filenameMagicTowersRus_4D6201.exe
size786056 (0xbfe88)
md51b116debea0b183d5a83d201d2e17ba5
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xd0

Rich Header

lib idversiontimes used
131307293
1473072917
10172
1704021912
154402191
157402191

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections6
TimeDateStamp0x4f47e2da
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x102
Magic0x10b
LinkerVersion10.0
SizeOfCode0x6e00
SizeOfInitializedData0x6ce00
SizeOfUninitializedData0x4200
AddressOfEntryPoint0x3883
BaseOfCode0x1000
BaseOfData0x8000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.0
ImageVersion6.0
SubsystemVersion5.0
Reserved10
SizeOfImage0x173000
SizeOfHeaders0x400
CheckSum0xcc5d8
Subsystem2
DllCharacteristics0x8540
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

Nullsoft install system v2.x

Sections

namevavsizeraw sizeflags
.text0x10000x6dae0x6e00R-X CODE
.rdata0x80000x2a620x2c00R-- IDATA
.data0xb0000x67ebc0x200RW- IDATA
.ndata0x730000xf90000RW- UDATA
.rsrc0x16c0000x55a00x5600R-- IDATA
.reloc0x1720000xf320x1000R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0x9b340xb4
RESOURCE0x16c0000x55a0
EXCEPTION00
SECURITY0xbe6980x17f0
BASERELOC0x7a0000x964
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x80000x2d0
Delay_IAT00
CLR_Header00
typenamesizecp
ICON#196400
ICON#237520
ICON#322160
ICON#413840
ICON#511280
ICON#67440
ICON#72960
DIALOG#1055120
DIALOG#1062480
DIALOG#1112380
GROUP_ICON#1031040
MANIFEST#19680
module_namehintordfunction_name
KERNEL32.dll1130SetFileTime
KERNEL32.dll96CompareFileTime
KERNEL32.dll1053SearchPathW
KERNEL32.dll609GetShortPathNameW
KERNEL32.dll507GetFullPathNameW
KERNEL32.dll867MoveFileW
KERNEL32.dll1101SetCurrentDirectoryW
KERNEL32.dll490GetFileAttributesW
KERNEL32.dll514GetLastError
KERNEL32.dll129CreateDirectoryW
KERNEL32.dll1121SetFileAttributesW
KERNEL32.dll1202Sleep
KERNEL32.dll659GetTickCount
KERNEL32.dll496GetFileSize
KERNEL32.dll532GetModuleFileNameW
KERNEL32.dll448GetCurrentProcess
KERNEL32.dll117CopyFileW
KERNEL32.dll281ExitProcess
KERNEL32.dll687GetWindowsDirectoryW
KERNEL32.dll645GetTempPathW
KERNEL32.dll391GetCommandLineW
KERNEL32.dll1112SetErrorMode
KERNEL32.dll1354lstrcpynA
KERNEL32.dll82CloseHandle
KERNEL32.dll1355lstrcpynW
KERNEL32.dll463GetDiskFreeSpaceW
KERNEL32.dll709GlobalUnlock
KERNEL32.dll702GlobalLock
KERNEL32.dll181CreateThread
KERNEL32.dll831LoadLibraryW
KERNEL32.dll168CreateProcessW
KERNEL32.dll1348lstrcmpiA
KERNEL32.dll143CreateFileW
KERNEL32.dll643GetTempFileNameW
KERNEL32.dll1343lstrcatW
KERNEL32.dll581GetProcAddress
KERNEL32.dll828LoadLibraryA
KERNEL32.dll533GetModuleHandleA
KERNEL32.dll896OpenProcess
KERNEL32.dll1352lstrcpyW
KERNEL32.dll676GetVersionExW
KERNEL32.dll624GetSystemDirectoryW
KERNEL32.dll674GetVersion
KERNEL32.dll1351lstrcpyA
KERNEL32.dll1027RemoveDirectoryW
KERNEL32.dll1345lstrcmpA
KERNEL32.dll1349lstrcmpiW
KERNEL32.dll1346lstrcmpW
KERNEL32.dll285ExpandEnvironmentStringsW
KERNEL32.dll691GlobalAlloc
KERNEL32.dll1273WaitForSingleObject
KERNEL32.dll479GetExitCodeProcess
KERNEL32.dll698GlobalFree
KERNEL32.dll536GetModuleHandleW
KERNEL32.dll830LoadLibraryExW
KERNEL32.dll354FreeLibrary
KERNEL32.dll1323WritePrivateProfileStringW
KERNEL32.dll578GetPrivateProfileStringW
KERNEL32.dll1297WideCharToMultiByte
KERNEL32.dll1357lstrlenA
KERNEL32.dll870MulDiv
KERNEL32.dll1317WriteFile
KERNEL32.dll960ReadFile
KERNEL32.dll871MultiByteToWideChar
KERNEL32.dll1126SetFilePointer
KERNEL32.dll302FindClose
KERNEL32.dll325FindNextFileW
KERNEL32.dll313FindFirstFileW
KERNEL32.dll214DeleteFileW
KERNEL32.dll1358lstrlenW
USER32.dll263GetAsyncKeyState
USER32.dll462IsDlgButtonChecked
USER32.dll621ScreenToClient
USER32.dll347GetMessagePos
USER32.dll30CallWindowProcW
USER32.dll480IsWindowVisible
USER32.dll487LoadBitmapW
USER32.dll73CloseClipboard
USER32.dll646SetClipboardData
USER32.dll213EmptyClipboard
USER32.dll550OpenClipboard
USER32.dll758TrackPopupMenu
USER32.dll412GetWindowRect
USER32.dll10AppendMenuW
USER32.dll107CreatePopupMenu
USER32.dll382GetSystemMetrics
USER32.dll218EndDialog
USER32.dll214EnableMenuItem
USER32.dll381GetSystemMenu
USER32.dll644SetClassLongW
USER32.dll476IsWindowEnabled
USER32.dll710SetWindowPos
USER32.dll172DialogBoxParamW
USER32.dll62CheckDlgButton
USER32.dll110CreateWindowExW
USER32.dll748SystemParametersInfoW
USER32.dll590RegisterClassW
USER32.dll656SetDlgItemTextW
USER32.dll298GetDlgItemTextW
USER32.dll530MessageBoxIndirectW
USER32.dll47CharNextA
USER32.dll60CharUpperW
USER32.dll52CharPrevW
USER32.dll821wvsprintfW
USER32.dll175DispatchMessageW
USER32.dll563PeekMessageW
USER32.dll818wsprintfA
USER32.dll166DestroyWindow
USER32.dll99CreateDialogParamW
USER32.dll699SetTimer
USER32.dll715SetWindowTextW
USER32.dll567PostQuitMessage
USER32.dll659SetForegroundWindow
USER32.dll735ShowWindow
USER32.dll819wsprintfW
USER32.dll635SendMessageTimeoutW
USER32.dll491LoadCursorW
USER32.dll648SetCursor
USER32.dll406GetWindowLongW
USER32.dll379GetSysColor
USER32.dll49CharNextW
USER32.dll270GetClassInfoW
USER32.dll245ExitWindowsEx
USER32.dll475IsWindow
USER32.dll295GetDlgItem
USER32.dll708SetWindowLongW
USER32.dll495LoadImageW
USER32.dll289GetDC
USER32.dll216EnableWindow
USER32.dll446InvalidateRect
USER32.dll636SendMessageW
USER32.dll156DefWindowProcW
USER32.dll14BeginPaint
USER32.dll276GetClientRect
USER32.dll246FillRect
USER32.dll208DrawTextW
USER32.dll220EndPaint
USER32.dll249FindWindowExW
GDI32.dll638SetBkColor
GDI32.dll459GetDeviceCaps
GDI32.dll230DeleteObject
GDI32.dll44CreateBrushIndirect
GDI32.dll64CreateFontIndirectW
GDI32.dll639SetBkMode
GDI32.dll678SetTextColor
GDI32.dll631SelectObject
SHELL32.dll123SHBrowseForFolderW
SHELL32.dll215SHGetPathFromIDListW
SHELL32.dll189SHGetFileInfoW
SHELL32.dll290ShellExecuteW
SHELL32.dll172SHFileOperationW
SHELL32.dll223SHGetSpecialFolderLocation
ADVAPI32.dll592RegEnumKeyW
ADVAPI32.dll609RegOpenKeyExW
ADVAPI32.dll560RegCloseKey
ADVAPI32.dll580RegDeleteKeyW
ADVAPI32.dll584RegDeleteValueW
ADVAPI32.dll569RegCreateKeyExW
ADVAPI32.dll638RegSetValueExW
ADVAPI32.dll622RegQueryValueExW
ADVAPI32.dll594RegEnumValueW
COMCTL32.dll79ImageList_AddMasked
COMCTL32.dll84ImageList_Destroy
COMCTL32.dll17
COMCTL32.dll83ImageList_Create
ole32.dll104CoTaskMemFree
ole32.dll306OleInitialize
ole32.dll329OleUninitialize
ole32.dll16CoCreateInstance
VERSION.dll5GetFileVersionInfoSizeW
VERSION.dll6GetFileVersionInfoW
VERSION.dll14VerQueryValueW

Signers (1)

issuer: /C=US/O=Symantec Corporation/OU=Symantec Trust Network/CN=Symantec Class 3 SHA256 Code Signing CA
serial: 28D366134052BABF634E75E993DED74A

Certificates (4)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
        Validity
            Not Before: Dec 21 00:00:00 2012 GMT
            Not After : Dec 30 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:b3:49:54:4b:97:1c:12:0a:d8:25:79:91:
                    22:57:2a:6f:dc:b8:26:c4:43:73:6b:c2:bf:2e:50:
                    5a:fb:14:c2:76:8e:43:01:25:43:b4:a1:e2:45:f4:
                    e8:b7:7b:c3:74:cc:22:d7:b4:94:00:02:f7:4d:ed:
                    bf:b4:b7:44:24:6b:cd:5f:45:3b:d1:44:ce:43:12:
                    73:17:82:8b:69:b4:2b:cb:99:1e:ac:72:1b:26:4d:
                    71:1f:b1:31:dd:fb:51:61:02:53:a6:aa:f5:49:2c:
                    05:78:45:a5:2f:89:ce:e7:99:e7:fe:8c:e2:57:3f:
                    3d:c6:92:dc:4a:f8:7b:33:e4:79:0a:fb:f0:75:88:
                    41:9c:ff:c5:03:51:99:aa:d7:6c:9f:93:69:87:65:
                    29:83:85:c2:60:14:c4:c8:c9:3b:14:da:c0:81:f0:
                    1f:0d:74:de:92:22:ab:ca:f7:fb:74:7c:27:e6:f7:
                    4a:1b:7f:a7:c3:9e:2d:ae:8a:ea:a6:e6:aa:27:16:
                    7d:61:f7:98:71:11:bc:e2:50:a1:4b:e5:5d:fa:e5:
                    0e:a7:2c:9f:aa:65:20:d3:d8:96:e8:c8:7c:a5:4e:
                    48:44:ff:19:e2:44:07:92:0b:d7:68:84:80:5d:6a:
                    78:64:45:cd:60:46:7e:54:c1:13:7c:c5:79:f1:c9:
                    c1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD
            Authority Information Access: 
                OCSP - URI:http://ocsp.thawte.com

            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.thawte.com/ThawteTimestampingCA.crl

            X509v3 Extended Key Usage: 
                Time Stamping
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-1
    Signature Algorithm: sha1WithRSAEncryption
         03:09:9b:8f:79:ef:7f:59:30:aa:ef:68:b5:fa:e3:09:1d:bb:
         4f:82:06:5d:37:5f:a6:52:9f:16:8d:ea:1c:92:09:44:6e:f5:
         6d:eb:58:7c:30:e8:f9:69:8d:23:73:0b:12:6f:47:a9:ae:39:
         11:f8:2a:b1:9b:b0:1a:c3:8e:eb:59:96:00:ad:ce:0c:4d:b2:
         d0:31:a6:08:5c:2a:7a:fc:e2:7a:1d:57:4c:a8:65:18:e9:79:
         40:62:25:96:6e:c7:c7:37:6a:83:21:08:8e:41:ea:dd:d9:57:
         3f:1d:77:49:87:2a:16:06:5e:a6:38:6a:22:12:a3:51:19:83:
         7e:b6
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Validity
            Not Before: Oct 18 00:00:00 2012 GMT
            Not After : Dec 29 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer - G4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:63:0b:39:44:b8:bb:23:a7:44:49:bb:0e:ff:
                    a1:f0:61:0a:53:93:b0:98:db:ad:2c:0f:4a:c5:6e:
                    ff:86:3c:53:55:0f:15:ce:04:3f:2b:fd:a9:96:96:
                    d9:be:61:79:0b:5b:c9:4c:86:76:e5:e0:43:4b:22:
                    95:ee:c2:2b:43:c1:9f:d8:68:b4:8e:40:4f:ee:85:
                    38:b9:11:c5:23:f2:64:58:f0:15:32:6f:4e:57:a1:
                    ae:88:a4:02:d7:2a:1e:cd:4b:e1:dd:63:d5:17:89:
                    32:5b:b0:5e:99:5a:a8:9d:28:50:0e:17:ee:96:db:
                    61:3b:45:51:1d:cf:12:56:0b:92:47:fc:ab:ae:f6:
                    66:3d:47:ac:70:72:e7:92:e7:5f:cd:10:b9:c4:83:
                    64:94:19:bd:25:80:e1:e8:d2:22:a5:d0:ba:02:7a:
                    a1:77:93:5b:65:c3:ee:17:74:bc:41:86:2a:dc:08:
                    4c:8c:92:8c:91:2d:9e:77:44:1f:68:d6:a8:74:77:
                    db:0e:5b:32:8b:56:8b:33:bd:d9:63:c8:49:9d:3a:
                    c5:c5:ea:33:0b:d2:f1:a3:1b:f4:8b:be:d9:b3:57:
                    8b:3b:de:04:a7:7a:22:b2:24:ae:2e:c7:70:c5:be:
                    4e:83:26:08:fb:0b:bd:a9:4f:99:08:e1:10:28:72:
                    aa:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                OCSP - URI:http://ts-ocsp.ws.symantec.com
                CA Issuers - URI:http://ts-aia.ws.symantec.com/tss-ca-g2.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ts-crl.ws.symantec.com/tss-ca-g2.crl

            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-2
            X509v3 Subject Key Identifier: 
                46:C6:69:A3:0E:4A:14:1E:D5:4C:DA:52:63:17:3F:5E:36:BC:0D:E6
            X509v3 Authority Key Identifier: 
                keyid:5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD

    Signature Algorithm: sha1WithRSAEncryption
         78:3b:b4:91:2a:00:4c:f0:8f:62:30:37:78:a3:84:27:07:6f:
         18:b2:de:25:dc:a0:d4:94:03:aa:86:4e:25:9f:9a:40:03:1c:
         dd:ce:e3:79:cb:21:68:06:da:b6:32:b4:6d:bf:f4:2c:26:63:
         33:e4:49:64:6d:0d:e6:c3:67:0e:f7:05:a4:35:6c:7c:89:16:
         c6:e9:b2:df:b2:e9:dd:20:c6:71:0f:cd:95:74:dc:b6:5c:de:
         bd:37:1f:43:78:e6:78:b5:cd:28:04:20:a3:aa:f1:4b:c4:88:
         29:91:0e:80:d1:11:fc:dd:5c:76:6e:4f:5e:0e:45:46:41:6e:
         0d:b0:ea:38:9a:b1:3a:da:09:71:10:fc:1c:79:b4:80:7b:ac:
         69:f4:fd:9c:b6:0c:16:2b:f1:7f:5b:09:3d:9b:5b:e2:16:ca:
         13:81:6d:00:2e:38:0d:a8:29:8f:2c:e1:b2:f4:5a:a9:01:af:
         15:9c:2c:2f:49:1b:db:22:bb:c3:fe:78:94:51:c3:86:b1:82:
         88:5d:f0:3d:b4:51:a1:79:33:2b:2e:7b:b9:dc:20:09:13:71:
         eb:6a:19:5b:cf:e8:a5:30:57:2c:89:49:3f:b9:cf:7f:c9:bf:
         3e:22:68:63:53:9a:bd:69:74:ac:c5:1d:3c:7f:92:e0:c3:bc:
         1c:d8:04:75
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:d3:66:13:40:52:ba:bf:63:4e:75:e9:93:de:d7:4a
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 SHA256 Code Signing CA
        Validity
            Not Before: Sep  1 00:00:00 2015 GMT
            Not After : Jan 15 23:59:59 2017 GMT
        Subject: C=US, ST=Virginia, L=Alexandria, O=Alawar Entertainment Inc, CN=Alawar Entertainment Inc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:51:9c:c2:ca:7e:df:29:e5:f2:16:f2:52:6d:
                    4c:cb:9c:53:8c:ce:1d:65:68:04:fa:9b:45:44:2a:
                    a6:d1:68:11:8a:3d:b1:73:b3:f6:7a:64:3e:0b:d6:
                    46:ba:06:86:2e:a6:c4:c8:b5:e8:63:ab:5a:a1:d9:
                    d5:21:cc:d2:13:66:3d:1c:f5:93:6a:3e:17:0f:91:
                    70:68:0a:20:fc:06:50:cd:27:00:9e:62:ec:77:e0:
                    46:d4:79:2b:a1:d3:51:f9:ab:70:5f:ae:6d:65:f2:
                    4a:b1:be:cb:c2:f3:02:c5:77:28:1b:eb:21:2b:22:
                    2c:93:27:ce:36:0a:64:26:fd:1a:a5:e0:c6:b2:d6:
                    3f:53:64:0c:31:ba:51:28:fe:b9:83:26:8f:1d:4e:
                    bd:04:ae:d2:cf:aa:03:a0:de:2e:b6:00:2a:61:c9:
                    ef:14:26:af:e1:56:3e:83:d1:a9:ac:a9:02:9a:fc:
                    d6:59:8a:36:aa:ff:27:88:5f:23:9e:64:b7:9a:d5:
                    7a:40:99:71:ed:5a:9b:c2:99:ec:c3:a4:15:4e:11:
                    45:77:4c:d0:71:7c:9e:62:ca:d8:8c:07:de:d6:10:
                    5a:cc:32:55:85:b7:b5:46:47:1a:30:99:f0:79:8b:
                    06:43:0e:82:58:27:7f:96:24:8b:73:21:44:4d:77:
                    f9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://sv.symcb.com/sv.crl

            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://d.symcb.com/cps
                  User Notice:
                    Explicit Text: https://d.symcb.com/rpa

            X509v3 Extended Key Usage: 
                Code Signing
            Authority Information Access: 
                OCSP - URI:http://sv.symcd.com
                CA Issuers - URI:http://sv.symcb.com/sv.crt

            X509v3 Authority Key Identifier: 
                keyid:96:3B:53:F0:79:33:97:AF:7D:83:EF:2E:2B:CC:CA:B7:86:1E:72:66

            X509v3 Subject Key Identifier: 
                2C:75:4F:D1:D9:61:C9:E7:CA:4D:7E:43:41:EC:BB:5F:9A:20:EC:E6
    Signature Algorithm: sha256WithRSAEncryption
         83:1e:eb:9a:82:11:7a:31:88:16:cd:b5:5f:e0:8a:82:e7:4e:
         0c:e1:17:9b:c9:d0:be:c0:49:e1:c3:b4:b0:82:d6:80:7a:35:
         6c:f3:52:2f:13:ee:6f:61:4b:0b:9d:7a:5d:39:fa:26:fc:66:
         35:21:f6:2f:e9:15:42:5d:51:62:57:50:3c:86:de:91:e7:4b:
         eb:38:15:82:1e:fb:27:16:b9:04:7e:5a:21:a4:1e:65:c2:62:
         51:9e:27:db:1e:af:58:13:6a:26:66:ca:f9:74:db:57:4c:db:
         1a:94:ea:e2:8b:53:22:19:f1:a7:2d:e7:1c:73:52:53:5f:1f:
         2f:b8:91:9f:f7:56:62:c7:8a:0c:2f:78:90:b9:9b:a9:0e:df:
         8a:31:5c:a1:1d:1f:b0:f7:ad:f2:f8:07:5e:e9:6b:cd:9b:ba:
         4e:6e:6c:e1:59:4e:34:54:37:3d:d4:e3:99:34:73:00:5f:30:
         da:10:d6:bf:60:12:4f:e2:b4:1c:6f:cf:6a:9f:18:3f:75:1b:
         46:7c:6c:8d:79:7a:d8:2d:7f:a7:a4:ea:c6:dc:65:62:10:29:
         63:1e:c9:66:5b:c6:86:db:79:bd:8f:e5:8d:0f:72:a9:8f:31:
         c9:4c:f2:54:4a:e9:28:4b:fb:28:77:78:1e:53:a2:94:4a:44:
         35:a1:16:61
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
        Validity
            Not Before: Dec 10 00:00:00 2013 GMT
            Not After : Dec  9 23:59:59 2023 GMT
        Subject: C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 SHA256 Code Signing CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:83:1e:00:16:af:2c:b1:d2:08:c4:d7:68:93:
                    51:60:1e:71:f6:e2:47:b4:db:58:4d:23:62:6a:b4:
                    bf:5a:1b:51:f7:a3:0d:18:77:68:bb:d8:36:ab:2f:
                    21:50:da:9e:f3:e7:5f:27:4e:0b:c2:97:c8:09:70:
                    93:a9:da:5c:0d:4e:a4:0d:91:a0:b4:ec:14:ce:91:
                    72:54:2e:ce:a3:db:44:e9:52:1b:3f:41:3c:ca:4a:
                    e4:aa:c0:e8:39:ab:53:cc:21:d0:cc:cf:7f:9b:e6:
                    c2:cc:58:6a:82:15:ee:3d:36:cf:1c:c5:97:07:24:
                    8e:f1:7b:be:31:2d:3d:6e:dc:b5:99:42:9f:4b:61:
                    95:5f:1c:70:ee:17:7d:db:8b:e5:61:89:78:c7:68:
                    1b:af:11:78:1a:98:ae:c4:55:47:53:d9:b3:32:d6:
                    a1:0e:46:40:c5:97:92:8a:d1:53:a7:99:5b:85:35:
                    57:d3:ea:93:62:61:20:0a:c7:30:77:24:11:4d:62:
                    83:b6:ba:7b:68:82:31:ee:65:ca:df:f9:d5:8d:b2:
                    35:dc:8c:2b:6f:6a:72:5c:60:84:9c:f2:0c:94:5e:
                    c0:56:52:00:48:cc:d3:f8:a5:7d:de:2f:d7:13:e4:
                    38:a8:84:d5:46:b8:13:86:c2:1b:9d:ea:5a:38:dd:
                    9b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access: 
                OCSP - URI:http://s2.symcb.com

            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: http://www.symauth.com/cps
                  User Notice:
                    Explicit Text: http://www.symauth.com/rpa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://s1.symcb.com/pca3-g5.crl

            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, Code Signing
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=SymantecPKI-1-567
            X509v3 Subject Key Identifier: 
                96:3B:53:F0:79:33:97:AF:7D:83:EF:2E:2B:CC:CA:B7:86:1E:72:66
            X509v3 Authority Key Identifier: 
                keyid:7F:D3:65:A7:C2:DD:EC:BB:F0:30:09:F3:43:39:FA:02:AF:33:31:33

    Signature Algorithm: sha256WithRSAEncryption
         13:85:1a:1e:69:a9:37:f7:a0:bd:a4:af:7e:1d:61:53:fe:9d:
         8c:5e:0c:a6:75:1e:78:17:23:dd:fd:ec:1a:03:55:39:fb:71:
         95:c7:65:5a:a7:8e:30:d2:44:5a:61:db:70:6f:da:21:05:c2:
         2e:73:ba:49:f1:d1:93:fe:5d:c9:cd:5e:03:e0:89:9e:3f:74:
         1e:d7:f7:38:8b:a9:d6:cf:bb:35:2f:33:58:a8:92:56:d1:c8:
         4d:3b:82:e6:79:84:16:fc:28:b0:b1:47:f3:1d:a2:3e:ee:87:
         d9:a6:7f:a4:56:a5:3f:ad:84:2e:29:de:7c:bc:a8:aa:a3:3d:
         04:01:ea:ba:93:a2:0e:50:22:29:17:4c:87:e4:3a:11:5f:d6:
         a4:25:89:9b:05:6b:2f:b4:c9:01:4c:27:7b:0b:ac:19:05:22:
         a0:60:15:3f:da:c9:fb:4d:4c:8f:fb:72:67:77:fd:27:94:c7:
         ba:35:0e:88:49:fe:8d:fd:28:af:4a:12:bd:0d:b3:97:05:de:
         44:0c:15:fa:36:2b:03:dc:c1:50:01:f1:a1:11:5d:14:e5:e2:
         bd:27:4b:54:be:2b:84:5e:0f:a6:c3:74:05:0a:ef:97:c3:89:
         22:b1:1f:77:f3:bd:cd:43:d4:f1:4c:a9:3f:b5:8b:84:af:64:
         f2:d0:14:21
pkcs7-signedData
  • 1
    • SHA1: nil
    • 1.3.6.1.4.1.311.2.1.4
      • #0
        • 1.3.6.1.4.1.311.2.1.15
          • :
        • SHA1
          • 58 01 c7 9b 87 13 5c 00  ee 89 53 c1 55 d5 a0 1b  |X.....\...S.U...|
87 f3 49 36                                       |..I6            |
    • Certificates
      • Certificate #0
        • 2
          • 7E:93:EB:FB:7C:C6:4E:59:EA:4B:9A:77:D4:06:FC:3B
          • RSA-SHA1: nil
          • Issuer
            • C: ZA
            • ST: Western Cape
            • L: Durbanville
            • O: Thawte
            • OU: Thawte Certification
            • CN: Thawte Timestamping CA
          • 2012-12-21 00:00:00 UTC: 2020-12-30 23:59:59 UTC
          • Subject
            • C: US
            • O: Symantec Corporation
            • CN: Symantec Time Stamping Services CA - G2
          • #5
            • rsaEncryption: nil
            • B1:AC:B3:49:54:4B:97:1C:12:0A:D8:25:79:91:22:57:
              2A:6F:DC:B8:26:C4:43:73:6B:C2:BF:2E:50:5A:FB:14:
              C2:76:8E:43:01:25:43:B4:A1:E2:45:F4:E8:B7:7B:C3:
              74:CC:22:D7:B4:94:00:02:F7:4D:ED:BF:B4:B7:44:24:
              6B:CD:5F:45:3B:D1:44:CE:43:12:73:17:82:8B:69:B4:
              2B:CB:99:1E:AC:72:1B:26:4D:71:1F:B1:31:DD:FB:51:
              61:02:53:A6:AA:F5:49:2C:05:78:45:A5:2F:89:CE:E7:
              99:E7:FE:8C:E2:57:3F:3D:C6:92:DC:4A:F8:7B:33:E4:
              79:0A:FB:F0:75:88:41:9C:FF:C5:03:51:99:AA:D7:6C:
              9F:93:69:87:65:29:83:85:C2:60:14:C4:C8:C9:3B:14:
              DA:C0:81:F0:1F:0D:74:DE:92:22:AB:CA:F7:FB:74:7C:
              27:E6:F7:4A:1B:7F:A7:C3:9E:2D:AE:8A:EA:A6:E6:AA:
              27:16:7D:61:F7:98:71:11:BC:E2:50:A1:4B:E5:5D:FA:
              E5:0E:A7:2C:9F:AA:65:20:D3:D8:96:E8:C8:7C:A5:4E:
              48:44:FF:19:E2:44:07:92:0B:D7:68:84:80:5D:6A:78:
              64:45:CD:60:46:7E:54:C1:13:7C:C5:79:F1:C9:C1:71              : 0x010001
          • #6
            • subjectKeyIdentifier: 
              5f 9a f5 6e 5c cc cc 74  9a d4 dd 7d ef 3f db ec  |_..n\..t...}.?..|
4c 80 2e dd                                       |L...            |
            • authorityInfoAccess
              • OCSP: http://ocsp.thawte.com
            • basicConstraints
              • true
              • true: 0
            • crlDistributionPoints: http://crl.thawte.com/ThawteTimestampingCA.crl
            • extendedKeyUsage: timeStamping
            • keyUsage: true, 6
            • subjectAltName
              • CN: TimeStamp-2048-1
        • RSA-SHA1: 
          03 09 9b 8f 79 ef 7f 59  30 aa ef 68 b5 fa e3 09  |....y..Y0..h....|
1d bb 4f 82 06 5d 37 5f  a6 52 9f 16 8d ea 1c 92  |..O..]7_.R......|
09 44 6e f5 6d eb 58 7c  30 e8 f9 69 8d 23 73 0b  |.Dn.m.X|0..i.#s.|
12 6f 47 a9 ae 39 11 f8  2a b1 9b b0 1a c3 8e eb  |.oG..9..*.......|
59 96 00 ad ce 0c 4d b2  d0 31 a6 08 5c 2a 7a fc  |Y.....M..1..\*z.|
e2 7a 1d 57 4c a8 65 18  e9 79 40 62 25 96 6e c7  |.z.WL.e..y@b%.n.|
c7 37 6a 83 21 08 8e 41  ea dd d9 57 3f 1d 77 49  |.7j.!..A...W?.wI|
87 2a 16 06 5e a6 38 6a  22 12 a3 51 19 83 7e b6  |.*..^.8j"..Q..~.|
      • Certificate #1
        • 2
          • 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • O: Symantec Corporation
            • CN: Symantec Time Stamping Services CA - G2
          • 2012-10-18 00:00:00 UTC: 2020-12-29 23:59:59 UTC
          • Subject
            • C: US
            • O: Symantec Corporation
            • CN: Symantec Time Stamping Services Signer - G4
          • #5
            • rsaEncryption: nil
            • A2:63:0B:39:44:B8:BB:23:A7:44:49:BB:0E:FF:A1:F0:
              61:0A:53:93:B0:98:DB:AD:2C:0F:4A:C5:6E:FF:86:3C:
              53:55:0F:15:CE:04:3F:2B:FD:A9:96:96:D9:BE:61:79:
              0B:5B:C9:4C:86:76:E5:E0:43:4B:22:95:EE:C2:2B:43:
              C1:9F:D8:68:B4:8E:40:4F:EE:85:38:B9:11:C5:23:F2:
              64:58:F0:15:32:6F:4E:57:A1:AE:88:A4:02:D7:2A:1E:
              CD:4B:E1:DD:63:D5:17:89:32:5B:B0:5E:99:5A:A8:9D:
              28:50:0E:17:EE:96:DB:61:3B:45:51:1D:CF:12:56:0B:
              92:47:FC:AB:AE:F6:66:3D:47:AC:70:72:E7:92:E7:5F:
              CD:10:B9:C4:83:64:94:19:BD:25:80:E1:E8:D2:22:A5:
              D0:BA:02:7A:A1:77:93:5B:65:C3:EE:17:74:BC:41:86:
              2A:DC:08:4C:8C:92:8C:91:2D:9E:77:44:1F:68:D6:A8:
              74:77:DB:0E:5B:32:8B:56:8B:33:BD:D9:63:C8:49:9D:
              3A:C5:C5:EA:33:0B:D2:F1:A3:1B:F4:8B:BE:D9:B3:57:
              8B:3B:DE:04:A7:7A:22:B2:24:AE:2E:C7:70:C5:BE:4E:
              83:26:08:FB:0B:BD:A9:4F:99:08:E1:10:28:72:AA:CD              : 0x010001
          • X509v3 extensions
            • basicConstraints
              • true
              • nil
            • extendedKeyUsage: true, timeStamping
            • keyUsage: true, 0x80
            • authorityInfoAccess
              • #0
                • OCSP: http://ts-ocsp.ws.symantec.com
                • caIssuers: http://ts-aia.ws.symantec.com/tss-ca-g2.cer
            • crlDistributionPoints: http://ts-crl.ws.symantec.com/tss-ca-g2.crl
            • subjectAltName
              • CN: TimeStamp-2048-2
            • subjectKeyIdentifier: 
              46 c6 69 a3 0e 4a 14 1e  d5 4c da 52 63 17 3f 5e  |F.i..J...L.Rc.?^|
36 bc 0d e6                                       |6...            |
            • authorityKeyIdentifier: 
              5f 9a f5 6e 5c cc cc 74  9a d4 dd 7d ef 3f db ec  |_..n\..t...}.?..|
4c 80 2e dd                                       |L...            |
        • RSA-SHA1: 
          78 3b b4 91 2a 00 4c f0  8f 62 30 37 78 a3 84 27  |x;..*.L..b07x..'|
07 6f 18 b2 de 25 dc a0  d4 94 03 aa 86 4e 25 9f  |.o...%.......N%.|
9a 40 03 1c dd ce e3 79  cb 21 68 06 da b6 32 b4  |.@.....y.!h...2.|
6d bf f4 2c 26 63 33 e4  49 64 6d 0d e6 c3 67 0e  |m..,&c3.Idm...g.|
f7 05 a4 35 6c 7c 89 16  c6 e9 b2 df b2 e9 dd 20  |...5l|......... |
c6 71 0f cd 95 74 dc b6  5c de bd 37 1f 43 78 e6  |.q...t..\..7.Cx.|
78 b5 cd 28 04 20 a3 aa  f1 4b c4 88 29 91 0e 80  |x..(. ...K..)...|
d1 11 fc dd 5c 76 6e 4f  5e 0e 45 46 41 6e 0d b0  |....\vnO^.EFAn..|
ea 38 9a b1 3a da 09 71  10 fc 1c 79 b4 80 7b ac  |.8..:..q...y..{.|
69 f4 fd 9c b6 0c 16 2b  f1 7f 5b 09 3d 9b 5b e2  |i......+..[.=.[.|
16 ca 13 81 6d 00 2e 38  0d a8 29 8f 2c e1 b2 f4  |....m..8..).,...|
5a a9 01 af 15 9c 2c 2f  49 1b db 22 bb c3 fe 78  |Z.....,/I.."...x|
94 51 c3 86 b1 82 88 5d  f0 3d b4 51 a1 79 33 2b  |.Q.....].=.Q.y3+|
2e 7b b9 dc 20 09 13 71  eb 6a 19 5b cf e8 a5 30  |.{.. ..q.j.[...0|
57 2c 89 49 3f b9 cf 7f  c9 bf 3e 22 68 63 53 9a  |W,.I?.....>"hcS.|
bd 69 74 ac c5 1d 3c 7f  92 e0 c3 bc 1c d8 04 75  |.it...<........u|
      • Certificate #2
        • 2
          • 28:D3:66:13:40:52:BA:BF:63:4E:75:E9:93:DE:D7:4A
          • RSA-SHA256: nil
          • Issuer
            • C: US
            • O: Symantec Corporation
            • OU: Symantec Trust Network
            • CN: Symantec Class 3 SHA256 Code Signing CA
          • 2015-09-01 00:00:00 UTC: 2017-01-15 23:59:59 UTC
          • Subject
            • C: US
            • ST: Virginia
            • L: Alexandria
            • O: Alawar Entertainment Inc
            • CN: Alawar Entertainment Inc
          • #5
            • rsaEncryption: nil
            • D1:51:9C:C2:CA:7E:DF:29:E5:F2:16:F2:52:6D:4C:CB:
              9C:53:8C:CE:1D:65:68:04:FA:9B:45:44:2A:A6:D1:68:
              11:8A:3D:B1:73:B3:F6:7A:64:3E:0B:D6:46:BA:06:86:
              2E:A6:C4:C8:B5:E8:63:AB:5A:A1:D9:D5:21:CC:D2:13:
              66:3D:1C:F5:93:6A:3E:17:0F:91:70:68:0A:20:FC:06:
              50:CD:27:00:9E:62:EC:77:E0:46:D4:79:2B:A1:D3:51:
              F9:AB:70:5F:AE:6D:65:F2:4A:B1:BE:CB:C2:F3:02:C5:
              77:28:1B:EB:21:2B:22:2C:93:27:CE:36:0A:64:26:FD:
              1A:A5:E0:C6:B2:D6:3F:53:64:0C:31:BA:51:28:FE:B9:
              83:26:8F:1D:4E:BD:04:AE:D2:CF:AA:03:A0:DE:2E:B6:
              00:2A:61:C9:EF:14:26:AF:E1:56:3E:83:D1:A9:AC:A9:
              02:9A:FC:D6:59:8A:36:AA:FF:27:88:5F:23:9E:64:B7:
              9A:D5:7A:40:99:71:ED:5A:9B:C2:99:EC:C3:A4:15:4E:
              11:45:77:4C:D0:71:7C:9E:62:CA:D8:8C:07:DE:D6:10:
              5A:CC:32:55:85:B7:B5:46:47:1A:30:99:F0:79:8B:06:
              43:0E:82:58:27:7F:96:24:8B:73:21:44:4D:77:F9:51              : 0x010001
          • X509v3 extensions
            • basicConstraints
              • nil
            • keyUsage: true, 0x80
            • crlDistributionPoints: http://sv.symcb.com/sv.crl
            • certificatePolicies
              • 2.16.840.1.113733.1.7.23.3
                • #0
                  • id-qt-cps: https://d.symcb.com/cps
                  • id-qt-unotice: https://d.symcb.com/rpa
            • extendedKeyUsage: codeSigning
            • authorityInfoAccess
              • #0
                • OCSP: http://sv.symcd.com
                • caIssuers: http://sv.symcb.com/sv.crt
            • authorityKeyIdentifier: 
              96 3b 53 f0 79 33 97 af  7d 83 ef 2e 2b cc ca b7  |.;S.y3..}...+...|
86 1e 72 66                                       |..rf            |
            • subjectKeyIdentifier: 
              2c 75 4f d1 d9 61 c9 e7  ca 4d 7e 43 41 ec bb 5f  |,uO..a...M~CA.._|
9a 20 ec e6                                       |. ..            |
        • RSA-SHA256: 
          83 1e eb 9a 82 11 7a 31  88 16 cd b5 5f e0 8a 82  |......z1...._...|
e7 4e 0c e1 17 9b c9 d0  be c0 49 e1 c3 b4 b0 82  |.N........I.....|
d6 80 7a 35 6c f3 52 2f  13 ee 6f 61 4b 0b 9d 7a  |..z5l.R/..oaK..z|
5d 39 fa 26 fc 66 35 21  f6 2f e9 15 42 5d 51 62  |]9.&.f5!./..B]Qb|
57 50 3c 86 de 91 e7 4b  eb 38 15 82 1e fb 27 16  |WP<....K.8....'.|
b9 04 7e 5a 21 a4 1e 65  c2 62 51 9e 27 db 1e af  |..~Z!..e.bQ.'...|
58 13 6a 26 66 ca f9 74  db 57 4c db 1a 94 ea e2  |X.j&f..t.WL.....|
8b 53 22 19 f1 a7 2d e7  1c 73 52 53 5f 1f 2f b8  |.S"...-..sRS_./.|
91 9f f7 56 62 c7 8a 0c  2f 78 90 b9 9b a9 0e df  |...Vb.../x......|
8a 31 5c a1 1d 1f b0 f7  ad f2 f8 07 5e e9 6b cd  |.1\.........^.k.|
9b ba 4e 6e 6c e1 59 4e  34 54 37 3d d4 e3 99 34  |..Nnl.YN4T7=...4|
73 00 5f 30 da 10 d6 bf  60 12 4f e2 b4 1c 6f cf  |s._0....`.O...o.|
6a 9f 18 3f 75 1b 46 7c  6c 8d 79 7a d8 2d 7f a7  |j..?u.F|l.yz.-..|
a4 ea c6 dc 65 62 10 29  63 1e c9 66 5b c6 86 db  |....eb.)c..f[...|
79 bd 8f e5 8d 0f 72 a9  8f 31 c9 4c f2 54 4a e9  |y.....r..1.L.TJ.|
28 4b fb 28 77 78 1e 53  a2 94 4a 44 35 a1 16 61  |(K.(wx.S..JD5..a|
      • Certificate #3
        • 2
          • 3D:78:D7:F9:76:49:60:B2:61:7D:F4:F0:1E:CA:86:2A
          • RSA-SHA256: nil
          • Issuer
            • C: US
            • O: VeriSign, Inc.
            • OU: VeriSign Trust Network
            • OU: (c) 2006 VeriSign, Inc. - For authorized use only
            • CN: VeriSign Class 3 Public Primary Certification Authority - G5
          • 2013-12-10 00:00:00 UTC: 2023-12-09 23:59:59 UTC
          • Subject
            • C: US
            • O: Symantec Corporation
            • OU: Symantec Trust Network
            • CN: Symantec Class 3 SHA256 Code Signing CA
          • #5
            • rsaEncryption: nil
            • 97:83:1E:00:16:AF:2C:B1:D2:08:C4:D7:68:93:51:60:
              1E:71:F6:E2:47:B4:DB:58:4D:23:62:6A:B4:BF:5A:1B:
              51:F7:A3:0D:18:77:68:BB:D8:36:AB:2F:21:50:DA:9E:
              F3:E7:5F:27:4E:0B:C2:97:C8:09:70:93:A9:DA:5C:0D:
              4E:A4:0D:91:A0:B4:EC:14:CE:91:72:54:2E:CE:A3:DB:
              44:E9:52:1B:3F:41:3C:CA:4A:E4:AA:C0:E8:39:AB:53:
              CC:21:D0:CC:CF:7F:9B:E6:C2:CC:58:6A:82:15:EE:3D:
              36:CF:1C:C5:97:07:24:8E:F1:7B:BE:31:2D:3D:6E:DC:
              B5:99:42:9F:4B:61:95:5F:1C:70:EE:17:7D:DB:8B:E5:
              61:89:78:C7:68:1B:AF:11:78:1A:98:AE:C4:55:47:53:
              D9:B3:32:D6:A1:0E:46:40:C5:97:92:8A:D1:53:A7:99:
              5B:85:35:57:D3:EA:93:62:61:20:0A:C7:30:77:24:11:
              4D:62:83:B6:BA:7B:68:82:31:EE:65:CA:DF:F9:D5:8D:
              B2:35:DC:8C:2B:6F:6A:72:5C:60:84:9C:F2:0C:94:5E:
              C0:56:52:00:48:CC:D3:F8:A5:7D:DE:2F:D7:13:E4:38:
              A8:84:D5:46:B8:13:86:C2:1B:9D:EA:5A:38:DD:9B:DB              : 0x010001
          • X509v3 extensions
            • authorityInfoAccess
              • OCSP: http://s2.symcb.com
            • basicConstraints
              • true
              • true: 0
            • certificatePolicies
              • 2.16.840.1.113733.1.7.23.3
                • #0
                  • id-qt-cps: http://www.symauth.com/cps
                  • id-qt-unotice: http://www.symauth.com/rpa
            • crlDistributionPoints: http://s1.symcb.com/pca3-g5.crl
            • extendedKeyUsage
              • clientAuth: codeSigning
            • keyUsage: true, 6
            • subjectAltName
              • CN: SymantecPKI-1-567
            • subjectKeyIdentifier: 
              96 3b 53 f0 79 33 97 af  7d 83 ef 2e 2b cc ca b7  |.;S.y3..}...+...|
86 1e 72 66                                       |..rf            |
            • authorityKeyIdentifier: 
              7f d3 65 a7 c2 dd ec bb  f0 30 09 f3 43 39 fa 02  |..e......0..C9..|
af 33 31 33                                       |.313            |
        • RSA-SHA256: 
          13 85 1a 1e 69 a9 37 f7  a0 bd a4 af 7e 1d 61 53  |....i.7.....~.aS|
fe 9d 8c 5e 0c a6 75 1e  78 17 23 dd fd ec 1a 03  |...^..u.x.#.....|
55 39 fb 71 95 c7 65 5a  a7 8e 30 d2 44 5a 61 db  |U9.q..eZ..0.DZa.|
70 6f da 21 05 c2 2e 73  ba 49 f1 d1 93 fe 5d c9  |po.!...s.I....].|
cd 5e 03 e0 89 9e 3f 74  1e d7 f7 38 8b a9 d6 cf  |.^....?t...8....|
bb 35 2f 33 58 a8 92 56  d1 c8 4d 3b 82 e6 79 84  |.5/3X..V..M;..y.|
16 fc 28 b0 b1 47 f3 1d  a2 3e ee 87 d9 a6 7f a4  |..(..G...>......|
56 a5 3f ad 84 2e 29 de  7c bc a8 aa a3 3d 04 01  |V.?...).|....=..|
ea ba 93 a2 0e 50 22 29  17 4c 87 e4 3a 11 5f d6  |.....P").L..:._.|
a4 25 89 9b 05 6b 2f b4  c9 01 4c 27 7b 0b ac 19  |.%...k/...L'{...|
05 22 a0 60 15 3f da c9  fb 4d 4c 8f fb 72 67 77  |.".`.?...ML..rgw|
fd 27 94 c7 ba 35 0e 88  49 fe 8d fd 28 af 4a 12  |.'...5..I...(.J.|
bd 0d b3 97 05 de 44 0c  15 fa 36 2b 03 dc c1 50  |......D...6+...P|
01 f1 a1 11 5d 14 e5 e2  bd 27 4b 54 be 2b 84 5e  |....]....'KT.+.^|
0f a6 c3 74 05 0a ef 97  c3 89 22 b1 1f 77 f3 bd  |...t......"..w..|
cd 43 d4 f1 4c a9 3f b5  8b 84 af 64 f2 d0 14 21  |.C..L.?....d...!|
    • Signer
      • 1
      • unnamed
        • #0
          • C: US
          • O: Symantec Corporation
          • OU: Symantec Trust Network
          • CN: Symantec Class 3 SHA256 Code Signing CA
        • 28:D3:66:13:40:52:BA:BF:63:4E:75:E9:93:DE:D7:4A
      • SHA1: nil
      • #3
        • contentType: 1.3.6.1.4.1.311.2.1.4
        • 1.3.6.1.4.1.311.2.1.11: msCodeInd
        • messageDigest: 
          1d b4 2d a2 00 75 86 a1  ad aa 09 25 40 a0 ff 58  |..-..u.....%@..X|
96 33 f5 36                                       |.3.6            |
        • 1.3.6.1.4.1.311.2.1.12
          • 00 41 00 6c 00 61 00 77  00 61 00 72 00 20 00 67  |.A.l.a.w.a.r. .g|
00 61 00 6d 00 65                                 |.a.m.e          |
            : http://www.alawar.com/?referer1=verisign
      • rsaEncryption: 
        bf 62 5e c1 57 82 03 d6  53 26 fb 0d d6 7b a0 b5  |.b^.W...S&...{..|
6c 40 aa c4 b1 dd 9f 6d  5c 53 44 96 78 10 c1 c5  |l@.....m\SD.x...|
ac 1c 5b 0f c1 aa 66 e3  08 89 aa dc 04 b7 4d 42  |..[...f.......MB|
66 bb ed 9f 56 d1 68 73  93 09 a4 c1 86 d2 b8 61  |f...V.hs.......a|
23 b6 29 d1 f0 11 c8 8b  0f 47 47 93 1d af 0d d6  |#.)......GG.....|
97 47 bd 8c c9 68 78 98  b2 12 8d 10 e9 d3 cc e9  |.G...hx.........|
b2 94 48 cf dd a8 65 ce  e0 62 cc 04 54 d4 6a e1  |..H...e..b..T.j.|
5a 8f 87 0b 33 f0 78 7a  cd 5d fe cb df ce 2d 2c  |Z...3.xz.]....-,|
e9 a0 b3 22 85 d5 7b 43  af d4 99 7a 77 98 9c 01  |..."..{C...zw...|
9c da c9 b5 bb b8 65 c1  7e 5b 16 5c 3f ed 81 4f  |......e.~[.\?..O|
c4 25 7e 6a 7b 29 c5 61  f9 ca 7e 24 b9 28 97 c5  |.%~j{).a..~$.(..|
30 51 15 5d 96 d6 eb 73  57 6d ef f7 c9 f8 81 7c  |0Q.]...sWm.....||
17 b8 de 39 3a 38 9c 89  f3 86 c1 21 22 8e e2 2b  |...9:8.....!"..+|
09 85 e2 d3 89 6d a9 1c  03 b3 4e 2a 5e 9e 52 cc  |.....m....N*^.R.|
ed 6e 60 00 ec 39 7b b9  35 06 bd e5 5c 82 e5 1e  |.n`..9{.5...\...|
4d a3 d3 55 a2 a2 b1 1f  27 b4 2c 9c 98 81 ad 80  |M..U....'.,.....|
      • countersignature
        • 1
          • unnamed
            • #0
              • C: US
              • O: Symantec Corporation
              • CN: Symantec Time Stamping Services CA - G2
            • 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
          • SHA1: nil
          • #2
            • contentType: pkcs7-data
            • signingTime: 2016-11-28 05:53:50 UTC
            • messageDigest: 
              0a f2 e7 a7 5d 36 c0 ac  db da aa dc 66 d8 4e 54  |....]6......f.NT|
12 77 e6 d7                                       |.w..            |
          • rsaEncryption: 
            22 cc 69 14 93 ed a2 8b  79 a6 a6 10 69 5e 37 55  |".i.....y...i^7U|
6d bb 5e 8f 89 85 53 97  6d 68 6f fa a9 f7 bf 1f  |m.^...S.mho.....|
ee 42 5d ed 1d 13 e4 91  4e 40 ea e1 cc ea d9 2d  |.B].....N@.....-|
10 f5 1e 18 70 fa 03 30  74 99 0d eb e2 39 41 3e  |....p..0t....9A>|
d1 f7 6d af ef cc bd e4  98 6e 2e 42 e7 68 61 dc  |..m......n.B.ha.|
c4 f1 18 d5 f1 ca 65 0f  ef c6 cb 26 36 c4 f1 2f  |......e....&6../|
33 35 14 0f 89 1e 6f 6c  4d b7 60 f3 33 a0 d4 63  |35....olM.`.3..c|
04 33 7b f4 37 a6 70 b2  73 dd 40 8d 38 e8 27 49  |.3{.7.p.s.@.8.'I|
22 92 7b 2b 01 06 13 b0  30 a0 d3 3d 41 2a a2 cd  |".{+....0..=A*..|
ad f0 15 b7 3c 29 d9 59  bb 58 4b 64 7f 9c 40 32  |....<).Y.XKd..@2|
81 10 97 00 67 62 42 b2  43 24 b1 97 48 ce 63 4b  |....gbB.C$..H.cK|
85 bb 37 6c 1d b3 18 2d  a8 49 87 d0 da ef dd 66  |..7l...-.I.....f|
19 f2 18 00 3b cf 67 45  1a d5 6e 6e ff a1 5e b5  |....;.gE..nn..^.|
93 3f fe b8 46 47 e3 a7  4b 81 58 80 90 d2 a9 9c  |.?..FG..K.X.....|
46 d6 ee cb 61 10 7d 68  39 4a 9b 34 bb 36 5f 6a  |F...a.}h9J.4.6_j|
b7 c9 9c 41 19 fc a9 33  29 ad 61 1e 69 88 06 5e  |...A...3).a.i..^|
offsetsizetypecomment
049664EXE02/24/2012 19:19:54#
15c115HTM#
c200736392BINoverlay data past EOF#
Scanning the drive for archives:
1 file, 786056 bytes (768 KiB)


--
Type = PE
Physical Size = 786056
CPU = x86
Characteristics = Executable 32-bit
Created = 2012-02-24 19:19:54
Headers Size = 1024
Checksum = 837080
Image Size = 1519616
Section Alignment = 4096
File Alignment = 512
Code Size = 28160
Initialized Data Size = 445952
Uninitialized Data Size = 16896
Linker Version = 10.0
OS Version = 5.0
Image Version = 6.0
Subsystem Version = 5.0
Subsystem = Windows GUI
DLL Characteristics = Relocated NX-Compatible NoSEH TerminalServerAware
Stack Reserve = 1048576
Stack Commit = 4096
Heap Reserve = 1048576
Heap Commit = 4096
Image Base = 4194304
----
Path = [0]
Size = 730264
Packed Size = 730264
Virtual Size = 730264
Offset = 49664
--
Path = [0]
Type = Nsis
Offset = 17408
Physical Size = 712856
Method = LZMA:23
Solid = -
Headers Size = 55630
Embedded Stub Size = 0
SubType = NSIS-Park-3 Unicode log

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
2013-08-08 08:18:30 .....                      1896  $PLUGINSDIR/modern-header.bmp
                    .....                      6096  $PLUGINSDIR/System.dll
2016-01-22 06:37:34 .....                      1032  $TEMP/rdata.dat
2015-11-30 11:05:44 .....                     93027  $TEMP/curllib.dll
2015-11-30 11:05:44 .....                     31291  $TEMP/libsasl.dll
2015-11-30 11:05:44 .....                     47570  $TEMP/openldap.dll
2014-05-27 10:36:24 .....                    389837  $TEMP/libeay32.dll
2014-05-27 10:36:24 .....                     83850  $TEMP/ssleay32.dll
                    .....                     41204  $PLUGINSDIR/inetcurl.dll
                    .....                     10248  $PLUGINSDIR/inetc.dll
------------------- ----- ------------ ------------  ------------------------
2016-01-22 06:37:34                          706051  10 files
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable







[?] ignoring invalid PEdump::BITMAPINFOHEADER
[?] can't find file_offset of VA 0x7a000