login.dll

info
MZ
PE
imports
exports
foremost
signature
hexdump
disasm
log
discuss
donate

filename	login.dll
size	147128 (0x23eb8)
md5	722c1a44b7ee4187cff220fe580c9acd

type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xf0

Rich Header

lib id	version	times used
1	0	83
185	30716	3
205	50628	25
207	50628	63
206	50628	183
207	61219	1
202	61030	1
204	61030	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	4
TimeDateStamp	0x5614db7b
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x2102
Magic	0x10b
LinkerVersion	11.0
SizeOfCode	0x17800
SizeOfInitializedData	0xd600
SizeOfUninitializedData	0
AddressOfEntryPoint	0x65ac
BaseOfCode	0x1000
BaseOfData	0x19000
ImageBase	0x10000000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	6.0
ImageVersion	0.0
SubsystemVersion	6.0
Reserved1	0
SizeOfImage	0x28000
SizeOfHeaders	0x400
CheckSum	0x2e687
Subsystem	2
DllCharacteristics	0x140
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ 6.0 - 8.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x1772f	0x17800	R-X CODE
.rdata	0x19000	0x61b2	0x6200	R-- IDATA
.data	0x20000	0x3b04	0x1a00	RW- IDATA
.reloc	0x24000	0x3664	0x3800	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0x1f170	0x42
IMPORT	0x1eacc	0x28
RESOURCE	0	0
EXCEPTION	0	0
SECURITY	0x23000	0xeb8
BASERELOC	0x24000	0x14a0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0x1d570	0x40
Bound_IAT	0	0
IAT	0x19000	0x124
Delay_IAT	0	0
CLR_Header	0	0

module_name	hint	function_name
KERNEL32.dll	881	InterlockedIncrement
KERNEL32.dll	877	InterlockedDecrement
KERNEL32.dll	316	EncodePointer
KERNEL32.dll	279	DecodePointer
KERNEL32.dll	320	EnterCriticalSection
KERNEL32.dll	957	LeaveCriticalSection
KERNEL32.dll	871	InitializeCriticalSectionEx
KERNEL32.dll	286	DeleteCriticalSection
KERNEL32.dll	1375	Sleep
KERNEL32.dll	1501	WideCharToMultiByte
KERNEL32.dll	621	GetLocaleInfoEx
KERNEL32.dll	1004	MultiByteToWideChar
KERNEL32.dll	738	GetStringTypeW
KERNEL32.dll	1096	RaiseException
KERNEL32.dll	1210	RtlUnwind
KERNEL32.dll	482	GetCommandLineA
KERNEL32.dll	552	GetCurrentThreadId
KERNEL32.dll	618	GetLastError
KERNEL32.dll	849	HeapFree
KERNEL32.dll	870	InitializeCriticalSectionAndSpinCount
KERNEL32.dll	461	GetCPInfo
KERNEL32.dll	845	HeapAlloc
KERNEL32.dll	904	IsProcessorFeaturePresent
KERNEL32.dll	733	GetStdHandle
KERNEL32.dll	1521	WriteFile
KERNEL32.dll	637	GetModuleFileNameW
KERNEL32.dll	365	ExitProcess
KERNEL32.dll	640	GetModuleHandleExW
KERNEL32.dll	693	GetProcAddress
KERNEL32.dll	854	HeapSize
KERNEL32.dll	899	IsDebuggerPresent
KERNEL32.dll	1303	SetLastError
KERNEL32.dll	698	GetProcessHeap
KERNEL32.dll	599	GetFileType
KERNEL32.dll	865	InitOnceExecuteOnce
KERNEL32.dll	727	GetStartupInfoW
KERNEL32.dll	636	GetModuleFileNameA
KERNEL32.dll	1084	QueryPerformanceCounter
KERNEL32.dll	756	GetSystemTimeAsFileTime
KERNEL32.dll	785	GetTickCount64
KERNEL32.dll	576	GetEnvironmentStringsW
KERNEL32.dll	439	FreeEnvironmentStringsW
KERNEL32.dll	1424	UnhandledExceptionFilter
KERNEL32.dll	1360	SetUnhandledExceptionFilter
KERNEL32.dll	424	FlsAlloc
KERNEL32.dll	426	FlsGetValue
KERNEL32.dll	427	FlsSetValue
KERNEL32.dll	425	FlsFree
KERNEL32.dll	547	GetCurrentProcess
KERNEL32.dll	1391	TerminateProcess
KERNEL32.dll	641	GetModuleHandleW
KERNEL32.dll	142	CloseHandle
KERNEL32.dll	429	FlushFileBuffers
KERNEL32.dll	502	GetConsoleCP
KERNEL32.dll	520	GetConsoleMode
KERNEL32.dll	1112	ReadFile
KERNEL32.dll	1289	SetFilePointerEx
KERNEL32.dll	909	IsValidCodePage
KERNEL32.dll	446	GetACP
KERNEL32.dll	672	GetOEMCP
KERNEL32.dll	796	GetUserDefaultLocaleName
KERNEL32.dll	944	LCMapStringEx
KERNEL32.dll	912	IsValidLocaleName
KERNEL32.dll	352	EnumSystemLocalesEx
KERNEL32.dll	852	HeapReAlloc
KERNEL32.dll	1045	OutputDebugStringW
KERNEL32.dll	962	LoadLibraryExW
KERNEL32.dll	963	LoadLibraryW
KERNEL32.dll	1327	SetStdHandle
KERNEL32.dll	1520	WriteConsoleW
KERNEL32.dll	1110	ReadConsoleW
KERNEL32.dll	214	CreateFileW

ord	entry_va	function_name
1	0x10c0	Login

module_name	login.dll
flags	0
timestamp	2015-10-07 08:44:43
version	0.0
ordinal_base	1
nFunctions	1
nNames	1
Names(1)	0x1f19c
Functions(1)	0x1f198
NameOrdinals(1)	0x1f1a0

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /CN=Test GmbH

serial: 664B20B4F80A419C4192CD0D25A220C0

Certificates (2)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:4b:20:b4:f8:0a:41:9c:41:92:cd:0d:25:a2:20:c0
        Signature Algorithm: sha1WithRSA
        Issuer: CN=Test GmbH
        Validity
            Not Before: Sep 30 22:00:00 2015 GMT
            Not After : Sep 29 22:00:00 2016 GMT
        Subject: CN=Test GmbH
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:b6:5d:09:03:21:d7:64:be:9f:89:a5:b6:fa:39:
                    5a:48:07:bb:dd:a5:ff:9c:1d:e5:11:70:b8:5d:a2:
                    93:9c:08:99:4f:70:a9:2a:15:99:10:ea:60:6a:83:
                    af:5c:5c:e9:e8:26:d7:5d:36:b7:69:b6:2b:15:14:
                    00:2a:be:69:af:94:ba:b2:c3:48:7a:f7:fa:23:f5:
                    3b:21:6f:9b:23:6a:25:ca:9f:24:9f:7c:3d:14:67:
                    5e:6e:54:62:7f:5c:f7:0f:50:bb:cb:58:21:0e:96:
                    a7:59:1c:e2:b2:1f:ea:51:62:39:a5:53:96:e8:04:
                    db:b6:9d:3a:b7:4f:4b:67:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            2.5.29.1: 
                0<...4.
.0...'61......0.1.0...U....Test GmbH..fK ..
A.A..
%. .
    Signature Algorithm: sha1WithRSA
    Signature Value:
        6d:60:35:19:49:44:d7:09:27:1e:4b:f8:de:c1:f8:df:22:d4:
        87:76:00:b0:b7:11:8c:4f:bb:8d:29:a8:aa:b0:41:74:5a:2c:
        3b:77:e2:30:24:38:41:5d:2e:6e:6e:85:07:47:de:53:2a:3d:
        26:4b:78:51:5e:9a:01:8f:c7:e1:51:7b:17:de:57:f2:ec:c0:
        0e:61:d5:35:b9:d5:ee:29:75:e0:f2:32:ec:f2:87:67:47:11:
        e0:f0:8b:3e:27:fa:bb:5c:ce:5d:13:47:8d:9f:ae:39:a2:dc:
        60:07:92:d8:27:5b:ae:6d:62:4c:0b:1b:a8:05:8e:28:31:ff:
        0d:12

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            9f:ea:c8:11:b0:f1:62:47:a5:fc:20:d8:05:23:ac:e6
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http:\/\/www.usertrust.com, CN=UTN-USERFirst-Object
        Validity
            Not Before: May  5 00:00:00 2015 GMT
            Not After : Dec 31 23:59:59 2015 GMT
        Subject: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Time Stamping Signer
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:bc:35:a0:36:70:22:81:11:c3:b2:83:b9:d3:28:
                    c6:36:cd:25:6b:a9:7b:b2:1c:f6:9b:51:9c:ef:35:
                    f4:ed:08:8e:5e:38:08:f8:77:3c:0a:42:e0:f3:70:
                    dc:a3:d7:ca:f5:4c:0b:cf:ff:22:9c:0a:7e:68:d6:
                    09:a2:2a:84:7b:a6:9d:b4:a9:c1:33:e2:ef:1f:17:
                    48:ca:3a:cd:46:e6:c5:aa:77:bd:e3:77:9a:fa:47:
                    53:40:28:59:43:93:f1:a4:81:ea:ef:80:b5:4f:a7:
                    08:ce:ba:6e:bc:ca:76:0c:97:64:59:86:24:bb:3d:
                    82:90:a8:55:b1:92:d3:a0:a7:05:ac:9f:53:25:08:
                    10:47:99:cd:98:de:68:e5:b4:50:78:a3:af:01:cc:
                    59:43:58:e4:76:6e:7e:ac:c7:e2:9e:1f:4f:b0:47:
                    2d:c8:0c:a3:49:27:80:75:8c:bb:06:91:65:0f:90:
                    9b:f4:ba:d1:81:c8:5c:6a:ec:14:e9:25:09:bf:23:
                    16:f4:95:46:40:40:21:bb:83:96:fd:86:1f:7a:c8:
                    0d:10:8e:a2:f8:19:07:58:7f:9f:bd:37:02:60:f2:
                    a4:e9:9d:44:3f:30:05:e4:a7:70:99:51:9a:e8:17:
                    f1:55:ca:b2:61:89:65:46:a7:6a:f2:58:46:7e:aa:
                    a0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                DA:ED:64:74:14:9C:14:3C:AB:DD:99:A9:BD:5B:28:4D:8B:3C:C9:D8
            X509v3 Subject Key Identifier: 
                2E:2D:B0:0A:44:4A:D3:87:C0:02:07:CE:97:7D:50:62:20:FD:0F:83
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.usertrust.com/UTN-USERFirst-Object.crl
            Authority Information Access: 
                OCSP - URI:http://ocsp.usertrust.com
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        0d:bb:ad:60:11:1b:b5:f0:0d:cc:e6:48:3a:7a:3e:0e:33:dc:
        1c:b9:ea:d6:20:fe:a3:4d:d0:cc:76:4e:e8:18:d8:79:df:d3:
        4f:9a:42:64:23:8a:29:72:8a:3a:6c:66:a6:3c:3a:17:a8:70:
        45:65:c6:73:c3:d0:ce:89:54:fb:ac:69:0f:58:b0:19:cb:86:
        9f:7e:b9:7e:eb:51:92:bf:9b:dd:eb:d1:65:f0:25:7b:88:7c:
        de:bd:a5:c8:b5:14:51:bc:c0:81:30:8a:85:38:7b:e6:79:fe:
        67:55:93:87:fe:4f:e8:8d:0e:ed:f3:72:92:b5:c2:89:80:6d:
        d1:59:e3:1d:0d:ea:b1:38:ee:03:9d:00:19:a5:ab:21:9b:79:
        c3:cc:c2:3e:68:7e:bd:c9:4d:69:4d:b4:64:51:fb:b2:28:74:
        e2:53:89:ce:9d:fa:ad:e2:db:ce:ab:7b:7e:06:44:74:fd:0a:
        a3:c9:b7:a7:30:cd:49:d2:92:64:f1:22:a6:b8:28:45:74:79:
        e9:a7:ce:3b:33:f9:83:50:94:7d:68:c0:1d:49:c7:60:78:7a:
        3c:64:26:d5:be:fa:0a:6d:e4:1e:e1:09:53:8f:a9:c5:23:ac:
        c7:9d:61:42:21:f0:2c:16:71:49:3b:10:af:2c:6f:1a:e6:31:
        f1:14:fd:6c

pkcs7-signedData

SHA1: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15

a6 b5 86 d5 b4 a1 24 66 ae 05 a2 17 da 8e 60 d6 |......$f......`.|

1.3.6.1.4.1.311.2.3.1:

00 00 00 00 bb 83 ea 57  19 95 29 d7 1d 26 33 18  |.......W..)..&3.|
8e ea e1 d9 81 86 2b f7  00 04 00 00 64 94 93 da  |......+.....d...|
0a 34 00 7d 91 e5 75 d4  ef f3 bf ee d5 4b d8 8f  |.4.}..u......K..|
00 14 00 00 0d d8 99 b4  3f f3 33 df e3 fd a0 99  |........?.3.....|
e1 82 8d 0e 04 34 2d c0  00 24 00 00 ab 66 c3 b6  |.....4-..$...f..|
82 42 aa ad cd 9a ca 61  52 dc 2b 61 d1 b2 c2 9b  |.B.....aR.+a....|
00 34 00 00 a8 0c 3c 8c  8b e2 f8 24 a5 e4 3b ed  |.4....<....$..;.|
fa b7 13 85 67 df f0 00  00 44 00 00 41 dd 19 19  |....g....D..A...|
57 6d 4e 4c 1e 0c fd 8a  38 bd d8 cd 2e 27 00 c4  |WmNL....8....'..|
00 54 00 00 cb bc 28 af  8b 36 67 5e e5 65 b9 31  |.T....(..6g^.e.1|
d9 88 a2 cc ad f8 e7 73  00 64 00 00 05 7c b2 5e  |.......s.d...|.^|
17 67 06 38 e8 ad 2a 05  ad ba bd 86 12 99 bb 45  |.g.8..*........E|
00 74 00 00 5c d1 cb c0  70 65 52 bf c8 5c 2c 57  |.t..\...peR..\,W|
e4 14 1d f0 b5 1c 9c b9  00 84 00 00 0a 55 09 22  |.............U."|
5e 23 fa 82 cd c8 14 c3  e0 a3 a1 e6 02 20 5d 70  |^#........... ]p|
00 94 00 00 7f a7 c0 2b  28 76 2c 1d 0f 58 63 37  |.......+(v,..Xc7|
10 d8 4a 5f c7 3e 65 bd  00 a4 00 00 dc 60 79 f5  |..J_.>e......`y.|
5f 23 15 c4 e2 94 be bd  b3 b2 65 1d df 0f 3a 55  |_#........e...:U|
00 b4 00 00 e4 d7 85 d1  23 db 17 87 9d 78 d1 49  |........#....x.I|
dc 0c 96 bd d6 4b fd e3  00 c4 00 00 5c a5 9f a6  |.....K......\...|
97 19 24 e5 41 bf 89 8b  b1 37 f7 a2 bb cc bd 18  |..$.A....7......|
00 d4 00 00 93 c0 ff b6  51 c7 a3 81 e4 9c 0c 06  |........Q.......|
7b d8 1b 6e 8a 0d e9 7d  00 e4 00 00 7e 7a 1f 32  |{..n...}....~z.2|
eb e7 11 06 fd 23 41 10  a9 bb 00 6c cc d1 e6 fc  |.....#A....l....|
00 f4 00 00 7a 41 48 1f  1f af 39 78 7b 79 4b a8  |....zAH...9x{yK.|
0b f1 75 47 e1 e9 88 c4  00 04 01 00 34 d9 3c ba  |..uG........4.<.|
20 fd c7 18 d5 d0 f4 32  bc cf 52 b4 1f 45 08 4a  | ......2..R..E.J|
00 14 01 00 50 24 77 c5  cd b4 29 47 6c 57 b4 68  |....P$w...)GlW.h|
db 91 dc 46 f5 b1 94 57  00 24 01 00 6c 26 73 54  |...F...W.$..l&sT|
7a 4d cc 1c f4 ea 42 dc  bf f2 4a 86 ff 2d 66 61  |zM....B...J..-fa|
00 34 01 00 1f 5d d6 65  d7 08 b0 d0 c1 5a ab 8d  |.4...].e.....Z..|
e2 50 fd 26 d6 82 8d c0  00 44 01 00 12 1f cb 04  |.P.&.....D......|
0b 6a 31 64 cf 43 a8 67  a3 3a 37 f7 16 f3 bf f7  |.j1d.C.g.:7.....|
00 54 01 00 ec 1f 9a 24  d2 f9 f0 40 55 71 f4 f8  |.T.....$...@Uq..|
2a b1 bc 68 73 66 3f 60  00 64 01 00 91 e3 70 13  |*..hsf?`.d....p.|
b7 61 e9 11 d6 71 ea 76  6e f5 e9 f8 98 f3 77 19  |.a...q.vn.....w.|
00 74 01 00 e9 9a f2 93  18 eb 56 88 a3 49 23 0b  |.t........V..I#.|
71 10 94 f3 64 04 0b 93  00 7c 01 00 1d ea 4a 24  |q...d....|....J$|
fa 4e 49 4c 34 79 3b f9  d4 1a 00 8d 2d 03 5e ba  |.NIL4y;.....-.^.|
00 8c 01 00 be 80 90 2b  ae 62 e7 9b bc 53 1f 68  |.......+.b...S.h|
09 45 94 a0 af c1 50 03  00 9c 01 00 e8 be 73 82  |.E....P.......s.|
e0 b6 01 17 a4 63 ab 91  b4 11 fd a3 62 f7 43 e0  |.....c......b.C.|
00 ac 01 00 0f 7e a0 53  5b 80 40 c8 ed a0 13 5d  |.....~.S[.@....]|
b7 87 96 df 54 5c a6 01  00 bc 01 00 f9 9a 1a e5  |....T\..........|
c5 72 73 f3 85 e7 09 7d  0b 83 61 84 2d 5a 72 d2  |.rs....}..a.-Zr.|
00 cc 01 00 72 9b a9 c2  0f 56 ef 96 0a bb 6f cb  |....r....V....o.|
89 f8 4d c3 b6 59 fb f0  00 dc 01 00 77 d6 81 c7  |..M..Y......w...|
ec 9a 21 b0 fe 1c 4c 30  eb 86 1f 4c 56 45 bb b2  |..!...L0...LVE..|
00 de 01 00 71 ce dc ce  6b f7 80 17 7d 38 88 62  |....q...k...}8.b|
35 6d c6 e6 e8 5c 3b 72  00 ee 01 00 3f 36 a3 37  |5m...\;r....?6.7|
be f7 ae 82 4f 39 88 22  7a 8f 18 c0 22 f4 e3 30  |....O9."z..."..0|
00 f8 01 00 d6 19 30 9f  4e 6f 29 25 f1 9e 6a 39  |......0.No)%..j9|
f0 02 57 cb 3c 6e 1f 56  00 08 02 00 79 09 45 49  |..W.

SHA1

bf bd 6d 23 a0 a2 35 87 08 61 1a ee 63 52 d3 13 |..m#..5..a..cR..| bc 8e 65 30 |..e0 |

unnamed
- #0
  - 2
    - 66:4B:20:B4:F8:0A:41:9C:41:92:CD:0D:25:A2:20:C0
    - RSA-SHA1-2: nil
    - CN: Test GmbH
    - 2015-09-30 22:00:00 UTC: 2016-09-29 22:00:00 UTC
    - CN: Test GmbH
    - #5
      - rsaEncryption: nil
      - B6:5D:09:03:21:D7:64:BE:9F:89:A5:B6:FA:39:5A:48:
        07:BB:DD:A5:FF:9C:1D:E5:11:70:B8:5D:A2:93:9C:08:
        99:4F:70:A9:2A:15:99:10:EA:60:6A:83:AF:5C:5C:E9:
        E8:26:D7:5D:36:B7:69:B6:2B:15:14:00:2A:BE:69:AF:
        94:BA:B2:C3:48:7A:F7:FA:23:F5:3B:21:6F:9B:23:6A:
        25:CA:9F:24:9F:7C:3D:14:67:5E:6E:54:62:7F:5C:F7:
        0F:50:BB:CB:58:21:0E:96:A7:59:1C:E2:B2:1F:EA:51:
        62:39:A5:53:96:E8:04:DB:B6:9D:3A:B7:4F:4B:67:19: 0x010001
    - 2.5.29.1
      - 95 34 c8 0d d2 30 0f 02 ba 27 36 31 bc bd 91 90 |.4...0...'61....|
        CN: Test GmbH
        66 4b 20 b4 f8 0a 41 9c 41 92 cd 0d 25 a2 20 c0 |fK ...A.A...%. .|
  - RSA-SHA1-2:
```
6d 60 35 19 49 44 d7 09  27 1e 4b f8 de c1 f8 df  |m`5.ID..'.K.....|
22 d4 87 76 00 b0 b7 11  8c 4f bb 8d 29 a8 aa b0  |"..v.....O..)...|
41 74 5a 2c 3b 77 e2 30  24 38 41 5d 2e 6e 6e 85  |AtZ,;w.0$8A].nn.|
07 47 de 53 2a 3d 26 4b  78 51 5e 9a 01 8f c7 e1  |.G.S*=&KxQ^.....|
51 7b 17 de 57 f2 ec c0  0e 61 d5 35 b9 d5 ee 29  |Q{..W....a.5...)|
75 e0 f2 32 ec f2 87 67  47 11 e0 f0 8b 3e 27 fa  |u..2...gG....>'.|
bb 5c ce 5d 13 47 8d 9f  ae 39 a2 dc 60 07 92 d8  |.\.].G...9..`...|
27 5b ae 6d 62 4c 0b 1b  a8 05 8e 28 31 ff 0d 12  |'[.mbL.....(1...|
```
- Certificate #1
  - 2
    - 9F:EA:C8:11:B0:F1:62:47:A5:FC:20:D8:05:23:AC:E6
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - ST: UT
      - L: Salt Lake City
      - O: The USERTRUST Network
      - OU: http://www.usertrust.com
      - CN: UTN-USERFirst-Object
    - 2015-05-05 00:00:00 UTC: 2015-12-31 23:59:59 UTC
    - Subject
      - C: GB
      - ST: Greater Manchester
      - L: Salford
      - O: COMODO CA Limited
      - CN: COMODO Time Stamping Signer
    - #5
      - rsaEncryption: nil
      - BC:35:A0:36:70:22:81:11:C3:B2:83:B9:D3:28:C6:36:
        CD:25:6B:A9:7B:B2:1C:F6:9B:51:9C:EF:35:F4:ED:08:
        8E:5E:38:08:F8:77:3C:0A:42:E0:F3:70:DC:A3:D7:CA:
        F5:4C:0B:CF:FF:22:9C:0A:7E:68:D6:09:A2:2A:84:7B:
        A6:9D:B4:A9:C1:33:E2:EF:1F:17:48:CA:3A:CD:46:E6:
        C5:AA:77:BD:E3:77:9A:FA:47:53:40:28:59:43:93:F1:
        A4:81:EA:EF:80:B5:4F:A7:08:CE:BA:6E:BC:CA:76:0C:
        97:64:59:86:24:BB:3D:82:90:A8:55:B1:92:D3:A0:A7:
        05:AC:9F:53:25:08:10:47:99:CD:98:DE:68:E5:B4:50:
        78:A3:AF:01:CC:59:43:58:E4:76:6E:7E:AC:C7:E2:9E:
        1F:4F:B0:47:2D:C8:0C:A3:49:27:80:75:8C:BB:06:91:
        65:0F:90:9B:F4:BA:D1:81:C8:5C:6A:EC:14:E9:25:09:
        BF:23:16:F4:95:46:40:40:21:BB:83:96:FD:86:1F:7A:
        C8:0D:10:8E:A2:F8:19:07:58:7F:9F:BD:37:02:60:F2:
        A4:E9:9D:44:3F:30:05:E4:A7:70:99:51:9A:E8:17:F1:
        55:CA:B2:61:89:65:46:A7:6A:F2:58:46:7E:AA:A0:07: 0x010001
    - #6
      - authorityKeyIdentifier:
        da ed 64 74 14 9c 14 3c ab dd 99 a9 bd 5b 28 4d |..dt...<.....[(M| 8b 3c c9 d8 |.<.. |
      - subjectKeyIdentifier:
        2e 2d b0 0a 44 4a d3 87 c0 02 07 ce 97 7d 50 62 |.-..DJ.......}Pb| 20 fd 0f 83 | ... |
      - keyUsage: true, 0xc0
      - basicConstraints
        true
        nil
      - extendedKeyUsage: true, timeStamping
      - crlDistributionPoints: http://crl.usertrust.com/UTN-USERFirst-Object.crl
      - authorityInfoAccess
        OCSP: http://ocsp.usertrust.com
  - RSA-SHA1:
```
0d bb ad 60 11 1b b5 f0  0d cc e6 48 3a 7a 3e 0e  |...`.......H:z>.|
33 dc 1c b9 ea d6 20 fe  a3 4d d0 cc 76 4e e8 18  |3..... ..M..vN..|
d8 79 df d3 4f 9a 42 64  23 8a 29 72 8a 3a 6c 66  |.y..O.Bd#.)r.:lf|
a6 3c 3a 17 a8 70 45 65  c6 73 c3 d0 ce 89 54 fb  |.<:..pEe.s....T.|
ac 69 0f 58 b0 19 cb 86  9f 7e b9 7e eb 51 92 bf  |.i.X.....~.~.Q..|
9b dd eb d1 65 f0 25 7b  88 7c de bd a5 c8 b5 14  |....e.%{.|......|
51 bc c0 81 30 8a 85 38  7b e6 79 fe 67 55 93 87  |Q...0..8{.y.gU..|
fe 4f e8 8d 0e ed f3 72  92 b5 c2 89 80 6d d1 59  |.O.....r.....m.Y|
e3 1d 0d ea b1 38 ee 03  9d 00 19 a5 ab 21 9b 79  |.....8.......!.y|
c3 cc c2 3e 68 7e bd c9  4d 69 4d b4 64 51 fb b2  |...>h~..MiM.dQ..|
28 74 e2 53 89 ce 9d fa  ad e2 db ce ab 7b 7e 06  |(t.S.........{~.|
44 74 fd 0a a3 c9 b7 a7  30 cd 49 d2 92 64 f1 22  |Dt......0.I..d."|
a6 b8 28 45 74 79 e9 a7  ce 3b 33 f9 83 50 94 7d  |..(Ety...;3..P.}|
68 c0 1d 49 c7 60 78 7a  3c 64 26 d5 be fa 0a 6d  |h..I.`xz
```

#0
- CN: Test GmbH
- 66:4B:20:B4:F8:0A:41:9C:41:92:CD:0D:25:A2:20:C0
SHA1: nil

contentType: 1.3.6.1.4.1.311.2.1.4

messageDigest:

13 92 94 04 39 ea 5c 04  d9 c3 3b c6 2e 76 53 97  |....9.\...;..vS.|
2b 8a 23 84                                       |+.#.            |

1.3.6.1.4.1.311.2.1.12

00 53 00 69 00 67 00 6e 00 65 00 64 00 20 00 4c |.S.i.g.n.e.d. .L| 00 6f 00 67 00 69 00 6e 00 20 00 4c 00 69 00 62 |.o.g.i.n. .L.i.b| 00 72 00 61 00 72 00 79 |.r.a.r.y |
: https://www.ethical-hacking.de/

rsaEncryption:

5c 7d d5 bb 26 31 40 70  6b 7e 69 f3 c4 27 1a 0e  |\}..&1@pk~i..'..|
87 3c 09 05 4b 35 34 00  18 49 34 a1 47 85 cd 92  |.<..K54..I4.G...|
9c 38 63 a2 41 7a 9e 20  a8 e9 37 d7 02 12 eb f2  |.8c.Az. ..7.....|
1a 4f b9 02 d5 ba 24 e6  bd 79 bd 2c 86 a0 e3 79  |.O....$..y.,...y|
5b cd 7a 89 76 ba 38 b8  86 d6 26 3a 93 9b c5 31  |[.z.v.8...&:...1|
68 57 7d dd 8b 85 a5 8a  5c 0b e8 71 cd 8f 6e d9  |hW}.....\..q..n.|
1e cb 34 c3 a5 0a 77 78  3e 37 15 7f f2 dd f6 1f  |..4...wx>7......|
3f 16 de 5f b1 f5 a4 21  e3 aa 97 6a a4 a0 7b c7  |?.._...!...j..{.|

countersignature

unnamed
- #0
  - C: US
  - ST: UT
  - L: Salt Lake City
  - O: The USERTRUST Network
  - OU: http://www.usertrust.com
  - CN: UTN-USERFirst-Object
- 9F:EA:C8:11:B0:F1:62:47:A5:FC:20:D8:05:23:AC:E6
SHA1: nil

contentType: pkcs7-data
signingTime: 2015-10-07 08:46:51 UTC

messageDigest:

35 79 aa 22 3f 66 be 89  39 48 9d cc 5f 3d fe c6  |5y."?f..9H.._=..|
fb 80 40 34                                       |..@4            |

rsaEncryption:

2a 68 90 26 0e 12 3b 70  45 fb 64 25 67 c8 91 6f  |*h.&..;pE.d%g..o|
ca 88 27 c5 ce ea 7f 03  22 92 b3 9a ac a5 c7 94  |..'.....".......|
c0 98 5b 5a a7 e4 7f 14  a7 11 58 8d fb 05 da c3  |..[Z......X.....|
fe c5 54 d9 fd b0 80 b5  5d 99 60 8f bd 4a aa 25  |..T.....].`..J.%|
86 53 06 57 5d c6 66 a4  4d 1c 4d 9e df 63 04 f5  |.S.W].f.M.M..c..|
f6 1a e0 6e 4a 08 18 29  62 2a 28 b6 5f 6a 30 11  |...nJ..)b*(._j0.|
41 36 3b 1d ed e3 e6 43  4b 8f f8 54 91 9b 89 4d  |A6;....CK..T...M|
d5 bd 4d b1 a7 74 5b ef  3a fe 65 55 67 6e 6e ae  |..M..t[.:.eUgnn.|
38 da a0 2a c3 2d 36 d5  c5 6e c7 4c c2 05 97 fd  |8..*.-6..n.L....|
ea a7 39 be bf 02 51 4b  b5 29 02 2e 3e db db 78  |..9...QK.)..>..x|
26 cf c6 97 45 d0 ed 50  fe 66 70 92 47 96 29 0f  |&...E..P.fp.G.).|
50 b4 c4 b4 36 b2 e7 63  db b4 99 0b 73 7d cd 9f  |P...6..c....s}..|
5b 8a b7 0a 78 99 0c a3  be 64 61 c1 d2 10 20 a5  |[...x....da... .|
4e a8 bd 82 5a ae 4a 17  48 ea af e2 2e 73 e9 0c  |N...Z.J.H....s..|
0d c1 f0 bd fc d4 91 28  24 dd 48 67 8b 91 13 81  |.......($.Hg....|
48 78 34 99 d5 50 44 89  bc 07 78 60 d2 e7 64 6e  |Hx4..PD...x`..dn|

show previews

offset	size	type	comment
0	143360	DLL	10/07/2015 08:44:43	#
15c1	15	HTM		#
23000	3768	PKCS7	Authenticode Signature	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK