hmpalert.dll - hmpalert_x86.dll - HitmanPro.Alert 32-bit Support Library

info
MZ
PE
resources
imports
exports
foremost
version info
signature
hexdump
disasm
log
discuss
donate

filename	hmpalert.dll
size	770768 (0xbc2d0)
md5	3536e573a1b2c1da9c59968fc962f60c

type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x120

Rich Header

lib id	version	times used
241	40116	19
243	40116	129
242	40116	32
259	23406	22
260	23406	20
261	23406	34
131	30729	4
147	30729	3
1	0	292
265	23506	122
259	23506	8
256	23506	1
255	23506	1
151	0	1
258	23506	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	8
TimeDateStamp	0x56cdc99b
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x2102
Magic	0x10b
LinkerVersion	14.0
SizeOfCode	0x6e800
SizeOfInitializedData	0x4c600
SizeOfUninitializedData	0
AddressOfEntryPoint	0x2e580
BaseOfCode	0x1000
BaseOfData	0x70000
ImageBase	0x10000000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	5.1
ImageVersion	0.0
SubsystemVersion	5.1
Reserved1	0
SizeOfImage	0xc1000
SizeOfHeaders	0x400
CheckSum	0xc1349
Subsystem	2
DllCharacteristics	0x4140
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ 6.0 - 8.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x6e613	0x6e800	R-X CODE
.rdata	0x70000	0x229d2	0x22a00	R-- IDATA
.data	0x93000	0xb820	0x9c00	RW- IDATA
.didat	0x9f000	0x148	0x200	RW- IDATA
.wo	0xa0000	0x20	0x200	RW- IDATA
.iatstub	0xa1000	0x9400	0x9400	RW- IDATA
.rsrc	0xab000	0xe6c8	0xe800	R-- IDATA
.reloc	0xba000	0x60f0	0x6200	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0x91c10	0x14d
IMPORT	0x91d60	0x28
RESOURCE	0xab000	0xe6c8
EXCEPTION	0	0
SECURITY	0xb9400	0x2ed0
BASERELOC	0xba000	0x60f0
DEBUG	0x8ca60	0x54
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0x70c68	0x40
Bound_IAT	0	0
IAT	0x70000	0x22c
Delay_IAT	0x91364	0x140
CLR_Header	0	0

show previews

type	name	size
RCDATA	#300	57518
VERSION	#1	932
MANIFEST	#2	381

module_name	hint	function_name
KERNEL32.dll	751	InterlockedIncrement
KERNEL32.dll	453	GetCurrentThreadId
KERNEL32.dll	133	CreateEventW
KERNEL32.dll	181	CreateThread
KERNEL32.dll	1200	SignalObjectAndWait
KERNEL32.dll	82	CloseHandle
KERNEL32.dll	209	DeleteCriticalSection
KERNEL32.dll	1043	ResumeThread
KERNEL32.dll	449	GetCurrentProcessId
KERNEL32.dll	1271	WaitForMultipleObjects
KERNEL32.dll	1113	SetEvent
KERNEL32.dll	719	HeapFree
KERNEL32.dll	715	HeapAlloc
KERNEL32.dll	238	EnterCriticalSection
KERNEL32.dll	825	LeaveCriticalSection
KERNEL32.dll	143	CreateFileW
KERNEL32.dll	496	GetFileSize
KERNEL32.dll	960	ReadFile
KERNEL32.dll	659	GetTickCount
KERNEL32.dll	1257	VirtualAlloc
KERNEL32.dll	1139	SetLastError
KERNEL32.dll	514	GetLastError
KERNEL32.dll	745	InterlockedCompareExchange
KERNEL32.dll	771	IsProcessInJob
KERNEL32.dll	448	GetCurrentProcess
KERNEL32.dll	536	GetModuleHandleW
KERNEL32.dll	747	InterlockedDecrement
KERNEL32.dll	188	CreateTimerQueue
KERNEL32.dll	189	CreateTimerQueueTimer
KERNEL32.dll	1177	SetThreadPriority
KERNEL32.dll	194	CreateWaitableTimerW
KERNEL32.dll	1196	SetWaitableTimer
KERNEL32.dll	748	InterlockedExchange
KERNEL32.dll	1039	ResetEvent
KERNEL32.dll	749	InterlockedExchangeAdd
KERNEL32.dll	1273	WaitForSingleObject
KERNEL32.dll	588	GetProcessId
KERNEL32.dll	963	ReadProcessMemory
KERNEL32.dll	581	GetProcAddress
KERNEL32.dll	221	DeviceIoControl
KERNEL32.dll	717	HeapCreate
KERNEL32.dll	720	HeapLock
KERNEL32.dll	728	HeapWalk
KERNEL32.dll	726	HeapUnlock
KERNEL32.dll	828	LoadLibraryA
KERNEL32.dll	1053	SearchPathW
KERNEL32.dll	527	GetLongPathNameW
KERNEL32.dll	936	QueryPerformanceFrequency
KERNEL32.dll	935	QueryPerformanceCounter
KERNEL32.dll	905	OutputDebugStringA
KERNEL32.dll	535	GetModuleHandleExW
KERNEL32.dll	1260	VirtualFree
KERNEL32.dll	627	GetSystemInfo
KERNEL32.dll	1202	Sleep
KERNEL32.dll	722	HeapReAlloc
KERNEL32.dll	586	GetProcessHeap
KERNEL32.dll	534	GetModuleHandleExA
KERNEL32.dll	520	GetLogicalDriveStringsW
KERNEL32.dll	928	QueryDosDeviceW
KERNEL32.dll	218	DeleteTimerQueueTimer
KERNEL32.dll	945	RaiseException
KERNEL32.dll	1263	VirtualProtect
KERNEL32.dll	1265	VirtualQuery
KERNEL32.dll	354	FreeLibrary
KERNEL32.dll	829	LoadLibraryExA
KERNEL32.dll	533	GetModuleHandleA
KERNEL32.dll	739	InitializeCriticalSectionAndSpinCount
KERNEL32.dll	633	GetSystemTimeAsFileTime
KERNEL32.dll	896	OpenProcess
KERNEL32.dll	549	GetNativeSystemInfo
KERNEL32.dll	687	GetWindowsDirectoryW
KERNEL32.dll	624	GetSystemDirectoryW
KERNEL32.dll	313	FindFirstFileW
KERNEL32.dll	302	FindClose
KERNEL32.dll	1252	VerSetConditionMask
KERNEL32.dll	1256	VerifyVersionInfoW
KERNEL32.dll	871	MultiByteToWideChar
KERNEL32.dll	1297	WideCharToMultiByte
KERNEL32.dll	738	InitializeCriticalSection
KERNEL32.dll	105	ConvertDefaultLocale
KERNEL32.dll	921	ProcessIdToSessionId
KERNEL32.dll	350	FormatMessageW
KERNEL32.dll	906	OutputDebugStringW
KERNEL32.dll	515	GetLocalTime
KERNEL32.dll	1317	WriteFile
KERNEL32.dll	1280	WaitNamedPipeW
KERNEL32.dll	1148	SetNamedPipeHandleState
KERNEL32.dll	1230	TryEnterCriticalSection
KERNEL32.dll	1226	TransactNamedPipe
KERNEL32.dll	568	GetOverlappedResult
KERNEL32.dll	66	CancelIo
KERNEL32.dll	225	DisconnectNamedPipe
KERNEL32.dll	909	PeekNamedPipe
KERNEL32.dll	870	MulDiv
KERNEL32.dll	334	FindResourceW
KERNEL32.dll	1201	SizeofResource
KERNEL32.dll	833	LoadResource
KERNEL32.dll	852	LockResource
KERNEL32.dll	357	FreeResource
KERNEL32.dll	830	LoadLibraryExW
KERNEL32.dll	831	LoadLibraryW
KERNEL32.dll	691	GlobalAlloc
KERNEL32.dll	698	GlobalFree
KERNEL32.dll	1235	UnhandledExceptionFilter
KERNEL32.dll	1189	SetUnhandledExceptionFilter
KERNEL32.dll	1216	TerminateProcess
KERNEL32.dll	772	IsProcessorFeaturePresent
KERNEL32.dll	768	IsDebuggerPresent
KERNEL32.dll	611	GetStartupInfoW
KERNEL32.dll	743	InitializeSListHead
KERNEL32.dll	234	EncodePointer
KERNEL32.dll	750	InterlockedFlushSList
KERNEL32.dll	1048	RtlUnwind
KERNEL32.dll	1221	TlsAlloc
KERNEL32.dll	1223	TlsGetValue
KERNEL32.dll	1224	TlsSetValue
KERNEL32.dll	1222	TlsFree
KERNEL32.dll	281	ExitProcess
KERNEL32.dll	360	GetACP
KERNEL32.dll	612	GetStdHandle
KERNEL32.dll	499	GetFileType
KERNEL32.dll	617	GetStringTypeW
KERNEL32.dll	813	LCMapStringW
KERNEL32.dll	778	IsValidCodePage
KERNEL32.dll	567	GetOEMCP
KERNEL32.dll	370	GetCPInfo
KERNEL32.dll	474	GetEnvironmentStringsW
KERNEL32.dll	353	FreeEnvironmentStringsW
KERNEL32.dll	390	GetCommandLineA
KERNEL32.dll	391	GetCommandLineW
KERNEL32.dll	1159	SetStdHandle
KERNEL32.dll	724	HeapSize
KERNEL32.dll	410	GetConsoleCP
KERNEL32.dll	428	GetConsoleMode
KERNEL32.dll	1127	SetFilePointerEx
KERNEL32.dll	343	FlushFileBuffers
KERNEL32.dll	202	DecodePointer
KERNEL32.dll	1316	WriteConsoleW

ord	entry_va	function_name
1	0x20220	A1
2	0x20220	A2
3	0x20220	A3
4	0xac20	CVCCP
5	0x20210	GetModuleHandleA
6	0x20210	GetModuleHandleW
7	0x20200	GetProcAddress
8	0x201f0	LoadLibraryA
9	0x201f0	LoadLibraryW
10	0x201d0	VirtualAlloc
11	0x201d0	VirtualAllocEx
12	0x201e0	VirtualProtect
13	0x201e0	VirtualProtectEx

module_name	hmpalert.dll
flags	0
timestamp	2016-02-24 15:17:42
version	0.0
ordinal_base	1
nFunctions	13
nNames	13
Names(13)	0x91c6c
Functions(13)	0x91c38
NameOrdinals(13)	0x91ca0

StringTable 040004b0

CompanyName	SurfRight B.V.
FileVersion	3.1.8.360
FileDescription	HitmanPro.Alert 32-bit Support Library
OriginalFilename	hmpalert_x86.dll
InternalName	hmpalert.dll
LegalCopyright	© 2014 SurfRight B.V.
ProductName	HitmanPro.Alert
ProductVersion	3.1.8.360
Comments	Incorporates Threatstar Exploit Mitigation Platform (EMP)

VS_FIXEDFILEINFO

FileVersion	3.1.8.360
ProductVersion	3.1.8.360
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	2
FileSubtype	0

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https:\/\/www.verisign.com\/rpa (c)10/CN=VeriSign Class 3 Code Signing 2010 CA

serial: 62C8976F3B1E76427F2D7F26FBE61C21

Certificates (4)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
        Validity
            Not Before: Dec 21 00:00:00 2012 GMT
            Not After : Dec 30 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:b3:49:54:4b:97:1c:12:0a:d8:25:79:91:
                    22:57:2a:6f:dc:b8:26:c4:43:73:6b:c2:bf:2e:50:
                    5a:fb:14:c2:76:8e:43:01:25:43:b4:a1:e2:45:f4:
                    e8:b7:7b:c3:74:cc:22:d7:b4:94:00:02:f7:4d:ed:
                    bf:b4:b7:44:24:6b:cd:5f:45:3b:d1:44:ce:43:12:
                    73:17:82:8b:69:b4:2b:cb:99:1e:ac:72:1b:26:4d:
                    71:1f:b1:31:dd:fb:51:61:02:53:a6:aa:f5:49:2c:
                    05:78:45:a5:2f:89:ce:e7:99:e7:fe:8c:e2:57:3f:
                    3d:c6:92:dc:4a:f8:7b:33:e4:79:0a:fb:f0:75:88:
                    41:9c:ff:c5:03:51:99:aa:d7:6c:9f:93:69:87:65:
                    29:83:85:c2:60:14:c4:c8:c9:3b:14:da:c0:81:f0:
                    1f:0d:74:de:92:22:ab:ca:f7:fb:74:7c:27:e6:f7:
                    4a:1b:7f:a7:c3:9e:2d:ae:8a:ea:a6:e6:aa:27:16:
                    7d:61:f7:98:71:11:bc:e2:50:a1:4b:e5:5d:fa:e5:
                    0e:a7:2c:9f:aa:65:20:d3:d8:96:e8:c8:7c:a5:4e:
                    48:44:ff:19:e2:44:07:92:0b:d7:68:84:80:5d:6a:
                    78:64:45:cd:60:46:7e:54:c1:13:7c:c5:79:f1:c9:
                    c1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD
            Authority Information Access: 
                OCSP - URI:http://ocsp.thawte.com
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.thawte.com/ThawteTimestampingCA.crl
            X509v3 Extended Key Usage: 
                Time Stamping
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-1
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        03:09:9b:8f:79:ef:7f:59:30:aa:ef:68:b5:fa:e3:09:1d:bb:
        4f:82:06:5d:37:5f:a6:52:9f:16:8d:ea:1c:92:09:44:6e:f5:
        6d:eb:58:7c:30:e8:f9:69:8d:23:73:0b:12:6f:47:a9:ae:39:
        11:f8:2a:b1:9b:b0:1a:c3:8e:eb:59:96:00:ad:ce:0c:4d:b2:
        d0:31:a6:08:5c:2a:7a:fc:e2:7a:1d:57:4c:a8:65:18:e9:79:
        40:62:25:96:6e:c7:c7:37:6a:83:21:08:8e:41:ea:dd:d9:57:
        3f:1d:77:49:87:2a:16:06:5e:a6:38:6a:22:12:a3:51:19:83:
        7e:b6

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Validity
            Not Before: Oct 18 00:00:00 2012 GMT
            Not After : Dec 29 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer - G4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a2:63:0b:39:44:b8:bb:23:a7:44:49:bb:0e:ff:
                    a1:f0:61:0a:53:93:b0:98:db:ad:2c:0f:4a:c5:6e:
                    ff:86:3c:53:55:0f:15:ce:04:3f:2b:fd:a9:96:96:
                    d9:be:61:79:0b:5b:c9:4c:86:76:e5:e0:43:4b:22:
                    95:ee:c2:2b:43:c1:9f:d8:68:b4:8e:40:4f:ee:85:
                    38:b9:11:c5:23:f2:64:58:f0:15:32:6f:4e:57:a1:
                    ae:88:a4:02:d7:2a:1e:cd:4b:e1:dd:63:d5:17:89:
                    32:5b:b0:5e:99:5a:a8:9d:28:50:0e:17:ee:96:db:
                    61:3b:45:51:1d:cf:12:56:0b:92:47:fc:ab:ae:f6:
                    66:3d:47:ac:70:72:e7:92:e7:5f:cd:10:b9:c4:83:
                    64:94:19:bd:25:80:e1:e8:d2:22:a5:d0:ba:02:7a:
                    a1:77:93:5b:65:c3:ee:17:74:bc:41:86:2a:dc:08:
                    4c:8c:92:8c:91:2d:9e:77:44:1f:68:d6:a8:74:77:
                    db:0e:5b:32:8b:56:8b:33:bd:d9:63:c8:49:9d:3a:
                    c5:c5:ea:33:0b:d2:f1:a3:1b:f4:8b:be:d9:b3:57:
                    8b:3b:de:04:a7:7a:22:b2:24:ae:2e:c7:70:c5:be:
                    4e:83:26:08:fb:0b:bd:a9:4f:99:08:e1:10:28:72:
                    aa:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                OCSP - URI:http://ts-ocsp.ws.symantec.com
                CA Issuers - URI:http://ts-aia.ws.symantec.com/tss-ca-g2.cer
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://ts-crl.ws.symantec.com/tss-ca-g2.crl
            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-2
            X509v3 Subject Key Identifier: 
                46:C6:69:A3:0E:4A:14:1E:D5:4C:DA:52:63:17:3F:5E:36:BC:0D:E6
            X509v3 Authority Key Identifier: 
                5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        78:3b:b4:91:2a:00:4c:f0:8f:62:30:37:78:a3:84:27:07:6f:
        18:b2:de:25:dc:a0:d4:94:03:aa:86:4e:25:9f:9a:40:03:1c:
        dd:ce:e3:79:cb:21:68:06:da:b6:32:b4:6d:bf:f4:2c:26:63:
        33:e4:49:64:6d:0d:e6:c3:67:0e:f7:05:a4:35:6c:7c:89:16:
        c6:e9:b2:df:b2:e9:dd:20:c6:71:0f:cd:95:74:dc:b6:5c:de:
        bd:37:1f:43:78:e6:78:b5:cd:28:04:20:a3:aa:f1:4b:c4:88:
        29:91:0e:80:d1:11:fc:dd:5c:76:6e:4f:5e:0e:45:46:41:6e:
        0d:b0:ea:38:9a:b1:3a:da:09:71:10:fc:1c:79:b4:80:7b:ac:
        69:f4:fd:9c:b6:0c:16:2b:f1:7f:5b:09:3d:9b:5b:e2:16:ca:
        13:81:6d:00:2e:38:0d:a8:29:8f:2c:e1:b2:f4:5a:a9:01:af:
        15:9c:2c:2f:49:1b:db:22:bb:c3:fe:78:94:51:c3:86:b1:82:
        88:5d:f0:3d:b4:51:a1:79:33:2b:2e:7b:b9:dc:20:09:13:71:
        eb:6a:19:5b:cf:e8:a5:30:57:2c:89:49:3f:b9:cf:7f:c9:bf:
        3e:22:68:63:53:9a:bd:69:74:ac:c5:1d:3c:7f:92:e0:c3:bc:
        1c:d8:04:75

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:c8:97:6f:3b:1e:76:42:7f:2d:7f:26:fb:e6:1c:21
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https:\/\/www.verisign.com\/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA
        Validity
            Not Before: Jan  8 00:00:00 2016 GMT
            Not After : Feb  3 23:59:59 2017 GMT
        Subject: C=NL, ST=Overijssel, L=Hengelo, O=SurfRight B.V., CN=SurfRight B.V.
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:8b:9c:78:c7:a8:73:d8:d5:93:26:6f:f4:d8:80:
                    ec:db:4c:2f:52:7d:9f:9f:8c:1d:22:d5:e7:98:f6:
                    95:9e:af:7e:9d:a0:06:d1:87:c7:a4:13:25:14:6e:
                    07:22:97:dd:29:f4:3a:28:77:52:c7:20:c6:b5:98:
                    2b:b7:d6:6c:6e:bb:9f:de:49:24:7a:2f:46:e9:f9:
                    c5:74:89:b2:d3:82:c6:fd:69:e9:42:32:bb:cd:83:
                    d6:de:bb:36:40:50:26:30:55:74:29:03:cf:69:ab:
                    a1:16:d4:c7:61:82:55:3d:b2:9b:85:65:04:58:43:
                    2e:0e:72:a6:83:c5:74:b7:ee:fd:a5:0e:06:7d:db:
                    3d:ab:a0:e7:6c:ea:62:f3:b7:b0:91:9c:a6:a5:8c:
                    54:2a:62:cf:c2:49:22:de:bd:8d:59:de:69:6b:b6:
                    0c:87:8d:09:5f:79:78:72:9a:10:87:af:9c:2f:bc:
                    5f:b2:59:28:2d:e1:0f:05:ae:a8:59:ba:74:3d:c3:
                    16:76:48:f1:7f:4e:5f:78:de:35:01:4c:2b:04:64:
                    a0:71:d9:50:39:87:8b:21:df:bd:80:85:be:d0:57:
                    70:00:0f:48:c6:c3:b1:40:91:ce:de:46:0c:57:8c:
                    05:bf:8f:17:38:9a:b0:f3:44:a1:d8:2e:65:7e:51:
                    ff:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://sf.symcb.com/sf.crl
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://d.symcb.com/cps
                  User Notice:
                    Explicit Text: https://d.symcb.com/rpa
            X509v3 Extended Key Usage: 
                Code Signing
            Authority Information Access: 
                OCSP - URI:http://sf.symcd.com
                CA Issuers - URI:http://sf.symcb.com/sf.crt
            X509v3 Authority Key Identifier: 
                CF:99:A9:EA:7B:26:F4:4B:C9:8E:8F:D7:F0:05:26:EF:E3:D2:A7:9D
            X509v3 Subject Key Identifier: 
                21:AF:F2:0C:0F:FA:59:D3:D8:85:63:82:FA:B0:CF:EE:99:BE:D5:B3
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        bf:ad:03:11:7e:4f:b8:ea:e2:a1:fa:6a:92:0f:06:83:06:da:
        d7:a9:f4:64:2f:c3:40:61:5d:28:23:ec:de:b2:07:e9:8d:5e:
        b4:50:43:5c:29:0e:40:b2:36:5e:f2:d5:c5:61:db:ed:a4:fa:
        7b:38:23:76:91:4d:8e:23:29:7d:12:3f:3e:d4:05:5e:f6:63:
        ee:1b:3b:38:fd:11:8a:e6:d7:66:b7:b1:5c:4d:2b:bf:a4:90:
        da:90:c3:9a:a3:93:2c:72:5b:ec:a0:b7:c7:df:0a:8e:f3:f2:
        59:b5:f5:ee:dc:54:1d:b8:2d:8f:6a:db:45:73:bd:0a:c2:6c:
        dc:93:4a:39:1f:17:6f:56:4c:e9:00:6c:21:f0:9f:d3:10:9d:
        62:dc:33:44:20:92:80:5c:0d:06:ad:b7:80:46:dd:d3:f7:ae:
        c3:c8:c1:f9:c8:15:ec:68:4f:be:b0:66:78:d4:14:3b:9a:6d:
        bd:60:67:d7:3e:37:8e:36:20:b3:26:6b:98:61:fa:d9:14:04:
        f8:5e:ac:b8:67:9f:8e:89:09:0a:93:1e:40:0c:47:65:a0:e0:
        8b:ac:6c:8d:e7:e3:3b:81:3d:11:c2:79:e7:9e:f2:c6:2c:4f:
        0f:36:68:7e:6d:e2:f9:20:10:9a:e4:7e:b4:80:6f:fb:de:96:
        d1:dc:4f:7a

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
        Validity
            Not Before: Feb  8 00:00:00 2010 GMT
            Not After : Feb  7 23:59:59 2020 GMT
        Subject: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https:\/\/www.verisign.com\/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:f5:23:4b:5e:a5:d7:8a:bb:32:e9:d4:57:f7:ef:
                    e4:c7:26:7e:ad:19:98:fe:a8:9d:7d:94:f6:36:6b:
                    10:d7:75:81:30:7f:04:68:7f:cb:2b:75:1e:cd:1d:
                    08:8c:df:69:94:a7:37:a3:9c:7b:80:e0:99:e1:ee:
                    37:4d:5f:ce:3b:14:ee:86:d4:d0:f5:27:35:bc:25:
                    0b:38:a7:8c:63:9d:17:a3:08:a5:ab:b0:fb:cd:6a:
                    62:82:4c:d5:21:da:1b:d9:f1:e3:84:3b:8a:2a:4f:
                    85:5b:90:01:4f:c9:a7:76:10:7f:27:03:7c:be:ae:
                    7e:7d:c1:dd:f9:05:bc:1b:48:9c:69:e7:c0:a4:3c:
                    3c:41:00:3e:df:96:e5:c5:e4:94:71:d6:55:01:c7:
                    00:26:4a:40:3c:b5:a1:26:a9:0c:a7:6d:80:8e:90:
                    25:7b:cf:bf:3f:1c:eb:2f:96:fa:e5:87:77:c6:b5:
                    56:b2:7a:3b:54:30:53:1b:df:62:34:ff:1e:d1:f4:
                    5a:93:28:85:e5:4c:17:4e:7e:5b:fd:a4:93:99:7f:
                    df:cd:ef:a4:75:ef:ef:15:f6:47:e7:f8:19:72:d8:
                    2e:34:1a:a6:b4:a7:4c:7e:bd:bb:4f:0c:3d:57:f1:
                    30:d6:a6:36:8e:d6:80:76:d7:19:2e:a5:cd:7e:34:
                    2d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/cps
                  User Notice:
                    Explicit Text: https://www.verisign.com/rpa
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            1.3.6.1.5.5.7.1.12: 
                0_.].[0Y0W0U..image/gif0!0.0...+..............k...j.H.,{..0%.#http://logo.verisign.com/vslogo.gif
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.verisign.com/pca3-g5.crl
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, Code Signing
            X509v3 Subject Alternative Name: 
                DirName:/CN=VeriSignMPKI-2-8
            X509v3 Subject Key Identifier: 
                CF:99:A9:EA:7B:26:F4:4B:C9:8E:8F:D7:F0:05:26:EF:E3:D2:A7:9D
            X509v3 Authority Key Identifier: 
                7F:D3:65:A7:C2:DD:EC:BB:F0:30:09:F3:43:39:FA:02:AF:33:31:33
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        56:22:e6:34:a4:c4:61:cb:48:b9:01:ad:56:a8:64:0f:d9:8c:
        91:c4:bb:cc:0c:e5:ad:7a:a0:22:7f:df:47:38:4a:2d:6c:d1:
        7f:71:1a:7c:ec:70:a9:b1:f0:4f:e4:0f:0c:53:fa:15:5e:fe:
        74:98:49:24:85:81:26:1c:91:14:47:b0:4c:63:8c:bb:a1:34:
        d4:c6:45:e8:0d:85:26:73:03:d0:a9:8c:64:6d:dc:71:92:e6:
        45:05:60:15:59:51:39:fc:58:14:6b:fe:d4:a4:ed:79:6b:08:
        0c:41:72:e7:37:22:06:09:be:23:e9:3f:44:9a:1e:e9:61:9d:
        cc:b1:90:5c:fc:3d:d2:8d:ac:42:3d:65:36:d4:b4:3d:40:28:
        8f:9b:10:cf:23:26:cc:4b:20:cb:90:1f:5d:8c:4c:34:ca:3c:
        d8:e5:37:d6:6f:a5:20:bd:34:eb:26:d9:ae:0d:e7:c5:9a:f7:
        a1:b4:21:91:33:6f:86:e8:58:bb:25:7c:74:0e:58:fe:75:1b:
        63:3f:ce:31:7c:9b:8f:1b:96:9e:c5:53:76:84:5b:9c:ad:91:
        fa:ac:ed:93:ba:5d:c8:21:53:c2:82:53:63:af:12:0d:50:87:
        11:1b:3d:54:52:96:8a:2c:9c:3d:92:1a:08:9a:05:2e:c7:93:
        a5:48:91:d3

pkcs7-signedData

SHA1: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15
- :

SHA1

11 0d 21 72 fb aa 8c be 2c c2 fd ff cf 6e 07 64 |..!r....,....n.d| 56 a0 cc aa |V... |

Certificates
- Certificate #0
  - 2
    - 7E:93:EB:FB:7C:C6:4E:59:EA:4B:9A:77:D4:06:FC:3B
    - RSA-SHA1: nil
    - Issuer
      - C: ZA
      - ST: Western Cape
      - L: Durbanville
      - O: Thawte
      - OU: Thawte Certification
      - CN: Thawte Timestamping CA
    - 2012-12-21 00:00:00 UTC: 2020-12-30 23:59:59 UTC
    - Subject
      - C: US
      - O: Symantec Corporation
      - CN: Symantec Time Stamping Services CA - G2
    - #5
      - rsaEncryption: nil
      - B1:AC:B3:49:54:4B:97:1C:12:0A:D8:25:79:91:22:57:
        2A:6F:DC:B8:26:C4:43:73:6B:C2:BF:2E:50:5A:FB:14:
        C2:76:8E:43:01:25:43:B4:A1:E2:45:F4:E8:B7:7B:C3:
        74:CC:22:D7:B4:94:00:02:F7:4D:ED:BF:B4:B7:44:24:
        6B:CD:5F:45:3B:D1:44:CE:43:12:73:17:82:8B:69:B4:
        2B:CB:99:1E:AC:72:1B:26:4D:71:1F:B1:31:DD:FB:51:
        61:02:53:A6:AA:F5:49:2C:05:78:45:A5:2F:89:CE:E7:
        99:E7:FE:8C:E2:57:3F:3D:C6:92:DC:4A:F8:7B:33:E4:
        79:0A:FB:F0:75:88:41:9C:FF:C5:03:51:99:AA:D7:6C:
        9F:93:69:87:65:29:83:85:C2:60:14:C4:C8:C9:3B:14:
        DA:C0:81:F0:1F:0D:74:DE:92:22:AB:CA:F7:FB:74:7C:
        27:E6:F7:4A:1B:7F:A7:C3:9E:2D:AE:8A:EA:A6:E6:AA:
        27:16:7D:61:F7:98:71:11:BC:E2:50:A1:4B:E5:5D:FA:
        E5:0E:A7:2C:9F:AA:65:20:D3:D8:96:E8:C8:7C:A5:4E:
        48:44:FF:19:E2:44:07:92:0B:D7:68:84:80:5D:6A:78:
        64:45:CD:60:46:7E:54:C1:13:7C:C5:79:F1:C9:C1:71: 0x010001
    - #6
      - subjectKeyIdentifier:
        5f 9a f5 6e 5c cc cc 74 9a d4 dd 7d ef 3f db ec |_..n\..t...}.?..| 4c 80 2e dd |L... |
      - authorityInfoAccess
        OCSP: http://ocsp.thawte.com
      - basicConstraints
        true
        true: 0
      - crlDistributionPoints: http://crl.thawte.com/ThawteTimestampingCA.crl
      - extendedKeyUsage: timeStamping
      - keyUsage: true, 6
      - subjectAltName
        CN: TimeStamp-2048-1
  - RSA-SHA1:
```
03 09 9b 8f 79 ef 7f 59  30 aa ef 68 b5 fa e3 09  |....y..Y0..h....|
1d bb 4f 82 06 5d 37 5f  a6 52 9f 16 8d ea 1c 92  |..O..]7_.R......|
09 44 6e f5 6d eb 58 7c  30 e8 f9 69 8d 23 73 0b  |.Dn.m.X|0..i.#s.|
12 6f 47 a9 ae 39 11 f8  2a b1 9b b0 1a c3 8e eb  |.oG..9..*.......|
59 96 00 ad ce 0c 4d b2  d0 31 a6 08 5c 2a 7a fc  |Y.....M..1..\*z.|
e2 7a 1d 57 4c a8 65 18  e9 79 40 62 25 96 6e c7  |.z.WL.e..y@b%.n.|
c7 37 6a 83 21 08 8e 41  ea dd d9 57 3f 1d 77 49  |.7j.!..A...W?.wI|
87 2a 16 06 5e a6 38 6a  22 12 a3 51 19 83 7e b6  |.*..^.8j"..Q..~.|
```
- Certificate #1
  - 2
    - 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - O: Symantec Corporation
      - CN: Symantec Time Stamping Services CA - G2
    - 2012-10-18 00:00:00 UTC: 2020-12-29 23:59:59 UTC
    - Subject
      - C: US
      - O: Symantec Corporation
      - CN: Symantec Time Stamping Services Signer - G4
    - #5
      - rsaEncryption: nil
      - A2:63:0B:39:44:B8:BB:23:A7:44:49:BB:0E:FF:A1:F0:
        61:0A:53:93:B0:98:DB:AD:2C:0F:4A:C5:6E:FF:86:3C:
        53:55:0F:15:CE:04:3F:2B:FD:A9:96:96:D9:BE:61:79:
        0B:5B:C9:4C:86:76:E5:E0:43:4B:22:95:EE:C2:2B:43:
        C1:9F:D8:68:B4:8E:40:4F:EE:85:38:B9:11:C5:23:F2:
        64:58:F0:15:32:6F:4E:57:A1:AE:88:A4:02:D7:2A:1E:
        CD:4B:E1:DD:63:D5:17:89:32:5B:B0:5E:99:5A:A8:9D:
        28:50:0E:17:EE:96:DB:61:3B:45:51:1D:CF:12:56:0B:
        92:47:FC:AB:AE:F6:66:3D:47:AC:70:72:E7:92:E7:5F:
        CD:10:B9:C4:83:64:94:19:BD:25:80:E1:E8:D2:22:A5:
        D0:BA:02:7A:A1:77:93:5B:65:C3:EE:17:74:BC:41:86:
        2A:DC:08:4C:8C:92:8C:91:2D:9E:77:44:1F:68:D6:A8:
        74:77:DB:0E:5B:32:8B:56:8B:33:BD:D9:63:C8:49:9D:
        3A:C5:C5:EA:33:0B:D2:F1:A3:1B:F4:8B:BE:D9:B3:57:
        8B:3B:DE:04:A7:7A:22:B2:24:AE:2E:C7:70:C5:BE:4E:
        83:26:08:FB:0B:BD:A9:4F:99:08:E1:10:28:72:AA:CD: 0x010001
    - X509v3 extensions
      - basicConstraints
        true
        nil
      - extendedKeyUsage: true, timeStamping
      - keyUsage: true, 0x80
      - authorityInfoAccess
        #0
        OCSP: http://ts-ocsp.ws.symantec.com
        caIssuers: http://ts-aia.ws.symantec.com/tss-ca-g2.cer
      - crlDistributionPoints: http://ts-crl.ws.symantec.com/tss-ca-g2.crl
      - subjectAltName
        CN: TimeStamp-2048-2
      - subjectKeyIdentifier:
        46 c6 69 a3 0e 4a 14 1e d5 4c da 52 63 17 3f 5e |F.i..J...L.Rc.?^| 36 bc 0d e6 |6... |
      - authorityKeyIdentifier:
        5f 9a f5 6e 5c cc cc 74 9a d4 dd 7d ef 3f db ec |_..n\..t...}.?..| 4c 80 2e dd |L... |
  - RSA-SHA1:
```
78 3b b4 91 2a 00 4c f0  8f 62 30 37 78 a3 84 27  |x;..*.L..b07x..'|
07 6f 18 b2 de 25 dc a0  d4 94 03 aa 86 4e 25 9f  |.o...%.......N%.|
9a 40 03 1c dd ce e3 79  cb 21 68 06 da b6 32 b4  |.@.....y.!h...2.|
6d bf f4 2c 26 63 33 e4  49 64 6d 0d e6 c3 67 0e  |m..,&c3.Idm...g.|
f7 05 a4 35 6c 7c 89 16  c6 e9 b2 df b2 e9 dd 20  |...5l|......... |
c6 71 0f cd 95 74 dc b6  5c de bd 37 1f 43 78 e6  |.q...t..\..7.Cx.|
78 b5 cd 28 04 20 a3 aa  f1 4b c4 88 29 91 0e 80  |x..(. ...K..)...|
d1 11 fc dd 5c 76 6e 4f  5e 0e 45 46 41 6e 0d b0  |....\vnO^.EFAn..|
ea 38 9a b1 3a da 09 71  10 fc 1c 79 b4 80 7b ac  |.8..:..q...y..{.|
69 f4 fd 9c b6 0c 16 2b  f1 7f 5b 09 3d 9b 5b e2  |i......+..[.=.[.|
16 ca 13 81 6d 00 2e 38  0d a8 29 8f 2c e1 b2 f4  |....m..8..).,...|
5a a9 01 af 15 9c 2c 2f  49 1b db 22 bb c3 fe 78  |Z.....,/I.."...x|
94 51 c3 86 b1 82 88 5d  f0 3d b4 51 a1 79 33 2b  |.Q.....].=.Q.y3+|
2e 7b b9 dc 20 09 13 71  eb 6a 19 5b cf e8 a5 30  |.{.. ..q.j.[...0|
57 2c 89 49 3f b9 cf 7f  c9 bf 3e 22 68 63 53 9a  |W,.I?.....>"hcS.|
bd 69 74 ac c5 1d 3c 7f  92 e0 c3 bc 1c d8 04 75  |.it...<........u|
```
- Certificate #2
  - 2
    - 62:C8:97:6F:3B:1E:76:42:7F:2D:7F:26:FB:E6:1C:21
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - O: VeriSign, Inc.
      - OU: VeriSign Trust Network
      - OU: Terms of use at https://www.verisign.com/rpa (c)10
      - CN: VeriSign Class 3 Code Signing 2010 CA
    - 2016-01-08 00:00:00 UTC: 2017-02-03 23:59:59 UTC
    - Subject
      - C: NL
      - ST: Overijssel
      - L: Hengelo
      - O: SurfRight B.V.
      - CN: SurfRight B.V.
    - #5
      - rsaEncryption: nil
      - 8B:9C:78:C7:A8:73:D8:D5:93:26:6F:F4:D8:80:EC:DB:
        4C:2F:52:7D:9F:9F:8C:1D:22:D5:E7:98:F6:95:9E:AF:
        7E:9D:A0:06:D1:87:C7:A4:13:25:14:6E:07:22:97:DD:
        29:F4:3A:28:77:52:C7:20:C6:B5:98:2B:B7:D6:6C:6E:
        BB:9F:DE:49:24:7A:2F:46:E9:F9:C5:74:89:B2:D3:82:
        C6:FD:69:E9:42:32:BB:CD:83:D6:DE:BB:36:40:50:26:
        30:55:74:29:03:CF:69:AB:A1:16:D4:C7:61:82:55:3D:
        B2:9B:85:65:04:58:43:2E:0E:72:A6:83:C5:74:B7:EE:
        FD:A5:0E:06:7D:DB:3D:AB:A0:E7:6C:EA:62:F3:B7:B0:
        91:9C:A6:A5:8C:54:2A:62:CF:C2:49:22:DE:BD:8D:59:
        DE:69:6B:B6:0C:87:8D:09:5F:79:78:72:9A:10:87:AF:
        9C:2F:BC:5F:B2:59:28:2D:E1:0F:05:AE:A8:59:BA:74:
        3D:C3:16:76:48:F1:7F:4E:5F:78:DE:35:01:4C:2B:04:
        64:A0:71:D9:50:39:87:8B:21:DF:BD:80:85:BE:D0:57:
        70:00:0F:48:C6:C3:B1:40:91:CE:DE:46:0C:57:8C:05:
        BF:8F:17:38:9A:B0:F3:44:A1:D8:2E:65:7E:51:FF:D3: 0x010001
    - X509v3 extensions
      - basicConstraints
        nil
      - keyUsage: true, 0x80
      - crlDistributionPoints: http://sf.symcb.com/sf.crl
      - certificatePolicies
        2.16.840.1.113733.1.7.23.3
        #0
        id-qt-cps: https://d.symcb.com/cps
        id-qt-unotice: https://d.symcb.com/rpa
      - extendedKeyUsage: codeSigning
      - authorityInfoAccess
        #0
        OCSP: http://sf.symcd.com
        caIssuers: http://sf.symcb.com/sf.crt
      - authorityKeyIdentifier:
        cf 99 a9 ea 7b 26 f4 4b c9 8e 8f d7 f0 05 26 ef |....{&.K......&.| e3 d2 a7 9d |.... |
      - subjectKeyIdentifier:
        21 af f2 0c 0f fa 59 d3 d8 85 63 82 fa b0 cf ee |!.....Y...c.....| 99 be d5 b3 |.... |
  - RSA-SHA1:
```
bf ad 03 11 7e 4f b8 ea  e2 a1 fa 6a 92 0f 06 83  |....~O.....j....|
06 da d7 a9 f4 64 2f c3  40 61 5d 28 23 ec de b2  |.....d/.@a](#...|
07 e9 8d 5e b4 50 43 5c  29 0e 40 b2 36 5e f2 d5  |...^.PC\).@.6^..|
c5 61 db ed a4 fa 7b 38  23 76 91 4d 8e 23 29 7d  |.a....{8#v.M.#)}|
12 3f 3e d4 05 5e f6 63  ee 1b 3b 38 fd 11 8a e6  |.?>..^.c..;8....|
d7 66 b7 b1 5c 4d 2b bf  a4 90 da 90 c3 9a a3 93  |.f..\M+.........|
2c 72 5b ec a0 b7 c7 df  0a 8e f3 f2 59 b5 f5 ee  |,r[.........Y...|
dc 54 1d b8 2d 8f 6a db  45 73 bd 0a c2 6c dc 93  |.T..-.j.Es...l..|
4a 39 1f 17 6f 56 4c e9  00 6c 21 f0 9f d3 10 9d  |J9..oVL..l!.....|
62 dc 33 44 20 92 80 5c  0d 06 ad b7 80 46 dd d3  |b.3D ..\.....F..|
f7 ae c3 c8 c1 f9 c8 15  ec 68 4f be b0 66 78 d4  |.........hO..fx.|
14 3b 9a 6d bd 60 67 d7  3e 37 8e 36 20 b3 26 6b  |.;.m.`g.>7.6 .&k|
98 61 fa d9 14 04 f8 5e  ac b8 67 9f 8e 89 09 0a  |.a.....^..g.....|
93 1e 40 0c 47 65 a0 e0  8b ac 6c 8d e7 e3 3b 81  |..@.Ge....l...;.|
3d 11 c2 79 e7 9e f2 c6  2c 4f 0f 36 68 7e 6d e2  |=..y....,O.6h~m.|
f9 20 10 9a e4 7e b4 80  6f fb de 96 d1 dc 4f 7a  |. ...~..o.....Oz|
```
- Certificate #3
  - 2
    - 52:00:E5:AA:25:56:FC:1A:86:ED:96:C9:D4:4B:33:C7
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - O: VeriSign, Inc.
      - OU: VeriSign Trust Network
      - OU: (c) 2006 VeriSign, Inc. - For authorized use only
      - CN: VeriSign Class 3 Public Primary Certification Authority - G5
    - 2010-02-08 00:00:00 UTC: 2020-02-07 23:59:59 UTC
    - Subject
      - C: US
      - O: VeriSign, Inc.
      - OU: VeriSign Trust Network
      - OU: Terms of use at https://www.verisign.com/rpa (c)10
      - CN: VeriSign Class 3 Code Signing 2010 CA
    - #5
      - rsaEncryption: nil
      - F5:23:4B:5E:A5:D7:8A:BB:32:E9:D4:57:F7:EF:E4:C7:
        26:7E:AD:19:98:FE:A8:9D:7D:94:F6:36:6B:10:D7:75:
        81:30:7F:04:68:7F:CB:2B:75:1E:CD:1D:08:8C:DF:69:
        94:A7:37:A3:9C:7B:80:E0:99:E1:EE:37:4D:5F:CE:3B:
        14:EE:86:D4:D0:F5:27:35:BC:25:0B:38:A7:8C:63:9D:
        17:A3:08:A5:AB:B0:FB:CD:6A:62:82:4C:D5:21:DA:1B:
        D9:F1:E3:84:3B:8A:2A:4F:85:5B:90:01:4F:C9:A7:76:
        10:7F:27:03:7C:BE:AE:7E:7D:C1:DD:F9:05:BC:1B:48:
        9C:69:E7:C0:A4:3C:3C:41:00:3E:DF:96:E5:C5:E4:94:
        71:D6:55:01:C7:00:26:4A:40:3C:B5:A1:26:A9:0C:A7:
        6D:80:8E:90:25:7B:CF:BF:3F:1C:EB:2F:96:FA:E5:87:
        77:C6:B5:56:B2:7A:3B:54:30:53:1B:DF:62:34:FF:1E:
        D1:F4:5A:93:28:85:E5:4C:17:4E:7E:5B:FD:A4:93:99:
        7F:DF:CD:EF:A4:75:EF:EF:15:F6:47:E7:F8:19:72:D8:
        2E:34:1A:A6:B4:A7:4C:7E:BD:BB:4F:0C:3D:57:F1:30:
        D6:A6:36:8E:D6:80:76:D7:19:2E:A5:CD:7E:34:2D:89: 0x010001
    - X509v3 extensions
      - basicConstraints
        true
        true: 0
      - certificatePolicies
        2.16.840.1.113733.1.7.23.3
        #0
        id-qt-cps: https://www.verisign.com/cps
        id-qt-unotice: https://www.verisign.com/rpa
      - keyUsage: true, 6
      - 1.3.6.1.5.5.7.1.12
        image/gif
        SHA1:
        8f e5 d3 1a 86 ac 8d 8e 6b c3 cf 80 6a d4 48 18 |........k...j.H.| 2c 7b 19 2e |,{.. |
        http://logo.verisign.com/vslogo.gif
      - crlDistributionPoints: http://crl.verisign.com/pca3-g5.crl
      - authorityInfoAccess
        OCSP: http://ocsp.verisign.com
      - extendedKeyUsage
        clientAuth: codeSigning
      - subjectAltName
        CN: VeriSignMPKI-2-8
      - subjectKeyIdentifier:
        cf 99 a9 ea 7b 26 f4 4b c9 8e 8f d7 f0 05 26 ef |....{&.K......&.| e3 d2 a7 9d |.... |
      - authorityKeyIdentifier:
        7f d3 65 a7 c2 dd ec bb f0 30 09 f3 43 39 fa 02 |..e......0..C9..| af 33 31 33 |.313 |
  - RSA-SHA1:
```
56 22 e6 34 a4 c4 61 cb  48 b9 01 ad 56 a8 64 0f  |V".4..a.H...V.d.|
d9 8c 91 c4 bb cc 0c e5  ad 7a a0 22 7f df 47 38  |.........z."..G8|
4a 2d 6c d1 7f 71 1a 7c  ec 70 a9 b1 f0 4f e4 0f  |J-l..q.|.p...O..|
0c 53 fa 15 5e fe 74 98  49 24 85 81 26 1c 91 14  |.S..^.t.I$..&...|
47 b0 4c 63 8c bb a1 34  d4 c6 45 e8 0d 85 26 73  |G.Lc...4..E...&s|
03 d0 a9 8c 64 6d dc 71  92 e6 45 05 60 15 59 51  |....dm.q..E.`.YQ|
39 fc 58 14 6b fe d4 a4  ed 79 6b 08 0c 41 72 e7  |9.X.k....yk..Ar.|
37 22 06 09 be 23 e9 3f  44 9a 1e e9 61 9d cc b1  |7"...#.?D...a...|
90 5c fc 3d d2 8d ac 42  3d 65 36 d4 b4 3d 40 28  |.\.=...B=e6..=@(|
8f 9b 10 cf 23 26 cc 4b  20 cb 90 1f 5d 8c 4c 34  |....#&.K ...].L4|
ca 3c d8 e5 37 d6 6f a5  20 bd 34 eb 26 d9 ae 0d  |.<..7.o. .4.&...|
e7 c5 9a f7 a1 b4 21 91  33 6f 86 e8 58 bb 25 7c  |......!.3o..X.%||
74 0e 58 fe 75 1b 63 3f  ce 31 7c 9b 8f 1b 96 9e  |t.X.u.c?.1|.....|
c5 53 76 84 5b 9c ad 91  fa ac ed 93 ba 5d c8 21  |.Sv.[........].!|
53 c2 82 53 63 af 12 0d  50 87 11 1b 3d 54 52 96  |S..Sc...P...=TR.|
8a 2c 9c 3d 92 1a 08 9a  05 2e c7 93 a5 48 91 d3  |.,.=.........H..|
```

Signer

1
unnamed
- #0
  - C: US
  - O: VeriSign, Inc.
  - OU: VeriSign Trust Network
  - OU: Terms of use at https://www.verisign.com/rpa (c)10
  - CN: VeriSign Class 3 Code Signing 2010 CA
- 62:C8:97:6F:3B:1E:76:42:7F:2D:7F:26:FB:E6:1C:21
SHA1: nil

contentType: 1.3.6.1.4.1.311.2.1.4
1.3.6.1.4.1.311.2.1.11: msCodeInd

messageDigest:

39 3e 19 9e f0 7e 8d bc  a8 6d 3a 7f e2 b2 f2 51  |9>...~...m:....Q|
a4 2b d1 47                                       |.+.G            |

1.3.6.1.4.1.311.2.1.12

00 48 00 69 00 74 00 6d 00 61 00 6e 00 50 00 72 |.H.i.t.m.a.n.P.r| 00 6f 00 2e 00 41 00 6c 00 65 00 72 00 74 |.o...A.l.e.r.t |
: http://www.hitmanpro.com/alert

rsaEncryption:

80 ed 66 e4 f3 cc c8 19  66 11 29 01 5f 4d 68 21  |..f.....f.)._Mh!|
5c 71 43 17 34 1d ff 21  8b 86 e7 75 04 a3 fb 4e  |\qC.4..!...u...N|
90 64 b8 50 a6 58 77 1c  5d 46 d4 d3 5d 50 82 4b  |.d.P.Xw.]F..]P.K|
fa 8e 72 c5 5b bf 98 83  a0 1b af 81 b4 c0 0e 91  |..r.[...........|
fa dd af 3a b3 6d a8 80  d1 ce b4 ad 47 87 7e ed  |...:.m......G.~.|
83 08 5f b0 c0 2d 51 ac  85 97 be 74 79 f5 2a 47  |.._..-Q....ty.*G|
6c 2b 23 03 47 3f 22 b1  ff 84 c0 99 62 fa ce c9  |l+#.G?".....b...|
4a 48 a6 a8 5a 5c 53 1b  16 24 1b 6d fe 11 f5 07  |JH..Z\S..$.m....|
bb 0f 3d 42 ee fd 32 09  59 03 d1 86 94 0d a6 f9  |..=B..2.Y.......|
c9 c8 d2 8d 67 5c 92 77  5f d0 41 86 09 9d b2 fc  |....g\.w_.A.....|
0d d0 aa 91 97 26 ca 94  3d 0a 79 5f 5f 6e fd fd  |.....&..=.y__n..|
03 12 9c 59 a8 07 dd ca  61 ae 9a bb 8e aa 3c 16  |...Y....a.....<.|
f4 80 d1 e0 d5 77 a1 c6  76 1d 79 69 66 5e 47 70  |.....w..v.yif^Gp|
cd 60 51 18 7b 1f 42 4b  60 03 d9 69 b6 42 5d de  |.`Q.{.BK`..i.B].|
f3 93 cc 34 13 9e 8c 39  4e c8 0a 8f 8c b4 fb c8  |...4...9N.......|
f1 95 c9 0a 5b ca d6 13  0a 1f 9e a8 e1 53 bc 3d  |....[........S.=|

countersignature

unnamed
- #0
  - C: US
  - O: Symantec Corporation
  - CN: Symantec Time Stamping Services CA - G2
- 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
SHA1: nil

contentType: pkcs7-data
signingTime: 2016-02-24 15:18:16 UTC

messageDigest:

cf 8b 6c dc 07 bc 26 df  a9 34 38 29 97 dc 84 d1  |..l...&..48)....|
05 0b 3c 73                                       |..

rsaEncryption:
06 36 97 3b 13 7b b1 1c 80 be b4 a4 f6 39 1d 4f |.6.;.{.......9.O| e5 6e 9d 00 28 4e d2 4f 0f 99 35 4e 6b b1 d0 e1 |.n..(N.O..5Nk...| 1f 45 b5 66 3b 86 d4 60 3d de ba ea e8 6c a0 4e |.E.f;..`=....l.N| 7c 0b 5e 34 e5 d8 6f a0 4b e9 d4 bb b4 e5 f7 99 ||.^4..o.K.......| ae 02 a7 f6 5b 4d 1d 2e 71 c7 79 01 1c e4 1e 4f |....[M..q.y....O| 4d 42 40 61 86 de 1d c5 46 21 d2 6f 67 7f bd 38 |MB@a....F!.og..8| 30 d9 40 87 30 8f 8b 6e f1 78 40 35 48 cd ad 1d |0.@.0..n.x@5H...| 10 bc 5d 6a 3f 7d 68 5f d1 e6 0c 80 21 d3 b3 b5 |..]j?}h_....!...| 14 7a 66 f0 8a db 4a 66 95 55 2a 23 91 fe 4b 35 |.zf...Jf.U*#..K5| 24 a4 3a 0b 19 75 9a 07 57 4b c9 d7 9f 79 8e d8 |$.:..u..WK...y..| 88 df b7 d0 6b 4c 60 c6 02 41 87 b9 8e 58 05 5a |....kL`..A...X.Z| 41 c5 b0 23 2f 35 4d 0a e2 ae d9 62 16 32 df f2 |A..#/5M....b.2..| 32 1b 34 76 ce 6a 08 f8 3e 36 3f df 34 53 59 b3 |2.4v.j..>6?.4SY.| 83 32 a1 80 a8 7b 24 bf 54 aa f3 27 c0 b5 cd 17 |.2...{$.T..'....| f2 10 65 9b 80 bd 19 1c 53 91 ab 53 55 18 bb c5 |..e.....S..SU...| b4 d5 8d 4e 4f 3a 56 66 cb a4 49 7b 10 0c f6 72 |...NO:Vf..I{...r|

1.3.6.1.4.1.311.2.4.1
pkcs7-signedData
1
SHA256: nil
1.3.6.1.4.1.311.2.1.4
#0
1.3.6.1.4.1.311.2.1.15
:
SHA256
72 9b 0e b3 fc 59 e1 85 9e f5 05 59 77 cc 2a a2 |r....Y.....Yw.*.| ea f7 6a bc 9d a4 36 a6 8c 47 2c bf 2c 5a ec cb |..j...6..G,.,Z..|
Certificates
Certificate #0
2
46:69:73:93:C4:D5:6D:14:BD:CD:9C:E2:99:20:C6:E1
RSA-SHA256: nil
Issuer
C: US
O: Symantec Corporation
OU: Symantec Trust Network
CN: Symantec Class 3 SHA256 Code Signing CA
2016-01-05 00:00:00 UTC: 2017-02-03 23:59:59 UTC
Subject
C: NL
ST: Overijssel
L: Hengelo
O: SurfRight B.V.
CN: SurfRight B.V.
#5
rsaEncryption: nil
AE:ED:6F:B6:7C:AC:FD:2F:54:A3:9C:19:AD:87:D4:2D:
4E:52:AD:0D:A8:DF:25:27:8A:03:59:09:2C:B5:73:9D:
E0:52:C0:30:A3:D2:C9:15:74:86:AF:FF:3D:41:15:0F:
82:69:28:04:3F:06:39:89:D6:DC:DB:B3:84:6A:96:F5:
8F:20:57:55:3D:EA:1B:5F:D5:D8:30:A5:15:DB:AC:3F:
80:1E:DA:06:7E:B0:F0:AB:1D:7D:6D:05:6A:30:4B:D6:
F9:6A:86:B2:FC:15:D3:7B:9A:9E:E3:BE:1D:C8:1E:A0:
8D:7E:08:E4:6A:3F:DA:B3:AD:E8:DC:27:76:AD:C2:B6:
40:6C:02:01:70:3F:A0:E0:98:60:A1:A5:85:A8:A1:89:
46:AF:99:1D:E2:28:29:BF:65:56:30:C8:B0:3C:EF:93:
AB:D4:5D:0B:6C:46:E6:E0:53:FC:AC:20:BB:58:CF:E4:
BE:2A:94:28:3E:5A:5B:F8:53:E6:12:A7:50:5D:DB:B0:
05:74:B1:F3:30:E4:02:FA:A4:71:F4:60:4E:8B:5E:79:
D4:75:80:96:21:12:0E:B0:53:DF:27:94:49:F0:D7:56:
BD:7F:F4:97:12:82:79:53:85:52:07:F1:C7:00:3D:F2:
C0:9E:48:EB:6D:D8:0F:E1:E3:E9:D4:35:C0:91:25:D1: 0x010001
X509v3 extensions
basicConstraints
nil
keyUsage: true, 0x80
crlDistributionPoints: http://sv.symcb.com/sv.crl
certificatePolicies
2.16.840.1.113733.1.7.23.3
#0
id-qt-cps: https://d.symcb.com/cps
id-qt-unotice: https://d.symcb.com/rpa
extendedKeyUsage: codeSigning
authorityInfoAccess
#0
OCSP: http://sv.symcd.com
caIssuers: http://sv.symcb.com/sv.crt
authorityKeyIdentifier:
96 3b 53 f0 79 33 97 af 7d 83 ef 2e 2b cc ca b7 |.;S.y3..}...+...| 86 1e 72 66 |..rf |
subjectKeyIdentifier:
da 20 08 94 72 57 f7 9d ed 4a ec 7d 74 e0 37 d6 |. ..rW...J.}t.7.| f1 0f eb 46 |...F |
RSA-SHA256:
6e b9 9b 6d 5e 53 c3 59 17 e4 ba b9 da 80 b7 99 |n..m^S.Y........| 7d a4 80 69 91 9a ab f4 05 a5 7a ae d7 46 8d a5 |}..i......z..F..| c8 49 56 7e a2 e2 36 9e e0 f9 9f c1 56 8c d9 8d |.IV~..6.....V...| 20 05 3d 73 4d c1 10 f8 f9 05 05 df aa 9c c6 b6 | .=sM...........| 08 1e 53 43 eb 54 c0 67 e7 f2 dc 6b 61 23 96 fd |..SC.T.g...ka#..| ee d2 f5 42 0d 58 bc e8 ba 8c 03 13 06 31 19 31 |...B.X.......1.1| 50 0a 60 b4 a4 a3 4c 10 02 eb c0 b6 30 58 83 ce |P.`...L.....0X..| 11 5b c0 67 34 b8 79 0f c9 fc e9 1b e7 f8 13 fa |.[.g4.y.........| 14 64 37 8c f3 58 6c a1 49 39 b6 78 ae d9 f3 f4 |.d7..Xl.I9.x....| a4 09 d3 4d e1 77 dd 40 87 d8 a1 8e 01 cd 0f 79 |...M.w.@.......y| 30 b7 2c fe 08 76 d0 6b 0c ee 6e 3a 88 1a 9b 02 |0.,..v.k..n:....| 89 91 31 12 07 0c a4 83 d3 5b a5 0a c6 ae 5d 61 |..1......[....]a| c7 55 c4 f0 3d 5f 49 18 b2 50 4b eb 4d 25 e3 2f |.U..=_I..PK.M%./| 5c c8 b3 e1 d9 43 a9 ac aa 6f f0 38 74 98 71 4c |\....C...o.8t.qL| 1c e7 c1 fd 0e 42 ee 3a 7b da 76 83 b6 d8 7d d5 |.....B.:{.v...}.| 2b 7e fd e1 14 52 cd 3a 75 ce 63 95 44 f8 72 03 |+~...R.:u.c.D.r.|
Certificate #1
2
3D:78:D7:F9:76:49:60:B2:61:7D:F4:F0:1E:CA:86:2A
RSA-SHA256: nil
Issuer
C: US
O: VeriSign, Inc.
OU: VeriSign Trust Network
OU: (c) 2006 VeriSign, Inc. - For authorized use only
CN: VeriSign Class 3 Public Primary Certification Authority - G5
2013-12-10 00:00:00 UTC: 2023-12-09 23:59:59 UTC
Subject
C: US
O: Symantec Corporation
OU: Symantec Trust Network
CN: Symantec Class 3 SHA256 Code Signing CA
#5
rsaEncryption: nil
97:83:1E:00:16:AF:2C:B1:D2:08:C4:D7:68:93:51:60:
1E:71:F6:E2:47:B4:DB:58:4D:23:62:6A:B4:BF:5A:1B:
51:F7:A3:0D:18:77:68:BB:D8:36:AB:2F:21:50:DA:9E:
F3:E7:5F:27:4E:0B:C2:97:C8:09:70:93:A9:DA:5C:0D:
4E:A4:0D:91:A0:B4:EC:14:CE:91:72:54:2E:CE:A3:DB:
44:E9:52:1B:3F:41:3C:CA:4A:E4:AA:C0:E8:39:AB:53:
CC:21:D0:CC:CF:7F:9B:E6:C2:CC:58:6A:82:15:EE:3D:
36:CF:1C:C5:97:07:24:8E:F1:7B:BE:31:2D:3D:6E:DC:
B5:99:42:9F:4B:61:95:5F:1C:70:EE:17:7D:DB:8B:E5:
61:89:78:C7:68:1B:AF:11:78:1A:98:AE:C4:55:47:53:
D9:B3:32:D6:A1:0E:46:40:C5:97:92:8A:D1:53:A7:99:
5B:85:35:57:D3:EA:93:62:61:20:0A:C7:30:77:24:11:
4D:62:83:B6:BA:7B:68:82:31:EE:65:CA:DF:F9:D5:8D:
B2:35:DC:8C:2B:6F:6A:72:5C:60:84:9C:F2:0C:94:5E:
C0:56:52:00:48:CC:D3:F8:A5:7D:DE:2F:D7:13:E4:38:
A8:84:D5:46:B8:13:86:C2:1B:9D:EA:5A:38:DD:9B:DB: 0x010001
X509v3 extensions
authorityInfoAccess
OCSP: http://s2.symcb.com
basicConstraints
true
true: 0
certificatePolicies
2.16.840.1.113733.1.7.23.3
#0
id-qt-cps: http://www.symauth.com/cps
id-qt-unotice: http://www.symauth.com/rpa
crlDistributionPoints: http://s1.symcb.com/pca3-g5.crl
extendedKeyUsage
clientAuth: codeSigning
keyUsage: true, 6
subjectAltName
CN: SymantecPKI-1-567
subjectKeyIdentifier:
96 3b 53 f0 79 33 97 af 7d 83 ef 2e 2b cc ca b7 |.;S.y3..}...+...| 86 1e 72 66 |..rf |
authorityKeyIdentifier:
7f d3 65 a7 c2 dd ec bb f0 30 09 f3 43 39 fa 02 |..e......0..C9..| af 33 31 33 |.313 |
RSA-SHA256:
13 85 1a 1e 69 a9 37 f7 a0 bd a4 af 7e 1d 61 53 |....i.7.....~.aS| fe 9d 8c 5e 0c a6 75 1e 78 17 23 dd fd ec 1a 03 |...^..u.x.#.....| 55 39 fb 71 95 c7 65 5a a7 8e 30 d2 44 5a 61 db |U9.q..eZ..0.DZa.| 70 6f da 21 05 c2 2e 73 ba 49 f1 d1 93 fe 5d c9 |po.!...s.I....].| cd 5e 03 e0 89 9e 3f 74 1e d7 f7 38 8b a9 d6 cf |.^....?t...8....| bb 35 2f 33 58 a8 92 56 d1 c8 4d 3b 82 e6 79 84 |.5/3X..V..M;..y.| 16 fc 28 b0 b1 47 f3 1d a2 3e ee 87 d9 a6 7f a4 |..(..G...>......| 56 a5 3f ad 84 2e 29 de 7c bc a8 aa a3 3d 04 01 |V.?...).|....=..| ea ba 93 a2 0e 50 22 29 17 4c 87 e4 3a 11 5f d6 |.....P").L..:._.| a4 25 89 9b 05 6b 2f b4 c9 01 4c 27 7b 0b ac 19 |.%...k/...L'{...| 05 22 a0 60 15 3f da c9 fb 4d 4c 8f fb 72 67 77 |.".`.?...ML..rgw| fd 27 94 c7 ba 35 0e 88 49 fe 8d fd 28 af 4a 12 |.'...5..I...(.J.| bd 0d b3 97 05 de 44 0c 15 fa 36 2b 03 dc c1 50 |......D...6+...P| 01 f1 a1 11 5d 14 e5 e2 bd 27 4b 54 be 2b 84 5e |....]....'KT.+.^| 0f a6 c3 74 05 0a ef 97 c3 89 22 b1 1f 77 f3 bd |...t......"..w..| cd 43 d4 f1 4c a9 3f b5 8b 84 af 64 f2 d0 14 21 |.C..L.?....d...!|
Signer
1
unnamed
#0
C: US
O: Symantec Corporation
OU: Symantec Trust Network
CN: Symantec Class 3 SHA256 Code Signing CA
46:69:73:93:C4:D5:6D:14:BD:CD:9C:E2:99:20:C6:E1
SHA256: nil
#3
1.2.840.113549.1.9.25.4: 1
contentType: 1.3.6.1.4.1.311.2.1.4
1.3.6.1.4.1.311.2.1.11: msCodeInd
messageDigest:
ad 18 e3 e1 98 8e 8e 31 8c 81 bf bc 4d ab a8 34 |.......1....M..4| 3f 04 ec d4 50 7d 9b 3d a3 ae 2e 94 64 28 82 52 |?...P}.=....d(.R|
1.3.6.1.4.1.311.2.1.12
00 48 00 69 00 74 00 6d 00 61 00 6e 00 50 00 72 |.H.i.t.m.a.n.P.r| 00 6f 00 2e 00 41 00 6c 00 65 00 72 00 74 |.o...A.l.e.r.t |
: http://www.hitmanpro.com/alert
rsaEncryption:
77 3b dd f0 aa 94 fa 5f 38 4c 74 f9 e6 0c fb f9 |w;....._8Lt.....| 55 e8 bb 4b 41 14 30 d0 ac 10 96 b6 c8 f3 ac 67 |U..KA.0........g| 27 07 32 f1 4c 0c 78 c3 66 17 b2 8a 1e 86 11 be |'.2.L.x.f.......| 9e 38 f5 fb b1 1f 0a 62 1f d2 14 89 04 42 44 1c |.8.....b.....BD.| 20 0a 9c 15 fc 96 60 7d e3 73 f0 9a 93 aa 26 2b | .....`}.s....&+| ef f4 f6 cd 0d 4e 77 4d b8 be f0 f7 2b a3 f8 ff |.....NwM....+...| 35 a9 10 01 c9 f8 a9 9f 98 fe 2e 05 71 56 60 23 |5...........qV`#| 8b 5d 95 31 fb 3d 9f f1 d8 c6 70 88 9f 59 32 df |.].1.=....p..Y2.| a5 c7 fc c5 7d fd fd 97 8e 23 cb 07 1a 14 8f 35 |....}....#.....5| c3 8b 2b 95 79 e9 47 7f d4 07 50 86 fc 88 16 59 |..+.y.G...P....Y| b9 bc 30 6f b1 ac 8d 22 fc a8 69 2e a7 b0 42 95 |..0o..."..i...B.| 08 7a 40 81 6e 09 4b 54 f4 31 d2 39 c6 41 42 3a |.z@.n.KT.1.9.AB:| ef b5 41 0c 68 77 89 1f f4 82 b7 f0 06 d7 b7 2b |..A.hw.........+| 6a d5 62 db ff bc da 4a 31 5a aa 28 a0 71 28 a2 |j.b....J1Z.(.q(.| 64 4c a6 09 42 e2 5d a1 7b fd 8e dd 35 ed 4b eb |dL..B.].{...5.K.| 74 60 6a 37 3e e9 5c 57 e3 85 24 3e 14 11 53 aa |t`j7>.\W..$>..S.|
1.3.6.1.4.1.311.3.3.1
pkcs7-signedData
3
SHA256: nil
id-smime-ct-TSTInfo
1
1.3.6.1.4.1.6449.2.1.1
SHA256
37 13 d7 cc 65 0a 60 d6 74 83 84 18 72 6b 9a 61 |7...e.`.t...rk.a| 7f 5e bb 4d f9 13 91 c5 c0 c1 09 a3 d2 14 7d 3b |.^.M..........};|
AE:53:AE:B9:FB:D5:73:C5:66:17:81:E8:16:80:A5:25:
5C:EF:49:00
2016-02-24 15:18:16 UTC
Subject
C: GB
ST: Greater Manchester
L: Salford
O: COMODO CA Limited
CN: COMODO SHA-256 Time Stamping Signer
Certificate #2
2
4E:B0:87:8F:CC:24:35:36:B2:D8:C9:F7:BF:39:55:77
RSA-SHA256: nil
Issuer
C: US
ST: UT
L: Salt Lake City
O: The USERTRUST Network
OU: http://www.usertrust.com
CN: UTN-USERFirst-Object
2015-12-31 00:00:00 UTC: 2019-07-09 18:40:36 UTC
Subject
C: GB
ST: Greater Manchester
L: Salford
O: COMODO CA Limited
CN: COMODO SHA-256 Time Stamping Signer
#5
rsaEncryption: nil
CE:BC:74:B7:70:80:4F:5E:F3:3F:98:AA:2E:CB:D4:12:
01:23:35:69:0B:22:BC:E6:FD:09:6C:28:E4:13:12:AC:
BB:BA:2D:E5:D5:DD:22:EE:73:B6:2C:F8:D2:A4:71:E7:
49:25:78:AB:25:B7:90:10:A0:9B:8B:77:26:DD:40:EA:
41:A3:FD:88:CD:72:A6:89:3B:50:57:1C:7A:25:24:22:
02:51:40:35:67:8A:31:69:0D:E5:39:73:49:39:9B:95:
01:85:52:F2:2B:14:89:9A:4E:04:A4:BC:40:AE:39:A6:
DD:40:02:E0:3A:75:FE:3D:7D:55:94:5B:F1:4E:24:7C:
C8:B8:58:19:CA:C0:DA:BE:58:13:9A:E6:1C:E7:D1:C1:
3B:F0:5D:8F:49:08:21:9E:D0:F3:BE:D6:D4:66:4F:5C:
72:36:7B:C3:82:D3:98:08:94:AF:AB:44:4F:18:C7:14:
DA:16:B1:1E:32:0E:12:38:C0:B5:3C:76:EC:75:50:00:
20:04:11:19:ED:C6:FF:DF:4E:FE:08:81:27:31:4F:71:
74:6E:03:0C:70:27:81:55:6A:9A:43:92:A4:7F:DB:FD:
3F:C5:17:1E:41:BB:CE:E8:A7:7F:8C:95:F9:FD:7F:F8:
61:88:89:00:3E:FF:0B:01:DB:FD:D5:B5:A4:E4:91:11: 0x010001
#6
authorityKeyIdentifier:
da ed 64 74 14 9c 14 3c ab dd 99 a9 bd 5b 28 4d |..dt...<.....[(M| 8b 3c c9 d8 |.<.. |
subjectKeyIdentifier:
7d bf 91 d7 a7 6c 5a 47 66 44 7b 90 d4 8e 90 72 |}....lZGfD{....r| 41 8f 17 c2 |A... |
keyUsage: true, 0xc0
basicConstraints
true
nil
extendedKeyUsage: true, timeStamping
crlDistributionPoints: http://crl.usertrust.com/UTN-USERFirst-Object.crl
authorityInfoAccess
OCSP: http://ocsp.usertrust.com
RSA-SHA256:
50 b0 f5 df 5f ad 33 dc c3 53 58 58 bc c2 13 75 |P..._.3..SXX...u| 7b 20 1d 54 ca ba 3f 50 3f ba 8a f4 6b 09 63 c0 |{ .T..?P?...k.c.| 5b 5d 8b d6 75 1a 73 bd 8b ff 47 f1 15 dc 51 16 |[]..u.s...G...Q.| 23 19 32 e6 6e 92 4d d1 c6 2e 5a 1e 88 42 14 c9 |#.2.n.M...Z..B..| 72 e5 d7 08 50 8a 6a f5 64 40 56 ae 24 e3 61 97 |r...P.j.d@V.$.a.| 15 42 f0 2c 48 ae 83 e6 35 3c 8b 5b c2 8f ae 8e |.B.,H...5<.[....| cc 34 52 34 e0 fb fe ca fd b1 24 68 d1 a4 11 23 |.4R4......$h...#| 10 06 fd b2 c2 24 27 c7 d7 e9 4a 1c 8f 3f 3e cf |.....$'...J..?>.| ed eb 75 79 6c 8e 5f f7 21 b6 50 e6 25 a1 cd 66 |..uyl._.!.P.%..f| 94 12 6c bf db b3 ae 87 d8 68 03 72 20 02 c2 7e |..l......h.r ..~| da 94 f3 72 07 3c 57 e8 55 24 e7 05 a0 1d c4 81 |...r........._.[| bb 87 76 c6 9e 4c 54 61 d0 67 db 93 84 da 31 87 |..v..LTa.g....1.| 03 92 e7 9f e3 e9 cf 5a 56 c8 68 e0 52 49 94 5c |.......ZV.h.RI.\|
1
unnamed
#0
C: US
ST: UT
L: Salt Lake City
O: The USERTRUST Network
OU: http://www.usertrust.com
CN: UTN-USERFirst-Object
4E:B0:87:8F:CC:24:35:36:B2:D8:C9:F7:BF:39:55:77
SHA256: nil
#2
contentType: id-smime-ct-TSTInfo
signingTime: 2016-02-24 15:18:16 UTC
id-smime-aa-signingCertificate:
36 52 7d 4f a2 6a 68 f9 eb 45 96 f1 d9 9a bb 2c |6R}O.jh..E.....,| 0e a7 6d fa |..m. |
messageDigest:
e1 20 b3 82 be 0b 54 a5 8f b4 c8 54 e3 22 66 ae |. ....T....T."f.| c9 ba 74 1e 37 94 15 b8 cb 88 69 9a b4 5a 7e 47 |..t.7.....i..Z~G|
rsaEncryption:
42 67 fc bb 00 05 9a be a1 63 11 aa c3 e0 a5 02 |Bg.......c......| fe f1 3f 77 1b cf 02 19 06 02 df f3 e1 45 34 25 |..?w.........E4%| 3e 9a d3 2d 71 d1 c9 7c a5 82 63 80 f3 3c 75 f8 |>..-q..|..c......t...| a8 82 5c 48 20 d5 94 6e fd b8 25 dd 49 97 6c b1 |..\H ..n..%.I.l.| 5f 2d 40 6f b9 e1 94 88 26 11 5e 95 e1 69 17 0c |_-@o....&.^..i..| 2b b1 8e aa 75 9a 73 72 1b d1 e0 26 c5 00 98 95 |+...u.sr...&....| 2e 04 89 db b6 a9 d5 17 cd 57 3e b0 f5 a8 32 4a |.........W>...2J| c8 13 23 d0 26 5c e7 0c 95 d0 08 59 2a 36 21 17 |..#.&\.....Y*6!.|

~~show previews~~

offset	size	type	comment
0	758784	DLL	02/24/2016 15:17:47	#
15c1	15	HTM		#
7b5a8	1053	PNG	(48 x 48)	#
7b9c8	5228	PNG	(333 x 62)	#
7ce58	1709	PNG	(64 x 64)	#
7d508	460	PNG	(64 x 64)	#
7d6e0	438	PNG	(64 x 64)	#
7d898	173	PNG	(64 x 64)	#
7d948	186	PNG	(64 x 64)	#
7da40	534	PNG	(64 x 64)	#
7dc58	466	PNG	(64 x 64)	#
95d60	1137	PNG	(64 x 64)	#
961d8	1155	PNG	(96 x 96)	#
96660	894	PNG	(96 x 96)	#
969e0	350	PNG	(48 x 48)	#
96b40	783	PNG	(48 x 48)	#
96e50	1067	PNG	(48 x 48)	#
97280	1104	PNG	(48 x 48)	#
976d0	536	PNG	(64 x 64)	#
978e8	515	PNG	(64 x 64)	#
97af0	487	PNG	(48 x 48)	#
97cd8	680	PNG	(48 x 48)	#
97f80	8292	PNG	(149 x 160)	#
b9400	11984	PKCS7	Authenticode Signature	#

~~offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable~~

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

~~everything is OK~~

hmpalert.dll-

MZ Header

Rich Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 040004b0

VS_FIXEDFILEINFO

Signers (1)

Certificates (4)

hmpalert.dll
-