ShieldDeluxe32.exe

info
MZ
PE
resources
strings
imports
exports
foremost
7zip
signature
hexdump
disasm
log
discuss
donate

filename	ShieldDeluxe32.exe
size	272689504 (0x1040e960)
md5	58d049fc7813a1fc00e3c72776ea0d2d

type	PE32 executable (GUI) Intel 80386, for MS Windows, RAR self-extracting archive
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xe8

Rich Header

lib id	version	times used
109	50727	8
123	50727	19
1	0	171
149	21022	5
131	30729	1
132	30729	44
146	30729	1
148	21022	1
145	30729	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	5
TimeDateStamp	0x4bff7cf6
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x103
Magic	0x10b
LinkerVersion	9.0
SizeOfCode	0x10a00
SizeOfInitializedData	0x18e00
SizeOfUninitializedData	0
AddressOfEntryPoint	0xa8ed
BaseOfCode	0x1000
BaseOfData	0x12000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	5.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x38000
SizeOfHeaders	0x400
CheckSum	0x104143bb
Subsystem	2
DllCharacteristics	0x8500
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ 6.0 - 8.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x1097c	0x10a00	R-X CODE
.rdata	0x12000	0x1865	0x1a00	R-- IDATA
.data	0x14000	0xbff4	0x200	RW- IDATA
.CRT	0x20000	0x10	0x200	R-- IDATA
.rsrc	0x21000	0x16ea0	0x17000	R-- IDATA

Data Directory

type	va	size
EXPORT	0x137e0	0x33
IMPORT	0x12908	0xc8
RESOURCE	0x21000	0x16ea0
EXCEPTION	0	0
SECURITY	0x1040d030	0x1930
BASERELOC	0	0
DEBUG	0x122b0	0x1c
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x12000	0x2b0
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
BITMAP	#101	2998	1252
ICON	#1	67624	1252
ICON	#2	9640	1252
ICON	#3	4264	1252
ICON	#4	1128	1252
DIALOG	ASKNEXTVOL	642	1252
DIALOG	GETPASSWORD1	310	1252
DIALOG	LICENSEDLG	232	1252
DIALOG	RENAMEDLG	298	1252
DIALOG	REPLACEFILEDLG	820	1252
DIALOG	STARTDLG	448	1252
STRING	#7	556	1252
STRING	#8	946	1252
STRING	#9	530	1252
STRING	#10	638	1252
STRING	#11	76	1252
GROUP_ICON	#100	62	1252
MANIFEST	#1	1464	1252

id	lang	string
100	1033	Select destination folder
101	1033	Extracting %s
102	1033	Skipping %s
103	1033	Unexpected end of archive
104	1033	The file "%s" header is corrupt
105	1033	The archive comment header is corrupt
106	1033	The archive comment is corrupt
107	1033	Not enough memory
108	1033	Unknown method in %s
109	1033	Cannot open %s
110	1033	Cannot create %s
111	1033	Cannot create folder %s
112	1033	CRC failed in the encrypted file %s (wrong password ?)
113	1033	CRC failed in %s
114	1033	Packed data CRC failed in %s
115	1033	Wrong password for %s
116	1033	Write error in the file %s. Probably the disk is full
117	1033	Read error in the file %s
118	1033	File close error
119	1033	The required volume is absent
120	1033	The archive is either in unknown format or damaged
121	1033	Extracting from %s
123	1033	Next volume
124	1033	The archive header is corrupt
125	1033	Close
126	1033	Error
127	1033	Errors encountered while performing the operation Look at the information window for more details
128	1033	bytes
129	1033	modified on
130	1033	folder is not accessible
131	1033	Some files could not be created. Please close all applications, reboot Windows and restart this installation
132	1033	Some installation files are corrupt. Please download a fresh copy and retry the installation
133	1033	All files
150	1033	<ul><li>Press <b>Install</b> button to start extraction.</li><br><br>
151	1033	<li>Use <b>Browse</b> button to select the destination
152	1033	folder from the folders tree. It can be also entered
153	1033	manually.</lI><br><br>
154	1033	<lI>If the destination folder does not exist, it will be
155	1033	created automatically before extraction.</lI></ul>
160	1033	The archive is corrupt

module_name	hint	ord	function_name
COMCTL32.dll		17
KERNEL32.dll	192		DeleteFileA
KERNEL32.dll	195		DeleteFileW
KERNEL32.dll	108		CreateDirectoryA
KERNEL32.dll	113		CreateDirectoryW
KERNEL32.dll	281		FindClose
KERNEL32.dll	302		FindNextFileA
KERNEL32.dll	285		FindFirstFileA
KERNEL32.dll	304		FindNextFileW
KERNEL32.dll	292		FindFirstFileW
KERNEL32.dll	614		GetTickCount
KERNEL32.dll	1146		WideCharToMultiByte
KERNEL32.dll	794		MultiByteToWideChar
KERNEL32.dll	629		GetVersionExA
KERNEL32.dll	645		GlobalAlloc
KERNEL32.dll	1205		lstrlenA
KERNEL32.dll	500		GetModuleFileNameA
KERNEL32.dll	310		FindResourceA
KERNEL32.dll	502		GetModuleHandleA
KERNEL32.dll	669		HeapAlloc
KERNEL32.dll	547		GetProcessHeap
KERNEL32.dll	673		HeapFree
KERNEL32.dll	676		HeapReAlloc
KERNEL32.dll	82		CompareStringA
KERNEL32.dll	260		ExitProcess
KERNEL32.dll	488		GetLocaleInfoA
KERNEL32.dll	525		GetNumberFormatA
KERNEL32.dll	1196		lstrcmpiA
KERNEL32.dll	544		GetProcAddress
KERNEL32.dll	430		GetDateFormatA
KERNEL32.dll	616		GetTimeFormatA
KERNEL32.dll	272		FileTimeToSystemTime
KERNEL32.dll	271		FileTimeToLocalFileTime
KERNEL32.dll	263		ExpandEnvironmentStringsA
KERNEL32.dll	1124		WaitForSingleObject
KERNEL32.dll	966		SetCurrentDirectoryA
KERNEL32.dll	1057		Sleep
KERNEL32.dll	602		GetTempPathA
KERNEL32.dll	786		MoveFileExA
KERNEL32.dll	1089		UnmapViewOfFile
KERNEL32.dll	367		GetCommandLineA
KERNEL32.dll	778		MapViewOfFile
KERNEL32.dll	121		CreateFileMappingA
KERNEL32.dll	501		GetModuleFileNameW
KERNEL32.dll	976		SetEnvironmentVariableA
KERNEL32.dll	811		OpenFileMappingA
KERNEL32.dll	763		LocalFileTimeToFileTime
KERNEL32.dll	1066		SystemTimeToFileTime
KERNEL32.dll	589		GetSystemTime
KERNEL32.dll	719		IsDBCSLeadByte
KERNEL32.dll	347		GetCPInfo
KERNEL32.dll	332		FreeLibrary
KERNEL32.dll	753		LoadLibraryA
KERNEL32.dll	423		GetCurrentDirectoryA
KERNEL32.dll	476		GetFullPathNameA
KERNEL32.dll	986		SetFileAttributesW
KERNEL32.dll	983		SetFileAttributesA
KERNEL32.dll	462		GetFileAttributesW
KERNEL32.dll	457		GetFileAttributesA
KERNEL32.dll	1165		WriteFile
KERNEL32.dll	1004		SetLastError
KERNEL32.dll	571		GetStdHandle
KERNEL32.dll	872		ReadFile
KERNEL32.dll	127		CreateFileW
KERNEL32.dll	120		CreateFileA
KERNEL32.dll	471		GetFileType
KERNEL32.dll	973		SetEndOfFile
KERNEL32.dll	991		SetFilePointer
KERNEL32.dll	785		MoveFileA
KERNEL32.dll	995		SetFileTime
KERNEL32.dll	425		GetCurrentProcess
KERNEL32.dll	67		CloseHandle
KERNEL32.dll	486		GetLastError
KERNEL32.dll	208		DosDateTimeToFileTime
USER32.dll	588		ReleaseDC
USER32.dll	282		GetDC
USER32.dll	606		SendMessageA
USER32.dll	775		wsprintfA
USER32.dll	630		SetDlgItemTextA
USER32.dll	211		EndDialog
USER32.dll	157		DestroyIcon
USER32.dll	601		SendDlgItemMessageA
USER32.dll	289		GetDlgItemTextA
USER32.dll	165		DialogBoxParamA
USER32.dll	458		IsWindowVisible
USER32.dll	764		WaitForInputIdle
USER32.dll	364		GetSysColor
USER32.dll	542		PostMessageA
USER32.dll	639		SetMenu
USER32.dll	633		SetFocus
USER32.dll	464		LoadBitmapA
USER32.dll	470		LoadIconA
USER32.dll	51		CharToOemA
USER32.dll	522		OemToCharA
USER32.dll	266		GetClassNameA
USER32.dll	55		CharUpperA
USER32.dll	392		GetWindowRect
USER32.dll	341		GetParent
USER32.dll	499		MapWindowPoints
USER32.dll	103		CreateWindowExA
USER32.dll	745		UpdateWindow
USER32.dll	683		SetWindowTextA
USER32.dll	466		LoadCursorA
USER32.dll	564		RegisterClassExA
USER32.dll	676		SetWindowLongA
USER32.dll	385		GetWindowLongA
USER32.dll	149		DefWindowProcA
USER32.dll	539		PeekMessageA
USER32.dll	330		GetMessageA
USER32.dll	725		TranslateMessage
USER32.dll	168		DispatchMessageA
USER32.dll	269		GetClientRect
USER32.dll	79		CopyRect
USER32.dll	453		IsWindow
USER32.dll	504		MessageBoxA
USER32.dll	696		ShowWindow
USER32.dll	287		GetDlgItem
USER32.dll	209		EnableWindow
USER32.dll	241		FindWindowExA
USER32.dll	777		wvsprintfA
USER32.dll	52		CharToOemBuffA
USER32.dll	483		LoadStringA
USER32.dll	679		SetWindowPos
USER32.dll	396		GetWindowTextA
USER32.dll	381		GetWindow
USER32.dll	367		GetSystemMetrics
USER32.dll	523		OemToCharBuffA
USER32.dll	160		DestroyWindow
GDI32.dll	437		GetDeviceCaps
GDI32.dll	482		GetObjectA
GDI32.dll	45		CreateCompatibleBitmap
GDI32.dll	606		SelectObject
GDI32.dll	666		StretchBlt
GDI32.dll	46		CreateCompatibleDC
GDI32.dll	208		DeleteObject
GDI32.dll	205		DeleteDC
COMDLG32.dll	13		GetSaveFileNameA
COMDLG32.dll	4		CommDlgExtendedError
COMDLG32.dll	11		GetOpenFileNameA
ADVAPI32.dll	400		LookupPrivilegeValueA
ADVAPI32.dll	602		RegOpenKeyExA
ADVAPI32.dll	615		RegQueryValueExA
ADVAPI32.dll	562		RegCreateKeyExA
ADVAPI32.dll	631		RegSetValueExA
ADVAPI32.dll	554		RegCloseKey
ADVAPI32.dll	676		SetFileSecurityW
ADVAPI32.dll	675		SetFileSecurityA
ADVAPI32.dll	497		OpenProcessToken
ADVAPI32.dll	30		AdjustTokenPrivileges
SHELL32.dll	278		ShellExecuteExA
SHELL32.dll	168		SHFileOperationA
SHELL32.dll	185		SHGetFileInfoA
SHELL32.dll	216		SHGetSpecialFolderLocation
SHELL32.dll	201		SHGetMalloc
SHELL32.dll	119		SHBrowseForFolderA
SHELL32.dll	207		SHGetPathFromIDListA
SHELL32.dll	124		SHChangeNotify
ole32.dll	133		CreateStreamOnHGlobal
ole32.dll	244		OleInitialize
ole32.dll	16		CoCreateInstance
ole32.dll	267		OleUninitialize
ole32.dll	8		CLSIDFromString
OLEAUT32.dll		8

ord	entry_va	function_name

module_name	WINRAR.SFX
flags	0
timestamp	2010-05-28 08:21:10
version	0.0
ordinal_base	1
nFunctions	0
nNames	0
Names(0)	0
Functions(0)	0
NameOrdinals(0)	0

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa (c)10/CN=VeriSign Class 3 Code Signing 2010 CA

serial: 3347B89EF6217D6FB472692DE4931B34

Certificates (4)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
        Validity
            Not Before: Dec 21 00:00:00 2012 GMT
            Not After : Dec 30 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:b3:49:54:4b:97:1c:12:0a:d8:25:79:91:
                    22:57:2a:6f:dc:b8:26:c4:43:73:6b:c2:bf:2e:50:
                    5a:fb:14:c2:76:8e:43:01:25:43:b4:a1:e2:45:f4:
                    e8:b7:7b:c3:74:cc:22:d7:b4:94:00:02:f7:4d:ed:
                    bf:b4:b7:44:24:6b:cd:5f:45:3b:d1:44:ce:43:12:
                    73:17:82:8b:69:b4:2b:cb:99:1e:ac:72:1b:26:4d:
                    71:1f:b1:31:dd:fb:51:61:02:53:a6:aa:f5:49:2c:
                    05:78:45:a5:2f:89:ce:e7:99:e7:fe:8c:e2:57:3f:
                    3d:c6:92:dc:4a:f8:7b:33:e4:79:0a:fb:f0:75:88:
                    41:9c:ff:c5:03:51:99:aa:d7:6c:9f:93:69:87:65:
                    29:83:85:c2:60:14:c4:c8:c9:3b:14:da:c0:81:f0:
                    1f:0d:74:de:92:22:ab:ca:f7:fb:74:7c:27:e6:f7:
                    4a:1b:7f:a7:c3:9e:2d:ae:8a:ea:a6:e6:aa:27:16:
                    7d:61:f7:98:71:11:bc:e2:50:a1:4b:e5:5d:fa:e5:
                    0e:a7:2c:9f:aa:65:20:d3:d8:96:e8:c8:7c:a5:4e:
                    48:44:ff:19:e2:44:07:92:0b:d7:68:84:80:5d:6a:
                    78:64:45:cd:60:46:7e:54:c1:13:7c:c5:79:f1:c9:
                    c1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD
            Authority Information Access: 
                OCSP - URI:http://ocsp.thawte.com

            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.thawte.com/ThawteTimestampingCA.crl

            X509v3 Extended Key Usage: 
                Time Stamping
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-1
    Signature Algorithm: sha1WithRSAEncryption
         03:09:9b:8f:79:ef:7f:59:30:aa:ef:68:b5:fa:e3:09:1d:bb:
         4f:82:06:5d:37:5f:a6:52:9f:16:8d:ea:1c:92:09:44:6e:f5:
         6d:eb:58:7c:30:e8:f9:69:8d:23:73:0b:12:6f:47:a9:ae:39:
         11:f8:2a:b1:9b:b0:1a:c3:8e:eb:59:96:00:ad:ce:0c:4d:b2:
         d0:31:a6:08:5c:2a:7a:fc:e2:7a:1d:57:4c:a8:65:18:e9:79:
         40:62:25:96:6e:c7:c7:37:6a:83:21:08:8e:41:ea:dd:d9:57:
         3f:1d:77:49:87:2a:16:06:5e:a6:38:6a:22:12:a3:51:19:83:
         7e:b6

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Validity
            Not Before: Oct 18 00:00:00 2012 GMT
            Not After : Dec 29 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer - G4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:63:0b:39:44:b8:bb:23:a7:44:49:bb:0e:ff:
                    a1:f0:61:0a:53:93:b0:98:db:ad:2c:0f:4a:c5:6e:
                    ff:86:3c:53:55:0f:15:ce:04:3f:2b:fd:a9:96:96:
                    d9:be:61:79:0b:5b:c9:4c:86:76:e5:e0:43:4b:22:
                    95:ee:c2:2b:43:c1:9f:d8:68:b4:8e:40:4f:ee:85:
                    38:b9:11:c5:23:f2:64:58:f0:15:32:6f:4e:57:a1:
                    ae:88:a4:02:d7:2a:1e:cd:4b:e1:dd:63:d5:17:89:
                    32:5b:b0:5e:99:5a:a8:9d:28:50:0e:17:ee:96:db:
                    61:3b:45:51:1d:cf:12:56:0b:92:47:fc:ab:ae:f6:
                    66:3d:47:ac:70:72:e7:92:e7:5f:cd:10:b9:c4:83:
                    64:94:19:bd:25:80:e1:e8:d2:22:a5:d0:ba:02:7a:
                    a1:77:93:5b:65:c3:ee:17:74:bc:41:86:2a:dc:08:
                    4c:8c:92:8c:91:2d:9e:77:44:1f:68:d6:a8:74:77:
                    db:0e:5b:32:8b:56:8b:33:bd:d9:63:c8:49:9d:3a:
                    c5:c5:ea:33:0b:d2:f1:a3:1b:f4:8b:be:d9:b3:57:
                    8b:3b:de:04:a7:7a:22:b2:24:ae:2e:c7:70:c5:be:
                    4e:83:26:08:fb:0b:bd:a9:4f:99:08:e1:10:28:72:
                    aa:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                OCSP - URI:http://ts-ocsp.ws.symantec.com
                CA Issuers - URI:http://ts-aia.ws.symantec.com/tss-ca-g2.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ts-crl.ws.symantec.com/tss-ca-g2.crl

            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-2
            X509v3 Subject Key Identifier: 
                46:C6:69:A3:0E:4A:14:1E:D5:4C:DA:52:63:17:3F:5E:36:BC:0D:E6
            X509v3 Authority Key Identifier: 
                keyid:5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD

    Signature Algorithm: sha1WithRSAEncryption
         78:3b:b4:91:2a:00:4c:f0:8f:62:30:37:78:a3:84:27:07:6f:
         18:b2:de:25:dc:a0:d4:94:03:aa:86:4e:25:9f:9a:40:03:1c:
         dd:ce:e3:79:cb:21:68:06:da:b6:32:b4:6d:bf:f4:2c:26:63:
         33:e4:49:64:6d:0d:e6:c3:67:0e:f7:05:a4:35:6c:7c:89:16:
         c6:e9:b2:df:b2:e9:dd:20:c6:71:0f:cd:95:74:dc:b6:5c:de:
         bd:37:1f:43:78:e6:78:b5:cd:28:04:20:a3:aa:f1:4b:c4:88:
         29:91:0e:80:d1:11:fc:dd:5c:76:6e:4f:5e:0e:45:46:41:6e:
         0d:b0:ea:38:9a:b1:3a:da:09:71:10:fc:1c:79:b4:80:7b:ac:
         69:f4:fd:9c:b6:0c:16:2b:f1:7f:5b:09:3d:9b:5b:e2:16:ca:
         13:81:6d:00:2e:38:0d:a8:29:8f:2c:e1:b2:f4:5a:a9:01:af:
         15:9c:2c:2f:49:1b:db:22:bb:c3:fe:78:94:51:c3:86:b1:82:
         88:5d:f0:3d:b4:51:a1:79:33:2b:2e:7b:b9:dc:20:09:13:71:
         eb:6a:19:5b:cf:e8:a5:30:57:2c:89:49:3f:b9:cf:7f:c9:bf:
         3e:22:68:63:53:9a:bd:69:74:ac:c5:1d:3c:7f:92:e0:c3:bc:
         1c:d8:04:75

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:47:b8:9e:f6:21:7d:6f:b4:72:69:2d:e4:93:1b:34
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA
        Validity
            Not Before: Apr 24 00:00:00 2012 GMT
            Not After : Apr 24 23:59:59 2015 GMT
        Subject: C=US, ST=Florida, L=Boynton Beach, O=iS3, Inc., OU=Digital ID Class 3 - Microsoft Software Validation v2, OU=Technology, CN=iS3, Inc.
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0e:b5:97:6f:81:0e:ce:d7:e2:e5:fb:b0:be:
                    19:6c:ad:74:80:b0:9f:21:27:d7:ac:97:ae:97:9a:
                    e0:c1:19:e3:b1:cb:81:54:d9:36:90:0a:25:ef:e2:
                    65:0b:c5:23:f4:e3:50:3a:3a:5c:aa:25:ed:aa:af:
                    06:4c:ff:05:3d:fd:91:fe:4f:8a:b0:6c:47:ad:37:
                    a7:e8:e4:06:31:09:83:0d:9d:d9:22:f1:42:a9:cb:
                    da:b6:9e:2a:1e:75:5b:ec:06:fa:9c:47:a3:d3:10:
                    0c:88:b1:d7:81:65:e8:1c:d4:49:1a:a1:af:80:e2:
                    f3:50:77:cc:35:bb:19:85:23:74:4f:20:c3:36:ad:
                    df:33:94:96:36:23:45:8b:43:e4:3d:95:f3:00:5f:
                    af:10:5b:3b:7a:46:51:a9:4a:f6:b3:ad:4b:42:6b:
                    d4:1a:d8:97:ed:6d:74:ac:df:98:f5:c9:bb:d8:21:
                    b0:95:4c:b4:79:61:0b:31:ea:d3:6f:c7:48:04:0b:
                    03:73:33:f3:0f:f5:90:95:1b:89:b7:d2:35:75:56:
                    df:48:6f:10:d4:20:a2:01:c5:55:e3:a6:12:9c:0c:
                    14:0e:f7:cd:a3:a0:81:3b:a1:ec:3f:6f:85:e0:78:
                    3f:ca:32:54:84:fe:d7:9d:4a:3e:eb:d0:b5:45:c2:
                    b6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://csc3-2010-crl.verisign.com/CSC3-2010.crl

            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/rpa

            X509v3 Extended Key Usage: 
                Code Signing
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com
                CA Issuers - URI:http://csc3-2010-aia.verisign.com/CSC3-2010.cer

            X509v3 Authority Key Identifier: 
                keyid:CF:99:A9:EA:7B:26:F4:4B:C9:8E:8F:D7:F0:05:26:EF:E3:D2:A7:9D

            Netscape Cert Type: 
                Object Signing
            1.3.6.1.4.1.311.2.1.27: 
                0.......
    Signature Algorithm: sha1WithRSAEncryption
         0f:22:13:53:30:75:6b:6d:da:60:17:27:24:cc:f7:7b:28:09:
         f1:b1:a4:2a:7d:53:f4:92:e7:3f:c9:9b:90:7f:06:02:23:2f:
         51:d8:38:02:41:a6:39:d9:9e:f3:f0:3b:25:d3:eb:e3:a8:87:
         1a:fe:26:5b:5e:87:69:92:6e:f7:ea:92:ff:0f:f6:f6:4f:55:
         99:10:e9:33:14:29:8a:1d:8f:b4:c1:52:4e:18:0a:f8:5f:9b:
         a9:d1:9c:cc:ea:5b:10:41:eb:1d:0c:54:60:39:fc:0d:3d:5c:
         f2:78:5b:ff:67:30:89:11:f8:8d:50:40:63:15:3e:23:51:bc:
         29:c0:47:48:24:9b:ab:78:28:ad:d4:f5:44:45:b2:46:0b:4e:
         44:ee:f1:20:3e:a1:10:ed:21:19:d0:6d:e5:e1:ab:8e:2b:b3:
         54:58:14:ed:7f:d2:d4:4c:6c:42:eb:5d:25:65:fc:0c:63:97:
         cc:94:77:5f:9a:fb:ee:9e:d6:2f:88:72:e3:bd:ee:d1:db:69:
         7c:87:16:51:0d:be:6d:72:1f:db:c5:9b:2a:16:cc:f0:a3:a6:
         fc:2f:20:fe:9e:c8:a9:40:c9:55:5e:38:73:fb:46:ab:3b:28:
         ab:68:a3:ac:3d:a5:25:98:27:e6:e5:4f:0e:f2:f8:f1:34:60:
         3c:d7:d0:3b

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
        Validity
            Not Before: Feb  8 00:00:00 2010 GMT
            Not After : Feb  7 23:59:59 2020 GMT
        Subject: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:23:4b:5e:a5:d7:8a:bb:32:e9:d4:57:f7:ef:
                    e4:c7:26:7e:ad:19:98:fe:a8:9d:7d:94:f6:36:6b:
                    10:d7:75:81:30:7f:04:68:7f:cb:2b:75:1e:cd:1d:
                    08:8c:df:69:94:a7:37:a3:9c:7b:80:e0:99:e1:ee:
                    37:4d:5f:ce:3b:14:ee:86:d4:d0:f5:27:35:bc:25:
                    0b:38:a7:8c:63:9d:17:a3:08:a5:ab:b0:fb:cd:6a:
                    62:82:4c:d5:21:da:1b:d9:f1:e3:84:3b:8a:2a:4f:
                    85:5b:90:01:4f:c9:a7:76:10:7f:27:03:7c:be:ae:
                    7e:7d:c1:dd:f9:05:bc:1b:48:9c:69:e7:c0:a4:3c:
                    3c:41:00:3e:df:96:e5:c5:e4:94:71:d6:55:01:c7:
                    00:26:4a:40:3c:b5:a1:26:a9:0c:a7:6d:80:8e:90:
                    25:7b:cf:bf:3f:1c:eb:2f:96:fa:e5:87:77:c6:b5:
                    56:b2:7a:3b:54:30:53:1b:df:62:34:ff:1e:d1:f4:
                    5a:93:28:85:e5:4c:17:4e:7e:5b:fd:a4:93:99:7f:
                    df:cd:ef:a4:75:ef:ef:15:f6:47:e7:f8:19:72:d8:
                    2e:34:1a:a6:b4:a7:4c:7e:bd:bb:4f:0c:3d:57:f1:
                    30:d6:a6:36:8e:d6:80:76:d7:19:2e:a5:cd:7e:34:
                    2d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/cps
                  User Notice:
                    Explicit Text: https://www.verisign.com/rpa

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            1.3.6.1.5.5.7.1.12: 
                0_.].[0Y0W0U..image/gif0!0.0...+..............k...j.H.,{..0%.#http://logo.verisign.com/vslogo.gif
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.verisign.com/pca3-g5.crl

            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com

            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, Code Signing
            X509v3 Subject Alternative Name: 
                DirName:/CN=VeriSignMPKI-2-8
            X509v3 Subject Key Identifier: 
                CF:99:A9:EA:7B:26:F4:4B:C9:8E:8F:D7:F0:05:26:EF:E3:D2:A7:9D
            X509v3 Authority Key Identifier: 
                keyid:7F:D3:65:A7:C2:DD:EC:BB:F0:30:09:F3:43:39:FA:02:AF:33:31:33

    Signature Algorithm: sha1WithRSAEncryption
         56:22:e6:34:a4:c4:61:cb:48:b9:01:ad:56:a8:64:0f:d9:8c:
         91:c4:bb:cc:0c:e5:ad:7a:a0:22:7f:df:47:38:4a:2d:6c:d1:
         7f:71:1a:7c:ec:70:a9:b1:f0:4f:e4:0f:0c:53:fa:15:5e:fe:
         74:98:49:24:85:81:26:1c:91:14:47:b0:4c:63:8c:bb:a1:34:
         d4:c6:45:e8:0d:85:26:73:03:d0:a9:8c:64:6d:dc:71:92:e6:
         45:05:60:15:59:51:39:fc:58:14:6b:fe:d4:a4:ed:79:6b:08:
         0c:41:72:e7:37:22:06:09:be:23:e9:3f:44:9a:1e:e9:61:9d:
         cc:b1:90:5c:fc:3d:d2:8d:ac:42:3d:65:36:d4:b4:3d:40:28:
         8f:9b:10:cf:23:26:cc:4b:20:cb:90:1f:5d:8c:4c:34:ca:3c:
         d8:e5:37:d6:6f:a5:20:bd:34:eb:26:d9:ae:0d:e7:c5:9a:f7:
         a1:b4:21:91:33:6f:86:e8:58:bb:25:7c:74:0e:58:fe:75:1b:
         63:3f:ce:31:7c:9b:8f:1b:96:9e:c5:53:76:84:5b:9c:ad:91:
         fa:ac:ed:93:ba:5d:c8:21:53:c2:82:53:63:af:12:0d:50:87:
         11:1b:3d:54:52:96:8a:2c:9c:3d:92:1a:08:9a:05:2e:c7:93:
         a5:48:91:d3

pkcs7-signedData

SHA1: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15

00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |

SHA1

a3 bb 4a de ef 56 ee be 73 66 d3 25 ea 0c 7f 96 |..J..V..sf.%....| d1 6a 85 45 |.j.E |

Certificates
- Certificate #0
  - 2
    - 7E:93:EB:FB:7C:C6:4E:59:EA:4B:9A:77:D4:06:FC:3B
    - RSA-SHA1: nil
    - Issuer
      - C: ZA
      - ST: Western Cape
      - L: Durbanville
      - O: Thawte
      - OU: Thawte Certification
      - CN: Thawte Timestamping CA
    - 2012-12-21 00:00:00 UTC: 2020-12-30 23:59:59 UTC
    - Subject
      - C: US
      - O: Symantec Corporation
      - CN: Symantec Time Stamping Services CA - G2
    - #5
      - rsaEncryption: nil
      - B1:AC:B3:49:54:4B:97:1C:12:0A:D8:25:79:91:22:57:
        2A:6F:DC:B8:26:C4:43:73:6B:C2:BF:2E:50:5A:FB:14:
        C2:76:8E:43:01:25:43:B4:A1:E2:45:F4:E8:B7:7B:C3:
        74:CC:22:D7:B4:94:00:02:F7:4D:ED:BF:B4:B7:44:24:
        6B:CD:5F:45:3B:D1:44:CE:43:12:73:17:82:8B:69:B4:
        2B:CB:99:1E:AC:72:1B:26:4D:71:1F:B1:31:DD:FB:51:
        61:02:53:A6:AA:F5:49:2C:05:78:45:A5:2F:89:CE:E7:
        99:E7:FE:8C:E2:57:3F:3D:C6:92:DC:4A:F8:7B:33:E4:
        79:0A:FB:F0:75:88:41:9C:FF:C5:03:51:99:AA:D7:6C:
        9F:93:69:87:65:29:83:85:C2:60:14:C4:C8:C9:3B:14:
        DA:C0:81:F0:1F:0D:74:DE:92:22:AB:CA:F7:FB:74:7C:
        27:E6:F7:4A:1B:7F:A7:C3:9E:2D:AE:8A:EA:A6:E6:AA:
        27:16:7D:61:F7:98:71:11:BC:E2:50:A1:4B:E5:5D:FA:
        E5:0E:A7:2C:9F:AA:65:20:D3:D8:96:E8:C8:7C:A5:4E:
        48:44:FF:19:E2:44:07:92:0B:D7:68:84:80:5D:6A:78:
        64:45:CD:60:46:7E:54:C1:13:7C:C5:79:F1:C9:C1:71: 0x010001
    - #6
      - subjectKeyIdentifier:
        5f 9a f5 6e 5c cc cc 74 9a d4 dd 7d ef 3f db ec |_..n\..t...}.?..| 4c 80 2e dd |L... |
      - authorityInfoAccess
        OCSP: http://ocsp.thawte.com
      - basicConstraints
        true
        true: 0
      - crlDistributionPoints: http://crl.thawte.com/ThawteTimestampingCA.crl
      - extendedKeyUsage: timeStamping
      - keyUsage: true, 6
      - subjectAltName
        CN: TimeStamp-2048-1
  - RSA-SHA1:
```
03 09 9b 8f 79 ef 7f 59  30 aa ef 68 b5 fa e3 09  |....y..Y0..h....|
1d bb 4f 82 06 5d 37 5f  a6 52 9f 16 8d ea 1c 92  |..O..]7_.R......|
09 44 6e f5 6d eb 58 7c  30 e8 f9 69 8d 23 73 0b  |.Dn.m.X|0..i.#s.|
12 6f 47 a9 ae 39 11 f8  2a b1 9b b0 1a c3 8e eb  |.oG..9..*.......|
59 96 00 ad ce 0c 4d b2  d0 31 a6 08 5c 2a 7a fc  |Y.....M..1..\*z.|
e2 7a 1d 57 4c a8 65 18  e9 79 40 62 25 96 6e c7  |.z.WL.e..y@b%.n.|
c7 37 6a 83 21 08 8e 41  ea dd d9 57 3f 1d 77 49  |.7j.!..A...W?.wI|
87 2a 16 06 5e a6 38 6a  22 12 a3 51 19 83 7e b6  |.*..^.8j"..Q..~.|
```
- Certificate #1
  - 2
    - 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - O: Symantec Corporation
      - CN: Symantec Time Stamping Services CA - G2
    - 2012-10-18 00:00:00 UTC: 2020-12-29 23:59:59 UTC
    - Subject
      - C: US
      - O: Symantec Corporation
      - CN: Symantec Time Stamping Services Signer - G4
    - #5
      - rsaEncryption: nil
      - A2:63:0B:39:44:B8:BB:23:A7:44:49:BB:0E:FF:A1:F0:
        61:0A:53:93:B0:98:DB:AD:2C:0F:4A:C5:6E:FF:86:3C:
        53:55:0F:15:CE:04:3F:2B:FD:A9:96:96:D9:BE:61:79:
        0B:5B:C9:4C:86:76:E5:E0:43:4B:22:95:EE:C2:2B:43:
        C1:9F:D8:68:B4:8E:40:4F:EE:85:38:B9:11:C5:23:F2:
        64:58:F0:15:32:6F:4E:57:A1:AE:88:A4:02:D7:2A:1E:
        CD:4B:E1:DD:63:D5:17:89:32:5B:B0:5E:99:5A:A8:9D:
        28:50:0E:17:EE:96:DB:61:3B:45:51:1D:CF:12:56:0B:
        92:47:FC:AB:AE:F6:66:3D:47:AC:70:72:E7:92:E7:5F:
        CD:10:B9:C4:83:64:94:19:BD:25:80:E1:E8:D2:22:A5:
        D0:BA:02:7A:A1:77:93:5B:65:C3:EE:17:74:BC:41:86:
        2A:DC:08:4C:8C:92:8C:91:2D:9E:77:44:1F:68:D6:A8:
        74:77:DB:0E:5B:32:8B:56:8B:33:BD:D9:63:C8:49:9D:
        3A:C5:C5:EA:33:0B:D2:F1:A3:1B:F4:8B:BE:D9:B3:57:
        8B:3B:DE:04:A7:7A:22:B2:24:AE:2E:C7:70:C5:BE:4E:
        83:26:08:FB:0B:BD:A9:4F:99:08:E1:10:28:72:AA:CD: 0x010001
    - X509v3 extensions
      - basicConstraints
        true
        nil
      - extendedKeyUsage: true, timeStamping
      - keyUsage: true, 0x80
      - authorityInfoAccess
        #0
        OCSP: http://ts-ocsp.ws.symantec.com
        caIssuers: http://ts-aia.ws.symantec.com/tss-ca-g2.cer
      - crlDistributionPoints: http://ts-crl.ws.symantec.com/tss-ca-g2.crl
      - subjectAltName
        CN: TimeStamp-2048-2
      - subjectKeyIdentifier:
        46 c6 69 a3 0e 4a 14 1e d5 4c da 52 63 17 3f 5e |F.i..J...L.Rc.?^| 36 bc 0d e6 |6... |
      - authorityKeyIdentifier:
        5f 9a f5 6e 5c cc cc 74 9a d4 dd 7d ef 3f db ec |_..n\..t...}.?..| 4c 80 2e dd |L... |
  - RSA-SHA1:
```
78 3b b4 91 2a 00 4c f0  8f 62 30 37 78 a3 84 27  |x;..*.L..b07x..'|
07 6f 18 b2 de 25 dc a0  d4 94 03 aa 86 4e 25 9f  |.o...%.......N%.|
9a 40 03 1c dd ce e3 79  cb 21 68 06 da b6 32 b4  |.@.....y.!h...2.|
6d bf f4 2c 26 63 33 e4  49 64 6d 0d e6 c3 67 0e  |m..,&c3.Idm...g.|
f7 05 a4 35 6c 7c 89 16  c6 e9 b2 df b2 e9 dd 20  |...5l|......... |
c6 71 0f cd 95 74 dc b6  5c de bd 37 1f 43 78 e6  |.q...t..\..7.Cx.|
78 b5 cd 28 04 20 a3 aa  f1 4b c4 88 29 91 0e 80  |x..(. ...K..)...|
d1 11 fc dd 5c 76 6e 4f  5e 0e 45 46 41 6e 0d b0  |....\vnO^.EFAn..|
ea 38 9a b1 3a da 09 71  10 fc 1c 79 b4 80 7b ac  |.8..:..q...y..{.|
69 f4 fd 9c b6 0c 16 2b  f1 7f 5b 09 3d 9b 5b e2  |i......+..[.=.[.|
16 ca 13 81 6d 00 2e 38  0d a8 29 8f 2c e1 b2 f4  |....m..8..).,...|
5a a9 01 af 15 9c 2c 2f  49 1b db 22 bb c3 fe 78  |Z.....,/I.."...x|
94 51 c3 86 b1 82 88 5d  f0 3d b4 51 a1 79 33 2b  |.Q.....].=.Q.y3+|
2e 7b b9 dc 20 09 13 71  eb 6a 19 5b cf e8 a5 30  |.{.. ..q.j.[...0|
57 2c 89 49 3f b9 cf 7f  c9 bf 3e 22 68 63 53 9a  |W,.I?.....>"hcS.|
bd 69 74 ac c5 1d 3c 7f  92 e0 c3 bc 1c d8 04 75  |.it...<........u|
```
- Certificate #2
  - 2
    - 33:47:B8:9E:F6:21:7D:6F:B4:72:69:2D:E4:93:1B:34
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - O: VeriSign, Inc.
      - OU: VeriSign Trust Network
      - OU: Terms of use at https://www.verisign.com/rpa (c)10
      - CN: VeriSign Class 3 Code Signing 2010 CA
    - 2012-04-24 00:00:00 UTC: 2015-04-24 23:59:59 UTC
    - Subject
      - C: US
      - ST: Florida
      - L: Boynton Beach
      - O: iS3, Inc.
      - OU: Digital ID Class 3 - Microsoft Software Validation v2
      - OU: Technology
      - CN: iS3, Inc.
    - #5
      - rsaEncryption: nil
      - C3:0E:B5:97:6F:81:0E:CE:D7:E2:E5:FB:B0:BE:19:6C:
        AD:74:80:B0:9F:21:27:D7:AC:97:AE:97:9A:E0:C1:19:
        E3:B1:CB:81:54:D9:36:90:0A:25:EF:E2:65:0B:C5:23:
        F4:E3:50:3A:3A:5C:AA:25:ED:AA:AF:06:4C:FF:05:3D:
        FD:91:FE:4F:8A:B0:6C:47:AD:37:A7:E8:E4:06:31:09:
        83:0D:9D:D9:22:F1:42:A9:CB:DA:B6:9E:2A:1E:75:5B:
        EC:06:FA:9C:47:A3:D3:10:0C:88:B1:D7:81:65:E8:1C:
        D4:49:1A:A1:AF:80:E2:F3:50:77:CC:35:BB:19:85:23:
        74:4F:20:C3:36:AD:DF:33:94:96:36:23:45:8B:43:E4:
        3D:95:F3:00:5F:AF:10:5B:3B:7A:46:51:A9:4A:F6:B3:
        AD:4B:42:6B:D4:1A:D8:97:ED:6D:74:AC:DF:98:F5:C9:
        BB:D8:21:B0:95:4C:B4:79:61:0B:31:EA:D3:6F:C7:48:
        04:0B:03:73:33:F3:0F:F5:90:95:1B:89:B7:D2:35:75:
        56:DF:48:6F:10:D4:20:A2:01:C5:55:E3:A6:12:9C:0C:
        14:0E:F7:CD:A3:A0:81:3B:A1:EC:3F:6F:85:E0:78:3F:
        CA:32:54:84:FE:D7:9D:4A:3E:EB:D0:B5:45:C2:B6:0D: 0x010001
    - X509v3 extensions
      - basicConstraints
        nil
      - keyUsage: true, 0x80
      - crlDistributionPoints: http://csc3-2010-crl.verisign.com/CSC3-2010.crl
      - certificatePolicies
        2.16.840.1.113733.1.7.23.3
        id-qt-cps: https://www.verisign.com/rpa
      - extendedKeyUsage: codeSigning
      - authorityInfoAccess
        #0
        OCSP: http://ocsp.verisign.com
        caIssuers: http://csc3-2010-aia.verisign.com/CSC3-2010.cer
      - authorityKeyIdentifier:
        cf 99 a9 ea 7b 26 f4 4b c9 8e 8f d7 f0 05 26 ef |....{&.K......&.| e3 d2 a7 9d |.... |
      - nsCertType: 0x10
      - 1.3.6.1.4.1.311.2.1.27
        false: true
  - RSA-SHA1:
```
0f 22 13 53 30 75 6b 6d  da 60 17 27 24 cc f7 7b  |.".S0ukm.`.'$..{|
28 09 f1 b1 a4 2a 7d 53  f4 92 e7 3f c9 9b 90 7f  |(....*}S...?....|
06 02 23 2f 51 d8 38 02  41 a6 39 d9 9e f3 f0 3b  |..#/Q.8.A.9....;|
25 d3 eb e3 a8 87 1a fe  26 5b 5e 87 69 92 6e f7  |%.......&[^.i.n.|
ea 92 ff 0f f6 f6 4f 55  99 10 e9 33 14 29 8a 1d  |......OU...3.)..|
8f b4 c1 52 4e 18 0a f8  5f 9b a9 d1 9c cc ea 5b  |...RN..._......[|
10 41 eb 1d 0c 54 60 39  fc 0d 3d 5c f2 78 5b ff  |.A...T`9..=\.x[.|
67 30 89 11 f8 8d 50 40  63 15 3e 23 51 bc 29 c0  |g0....P@c.>#Q.).|
47 48 24 9b ab 78 28 ad  d4 f5 44 45 b2 46 0b 4e  |GH$..x(...DE.F.N|
44 ee f1 20 3e a1 10 ed  21 19 d0 6d e5 e1 ab 8e  |D.. >...!..m....|
2b b3 54 58 14 ed 7f d2  d4 4c 6c 42 eb 5d 25 65  |+.TX.....LlB.]%e|
fc 0c 63 97 cc 94 77 5f  9a fb ee 9e d6 2f 88 72  |..c...w_...../.r|
e3 bd ee d1 db 69 7c 87  16 51 0d be 6d 72 1f db  |.....i|..Q..mr..|
c5 9b 2a 16 cc f0 a3 a6  fc 2f 20 fe 9e c8 a9 40  |..*....../ ....@|
c9 55 5e 38 73 fb 46 ab  3b 28 ab 68 a3 ac 3d a5  |.U^8s.F.;(.h..=.|
25 98 27 e6 e5 4f 0e f2  f8 f1 34 60 3c d7 d0 3b  |%.'..O....4`<..;|
```
- Certificate #3
  - 2
    - 52:00:E5:AA:25:56:FC:1A:86:ED:96:C9:D4:4B:33:C7
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - O: VeriSign, Inc.
      - OU: VeriSign Trust Network
      - OU: (c) 2006 VeriSign, Inc. - For authorized use only
      - CN: VeriSign Class 3 Public Primary Certification Authority - G5
    - 2010-02-08 00:00:00 UTC: 2020-02-07 23:59:59 UTC
    - Subject
      - C: US
      - O: VeriSign, Inc.
      - OU: VeriSign Trust Network
      - OU: Terms of use at https://www.verisign.com/rpa (c)10
      - CN: VeriSign Class 3 Code Signing 2010 CA
    - #5
      - rsaEncryption: nil
      - F5:23:4B:5E:A5:D7:8A:BB:32:E9:D4:57:F7:EF:E4:C7:
        26:7E:AD:19:98:FE:A8:9D:7D:94:F6:36:6B:10:D7:75:
        81:30:7F:04:68:7F:CB:2B:75:1E:CD:1D:08:8C:DF:69:
        94:A7:37:A3:9C:7B:80:E0:99:E1:EE:37:4D:5F:CE:3B:
        14:EE:86:D4:D0:F5:27:35:BC:25:0B:38:A7:8C:63:9D:
        17:A3:08:A5:AB:B0:FB:CD:6A:62:82:4C:D5:21:DA:1B:
        D9:F1:E3:84:3B:8A:2A:4F:85:5B:90:01:4F:C9:A7:76:
        10:7F:27:03:7C:BE:AE:7E:7D:C1:DD:F9:05:BC:1B:48:
        9C:69:E7:C0:A4:3C:3C:41:00:3E:DF:96:E5:C5:E4:94:
        71:D6:55:01:C7:00:26:4A:40:3C:B5:A1:26:A9:0C:A7:
        6D:80:8E:90:25:7B:CF:BF:3F:1C:EB:2F:96:FA:E5:87:
        77:C6:B5:56:B2:7A:3B:54:30:53:1B:DF:62:34:FF:1E:
        D1:F4:5A:93:28:85:E5:4C:17:4E:7E:5B:FD:A4:93:99:
        7F:DF:CD:EF:A4:75:EF:EF:15:F6:47:E7:F8:19:72:D8:
        2E:34:1A:A6:B4:A7:4C:7E:BD:BB:4F:0C:3D:57:F1:30:
        D6:A6:36:8E:D6:80:76:D7:19:2E:A5:CD:7E:34:2D:89: 0x010001
    - X509v3 extensions
      - basicConstraints
        true
        true: 0
      - certificatePolicies
        2.16.840.1.113733.1.7.23.3
        #0
        id-qt-cps: https://www.verisign.com/cps
        id-qt-unotice: https://www.verisign.com/rpa
      - keyUsage: true, 6
      - 1.3.6.1.5.5.7.1.12
        image/gif
        SHA1:
        8f e5 d3 1a 86 ac 8d 8e 6b c3 cf 80 6a d4 48 18 |........k...j.H.| 2c 7b 19 2e |,{.. |
        http://logo.verisign.com/vslogo.gif
      - crlDistributionPoints: http://crl.verisign.com/pca3-g5.crl
      - authorityInfoAccess
        OCSP: http://ocsp.verisign.com
      - extendedKeyUsage
        clientAuth: codeSigning
      - subjectAltName
        CN: VeriSignMPKI-2-8
      - subjectKeyIdentifier:
        cf 99 a9 ea 7b 26 f4 4b c9 8e 8f d7 f0 05 26 ef |....{&.K......&.| e3 d2 a7 9d |.... |
      - authorityKeyIdentifier:
        7f d3 65 a7 c2 dd ec bb f0 30 09 f3 43 39 fa 02 |..e......0..C9..| af 33 31 33 |.313 |
  - RSA-SHA1:
```
56 22 e6 34 a4 c4 61 cb  48 b9 01 ad 56 a8 64 0f  |V".4..a.H...V.d.|
d9 8c 91 c4 bb cc 0c e5  ad 7a a0 22 7f df 47 38  |.........z."..G8|
4a 2d 6c d1 7f 71 1a 7c  ec 70 a9 b1 f0 4f e4 0f  |J-l..q.|.p...O..|
0c 53 fa 15 5e fe 74 98  49 24 85 81 26 1c 91 14  |.S..^.t.I$..&...|
47 b0 4c 63 8c bb a1 34  d4 c6 45 e8 0d 85 26 73  |G.Lc...4..E...&s|
03 d0 a9 8c 64 6d dc 71  92 e6 45 05 60 15 59 51  |....dm.q..E.`.YQ|
39 fc 58 14 6b fe d4 a4  ed 79 6b 08 0c 41 72 e7  |9.X.k....yk..Ar.|
37 22 06 09 be 23 e9 3f  44 9a 1e e9 61 9d cc b1  |7"...#.?D...a...|
90 5c fc 3d d2 8d ac 42  3d 65 36 d4 b4 3d 40 28  |.\.=...B=e6..=@(|
8f 9b 10 cf 23 26 cc 4b  20 cb 90 1f 5d 8c 4c 34  |....#&.K ...].L4|
ca 3c d8 e5 37 d6 6f a5  20 bd 34 eb 26 d9 ae 0d  |.<..7.o. .4.&...|
e7 c5 9a f7 a1 b4 21 91  33 6f 86 e8 58 bb 25 7c  |......!.3o..X.%||
74 0e 58 fe 75 1b 63 3f  ce 31 7c 9b 8f 1b 96 9e  |t.X.u.c?.1|.....|
c5 53 76 84 5b 9c ad 91  fa ac ed 93 ba 5d c8 21  |.Sv.[........].!|
53 c2 82 53 63 af 12 0d  50 87 11 1b 3d 54 52 96  |S..Sc...P...=TR.|
8a 2c 9c 3d 92 1a 08 9a  05 2e c7 93 a5 48 91 d3  |.,.=.........H..|
```

Signer

1
unnamed
- #0
  - C: US
  - O: VeriSign, Inc.
  - OU: VeriSign Trust Network
  - OU: Terms of use at https://www.verisign.com/rpa (c)10
  - CN: VeriSign Class 3 Code Signing 2010 CA
- 33:47:B8:9E:F6:21:7D:6F:B4:72:69:2D:E4:93:1B:34
SHA1: nil

1.3.6.1.4.1.311.2.1.12
- nil
contentType: 1.3.6.1.4.1.311.2.1.4
1.3.6.1.4.1.311.2.1.11: msCodeInd

messageDigest:

57 a4 d7 fe ea b6 36 32  01 79 0d 7c c8 b2 2b 75  |W.....62.y.|..+u|
1d 08 45 52                                       |..ER            |

rsaEncryption:

b0 69 eb db e5 57 95 5d  be 5b 43 58 d3 6a ae b7  |.i...W.].[CX.j..|
cf 30 a1 9d 76 9b 8e ec  c6 09 68 bd 63 3c b6 c3  |.0..v.....h.c<..|
79 45 70 7e 8a 77 f5 fc  59 93 ea 27 1d 4e 86 67  |yEp~.w..Y..'.N.g|
aa ab b2 db 22 45 2f c2  2d b5 f9 f1 cf b6 40 ab  |...."E/.-.....@.|
02 57 18 65 af d8 b2 d7  d0 f4 f1 7f ed 5e 95 13  |.W.e.........^..|
67 7a da 28 22 2b e1 13  e0 f1 64 bf 73 63 f8 42  |gz.("+....d.sc.B|
5c b3 7e 28 21 46 b8 ad  d3 ac 15 ed 98 4e 31 13  |\.~(!F.......N1.|
6b a2 d9 b9 a1 1c b9 f9  3d c7 13 2c 89 02 2b 64  |k.......=..,..+d|
51 10 cf b0 83 89 b6 f3  98 cc fc 37 8e 34 25 23  |Q..........7.4%#|
3e aa 9b e2 75 1c 58 c7  fb 5b 6a 2f 9d e4 75 e0  |>...u.X..[j/..u.|
7d a0 3b e0 a9 75 5b 37  ca 45 91 2a 16 18 3f 70  |}.;..u[7.E.*..?p|
33 04 d4 a6 4a 2f 1e 02  1d 8d 18 08 b7 5d 4b f5  |3...J/.......]K.|
e6 4b 1c f8 61 99 f0 e1  bd 7d 31 66 a2 db bd 3c  |.K..a....}1f...<|
09 79 5f cd 9f 0b 0c f1  e6 80 a7 16 47 59 ee af  |.y_.........GY..|
46 5a 63 82 e2 73 7d 21  a7 4c 83 20 70 e4 ce d8  |FZc..s}!.L. p...|
f7 a7 00 db d4 01 16 33  de 86 2d c0 46 e6 ba 40  |.......3..-.F..@|

countersignature

unnamed
- #0
  - C: US
  - O: Symantec Corporation
  - CN: Symantec Time Stamping Services CA - G2
- 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
SHA1: nil

contentType: pkcs7-data
signingTime: 2013-04-02 20:54:42 UTC

messageDigest:

12 7a 8a 31 70 4f 8d 68  55 6b 00 31 21 ca ea 44  |.z.1pO.hUk.1!..D|
e3 ac c6 a8                                       |....            |

rsaEncryption:

47 83 0a 65 86 ed 2a f2  69 5e 92 6e 1a 74 7a e2  |G..e..*.i^.n.tz.|
8b a9 0b ea 99 d9 8e a3  54 36 70 53 cb 1d a1 74  |........T6pS...t|
9f 06 6d 29 79 f4 89 81  e1 c5 de 87 a4 cd cd 5f  |..m)y.........._|
e5 af a8 d3 e1 6c b7 9f  2e 8b 3b 65 35 5c 4e b8  |.....l....;e5\N.|
c6 03 6f 1a 20 c4 6d cd  c2 1a f7 db 95 e5 d6 da  |..o. .m.........|
4e a6 42 b8 81 ab ff 6e  14 ee e3 b8 1f 9d e3 5c  |N.B....n.......\|
95 33 c6 82 e1 14 4c 3e  25 5c 28 8b 41 98 83 b1  |.3....L>%\(.A...|
d9 e0 82 af b4 d2 54 b2  45 7c 68 d3 36 cf 01 11  |......T.E|h.6...|
ce 2c a2 99 c7 65 66 68  92 44 07 47 e6 1d fc bf  |.,...efh.D.G....|
f1 7c 71 f2 29 14 61 9a  a2 10 9d eb 5d 6e d1 79  |.|q.).a.....]n.y|
f1 d6 2c 70 cf 66 43 fd  e4 84 c7 67 0b b6 db 9b  |..,p.fC....g....|
3f 6b 51 a0 41 7c fb d2  49 9f 74 ca 31 0b 07 96  |?kQ.A|..I.t.1...|
bc 12 f7 ee d4 62 b3 ed  2c ce d2 91 0e 3e 83 1a  |.....b..,....>..|
57 03 f6 2e 28 e7 df ce  5a 71 ab 39 ca ad 2d 70  |W...(...Zq.9..-p|
71 82 ba 75 59 4e 39 00  b4 44 4c 8b e3 1e 67 6a  |q..uYN9..DL...gj|
2a 1e 86 b3 23 e0 25 a2  3e 15 2c 6c f3 a1 59 45  |*...#.%.>.,l..YE|

show previews

offset	size	type	comment
0	171008	EXE	05/28/2010 08:21:10	#
15c1	15	HTM		#
29c00	51207	RAR	Encrypted Headers!	#
36407	272467289	BIN	overlay data past EOF	#

Scanning the drive for archives:
1 file, 272689504 bytes (261 MiB)


--
Type = PE
Physical Size = 272689504
CPU = x86
Characteristics = Executable 32-bit NoRelocs
Created = 2010-05-28 08:21:10
Headers Size = 1024
Checksum = 272712635
Image Size = 229376
Section Alignment = 4096
File Alignment = 512
Code Size = 68096
Initialized Data Size = 101888
Uninitialized Data Size = 0
Linker Version = 9.0
OS Version = 5.0
Image Version = 0.0
Subsystem Version = 4.0
Subsystem = Windows GUI
DLL Characteristics = NX-Compatible NoSEH TerminalServerAware
Stack Reserve = 1048576
Stack Commit = 4096
Heap Reserve = 1048576
Heap Commit = 4096
Image Base = 4194304
----
Path = [0]
Size = 272512048
Packed Size = 272512048
Virtual Size = 272512048
Offset = 171008
--
Path = [0]
Type = Rar
Physical Size = 272512043
Tail Size = 5
Solid = -
Blocks = 104
Multivolume = -
Volumes = 1

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
2012-11-23 11:12:35 ....A          106           90  runfirst.bat
2012-11-22 11:41:31 ....A       101544        30024  LinkInstaller.exe
2012-11-09 17:17:11 ....A       283168        75998  setuplauncher.exe
2012-11-09 17:17:11 ....A       505648       227210  setupdownloader.exe
2012-11-02 12:53:26 ....A      2350896       927862  htmlayout.dll
2012-11-09 16:08:15 ....A       255488       119596  en-US/setupdownloader.ui
2012-04-27 15:08:08 ....A        92600        40084  bdmetrics.dll
2012-10-24 14:53:50 ....A       130216        63713  bdnc.dll
2012-10-24 15:02:42 ....A          111           90  bdnc.ini
2012-09-11 14:22:14 ....A       271320       125729  WSUtils.dll
2012-11-09 16:08:18 ....A         8433          820  locations.xml
2012-11-02 12:53:29 ....A        47662        11336  detection.xml
2012-11-02 12:53:30 ....A           38           38  productcode.txt
2012-11-02 12:53:26 ....A       303232       108652  UninstallLib.dll
2012-11-02 12:53:28 ....A          628          268  extern/aca.xml
2012-11-02 12:53:28 ....A         2541          376  extern/ad-aware.xml
2012-11-02 12:53:28 ....A          621          286  extern/alading.xml
2012-11-02 12:53:28 ....A         1182          313  extern/antivir.xml
2012-11-02 12:53:28 ....A         1030          290  extern/avast5.xml
2012-11-02 12:53:28 ....A         2417          368  extern/avg.xml
2012-11-02 12:53:28 ....A          634          275  extern/avira.xml
2012-11-02 12:53:28 ....A          652          279  extern/backweb-4476822.xml
2012-11-02 12:53:28 ....A         2120          489  extern/bbc.xml
2012-11-02 12:53:28 ....A          595          265  extern/bitdefender 2011.xml
2012-11-02 12:53:28 ....A        65264         5152  extern/bitdefender antivirus.xml
2012-11-02 12:53:28 ....A         3164          521  extern/bitdefender bussiness client.xml
2012-11-02 12:53:28 ....A        57014         4500  extern/bitdefender internet security.xml
2012-11-02 12:53:28 ....A        27252         2183  extern/bitdefender total security.xml
2012-11-02 12:53:28 ....A          631          273  extern/bitdefendergonzales.xml
2012-11-02 12:53:28 ....A          598          266  extern/bullguard.xml
2012-11-02 12:53:28 ....A          595          265  extern/cciss.xml
2012-11-02 12:53:28 ....A         1003          363  extern/comodo.xml
2012-11-02 12:53:28 ....A          586          263  extern/drweb.xml
2012-11-02 12:53:28 ....A          589          263  extern/eastlink.xml
2012-11-02 12:53:28 ....A         7911         1064  extern/eset.xml
2012-11-02 12:53:28 ....A         1107          308  extern/etrust.xml
2012-11-02 12:53:28 ....A         1131          325  extern/f-secure.xml
2012-11-02 12:53:28 ....A         1719          433  extern/g data.xml
2012-11-02 12:53:28 ....A        26025         2107  extern/guids.xml
2012-11-02 12:53:28 ....A          610          269  extern/hotspot.xml
2012-11-02 12:53:28 ....A          595          263  extern/jiangmin.xml
2012-11-02 12:53:28 ....A         7535          874  extern/kaspersky.xml
2012-11-02 12:53:28 ....A         1128          330  extern/kingsoft.xml
2012-11-02 12:53:28 ....A          618          288  extern/kingsoftsafeguard.xml
2012-11-02 12:53:28 ....A         1034          294  extern/kv antivirus.xml
2012-11-02 12:53:28 ....A          646          278  extern/lavasoft.xml
2012-11-02 12:53:28 ....A         2555          411  extern/mcafee.xml
2012-11-02 12:53:28 ....A          682          284  extern/micropoint.xml
2012-11-02 12:53:28 ....A         2082          499  extern/microsoft security essentials.xml
2012-11-02 12:53:28 ....A         1155          316  extern/mobile.xml
2012-11-02 12:53:28 ....A          580          260  extern/msc.xml
2012-11-02 12:53:28 ....A         1705          430  extern/norman.xml
2012-11-02 12:53:28 ....A         6793          778  extern/norton.xml
2012-11-02 12:53:28 ....A          607          269  extern/officescan95.xml
2012-11-02 12:53:28 ....A          607          268  extern/officescannt.xml
2012-11-02 12:53:28 ....A         6853          885  extern/panda.xml
2012-11-02 12:53:28 ....A          629          289  extern/pc tools.xml
2012-11-02 12:53:28 ....A          637          276  extern/premium.xml
2012-11-02 12:53:28 ....A          592          264  extern/qqpcmgr.xml
2012-11-02 12:53:28 ....A          580          260  extern/rav.xml
2012-11-02 12:53:28 ....A          580          260  extern/rfw.xml
2012-11-02 12:53:28 ....A          580          259  extern/ris.xml
2012-11-02 12:53:28 ....A        12769         1283  extern/rp.xml
2012-11-02 12:53:28 ....A         1047          312  extern/safeguard360.xml
2012-11-02 12:53:28 ....A         1568          326  extern/serverprotect.xml
2012-11-02 12:53:28 ....A          618          273  extern/shielddeluxe.xml
2012-11-02 12:53:28 ....A         1707          440  extern/sunbelt.xml
2012-11-02 12:53:28 ....A         1665          402  extern/trend micro.xml
2012-11-02 12:53:28 ....A          604          268  extern/vetwin32vp5.xml
2012-11-02 12:53:28 ....A          622          271  extern/virus.xml
2012-11-02 12:53:28 ....A          619          270  extern/webroot.xml
2012-11-02 12:53:28 ....A          586          260  extern/winss.xml
2012-11-02 12:53:28 ....A         2547          388  extern/zonealarm.xml
2011-03-28 12:50:54 ....A      4995416      4982611  vcredist2010x86.exe
2012-11-27 10:59:04 ....A    143744064    142699599  pluginsx86.exe
2012-11-27 10:57:50 ....A      2099816       612880  antiphishing.exe
2012-11-27 10:57:56 ....A      5209448      4327831  parental.exe
2012-11-27 14:35:42 ....A     15256853     15189558  ThreatScanner.exe
2012-11-27 14:35:43 ....A      6368969      6279291  installerpackage.exe
2012-11-27 14:35:51 ....A     38164432     38091993  bdrescue.exe
2012-11-27 14:36:02 ....A     44215515     42913618  bdav_WinXP_WinVista_Win7_ProgramFilesFolder.exe
2012-11-27 14:36:02 ....A       218842       115861  bdav_WinVista_Win7_ProgramFilesFolder.exe
2012-11-27 14:36:03 ....A      3466109      3164325  bdis_WinXP_WinVista_Win7_ProgramFilesFolder.exe
2012-11-27 14:36:03 ....A      1252074      1139932  bdts_WinXP_WinVista_Win7_ProgramFilesFolder.exe
2012-11-27 14:36:04 ....A      1836024      1734679  bdts_WinXP_WinVista_Win7_Safebox.exe
2012-11-27 14:36:04 ....A       445596       343181  bdav_WinXP_CommonFilesFolder.exe
2012-11-27 14:36:04 ....A       586570       484447  bdav_WinVista_CommonFilesFolder.exe
2012-11-27 14:36:04 ....A      1488465      1387747  bdav_Win7_CommonFilesFolder.exe
2012-11-27 14:36:04 ....A       707460       605042  bdav_WinXP_WinVista_Win7_CommonFilesFolder.exe
2012-11-27 14:36:05 ....A       220873       117890  bdav_WinXP_WinVista_CommonFilesFolder.exe
2012-11-27 14:36:05 ....A       219587       116328  bdis_WinXP_CommonFilesFolder.exe
2012-11-27 14:36:05 ....A       184374        81261  bdis_WinXP_WinVista_Win7_CommonFilesFolder.exe
2012-11-27 14:36:05 ....A       219161       116071  bdis_WinVista_Win7_CommonFilesFolder.exe
2012-11-27 14:36:05 ....A       171716        68447  localization_Appdata.exe
2012-11-27 14:36:05 ....A       205633       102665  bdav_WinXP_WinVista_Win7_System32.exe
2012-11-27 14:36:05 ....A       325316       222590  bdav_WinXP_WinVista_Win7_SystemFolder.exe
2012-11-27 14:36:06 ....A      2507640      2386607  bdav_localization.exe
2012-11-27 14:36:06 ....A       172144        68982  localization_safebox.exe
2012-11-27 14:36:06 ....A       670867       564340  bdis_localization.exe
2012-11-27 14:36:06 ....A       713785       610530  bdts_localization.exe
2012-11-27 14:36:07 ....A      2044424      1894956  bdav_Win8_ProgramFilesFolder.exe
2012-11-27 14:36:07 ....A       192858        78748  bdav_Win8_SystemFolder.exe
2012-11-27 14:36:07 ....A       220183       117165  bdis_Win8_CommonFilesFolder.exe
2012-11-27 14:36:07 ....A       223706       120662  bdav_Win8_CommonFilesFolder.exe
------------------- ----- ------------ ------------  ------------------------
2012-11-27 14:36:07          282969126    272505671  104 files

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] can't find file_offset of VA 0x0