filenamechrome.exe
size1111856 (0x10f730)
md57a61b3e2353d6783431531a4ca50aacc
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x118

Rich Header

lib idversiontimes used
225208062
2232100542
22421005234
2252100578
188307161
190307161
1853071624
221311013
10352
22931101125
22531101116
220311011
219210051
15102
222311011

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections6
TimeDateStamp0x54d9d19f
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x122
Magic0x10b
LinkerVersion12.0
SizeOfCode0x62600
SizeOfInitializedData0xb0000
SizeOfUninitializedData0
AddressOfEntryPoint0x46b54
BaseOfCode0x1000
BaseOfData0x64000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.1
ImageVersion0.0
SubsystemVersion5.1
Reserved10
SizeOfImage0x116000
SizeOfHeaders0x400
CheckSum0x11bb4d
Subsystem2
DllCharacteristics0x8140
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

namevavsizeraw sizeflags
.text0x10000x624700x62600R-X CODE
.rdata0x640000x2db060x2dc00R-- IDATA
.data0x920000x5be00x1e00RW- IDATA
.tls0x9800020x200RW- IDATA
.rsrc0x990000x77a480x77c00R-- IDATA
.reloc0x1110000x49900x4a00R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x903e00x160
IMPORT0x905400xc8
RESOURCE0x990000x77a48
EXCEPTION00
SECURITY0x10ec000xb30
BASERELOC0x1110000x4990
DEBUG0x644200x1c
ARCHITECTURE00
GLOBALPTR00
TLS0x8ec680x18
LOAD_CONFIG0x8ec200x40
Bound_IAT00
IAT0x640000x394
Delay_IAT0x902d40x60
CLR_Header00

TLS

raw
start		raw
end		indexcallbkszero
fill		flags
0x4980000x4980010x494be40x4643fc00x100000
typenamesizecp
GOOGLEUPDATEAPPLICATIONCOMMANDS#140
ICON#12703760
ICON#242640
ICON#342640
ICON#416400
ICON#57440
ICON#64880
ICON#72960
ICON#837520
ICON#922160
ICON#1017360
ICON#1113840
ICON#12522090
ICON#1396400
ICON#1442640
ICON#1524400
ICON#1611280
ICON#17676240
ICON#1837520
ICON#1922160
ICON#2013840
ICON#2119920
ICON#2296400
ICON#2342640
ICON#2411280
ICON#2537520
ICON#2622160
ICON#2713840
ICON#2839870
ICON#2996400
ICON#3042640
ICON#3111280
ICON#3211280
ICON#3342640
GROUP_ICONIDR_MAINFRAME200
GROUP_ICONIDR_MAINFRAME_2200
GROUP_ICONIDR_MAINFRAME_3200
GROUP_ICONIDR_MAINFRAME_41880
GROUP_ICONIDR_SXS200
GROUP_ICONIDR_X001_APP_LIST1040
GROUP_ICONIDR_X002_APP_LIST_SXS1040
GROUP_ICONIDR_X003_INSTALL_APP340
VERSION#110760
MANIFEST#112400
module_namehintordfunction_name
chrome_elf.dll1CreateFileW
chrome_elf.dll5SignalChromeElf
VERSION.dll7GetFileVersionInfoSizeW
VERSION.dll16VerQueryValueW
VERSION.dll8GetFileVersionInfoW
WINMM.dll148timeGetTime
SHLWAPI.dll144PathRemoveFileSpecW
ADVAPI32.dll631RegEnumKeyExW
ADVAPI32.dll378GetUserNameW
ADVAPI32.dll723SetEntriesInAclW
ADVAPI32.dll429LookupPrivilegeValueW
ADVAPI32.dll280EqualSid
ADVAPI32.dll142CreateRestrictedToken
ADVAPI32.dll146CreateWellKnownSid
ADVAPI32.dll133CopySid
ADVAPI32.dll354GetSecurityInfo
ADVAPI32.dll129ConvertStringSecurityDescriptorToSecurityDescriptorW
ADVAPI32.dll744SetSecurityInfo
ADVAPI32.dll751SetTokenInformation
ADVAPI32.dll353GetSecurityDescriptorSacl
ADVAPI32.dll330GetLengthSid
ADVAPI32.dll750SetThreadToken
ADVAPI32.dll131ConvertStringSidToSidW
ADVAPI32.dll625RegDisablePredefinedCache
ADVAPI32.dll700RevertToSelf
ADVAPI32.dll239DuplicateTokenEx
ADVAPI32.dll238DuplicateToken
ADVAPI32.dll677RegSetValueExA
ADVAPI32.dll678RegSetValueExW
ADVAPI32.dll609RegCreateKeyExW
ADVAPI32.dll662RegQueryValueExW
ADVAPI32.dll656RegQueryInfoKeyW
ADVAPI32.dll624RegDeleteValueW
ADVAPI32.dll649RegOpenKeyExW
ADVAPI32.dll600RegCloseKey
ADVAPI32.dll530OpenProcessToken
ADVAPI32.dll367GetTokenInformation
ADVAPI32.dll123ConvertSidToStringSidW
ADVAPI32.dll139CreateProcessAsUserW
USER32.dll80CloseWindowStation
USER32.dll76CloseDesktop
USER32.dll886wsprintfW
USER32.dll587MessageBoxW
USER32.dll97CreateDesktopW
USER32.dll429GetThreadDesktop
USER32.dll117CreateWindowStationW
USER32.dll747SetProcessWindowStation
USER32.dll402GetProcessWindowStation
USER32.dll439GetUserObjectInformationW
USER32.dll279GetAsyncKeyState
USER32.dll265FindWindowExW
USER32.dll60CharUpperW
USER32.dll466GetWindowThreadProcessId
USER32.dll6AllowSetForegroundWindow
USER32.dll528IsWindow
USER32.dll696SendMessageTimeoutW
KERNEL32.dll794GetUserDefaultLCID
KERNEL32.dll353EnumSystemLocalesW
KERNEL32.dll909IsValidCodePage
KERNEL32.dll446GetACP
KERNEL32.dll672GetOEMCP
KERNEL32.dll576GetEnvironmentStringsW
KERNEL32.dll439FreeEnvironmentStringsW
KERNEL32.dll791GetTimeZoneInformation
KERNEL32.dll1520WriteConsoleW
KERNEL32.dll1110ReadConsoleW
KERNEL32.dll1045OutputDebugStringW
KERNEL32.dll569GetDriveTypeW
KERNEL32.dll1206RtlCaptureContext
KERNEL32.dll1179ReleaseSemaphore
KERNEL32.dll1312SetNamedPipeHandleState
KERNEL32.dll1414TransactNamedPipe
KERNEL32.dll911IsValidLocale
KERNEL32.dll945LCMapStringW
KERNEL32.dll167CompareStringW
KERNEL32.dll245CreateSemaphoreW
KERNEL32.dll727GetStartupInfoW
KERNEL32.dll1424UnhandledExceptionFilter
KERNEL32.dll461GetCPInfo
KERNEL32.dll1210RtlUnwind
KERNEL32.dll1327SetStdHandle
KERNEL32.dll610GetFullPathNameW
KERNEL32.dll520GetConsoleMode
KERNEL32.dll502GetConsoleCP
KERNEL32.dll365ExitProcess
KERNEL32.dll904IsProcessorFeaturePresent
KERNEL32.dll316EncodePointer
KERNEL32.dll738GetStringTypeW
KERNEL32.dll1004MultiByteToWideChar
KERNEL32.dll1501WideCharToMultiByte
KERNEL32.dll961LoadLibraryExA
KERNEL32.dll490GetComputerNameExW
KERNEL32.dll276DebugBreak
KERNEL32.dll1384SuspendThread
KERNEL32.dll1115ReadProcessMemory
KERNEL32.dll1067ProcessIdToSessionId
KERNEL32.dll1215SearchPathW
KERNEL32.dll231CreateNamedPipeW
KERNEL32.dll221CreateJobObjectW
KERNEL32.dll1373SignalObjectAndWait
KERNEL32.dll697GetProcessHandleCount
KERNEL32.dll877InterlockedDecrement
KERNEL32.dll881InterlockedIncrement
KERNEL32.dll599GetFileType
KERNEL32.dll963LoadLibraryW
KERNEL32.dll770GetThreadContext
KERNEL32.dll1390TerminateJobObject
KERNEL32.dll869InitializeCriticalSection
KERNEL32.dll1530WriteProcessMemory
KERNEL32.dll1458VirtualProtectEx
KERNEL32.dll1460VirtualQueryEx
KERNEL32.dll436FormatMessageW
KERNEL32.dll1455VirtualFreeEx
KERNEL32.dll1452VirtualAllocEx
KERNEL32.dll1457VirtualProtect
KERNEL32.dll1273SetEnvironmentVariableA
KERNEL32.dll638GetModuleHandleA
KERNEL32.dll693GetProcAddress
KERNEL32.dll483GetCommandLineW
KERNEL32.dll1263SetCurrentDirectoryW
KERNEL32.dll637GetModuleFileNameW
KERNEL32.dll962LoadLibraryExW
KERNEL32.dll279DecodePointer
KERNEL32.dll1096RaiseException
KERNEL32.dll618GetLastError
KERNEL32.dll845HeapAlloc
KERNEL32.dll852HeapReAlloc
KERNEL32.dll849HeapFree
KERNEL32.dll854HeapSize
KERNEL32.dll698GetProcessHeap
KERNEL32.dll870InitializeCriticalSectionAndSpinCount
KERNEL32.dll286DeleteCriticalSection
KERNEL32.dll548GetCurrentProcessId
KERNEL32.dll784GetTickCount
KERNEL32.dll313DuplicateHandle
KERNEL32.dll547GetCurrentProcess
KERNEL32.dll1467WaitForSingleObject
KERNEL32.dll581GetExitCodeProcess
KERNEL32.dll641GetModuleHandleW
KERNEL32.dll966LoadResource
KERNEL32.dll984LockResource
KERNEL32.dll1374SizeofResource
KERNEL32.dll420FindResourceW
KERNEL32.dll1112ReadFile
KERNEL32.dll1288SetFilePointer
KERNEL32.dll750GetSystemInfo
KERNEL32.dll1451VirtualAlloc
KERNEL32.dll1454VirtualFree
KERNEL32.dll440FreeLibrary
KERNEL32.dll973LocalFree
KERNEL32.dll229CreateMutexW
KERNEL32.dll435FormatMessageA
KERNEL32.dll1521WriteFile
KERNEL32.dll1303SetLastError
KERNEL32.dll1175ReleaseMutex
KERNEL32.dll142CloseHandle
KERNEL32.dll654GetNativeSystemInfo
KERNEL32.dll875InterlockedCompareExchange
KERNEL32.dll803GetVersionExW
KERNEL32.dll578GetEnvironmentVariableW
KERNEL32.dll1274SetEnvironmentVariableW
KERNEL32.dll795GetUserDefaultLangID
KERNEL32.dll1474WaitNamedPipeW
KERNEL32.dll1084QueryPerformanceCounter
KERNEL32.dll756GetSystemTimeAsFileTime
KERNEL32.dll878InterlockedExchange
KERNEL32.dll1085QueryPerformanceFrequency
KERNEL32.dll202CreateEventW
KERNEL32.dll369ExpandEnvironmentStringsW
KERNEL32.dll708GetProcessTimes
KERNEL32.dll957LeaveCriticalSection
KERNEL32.dll320EnterCriticalSection
KERNEL32.dll987MapViewOfFile
KERNEL32.dll198CreateDirectoryW
KERNEL32.dll590GetFileAttributesW
KERNEL32.dll769GetTempPathW
KERNEL32.dll541GetCurrentDirectoryW
KERNEL32.dll631GetLongPathNameW
KERNEL32.dll211CreateFileMappingW
KERNEL32.dll1077QueryDosDeviceW
KERNEL32.dll1565lstrlenW
KERNEL32.dll899IsDebuggerPresent
KERNEL32.dll1270SetEndOfFile
KERNEL32.dll1289SetFilePointerEx
KERNEL32.dll429FlushFileBuffers
KERNEL32.dll1301SetInformationJobObject
KERNEL32.dll239CreateProcessW
KERNEL32.dll1300SetHandleInformation
KERNEL32.dll45AssignProcessToJobObject
KERNEL32.dll733GetStdHandle
KERNEL32.dll1205ResumeThread
KERNEL32.dll622GetLocaleInfoW
KERNEL32.dll797GetUserDefaultUILanguage
KERNEL32.dll552GetCurrentThreadId
KERNEL32.dll1375Sleep
KERNEL32.dll257CreateThread
KERNEL32.dll747GetSystemDirectoryW
KERNEL32.dll814GetWindowsDirectoryW
KERNEL32.dll1169RegisterWaitForSingleObject
KERNEL32.dll1436UnregisterWaitEx
KERNEL32.dll1032OpenProcess
KERNEL32.dll700GetProcessId
KERNEL32.dll853HeapSetInformation
KERNEL32.dll1391TerminateProcess
KERNEL32.dll640GetModuleHandleExW
KERNEL32.dll1360SetUnhandledExceptionFilter
KERNEL32.dll1411TlsGetValue
KERNEL32.dll1412TlsSetValue
KERNEL32.dll1409TlsAlloc
KERNEL32.dll1410TlsFree
KERNEL32.dll720GetQueuedCompletionStatus
KERNEL32.dll1055PostQueuedCompletionStatus
KERNEL32.dll219CreateIoCompletionPort
KERNEL32.dll1276SetEvent
KERNEL32.dll1198ResetEvent
KERNEL32.dll1465WaitForMultipleObjects
KERNEL32.dll240CreateRemoteThread
USERENV.dll34GetProfileType
WTSAPI32.dll19WTSFreeMemory
WTSAPI32.dll34WTSQuerySessionInformationW
ordentry_vafunction_name
10x2bde7ClearBreakpadPipeEnvironmentVariable
20x2be05ClearCrashKeyValueImpl
30x2be52CrashForException
40x2be8aDumpProcess
50x2be99DumpProcessWithoutCrash
60x2bea8InjectDumpForHangDebugging
70x2bec2InjectDumpProcessWithoutCrash
80x2c687IsSandboxedProcess
90x2bedcSetCrashKeyValueImpl
module_namechrome.exe
flags0
timestamp2015-02-10 09:38:33
version0.0
ordinal_base1
nFunctions9
nNames9
Names(9)0x9042c
Functions(9)0x90408
NameOrdinals(9)0x90450

StringTable 040904b0

CompanyNameThe Kumium Authors
FileDescriptionKumium
FileVersion40.0.2214.111
InternalNamechrome_exe
LegalCopyrightCopyright 2014 The Kumium Authors. All rights reserved.
OriginalFilenamechrome.exe
ProductNameKumium
ProductVersion40.0.2214.111
CompanyShortNameThe Kumium Authors
ProductShortNameKumium
LastChange4ac72b6747a5610def0cf41fd962033a4ddb627a
Official Build1

VS_FIXEDFILEINFO

FileVersion40.0.2214.111
ProductVersion40.0.2214.111
StrucVersion0x10000
FileFlagsMask0x17
FileFlags0
FileOS4
FileType1
FileSubtype0

Signers (1)

issuer: /CN=kumium.com
serial: 4CE32FC564B649A04F81055E22500616

Certificates (2)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:e3:2f:c5:64:b6:49:a0:4f:81:05:5e:22:50:06:16
        Signature Algorithm: sha1WithRSA
        Issuer: CN=kumium.com
        Validity
            Not Before: Dec 31 16:00:00 2014 GMT
            Not After : Dec 31 16:00:00 2023 GMT
        Subject: CN=kumium.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:d9:b3:74:6b:7d:95:db:1a:4d:b7:d7:61:f9:64:
                    af:c3:0b:0f:8d:f2:fe:c8:98:72:dc:05:f5:f5:46:
                    e4:25:41:e5:11:19:2f:10:9c:1c:96:1e:e9:13:60:
                    32:bd:09:db:2e:5f:5f:6f:72:79:7b:c0:08:12:a1:
                    4f:54:45:4b:27:dd:12:05:7f:96:5e:db:20:31:bf:
                    07:d9:aa:b6:47:21:64:a6:1a:a6:27:65:9f:81:4d:
                    5b:02:89:8a:d5:2f:b8:ad:ab:b9:e5:11:c6:2b:a9:
                    49:cd:0c:78:cf:33:6c:60:e5:3f:da:0a:50:55:a6:
                    68:e1:59:bf:23:12:b2:06:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            2.5.29.1: 
                0=...[..m
..e.\...q...0.1.0...U...
kumium.com..L./.d.I.O..^"P..
    Signature Algorithm: sha1WithRSA
    Signature Value:
        d2:ed:4b:30:17:2e:b8:76:2c:0b:50:8f:21:e9:9a:b0:9d:75:
        a3:bd:63:24:5a:23:f0:e4:c7:7d:91:b0:3f:c2:03:90:d2:ce:
        48:dc:04:bc:26:1c:06:52:00:2b:8c:84:f8:e3:b6:0e:8e:53:
        52:fd:5e:aa:15:da:1a:31:b5:e9:94:f6:fb:2c:b7:1c:62:f3:
        ee:df:8a:93:d6:48:b2:9e:4b:4a:a0:79:5e:a2:71:13:57:2e:
        63:2d:d4:0a:c6:63:39:8e:74:1c:f4:f2:70:8b:62:73:bb:95:
        0f:8c:1a:d3:45:e6:fc:7f:0f:4e:34:41:17:15:d3:0d:1a:7a:
        cb:72

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:1f:5d:98:81:82:17:2e:3c:41:9e:01:4f:b0:40:4c
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=CN, O=WoSign CA Limited, CN=Certification Authority of WoSign
        Validity
            Not Before: Aug  8 01:00:05 2009 GMT
            Not After : Aug  8 01:00:05 2024 GMT
        Subject: C=CN, O=WoSign CA Limited, CN=WoSign Time Stamping Signer
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a5:d0:68:ba:82:cb:db:a7:6d:55:b9:31:a7:da:
                    f4:9c:6b:03:54:4f:a2:1c:ef:1c:b5:96:44:1f:56:
                    41:3f:61:b0:03:59:4b:82:0e:db:15:c8:d0:cc:e0:
                    87:c6:09:75:8a:84:e3:ed:97:c2:c8:92:34:c0:f1:
                    64:53:60:51:34:48:90:b1:4f:89:69:f5:2e:a0:2a:
                    16:54:2f:c0:37:58:ff:35:52:1b:52:08:cf:b9:ec:
                    5a:27:52:5a:83:eb:68:b1:b9:f8:b2:a9:08:f3:4f:
                    ab:17:0f:2e:bd:4f:e5:12:8a:bf:7c:b7:e7:65:32:
                    3b:83:41:02:22:3a:24:3b:6a:a3:3c:af:eb:79:42:
                    17:56:74:c8:61:63:dd:8c:2f:3e:ef:3a:a3:47:52:
                    04:3b:00:18:ae:26:71:e0:7a:04:8d:75:82:2d:65:
                    4e:c1:b8:f2:8c:de:0f:63:03:d4:c3:52:60:72:8c:
                    88:cc:6f:96:d5:c7:7d:29:db:26:04:9e:a2:b4:bf:
                    5a:b5:6e:f2:46:0f:29:81:c5:c0:4f:a6:87:8c:7c:
                    21:07:54:1f:50:f0:42:5c:55:7c:cf:44:2e:41:3d:
                    18:8d:5f:d9:68:e6:47:91:8f:cf:dc:7d:90:60:ff:
                    cb:48:e4:61:5e:4f:73:45:0d:c8:34:89:03:d5:fe:
                    0b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crls1.wosign.com/ca1.crl
            Authority Information Access: 
                OCSP - URI:http://ocsp1.wosign.com/ca1
                CA Issuers - URI:http://aia1.wosign.com/ca1-tsa.cer
            X509v3 Subject Key Identifier: 
                DF:6E:12:D5:0C:54:2E:5A:14:CA:DE:03:DE:AB:4E:D4:98:0C:46:B5
            X509v3 Authority Key Identifier: 
                E1:66:CF:0E:D1:F1:B3:4B:B7:06:20:14:FE:87:12:D5:F6:FE:FB:3E
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        7c:98:2f:bb:c3:d2:ae:c2:2a:8f:a6:97:76:56:86:32:c4:cd:
        36:68:8b:ec:d7:80:1a:31:79:b0:5e:56:b9:69:eb:b9:0b:32:
        a9:83:26:dc:77:5d:7a:56:b2:46:a0:7d:15:d6:6d:f9:ac:f8:
        35:73:78:36:02:60:22:20:1c:ef:18:8f:7e:66:b2:4f:e7:71:
        93:5a:2b:e6:e5:8d:3d:5d:2e:27:4b:46:cb:1d:04:f3:0b:8c:
        3f:13:a8:0d:d4:cd:e8:28:e8:2a:9c:55:c8:e3:ff:9d:a9:22:
        49:6e:e8:e7:88:92:37:57:80:60:44:18:27:43:58:18:04:6d:
        86:c0:65:47:05:57:55:50:91:e6:73:50:ee:3f:10:a9:8f:05:
        2f:da:68:11:53:6e:1f:ad:98:f3:76:3e:85:d0:57:a3:cf:e4:
        c1:1a:4c:64:06:a6:44:ab:4e:1e:e2:4b:d5:a4:6d:71:f8:6b:
        cb:66:13:a6:47:1f:21:2a:a1:ae:4c:89:a4:7d:28:77:17:4f:
        88:8d:b1:d1:5d:b1:c4:93:5a:bf:22:92:6c:ab:67:82:68:ed:
        d7:21:cb:63:bc:93:c4:17:8e:87:19:25:ad:17:54:b4:79:d2:
        a5:93:73:bc:7c:bb:e4:80:0f:8f:cc:aa:0a:d0:e4:93:75:aa:
        6c:cf:49:7d:75:ec:82:28:5c:73:f0:42:bf:9e:a6:13:2e:de:
        6c:ee:80:03:a6:ee:88:36:a0:1b:b2:82:e8:3d:bb:a6:1a:d5:
        11:ae:0a:0b:62:d6:51:36:97:23:17:52:26:ed:f1:c5:b6:21:
        75:39:15:07:e0:42:f1:2a:89:04:77:66:ad:14:04:d2:c7:d4:
        7c:4f:6c:dd:4e:dc:ed:8e:a9:f6:86:17:e7:e1:59:66:bb:d0:
        7a:d0:94:42:eb:af:c1:54:ca:e2:1a:a4:a9:b6:a5:d4:81:ca:
        15:26:fa:6f:b4:df:78:10:04:8c:48:18:bc:28:59:66:9a:b8:
        18:f1:d9:5e:5b:82:ff:fe:11:d7:d4:04:36:30:9f:51:1d:3c:
        c8:64:40:75:7c:d8:35:83:ef:b1:e5:28:76:0a:05:3d:e9:b8:
        1e:70:50:3a:60:e2:a5:01:88:88:9c:04:cc:6a:f2:15:85:d1:
        0c:b7:4a:6d:93:4e:82:ca:29:e9:75:0b:42:e4:3a:47:24:08:
        6d:80:5c:e6:6a:67:2c:b6:13:08:c9:4f:d8:66:53:b9:b6:7f:
        e2:ea:39:95:6f:71:77:96:03:af:b9:e3:cc:e3:a1:b9:f1:01:
        c6:6e:be:fc:97:5c:b2:d1:f1:7b:fb:33:c6:65:ea:e6:18:f9:
        ab:3a:27:1a:2d:20:6b:e6
pkcs7-signedData
  • 1
    • SHA1: nil
    • 1.3.6.1.4.1.311.2.1.4
      • #0
        • 1.3.6.1.4.1.311.2.1.15
          • :
        • SHA1
          • b2 7b 48 b2 f7 7f a5 e0  c3 2e 24 43 c9 3d e8 ea  |.{H.......$C.=..|
23 a6 05 2a                                       |#..*            |
    • unnamed
      • #0
        • 2
          • 4C:E3:2F:C5:64:B6:49:A0:4F:81:05:5E:22:50:06:16
          • RSA-SHA1-2: nil
          • CN: kumium.com
          • 2014-12-31 16:00:00 UTC: 2023-12-31 16:00:00 UTC
          • CN: kumium.com
          • #5
            • rsaEncryption: nil
            • D9:B3:74:6B:7D:95:DB:1A:4D:B7:D7:61:F9:64:AF:C3:
              0B:0F:8D:F2:FE:C8:98:72:DC:05:F5:F5:46:E4:25:41:
              E5:11:19:2F:10:9C:1C:96:1E:E9:13:60:32:BD:09:DB:
              2E:5F:5F:6F:72:79:7B:C0:08:12:A1:4F:54:45:4B:27:
              DD:12:05:7F:96:5E:DB:20:31:BF:07:D9:AA:B6:47:21:
              64:A6:1A:A6:27:65:9F:81:4D:5B:02:89:8A:D5:2F:B8:
              AD:AB:B9:E5:11:C6:2B:A9:49:CD:0C:78:CF:33:6C:60:
              E5:3F:DA:0A:50:55:A6:68:E1:59:BF:23:12:B2:06:71              : 0x010001
          • 2.5.29.1
            • ce 5b 98 9a 6d 0a 92 a3  65 12 5c ef a0 dd 71 b9  |.[..m...e.\...q.|
              • CN: kumium.com
              • 4c e3 2f c5 64 b6 49 a0  4f 81 05 5e 22 50 06 16  |L./.d.I.O..^"P..|
        • RSA-SHA1-2: 
          d2 ed 4b 30 17 2e b8 76  2c 0b 50 8f 21 e9 9a b0  |..K0...v,.P.!...|
9d 75 a3 bd 63 24 5a 23  f0 e4 c7 7d 91 b0 3f c2  |.u..c$Z#...}..?.|
03 90 d2 ce 48 dc 04 bc  26 1c 06 52 00 2b 8c 84  |....H...&..R.+..|
f8 e3 b6 0e 8e 53 52 fd  5e aa 15 da 1a 31 b5 e9  |.....SR.^....1..|
94 f6 fb 2c b7 1c 62 f3  ee df 8a 93 d6 48 b2 9e  |...,..b......H..|
4b 4a a0 79 5e a2 71 13  57 2e 63 2d d4 0a c6 63  |KJ.y^.q.W.c-...c|
39 8e 74 1c f4 f2 70 8b  62 73 bb 95 0f 8c 1a d3  |9.t...p.bs......|
45 e6 fc 7f 0f 4e 34 41  17 15 d3 0d 1a 7a cb 72  |E....N4A.....z.r|
      • Certificate #1
        • 2
          • 25:1F:5D:98:81:82:17:2E:3C:41:9E:01:4F:B0:40:4C
          • RSA-SHA1: nil
          • Issuer
            • C: CN
            • O: WoSign CA Limited
            • CN: Certification Authority of WoSign
          • 2009-08-08 01:00:05 UTC: 2024-08-08 01:00:05 UTC
          • Subject
            • C: CN
            • O: WoSign CA Limited
            • CN: WoSign Time Stamping Signer
          • #5
            • rsaEncryption: nil
            • A5:D0:68:BA:82:CB:DB:A7:6D:55:B9:31:A7:DA:F4:9C:
              6B:03:54:4F:A2:1C:EF:1C:B5:96:44:1F:56:41:3F:61:
              B0:03:59:4B:82:0E:DB:15:C8:D0:CC:E0:87:C6:09:75:
              8A:84:E3:ED:97:C2:C8:92:34:C0:F1:64:53:60:51:34:
              48:90:B1:4F:89:69:F5:2E:A0:2A:16:54:2F:C0:37:58:
              FF:35:52:1B:52:08:CF:B9:EC:5A:27:52:5A:83:EB:68:
              B1:B9:F8:B2:A9:08:F3:4F:AB:17:0F:2E:BD:4F:E5:12:
              8A:BF:7C:B7:E7:65:32:3B:83:41:02:22:3A:24:3B:6A:
              A3:3C:AF:EB:79:42:17:56:74:C8:61:63:DD:8C:2F:3E:
              EF:3A:A3:47:52:04:3B:00:18:AE:26:71:E0:7A:04:8D:
              75:82:2D:65:4E:C1:B8:F2:8C:DE:0F:63:03:D4:C3:52:
              60:72:8C:88:CC:6F:96:D5:C7:7D:29:DB:26:04:9E:A2:
              B4:BF:5A:B5:6E:F2:46:0F:29:81:C5:C0:4F:A6:87:8C:
              7C:21:07:54:1F:50:F0:42:5C:55:7C:CF:44:2E:41:3D:
              18:8D:5F:D9:68:E6:47:91:8F:CF:DC:7D:90:60:FF:CB:
              48:E4:61:5E:4F:73:45:0D:C8:34:89:03:D5:FE:0B:C3              : 0x010001
          • #6
            • keyUsage: true, 0xc0
            • extendedKeyUsage: true, timeStamping
            • basicConstraints
              • true
              • nil
            • crlDistributionPoints: http://crls1.wosign.com/ca1.crl
            • authorityInfoAccess
              • #0
                • OCSP: http://ocsp1.wosign.com/ca1
                • caIssuers: http://aia1.wosign.com/ca1-tsa.cer
            • subjectKeyIdentifier: 
              df 6e 12 d5 0c 54 2e 5a  14 ca de 03 de ab 4e d4  |.n...T.Z......N.|
98 0c 46 b5                                       |..F.            |
            • authorityKeyIdentifier: 
              e1 66 cf 0e d1 f1 b3 4b  b7 06 20 14 fe 87 12 d5  |.f.....K.. .....|
f6 fe fb 3e                                       |...>            |
        • RSA-SHA1: 
          7c 98 2f bb c3 d2 ae c2  2a 8f a6 97 76 56 86 32  ||./.....*...vV.2|
c4 cd 36 68 8b ec d7 80  1a 31 79 b0 5e 56 b9 69  |..6h.....1y.^V.i|
eb b9 0b 32 a9 83 26 dc  77 5d 7a 56 b2 46 a0 7d  |...2..&.w]zV.F.}|
15 d6 6d f9 ac f8 35 73  78 36 02 60 22 20 1c ef  |..m...5sx6.`" ..|
18 8f 7e 66 b2 4f e7 71  93 5a 2b e6 e5 8d 3d 5d  |..~f.O.q.Z+...=]|
2e 27 4b 46 cb 1d 04 f3  0b 8c 3f 13 a8 0d d4 cd  |.'KF......?.....|
e8 28 e8 2a 9c 55 c8 e3  ff 9d a9 22 49 6e e8 e7  |.(.*.U....."In..|
88 92 37 57 80 60 44 18  27 43 58 18 04 6d 86 c0  |..7W.`D.'CX..m..|
65 47 05 57 55 50 91 e6  73 50 ee 3f 10 a9 8f 05  |eG.WUP..sP.?....|
2f da 68 11 53 6e 1f ad  98 f3 76 3e 85 d0 57 a3  |/.h.Sn....v>..W.|
cf e4 c1 1a 4c 64 06 a6  44 ab 4e 1e e2 4b d5 a4  |....Ld..D.N..K..|
6d 71 f8 6b cb 66 13 a6  47 1f 21 2a a1 ae 4c 89  |mq.k.f..G.!*..L.|
a4 7d 28 77 17 4f 88 8d  b1 d1 5d b1 c4 93 5a bf  |.}(w.O....]...Z.|
22 92 6c ab 67 82 68 ed  d7 21 cb 63 bc 93 c4 17  |".l.g.h..!.c....|
8e 87 19 25 ad 17 54 b4  79 d2 a5 93 73 bc 7c bb  |...%..T.y...s.|.|
e4 80 0f 8f cc aa 0a d0  e4 93 75 aa 6c cf 49 7d  |..........u.l.I}|
75 ec 82 28 5c 73 f0 42  bf 9e a6 13 2e de 6c ee  |u..(\s.B......l.|
80 03 a6 ee 88 36 a0 1b  b2 82 e8 3d bb a6 1a d5  |.....6.....=....|
11 ae 0a 0b 62 d6 51 36  97 23 17 52 26 ed f1 c5  |....b.Q6.#.R&...|
b6 21 75 39 15 07 e0 42  f1 2a 89 04 77 66 ad 14  |.!u9...B.*..wf..|
04 d2 c7 d4 7c 4f 6c dd  4e dc ed 8e a9 f6 86 17  |....|Ol.N.......|
e7 e1 59 66 bb d0 7a d0  94 42 eb af c1 54 ca e2  |..Yf..z..B...T..|
1a a4 a9 b6 a5 d4 81 ca  15 26 fa 6f b4 df 78 10  |.........&.o..x.|
04 8c 48 18 bc 28 59 66  9a b8 18 f1 d9 5e 5b 82  |..H..(Yf.....^[.|
ff fe 11 d7 d4 04 36 30  9f 51 1d 3c c8 64 40 75  |......60.Q.<.d@u|
7c d8 35 83 ef b1 e5 28  76 0a 05 3d e9 b8 1e 70  ||.5....(v..=...p|
50 3a 60 e2 a5 01 88 88  9c 04 cc 6a f2 15 85 d1  |P:`........j....|
0c b7 4a 6d 93 4e 82 ca  29 e9 75 0b 42 e4 3a 47  |..Jm.N..).u.B.:G|
24 08 6d 80 5c e6 6a 67  2c b6 13 08 c9 4f d8 66  |$.m.\.jg,....O.f|
53 b9 b6 7f e2 ea 39 95  6f 71 77 96 03 af b9 e3  |S.....9.oqw.....|
cc e3 a1 b9 f1 01 c6 6e  be fc 97 5c b2 d1 f1 7b  |.......n...\...{|
fb 33 c6 65 ea e6 18 f9  ab 3a 27 1a 2d 20 6b e6  |.3.e.....:'.- k.|
    • 1
      • #0
        • CN: kumium.com
        • 4C:E3:2F:C5:64:B6:49:A0:4F:81:05:5E:22:50:06:16
      • SHA1: nil
      • #2
        • contentType: 1.3.6.1.4.1.311.2.1.4
        • messageDigest: 
          1a d2 78 65 7c 06 79 20  d3 ce c0 5a fe e6 d0 09  |..xe|.y ...Z....|
16 84 01 c9                                       |....            |
        • 1.3.6.1.4.1.311.2.1.12
          • 00 22 00 6b 00 75 00 6d  00 69 00 75 00 6d 00 20  |.".k.u.m.i.u.m. |
00 57 00 65 00 62 00 20  00 42 00 72 00 6f 00 77  |.W.e.b. .B.r.o.w|
00 73 00 65 00 72 00 22                           |.s.e.r."        |
            : http://kumium.com
      • rsaEncryption: 
        b9 82 8b a7 97 26 44 d6  a4 60 17 7f 5d 21 3a e7  |.....&D..`..]!:.|
07 31 ce ce 24 69 1b e4  4b f8 52 97 3d ea 1a 8c  |.1..$i..K.R.=...|
7b 64 0d d9 3a 16 e3 fc  b4 e3 47 43 70 b1 d2 c7  |{d..:.....GCp...|
18 57 ca 2b 29 db 1d 38  4a cd 87 09 e0 58 c9 be  |.W.+)..8J....X..|
22 88 a2 05 7c 00 1a bd  2a bc 7f 58 f8 90 21 58  |"...|...*..X..!X|
39 06 66 35 08 e7 03 92  e9 96 9e 69 94 87 1b cb  |9.f5.......i....|
8c 70 31 77 23 c4 d3 3f  5a 3e ab 9b 29 39 62 e1  |.p1w#..?Z>..)9b.|
c2 02 da 5f 9b d7 4d 51  b2 a9 42 cf fb 57 6d c7  |..._..MQ..B..Wm.|
      • countersignature
        • 1
          • unnamed
            • #0
              • C: CN
              • O: WoSign CA Limited
              • CN: Certification Authority of WoSign
            • 25:1F:5D:98:81:82:17:2E:3C:41:9E:01:4F:B0:40:4C
          • SHA1: nil
          • #2
            • contentType: pkcs7-data
            • signingTime: 2015-02-10 09:38:32 UTC
            • messageDigest: 
              70 d3 ab 30 39 ea 75 42  97 ba 3c 2f 1d 26 9d 24  |p..09.uB..
          • RSA-SHA1: 
            75 6a 31 e9 4d 01 40 81  c7 16 4e 7c 82 9d a8 5d  |uj1.M.@...N|...]|
cb ba 33 20 cf a5 6b ca  e8 50 bf bb 81 a1 55 34  |..3 ..k..P....U4|
fe 9e 66 c2 f0 45 f9 21  e2 73 7d 6f e7 14 d4 7d  |..f..E.!.s}o...}|
ed 4f 50 b5 34 4b d6 c5  e0 71 b2 6f 51 67 c1 44  |.OP.4K...q.oQg.D|
13 b6 78 63 de ef 84 8e  10 97 67 b3 6b 18 a3 91  |..xc......g.k...|
de 2f bd 21 fe 95 05 6c  8d 90 60 29 32 0f 45 f9  |./.!...l..`)2.E.|
40 6f bd df 40 a2 7d a9  71 ee dc aa e3 d8 4d b2  |@o..@.}.q.....M.|
1a 4e 93 d1 59 64 93 93  37 7a b4 bf 36 73 0e 67  |.N..Yd..7z..6s.g|
54 b9 4e 42 92 20 5a f8  ad b2 17 1c 0d 0e 9f 3f  |T.NB. Z........?|
ae 1c 74 7b 78 2d 59 39  ec e6 2d f3 43 a7 28 fe  |..t{x-Y9..-.C.(.|
2b 91 cf cb 0f 18 86 e7  3f 7b e4 63 7f 56 86 44  |+.......?{.c.V.D|
83 ae 51 03 c6 5b 4a 1c  8e 55 bb f1 40 0b d4 05  |..Q..[J..U..@...|
eb db de 35 15 a2 3d 42  90 42 11 e5 9a 98 c0 42  |...5..=B.B.....B|
84 0c 97 1e c7 1c fc b6  1e c1 ce 2b e4 23 e0 d3  |...........+.#..|
5d 35 78 83 2f d6 c5 96  2e ee 4c 2c 51 b4 ad 9f  |]5x./.....L,Q...|
16 16 c4 b0 04 a4 77 3e  bf 79 4f 9d f3 5e ae 19  |......w>.yO..^..|
offsetsizetypecomment
01108992EXE02/10/2015 09:38:39#
15c115HTM#
da1b052209PNG(256 x 256)#
fd7a01992PNG(256 x 256)#
1037403987PNG(256 x 256)#
10ec002864PKCS7Authenticode Signature#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] ignoring invalid PEdump::BITMAPINFOHEADER
[?] can't find file_offset of VA 0x94be4