PnkBstrB.exe

info
MZ
PE
imports
foremost
signature
hexdump
disasm
log
discuss
donate

filename	PnkBstrB.exe
size	281288 (0x44ac8)
md5	1e6c2573c3aad0d6fa1d89d95130aeab

type	PE32 executable (console) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xe8

Rich Header

lib id	version	times used
105	2067	6
15	3077	24
95	3077	115
25	9210	2
93	2067	2
93	2179	11
1	0	142
96	3077	11
90	3077	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	3
TimeDateStamp	0x4fb12ea1
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x10f
Magic	0x10b
LinkerVersion	7.10
SizeOfCode	0x1f000
SizeOfInitializedData	0xf000
SizeOfUninitializedData	0
AddressOfEntryPoint	0x175ac
BaseOfCode	0x1000
BaseOfData	0x20000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x1000
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x44000
SizeOfHeaders	0x1000
CheckSum	0x4b33e
Subsystem	3
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v7.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x1e5e7	0x1f000	R-X CODE
.rdata	0x20000	0x2b24	0x3000	R-- IDATA
.data	0x23000	0x20343	0x20343	RWX CODE IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x21f60	0xa0
RESOURCE	0	0
EXCEPTION	0	0
SECURITY	0x43348	0x1780
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0x21e50	0x48
Bound_IAT	0	0
IAT	0x20000	0x22c
Delay_IAT	0	0
CLR_Header	0	0

module_name	hint	ord	function_name
KERNEL32.dll	944		lstrcmpA
KERNEL32.dll	187		FileTimeToLocalFileTime
KERNEL32.dll	844		SystemTimeToFileTime
KERNEL32.dll	342		GetFileAttributesA
KERNEL32.dll	780		SetFileAttributesA
KERNEL32.dll	188		FileTimeToSystemTime
KERNEL32.dll	619		MultiByteToWideChar
KERNEL32.dll	234		FormatMessageA
KERNEL32.dll	956		lstrlenA
KERNEL32.dll	590		LocalAlloc
KERNEL32.dll	594		LocalFree
KERNEL32.dll	584		LoadLibraryA
KERNEL32.dll	408		GetProcAddress
KERNEL32.dll	131		DeviceIoControl
KERNEL32.dll	397		GetPriorityClass
KERNEL32.dll	317		GetCurrentThread
KERNEL32.dll	465		GetThreadPriority
KERNEL32.dll	46		CloseHandle
KERNEL32.dll	77		CreateFileA
KERNEL32.dll	469		GetTickCount
KERNEL32.dll	774		SetEnvironmentVariableA
KERNEL32.dll	53		CompareStringW
KERNEL32.dll	52		CompareStringA
KERNEL32.dll	530		HeapSize
KERNEL32.dll	771		SetEndOfFile
KERNEL32.dll	810		SetStdHandle
KERNEL32.dll	550		IsBadCodePtr
KERNEL32.dll	553		IsBadReadPtr
KERNEL32.dll	827		SetUnhandledExceptionFilter
KERNEL32.dll	537		InitializeCriticalSection
KERNEL32.dll	889		VirtualProtect
KERNEL32.dll	395		GetOEMCP
KERNEL32.dll	245		GetACP
KERNEL32.dll	441		GetSystemDirectoryA
KERNEL32.dll	61		CopyFileA
KERNEL32.dll	839		Sleep
KERNEL32.dll	479		GetVersionExA
KERNEL32.dll	443		GetSystemInfo
KERNEL32.dll	314		GetCurrentProcess
KERNEL32.dll	361		GetLastError
KERNEL32.dll	239		FreeLibrary
KERNEL32.dll	951		lstrcpyW
KERNEL32.dll	315		GetCurrentProcessId
KERNEL32.dll	175		ExitProcess
KERNEL32.dll	518		HeapAlloc
KERNEL32.dll	524		HeapFree
KERNEL32.dll	714		RtlUnwind
KERNEL32.dll	124		DeleteFileA
KERNEL32.dll	448		GetSystemTimeAsFileTime
KERNEL32.dll	903		WideCharToMultiByte
KERNEL32.dll	375		GetModuleHandleA
KERNEL32.dll	264		GetCommandLineA
KERNEL32.dll	663		QueryPerformanceCounter
KERNEL32.dll	318		GetCurrentThreadId
KERNEL32.dll	373		GetModuleFileNameA
KERNEL32.dll	852		TlsAlloc
KERNEL32.dll	795		SetLastError
KERNEL32.dll	853		TlsFree
KERNEL32.dll	855		TlsSetValue
KERNEL32.dll	854		TlsGetValue
KERNEL32.dll	570		LCMapStringA
KERNEL32.dll	571		LCMapStringW
KERNEL32.dll	122		DeleteCriticalSection
KERNEL32.dll	583		LeaveCriticalSection
KERNEL32.dll	143		EnterCriticalSection
KERNEL32.dll	522		HeapDestroy
KERNEL32.dll	520		HeapCreate
KERNEL32.dll	886		VirtualFree
KERNEL32.dll	883		VirtualAlloc
KERNEL32.dll	528		HeapReAlloc
KERNEL32.dll	556		IsBadWritePtr
KERNEL32.dll	681		ReadFile
KERNEL32.dll	791		SetHandleCount
KERNEL32.dll	433		GetStdHandle
KERNEL32.dll	350		GetFileType
KERNEL32.dll	431		GetStartupInfoA
KERNEL32.dll	782		SetFilePointer
KERNEL32.dll	543		InterlockedExchange
KERNEL32.dll	891		VirtualQuery
KERNEL32.dll	916		WriteFile
KERNEL32.dll	229		FlushFileBuffers
KERNEL32.dll	472		GetTimeZoneInformation
KERNEL32.dll	847		TerminateProcess
KERNEL32.dll	864		UnhandledExceptionFilter
KERNEL32.dll	237		FreeEnvironmentStringsA
KERNEL32.dll	333		GetEnvironmentStrings
KERNEL32.dll	238		FreeEnvironmentStringsW
KERNEL32.dll	335		GetEnvironmentStringsW
KERNEL32.dll	434		GetStringTypeA
KERNEL32.dll	437		GetStringTypeW
KERNEL32.dll	252		GetCPInfo
KERNEL32.dll	364		GetLocaleInfoA
KERNEL32.dll	69		CreateDirectoryA
USER32.dll	726		wsprintfA
ADVAPI32.dll	62		CloseServiceHandle
ADVAPI32.dll	492		RegQueryValueExA
ADVAPI32.dll	482		RegOpenKeyExA
ADVAPI32.dll	175		DeleteService
ADVAPI32.dll	66		ControlService
ADVAPI32.dll	429		OpenServiceA
ADVAPI32.dll	427		OpenSCManagerA
ADVAPI32.dll	574		StartServiceA
ADVAPI32.dll	100		CreateServiceA
ADVAPI32.dll	575		StartServiceCtrlDispatcherA
ADVAPI32.dll	513		RegisterServiceCtrlHandlerA
ADVAPI32.dll	461		RegCreateKeyExA
ADVAPI32.dll	505		RegSetValueExA
ADVAPI32.dll	569		SetServiceStatus
ADVAPI32.dll	457		RegCloseKey
SHELL32.dll	175		SHGetFolderPathA
WSOCK32.dll		12
WSOCK32.dll		17
WSOCK32.dll		11
WSOCK32.dll		3
WSOCK32.dll		10
WSOCK32.dll		9
WSOCK32.dll		20
WSOCK32.dll		23
WSOCK32.dll		115
WSOCK32.dll		2
WSOCK32.dll		21
WSOCK32.dll		15
WINTRUST.dll	113		WinVerifyTrust
CRYPT32.dll	124		CryptDecodeObject
CRYPT32.dll	60		CertFreeCertificateContext
CRYPT32.dll	166		CryptMsgClose
CRYPT32.dll	15		CertCloseStore
CRYPT32.dll	110		CertVerifyTimeValidity
CRYPT32.dll	50		CertFindCertificateInStore
CRYPT32.dll	173		CryptMsgGetParam
CRYPT32.dll	69		CertGetNameStringA
CRYPT32.dll	182		CryptQueryObject

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https:\/\/www.verisign.com\/rpa (c)10/CN=VeriSign Class 3 Code Signing 2010 CA

serial: 146BEBEE63F637FC8ADD56E76D131CB4

Certificates (4)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA
        Validity
            Not Before: Jun 15 00:00:00 2007 GMT
            Not After : Jun 14 23:59:59 2012 GMT
        Subject: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:c4:b5:f2:52:15:bc:88:86:60:29:16:4a:5b:2f:
                    4b:91:6b:87:91:f3:35:54:58:35:ea:d1:36:5e:62:
                    4d:52:51:34:71:c2:7b:66:1d:89:c8:dd:2a:c4:6a:
                    0a:f6:37:d9:98:74:91:f6:92:ae:b0:b5:76:96:f1:
                    a9:4a:63:45:47:2e:6b:0b:92:4e:4b:2b:8c:ee:58:
                    4a:8b:d4:07:e4:1a:2c:f8:82:aa:58:d9:cd:42:f3:
                    2d:c0:75:de:8d:ab:c7:8e:1d:9a:6c:4c:08:95:1e:
                    de:db:ef:67:e1:72:c2:49:c2:9e:60:3c:e1:e2:be:
                    16:a3:63:78:69:14:7b:ad:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.verisign.com/tss-ca.crl
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation
            X509v3 Subject Alternative Name: 
                DirName:/CN=TSA1-2
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        50:c5:4b:c8:24:80:df:e4:0d:24:c2:de:1a:b1:a1:02:a1:a6:
        82:2d:0c:83:15:81:37:0a:82:0e:2c:b0:5a:17:61:b5:d8:05:
        fe:88:db:f1:91:91:b3:56:1a:40:a6:eb:92:be:38:39:b0:75:
        36:74:3a:98:4f:e4:37:ba:99:89:ca:95:42:1d:b0:b9:c7:a0:
        8d:57:e0:fa:d5:64:04:42:35:4e:01:d1:33:a2:17:c8:4d:aa:
        27:c7:f2:e1:86:4c:02:38:4d:83:78:c6:fc:53:e0:eb:e0:06:
        87:dd:a4:96:9e:5e:0c:98:e2:a5:be:bf:82:85:c3:60:e1:df:
        ad:28:d8:c7:a5:4b:64:da:c7:1b:5b:bd:ac:39:08:d5:38:22:
        a1:33:8b:2f:8a:9a:eb:bc:07:21:3f:44:41:09:07:b5:65:1c:
        24:bc:48:d3:44:80:eb:a1:cf:c9:02:b4:14:cf:54:c7:16:a3:
        80:5c:f9:79:3e:5d:72:7d:88:17:9e:2c:43:a2:ca:53:ce:7d:
        3d:f6:2a:3a:b8:4f:94:00:a5:6d:0a:83:5d:f9:5e:53:f4:18:
        b3:57:0f:70:c3:fb:f5:ad:95:a0:0e:17:de:c4:16:80:60:c9:
        0f:2b:6e:86:04:f1:eb:f4:78:27:d1:05:c5:ee:34:5b:5e:b9:
        49:32:f2:33

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
        Validity
            Not Before: Dec  4 00:00:00 2003 GMT
            Not After : Dec  3 23:59:59 2013 GMT
        Subject: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a9:ca:b2:a4:cc:cd:20:af:0a:7d:89:ac:87:75:
                    f0:b4:4e:f1:df:c1:0f:bf:67:61:bd:a3:64:1c:da:
                    bb:f9:ca:33:ab:84:30:89:58:7e:8c:db:6b:dd:36:
                    9e:0f:bf:d1:ec:78:f2:77:a6:7e:6f:3c:bf:93:af:
                    0d:ba:68:f4:6c:94:ca:bd:52:2d:ab:48:3d:f5:b6:
                    d5:5d:5f:1b:02:9f:fa:2f:6b:1e:a4:f7:a3:9a:a6:
                    1a:c8:02:e1:7f:4c:52:e3:0e:60:ec:40:1c:7e:b9:
                    0d:de:3f:c7:b4:df:87:bd:5f:7a:6a:31:2e:03:99:
                    81:13:a8:47:20:ce:31:73:0d:57:2d:cd:78:34:33:
                    95:12:99:12:b9:de:68:2f:aa:e6:e3:c2:8a:8c:2a:
                    c3:8b:21:87:66:bd:83:58:57:6f:75:bf:3c:aa:26:
                    87:5d:ca:10:15:3c:9f:84:ea:54:c1:0a:6e:c4:fe:
                    c5:4a:dd:b9:07:11:97:22:7c:db:3e:27:d1:1e:78:
                    ec:9f:31:c9:f1:e6:22:19:db:c4:b3:47:43:9a:1a:
                    5f:a0:1e:90:e4:5e:f5:ee:7c:f1:7d:ab:62:01:8f:
                    f5:4d:0b:de:d0:22:56:a8:95:cd:ae:88:76:ae:ee:
                    ba:0d:f3:e4:4d:d9:a0:fb:68:a0:ae:14:3b:b3:87:
                    c1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.verisign.com/ThawteTimestampingCA.crl
            X509v3 Extended Key Usage: 
                Time Stamping
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=TSA2048-1-53
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        4a:6b:f9:ea:58:c2:44:1c:31:89:79:99:2b:96:bf:82:ac:01:
        d6:1c:4c:cd:b0:8a:58:6e:df:08:29:a3:5e:c8:ca:93:13:e7:
        04:52:0d:ef:47:27:2f:00:38:b0:e4:c9:93:4e:9a:d4:22:62:
        15:f7:3f:37:21:4f:70:31:80:f1:8b:38:87:b3:e8:e8:97:00:
        fe:cf:55:96:4e:24:d2:a9:27:4e:7a:ae:b7:61:41:f3:2a:ce:
        e7:c9:d9:5e:dd:bb:2b:85:3e:b5:9d:b5:d9:e1:57:ff:be:b4:
        c5:7e:f5:cf:0c:9e:f0:97:fe:2b:d3:3b:52:1b:1b:38:27:f7:
        3f:4a

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:6b:eb:ee:63:f6:37:fc:8a:dd:56:e7:6d:13:1c:b4
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https:\/\/www.verisign.com\/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA
        Validity
            Not Before: Jan  7 00:00:00 2012 GMT
            Not After : Jan 22 23:59:59 2013 GMT
        Subject: C=US, ST=Texas, O=Even Balance, Inc., OU=Digital ID Class 3 - Microsoft Software Validation v2, CN=Even Balance, Inc.
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:9f:40:22:02:4e:c8:8a:91:fe:f9:7c:7d:6e:0b:
                    80:24:38:14:a4:46:80:88:1e:3b:89:2d:ed:36:03:
                    df:c1:82:b1:9b:52:d4:f4:d8:9e:8a:3b:e8:83:24:
                    df:95:d9:f9:2b:74:9e:35:8d:d1:dd:7e:3e:ac:3b:
                    c8:c9:cf:7a:45:03:0e:67:fd:b5:ab:5b:99:56:ad:
                    b9:fd:68:87:b8:9a:37:f7:65:89:98:32:4c:4a:8f:
                    fc:ab:fc:24:55:b0:37:9d:2c:72:c3:f7:37:f5:6e:
                    7e:1d:e6:90:c1:db:76:9b:1b:6f:5c:6f:41:8b:bf:
                    a5:24:ea:c9:b2:8e:2a:24:07:f2:71:32:76:1a:87:
                    ca:a8:2a:75:79:18:ad:1d:d7:75:15:a8:1d:48:27:
                    3c:b9:11:e2:66:9d:6b:20:d4:ee:44:33:2c:c3:d4:
                    9b:b6:16:19:14:db:d3:d0:22:b2:bd:b4:bd:71:28:
                    e1:07:62:56:38:82:97:38:f1:b5:c9:16:59:c4:13:
                    a9:64:e0:85:83:b8:ba:dc:8f:53:4d:45:79:a1:b8:
                    09:cb:0c:a6:cc:ca:26:bc:0f:98:e8:94:aa:23:ba:
                    97:24:08:61:f3:68:6e:05:8e:62:7e:38:df:7d:3e:
                    62:4f:59:6c:9e:18:d3:0e:73:05:63:3e:78:04:71:
                    e4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://csc3-2010-crl.verisign.com/CSC3-2010.crl
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/rpa
            X509v3 Extended Key Usage: 
                Code Signing
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com
                CA Issuers - URI:http://csc3-2010-aia.verisign.com/CSC3-2010.cer
            X509v3 Authority Key Identifier: 
                CF:99:A9:EA:7B:26:F4:4B:C9:8E:8F:D7:F0:05:26:EF:E3:D2:A7:9D
            Netscape Cert Type: 
                Object Signing
            1.3.6.1.4.1.311.2.1.27: 
                0.......
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        21:fb:2c:16:da:f9:87:18:a5:9a:da:12:3c:5d:d9:02:b2:27:
        1d:38:66:f3:b1:df:e6:60:e5:fb:b6:9e:25:11:a0:82:f7:96:
        1d:21:29:19:40:5f:cd:67:18:ad:1b:af:b3:41:30:05:08:86:
        f1:e4:db:4c:14:d0:2e:e4:bf:14:bc:bb:ed:45:51:3b:c6:42:
        5a:6b:0d:25:d8:bd:3d:90:f6:a7:6b:58:85:40:98:73:ba:2c:
        07:35:a1:29:7e:f7:ed:4d:7e:a6:e3:da:28:06:5f:ea:6a:ce:
        3a:71:5c:5a:02:f8:7f:db:d4:f3:c9:3d:f1:bd:40:fb:9d:9f:
        aa:d4:8d:26:f8:59:13:b0:bb:9a:01:a3:75:20:a3:fa:ce:eb:
        b3:a4:d1:87:8b:81:1c:eb:e4:c0:df:81:ae:f9:b0:b8:b7:92:
        a7:a7:a0:03:87:20:7b:a0:e6:83:39:18:36:87:29:73:59:e9:
        90:bd:2d:a9:99:ca:ca:91:67:c6:ef:0d:95:35:f5:a9:bf:b2:
        03:5c:cd:5e:41:91:75:f2:7c:a7:22:06:78:b6:b0:87:d1:b0:
        e7:fe:b4:85:16:f8:51:b2:1a:53:7f:07:f8:00:c5:d4:b3:20:
        5d:26:58:bc:35:43:0b:02:c0:6e:ff:be:64:80:ed:1f:f4:3a:
        c6:6a:a5:15

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
        Validity
            Not Before: Feb  8 00:00:00 2010 GMT
            Not After : Feb  7 23:59:59 2020 GMT
        Subject: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https:\/\/www.verisign.com\/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:f5:23:4b:5e:a5:d7:8a:bb:32:e9:d4:57:f7:ef:
                    e4:c7:26:7e:ad:19:98:fe:a8:9d:7d:94:f6:36:6b:
                    10:d7:75:81:30:7f:04:68:7f:cb:2b:75:1e:cd:1d:
                    08:8c:df:69:94:a7:37:a3:9c:7b:80:e0:99:e1:ee:
                    37:4d:5f:ce:3b:14:ee:86:d4:d0:f5:27:35:bc:25:
                    0b:38:a7:8c:63:9d:17:a3:08:a5:ab:b0:fb:cd:6a:
                    62:82:4c:d5:21:da:1b:d9:f1:e3:84:3b:8a:2a:4f:
                    85:5b:90:01:4f:c9:a7:76:10:7f:27:03:7c:be:ae:
                    7e:7d:c1:dd:f9:05:bc:1b:48:9c:69:e7:c0:a4:3c:
                    3c:41:00:3e:df:96:e5:c5:e4:94:71:d6:55:01:c7:
                    00:26:4a:40:3c:b5:a1:26:a9:0c:a7:6d:80:8e:90:
                    25:7b:cf:bf:3f:1c:eb:2f:96:fa:e5:87:77:c6:b5:
                    56:b2:7a:3b:54:30:53:1b:df:62:34:ff:1e:d1:f4:
                    5a:93:28:85:e5:4c:17:4e:7e:5b:fd:a4:93:99:7f:
                    df:cd:ef:a4:75:ef:ef:15:f6:47:e7:f8:19:72:d8:
                    2e:34:1a:a6:b4:a7:4c:7e:bd:bb:4f:0c:3d:57:f1:
                    30:d6:a6:36:8e:d6:80:76:d7:19:2e:a5:cd:7e:34:
                    2d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/cps
                  User Notice:
                    Explicit Text: https://www.verisign.com/rpa
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            1.3.6.1.5.5.7.1.12: 
                0_.].[0Y0W0U..image/gif0!0.0...+..............k...j.H.,{..0%.#http://logo.verisign.com/vslogo.gif
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.verisign.com/pca3-g5.crl
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, Code Signing
            X509v3 Subject Alternative Name: 
                DirName:/CN=VeriSignMPKI-2-8
            X509v3 Subject Key Identifier: 
                CF:99:A9:EA:7B:26:F4:4B:C9:8E:8F:D7:F0:05:26:EF:E3:D2:A7:9D
            X509v3 Authority Key Identifier: 
                7F:D3:65:A7:C2:DD:EC:BB:F0:30:09:F3:43:39:FA:02:AF:33:31:33
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        56:22:e6:34:a4:c4:61:cb:48:b9:01:ad:56:a8:64:0f:d9:8c:
        91:c4:bb:cc:0c:e5:ad:7a:a0:22:7f:df:47:38:4a:2d:6c:d1:
        7f:71:1a:7c:ec:70:a9:b1:f0:4f:e4:0f:0c:53:fa:15:5e:fe:
        74:98:49:24:85:81:26:1c:91:14:47:b0:4c:63:8c:bb:a1:34:
        d4:c6:45:e8:0d:85:26:73:03:d0:a9:8c:64:6d:dc:71:92:e6:
        45:05:60:15:59:51:39:fc:58:14:6b:fe:d4:a4:ed:79:6b:08:
        0c:41:72:e7:37:22:06:09:be:23:e9:3f:44:9a:1e:e9:61:9d:
        cc:b1:90:5c:fc:3d:d2:8d:ac:42:3d:65:36:d4:b4:3d:40:28:
        8f:9b:10:cf:23:26:cc:4b:20:cb:90:1f:5d:8c:4c:34:ca:3c:
        d8:e5:37:d6:6f:a5:20:bd:34:eb:26:d9:ae:0d:e7:c5:9a:f7:
        a1:b4:21:91:33:6f:86:e8:58:bb:25:7c:74:0e:58:fe:75:1b:
        63:3f:ce:31:7c:9b:8f:1b:96:9e:c5:53:76:84:5b:9c:ad:91:
        fa:ac:ed:93:ba:5d:c8:21:53:c2:82:53:63:af:12:0d:50:87:
        11:1b:3d:54:52:96:8a:2c:9c:3d:92:1a:08:9a:05:2e:c7:93:
        a5:48:91:d3

pkcs7-signedData

SHA1: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15

00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |

SHA1

6b ed 44 2d 11 50 71 10 d7 d9 f4 13 69 2f 8e 82 |k.D-.Pq.....i/..| 3c 20 5a 27 |< Z' |

Certificates
- Certificate #0
  - 2
    - 38:25:D7:FA:F8:61:AF:9E:F4:90:E7:26:B5:D6:5A:D5
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - O: VeriSign, Inc.
      - CN: VeriSign Time Stamping Services CA
    - 2007-06-15 00:00:00 UTC: 2012-06-14 23:59:59 UTC
    - Subject
      - C: US
      - O: VeriSign, Inc.
      - CN: VeriSign Time Stamping Services Signer - G2
    - #5
      - rsaEncryption: nil
      - C4:B5:F2:52:15:BC:88:86:60:29:16:4A:5B:2F:4B:91:
        6B:87:91:F3:35:54:58:35:EA:D1:36:5E:62:4D:52:51:
        34:71:C2:7B:66:1D:89:C8:DD:2A:C4:6A:0A:F6:37:D9:
        98:74:91:F6:92:AE:B0:B5:76:96:F1:A9:4A:63:45:47:
        2E:6B:0B:92:4E:4B:2B:8C:EE:58:4A:8B:D4:07:E4:1A:
        2C:F8:82:AA:58:D9:CD:42:F3:2D:C0:75:DE:8D:AB:C7:
        8E:1D:9A:6C:4C:08:95:1E:DE:DB:EF:67:E1:72:C2:49:
        C2:9E:60:3C:E1:E2:BE:16:A3:63:78:69:14:7B:AD:2D: 0x010001
    - X509v3 extensions
      - authorityInfoAccess
        OCSP: http://ocsp.verisign.com
      - basicConstraints
        true
        nil
      - crlDistributionPoints: http://crl.verisign.com/tss-ca.crl
      - extendedKeyUsage: true, timeStamping
      - keyUsage: true, 0xc0
      - subjectAltName
        CN: TSA1-2
  - RSA-SHA1:
```
50 c5 4b c8 24 80 df e4  0d 24 c2 de 1a b1 a1 02  |P.K.$....$......|
a1 a6 82 2d 0c 83 15 81  37 0a 82 0e 2c b0 5a 17  |...-....7...,.Z.|
61 b5 d8 05 fe 88 db f1  91 91 b3 56 1a 40 a6 eb  |a..........V.@..|
92 be 38 39 b0 75 36 74  3a 98 4f e4 37 ba 99 89  |..89.u6t:.O.7...|
ca 95 42 1d b0 b9 c7 a0  8d 57 e0 fa d5 64 04 42  |..B......W...d.B|
35 4e 01 d1 33 a2 17 c8  4d aa 27 c7 f2 e1 86 4c  |5N..3...M.'....L|
02 38 4d 83 78 c6 fc 53  e0 eb e0 06 87 dd a4 96  |.8M.x..S........|
9e 5e 0c 98 e2 a5 be bf  82 85 c3 60 e1 df ad 28  |.^.........`...(|
d8 c7 a5 4b 64 da c7 1b  5b bd ac 39 08 d5 38 22  |...Kd...[..9..8"|
a1 33 8b 2f 8a 9a eb bc  07 21 3f 44 41 09 07 b5  |.3./.....!?DA...|
65 1c 24 bc 48 d3 44 80  eb a1 cf c9 02 b4 14 cf  |e.$.H.D.........|
54 c7 16 a3 80 5c f9 79  3e 5d 72 7d 88 17 9e 2c  |T....\.y>]r}...,|
43 a2 ca 53 ce 7d 3d f6  2a 3a b8 4f 94 00 a5 6d  |C..S.}=.*:.O...m|
0a 83 5d f9 5e 53 f4 18  b3 57 0f 70 c3 fb f5 ad  |..].^S...W.p....|
95 a0 0e 17 de c4 16 80  60 c9 0f 2b 6e 86 04 f1  |........`..+n...|
eb f4 78 27 d1 05 c5 ee  34 5b 5e b9 49 32 f2 33  |..x'....4[^.I2.3|
```
- Certificate #1
  - 2
    - 47:BF:19:95:DF:8D:52:46:43:F7:DB:6D:48:0D:31:A4
    - RSA-SHA1: nil
    - Issuer
      - C: ZA
      - ST: Western Cape
      - L: Durbanville
      - O: Thawte
      - OU: Thawte Certification
      - CN: Thawte Timestamping CA
    - 2003-12-04 00:00:00 UTC: 2013-12-03 23:59:59 UTC
    - Subject
      - C: US
      - O: VeriSign, Inc.
      - CN: VeriSign Time Stamping Services CA
    - #5
      - rsaEncryption: nil
      - A9:CA:B2:A4:CC:CD:20:AF:0A:7D:89:AC:87:75:F0:B4:
        4E:F1:DF:C1:0F:BF:67:61:BD:A3:64:1C:DA:BB:F9:CA:
        33:AB:84:30:89:58:7E:8C:DB:6B:DD:36:9E:0F:BF:D1:
        EC:78:F2:77:A6:7E:6F:3C:BF:93:AF:0D:BA:68:F4:6C:
        94:CA:BD:52:2D:AB:48:3D:F5:B6:D5:5D:5F:1B:02:9F:
        FA:2F:6B:1E:A4:F7:A3:9A:A6:1A:C8:02:E1:7F:4C:52:
        E3:0E:60:EC:40:1C:7E:B9:0D:DE:3F:C7:B4:DF:87:BD:
        5F:7A:6A:31:2E:03:99:81:13:A8:47:20:CE:31:73:0D:
        57:2D:CD:78:34:33:95:12:99:12:B9:DE:68:2F:AA:E6:
        E3:C2:8A:8C:2A:C3:8B:21:87:66:BD:83:58:57:6F:75:
        BF:3C:AA:26:87:5D:CA:10:15:3C:9F:84:EA:54:C1:0A:
        6E:C4:FE:C5:4A:DD:B9:07:11:97:22:7C:DB:3E:27:D1:
        1E:78:EC:9F:31:C9:F1:E6:22:19:DB:C4:B3:47:43:9A:
        1A:5F:A0:1E:90:E4:5E:F5:EE:7C:F1:7D:AB:62:01:8F:
        F5:4D:0B:DE:D0:22:56:A8:95:CD:AE:88:76:AE:EE:BA:
        0D:F3:E4:4D:D9:A0:FB:68:A0:AE:14:3B:B3:87:C1:BB: 0x010001
    - X509v3 extensions
      - authorityInfoAccess
        OCSP: http://ocsp.verisign.com
      - basicConstraints
        true
        true: 0
      - crlDistributionPoints: http://crl.verisign.com/ThawteTimestampingCA.crl
      - extendedKeyUsage: timeStamping
      - keyUsage: true, 6
      - subjectAltName
        CN: TSA2048-1-53
  - RSA-SHA1:
```
4a 6b f9 ea 58 c2 44 1c  31 89 79 99 2b 96 bf 82  |Jk..X.D.1.y.+...|
ac 01 d6 1c 4c cd b0 8a  58 6e df 08 29 a3 5e c8  |....L...Xn..).^.|
ca 93 13 e7 04 52 0d ef  47 27 2f 00 38 b0 e4 c9  |.....R..G'/.8...|
93 4e 9a d4 22 62 15 f7  3f 37 21 4f 70 31 80 f1  |.N.."b..?7!Op1..|
8b 38 87 b3 e8 e8 97 00  fe cf 55 96 4e 24 d2 a9  |.8........U.N$..|
27 4e 7a ae b7 61 41 f3  2a ce e7 c9 d9 5e dd bb  |'Nz..aA.*....^..|
2b 85 3e b5 9d b5 d9 e1  57 ff be b4 c5 7e f5 cf  |+.>.....W....~..|
0c 9e f0 97 fe 2b d3 3b  52 1b 1b 38 27 f7 3f 4a  |.....+.;R..8'.?J|
```
- Certificate #2
  - 2
    - 14:6B:EB:EE:63:F6:37:FC:8A:DD:56:E7:6D:13:1C:B4
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - O: VeriSign, Inc.
      - OU: VeriSign Trust Network
      - OU: Terms of use at https://www.verisign.com/rpa (c)10
      - CN: VeriSign Class 3 Code Signing 2010 CA
    - 2012-01-07 00:00:00 UTC: 2013-01-22 23:59:59 UTC
    - Subject
      - C: US
      - ST: Texas
      - O: Even Balance, Inc.
      - OU: Digital ID Class 3 - Microsoft Software Validation v2
      - CN: Even Balance, Inc.
    - #5
      - rsaEncryption: nil
      - 9F:40:22:02:4E:C8:8A:91:FE:F9:7C:7D:6E:0B:80:24:
        38:14:A4:46:80:88:1E:3B:89:2D:ED:36:03:DF:C1:82:
        B1:9B:52:D4:F4:D8:9E:8A:3B:E8:83:24:DF:95:D9:F9:
        2B:74:9E:35:8D:D1:DD:7E:3E:AC:3B:C8:C9:CF:7A:45:
        03:0E:67:FD:B5:AB:5B:99:56:AD:B9:FD:68:87:B8:9A:
        37:F7:65:89:98:32:4C:4A:8F:FC:AB:FC:24:55:B0:37:
        9D:2C:72:C3:F7:37:F5:6E:7E:1D:E6:90:C1:DB:76:9B:
        1B:6F:5C:6F:41:8B:BF:A5:24:EA:C9:B2:8E:2A:24:07:
        F2:71:32:76:1A:87:CA:A8:2A:75:79:18:AD:1D:D7:75:
        15:A8:1D:48:27:3C:B9:11:E2:66:9D:6B:20:D4:EE:44:
        33:2C:C3:D4:9B:B6:16:19:14:DB:D3:D0:22:B2:BD:B4:
        BD:71:28:E1:07:62:56:38:82:97:38:F1:B5:C9:16:59:
        C4:13:A9:64:E0:85:83:B8:BA:DC:8F:53:4D:45:79:A1:
        B8:09:CB:0C:A6:CC:CA:26:BC:0F:98:E8:94:AA:23:BA:
        97:24:08:61:F3:68:6E:05:8E:62:7E:38:DF:7D:3E:62:
        4F:59:6C:9E:18:D3:0E:73:05:63:3E:78:04:71:E4:B5: 0x010001
    - X509v3 extensions
      - basicConstraints
        nil
      - keyUsage: true, 0x80
      - crlDistributionPoints: http://csc3-2010-crl.verisign.com/CSC3-2010.crl
      - certificatePolicies
        2.16.840.1.113733.1.7.23.3
        id-qt-cps: https://www.verisign.com/rpa
      - extendedKeyUsage: codeSigning
      - authorityInfoAccess
        #0
        OCSP: http://ocsp.verisign.com
        caIssuers: http://csc3-2010-aia.verisign.com/CSC3-2010.cer
      - authorityKeyIdentifier:
        cf 99 a9 ea 7b 26 f4 4b c9 8e 8f d7 f0 05 26 ef |....{&.K......&.| e3 d2 a7 9d |.... |
      - nsCertType: 0x10
      - 1.3.6.1.4.1.311.2.1.27
        false: true
  - RSA-SHA1:
```
21 fb 2c 16 da f9 87 18  a5 9a da 12 3c 5d d9 02  |!.,.........<]..|
b2 27 1d 38 66 f3 b1 df  e6 60 e5 fb b6 9e 25 11  |.'.8f....`....%.|
a0 82 f7 96 1d 21 29 19  40 5f cd 67 18 ad 1b af  |.....!).@_.g....|
b3 41 30 05 08 86 f1 e4  db 4c 14 d0 2e e4 bf 14  |.A0......L......|
bc bb ed 45 51 3b c6 42  5a 6b 0d 25 d8 bd 3d 90  |...EQ;.BZk.%..=.|
f6 a7 6b 58 85 40 98 73  ba 2c 07 35 a1 29 7e f7  |..kX.@.s.,.5.)~.|
ed 4d 7e a6 e3 da 28 06  5f ea 6a ce 3a 71 5c 5a  |.M~...(._.j.:q\Z|
02 f8 7f db d4 f3 c9 3d  f1 bd 40 fb 9d 9f aa d4  |.......=..@.....|
8d 26 f8 59 13 b0 bb 9a  01 a3 75 20 a3 fa ce eb  |.&.Y......u ....|
b3 a4 d1 87 8b 81 1c eb  e4 c0 df 81 ae f9 b0 b8  |................|
b7 92 a7 a7 a0 03 87 20  7b a0 e6 83 39 18 36 87  |....... {...9.6.|
29 73 59 e9 90 bd 2d a9  99 ca ca 91 67 c6 ef 0d  |)sY...-.....g...|
95 35 f5 a9 bf b2 03 5c  cd 5e 41 91 75 f2 7c a7  |.5.....\.^A.u.|.|
22 06 78 b6 b0 87 d1 b0  e7 fe b4 85 16 f8 51 b2  |".x...........Q.|
1a 53 7f 07 f8 00 c5 d4  b3 20 5d 26 58 bc 35 43  |.S....... ]&X.5C|
0b 02 c0 6e ff be 64 80  ed 1f f4 3a c6 6a a5 15  |...n..d....:.j..|
```
- Certificate #3
  - 2
    - 52:00:E5:AA:25:56:FC:1A:86:ED:96:C9:D4:4B:33:C7
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - O: VeriSign, Inc.
      - OU: VeriSign Trust Network
      - OU: (c) 2006 VeriSign, Inc. - For authorized use only
      - CN: VeriSign Class 3 Public Primary Certification Authority - G5
    - 2010-02-08 00:00:00 UTC: 2020-02-07 23:59:59 UTC
    - Subject
      - C: US
      - O: VeriSign, Inc.
      - OU: VeriSign Trust Network
      - OU: Terms of use at https://www.verisign.com/rpa (c)10
      - CN: VeriSign Class 3 Code Signing 2010 CA
    - #5
      - rsaEncryption: nil
      - F5:23:4B:5E:A5:D7:8A:BB:32:E9:D4:57:F7:EF:E4:C7:
        26:7E:AD:19:98:FE:A8:9D:7D:94:F6:36:6B:10:D7:75:
        81:30:7F:04:68:7F:CB:2B:75:1E:CD:1D:08:8C:DF:69:
        94:A7:37:A3:9C:7B:80:E0:99:E1:EE:37:4D:5F:CE:3B:
        14:EE:86:D4:D0:F5:27:35:BC:25:0B:38:A7:8C:63:9D:
        17:A3:08:A5:AB:B0:FB:CD:6A:62:82:4C:D5:21:DA:1B:
        D9:F1:E3:84:3B:8A:2A:4F:85:5B:90:01:4F:C9:A7:76:
        10:7F:27:03:7C:BE:AE:7E:7D:C1:DD:F9:05:BC:1B:48:
        9C:69:E7:C0:A4:3C:3C:41:00:3E:DF:96:E5:C5:E4:94:
        71:D6:55:01:C7:00:26:4A:40:3C:B5:A1:26:A9:0C:A7:
        6D:80:8E:90:25:7B:CF:BF:3F:1C:EB:2F:96:FA:E5:87:
        77:C6:B5:56:B2:7A:3B:54:30:53:1B:DF:62:34:FF:1E:
        D1:F4:5A:93:28:85:E5:4C:17:4E:7E:5B:FD:A4:93:99:
        7F:DF:CD:EF:A4:75:EF:EF:15:F6:47:E7:F8:19:72:D8:
        2E:34:1A:A6:B4:A7:4C:7E:BD:BB:4F:0C:3D:57:F1:30:
        D6:A6:36:8E:D6:80:76:D7:19:2E:A5:CD:7E:34:2D:89: 0x010001
    - X509v3 extensions
      - basicConstraints
        true
        true: 0
      - certificatePolicies
        2.16.840.1.113733.1.7.23.3
        #0
        id-qt-cps: https://www.verisign.com/cps
        id-qt-unotice: https://www.verisign.com/rpa
      - keyUsage: true, 6
      - 1.3.6.1.5.5.7.1.12
        image/gif
        SHA1:
        8f e5 d3 1a 86 ac 8d 8e 6b c3 cf 80 6a d4 48 18 |........k...j.H.| 2c 7b 19 2e |,{.. |
        http://logo.verisign.com/vslogo.gif
      - crlDistributionPoints: http://crl.verisign.com/pca3-g5.crl
      - authorityInfoAccess
        OCSP: http://ocsp.verisign.com
      - extendedKeyUsage
        clientAuth: codeSigning
      - subjectAltName
        CN: VeriSignMPKI-2-8
      - subjectKeyIdentifier:
        cf 99 a9 ea 7b 26 f4 4b c9 8e 8f d7 f0 05 26 ef |....{&.K......&.| e3 d2 a7 9d |.... |
      - authorityKeyIdentifier:
        7f d3 65 a7 c2 dd ec bb f0 30 09 f3 43 39 fa 02 |..e......0..C9..| af 33 31 33 |.313 |
  - RSA-SHA1:
```
56 22 e6 34 a4 c4 61 cb  48 b9 01 ad 56 a8 64 0f  |V".4..a.H...V.d.|
d9 8c 91 c4 bb cc 0c e5  ad 7a a0 22 7f df 47 38  |.........z."..G8|
4a 2d 6c d1 7f 71 1a 7c  ec 70 a9 b1 f0 4f e4 0f  |J-l..q.|.p...O..|
0c 53 fa 15 5e fe 74 98  49 24 85 81 26 1c 91 14  |.S..^.t.I$..&...|
47 b0 4c 63 8c bb a1 34  d4 c6 45 e8 0d 85 26 73  |G.Lc...4..E...&s|
03 d0 a9 8c 64 6d dc 71  92 e6 45 05 60 15 59 51  |....dm.q..E.`.YQ|
39 fc 58 14 6b fe d4 a4  ed 79 6b 08 0c 41 72 e7  |9.X.k....yk..Ar.|
37 22 06 09 be 23 e9 3f  44 9a 1e e9 61 9d cc b1  |7"...#.?D...a...|
90 5c fc 3d d2 8d ac 42  3d 65 36 d4 b4 3d 40 28  |.\.=...B=e6..=@(|
8f 9b 10 cf 23 26 cc 4b  20 cb 90 1f 5d 8c 4c 34  |....#&.K ...].L4|
ca 3c d8 e5 37 d6 6f a5  20 bd 34 eb 26 d9 ae 0d  |.<..7.o. .4.&...|
e7 c5 9a f7 a1 b4 21 91  33 6f 86 e8 58 bb 25 7c  |......!.3o..X.%||
74 0e 58 fe 75 1b 63 3f  ce 31 7c 9b 8f 1b 96 9e  |t.X.u.c?.1|.....|
c5 53 76 84 5b 9c ad 91  fa ac ed 93 ba 5d c8 21  |.Sv.[........].!|
53 c2 82 53 63 af 12 0d  50 87 11 1b 3d 54 52 96  |S..Sc...P...=TR.|
8a 2c 9c 3d 92 1a 08 9a  05 2e c7 93 a5 48 91 d3  |.,.=.........H..|
```

Signer

1
unnamed
- #0
  - C: US
  - O: VeriSign, Inc.
  - OU: VeriSign Trust Network
  - OU: Terms of use at https://www.verisign.com/rpa (c)10
  - CN: VeriSign Class 3 Code Signing 2010 CA
- 14:6B:EB:EE:63:F6:37:FC:8A:DD:56:E7:6D:13:1C:B4
SHA1: nil

contentType: 1.3.6.1.4.1.311.2.1.4
1.3.6.1.4.1.311.2.1.11: msCodeInd

messageDigest:

b5 d0 4d dc d9 58 bd f1  13 aa 56 cd f6 b6 bb e9  |..M..X....V.....|
e6 86 a2 56                                       |...V            |

1.3.6.1.4.1.311.2.1.12:

00 50 00 75 00 6e 00 6b  00 42 00 75 00 73 00 74  |.P.u.n.k.B.u.s.t|
00 65 00 72 00 28 00 74  00 6d 00 29 00 20 00 53  |.e.r.(.t.m.). .S|
00 65 00 72 00 76 00 69  00 63 00 65 00 20 00 43  |.e.r.v.i.c.e. .C|
00 6f 00 6d 00 70 00 6f  00 6e 00 65 00 6e 00 74  |.o.m.p.o.n.e.n.t|
00 20 00 28 00 42 00 29                           |. .(.B.)        |

rsaEncryption:

70 03 1e f2 81 1c 51 7f  96 3b b2 8d aa f8 a2 15  |p.....Q..;......|
26 33 62 6a ea 91 e6 4c  b4 4f 4e 0d 52 fe 34 38  |&3bj...L.ON.R.48|
7d 15 a2 96 8e 4d 1c 7b  8a b0 32 df 80 83 31 ae  |}....M.{..2...1.|
1a 30 be ce 5c c6 1e f8  ea f2 63 d8 ee fd 11 88  |.0..\.....c.....|
5f 53 9f 91 7a e6 e0 de  d5 eb d9 34 ef da 2b 3f  |_S..z......4..+?|
2f f1 7e a5 f7 d6 dc f4  df 34 e0 a9 57 c9 38 1b  |/.~......4..W.8.|
ab 3c e7 45 c1 08 c9 e0  83 7c 50 54 41 89 e7 e8  |.<.E.....|PTA...|
9b be 3f c1 3f 73 67 2a  0a 58 55 02 ca bc f3 7d  |..?.?sg*.XU....}|
44 c1 a3 f5 86 1c 32 9d  05 c9 0e 2d 56 05 2d ee  |D.....2....-V.-.|
0e 48 da 29 a3 f1 59 d7  2c 3f fa ef f8 c7 31 dc  |.H.)..Y.,?....1.|
1d 31 dc 69 a2 1e a0 1d  1c d1 f6 8b 3a 84 01 94  |.1.i........:...|
cb cc 66 d7 fe c2 21 39  f7 98 ae 8e 68 9e be 59  |..f...!9....h..Y|
cd 9b 00 c3 da e1 b1 c4  13 94 93 5e 65 0f 2b 78  |...........^e.+x|
3f 71 66 31 e1 d0 eb 5f  d2 6d ea 62 62 6b ec 84  |?qf1..._.m.bbk..|
a7 12 f8 7a 12 16 1c 5f  27 ec 92 16 97 72 c7 c6  |...z..._'....r..|
e1 6e 71 07 b4 77 68 64  b2 e9 24 ff f5 bc 53 37  |.nq..whd..$...S7|

countersignature

unnamed
- #0
  - C: US
  - O: VeriSign, Inc.
  - CN: VeriSign Time Stamping Services CA
- 38:25:D7:FA:F8:61:AF:9E:F4:90:E7:26:B5:D6:5A:D5
SHA1: nil
#2
- contentType: pkcs7-data
- signingTime: 2012-05-14 16:11:24 UTC
- messageDigest:
```
b8 f9 c4 aa 63 2d 0d a6  e5 1f 82 3c 66 6e 4f 66  |....c-.....
```

rsaEncryption:

82 51 66 34 05 34 b4 fe  47 79 b9 35 38 0a 41 b4  |.Qf4.4..Gy.58.A.|
ef 9f ab b4 41 b6 49 55  9a c9 24 22 33 16 39 bb  |....A.IU..$"3.9.|
94 b1 e8 cd 1b 94 fc d6  39 e7 6c f2 71 c7 1f b7  |........9.l.q...|
d7 ea a6 8a 05 7d 69 09  cb 29 f5 f3 3d 27 01 58  |.....}i..)..='.X|
85 b1 99 b3 73 03 3c 58  77 1b 7b 30 ce ee 65 b7  |....s.

show previews

offset	size	type	comment
0	275267	EXE	05/14/2012 16:11:13	#
15c1	15	HTM		#
43343	6021	BIN	overlay data past EOF	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK