(__int64) ?width@ios_base@std@@QAE_J_J@Z
MSVCP100.dll	1581	public: __int64 __thiscall std::ios_base::width(void)const ?width@ios_base@std@@QBE_JXZ
MSVCP100.dll	912	public: int __thiscall std::ios_base::flags(void)const ?flags@ios_base@std@@QBEHXZ
MSVCP100.dll	1557	public: int __thiscall std::codecvt<char, char, int>::unshift(int &, char , char , char * &)const ?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z
MSVCP100.dll	38	protected: __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::basic_streambuf<char, struct std::char_traits<char> >(void) ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
MSVCP100.dll	1004	public: class std::locale __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::getloc(void)const ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
MSVCP100.dll	502	protected: void __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::_Init(void) ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
MSVCP100.dll	501	protected: void __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::_Init(char * , char , int , char * , char , int ) ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAPAD0PAH001@Z
MSVCP100.dll	432	public: static unsigned int __cdecl std::codecvt<char, char, int>::_Getcat(class std::locale::facet const * , class std::locale const ) ?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
MSVCP100.dll	1023	public: static class std::locale::id std::codecvt<char, char, int>::id ?id@?$codecvt@DDH@std@@2V0locale@2@A
MSVCP100.dll	424	struct _iobuf * __cdecl std::_Fiopen(char const *, int, int) ?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
MSVCP100.dll	466	private: static class std::locale::_Locimp * __cdecl std::locale::_Getgloballocale(void) ?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
MSVCP100.dll	652	void __cdecl std::_Xlength_error(char const *) ?_Xlength_error@std@@YAXPBD@Z
MSVCP100.dll	96	public: __thiscall std::_Lockit::_Lockit(int) ??0_Lockit@std@@QAE@H@Z
MSVCP100.dll	158	public: __thiscall std::_Lockit::~_Lockit(void) ??1_Lockit@std@@QAE@XZ
MSVCP100.dll	654	void __cdecl std::_Xout_of_range(char const *) ?_Xout_of_range@std@@YAXPBD@Z
MSVCP100.dll	410	__int64 const std::_BADOFF ?_BADOFF@std@@3_JB
MSVCP100.dll	1511	protected: virtual int __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::sync(void) ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
MSVCR100.dll	1401	fflush
MSVCR100.dll	1402	fgetc
MSVCR100.dll	1426	fsetpos
MSVCR100.dll	1515	setvbuf
MSVCR100.dll	1491	memset
MSVCR100.dll	804	_lock_file
MSVCR100.dll	101	void __cdecl operator delete(void *) ??3@YAXPAX@Z
MSVCR100.dll	1488	memcpy_s
MSVCR100.dll	1430	fwrite
MSVCR100.dll	1398	fclose
MSVCR100.dll	99	void * __cdecl operator new(unsigned int) ??2@YAPAXI@Z
MSVCR100.dll	1486	memcmp
MSVCR100.dll	1530	strcpy
MSVCR100.dll	1485	memchr
MSVCR100.dll	1040	_snprintf
MSVCR100.dll	1495	printf
MSVCR100.dll	1563	tolower
MSVCR100.dll	314	__CxxFrameHandler3
MSVCR100.dll	1165	_unlock
MSVCR100.dll	347	__dllonexit
MSVCR100.dll	803	_lock
MSVCR100.dll	969	_onexit
MSVCR100.dll	453	_amsg_exit
MSVCR100.dll	355	__getmainargs
MSVCR100.dll	476	_cexit
MSVCR100.dll	554	_exit
MSVCR100.dll	301	_XcptFilter
MSVCR100.dll	1395	exit
MSVCR100.dll	356	__initenv
MSVCR100.dll	688	_initterm
MSVCR100.dll	689	_initterm_e
MSVCR100.dll	492	_configthreadlocale
MSVCR100.dll	418	__setusermatherr
MSVCR100.dll	491	_commode
MSVCR100.dll	581	_fmode
MSVCR100.dll	415	__set_app_type
MSVCR100.dll	507	_crt_debugger_hook
MSVCR100.dll	258	void __cdecl terminate(void) ?terminate@@YAXXZ
MSVCR100.dll	238	public: void __thiscall type_info::_type_info_dtor_internal_method(void) ?_type_info_dtor_internal_method@type_info@@QAEXXZ
MSVCR100.dll	545	_except_handler4_common
MSVCR100.dll	696	_invoke_watson
MSVCR100.dll	495	_controlfp_s
MSVCR100.dll	601	_fseeki64
MSVCR100.dll	1403	fgetpos
MSVCR100.dll	1567	ungetc
MSVCR100.dll	1536	strlen
MSVCR100.dll	1166	_unlock_file
MSVCR100.dll	1489	memmove
MSVCR100.dll	36	public: __thiscall std::exception::exception(class std::exception const &) ??0exception@std@@QAE@ABV01@@Z
MSVCR100.dll	34	public: __thiscall std::exception::exception(char const * const &) ??0exception@std@@QAE@ABQBD@Z
MSVCR100.dll	93	public: virtual __thiscall std::exception::~exception(void) ??1exception@std@@UAE@XZ
MSVCR100.dll	269	public: virtual char const * __thiscall std::exception::what(void)const ?what@exception@std@@UBEPBDXZ
MSVCR100.dll	20	public: __thiscall std::bad_cast::bad_cast(class std::bad_cast const &) ??0bad_cast@std@@QAE@ABV01@@Z
MSVCR100.dll	21	public: __thiscall std::bad_cast::bad_cast(char const *) ??0bad_cast@std@@QAE@PBD@Z
MSVCR100.dll	89	public: virtual __thiscall std::bad_cast::~bad_cast(void) ??1bad_cast@std@@UAE@XZ
MSVCR100.dll	1413	fputc
MSVCR100.dll	1487	memcpy
MSVCR100.dll	289	_CxxThrowException

StringTable 040904b0

FileVersion	1.0.0.2
ProductVersion	1.0.0.2

VS_FIXEDFILEINFO

FileVersion	1.0.0.2
ProductVersion	1.0.0.2
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	1
FileSubtype	0

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https:\/\/www.verisign.com\/rpa (c)10/CN=VeriSign Class 3 Code Signing 2010 CA

serial: 5209CE411DC780947AC0E4E9E3B95D44

Certificates (4)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
        Validity
            Not Before: Dec 21 00:00:00 2012 GMT
            Not After : Dec 30 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:b3:49:54:4b:97:1c:12:0a:d8:25:79:91:
                    22:57:2a:6f:dc:b8:26:c4:43:73:6b:c2:bf:2e:50:
                    5a:fb:14:c2:76:8e:43:01:25:43:b4:a1:e2:45:f4:
                    e8:b7:7b:c3:74:cc:22:d7:b4:94:00:02:f7:4d:ed:
                    bf:b4:b7:44:24:6b:cd:5f:45:3b:d1:44:ce:43:12:
                    73:17:82:8b:69:b4:2b:cb:99:1e:ac:72:1b:26:4d:
                    71:1f:b1:31:dd:fb:51:61:02:53:a6:aa:f5:49:2c:
                    05:78:45:a5:2f:89:ce:e7:99:e7:fe:8c:e2:57:3f:
                    3d:c6:92:dc:4a:f8:7b:33:e4:79:0a:fb:f0:75:88:
                    41:9c:ff:c5:03:51:99:aa:d7:6c:9f:93:69:87:65:
                    29:83:85:c2:60:14:c4:c8:c9:3b:14:da:c0:81:f0:
                    1f:0d:74:de:92:22:ab:ca:f7:fb:74:7c:27:e6:f7:
                    4a:1b:7f:a7:c3:9e:2d:ae:8a:ea:a6:e6:aa:27:16:
                    7d:61:f7:98:71:11:bc:e2:50:a1:4b:e5:5d:fa:e5:
                    0e:a7:2c:9f:aa:65:20:d3:d8:96:e8:c8:7c:a5:4e:
                    48:44:ff:19:e2:44:07:92:0b:d7:68:84:80:5d:6a:
                    78:64:45:cd:60:46:7e:54:c1:13:7c:c5:79:f1:c9:
                    c1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD
            Authority Information Access: 
                OCSP - URI:http://ocsp.thawte.com
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.thawte.com/ThawteTimestampingCA.crl
            X509v3 Extended Key Usage: 
                Time Stamping
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-1
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        03:09:9b:8f:79:ef:7f:59:30:aa:ef:68:b5:fa:e3:09:1d:bb:
        4f:82:06:5d:37:5f:a6:52:9f:16:8d:ea:1c:92:09:44:6e:f5:
        6d:eb:58:7c:30:e8:f9:69:8d:23:73:0b:12:6f:47:a9:ae:39:
        11:f8:2a:b1:9b:b0:1a:c3:8e:eb:59:96:00:ad:ce:0c:4d:b2:
        d0:31:a6:08:5c:2a:7a:fc:e2:7a:1d:57:4c:a8:65:18:e9:79:
        40:62:25:96:6e:c7:c7:37:6a:83:21:08:8e:41:ea:dd:d9:57:
        3f:1d:77:49:87:2a:16:06:5e:a6:38:6a:22:12:a3:51:19:83:
        7e:b6

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Validity
            Not Before: Oct 18 00:00:00 2012 GMT
            Not After : Dec 29 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer - G4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a2:63:0b:39:44:b8:bb:23:a7:44:49:bb:0e:ff:
                    a1:f0:61:0a:53:93:b0:98:db:ad:2c:0f:4a:c5:6e:
                    ff:86:3c:53:55:0f:15:ce:04:3f:2b:fd:a9:96:96:
                    d9:be:61:79:0b:5b:c9:4c:86:76:e5:e0:43:4b:22:
                    95:ee:c2:2b:43:c1:9f:d8:68:b4:8e:40:4f:ee:85:
                    38:b9:11:c5:23:f2:64:58:f0:15:32:6f:4e:57:a1:
                    ae:88:a4:02:d7:2a:1e:cd:4b:e1:dd:63:d5:17:89:
                    32:5b:b0:5e:99:5a:a8:9d:28:50:0e:17:ee:96:db:
                    61:3b:45:51:1d:cf:12:56:0b:92:47:fc:ab:ae:f6:
                    66:3d:47:ac:70:72:e7:92:e7:5f:cd:10:b9:c4:83:
                    64:94:19:bd:25:80:e1:e8:d2:22:a5:d0:ba:02:7a:
                    a1:77:93:5b:65:c3:ee:17:74:bc:41:86:2a:dc:08:
                    4c:8c:92:8c:91:2d:9e:77:44:1f:68:d6:a8:74:77:
                    db:0e:5b:32:8b:56:8b:33:bd:d9:63:c8:49:9d:3a:
                    c5:c5:ea:33:0b:d2:f1:a3:1b:f4:8b:be:d9:b3:57:
                    8b:3b:de:04:a7:7a:22:b2:24:ae:2e:c7:70:c5:be:
                    4e:83:26:08:fb:0b:bd:a9:4f:99:08:e1:10:28:72:
                    aa:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                OCSP - URI:http://ts-ocsp.ws.symantec.com
                CA Issuers - URI:http://ts-aia.ws.symantec.com/tss-ca-g2.cer
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://ts-crl.ws.symantec.com/tss-ca-g2.crl
            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-2
            X509v3 Subject Key Identifier: 
                46:C6:69:A3:0E:4A:14:1E:D5:4C:DA:52:63:17:3F:5E:36:BC:0D:E6
            X509v3 Authority Key Identifier: 
                5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        78:3b:b4:91:2a:00:4c:f0:8f:62:30:37:78:a3:84:27:07:6f:
        18:b2:de:25:dc:a0:d4:94:03:aa:86:4e:25:9f:9a:40:03:1c:
        dd:ce:e3:79:cb:21:68:06:da:b6:32:b4:6d:bf:f4:2c:26:63:
        33:e4:49:64:6d:0d:e6:c3:67:0e:f7:05:a4:35:6c:7c:89:16:
        c6:e9:b2:df:b2:e9:dd:20:c6:71:0f:cd:95:74:dc:b6:5c:de:
        bd:37:1f:43:78:e6:78:b5:cd:28:04:20:a3:aa:f1:4b:c4:88:
        29:91:0e:80:d1:11:fc:dd:5c:76:6e:4f:5e:0e:45:46:41:6e:
        0d:b0:ea:38:9a:b1:3a:da:09:71:10:fc:1c:79:b4:80:7b:ac:
        69:f4:fd:9c:b6:0c:16:2b:f1:7f:5b:09:3d:9b:5b:e2:16:ca:
        13:81:6d:00:2e:38:0d:a8:29:8f:2c:e1:b2:f4:5a:a9:01:af:
        15:9c:2c:2f:49:1b:db:22:bb:c3:fe:78:94:51:c3:86:b1:82:
        88:5d:f0:3d:b4:51:a1:79:33:2b:2e:7b:b9:dc:20:09:13:71:
        eb:6a:19:5b:cf:e8:a5:30:57:2c:89:49:3f:b9:cf:7f:c9:bf:
        3e:22:68:63:53:9a:bd:69:74:ac:c5:1d:3c:7f:92:e0:c3:bc:
        1c:d8:04:75

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:09:ce:41:1d:c7:80:94:7a:c0:e4:e9:e3:b9:5d:44
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https:\/\/www.verisign.com\/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA
        Validity
            Not Before: Jul 26 00:00:00 2013 GMT
            Not After : Sep 24 23:59:59 2015 GMT
        Subject: C=CN, ST=Guangdong, L=Shenzhen, O=Shenzhen Wondershare Information Technology Co., Ltd., OU=Digital ID Class 3 - Microsoft Software Validation v2, OU=Project Management, CN=Shenzhen Wondershare Information Technology Co., Ltd.
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c3:47:00:fd:c8:0f:5a:82:a1:dd:87:1e:3d:60:
                    82:61:fe:4e:00:e6:83:4e:e2:29:55:55:9b:42:c8:
                    da:79:50:73:98:ab:58:a6:6e:05:21:23:7f:86:3d:
                    7b:49:fb:55:b4:b2:50:5b:25:f1:aa:6a:82:88:ee:
                    ec:0e:db:bb:68:96:b5:55:67:a9:89:48:32:10:d4:
                    95:05:13:5c:4a:1c:fc:e2:7e:bf:69:bb:c7:47:58:
                    6f:cb:4e:4f:56:ff:c6:0c:da:c7:dd:cd:ea:11:64:
                    91:82:25:02:6f:bc:c3:fa:e6:66:fb:c5:db:1f:79:
                    47:39:9f:10:e8:e5:37:9f:bf:9a:06:40:47:fd:09:
                    27:a2:3f:fe:bf:26:f5:18:dc:d3:4c:73:5c:b6:3b:
                    6b:d2:34:f4:bf:12:57:fa:8e:ea:2d:48:32:17:0c:
                    bb:80:d4:12:48:07:b3:89:19:53:44:c9:32:23:bd:
                    bb:c5:25:17:9c:1e:80:ee:3e:63:a7:a6:85:c4:a8:
                    6e:d5:29:06:09:a2:ed:8b:51:ab:49:1c:64:d7:3b:
                    a6:c4:22:a7:3d:88:e2:33:31:ba:c3:91:c2:b9:7c:
                    bc:ab:ec:93:11:59:1f:fc:a9:8e:1b:0d:c7:d7:b0:
                    e5:05:fe:7f:29:0c:af:a4:dd:63:89:ee:44:fe:c2:
                    d9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://csc3-2010-crl.verisign.com/CSC3-2010.crl
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/rpa
            X509v3 Extended Key Usage: 
                Code Signing
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com
                CA Issuers - URI:http://csc3-2010-aia.verisign.com/CSC3-2010.cer
            X509v3 Authority Key Identifier: 
                CF:99:A9:EA:7B:26:F4:4B:C9:8E:8F:D7:F0:05:26:EF:E3:D2:A7:9D
            Netscape Cert Type: 
                Object Signing
            1.3.6.1.4.1.311.2.1.27: 
                0.......
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        4d:b2:a2:2c:87:cd:a9:97:51:f1:d5:46:9f:63:dd:20:c5:d7:
        87:32:4f:b5:7f:0d:ec:e9:d5:c1:23:4d:6f:71:60:bf:49:ea:
        68:fe:a9:e7:1a:fd:f3:f1:3f:5d:2a:35:34:5a:bc:d3:57:5a:
        ca:91:1a:41:e9:d8:25:3f:f5:bd:ca:7e:2d:a0:48:79:91:4e:
        0c:6c:38:89:21:16:8b:25:aa:74:17:16:50:66:39:c4:89:d6:
        a8:ec:74:b2:fc:8c:a2:30:88:67:1b:08:75:68:92:30:e1:47:
        65:91:63:d6:4b:32:66:c2:72:af:3b:06:08:b1:a0:6f:65:e8:
        e5:cb:f8:53:c4:3f:ec:b0:c7:ba:a3:0d:8d:67:13:96:73:3a:
        5b:5a:67:34:11:bd:9c:d8:de:24:96:4a:0c:45:47:aa:76:e3:
        bb:c4:16:20:79:07:f2:29:8b:0c:ab:dc:16:37:65:94:43:d7:
        72:ba:55:bd:05:d6:17:6f:1c:9c:21:83:e8:1a:09:f6:56:2b:
        ac:99:dd:16:91:bd:36:a3:e6:bb:d1:b3:76:65:58:81:fb:72:
        64:04:46:76:d0:01:10:74:b2:c9:f4:46:d9:21:70:34:0f:73:
        bb:df:b2:4c:1d:7c:98:74:f3:ca:8c:f2:18:13:7e:30:b6:c2:
        dd:1e:e5:19

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
        Validity
            Not Before: Feb  8 00:00:00 2010 GMT
            Not After : Feb  7 23:59:59 2020 GMT
        Subject: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https:\/\/www.verisign.com\/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:f5:23:4b:5e:a5:d7:8a:bb:32:e9:d4:57:f7:ef:
                    e4:c7:26:7e:ad:19:98:fe:a8:9d:7d:94:f6:36:6b:
                    10:d7:75:81:30:7f:04:68:7f:cb:2b:75:1e:cd:1d:
                    08:8c:df:69:94:a7:37:a3:9c:7b:80:e0:99:e1:ee:
                    37:4d:5f:ce:3b:14:ee:86:d4:d0:f5:27:35:bc:25:
                    0b:38:a7:8c:63:9d:17:a3:08:a5:ab:b0:fb:cd:6a:
                    62:82:4c:d5:21:da:1b:d9:f1:e3:84:3b:8a:2a:4f:
                    85:5b:90:01:4f:c9:a7:76:10:7f:27:03:7c:be:ae:
                    7e:7d:c1:dd:f9:05:bc:1b:48:9c:69:e7:c0:a4:3c:
                    3c:41:00:3e:df:96:e5:c5:e4:94:71:d6:55:01:c7:
                    00:26:4a:40:3c:b5:a1:26:a9:0c:a7:6d:80:8e:90:
                    25:7b:cf:bf:3f:1c:eb:2f:96:fa:e5:87:77:c6:b5:
                    56:b2:7a:3b:54:30:53:1b:df:62:34:ff:1e:d1:f4:
                    5a:93:28:85:e5:4c:17:4e:7e:5b:fd:a4:93:99:7f:
                    df:cd:ef:a4:75:ef:ef:15:f6:47:e7:f8:19:72:d8:
                    2e:34:1a:a6:b4:a7:4c:7e:bd:bb:4f:0c:3d:57:f1:
                    30:d6:a6:36:8e:d6:80:76:d7:19:2e:a5:cd:7e:34:
                    2d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/cps
                  User Notice:
                    Explicit Text: https://www.verisign.com/rpa
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            1.3.6.1.5.5.7.1.12: 
                0_.].[0Y0W0U..image/gif0!0.0...+..............k...j.H.,{..0%.#http://logo.verisign.com/vslogo.gif
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.verisign.com/pca3-g5.crl
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, Code Signing
            X509v3 Subject Alternative Name: 
                DirName:/CN=VeriSignMPKI-2-8
            X509v3 Subject Key Identifier: 
                CF:99:A9:EA:7B:26:F4:4B:C9:8E:8F:D7:F0:05:26:EF:E3:D2:A7:9D
            X509v3 Authority Key Identifier: 
                7F:D3:65:A7:C2:DD:EC:BB:F0:30:09:F3:43:39:FA:02:AF:33:31:33
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        56:22:e6:34:a4:c4:61:cb:48:b9:01:ad:56:a8:64:0f:d9:8c:
        91:c4:bb:cc:0c:e5:ad:7a:a0:22:7f:df:47:38:4a:2d:6c:d1:
        7f:71:1a:7c:ec:70:a9:b1:f0:4f:e4:0f:0c:53:fa:15:5e:fe:
        74:98:49:24:85:81:26:1c:91:14:47:b0:4c:63:8c:bb:a1:34:
        d4:c6:45:e8:0d:85:26:73:03:d0:a9:8c:64:6d:dc:71:92:e6:
        45:05:60:15:59:51:39:fc:58:14:6b:fe:d4:a4:ed:79:6b:08:
        0c:41:72:e7:37:22:06:09:be:23:e9:3f:44:9a:1e:e9:61:9d:
        cc:b1:90:5c:fc:3d:d2:8d:ac:42:3d:65:36:d4:b4:3d:40:28:
        8f:9b:10:cf:23:26:cc:4b:20:cb:90:1f:5d:8c:4c:34:ca:3c:
        d8:e5:37:d6:6f:a5:20:bd:34:eb:26:d9:ae:0d:e7:c5:9a:f7:
        a1:b4:21:91:33:6f:86:e8:58:bb:25:7c:74:0e:58:fe:75:1b:
        63:3f:ce:31:7c:9b:8f:1b:96:9e:c5:53:76:84:5b:9c:ad:91:
        fa:ac:ed:93:ba:5d:c8:21:53:c2:82:53:63:af:12:0d:50:87:
        11:1b:3d:54:52:96:8a:2c:9c:3d:92:1a:08:9a:05:2e:c7:93:
        a5:48:91:d3

pkcs7-signedData

SHA1: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15

00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |

SHA1

18 85 60 e3 a8 a1 06 f0 ae 48 b4 d7 52 8b ea af |..`......H..R...| e8 84 bd ef |.... |

Certificates
- Certificate #0
  - 2
    - 7E:93:EB:FB:7C:C6:4E:59:EA:4B:9A:77:D4:06:FC:3B
    - RSA-SHA1: nil
    - Issuer
      - C: ZA
      - ST: Western Cape
      - L: Durbanville
      - O: Thawte
      - OU: Thawte Certification
      - CN: Thawte Timestamping CA
    - 2012-12-21 00:00:00 UTC: 2020-12-30 23:59:59 UTC
    - Subject
      - C: US
      - O: Symantec Corporation
      - CN: Symantec Time Stamping Services CA - G2
    - #5
      - rsaEncryption: nil
      - B1:AC:B3:49:54:4B:97:1C:12:0A:D8:25:79:91:22:57:
        2A:6F:DC:B8:26:C4:43:73:6B:C2:BF:2E:50:5A:FB:14:
        C2:76:8E:43:01:25:43:B4:A1:E2:45:F4:E8:B7:7B:C3:
        74:CC:22:D7:B4:94:00:02:F7:4D:ED:BF:B4:B7:44:24:
        6B:CD:5F:45:3B:D1:44:CE:43:12:73:17:82:8B:69:B4:
        2B:CB:99:1E:AC:72:1B:26:4D:71:1F:B1:31:DD:FB:51:
        61:02:53:A6:AA:F5:49:2C:05:78:45:A5:2F:89:CE:E7:
        99:E7:FE:8C:E2:57:3F:3D:C6:92:DC:4A:F8:7B:33:E4:
        79:0A:FB:F0:75:88:41:9C:FF:C5:03:51:99:AA:D7:6C:
        9F:93:69:87:65:29:83:85:C2:60:14:C4:C8:C9:3B:14:
        DA:C0:81:F0:1F:0D:74:DE:92:22:AB:CA:F7:FB:74:7C:
        27:E6:F7:4A:1B:7F:A7:C3:9E:2D:AE:8A:EA:A6:E6:AA:
        27:16:7D:61:F7:98:71:11:BC:E2:50:A1:4B:E5:5D:FA:
        E5:0E:A7:2C:9F:AA:65:20:D3:D8:96:E8:C8:7C:A5:4E:
        48:44:FF:19:E2:44:07:92:0B:D7:68:84:80:5D:6A:78:
        64:45:CD:60:46:7E:54:C1:13:7C:C5:79:F1:C9:C1:71: 0x010001
    - #6
      - subjectKeyIdentifier:
        5f 9a f5 6e 5c cc cc 74 9a d4 dd 7d ef 3f db ec |_..n\..t...}.?..| 4c 80 2e dd |L... |
      - authorityInfoAccess
        OCSP: http://ocsp.thawte.com
      - basicConstraints
        true
        true: 0
      - crlDistributionPoints: http://crl.thawte.com/ThawteTimestampingCA.crl
      - extendedKeyUsage: timeStamping
      - keyUsage: true, 6
      - subjectAltName
        CN: TimeStamp-2048-1
  - RSA-SHA1:
```
03 09 9b 8f 79 ef 7f 59  30 aa ef 68 b5 fa e3 09  |....y..Y0..h....|
1d bb 4f 82 06 5d 37 5f  a6 52 9f 16 8d ea 1c 92  |..O..]7_.R......|
09 44 6e f5 6d eb 58 7c  30 e8 f9 69 8d 23 73 0b  |.Dn.m.X|0..i.#s.|
12 6f 47 a9 ae 39 11 f8  2a b1 9b b0 1a c3 8e eb  |.oG..9..*.......|
59 96 00 ad ce 0c 4d b2  d0 31 a6 08 5c 2a 7a fc  |Y.....M..1..\*z.|
e2 7a 1d 57 4c a8 65 18  e9 79 40 62 25 96 6e c7  |.z.WL.e..y@b%.n.|
c7 37 6a 83 21 08 8e 41  ea dd d9 57 3f 1d 77 49  |.7j.!..A...W?.wI|
87 2a 16 06 5e a6 38 6a  22 12 a3 51 19 83 7e b6  |.*..^.8j"..Q..~.|
```
- Certificate #1
  - 2
    - 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - O: Symantec Corporation
      - CN: Symantec Time Stamping Services CA - G2
    - 2012-10-18 00:00:00 UTC: 2020-12-29 23:59:59 UTC
    - Subject
      - C: US
      - O: Symantec Corporation
      - CN: Symantec Time Stamping Services Signer - G4
    - #5
      - rsaEncryption: nil
      - A2:63:0B:39:44:B8:BB:23:A7:44:49:BB:0E:FF:A1:F0:
        61:0A:53:93:B0:98:DB:AD:2C:0F:4A:C5:6E:FF:86:3C:
        53:55:0F:15:CE:04:3F:2B:FD:A9:96:96:D9:BE:61:79:
        0B:5B:C9:4C:86:76:E5:E0:43:4B:22:95:EE:C2:2B:43:
        C1:9F:D8:68:B4:8E:40:4F:EE:85:38:B9:11:C5:23:F2:
        64:58:F0:15:32:6F:4E:57:A1:AE:88:A4:02:D7:2A:1E:
        CD:4B:E1:DD:63:D5:17:89:32:5B:B0:5E:99:5A:A8:9D:
        28:50:0E:17:EE:96:DB:61:3B:45:51:1D:CF:12:56:0B:
        92:47:FC:AB:AE:F6:66:3D:47:AC:70:72:E7:92:E7:5F:
        CD:10:B9:C4:83:64:94:19:BD:25:80:E1:E8:D2:22:A5:
        D0:BA:02:7A:A1:77:93:5B:65:C3:EE:17:74:BC:41:86:
        2A:DC:08:4C:8C:92:8C:91:2D:9E:77:44:1F:68:D6:A8:
        74:77:DB:0E:5B:32:8B:56:8B:33:BD:D9:63:C8:49:9D:
        3A:C5:C5:EA:33:0B:D2:F1:A3:1B:F4:8B:BE:D9:B3:57:
        8B:3B:DE:04:A7:7A:22:B2:24:AE:2E:C7:70:C5:BE:4E:
        83:26:08:FB:0B:BD:A9:4F:99:08:E1:10:28:72:AA:CD: 0x010001
    - X509v3 extensions
      - basicConstraints
        true
        nil
      - extendedKeyUsage: true, timeStamping
      - keyUsage: true, 0x80
      - authorityInfoAccess
        #0
        OCSP: http://ts-ocsp.ws.symantec.com
        caIssuers: http://ts-aia.ws.symantec.com/tss-ca-g2.cer
      - crlDistributionPoints: http://ts-crl.ws.symantec.com/tss-ca-g2.crl
      - subjectAltName
        CN: TimeStamp-2048-2
      - subjectKeyIdentifier:
        46 c6 69 a3 0e 4a 14 1e d5 4c da 52 63 17 3f 5e |F.i..J...L.Rc.?^| 36 bc 0d e6 |6... |
      - authorityKeyIdentifier:
        5f 9a f5 6e 5c cc cc 74 9a d4 dd 7d ef 3f db ec |_..n\..t...}.?..| 4c 80 2e dd |L... |
  - RSA-SHA1:
```
78 3b b4 91 2a 00 4c f0  8f 62 30 37 78 a3 84 27  |x;..*.L..b07x..'|
07 6f 18 b2 de 25 dc a0  d4 94 03 aa 86 4e 25 9f  |.o...%.......N%.|
9a 40 03 1c dd ce e3 79  cb 21 68 06 da b6 32 b4  |.@.....y.!h...2.|
6d bf f4 2c 26 63 33 e4  49 64 6d 0d e6 c3 67 0e  |m..,&c3.Idm...g.|
f7 05 a4 35 6c 7c 89 16  c6 e9 b2 df b2 e9 dd 20  |...5l|......... |
c6 71 0f cd 95 74 dc b6  5c de bd 37 1f 43 78 e6  |.q...t..\..7.Cx.|
78 b5 cd 28 04 20 a3 aa  f1 4b c4 88 29 91 0e 80  |x..(. ...K..)...|
d1 11 fc dd 5c 76 6e 4f  5e 0e 45 46 41 6e 0d b0  |....\vnO^.EFAn..|
ea 38 9a b1 3a da 09 71  10 fc 1c 79 b4 80 7b ac  |.8..:..q...y..{.|
69 f4 fd 9c b6 0c 16 2b  f1 7f 5b 09 3d 9b 5b e2  |i......+..[.=.[.|
16 ca 13 81 6d 00 2e 38  0d a8 29 8f 2c e1 b2 f4  |....m..8..).,...|
5a a9 01 af 15 9c 2c 2f  49 1b db 22 bb c3 fe 78  |Z.....,/I.."...x|
94 51 c3 86 b1 82 88 5d  f0 3d b4 51 a1 79 33 2b  |.Q.....].=.Q.y3+|
2e 7b b9 dc 20 09 13 71  eb 6a 19 5b cf e8 a5 30  |.{.. ..q.j.[...0|
57 2c 89 49 3f b9 cf 7f  c9 bf 3e 22 68 63 53 9a  |W,.I?.....>"hcS.|
bd 69 74 ac c5 1d 3c 7f  92 e0 c3 bc 1c d8 04 75  |.it...<........u|
```
- Certificate #2
  - 2
    - 52:09:CE:41:1D:C7:80:94:7A:C0:E4:E9:E3:B9:5D:44
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - O: VeriSign, Inc.
      - OU: VeriSign Trust Network
      - OU: Terms of use at https://www.verisign.com/rpa (c)10
      - CN: VeriSign Class 3 Code Signing 2010 CA
    - 2013-07-26 00:00:00 UTC: 2015-09-24 23:59:59 UTC
    - Subject
      - C: CN
      - ST: Guangdong
      - L: Shenzhen
      - O: Shenzhen Wondershare Information Technology Co., Ltd.
      - OU: Digital ID Class 3 - Microsoft Software Validation v2
      - OU: Project Management
      - CN: Shenzhen Wondershare Information Technology Co., Ltd.
    - #5
      - rsaEncryption: nil
      - C3:47:00:FD:C8:0F:5A:82:A1:DD:87:1E:3D:60:82:61:
        FE:4E:00:E6:83:4E:E2:29:55:55:9B:42:C8:DA:79:50:
        73:98:AB:58:A6:6E:05:21:23:7F:86:3D:7B:49:FB:55:
        B4:B2:50:5B:25:F1:AA:6A:82:88:EE:EC:0E:DB:BB:68:
        96:B5:55:67:A9:89:48:32:10:D4:95:05:13:5C:4A:1C:
        FC:E2:7E:BF:69:BB:C7:47:58:6F:CB:4E:4F:56:FF:C6:
        0C:DA:C7:DD:CD:EA:11:64:91:82:25:02:6F:BC:C3:FA:
        E6:66:FB:C5:DB:1F:79:47:39:9F:10:E8:E5:37:9F:BF:
        9A:06:40:47:FD:09:27:A2:3F:FE:BF:26:F5:18:DC:D3:
        4C:73:5C:B6:3B:6B:D2:34:F4:BF:12:57:FA:8E:EA:2D:
        48:32:17:0C:BB:80:D4:12:48:07:B3:89:19:53:44:C9:
        32:23:BD:BB:C5:25:17:9C:1E:80:EE:3E:63:A7:A6:85:
        C4:A8:6E:D5:29:06:09:A2:ED:8B:51:AB:49:1C:64:D7:
        3B:A6:C4:22:A7:3D:88:E2:33:31:BA:C3:91:C2:B9:7C:
        BC:AB:EC:93:11:59:1F:FC:A9:8E:1B:0D:C7:D7:B0:E5:
        05:FE:7F:29:0C:AF:A4:DD:63:89:EE:44:FE:C2:D9:C5: 0x010001
    - X509v3 extensions
      - basicConstraints
        nil
      - keyUsage: true, 0x80
      - crlDistributionPoints: http://csc3-2010-crl.verisign.com/CSC3-2010.crl
      - certificatePolicies
        2.16.840.1.113733.1.7.23.3
        id-qt-cps: https://www.verisign.com/rpa
      - extendedKeyUsage: codeSigning
      - authorityInfoAccess
        #0
        OCSP: http://ocsp.verisign.com
        caIssuers: http://csc3-2010-aia.verisign.com/CSC3-2010.cer
      - authorityKeyIdentifier:
        cf 99 a9 ea 7b 26 f4 4b c9 8e 8f d7 f0 05 26 ef |....{&.K......&.| e3 d2 a7 9d |.... |
      - nsCertType: 0x10
      - 1.3.6.1.4.1.311.2.1.27
        false: true
  - RSA-SHA1:
```
4d b2 a2 2c 87 cd a9 97  51 f1 d5 46 9f 63 dd 20  |M..,....Q..F.c. |
c5 d7 87 32 4f b5 7f 0d  ec e9 d5 c1 23 4d 6f 71  |...2O.......#Moq|
60 bf 49 ea 68 fe a9 e7  1a fd f3 f1 3f 5d 2a 35  |`.I.h.......?]*5|
34 5a bc d3 57 5a ca 91  1a 41 e9 d8 25 3f f5 bd  |4Z..WZ...A..%?..|
ca 7e 2d a0 48 79 91 4e  0c 6c 38 89 21 16 8b 25  |.~-.Hy.N.l8.!..%|
aa 74 17 16 50 66 39 c4  89 d6 a8 ec 74 b2 fc 8c  |.t..Pf9.....t...|
a2 30 88 67 1b 08 75 68  92 30 e1 47 65 91 63 d6  |.0.g..uh.0.Ge.c.|
4b 32 66 c2 72 af 3b 06  08 b1 a0 6f 65 e8 e5 cb  |K2f.r.;....oe...|
f8 53 c4 3f ec b0 c7 ba  a3 0d 8d 67 13 96 73 3a  |.S.?.......g..s:|
5b 5a 67 34 11 bd 9c d8  de 24 96 4a 0c 45 47 aa  |[Zg4.....$.J.EG.|
76 e3 bb c4 16 20 79 07  f2 29 8b 0c ab dc 16 37  |v.... y..).....7|
65 94 43 d7 72 ba 55 bd  05 d6 17 6f 1c 9c 21 83  |e.C.r.U....o..!.|
e8 1a 09 f6 56 2b ac 99  dd 16 91 bd 36 a3 e6 bb  |....V+......6...|
d1 b3 76 65 58 81 fb 72  64 04 46 76 d0 01 10 74  |..veX..rd.Fv...t|
b2 c9 f4 46 d9 21 70 34  0f 73 bb df b2 4c 1d 7c  |...F.!p4.s...L.||
98 74 f3 ca 8c f2 18 13  7e 30 b6 c2 dd 1e e5 19  |.t......~0......|
```
- Certificate #3
  - 2
    - 52:00:E5:AA:25:56:FC:1A:86:ED:96:C9:D4:4B:33:C7
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - O: VeriSign, Inc.
      - OU: VeriSign Trust Network
      - OU: (c) 2006 VeriSign, Inc. - For authorized use only
      - CN: VeriSign Class 3 Public Primary Certification Authority - G5
    - 2010-02-08 00:00:00 UTC: 2020-02-07 23:59:59 UTC
    - Subject
      - C: US
      - O: VeriSign, Inc.
      - OU: VeriSign Trust Network
      - OU: Terms of use at https://www.verisign.com/rpa (c)10
      - CN: VeriSign Class 3 Code Signing 2010 CA
    - #5
      - rsaEncryption: nil
      - F5:23:4B:5E:A5:D7:8A:BB:32:E9:D4:57:F7:EF:E4:C7:
        26:7E:AD:19:98:FE:A8:9D:7D:94:F6:36:6B:10:D7:75:
        81:30:7F:04:68:7F:CB:2B:75:1E:CD:1D:08:8C:DF:69:
        94:A7:37:A3:9C:7B:80:E0:99:E1:EE:37:4D:5F:CE:3B:
        14:EE:86:D4:D0:F5:27:35:BC:25:0B:38:A7:8C:63:9D:
        17:A3:08:A5:AB:B0:FB:CD:6A:62:82:4C:D5:21:DA:1B:
        D9:F1:E3:84:3B:8A:2A:4F:85:5B:90:01:4F:C9:A7:76:
        10:7F:27:03:7C:BE:AE:7E:7D:C1:DD:F9:05:BC:1B:48:
        9C:69:E7:C0:A4:3C:3C:41:00:3E:DF:96:E5:C5:E4:94:
        71:D6:55:01:C7:00:26:4A:40:3C:B5:A1:26:A9:0C:A7:
        6D:80:8E:90:25:7B:CF:BF:3F:1C:EB:2F:96:FA:E5:87:
        77:C6:B5:56:B2:7A:3B:54:30:53:1B:DF:62:34:FF:1E:
        D1:F4:5A:93:28:85:E5:4C:17:4E:7E:5B:FD:A4:93:99:
        7F:DF:CD:EF:A4:75:EF:EF:15:F6:47:E7:F8:19:72:D8:
        2E:34:1A:A6:B4:A7:4C:7E:BD:BB:4F:0C:3D:57:F1:30:
        D6:A6:36:8E:D6:80:76:D7:19:2E:A5:CD:7E:34:2D:89: 0x010001
    - X509v3 extensions
      - basicConstraints
        true
        true: 0
      - certificatePolicies
        2.16.840.1.113733.1.7.23.3
        #0
        id-qt-cps: https://www.verisign.com/cps
        id-qt-unotice: https://www.verisign.com/rpa
      - keyUsage: true, 6
      - 1.3.6.1.5.5.7.1.12
        image/gif
        SHA1:
        8f e5 d3 1a 86 ac 8d 8e 6b c3 cf 80 6a d4 48 18 |........k...j.H.| 2c 7b 19 2e |,{.. |
        http://logo.verisign.com/vslogo.gif
      - crlDistributionPoints: http://crl.verisign.com/pca3-g5.crl
      - authorityInfoAccess
        OCSP: http://ocsp.verisign.com
      - extendedKeyUsage
        clientAuth: codeSigning
      - subjectAltName
        CN: VeriSignMPKI-2-8
      - subjectKeyIdentifier:
        cf 99 a9 ea 7b 26 f4 4b c9 8e 8f d7 f0 05 26 ef |....{&.K......&.| e3 d2 a7 9d |.... |
      - authorityKeyIdentifier:
        7f d3 65 a7 c2 dd ec bb f0 30 09 f3 43 39 fa 02 |..e......0..C9..| af 33 31 33 |.313 |
  - RSA-SHA1:
```
56 22 e6 34 a4 c4 61 cb  48 b9 01 ad 56 a8 64 0f  |V".4..a.H...V.d.|
d9 8c 91 c4 bb cc 0c e5  ad 7a a0 22 7f df 47 38  |.........z."..G8|
4a 2d 6c d1 7f 71 1a 7c  ec 70 a9 b1 f0 4f e4 0f  |J-l..q.|.p...O..|
0c 53 fa 15 5e fe 74 98  49 24 85 81 26 1c 91 14  |.S..^.t.I$..&...|
47 b0 4c 63 8c bb a1 34  d4 c6 45 e8 0d 85 26 73  |G.Lc...4..E...&s|
03 d0 a9 8c 64 6d dc 71  92 e6 45 05 60 15 59 51  |....dm.q..E.`.YQ|
39 fc 58 14 6b fe d4 a4  ed 79 6b 08 0c 41 72 e7  |9.X.k....yk..Ar.|
37 22 06 09 be 23 e9 3f  44 9a 1e e9 61 9d cc b1  |7"...#.?D...a...|
90 5c fc 3d d2 8d ac 42  3d 65 36 d4 b4 3d 40 28  |.\.=...B=e6..=@(|
8f 9b 10 cf 23 26 cc 4b  20 cb 90 1f 5d 8c 4c 34  |....#&.K ...].L4|
ca 3c d8 e5 37 d6 6f a5  20 bd 34 eb 26 d9 ae 0d  |.<..7.o. .4.&...|
e7 c5 9a f7 a1 b4 21 91  33 6f 86 e8 58 bb 25 7c  |......!.3o..X.%||
74 0e 58 fe 75 1b 63 3f  ce 31 7c 9b 8f 1b 96 9e  |t.X.u.c?.1|.....|
c5 53 76 84 5b 9c ad 91  fa ac ed 93 ba 5d c8 21  |.Sv.[........].!|
53 c2 82 53 63 af 12 0d  50 87 11 1b 3d 54 52 96  |S..Sc...P...=TR.|
8a 2c 9c 3d 92 1a 08 9a  05 2e c7 93 a5 48 91 d3  |.,.=.........H..|
```

Signer

1
unnamed
- #0
  - C: US
  - O: VeriSign, Inc.
  - OU: VeriSign Trust Network
  - OU: Terms of use at https://www.verisign.com/rpa (c)10
  - CN: VeriSign Class 3 Code Signing 2010 CA
- 52:09:CE:41:1D:C7:80:94:7A:C0:E4:E9:E3:B9:5D:44
SHA1: nil

1.3.6.1.4.1.311.2.1.12
- nil
contentType: 1.3.6.1.4.1.311.2.1.4
1.3.6.1.4.1.311.2.1.11: msCodeInd

messageDigest:

97 df 86 b5 f9 b0 1f 84  4a 3f 02 ac 28 1e f1 58  |........J?..(..X|
ac e0 07 ca                                       |....            |

rsaEncryption:

8c 73 c5 1b 1b 37 bc 5e  c6 3e 1f f8 fb eb 98 f0  |.s...7.^.>......|
00 b8 b5 bd 56 4c 66 c0  72 25 1c bf 9b fc e0 c9  |....VLf.r%......|
01 f7 16 b8 05 f7 2d 43  5d 79 e9 d2 ae b2 2d ae  |......-C]y....-.|
81 df 11 51 7d 40 d0 a8  d9 63 ff 59 3a 27 b3 d1  |...Q}@...c.Y:'..|
e4 af 0b 27 5e e0 63 92  ad 56 a9 23 80 f4 60 ed  |...'^.c..V.#..`.|
9c c0 83 f7 0a 0e 12 19  d6 8a 78 b7 9e fb 2a b4  |..........x...*.|
3e 70 6e 42 31 c0 c0 1f  d1 63 e9 37 b7 ec d5 56  |>pnB1....c.7...V|
a6 25 15 49 81 53 bd f5  9b f8 d8 0e c5 54 37 1c  |.%.I.S.......T7.|
82 ff b7 68 9b 74 67 0a  00 bd 10 e1 b1 4a 86 e1  |...h.tg......J..|
8d c7 8d 16 3c 88 e3 79  c8 de cc b0 7d c6 40 51  |....<..y....}.@Q|
7d 1c 0d f5 23 b6 ca 6d  44 02 50 f5 83 7e 06 2c  |}...#..mD.P..~.,|
44 c2 69 c4 05 47 f0 89  55 82 b5 77 29 52 cf 93  |D.i..G..U..w)R..|
1e 70 1e 36 2b 8e 90 d6  dd c9 da dc ac 50 d1 ea  |.p.6+........P..|
84 9e 63 59 d0 19 8d d0  f2 8a 48 c0 59 00 52 c2  |..cY......H.Y.R.|
1d 11 ca ea 1a 30 fe c0  da 37 48 87 b2 bc b8 98  |.....0...7H.....|
50 77 27 cc 56 34 86 61  2d 32 7e 1f a7 92 26 49  |Pw'.V4.a-2~...&I|

countersignature

unnamed
- #0
  - C: US
  - O: Symantec Corporation
  - CN: Symantec Time Stamping Services CA - G2
- 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
SHA1: nil

contentType: pkcs7-data
signingTime: 2015-04-14 09:25:04 UTC

messageDigest:

81 a3 35 95 da 1d 4d 7f  b0 89 ab dd fa 5f 2e cd  |..5...M......_..|
44 d4 05 55                                       |D..U            |

rsaEncryption:

77 28 f5 7f 81 ad 37 0e  12 3e 50 73 22 bd f6 1c  |w(....7..>Ps"...|
7d c5 57 de e1 9f 7f 2e  47 85 3d ed 58 21 5f 38  |}.W.....G.=.X!_8|
a6 93 95 d7 f3 26 d8 ac  18 cc b5 bd e9 23 24 0a  |.....&.......#$.|
2d 3b 6d 96 2c be 0f 85  14 ae 09 2a 51 f4 06 b7  |-;m.,......*Q...|
83 59 20 d2 4f d5 10 ac  93 ff 2e fd 24 f6 9a 33  |.Y .O.......$..3|
2e 3d 52 41 bc 81 31 b5  df e8 7f f8 02 9e 0d 38  |.=RA..1........8|
de 6c 91 af 16 12 67 d0  13 c6 89 e3 6b 95 78 ca  |.l....g.....k.x.|
1d 47 20 33 a0 3e 44 b1  c8 51 0e e9 5e 3c df b7  |.G 3.>D..Q..^<..|
91 09 7e 26 38 89 e0 a2  15 29 ac b0 4b 56 f7 0a  |..~&8....)..KV..|
f8 33 93 7a 25 f3 23 36  54 44 91 19 f2 94 3b 73  |.3.z%.#6TD....;s|
38 4b 29 c3 00 18 ea ce  53 7a 94 6c 58 3e d8 50  |8K).....Sz.lX>.P|
c8 54 1b 27 ef 64 bf 4e  6c c5 09 b0 1d 2d 6a 3f  |.T.'.d.Nl....-j?|
a2 ad d6 a1 8c fa a2 65  09 60 0b 71 64 c5 c2 9a  |.......e.`.qd...|
9b da c4 5f e1 8e 96 6e  a1 b8 e5 5e bc 67 30 a0  |..._...n...^.g0.|
07 0f 21 e0 a1 ea d2 4c  80 e8 e3 ad 99 16 8f 55  |..!....L.......U|
a9 4e c9 6d 44 d5 dd 7e  69 f6 34 ce bb 7b 90 a5  |.N.mD..~i.4..{..|

show previews

offset	size	type	comment
0	74240	EXE	12/23/2014 09:11:04	#
15c1	15	HTM		#
12200	6544	PKCS7	Authenticode Signature	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK