| filename | Infestation_TheNewZ.exe | |
|---|---|---|
| size | 13168600 (0xc8efd8) | |
| md5 | afbd5f640cffbcbc522a78b97b44f2fe | |
| type | PE32+ executable (GUI) x86-64, for MS Windows | |
| mimetype | application/x-dosexec | |
| clamav | OK | |
| virustotal | → scan with virustotal.com | |
| histogram | ||
MZ Header
| signature | MZ |
| bytes_in_last_block | 0x90 |
| blocks_in_file | 3 |
| num_relocs | 0 |
| header_paragraphs | 4 |
| min_extra_paragraphs | 0 |
| max_extra_paragraphs | 0xffff |
| ss | 0 |
| sp | 0xb8 |
| checksum | 0 |
| ip | 0 |
| cs | 0 |
| reloc_table_offset | 0x40 |
| overlay_number | 0 |
| reserved0 | 0 |
| oem_id | 0 |
| oem_info | 0 |
| reserved2 | 0 |
| reserved3 | 0 |
| reserved4 | 0 |
| reserved5 | 0 |
| reserved6 | 0 |
| lfanew | 0x170 |
Rich Header
| lib id | version | times used |
|---|---|---|
| 257 | 23506 | 2 |
| 171 | 40219 | 27 |
| 156 | 40219 | 12 |
| 224 | 31101 | 11 |
| 206 | 50727 | 17 |
| 150 | 20413 | 9 |
| 199 | 41118 | 2 |
| 223 | 20806 | 41 |
| 225 | 20806 | 80 |
| 224 | 20806 | 253 |
| 225 | 31101 | 27 |
| 257 | 27034 | 4 |
| 225 | 30501 | 258 |
| 207 | 50727 | 232 |
| 156 | 30319 | 2 |
| 136 | 30729 | 1 |
| 135 | 30729 | 3 |
| 156 | 21202 | 2 |
| 147 | 30729 | 33 |
| 123 | 50727 | 2 |
| 1 | 0 | 653 |
| 229 | 31101 | 401 |
| 220 | 31101 | 1 |
| 219 | 21005 | 1 |
| 151 | 0 | 1 |
| 222 | 31101 | 1 |
DOS stub
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
PE Header
Sections
Data Directory
TLS
| raw start | raw end | index | callbks | zero fill | flags | |
|---|---|---|---|---|---|---|
| 0x1412fc000 | 0x1412fc010 | 0x1412919d0 | 0x14083f430 | 0 | 0x400000 |
Signers (1)
issuer: /C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert EV Code Signing CA (SHA2)
serial: 020AED139166FAF8BAE0EDC9513B8878
Certificates (2)
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:0a:ed:13:91:66:fa:f8:ba:e0:ed:c9:51:3b:88:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert EV Code Signing CA (SHA2)
Validity
Not Before: Mar 18 00:00:00 2020 GMT
Not After : May 19 12:00:00 2021 GMT
Subject: jurisdictionC=SE/businessCategory=Private Organization/serialNumber=559025-2226, C=SE, L=Upplands V\xC3\xA4sby, O=Fredaikis AB, CN=Fredaikis AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b5:79:27:d3:6f:bf:df:43:9b:48:35:8c:4e:
0f:d3:bb:96:eb:1f:ef:19:f3:c1:c8:b0:d1:5c:6c:
d3:af:09:0c:7f:5d:93:66:d5:06:1c:39:1d:88:9f:
32:f2:ec:a8:68:1f:bb:18:83:21:33:6e:26:a9:ad:
7f:7f:2f:c8:67:ef:78:fb:2a:36:14:2c:22:3d:fa:
a4:a9:08:11:c2:73:df:ab:54:53:18:02:4b:5b:c4:
0f:e1:f9:c8:11:61:8c:15:65:a0:72:ee:17:fb:ad:
96:2a:15:e3:11:96:df:00:d9:4b:92:16:9b:02:9b:
4d:ca:16:45:c5:d6:d9:be:d6:6d:db:07:10:2a:2c:
9d:4a:4c:32:ea:94:f8:cc:fd:42:69:58:c7:d6:94:
2c:74:dc:96:c5:a8:c3:3d:98:d1:0b:4f:e1:07:db:
f1:10:f2:97:43:cf:fd:5d:01:96:76:b1:07:77:a7:
58:ab:a7:77:2b:a4:db:ad:3d:0a:9e:1f:72:92:36:
c5:42:ee:73:28:0f:0a:2b:83:1e:c3:40:bf:93:66:
f7:7b:6d:34:74:d9:ff:f4:df:0b:f2:ee:e9:19:51:
2d:be:e6:03:08:c1:d0:cc:62:f0:2c:80:ac:8d:31:
05:f2:49:65:dd:b9:af:8c:c2:94:1f:bb:8e:ce:99:
91:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Authority Key Identifier:
keyid:8F:E8:7E:F0:6D:32:6A:00:05:23:C7:70:97:6A:3A:90:FF:6B:EA:D4
X509v3 Subject Key Identifier:
5C:98:3B:1D:A0:E9:59:25:5F:97:9A:92:D9:D0:B4:FD:19:EF:7B:3A
X509v3 Subject Alternative Name:
othername:<unsupported>
X509v3 Key Usage: critical
Digital Signature
X509v3 Extended Key Usage:
Code Signing
X509v3 CRL Distribution Points:
Full Name:
URI:http://crl3.digicert.com/EVCodeSigningSHA2-g1.crl
Full Name:
URI:http://crl4.digicert.com/EVCodeSigningSHA2-g1.crl
X509v3 Certificate Policies:
Policy: 2.16.840.1.114412.3.2
CPS: https://www.digicert.com/CPS
Policy: 2.23.140.1.3
Authority Information Access:
OCSP - URI:http://ocsp.digicert.com
CA Issuers - URI:http://cacerts.digicert.com/DigiCertEVCodeSigningCA-SHA2.crt
X509v3 Basic Constraints: critical
CA:FALSE
Signature Algorithm: sha256WithRSAEncryption
18:82:9b:4a:25:e9:b7:9d:32:06:c4:7c:5b:e2:8c:62:af:50:
1d:25:72:de:c4:89:f9:74:a4:ed:62:27:81:63:75:71:1f:74:
c6:24:b4:fc:36:3a:a9:f4:f3:cc:3b:e2:7e:11:2b:d1:1e:28:
66:12:a0:b1:95:b7:34:7b:e5:51:b2:b5:e1:18:eb:81:09:9d:
e3:78:13:8a:04:66:4a:23:14:d5:9f:46:03:ad:22:e4:20:d8:
1c:9f:24:00:40:f7:cc:61:c1:22:eb:3f:e7:99:61:19:44:76:
b9:56:26:7e:56:4b:35:f2:4e:24:b9:da:b7:9d:c2:d8:8c:23:
c6:3d:21:a6:c2:71:81:bc:87:b6:3c:e1:b8:f5:30:fa:c7:14:
81:d3:fb:e2:00:a2:50:cc:c2:55:c6:07:12:68:1c:5e:89:d3:
7b:63:42:a2:0d:bd:54:a5:d1:ca:5f:cb:d7:fc:b7:a9:ac:6c:
ea:1e:d7:e1:98:f7:be:44:7d:b5:b4:16:3f:49:34:ee:07:8a:
c1:b2:2a:a0:58:30:78:9f:c7:ba:a9:63:5d:48:ee:60:66:8f:
1d:fc:c5:49:69:23:ad:08:19:99:f3:77:cc:8c:1b:18:18:da:
0d:fc:25:c1:f3:bf:51:46:91:8e:df:40:03:9b:a0:cf:f2:13:
88:d8:af:8bCertificate:
Data:
Version: 3 (0x2)
Serial Number:
03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA
Validity
Not Before: Apr 18 12:00:00 2012 GMT
Not After : Apr 18 12:00:00 2027 GMT
Subject: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert EV Code Signing CA (SHA2)
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:53:fa:0f:b2:b5:13:f1:64:cf:84:80:fc:ae:
80:35:d1:b6:d7:c7:a3:2c:ac:1a:2c:ac:f1:84:ac:
3a:35:12:3a:92:91:ba:57:e4:c4:c9:f3:2f:a8:48:
3c:b7:d6:6e:dc:97:22:ba:51:79:61:af:43:2f:0d:
b7:9b:b4:49:31:ae:44:58:3e:a4:a1:96:a7:87:4f:
23:7e:c3:6c:65:24:90:55:3e:a1:ca:23:7c:c5:42:
e9:c4:7a:62:45:9b:7d:de:63:74:cb:9e:63:25:f8:
84:9a:9a:ad:45:4f:ae:7d:1f:c8:13:cb:75:9b:c9:
e1:e1:8a:f8:0b:0c:98:f4:ca:3e:d0:45:aa:7a:1e:
a5:58:93:36:34:be:2b:2e:2b:31:58:66:b4:32:10:
9f:9d:f0:52:a1:ef:e8:3e:d3:76:f2:40:5a:dc:fa:
6a:3d:1b:4b:ad:76:b0:8c:5c:ee:36:ba:83:ea:30:
a8:4c:de:f1:0b:2a:58:41:88:ae:00:89:ab:03:d1:
16:82:20:22:76:eb:5e:54:38:12:62:e1:d2:70:24:
db:ed:1f:70:d2:64:09:80:2d:e2:b6:9d:ce:1f:f2:
bb:21:f3:6c:db:d8:b3:19:7b:8a:50:9f:ef:ec:36:
0a:5c:9a:b7:4a:d3:08:a0:39:79:fd:dd:bf:3d:3a:
09:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE, pathlen:0
X509v3 Key Usage: critical
Digital Signature, Certificate Sign, CRL Sign
X509v3 Extended Key Usage:
Code Signing
Authority Information Access:
OCSP - URI:http://ocsp.digicert.com
CA Issuers - URI:http://cacerts.digicert.com/DigiCertHighAssuranceEVRootCA.crt
X509v3 CRL Distribution Points:
Full Name:
URI:http://crl3.digicert.com/DigiCertHighAssuranceEVRootCA.crl
Full Name:
URI:http://crl4.digicert.com/DigiCertHighAssuranceEVRootCA.crl
X509v3 Certificate Policies:
Policy: 2.16.840.1.114412.3.2
CPS: http://www.digicert.com/ssl-cps-repository.htm
User Notice:
Explicit Text:
X509v3 Subject Key Identifier:
8F:E8:7E:F0:6D:32:6A:00:05:23:C7:70:97:6A:3A:90:FF:6B:EA:D4
X509v3 Authority Key Identifier:
keyid:B1:3E:C3:69:03:F8:BF:47:01:D4:98:26:1A:08:02:EF:63:64:2B:C3
Signature Algorithm: sha256WithRSAEncryption
19:33:4a:0c:81:33:37:db:ad:36:c9:e4:c9:3a:bb:b5:1b:2e:
7a:a2:e2:f4:43:42:17:9e:bf:4e:a1:4d:e1:b1:db:e9:81:dd:
9f:01:f2:e4:88:d5:e9:fe:09:fd:21:c1:ec:5d:80:d2:f0:d6:
c1:43:c2:fe:77:2b:db:f9:d7:91:33:ce:6c:d5:b2:19:3b:e6:
2e:d6:c9:93:4f:88:40:8e:cd:e1:f5:7e:f1:0f:c6:59:56:72:
e8:eb:6a:41:bd:1c:d5:46:d5:7c:49:ca:66:38:15:c1:bf:e0:
91:70:77:87:dc:c9:8d:31:c9:0c:29:a2:33:ed:8d:e2:87:cd:
89:8d:3f:1b:ff:d5:e0:1a:97:8b:7c:da:6d:fb:a8:c6:b2:3a:
66:6b:7b:01:b3:cd:d8:a6:34:ec:12:01:ab:95:58:a5:c4:53:
57:a8:60:e6:e7:02:12:a0:b9:23:64:a2:4d:bb:7c:81:25:64:
21:be:cf:ee:42:18:43:97:bb:a5:37:06:af:4d:ff:26:a5:4d:
61:4b:ec:46:41:b8:65:ce:b8:79:9e:08:96:0b:81:8c:8a:3b:
8f:c7:99:8c:a3:2a:6e:98:6d:5e:61:c6:96:b7:8a:b9:61:2d:
93:b8:eb:0e:04:43:d7:f5:fe:a6:f0:62:d4:99:6a:a5:c1:c1:
f0:64:94:80pkcs7-signedData
- 1
- SHA256: nil
- 1.3.6.1.4.1.311.2.1.4
- #0
- 1.3.6.1.4.1.311.2.1.15
- :
- SHA256
d1 dd 43 67 6d 90 d2 a4 0c a6 83 79 63 d7 da 10 |..Cgm......yc...| 24 36 4d 25 58 0a 95 bd 44 4b 30 83 50 b1 33 0a |$6M%X...DK0.P.3.|
- 1.3.6.1.4.1.311.2.1.15
- #0
- Certificates
- Certificate #0
- 2
- 02:0A:ED:13:91:66:FA:F8:BA:E0:ED:C9:51:3B:88:78
- RSA-SHA256: nil
- Issuer
- C: US
- O: DigiCert Inc
- OU: www.digicert.com
- CN: DigiCert EV Code Signing CA (SHA2)
- 2020-03-18 00:00:00 UTC: 2021-05-19 12:00:00 UTC
- #4
- jurisdictionC: SE
- businessCategory: Private Organization
- serialNumber: 559025-2226
- C: SE
- L:
55 70 70 6c 61 6e 64 73 20 56 c3 a4 73 62 79 |Upplands V..sby |
- O: Fredaikis AB
- CN: Fredaikis AB
- #5
- rsaEncryption: nil
- AE:B5:79:27:D3:6F:BF:DF:43:9B:48:35:8C:4E:0F:D3:
BB:96:EB:1F:EF:19:F3:C1:C8:B0:D1:5C:6C:D3:AF:09:
0C:7F:5D:93:66:D5:06:1C:39:1D:88:9F:32:F2:EC:A8:
68:1F:BB:18:83:21:33:6E:26:A9:AD:7F:7F:2F:C8:67:
EF:78:FB:2A:36:14:2C:22:3D:FA:A4:A9:08:11:C2:73:
DF:AB:54:53:18:02:4B:5B:C4:0F:E1:F9:C8:11:61:8C:
15:65:A0:72:EE:17:FB:AD:96:2A:15:E3:11:96:DF:00:
D9:4B:92:16:9B:02:9B:4D:CA:16:45:C5:D6:D9:BE:D6:
6D:DB:07:10:2A:2C:9D:4A:4C:32:EA:94:F8:CC:FD:42:
69:58:C7:D6:94:2C:74:DC:96:C5:A8:C3:3D:98:D1:0B:
4F:E1:07:DB:F1:10:F2:97:43:CF:FD:5D:01:96:76:B1:
07:77:A7:58:AB:A7:77:2B:A4:DB:AD:3D:0A:9E:1F:72:
92:36:C5:42:EE:73:28:0F:0A:2B:83:1E:C3:40:BF:93:
66:F7:7B:6D:34:74:D9:FF:F4:DF:0B:F2:EE:E9:19:51:
2D:BE:E6:03:08:C1:D0:CC:62:F0:2C:80:AC:8D:31:05:
F2:49:65:DD:B9:AF:8C:C2:94:1F:BB:8E:CE:99:91:19: 0x010001
- #6
- authorityKeyIdentifier:
8f e8 7e f0 6d 32 6a 00 05 23 c7 70 97 6a 3a 90 |..~.m2j..#.p.j:.| ff 6b ea d4 |.k.. |
- subjectKeyIdentifier:
5c 98 3b 1d a0 e9 59 25 5f 97 9a 92 d9 d0 b4 fd |\.;...Y%_.......| 19 ef 7b 3a |..{: | - subjectAltName
- id-on-permanentIdentifier: SE-559025-2226
- keyUsage: true, 0x80
- extendedKeyUsage: codeSigning
- crlDistributionPoints
- http://crl3.digicert.com/EVCodeSigningSHA2-g1.crl: http://crl4.digicert.com/EVCodeSigningSHA2-g1.crl
- certificatePolicies
- #0
- 2.16.840.1.114412.3.2
- id-qt-cps: https://www.digicert.com/CPS
- 2.23.140.1.3
- 2.16.840.1.114412.3.2
- #0
- authorityInfoAccess
- #0
- OCSP: http://ocsp.digicert.com
- caIssuers: http://cacerts.digicert.com/DigiCertEVCodeSigningCA-SHA2.crt
- #0
- basicConstraints
- true
- nil
- authorityKeyIdentifier:
- RSA-SHA256:
18 82 9b 4a 25 e9 b7 9d 32 06 c4 7c 5b e2 8c 62 |...J%...2..|[..b| af 50 1d 25 72 de c4 89 f9 74 a4 ed 62 27 81 63 |.P.%r....t..b'.c| 75 71 1f 74 c6 24 b4 fc 36 3a a9 f4 f3 cc 3b e2 |uq.t.$..6:....;.| 7e 11 2b d1 1e 28 66 12 a0 b1 95 b7 34 7b e5 51 |~.+..(f.....4{.Q| b2 b5 e1 18 eb 81 09 9d e3 78 13 8a 04 66 4a 23 |.........x...fJ#| 14 d5 9f 46 03 ad 22 e4 20 d8 1c 9f 24 00 40 f7 |...F..". ...$.@.| cc 61 c1 22 eb 3f e7 99 61 19 44 76 b9 56 26 7e |.a.".?..a.Dv.V&~| 56 4b 35 f2 4e 24 b9 da b7 9d c2 d8 8c 23 c6 3d |VK5.N$.......#.=| 21 a6 c2 71 81 bc 87 b6 3c e1 b8 f5 30 fa c7 14 |!..q....<...0...| 81 d3 fb e2 00 a2 50 cc c2 55 c6 07 12 68 1c 5e |......P..U...h.^| 89 d3 7b 63 42 a2 0d bd 54 a5 d1 ca 5f cb d7 fc |..{cB...T..._...| b7 a9 ac 6c ea 1e d7 e1 98 f7 be 44 7d b5 b4 16 |...l.......D}...| 3f 49 34 ee 07 8a c1 b2 2a a0 58 30 78 9f c7 ba |?I4.....*.X0x...| a9 63 5d 48 ee 60 66 8f 1d fc c5 49 69 23 ad 08 |.c]H.`f....Ii#..| 19 99 f3 77 cc 8c 1b 18 18 da 0d fc 25 c1 f3 bf |...w........%...| 51 46 91 8e df 40 03 9b a0 cf f2 13 88 d8 af 8b |QF...@..........|
- 2
- Certificate #1
- 2
- 03:F1:B4:E1:5F:3A:82:F1:14:96:78:B3:D7:D8:47:5C
- RSA-SHA256: nil
- Issuer
- C: US
- O: DigiCert Inc
- OU: www.digicert.com
- CN: DigiCert High Assurance EV Root CA
- 2012-04-18 12:00:00 UTC: 2027-04-18 12:00:00 UTC
- Subject
- C: US
- O: DigiCert Inc
- OU: www.digicert.com
- CN: DigiCert EV Code Signing CA (SHA2)
- #5
- rsaEncryption: nil
- A7:53:FA:0F:B2:B5:13:F1:64:CF:84:80:FC:AE:80:35:
D1:B6:D7:C7:A3:2C:AC:1A:2C:AC:F1:84:AC:3A:35:12:
3A:92:91:BA:57:E4:C4:C9:F3:2F:A8:48:3C:B7:D6:6E:
DC:97:22:BA:51:79:61:AF:43:2F:0D:B7:9B:B4:49:31:
AE:44:58:3E:A4:A1:96:A7:87:4F:23:7E:C3:6C:65:24:
90:55:3E:A1:CA:23:7C:C5:42:E9:C4:7A:62:45:9B:7D:
DE:63:74:CB:9E:63:25:F8:84:9A:9A:AD:45:4F:AE:7D:
1F:C8:13:CB:75:9B:C9:E1:E1:8A:F8:0B:0C:98:F4:CA:
3E:D0:45:AA:7A:1E:A5:58:93:36:34:BE:2B:2E:2B:31:
58:66:B4:32:10:9F:9D:F0:52:A1:EF:E8:3E:D3:76:F2:
40:5A:DC:FA:6A:3D:1B:4B:AD:76:B0:8C:5C:EE:36:BA:
83:EA:30:A8:4C:DE:F1:0B:2A:58:41:88:AE:00:89:AB:
03:D1:16:82:20:22:76:EB:5E:54:38:12:62:E1:D2:70:
24:DB:ED:1F:70:D2:64:09:80:2D:E2:B6:9D:CE:1F:F2:
BB:21:F3:6C:DB:D8:B3:19:7B:8A:50:9F:EF:EC:36:0A:
5C:9A:B7:4A:D3:08:A0:39:79:FD:DD:BF:3D:3A:09:25: 0x010001
- X509v3 extensions
- basicConstraints
- true
- true: 0
- keyUsage: true, 0x86
- extendedKeyUsage: codeSigning
- authorityInfoAccess
- #0
- OCSP: http://ocsp.digicert.com
- caIssuers: http://cacerts.digicert.com/DigiCertHighAssuranceEVRootCA.crt
- #0
- crlDistributionPoints
- http://crl3.digicert.com/DigiCertHighAssuranceEVRootCA.crl: http://crl4.digicert.com/DigiCertHighAssuranceEVRootCA.crl
- certificatePolicies
- 2.16.840.1.114412.3.2
- #0
- id-qt-cps: http://www.digicert.com/ssl-cps-repository.htm
- id-qt-unotice:
00 41 00 6e 00 79 00 20 00 75 00 73 00 65 00 20 |.A.n.y. .u.s.e. | 00 6f 00 66 00 20 00 74 00 68 00 69 00 73 00 20 |.o.f. .t.h.i.s. | 00 43 00 65 00 72 00 74 00 69 00 66 00 69 00 63 |.C.e.r.t.i.f.i.c| 00 61 00 74 00 65 00 20 00 63 00 6f 00 6e 00 73 |.a.t.e. .c.o.n.s| 00 74 00 69 00 74 00 75 00 74 00 65 00 73 00 20 |.t.i.t.u.t.e.s. | 00 61 00 63 00 63 00 65 00 70 00 74 00 61 00 6e |.a.c.c.e.p.t.a.n| 00 63 00 65 00 20 00 6f 00 66 00 20 00 74 00 68 |.c.e. .o.f. .t.h| 00 65 00 20 00 44 00 69 00 67 00 69 00 43 00 65 |.e. .D.i.g.i.C.e| 00 72 00 74 00 20 00 43 00 50 00 2f 00 43 00 50 |.r.t. .C.P./.C.P| 00 53 00 20 00 61 00 6e 00 64 00 20 00 74 00 68 |.S. .a.n.d. .t.h| 00 65 00 20 00 52 00 65 00 6c 00 79 00 69 00 6e |.e. .R.e.l.y.i.n| 00 67 00 20 00 50 00 61 00 72 00 74 00 79 00 20 |.g. .P.a.r.t.y. | 00 41 00 67 00 72 00 65 00 65 00 6d 00 65 00 6e |.A.g.r.e.e.m.e.n| 00 74 00 20 00 77 00 68 00 69 00 63 00 68 00 20 |.t. .w.h.i.c.h. | 00 6c 00 69 00 6d 00 69 00 74 00 20 00 6c 00 69 |.l.i.m.i.t. .l.i| 00 61 00 62 00 69 00 6c 00 69 00 74 00 79 00 20 |.a.b.i.l.i.t.y. | 00 61 00 6e 00 64 00 20 00 61 00 72 00 65 00 20 |.a.n.d. .a.r.e. | 00 69 00 6e 00 63 00 6f 00 72 00 70 00 6f 00 72 |.i.n.c.o.r.p.o.r| 00 61 00 74 00 65 00 64 00 20 00 68 00 65 00 72 |.a.t.e.d. .h.e.r| 00 65 00 69 00 6e 00 20 00 62 00 79 00 20 00 72 |.e.i.n. .b.y. .r| 00 65 00 66 00 65 00 72 00 65 00 6e 00 63 00 65 |.e.f.e.r.e.n.c.e| 00 2e |.. |
- #0
- 2.16.840.1.114412.3.2
- subjectKeyIdentifier:
8f e8 7e f0 6d 32 6a 00 05 23 c7 70 97 6a 3a 90 |..~.m2j..#.p.j:.| ff 6b ea d4 |.k.. |
- authorityKeyIdentifier:
b1 3e c3 69 03 f8 bf 47 01 d4 98 26 1a 08 02 ef |.>.i...G...&....| 63 64 2b c3 |cd+. |
- basicConstraints
- RSA-SHA256:
19 33 4a 0c 81 33 37 db ad 36 c9 e4 c9 3a bb b5 |.3J..37..6...:..| 1b 2e 7a a2 e2 f4 43 42 17 9e bf 4e a1 4d e1 b1 |..z...CB...N.M..| db e9 81 dd 9f 01 f2 e4 88 d5 e9 fe 09 fd 21 c1 |..............!.| ec 5d 80 d2 f0 d6 c1 43 c2 fe 77 2b db f9 d7 91 |.].....C..w+....| 33 ce 6c d5 b2 19 3b e6 2e d6 c9 93 4f 88 40 8e |3.l...;.....O.@.| cd e1 f5 7e f1 0f c6 59 56 72 e8 eb 6a 41 bd 1c |...~...YVr..jA..| d5 46 d5 7c 49 ca 66 38 15 c1 bf e0 91 70 77 87 |.F.|I.f8.....pw.| dc c9 8d 31 c9 0c 29 a2 33 ed 8d e2 87 cd 89 8d |...1..).3.......| 3f 1b ff d5 e0 1a 97 8b 7c da 6d fb a8 c6 b2 3a |?.......|.m....:| 66 6b 7b 01 b3 cd d8 a6 34 ec 12 01 ab 95 58 a5 |fk{.....4.....X.| c4 53 57 a8 60 e6 e7 02 12 a0 b9 23 64 a2 4d bb |.SW.`......#d.M.| 7c 81 25 64 21 be cf ee 42 18 43 97 bb a5 37 06 ||.%d!...B.C...7.| af 4d ff 26 a5 4d 61 4b ec 46 41 b8 65 ce b8 79 |.M.&.MaK.FA.e..y| 9e 08 96 0b 81 8c 8a 3b 8f c7 99 8c a3 2a 6e 98 |.......;.....*n.| 6d 5e 61 c6 96 b7 8a b9 61 2d 93 b8 eb 0e 04 43 |m^a.....a-.....C| d7 f5 fe a6 f0 62 d4 99 6a a5 c1 c1 f0 64 94 80 |.....b..j....d..|
- 2
- Certificate #0
- Signer
- 1
- unnamed
- #0
- C: US
- O: DigiCert Inc
- OU: www.digicert.com
- CN: DigiCert EV Code Signing CA (SHA2)
- 02:0A:ED:13:91:66:FA:F8:BA:E0:ED:C9:51:3B:88:78
- #0
- SHA256: nil
- #3
- 1.3.6.1.4.1.311.2.1.12
- nil
- contentType: 1.3.6.1.4.1.311.2.1.4
- 1.3.6.1.4.1.311.2.1.11: msCodeInd
- messageDigest:
39 19 b4 d9 40 4b c7 8c 2d 9b 47 19 1d 01 9b 13 |9...@K..-.G.....| 17 0c 88 28 e3 ba e4 ac 11 a1 9a 97 43 d2 82 a4 |...(........C...|
- 1.3.6.1.4.1.311.2.1.12
- rsaEncryption:
2c 60 43 20 ef 82 35 86 c4 a0 f5 28 65 81 e4 e7 |,`C ..5....(e...| b7 27 9f 2b 9b 59 3d 14 13 b1 f8 77 d2 72 2a 2c |.'.+.Y=....w.r*,| cc 88 bd 3f 6c b7 1a 47 25 31 c1 5a b9 42 89 fa |...?l..G%1.Z.B..| f8 e3 ae 3f 60 5f ba 72 2c 8a a9 b3 c7 09 84 ab |...?`_.r,.......| b3 92 90 b2 9b ee 20 c4 0b 99 a3 0a 4f 66 8c fa |...... .....Of..| 4b 86 91 fe 11 a7 aa 10 43 28 38 a2 28 53 10 dd |K.......C(8.(S..| a9 65 1c 16 a9 a5 a8 f3 0d 59 d1 e3 bb 95 52 bb |.e.......Y....R.| 8f a8 93 d9 f0 10 0e 1b e9 24 f1 9d 25 1f 7e 66 |.........$..%.~f| d5 e3 96 0a 48 7c f2 ef 81 ab d6 8d 1b 59 5b 51 |....H|.......Y[Q| 09 b0 59 fa e7 b1 b9 36 6a be da ce d4 8a 59 52 |..Y....6j.....YR| 9f b4 4d 87 d5 21 b1 e4 df 93 c9 fa ab 6b d6 fe |..M..!.......k..| 69 47 46 ae 21 59 f8 96 91 7a b0 79 0a 52 54 e7 |iGF.!Y...z.y.RT.| 8b 5f 52 fd e8 38 17 59 c6 be 3a d3 7d eb 50 a0 |._R..8.Y..:.}.P.| 27 d3 6b 4e 16 4a ec fa 74 4b 7a 42 6f ab ab 68 |'.kN.J..tKzBo..h| ae f1 8b c2 f7 4a 94 e7 44 b8 c1 ff 11 c5 b1 0d |.....J..D.......| 8e 87 95 02 67 28 38 0a fa 13 1a 30 ef af 9f 61 |....g(8....0...a|
- 1.3.6.1.4.1.311.3.3.1
- pkcs7-signedData
- 3
- SHA256: nil
- id-smime-ct-TSTInfo
- 1
- 2.16.840.1.114412.7.1
- SHA256
b4 4f a3 55 57 51 fa 15 b1 2d 83 da a3 89 1b f0 |.O.UWQ...-......| 3d 60 9e 64 f8 7d f9 80 0d 1e 76 1b 55 f0 e9 bf |=`.d.}....v.U...|
- C4:2A:EB:59:27:36:3F:C1:5C:A0:75:39:5C:EC:09:E9
- 2020-07-10 10:37:58 UTC
- 1
- Certificates
- Certificate #0
- 2
- 04:CD:3F:85:68:AE:76:C6:1B:B0:FE:71:60:CC:A7:6D
- RSA-SHA256: nil
- Issuer
- C: US
- O: DigiCert Inc
- OU: www.digicert.com
- CN: DigiCert SHA2 Assured ID Timestamping CA
- 2019-10-01 00:00:00 UTC: 2030-10-17 00:00:00 UTC
- Subject
- C: US
- O: DigiCert, Inc.
- CN: TIMESTAMP-SHA256-2019-10-15
- #5
- rsaEncryption: nil
- E9:64:35:9C:FA:A9:98:65:64:1B:E4:17:DC:B8:29:36:
CC:67:09:58:85:4D:30:E0:C9:FF:E5:3B:3C:11:28:50:
AF:07:31:E2:5D:09:18:C2:F6:89:8C:69:08:04:23:E0:
77:2D:9D:15:E5:B8:E8:A1:6A:8E:FF:D4:AE:D2:7A:16:
EF:F8:41:B5:1D:39:75:C1:CF:2F:A7:AC:45:7E:94:6D:
AC:03:01:99:3C:62:3E:7E:7A:FD:45:97:31:B4:FA:B7:
D9:42:3E:A7:55:9B:DF:5A:4F:58:02:A8:32:69:22:13:
BE:8B:82:2D:C6:98:AB:6B:9B:B4:C9:F2:65:11:0C:74:
0D:B2:F0:08:96:74:C4:E8:B2:48:A2:A1:14:A5:F8:FA:
E1:89:70:44:3B:8D:EF:FB:A4:F4:C3:B9:BD:14:2C:EB:
0C:28:27:25:80:AB:10:4B:16:12:60:0B:69:22:8C:4E:
CD:C6:D5:B2:65:59:21:E0:7C:2C:12:8D:70:0E:8F:8A:
CA:E0:D3:D7:B3:39:77:50:D0:42:2C:2E:7A:CE:9C:67:
7A:38:77:54:40:FF:4F:95:04:20:D4:EB:C8:CE:87:14:
08:FE:1D:80:DD:D0:E7:2B:78:EA:BF:1F:70:C6:EE:42:
16:53:36:45:9B:53:19:49:62:9D:7A:02:9B:95:14:A3: 0x010001
- #6
- keyUsage: true, 0x80
- basicConstraints
- true
- nil
- extendedKeyUsage: true, timeStamping
- certificatePolicies
- #0
- 2.16.840.1.114412.7.1
- #0
- id-qt-cps: https://www.digicert.com/CPS
- id-qt-unotice:
00 41 00 6e 00 79 00 20 00 75 00 73 00 65 00 20 |.A.n.y. .u.s.e. | 00 6f 00 66 00 20 00 74 00 68 00 69 00 73 00 20 |.o.f. .t.h.i.s. | 00 43 00 65 00 72 00 74 00 69 00 66 00 69 00 63 |.C.e.r.t.i.f.i.c| 00 61 00 74 00 65 00 20 00 63 00 6f 00 6e 00 73 |.a.t.e. .c.o.n.s| 00 74 00 69 00 74 00 75 00 74 00 65 00 73 00 20 |.t.i.t.u.t.e.s. | 00 61 00 63 00 63 00 65 00 70 00 74 00 61 00 6e |.a.c.c.e.p.t.a.n| 00 63 00 65 00 20 00 6f 00 66 00 20 00 74 00 68 |.c.e. .o.f. .t.h| 00 65 00 20 00 44 00 69 00 67 00 69 00 43 00 65 |.e. .D.i.g.i.C.e| 00 72 00 74 00 20 00 43 00 50 00 2f 00 43 00 50 |.r.t. .C.P./.C.P| 00 53 00 20 00 61 00 6e 00 64 00 20 00 74 00 68 |.S. .a.n.d. .t.h| 00 65 00 20 00 52 00 65 00 6c 00 79 00 69 00 6e |.e. .R.e.l.y.i.n| 00 67 00 20 00 50 00 61 00 72 00 74 00 79 00 20 |.g. .P.a.r.t.y. | 00 41 00 67 00 72 00 65 00 65 00 6d 00 65 00 6e |.A.g.r.e.e.m.e.n| 00 74 00 20 00 77 00 68 00 69 00 63 00 68 00 20 |.t. .w.h.i.c.h. | 00 6c 00 69 00 6d 00 69 00 74 00 20 00 6c 00 69 |.l.i.m.i.t. .l.i| 00 61 00 62 00 69 00 6c 00 69 00 74 00 79 00 20 |.a.b.i.l.i.t.y. | 00 61 00 6e 00 64 00 20 00 61 00 72 00 65 00 20 |.a.n.d. .a.r.e. | 00 69 00 6e 00 63 00 6f 00 72 00 70 00 6f 00 72 |.i.n.c.o.r.p.o.r| 00 61 00 74 00 65 00 64 00 20 00 68 00 65 00 72 |.a.t.e.d. .h.e.r| 00 65 00 69 00 6e 00 20 00 62 00 79 00 20 00 72 |.e.i.n. .b.y. .r| 00 65 00 66 00 65 00 72 00 65 00 6e 00 63 00 65 |.e.f.e.r.e.n.c.e| 00 2e |.. |
- #0
- 2.16.840.1.114412.3.21
- 2.16.840.1.114412.7.1
- #0
- authorityKeyIdentifier:
f4 b6 e1 20 1d fe 29 ae d2 e4 61 a5 b2 a2 25 b2 |... ..)...a...%.| c8 17 35 6e |..5n |
- subjectKeyIdentifier:
56 53 0f c1 c6 07 a7 4d d7 d8 6e 57 72 80 50 4c |VS.....M..nWr.PL| e4 ec 9e c1 |.... |
- crlDistributionPoints
- http://crl3.digicert.com/sha2-assured-ts.crl: http://crl4.digicert.com/sha2-assured-ts.crl
- authorityInfoAccess
- #0
- OCSP: http://ocsp.digicert.com
- caIssuers: http://cacerts.digicert.com/DigiCertSHA2AssuredIDTimestampingCA.crt
- #0
- RSA-SHA256:
2e 83 a1 44 05 4a 04 e3 b9 32 52 fa d9 81 f0 1a |...D.J...2R.....| bb f8 09 8d 23 b9 3d d8 92 a1 e6 46 1c 4a 2f 6e |....#.=....F.J/n| 7a 3c 63 6e 37 17 a3 1a bf 58 23 b2 43 9c 94 83 |z
- 2
- Certificate #1
- 2
- 0A:A1:25:D6:D6:32:1B:7E:41:E4:05:DA:36:97:C2:15
- RSA-SHA256: nil
- Issuer
- C: US
- O: DigiCert Inc
- OU: www.digicert.com
- CN: DigiCert Assured ID Root CA
- 2016-01-07 12:00:00 UTC: 2031-01-07 12:00:00 UTC
- Subject
- C: US
- O: DigiCert Inc
- OU: www.digicert.com
- CN: DigiCert SHA2 Assured ID Timestamping CA
- #5
- rsaEncryption: nil
- BD:D0:32:EE:4B:CD:8F:7F:DD:A9:BA:82:99:C5:39:54:
28:57:B6:23:4A:C4:0E:07:45:33:51:10:7D:D0:F9:7D:
4D:68:7E:E7:B6:A0:F4:8D:B3:88:E4:97:BF:63:21:90:
98:BF:13:BC:57:D3:C3:E1:7E:08:D6:6A:14:00:38:F7:
2E:1E:3B:EE:CC:A6:F6:32:59:FE:5F:65:3F:E0:9B:EB:
E3:46:47:06:1A:55:7E:0B:27:7E:C0:A2:F5:A0:E0:DE:
22:3F:0E:FF:7E:95:FB:F3:A3:BA:22:3E:18:AC:11:E4:
F0:99:03:6D:3B:85:7C:09:D3:EE:5D:C8:9A:0B:54:E3:
A8:09:71:6B:E0:CF:22:10:0F:75:CF:71:72:4E:0A:AD:
DF:40:3A:5C:B7:51:E1:A1:79:14:C6:4D:24:23:30:5D:
BC:EC:3C:60:6A:AC:2F:07:CC:FD:F0:EA:47:D9:88:50:
5E:FD:66:6E:56:61:27:29:89:84:51:E6:82:E7:46:50:
FD:94:2A:2C:A7:E4:75:3E:BA:98:0F:84:7F:9F:31:14:
D6:AD:D5:F2:64:CB:7B:1E:05:D0:84:19:72:17:F1:17:
06:EF:3D:CD:D6:4D:EF:06:42:FD:A2:53:2A:4F:85:1D:
C4:1D:3C:AF:CF:DA:AC:10:F5:DD:AC:AC:E9:56:FF:93: 0x010001
- #6
- subjectKeyIdentifier:
f4 b6 e1 20 1d fe 29 ae d2 e4 61 a5 b2 a2 25 b2 |... ..)...a...%.| c8 17 35 6e |..5n |
- authorityKeyIdentifier:
45 eb a2 af f4 92 cb 82 31 2d 51 8b a7 a7 21 9d |E.......1-Q...!.| f3 6d c8 0f |.m.. |
- basicConstraints
- true
- true: 0
- keyUsage: true, 0x86
- extendedKeyUsage: timeStamping
- authorityInfoAccess
- #0
- OCSP: http://ocsp.digicert.com
- caIssuers: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt
- #0
- crlDistributionPoints
- http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl
- certificatePolicies
- #0
- 2.16.840.1.114412.0.2.4
- id-qt-cps: https://www.digicert.com/CPS
- 2.16.840.1.114412.7.1
- 2.16.840.1.114412.0.2.4
- #0
- subjectKeyIdentifier:
- RSA-SHA256:
71 95 12 e9 51 87 56 69 cd ef dd da 7c aa 63 7a |q...Q.Vi....|.cz| b3 78 cf 06 37 40 84 ef 4b 84 bf ca cf 03 02 fd |.x..7@..K.......| c5 a7 c3 0e 20 42 2c af 77 f3 2b 1f 0c 21 5a 2a |.... B,.w.+..!Z*| b7 05 34 1d 6a ae 99 f8 27 a2 66 bf 09 aa 60 df |..4.j...'.f...`.| 76 a4 3a 93 0f f8 b2 d1 d8 7c 19 62 e8 5e 82 25 |v.:......|.b.^.%| 1e c4 ba 1c 7b 2c 21 e2 d6 5b 2c 14 35 43 04 68 |....{,!..[,.5C.h| b2 db 75 02 e0 72 c7 98 d6 3c 64 e5 1f 48 10 18 |..u..r...
- 2
- Certificate #0
- 1
- unnamed
- #0
- C: US
- O: DigiCert Inc
- OU: www.digicert.com
- CN: DigiCert SHA2 Assured ID Timestamping CA
- 04:CD:3F:85:68:AE:76:C6:1B:B0:FE:71:60:CC:A7:6D
- #0
- SHA256: nil
- #2
- contentType: id-smime-ct-TSTInfo
- signingTime: 2020-07-10 10:37:58 UTC
- id-smime-aa-signingCertificate:
03 25 bd 50 5e da 96 30 2d c2 2f 4f a0 1e 4c 28 |.%.P^..0-./O..L(| be 28 34 c5 |.(4. |
- messageDigest:
66 71 c0 38 ca d6 9d 75 1d 72 f7 27 a8 46 81 88 |fq.8...u.r.'.F..| 1b c7 df c7 d8 6b 5d d7 fe fd b2 1a 24 15 04 ff |.....k].....$...|
- rsaEncryption:
44 80 14 52 16 29 57 b7 95 4e 4d a9 80 7f 8a 67 |D..R.)W..NM....g| 14 be 08 e3 54 aa cc 0f 47 b0 09 87 43 74 fd 6e |....T...G...Ct.n| 15 08 96 fd 55 82 f1 58 cd ea 00 d0 04 bc d5 7f |....U..X........| d2 a7 48 69 bb 11 c4 6f 6c 3b 84 cc 0b f7 ff 76 |..Hi...ol;.....v| 93 69 1f bc 80 7e b0 99 b1 d6 05 6b 66 f1 36 4b |.i...~.....kf.6K| 7e 0b 02 77 11 b2 46 36 65 08 09 ca 07 06 9c d1 |~..w..F6e.......| d8 90 41 5b 0d 57 e6 52 31 ad cd 8d 15 59 c3 56 |..A[.W.R1....Y.V| 25 d5 6d c2 ad 35 d7 76 8e 8c f3 1a d9 39 d5 99 |%.m..5.v.....9..| aa a5 ca 8f 4d e7 42 ba 3c e7 98 83 5b 24 23 f8 |....M.B.<...[$#.| 08 29 ee d2 a5 8e a0 c5 66 c9 7f 50 d9 76 9b dc |.)......f..P.v..| 56 d4 4a e0 b1 ec 7e 2d f6 37 5d bd 2e bf da f7 |V.J...~-.7].....| 3a 32 ff 99 ae a0 2e 16 3f bf 74 40 a4 20 c5 c7 |:2......?.t@. ..| fd c8 f2 12 69 2e 95 e5 bf 94 d4 f9 33 ff ad c0 |....i.......3...| 27 2d d5 f3 b6 84 8b 10 06 c4 d3 10 b6 ef ca 37 |'-.............7| 11 26 12 f8 dd c5 b6 00 f4 ef 4f 2a 0d 57 29 f7 |.&........O*.W).| da 74 0b 3a 9a f5 f6 1c 18 81 75 22 2a a6 15 d8 |.t.:......u"*...|
- unnamed
- 3
- pkcs7-signedData
 |
| Please donate some bucks to keep this site up and running: | |
| Ko-fi | |
|---|---|
| Yandex.Money | |
| Thank you! | |
[?] ignoring invalid PEdump::BITMAPINFOHEADER
[?] can't find file_offset of VA 0x12919d0