filenamedw_wfp.sys
size57088 (0xdf00)
md51bc7749882d02efc24e881e2c1b22297
typePE32 executable (native) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xe0

Rich Header

lib idversiontimes used
1073
123507277
109507273
1373072922
148307291
145307291

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections8
TimeDateStamp0x50095977
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x102
Magic0x10b
LinkerVersion9.0
SizeOfCode0x9a00
SizeOfInitializedData0x2800
SizeOfUninitializedData0
AddressOfEntryPoint0xe1e0
BaseOfCode0x1000
BaseOfData0x3000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.0
ImageVersion0.0
SubsystemVersion5.0
Reserved10
SizeOfImage0x12000
SizeOfHeaders0x400
CheckSum0x126c9
Subsystem1
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v6.0

Sections

namevavsizeraw sizeflags
.text0x10000x10640x1200R-X CODE
.rdata0x30000xf7c0x1000R-- IDATA
.data0x40000x9a80x600RW- IDATA
PAGE0x50000x74810x7600R-X CODE
PAGEC0xd0000x800x200RW- IDATA
INIT0xe0000x10480x1200RWX CODE DISCARDABLE
.rsrc0x100000x3f80x400R-- IDATA DISCARDABLE
.reloc0x110000x79a0x800R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0xe8980x50
RESOURCE0x100000x3f8
EXCEPTION00
SECURITY0xc2000x1d00
BASERELOC0x110000x680
DEBUG0x31300x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x3ce80x40
Bound_IAT00
IAT0x30000x12c
Delay_IAT00
CLR_Header00
typenamesizecp
VERSION#19160
module_namehintordfunction_name
ntoskrnl.exe733KeInitializeMutex
ntoskrnl.exe1129PsCreateSystemThread
ntoskrnl.exe810KeSetEvent
ntoskrnl.exe1709ZwClose
ntoskrnl.exe808KeSetBasePriorityThread
ntoskrnl.exe712KeGetCurrentThread
ntoskrnl.exe786KeReleaseMutex
ntoskrnl.exe841KefAcquireSpinLockAtDpcLevel
ntoskrnl.exe842KefReleaseSpinLockFromDpcLevel
ntoskrnl.exe831KeTickCount
ntoskrnl.exe1375RtlInitUnicodeString
ntoskrnl.exe1766ZwOpenKey
ntoskrnl.exe1811ZwQueryValueKey
ntoskrnl.exe1520RtlUnicodeStringToInteger
ntoskrnl.exe768KeQueryTimeIncrement
ntoskrnl.exe1178PsGetVersion
ntoskrnl.exe1137PsGetCurrentProcessId
ntoskrnl.exe906MmGetSystemRoutineAddress
ntoskrnl.exe1537RtlUpperChar
ntoskrnl.exe110ExAllocatePoolWithTagPriority
ntoskrnl.exe133ExFreePoolWithTag
ntoskrnl.exe1717ZwCreateFile
ntoskrnl.exe1077ObQueryNameString
ntoskrnl.exe274FsRtlDissectName
ntoskrnl.exe1764ZwOpenFile
ntoskrnl.exe501IoFileObjectType
ntoskrnl.exe1723ZwCreateSection
ntoskrnl.exe1757ZwMapViewOfSection
ntoskrnl.exe1856ZwUnmapViewOfSection
ntoskrnl.exe1141PsGetCurrentThreadId
ntoskrnl.exe1190PsLookupProcessByProcessId
ntoskrnl.exe1076ObOpenObjectByPointer
ntoskrnl.exe975NtBuildNumber
ntoskrnl.exe910MmIsAddressValid
ntoskrnl.exe517IoGetCurrentProcess
ntoskrnl.exe825KeStackAttachProcess
ntoskrnl.exe943MmSectionObjectType
ntoskrnl.exe834KeUnstackDetachProcess
ntoskrnl.exe1090ObfReferenceObject
ntoskrnl.exe465IoCreateDevice
ntoskrnl.exe475IoCreateSymbolicLink
ntoskrnl.exe488IoDeleteSymbolicLink
ntoskrnl.exe486IoDeleteDevice
ntoskrnl.exe662IofCompleteRequest
ntoskrnl.exe581IoReleaseCancelSpinLock
ntoskrnl.exe1735ZwDuplicateObject
ntoskrnl.exe1209PsSetCreateProcessNotifyRoutine
ntoskrnl.exe1246RtlAppendUnicodeStringToString
ntoskrnl.exe521IoGetDeviceObjectPointer
ntoskrnl.exe441IoAttachDeviceToDeviceStackSafe
ntoskrnl.exe661IofCallDriver
ntoskrnl.exe443IoBuildDeviceIoControlRequest
ntoskrnl.exe431IoAllocateMdl
ntoskrnl.exe888MmBuildMdlForNonPagedPool
ntoskrnl.exe507IoFreeMdl
ntoskrnl.exe1196PsReferencePrimaryToken
ntoskrnl.exe109ExAllocatePoolWithTag
ntoskrnl.exe1089ObfDereferenceObject
ntoskrnl.exe1263RtlCompareMemory
ntoskrnl.exe840KeWaitForSingleObject
ntoskrnl.exe729KeInitializeEvent
ntoskrnl.exe1795ZwQueryInformationFile
ntoskrnl.exe1079ObReferenceObjectByHandle
ntoskrnl.exe1880_except_handler3
ntoskrnl.exe1918memcpy
ntoskrnl.exe1920memset
ntoskrnl.exe1865_alldiv
ntoskrnl.exe1867_allmul
HAL.dll95KfReleaseSpinLock
HAL.dll92KfAcquireSpinLock
HAL.dll80KeGetCurrentIrql
TDI.SYS42TdiMapUserRequest

StringTable 000004B0

CompanyNameDoctor Web, Ltd.
FileDescriptionDr.Web Net Filter® for Windows driver
FileVersion7.0.2.07202
InternalNameDrWebWfp
LegalCopyright© Doctor Web, Ltd., 1992-2012
OriginalFilenamedw_wfp.sys
ProductNameDr.Web ®
ProductVersion7.0.2.07202
CommentsVisit http://www.drweb.com for additional information

VS_FIXEDFILEINFO

FileVersion7.0.2.7202
ProductVersion7.0.2.7202
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS4
FileType1
FileSubtype0

Signers (1)

issuer: /C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https:\/\/www.verisign.com\/rpa (c)10/CN=VeriSign Class 3 Code Signing 2010 CA
serial: 33769228D3F9ECCED66039B90199AC5D

Certificates (5)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA
        Validity
            Not Before: May  1 00:00:00 2012 GMT
            Not After : Dec 31 23:59:59 2012 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer - G3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:a9:59:66:74:da:3d:8a:7d:7a:d8:fc:f5:80:44:
                    7b:fe:47:6a:14:55:4e:50:47:0b:ec:d3:ed:ce:f6:
                    38:f7:4f:69:b9:b1:f0:b6:78:82:0a:8c:76:16:67:
                    e2:02:ad:b7:0d:a5:8a:f6:03:fc:66:d3:fc:08:2d:
                    cc:b5:73:59:7b:89:dc:33:6e:66:5a:5e:52:37:b4:
                    62:d1:92:59:35:14:8b:45:ac:59:b2:4d:24:a2:98:
                    94:68:42:72:9f:3a:68:e2:6b:8b:9e:22:2d:f4:98:
                    4e:9a:c6:af:b3:e4:a0:ab:3c:28:bf:23:e1:d7:72:
                    a4:f2:10:53:67:ae:77:af:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.verisign.com/tss-ca.crl
            X509v3 Extended Key Usage: critical
                Time Stamping
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Subject Alternative Name: 
                DirName:/CN=TSA1-3
            X509v3 Subject Key Identifier: 
                B4:B7:F1:89:49:26:60:E7:65:EA:73:AE:DC:D3:38:CD:BF:57:92:6F
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        1e:98:aa:27:b7:78:b5:08:b5:c9:72:6d:b7:df:c0:0e:98:a6:
        35:c4:88:c9:d2:f6:6d:f1:4b:1a:fb:d5:f9:2d:99:00:9e:d1:
        e7:9b:8b:e1:3f:bd:39:80:0c:66:cd:07:bc:5c:98:54:a6:94:
        ba:10:d1:4e:8b:ab:f5:6f:65:cc:67:09:a2:80:7c:52:e8:0e:
        03:d6:6b:7a:c6:05:18:ec:c8:ac:42:7c:07:2c:a7:3d:08:66:
        dc:00:ed:fd:94:1d:73:f2:72:98:93:b1:11:d6:8f:ef:8e:ea:
        ac:f4:96:51:0c:d0:8d:df:31:52:4f:5e:af:7d:a7:4a:75:e6:
        4e:ce:2b:9f:29:2b:e7:cf:5d:9f:03:7e:6e:27:7b:23:ad:62:
        29:66:af:92:e8:2c:ce:bd:9c:7f:dc:cd:17:3c:43:c2:09:3f:
        75:45:c7:9e:e4:d7:60:7f:97:c6:e4:aa:c7:69:f5:fc:cd:74:
        ac:2c:b0:48:c1:50:4e:70:56:1e:b5:35:d3:8e:be:b1:ed:ac:
        bd:fe:0c:ec:85:7d:d5:bb:85:66:44:19:5d:9f:93:eb:82:ba:
        63:9e:d3:7c:61:ff:c8:1b:d9:23:58:7f:30:a3:66:a1:39:26:
        5e:92:c3:3c:cb:37:32:fa:f5:a3:8d:dc:d5:b0:a3:e9:25:36:
        55:d7:81:fa

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
        Validity
            Not Before: Dec  4 00:00:00 2003 GMT
            Not After : Dec  3 23:59:59 2013 GMT
        Subject: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a9:ca:b2:a4:cc:cd:20:af:0a:7d:89:ac:87:75:
                    f0:b4:4e:f1:df:c1:0f:bf:67:61:bd:a3:64:1c:da:
                    bb:f9:ca:33:ab:84:30:89:58:7e:8c:db:6b:dd:36:
                    9e:0f:bf:d1:ec:78:f2:77:a6:7e:6f:3c:bf:93:af:
                    0d:ba:68:f4:6c:94:ca:bd:52:2d:ab:48:3d:f5:b6:
                    d5:5d:5f:1b:02:9f:fa:2f:6b:1e:a4:f7:a3:9a:a6:
                    1a:c8:02:e1:7f:4c:52:e3:0e:60:ec:40:1c:7e:b9:
                    0d:de:3f:c7:b4:df:87:bd:5f:7a:6a:31:2e:03:99:
                    81:13:a8:47:20:ce:31:73:0d:57:2d:cd:78:34:33:
                    95:12:99:12:b9:de:68:2f:aa:e6:e3:c2:8a:8c:2a:
                    c3:8b:21:87:66:bd:83:58:57:6f:75:bf:3c:aa:26:
                    87:5d:ca:10:15:3c:9f:84:ea:54:c1:0a:6e:c4:fe:
                    c5:4a:dd:b9:07:11:97:22:7c:db:3e:27:d1:1e:78:
                    ec:9f:31:c9:f1:e6:22:19:db:c4:b3:47:43:9a:1a:
                    5f:a0:1e:90:e4:5e:f5:ee:7c:f1:7d:ab:62:01:8f:
                    f5:4d:0b:de:d0:22:56:a8:95:cd:ae:88:76:ae:ee:
                    ba:0d:f3:e4:4d:d9:a0:fb:68:a0:ae:14:3b:b3:87:
                    c1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.verisign.com/ThawteTimestampingCA.crl
            X509v3 Extended Key Usage: 
                Time Stamping
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=TSA2048-1-53
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        4a:6b:f9:ea:58:c2:44:1c:31:89:79:99:2b:96:bf:82:ac:01:
        d6:1c:4c:cd:b0:8a:58:6e:df:08:29:a3:5e:c8:ca:93:13:e7:
        04:52:0d:ef:47:27:2f:00:38:b0:e4:c9:93:4e:9a:d4:22:62:
        15:f7:3f:37:21:4f:70:31:80:f1:8b:38:87:b3:e8:e8:97:00:
        fe:cf:55:96:4e:24:d2:a9:27:4e:7a:ae:b7:61:41:f3:2a:ce:
        e7:c9:d9:5e:dd:bb:2b:85:3e:b5:9d:b5:d9:e1:57:ff:be:b4:
        c5:7e:f5:cf:0c:9e:f0:97:fe:2b:d3:3b:52:1b:1b:38:27:f7:
        3f:4a

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:76:92:28:d3:f9:ec:ce:d6:60:39:b9:01:99:ac:5d
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https:\/\/www.verisign.com\/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA
        Validity
            Not Before: Aug 29 00:00:00 2011 GMT
            Not After : Oct  6 23:59:59 2014 GMT
        Subject: C=RU, ST=Saint-Petersburg, O=Doctor Web Ltd., OU=Digital ID Class 3 - Microsoft Software Validation v2, CN=Doctor Web Ltd.
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:bd:80:c1:17:12:a1:a2:ba:88:85:47:29:e7:ed:
                    8e:ce:23:db:a5:90:ac:6d:4f:aa:20:52:8b:72:32:
                    11:d9:1b:d2:21:a4:37:64:a6:41:98:95:90:9e:ab:
                    6e:d9:5b:b7:ca:84:ff:a7:47:dd:13:5c:19:50:98:
                    8c:c2:4a:ed:70:9e:3f:a0:c6:9d:90:20:a3:5f:c9:
                    12:6a:d7:5b:68:f9:6e:c0:de:6c:1c:64:f0:e5:d6:
                    73:4d:bf:78:fd:7a:cb:2c:6c:9a:57:66:43:df:42:
                    ee:1d:6d:a9:db:f0:8d:0d:c8:d2:45:73:8f:cb:7e:
                    3d:24:4c:8a:f3:b9:d7:c5:b3:44:30:b7:01:8f:51:
                    37:dc:41:fd:7c:aa:59:27:32:47:c0:1e:c3:9f:94:
                    af:eb:53:32:6f:9d:01:c2:7b:26:67:5e:2d:aa:9d:
                    d3:b9:4e:01:db:56:84:ad:ad:b3:a7:f9:1d:2d:8c:
                    8b:b2:8b:95:89:f0:53:21:4f:44:d3:bd:c8:8c:27:
                    fc:52:7a:85:cb:f9:9e:2e:94:4c:05:e9:c9:f4:c9:
                    0d:1b:66:37:a6:ba:6d:54:f1:12:a4:82:ae:f8:1c:
                    06:7b:c1:73:64:9e:5e:41:92:ec:9e:c9:44:50:a5:
                    2a:78:68:e3:b8:2d:cc:b5:0c:d4:e1:24:4c:7f:b9:
                    fb:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://csc3-2010-crl.verisign.com/CSC3-2010.crl
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/rpa
            X509v3 Extended Key Usage: 
                Code Signing
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com
                CA Issuers - URI:http://csc3-2010-aia.verisign.com/CSC3-2010.cer
            X509v3 Authority Key Identifier: 
                CF:99:A9:EA:7B:26:F4:4B:C9:8E:8F:D7:F0:05:26:EF:E3:D2:A7:9D
            Netscape Cert Type: 
                Object Signing
            1.3.6.1.4.1.311.2.1.27: 
                0.......
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        5b:06:d6:32:dc:ff:90:ee:3b:ca:59:f3:e9:30:38:d0:c9:55:
        a6:4d:00:f1:90:1e:5a:d1:0d:b6:c6:bd:d6:13:43:87:a8:c8:
        08:34:a1:dd:64:7d:1f:ce:32:9f:bc:d5:01:9e:92:c2:79:05:
        cd:99:ad:b9:cf:38:45:d9:41:fc:01:66:56:eb:bf:16:f0:36:
        7b:3f:89:7b:80:9d:a0:3c:2e:53:35:fc:48:5a:b5:06:28:b7:
        79:25:40:4e:94:21:51:68:e2:30:98:c5:06:f7:52:b3:9e:f4:
        19:43:36:b1:a0:a2:0d:c4:e1:63:7e:3e:b3:c9:50:15:75:7b:
        5b:50:46:39:b9:8f:12:be:0f:0e:47:f5:a1:39:37:35:99:3b:
        35:ee:27:b7:f8:54:5e:7d:4d:f5:c3:dc:da:e6:30:2f:a8:c2:
        79:fb:f6:82:d9:44:a0:c6:b1:7d:c1:b5:35:b3:3c:09:38:0a:
        36:79:54:4a:2f:6a:c5:73:b5:ba:7c:e8:b5:c8:a5:be:4f:7a:
        ec:f3:20:62:93:15:81:fa:18:e7:b6:ce:9f:b3:c8:78:ae:0a:
        60:59:52:e7:a6:b2:11:62:05:18:6c:d7:fe:ec:b6:af:b7:b3:
        03:16:dc:a7:fd:1d:6d:25:64:19:c9:2f:67:d9:16:a1:20:cb:
        2a:7f:d5:31

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:19:93:e4:00:00:00:00:00:1c
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Code Verification Root
        Validity
            Not Before: Feb 22 19:25:17 2011 GMT
            Not After : Feb 22 19:35:17 2021 GMT
        Subject: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:af:24:08:08:29:7a:35:9e:60:0c:aa:e7:4b:3b:
                    4e:dc:7c:bc:3c:45:1c:bb:2b:e0:fe:29:02:f9:57:
                    08:a3:64:85:15:27:f5:f1:ad:c8:31:89:5d:22:e8:
                    2a:aa:a6:42:b3:8f:f8:b9:55:b7:b1:b7:4b:b3:fe:
                    8f:7e:07:57:ec:ef:43:db:66:62:15:61:cf:60:0d:
                    a4:d8:de:f8:e0:c3:62:08:3d:54:13:eb:49:ca:59:
                    54:85:26:e5:2b:8f:1b:9f:eb:f5:a1:91:c2:33:49:
                    d8:43:63:6a:52:4b:d2:8f:e8:70:51:4d:d1:89:69:
                    7b:c7:70:f6:b3:dc:12:74:db:7b:5d:4b:56:d3:96:
                    bf:15:77:a1:b0:f4:a2:25:f2:af:1c:92:67:18:e5:
                    f4:06:04:ef:90:b9:e4:00:e4:dd:3a:b5:19:ff:02:
                    ba:f4:3c:ee:e0:8b:eb:37:8b:ec:f4:d7:ac:f2:f6:
                    f0:3d:af:dd:75:91:33:19:1d:1c:40:cb:74:24:19:
                    21:93:d9:14:fe:ac:2a:52:c7:8f:d5:04:49:e4:8d:
                    63:47:88:3c:69:83:cb:fe:47:bd:2b:7e:4f:c5:95:
                    ae:0e:9d:d4:d1:43:c0:67:73:e3:14:08:7e:e5:3f:
                    9f:73:b8:33:0a:cf:5d:3f:34:87:96:8a:ee:53:e8:
                    25:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: 
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier: 
                7F:D3:65:A7:C2:DD:EC:BB:F0:30:09:F3:43:39:FA:02:AF:33:31:33
            X509v3 Authority Key Identifier: 
                62:FB:0A:21:5B:7F:43:6E:11:DA:09:54:50:6B:F5:D2:96:71:F1:9E
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/MicrosoftCodeVerifRoot.crl
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        81:2a:82:16:8c:34:67:2b:e5:03:eb:34:7b:8c:a2:a3:50:8a:
        f4:55:86:f1:1e:8c:8e:ae:7d:ee:03:19:ce:72:95:18:48:ad:
        62:11:fd:20:fd:3f:47:06:01:5a:e2:e0:6f:8c:15:2c:4e:3c:
        6a:50:6c:0b:36:a3:cf:7a:0d:9c:42:bc:5c:f8:19:d5:60:e3:
        69:e6:e2:23:41:67:8c:68:83:76:2b:8f:93:a3:2a:b5:7f:be:
        59:fb:a9:c9:b2:26:8f:ca:a2:f3:82:1b:98:3e:91:95:27:97:
        86:61:ee:5b:5d:07:6b:cd:86:a8:e2:65:80:a8:e2:15:e2:b2:
        be:23:05:6a:ba:0c:f3:47:93:4d:ac:a4:8c:07:79:39:c0:61:
        12:3a:05:0d:89:a3:ec:9f:57:89:84:fb:ec:ca:7c:47:66:14:
        91:d8:b6:0f:19:5d:e6:b8:4a:ac:bc:47:c8:71:43:96:e6:32:
        20:a5:dc:77:86:fd:3c:e3:8b:71:db:7b:9b:03:fc:b7:1d:32:
        64:eb:16:52:a0:43:a3:fa:2e:ad:59:92:4e:7c:c7:f2:33:42:
        48:38:51:3a:7c:38:c7:1b:24:22:28:40:1e:1a:46:1f:17:db:
        18:f7:f0:27:35:6c:b8:63:d9:cd:b9:64:5d:2b:a5:5e:ef:c6:
        29:b4:f2:c7:f8:21:cc:04:ba:57:fd:01:b6:ab:c6:67:f9:e7:
        d3:99:7f:f4:f5:22:fa:72:f5:fd:ff:3a:1c:42:3a:a1:f9:80:
        18:a5:ee:8d:1c:d4:66:9e:45:01:fe:aa:ee:ff:fb:17:8f:30:
        f7:f1:cd:29:c5:9d:ec:b5:d5:49:00:3d:85:b8:cb:bb:93:3a:
        27:6a:49:c0:30:ae:66:c9:f7:23:28:32:76:f9:a4:83:56:c8:
        48:ce:5a:96:aa:a0:cc:0c:c4:7f:b4:8e:97:af:6d:e3:54:27:
        c3:9f:86:c0:d6:e4:73:08:97:05:db:d0:54:62:5e:03:48:c2:
        d5:9f:7f:a7:66:8c:d0:9d:b0:4f:d4:d3:98:5f:4b:7a:c9:7f:
        b2:29:52:d0:12:80:c7:0f:54:b6:1e:67:cd:c6:a0:6c:11:03:
        84:d3:48:75:e7:2a:fe:b0:3b:6e:0a:3a:a6:6b:76:99:05:a3:
        f1:77:68:61:33:14:47:06:fc:53:7f:52:bd:92:14:5c:4a:24:
        6a:67:8c:af:8d:90:aa:d0:f6:79:21:1b:93:26:7c:c3:ce:1e:
        bd:88:38:92:ae:45:c6:19:6a:49:50:b3:05:f8:ae:59:37:8a:
        6a:25:03:94:b1:59:81:50:e8:ba:83:80:b7:23:35:f4:76:b9:
        67:1d:59:18:ad:20:8d:94

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
        Validity
            Not Before: Feb  8 00:00:00 2010 GMT
            Not After : Feb  7 23:59:59 2020 GMT
        Subject: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https:\/\/www.verisign.com\/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:f5:23:4b:5e:a5:d7:8a:bb:32:e9:d4:57:f7:ef:
                    e4:c7:26:7e:ad:19:98:fe:a8:9d:7d:94:f6:36:6b:
                    10:d7:75:81:30:7f:04:68:7f:cb:2b:75:1e:cd:1d:
                    08:8c:df:69:94:a7:37:a3:9c:7b:80:e0:99:e1:ee:
                    37:4d:5f:ce:3b:14:ee:86:d4:d0:f5:27:35:bc:25:
                    0b:38:a7:8c:63:9d:17:a3:08:a5:ab:b0:fb:cd:6a:
                    62:82:4c:d5:21:da:1b:d9:f1:e3:84:3b:8a:2a:4f:
                    85:5b:90:01:4f:c9:a7:76:10:7f:27:03:7c:be:ae:
                    7e:7d:c1:dd:f9:05:bc:1b:48:9c:69:e7:c0:a4:3c:
                    3c:41:00:3e:df:96:e5:c5:e4:94:71:d6:55:01:c7:
                    00:26:4a:40:3c:b5:a1:26:a9:0c:a7:6d:80:8e:90:
                    25:7b:cf:bf:3f:1c:eb:2f:96:fa:e5:87:77:c6:b5:
                    56:b2:7a:3b:54:30:53:1b:df:62:34:ff:1e:d1:f4:
                    5a:93:28:85:e5:4c:17:4e:7e:5b:fd:a4:93:99:7f:
                    df:cd:ef:a4:75:ef:ef:15:f6:47:e7:f8:19:72:d8:
                    2e:34:1a:a6:b4:a7:4c:7e:bd:bb:4f:0c:3d:57:f1:
                    30:d6:a6:36:8e:d6:80:76:d7:19:2e:a5:cd:7e:34:
                    2d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/cps
                  User Notice:
                    Explicit Text: https://www.verisign.com/rpa
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            1.3.6.1.5.5.7.1.12: 
                0_.].[0Y0W0U..image/gif0!0.0...+..............k...j.H.,{..0%.#http://logo.verisign.com/vslogo.gif
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.verisign.com/pca3-g5.crl
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, Code Signing
            X509v3 Subject Alternative Name: 
                DirName:/CN=VeriSignMPKI-2-8
            X509v3 Subject Key Identifier: 
                CF:99:A9:EA:7B:26:F4:4B:C9:8E:8F:D7:F0:05:26:EF:E3:D2:A7:9D
            X509v3 Authority Key Identifier: 
                7F:D3:65:A7:C2:DD:EC:BB:F0:30:09:F3:43:39:FA:02:AF:33:31:33
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        56:22:e6:34:a4:c4:61:cb:48:b9:01:ad:56:a8:64:0f:d9:8c:
        91:c4:bb:cc:0c:e5:ad:7a:a0:22:7f:df:47:38:4a:2d:6c:d1:
        7f:71:1a:7c:ec:70:a9:b1:f0:4f:e4:0f:0c:53:fa:15:5e:fe:
        74:98:49:24:85:81:26:1c:91:14:47:b0:4c:63:8c:bb:a1:34:
        d4:c6:45:e8:0d:85:26:73:03:d0:a9:8c:64:6d:dc:71:92:e6:
        45:05:60:15:59:51:39:fc:58:14:6b:fe:d4:a4:ed:79:6b:08:
        0c:41:72:e7:37:22:06:09:be:23:e9:3f:44:9a:1e:e9:61:9d:
        cc:b1:90:5c:fc:3d:d2:8d:ac:42:3d:65:36:d4:b4:3d:40:28:
        8f:9b:10:cf:23:26:cc:4b:20:cb:90:1f:5d:8c:4c:34:ca:3c:
        d8:e5:37:d6:6f:a5:20:bd:34:eb:26:d9:ae:0d:e7:c5:9a:f7:
        a1:b4:21:91:33:6f:86:e8:58:bb:25:7c:74:0e:58:fe:75:1b:
        63:3f:ce:31:7c:9b:8f:1b:96:9e:c5:53:76:84:5b:9c:ad:91:
        fa:ac:ed:93:ba:5d:c8:21:53:c2:82:53:63:af:12:0d:50:87:
        11:1b:3d:54:52:96:8a:2c:9c:3d:92:1a:08:9a:05:2e:c7:93:
        a5:48:91:d3
pkcs7-signedData
  • 1
    • SHA1: nil
    • 1.3.6.1.4.1.311.2.1.4
      • #0
        • 1.3.6.1.4.1.311.2.1.15
          • : 
            00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |
        • SHA1
          • a3 b3 bb b7 0d 51 63 72  f0 49 c2 f8 c5 5b 7f 84  |.....Qcr.I...[..|
b3 1a ed a8                                       |....            |
    • Certificates
      • Certificate #0
        • 2
          • 79:A2:A5:85:F9:D1:15:42:13:D9:B8:3E:F6:B6:8D:ED
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • O: VeriSign, Inc.
            • CN: VeriSign Time Stamping Services CA
          • 2012-05-01 00:00:00 UTC: 2012-12-31 23:59:59 UTC
          • Subject
            • C: US
            • O: Symantec Corporation
            • CN: Symantec Time Stamping Services Signer - G3
          • #5
            • rsaEncryption: nil
            • A9:59:66:74:DA:3D:8A:7D:7A:D8:FC:F5:80:44:7B:FE:
              47:6A:14:55:4E:50:47:0B:EC:D3:ED:CE:F6:38:F7:4F:
              69:B9:B1:F0:B6:78:82:0A:8C:76:16:67:E2:02:AD:B7:
              0D:A5:8A:F6:03:FC:66:D3:FC:08:2D:CC:B5:73:59:7B:
              89:DC:33:6E:66:5A:5E:52:37:B4:62:D1:92:59:35:14:
              8B:45:AC:59:B2:4D:24:A2:98:94:68:42:72:9F:3A:68:
              E2:6B:8B:9E:22:2D:F4:98:4E:9A:C6:AF:B3:E4:A0:AB:
              3C:28:BF:23:E1:D7:72:A4:F2:10:53:67:AE:77:AF:51              : 0x010001
          • X509v3 extensions
            • basicConstraints
              • true
              • nil
            • crlDistributionPoints: http://crl.verisign.com/tss-ca.crl
            • extendedKeyUsage: true, timeStamping
            • authorityInfoAccess
              • OCSP: http://ocsp.verisign.com
            • keyUsage: true, 0x80
            • subjectAltName
              • CN: TSA1-3
            • subjectKeyIdentifier: 
              b4 b7 f1 89 49 26 60 e7  65 ea 73 ae dc d3 38 cd  |....I&`.e.s...8.|
bf 57 92 6f                                       |.W.o            |
        • RSA-SHA1: 
          1e 98 aa 27 b7 78 b5 08  b5 c9 72 6d b7 df c0 0e  |...'.x....rm....|
98 a6 35 c4 88 c9 d2 f6  6d f1 4b 1a fb d5 f9 2d  |..5.....m.K....-|
99 00 9e d1 e7 9b 8b e1  3f bd 39 80 0c 66 cd 07  |........?.9..f..|
bc 5c 98 54 a6 94 ba 10  d1 4e 8b ab f5 6f 65 cc  |.\.T.....N...oe.|
67 09 a2 80 7c 52 e8 0e  03 d6 6b 7a c6 05 18 ec  |g...|R....kz....|
c8 ac 42 7c 07 2c a7 3d  08 66 dc 00 ed fd 94 1d  |..B|.,.=.f......|
73 f2 72 98 93 b1 11 d6  8f ef 8e ea ac f4 96 51  |s.r............Q|
0c d0 8d df 31 52 4f 5e  af 7d a7 4a 75 e6 4e ce  |....1RO^.}.Ju.N.|
2b 9f 29 2b e7 cf 5d 9f  03 7e 6e 27 7b 23 ad 62  |+.)+..]..~n'{#.b|
29 66 af 92 e8 2c ce bd  9c 7f dc cd 17 3c 43 c2  |)f...,.......
      • Certificate #1
        • 2
          • 47:BF:19:95:DF:8D:52:46:43:F7:DB:6D:48:0D:31:A4
          • RSA-SHA1: nil
          • Issuer
            • C: ZA
            • ST: Western Cape
            • L: Durbanville
            • O: Thawte
            • OU: Thawte Certification
            • CN: Thawte Timestamping CA
          • 2003-12-04 00:00:00 UTC: 2013-12-03 23:59:59 UTC
          • Subject
            • C: US
            • O: VeriSign, Inc.
            • CN: VeriSign Time Stamping Services CA
          • #5
            • rsaEncryption: nil
            • A9:CA:B2:A4:CC:CD:20:AF:0A:7D:89:AC:87:75:F0:B4:
              4E:F1:DF:C1:0F:BF:67:61:BD:A3:64:1C:DA:BB:F9:CA:
              33:AB:84:30:89:58:7E:8C:DB:6B:DD:36:9E:0F:BF:D1:
              EC:78:F2:77:A6:7E:6F:3C:BF:93:AF:0D:BA:68:F4:6C:
              94:CA:BD:52:2D:AB:48:3D:F5:B6:D5:5D:5F:1B:02:9F:
              FA:2F:6B:1E:A4:F7:A3:9A:A6:1A:C8:02:E1:7F:4C:52:
              E3:0E:60:EC:40:1C:7E:B9:0D:DE:3F:C7:B4:DF:87:BD:
              5F:7A:6A:31:2E:03:99:81:13:A8:47:20:CE:31:73:0D:
              57:2D:CD:78:34:33:95:12:99:12:B9:DE:68:2F:AA:E6:
              E3:C2:8A:8C:2A:C3:8B:21:87:66:BD:83:58:57:6F:75:
              BF:3C:AA:26:87:5D:CA:10:15:3C:9F:84:EA:54:C1:0A:
              6E:C4:FE:C5:4A:DD:B9:07:11:97:22:7C:DB:3E:27:D1:
              1E:78:EC:9F:31:C9:F1:E6:22:19:DB:C4:B3:47:43:9A:
              1A:5F:A0:1E:90:E4:5E:F5:EE:7C:F1:7D:AB:62:01:8F:
              F5:4D:0B:DE:D0:22:56:A8:95:CD:AE:88:76:AE:EE:BA:
              0D:F3:E4:4D:D9:A0:FB:68:A0:AE:14:3B:B3:87:C1:BB              : 0x010001
          • X509v3 extensions
            • authorityInfoAccess
              • OCSP: http://ocsp.verisign.com
            • basicConstraints
              • true
              • true: 0
            • crlDistributionPoints: http://crl.verisign.com/ThawteTimestampingCA.crl
            • extendedKeyUsage: timeStamping
            • keyUsage: true, 6
            • subjectAltName
              • CN: TSA2048-1-53
        • RSA-SHA1: 
          4a 6b f9 ea 58 c2 44 1c  31 89 79 99 2b 96 bf 82  |Jk..X.D.1.y.+...|
ac 01 d6 1c 4c cd b0 8a  58 6e df 08 29 a3 5e c8  |....L...Xn..).^.|
ca 93 13 e7 04 52 0d ef  47 27 2f 00 38 b0 e4 c9  |.....R..G'/.8...|
93 4e 9a d4 22 62 15 f7  3f 37 21 4f 70 31 80 f1  |.N.."b..?7!Op1..|
8b 38 87 b3 e8 e8 97 00  fe cf 55 96 4e 24 d2 a9  |.8........U.N$..|
27 4e 7a ae b7 61 41 f3  2a ce e7 c9 d9 5e dd bb  |'Nz..aA.*....^..|
2b 85 3e b5 9d b5 d9 e1  57 ff be b4 c5 7e f5 cf  |+.>.....W....~..|
0c 9e f0 97 fe 2b d3 3b  52 1b 1b 38 27 f7 3f 4a  |.....+.;R..8'.?J|
      • Certificate #2
        • 2
          • 33:76:92:28:D3:F9:EC:CE:D6:60:39:B9:01:99:AC:5D
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • O: VeriSign, Inc.
            • OU: VeriSign Trust Network
            • OU: Terms of use at https://www.verisign.com/rpa (c)10
            • CN: VeriSign Class 3 Code Signing 2010 CA
          • 2011-08-29 00:00:00 UTC: 2014-10-06 23:59:59 UTC
          • Subject
            • C: RU
            • ST: Saint-Petersburg
            • O: Doctor Web Ltd.
            • OU: Digital ID Class 3 - Microsoft Software Validation v2
            • CN: Doctor Web Ltd.
          • #5
            • rsaEncryption: nil
            • BD:80:C1:17:12:A1:A2:BA:88:85:47:29:E7:ED:8E:CE:
              23:DB:A5:90:AC:6D:4F:AA:20:52:8B:72:32:11:D9:1B:
              D2:21:A4:37:64:A6:41:98:95:90:9E:AB:6E:D9:5B:B7:
              CA:84:FF:A7:47:DD:13:5C:19:50:98:8C:C2:4A:ED:70:
              9E:3F:A0:C6:9D:90:20:A3:5F:C9:12:6A:D7:5B:68:F9:
              6E:C0:DE:6C:1C:64:F0:E5:D6:73:4D:BF:78:FD:7A:CB:
              2C:6C:9A:57:66:43:DF:42:EE:1D:6D:A9:DB:F0:8D:0D:
              C8:D2:45:73:8F:CB:7E:3D:24:4C:8A:F3:B9:D7:C5:B3:
              44:30:B7:01:8F:51:37:DC:41:FD:7C:AA:59:27:32:47:
              C0:1E:C3:9F:94:AF:EB:53:32:6F:9D:01:C2:7B:26:67:
              5E:2D:AA:9D:D3:B9:4E:01:DB:56:84:AD:AD:B3:A7:F9:
              1D:2D:8C:8B:B2:8B:95:89:F0:53:21:4F:44:D3:BD:C8:
              8C:27:FC:52:7A:85:CB:F9:9E:2E:94:4C:05:E9:C9:F4:
              C9:0D:1B:66:37:A6:BA:6D:54:F1:12:A4:82:AE:F8:1C:
              06:7B:C1:73:64:9E:5E:41:92:EC:9E:C9:44:50:A5:2A:
              78:68:E3:B8:2D:CC:B5:0C:D4:E1:24:4C:7F:B9:FB:F7              : 0x010001
          • X509v3 extensions
            • basicConstraints
              • nil
            • keyUsage: true, 0x80
            • crlDistributionPoints: http://csc3-2010-crl.verisign.com/CSC3-2010.crl
            • certificatePolicies
              • 2.16.840.1.113733.1.7.23.3
                • id-qt-cps: https://www.verisign.com/rpa
            • extendedKeyUsage: codeSigning
            • authorityInfoAccess
              • #0
                • OCSP: http://ocsp.verisign.com
                • caIssuers: http://csc3-2010-aia.verisign.com/CSC3-2010.cer
            • authorityKeyIdentifier: 
              cf 99 a9 ea 7b 26 f4 4b  c9 8e 8f d7 f0 05 26 ef  |....{&.K......&.|
e3 d2 a7 9d                                       |....            |
            • nsCertType: 0x10
            • 1.3.6.1.4.1.311.2.1.27
              • false: true
        • RSA-SHA1: 
          5b 06 d6 32 dc ff 90 ee  3b ca 59 f3 e9 30 38 d0  |[..2....;.Y..08.|
c9 55 a6 4d 00 f1 90 1e  5a d1 0d b6 c6 bd d6 13  |.U.M....Z.......|
43 87 a8 c8 08 34 a1 dd  64 7d 1f ce 32 9f bc d5  |C....4..d}..2...|
01 9e 92 c2 79 05 cd 99  ad b9 cf 38 45 d9 41 fc  |....y......8E.A.|
01 66 56 eb bf 16 f0 36  7b 3f 89 7b 80 9d a0 3c  |.fV....6{?.{...<|
2e 53 35 fc 48 5a b5 06  28 b7 79 25 40 4e 94 21  |.S5.HZ..(.y%@N.!|
51 68 e2 30 98 c5 06 f7  52 b3 9e f4 19 43 36 b1  |Qh.0....R....C6.|
a0 a2 0d c4 e1 63 7e 3e  b3 c9 50 15 75 7b 5b 50  |.....c~>..P.u{[P|
46 39 b9 8f 12 be 0f 0e  47 f5 a1 39 37 35 99 3b  |F9......G..975.;|
35 ee 27 b7 f8 54 5e 7d  4d f5 c3 dc da e6 30 2f  |5.'..T^}M.....0/|
a8 c2 79 fb f6 82 d9 44  a0 c6 b1 7d c1 b5 35 b3  |..y....D...}..5.|
3c 09 38 0a 36 79 54 4a  2f 6a c5 73 b5 ba 7c e8  |<.8.6yTJ/j.s..|.|
b5 c8 a5 be 4f 7a ec f3  20 62 93 15 81 fa 18 e7  |....Oz.. b......|
b6 ce 9f b3 c8 78 ae 0a  60 59 52 e7 a6 b2 11 62  |.....x..`YR....b|
05 18 6c d7 fe ec b6 af  b7 b3 03 16 dc a7 fd 1d  |..l.............|
6d 25 64 19 c9 2f 67 d9  16 a1 20 cb 2a 7f d5 31  |m%d../g... .*..1|
      • Certificate #3
        • 2
          • 61:19:93:E4:00:00:00:00:00:1C
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • ST: Washington
            • L: Redmond
            • O: Microsoft Corporation
            • CN: Microsoft Code Verification Root
          • 2011-02-22 19:25:17 UTC: 2021-02-22 19:35:17 UTC
          • Subject
            • C: US
            • O: VeriSign, Inc.
            • OU: VeriSign Trust Network
            • OU: (c) 2006 VeriSign, Inc. - For authorized use only
            • CN: VeriSign Class 3 Public Primary Certification Authority - G5
          • #5
            • rsaEncryption: nil
            • AF:24:08:08:29:7A:35:9E:60:0C:AA:E7:4B:3B:4E:DC:
              7C:BC:3C:45:1C:BB:2B:E0:FE:29:02:F9:57:08:A3:64:
              85:15:27:F5:F1:AD:C8:31:89:5D:22:E8:2A:AA:A6:42:
              B3:8F:F8:B9:55:B7:B1:B7:4B:B3:FE:8F:7E:07:57:EC:
              EF:43:DB:66:62:15:61:CF:60:0D:A4:D8:DE:F8:E0:C3:
              62:08:3D:54:13:EB:49:CA:59:54:85:26:E5:2B:8F:1B:
              9F:EB:F5:A1:91:C2:33:49:D8:43:63:6A:52:4B:D2:8F:
              E8:70:51:4D:D1:89:69:7B:C7:70:F6:B3:DC:12:74:DB:
              7B:5D:4B:56:D3:96:BF:15:77:A1:B0:F4:A2:25:F2:AF:
              1C:92:67:18:E5:F4:06:04:EF:90:B9:E4:00:E4:DD:3A:
              B5:19:FF:02:BA:F4:3C:EE:E0:8B:EB:37:8B:EC:F4:D7:
              AC:F2:F6:F0:3D:AF:DD:75:91:33:19:1D:1C:40:CB:74:
              24:19:21:93:D9:14:FE:AC:2A:52:C7:8F:D5:04:49:E4:
              8D:63:47:88:3C:69:83:CB:FE:47:BD:2B:7E:4F:C5:95:
              AE:0E:9D:D4:D1:43:C0:67:73:E3:14:08:7E:E5:3F:9F:
              73:B8:33:0A:CF:5D:3F:34:87:96:8A:EE:53:E8:25:15              : 0x010001
          • #6
            • certificatePolicies: anyPolicy
            • basicConstraints: true, true
            • keyUsage: 0x86
            • subjectKeyIdentifier: 
              7f d3 65 a7 c2 dd ec bb  f0 30 09 f3 43 39 fa 02  |..e......0..C9..|
af 33 31 33                                       |.313            |
            • authorityKeyIdentifier: 
              62 fb 0a 21 5b 7f 43 6e  11 da 09 54 50 6b f5 d2  |b..![.Cn...TPk..|
96 71 f1 9e                                       |.q..            |
            • crlDistributionPoints: http://crl.microsoft.com/pki/crl/products/MicrosoftCodeVerifRoot.crl
        • RSA-SHA1: 
          81 2a 82 16 8c 34 67 2b  e5 03 eb 34 7b 8c a2 a3  |.*...4g+...4{...|
50 8a f4 55 86 f1 1e 8c  8e ae 7d ee 03 19 ce 72  |P..U......}....r|
95 18 48 ad 62 11 fd 20  fd 3f 47 06 01 5a e2 e0  |..H.b.. .?G..Z..|
6f 8c 15 2c 4e 3c 6a 50  6c 0b 36 a3 cf 7a 0d 9c  |o..,N..'..a.[|
5d 07 6b cd 86 a8 e2 65  80 a8 e2 15 e2 b2 be 23  |].k....e.......#|
05 6a ba 0c f3 47 93 4d  ac a4 8c 07 79 39 c0 61  |.j...G.M....y9.a|
12 3a 05 0d 89 a3 ec 9f  57 89 84 fb ec ca 7c 47  |.:......W.....|G|
66 14 91 d8 b6 0f 19 5d  e6 b8 4a ac bc 47 c8 71  |f......]..J..G.q|
43 96 e6 32 20 a5 dc 77  86 fd 3c e3 8b 71 db 7b  |C..2 ..w..<..q.{|
9b 03 fc b7 1d 32 64 eb  16 52 a0 43 a3 fa 2e ad  |.....2d..R.C....|
59 92 4e 7c c7 f2 33 42  48 38 51 3a 7c 38 c7 1b  |Y.N|..3BH8Q:|8..|
24 22 28 40 1e 1a 46 1f  17 db 18 f7 f0 27 35 6c  |$"(@..F......'5l|
b8 63 d9 cd b9 64 5d 2b  a5 5e ef c6 29 b4 f2 c7  |.c...d]+.^..)...|
f8 21 cc 04 ba 57 fd 01  b6 ab c6 67 f9 e7 d3 99  |.!...W.....g....|
7f f4 f5 22 fa 72 f5 fd  ff 3a 1c 42 3a a1 f9 80  |...".r...:.B:...|
18 a5 ee 8d 1c d4 66 9e  45 01 fe aa ee ff fb 17  |......f.E.......|
8f 30 f7 f1 cd 29 c5 9d  ec b5 d5 49 00 3d 85 b8  |.0...).....I.=..|
cb bb 93 3a 27 6a 49 c0  30 ae 66 c9 f7 23 28 32  |...:'jI.0.f..#(2|
76 f9 a4 83 56 c8 48 ce  5a 96 aa a0 cc 0c c4 7f  |v...V.H.Z.......|
b4 8e 97 af 6d e3 54 27  c3 9f 86 c0 d6 e4 73 08  |....m.T'......s.|
97 05 db d0 54 62 5e 03  48 c2 d5 9f 7f a7 66 8c  |....Tb^.H.....f.|
d0 9d b0 4f d4 d3 98 5f  4b 7a c9 7f b2 29 52 d0  |...O..._Kz...)R.|
12 80 c7 0f 54 b6 1e 67  cd c6 a0 6c 11 03 84 d3  |....T..g...l....|
48 75 e7 2a fe b0 3b 6e  0a 3a a6 6b 76 99 05 a3  |Hu.*..;n.:.kv...|
f1 77 68 61 33 14 47 06  fc 53 7f 52 bd 92 14 5c  |.wha3.G..S.R...\|
4a 24 6a 67 8c af 8d 90  aa d0 f6 79 21 1b 93 26  |J$jg.......y!..&|
7c c3 ce 1e bd 88 38 92  ae 45 c6 19 6a 49 50 b3  ||.....8..E..jIP.|
05 f8 ae 59 37 8a 6a 25  03 94 b1 59 81 50 e8 ba  |...Y7.j%...Y.P..|
83 80 b7 23 35 f4 76 b9  67 1d 59 18 ad 20 8d 94  |...#5.v.g.Y.. ..|
      • Certificate #4
        • 2
          • 52:00:E5:AA:25:56:FC:1A:86:ED:96:C9:D4:4B:33:C7
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • O: VeriSign, Inc.
            • OU: VeriSign Trust Network
            • OU: (c) 2006 VeriSign, Inc. - For authorized use only
            • CN: VeriSign Class 3 Public Primary Certification Authority - G5
          • 2010-02-08 00:00:00 UTC: 2020-02-07 23:59:59 UTC
          • Subject
            • C: US
            • O: VeriSign, Inc.
            • OU: VeriSign Trust Network
            • OU: Terms of use at https://www.verisign.com/rpa (c)10
            • CN: VeriSign Class 3 Code Signing 2010 CA
          • #5
            • rsaEncryption: nil
            • F5:23:4B:5E:A5:D7:8A:BB:32:E9:D4:57:F7:EF:E4:C7:
              26:7E:AD:19:98:FE:A8:9D:7D:94:F6:36:6B:10:D7:75:
              81:30:7F:04:68:7F:CB:2B:75:1E:CD:1D:08:8C:DF:69:
              94:A7:37:A3:9C:7B:80:E0:99:E1:EE:37:4D:5F:CE:3B:
              14:EE:86:D4:D0:F5:27:35:BC:25:0B:38:A7:8C:63:9D:
              17:A3:08:A5:AB:B0:FB:CD:6A:62:82:4C:D5:21:DA:1B:
              D9:F1:E3:84:3B:8A:2A:4F:85:5B:90:01:4F:C9:A7:76:
              10:7F:27:03:7C:BE:AE:7E:7D:C1:DD:F9:05:BC:1B:48:
              9C:69:E7:C0:A4:3C:3C:41:00:3E:DF:96:E5:C5:E4:94:
              71:D6:55:01:C7:00:26:4A:40:3C:B5:A1:26:A9:0C:A7:
              6D:80:8E:90:25:7B:CF:BF:3F:1C:EB:2F:96:FA:E5:87:
              77:C6:B5:56:B2:7A:3B:54:30:53:1B:DF:62:34:FF:1E:
              D1:F4:5A:93:28:85:E5:4C:17:4E:7E:5B:FD:A4:93:99:
              7F:DF:CD:EF:A4:75:EF:EF:15:F6:47:E7:F8:19:72:D8:
              2E:34:1A:A6:B4:A7:4C:7E:BD:BB:4F:0C:3D:57:F1:30:
              D6:A6:36:8E:D6:80:76:D7:19:2E:A5:CD:7E:34:2D:89              : 0x010001
          • X509v3 extensions
            • basicConstraints
              • true
              • true: 0
            • certificatePolicies
              • 2.16.840.1.113733.1.7.23.3
                • #0
                  • id-qt-cps: https://www.verisign.com/cps
                  • id-qt-unotice: https://www.verisign.com/rpa
            • keyUsage: true, 6
            • 1.3.6.1.5.5.7.1.12
              • image/gif
                • SHA1: 
                  8f e5 d3 1a 86 ac 8d 8e  6b c3 cf 80 6a d4 48 18  |........k...j.H.|
2c 7b 19 2e                                       |,{..            |
                • http://logo.verisign.com/vslogo.gif
            • crlDistributionPoints: http://crl.verisign.com/pca3-g5.crl
            • authorityInfoAccess
              • OCSP: http://ocsp.verisign.com
            • extendedKeyUsage
              • clientAuth: codeSigning
            • subjectAltName
              • CN: VeriSignMPKI-2-8
            • subjectKeyIdentifier: 
              cf 99 a9 ea 7b 26 f4 4b  c9 8e 8f d7 f0 05 26 ef  |....{&.K......&.|
e3 d2 a7 9d                                       |....            |
            • authorityKeyIdentifier: 
              7f d3 65 a7 c2 dd ec bb  f0 30 09 f3 43 39 fa 02  |..e......0..C9..|
af 33 31 33                                       |.313            |
        • RSA-SHA1: 
          56 22 e6 34 a4 c4 61 cb  48 b9 01 ad 56 a8 64 0f  |V".4..a.H...V.d.|
d9 8c 91 c4 bb cc 0c e5  ad 7a a0 22 7f df 47 38  |.........z."..G8|
4a 2d 6c d1 7f 71 1a 7c  ec 70 a9 b1 f0 4f e4 0f  |J-l..q.|.p...O..|
0c 53 fa 15 5e fe 74 98  49 24 85 81 26 1c 91 14  |.S..^.t.I$..&...|
47 b0 4c 63 8c bb a1 34  d4 c6 45 e8 0d 85 26 73  |G.Lc...4..E...&s|
03 d0 a9 8c 64 6d dc 71  92 e6 45 05 60 15 59 51  |....dm.q..E.`.YQ|
39 fc 58 14 6b fe d4 a4  ed 79 6b 08 0c 41 72 e7  |9.X.k....yk..Ar.|
37 22 06 09 be 23 e9 3f  44 9a 1e e9 61 9d cc b1  |7"...#.?D...a...|
90 5c fc 3d d2 8d ac 42  3d 65 36 d4 b4 3d 40 28  |.\.=...B=e6..=@(|
8f 9b 10 cf 23 26 cc 4b  20 cb 90 1f 5d 8c 4c 34  |....#&.K ...].L4|
ca 3c d8 e5 37 d6 6f a5  20 bd 34 eb 26 d9 ae 0d  |.<..7.o. .4.&...|
e7 c5 9a f7 a1 b4 21 91  33 6f 86 e8 58 bb 25 7c  |......!.3o..X.%||
74 0e 58 fe 75 1b 63 3f  ce 31 7c 9b 8f 1b 96 9e  |t.X.u.c?.1|.....|
c5 53 76 84 5b 9c ad 91  fa ac ed 93 ba 5d c8 21  |.Sv.[........].!|
53 c2 82 53 63 af 12 0d  50 87 11 1b 3d 54 52 96  |S..Sc...P...=TR.|
8a 2c 9c 3d 92 1a 08 9a  05 2e c7 93 a5 48 91 d3  |.,.=.........H..|
    • Signer
      • 1
      • unnamed
        • #0
          • C: US
          • O: VeriSign, Inc.
          • OU: VeriSign Trust Network
          • OU: Terms of use at https://www.verisign.com/rpa (c)10
          • CN: VeriSign Class 3 Code Signing 2010 CA
        • 33:76:92:28:D3:F9:EC:CE:D6:60:39:B9:01:99:AC:5D
      • SHA1: nil
      • #3
        • 1.3.6.1.4.1.311.2.1.12
          • nil
        • contentType: 1.3.6.1.4.1.311.2.1.4
        • 1.3.6.1.4.1.311.2.1.11: msCodeInd
        • messageDigest: 
          a6 70 0f 84 cf 79 41 8f  1e 83 b5 98 99 17 a1 11  |.p...yA.........|
15 28 3e f5                                       |.(>.            |
      • rsaEncryption: 
        55 25 62 fd 10 1a c8 a3  99 f5 4c d8 fa 72 5b 92  |U%b.......L..r[.|
f4 46 4e b7 86 7e 05 7e  8c 97 64 9b b6 38 a7 0f  |.FN..~.~..d..8..|
3f da f7 33 45 c5 02 90  4a e1 3d f1 f5 eb b5 f3  |?..3E...J.=.....|
90 37 2a f6 fe ce 54 ae  ea 36 10 f1 3a c6 4d 2f  |.7*...T..6..:.M/|
ba f0 96 8d f9 88 fc 3a  ff eb 07 01 b7 80 1b 06  |.......:........|
c6 5e 02 b3 15 e6 b5 fc  1d bd 8b 38 b3 bb b3 cb  |.^.........8....|
e2 d7 9a 6f 6d 4e e1 c7  eb b0 c6 e2 87 0a 0d eb  |...omN..........|
8e 2d 83 8e 89 c4 63 8b  e0 c1 5d 21 5e 7b eb a1  |.-....c...]!^{..|
3a aa 3c 19 bb a4 9a 40  49 8a d0 04 05 4f 2b 0d  |:.<....@I....O+.|
78 ef e5 f9 0c 06 e9 56  68 5f 05 4d 5f 31 5d 1a  |x......Vh_.M_1].|
57 f1 11 3c 39 53 24 0a  90 b9 14 ea 99 78 a4 ed  |W..<9S$......x..|
7f e1 b4 67 cb bd 75 58  ff 24 b2 47 d5 a2 72 52  |...g..uX.$.G..rR|
5b c9 d1 df ed 63 0b 24  c1 dd 24 bf fc e5 0d bb  |[....c.$..$.....|
b2 9f bd 1f 97 5f c9 43  23 e0 ef ac e8 42 fd 09  |....._.C#....B..|
87 6f f1 c8 2c f5 7b 65  26 d1 ff 00 6e 47 33 0e  |.o..,.{e&...nG3.|
5b 5f 5d 5f 36 19 14 47  87 15 03 7c 65 f8 7c 8b  |[_]_6..G...|e.|.|
      • countersignature
        • 1
          • unnamed
            • #0
              • C: US
              • O: VeriSign, Inc.
              • CN: VeriSign Time Stamping Services CA
            • 79:A2:A5:85:F9:D1:15:42:13:D9:B8:3E:F6:B6:8D:ED
          • SHA1: nil
          • #2
            • contentType: pkcs7-data
            • signingTime: 2012-07-20 13:13:39 UTC
            • messageDigest: 
              8a 1e 69 04 15 73 17 8a  28 fd 0c 3a 5b e4 4d 24  |..i..s..(..:[.M$|
6f 3a 79 29                                       |o:y)            |
          • rsaEncryption: 
            a5 6d 35 71 0a d8 a6 33  37 a3 94 cd ed 9a c8 23  |.m5q...37......#|
af dc 7d a9 0f fd 49 61  69 85 25 0f 87 64 ff a2  |..}...Iai.%..d..|
54 8f e6 ff a9 5d 8c 74  d5 1f 1c 9b 9d b7 19 c0  |T....].t........|
a9 9d eb 55 fa a6 15 6e  19 ab a3 f4 c3 60 71 e2  |...U...n.....`q.|
23 9f 3d 76 19 50 ef cf  d8 17 97 d4 41 39 6c 9e  |#.=v.P......A9l.|
91 19 b6 d1 57 00 c3 2a  08 98 c4 86 f6 d7 83 bd  |....W..*........|
62 f0 6c af b6 cd 61 45  7e 7d ef cb ac 8d 8c 4f  |b.l...aE~}.....O|
da 92 ec d8 40 5d 95 28  6b e6 bb d7 66 c7 52 7b  |....@].(k...f.R{|
offsetsizetypecomment
049664EXE07/20/2012 13:13:27#
15c115HTM#
c2007424PKCS7Authenticode Signature#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK