animizService.exe

info
MZ
PE
resources
imports
exports
foremost
signature
hexdump
disasm
log
discuss
donate

filename	animizService.exe
size	266536 (0x41128)
md5	751591af4bd1e873d1aaad1edc7551db

type	PE32+ executable (GUI) x86-64, for MS Windows
mimetype	application/x-dosexec

clamav	scan pending
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x108

Rich Header

lib id	version	times used
241	40116	5
243	40116	125
242	40116	14
261	24233	2
259	24123	7
261	24123	28
260	24123	18
203	65501	15
1	0	132
265	24233	1
256	24233	1
255	24210	1
258	24233	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x8664
NumberOfSections	6
TimeDateStamp	0x5a90cd70
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xf0
Characteristics	0x22
Magic	0x20b
LinkerVersion	14.0
SizeOfCode	0xa000
SizeOfInitializedData	0x35600
SizeOfUninitializedData	0
AddressOfEntryPoint	0x1660
BaseOfCode	0x1000
ImageBase	0x140000000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	6.0
ImageVersion	0.0
SubsystemVersion	6.0
Reserved1	0
SizeOfImage	0x43000
SizeOfHeaders	0x400
CheckSum	0x49567
Subsystem	2
DllCharacteristics	0xc160
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x9f8e	0xa000	R-X CODE
.rdata	0xb000	0xa71a	0xa800	R-- IDATA
.data	0x16000	0x1d20	0xc00	RW- IDATA
.pdata	0x18000	0xc0c	0xe00	R-- IDATA
.rsrc	0x19000	0x28be0	0x28c00	R-- IDATA
.reloc	0x42000	0x688	0x800	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0x14e30	0x8c
IMPORT	0x14ebc	0x64
RESOURCE	0x19000	0x28be0
EXCEPTION	0x18000	0xc0c
SECURITY	0x3fa00	0x1728
BASERELOC	0x42000	0x688
DEBUG	0x13fc0	0x70
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0x14030	0x94
Bound_IAT	0	0
IAT	0xb000	0x268
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
ICON	#101	67624	1252
ICON	#102	4264	1252
ICON	#103	9640	1252
ICON	#104	1128	1252
ICON	#106	67624	1252
ICON	#107	4264	1252
ICON	#108	9640	1252
ICON	#109	1128	1252
GROUP_ICON	#100	62	1252
GROUP_ICON	#105	62	1252
MANIFEST	#1	822	1252

module_name	hint	function_name
KERNEL32.dll	1328	SetStdHandle
KERNEL32.dll	1520	WriteConsoleW
KERNEL32.dll	676	GetProcAddress
KERNEL32.dll	343	ExitProcess
KERNEL32.dll	824	HeapAlloc
KERNEL32.dll	681	GetProcessHeap
KERNEL32.dll	621	GetModuleHandleW
KERNEL32.dll	939	LoadLibraryW
KERNEL32.dll	572	GetFileAttributesW
KERNEL32.dll	194	CreateFileW
KERNEL32.dll	776	GetUserDefaultUILanguage
KERNEL32.dll	617	GetModuleFileNameW
KERNEL32.dll	711	GetStdHandle
KERNEL32.dll	463	GetCommandLineW
KERNEL32.dll	1092	RaiseException
KERNEL32.dll	1292	SetFilePointerEx
KERNEL32.dll	831	HeapReAlloc
KERNEL32.dll	833	HeapSize
KERNEL32.dll	1072	QueryPerformanceCounter
KERNEL32.dll	528	GetCurrentProcessId
KERNEL32.dll	532	GetCurrentThreadId
KERNEL32.dll	733	GetSystemTimeAsFileTime
KERNEL32.dll	852	InitializeSListHead
KERNEL32.dll	1198	RtlCaptureContext
KERNEL32.dll	1205	RtlLookupFunctionEntry
KERNEL32.dll	1212	RtlVirtualUnwind
KERNEL32.dll	874	IsDebuggerPresent
KERNEL32.dll	1426	UnhandledExceptionFilter
KERNEL32.dll	1362	SetUnhandledExceptionFilter
KERNEL32.dll	709	GetStartupInfoW
KERNEL32.dll	880	IsProcessorFeaturePresent
KERNEL32.dll	1521	WriteFile
KERNEL32.dll	127	CloseHandle
KERNEL32.dll	848	InitializeCriticalSection
KERNEL32.dll	297	EnterCriticalSection
KERNEL32.dll	933	LeaveCriticalSection
KERNEL32.dll	262	DeleteCriticalSection
KERNEL32.dll	980	MultiByteToWideChar
KERNEL32.dll	1501	WideCharToMultiByte
KERNEL32.dll	1211	RtlUnwindEx
KERNEL32.dll	598	GetLastError
KERNEL32.dll	1305	SetLastError
KERNEL32.dll	849	InitializeCriticalSectionAndSpinCount
KERNEL32.dll	1410	TlsAlloc
KERNEL32.dll	1412	TlsGetValue
KERNEL32.dll	1413	TlsSetValue
KERNEL32.dll	1411	TlsFree
KERNEL32.dll	420	FreeLibrary
KERNEL32.dll	938	LoadLibraryExW
KERNEL32.dll	581	GetFileType
KERNEL32.dll	527	GetCurrentProcess
KERNEL32.dll	616	GetModuleFileNameA
KERNEL32.dll	1392	TerminateProcess
KERNEL32.dll	620	GetModuleHandleExW
KERNEL32.dll	426	GetACP
KERNEL32.dll	921	LCMapStringW
KERNEL32.dll	366	FindClose
KERNEL32.dll	371	FindFirstFileExA
KERNEL32.dll	387	FindNextFileA
KERNEL32.dll	885	IsValidCodePage
KERNEL32.dll	653	GetOEMCP
KERNEL32.dll	441	GetCPInfo
KERNEL32.dll	462	GetCommandLineA
KERNEL32.dll	558	GetEnvironmentStringsW
KERNEL32.dll	419	FreeEnvironmentStringsW
KERNEL32.dll	716	GetStringTypeW
KERNEL32.dll	408	FlushFileBuffers
KERNEL32.dll	482	GetConsoleCP
KERNEL32.dll	500	GetConsoleMode
KERNEL32.dll	828	HeapFree
SHELL32.dll	6	CommandLineToArgvW
USER32.dll	588	MessageBoxExW
SHLWAPI.dll	301	StrCmpW

ord	entry_va	function_name
1	0x16900	AmdPowerXpressRequestBetterBatteryLife
2	0x16904	NvOptimusDisablement

module_name	CaptiveAppEntry.exe
flags	0
timestamp	2018-02-24 02:26:56
version	0.0
ordinal_base	1
nFunctions	2
nNames	2
Names(2)	0x14e60
Functions(2)	0x14e58
NameOrdinals(2)	0x14e68

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=CN/O=WoSign CA Limited/CN=WoSign Code Signing CA

serial: 3CCA728325359D49420F230FDC397AD0

Certificates (4)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
        Validity
            Not Before: Dec 21 00:00:00 2012 GMT
            Not After : Dec 30 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:b3:49:54:4b:97:1c:12:0a:d8:25:79:91:
                    22:57:2a:6f:dc:b8:26:c4:43:73:6b:c2:bf:2e:50:
                    5a:fb:14:c2:76:8e:43:01:25:43:b4:a1:e2:45:f4:
                    e8:b7:7b:c3:74:cc:22:d7:b4:94:00:02:f7:4d:ed:
                    bf:b4:b7:44:24:6b:cd:5f:45:3b:d1:44:ce:43:12:
                    73:17:82:8b:69:b4:2b:cb:99:1e:ac:72:1b:26:4d:
                    71:1f:b1:31:dd:fb:51:61:02:53:a6:aa:f5:49:2c:
                    05:78:45:a5:2f:89:ce:e7:99:e7:fe:8c:e2:57:3f:
                    3d:c6:92:dc:4a:f8:7b:33:e4:79:0a:fb:f0:75:88:
                    41:9c:ff:c5:03:51:99:aa:d7:6c:9f:93:69:87:65:
                    29:83:85:c2:60:14:c4:c8:c9:3b:14:da:c0:81:f0:
                    1f:0d:74:de:92:22:ab:ca:f7:fb:74:7c:27:e6:f7:
                    4a:1b:7f:a7:c3:9e:2d:ae:8a:ea:a6:e6:aa:27:16:
                    7d:61:f7:98:71:11:bc:e2:50:a1:4b:e5:5d:fa:e5:
                    0e:a7:2c:9f:aa:65:20:d3:d8:96:e8:c8:7c:a5:4e:
                    48:44:ff:19:e2:44:07:92:0b:d7:68:84:80:5d:6a:
                    78:64:45:cd:60:46:7e:54:c1:13:7c:c5:79:f1:c9:
                    c1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD
            Authority Information Access: 
                OCSP - URI:http://ocsp.thawte.com
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.thawte.com/ThawteTimestampingCA.crl
            X509v3 Extended Key Usage: 
                Time Stamping
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-1
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        03:09:9b:8f:79:ef:7f:59:30:aa:ef:68:b5:fa:e3:09:1d:bb:
        4f:82:06:5d:37:5f:a6:52:9f:16:8d:ea:1c:92:09:44:6e:f5:
        6d:eb:58:7c:30:e8:f9:69:8d:23:73:0b:12:6f:47:a9:ae:39:
        11:f8:2a:b1:9b:b0:1a:c3:8e:eb:59:96:00:ad:ce:0c:4d:b2:
        d0:31:a6:08:5c:2a:7a:fc:e2:7a:1d:57:4c:a8:65:18:e9:79:
        40:62:25:96:6e:c7:c7:37:6a:83:21:08:8e:41:ea:dd:d9:57:
        3f:1d:77:49:87:2a:16:06:5e:a6:38:6a:22:12:a3:51:19:83:
        7e:b6

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Validity
            Not Before: Oct 18 00:00:00 2012 GMT
            Not After : Dec 29 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer - G4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a2:63:0b:39:44:b8:bb:23:a7:44:49:bb:0e:ff:
                    a1:f0:61:0a:53:93:b0:98:db:ad:2c:0f:4a:c5:6e:
                    ff:86:3c:53:55:0f:15:ce:04:3f:2b:fd:a9:96:96:
                    d9:be:61:79:0b:5b:c9:4c:86:76:e5:e0:43:4b:22:
                    95:ee:c2:2b:43:c1:9f:d8:68:b4:8e:40:4f:ee:85:
                    38:b9:11:c5:23:f2:64:58:f0:15:32:6f:4e:57:a1:
                    ae:88:a4:02:d7:2a:1e:cd:4b:e1:dd:63:d5:17:89:
                    32:5b:b0:5e:99:5a:a8:9d:28:50:0e:17:ee:96:db:
                    61:3b:45:51:1d:cf:12:56:0b:92:47:fc:ab:ae:f6:
                    66:3d:47:ac:70:72:e7:92:e7:5f:cd:10:b9:c4:83:
                    64:94:19:bd:25:80:e1:e8:d2:22:a5:d0:ba:02:7a:
                    a1:77:93:5b:65:c3:ee:17:74:bc:41:86:2a:dc:08:
                    4c:8c:92:8c:91:2d:9e:77:44:1f:68:d6:a8:74:77:
                    db:0e:5b:32:8b:56:8b:33:bd:d9:63:c8:49:9d:3a:
                    c5:c5:ea:33:0b:d2:f1:a3:1b:f4:8b:be:d9:b3:57:
                    8b:3b:de:04:a7:7a:22:b2:24:ae:2e:c7:70:c5:be:
                    4e:83:26:08:fb:0b:bd:a9:4f:99:08:e1:10:28:72:
                    aa:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                OCSP - URI:http://ts-ocsp.ws.symantec.com
                CA Issuers - URI:http://ts-aia.ws.symantec.com/tss-ca-g2.cer
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://ts-crl.ws.symantec.com/tss-ca-g2.crl
            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-2
            X509v3 Subject Key Identifier: 
                46:C6:69:A3:0E:4A:14:1E:D5:4C:DA:52:63:17:3F:5E:36:BC:0D:E6
            X509v3 Authority Key Identifier: 
                5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        78:3b:b4:91:2a:00:4c:f0:8f:62:30:37:78:a3:84:27:07:6f:
        18:b2:de:25:dc:a0:d4:94:03:aa:86:4e:25:9f:9a:40:03:1c:
        dd:ce:e3:79:cb:21:68:06:da:b6:32:b4:6d:bf:f4:2c:26:63:
        33:e4:49:64:6d:0d:e6:c3:67:0e:f7:05:a4:35:6c:7c:89:16:
        c6:e9:b2:df:b2:e9:dd:20:c6:71:0f:cd:95:74:dc:b6:5c:de:
        bd:37:1f:43:78:e6:78:b5:cd:28:04:20:a3:aa:f1:4b:c4:88:
        29:91:0e:80:d1:11:fc:dd:5c:76:6e:4f:5e:0e:45:46:41:6e:
        0d:b0:ea:38:9a:b1:3a:da:09:71:10:fc:1c:79:b4:80:7b:ac:
        69:f4:fd:9c:b6:0c:16:2b:f1:7f:5b:09:3d:9b:5b:e2:16:ca:
        13:81:6d:00:2e:38:0d:a8:29:8f:2c:e1:b2:f4:5a:a9:01:af:
        15:9c:2c:2f:49:1b:db:22:bb:c3:fe:78:94:51:c3:86:b1:82:
        88:5d:f0:3d:b4:51:a1:79:33:2b:2e:7b:b9:dc:20:09:13:71:
        eb:6a:19:5b:cf:e8:a5:30:57:2c:89:49:3f:b9:cf:7f:c9:bf:
        3e:22:68:63:53:9a:bd:69:74:ac:c5:1d:3c:7f:92:e0:c3:bc:
        1c:d8:04:75

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:ef:72:b4:15:7d:6f:4b:68:e4:bd:d5:75:e5:cc:ae
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=PL, O=Unizeto Technologies S.A., OU=Certum Certification Authority, CN=Certum Trusted Network CA
        Validity
            Not Before: Nov  9 08:45:13 2016 GMT
            Not After : Nov  9 08:45:13 2026 GMT
        Subject: C=CN, O=WoSign CA Limited, CN=WoSign Code Signing CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:f1:13:7f:d0:83:f2:66:f1:2c:2d:0c:76:84:49:
                    f5:17:3f:8e:c3:74:d7:db:f4:4b:04:b2:8d:6f:47:
                    3c:fe:a8:68:e1:2e:44:c6:4c:21:eb:72:2c:20:43:
                    8f:47:02:70:72:db:e8:94:76:eb:54:99:50:86:4d:
                    b2:f6:0f:2b:a0:07:30:fe:f1:4b:61:0c:21:86:be:
                    23:cf:6f:80:30:f3:c2:22:e8:87:e2:3b:31:cd:56:
                    19:1a:8b:af:3a:8b:67:8c:22:87:15:b1:1e:3a:61:
                    f4:94:28:0d:54:01:41:59:73:27:34:8e:6e:09:2c:
                    2e:7e:72:67:52:a2:96:9e:e7:a3:c0:48:4f:42:88:
                    29:6c:d1:62:7a:02:bf:91:21:b4:5b:22:43:2f:b3:
                    de:88:c5:79:93:4b:73:98:db:e8:ea:f3:7b:0d:0e:
                    55:33:f1:06:ba:49:5f:7e:f7:e9:38:60:7e:b6:09:
                    35:ac:fc:96:a7:77:88:2b:c0:ec:f8:3d:74:3a:54:
                    f1:38:e2:37:79:a6:84:5c:94:fb:d7:7d:81:5d:0a:
                    73:38:5f:67:ed:3a:a8:8f:af:43:09:e0:93:09:e9:
                    cf:fd:34:4c:d2:bf:c1:41:83:4e:14:9f:11:31:0e:
                    52:1c:5e:21:1a:a1:6f:4d:a2:a2:40:cc:cb:d1:c3:
                    a5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Subject Key Identifier: 
                83:D1:49:9C:55:28:59:37:A9:7E:40:83:EC:CD:A2:46:54:05:3C:A2
            X509v3 Authority Key Identifier: 
                08:76:CD:CB:07:FF:24:F6:C5:CD:ED:BB:90:BC:E2:84:37:46:75:F7
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://subca.crl.certum.pl/ctnca.crl
            Authority Information Access: 
                OCSP - URI:http://subca.ocsp-certum.com
                CA Issuers - URI:http://repository.certum.pl/ctnca.cer
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: http://www.certum.pl/CPS
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        dc:2e:77:95:1e:93:82:a1:4b:89:42:69:20:4e:36:c1:8d:ae:
        70:a1:8d:80:67:d1:58:f5:66:09:12:31:e6:d7:b7:94:37:d7:
        36:4f:23:14:ee:f8:97:c5:42:78:8f:17:0e:1a:09:82:c1:56:
        98:9a:41:3c:60:ff:b0:7b:cd:5c:92:8d:23:50:40:09:0d:8e:
        9c:8b:a3:71:40:d8:a1:bf:47:6f:8c:09:72:7d:38:96:df:61:
        ba:dc:d6:5e:0c:38:29:78:81:ff:6c:45:40:80:a4:a9:fc:bc:
        69:26:ca:72:58:06:62:21:9f:91:56:3e:51:36:7f:3e:11:06:
        42:c5:7a:25:25:5e:bd:0a:c1:97:e9:6f:c0:4d:3f:be:8b:17:
        dd:7e:50:52:11:98:75:ff:2a:e1:e2:02:b2:f3:01:7e:38:2b:
        9c:86:3f:67:38:1f:14:bc:00:ba:64:6d:b2:47:0c:f2:9b:32:
        2b:7d:9c:78:a8:54:99:30:0f:ec:23:fe:01:80:56:2d:fd:e0:
        13:07:8d:53:db:f0:4b:f9:c1:5a:af:a9:28:fe:64:3a:53:6e:
        bc:d0:ab:9d:5c:d3:40:6c:50:fe:8b:f7:d7:a0:8a:bd:d3:a7:
        63:2a:9b:48:39:f2:73:4d:f9:94:43:5a:9e:33:85:68:cd:3d:
        23:3c:20:58

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:ca:72:83:25:35:9d:49:42:0f:23:0f:dc:39:7a:d0
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=CN, O=WoSign CA Limited, CN=WoSign Code Signing CA
        Validity
            Not Before: Dec 20 09:44:30 2017 GMT
            Not After : Dec 18 09:44:30 2020 GMT
        Subject: C=CN, O=GUANG ZHOU WAN CAI INFORMATION LIMITED, L=Guangzhou, ST=Guangdong, CN=GUANG ZHOU WAN CAI INFORMATION LIMITED/emailAddress=contact@wancaiinfo.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b5:66:95:66:48:80:ec:5d:a7:1a:7d:4a:3a:77:
                    b9:9a:d6:ae:c0:d0:e3:45:ac:6c:5b:18:7d:74:db:
                    bb:ea:a9:4f:66:44:3d:7a:b9:69:35:0a:0f:25:ea:
                    fe:ef:f3:17:1b:77:56:c7:f6:db:45:ae:18:c6:d8:
                    9a:6a:8f:47:5f:01:ce:03:08:12:a4:f5:71:7c:75:
                    ed:2d:09:b2:58:ab:5f:7d:45:04:76:f7:fc:7c:c5:
                    e4:f0:de:d5:55:bb:02:e2:58:a3:6b:b6:7d:21:9b:
                    47:4c:35:ea:ad:9e:7e:86:b9:c7:c0:c4:3e:53:60:
                    c9:09:87:28:fb:09:da:61:99:2a:93:24:10:b2:7a:
                    0d:0c:b6:37:a0:a7:3c:3c:c4:f6:ee:b9:2b:a2:c7:
                    c1:e1:27:8c:28:93:96:04:c6:0e:62:95:10:42:fc:
                    96:52:6a:6d:cf:ba:f0:57:88:5c:9e:34:3f:5d:10:
                    a6:7b:09:99:ee:56:4e:d1:fb:f3:7e:a9:0b:7d:bb:
                    73:87:11:7b:42:44:9f:24:f3:16:9d:b7:fb:62:2b:
                    a6:0d:b3:41:0c:79:20:69:0b:4d:3e:55:c7:61:f7:
                    34:5b:bd:8f:84:be:3e:b1:53:d2:07:11:c1:99:d3:
                    f3:8e:86:2c:dc:44:59:05:a0:f6:db:44:0e:0b:cf:
                    08:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://wosign.crl.certum.pl/wosign-csca.crl
            Authority Information Access: 
                OCSP - URI:http://wosign-csca.ocsp-certum.com
                CA Issuers - URI:http://repository.certum.pl/wosign-csca.cer
            X509v3 Authority Key Identifier: 
                83:D1:49:9C:55:28:59:37:A9:7E:40:83:EC:CD:A2:46:54:05:3C:A2
            X509v3 Subject Key Identifier: 
                5F:79:D3:47:15:C8:0E:3C:14:36:7A:F2:0B:8B:5F:7E:73:9C:04:DF
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.4.1
                Policy: 1.2.616.1.113527.2.5.1.4
                Policy: 1.2.616.1.113527.2.5.1.14.4
                  CPS: https://www.certum.pl/CPS
            X509v3 Extended Key Usage: 
                Code Signing, 1.3.6.1.4.1.311.61.1.1
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        5d:46:2c:61:b0:30:a4:90:5a:63:21:9d:37:2d:d0:69:69:58:
        5d:9f:c4:14:bb:98:6d:33:5c:3e:4f:98:7a:7f:0e:e0:f5:9c:
        da:a7:e0:ef:c0:26:56:79:a4:42:e5:d8:d5:b2:08:f6:36:4d:
        d7:c3:0f:3b:4c:69:0f:08:ac:33:ba:05:01:93:c4:06:c6:b9:
        37:00:e3:d9:fb:28:de:59:76:84:1c:28:8c:07:f9:74:16:7d:
        fb:14:67:5d:4e:b7:80:f7:03:0c:38:73:aa:2b:8e:e1:f4:a1:
        9a:af:ee:95:75:7b:23:af:89:29:88:91:86:f5:af:e1:27:05:
        31:86:e0:48:2f:a0:e2:bd:d8:3d:d9:ab:d6:17:44:5d:9f:06:
        31:cf:da:f9:ef:40:2d:b0:cd:dd:b4:00:05:c7:a8:d6:0b:b4:
        2b:0a:75:05:7d:2f:22:66:0b:5a:78:b6:27:c4:2b:19:57:6f:
        b8:b2:58:e4:9a:86:8e:3a:f5:57:41:df:4e:8e:0a:80:ee:dc:
        60:50:c2:ae:eb:05:f3:c2:ff:a5:d5:67:cc:92:9f:c5:90:cd:
        63:9a:09:46:e5:a3:82:e5:04:3c:be:aa:75:65:8c:69:51:cf:
        26:a0:67:ab:6e:ec:e1:ad:6f:79:e2:59:ae:9f:c2:28:b4:6d:
        8f:20:2d:0c

pkcs7-signedData

SHA1: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15

00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |

SHA1

52 8f 96 32 19 f8 68 91 02 a7 9c 2d a0 a0 46 45 |R..2..h....-..FE| c6 b6 89 b5 |.... |

Certificates
- Certificate #0
  - 2
    - 7E:93:EB:FB:7C:C6:4E:59:EA:4B:9A:77:D4:06:FC:3B
    - RSA-SHA1: nil
    - Issuer
      - C: ZA
      - ST: Western Cape
      - L: Durbanville
      - O: Thawte
      - OU: Thawte Certification
      - CN: Thawte Timestamping CA
    - 2012-12-21 00:00:00 UTC: 2020-12-30 23:59:59 UTC
    - Subject
      - C: US
      - O: Symantec Corporation
      - CN: Symantec Time Stamping Services CA - G2
    - #5
      - rsaEncryption: nil
      - B1:AC:B3:49:54:4B:97:1C:12:0A:D8:25:79:91:22:57:
        2A:6F:DC:B8:26:C4:43:73:6B:C2:BF:2E:50:5A:FB:14:
        C2:76:8E:43:01:25:43:B4:A1:E2:45:F4:E8:B7:7B:C3:
        74:CC:22:D7:B4:94:00:02:F7:4D:ED:BF:B4:B7:44:24:
        6B:CD:5F:45:3B:D1:44:CE:43:12:73:17:82:8B:69:B4:
        2B:CB:99:1E:AC:72:1B:26:4D:71:1F:B1:31:DD:FB:51:
        61:02:53:A6:AA:F5:49:2C:05:78:45:A5:2F:89:CE:E7:
        99:E7:FE:8C:E2:57:3F:3D:C6:92:DC:4A:F8:7B:33:E4:
        79:0A:FB:F0:75:88:41:9C:FF:C5:03:51:99:AA:D7:6C:
        9F:93:69:87:65:29:83:85:C2:60:14:C4:C8:C9:3B:14:
        DA:C0:81:F0:1F:0D:74:DE:92:22:AB:CA:F7:FB:74:7C:
        27:E6:F7:4A:1B:7F:A7:C3:9E:2D:AE:8A:EA:A6:E6:AA:
        27:16:7D:61:F7:98:71:11:BC:E2:50:A1:4B:E5:5D:FA:
        E5:0E:A7:2C:9F:AA:65:20:D3:D8:96:E8:C8:7C:A5:4E:
        48:44:FF:19:E2:44:07:92:0B:D7:68:84:80:5D:6A:78:
        64:45:CD:60:46:7E:54:C1:13:7C:C5:79:F1:C9:C1:71: 0x010001
    - #6
      - subjectKeyIdentifier:
        5f 9a f5 6e 5c cc cc 74 9a d4 dd 7d ef 3f db ec |_..n\..t...}.?..| 4c 80 2e dd |L... |
      - authorityInfoAccess
        OCSP: http://ocsp.thawte.com
      - basicConstraints
        true
        true: 0
      - crlDistributionPoints: http://crl.thawte.com/ThawteTimestampingCA.crl
      - extendedKeyUsage: timeStamping
      - keyUsage: true, 6
      - subjectAltName
        CN: TimeStamp-2048-1
  - RSA-SHA1:
```
03 09 9b 8f 79 ef 7f 59  30 aa ef 68 b5 fa e3 09  |....y..Y0..h....|
1d bb 4f 82 06 5d 37 5f  a6 52 9f 16 8d ea 1c 92  |..O..]7_.R......|
09 44 6e f5 6d eb 58 7c  30 e8 f9 69 8d 23 73 0b  |.Dn.m.X|0..i.#s.|
12 6f 47 a9 ae 39 11 f8  2a b1 9b b0 1a c3 8e eb  |.oG..9..*.......|
59 96 00 ad ce 0c 4d b2  d0 31 a6 08 5c 2a 7a fc  |Y.....M..1..\*z.|
e2 7a 1d 57 4c a8 65 18  e9 79 40 62 25 96 6e c7  |.z.WL.e..y@b%.n.|
c7 37 6a 83 21 08 8e 41  ea dd d9 57 3f 1d 77 49  |.7j.!..A...W?.wI|
87 2a 16 06 5e a6 38 6a  22 12 a3 51 19 83 7e b6  |.*..^.8j"..Q..~.|
```
- Certificate #1
  - 2
    - 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - O: Symantec Corporation
      - CN: Symantec Time Stamping Services CA - G2
    - 2012-10-18 00:00:00 UTC: 2020-12-29 23:59:59 UTC
    - Subject
      - C: US
      - O: Symantec Corporation
      - CN: Symantec Time Stamping Services Signer - G4
    - #5
      - rsaEncryption: nil
      - A2:63:0B:39:44:B8:BB:23:A7:44:49:BB:0E:FF:A1:F0:
        61:0A:53:93:B0:98:DB:AD:2C:0F:4A:C5:6E:FF:86:3C:
        53:55:0F:15:CE:04:3F:2B:FD:A9:96:96:D9:BE:61:79:
        0B:5B:C9:4C:86:76:E5:E0:43:4B:22:95:EE:C2:2B:43:
        C1:9F:D8:68:B4:8E:40:4F:EE:85:38:B9:11:C5:23:F2:
        64:58:F0:15:32:6F:4E:57:A1:AE:88:A4:02:D7:2A:1E:
        CD:4B:E1:DD:63:D5:17:89:32:5B:B0:5E:99:5A:A8:9D:
        28:50:0E:17:EE:96:DB:61:3B:45:51:1D:CF:12:56:0B:
        92:47:FC:AB:AE:F6:66:3D:47:AC:70:72:E7:92:E7:5F:
        CD:10:B9:C4:83:64:94:19:BD:25:80:E1:E8:D2:22:A5:
        D0:BA:02:7A:A1:77:93:5B:65:C3:EE:17:74:BC:41:86:
        2A:DC:08:4C:8C:92:8C:91:2D:9E:77:44:1F:68:D6:A8:
        74:77:DB:0E:5B:32:8B:56:8B:33:BD:D9:63:C8:49:9D:
        3A:C5:C5:EA:33:0B:D2:F1:A3:1B:F4:8B:BE:D9:B3:57:
        8B:3B:DE:04:A7:7A:22:B2:24:AE:2E:C7:70:C5:BE:4E:
        83:26:08:FB:0B:BD:A9:4F:99:08:E1:10:28:72:AA:CD: 0x010001
    - X509v3 extensions
      - basicConstraints
        true
        nil
      - extendedKeyUsage: true, timeStamping
      - keyUsage: true, 0x80
      - authorityInfoAccess
        #0
        OCSP: http://ts-ocsp.ws.symantec.com
        caIssuers: http://ts-aia.ws.symantec.com/tss-ca-g2.cer
      - crlDistributionPoints: http://ts-crl.ws.symantec.com/tss-ca-g2.crl
      - subjectAltName
        CN: TimeStamp-2048-2
      - subjectKeyIdentifier:
        46 c6 69 a3 0e 4a 14 1e d5 4c da 52 63 17 3f 5e |F.i..J...L.Rc.?^| 36 bc 0d e6 |6... |
      - authorityKeyIdentifier:
        5f 9a f5 6e 5c cc cc 74 9a d4 dd 7d ef 3f db ec |_..n\..t...}.?..| 4c 80 2e dd |L... |
  - RSA-SHA1:
```
78 3b b4 91 2a 00 4c f0  8f 62 30 37 78 a3 84 27  |x;..*.L..b07x..'|
07 6f 18 b2 de 25 dc a0  d4 94 03 aa 86 4e 25 9f  |.o...%.......N%.|
9a 40 03 1c dd ce e3 79  cb 21 68 06 da b6 32 b4  |.@.....y.!h...2.|
6d bf f4 2c 26 63 33 e4  49 64 6d 0d e6 c3 67 0e  |m..,&c3.Idm...g.|
f7 05 a4 35 6c 7c 89 16  c6 e9 b2 df b2 e9 dd 20  |...5l|......... |
c6 71 0f cd 95 74 dc b6  5c de bd 37 1f 43 78 e6  |.q...t..\..7.Cx.|
78 b5 cd 28 04 20 a3 aa  f1 4b c4 88 29 91 0e 80  |x..(. ...K..)...|
d1 11 fc dd 5c 76 6e 4f  5e 0e 45 46 41 6e 0d b0  |....\vnO^.EFAn..|
ea 38 9a b1 3a da 09 71  10 fc 1c 79 b4 80 7b ac  |.8..:..q...y..{.|
69 f4 fd 9c b6 0c 16 2b  f1 7f 5b 09 3d 9b 5b e2  |i......+..[.=.[.|
16 ca 13 81 6d 00 2e 38  0d a8 29 8f 2c e1 b2 f4  |....m..8..).,...|
5a a9 01 af 15 9c 2c 2f  49 1b db 22 bb c3 fe 78  |Z.....,/I.."...x|
94 51 c3 86 b1 82 88 5d  f0 3d b4 51 a1 79 33 2b  |.Q.....].=.Q.y3+|
2e 7b b9 dc 20 09 13 71  eb 6a 19 5b cf e8 a5 30  |.{.. ..q.j.[...0|
57 2c 89 49 3f b9 cf 7f  c9 bf 3e 22 68 63 53 9a  |W,.I?.....>"hcS.|
bd 69 74 ac c5 1d 3c 7f  92 e0 c3 bc 1c d8 04 75  |.it...<........u|
```
- Certificate #2
  - 2
    - 17:EF:72:B4:15:7D:6F:4B:68:E4:BD:D5:75:E5:CC:AE
    - RSA-SHA256: nil
    - Issuer
      - C: PL
      - O: Unizeto Technologies S.A.
      - OU: Certum Certification Authority
      - CN: Certum Trusted Network CA
    - 2016-11-09 08:45:13 UTC: 2026-11-09 08:45:13 UTC
    - Subject
      - C: CN
      - O: WoSign CA Limited
      - CN: WoSign Code Signing CA
    - #5
      - rsaEncryption: nil
      - F1:13:7F:D0:83:F2:66:F1:2C:2D:0C:76:84:49:F5:17:
        3F:8E:C3:74:D7:DB:F4:4B:04:B2:8D:6F:47:3C:FE:A8:
        68:E1:2E:44:C6:4C:21:EB:72:2C:20:43:8F:47:02:70:
        72:DB:E8:94:76:EB:54:99:50:86:4D:B2:F6:0F:2B:A0:
        07:30:FE:F1:4B:61:0C:21:86:BE:23:CF:6F:80:30:F3:
        C2:22:E8:87:E2:3B:31:CD:56:19:1A:8B:AF:3A:8B:67:
        8C:22:87:15:B1:1E:3A:61:F4:94:28:0D:54:01:41:59:
        73:27:34:8E:6E:09:2C:2E:7E:72:67:52:A2:96:9E:E7:
        A3:C0:48:4F:42:88:29:6C:D1:62:7A:02:BF:91:21:B4:
        5B:22:43:2F:B3:DE:88:C5:79:93:4B:73:98:DB:E8:EA:
        F3:7B:0D:0E:55:33:F1:06:BA:49:5F:7E:F7:E9:38:60:
        7E:B6:09:35:AC:FC:96:A7:77:88:2B:C0:EC:F8:3D:74:
        3A:54:F1:38:E2:37:79:A6:84:5C:94:FB:D7:7D:81:5D:
        0A:73:38:5F:67:ED:3A:A8:8F:AF:43:09:E0:93:09:E9:
        CF:FD:34:4C:D2:BF:C1:41:83:4E:14:9F:11:31:0E:52:
        1C:5E:21:1A:A1:6F:4D:A2:A2:40:CC:CB:D1:C3:A5:FF: 0x010001
    - X509v3 extensions
      - basicConstraints
        true
        true: 0
      - subjectKeyIdentifier:
        83 d1 49 9c 55 28 59 37 a9 7e 40 83 ec cd a2 46 |..I.U(Y7.~@....F| 54 05 3c a2 |T.<. |
      - authorityKeyIdentifier:
        08 76 cd cb 07 ff 24 f6 c5 cd ed bb 90 bc e2 84 |.v....$.........| 37 46 75 f7 |7Fu. |
      - keyUsage: true, 6
      - extendedKeyUsage: codeSigning
      - crlDistributionPoints: http://subca.crl.certum.pl/ctnca.crl
      - authorityInfoAccess
        #0
        OCSP: http://subca.ocsp-certum.com
        caIssuers: http://repository.certum.pl/ctnca.cer
      - certificatePolicies
        anyPolicy
        id-qt-cps: http://www.certum.pl/CPS
  - RSA-SHA256:
```
dc 2e 77 95 1e 93 82 a1  4b 89 42 69 20 4e 36 c1  |..w.....K.Bi N6.|
8d ae 70 a1 8d 80 67 d1  58 f5 66 09 12 31 e6 d7  |..p...g.X.f..1..|
b7 94 37 d7 36 4f 23 14  ee f8 97 c5 42 78 8f 17  |..7.6O#.....Bx..|
0e 1a 09 82 c1 56 98 9a  41 3c 60 ff b0 7b cd 5c  |.....V..A<`..{.\|
92 8d 23 50 40 09 0d 8e  9c 8b a3 71 40 d8 a1 bf  |..#P@......q@...|
47 6f 8c 09 72 7d 38 96  df 61 ba dc d6 5e 0c 38  |Go..r}8..a...^.8|
29 78 81 ff 6c 45 40 80  a4 a9 fc bc 69 26 ca 72  |)x..lE@.....i&.r|
58 06 62 21 9f 91 56 3e  51 36 7f 3e 11 06 42 c5  |X.b!..V>Q6.>..B.|
7a 25 25 5e bd 0a c1 97  e9 6f c0 4d 3f be 8b 17  |z%%^.....o.M?...|
dd 7e 50 52 11 98 75 ff  2a e1 e2 02 b2 f3 01 7e  |.~PR..u.*......~|
38 2b 9c 86 3f 67 38 1f  14 bc 00 ba 64 6d b2 47  |8+..?g8.....dm.G|
0c f2 9b 32 2b 7d 9c 78  a8 54 99 30 0f ec 23 fe  |...2+}.x.T.0..#.|
01 80 56 2d fd e0 13 07  8d 53 db f0 4b f9 c1 5a  |..V-.....S..K..Z|
af a9 28 fe 64 3a 53 6e  bc d0 ab 9d 5c d3 40 6c  |..(.d:Sn....\.@l|
50 fe 8b f7 d7 a0 8a bd  d3 a7 63 2a 9b 48 39 f2  |P.........c*.H9.|
73 4d f9 94 43 5a 9e 33  85 68 cd 3d 23 3c 20 58  |sM..CZ.3.h.=#< X|
```
- Certificate #3
  - 2
    - 3C:CA:72:83:25:35:9D:49:42:0F:23:0F:DC:39:7A:D0
    - RSA-SHA256: nil
    - Issuer
      - C: CN
      - O: WoSign CA Limited
      - CN: WoSign Code Signing CA
    - 2017-12-20 09:44:30 UTC: 2020-12-18 09:44:30 UTC
    - Subject
      - C: CN
      - O: GUANG ZHOU WAN CAI INFORMATION LIMITED
      - L: Guangzhou
      - ST: Guangdong
      - CN: GUANG ZHOU WAN CAI INFORMATION LIMITED
      - emailAddress: contact@wancaiinfo.com
    - #5
      - rsaEncryption: nil
      - B5:66:95:66:48:80:EC:5D:A7:1A:7D:4A:3A:77:B9:9A:
        D6:AE:C0:D0:E3:45:AC:6C:5B:18:7D:74:DB:BB:EA:A9:
        4F:66:44:3D:7A:B9:69:35:0A:0F:25:EA:FE:EF:F3:17:
        1B:77:56:C7:F6:DB:45:AE:18:C6:D8:9A:6A:8F:47:5F:
        01:CE:03:08:12:A4:F5:71:7C:75:ED:2D:09:B2:58:AB:
        5F:7D:45:04:76:F7:FC:7C:C5:E4:F0:DE:D5:55:BB:02:
        E2:58:A3:6B:B6:7D:21:9B:47:4C:35:EA:AD:9E:7E:86:
        B9:C7:C0:C4:3E:53:60:C9:09:87:28:FB:09:DA:61:99:
        2A:93:24:10:B2:7A:0D:0C:B6:37:A0:A7:3C:3C:C4:F6:
        EE:B9:2B:A2:C7:C1:E1:27:8C:28:93:96:04:C6:0E:62:
        95:10:42:FC:96:52:6A:6D:CF:BA:F0:57:88:5C:9E:34:
        3F:5D:10:A6:7B:09:99:EE:56:4E:D1:FB:F3:7E:A9:0B:
        7D:BB:73:87:11:7B:42:44:9F:24:F3:16:9D:B7:FB:62:
        2B:A6:0D:B3:41:0C:79:20:69:0B:4D:3E:55:C7:61:F7:
        34:5B:BD:8F:84:BE:3E:B1:53:D2:07:11:C1:99:D3:F3:
        8E:86:2C:DC:44:59:05:A0:F6:DB:44:0E:0B:CF:08:F1: 0x010001
    - X509v3 extensions
      - basicConstraints
        true
        nil
      - crlDistributionPoints: http://wosign.crl.certum.pl/wosign-csca.crl
      - authorityInfoAccess
        #0
        OCSP: http://wosign-csca.ocsp-certum.com
        caIssuers: http://repository.certum.pl/wosign-csca.cer
      - authorityKeyIdentifier:
        83 d1 49 9c 55 28 59 37 a9 7e 40 83 ec cd a2 46 |..I.U(Y7.~@....F| 54 05 3c a2 |T.<. |
      - subjectKeyIdentifier:
        5f 79 d3 47 15 c8 0e 3c 14 36 7a f2 0b 8b 5f 7e |_y.G...<.6z..._~| 73 9c 04 df |s... |
      - keyUsage: true, 0x80
      - certificatePolicies
        2.23.140.1.4.1
        1.2.616.1.113527.2.5.1.4
        1.2.616.1.113527.2.5.1.14.4
        id-qt-cps: https://www.certum.pl/CPS
      - extendedKeyUsage
        codeSigning: 1.3.6.1.4.1.311.61.1.1
  - RSA-SHA256:
```
5d 46 2c 61 b0 30 a4 90  5a 63 21 9d 37 2d d0 69  |]F,a.0..Zc!.7-.i|
69 58 5d 9f c4 14 bb 98  6d 33 5c 3e 4f 98 7a 7f  |iX].....m3\>O.z.|
0e e0 f5 9c da a7 e0 ef  c0 26 56 79 a4 42 e5 d8  |.........&Vy.B..|
d5 b2 08 f6 36 4d d7 c3  0f 3b 4c 69 0f 08 ac 33  |....6M...;Li...3|
ba 05 01 93 c4 06 c6 b9  37 00 e3 d9 fb 28 de 59  |........7....(.Y|
76 84 1c 28 8c 07 f9 74  16 7d fb 14 67 5d 4e b7  |v..(...t.}..g]N.|
80 f7 03 0c 38 73 aa 2b  8e e1 f4 a1 9a af ee 95  |....8s.+........|
75 7b 23 af 89 29 88 91  86 f5 af e1 27 05 31 86  |u{#..)......'.1.|
e0 48 2f a0 e2 bd d8 3d  d9 ab d6 17 44 5d 9f 06  |.H/....=....D]..|
31 cf da f9 ef 40 2d b0  cd dd b4 00 05 c7 a8 d6  |1....@-.........|
0b b4 2b 0a 75 05 7d 2f  22 66 0b 5a 78 b6 27 c4  |..+.u.}/"f.Zx.'.|
2b 19 57 6f b8 b2 58 e4  9a 86 8e 3a f5 57 41 df  |+.Wo..X....:.WA.|
4e 8e 0a 80 ee dc 60 50  c2 ae eb 05 f3 c2 ff a5  |N.....`P........|
d5 67 cc 92 9f c5 90 cd  63 9a 09 46 e5 a3 82 e5  |.g......c..F....|
04 3c be aa 75 65 8c 69  51 cf 26 a0 67 ab 6e ec  |.<..ue.iQ.&.g.n.|
e1 ad 6f 79 e2 59 ae 9f  c2 28 b4 6d 8f 20 2d 0c  |..oy.Y...(.m. -.|
```

Signer

1
unnamed
- #0
  - C: CN
  - O: WoSign CA Limited
  - CN: WoSign Code Signing CA
- 3C:CA:72:83:25:35:9D:49:42:0F:23:0F:DC:39:7A:D0
SHA1: nil

1.3.6.1.4.1.311.2.1.12
- nil
contentType: 1.3.6.1.4.1.311.2.1.4
1.3.6.1.4.1.311.2.1.11: msCodeInd

messageDigest:

d4 ef dd 08 9a b4 63 ec  8c de 05 ad 51 6f 61 19  |......c.....Qoa.|
d9 54 a5 8e                                       |.T..            |

rsaEncryption:

a3 a4 17 fe 0c be 87 b9  be d3 10 f1 45 7e 47 53  |............E~GS|
72 49 3a 83 8c f0 ce 6f  f6 40 9d 14 6b 05 4c e1  |rI:....o.@..k.L.|
4a dd 96 79 28 df 4c 34  4f ef 4e 71 d6 31 a8 fe  |J..y(.L4O.Nq.1..|
b3 13 93 0e 23 a9 b9 6d  ab 72 72 ff 7d d3 35 cc  |....#..m.rr.}.5.|
81 6d ee 1c 91 da b9 02  65 98 e5 69 4e 0f 5e 67  |.m......e..iN.^g|
da c7 f0 3e 86 7b 9b 42  0b 0c 1c 55 6d 50 5b 53  |...>.{.B...UmP[S|
43 50 21 31 d3 d3 29 8e  28 7f ae 10 c7 9b 56 b8  |CP!1..).(.....V.|
25 40 f7 f5 28 e7 cd b0  19 3b 06 16 83 79 d8 ec  |%@..(....;...y..|
be c9 3f 28 d2 f2 15 48  0c 7d 78 d2 26 00 50 f1  |..?(...H.}x.&.P.|
d1 4f 4e 77 ff a3 44 b3  f0 4f 88 48 ba 45 e4 c1  |.ONw..D..O.H.E..|
a7 23 29 71 3d 06 6f 46  67 43 85 dd 3f f4 e0 8e  |.#)q=.oFgC..?...|
ef b4 05 b7 17 b0 b6 ab  12 a5 20 8e 35 27 02 f7  |.......... .5'..|
6b 6d 53 92 03 9d fc b2  c8 a7 3b 8e c7 e8 c2 e9  |kmS.......;.....|
14 3e 98 82 42 54 00 f3  88 94 77 39 68 ba 79 88  |.>..BT....w9h.y.|
6c b6 59 c9 c9 69 aa 6e  dc ed 04 dd 31 31 70 a2  |l.Y..i.n....11p.|
4d db f8 42 2e 57 b1 35  13 00 ef 59 0a 0b 68 d4  |M..B.W.5...Y..h.|

countersignature

unnamed
- #0
  - C: US
  - O: Symantec Corporation
  - CN: Symantec Time Stamping Services CA - G2
- 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
SHA1: nil

contentType: pkcs7-data
signingTime: 2018-04-18 08:56:47 UTC

messageDigest:

9c cf fd 90 8b 8d 16 1d  84 cc 47 48 24 41 ab fd  |..........GH$A..|
8c 96 88 50                                       |...P            |

rsaEncryption:

49 60 70 37 67 3c d9 8e  8f 0d 1c 29 3f 3a f7 fe  |I`p7g<.....)?:..|
91 ea aa 31 e5 b1 19 1d  81 f8 39 33 cd 3b 91 b8  |...1......93.;..|
7e cf 15 4f ed 45 68 e0  32 ef 38 ca 6e ba 1b b9  |~..O.Eh.2.8.n...|
2a 00 44 20 cf ce d8 f8  54 72 95 7c b5 9b 70 36  |*.D ....Tr.|..p6|
18 d4 c1 bc 7f 01 5f 0b  ae 25 0d 5e b5 95 76 61  |......_..%.^..va|
1d 71 83 76 88 e5 b0 0d  86 fb 59 03 5c 0a 15 c7  |.q.v......Y.\...|
3e b7 f5 58 d8 39 f2 c0  9c 9e 4a 69 00 8b 7f ab  |>..X.9....Ji....|
de 59 83 8c f0 60 6a 80  a5 94 6e 11 ae a2 5b 33  |.Y...`j...n...[3|
b4 01 0e c3 78 3e 7a d3  8f f6 16 25 86 ea f7 a0  |....x>z....%....|
40 e3 cc e7 f7 82 15 47  6b a0 9b cf a4 8d cf a3  |@......Gk.......|
17 ba ff d7 e9 43 1b 84  04 8f a2 28 5c 30 73 df  |.....C.....(\0s.|
45 1b 50 d8 66 fe a7 c4  11 f6 62 75 2d a2 26 93  |E.P.f.....bu-.&.|
d4 67 d3 b8 09 b6 1a b9  61 cd 34 e9 3d ce 37 1f  |.g......a.4.=.7.|
09 9e 8b 2e 89 b0 e2 9c  82 7a 07 d0 ba 77 8a 16  |.........z...w..|
36 32 91 d1 8e 7a 53 52  47 e8 ae e6 f2 19 c2 51  |62...zSRG......Q|
a7 1c 5d 6b 7e d4 df 11  e2 4b 99 62 06 d7 11 ca  |..]k~....K.b....|

show previews

offset	size	type	comment
15c1	15	HTM		#
15d0	260952	BIN	overlay data past EOF	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK