FileScanner.exe - FileScanner

info
MZ
PE
resources
imports
foremost
version info
signature
hexdump
disasm
log
discuss
donate

filename	FileScanner.exe
size	102072 (0x18eb8)
md5	4a62e4cf2dfd05ae68af6dde9b26fc59

type	PE32+ executable (console) x86-64, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x100

Rich Header

lib id	version	times used
199	41118	1
223	20806	2
224	20806	19
221	20806	4
225	20806	5
147	30729	7
1	0	186
229	21005	6
219	21005	1
151	0	1
222	21005	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x8664
NumberOfSections	6
TimeDateStamp	0x5404c400
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xf0
Characteristics	0x22
Magic	0x20b
LinkerVersion	12.0
SizeOfCode	0xf000
SizeOfInitializedData	0x8600
SizeOfUninitializedData	0
AddressOfEntryPoint	0xe9fc
BaseOfCode	0x1000
ImageBase	0x140000000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	5.2
ImageVersion	0.0
SubsystemVersion	5.2
Reserved1	0
SizeOfImage	0x1b000
SizeOfHeaders	0x400
CheckSum	0x27698
Subsystem	3
DllCharacteristics	0x8160
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x1000	0xeef9	0xf000	R-X CODE
.rdata	0x10000	0x622e	0x6400	R-- IDATA
.data	0x17000	0xb28	0x400	RW- IDATA
.pdata	0x18000	0xc48	0xe00	R-- IDATA
.rsrc	0x19000	0x518	0x600	R-- IDATA
.reloc	0x1a000	0xbc	0x200	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x1494c	0x78
RESOURCE	0x19000	0x518
EXCEPTION	0x18000	0xc48
SECURITY	0x17200	0x1cb8
BASERELOC	0x1a000	0xbc
DEBUG	0x10590	0x38
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0x11ad0	0x70
Bound_IAT	0	0
IAT	0x10000	0x528
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
VERSION	#1	756	0
MANIFEST	#1	381	0

module_name	hint	function_name
KERNEL32.dll	82	CloseHandle
KERNEL32.dll	963	ReadFile
KERNEL32.dll	492	GetFileAttributesA
KERNEL32.dll	723	HeapAlloc
KERNEL32.dll	312	FindFirstFileA
KERNEL32.dll	329	FindNextFileA
KERNEL32.dll	504	GetFileSizeEx
KERNEL32.dll	838	LocalAlloc
KERNEL32.dll	454	GetCurrentProcess
KERNEL32.dll	521	GetLocalTime
KERNEL32.dll	403	GetComputerNameExA
KERNEL32.dll	527	GetLogicalDrives
KERNEL32.dll	473	GetDriveTypeA
KERNEL32.dll	520	GetLastError
KERNEL32.dll	136	CreateFileA
KERNEL32.dll	505	GetFileTime
KERNEL32.dll	299	FileTimeToSystemTime
KERNEL32.dll	842	LocalFree
KERNEL32.dll	844	LocalLock
KERNEL32.dll	355	FormatMessageA
KERNEL32.dll	593	GetProcessHeap
KERNEL32.dll	308	FindClose
KERNEL32.dll	727	HeapFree
KERNEL32.dll	203	DecodePointer
KERNEL32.dll	770	IsDebuggerPresent
KERNEL32.dll	774	IsProcessorFeaturePresent
KERNEL32.dll	937	QueryPerformanceCounter
KERNEL32.dll	455	GetCurrentProcessId
KERNEL32.dll	459	GetCurrentThreadId
KERNEL32.dll	640	GetSystemTimeAsFileTime
KERNEL32.dll	238	EncodePointer
ADVAPI32.dll	406	LookupPrivilegeValueA
ADVAPI32.dll	503	OpenProcessToken
ADVAPI32.dll	196	CryptGetHashParam
ADVAPI32.dll	182	CryptDestroyHash
ADVAPI32.dll	200	CryptHashData
ADVAPI32.dll	203	CryptReleaseContext
ADVAPI32.dll	179	CryptCreateHash
ADVAPI32.dll	176	CryptAcquireContextA
ADVAPI32.dll	31	AdjustTokenPrivileges
MSVCP120.dll	1254	public: void __cdecl std::basic_ios<char, struct std::char_traits<char> >::setstate(int, bool) __ptr64 ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
MSVCP120.dll	688	char const * __ptr64 __cdecl std::_Syserror_map(int) ?_Syserror_map@std@@YAPEBDH@Z
MSVCP120.dll	135	public: virtual __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::~basic_streambuf<char, struct std::char_traits<char> >(void) __ptr64 ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
MSVCP120.dll	423	__int64 const std::_BADOFF ?_BADOFF@std@@3_JB
MSVCP120.dll	1369	public: char __cdecl std::basic_ios<char, struct std::char_traits<char> >::widen(char)const __ptr64 ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
MSVCP120.dll	165	public: __cdecl std::_Lockit::~_Lockit(void) __ptr64 ??1_Lockit@std@@QEAA@XZ
MSVCP120.dll	102	public: __cdecl std::_Lockit::_Lockit(int) __ptr64 ??0_Lockit@std@@QEAA@H@Z
MSVCP120.dll	493	private: static class std::locale::_Locimp * __ptr64 __cdecl std::locale::_Getgloballocale(void) ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
MSVCP120.dll	304	public: __cdecl std::locale::id::operator unsigned __int64(void) __ptr64 ??Bid@locale@std@@QEAA_KXZ
MSVCP120.dll	451	struct _iobuf * __ptr64 __cdecl std::_Fiopen(char const * __ptr64, int, int) ?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
MSVCP120.dll	722	public: bool __cdecl std::codecvt_base::always_noconv(void)const __ptr64 ?always_noconv@codecvt_base@std@@QEBA_NXZ
MSVCP120.dll	129	public: virtual __cdecl std::basic_istream<char, struct std::char_traits<char> >::~basic_istream<char, struct std::char_traits<char> >(void) __ptr64 ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
MSVCP120.dll	580	public: bool __cdecl std::basic_istream<char, struct std::char_traits<char> >::_Ipfx(bool) __ptr64 ?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
MSVCP120.dll	1273	public: int __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::snextc(void) __ptr64 ?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
MSVCP120.dll	1264	public: int __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::sgetc(void) __ptr64 ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
MSVCP120.dll	1206	public: int __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::sbumpc(void) __ptr64 ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
MSVCP120.dll	1270	protected: virtual __int64 __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::showmanyc(void) __ptr64 ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
MSVCP120.dll	1387	protected: virtual __int64 __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::xsgetn(char * __ptr64, __int64) __ptr64 ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
MSVCP120.dll	1390	protected: virtual __int64 __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::xsputn(char const * __ptr64, __int64) __ptr64 ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
MSVCP120.dll	459	public: static unsigned __int64 __cdecl std::codecvt<char, char, int>::_Getcat(class std::locale::facet const * __ptr64 * __ptr64, class std::locale const * __ptr64) ?_Getcat@?$codecvt@DDH@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
MSVCP120.dll	526	protected: void __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::_Init(void) __ptr64 ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
MSVCP120.dll	1243	protected: void __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::setg(char * __ptr64, char * __ptr64, char * __ptr64) __ptr64 ?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
MSVCP120.dll	998	public: class std::locale __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::getloc(void)const __ptr64 ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
MSVCP120.dll	42	protected: __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::basic_streambuf<char, struct std::char_traits<char> >(void) __ptr64 ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
MSVCP120.dll	1355	public: int __cdecl std::codecvt<char, char, int>::unshift(int & __ptr64, char * __ptr64, char * __ptr64, char * __ptr64 & __ptr64)const __ptr64 ?unshift@?$codecvt@DDH@std@@QEBAHAEAHPEAD1AEAPEAD@Z
MSVCP120.dll	21	public: __cdecl std::basic_istream<char, struct std::char_traits<char> >::basic_istream<char, struct std::char_traits<char> >(class std::basic_streambuf<char, struct std::char_traits<char> > * __ptr64, bool) __ptr64 ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
MSVCP120.dll	1110	public: int __cdecl std::codecvt<char, char, int>::out(int & __ptr64, char const * __ptr64, char const * __ptr64, char const * __ptr64 & __ptr64, char * __ptr64, char * __ptr64, char * __ptr64 & __ptr64)const __ptr64 ?out@?$codecvt@DDH@std@@QEBAHAEAHPEBD1AEAPEBDPEAD3AEAPEAD@Z
MSVCP120.dll	1056	public: int __cdecl std::codecvt<char, char, int>::in(int & __ptr64, char const * __ptr64, char const * __ptr64, char const * __ptr64 & __ptr64, char * __ptr64, char * __ptr64, char * __ptr64 & __ptr64)const __ptr64 ?in@?$codecvt@DDH@std@@QEBAHAEAHPEBD1AEAPEBDPEAD3AEAPEAD@Z
MSVCP120.dll	744	class std::basic_ostream<char, struct std::char_traits<char> > std::cout ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
MSVCP120.dll	32	public: __cdecl std::basic_ostream<char, struct std::char_traits<char> >::basic_ostream<char, struct std::char_traits<char> >(class std::basic_streambuf<char, struct std::char_traits<char> > * __ptr64, bool) __ptr64 ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
MSVCP120.dll	730	public: void __cdecl std::basic_ios<char, struct std::char_traits<char> >::clear(int, bool) __ptr64 ?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
MSVCP120.dll	365	public: void __cdecl std::basic_ostream<char, struct std::char_traits<char> >::`vbase destructor'(void) __ptr64 ??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
MSVCP120.dll	132	public: virtual __cdecl std::basic_ostream<char, struct std::char_traits<char> >::~basic_ostream<char, struct std::char_traits<char> >(void) __ptr64 ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
MSVCP120.dll	910	public: class std::basic_ostream<char, struct std::char_traits<char> > & __ptr64 __cdecl std::basic_ostream<char, struct std::char_traits<char> >::flush(void) __ptr64 ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
MSVCP120.dll	630	public: void __cdecl std::basic_ostream<char, struct std::char_traits<char> >::_Osfx(void) __ptr64 ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
MSVCP120.dll	1347	bool __cdecl std::uncaught_exception(void) ?uncaught_exception@std@@YA_NXZ
MSVCP120.dll	1279	public: int __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::sputc(char) __ptr64 ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
MSVCP120.dll	1154	public: class std::basic_ostream<char, struct std::char_traits<char> > & __ptr64 __cdecl std::basic_ostream<char, struct std::char_traits<char> >::put(char) __ptr64 ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
MSVCP120.dll	1282	public: __int64 __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::sputn(char const * __ptr64, __int64) __ptr64 ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
MSVCP120.dll	259	public: class std::basic_ostream<char, struct std::char_traits<char> > & __ptr64 __cdecl std::basic_ostream<char, struct std::char_traits<char> >::operator<<(double) __ptr64 ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z
MSVCP120.dll	267	public: class std::basic_ostream<char, struct std::char_traits<char> > & __ptr64 __cdecl std::basic_ostream<char, struct std::char_traits<char> >::operator<<(unsigned __int64) __ptr64 ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
MSVCP120.dll	257	public: class std::basic_ostream<char, struct std::char_traits<char> > & __ptr64 __cdecl std::basic_ostream<char, struct std::char_traits<char> >::operator<<(unsigned long) __ptr64 ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
MSVCP120.dll	254	public: class std::basic_ostream<char, struct std::char_traits<char> > & __ptr64 __cdecl std::basic_ostream<char, struct std::char_traits<char> >::operator<<(int) __ptr64 ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
MSVCP120.dll	263	public: class std::basic_ostream<char, struct std::char_traits<char> > & __ptr64 __cdecl std::basic_ostream<char, struct std::char_traits<char> >::operator<<(class std::ios_base & __ptr64 (__cdecl*)(class std::ios_base & __ptr64)) __ptr64 ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
MSVCP120.dll	261	public: class std::basic_ostream<char, struct std::char_traits<char> > & __ptr64 __cdecl std::basic_ostream<char, struct std::char_traits<char> >::operator<<(class std::basic_ostream<char, struct std::char_traits<char> > & __ptr64 (__cdecl*)(class std::basic_ostream<char, struct std::char_traits<char> > & __ptr64)) __ptr64 ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
MSVCP120.dll	709	char const * __ptr64 __cdecl std::_Winerror_map(int) ?_Winerror_map@std@@YAPEBDH@Z
MSVCP120.dll	7	protected: __cdecl std::basic_ios<char, struct std::char_traits<char> >::basic_ios<char, struct std::char_traits<char> >(void) __ptr64 ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
MSVCP120.dll	123	public: virtual __cdecl std::basic_ios<char, struct std::char_traits<char> >::~basic_ios<char, struct std::char_traits<char> >(void) __ptr64 ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
MSVCP120.dll	717	void __cdecl std::_Xout_of_range(char const * __ptr64) ?_Xout_of_range@std@@YAXPEBD@Z
MSVCP120.dll	716	void __cdecl std::_Xlength_error(char const * __ptr64) ?_Xlength_error@std@@YAXPEBD@Z
MSVCP120.dll	713	void __cdecl std::_Xbad_alloc(void) ?_Xbad_alloc@std@@YAXXZ
MSVCP120.dll	1007	public: static class std::locale::id std::codecvt<char, char, int>::id ?id@?$codecvt@DDH@std@@2V0locale@2@A
MSVCR120.dll	1627	fwrite
MSVCR120.dll	1851	ungetc
MSVCR120.dll	1588	fgetc
MSVCR120.dll	1718	memcpy_s
MSVCR120.dll	653	_fseeki64
MSVCR120.dll	1589	fgetpos
MSVCR120.dll	1623	fsetpos
MSVCR120.dll	1781	setvbuf
MSVCR120.dll	1587	fflush
MSVCR120.dll	28	public: __cdecl std::bad_cast::bad_cast(class std::bad_cast const & __ptr64) __ptr64 ??0bad_cast@std@@QEAA@AEBV01@@Z
MSVCR120.dll	102	public: virtual __cdecl std::bad_cast::~bad_cast(void) __ptr64 ??1bad_cast@std@@UEAA@XZ
MSVCR120.dll	29	public: __cdecl std::bad_cast::bad_cast(char const * __ptr64) __ptr64 ??0bad_cast@std@@QEAA@PEBD@Z
MSVCR120.dll	1570	fclose
MSVCR120.dll	1462	atoi
MSVCR120.dll	1788	sprintf_s
MSVCR120.dll	1014	_memicmp
MSVCR120.dll	1122	_splitpath_s
MSVCR120.dll	1260	_vsnprintf
MSVCR120.dll	1141	_stricmp
MSVCR120.dll	1715	memchr
MSVCR120.dll	1264	_vsnprintf_s
MSVCR120.dll	1800	strcpy_s
MSVCR120.dll	1147	_strlwr_s
MSVCR120.dll	1810	strncpy_s
MSVCR120.dll	1843	tolower
MSVCR120.dll	859	_lock
MSVCR120.dll	1223	_unlock
MSVCR120.dll	521	_calloc_crt
MSVCR120.dll	415	__dllonexit
MSVCR120.dll	348	__C_specific_handler
MSVCR120.dll	1026	_onexit
MSVCR120.dll	413	__crt_debugger_hook
MSVCR120.dll	412	__crtUnhandledException
MSVCR120.dll	411	__crtTerminateProcess
MSVCR120.dll	382	__crtCapturePreviousContext
MSVCR120.dll	344	_XcptFilter
MSVCR120.dll	498	_amsg_exit
MSVCR120.dll	423	__getmainargs
MSVCR120.dll	462	__set_app_type
MSVCR120.dll	1560	exit
MSVCR120.dll	600	_exit
MSVCR120.dll	522	_cexit
MSVCR120.dll	538	_configthreadlocale
MSVCR120.dll	464	__setusermatherr
MSVCR120.dll	738	_initterm_e
MSVCR120.dll	737	_initterm
MSVCR120.dll	424	__initenv
MSVCR120.dll	632	_fmode
MSVCR120.dll	537	_commode
MSVCR120.dll	307	void __cdecl terminate(void) ?terminate@@YAXXZ
MSVCR120.dll	283	public: void __cdecl type_info::_type_info_dtor_internal_method(void) __ptr64 ?_type_info_dtor_internal_method@type_info@@QEAAXXZ
MSVCR120.dll	409	__crtSetUnhandledExceptionFilter
MSVCR120.dll	1717	memcpy
MSVCR120.dll	1716	memcmp
MSVCR120.dll	1687	log10
MSVCR120.dll	1610	fputc
MSVCR120.dll	1224	_unlock_file
MSVCR120.dll	860	_lock_file
MSVCR120.dll	1038	_purecall
MSVCR120.dll	44	public: __cdecl std::exception::exception(class std::exception const & __ptr64) __ptr64 ??0exception@std@@QEAA@AEBV01@@Z
MSVCR120.dll	1719	memmove
MSVCR120.dll	112	void * __ptr64 __cdecl operator new(unsigned __int64) ??2@YAPEAX_K@Z
MSVCR120.dll	114	void __cdecl operator delete(void * __ptr64) ??3@YAXPEAX@Z
MSVCR120.dll	325	_CxxThrowException
MSVCR120.dll	354	__CxxFrameHandler3
MSVCR120.dll	1721	memset
SHLWAPI.dll	70	PathFindExtensionA
SHLWAPI.dll	72	PathFindFileNameA

StringTable 000004b0

CompanyName	Didier Stevens (https://DidierStevens.com)
FileDescription	FileScanner
FileVersion	0.0.0.1
InternalName	FileScan.exe
LegalCopyright	Public Domain
OriginalFilename	FileScanner.exe
ProductName	FileScanner
ProductVersion	0.0.0.1

VS_FIXEDFILEINFO

FileVersion	0.0.0.1
ProductVersion	0.0.0.1
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	1
FileSubtype	0

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=BE/O=GlobalSign nv-sa/CN=GlobalSign CodeSigning CA - SHA256 - G2

serial: 112142DDCC2002CF859ECEA5A2AB1AE0C5A9

Certificates (3)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:00:00:00:00:01:31:89:c6:37:e8
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: OU=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign
        Validity
            Not Before: Aug  2 10:00:00 2011 GMT
            Not After : Aug  2 10:00:00 2019 GMT
        Subject: C=BE, O=GlobalSign nv-sa, CN=GlobalSign CodeSigning CA - SHA256 - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a3:ef:d1:9f:29:e9:d8:d3:82:76:3c:62:a0:d2:
                    49:d6:16:1e:f1:cf:f0:d0:ba:48:43:03:2d:a7:1d:
                    f2:01:34:49:a4:10:e9:62:13:f4:13:f4:16:83:b5:
                    d5:57:42:48:86:2b:95:58:87:ea:28:04:74:cb:72:
                    11:0f:61:26:e1:fa:1c:61:15:c7:28:9b:4d:0b:82:
                    0f:26:2b:90:3a:96:ed:a4:d0:6b:29:9c:f5:61:88:
                    e6:a4:57:6f:ee:f4:70:d0:8d:17:de:e6:66:76:5f:
                    74:1e:5e:0c:53:38:5d:90:f4:df:30:2d:1b:13:d1:
                    79:98:54:1a:4b:38:04:f4:07:c4:23:03:d3:92:cb:
                    f7:80:5d:aa:9c:56:06:44:2d:41:4c:48:b4:2d:ec:
                    35:92:9a:c6:95:d7:f5:ce:90:31:e2:76:b3:61:b8:
                    f1:75:57:42:ac:3b:ce:2b:c8:90:49:e8:b7:26:cf:
                    bb:0c:89:cb:d0:c3:a3:6a:a1:c9:d5:e3:9c:53:2b:
                    57:26:fe:56:9a:76:fd:61:46:a2:60:ec:29:46:47:
                    f2:cd:e0:82:62:c6:04:5a:e7:ed:4e:40:5c:48:06:
                    7d:9d:5f:e7:74:c9:9e:84:65:0d:5b:de:dc:d3:24:
                    1c:b4:14:11:eb:ab:bf:c4:1f:a4:ba:99:d0:17:58:
                    35:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Subject Key Identifier: 
                19:4A:B8:5A:E4:4D:31:A5:14:E5:5E:EC:2F:A3:1C:FA:80:8C:32:6B
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: https://www.globalsign.com/repository/
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.globalsign.net/root-r3.crl
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 Authority Key Identifier: 
                8F:F0:4B:7F:A8:2E:45:24:AE:4D:50:FA:63:9A:8B:DE:E2:DD:1B:BC
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        79:b0:69:34:e2:05:87:f6:fe:d4:60:2c:2f:86:79:34:03:e0:
        b1:07:93:0c:84:5c:f9:e4:dc:6c:cf:6e:b5:ec:0a:5c:ba:0b:
        d0:68:31:2e:3f:64:bd:0f:82:6b:66:77:81:7f:c6:29:a5:17:
        d8:f0:89:4d:83:24:11:f6:6e:fe:9d:e1:48:0a:28:a0:e2:7b:
        24:80:a4:ec:c2:9a:00:d7:b0:6d:6c:cd:88:d5:15:78:cf:13:
        f9:88:a5:73:4d:c1:36:2b:dc:cb:ce:db:7e:7c:d2:8b:ef:2f:
        bd:b3:4f:4d:3a:ad:bb:62:6e:28:93:c4:0c:cb:d9:e6:ca:e0:
        11:02:94:03:b0:bd:3f:94:28:56:90:1e:53:c2:27:d5:c9:3c:
        cd:1a:63:1e:82:59:15:b6:40:ca:a7:81:aa:c3:55:af:33:d1:
        b5:75:e8:09:ea:47:08:48:22:fb:5d:1b:f3:2c:7a:69:7e:c5:
        d7:5a:5e:56:33:3c:ad:57:e8:93:25:42:c3:d2:5e:71:3b:4a:
        1c:54:ed:a9:55:ac:28:05:c7:c4:6c:5d:dc:3c:93:f6:69:3c:
        82:51:ce:1a:15:3d:5e:01:73:ff:40:a2:ea:b4:ae:d3:8e:fa:
        ee:5d:6c:47:c7:41:f5:d4:56:57:f2:18:37:32:d6:d4:cc:4b:
        f6:71:e0:76

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:00:00:00:00:01:25:07:1d:f9:af
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA
        Validity
            Not Before: Nov 18 10:00:00 2009 GMT
            Not After : Mar 18 10:00:00 2019 GMT
        Subject: OU=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:cc:25:76:90:79:06:78:22:16:f5:c0:83:b6:84:
                    ca:28:9e:fd:05:76:11:c5:ad:88:72:fc:46:02:43:
                    c7:b2:8a:9d:04:5f:24:cb:2e:4b:e1:60:82:46:e1:
                    52:ab:0c:81:47:70:6c:dd:64:d1:eb:f5:2c:a3:0f:
                    82:3d:0c:2b:ae:97:d7:b6:14:86:10:79:bb:3b:13:
                    80:77:8c:08:e1:49:d2:6a:62:2f:1f:5e:fa:96:68:
                    df:89:27:95:38:9f:06:d7:3e:c9:cb:26:59:0d:73:
                    de:b0:c8:e9:26:0e:83:15:c6:ef:5b:8b:d2:04:60:
                    ca:49:a6:28:f6:69:3b:f6:cb:c8:28:91:e5:9d:8a:
                    61:57:37:ac:74:14:dc:74:e0:3a:ee:72:2f:2e:9c:
                    fb:d0:bb:bf:f5:3d:00:e1:06:33:e8:82:2b:ae:53:
                    a6:3a:16:73:8c:dd:41:0e:20:3a:c0:b4:a7:a1:e9:
                    b2:4f:90:2e:32:60:e9:57:cb:b9:04:92:68:68:e5:
                    38:26:60:75:b2:9f:77:ff:91:14:ef:ae:20:49:fc:
                    ad:40:15:48:d1:02:31:61:19:5e:b8:97:ef:ad:77:
                    b7:64:9a:7a:bf:5f:c1:13:ef:9b:62:fb:0d:6c:e0:
                    54:69:16:a9:03:da:6e:e9:83:93:71:76:c6:69:85:
                    82:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier: 
                8F:F0:4B:7F:A8:2E:45:24:AE:4D:50:FA:63:9A:8B:DE:E2:DD:1B:BC
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: http://www.globalsign.net/repository/
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.globalsign.net/root.crl
            Authority Information Access: 
                OCSP - URI:http://ocsp.globalsign.com/ExtendedSSLSHA256CACross
            X509v3 Authority Key Identifier: 
                60:7B:66:1A:45:0D:97:CA:89:50:2F:7D:04:CD:34:A8:FF:FC:FD:4B
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        42:52:a9:7e:a2:cf:5b:3b:cb:4b:dd:ba:f8:57:59:d3:24:a4:
        77:72:ef:62:44:37:82:ed:06:ee:04:d5:16:5f:24:a3:14:dc:
        6c:54:05:6a:b0:9b:3d:da:81:39:da:ad:28:db:95:6f:81:83:
        f5:cd:62:b1:45:24:b1:dd:29:e5:08:54:95:95:8c:f0:1d:06:
        5f:1a:d6:46:3f:13:40:17:48:11:16:9b:47:4d:d1:3a:b5:0f:
        57:1c:92:30:d0:f8:b2:25:3b:0a:cd:f6:87:f9:c7:b2:57:d3:
        3f:7d:a5:8c:14:ce:9c:a8:c7:9f:46:93:da:59:fa:79:5d:65:
        20:35:44:5a:4f:c1:90:9d:c1:54:92:56:dc:34:c8:f5:c1:03:
        d0:5d:c0:59:48:9c:00:fc:95:a0:f1:d1:76:f7:16:36:c8:13:
        92:7f:2d:2b:c0:b8:80:f1:26:26:1f:41:4d:52:bf:1e:97:bb:
        01:82:08:e7:15:f6:c1:d5:34:2a:cc:f5:e4:c3:87:7a:57:81:
        e1:d6:d7:42:86:62:01:77:e2:a9:c4:7a:86:f4:04:38:7a:07:
        6a:7d:00:ec:73:f7:a8:0b:34:78:c5:9e:b3:ef:b8:38:40:0e:
        8c:33:53:c8:75:ec:5f:3e:ea:75:5e:ff:82:0e:74:15:dc:19:
        05:f3:ba:31

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:21:42:dd:cc:20:02:cf:85:9e:ce:a5:a2:ab:1a:e0:c5:a9
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign CodeSigning CA - SHA256 - G2
        Validity
            Not Before: Aug  1 10:37:54 2014 GMT
            Not After : Aug  1 10:37:54 2017 GMT
        Subject: C=BE, L=Sint-Agatha-Berchem, O=Didier Stevens Labs, CN=Didier Stevens Labs/emailAddress=didier@didierstevenslabs.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a4:44:fb:4b:44:89:c3:6b:e6:fc:2d:6b:f6:a1:
                    7c:cb:21:af:ab:fb:56:5c:f6:c3:7e:be:8a:ce:8e:
                    6b:58:ac:ac:88:25:84:71:f5:c2:85:7c:87:41:14:
                    a9:8c:75:68:0a:5c:9c:38:f0:94:23:05:65:84:37:
                    26:3f:67:9a:e0:9d:40:8d:48:7d:71:58:39:bf:3b:
                    f9:0b:53:c6:26:52:2f:1f:5c:92:7e:dc:d2:c2:44:
                    d6:b8:00:5d:ab:72:f9:de:45:fb:93:47:b3:6c:a2:
                    7e:38:1a:af:35:b1:23:a2:a5:1d:8f:ff:91:66:9d:
                    43:3e:9f:0d:21:af:da:c0:a7:24:66:78:27:a0:0b:
                    58:84:12:38:24:97:1f:80:3b:18:da:b4:75:5a:8d:
                    74:96:27:a1:80:cc:ca:c2:e8:be:63:13:2d:d8:d9:
                    52:70:0a:50:34:86:6b:f5:8b:fe:49:66:67:7c:c9:
                    99:75:53:c9:c6:60:4d:25:34:e0:2b:18:8c:39:e0:
                    80:68:b9:84:1e:e8:de:ae:d1:a2:cf:56:08:30:92:
                    81:15:2c:f4:b1:14:f5:55:67:e3:95:63:a3:6c:4a:
                    9e:df:fd:b5:4b:10:80:f1:3e:1b:83:d2:10:06:02:
                    28:91:12:00:e7:64:6b:10:e1:8b:03:1d:bb:95:11:
                    32:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.4146.1.50
                  CPS: https://www.globalsign.com/repository/
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.globalsign.com/gs/gscodesignsha2g2.crl
            Authority Information Access: 
                CA Issuers - URI:http://secure.globalsign.com/cacert/gscodesignsha2g2.crt
                OCSP - URI:http://ocsp2.globalsign.com/gscodesignsha2g2
            X509v3 Subject Key Identifier: 
                B8:38:A0:36:8E:06:9D:12:30:B0:99:34:4F:1A:DD:05:8B:0F:E9:1C
            X509v3 Authority Key Identifier: 
                19:4A:B8:5A:E4:4D:31:A5:14:E5:5E:EC:2F:A3:1C:FA:80:8C:32:6B
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        5a:78:91:b0:44:d2:90:e7:2a:b3:55:8b:a2:8e:bc:79:5b:90:
        a1:ea:7c:43:5d:eb:41:0d:94:c0:ab:55:d5:fc:9b:4b:7b:5e:
        ba:c5:af:5b:88:18:9b:0a:5a:f2:b3:c0:5c:91:b7:3e:78:d9:
        b4:b5:73:9f:a7:5e:c6:d4:0c:cc:38:08:47:49:b7:e0:aa:15:
        df:78:66:2a:87:d3:8c:e4:c1:ce:06:67:f3:f8:1a:8f:e4:d8:
        0b:ef:80:36:0b:3d:f3:f4:8e:75:95:e1:e8:9e:88:c9:7a:68:
        9d:a6:b2:96:b2:ea:39:0f:ce:41:df:83:f0:ce:51:6a:60:ac:
        18:cf:d5:7c:09:8e:54:db:dc:60:ab:a1:df:d6:67:a7:f7:40:
        6a:ec:00:4d:26:79:ab:4a:1d:93:31:63:af:e0:9a:90:dc:4e:
        46:7b:9a:0b:e4:af:cd:7d:f7:3b:17:16:69:a6:a1:51:3a:c4:
        4f:56:da:76:14:b5:59:ad:96:db:c7:fa:56:cf:4f:9a:22:dd:
        f4:b1:18:c5:4b:bd:33:3f:a7:6c:67:3a:81:76:d7:c2:6d:ba:
        d3:a7:9f:37:b6:a6:68:18:d1:0f:65:b0:f2:09:46:10:b1:70:
        53:7c:38:90:4b:63:2e:96:f5:68:22:3b:20:db:3a:79:b1:d5:
        be:b9:ea:45

pkcs7-signedData

SHA256: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15
- :

SHA256

db 85 97 46 4a 17 80 b6 94 e4 f5 bf b9 fb ac eb |...FJ...........| e4 21 8b b5 55 96 92 61 c7 04 37 06 ba f7 cb d4 |.!..U..a..7.....|

unnamed
- #0
  - 2
    - 04:00:00:00:00:01:31:89:C6:37:E8
    - RSA-SHA256: nil
    - #2
      - OU: GlobalSign Root CA - R3
      - O: GlobalSign
      - CN: GlobalSign
    - 2011-08-02 10:00:00 UTC: 2019-08-02 10:00:00 UTC
    - Subject
      - C: BE
      - O: GlobalSign nv-sa
      - CN: GlobalSign CodeSigning CA - SHA256 - G2
    - #5
      - rsaEncryption: nil
      - A3:EF:D1:9F:29:E9:D8:D3:82:76:3C:62:A0:D2:49:D6:
        16:1E:F1:CF:F0:D0:BA:48:43:03:2D:A7:1D:F2:01:34:
        49:A4:10:E9:62:13:F4:13:F4:16:83:B5:D5:57:42:48:
        86:2B:95:58:87:EA:28:04:74:CB:72:11:0F:61:26:E1:
        FA:1C:61:15:C7:28:9B:4D:0B:82:0F:26:2B:90:3A:96:
        ED:A4:D0:6B:29:9C:F5:61:88:E6:A4:57:6F:EE:F4:70:
        D0:8D:17:DE:E6:66:76:5F:74:1E:5E:0C:53:38:5D:90:
        F4:DF:30:2D:1B:13:D1:79:98:54:1A:4B:38:04:F4:07:
        C4:23:03:D3:92:CB:F7:80:5D:AA:9C:56:06:44:2D:41:
        4C:48:B4:2D:EC:35:92:9A:C6:95:D7:F5:CE:90:31:E2:
        76:B3:61:B8:F1:75:57:42:AC:3B:CE:2B:C8:90:49:E8:
        B7:26:CF:BB:0C:89:CB:D0:C3:A3:6A:A1:C9:D5:E3:9C:
        53:2B:57:26:FE:56:9A:76:FD:61:46:A2:60:EC:29:46:
        47:F2:CD:E0:82:62:C6:04:5A:E7:ED:4E:40:5C:48:06:
        7D:9D:5F:E7:74:C9:9E:84:65:0D:5B:DE:DC:D3:24:1C:
        B4:14:11:EB:AB:BF:C4:1F:A4:BA:99:D0:17:58:35:CD: 0x010001
    - #6
      - keyUsage: true, 6
      - basicConstraints
        true
        true: 0
      - subjectKeyIdentifier:
        19 4a b8 5a e4 4d 31 a5 14 e5 5e ec 2f a3 1c fa |.J.Z.M1...^./...| 80 8c 32 6b |..2k |
      - certificatePolicies
        anyPolicy
        id-qt-cps: https://www.globalsign.com/repository/
      - crlDistributionPoints: http://crl.globalsign.net/root-r3.crl
      - extendedKeyUsage: codeSigning
      - authorityKeyIdentifier:
        8f f0 4b 7f a8 2e 45 24 ae 4d 50 fa 63 9a 8b de |..K...E$.MP.c...| e2 dd 1b bc |.... |
  - RSA-SHA256:
```
79 b0 69 34 e2 05 87 f6  fe d4 60 2c 2f 86 79 34  |y.i4......`,/.y4|
03 e0 b1 07 93 0c 84 5c  f9 e4 dc 6c cf 6e b5 ec  |.......\...l.n..|
0a 5c ba 0b d0 68 31 2e  3f 64 bd 0f 82 6b 66 77  |.\...h1.?d...kfw|
81 7f c6 29 a5 17 d8 f0  89 4d 83 24 11 f6 6e fe  |...).....M.$..n.|
9d e1 48 0a 28 a0 e2 7b  24 80 a4 ec c2 9a 00 d7  |..H.(..{$.......|
b0 6d 6c cd 88 d5 15 78  cf 13 f9 88 a5 73 4d c1  |.ml....x.....sM.|
36 2b dc cb ce db 7e 7c  d2 8b ef 2f bd b3 4f 4d  |6+....~|.../..OM|
3a ad bb 62 6e 28 93 c4  0c cb d9 e6 ca e0 11 02  |:..bn(..........|
94 03 b0 bd 3f 94 28 56  90 1e 53 c2 27 d5 c9 3c  |....?.(V..S.'..<|
cd 1a 63 1e 82 59 15 b6  40 ca a7 81 aa c3 55 af  |..c..Y..@.....U.|
33 d1 b5 75 e8 09 ea 47  08 48 22 fb 5d 1b f3 2c  |3..u...G.H".]..,|
7a 69 7e c5 d7 5a 5e 56  33 3c ad 57 e8 93 25 42  |zi~..Z^V3<.W..%B|
c3 d2 5e 71 3b 4a 1c 54  ed a9 55 ac 28 05 c7 c4  |..^q;J.T..U.(...|
6c 5d dc 3c 93 f6 69 3c  82 51 ce 1a 15 3d 5e 01  |l].<..i<.Q...=^.|
73 ff 40 a2 ea b4 ae d3  8e fa ee 5d 6c 47 c7 41  |s.@........]lG.A|
f5 d4 56 57 f2 18 37 32  d6 d4 cc 4b f6 71 e0 76  |..VW..72...K.q.v|
```
- Certificate #1
  - 2
    - 04:00:00:00:00:01:25:07:1D:F9:AF
    - RSA-SHA256: nil
    - Issuer
      - C: BE
      - O: GlobalSign nv-sa
      - OU: Root CA
      - CN: GlobalSign Root CA
    - 2009-11-18 10:00:00 UTC: 2019-03-18 10:00:00 UTC
    - #4
      - OU: GlobalSign Root CA - R3
      - O: GlobalSign
      - CN: GlobalSign
    - #5
      - rsaEncryption: nil
      - CC:25:76:90:79:06:78:22:16:F5:C0:83:B6:84:CA:28:
        9E:FD:05:76:11:C5:AD:88:72:FC:46:02:43:C7:B2:8A:
        9D:04:5F:24:CB:2E:4B:E1:60:82:46:E1:52:AB:0C:81:
        47:70:6C:DD:64:D1:EB:F5:2C:A3:0F:82:3D:0C:2B:AE:
        97:D7:B6:14:86:10:79:BB:3B:13:80:77:8C:08:E1:49:
        D2:6A:62:2F:1F:5E:FA:96:68:DF:89:27:95:38:9F:06:
        D7:3E:C9:CB:26:59:0D:73:DE:B0:C8:E9:26:0E:83:15:
        C6:EF:5B:8B:D2:04:60:CA:49:A6:28:F6:69:3B:F6:CB:
        C8:28:91:E5:9D:8A:61:57:37:AC:74:14:DC:74:E0:3A:
        EE:72:2F:2E:9C:FB:D0:BB:BF:F5:3D:00:E1:06:33:E8:
        82:2B:AE:53:A6:3A:16:73:8C:DD:41:0E:20:3A:C0:B4:
        A7:A1:E9:B2:4F:90:2E:32:60:E9:57:CB:B9:04:92:68:
        68:E5:38:26:60:75:B2:9F:77:FF:91:14:EF:AE:20:49:
        FC:AD:40:15:48:D1:02:31:61:19:5E:B8:97:EF:AD:77:
        B7:64:9A:7A:BF:5F:C1:13:EF:9B:62:FB:0D:6C:E0:54:
        69:16:A9:03:DA:6E:E9:83:93:71:76:C6:69:85:82:17: 0x010001
    - #6
      - keyUsage: true, 6
      - basicConstraints: true, true
      - subjectKeyIdentifier:
        8f f0 4b 7f a8 2e 45 24 ae 4d 50 fa 63 9a 8b de |..K...E$.MP.c...| e2 dd 1b bc |.... |
      - certificatePolicies
        anyPolicy
        id-qt-cps: http://www.globalsign.net/repository/
      - crlDistributionPoints: http://crl.globalsign.net/root.crl
      - authorityInfoAccess
        OCSP: http://ocsp.globalsign.com/ExtendedSSLSHA256CACross
      - authorityKeyIdentifier:
        60 7b 66 1a 45 0d 97 ca 89 50 2f 7d 04 cd 34 a8 |`{f.E....P/}..4.| ff fc fd 4b |...K |
  - RSA-SHA256:
```
42 52 a9 7e a2 cf 5b 3b  cb 4b dd ba f8 57 59 d3  |BR.~..[;.K...WY.|
24 a4 77 72 ef 62 44 37  82 ed 06 ee 04 d5 16 5f  |$.wr.bD7......._|
24 a3 14 dc 6c 54 05 6a  b0 9b 3d da 81 39 da ad  |$...lT.j..=..9..|
28 db 95 6f 81 83 f5 cd  62 b1 45 24 b1 dd 29 e5  |(..o....b.E$..).|
08 54 95 95 8c f0 1d 06  5f 1a d6 46 3f 13 40 17  |.T......_..F?.@.|
48 11 16 9b 47 4d d1 3a  b5 0f 57 1c 92 30 d0 f8  |H...GM.:..W..0..|
b2 25 3b 0a cd f6 87 f9  c7 b2 57 d3 3f 7d a5 8c  |.%;.......W.?}..|
14 ce 9c a8 c7 9f 46 93  da 59 fa 79 5d 65 20 35  |......F..Y.y]e 5|
44 5a 4f c1 90 9d c1 54  92 56 dc 34 c8 f5 c1 03  |DZO....T.V.4....|
d0 5d c0 59 48 9c 00 fc  95 a0 f1 d1 76 f7 16 36  |.].YH.......v..6|
c8 13 92 7f 2d 2b c0 b8  80 f1 26 26 1f 41 4d 52  |....-+....&&.AMR|
bf 1e 97 bb 01 82 08 e7  15 f6 c1 d5 34 2a cc f5  |............4*..|
e4 c3 87 7a 57 81 e1 d6  d7 42 86 62 01 77 e2 a9  |...zW....B.b.w..|
c4 7a 86 f4 04 38 7a 07  6a 7d 00 ec 73 f7 a8 0b  |.z...8z.j}..s...|
34 78 c5 9e b3 ef b8 38  40 0e 8c 33 53 c8 75 ec  |4x.....8@..3S.u.|
5f 3e ea 75 5e ff 82 0e  74 15 dc 19 05 f3 ba 31  |_>.u^...t......1|
```
- Certificate #2
  - 2
    - 11:21:42:DD:CC:20:02:CF:85:9E:CE:A5:A2:AB:1A:E0:
      C5:A9
    - RSA-SHA256: nil
    - Issuer
      - C: BE
      - O: GlobalSign nv-sa
      - CN: GlobalSign CodeSigning CA - SHA256 - G2
    - 2014-08-01 10:37:54 UTC: 2017-08-01 10:37:54 UTC
    - Subject
      - C: BE
      - L: Sint-Agatha-Berchem
      - O: Didier Stevens Labs
      - CN: Didier Stevens Labs
      - emailAddress: didier@didierstevenslabs.com
    - #5
      - rsaEncryption: nil
      - A4:44:FB:4B:44:89:C3:6B:E6:FC:2D:6B:F6:A1:7C:CB:
        21:AF:AB:FB:56:5C:F6:C3:7E:BE:8A:CE:8E:6B:58:AC:
        AC:88:25:84:71:F5:C2:85:7C:87:41:14:A9:8C:75:68:
        0A:5C:9C:38:F0:94:23:05:65:84:37:26:3F:67:9A:E0:
        9D:40:8D:48:7D:71:58:39:BF:3B:F9:0B:53:C6:26:52:
        2F:1F:5C:92:7E:DC:D2:C2:44:D6:B8:00:5D:AB:72:F9:
        DE:45:FB:93:47:B3:6C:A2:7E:38:1A:AF:35:B1:23:A2:
        A5:1D:8F:FF:91:66:9D:43:3E:9F:0D:21:AF:DA:C0:A7:
        24:66:78:27:A0:0B:58:84:12:38:24:97:1F:80:3B:18:
        DA:B4:75:5A:8D:74:96:27:A1:80:CC:CA:C2:E8:BE:63:
        13:2D:D8:D9:52:70:0A:50:34:86:6B:F5:8B:FE:49:66:
        67:7C:C9:99:75:53:C9:C6:60:4D:25:34:E0:2B:18:8C:
        39:E0:80:68:B9:84:1E:E8:DE:AE:D1:A2:CF:56:08:30:
        92:81:15:2C:F4:B1:14:F5:55:67:E3:95:63:A3:6C:4A:
        9E:DF:FD:B5:4B:10:80:F1:3E:1B:83:D2:10:06:02:28:
        91:12:00:E7:64:6B:10:E1:8B:03:1D:BB:95:11:32:E9: 0x010001
    - #6
      - keyUsage: true, 0x80
      - certificatePolicies
        1.3.6.1.4.1.4146.1.50
        id-qt-cps: https://www.globalsign.com/repository/
      - basicConstraints
        nil
      - extendedKeyUsage: codeSigning
      - crlDistributionPoints: http://crl.globalsign.com/gs/gscodesignsha2g2.crl
      - authorityInfoAccess
        #0
        caIssuers: http://secure.globalsign.com/cacert/gscodesignsha2g2.crt
        OCSP: http://ocsp2.globalsign.com/gscodesignsha2g2
      - subjectKeyIdentifier:
        b8 38 a0 36 8e 06 9d 12 30 b0 99 34 4f 1a dd 05 |.8.6....0..4O...| 8b 0f e9 1c |.... |
      - authorityKeyIdentifier:
        19 4a b8 5a e4 4d 31 a5 14 e5 5e ec 2f a3 1c fa |.J.Z.M1...^./...| 80 8c 32 6b |..2k |
  - RSA-SHA256:
```
5a 78 91 b0 44 d2 90 e7  2a b3 55 8b a2 8e bc 79  |Zx..D...*.U....y|
5b 90 a1 ea 7c 43 5d eb  41 0d 94 c0 ab 55 d5 fc  |[...|C].A....U..|
9b 4b 7b 5e ba c5 af 5b  88 18 9b 0a 5a f2 b3 c0  |.K{^...[....Z...|
5c 91 b7 3e 78 d9 b4 b5  73 9f a7 5e c6 d4 0c cc  |\..>x...s..^....|
38 08 47 49 b7 e0 aa 15  df 78 66 2a 87 d3 8c e4  |8.GI.....xf*....|
c1 ce 06 67 f3 f8 1a 8f  e4 d8 0b ef 80 36 0b 3d  |...g.........6.=|
f3 f4 8e 75 95 e1 e8 9e  88 c9 7a 68 9d a6 b2 96  |...u......zh....|
b2 ea 39 0f ce 41 df 83  f0 ce 51 6a 60 ac 18 cf  |..9..A....Qj`...|
d5 7c 09 8e 54 db dc 60  ab a1 df d6 67 a7 f7 40  |.|..T..`....g..@|
6a ec 00 4d 26 79 ab 4a  1d 93 31 63 af e0 9a 90  |j..M&y.J..1c....|
dc 4e 46 7b 9a 0b e4 af  cd 7d f7 3b 17 16 69 a6  |.NF{.....}.;..i.|
a1 51 3a c4 4f 56 da 76  14 b5 59 ad 96 db c7 fa  |.Q:.OV.v..Y.....|
56 cf 4f 9a 22 dd f4 b1  18 c5 4b bd 33 3f a7 6c  |V.O.".....K.3?.l|
67 3a 81 76 d7 c2 6d ba  d3 a7 9f 37 b6 a6 68 18  |g:.v..m....7..h.|
d1 0f 65 b0 f2 09 46 10  b1 70 53 7c 38 90 4b 63  |..e...F..pS|8.Kc|
2e 96 f5 68 22 3b 20 db  3a 79 b1 d5 be b9 ea 45  |...h"; .:y.....E|
```

Signer

1
unnamed
- #0
  - C: BE
  - O: GlobalSign nv-sa
  - CN: GlobalSign CodeSigning CA - SHA256 - G2
- 11:21:42:DD:CC:20:02:CF:85:9E:CE:A5:A2:AB:1A:E0:
  C5:A9
SHA256: nil

1.3.6.1.4.1.311.2.1.12
- nil
contentType: 1.3.6.1.4.1.311.2.1.4
1.3.6.1.4.1.311.2.1.11: msCodeInd

messageDigest:

f5 7f 96 08 76 e5 86 d7  3d f9 e3 a8 bf 95 61 1d  |....v...=.....a.|
a9 49 eb 12 b0 68 89 0e  bf 30 cd 06 23 03 d5 65  |.I...h...0..#..e|

rsaEncryption:

8c b2 f3 b3 11 10 23 85  b2 bb 4f 0a 52 15 0f f4  |......#...O.R...|
06 b6 be 00 ad 59 39 e6  73 25 eb d6 26 66 e5 81  |.....Y9.s%..&f..|
ab e7 66 4e b5 02 87 06  10 8e 84 68 cb 4d 8f 80  |..fN.......h.M..|
fd e3 ea 30 84 de bf 93  36 e4 ff 74 87 07 c8 19  |...0....6..t....|
07 61 2f 67 81 f3 25 19  88 56 ce 87 69 7b b4 68  |.a/g..%..V..i{.h|
48 76 5a ce 61 db be bd  e5 5c 7a 2a 7b 88 d6 d5  |HvZ.a....\z*{...|
c9 44 63 3d 3f 03 24 46  f3 0a d6 5b 6e b3 37 e4  |.Dc=?.$F...[n.7.|
0b ef 6d 1a 8c a8 bb e6  08 fc 73 9f f5 da 19 d7  |..m.......s.....|
da 1a f6 a4 c2 6e 4a a9  99 e5 8c 2a 99 76 36 80  |.....nJ....*.v6.|
09 42 a9 32 bd 0e 4c 66  69 21 d1 34 dc e4 f3 ff  |.B.2..Lfi!.4....|
ab 82 84 50 f9 a0 f2 5c  f6 67 12 6a 7c 39 c4 a9  |...P...\.g.j|9..|
43 5e 2f 9b 0f 00 45 7e  8c 78 3a be d3 8c e5 d3  |C^/...E~.x:.....|
ce 01 4f 49 5d 49 bd e2  a0 5f 02 e8 d5 65 24 4a  |..OI]I..._...e$J|
0f fe 01 f0 92 4c eb 42  b0 05 3d b3 fc dd 83 af  |.....L.B..=.....|
c3 4e 8d 2d 50 e2 61 8c  8b 0b c8 4e 37 24 20 73  |.N.-P.a....N7$ s|
4f f7 27 8e dd 12 d5 8e  61 5b 9e 8c f8 67 49 aa  |O.'.....a[...gI.|

1.3.6.1.4.1.311.3.3.1

pkcs7-signedData

SHA1: nil
id-smime-ct-TSTInfo
- 1
  - 1.3.6.1.4.1.4146.2.2
  - SHA1
    - 88 bd 5b cc 8b 7f e0 72 37 2c ec f8 cc 47 79 4c |..[....r7,...GyL| d9 b7 e9 0a |.... |
  - 2F:52:49:4D:44:92:86:7A:6F:8E:2A:1F:E6:B7:77:B6:
    77:40:D8:38
  - 2014-09-01 19:07:49 UTC
  - Subject
    - C: SG
    - O: GMO GlobalSign Pte Ltd
    - CN: GlobalSign TSA for Standard - G1

Certificates

Certificate #0
- 2
  - 11:21:22:31:90:C8:F2:13:3F:6F:93:C7:23:14:F0:92:
    E6:5C
  - RSA-SHA1: nil
  - Issuer
    - C: BE
    - O: GlobalSign nv-sa
    - CN: GlobalSign Timestamping CA - G2
  - 2013-08-23 00:00:00 UTC: 2024-09-23 00:00:00 UTC
  - Subject
    - C: SG
    - O: GMO GlobalSign Pte Ltd
    - CN: GlobalSign TSA for Standard - G1
  - #5
    - rsaEncryption: nil
    - A4:B6:C2:4C:45:0E:E2:B0:6C:25:9E:82:77:74:0F:4D:
      C4:79:A1:E7:4D:37:53:78:34:6F:86:CA:BB:A4:32:B4:
      2D:C1:2A:AA:63:FB:F5:6B:FF:B8:29:59:89:11:3F:DB:
      7A:3A:38:C2:8E:29:81:23:D4:33:0D:20:A5:E4:14:31:
      64:8C:FE:A8:6C:E5:12:3F:D8:9C:98:96:9E:85:BD:DE:
      EF:86:C0:1A:BE:CB:D3:8D:B5:52:E7:25:DA:2D:02:71:
      72:24:F7:AC:DE:63:C4:6B:39:E6:34:F4:42:C9:1E:EB:
      2C:F5:14:4C:99:78:7D:DB:CF:F4:8A:A3:88:5A:A1:E4:
      38:79:BA:3F:89:3E:11:D9:8E:52:EE:CE:27:99:E0:EC:
      58:A8:1E:B2:14:F8:68:BA:6F:2D:00:D4:92:09:40:1A:
      D9:02:E6:9C:25:5A:D0:B8:D3:72:DF:0E:6C:A9:FD:F5:
      9D:DD:A0:83:1B:7A:81:98:40:50:F1:60:B6:30:6B:25:
      95:DB:BA:DC:81:DE:FA:8F:8C:C3:58:B2:0F:2E:F5:B0:
      98:37:01:CE:0A:1D:F7:F1:BC:AB:9B:40:AD:74:8F:70:
      94:25:9F:0B:CA:B4:FF:CE:35:97:00:7B:D9:5A:81:69:
      C2:DA:C9:A1:75:BA:1E:CE:C4:17:35:1B:B1:CB:CB:4D: 0x010001
  - #6
    - keyUsage: true, 0x80
    - certificatePolicies
      - 1.3.6.1.4.1.4146.1.30
        id-qt-cps: https://www.globalsign.com/repository/
    - basicConstraints
      - nil
    - extendedKeyUsage: true, timeStamping
    - crlDistributionPoints: http://crl.globalsign.com/gs/gstimestampingg2.crl
    - authorityInfoAccess
      - caIssuers: http://secure.globalsign.com/cacert/gstimestampingg2.crt
    - subjectKeyIdentifier:
```
4f 35 41 b5 f9 4a 92 ce  48 29 50 4b 03 2c b3 77  |O5A..J..H)PK.,.w|
fa 2a 40 b4                                       |.*@.            |
```
    - authorityKeyIdentifier:
```
46 d8 3e ff dc e3 be ff  83 e6 f4 85 9b b0 dd 6a  |F.>............j|
d6 14 a9 c1                                       |....            |
```
- RSA-SHA1:
```
90 7c 32 f8 95 17 07 2c  ca d9 cc ca 31 0d a3 18  |.|2....,....1...|
b1 c6 d7 89 14 26 70 7d  c7 30 9c bd 93 bb a3 48  |.....&p}.0.....H|
e9 20 ee 85 0a 64 b6 24  7a bf c7 4d 5d a7 60 8e  |. ...d.$z..M].`.|
aa ed a4 26 7e 9e cb ab  23 27 16 51 2d 98 fc 23  |...&~...#'.Q-..#|
5a 6c a3 8d ea 72 98 cb  25 5d eb 3c 8a c9 10 ff  |Zl...r..%].<....|
2d 3e d7 eb 9f 98 1d 82  99 a3 63 a2 56 da 5d 50  |->........c.V.]P|
d3 d7 36 f5 31 98 00 37  43 77 e2 10 ad 04 f1 3c  |..6.1..7Cw.....<|
97 55 90 cb b6 40 ae f5  20 07 4a 4e e2 e8 57 ad  |.U...@.. .JN..W.|
6e 4c 73 5a 8c 6f da 7f  e5 52 57 52 eb 99 42 4d  |nLsZ.o...RWR..BM|
d7 eb 75 4c 75 f3 12 3c  94 ca a2 6a 76 3b 72 ff  |..uLu..<...jv;r.|
18 58 30 af 8b 8a 73 1b  dc 3b ec a8 5c 1e 0a c4  |.X0...s..;..\...|
29 bd 7f 47 39 c6 a2 b3  26 80 9c b6 86 da c5 bf  |)..G9...&.......|
dd 64 d4 70 7e f1 48 33  34 de fb 99 1f d7 28 24  |.d.p~.H34.....($|
ef b2 5e 1d 9d ea 0e 02  ef 0f b5 13 d1 bc 9a 38  |..^............8|
cd 83 55 04 94 d0 22 67  2d 2e c2 32 11 ce a5 7f  |..U..."g-..2....|
7d aa c0 be 39 7c 10 2c  c1 ea 80 42 9c 98 37 8c  |}...9|.,...B..7.|
```

Certificate #1

2
- 04:00:00:00:00:01:2F:4E:E1:52:D7
- RSA-SHA1: nil
- Issuer
  - C: BE
  - O: GlobalSign nv-sa
  - OU: Root CA
  - CN: GlobalSign Root CA
- 2011-04-13 10:00:00 UTC: 2028-01-28 12:00:00 UTC
- Subject
  - C: BE
  - O: GlobalSign nv-sa
  - CN: GlobalSign Timestamping CA - G2
- #5
  - rsaEncryption: nil
  - 94:EF:65:F8:B5:57:9F:A0:53:0D:34:06:EB:09:1F:B7:
    47:18:6A:CB:F0:5B:E4:FF:27:A5:34:D1:F7:89:1A:BF:
    9E:B1:CD:12:41:6E:66:D4:81:A0:85:8B:64:5A:46:2F:
    99:A0:8D:77:B1:E2:BC:5C:DD:22:D7:6A:67:D0:BB:E8:
    CA:74:DE:8B:4F:0D:B0:52:E5:90:5B:EB:47:0E:F1:E7:
    9F:9C:0B:90:65:3E:17:96:30:45:72:6D:39:A1:17:36:
    CA:B9:A0:8C:1B:4F:08:19:F6:81:31:AD:61:16:A4:62:
    E6:B4:40:9E:C3:FC:FB:95:F6:FB:B5:2E:95:81:98:E0:
    EF:C5:EB:D8:02:59:78:77:F7:AA:E3:52:6B:50:91:29:
    C5:FC:F7:CD:93:65:D2:60:61:22:F2:06:FB:32:DD:16:
    51:FA:0E:FD:8A:30:F0:17:09:A7:BB:F3:04:AE:AB:90:
    E7:6C:DF:7A:A9:F4:EF:C4:62:27:5F:6F:99:6D:38:74:
    AA:11:8B:DA:DF:C7:14:4C:E9:85:B2:EC:C2:7D:4A:26:
    8F:E7:56:BA:A6:E0:CF:92:53:80:74:F4:03:EC:68:B2:
    60:BC:84:20:00:83:1B:A1:EE:B4:74:05:C1:29:8E:62:
    D0:47:B1:FA:F0:53:CC:18:F9:2E:3B:F9:70:7E:B4:25: 0x010001
- #6
  - keyUsage: true, 6
  - basicConstraints
    - true
    - true: 0
  - subjectKeyIdentifier:
```
46 d8 3e ff dc e3 be ff  83 e6 f4 85 9b b0 dd 6a  |F.>............j|
d6 14 a9 c1                                       |....            |
```
  - certificatePolicies
    - anyPolicy
      - id-qt-cps: https://www.globalsign.com/repository/
  - crlDistributionPoints: http://crl.globalsign.net/root.crl
  - authorityKeyIdentifier:
```
60 7b 66 1a 45 0d 97 ca  89 50 2f 7d 04 cd 34 a8  |`{f.E....P/}..4.|
ff fc fd 4b                                       |...K            |
```

RSA-SHA1:

4e 5e 56 90 1e 46 b4 d9  49 31 f3 bb 17 39 28 1b  |N^V..F..I1...9(.|
c2 16 dd fd 41 dc 09 05  04 9b 6f b2 a2 9a d6 99  |....A.....o.....|
2e 40 99 00 55 b5 ea 3f  a5 20 76 d3 86 34 d4 17  |.@..U..?. v..4..|
cc 55 3a c7 82 ee ef a8  ba bc d8 06 9f 15 50 df  |.U:...........P.|
cd 16 7b 52 3a 02 d7 19  1a fd af f0 78 5c e0 4b  |..{R:.......x\.K|
c5 18 df 3a 24 1e da ac  b8 a9 58 04 02 07 30 db  |...:$.....X...0.|
b0 12 5e fe 31 be f0 04  48 f4 f0 70 f8 3a 5e 56  |..^.1...H..p.:^V|
83 cf 3d fb 0d bc f4 c5  ed 97 9d b9 d4 db a5 27  |..=............'|
84 e3 38 9b 8b a7 35 86  44 20 a4 3b 6d a4 6a 0b  |..8...5.D .;m.j.|
a1 83 fd 28 eb da ef 28  f6 cc 88 5d fb 0a 3b 00  |...(...(...]..;.|
ab e0 21 eb e2 2f 35 6c  0f 8e 34 45 97 eb a2 f7  |..!../5l..4E....|
99 33 35 7e cb 9a 8a bb  45 4d e7 3f 9f c2 d9 8a  |.35~....EM.?....|
fa 65 b2 6e c7 7e 65 ff  e8 92 e1 2c 31 a2 f7 b0  |.e.n.~e....,1...|
27 36 48 8f 26 6f 3b ee  4d 76 1f 79 c3 e5 7f 96  |'6H.&o;.Mv.y....|
35 bc 2d 0e cc 01 b0 8e  7f ff 51 80 80 a7 92 d4  |5.-.......Q.....|
b3 44 46 64 8c 87 4f 16  63 07 31 4b 63 b0 df f3  |.DFd..O.c.1Kc...|

unnamed
- #0
  - C: BE
  - O: GlobalSign nv-sa
  - CN: GlobalSign Timestamping CA - G2
- 11:21:22:31:90:C8:F2:13:3F:6F:93:C7:23:14:F0:92:
  E6:5C
SHA1: nil

contentType: id-smime-ct-TSTInfo
signingTime: 2014-09-01 19:07:49 UTC