O755-A22.exe_PAYLOAD

info
MZ
PE
imports
foremost
signature
hexdump
disasm
log
discuss
donate

filename	O755-A22.exe_PAYLOAD_110.exe
size	15608 (0x3cf8)
md5	8a70921638ff82bb924456deadcd20e6

type	PE32+ executable (native) x86-64, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xd8

Rich Header

lib id	version	times used
1	0	16
123	40310	3
125	40310	2
109	40310	3
120	40310	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x8664
NumberOfSections	6
TimeDateStamp	0x46019189
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xf0
Characteristics	0x22
Magic	0x20b
LinkerVersion	8.0
SizeOfCode	0x1600
SizeOfInitializedData	0x800
SizeOfUninitializedData	0
AddressOfEntryPoint	0x62b0
BaseOfCode	0x1000
ImageBase	0x10000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	5.2
ImageVersion	5.2
SubsystemVersion	5.2
Reserved1	0
SizeOfImage	0x7000
SizeOfHeaders	0x400
CheckSum	0xf4bc
Subsystem	1
DllCharacteristics	0
SizeOfStackReserve	0x40000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x1ae	0x200	R-X CODE
.rdata	0x2000	0x3c4	0x400	R-- IDATA
.data	0x3000	0x1a0	0x200	RW- IDATA
.pdata	0x4000	0x180	0x200	R-- IDATA
PAGE	0x5000	0xc55	0xe00	R-X CODE
INIT	0x6000	0x58a	0x600	RWX CODE DISCARDABLE

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x6364	0x28
RESOURCE	0	0
EXCEPTION	0x4000	0x180
SECURITY	0x2200	0x1af8
BASERELOC	0	0
DEBUG	0x2090	0x1c
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x2000	0x88
Delay_IAT	0	0
CLR_Header	0	0

module_name	hint	function_name
ntoskrnl.exe	638	KeSetPriorityThread
ntoskrnl.exe	704	MmGetPhysicalAddress
ntoskrnl.exe	685	MmAllocateContiguousMemorySpecifyCache
ntoskrnl.exe	573	KeInsertQueueDpc
ntoskrnl.exe	699	MmFreeContiguousMemory
ntoskrnl.exe	750	MmUnmapIoSpace
ntoskrnl.exe	720	MmMapIoSpace
ntoskrnl.exe	502	IofCompleteRequest
ntoskrnl.exe	636	KeSetImportanceDpc
ntoskrnl.exe	641	KeSetTargetProcessorDpc
ntoskrnl.exe	557	KeInitializeDpc
ntoskrnl.exe	351	IoDeleteDevice
ntoskrnl.exe	341	IoCreateSymbolicLink
ntoskrnl.exe	332	IoCreateDevice
ntoskrnl.exe	1086	RtlInitUnicodeString
ntoskrnl.exe	531	KeBugCheckEx

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa (c)04/CN=VeriSign Class 3 Code Signing 2004 CA

serial: 18A686A1229059017A672136AC2E7265

Certificates (5)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
        Validity
            Not Before: Dec  4 00:00:00 2003 GMT
            Not After : Dec  3 23:59:59 2013 GMT
        Subject: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ca:b2:a4:cc:cd:20:af:0a:7d:89:ac:87:75:
                    f0:b4:4e:f1:df:c1:0f:bf:67:61:bd:a3:64:1c:da:
                    bb:f9:ca:33:ab:84:30:89:58:7e:8c:db:6b:dd:36:
                    9e:0f:bf:d1:ec:78:f2:77:a6:7e:6f:3c:bf:93:af:
                    0d:ba:68:f4:6c:94:ca:bd:52:2d:ab:48:3d:f5:b6:
                    d5:5d:5f:1b:02:9f:fa:2f:6b:1e:a4:f7:a3:9a:a6:
                    1a:c8:02:e1:7f:4c:52:e3:0e:60:ec:40:1c:7e:b9:
                    0d:de:3f:c7:b4:df:87:bd:5f:7a:6a:31:2e:03:99:
                    81:13:a8:47:20:ce:31:73:0d:57:2d:cd:78:34:33:
                    95:12:99:12:b9:de:68:2f:aa:e6:e3:c2:8a:8c:2a:
                    c3:8b:21:87:66:bd:83:58:57:6f:75:bf:3c:aa:26:
                    87:5d:ca:10:15:3c:9f:84:ea:54:c1:0a:6e:c4:fe:
                    c5:4a:dd:b9:07:11:97:22:7c:db:3e:27:d1:1e:78:
                    ec:9f:31:c9:f1:e6:22:19:db:c4:b3:47:43:9a:1a:
                    5f:a0:1e:90:e4:5e:f5:ee:7c:f1:7d:ab:62:01:8f:
                    f5:4d:0b:de:d0:22:56:a8:95:cd:ae:88:76:ae:ee:
                    ba:0d:f3:e4:4d:d9:a0:fb:68:a0:ae:14:3b:b3:87:
                    c1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com

            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.verisign.com/ThawteTimestampingCA.crl

            X509v3 Extended Key Usage: 
                Time Stamping
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=TSA2048-1-53
    Signature Algorithm: sha1WithRSAEncryption
         4a:6b:f9:ea:58:c2:44:1c:31:89:79:99:2b:96:bf:82:ac:01:
         d6:1c:4c:cd:b0:8a:58:6e:df:08:29:a3:5e:c8:ca:93:13:e7:
         04:52:0d:ef:47:27:2f:00:38:b0:e4:c9:93:4e:9a:d4:22:62:
         15:f7:3f:37:21:4f:70:31:80:f1:8b:38:87:b3:e8:e8:97:00:
         fe:cf:55:96:4e:24:d2:a9:27:4e:7a:ae:b7:61:41:f3:2a:ce:
         e7:c9:d9:5e:dd:bb:2b:85:3e:b5:9d:b5:d9:e1:57:ff:be:b4:
         c5:7e:f5:cf:0c:9e:f0:97:fe:2b:d3:3b:52:1b:1b:38:27:f7:
         3f:4a

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA
        Validity
            Not Before: Dec  4 00:00:00 2003 GMT
            Not After : Dec  3 23:59:59 2008 GMT
        Subject: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:50:28:48:dd:d3:68:7a:84:18:44:66:75:5d:
                    7e:c4:b8:9f:63:26:ff:3d:43:9c:7c:11:38:10:25:
                    55:73:d9:75:27:69:fd:4e:b9:20:5c:d3:0a:f9:a0:
                    1b:2a:ed:55:56:21:61:d8:1e:db:e4:bc:33:6b:c7:
                    ef:dd:a3:37:65:8e:1b:93:0c:b6:53:1e:5c:7c:66:
                    35:5f:05:8a:45:fe:76:4e:df:53:80:a2:81:20:9d:
                    ae:88:5c:a2:08:f7:e5:30:f9:ee:22:37:4c:42:0a:
                    ce:df:c6:1f:c4:d6:55:e9:81:3f:b5:52:a3:2c:aa:
                    01:7a:f2:a2:aa:8d:35:fe:9f:e6:5d:6a:05:9f:3d:
                    6b:e3:bf:96:c0:fe:cc:60:f9:40:e7:07:a0:44:eb:
                    81:51:6e:a5:2a:f2:b6:8a:10:28:ed:8f:dc:06:a0:
                    86:50:9a:7b:4a:08:0d:30:1d:ca:10:9e:6b:f7:e9:
                    58:ae:04:a9:40:99:b2:28:e8:8f:16:ac:3c:e3:53:
                    6f:4b:d3:35:9d:b5:6f:64:1d:b3:96:2c:bb:3d:e7:
                    79:eb:6d:7a:f9:16:e6:26:ad:af:ef:99:53:b7:40:
                    2c:95:b8:79:aa:fe:d4:52:ab:29:74:7e:42:ec:39:
                    1e:a2:6a:16:e6:59:bb:24:68:d8:00:80:43:10:87:
                    80:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com

            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.verisign.com/tss-ca.crl

            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation
            X509v3 Subject Alternative Name: 
                DirName:/CN=TSA2048-1-54
    Signature Algorithm: sha1WithRSAEncryption
         87:78:70:da:4e:52:01:20:5b:e0:79:c9:82:30:c4:fd:b9:19:
         96:bd:91:00:c3:bd:cd:cd:c6:f4:0e:d8:ff:f9:4d:c0:33:62:
         30:11:c5:f5:74:1b:d4:92:de:5f:9c:20:13:b1:7c:45:be:50:
         cd:83:e7:80:17:83:a7:27:93:67:13:46:fb:ca:b8:98:41:03:
         cc:9b:51:5b:05:8b:7f:a8:6f:f3:1b:50:1b:24:2e:f2:69:8d:
         6c:22:f7:bb:ca:16:95:ed:0c:74:c0:68:77:d9:eb:99:62:87:
         c1:73:90:f8:89:74:7a:23:ab:a3:98:7b:97:b1:f7:8f:29:71:
         4d:2e:75:1b:48:41:da:f0:b5:0d:20:54:d6:77:a0:97:82:63:
         69:fd:09:cf:8a:f0:75:bb:09:9b:d9:f9:11:55:26:9a:61:32:
         be:7a:02:b0:7b:86:be:a2:c3:8b:22:2c:78:d1:35:76:bc:92:
         73:5c:f9:b9:e6:4c:15:0a:23:cc:e4:d2:d4:34:2e:49:40:15:
         3c:0f:60:7a:24:c6:a5:66:ef:96:cf:70:eb:3e:e7:f4:0d:7e:
         dc:d1:7c:a3:76:71:69:c1:9c:4f:47:30:35:21:b1:a2:af:1a:
         62:3c:2b:d9:8e:aa:2a:07:7b:d8:18:b3:5c:7b:e2:9d:a5:6f:
         fe:3c:89:ad

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority
        Validity
            Not Before: Jul 16 00:00:00 2004 GMT
            Not After : Jul 15 23:59:59 2014 GMT
        Subject: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)04, CN=VeriSign Class 3 Code Signing 2004 CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bc:ee:bc:7e:ef:83:eb:e0:37:4f:fb:03:10:
                    38:be:08:d2:8c:7d:9d:fa:92:7f:19:0c:c2:6b:ee:
                    42:52:8c:de:d3:1c:48:13:25:ea:c1:63:7a:f9:51:
                    65:ee:d3:aa:3b:f5:f0:94:9c:2b:fb:f2:66:d4:24:
                    da:f7:f5:9f:6e:19:39:36:bc:d0:a3:76:08:1e:22:
                    27:24:6c:38:91:27:e2:84:49:ae:1b:8a:a1:fd:25:
                    82:2c:10:30:e8:71:ab:28:e8:77:4a:51:f1:ec:cd:
                    f8:f0:54:d4:6f:c0:e3:6d:0a:8f:d9:d8:64:8d:63:
                    b2:2d:4e:27:f6:85:0e:fe:6d:e3:29:99:e2:85:47:
                    7c:2d:86:7f:e8:57:8f:ad:67:c2:33:32:91:13:20:
                    fc:a9:23:14:9a:6d:c2:84:4b:76:68:04:d5:71:2c:
                    5d:21:fa:88:0d:26:fd:1f:2d:91:2b:e7:01:55:4d:
                    f2:6d:35:28:82:df:d9:6b:5c:b6:d6:d9:aa:81:fd:
                    5f:cd:83:ba:63:9d:d0:22:fc:a9:3b:42:69:b2:8e:
                    3a:b5:bc:b4:9e:0f:5e:c4:ea:2c:82:8b:28:fd:53:
                    08:96:dd:b5:01:20:d1:f9:a5:18:e7:c0:ee:51:70:
                    37:e1:b6:05:48:52:48:6f:38:ea:c3:e8:6c:7b:44:
                    84:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/rpa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.verisign.com/pca3.crl

            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, Code Signing
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Netscape Cert Type: 
                Object Signing CA
            X509v3 Subject Alternative Name: 
                DirName:/CN=Class3CA2048-1-43
            X509v3 Subject Key Identifier: 
                08:F5:51:E8:FB:FE:3D:3D:64:36:7C:68:CF:5B:78:A8:DF:B9:C5:37
            X509v3 Authority Key Identifier: 
                DirName:/C=US/O=VeriSign, Inc./OU=Class 3 Public Primary Certification Authority
                serial:70:BA:E4:1D:10:D9:29:34:B6:38:CA:7B:03:CC:BA:BF

    Signature Algorithm: sha1WithRSAEncryption
         ae:3a:17:b8:4a:7b:55:fa:64:55:ec:40:a4:ed:49:41:90:99:
         9c:89:bc:af:2e:1d:ca:78:23:f9:1c:19:0f:7f:eb:68:bc:32:
         d9:88:38:de:dc:3f:d3:89:b4:3f:b1:82:96:f1:a4:5a:ba:ed:
         2e:26:d3:de:7c:01:6e:00:0a:00:a4:06:92:11:48:09:40:f9:
         1c:18:79:67:23:24:e0:bb:d5:e1:50:ae:1b:f5:0e:dd:e0:2e:
         81:cd:80:a3:6c:52:4f:91:75:55:8a:ba:22:f2:d2:ea:41:75:
         88:2f:63:55:7d:1e:54:5a:95:59:ca:d9:34:81:c0:5f:5e:f6:
         7a:b5

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:a6:86:a1:22:90:59:01:7a:67:21:36:ac:2e:72:65
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)04, CN=VeriSign Class 3 Code Signing 2004 CA
        Validity
            Not Before: Dec 15 00:00:00 2006 GMT
            Not After : Jan 10 23:59:59 2010 GMT
        Subject: C=US, ST=Texas, L=Round Rock, O=Dell Inc., OU=Digital ID Class 3 - Microsoft Software Validation v2, CN=Dell Inc.
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (1024 bit)
                Modulus:
                    00:bf:7d:a2:29:49:d1:89:d0:80:b7:52:e0:64:3e:
                    71:01:a4:d6:ef:a2:4b:ff:48:85:3e:38:46:a9:ae:
                    46:34:7c:de:ba:ff:96:64:2c:89:db:f0:aa:47:7c:
                    dc:ca:40:79:53:b1:90:b9:44:29:1c:99:19:8a:18:
                    20:a6:83:94:30:4b:57:e9:57:1f:2a:a8:66:04:d4:
                    6c:15:eb:31:ba:46:8a:fd:82:69:d3:de:f2:65:25:
                    6c:ac:8d:47:b1:95:44:b3:05:9a:c0:05:fc:54:30:
                    79:8a:c3:20:97:a9:17:17:e3:65:9a:0e:59:d5:71:
                    a7:82:8c:97:56:19:83:c8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://CSC3-2004-crl.verisign.com/CSC3-2004.crl

            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/rpa

            X509v3 Extended Key Usage: 
                Code Signing
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com
                CA Issuers - URI:http://CSC3-2004-aia.verisign.com/CSC3-2004-aia.cer

            X509v3 Authority Key Identifier: 
                keyid:08:F5:51:E8:FB:FE:3D:3D:64:36:7C:68:CF:5B:78:A8:DF:B9:C5:37

            Netscape Cert Type: 
                Object Signing
            1.3.6.1.4.1.311.2.1.27: 
                0.......
    Signature Algorithm: sha1WithRSAEncryption
         96:4a:90:18:9b:d6:c0:08:96:0e:4a:ae:75:cd:f7:c5:f7:63:
         b0:e0:4e:89:21:99:5b:b7:bb:78:98:29:7c:7d:4c:84:08:2c:
         c6:c3:24:d5:a0:cc:60:c7:7f:72:cc:04:c7:78:24:16:f1:3b:
         04:25:4e:96:17:96:da:b4:0b:7b:57:26:a1:8f:4f:1a:1d:6a:
         02:f1:87:94:75:8b:bb:c4:f8:66:4c:ef:6c:c5:05:a5:36:7a:
         8e:a9:99:b3:c2:96:00:6d:c8:33:6d:03:d7:1b:fb:b5:f8:28:
         d1:46:46:a3:97:14:65:79:09:19:0d:59:27:bb:fa:55:ae:c7:
         6a:ad:25:fe:4e:c1:c5:d7:3b:37:ca:ec:57:6d:be:1a:40:d1:
         3e:91:50:9e:31:6d:c5:12:d6:b0:7b:01:c0:8b:7f:59:f8:db:
         d0:d6:5f:ca:c2:46:b5:45:a9:15:27:a2:e8:9c:0d:3a:66:03:
         ef:49:ae:2d:53:73:f6:40:ba:93:0f:ca:c4:84:8a:e1:d1:82:
         0d:3b:80:86:6f:43:35:eb:90:72:ec:e3:ab:41:e8:0d:9d:9b:
         13:38:d8:c0:e0:26:a1:1d:90:e9:63:96:b9:2b:f4:e4:fd:f5:
         a1:61:a5:26:f7:89:6a:0b:77:35:79:76:01:09:16:e4:55:d6:
         bb:88:8d:67

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:0c:12:06:00:00:00:00:00:1b
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Code Verification Root
        Validity
            Not Before: May 23 17:01:29 2006 GMT
            Not After : May 23 17:11:29 2016 GMT
        Subject: C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (1024 bit)
                Modulus:
                    00:c9:5c:59:9e:f2:1b:8a:01:14:b4:10:df:04:40:
                    db:e3:57:af:6a:45:40:8f:84:0c:0b:d1:33:d9:d9:
                    11:cf:ee:02:58:1f:25:f7:2a:a8:44:05:aa:ec:03:
                    1f:78:7f:9e:93:b9:9a:00:aa:23:7d:d6:ac:85:a2:
                    63:45:c7:72:27:cc:f4:4c:c6:75:71:d2:39:ef:4f:
                    42:f0:75:df:0a:90:c6:8e:20:6f:98:0f:f8:ac:23:
                    5f:70:29:36:a4:c9:86:e7:b1:9a:20:cb:53:a5:85:
                    e7:3d:be:7d:9a:fe:24:45:33:dc:76:15:ed:0f:a2:
                    71:64:4c:65:2e:81:68:45:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy

            1.3.6.1.4.1.311.21.7: 
                0'..+.....7......N...................n...
            X509v3 Key Usage: 
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier: 
                E2:7F:7B:D8:77:D5:DF:9E:0A:3F:9E:B4:CB:0E:2E:A9:EF:DB:69:77
            1.3.6.1.4.1.311.20.2: 
                ...C.r.o.s.s.C.A
            X509v3 Authority Key Identifier: 
                keyid:62:FB:0A:21:5B:7F:43:6E:11:DA:09:54:50:6B:F5:D2:96:71:F1:9E

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/MicrosoftCodeVerifRoot.crl

    Signature Algorithm: sha1WithRSAEncryption
         01:e4:46:b3:3b:45:7f:75:13:87:7e:5f:43:de:46:8e:cb:8a:
         bd:b6:47:41:bc:cc:cc:74:91:d8:ce:39:51:95:a4:a6:b5:47:
         c0:ef:d2:da:7b:8f:57:11:f4:32:8c:7c:cd:3f:ee:42:da:04:
         21:4a:f7:c8:43:88:4a:6f:5c:ca:14:fc:4b:d1:9f:4c:bd:d4:
         55:6e:cc:02:be:0d:a6:88:8f:86:09:ba:a4:25:bd:e8:b0:f0:
         fa:8b:71:4e:67:b0:cb:82:a8:d7:8e:55:f7:37:eb:f0:3e:88:
         ef:e4:e0:8a:fd:1c:6e:2e:61:41:48:75:b4:b0:2c:1d:28:d8:
         49:0f:d7:15:f0:24:73:25:3c:cc:88:0c:de:28:4c:65:54:fe:
         5e:ae:8c:ea:19:ad:2c:51:b2:9b:3a:47:f5:3c:80:35:01:17:
         e2:49:87:d6:54:4a:fb:4b:ab:07:bc:bf:7d:79:cf:bf:35:00:
         5c:bb:9e:cf:fc:82:89:1b:39:a0:51:97:b6:de:c0:b3:07:ff:
         44:96:44:c0:34:2a:19:5c:ab:ee:f0:3b:ec:29:4e:b5:13:c5:
         37:85:7e:75:d5:b4:d6:0d:06:6e:b5:d2:6c:23:71:67:ea:f1:
         71:8e:af:4e:74:aa:0c:f9:ec:bf:4c:58:fa:5e:90:9b:6d:39:
         cb:86:88:3f:8b:1c:a8:16:32:d5:fe:6d:b9:f1:f8:b3:ea:d7:
         91:f6:36:47:78:c0:27:2a:15:c7:68:d6:f4:c5:fc:4f:4e:c8:
         67:3f:10:2d:40:9f:f1:1e:c9:61:48:e7:a7:03:fc:31:73:0c:
         f0:46:88:fe:56:da:49:29:95:ef:09:da:a3:e5:be:ef:60:ec:
         d9:54:a0:59:9c:28:bd:54:ef:66:15:7f:87:4c:84:db:a6:0e:
         95:67:2e:51:7b:34:39:b6:41:c2:8c:84:68:26:dc:24:02:09:
         e7:81:8e:0a:97:2d:ef:ee:a7:b9:98:a6:0f:81:8d:c7:10:b5:
         e1:ed:98:2f:48:6f:53:85:49:64:78:9b:ec:5d:ac:97:0b:55:
         26:c3:ef:ba:8d:c8:d1:a5:2f:5a:7f:93:6b:61:1a:33:9b:18:
         b8:a2:62:10:de:24:ea:76:e1:2f:43:eb:ec:dd:7c:12:34:24:
         89:da:28:55:ae:e5:75:4e:31:2b:67:63:b6:a8:d7:ab:73:0a:
         03:ce:c5:ea:59:3f:c7:eb:2a:45:ae:a8:62:5b:2f:00:99:39:
         ab:b4:5f:73:c3:08:ec:80:11:8f:47:0e:8f:2a:13:43:e1:91:
         06:62:55:bb:ff:ba:3d:a9:a9:3d:26:0f:ae:ca:7d:62:8b:15:
         55:89:d6:94:34:4d:d6:65

pkcs7-signedData

SHA1: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15

00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |

SHA1

80 8b 0d e6 f6 44 d4 8c 4e d0 c9 b6 07 a1 73 62 |.....D..N.....sb| ec 3d f0 83 |.=.. |

Certificates
- Certificate #0
  - 2
    - 47:BF:19:95:DF:8D:52:46:43:F7:DB:6D:48:0D:31:A4
    - RSA-SHA1: nil
    - Issuer
      - C: ZA
      - ST: Western Cape
      - L: Durbanville
      - O: Thawte
      - OU: Thawte Certification
      - CN: Thawte Timestamping CA
    - 2003-12-04 00:00:00 UTC: 2013-12-03 23:59:59 UTC
    - Subject
      - C: US
      - O: VeriSign, Inc.
      - CN: VeriSign Time Stamping Services CA
    - #5
      - rsaEncryption: nil
      - A9:CA:B2:A4:CC:CD:20:AF:0A:7D:89:AC:87:75:F0:B4:
        4E:F1:DF:C1:0F:BF:67:61:BD:A3:64:1C:DA:BB:F9:CA:
        33:AB:84:30:89:58:7E:8C:DB:6B:DD:36:9E:0F:BF:D1:
        EC:78:F2:77:A6:7E:6F:3C:BF:93:AF:0D:BA:68:F4:6C:
        94:CA:BD:52:2D:AB:48:3D:F5:B6:D5:5D:5F:1B:02:9F:
        FA:2F:6B:1E:A4:F7:A3:9A:A6:1A:C8:02:E1:7F:4C:52:
        E3:0E:60:EC:40:1C:7E:B9:0D:DE:3F:C7:B4:DF:87:BD:
        5F:7A:6A:31:2E:03:99:81:13:A8:47:20:CE:31:73:0D:
        57:2D:CD:78:34:33:95:12:99:12:B9:DE:68:2F:AA:E6:
        E3:C2:8A:8C:2A:C3:8B:21:87:66:BD:83:58:57:6F:75:
        BF:3C:AA:26:87:5D:CA:10:15:3C:9F:84:EA:54:C1:0A:
        6E:C4:FE:C5:4A:DD:B9:07:11:97:22:7C:DB:3E:27:D1:
        1E:78:EC:9F:31:C9:F1:E6:22:19:DB:C4:B3:47:43:9A:
        1A:5F:A0:1E:90:E4:5E:F5:EE:7C:F1:7D:AB:62:01:8F:
        F5:4D:0B:DE:D0:22:56:A8:95:CD:AE:88:76:AE:EE:BA:
        0D:F3:E4:4D:D9:A0:FB:68:A0:AE:14:3B:B3:87:C1:BB: 0x010001
    - X509v3 extensions
      - authorityInfoAccess
        OCSP: http://ocsp.verisign.com
      - basicConstraints
        true
        true: 0
      - crlDistributionPoints: http://crl.verisign.com/ThawteTimestampingCA.crl
      - extendedKeyUsage: timeStamping
      - keyUsage: true, 6
      - subjectAltName
        CN: TSA2048-1-53
  - RSA-SHA1:
```
4a 6b f9 ea 58 c2 44 1c  31 89 79 99 2b 96 bf 82  |Jk..X.D.1.y.+...|
ac 01 d6 1c 4c cd b0 8a  58 6e df 08 29 a3 5e c8  |....L...Xn..).^.|
ca 93 13 e7 04 52 0d ef  47 27 2f 00 38 b0 e4 c9  |.....R..G'/.8...|
93 4e 9a d4 22 62 15 f7  3f 37 21 4f 70 31 80 f1  |.N.."b..?7!Op1..|
8b 38 87 b3 e8 e8 97 00  fe cf 55 96 4e 24 d2 a9  |.8........U.N$..|
27 4e 7a ae b7 61 41 f3  2a ce e7 c9 d9 5e dd bb  |'Nz..aA.*....^..|
2b 85 3e b5 9d b5 d9 e1  57 ff be b4 c5 7e f5 cf  |+.>.....W....~..|
0c 9e f0 97 fe 2b d3 3b  52 1b 1b 38 27 f7 3f 4a  |.....+.;R..8'.?J|
```
- Certificate #1
  - 2
    - 0D:E9:2B:F0:D4:D8:29:88:18:32:05:09:5E:9A:76:88
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - O: VeriSign, Inc.
      - CN: VeriSign Time Stamping Services CA
    - 2003-12-04 00:00:00 UTC: 2008-12-03 23:59:59 UTC
    - Subject
      - C: US
      - O: VeriSign, Inc.
      - CN: VeriSign Time Stamping Services Signer
    - #5
      - rsaEncryption: nil
      - B2:50:28:48:DD:D3:68:7A:84:18:44:66:75:5D:7E:C4:
        B8:9F:63:26:FF:3D:43:9C:7C:11:38:10:25:55:73:D9:
        75:27:69:FD:4E:B9:20:5C:D3:0A:F9:A0:1B:2A:ED:55:
        56:21:61:D8:1E:DB:E4:BC:33:6B:C7:EF:DD:A3:37:65:
        8E:1B:93:0C:B6:53:1E:5C:7C:66:35:5F:05:8A:45:FE:
        76:4E:DF:53:80:A2:81:20:9D:AE:88:5C:A2:08:F7:E5:
        30:F9:EE:22:37:4C:42:0A:CE:DF:C6:1F:C4:D6:55:E9:
        81:3F:B5:52:A3:2C:AA:01:7A:F2:A2:AA:8D:35:FE:9F:
        E6:5D:6A:05:9F:3D:6B:E3:BF:96:C0:FE:CC:60:F9:40:
        E7:07:A0:44:EB:81:51:6E:A5:2A:F2:B6:8A:10:28:ED:
        8F:DC:06:A0:86:50:9A:7B:4A:08:0D:30:1D:CA:10:9E:
        6B:F7:E9:58:AE:04:A9:40:99:B2:28:E8:8F:16:AC:3C:
        E3:53:6F:4B:D3:35:9D:B5:6F:64:1D:B3:96:2C:BB:3D:
        E7:79:EB:6D:7A:F9:16:E6:26:AD:AF:EF:99:53:B7:40:
        2C:95:B8:79:AA:FE:D4:52:AB:29:74:7E:42:EC:39:1E:
        A2:6A:16:E6:59:BB:24:68:D8:00:80:43:10:87:80:6B: 0x010001
    - X509v3 extensions
      - authorityInfoAccess
        OCSP: http://ocsp.verisign.com
      - basicConstraints
        true
        nil
      - crlDistributionPoints: http://crl.verisign.com/tss-ca.crl
      - extendedKeyUsage: true, timeStamping
      - keyUsage: true, 0xc0
      - subjectAltName
        CN: TSA2048-1-54
  - RSA-SHA1:
```
87 78 70 da 4e 52 01 20  5b e0 79 c9 82 30 c4 fd  |.xp.NR. [.y..0..|
b9 19 96 bd 91 00 c3 bd  cd cd c6 f4 0e d8 ff f9  |................|
4d c0 33 62 30 11 c5 f5  74 1b d4 92 de 5f 9c 20  |M.3b0...t...._. |
13 b1 7c 45 be 50 cd 83  e7 80 17 83 a7 27 93 67  |..|E.P.......'.g|
13 46 fb ca b8 98 41 03  cc 9b 51 5b 05 8b 7f a8  |.F....A...Q[....|
6f f3 1b 50 1b 24 2e f2  69 8d 6c 22 f7 bb ca 16  |o..P.$..i.l"....|
95 ed 0c 74 c0 68 77 d9  eb 99 62 87 c1 73 90 f8  |...t.hw...b..s..|
89 74 7a 23 ab a3 98 7b  97 b1 f7 8f 29 71 4d 2e  |.tz#...{....)qM.|
75 1b 48 41 da f0 b5 0d  20 54 d6 77 a0 97 82 63  |u.HA.... T.w...c|
69 fd 09 cf 8a f0 75 bb  09 9b d9 f9 11 55 26 9a  |i.....u......U&.|
61 32 be 7a 02 b0 7b 86  be a2 c3 8b 22 2c 78 d1  |a2.z..{.....",x.|
35 76 bc 92 73 5c f9 b9  e6 4c 15 0a 23 cc e4 d2  |5v..s\...L..#...|
d4 34 2e 49 40 15 3c 0f  60 7a 24 c6 a5 66 ef 96  |.4.I@.<.`z$..f..|
cf 70 eb 3e e7 f4 0d 7e  dc d1 7c a3 76 71 69 c1  |.p.>...~..|.vqi.|
9c 4f 47 30 35 21 b1 a2  af 1a 62 3c 2b d9 8e aa  |.OG05!....b<+...|
2a 07 7b d8 18 b3 5c 7b  e2 9d a5 6f fe 3c 89 ad  |*.{...\{...o.<..|
```
- Certificate #2
  - 2
    - 41:91:A1:5A:39:78:DF:CF:49:65:66:38:1D:4C:75:C2
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - O: VeriSign, Inc.
      - OU: Class 3 Public Primary Certification Authority
    - 2004-07-16 00:00:00 UTC: 2014-07-15 23:59:59 UTC
    - Subject
      - C: US
      - O: VeriSign, Inc.
      - OU: VeriSign Trust Network
      - OU: Terms of use at https://www.verisign.com/rpa (c)04
      - CN: VeriSign Class 3 Code Signing 2004 CA
    - #5
      - rsaEncryption: nil
      - BE:BC:EE:BC:7E:EF:83:EB:E0:37:4F:FB:03:10:38:BE:
        08:D2:8C:7D:9D:FA:92:7F:19:0C:C2:6B:EE:42:52:8C:
        DE:D3:1C:48:13:25:EA:C1:63:7A:F9:51:65:EE:D3:AA:
        3B:F5:F0:94:9C:2B:FB:F2:66:D4:24:DA:F7:F5:9F:6E:
        19:39:36:BC:D0:A3:76:08:1E:22:27:24:6C:38:91:27:
        E2:84:49:AE:1B:8A:A1:FD:25:82:2C:10:30:E8:71:AB:
        28:E8:77:4A:51:F1:EC:CD:F8:F0:54:D4:6F:C0:E3:6D:
        0A:8F:D9:D8:64:8D:63:B2:2D:4E:27:F6:85:0E:FE:6D:
        E3:29:99:E2:85:47:7C:2D:86:7F:E8:57:8F:AD:67:C2:
        33:32:91:13:20:FC:A9:23:14:9A:6D:C2:84:4B:76:68:
        04:D5:71:2C:5D:21:FA:88:0D:26:FD:1F:2D:91:2B:E7:
        01:55:4D:F2:6D:35:28:82:DF:D9:6B:5C:B6:D6:D9:AA:
        81:FD:5F:CD:83:BA:63:9D:D0:22:FC:A9:3B:42:69:B2:
        8E:3A:B5:BC:B4:9E:0F:5E:C4:EA:2C:82:8B:28:FD:53:
        08:96:DD:B5:01:20:D1:F9:A5:18:E7:C0:EE:51:70:37:
        E1:B6:05:48:52:48:6F:38:EA:C3:E8:6C:7B:44:84:BB: 0x010001
    - X509v3 extensions
      - basicConstraints
        true
        true: 0
      - certificatePolicies
        2.16.840.1.113733.1.7.23.3
        id-qt-cps: https://www.verisign.com/rpa
      - crlDistributionPoints: http://crl.verisign.com/pca3.crl
      - extendedKeyUsage
        clientAuth: codeSigning
      - keyUsage: true, 6
      - nsCertType: 1
      - subjectAltName
        CN: Class3CA2048-1-43
      - subjectKeyIdentifier:
        08 f5 51 e8 fb fe 3d 3d 64 36 7c 68 cf 5b 78 a8 |..Q...==d6|h.[x.| df b9 c5 37 |...7 |
      - authorityKeyIdentifier
        unnamed
        #0
        C: US
        O: VeriSign, Inc.
        OU: Class 3 Public Primary Certification Authority
        70 ba e4 1d 10 d9 29 34 b6 38 ca 7b 03 cc ba bf |p.....)4.8.{....|
  - RSA-SHA1:
```
ae 3a 17 b8 4a 7b 55 fa  64 55 ec 40 a4 ed 49 41  |.:..J{U.dU.@..IA|
90 99 9c 89 bc af 2e 1d  ca 78 23 f9 1c 19 0f 7f  |.........x#.....|
eb 68 bc 32 d9 88 38 de  dc 3f d3 89 b4 3f b1 82  |.h.2..8..?...?..|
96 f1 a4 5a ba ed 2e 26  d3 de 7c 01 6e 00 0a 00  |...Z...&..|.n...|
a4 06 92 11 48 09 40 f9  1c 18 79 67 23 24 e0 bb  |....H.@...yg#$..|
d5 e1 50 ae 1b f5 0e dd  e0 2e 81 cd 80 a3 6c 52  |..P...........lR|
4f 91 75 55 8a ba 22 f2  d2 ea 41 75 88 2f 63 55  |O.uU.."...Au./cU|
7d 1e 54 5a 95 59 ca d9  34 81 c0 5f 5e f6 7a b5  |}.TZ.Y..4.._^.z.|
```
- Certificate #3
  - 2
    - 18:A6:86:A1:22:90:59:01:7A:67:21:36:AC:2E:72:65
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - O: VeriSign, Inc.
      - OU: VeriSign Trust Network
      - OU: Terms of use at https://www.verisign.com/rpa (c)04
      - CN: VeriSign Class 3 Code Signing 2004 CA
    - 2006-12-15 00:00:00 UTC: 2010-01-10 23:59:59 UTC
    - Subject
      - C: US
      - ST: Texas
      - L: Round Rock
      - O: Dell Inc.
      - OU: Digital ID Class 3 - Microsoft Software Validation v2
      - CN: Dell Inc.
    - #5
      - rsaEncryption: nil
      - BF:7D:A2:29:49:D1:89:D0:80:B7:52:E0:64:3E:71:01:
        A4:D6:EF:A2:4B:FF:48:85:3E:38:46:A9:AE:46:34:7C:
        DE:BA:FF:96:64:2C:89:DB:F0:AA:47:7C:DC:CA:40:79:
        53:B1:90:B9:44:29:1C:99:19:8A:18:20:A6:83:94:30:
        4B:57:E9:57:1F:2A:A8:66:04:D4:6C:15:EB:31:BA:46:
        8A:FD:82:69:D3:DE:F2:65:25:6C:AC:8D:47:B1:95:44:
        B3:05:9A:C0:05:FC:54:30:79:8A:C3:20:97:A9:17:17:
        E3:65:9A:0E:59:D5:71:A7:82:8C:97:56:19:83:C8:0D: 0x010001
    - X509v3 extensions
      - basicConstraints
        nil
      - keyUsage: true, 0x80
      - crlDistributionPoints: http://CSC3-2004-crl.verisign.com/CSC3-2004.crl
      - certificatePolicies
        2.16.840.1.113733.1.7.23.3
        id-qt-cps: https://www.verisign.com/rpa
      - extendedKeyUsage: codeSigning
      - authorityInfoAccess
        #0
        OCSP: http://ocsp.verisign.com
        caIssuers: http://CSC3-2004-aia.verisign.com/CSC3-2004-aia.cer
      - authorityKeyIdentifier:
        08 f5 51 e8 fb fe 3d 3d 64 36 7c 68 cf 5b 78 a8 |..Q...==d6|h.[x.| df b9 c5 37 |...7 |
      - nsCertType: 0x10
      - 1.3.6.1.4.1.311.2.1.27
        false: true
  - RSA-SHA1:
```
96 4a 90 18 9b d6 c0 08  96 0e 4a ae 75 cd f7 c5  |.J........J.u...|
f7 63 b0 e0 4e 89 21 99  5b b7 bb 78 98 29 7c 7d  |.c..N.!.[..x.)|}|
4c 84 08 2c c6 c3 24 d5  a0 cc 60 c7 7f 72 cc 04  |L..,..$...`..r..|
c7 78 24 16 f1 3b 04 25  4e 96 17 96 da b4 0b 7b  |.x$..;.%N......{|
57 26 a1 8f 4f 1a 1d 6a  02 f1 87 94 75 8b bb c4  |W&..O..j....u...|
f8 66 4c ef 6c c5 05 a5  36 7a 8e a9 99 b3 c2 96  |.fL.l...6z......|
00 6d c8 33 6d 03 d7 1b  fb b5 f8 28 d1 46 46 a3  |.m.3m......(.FF.|
97 14 65 79 09 19 0d 59  27 bb fa 55 ae c7 6a ad  |..ey...Y'..U..j.|
25 fe 4e c1 c5 d7 3b 37  ca ec 57 6d be 1a 40 d1  |%.N...;7..Wm..@.|
3e 91 50 9e 31 6d c5 12  d6 b0 7b 01 c0 8b 7f 59  |>.P.1m....{....Y|
f8 db d0 d6 5f ca c2 46  b5 45 a9 15 27 a2 e8 9c  |...._..F.E..'...|
0d 3a 66 03 ef 49 ae 2d  53 73 f6 40 ba 93 0f ca  |.:f..I.-Ss.@....|
c4 84 8a e1 d1 82 0d 3b  80 86 6f 43 35 eb 90 72  |.......;..oC5..r|
ec e3 ab 41 e8 0d 9d 9b  13 38 d8 c0 e0 26 a1 1d  |...A.....8...&..|
90 e9 63 96 b9 2b f4 e4  fd f5 a1 61 a5 26 f7 89  |..c..+.....a.&..|
6a 0b 77 35 79 76 01 09  16 e4 55 d6 bb 88 8d 67  |j.w5yv....U....g|
```
- Certificate #4
  - 2
    - 61:0C:12:06:00:00:00:00:00:1B
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - ST: Washington
      - L: Redmond
      - O: Microsoft Corporation
      - CN: Microsoft Code Verification Root
    - 2006-05-23 17:01:29 UTC: 2016-05-23 17:11:29 UTC
    - Subject
      - C: US
      - O: VeriSign, Inc.
      - OU: Class 3 Public Primary Certification Authority
    - #5
      - rsaEncryption: nil
      - C9:5C:59:9E:F2:1B:8A:01:14:B4:10:DF:04:40:DB:E3:
        57:AF:6A:45:40:8F:84:0C:0B:D1:33:D9:D9:11:CF:EE:
        02:58:1F:25:F7:2A:A8:44:05:AA:EC:03:1F:78:7F:9E:
        93:B9:9A:00:AA:23:7D:D6:AC:85:A2:63:45:C7:72:27:
        CC:F4:4C:C6:75:71:D2:39:EF:4F:42:F0:75:DF:0A:90:
        C6:8E:20:6F:98:0F:F8:AC:23:5F:70:29:36:A4:C9:86:
        E7:B1:9A:20:CB:53:A5:85:E7:3D:BE:7D:9A:FE:24:45:
        33:DC:76:15:ED:0F:A2:71:64:4C:65:2E:81:68:45:A7: 0x010001
    - #6
      - certificatePolicies: anyPolicy
      - 1.3.6.1.4.1.311.21.7
        1.3.6.1.4.1.311.21.8.3692315854.1256661383.1690418588.4201632533.1.25: 0x6E, 0
      - keyUsage: 0x86
      - basicConstraints: true, true
      - subjectKeyIdentifier:
        e2 7f 7b d8 77 d5 df 9e 0a 3f 9e b4 cb 0e 2e a9 |..{.w....?......| ef db 69 77 |..iw |
      - 1.3.6.1.4.1.311.20.2:
        00 43 00 72 00 6f 00 73 00 73 00 43 00 41 |.C.r.o.s.s.C.A |
      - authorityKeyIdentifier:
        62 fb 0a 21 5b 7f 43 6e 11 da 09 54 50 6b f5 d2 |b..![.Cn...TPk..| 96 71 f1 9e |.q.. |
      - crlDistributionPoints: http://crl.microsoft.com/pki/crl/products/MicrosoftCodeVerifRoot.crl
  - RSA-SHA1:
```
01 e4 46 b3 3b 45 7f 75  13 87 7e 5f 43 de 46 8e  |..F.;E.u..~_C.F.|
cb 8a bd b6 47 41 bc cc  cc 74 91 d8 ce 39 51 95  |....GA...t...9Q.|
a4 a6 b5 47 c0 ef d2 da  7b 8f 57 11 f4 32 8c 7c  |...G....{.W..2.||
cd 3f ee 42 da 04 21 4a  f7 c8 43 88 4a 6f 5c ca  |.?.B..!J..C.Jo\.|
14 fc 4b d1 9f 4c bd d4  55 6e cc 02 be 0d a6 88  |..K..L..Un......|
8f 86 09 ba a4 25 bd e8  b0 f0 fa 8b 71 4e 67 b0  |.....%......qNg.|
cb 82 a8 d7 8e 55 f7 37  eb f0 3e 88 ef e4 e0 8a  |.....U.7..>.....|
fd 1c 6e 2e 61 41 48 75  b4 b0 2c 1d 28 d8 49 0f  |..n.aAHu..,.(.I.|
d7 15 f0 24 73 25 3c cc  88 0c de 28 4c 65 54 fe  |...$s%<....(LeT.|
5e ae 8c ea 19 ad 2c 51  b2 9b 3a 47 f5 3c 80 35  |^.....,Q..:G.<.5|
01 17 e2 49 87 d6 54 4a  fb 4b ab 07 bc bf 7d 79  |...I..TJ.K....}y|
cf bf 35 00 5c bb 9e cf  fc 82 89 1b 39 a0 51 97  |..5.\.......9.Q.|
b6 de c0 b3 07 ff 44 96  44 c0 34 2a 19 5c ab ee  |......D.D.4*.\..|
f0 3b ec 29 4e b5 13 c5  37 85 7e 75 d5 b4 d6 0d  |.;.)N...7.~u....|
06 6e b5 d2 6c 23 71 67  ea f1 71 8e af 4e 74 aa  |.n..l#qg..q..Nt.|
0c f9 ec bf 4c 58 fa 5e  90 9b 6d 39 cb 86 88 3f  |....LX.^..m9...?|
8b 1c a8 16 32 d5 fe 6d  b9 f1 f8 b3 ea d7 91 f6  |....2..m........|
36 47 78 c0 27 2a 15 c7  68 d6 f4 c5 fc 4f 4e c8  |6Gx.'*..h....ON.|
67 3f 10 2d 40 9f f1 1e  c9 61 48 e7 a7 03 fc 31  |g?.-@....aH....1|
73 0c f0 46 88 fe 56 da  49 29 95 ef 09 da a3 e5  |s..F..V.I)......|
be ef 60 ec d9 54 a0 59  9c 28 bd 54 ef 66 15 7f  |..`..T.Y.(.T.f..|
87 4c 84 db a6 0e 95 67  2e 51 7b 34 39 b6 41 c2  |.L.....g.Q{49.A.|
8c 84 68 26 dc 24 02 09  e7 81 8e 0a 97 2d ef ee  |..h&.$.......-..|
a7 b9 98 a6 0f 81 8d c7  10 b5 e1 ed 98 2f 48 6f  |............./Ho|
53 85 49 64 78 9b ec 5d  ac 97 0b 55 26 c3 ef ba  |S.Idx..]...U&...|
8d c8 d1 a5 2f 5a 7f 93  6b 61 1a 33 9b 18 b8 a2  |..../Z..ka.3....|
62 10 de 24 ea 76 e1 2f  43 eb ec dd 7c 12 34 24  |b..$.v./C...|.4$|
89 da 28 55 ae e5 75 4e  31 2b 67 63 b6 a8 d7 ab  |..(U..uN1+gc....|
73 0a 03 ce c5 ea 59 3f  c7 eb 2a 45 ae a8 62 5b  |s.....Y?..*E..b[|
2f 00 99 39 ab b4 5f 73  c3 08 ec 80 11 8f 47 0e  |/..9.._s......G.|
8f 2a 13 43 e1 91 06 62  55 bb ff ba 3d a9 a9 3d  |.*.C...bU...=..=|
26 0f ae ca 7d 62 8b 15  55 89 d6 94 34 4d d6 65  |&...}b..U...4M.e|
```

Signer

1
unnamed
- #0
  - C: US
  - O: VeriSign, Inc.
  - OU: VeriSign Trust Network
  - OU: Terms of use at https://www.verisign.com/rpa (c)04
  - CN: VeriSign Class 3 Code Signing 2004 CA
- 18:A6:86:A1:22:90:59:01:7A:67:21:36:AC:2E:72:65
SHA1: nil

1.3.6.1.4.1.311.2.1.12
- nil
contentType: 1.3.6.1.4.1.311.2.1.4
1.3.6.1.4.1.311.2.1.11: msCodeInd

messageDigest:

0e 10 ec 33 27 ff dc 0e  c3 80 5b 6d d1 d8 ed 28  |...3'.....[m...(|
4f e1 a5 dd                                       |O...            |

rsaEncryption:

97 b7 dd b7 90 34 df e7  d0 01 37 43 bf 3d db b3  |.....4....7C.=..|
14 a2 2d a2 e0 a6 40 cd  1e 76 49 0a 3e 21 14 5a  |..-...@..vI.>!.Z|
c8 c0 0c fe 43 e8 0d e7  99 ba 6a 61 cf 6c a6 15  |....C.....ja.l..|
9b 5e a3 30 18 95 eb a2  1c 3d 01 dc 90 4c 19 f7  |.^.0.....=...L..|
ab 49 52 e2 bb 02 54 27  83 88 ee 8c 6d c2 b6 05  |.IR...T'....m...|
a4 87 45 c5 a8 c3 1a 26  58 c5 1a c0 c2 6a 30 62  |..E....&X....j0b|
55 9f 74 fe d2 b6 c4 ab  96 68 f9 22 1a 25 0f e7  |U.t......h.".%..|
83 a7 9e 51 e0 5d 22 14  5c 1f 34 22 4a 5c 22 c7  |...Q.]".\.4"J\".|

countersignature

unnamed
- #0
  - C: US
  - O: VeriSign, Inc.
  - CN: VeriSign Time Stamping Services CA
- 0D:E9:2B:F0:D4:D8:29:88:18:32:05:09:5E:9A:76:88
MD5: nil
#2
- contentType: pkcs7-data
- signingTime: 2007-05-08 18:55:46 UTC
- messageDigest:
```
cb 12 53 6a 75 51 14 d0  a3 4e 27 93 70 0d 52 4c  |..SjuQ...N'.p.RL|
```

rsaEncryption:

23 e2 9f cf 1f 92 c5 b9  1a 06 ff 2f 19 90 b2 28  |#........../...(|
97 43 13 e2 b6 2a 05 46  ec 4f d6 36 03 97 95 17  |.C...*.F.O.6....|
ca 42 38 18 2c 7a 73 4e  fa df b0 df 6a d3 f6 b8  |.B8.,zsN....j...|
1d 49 58 6f 27 6e 36 f6  71 99 e1 b9 5d 75 79 72  |.IXo'n6.q...]uyr|
ed 59 12 0d cd 80 15 e5  0f 36 be 0d fd 08 69 d8  |.Y.......6....i.|
cb 0f d9 7b 3b 61 fb eb  47 e8 ed 7f 17 fb 70 46  |...{;a..G.....pF|
f5 7d 8b 9a c3 72 22 d7  54 bb 84 d3 c9 a4 34 dc  |.}...r".T.....4.|
42 8a a7 f8 b5 56 87 61  3d 32 e6 3e ae 0b dc 1a  |B....V.a=2.>....|
43 bf f2 f0 80 82 f9 54  c1 74 0d ce 12 2f a9 49  |C......T.t.../.I|
83 7c 75 74 24 0d d7 58  af ee af 08 a4 21 13 84  |.|ut$..X.....!..|
92 9e c0 ee 1d fe 6b fd  63 be 15 44 9b 13 02 45  |......k.c..D...E|
49 d6 b7 ce 22 cf 48 a5  aa 1d ef 45 4d c1 8b 59  |I...".H....EM..Y|
62 ac 1e f1 1a 48 7d 99  bf 76 85 2b 90 65 94 a3  |b....H}..v.+.e..|
27 8c 70 9c e1 6d d5 c3  b6 fc c8 0f b0 ff 5e 3a  |'.p..m........^:|
99 7c 6e 54 c2 94 4f 11  69 36 62 84 b3 97 fd ff  |.|nT..O.i6b.....|
04 4d ad 11 09 e0 18 08  b9 2c b2 89 8b c3 e7 3e  |.M.......,.....>|

show previews

offset	size	type	comment
15c1	15	HTM		#
15d0	10024	BIN	overlay data past EOF	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

O755-A22.exe_PAYLOAD_110.exe