filenameRecomTips.exe
size1905504 (0x1d1360)
md55ac9094088cda94f86d9ef236192b899
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x118

Rich Header

lib idversiontimes used
199411184
2232100550
2252100596
22421005233
225208062
206655017
208655011
10415
2036550135
2243110112
2253110188
2293110129
219210051
15101
222311011

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x585e347a
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x102
Magic0x10b
LinkerVersion12.0
SizeOfCode0x173a00
SizeOfInitializedData0x5f600
SizeOfUninitializedData0
AddressOfEntryPoint0xc6267
BaseOfCode0x1000
BaseOfData0x175000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.1
ImageVersion0.0
SubsystemVersion5.1
Reserved10
SizeOfImage0x1d5000
SizeOfHeaders0x400
CheckSum0x1d2f51
Subsystem2
DllCharacteristics0x8140
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MASM/TASM - sig1(h)

Sections

namevavsizeraw sizeflags
.text0x10000x17398f0x173a00R-X CODE
.rdata0x1750000x3ae9a0x3b000R-- IDATA
.data0x1b00000x97800x5e00RW- IDATA
.rsrc0x1ba0000xbf400xc000R-- IDATA
.reloc0x1c60000xed600xee00R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0x1addc80x140
RESOURCE0x1ba0000xbf40
EXCEPTION00
SECURITY0x1cfa000x1960
BASERELOC0x1c60000xed60
DEBUG0x1759400x38
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x19bc400x40
Bound_IAT00
IAT0x1750000x5d4
Delay_IAT00
CLR_Header00
typenamesizecp
ZIP#103474090
DIALOG#1011440
VERSION#16920
MANIFEST#13810
module_namehintordfunction_name
VERSION.dll16VerQueryValueW
VERSION.dll8GetFileVersionInfoW
VERSION.dll7GetFileVersionInfoSizeW
KERNEL32.dll736GetTempFileNameA
KERNEL32.dll839InitializeCriticalSection
KERNEL32.dll261DeleteCriticalSection
KERNEL32.dll293EnterCriticalSection
KERNEL32.dll930LeaveCriticalSection
KERNEL32.dll179CreateEventA
KERNEL32.dll1451WaitForSingleObject
KERNEL32.dll1264SetEvent
KERNEL32.dll1186ResetEvent
KERNEL32.dll840InitializeCriticalSectionAndSpinCount
KERNEL32.dll1088RaiseException
KERNEL32.dll456GetCommandLineA
KERNEL32.dll526GetCurrentThreadId
KERNEL32.dll1017OutputDebugStringA
KERNEL32.dll337ExitProcess
KERNEL32.dll215CreateProcessA
KERNEL32.dll1537lstrcmpiA
KERNEL32.dll254DecodePointer
KERNEL32.dll1362Sleep
KERNEL32.dll266DeleteFileW
KERNEL32.dll737GetTempFileNameW
KERNEL32.dll739GetTempPathW
KERNEL32.dll1291SetLastError
KERNEL32.dll1377TerminateProcess
KERNEL32.dll556GetExitCodeProcess
KERNEL32.dll414FreeLibrary
KERNEL32.dll417FreeResource
KERNEL32.dll611GetModuleFileNameW
KERNEL32.dll933LoadLibraryA
KERNEL32.dll390FindResourceA
KERNEL32.dll165CopyFileW
KERNEL32.dll772GetVersionExA
KERNEL32.dll946LocalFree
KERNEL32.dll1347SetUnhandledExceptionFilter
KERNEL32.dll1378TerminateThread
KERNEL32.dll410FormatMessageW
KERNEL32.dll936LoadLibraryW
KERNEL32.dll409FormatMessageA
KERNEL32.dll726GetSystemTimeAsFileTime
KERNEL32.dll1412UnlockFileEx
KERNEL32.dll1018OutputDebugStringW
KERNEL32.dll1452WaitForSingleObjectEx
KERNEL32.dll955LockFile
KERNEL32.dll405FlushViewOfFile
KERNEL32.dll1411UnlockFile
KERNEL32.dll1069QueryPerformanceCounter
KERNEL32.dll1258SetEndOfFile
KERNEL32.dll816HeapCompact
KERNEL32.dll209CreateMutexW
KERNEL32.dll582GetFullPathNameA
KERNEL32.dll585GetFullPathNameW
KERNEL32.dll27AreFileApisANSI
KERNEL32.dll724GetSystemTime
KERNEL32.dll522GetCurrentProcessId
KERNEL32.dll562GetFileAttributesExW
KERNEL32.dll720GetSystemInfo
KERNEL32.dll536GetDiskFreeSpaceA
KERNEL32.dll191CreateFileMappingW
KERNEL32.dll539GetDiskFreeSpaceW
KERNEL32.dll956LockFileEx
KERNEL32.dll402FlushFileBuffers
KERNEL32.dll194CreateFileW
KERNEL32.dll565GetFileAttributesW
KERNEL32.dll827HeapValidate
KERNEL32.dll817HeapCreate
KERNEL32.dll1170RemoveDirectoryA
KERNEL32.dll521GetCurrentProcess
KERNEL32.dll178CreateDirectoryW
KERNEL32.dll348FileTimeToLocalFileTime
KERNEL32.dll871IsDebuggerPresent
KERNEL32.dll232CreateThread
KERNEL32.dll628GetNativeSystemInfo
KERNEL32.dll1395TlsAlloc
KERNEL32.dll1397TlsGetValue
KERNEL32.dll1398TlsSetValue
KERNEL32.dll1396TlsFree
KERNEL32.dll613GetModuleHandleExA
KERNEL32.dll1261SetEnvironmentVariableA
KERNEL32.dll1504WriteConsoleW
KERNEL32.dll1268SetFileAttributesA
KERNEL32.dll1314SetStdHandle
KERNEL32.dll476GetConsoleCP
KERNEL32.dll1102ReadConsoleW
KERNEL32.dll494GetConsoleMode
KERNEL32.dll413FreeEnvironmentStringsW
KERNEL32.dll551GetEnvironmentStringsW
KERNEL32.dll574GetFileType
KERNEL32.dll761GetTimeZoneInformation
KERNEL32.dll704GetStdHandle
KERNEL32.dll614GetModuleHandleExW
KERNEL32.dll646GetOEMCP
KERNEL32.dll420GetACP
KERNEL32.dll882IsValidCodePage
KERNEL32.dll327EnumSystemLocalesW
KERNEL32.dll764GetUserDefaultLCID
KERNEL32.dll884IsValidLocale
KERNEL32.dll596GetLocaleInfoW
KERNEL32.dll918LCMapStringW
KERNEL32.dll147CompareStringW
KERNEL32.dll615GetModuleHandleW
KERNEL32.dll702GetStartupInfoW
KERNEL32.dll1410UnhandledExceptionFilter
KERNEL32.dll935LoadLibraryExW
KERNEL32.dll338ExitThread
KERNEL32.dll1197RtlUnwind
KERNEL32.dll360FindClose
KERNEL32.dll364FindFirstFileA
KERNEL32.dll274DeviceIoControl
KERNEL32.dll599GetLogicalDrives
KERNEL32.dll542GetDriveTypeA
KERNEL32.dll597GetLogicalDriveStringsA
KERNEL32.dll1413UnmapViewOfFile
KERNEL32.dll960MapViewOfFile
KERNEL32.dll187CreateFileMappingA
KERNEL32.dll571GetFileSize
KERNEL32.dll349FileTimeToSystemTime
KERNEL32.dll1280SetFileTime
KERNEL32.dll1505WriteFile
KERNEL32.dll173CreateDirectoryA
KERNEL32.dll944LocalFileTimeToFileTime
KERNEL32.dll514GetCurrentDirectoryA
KERNEL32.dll1373SystemTimeToFileTime
KERNEL32.dll877IsProcessorFeaturePresent
KERNEL32.dll1104ReadFile
KERNEL32.dll1276SetFilePointer
KERNEL32.dll186CreateFileA
KERNEL32.dll738GetTempPathA
KERNEL32.dll560GetFileAttributesA
KERNEL32.dll263DeleteFileA
KERNEL32.dll160CopyFileA
KERNEL32.dll435GetCPInfo
KERNEL32.dll977MultiByteToWideChar
KERNEL32.dll392FindResourceExW
KERNEL32.dll289EncodePointer
KERNEL32.dll709GetStringTypeW
KERNEL32.dll393FindResourceW
KERNEL32.dll939LoadResource
KERNEL32.dll957LockResource
KERNEL32.dll1361SizeofResource
KERNEL32.dll1038Process32Next
KERNEL32.dll1036Process32First
KERNEL32.dll241CreateToolhelp32Snapshot
KERNEL32.dll1277SetFilePointerEx
KERNEL32.dll381FindNextFileA
KERNEL32.dll610GetModuleFileNameA
KERNEL32.dll612GetModuleHandleA
KERNEL32.dll669GetProcAddress
KERNEL32.dll127CloseHandle
KERNEL32.dll206CreateMutexA
KERNEL32.dll754GetTickCount
KERNEL32.dll665GetPrivateProfileStringA
KERNEL32.dll1510WritePrivateProfileStringA
KERNEL32.dll674GetProcessHeap
KERNEL32.dll1485WideCharToMultiByte
KERNEL32.dll824HeapSize
KERNEL32.dll822HeapReAlloc
KERNEL32.dll819HeapFree
KERNEL32.dll815HeapAlloc
KERNEL32.dll818HeapDestroy
KERNEL32.dll592GetLastError
KERNEL32.dll976MulDiv
KERNEL32.dll287DuplicateHandle
KERNEL32.dll1404TryEnterCriticalSection
KERNEL32.dll282DosDateTimeToFileTime
USER32.dll755SetRect
USER32.dll50CharPrevA
USER32.dll423GetSysColor
USER32.dll308GetDC
USER32.dll496InvalidateRgn
USER32.dll89CreateAcceleratorTableA
USER32.dll855UpdateWindow
USER32.dll597MsgWaitForMultipleObjectsEx
USER32.dll407GetQueueStatus
USER32.dll26CallMsgFilterA
USER32.dll173DestroyWindow
USER32.dll113CreateWindowExW
USER32.dll649RegisterClassExW
USER32.dll841UnregisterClassW
USER32.dll160DefWindowProcA
USER32.dll879WaitMessage
USER32.dll619PeekMessageA
USER32.dll180DispatchMessageA
USER32.dll831TranslateMessage
USER32.dll529IsWindow
USER32.dll467GetWindowThreadProcessId
USER32.dll884WindowFromPoint
USER32.dll426GetSystemMetrics
USER32.dll685ScreenToClient
USER32.dll281GetCapture
USER32.dll724SetFocus
USER32.dll634PtInRect
USER32.dll625PostQuitMessage
USER32.dll780SetWindowLongA
USER32.dll452GetWindowLongA
USER32.dll537KillTimer
USER32.dll769SetTimer
USER32.dll307GetCursorPos
USER32.dll459GetWindowRect
USER32.dll814SystemParametersInfoA
USER32.dll534IsWindowVisible
USER32.dll262FindWindowA
USER32.dll783SetWindowPos
USER32.dll623PostMessageA
USER32.dll311GetDesktopWindow
USER32.dll890wsprintfA
USER32.dll91CreateCaret
USER32.dll472HideCaret
USER32.dll794ShowCaret
USER32.dll800ShowWindow
USER32.dll367GetMessageA
USER32.dll695SendMessageA
USER32.dll112CreateWindowExA
USER32.dll852UpdateLayeredWindow
USER32.dll322GetFocus
USER32.dll339GetKeyState
USER32.dll704SetCapture
USER32.dll676ReleaseCapture
USER32.dll448GetWindowDC
USER32.dll677ReleaseDC
USER32.dll14BeginPaint
USER32.dll233EndPaint
USER32.dll436GetUpdateRect
USER32.dll784SetWindowRgn
USER32.dll495InvalidateRect
USER32.dll293GetClientRect
USER32.dll577MapWindowPoints
USER32.dll261FillRect
USER32.dll494IntersectRect
USER32.dll836UnionRect
USER32.dll605OffsetRect
USER32.dll521IsRectEmpty
USER32.dll378GetParent
USER32.dll443GetWindow
USER32.dll892wvsprintfA
USER32.dll29CallWindowProcA
USER32.dll647RegisterClassA
USER32.dll648RegisterClassExA
USER32.dll285GetClassInfoExA
USER32.dll595MoveWindow
USER32.dll228EnableWindow
USER32.dll753SetPropA
USER32.dll405GetPropA
USER32.dll713SetCursor
USER32.dll73ClientToScreen
USER32.dll542LoadCursorA
USER32.dll594MonitorFromWindow
USER32.dll372GetMonitorInfoA
USER32.dll514IsIconic
USER32.dll536IsZoomed
USER32.dll47CharNextA
USER32.dll801ShowWindowAsync
USER32.dll787SetWindowTextA
USER32.dll463GetWindowTextA
USER32.dll464GetWindowTextLengthA
USER32.dll706SetCaretPos
ADVAPI32.dll596RegCloseKey
ADVAPI32.dll397InitializeSecurityDescriptor
ADVAPI32.dll735SetSecurityDescriptorDacl
ADVAPI32.dll657RegQueryValueExA
ADVAPI32.dll32AllocateAndInitializeSid
ADVAPI32.dll95CheckTokenMembership
ADVAPI32.dll307FreeSid
ADVAPI32.dll644RegOpenKeyExA
SHELL32.dll244SHGetSpecialFolderPathW
SHELL32.dll242SHGetSpecialFolderPathA
SHELL32.dll182SHFileOperationW
ole32.dll123CoTaskMemFree
ole32.dll10CLSIDFromProgID
ole32.dll12CLSIDFromString
ole32.dll26CoCreateInstance
ole32.dll362OleLockRunning
ole32.dll127CoUninitialize
ole32.dll79CoInitialize
SHLWAPI.dll71PathFileExistsA
SHLWAPI.dll118PathIsURLA
SHLWAPI.dll76PathFindFileNameA
SHLWAPI.dll73PathFileExistsW
SHLWAPI.dll50PathAddBackslashA
urlmon.dll117URLOpenStreamA
urlmon.dll110URLDownloadToFileA
IPHLPAPI.DLL62GetAdaptersInfo
WININET.dll194InternetOpenA
WININET.dll152InternetConnectA
WININET.dll202InternetReadFile
WININET.dll117HttpOpenRequestA
WININET.dll124HttpSendRequestA
WININET.dll146InternetCloseHandle
WINMM.dll148timeGetTime
WINMM.dll145timeEndPeriod
WINMM.dll144timeBeginPeriod
COMCTL32.dll17
COMCTL32.dll146_TrackMouseEvent
MSIMG32.dllAlphaBlend
gdiplus.dll138GdipDeleteBrush
gdiplus.dll50GdipCloneBrush
gdiplus.dll146GdipDeletePath
gdiplus.dll115GdipCreatePath
gdiplus.dll237GdipFree
gdiplus.dll33GdipAlloc
gdiplus.dll151GdipDeleteStringFormat
gdiplus.dll130GdipCreateSolidFill
gdiplus.dll443GdipMeasureString
gdiplus.dll142GdipDeleteFont
gdiplus.dll89GdipCreateFontFromLogfontA
gdiplus.dll88GdipCreateFontFromDC
gdiplus.dll144GdipDeleteGraphics
gdiplus.dll91GdipCreateFromHDC
gdiplus.dll629GdiplusStartup
gdiplus.dll474GdipReleaseDC
gdiplus.dll585GdipSetSmoothingMode
gdiplus.dll536GdipSetInterpolationMode
gdiplus.dll596GdipSetTextRenderingHint
gdiplus.dll200GdipDrawString
gdiplus.dll589GdipSetStringFormatFlags
gdiplus.dll587GdipSetStringFormatAlign
gdiplus.dll591GdipSetStringFormatLineAlign
gdiplus.dll594GdipSetStringFormatTrimming
gdiplus.dll132GdipCreateStringFormat
GDI32.dll732SetBkColor
GDI32.dll785StretchBlt
GDI32.dll768SetStretchBltMode
GDI32.dll80CreateRectRgn
GDI32.dll76CreatePen
GDI32.dll49CreateCompatibleDC
GDI32.dll48CreateCompatibleBitmap
GDI32.dll19BitBlt
GDI32.dll723SelectClipRgn
GDI32.dll86CreateSolidBrush
GDI32.dll772SetTextColor
GDI32.dll624MoveToEx
GDI32.dll790TextOutA
GDI32.dll82CreateRoundRectRgn
GDI32.dll779SetWindowOrgEx
GDI32.dll725SelectObject
GDI32.dll678SaveDC
GDI32.dll671RestoreDC
GDI32.dll661Rectangle
GDI32.dll672RoundRect
GDI32.dll610LineTo
GDI32.dll580GetTextColor
GDI32.dll491GetClipBox
GDI32.dll476GetCharABCWidthsA
GDI32.dll81CreateRectRgnIndirect
GDI32.dll34CombineRgn
GDI32.dll503GetDeviceCaps
GDI32.dll54CreateDIBSection
GDI32.dll268DeleteDC
GDI32.dll351ExtSelectClipRgn
GDI32.dll551GetObjectA
GDI32.dll62CreateFontIndirectA
GDI32.dll585GetTextExtentPoint32A
GDI32.dll733SetBkMode
GDI32.dll271DeleteObject
GDI32.dll569GetStockObject
GDI32.dll593GetTextMetricsA

StringTable 080404b0

FileDescriptionTKwPersonalRecom
FileVersion1.0.2.25
InternalNameTKwPersonalRecom
LegalCopyrightCopyright (C) 2015
OriginalFilenameTKwPersonalRecom
ProductNameTKwPersonalRecom
ProductVersion1.0.2.25

VS_FIXEDFILEINFO

FileVersion1.0.2.25
ProductVersion1.0.2.25
StrucVersion0x10000
FileFlagsMask0x17
FileFlags0
FileOS4
FileType2
FileSubtype0

Signers (1)

issuer: /C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https:\/\/www.verisign.com\/rpa (c)10/CN=VeriSign Class 3 Code Signing 2010 CA
serial: 50DA1504909F7273486D47AC0AB74675

Certificates (4)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
        Validity
            Not Before: Dec 21 00:00:00 2012 GMT
            Not After : Dec 30 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:b3:49:54:4b:97:1c:12:0a:d8:25:79:91:
                    22:57:2a:6f:dc:b8:26:c4:43:73:6b:c2:bf:2e:50:
                    5a:fb:14:c2:76:8e:43:01:25:43:b4:a1:e2:45:f4:
                    e8:b7:7b:c3:74:cc:22:d7:b4:94:00:02:f7:4d:ed:
                    bf:b4:b7:44:24:6b:cd:5f:45:3b:d1:44:ce:43:12:
                    73:17:82:8b:69:b4:2b:cb:99:1e:ac:72:1b:26:4d:
                    71:1f:b1:31:dd:fb:51:61:02:53:a6:aa:f5:49:2c:
                    05:78:45:a5:2f:89:ce:e7:99:e7:fe:8c:e2:57:3f:
                    3d:c6:92:dc:4a:f8:7b:33:e4:79:0a:fb:f0:75:88:
                    41:9c:ff:c5:03:51:99:aa:d7:6c:9f:93:69:87:65:
                    29:83:85:c2:60:14:c4:c8:c9:3b:14:da:c0:81:f0:
                    1f:0d:74:de:92:22:ab:ca:f7:fb:74:7c:27:e6:f7:
                    4a:1b:7f:a7:c3:9e:2d:ae:8a:ea:a6:e6:aa:27:16:
                    7d:61:f7:98:71:11:bc:e2:50:a1:4b:e5:5d:fa:e5:
                    0e:a7:2c:9f:aa:65:20:d3:d8:96:e8:c8:7c:a5:4e:
                    48:44:ff:19:e2:44:07:92:0b:d7:68:84:80:5d:6a:
                    78:64:45:cd:60:46:7e:54:c1:13:7c:c5:79:f1:c9:
                    c1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD
            Authority Information Access: 
                OCSP - URI:http://ocsp.thawte.com
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.thawte.com/ThawteTimestampingCA.crl
            X509v3 Extended Key Usage: 
                Time Stamping
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-1
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        03:09:9b:8f:79:ef:7f:59:30:aa:ef:68:b5:fa:e3:09:1d:bb:
        4f:82:06:5d:37:5f:a6:52:9f:16:8d:ea:1c:92:09:44:6e:f5:
        6d:eb:58:7c:30:e8:f9:69:8d:23:73:0b:12:6f:47:a9:ae:39:
        11:f8:2a:b1:9b:b0:1a:c3:8e:eb:59:96:00:ad:ce:0c:4d:b2:
        d0:31:a6:08:5c:2a:7a:fc:e2:7a:1d:57:4c:a8:65:18:e9:79:
        40:62:25:96:6e:c7:c7:37:6a:83:21:08:8e:41:ea:dd:d9:57:
        3f:1d:77:49:87:2a:16:06:5e:a6:38:6a:22:12:a3:51:19:83:
        7e:b6

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Validity
            Not Before: Oct 18 00:00:00 2012 GMT
            Not After : Dec 29 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer - G4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a2:63:0b:39:44:b8:bb:23:a7:44:49:bb:0e:ff:
                    a1:f0:61:0a:53:93:b0:98:db:ad:2c:0f:4a:c5:6e:
                    ff:86:3c:53:55:0f:15:ce:04:3f:2b:fd:a9:96:96:
                    d9:be:61:79:0b:5b:c9:4c:86:76:e5:e0:43:4b:22:
                    95:ee:c2:2b:43:c1:9f:d8:68:b4:8e:40:4f:ee:85:
                    38:b9:11:c5:23:f2:64:58:f0:15:32:6f:4e:57:a1:
                    ae:88:a4:02:d7:2a:1e:cd:4b:e1:dd:63:d5:17:89:
                    32:5b:b0:5e:99:5a:a8:9d:28:50:0e:17:ee:96:db:
                    61:3b:45:51:1d:cf:12:56:0b:92:47:fc:ab:ae:f6:
                    66:3d:47:ac:70:72:e7:92:e7:5f:cd:10:b9:c4:83:
                    64:94:19:bd:25:80:e1:e8:d2:22:a5:d0:ba:02:7a:
                    a1:77:93:5b:65:c3:ee:17:74:bc:41:86:2a:dc:08:
                    4c:8c:92:8c:91:2d:9e:77:44:1f:68:d6:a8:74:77:
                    db:0e:5b:32:8b:56:8b:33:bd:d9:63:c8:49:9d:3a:
                    c5:c5:ea:33:0b:d2:f1:a3:1b:f4:8b:be:d9:b3:57:
                    8b:3b:de:04:a7:7a:22:b2:24:ae:2e:c7:70:c5:be:
                    4e:83:26:08:fb:0b:bd:a9:4f:99:08:e1:10:28:72:
                    aa:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                OCSP - URI:http://ts-ocsp.ws.symantec.com
                CA Issuers - URI:http://ts-aia.ws.symantec.com/tss-ca-g2.cer
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://ts-crl.ws.symantec.com/tss-ca-g2.crl
            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-2
            X509v3 Subject Key Identifier: 
                46:C6:69:A3:0E:4A:14:1E:D5:4C:DA:52:63:17:3F:5E:36:BC:0D:E6
            X509v3 Authority Key Identifier: 
                5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        78:3b:b4:91:2a:00:4c:f0:8f:62:30:37:78:a3:84:27:07:6f:
        18:b2:de:25:dc:a0:d4:94:03:aa:86:4e:25:9f:9a:40:03:1c:
        dd:ce:e3:79:cb:21:68:06:da:b6:32:b4:6d:bf:f4:2c:26:63:
        33:e4:49:64:6d:0d:e6:c3:67:0e:f7:05:a4:35:6c:7c:89:16:
        c6:e9:b2:df:b2:e9:dd:20:c6:71:0f:cd:95:74:dc:b6:5c:de:
        bd:37:1f:43:78:e6:78:b5:cd:28:04:20:a3:aa:f1:4b:c4:88:
        29:91:0e:80:d1:11:fc:dd:5c:76:6e:4f:5e:0e:45:46:41:6e:
        0d:b0:ea:38:9a:b1:3a:da:09:71:10:fc:1c:79:b4:80:7b:ac:
        69:f4:fd:9c:b6:0c:16:2b:f1:7f:5b:09:3d:9b:5b:e2:16:ca:
        13:81:6d:00:2e:38:0d:a8:29:8f:2c:e1:b2:f4:5a:a9:01:af:
        15:9c:2c:2f:49:1b:db:22:bb:c3:fe:78:94:51:c3:86:b1:82:
        88:5d:f0:3d:b4:51:a1:79:33:2b:2e:7b:b9:dc:20:09:13:71:
        eb:6a:19:5b:cf:e8:a5:30:57:2c:89:49:3f:b9:cf:7f:c9:bf:
        3e:22:68:63:53:9a:bd:69:74:ac:c5:1d:3c:7f:92:e0:c3:bc:
        1c:d8:04:75

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:da:15:04:90:9f:72:73:48:6d:47:ac:0a:b7:46:75
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https:\/\/www.verisign.com\/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA
        Validity
            Not Before: Nov  4 00:00:00 2013 GMT
            Not After : Jan  2 23:59:59 2017 GMT
        Subject: C=CN, ST=Beijing, L=Beijing, O=BEIJING KUWO TECHNOLOGY CO.,LTD., OU=Digital ID Class 3 - Microsoft Software Validation v2, OU=KUWO MUSIC, CN=BEIJING KUWO TECHNOLOGY CO.,LTD.
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:94:c7:e4:15:69:09:66:3b:c7:73:96:ea:ff:73:
                    fa:00:e3:78:83:48:d6:3e:8c:dd:1e:6a:e4:5f:7e:
                    87:f7:8d:77:7f:5a:28:c0:65:d5:a8:19:91:aa:8c:
                    36:7a:79:35:aa:e9:3f:13:34:a6:33:c3:74:66:35:
                    2b:2c:61:f2:d0:0e:a1:03:34:96:42:79:da:31:b1:
                    9c:f9:ff:9d:6f:5b:fb:4e:8c:55:ea:a8:b5:f6:8d:
                    9a:1a:25:17:b2:9e:a1:de:9e:4f:06:4f:b7:91:29:
                    95:3b:47:98:30:54:f9:dd:d6:2b:b7:4f:4c:db:f2:
                    30:da:5d:ca:c3:75:e7:f1:ba:e6:3f:05:38:50:0d:
                    25:c1:b4:dc:5e:0b:10:60:29:fd:a4:2c:32:52:8b:
                    f8:69:c8:e4:b4:56:62:40:b5:6f:fa:ff:b5:69:c8:
                    4f:af:34:a3:c7:e9:47:e6:48:87:20:86:dd:d0:48:
                    07:4b:5d:95:27:18:76:02:6f:69:ec:39:5e:f2:99:
                    5b:c6:c7:f0:00:c8:7b:da:c9:8f:b8:67:ad:b5:a9:
                    0c:26:c0:c8:fc:d2:a8:9d:62:05:25:9a:d1:c9:3a:
                    59:20:de:35:8e:22:88:7f:a5:91:fe:fa:ba:a3:08:
                    43:1a:48:85:be:93:c5:e0:19:9c:7f:ef:d8:df:ee:
                    2c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://csc3-2010-crl.verisign.com/CSC3-2010.crl
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/rpa
            X509v3 Extended Key Usage: 
                Code Signing
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com
                CA Issuers - URI:http://csc3-2010-aia.verisign.com/CSC3-2010.cer
            X509v3 Authority Key Identifier: 
                CF:99:A9:EA:7B:26:F4:4B:C9:8E:8F:D7:F0:05:26:EF:E3:D2:A7:9D
            Netscape Cert Type: 
                Object Signing
            1.3.6.1.4.1.311.2.1.27: 
                0.......
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        62:6a:19:aa:33:15:ec:b5:91:71:af:68:7d:29:df:f9:e3:d7:
        6d:7f:3f:59:dc:45:0b:e4:74:d9:63:08:2e:1f:47:0b:dc:58:
        53:bf:b4:eb:5a:e1:5d:18:f5:47:fa:28:60:96:60:29:b4:fb:
        95:d6:a9:3a:59:69:20:26:74:3e:a1:ab:c9:68:1f:82:9f:3d:
        36:c6:fb:5c:99:f0:68:58:ff:98:68:20:4d:de:ad:e6:db:b3:
        74:92:ff:86:ee:59:7d:f0:6d:98:8e:e2:55:5d:fd:39:1b:31:
        7f:6c:df:7e:02:f5:ea:ef:ee:1c:07:c2:2b:f4:53:4d:07:2c:
        c8:a7:9a:61:16:0a:31:33:ed:25:d0:7b:6e:13:b2:7d:9a:ba:
        3b:bd:bb:fa:8d:14:69:a8:71:eb:e3:ca:7d:3a:63:b3:1a:a0:
        dc:3a:5c:b4:5c:74:ba:c7:7f:a0:43:45:9e:87:ba:bb:60:e8:
        17:a0:3f:7b:ae:60:3d:4e:92:54:cb:71:95:8f:0a:3c:f0:a0:
        32:e2:c3:b4:1f:a2:45:9d:2a:df:a8:a0:e0:5d:4c:72:d9:32:
        6a:24:14:c6:ad:76:75:fd:36:15:8c:62:83:99:e8:c9:1d:0f:
        55:ab:ad:04:e6:45:09:fe:f1:53:df:75:d2:36:11:ce:36:53:
        22:b7:f9:62

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
        Validity
            Not Before: Feb  8 00:00:00 2010 GMT
            Not After : Feb  7 23:59:59 2020 GMT
        Subject: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https:\/\/www.verisign.com\/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:f5:23:4b:5e:a5:d7:8a:bb:32:e9:d4:57:f7:ef:
                    e4:c7:26:7e:ad:19:98:fe:a8:9d:7d:94:f6:36:6b:
                    10:d7:75:81:30:7f:04:68:7f:cb:2b:75:1e:cd:1d:
                    08:8c:df:69:94:a7:37:a3:9c:7b:80:e0:99:e1:ee:
                    37:4d:5f:ce:3b:14:ee:86:d4:d0:f5:27:35:bc:25:
                    0b:38:a7:8c:63:9d:17:a3:08:a5:ab:b0:fb:cd:6a:
                    62:82:4c:d5:21:da:1b:d9:f1:e3:84:3b:8a:2a:4f:
                    85:5b:90:01:4f:c9:a7:76:10:7f:27:03:7c:be:ae:
                    7e:7d:c1:dd:f9:05:bc:1b:48:9c:69:e7:c0:a4:3c:
                    3c:41:00:3e:df:96:e5:c5:e4:94:71:d6:55:01:c7:
                    00:26:4a:40:3c:b5:a1:26:a9:0c:a7:6d:80:8e:90:
                    25:7b:cf:bf:3f:1c:eb:2f:96:fa:e5:87:77:c6:b5:
                    56:b2:7a:3b:54:30:53:1b:df:62:34:ff:1e:d1:f4:
                    5a:93:28:85:e5:4c:17:4e:7e:5b:fd:a4:93:99:7f:
                    df:cd:ef:a4:75:ef:ef:15:f6:47:e7:f8:19:72:d8:
                    2e:34:1a:a6:b4:a7:4c:7e:bd:bb:4f:0c:3d:57:f1:
                    30:d6:a6:36:8e:d6:80:76:d7:19:2e:a5:cd:7e:34:
                    2d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/cps
                  User Notice:
                    Explicit Text: https://www.verisign.com/rpa
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            1.3.6.1.5.5.7.1.12: 
                0_.].[0Y0W0U..image/gif0!0.0...+..............k...j.H.,{..0%.#http://logo.verisign.com/vslogo.gif
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.verisign.com/pca3-g5.crl
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, Code Signing
            X509v3 Subject Alternative Name: 
                DirName:/CN=VeriSignMPKI-2-8
            X509v3 Subject Key Identifier: 
                CF:99:A9:EA:7B:26:F4:4B:C9:8E:8F:D7:F0:05:26:EF:E3:D2:A7:9D
            X509v3 Authority Key Identifier: 
                7F:D3:65:A7:C2:DD:EC:BB:F0:30:09:F3:43:39:FA:02:AF:33:31:33
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        56:22:e6:34:a4:c4:61:cb:48:b9:01:ad:56:a8:64:0f:d9:8c:
        91:c4:bb:cc:0c:e5:ad:7a:a0:22:7f:df:47:38:4a:2d:6c:d1:
        7f:71:1a:7c:ec:70:a9:b1:f0:4f:e4:0f:0c:53:fa:15:5e:fe:
        74:98:49:24:85:81:26:1c:91:14:47:b0:4c:63:8c:bb:a1:34:
        d4:c6:45:e8:0d:85:26:73:03:d0:a9:8c:64:6d:dc:71:92:e6:
        45:05:60:15:59:51:39:fc:58:14:6b:fe:d4:a4:ed:79:6b:08:
        0c:41:72:e7:37:22:06:09:be:23:e9:3f:44:9a:1e:e9:61:9d:
        cc:b1:90:5c:fc:3d:d2:8d:ac:42:3d:65:36:d4:b4:3d:40:28:
        8f:9b:10:cf:23:26:cc:4b:20:cb:90:1f:5d:8c:4c:34:ca:3c:
        d8:e5:37:d6:6f:a5:20:bd:34:eb:26:d9:ae:0d:e7:c5:9a:f7:
        a1:b4:21:91:33:6f:86:e8:58:bb:25:7c:74:0e:58:fe:75:1b:
        63:3f:ce:31:7c:9b:8f:1b:96:9e:c5:53:76:84:5b:9c:ad:91:
        fa:ac:ed:93:ba:5d:c8:21:53:c2:82:53:63:af:12:0d:50:87:
        11:1b:3d:54:52:96:8a:2c:9c:3d:92:1a:08:9a:05:2e:c7:93:
        a5:48:91:d3
pkcs7-signedData
  • 1
    • SHA1: nil
    • 1.3.6.1.4.1.311.2.1.4
      • #0
        • 1.3.6.1.4.1.311.2.1.15
          • :
        • SHA1
          • c3 65 9e 7d 32 85 cc 7a  84 50 41 b7 46 15 f4 52  |.e.}2..z.PA.F..R|
1c b2 fc aa                                       |....            |
    • Certificates
      • Certificate #0
        • 2
          • 7E:93:EB:FB:7C:C6:4E:59:EA:4B:9A:77:D4:06:FC:3B
          • RSA-SHA1: nil
          • Issuer
            • C: ZA
            • ST: Western Cape
            • L: Durbanville
            • O: Thawte
            • OU: Thawte Certification
            • CN: Thawte Timestamping CA
          • 2012-12-21 00:00:00 UTC: 2020-12-30 23:59:59 UTC
          • Subject
            • C: US
            • O: Symantec Corporation
            • CN: Symantec Time Stamping Services CA - G2
          • #5
            • rsaEncryption: nil
            • B1:AC:B3:49:54:4B:97:1C:12:0A:D8:25:79:91:22:57:
              2A:6F:DC:B8:26:C4:43:73:6B:C2:BF:2E:50:5A:FB:14:
              C2:76:8E:43:01:25:43:B4:A1:E2:45:F4:E8:B7:7B:C3:
              74:CC:22:D7:B4:94:00:02:F7:4D:ED:BF:B4:B7:44:24:
              6B:CD:5F:45:3B:D1:44:CE:43:12:73:17:82:8B:69:B4:
              2B:CB:99:1E:AC:72:1B:26:4D:71:1F:B1:31:DD:FB:51:
              61:02:53:A6:AA:F5:49:2C:05:78:45:A5:2F:89:CE:E7:
              99:E7:FE:8C:E2:57:3F:3D:C6:92:DC:4A:F8:7B:33:E4:
              79:0A:FB:F0:75:88:41:9C:FF:C5:03:51:99:AA:D7:6C:
              9F:93:69:87:65:29:83:85:C2:60:14:C4:C8:C9:3B:14:
              DA:C0:81:F0:1F:0D:74:DE:92:22:AB:CA:F7:FB:74:7C:
              27:E6:F7:4A:1B:7F:A7:C3:9E:2D:AE:8A:EA:A6:E6:AA:
              27:16:7D:61:F7:98:71:11:BC:E2:50:A1:4B:E5:5D:FA:
              E5:0E:A7:2C:9F:AA:65:20:D3:D8:96:E8:C8:7C:A5:4E:
              48:44:FF:19:E2:44:07:92:0B:D7:68:84:80:5D:6A:78:
              64:45:CD:60:46:7E:54:C1:13:7C:C5:79:F1:C9:C1:71              : 0x010001
          • #6
            • subjectKeyIdentifier: 
              5f 9a f5 6e 5c cc cc 74  9a d4 dd 7d ef 3f db ec  |_..n\..t...}.?..|
4c 80 2e dd                                       |L...            |
            • authorityInfoAccess
              • OCSP: http://ocsp.thawte.com
            • basicConstraints
              • true
              • true: 0
            • crlDistributionPoints: http://crl.thawte.com/ThawteTimestampingCA.crl
            • extendedKeyUsage: timeStamping
            • keyUsage: true, 6
            • subjectAltName
              • CN: TimeStamp-2048-1
        • RSA-SHA1: 
          03 09 9b 8f 79 ef 7f 59  30 aa ef 68 b5 fa e3 09  |....y..Y0..h....|
1d bb 4f 82 06 5d 37 5f  a6 52 9f 16 8d ea 1c 92  |..O..]7_.R......|
09 44 6e f5 6d eb 58 7c  30 e8 f9 69 8d 23 73 0b  |.Dn.m.X|0..i.#s.|
12 6f 47 a9 ae 39 11 f8  2a b1 9b b0 1a c3 8e eb  |.oG..9..*.......|
59 96 00 ad ce 0c 4d b2  d0 31 a6 08 5c 2a 7a fc  |Y.....M..1..\*z.|
e2 7a 1d 57 4c a8 65 18  e9 79 40 62 25 96 6e c7  |.z.WL.e..y@b%.n.|
c7 37 6a 83 21 08 8e 41  ea dd d9 57 3f 1d 77 49  |.7j.!..A...W?.wI|
87 2a 16 06 5e a6 38 6a  22 12 a3 51 19 83 7e b6  |.*..^.8j"..Q..~.|
      • Certificate #1
        • 2
          • 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • O: Symantec Corporation
            • CN: Symantec Time Stamping Services CA - G2
          • 2012-10-18 00:00:00 UTC: 2020-12-29 23:59:59 UTC
          • Subject
            • C: US
            • O: Symantec Corporation
            • CN: Symantec Time Stamping Services Signer - G4
          • #5
            • rsaEncryption: nil
            • A2:63:0B:39:44:B8:BB:23:A7:44:49:BB:0E:FF:A1:F0:
              61:0A:53:93:B0:98:DB:AD:2C:0F:4A:C5:6E:FF:86:3C:
              53:55:0F:15:CE:04:3F:2B:FD:A9:96:96:D9:BE:61:79:
              0B:5B:C9:4C:86:76:E5:E0:43:4B:22:95:EE:C2:2B:43:
              C1:9F:D8:68:B4:8E:40:4F:EE:85:38:B9:11:C5:23:F2:
              64:58:F0:15:32:6F:4E:57:A1:AE:88:A4:02:D7:2A:1E:
              CD:4B:E1:DD:63:D5:17:89:32:5B:B0:5E:99:5A:A8:9D:
              28:50:0E:17:EE:96:DB:61:3B:45:51:1D:CF:12:56:0B:
              92:47:FC:AB:AE:F6:66:3D:47:AC:70:72:E7:92:E7:5F:
              CD:10:B9:C4:83:64:94:19:BD:25:80:E1:E8:D2:22:A5:
              D0:BA:02:7A:A1:77:93:5B:65:C3:EE:17:74:BC:41:86:
              2A:DC:08:4C:8C:92:8C:91:2D:9E:77:44:1F:68:D6:A8:
              74:77:DB:0E:5B:32:8B:56:8B:33:BD:D9:63:C8:49:9D:
              3A:C5:C5:EA:33:0B:D2:F1:A3:1B:F4:8B:BE:D9:B3:57:
              8B:3B:DE:04:A7:7A:22:B2:24:AE:2E:C7:70:C5:BE:4E:
              83:26:08:FB:0B:BD:A9:4F:99:08:E1:10:28:72:AA:CD              : 0x010001
          • X509v3 extensions
            • basicConstraints
              • true
              • nil
            • extendedKeyUsage: true, timeStamping
            • keyUsage: true, 0x80
            • authorityInfoAccess
              • #0
                • OCSP: http://ts-ocsp.ws.symantec.com
                • caIssuers: http://ts-aia.ws.symantec.com/tss-ca-g2.cer
            • crlDistributionPoints: http://ts-crl.ws.symantec.com/tss-ca-g2.crl
            • subjectAltName
              • CN: TimeStamp-2048-2
            • subjectKeyIdentifier: 
              46 c6 69 a3 0e 4a 14 1e  d5 4c da 52 63 17 3f 5e  |F.i..J...L.Rc.?^|
36 bc 0d e6                                       |6...            |
            • authorityKeyIdentifier: 
              5f 9a f5 6e 5c cc cc 74  9a d4 dd 7d ef 3f db ec  |_..n\..t...}.?..|
4c 80 2e dd                                       |L...            |
        • RSA-SHA1: 
          78 3b b4 91 2a 00 4c f0  8f 62 30 37 78 a3 84 27  |x;..*.L..b07x..'|
07 6f 18 b2 de 25 dc a0  d4 94 03 aa 86 4e 25 9f  |.o...%.......N%.|
9a 40 03 1c dd ce e3 79  cb 21 68 06 da b6 32 b4  |.@.....y.!h...2.|
6d bf f4 2c 26 63 33 e4  49 64 6d 0d e6 c3 67 0e  |m..,&c3.Idm...g.|
f7 05 a4 35 6c 7c 89 16  c6 e9 b2 df b2 e9 dd 20  |...5l|......... |
c6 71 0f cd 95 74 dc b6  5c de bd 37 1f 43 78 e6  |.q...t..\..7.Cx.|
78 b5 cd 28 04 20 a3 aa  f1 4b c4 88 29 91 0e 80  |x..(. ...K..)...|
d1 11 fc dd 5c 76 6e 4f  5e 0e 45 46 41 6e 0d b0  |....\vnO^.EFAn..|
ea 38 9a b1 3a da 09 71  10 fc 1c 79 b4 80 7b ac  |.8..:..q...y..{.|
69 f4 fd 9c b6 0c 16 2b  f1 7f 5b 09 3d 9b 5b e2  |i......+..[.=.[.|
16 ca 13 81 6d 00 2e 38  0d a8 29 8f 2c e1 b2 f4  |....m..8..).,...|
5a a9 01 af 15 9c 2c 2f  49 1b db 22 bb c3 fe 78  |Z.....,/I.."...x|
94 51 c3 86 b1 82 88 5d  f0 3d b4 51 a1 79 33 2b  |.Q.....].=.Q.y3+|
2e 7b b9 dc 20 09 13 71  eb 6a 19 5b cf e8 a5 30  |.{.. ..q.j.[...0|
57 2c 89 49 3f b9 cf 7f  c9 bf 3e 22 68 63 53 9a  |W,.I?.....>"hcS.|
bd 69 74 ac c5 1d 3c 7f  92 e0 c3 bc 1c d8 04 75  |.it...<........u|
      • Certificate #2
        • 2
          • 50:DA:15:04:90:9F:72:73:48:6D:47:AC:0A:B7:46:75
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • O: VeriSign, Inc.
            • OU: VeriSign Trust Network
            • OU: Terms of use at https://www.verisign.com/rpa (c)10
            • CN: VeriSign Class 3 Code Signing 2010 CA
          • 2013-11-04 00:00:00 UTC: 2017-01-02 23:59:59 UTC
          • Subject
            • C: CN
            • ST: Beijing
            • L: Beijing
            • O: BEIJING KUWO TECHNOLOGY CO.,LTD.
            • OU: Digital ID Class 3 - Microsoft Software Validation v2
            • OU: KUWO MUSIC
            • CN: BEIJING KUWO TECHNOLOGY CO.,LTD.
          • #5
            • rsaEncryption: nil
            • 94:C7:E4:15:69:09:66:3B:C7:73:96:EA:FF:73:FA:00:
              E3:78:83:48:D6:3E:8C:DD:1E:6A:E4:5F:7E:87:F7:8D:
              77:7F:5A:28:C0:65:D5:A8:19:91:AA:8C:36:7A:79:35:
              AA:E9:3F:13:34:A6:33:C3:74:66:35:2B:2C:61:F2:D0:
              0E:A1:03:34:96:42:79:DA:31:B1:9C:F9:FF:9D:6F:5B:
              FB:4E:8C:55:EA:A8:B5:F6:8D:9A:1A:25:17:B2:9E:A1:
              DE:9E:4F:06:4F:B7:91:29:95:3B:47:98:30:54:F9:DD:
              D6:2B:B7:4F:4C:DB:F2:30:DA:5D:CA:C3:75:E7:F1:BA:
              E6:3F:05:38:50:0D:25:C1:B4:DC:5E:0B:10:60:29:FD:
              A4:2C:32:52:8B:F8:69:C8:E4:B4:56:62:40:B5:6F:FA:
              FF:B5:69:C8:4F:AF:34:A3:C7:E9:47:E6:48:87:20:86:
              DD:D0:48:07:4B:5D:95:27:18:76:02:6F:69:EC:39:5E:
              F2:99:5B:C6:C7:F0:00:C8:7B:DA:C9:8F:B8:67:AD:B5:
              A9:0C:26:C0:C8:FC:D2:A8:9D:62:05:25:9A:D1:C9:3A:
              59:20:DE:35:8E:22:88:7F:A5:91:FE:FA:BA:A3:08:43:
              1A:48:85:BE:93:C5:E0:19:9C:7F:EF:D8:DF:EE:2C:6B              : 0x010001
          • X509v3 extensions
            • basicConstraints
              • nil
            • keyUsage: true, 0x80
            • crlDistributionPoints: http://csc3-2010-crl.verisign.com/CSC3-2010.crl
            • certificatePolicies
              • 2.16.840.1.113733.1.7.23.3
                • id-qt-cps: https://www.verisign.com/rpa
            • extendedKeyUsage: codeSigning
            • authorityInfoAccess
              • #0
                • OCSP: http://ocsp.verisign.com
                • caIssuers: http://csc3-2010-aia.verisign.com/CSC3-2010.cer
            • authorityKeyIdentifier: 
              cf 99 a9 ea 7b 26 f4 4b  c9 8e 8f d7 f0 05 26 ef  |....{&.K......&.|
e3 d2 a7 9d                                       |....            |
            • nsCertType: 0x10
            • 1.3.6.1.4.1.311.2.1.27
              • false: true
        • RSA-SHA1: 
          62 6a 19 aa 33 15 ec b5  91 71 af 68 7d 29 df f9  |bj..3....q.h})..|
e3 d7 6d 7f 3f 59 dc 45  0b e4 74 d9 63 08 2e 1f  |..m.?Y.E..t.c...|
47 0b dc 58 53 bf b4 eb  5a e1 5d 18 f5 47 fa 28  |G..XS...Z.]..G.(|
60 96 60 29 b4 fb 95 d6  a9 3a 59 69 20 26 74 3e  |`.`).....:Yi &t>|
a1 ab c9 68 1f 82 9f 3d  36 c6 fb 5c 99 f0 68 58  |...h...=6..\..hX|
ff 98 68 20 4d de ad e6  db b3 74 92 ff 86 ee 59  |..h M.....t....Y|
7d f0 6d 98 8e e2 55 5d  fd 39 1b 31 7f 6c df 7e  |}.m...U].9.1.l.~|
02 f5 ea ef ee 1c 07 c2  2b f4 53 4d 07 2c c8 a7  |........+.SM.,..|
9a 61 16 0a 31 33 ed 25  d0 7b 6e 13 b2 7d 9a ba  |.a..13.%.{n..}..|
3b bd bb fa 8d 14 69 a8  71 eb e3 ca 7d 3a 63 b3  |;.....i.q...}:c.|
1a a0 dc 3a 5c b4 5c 74  ba c7 7f a0 43 45 9e 87  |...:\.\t....CE..|
ba bb 60 e8 17 a0 3f 7b  ae 60 3d 4e 92 54 cb 71  |..`...?{.`=N.T.q|
95 8f 0a 3c f0 a0 32 e2  c3 b4 1f a2 45 9d 2a df  |...<..2.....E.*.|
a8 a0 e0 5d 4c 72 d9 32  6a 24 14 c6 ad 76 75 fd  |...]Lr.2j$...vu.|
36 15 8c 62 83 99 e8 c9  1d 0f 55 ab ad 04 e6 45  |6..b......U....E|
09 fe f1 53 df 75 d2 36  11 ce 36 53 22 b7 f9 62  |...S.u.6..6S"..b|
      • Certificate #3
        • 2
          • 52:00:E5:AA:25:56:FC:1A:86:ED:96:C9:D4:4B:33:C7
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • O: VeriSign, Inc.
            • OU: VeriSign Trust Network
            • OU: (c) 2006 VeriSign, Inc. - For authorized use only
            • CN: VeriSign Class 3 Public Primary Certification Authority - G5
          • 2010-02-08 00:00:00 UTC: 2020-02-07 23:59:59 UTC
          • Subject
            • C: US
            • O: VeriSign, Inc.
            • OU: VeriSign Trust Network
            • OU: Terms of use at https://www.verisign.com/rpa (c)10
            • CN: VeriSign Class 3 Code Signing 2010 CA
          • #5
            • rsaEncryption: nil
            • F5:23:4B:5E:A5:D7:8A:BB:32:E9:D4:57:F7:EF:E4:C7:
              26:7E:AD:19:98:FE:A8:9D:7D:94:F6:36:6B:10:D7:75:
              81:30:7F:04:68:7F:CB:2B:75:1E:CD:1D:08:8C:DF:69:
              94:A7:37:A3:9C:7B:80:E0:99:E1:EE:37:4D:5F:CE:3B:
              14:EE:86:D4:D0:F5:27:35:BC:25:0B:38:A7:8C:63:9D:
              17:A3:08:A5:AB:B0:FB:CD:6A:62:82:4C:D5:21:DA:1B:
              D9:F1:E3:84:3B:8A:2A:4F:85:5B:90:01:4F:C9:A7:76:
              10:7F:27:03:7C:BE:AE:7E:7D:C1:DD:F9:05:BC:1B:48:
              9C:69:E7:C0:A4:3C:3C:41:00:3E:DF:96:E5:C5:E4:94:
              71:D6:55:01:C7:00:26:4A:40:3C:B5:A1:26:A9:0C:A7:
              6D:80:8E:90:25:7B:CF:BF:3F:1C:EB:2F:96:FA:E5:87:
              77:C6:B5:56:B2:7A:3B:54:30:53:1B:DF:62:34:FF:1E:
              D1:F4:5A:93:28:85:E5:4C:17:4E:7E:5B:FD:A4:93:99:
              7F:DF:CD:EF:A4:75:EF:EF:15:F6:47:E7:F8:19:72:D8:
              2E:34:1A:A6:B4:A7:4C:7E:BD:BB:4F:0C:3D:57:F1:30:
              D6:A6:36:8E:D6:80:76:D7:19:2E:A5:CD:7E:34:2D:89              : 0x010001
          • X509v3 extensions
            • basicConstraints
              • true
              • true: 0
            • certificatePolicies
              • 2.16.840.1.113733.1.7.23.3
                • #0
                  • id-qt-cps: https://www.verisign.com/cps
                  • id-qt-unotice: https://www.verisign.com/rpa
            • keyUsage: true, 6
            • 1.3.6.1.5.5.7.1.12
              • image/gif
                • SHA1: 
                  8f e5 d3 1a 86 ac 8d 8e  6b c3 cf 80 6a d4 48 18  |........k...j.H.|
2c 7b 19 2e                                       |,{..            |
                • http://logo.verisign.com/vslogo.gif
            • crlDistributionPoints: http://crl.verisign.com/pca3-g5.crl
            • authorityInfoAccess
              • OCSP: http://ocsp.verisign.com
            • extendedKeyUsage
              • clientAuth: codeSigning
            • subjectAltName
              • CN: VeriSignMPKI-2-8
            • subjectKeyIdentifier: 
              cf 99 a9 ea 7b 26 f4 4b  c9 8e 8f d7 f0 05 26 ef  |....{&.K......&.|
e3 d2 a7 9d                                       |....            |
            • authorityKeyIdentifier: 
              7f d3 65 a7 c2 dd ec bb  f0 30 09 f3 43 39 fa 02  |..e......0..C9..|
af 33 31 33                                       |.313            |
        • RSA-SHA1: 
          56 22 e6 34 a4 c4 61 cb  48 b9 01 ad 56 a8 64 0f  |V".4..a.H...V.d.|
d9 8c 91 c4 bb cc 0c e5  ad 7a a0 22 7f df 47 38  |.........z."..G8|
4a 2d 6c d1 7f 71 1a 7c  ec 70 a9 b1 f0 4f e4 0f  |J-l..q.|.p...O..|
0c 53 fa 15 5e fe 74 98  49 24 85 81 26 1c 91 14  |.S..^.t.I$..&...|
47 b0 4c 63 8c bb a1 34  d4 c6 45 e8 0d 85 26 73  |G.Lc...4..E...&s|
03 d0 a9 8c 64 6d dc 71  92 e6 45 05 60 15 59 51  |....dm.q..E.`.YQ|
39 fc 58 14 6b fe d4 a4  ed 79 6b 08 0c 41 72 e7  |9.X.k....yk..Ar.|
37 22 06 09 be 23 e9 3f  44 9a 1e e9 61 9d cc b1  |7"...#.?D...a...|
90 5c fc 3d d2 8d ac 42  3d 65 36 d4 b4 3d 40 28  |.\.=...B=e6..=@(|
8f 9b 10 cf 23 26 cc 4b  20 cb 90 1f 5d 8c 4c 34  |....#&.K ...].L4|
ca 3c d8 e5 37 d6 6f a5  20 bd 34 eb 26 d9 ae 0d  |.<..7.o. .4.&...|
e7 c5 9a f7 a1 b4 21 91  33 6f 86 e8 58 bb 25 7c  |......!.3o..X.%||
74 0e 58 fe 75 1b 63 3f  ce 31 7c 9b 8f 1b 96 9e  |t.X.u.c?.1|.....|
c5 53 76 84 5b 9c ad 91  fa ac ed 93 ba 5d c8 21  |.Sv.[........].!|
53 c2 82 53 63 af 12 0d  50 87 11 1b 3d 54 52 96  |S..Sc...P...=TR.|
8a 2c 9c 3d 92 1a 08 9a  05 2e c7 93 a5 48 91 d3  |.,.=.........H..|
    • Signer
      • 1
      • unnamed
        • #0
          • C: US
          • O: VeriSign, Inc.
          • OU: VeriSign Trust Network
          • OU: Terms of use at https://www.verisign.com/rpa (c)10
          • CN: VeriSign Class 3 Code Signing 2010 CA
        • 50:DA:15:04:90:9F:72:73:48:6D:47:AC:0A:B7:46:75
      • SHA1: nil
      • #3
        • contentType: 1.3.6.1.4.1.311.2.1.4
        • 1.3.6.1.4.1.311.2.1.11: msCodeInd
        • messageDigest: 
          1f 0a d7 5b cf 18 5e 6f  77 31 9c 5b 02 31 76 5e  |...[..^ow1.[.1v^|
0f 24 26 4d                                       |.$&M            |
        • 1.3.6.1.4.1.311.2.1.12
          • 91 77 62 11 97 f3 4e 50                           |.wb...NP        |
            : http://www.kuwo.cn
      • rsaEncryption: 
        85 aa 6d 0d bc 66 58 09  7d 74 60 73 4b a8 23 d4  |..m..fX.}t`sK.#.|
1c b5 b2 8c d6 d0 d9 33  68 97 49 aa 7e 21 23 db  |.......3h.I.~!#.|
82 3e 7d 1e 8b ea db d9  a0 b6 5a 4d f0 ea 19 d3  |.>}.......ZM....|
a3 6d d7 41 97 5a b4 82  1d c7 a4 2c 54 01 e6 2f  |.m.A.Z.....,T../|
91 df c2 eb 26 cf 4c f8  96 05 7e 08 85 0f e4 81  |....&.L...~.....|
df ea 92 3a 1c e5 d0 ca  6e 41 77 84 1b a9 1a cd  |...:....nAw.....|
84 9f 21 ab 0b af b6 72  33 c3 22 19 24 f3 28 19  |..!....r3.".$.(.|
be be 4d b8 a0 ba 8f 4f  02 8b 6f 83 41 82 c5 fd  |..M....O..o.A...|
98 9f 66 f8 dc 03 fd f4  9f 94 cc a8 6f 56 dc 12  |..f.........oV..|
e8 6d 15 47 b0 d3 02 0b  89 ee ec 38 bf c5 7b 22  |.m.G.......8..{"|
35 a8 53 0a 9f 2e 82 3d  48 1b d8 11 54 f8 35 f7  |5.S....=H...T.5.|
1c 8d 17 85 2e 5b 14 34  f5 78 6d 3c 0e aa 92 d2  |.....[.4.xm<....|
4a 3c 60 fb 56 05 56 ea  e8 1e 5d a9 1b 32 3f 51  |J<`.V.V...]..2?Q|
87 59 0b 45 37 60 ac 9f  66 44 04 0c 19 31 41 41  |.Y.E7`..fD...1AA|
fe dd 01 19 d1 e7 a2 b2  72 9f 4b 27 f6 17 ac 6a  |........r.K'...j|
67 ac b8 f9 8e 71 17 11  8b b6 1a d5 64 b3 bf fb  |g....q......d...|
      • countersignature
        • 1
          • unnamed
            • #0
              • C: US
              • O: Symantec Corporation
              • CN: Symantec Time Stamping Services CA - G2
            • 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
          • SHA1: nil
          • #2
            • contentType: pkcs7-data
            • signingTime: 2016-12-24 08:42:33 UTC
            • messageDigest: 
              ef 35 35 a4 87 10 a0 51  b2 14 9f eb 36 21 86 f0  |.55....Q....6!..|
28 6b 2c f8                                       |(k,.            |
          • rsaEncryption: 
            81 cd e0 1a 50 11 2c e2  41 9a 78 33 a0 ac 8a 2c  |....P.,.A.x3...,|
a8 77 39 d6 1c 5f a6 5c  3c 50 bb e2 bd 83 26 9d  |.w9.._.\..S\.U.U3=.|
4f e0 50 f7 7e a0 d8 b4  32 6c ae d0 44 b9 09 eb  |O.P.~...2l..D...|
1d 45 2b 6c c6 29 12 50  88 4b 15 db be 61 8a 29  |.E+l.).P.K...a.)|
2d 13 23 cd 8a ff 21 a2  15 6f ab 71 16 85 41 77  |-.#...!..o.q..Aw|
93 73 19 43 7a 8e cd a1  58 ab 9a 74 c6 e3 e9 1f  |.s.Cz...X..t....|
1e 1a c0 60 ec 7a 28 a0  b0 bf a7 b4 9e ec 86 36  |...`.z(........6|
96 99 1d 48 75 d8 7f 09  27 eb 2d e0 47 f1 3d 29  |...Hu...'.-.G.=)|
c2 e1 ce 17 38 59 d7 e1  ed ff 21 f1 65 3f 9b a2  |....8Y....!.e?..|
f1 00 a0 b1 b5 40 50 34  c3 17 70 88 8b e2 0c f6  |.....@P4..p.....|
9f 69 d1 29 1c 8d 2b 50  a1 4e 38 4d 37 70 ab 71  |.i.)..+P.N8M7p.q|
offsetsizetypecomment
01899008EXE12/24/2016 08:40:26#
15c115HTM#
1b508847409ZIP#
1b510f1684PNG(75 x 78)#
1b57db290PNG(17 x 15)#
1b5939404PNG(71 x 13)#
1bdd941349PNG(70 x 70)#
1cfa006496PKCS7Authenticode Signature#
Scanning the drive for archives:
1 file, 1905504 bytes (1861 KiB)


--
Type = PE
Physical Size = 1905504
CPU = x86
Characteristics = Executable 32-bit
Created = 2016-12-24 08:40:26
Headers Size = 1024
Checksum = 1912657
Name = TKwPersonalRecom
Image Size = 1921024
Section Alignment = 4096
File Alignment = 512
Code Size = 1522176
Initialized Data Size = 390656
Uninitialized Data Size = 0
Linker Version = 12.0
OS Version = 5.1
Image Version = 0.0
Subsystem Version = 5.1
Subsystem = Windows GUI
DLL Characteristics = Relocated NX-Compatible TerminalServerAware
Stack Reserve = 1048576
Stack Commit = 4096
Heap Reserve = 1048576
Heap Commit = 4096
Image Base = 4194304
Comment = FileVersion: 1.0.2.25
ProductVersion: 1.0.2.25
FileDescription: TKwPersonalRecom
InternalName: TKwPersonalRecom
LegalCopyright: Copyright (C) 2015
OriginalFilename: TKwPersonalRecom
ProductName: TKwPersonalRecom
----
Path = .rsrc/2052/ZIP/103
Size = 47409
Packed Size = 47409
--
Path = .rsrc/2052/ZIP/103
Type = zip
Physical Size = 47409

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
2016-10-14 07:25:22 D....            0            0  skin
2016-12-09 02:38:23 D....            0            0  skin/base
2016-10-14 07:25:23 ....A         1684         1689  skin/base/bk_calendar.png
2016-10-14 07:25:23 ....A          290          295  skin/base/bk_tips.png
2016-10-14 07:25:23 ....A          404          409  skin/base/btn_checkin.png
2016-10-14 07:25:23 ....A         1763         1471  skin/base/btn_down_arrow.png
2016-10-14 07:25:23 ....A         2643         2359  skin/base/btn_Favorate.png
2016-10-14 07:25:23 ....A         2474         2185  skin/base/btn_Favorated.png
2016-10-14 07:25:23 ....A         2426         2118  skin/base/btn_MiniClose.png
2016-10-14 07:25:23 ....A         2406         2122  skin/base/btn_MiniFull.png
2016-10-14 07:25:23 ....A         1744         1445  skin/base/btn_MiniList.png
2016-10-14 07:25:23 ....A         2496         2212  skin/base/btn_MiniList_firstrun.png
2016-10-14 07:25:23 ....A         2569         2274  skin/base/btn_MiniNext.png
2016-10-14 07:25:23 ....A         2154         1845  skin/base/btn_MiniPause.png
2016-10-14 07:25:23 ....A         2622         2331  skin/base/btn_MiniPlay.png
2016-10-14 07:25:23 ....A         2648         2346  skin/base/btn_MiniPre.png
2016-10-14 07:25:23 ....A         2559         2280  skin/base/btn_MiniSilent.png
2016-10-14 07:25:23 ....A         3117         2831  skin/base/btn_MiniVolumn.png
2016-10-14 07:25:23 ....A         2871         2593  skin/base/btn_MiniWallpaper_Turnoff.png
2016-10-14 07:25:23 ....A         2405         2120  skin/base/btn_MiniWallpaper_Turnon.png
2016-10-14 07:25:23 ....A         1349         1354  skin/base/DefaultArtistPic.png
2016-12-01 09:54:49 ....A         4426         1321  skin/base/minidlg.xml
2016-10-14 07:25:23 ....A         1067          686  skin/base/mini_bk.png
2016-10-14 07:25:23 ....A         1068          700  skin/base/playcontrol_volumnbk.png
2016-10-14 07:25:23 ....A         1072          706  skin/base/playcontrol_volumnfg.png
2016-10-14 07:25:23 ....A         1414         1103  skin/base/playcontrol_volumnthumb.png
2016-08-31 06:59:18 ....A        12874         2142  skin/base/skin.xml
------------------- ----- ------------ ------------  ------------------------
2016-12-09 02:38:23              62545        42937  25 files, 2 folders
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK