psiphon3.exe

info
MZ
PE
resources
strings
imports
foremost
signature
hexdump
disasm
log
discuss
donate

filename	psiphon3.exe
size	7396464 (0x70dc70)
md5	a8265777a7bb6749e6b7cd4cffe51ee2

type	PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x120

Rich Header

lib id	version	times used
241	40116	25
243	40116	172
242	40116	41
259	24123	25
261	24123	123
260	24123	38
131	30729	12
147	30729	31
1	0	395
260	22816	22
261	24215	8
265	24215	71
255	24210	1
151	0	1
258	24215	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	3
TimeDateStamp	0x5edebe5d
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x102
Magic	0x10b
LinkerVersion	14.0
SizeOfCode	0x6f6000
SizeOfInitializedData	0x16000
SizeOfUninitializedData	0xdc9000
AddressOfEntryPoint	0x14bfa50
BaseOfCode	0xdca000
BaseOfData	0x14c0000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	5.1
ImageVersion	0.0
SubsystemVersion	5.1
Reserved1	0
SizeOfImage	0x14d6000
SizeOfHeaders	0x1000
CheckSum	0x717312
Subsystem	2
DllCharacteristics	0x8140
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

UPX Modified >> *$igBy Ahmed18

This file is packed with UPX. Analysis will be incomplete without unpacking.
We can unpack it for you.

»» Analyze unpacked file

Sections

name	va	vsize	raw size	flags
UPX0	0x1000	0xdc9000	0	RWX UDATA
UPX1	0xdca000	0x6f6000	0x6f5e00	RWX IDATA
.rsrc	0x14c0000	0x16000	0x15e00	RW- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x14d58b4	0x374
RESOURCE	0x14c0000	0x158b4
EXCEPTION	0	0
SECURITY	0x70c000	0x1c70
BASERELOC	0x14d5c28	0x18
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0x14bfc3c	0x18
LOAD_CONFIG	0x14bfc5c	0x5c
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0	0
CLR_Header	0	0

TLS

raw start	raw end	index	callbks	zero fill	flags
0x18bfc54	0x18bfc5c	0x6d43d0	0	0	0x300000

show previews

type	name	size
ICON	#1	296
ICON	#2	744
ICON	#3	1384
ICON	#4	2216
ICON	#5	3752
ICON	#6	1128
ICON	#7	4264
ICON	#8	9640
ICON	#9	19543
ICON	#10	41745
ICON	#11	296
ICON	#12	744
ICON	#13	1384
ICON	#14	2216
ICON	#15	3752
ICON	#16	1128
ICON	#17	4264
ICON	#18	9640
ICON	#19	18585
ICON	#20	40306
ICON	#21	296
ICON	#22	744
ICON	#23	1384
ICON	#24	2216
ICON	#25	3752
ICON	#26	1128
ICON	#27	4264
ICON	#28	9640
ICON	#29	19543
ICON	#30	41745
STRING	#7	66
RCDATA	COUNTRY_DIALING_CODES.JSON	28956
RCDATA	#131	15286896
RCDATA	#132	285808
GROUP_ICON	#133	146
GROUP_ICON	#146	146
GROUP_ICON	#147	146
HTML	BANNER.PNG	16484
HTML	FLAGS32.PNG	52207
HTML	FLAG_UNKNOWN_32.PNG	939
HTML	FLAG_UNKNOWN_64.PNG	2374
HTML	ICOMOON.EOT	18636
HTML	LOGO-BW.PNG	4272
HTML	LOGO.PNG	4283
HTML	MAIN.HTML	2668158
HTML	PSICASH_COIN.PNG	2661
HTML	PSICASH_COIN_GREY.PNG	1528
HTML	ROCKET.PNG	5977
HTML	TURTLE.PNG	7704
MANIFEST	#1	381

lang

string

1033

be a8 97 eb 98 95 22 01  23 db 4a 89 49 84 5d 8c  |......".#.J.I.].|
48 c1 09 c3 6e 80 10 0c  02 47 b0 80 58 96 49 48  |H...n....G..X.IH|
18 68 a0 21 22 0c 34 02  30 fb ef 62 88 04 46 bb  |.h.!".4.0..b..F.|
31 28 b0 26 29 35 d5 21  e3 f0 89 d8 1f 0b 48 91  |1(.&)5.!......H.|
8d a5                                             |..              |

module_name	ord	function_name
KERNEL32.DLL		LoadLibraryA
KERNEL32.DLL		GetProcAddress
KERNEL32.DLL		VirtualProtect
KERNEL32.DLL		VirtualAlloc
KERNEL32.DLL		VirtualFree
KERNEL32.DLL		ExitProcess
ADVAPI32.dll		RegCloseKey
COMCTL32.dll	17
CRYPT32.dll		CryptBinaryToStringA
GDI32.dll		BitBlt
ole32.dll		CoCreateGuid
OLEAUT32.dll	6
RASAPI32.dll		RasDialW
SHELL32.dll		ShellExecuteW
SHLWAPI.dll		StrStrIA
USER32.dll		GetDCEx
VERSION.dll		VerQueryValueW
WINHTTP.dll		WinHttpOpen
WININET.dll		InternetSetOptionW
WS2_32.dll	9

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert SHA2 Assured ID Code Signing CA

serial: 0A55A3071693FE880F0F6164EB93665E

Certificates (4)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:55:a3:07:16:93:fe:88:0f:0f:61:64:eb:93:66:5e
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 Assured ID Code Signing CA
        Validity
            Not Before: Jul  6 00:00:00 2017 GMT
            Not After : Oct  3 12:00:00 2020 GMT
        Subject: C=CA, ST=Ontario, L=Toronto, O=Psiphon Inc., CN=Psiphon Inc.
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:5e:c3:f0:3a:47:86:6e:e1:12:34:94:48:8a:
                    d3:36:0b:7e:aa:de:24:ff:0c:8d:81:0e:96:12:1a:
                    1d:20:9d:9a:4c:22:0f:ad:f1:2f:df:9c:fc:64:06:
                    04:a4:c3:3e:d8:8b:fc:75:c3:9e:e7:7e:85:19:23:
                    d5:07:c1:cb:73:19:c3:6a:a0:39:fb:f8:2b:22:94:
                    15:12:b3:a0:51:4a:3b:43:d4:c0:ef:9b:84:9e:7c:
                    04:45:c4:0e:dd:01:1b:22:10:c5:7a:76:0b:56:e0:
                    1e:23:27:a7:46:0c:64:c4:97:91:06:26:a3:62:d8:
                    33:34:42:5b:f1:e5:b1:95:d3:08:b5:61:03:e8:b2:
                    fd:85:3f:63:26:ca:9d:7a:23:ec:a8:1f:11:da:52:
                    bc:41:b9:d0:0b:0d:bf:d3:af:a9:07:65:ed:8d:59:
                    c9:b0:fb:70:91:4e:dd:09:9b:a6:10:43:95:af:1e:
                    44:8c:54:8d:27:7b:30:2c:9c:68:25:95:fe:08:fd:
                    79:48:1f:82:67:32:10:50:ae:bb:a1:4a:88:da:8b:
                    ed:08:f6:4f:59:dc:d8:7b:88:7d:01:ad:4d:aa:6c:
                    46:51:e0:42:e3:89:68:d4:26:f0:71:85:a3:b6:8d:
                    c3:3b:cc:3e:bc:6b:97:a1:67:13:e3:55:de:bc:0d:
                    94:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:5A:C4:B9:7B:2A:0A:A3:A5:EA:71:03:C0:60:F9:2D:F6:65:75:0E:58

            X509v3 Subject Key Identifier: 
                31:49:5B:92:6D:6B:94:59:7A:9F:2F:BD:73:32:11:54:C4:72:7A:DF
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl3.digicert.com/sha2-assured-cs-g1.crl

                Full Name:
                  URI:http://crl4.digicert.com/sha2-assured-cs-g1.crl

            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.114412.3.1
                  CPS: https://www.digicert.com/CPS
                Policy: 2.23.140.1.4.1

            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com
                CA Issuers - URI:http://cacerts.digicert.com/DigiCertSHA2AssuredIDCodeSigningCA.crt

            X509v3 Basic Constraints: critical
                CA:FALSE
    Signature Algorithm: sha256WithRSAEncryption
         7e:34:72:bd:0b:27:ad:31:b5:70:0b:77:2e:c9:0b:03:43:ec:
         3e:54:a8:ae:f5:e7:59:6c:73:76:43:05:b9:33:48:b1:75:82:
         4f:f7:1a:bd:b5:a0:aa:ed:f2:8b:03:6c:4d:57:5f:93:e7:11:
         d3:de:71:b2:ef:f6:a6:ba:1a:15:29:e1:10:d8:28:0b:1d:51:
         5e:79:cb:d0:55:c7:f3:d1:c7:d3:61:94:9a:82:c8:5b:48:3f:
         27:d8:5c:7c:0d:12:3c:6d:02:3f:d2:ae:0f:38:13:bb:00:ec:
         62:c5:c0:95:4e:89:a7:e4:4c:b0:b9:6a:8e:e9:46:21:a2:aa:
         6d:c3:01:9c:d8:90:df:3b:55:c3:ce:0a:53:77:90:77:09:1d:
         56:5c:fe:2b:7a:d5:9a:b8:a9:3e:bb:76:15:c7:ca:fb:ba:50:
         eb:7b:4a:15:22:77:4a:a6:41:65:72:de:62:36:58:3e:95:5d:
         c6:ff:2f:e1:67:0b:4a:fa:9f:0f:93:a3:72:33:2c:18:04:41:
         32:a4:b2:3d:9e:13:d4:bc:51:8c:99:01:4f:b9:ff:56:ac:e0:
         67:d3:8c:c5:5d:76:65:22:b3:c4:d7:ae:c4:2b:85:25:6a:4c:
         f9:a1:52:e8:2d:2f:d4:03:77:f7:4e:07:1c:10:53:e8:35:90:
         b4:9f:02:8b

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root CA
        Validity
            Not Before: Oct 22 12:00:00 2013 GMT
            Not After : Oct 22 12:00:00 2028 GMT
        Subject: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 Assured ID Code Signing CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:d3:b3:1c:7f:0e:11:af:67:77:07:d3:0b:31:
                    49:19:cf:d0:fb:45:99:b1:3a:db:44:f5:7f:e5:a8:
                    9d:db:32:d7:71:ea:76:9d:05:2e:b7:8f:fa:92:43:
                    c0:a5:f9:89:d4:37:19:d7:b6:aa:f0:9c:86:a5:d8:
                    25:ac:0e:79:28:3a:7e:e9:d1:67:d3:c6:fb:29:27:
                    c7:d3:7b:23:94:e4:91:23:96:90:77:82:f9:a1:84:
                    23:66:12:54:33:50:74:b1:28:26:bb:24:69:c2:c2:
                    52:f2:14:67:8a:89:45:d4:2d:a1:a3:e9:88:2c:20:
                    95:ae:1c:4a:87:08:df:0c:f5:e2:4d:60:18:be:aa:
                    c4:b2:ae:70:31:66:33:71:3e:ac:70:a2:ab:ce:7f:
                    e9:7c:cb:92:a1:e5:3b:31:1c:cf:ea:f2:0a:e4:57:
                    bb:4a:b5:e9:74:e6:2b:fe:6c:cb:7e:74:39:36:0d:
                    90:ef:e4:b5:4e:a4:a9:ea:6a:0a:ab:84:f3:ac:67:
                    4e:b5:c4:f7:8c:d1:20:25:23:eb:08:64:3e:52:96:
                    c1:f2:0f:12:f4:c5:8e:0f:c1:a2:e8:2c:51:f7:73:
                    bc:bd:85:b1:62:83:73:41:82:07:e4:38:8b:6a:73:
                    20:d0:0f:64:73:3c:9e:9f:a6:33:a9:fd:19:df:25:
                    93:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                Code Signing
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com
                CA Issuers - URI:http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl

                Full Name:
                  URI:http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl

            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.114412.0.2.4
                  CPS: https://www.digicert.com/CPS
                Policy: 2.16.840.1.114412.3

            X509v3 Subject Key Identifier: 
                5A:C4:B9:7B:2A:0A:A3:A5:EA:71:03:C0:60:F9:2D:F6:65:75:0E:58
            X509v3 Authority Key Identifier: 
                keyid:45:EB:A2:AF:F4:92:CB:82:31:2D:51:8B:A7:A7:21:9D:F3:6D:C8:0F

    Signature Algorithm: sha256WithRSAEncryption
         3e:ec:0d:5a:24:b3:f3:22:d1:15:c8:2c:7c:25:29:76:a8:1d:
         5d:1c:2d:3a:1a:c4:ef:30:61:d7:7e:0b:60:fd:c3:3d:0f:c4:
         af:8b:fd:ef:2a:df:20:55:37:b0:e1:f6:d1:92:75:0f:51:b4:
         6e:a5:8e:5a:e2:5e:24:81:4e:10:a4:ee:3f:71:8e:63:0e:13:
         4b:ad:d7:5f:44:79:f3:36:14:06:8a:f7:9c:46:4e:5c:ff:90:
         b1:1b:07:0e:91:15:fb:ba:af:b5:51:c2:8d:24:ae:24:c6:c7:
         27:2a:a1:29:28:1a:3a:71:28:02:3c:2e:91:a3:c0:25:11:e2:
         9c:14:47:a1:7a:68:68:af:9b:a7:5c:20:5c:d9:71:b1:0c:8f:
         bb:a8:f8:c5:12:68:9f:cf:40:cb:40:44:a5:13:f0:e6:64:0c:
         25:08:42:32:b2:36:8a:24:02:fe:2f:72:7e:1c:d7:49:45:96:
         e8:59:1d:e9:fa:74:64:6b:b2:eb:66:43:da:b3:b0:8c:d5:e9:
         0d:dd:f6:01:20:ce:99:31:63:3d:08:1a:18:b3:81:9b:4f:c6:
         93:10:06:fc:07:81:fa:8b:da:f9:82:49:f7:62:6e:a1:53:fa:
         12:94:18:85:2e:92:91:ea:68:6c:44:32:b2:66:a1:e7:18:a4:
         9a:64:51:ef

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID CA-1
        Validity
            Not Before: Oct 22 00:00:00 2014 GMT
            Not After : Oct 22 00:00:00 2024 GMT
        Subject: C=US, O=DigiCert, CN=DigiCert Timestamp Responder
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:64:5d:fc:7c:b3:e0:82:35:e0:e0:f6:c6:2a:
                    e6:49:75:3b:cc:6e:e0:53:a9:9f:1f:64:59:e6:7c:
                    6b:7f:6b:8c:9d:55:f8:92:e3:9e:d5:5a:63:5b:02:
                    49:50:d9:83:ce:6f:66:ee:dd:cb:85:e9:5f:a5:f9:
                    d4:87:74:88:44:3b:19:c9:e5:f5:91:9f:c6:14:39:
                    ac:24:ea:a8:4b:2c:91:89:cc:5e:28:f4:64:b6:50:
                    b7:f5:12:b3:73:96:0a:67:a3:be:61:9f:ae:f3:fd:
                    12:78:75:0e:a6:5b:14:fd:45:23:8e:86:44:55:7d:
                    18:86:05:8c:55:87:79:48:46:f7:ca:0e:8d:a7:de:
                    4e:5f:e2:a8:b6:2d:59:02:61:88:61:72:18:68:b9:
                    b8:7c:ee:e6:e7:34:2f:31:77:81:30:1f:bb:36:01:
                    8d:ef:27:e3:f7:9a:f0:4c:31:64:8d:e3:eb:fa:19:
                    87:a8:7e:cf:ec:8c:0c:36:5b:7a:c1:7a:b8:78:c7:
                    c9:06:2e:46:10:c8:8d:e8:04:60:db:bc:73:74:fa:
                    4e:d8:fe:aa:40:f1:b2:ce:70:46:83:e9:da:40:a1:
                    59:3a:d9:15:09:57:99:56:30:93:f3:c9:61:cc:d0:
                    08:cc:6b:ec:62:42:91:ac:02:c0:ef:a4:f0:89:11:
                    8f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.114412.7.1
                  CPS: https://www.digicert.com/CPS
                  User Notice:
                    Explicit Text: 
                Policy: 2.16.840.1.114412.3.21

            X509v3 Authority Key Identifier: 
                keyid:15:00:12:2B:13:98:B2:99:07:ED:1E:DF:A2:BE:57:0D:2B:67:02:CD

            X509v3 Subject Key Identifier: 
                61:5A:4D:24:B6:49:32:9D:4A:2A:79:1A:83:4B:F4:1E:89:C1:CA:7D
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl3.digicert.com/DigiCertAssuredIDCA-1.crl

                Full Name:
                  URI:http://crl4.digicert.com/DigiCertAssuredIDCA-1.crl

            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com
                CA Issuers - URI:http://cacerts.digicert.com/DigiCertAssuredIDCA-1.crt

    Signature Algorithm: sha1WithRSAEncryption
         9d:25:7e:1b:33:4d:b2:26:81:5c:9b:86:ce:23:20:0f:80:87:
         e5:88:ff:ff:b1:d4:6a:2c:31:ed:3a:17:19:71:17:cd:a9:1b:
         bc:5a:16:39:00:9d:e3:6c:84:e4:5a:40:fb:de:06:01:8c:37:
         fa:9b:b1:9d:24:7e:fe:20:a4:57:ad:5b:b7:9a:b0:60:26:ea:
         69:57:21:5d:34:2f:1f:71:b0:83:94:19:05:6b:35:90:10:a0:
         7b:97:c7:f6:3f:e7:e2:11:41:a6:bd:62:d9:f0:27:3d:38:1d:
         28:6f:3a:52:09:f0:ec:70:62:d3:62:4b:b0:e0:73:a6:92:c0:
         d3:8e:31:d8:2f:e3:6d:17:13:06:ee:e4:03:b6:14:ab:f3:8f:
         43:a7:71:9d:21:dd:14:ca:15:5d:92:41:da:f9:0f:81:d1:99:
         74:0d:26:c4:0e:7f:1b:b5:f5:a0:f1:c6:77:06:28:15:e9:d8:
         93:e5:55:16:f0:bb:0a:ab:1c:db:5c:48:27:66:c8:a3:8b:0a:
         1c:e5:95:da:ae:c4:2e:59:a0:61:dd:da:f3:6d:a2:61:e9:8a:
         0b:6d:ec:12:18:bd:f7:55:54:40:03:92:2b:6b:c2:51:c2:0a:
         48:af:b0:d4:6e:e0:f4:14:0a:3a:1b:e3:8f:3d:ca:af:6a:8d:
         7b:dc:d8:44

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root CA
        Validity
            Not Before: Nov 10 00:00:00 2006 GMT
            Not After : Nov 10 00:00:00 2021 GMT
        Subject: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID CA-1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:82:2d:99:f9:ca:c2:42:95:a5:80:73:40:70:
                    d2:9e:56:54:5c:a9:c4:d2:41:06:8f:c9:33:fc:4d:
                    45:91:5c:81:9f:ed:2c:9c:f8:16:59:df:9e:b5:24:
                    15:c2:98:b9:b4:77:49:dc:89:c4:0a:da:af:cb:5e:
                    6b:ed:ad:b0:71:31:eb:cf:3a:40:0c:46:4d:93:ec:
                    8b:7a:36:08:03:ab:0c:34:fe:18:49:82:fe:c7:c7:
                    31:48:80:7c:1e:a2:0f:92:0e:50:c9:c6:87:eb:36:
                    3f:d8:30:c3:ff:a6:f7:fb:a2:cd:6f:73:23:fe:ac:
                    56:05:90:f0:32:21:16:89:c6:70:88:f9:05:97:7d:
                    a3:c7:43:dd:02:e8:3b:3d:ed:b1:41:a3:ed:3f:be:
                    db:95:48:c4:ee:1e:b3:f2:bc:0c:2b:99:d0:c6:5d:
                    12:42:81:e1:83:6e:82:73:3f:26:4b:14:90:ae:59:
                    66:0a:c4:8d:be:d2:ce:06:ae:ad:84:6f:48:84:9b:
                    4f:40:b9:f1:4c:f2:af:98:fb:f6:ce:40:5d:5c:f6:
                    a8:f1:2f:af:ec:89:22:f2:6b:18:65:b1:c1:73:ad:
                    d7:f1:d8:cf:1e:0a:74:5c:42:b8:68:7e:b7:d5:77:
                    0a:27:56:7c:0f:62:a4:3f:32:14:60:95:fd:07:04:
                    a2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication, Code Signing, E-mail Protection, Time Stamping
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.114412.0.1.4
                  CPS: http://www.digicert.com/ssl-cps-repository.htm
                  User Notice:
                    Explicit Text: 
                Policy: 2.16.840.1.114412.3.21

            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com
                CA Issuers - URI:http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl

                Full Name:
                  URI:http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl

            X509v3 Subject Key Identifier: 
                15:00:12:2B:13:98:B2:99:07:ED:1E:DF:A2:BE:57:0D:2B:67:02:CD
            X509v3 Authority Key Identifier: 
                keyid:45:EB:A2:AF:F4:92:CB:82:31:2D:51:8B:A7:A7:21:9D:F3:6D:C8:0F

    Signature Algorithm: sha1WithRSAEncryption
         46:50:3e:c9:b7:28:24:a7:38:1d:b6:5b:29:af:52:cf:52:e9:
         31:47:ab:56:5c:7b:d5:0d:0b:41:b3:ef:ec:75:1f:74:38:f2:
         b2:5c:61:a2:9c:95:c3:50:e4:82:b9:23:d1:ba:3a:86:72:ad:
         38:78:ac:75:5d:17:17:34:72:47:85:94:56:d1:eb:bb:36:84:
         77:cc:24:a5:f3:04:19:55:a9:e7:e3:e7:ab:62:cd:fb:8b:2d:
         90:c2:c0:d2:b5:94:bd:5e:4f:b1:05:d2:0e:3d:1a:a9:14:5b:
         a6:86:31:62:a8:a8:33:e4:9b:39:a7:c4:f5:ce:1d:78:76:94:
         25:73:e4:2a:ab:cf:9c:76:4b:ed:5f:c2:4b:16:e4:4b:70:4c:
         00:89:1e:fc:c5:79:bc:4c:12:57:fe:5f:e1:1e:bc:02:5d:a8:
         fe:fb:07:38:4f:0d:c6:5d:91:b9:0f:67:45:cd:d6:83:ed:e7:
         92:0d:8d:b1:69:8c:4f:fb:59:e0:23:0f:d2:aa:ae:00:7c:ee:
         9c:42:0e:cf:91:d7:27:b7:16:ee:0f:c3:bd:7c:0a:a0:ee:2c:
         08:55:85:22:b8:eb:18:1a:4d:fc:2a:21:ad:49:31:83:47:95:
         77:71:dc:b1:1b:4b:4b:1c:10:9c:77:14:c1:9d:4f:2f:5a:95:
         08:29:10:26

pkcs7-signedData

SHA1: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15

00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |

SHA1

4c 73 8d 5e b9 a9 0b c8 37 84 1d 45 78 a1 d4 0d |Ls.^....7..Ex...| de d2 6b 04 |..k. |

Certificates

Certificate #0
- 2
  - 0A:55:A3:07:16:93:FE:88:0F:0F:61:64:EB:93:66:5E
  - RSA-SHA256: nil
  - Issuer
    - C: US
    - O: DigiCert Inc
    - OU: www.digicert.com
    - CN: DigiCert SHA2 Assured ID Code Signing CA
  - 2017-07-06 00:00:00 UTC: 2020-10-03 12:00:00 UTC
  - Subject
    - C: CA
    - ST: Ontario
    - L: Toronto
    - O: Psiphon Inc.
    - CN: Psiphon Inc.
  - #5
    - rsaEncryption: nil
    - E7:5E:C3:F0:3A:47:86:6E:E1:12:34:94:48:8A:D3:36:
      0B:7E:AA:DE:24:FF:0C:8D:81:0E:96:12:1A:1D:20:9D:
      9A:4C:22:0F:AD:F1:2F:DF:9C:FC:64:06:04:A4:C3:3E:
      D8:8B:FC:75:C3:9E:E7:7E:85:19:23:D5:07:C1:CB:73:
      19:C3:6A:A0:39:FB:F8:2B:22:94:15:12:B3:A0:51:4A:
      3B:43:D4:C0:EF:9B:84:9E:7C:04:45:C4:0E:DD:01:1B:
      22:10:C5:7A:76:0B:56:E0:1E:23:27:A7:46:0C:64:C4:
      97:91:06:26:A3:62:D8:33:34:42:5B:F1:E5:B1:95:D3:
      08:B5:61:03:E8:B2:FD:85:3F:63:26:CA:9D:7A:23:EC:
      A8:1F:11:DA:52:BC:41:B9:D0:0B:0D:BF:D3:AF:A9:07:
      65:ED:8D:59:C9:B0:FB:70:91:4E:DD:09:9B:A6:10:43:
      95:AF:1E:44:8C:54:8D:27:7B:30:2C:9C:68:25:95:FE:
      08:FD:79:48:1F:82:67:32:10:50:AE:BB:A1:4A:88:DA:
      8B:ED:08:F6:4F:59:DC:D8:7B:88:7D:01:AD:4D:AA:6C:
      46:51:E0:42:E3:89:68:D4:26:F0:71:85:A3:B6:8D:C3:
      3B:CC:3E:BC:6B:97:A1:67:13:E3:55:DE:BC:0D:94:5D: 0x010001
  - #6
    - authorityKeyIdentifier:
```
5a c4 b9 7b 2a 0a a3 a5  ea 71 03 c0 60 f9 2d f6  |Z..{*....q..`.-.|
65 75 0e 58                                       |eu.X            |
```
    - subjectKeyIdentifier:
```
31 49 5b 92 6d 6b 94 59  7a 9f 2f bd 73 32 11 54  |1I[.mk.Yz./.s2.T|
c4 72 7a df                                       |.rz.            |
```
    - keyUsage: true, 0x80
    - extendedKeyUsage: codeSigning
    - crlDistributionPoints
      - http://crl3.digicert.com/sha2-assured-cs-g1.crl: http://crl4.digicert.com/sha2-assured-cs-g1.crl
    - certificatePolicies
      - #0
        2.16.840.1.114412.3.1
        id-qt-cps: https://www.digicert.com/CPS
        2.23.140.1.4.1
    - authorityInfoAccess
      - #0
        OCSP: http://ocsp.digicert.com
        caIssuers: http://cacerts.digicert.com/DigiCertSHA2AssuredIDCodeSigningCA.crt
    - basicConstraints
      - true
      - nil
- RSA-SHA256:
```
7e 34 72 bd 0b 27 ad 31  b5 70 0b 77 2e c9 0b 03  |~4r..'.1.p.w....|
43 ec 3e 54 a8 ae f5 e7  59 6c 73 76 43 05 b9 33  |C.>T....YlsvC..3|
48 b1 75 82 4f f7 1a bd  b5 a0 aa ed f2 8b 03 6c  |H.u.O..........l|
4d 57 5f 93 e7 11 d3 de  71 b2 ef f6 a6 ba 1a 15  |MW_.....q.......|
29 e1 10 d8 28 0b 1d 51  5e 79 cb d0 55 c7 f3 d1  |)...(..Q^y..U...|
c7 d3 61 94 9a 82 c8 5b  48 3f 27 d8 5c 7c 0d 12  |..a....[H?'.\|..|
3c 6d 02 3f d2 ae 0f 38  13 bb 00 ec 62 c5 c0 95  |.v....|
ba 50 eb 7b 4a 15 22 77  4a a6 41 65 72 de 62 36  |.P.{J."wJ.Aer.b6|
58 3e 95 5d c6 ff 2f e1  67 0b 4a fa 9f 0f 93 a3  |X>.]../.g.J.....|
72 33 2c 18 04 41 32 a4  b2 3d 9e 13 d4 bc 51 8c  |r3,..A2..=....Q.|
99 01 4f b9 ff 56 ac e0  67 d3 8c c5 5d 76 65 22  |..O..V..g...]ve"|
b3 c4 d7 ae c4 2b 85 25  6a 4c f9 a1 52 e8 2d 2f  |.....+.%jL..R.-/|
d4 03 77 f7 4e 07 1c 10  53 e8 35 90 b4 9f 02 8b  |..w.N...S.5.....|
```
Certificate #1
- 2
  - 04:09:18:1B:5F:D5:BB:66:75:53:43:B5:6F:95:50:08
  - RSA-SHA256: nil
  - Issuer
    - C: US
    - O: DigiCert Inc
    - OU: www.digicert.com
    - CN: DigiCert Assured ID Root CA
  - 2013-10-22 12:00:00 UTC: 2028-10-22 12:00:00 UTC
  - Subject
    - C: US
    - O: DigiCert Inc
    - OU: www.digicert.com
    - CN: DigiCert SHA2 Assured ID Code Signing CA
  - #5
    - rsaEncryption: nil
    - F8:D3:B3:1C:7F:0E:11:AF:67:77:07:D3:0B:31:49:19:
      CF:D0:FB:45:99:B1:3A:DB:44:F5:7F:E5:A8:9D:DB:32:
      D7:71:EA:76:9D:05:2E:B7:8F:FA:92:43:C0:A5:F9:89:
      D4:37:19:D7:B6:AA:F0:9C:86:A5:D8:25:AC:0E:79:28:
      3A:7E:E9:D1:67:D3:C6:FB:29:27:C7:D3:7B:23:94:E4:
      91:23:96:90:77:82:F9:A1:84:23:66:12:54:33:50:74:
      B1:28:26:BB:24:69:C2:C2:52:F2:14:67:8A:89:45:D4:
      2D:A1:A3:E9:88:2C:20:95:AE:1C:4A:87:08:DF:0C:F5:
      E2:4D:60:18:BE:AA:C4:B2:AE:70:31:66:33:71:3E:AC:
      70:A2:AB:CE:7F:E9:7C:CB:92:A1:E5:3B:31:1C:CF:EA:
      F2:0A:E4:57:BB:4A:B5:E9:74:E6:2B:FE:6C:CB:7E:74:
      39:36:0D:90:EF:E4:B5:4E:A4:A9:EA:6A:0A:AB:84:F3:
      AC:67:4E:B5:C4:F7:8C:D1:20:25:23:EB:08:64:3E:52:
      96:C1:F2:0F:12:F4:C5:8E:0F:C1:A2:E8:2C:51:F7:73:
      BC:BD:85:B1:62:83:73:41:82:07:E4:38:8B:6A:73:20:
      D0:0F:64:73:3C:9E:9F:A6:33:A9:FD:19:DF:25:93:D1: 0x010001
  - X509v3 extensions
    - basicConstraints
      - true
      - true: 0
    - keyUsage: true, 0x86
    - extendedKeyUsage: codeSigning
    - authorityInfoAccess
      - #0
        OCSP: http://ocsp.digicert.com
        caIssuers: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt
    - crlDistributionPoints
      - http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl
    - certificatePolicies
      - #0
        2.16.840.1.114412.0.2.4
        id-qt-cps: https://www.digicert.com/CPS
        2.16.840.1.114412.3
    - subjectKeyIdentifier:
```
5a c4 b9 7b 2a 0a a3 a5  ea 71 03 c0 60 f9 2d f6  |Z..{*....q..`.-.|
65 75 0e 58                                       |eu.X            |
```
    - authorityKeyIdentifier:
```
45 eb a2 af f4 92 cb 82  31 2d 51 8b a7 a7 21 9d  |E.......1-Q...!.|
f3 6d c8 0f                                       |.m..            |
```
- RSA-SHA256:
```
3e ec 0d 5a 24 b3 f3 22  d1 15 c8 2c 7c 25 29 76  |>..Z$.."...,|%)v|
a8 1d 5d 1c 2d 3a 1a c4  ef 30 61 d7 7e 0b 60 fd  |..].-:...0a.~.`.|
c3 3d 0f c4 af 8b fd ef  2a df 20 55 37 b0 e1 f6  |.=......*. U7...|
d1 92 75 0f 51 b4 6e a5  8e 5a e2 5e 24 81 4e 10  |..u.Q.n..Z.^$.N.|
a4 ee 3f 71 8e 63 0e 13  4b ad d7 5f 44 79 f3 36  |..?q.c..K.._Dy.6|
14 06 8a f7 9c 46 4e 5c  ff 90 b1 1b 07 0e 91 15  |.....FN\........|
fb ba af b5 51 c2 8d 24  ae 24 c6 c7 27 2a a1 29  |....Q..$.$..'*.)|
28 1a 3a 71 28 02 3c 2e  91 a3 c0 25 11 e2 9c 14  |(.:q(.<....%....|
47 a1 7a 68 68 af 9b a7  5c 20 5c d9 71 b1 0c 8f  |G.zhh...\ \.q...|
bb a8 f8 c5 12 68 9f cf  40 cb 40 44 a5 13 f0 e6  |.....h..@.@D....|
64 0c 25 08 42 32 b2 36  8a 24 02 fe 2f 72 7e 1c  |d.%.B2.6.$../r~.|
d7 49 45 96 e8 59 1d e9  fa 74 64 6b b2 eb 66 43  |.IE..Y...tdk..fC|
da b3 b0 8c d5 e9 0d dd  f6 01 20 ce 99 31 63 3d  |.......... ..1c=|
08 1a 18 b3 81 9b 4f c6  93 10 06 fc 07 81 fa 8b  |......O.........|
da f9 82 49 f7 62 6e a1  53 fa 12 94 18 85 2e 92  |...I.bn.S.......|
91 ea 68 6c 44 32 b2 66  a1 e7 18 a4 9a 64 51 ef  |..hlD2.f.....dQ.|
```

Certificate #2

03:01:9A:02:3A:FF:58:B1:6B:D6:D5:EA:E6:17:F0:66
RSA-SHA1: nil
Issuer
- C: US
- O: DigiCert Inc
- OU: www.digicert.com
- CN: DigiCert Assured ID CA-1
2014-10-22 00:00:00 UTC: 2024-10-22 00:00:00 UTC
Subject
- C: US
- O: DigiCert
- CN: DigiCert Timestamp Responder
#5
- rsaEncryption: nil
- A3:64:5D:FC:7C:B3:E0:82:35:E0:E0:F6:C6:2A:E6:49:
  75:3B:CC:6E:E0:53:A9:9F:1F:64:59:E6:7C:6B:7F:6B:
  8C:9D:55:F8:92:E3:9E:D5:5A:63:5B:02:49:50:D9:83:
  CE:6F:66:EE:DD:CB:85:E9:5F:A5:F9:D4:87:74:88:44:
  3B:19:C9:E5:F5:91:9F:C6:14:39:AC:24:EA:A8:4B:2C:
  91:89:CC:5E:28:F4:64:B6:50:B7:F5:12:B3:73:96:0A:
  67:A3:BE:61:9F:AE:F3:FD:12:78:75:0E:A6:5B:14:FD:
  45:23:8E:86:44:55:7D:18:86:05:8C:55:87:79:48:46:
  F7:CA:0E:8D:A7:DE:4E:5F:E2:A8:B6:2D:59:02:61:88:
  61:72:18:68:B9:B8:7C:EE:E6:E7:34:2F:31:77:81:30:
  1F:BB:36:01:8D:EF:27:E3:F7:9A:F0:4C:31:64:8D:E3:
  EB:FA:19:87:A8:7E:CF:EC:8C:0C:36:5B:7A:C1:7A:B8:
  78:C7:C9:06:2E:46:10:C8:8D:E8:04:60:DB:BC:73:74:
  FA:4E:D8:FE:AA:40:F1:B2:CE:70:46:83:E9:DA:40:A1:
  59:3A:D9:15:09:57:99:56:30:93:F3:C9:61:CC:D0:08:
  CC:6B:EC:62:42:91:AC:02:C0:EF:A4:F0:89:11:8F:77: 0x010001

keyUsage: true, 0x80
basicConstraints
- true
- nil
extendedKeyUsage: true, timeStamping

certificatePolicies

2.16.840.1.114412.7.1

id-qt-cps: https://www.digicert.com/CPS

id-qt-unotice:

00 41 00 6e 00 79 00 20  00 75 00 73 00 65 00 20  |.A.n.y. .u.s.e. |
00 6f 00 66 00 20 00 74  00 68 00 69 00 73 00 20  |.o.f. .t.h.i.s. |
00 43 00 65 00 72 00 74  00 69 00 66 00 69 00 63  |.C.e.r.t.i.f.i.c|
00 61 00 74 00 65 00 20  00 63 00 6f 00 6e 00 73  |.a.t.e. .c.o.n.s|
00 74 00 69 00 74 00 75  00 74 00 65 00 73 00 20  |.t.i.t.u.t.e.s. |
00 61 00 63 00 63 00 65  00 70 00 74 00 61 00 6e  |.a.c.c.e.p.t.a.n|
00 63 00 65 00 20 00 6f  00 66 00 20 00 74 00 68  |.c.e. .o.f. .t.h|
00 65 00 20 00 44 00 69  00 67 00 69 00 43 00 65  |.e. .D.i.g.i.C.e|
00 72 00 74 00 20 00 43  00 50 00 2f 00 43 00 50  |.r.t. .C.P./.C.P|
00 53 00 20 00 61 00 6e  00 64 00 20 00 74 00 68  |.S. .a.n.d. .t.h|
00 65 00 20 00 52 00 65  00 6c 00 79 00 69 00 6e  |.e. .R.e.l.y.i.n|
00 67 00 20 00 50 00 61  00 72 00 74 00 79 00 20  |.g. .P.a.r.t.y. |
00 41 00 67 00 72 00 65  00 65 00 6d 00 65 00 6e  |.A.g.r.e.e.m.e.n|
00 74 00 20 00 77 00 68  00 69 00 63 00 68 00 20  |.t. .w.h.i.c.h. |
00 6c 00 69 00 6d 00 69  00 74 00 20 00 6c 00 69  |.l.i.m.i.t. .l.i|
00 61 00 62 00 69 00 6c  00 69 00 74 00 79 00 20  |.a.b.i.l.i.t.y. |
00 61 00 6e 00 64 00 20  00 61 00 72 00 65 00 20  |.a.n.d. .a.r.e. |
00 69 00 6e 00 63 00 6f  00 72 00 70 00 6f 00 72  |.i.n.c.o.r.p.o.r|
00 61 00 74 00 65 00 64  00 20 00 68 00 65 00 72  |.a.t.e.d. .h.e.r|
00 65 00 69 00 6e 00 20  00 62 00 79 00 20 00 72  |.e.i.n. .b.y. .r|
00 65 00 66 00 65 00 72  00 65 00 6e 00 63 00 65  |.e.f.e.r.e.n.c.e|
00 2e                                             |..              |

2.16.840.1.114412.3.21

authorityKeyIdentifier:

15 00 12 2b 13 98 b2 99  07 ed 1e df a2 be 57 0d  |...+..........W.|
2b 67 02 cd                                       |+g..            |

subjectKeyIdentifier:

61 5a 4d 24 b6 49 32 9d  4a 2a 79 1a 83 4b f4 1e  |aZM$.I2.J*y..K..|
89 c1 ca 7d                                       |...}            |

crlDistributionPoints
- http://crl3.digicert.com/DigiCertAssuredIDCA-1.crl: http://crl4.digicert.com/DigiCertAssuredIDCA-1.crl
authorityInfoAccess
- #0
  - OCSP: http://ocsp.digicert.com
  - caIssuers: http://cacerts.digicert.com/DigiCertAssuredIDCA-1.crt

RSA-SHA1:

9d 25 7e 1b 33 4d b2 26  81 5c 9b 86 ce 23 20 0f  |.%~.3M.&.\...# .|
80 87 e5 88 ff ff b1 d4  6a 2c 31 ed 3a 17 19 71  |........j,1.:..q|
17 cd a9 1b bc 5a 16 39  00 9d e3 6c 84 e4 5a 40  |.....Z.9...l..Z@|
fb de 06 01 8c 37 fa 9b  b1 9d 24 7e fe 20 a4 57  |.....7....$~. .W|
ad 5b b7 9a b0 60 26 ea  69 57 21 5d 34 2f 1f 71  |.[...`&.iW!]4/.q|
b0 83 94 19 05 6b 35 90  10 a0 7b 97 c7 f6 3f e7  |.....k5...{...?.|
e2 11 41 a6 bd 62 d9 f0  27 3d 38 1d 28 6f 3a 52  |..A..b..'=8.(o:R|
09 f0 ec 70 62 d3 62 4b  b0 e0 73 a6 92 c0 d3 8e  |...pb.bK..s.....|
31 d8 2f e3 6d 17 13 06  ee e4 03 b6 14 ab f3 8f  |1./.m...........|
43 a7 71 9d 21 dd 14 ca  15 5d 92 41 da f9 0f 81  |C.q.!....].A....|
d1 99 74 0d 26 c4 0e 7f  1b b5 f5 a0 f1 c6 77 06  |..t.&.........w.|
28 15 e9 d8 93 e5 55 16  f0 bb 0a ab 1c db 5c 48  |(.....U.......\H|
27 66 c8 a3 8b 0a 1c e5  95 da ae c4 2e 59 a0 61  |'f...........Y.a|
dd da f3 6d a2 61 e9 8a  0b 6d ec 12 18 bd f7 55  |...m.a...m.....U|
54 40 03 92 2b 6b c2 51  c2 0a 48 af b0 d4 6e e0  |T@..+k.Q..H...n.|
f4 14 0a 3a 1b e3 8f 3d  ca af 6a 8d 7b dc d8 44  |...:...=..j.{..D|

Certificate #3

06:FD:F9:03:96:03:AD:EA:00:0A:EB:3F:27:BB:BA:1B
RSA-SHA1: nil
Issuer
- C: US
- O: DigiCert Inc
- OU: www.digicert.com
- CN: DigiCert Assured ID Root CA
2006-11-10 00:00:00 UTC: 2021-11-10 00:00:00 UTC
Subject
- C: US
- O: DigiCert Inc
- OU: www.digicert.com
- CN: DigiCert Assured ID CA-1
#5
- rsaEncryption: nil
- E8:82:2D:99:F9:CA:C2:42:95:A5:80:73:40:70:D2:9E:
  56:54:5C:A9:C4:D2:41:06:8F:C9:33:FC:4D:45:91:5C:
  81:9F:ED:2C:9C:F8:16:59:DF:9E:B5:24:15:C2:98:B9:
  B4:77:49:DC:89:C4:0A:DA:AF:CB:5E:6B:ED:AD:B0:71:
  31:EB:CF:3A:40:0C:46:4D:93:EC:8B:7A:36:08:03:AB:
  0C:34:FE:18:49:82:FE:C7:C7:31:48:80:7C:1E:A2:0F:
  92:0E:50:C9:C6:87:EB:36:3F:D8:30:C3:FF:A6:F7:FB:
  A2:CD:6F:73:23:FE:AC:56:05:90:F0:32:21:16:89:C6:
  70:88:F9:05:97:7D:A3:C7:43:DD:02:E8:3B:3D:ED:B1:
  41:A3:ED:3F:BE:DB:95:48:C4:EE:1E:B3:F2:BC:0C:2B:
  99:D0:C6:5D:12:42:81:E1:83:6E:82:73:3F:26:4B:14:
  90:AE:59:66:0A:C4:8D:BE:D2:CE:06:AE:AD:84:6F:48:
  84:9B:4F:40:B9:F1:4C:F2:AF:98:FB:F6:CE:40:5D:5C:
  F6:A8:F1:2F:AF:EC:89:22:F2:6B:18:65:B1:C1:73:AD:
  D7:F1:D8:CF:1E:0A:74:5C:42:B8:68:7E:B7:D5:77:0A:
  27:56:7C:0F:62:A4:3F:32:14:60:95:FD:07:04:A2:09: 0x010001

keyUsage: true, 0x86
extendedKeyUsage
- serverAuth: clientAuth, codeSigning, emailProtection, timeStamping

certificatePolicies

2.16.840.1.114412.0.1.4

id-qt-cps: http://www.digicert.com/ssl-cps-repository.htm

id-qt-unotice:

00 41 00 6e 00 79 00 20  00 75 00 73 00 65 00 20  |.A.n.y. .u.s.e. |
00 6f 00 66 00 20 00 74  00 68 00 69 00 73 00 20  |.o.f. .t.h.i.s. |
00 43 00 65 00 72 00 74  00 69 00 66 00 69 00 63  |.C.e.r.t.i.f.i.c|
00 61 00 74 00 65 00 20  00 63 00 6f 00 6e 00 73  |.a.t.e. .c.o.n.s|
00 74 00 69 00 74 00 75  00 74 00 65 00 73 00 20  |.t.i.t.u.t.e.s. |
00 61 00 63 00 63 00 65  00 70 00 74 00 61 00 6e  |.a.c.c.e.p.t.a.n|
00 63 00 65 00 20 00 6f  00 66 00 20 00 74 00 68  |.c.e. .o.f. .t.h|
00 65 00 20 00 44 00 69  00 67 00 69 00 43 00 65  |.e. .D.i.g.i.C.e|
00 72 00 74 00 20 00 43  00 50 00 2f 00 43 00 50  |.r.t. .C.P./.C.P|
00 53 00 20 00 61 00 6e  00 64 00 20 00 74 00 68  |.S. .a.n.d. .t.h|
00 65 00 20 00 52 00 65  00 6c 00 79 00 69 00 6e  |.e. .R.e.l.y.i.n|
00 67 00 20 00 50 00 61  00 72 00 74 00 79 00 20  |.g. .P.a.r.t.y. |
00 41 00 67 00 72 00 65  00 65 00 6d 00 65 00 6e  |.A.g.r.e.e.m.e.n|
00 74 00 20 00 77 00 68  00 69 00 63 00 68 00 20  |.t. .w.h.i.c.h. |
00 6c 00 69 00 6d 00 69  00 74 00 20 00 6c 00 69  |.l.i.m.i.t. .l.i|
00 61 00 62 00 69 00 6c  00 69 00 74 00 79 00 20  |.a.b.i.l.i.t.y. |
00 61 00 6e 00 64 00 20  00 61 00 72 00 65 00 20  |.a.n.d. .a.r.e. |
00 69 00 6e 00 63 00 6f  00 72 00 70 00 6f 00 72  |.i.n.c.o.r.p.o.r|
00 61 00 74 00 65 00 64  00 20 00 68 00 65 00 72  |.a.t.e.d. .h.e.r|
00 65 00 69 00 6e 00 20  00 62 00 79 00 20 00 72  |.e.i.n. .b.y. .r|
00 65 00 66 00 65 00 72  00 65 00 6e 00 63 00 65  |.e.f.e.r.e.n.c.e|
00 2e                                             |..              |

2.16.840.1.114412.3.21

basicConstraints
- true
- true: 0
authorityInfoAccess
- #0
  - OCSP: http://ocsp.digicert.com
  - caIssuers: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt
crlDistributionPoints
- http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl

subjectKeyIdentifier:

15 00 12 2b 13 98 b2 99  07 ed 1e df a2 be 57 0d  |...+..........W.|
2b 67 02 cd                                       |+g..            |

authorityKeyIdentifier:

45 eb a2 af f4 92 cb 82  31 2d 51 8b a7 a7 21 9d  |E.......1-Q...!.|
f3 6d c8 0f                                       |.m..            |

RSA-SHA1:

46 50 3e c9 b7 28 24 a7  38 1d b6 5b 29 af 52 cf  |FP>..($.8..[).R.|
52 e9 31 47 ab 56 5c 7b  d5 0d 0b 41 b3 ef ec 75  |R.1G.V\{...A...u|
1f 74 38 f2 b2 5c 61 a2  9c 95 c3 50 e4 82 b9 23  |.t8..\a....P...#|
d1 ba 3a 86 72 ad 38 78  ac 75 5d 17 17 34 72 47  |..:.r.8x.u]..4rG|
85 94 56 d1 eb bb 36 84  77 cc 24 a5 f3 04 19 55  |..V...6.w.$....U|
a9 e7 e3 e7 ab 62 cd fb  8b 2d 90 c2 c0 d2 b5 94  |.....b...-......|
bd 5e 4f b1 05 d2 0e 3d  1a a9 14 5b a6 86 31 62  |.^O....=...[..1b|
a8 a8 33 e4 9b 39 a7 c4  f5 ce 1d 78 76 94 25 73  |..3..9.....xv.%s|
e4 2a ab cf 9c 76 4b ed  5f c2 4b 16 e4 4b 70 4c  |.*...vK._.K..KpL|
00 89 1e fc c5 79 bc 4c  12 57 fe 5f e1 1e bc 02  |.....y.L.W._....|
5d a8 fe fb 07 38 4f 0d  c6 5d 91 b9 0f 67 45 cd  |]....8O..]...gE.|
d6 83 ed e7 92 0d 8d b1  69 8c 4f fb 59 e0 23 0f  |........i.O.Y.#.|
d2 aa ae 00 7c ee 9c 42  0e cf 91 d7 27 b7 16 ee  |....|..B....'...|
0f c3 bd 7c 0a a0 ee 2c  08 55 85 22 b8 eb 18 1a  |...|...,.U."....|
4d fc 2a 21 ad 49 31 83  47 95 77 71 dc b1 1b 4b  |M.*!.I1.G.wq...K|
4b 1c 10 9c 77 14 c1 9d  4f 2f 5a 95 08 29 10 26  |K...w...O/Z..).&|

Signer

1
unnamed
- #0
  - C: US
  - O: DigiCert Inc
  - OU: www.digicert.com
  - CN: DigiCert SHA2 Assured ID Code Signing CA
- 0A:55:A3:07:16:93:FE:88:0F:0F:61:64:EB:93:66:5E
SHA1: nil

1.3.6.1.4.1.311.2.1.12
- nil
contentType: 1.3.6.1.4.1.311.2.1.4
1.3.6.1.4.1.311.2.1.11: msCodeInd

messageDigest:

6d ec 94 e2 07 65 b5 a1  33 5d b0 9e a7 40 f8 de  |m....e..3]...@..|
2f 61 a4 81                                       |/a..            |

rsaEncryption:

86 3b 79 81 d9 98 43 17  62 54 f9 6e c8 ea 26 6c  |.;y...C.bT.n..&l|
28 a5 ac 0a 43 41 19 3b  d8 a7 e7 33 fc a4 ac d7  |(...CA.;...3....|
c6 cc 50 ee 00 48 af 6a  cf 70 cd da 51 c1 08 95  |..P..H.j.p..Q...|
72 bb cb 28 e8 b8 d9 26  c6 df e0 aa 6f e5 7d 64  |r..(...&....o.}d|
1b c9 56 ed bb 68 6c ee  7a f4 39 ff 36 4d 1e 7e  |..V..hl.z.9.6M.~|
84 32 24 6b b6 e6 9c e1  86 f7 f9 ff 5b 21 d7 d6  |.2$k........[!..|
29 6b 82 c6 43 f8 f1 13  6e 11 5e c1 23 81 78 f0  |)k..C...n.^.#.x.|
2d a7 3a e3 9e fb 19 f9  e7 61 4f cc f7 62 f7 bf  |-.:......aO..b..|
ab 3e 0d bb 00 66 83 74  b1 28 0f f8 07 ff b7 16  |.>...f.t.(......|
23 d5 74 d9 32 c1 b8 1d  cb dc 21 d6 93 70 2d d6  |#.t.2.....!..p-.|
33 53 ba be 1b 93 51 a0  29 e5 4b c0 ca 06 c2 4a  |3S....Q.).K....J|
a4 da 01 12 ad b8 0d bc  56 3c cc 51 09 2a 7c a3  |........V<.Q.*|.|
f1 80 49 38 54 0e 1b a4  31 ac 0a f9 cf 13 d2 62  |..I8T...1......b|
a8 b2 03 20 83 16 e7 db  22 b6 2a 0d 5b 04 b4 fc  |... ....".*.[...|
2e c1 f3 8a a5 e1 70 c0  5f c4 91 08 a4 10 d7 0c  |......p._.......|
78 0c a8 ae f9 01 5c 20  1b 97 99 86 4d da f5 df  |x.....\ ....M...|

countersignature

unnamed
- #0
  - C: US
  - O: DigiCert Inc
  - OU: www.digicert.com
  - CN: DigiCert Assured ID CA-1
- 03:01:9A:02:3A:FF:58:B1:6B:D6:D5:EA:E6:17:F0:66
SHA1: nil

contentType: pkcs7-data
signingTime: 2020-06-08 22:40:15 UTC

messageDigest:

51 b4 d6 21 6f 92 5e f9  15 f0 b9 57 6d 6b 03 9e  |Q..!o.^....Wmk..|
5c ea c7 39                                       |\..9            |

rsaEncryption:

03 d1 0d 34 4a 57 1e d8  93 3b 59 17 c9 fb fe 59  |...4JW...;Y....Y|
39 d0 eb c6 f0 be b1 47  d6 6c f7 34 32 44 a2 2b  |9......G.l.42D.+|
a4 ad 7d 56 52 5d 27 b0  5f 4d b9 9b b7 78 a0 24  |..}VR]'._M...x.$|
38 0c eb 72 36 50 00 b4  df be ef 9f da c8 4b 9b  |8..r6P........K.|
cd 7c d1 0e 25 9d d9 28  ba e9 01 69 a0 c6 50 39  |.|..%..(...i..P9|
3c 87 85 13 9d 4e 17 c2  07 ed f9 31 50 15 84 2f  |<....N.....1P../|
21 88 4e fc 92 47 23 b4  89 23 f5 73 78 7f 7b bd  |!.N..G#..#.sx.{.|
5f 5f 8c 8c 3e 58 cb 07  6d 86 ee f7 3e 63 05 6e  |__..>X..m...>c.n|
75 d7 be d7 bd 1b 39 22  a8 d8 b6 5a bd 0c 19 ed  |u.....9"...Z....|
b7 9a 6a 16 bd 45 be a5  8a 96 4c dd 7f d6 68 35  |..j..E....L...h5|
53 0c cc 9b 03 eb df 91  a9 85 6b cf 12 c8 e3 66  |S.........k....f|
b2 9a ae ea be db b9 45  51 e8 7e cb ce 6a d7 b6  |.......EQ.~..j..|
32 32 38 fc 14 ff 7b aa  98 0c 6c f9 59 9f e8 61  |228...{...l.Y..a|
a8 13 aa 0e a8 46 e0 1a  d2 7f 3b 97 cb 17 61 af  |.....F....;...a.|
58 8f ce 78 3c 91 c6 10  95 30 f2 7b b9 f8 a9 d4  |X..x<....0.{....|
e2 0c 01 8b c7 31 5e e8  30 5a b9 e1 c5 0b cc 0f  |.....1^.0Z......|

show previews

offset	size	type	comment
15c1	15	HTM		#
6fc928	19543	PNG	(256 x 256)	#
701584	41745	PNG	(512 x 512)	#
70b895	9179	BIN	overlay data past EOF	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] can't find file_offset of VA 0x2ef718

[?] can't find file_offset of VA 0x2ef840

[?] can't find file_offset of VA 0x2efb28

[?] can't find file_offset of VA 0x2f0090

[?] can't find file_offset of VA 0x2f0938

[?] can't find file_offset of VA 0x2f17e0

[?] can't find file_offset of VA 0x2f1c48

[?] can't find file_offset of VA 0x2f2cf0

[?] can't find file_offset of VA 0x2f5298

[?] can't find file_offset of VA 0x2f9b38

[?] can't find file_offset of VA 0x303948

[?] can't find file_offset of VA 0x303a70

[?] can't find file_offset of VA 0x303d58

[?] can't find file_offset of VA 0x3042c0

[?] can't find file_offset of VA 0x304b68

[?] can't find file_offset of VA 0x305a10

[?] can't find file_offset of VA 0x305e78

[?] can't find file_offset of VA 0x306f20

[?] can't find file_offset of VA 0x3094c8

[?] can't find file_offset of VA 0x30e120

[?] ignoring invalid PEdump::BITMAPINFOHEADER

[!] string size(86396) > stringtable size(66). truncated to 64

[!] cannot convert "\x97\xEB\x98\x95\"\x01#\xDBJ\x89I\x84]\x8CH\xC1"... to UTF-16

[?] can't find file_offset of VA 0x35e140

[?] can't find file_offset of VA 0x3184d0

[?] can't find file_offset of VA 0x3038b0

[?] can't find file_offset of VA 0x318438

[?] can't find file_offset of VA 0x2d43d0