HostedAgent.exe - Hosted Agent Service

info
MZ
PE
resources
imports
foremost
version info
signature
hexdump
disasm
log
discuss
donate

filename	HostedAgent.exe
size	171664 (0x29e90)
md5	b3ed8d7c65d5c6f11334880a02e17d64

type	PE32 executable (console) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x118

Rich Header

lib id	version	times used
147	30729	20
199	41118	2
259	26131	5
260	26131	12
261	26131	36
257	26131	4
261	26433	3
257	26433	10
257	25203	23
1	0	385
265	26433	16
255	26433	1
151	0	1
258	26433	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	6
TimeDateStamp	0x5d5b57ce
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x102
Magic	0x10b
LinkerVersion	14.14
SizeOfCode	0x17400
SizeOfInitializedData	0xf200
SizeOfUninitializedData	0
AddressOfEntryPoint	0x15071
BaseOfCode	0x1000
BaseOfData	0x19000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	6.0
ImageVersion	0.0
SubsystemVersion	6.0
Reserved1	0
SizeOfImage	0x2b000
SizeOfHeaders	0x400
CheckSum	0x2aecb
Subsystem	3
DllCharacteristics	0x8140
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x173a3	0x17400	R-X CODE
.rdata	0x19000	0xbc4c	0xbe00	R-- IDATA
.data	0x25000	0x1c58	0x800	RW- IDATA
Shared	0x27000	4	0x200	RW- IDATA SHARED
.rsrc	0x28000	0xbd0	0xc00	R-- IDATA
.reloc	0x29000	0x1c54	0x1e00	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x222d8	0x1f4
RESOURCE	0x28000	0xbd0
EXCEPTION	0	0
SECURITY	0x26a00	0x3490
BASERELOC	0x29000	0x1c54
DEBUG	0x1eb80	0x70
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0x1ec90	0x18
LOAD_CONFIG	0x1ebf0	0x40
Bound_IAT	0	0
IAT	0x19000	0x49c
Delay_IAT	0	0
CLR_Header	0	0

TLS

raw start	raw end	index	callbks	zero fill	flags
0x41fe2c	0x41fe34	0x425b58	0x4194d8	0	0x300000

show previews

type	name	size	cp
VERSION	#1	1516	1252
MANIFEST	#1	1345	1252

module_name	hint	function_name
SHLWAPI.dll	143	PathRemoveFileSpecW
SHLWAPI.dll	55	PathAppendW
SHLWAPI.dll	73	PathFileExistsW
SHLWAPI.dll	51	PathAddBackslashW
PSAPI.DLL	16	GetModuleFileNameExW
KERNEL32.dll	673	GetPrivateProfileIntW
KERNEL32.dll	679	GetPrivateProfileStringW
KERNEL32.dll	534	GetCurrentProcessId
KERNEL32.dll	754	GetTempPathW
KERNEL32.dll	752	GetTempFileNameW
KERNEL32.dll	527	GetCurrentDirectoryW
KERNEL32.dll	802	GetWindowsDirectoryW
KERNEL32.dll	394	FindNextFileW
KERNEL32.dll	275	DeleteFileW
KERNEL32.dll	1202	RemoveDirectoryW
KERNEL32.dll	577	GetFileAttributesW
KERNEL32.dll	628	GetModuleHandleW
KERNEL32.dll	1294	SetEvent
KERNEL32.dll	1018	OpenEventW
KERNEL32.dll	565	GetEnvironmentVariableW
KERNEL32.dll	1063	Process32NextW
KERNEL32.dll	1030	OpenProcess
KERNEL32.dll	1061	Process32FirstW
KERNEL32.dll	250	CreateToolhelp32Snapshot
KERNEL32.dll	1193	ReleaseMutex
KERNEL32.dll	382	FindFirstFileW
KERNEL32.dll	1487	WaitForSingleObject
KERNEL32.dll	371	FindClose
KERNEL32.dll	624	GetModuleFileNameW
KERNEL32.dll	1400	SleepEx
KERNEL32.dll	741	GetSystemTimeAsFileTime
KERNEL32.dll	605	GetLastError
KERNEL32.dll	959	LoadLibraryW
KERNEL32.dll	682	GetProcAddress
KERNEL32.dll	425	FreeLibrary
KERNEL32.dll	568	GetExitCodeProcess
KERNEL32.dll	228	CreateProcessW
KERNEL32.dll	134	CloseHandle
KERNEL32.dll	1488	WaitForSingleObjectEx
KERNEL32.dll	220	CreatePipe
KERNEL32.dll	688	GetProcessHeap
KERNEL32.dll	833	HeapAlloc
KERNEL32.dll	732	GetSystemDirectoryW
KERNEL32.dll	837	HeapFree
KERNEL32.dll	584	GetFileSizeEx
KERNEL32.dll	718	GetStdHandle
KERNEL32.dll	1318	SetHandleInformation
KERNEL32.dll	1042	OutputDebugStringW
KERNEL32.dll	862	InitializeSListHead
KERNEL32.dll	1094	QueryPerformanceCounter
KERNEL32.dll	890	IsDebuggerPresent
KERNEL32.dll	897	IsProcessorFeaturePresent
KERNEL32.dll	1445	UnhandledExceptionFilter
KERNEL32.dll	1215	ResetEvent
KERNEL32.dll	858	InitializeCriticalSectionAndSpinCount
KERNEL32.dll	739	GetSystemTime
KERNEL32.dll	1408	SystemTimeToFileTime
KERNEL32.dll	1412	TerminateProcess
KERNEL32.dll	1342	SetProcessWorkingSetSize
KERNEL32.dll	931	K32GetProcessMemoryInfo
KERNEL32.dll	190	CreateEventW
KERNEL32.dll	1221	ResumeThread
KERNEL32.dll	1486	WaitForMultipleObjectsEx
KERNEL32.dll	857	InitializeCriticalSection
KERNEL32.dll	952	LeaveCriticalSection
KERNEL32.dll	303	EnterCriticalSection
KERNEL32.dll	1381	SetUnhandledExceptionFilter
KERNEL32.dll	1132	ReadFile
KERNEL32.dll	1115	RaiseException
KERNEL32.dll	202	CreateFileW
KERNEL32.dll	965	LocalAlloc
KERNEL32.dll	859	InitializeCriticalSectionEx
KERNEL32.dll	533	GetCurrentProcess
KERNEL32.dll	969	LocalFree
KERNEL32.dll	270	DeleteCriticalSection
KERNEL32.dll	606	GetLocalTime
KERNEL32.dll	550	GetDiskFreeSpaceExW
KERNEL32.dll	538	GetCurrentThreadId
ADVAPI32.dll	217	CryptHashData
ADVAPI32.dll	652	RegOpenKeyExW
ADVAPI32.dll	603	RegCloseKey
ADVAPI32.dll	199	CryptDestroyHash
ADVAPI32.dll	612	RegCreateKeyExW
ADVAPI32.dll	535	OpenSCManagerW
ADVAPI32.dll	537	OpenServiceW
ADVAPI32.dll	533	OpenProcessToken
ADVAPI32.dll	395	ImpersonateLoggedOnUser
ADVAPI32.dll	705	RevertToSelf
ADVAPI32.dll	592	QueryServiceStatus
ADVAPI32.dll	101	CloseServiceHandle
ADVAPI32.dll	196	CryptCreateHash
ADVAPI32.dll	193	CryptAcquireContextA
ADVAPI32.dll	220	CryptReleaseContext
ADVAPI32.dll	213	CryptGetHashParam
ADVAPI32.dll	665	RegQueryValueExW
SHELL32.dll	345	SHGetFolderPathW
ole32.dll	93	CoInitialize
ole32.dll	141	CoUninitialize
utilCommon.dll	9	public: __thiscall OS::CException::CException(class OS::CException const &) ??0CException@OS@@QAE@ABV01@@Z
utilCommon.dll	40	public: __thiscall OS::CSystemException::CSystemException(class OS::CSystemException const &) ??0CSystemException@OS@@QAE@ABV01@@Z
utilCommon.dll	329	public: void __cdecl OS::x_wstring::Format(wchar_t const *, ...) ?Format@x_wstring@OS@@QAAXPB_WZZ
utilCommon.dll	363	public: static int __cdecl OS::CSystemException::GetLastError(void) ?GetLastError@CSystemException@OS@@SAHXZ
utilCommon.dll	41	public: __thiscall OS::CSystemException::CSystemException(int, wchar_t const *, int) ??0CSystemException@OS@@QAE@HPB_WH@Z
utilCommon.dll	301	void * __cdecl OS::CreateGlobalMutex(wchar_t *, int) ?CreateGlobalMutex@OS@@YAPAXPA_WH@Z
utilCommon.dll	426	int __cdecl OS::IsWin7AndLater(void) ?IsWin7AndLater@OS@@YAHXZ
utilCommon.dll	86	public: __thiscall OS::x_wstring::x_wstring(class OS::x_wstring const &) ??0x_wstring@OS@@QAE@ABV01@@Z
utilCommon.dll	97	public: __thiscall CHandle::~CHandle(void) ??1CHandle@@QAE@XZ
utilCommon.dll	239	public: class OS::x_wstring & __thiscall OS::x_wstring::operator+=(wchar_t const *) ??Yx_wstring@OS@@QAEAAV01@PB_W@Z
utilCommon.dll	238	public: class OS::x_wstring & __thiscall OS::x_wstring::operator+=(class OS::x_wstring const &) ??Yx_wstring@OS@@QAEAAV01@ABV01@@Z
utilCommon.dll	170	public: class OS::x_wstring const & __thiscall OS::x_wstring::operator=(wchar_t const *) ??4x_wstring@OS@@QAEABV01@PB_W@Z
utilCommon.dll	385	long __cdecl OS::GetRegistryValue(struct HKEY__ , wchar_t const , wchar_t const *, unsigned long, unsigned long &) ?GetRegistryValue@OS@@YAJPAUHKEY__@@PB_W1KAAK@Z
utilCommon.dll	468	long __cdecl OS::SetRegistryValue(struct HKEY__ , wchar_t const , wchar_t const *, unsigned long) ?SetRegistryValue@OS@@YAJPAUHKEY__@@PB_W1K@Z
utilCommon.dll	300	void * __cdecl OS::CreateGlobalEvent(wchar_t const *, int, int) ?CreateGlobalEvent@OS@@YAPAXPB_WHH@Z
utilCommon.dll	513	public: wchar_t const * __thiscall OS::x_wstring::c_str(void)const ?c_str@x_wstring@OS@@QBEPB_WXZ
utilCommon.dll	430	int __cdecl OS::IsX64(void) ?IsX64@OS@@YAHXZ
utilCommon.dll	417	public: bool __thiscall OS::x_wstring::IsEmpty(void)const ?IsEmpty@x_wstring@OS@@QBE_NXZ
utilCommon.dll	169	public: class OS::x_wstring const & __thiscall OS::x_wstring::operator=(wchar_t *) ??4x_wstring@OS@@QAEABV01@PA_W@Z
utilCommon.dll	564	bool __cdecl NS_FileUtils::isFileExist(wchar_t const *) ?isFileExist@NS_FileUtils@@YA_NPB_W@Z
utilCommon.dll	206	public: __thiscall OS::x_wstring::operator wchar_t const *(void)const ??Bx_wstring@OS@@QBEPB_WXZ
utilCommon.dll	530	bool __cdecl NS_FileUtils::createDirectory(wchar_t const *, bool, bool, bool) ?createDirectory@NS_FileUtils@@YA_NPB_W_N11@Z
utilCommon.dll	520	class OS::x_wstring __cdecl NS_StringUtils::concatPath(wchar_t const , wchar_t const ) ?concatPath@NS_StringUtils@@YA?AVx_wstring@OS@@PB_W0@Z
utilCommon.dll	555	class OS::x_wstring __cdecl NS_FileUtils::getParentDirectory(wchar_t const *, bool) ?getParentDirectory@NS_FileUtils@@YA?AVx_wstring@OS@@PB_W_N@Z
utilCommon.dll	540	class OS::x_wstring __cdecl NS_FileUtils::getAppFullPathName(struct HINSTANCE__ *) ?getAppFullPathName@NS_FileUtils@@YA?AVx_wstring@OS@@PAUHINSTANCE__@@@Z
utilCommon.dll	115	public: __thiscall OS::x_wstring::~x_wstring(void) ??1x_wstring@OS@@QAE@XZ
utilCommon.dll	108	public: virtual __thiscall OS::CSystemException::~CSystemException(void) ??1CSystemException@OS@@UAE@XZ
utilCommon.dll	303	long __cdecl OS::DeleteRegistryValue(struct HKEY__ , wchar_t const , wchar_t const *) ?DeleteRegistryValue@OS@@YAJPAUHKEY__@@PB_W1@Z
utilCommon.dll	87	public: __thiscall OS::x_wstring::x_wstring(wchar_t const *) ??0x_wstring@OS@@QAE@PB_W@Z
utilDebug.dll	34	void __cdecl dprintfW(int, wchar_t const , int, wchar_t const , ...) ?dprintfW@@YAXHPB_WH0ZZ
utilDebug.dll	26	public: bool __thiscall CPipeClient::Send(unsigned char , unsigned long ) ?Send@CPipeClient@@QAE_NPAEPAK@Z
utilDebug.dll	33	void __cdecl dprintfW(int, wchar_t const , int, wchar_t const , wchar_t const *, ...) ?dprintfW@@YAXHPB_WH00ZZ
utilDebug.dll	17	public: bool __thiscall CPipeClient::Initial(wchar_t const *) ?Initial@CPipeClient@@QAE_NPB_W@Z
utilDebug.dll	2	public: __thiscall CPipeClient::~CPipeClient(void) ??1CPipeClient@@QAE@XZ
utilDebug.dll		public: __thiscall CPipeClient::CPipeClient(void) ??0CPipeClient@@QAE@XZ
WINTRUST.dll	136	WinVerifyTrust
utilDllMgr.dll	15	public: __thiscall OS::CProcess::CProcess(void) ??0CProcess@OS@@QAE@XZ
utilDllMgr.dll	50	public: virtual __thiscall OS::CProcess::~CProcess(void) ??1CProcess@OS@@UAE@XZ
utilDllMgr.dll	154	public: void __thiscall OS::CProcess::SpawnProcess(wchar_t const , wchar_t const , int, wchar_t const *) ?SpawnProcess@CProcess@OS@@QAEXPB_W0H0@Z
utilDllMgr.dll	141	public: virtual void (__cdecl__thiscall OS::CDll::GetProcessAddress(wchar_t const )const )(void) ?GetProcessAddress@CDll@OS@@UBEP6AXXZPB_W@Z
utilDllMgr.dll	45	public: virtual __thiscall OS::CDll::~CDll(void) ??1CDll@OS@@UAE@XZ
utilDllMgr.dll	143	public: unsigned long __thiscall OS::CProcess::GetProcessID(void)const ?GetProcessID@CProcess@OS@@QBEKXZ
utilDllMgr.dll	3	public: __thiscall OS::CDll::CDll(wchar_t const *) ??0CDll@OS@@QAE@PB_W@Z
MainFlowController.dll	605	public: bool __thiscall CMainFlowController::Init(class OS::x_wstring const &) ?Init@CMainFlowController@@QAE_NABVx_wstring@OS@@@Z
MainFlowController.dll	350	public: class OS::x_wstring __thiscall CConfigurationManager::Get_AgentVersion(void)const ?Get_AgentVersion@CConfigurationManager@@QBE?AVx_wstring@OS@@XZ
MainFlowController.dll	397	public: unsigned long __thiscall CConfigurationManager::Get_DomainId(void)const ?Get_DomainId@CConfigurationManager@@QBEKXZ
MainFlowController.dll	341	public: class OS::x_wstring __thiscall CConfigurationManager::Get_AgentGuid(void)const ?Get_AgentGuid@CConfigurationManager@@QBE?AVx_wstring@OS@@XZ
MainFlowController.dll	824	public: void __thiscall CConfigurationManager::Set_MinHotfixArcVerison(class OS::x_wstring) ?Set_MinHotfixArcVerison@CConfigurationManager@@QAEXVx_wstring@OS@@@Z
MainFlowController.dll	637	public: static void __cdecl CMainFlowController::Release(void) ?Release@CMainFlowController@@SAXXZ
MainFlowController.dll	945	public: void __thiscall CMainFlowController::Uninit(void) ?Uninit@CMainFlowController@@QAEXXZ
MainFlowController.dll	608	public: static class CMainFlowController * __cdecl CMainFlowController::Instance(class OS::x_wstring const &) ?Instance@CMainFlowController@@SAPAV1@ABVx_wstring@OS@@@Z
utilConfiguration.dll	442	public: void __thiscall CConfigurationManager::Set_AgentInstanceIndex(unsigned long) ?Set_AgentInstanceIndex@CConfigurationManager@@QAEXK@Z
utilConfiguration.dll	441	public: void __thiscall CConfigurationManager::Set_AgentInstanceCount(unsigned long) ?Set_AgentInstanceCount@CConfigurationManager@@QAEXK@Z
utilConfiguration.dll	677	public: void __thiscall CConfigurationManager::Set_SimulateFlag(bool) ?Set_SimulateFlag@CConfigurationManager@@QAEX_N@Z
utilConfiguration.dll	427	public: static void __cdecl CConfigurationManager::Release(void) ?Release@CConfigurationManager@@SAXXZ
utilConfiguration.dll	424	public: static class CConfigurationManager * __cdecl CConfigurationManager::Instance(class OS::x_wstring const &, char const *, int) ?Instance@CConfigurationManager@@SAPAV1@ABVx_wstring@OS@@PBDH@Z
MSVCP140.dll	872	public: class std::basic_ostream<char, struct std::char_traits<char> > & __thiscall std::basic_ostream<char, struct std::char_traits<char> >::flush(void) ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
MSVCP140.dll	655	void __cdecl std::_Xout_of_range(char const *) ?_Xout_of_range@std@@YAXPBD@Z
MSVCP140.dll	654	void __cdecl std::_Xlength_error(char const *) ?_Xlength_error@std@@YAXPBD@Z
MSVCP140.dll	406	__int64 const std::_BADOFF ?_BADOFF@std@@3_JB
MSVCP140.dll	53	protected: __thiscall std::basic_streambuf<wchar_t, struct std::char_traits<wchar_t> >::basic_streambuf<wchar_t, struct std::char_traits<wchar_t> >(void) ??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
MSVCP140.dll	16	protected: __thiscall std::basic_ios<wchar_t, struct std::char_traits<wchar_t> >::basic_ios<wchar_t, struct std::char_traits<wchar_t> >(void) ??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
MSVCP140.dll	588	protected: wchar_t * __thiscall std::basic_streambuf<wchar_t, struct std::char_traits<wchar_t> >::_Pninc(void) ?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
MSVCP140.dll	23	public: __thiscall std::basic_iostream<wchar_t, struct std::char_traits<wchar_t> >::basic_iostream<wchar_t, struct std::char_traits<wchar_t> >(class std::basic_streambuf<wchar_t, struct std::char_traits<wchar_t> > *) ??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
MSVCP140.dll	127	public: virtual __thiscall std::basic_ios<wchar_t, struct std::char_traits<wchar_t> >::~basic_ios<wchar_t, struct std::char_traits<wchar_t> >(void) ??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
MSVCP140.dll	139	public: virtual __thiscall std::basic_streambuf<wchar_t, struct std::char_traits<wchar_t> >::~basic_streambuf<wchar_t, struct std::char_traits<wchar_t> >(void) ??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
MSVCP140.dll	554	public: virtual void __thiscall std::basic_streambuf<wchar_t, struct std::char_traits<wchar_t> >::_Lock(void) ?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
MSVCP140.dll	641	public: virtual void __thiscall std::basic_streambuf<wchar_t, struct std::char_traits<wchar_t> >::_Unlock(void) ?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
MSVCP140.dll	1239	protected: virtual __int64 __thiscall std::basic_streambuf<wchar_t, struct std::char_traits<wchar_t> >::showmanyc(void) ?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
MSVCP140.dll	1309	protected: virtual unsigned short __thiscall std::basic_streambuf<wchar_t, struct std::char_traits<wchar_t> >::uflow(void) ?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
MSVCP140.dll	1349	protected: virtual __int64 __thiscall std::basic_streambuf<wchar_t, struct std::char_traits<wchar_t> >::xsgetn(wchar_t *, __int64) ?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
MSVCP140.dll	1352	protected: virtual __int64 __thiscall std::basic_streambuf<wchar_t, struct std::char_traits<wchar_t> >::xsputn(wchar_t const *, __int64) ?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
MSVCP140.dll	1207	protected: virtual class std::basic_streambuf<wchar_t, struct std::char_traits<wchar_t> > * __thiscall std::basic_streambuf<wchar_t, struct std::char_traits<wchar_t> >::setbuf(wchar_t *, __int64) ?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
MSVCP140.dll	1279	protected: virtual int __thiscall std::basic_streambuf<wchar_t, struct std::char_traits<wchar_t> >::sync(void) ?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
MSVCP140.dll	1016	protected: virtual void __thiscall std::basic_streambuf<wchar_t, struct std::char_traits<wchar_t> >::imbue(class std::locale const &) ?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
MSVCP140.dll	292	public: class std::basic_ostream<wchar_t, struct std::char_traits<wchar_t> > & __thiscall std::basic_ostream<wchar_t, struct std::char_traits<wchar_t> >::operator<<(unsigned long) ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z
MSVCP140.dll	130	public: virtual __thiscall std::basic_iostream<wchar_t, struct std::char_traits<wchar_t> >::~basic_iostream<wchar_t, struct std::char_traits<wchar_t> >(void) ??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
MSVCP140.dll	1310	bool __cdecl std::uncaught_exception(void) ?uncaught_exception@std@@YA_NXZ
MSVCP140.dll	1230	struct std::_Smanip<__int64> __cdecl std::setw(__int64) ?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
MSVCP140.dll	1249	public: __int64 __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::sputn(char const *, __int64) ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
MSVCP140.dll	1246	public: int __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::sputc(char) ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
MSVCP140.dll	47	protected: __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::basic_streambuf<char, struct std::char_traits<char> >(void) ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
MSVCP140.dll	580	public: void __thiscall std::basic_ostream<char, struct std::char_traits<char> >::_Osfx(void) ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
MSVCP140.dll	1221	public: void __thiscall std::basic_ios<char, struct std::char_traits<char> >::setstate(int, bool) ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
MSVCP140.dll	12	protected: __thiscall std::basic_ios<char, struct std::char_traits<char> >::basic_ios<char, struct std::char_traits<char> >(void) ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
MSVCP140.dll	586	protected: char * __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::_Pninc(void) ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
MSVCP140.dll	37	public: __thiscall std::basic_ostream<char, struct std::char_traits<char> >::basic_ostream<char, struct std::char_traits<char> >(class std::basic_streambuf<char, struct std::char_traits<char> > *, bool) ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
MSVCP140.dll	125	public: virtual __thiscall std::basic_ios<char, struct std::char_traits<char> >::~basic_ios<char, struct std::char_traits<char> >(void) ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
MSVCP140.dll	137	public: virtual __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::~basic_streambuf<char, struct std::char_traits<char> >(void) ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
MSVCP140.dll	552	public: virtual void __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::_Lock(void) ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
MSVCP140.dll	639	public: virtual void __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::_Unlock(void) ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
MSVCP140.dll	1237	protected: virtual __int64 __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::showmanyc(void) ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
MSVCP140.dll	1307	protected: virtual int __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::uflow(void) ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
MSVCP140.dll	1347	protected: virtual __int64 __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::xsgetn(char *, __int64) ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
MSVCP140.dll	1350	protected: virtual __int64 __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::xsputn(char const *, __int64) ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
MSVCP140.dll	1205	protected: virtual class std::basic_streambuf<char, struct std::char_traits<char> > * __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::setbuf(char *, __int64) ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
MSVCP140.dll	1277	protected: virtual int __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::sync(void) ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
MSVCP140.dll	1014	protected: virtual void __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::imbue(class std::locale const &) ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
MSVCP140.dll	134	public: virtual __thiscall std::basic_ostream<char, struct std::char_traits<char> >::~basic_ostream<char, struct std::char_traits<char> >(void) ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
MSVCP140.dll	264	public: class std::basic_ostream<char, struct std::char_traits<char> > & __thiscall std::basic_ostream<char, struct std::char_traits<char> >::operator<<(class std::ios_base & (__cdecl*)(class std::ios_base &)) ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
MSVCP140.dll	255	public: class std::basic_ostream<char, struct std::char_traits<char> > & __thiscall std::basic_ostream<char, struct std::char_traits<char> >::operator<<(int) ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
dbghelp.dll	30	MiniDumpWriteDump
CRYPT32.dll	177	CryptMsgClose
CRYPT32.dll	75	CertGetNameStringW
CRYPT32.dll	53	CertFindCertificateInStore
CRYPT32.dll	184	CryptMsgGetParam
CRYPT32.dll	18	CertCloseStore
CRYPT32.dll	200	CryptQueryObject
CRYPT32.dll	64	CertFreeCertificateContext
VCRUNTIME140.dll	1	_CxxThrowException
VCRUNTIME140.dll	72	memset
VCRUNTIME140.dll	71	memmove
VCRUNTIME140.dll	34	__std_exception_destroy
VCRUNTIME140.dll	70	memcpy
VCRUNTIME140.dll	64	_set_purecall_handler
VCRUNTIME140.dll	61	_purecall
VCRUNTIME140.dll	35	__std_terminate
VCRUNTIME140.dll	16	__CxxFrameHandler3
VCRUNTIME140.dll	53	_except_handler4_common
VCRUNTIME140.dll	33	__std_exception_copy
api-ms-win-crt-string-l1-1-0.dll	74	_wcsicmp
api-ms-win-crt-string-l1-1-0.dll	173	wcstok_s
api-ms-win-crt-string-l1-1-0.dll	168	wcsncpy_s
api-ms-win-crt-string-l1-1-0.dll	114	iswascii
api-ms-win-crt-string-l1-1-0.dll	157	wcscat_s
api-ms-win-crt-string-l1-1-0.dll	73	_wcsdup
api-ms-win-crt-string-l1-1-0.dll	161	wcscpy_s
api-ms-win-crt-string-l1-1-0.dll	165	wcsncat_s
api-ms-win-crt-string-l1-1-0.dll	124	iswupper
api-ms-win-crt-string-l1-1-0.dll	154	towlower
api-ms-win-crt-stdio-l1-1-0.dll	19	__stdio_common_vswprintf_s
api-ms-win-crt-stdio-l1-1-0.dll	12	__stdio_common_vsnwprintf_s
api-ms-win-crt-stdio-l1-1-0.dll	17	__stdio_common_vswprintf
api-ms-win-crt-stdio-l1-1-0.dll	84	_set_fmode
api-ms-win-crt-stdio-l1-1-0.dll	1	__p__commode
api-ms-win-crt-stdio-l1-1-0.dll	15	__stdio_common_vsprintf_s
api-ms-win-crt-stdio-l1-1-0.dll	7	__stdio_common_vfwprintf
api-ms-win-crt-stdio-l1-1-0.dll		__acrt_iob_func
api-ms-win-crt-heap-l1-1-0.dll	25	malloc
api-ms-win-crt-heap-l1-1-0.dll	22	_set_new_mode
api-ms-win-crt-heap-l1-1-0.dll	24	free
api-ms-win-crt-heap-l1-1-0.dll	8	_callnewh
api-ms-win-crt-runtime-l1-1-0.dll	55	_initialize_wide_environment
api-ms-win-crt-runtime-l1-1-0.dll	43	_get_initial_wide_environment
api-ms-win-crt-runtime-l1-1-0.dll	56	_initterm
api-ms-win-crt-runtime-l1-1-0.dll	57	_initterm_e
api-ms-win-crt-runtime-l1-1-0.dll	88	exit
api-ms-win-crt-runtime-l1-1-0.dll	37	_exit
api-ms-win-crt-runtime-l1-1-0.dll	73	_set_invalid_parameter_handler
api-ms-win-crt-runtime-l1-1-0.dll	5	__p___argc
api-ms-win-crt-runtime-l1-1-0.dll	7	__p___wargv
api-ms-win-crt-runtime-l1-1-0.dll	22	_c_exit
api-ms-win-crt-runtime-l1-1-0.dll	63	_register_thread_local_exe_atexit_callback
api-ms-win-crt-runtime-l1-1-0.dll	68	_set_app_type
api-ms-win-crt-runtime-l1-1-0.dll	66	_seh_filter_exe
api-ms-win-crt-runtime-l1-1-0.dll	21	_beginthreadex
api-ms-win-crt-runtime-l1-1-0.dll	29	_controlfp_s
api-ms-win-crt-runtime-l1-1-0.dll	23	_cexit
api-ms-win-crt-runtime-l1-1-0.dll	35	_errno
api-ms-win-crt-runtime-l1-1-0.dll	58	_invalid_parameter_noinfo
api-ms-win-crt-runtime-l1-1-0.dll	59	_invalid_parameter_noinfo_noreturn
api-ms-win-crt-runtime-l1-1-0.dll	31	_crt_atexit
api-ms-win-crt-runtime-l1-1-0.dll	26	_configure_wide_argv
api-ms-win-crt-runtime-l1-1-0.dll	62	_register_onexit_function
api-ms-win-crt-runtime-l1-1-0.dll	54	_initialize_onexit_table
api-ms-win-crt-runtime-l1-1-0.dll	106	terminate
api-ms-win-crt-convert-l1-1-0.dll	71	_wtoi
api-ms-win-crt-convert-l1-1-0.dll	115	wcstoul
api-ms-win-crt-filesystem-l1-1-0.dll	37	_waccess
api-ms-win-crt-filesystem-l1-1-0.dll	57	_wsplitpath_s
api-ms-win-crt-math-l1-1-0.dll	64	_except1
api-ms-win-crt-math-l1-1-0.dll	46	__setusermatherr
api-ms-win-crt-locale-l1-1-0.dll	8	_configthreadlocale

StringTable 040904b0

FileDescription	Hosted Agent Service
FileVersion	6.6.0.2483
InternalName	HostedAgent.exe
LegalCopyright	Copyright (C) 2019 Trend Micro Incorporated. All rights reserved.
OriginalFilename	HostedAgent.exe
CompanyName	Trend Micro Inc.
CoverageBuild	None
CompileOption	None
BuildType	None
SpecialBuild	2483
PrivateBuild	Build 2483 - None
LegalTrademarks	Copyright (C) Trend Micro Inc.
ProductVersion	6.6
LegalCopyright	Copyright (C) 2019 Trend Micro Incorporated. All rights reserved.
FileVersion	6.6.0.2483
PrivateBuild	2483
ProductName	Trend Micro WFBSS
ProductVersion	6.6

VS_FIXEDFILEINFO

FileVersion	6.6.0.2483
ProductVersion	6.6.0.2483
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	2
FileSubtype	0

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert High Assurance Code Signing CA-1

serial: 0EA0FE4DFB74CC64BC32143103C27C8B

Certificates (4)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
        Validity
            Not Before: Dec 21 00:00:00 2012 GMT
            Not After : Dec 30 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:b3:49:54:4b:97:1c:12:0a:d8:25:79:91:
                    22:57:2a:6f:dc:b8:26:c4:43:73:6b:c2:bf:2e:50:
                    5a:fb:14:c2:76:8e:43:01:25:43:b4:a1:e2:45:f4:
                    e8:b7:7b:c3:74:cc:22:d7:b4:94:00:02:f7:4d:ed:
                    bf:b4:b7:44:24:6b:cd:5f:45:3b:d1:44:ce:43:12:
                    73:17:82:8b:69:b4:2b:cb:99:1e:ac:72:1b:26:4d:
                    71:1f:b1:31:dd:fb:51:61:02:53:a6:aa:f5:49:2c:
                    05:78:45:a5:2f:89:ce:e7:99:e7:fe:8c:e2:57:3f:
                    3d:c6:92:dc:4a:f8:7b:33:e4:79:0a:fb:f0:75:88:
                    41:9c:ff:c5:03:51:99:aa:d7:6c:9f:93:69:87:65:
                    29:83:85:c2:60:14:c4:c8:c9:3b:14:da:c0:81:f0:
                    1f:0d:74:de:92:22:ab:ca:f7:fb:74:7c:27:e6:f7:
                    4a:1b:7f:a7:c3:9e:2d:ae:8a:ea:a6:e6:aa:27:16:
                    7d:61:f7:98:71:11:bc:e2:50:a1:4b:e5:5d:fa:e5:
                    0e:a7:2c:9f:aa:65:20:d3:d8:96:e8:c8:7c:a5:4e:
                    48:44:ff:19:e2:44:07:92:0b:d7:68:84:80:5d:6a:
                    78:64:45:cd:60:46:7e:54:c1:13:7c:c5:79:f1:c9:
                    c1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD
            Authority Information Access: 
                OCSP - URI:http://ocsp.thawte.com
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.thawte.com/ThawteTimestampingCA.crl
            X509v3 Extended Key Usage: 
                Time Stamping
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-1
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        03:09:9b:8f:79:ef:7f:59:30:aa:ef:68:b5:fa:e3:09:1d:bb:
        4f:82:06:5d:37:5f:a6:52:9f:16:8d:ea:1c:92:09:44:6e:f5:
        6d:eb:58:7c:30:e8:f9:69:8d:23:73:0b:12:6f:47:a9:ae:39:
        11:f8:2a:b1:9b:b0:1a:c3:8e:eb:59:96:00:ad:ce:0c:4d:b2:
        d0:31:a6:08:5c:2a:7a:fc:e2:7a:1d:57:4c:a8:65:18:e9:79:
        40:62:25:96:6e:c7:c7:37:6a:83:21:08:8e:41:ea:dd:d9:57:
        3f:1d:77:49:87:2a:16:06:5e:a6:38:6a:22:12:a3:51:19:83:
        7e:b6

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Validity
            Not Before: Oct 18 00:00:00 2012 GMT
            Not After : Dec 29 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer - G4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a2:63:0b:39:44:b8:bb:23:a7:44:49:bb:0e:ff:
                    a1:f0:61:0a:53:93:b0:98:db:ad:2c:0f:4a:c5:6e:
                    ff:86:3c:53:55:0f:15:ce:04:3f:2b:fd:a9:96:96:
                    d9:be:61:79:0b:5b:c9:4c:86:76:e5:e0:43:4b:22:
                    95:ee:c2:2b:43:c1:9f:d8:68:b4:8e:40:4f:ee:85:
                    38:b9:11:c5:23:f2:64:58:f0:15:32:6f:4e:57:a1:
                    ae:88:a4:02:d7:2a:1e:cd:4b:e1:dd:63:d5:17:89:
                    32:5b:b0:5e:99:5a:a8:9d:28:50:0e:17:ee:96:db:
                    61:3b:45:51:1d:cf:12:56:0b:92:47:fc:ab:ae:f6:
                    66:3d:47:ac:70:72:e7:92:e7:5f:cd:10:b9:c4:83:
                    64:94:19:bd:25:80:e1:e8:d2:22:a5:d0:ba:02:7a:
                    a1:77:93:5b:65:c3:ee:17:74:bc:41:86:2a:dc:08:
                    4c:8c:92:8c:91:2d:9e:77:44:1f:68:d6:a8:74:77:
                    db:0e:5b:32:8b:56:8b:33:bd:d9:63:c8:49:9d:3a:
                    c5:c5:ea:33:0b:d2:f1:a3:1b:f4:8b:be:d9:b3:57:
                    8b:3b:de:04:a7:7a:22:b2:24:ae:2e:c7:70:c5:be:
                    4e:83:26:08:fb:0b:bd:a9:4f:99:08:e1:10:28:72:
                    aa:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                OCSP - URI:http://ts-ocsp.ws.symantec.com
                CA Issuers - URI:http://ts-aia.ws.symantec.com/tss-ca-g2.cer
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://ts-crl.ws.symantec.com/tss-ca-g2.crl
            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-2
            X509v3 Subject Key Identifier: 
                46:C6:69:A3:0E:4A:14:1E:D5:4C:DA:52:63:17:3F:5E:36:BC:0D:E6
            X509v3 Authority Key Identifier: 
                5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        78:3b:b4:91:2a:00:4c:f0:8f:62:30:37:78:a3:84:27:07:6f:
        18:b2:de:25:dc:a0:d4:94:03:aa:86:4e:25:9f:9a:40:03:1c:
        dd:ce:e3:79:cb:21:68:06:da:b6:32:b4:6d:bf:f4:2c:26:63:
        33:e4:49:64:6d:0d:e6:c3:67:0e:f7:05:a4:35:6c:7c:89:16:
        c6:e9:b2:df:b2:e9:dd:20:c6:71:0f:cd:95:74:dc:b6:5c:de:
        bd:37:1f:43:78:e6:78:b5:cd:28:04:20:a3:aa:f1:4b:c4:88:
        29:91:0e:80:d1:11:fc:dd:5c:76:6e:4f:5e:0e:45:46:41:6e:
        0d:b0:ea:38:9a:b1:3a:da:09:71:10:fc:1c:79:b4:80:7b:ac:
        69:f4:fd:9c:b6:0c:16:2b:f1:7f:5b:09:3d:9b:5b:e2:16:ca:
        13:81:6d:00:2e:38:0d:a8:29:8f:2c:e1:b2:f4:5a:a9:01:af:
        15:9c:2c:2f:49:1b:db:22:bb:c3:fe:78:94:51:c3:86:b1:82:
        88:5d:f0:3d:b4:51:a1:79:33:2b:2e:7b:b9:dc:20:09:13:71:
        eb:6a:19:5b:cf:e8:a5:30:57:2c:89:49:3f:b9:cf:7f:c9:bf:
        3e:22:68:63:53:9a:bd:69:74:ac:c5:1d:3c:7f:92:e0:c3:bc:
        1c:d8:04:75

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:a0:fe:4d:fb:74:cc:64:bc:32:14:31:03:c2:7c:8b
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance Code Signing CA-1
        Validity
            Not Before: Jul 12 00:00:00 2019 GMT
            Not After : Jul 10 12:00:00 2020 GMT
        Subject: C=TW, L=Taipei, O=Trend Micro, Inc., OU=Taipei, TW, CN=Trend Micro, Inc.
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:f2:dc:be:58:fb:08:31:aa:36:2c:c0:29:89:35:
                    22:dd:51:e4:c4:61:28:da:69:d5:21:ef:15:07:8b:
                    88:5f:be:6d:03:be:7b:ed:d9:f3:c0:44:ce:69:24:
                    ca:86:f3:ff:fe:a9:4e:0b:2a:30:0f:01:b7:d3:8d:
                    c8:aa:1a:90:0a:9f:41:78:e4:6f:09:a7:a3:e3:b7:
                    62:a8:75:47:a0:fc:c4:6e:05:12:81:84:e1:59:35:
                    79:68:c9:95:58:ac:05:df:87:88:2b:8b:8b:c0:99:
                    d9:fd:14:11:e7:24:d3:25:12:3e:cc:11:a3:b4:fe:
                    92:43:34:96:5b:60:d0:a3:09:d5:c3:ed:c1:a5:19:
                    51:62:95:96:96:51:f4:44:22:46:e0:78:e7:ab:dc:
                    5f:15:94:13:ea:d7:64:99:77:83:c4:bc:fa:1d:9d:
                    d9:a4:2a:da:a7:84:c0:1d:78:48:e1:31:19:9d:a1:
                    65:1c:8a:38:aa:67:f6:db:f6:ce:2b:f7:98:1e:91:
                    88:66:f0:5c:34:e0:73:06:40:17:53:a0:e3:c7:92:
                    d0:20:d0:06:30:c6:72:ab:7a:62:ab:13:b3:2e:37:
                    87:b6:e4:20:d2:4e:44:83:89:9c:33:8e:8b:96:a1:
                    28:83:06:de:8a:6b:de:0e:c9:b3:43:6a:ff:82:42:
                    91:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                97:48:03:EB:15:08:6B:B9:B2:58:23:CC:94:2E:F1:C6:65:D2:64:8E
            X509v3 Subject Key Identifier: 
                F7:BD:F0:93:07:81:71:84:A9:6B:09:B1:18:67:5C:37:A1:DA:2F:9A
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl3.digicert.com/ha-cs-2011a.crl
                Full Name:
                  URI:http://crl4.digicert.com/ha-cs-2011a.crl
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.114412.3.1
                  CPS: https://www.digicert.com/CPS
                Policy: 2.23.140.1.4.1
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com
                CA Issuers - URI:http://cacerts.digicert.com/DigiCertHighAssuranceCodeSigningCA-1.crt
            X509v3 Basic Constraints: critical
                CA:FALSE
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        5c:08:ae:5d:58:6a:47:51:19:53:82:d6:88:9d:c2:fc:50:0e:
        7c:39:c6:41:e1:a5:8d:ef:8d:92:3e:12:b7:54:e2:cc:35:72:
        0c:c8:d3:d2:93:82:98:0d:eb:f7:d9:8f:cc:17:d7:64:18:71:
        26:dd:07:c1:34:fd:bb:96:dd:44:fe:8a:40:19:5d:f6:f6:ac:
        d1:88:1f:a5:ba:29:21:da:dc:eb:3f:64:42:23:44:67:28:34:
        81:39:16:bb:df:31:75:33:cf:6a:af:33:17:d7:81:97:d7:d6:
        c5:60:ad:68:1d:e1:35:f3:9e:2d:4a:d3:45:b7:fe:49:11:62:
        66:0a:54:62:c6:07:5f:d7:25:38:2d:f1:e6:e6:bc:3a:4c:44:
        3b:e7:78:f7:9b:07:f1:81:08:2e:38:15:0c:a2:8a:b9:32:f9:
        9e:4b:c4:18:5d:c5:b3:b6:ed:f2:2c:18:7f:df:d8:4e:23:a2:
        1e:7d:a1:98:98:37:f4:3b:89:aa:17:2e:6b:34:db:cb:29:7b:
        ff:d5:11:a1:d1:c1:00:b2:5e:0e:92:1f:62:2a:08:45:e2:33:
        17:f9:fe:c8:36:59:ca:21:c2:41:80:06:83:e0:dd:66:ce:4d:
        04:2a:8a:ef:c4:14:2b:59:23:a6:fa:93:ee:72:c4:8e:8d:c0:
        4c:13:b4:b0

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:c4:d1:e5:8a:4a:68:0c:56:8d:a3:04:7e:7e:4d:5f
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA
        Validity
            Not Before: Feb 11 12:00:00 2011 GMT
            Not After : Feb 10 12:00:00 2026 GMT
        Subject: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance Code Signing CA-1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c5:f9:23:e6:94:27:c4:80:14:a4:80:32:5f:40:
                    a3:8d:6f:70:c0:e5:36:71:71:3a:75:a4:aa:1a:92:
                    94:89:5e:ac:23:71:cb:4e:67:7d:41:3f:aa:e3:4b:
                    b7:7b:be:9d:c1:a8:38:8f:69:2f:3a:24:e9:77:59:
                    12:c7:66:04:43:c2:0d:26:82:89:40:19:f2:2c:ea:
                    e7:4c:e7:7c:05:1a:b8:ff:88:09:4f:26:37:ef:3a:
                    a4:fa:22:6c:88:c9:4a:1b:61:f2:ae:10:5e:6f:bc:
                    d1:79:9b:59:18:60:e5:ee:29:b5:03:2a:a4:ce:f1:
                    83:19:4f:69:05:73:28:09:fb:22:10:93:22:a0:90:
                    19:1a:4c:31:f2:d3:2b:d8:84:43:af:3c:63:ff:98:
                    db:20:d2:09:2b:54:c1:ea:fd:6a:83:e7:10:a3:12:
                    71:f5:d6:d7:e1:12:7a:d5:e0:56:5a:ce:ea:01:5b:
                    68:65:5b:c1:3f:58:52:33:a9:35:61:4e:22:cb:81:
                    ca:36:a3:12:cb:06:d6:cf:1b:4d:18:7e:b9:92:b9:
                    12:cf:40:26:d8:9a:36:85:b3:15:aa:47:93:84:6b:
                    07:bb:bc:d5:b3:de:25:00:11:89:00:68:c1:29:3c:
                    ea:3e:2d:ee:50:ab:d7:1c:30:06:78:3c:a5:10:23:
                    67:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.114412.3
                  CPS: http://www.digicert.com/ssl-cps-repository.htm
                  User Notice:
                    Explicit Text: 
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com
                CA Issuers - URI:http://cacerts.digicert.com/DigiCertHighAssuranceEVRootCA.crt
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl3.digicert.com/DigiCertHighAssuranceEVRootCA.crl
                Full Name:
                  URI:http://crl4.digicert.com/DigiCertHighAssuranceEVRootCA.crl
            X509v3 Subject Key Identifier: 
                97:48:03:EB:15:08:6B:B9:B2:58:23:CC:94:2E:F1:C6:65:D2:64:8E
            X509v3 Authority Key Identifier: 
                B1:3E:C3:69:03:F8:BF:47:01:D4:98:26:1A:08:02:EF:63:64:2B:C3
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        49:eb:7c:60:be:ae:ef:c9:7c:b3:c5:ba:4b:64:df:16:69:e2:
        86:fa:29:d9:de:98:85:7d:40:66:26:33:2f:44:55:aa:aa:90:
        e9:35:70:0a:34:be:d3:ae:54:2e:8e:65:00:d6:7a:32:20:3e:
        6c:26:b8:98:a9:39:b1:bc:95:c7:aa:e9:f5:ee:46:66:c6:b3:
        e8:12:f8:b3:97:9d:ff:74:58:82:34:99:75:50:ac:44:8f:e8:
        92:ce:7d:8b:0f:31:96:c7:dc:d3:11:30:98:74:16:c6:e5:6b:
        45:76:a3:94:01:cd:33:00:7a:48:f6:6f:86:31:c9:56:2b:33:
        22:d5:f8:01:b6:44:ce:8c:b4:ca:88:d2:e4:16:e3:e7:f6:e2:
        3e:e1:09:c0:9d:79:43:43:7f:55:5c:05:ad:93:10:c6:2c:0d:
        6b:c0:9e:ea:78:e5:d2:77:d6:b8:da:9a:98:7f:ba:4c:92:2b:
        9d:bd:a4:88:b1:dd:af:c3:4c:d2:97:9b:03:c6:ae:5f:1b:44:
        0f:33:37:15:e3:cb:ff:2f:56:d3:16:a4:5b:55:67:9d:a2:ca:
        db:34:6c:0c:73:4a:b5:7b:a4:b6:b3:e9:35:02:78:70:ec:00:
        7a:cb:fc:4b:4f:22:36:bb:14:84:c9:8f:91:dd:0f:3c:75:8c:
        ca:0b:88:e7

pkcs7-signedData

SHA1: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15
- :

SHA1

f8 45 a3 6a fb a5 97 81 93 59 89 0f 64 79 18 c9 |.E.j.....Y..dy..| 0d 4a e4 02 |.J.. |

Certificates

Certificate #0
- 2
  - 7E:93:EB:FB:7C:C6:4E:59:EA:4B:9A:77:D4:06:FC:3B
  - RSA-SHA1: nil
  - Issuer
    - C: ZA
    - ST: Western Cape
    - L: Durbanville
    - O: Thawte
    - OU: Thawte Certification
    - CN: Thawte Timestamping CA
  - 2012-12-21 00:00:00 UTC: 2020-12-30 23:59:59 UTC
  - Subject
    - C: US
    - O: Symantec Corporation
    - CN: Symantec Time Stamping Services CA - G2
  - #5
    - rsaEncryption: nil
    - B1:AC:B3:49:54:4B:97:1C:12:0A:D8:25:79:91:22:57:
      2A:6F:DC:B8:26:C4:43:73:6B:C2:BF:2E:50:5A:FB:14:
      C2:76:8E:43:01:25:43:B4:A1:E2:45:F4:E8:B7:7B:C3:
      74:CC:22:D7:B4:94:00:02:F7:4D:ED:BF:B4:B7:44:24:
      6B:CD:5F:45:3B:D1:44:CE:43:12:73:17:82:8B:69:B4:
      2B:CB:99:1E:AC:72:1B:26:4D:71:1F:B1:31:DD:FB:51:
      61:02:53:A6:AA:F5:49:2C:05:78:45:A5:2F:89:CE:E7:
      99:E7:FE:8C:E2:57:3F:3D:C6:92:DC:4A:F8:7B:33:E4:
      79:0A:FB:F0:75:88:41:9C:FF:C5:03:51:99:AA:D7:6C:
      9F:93:69:87:65:29:83:85:C2:60:14:C4:C8:C9:3B:14:
      DA:C0:81:F0:1F:0D:74:DE:92:22:AB:CA:F7:FB:74:7C:
      27:E6:F7:4A:1B:7F:A7:C3:9E:2D:AE:8A:EA:A6:E6:AA:
      27:16:7D:61:F7:98:71:11:BC:E2:50:A1:4B:E5:5D:FA:
      E5:0E:A7:2C:9F:AA:65:20:D3:D8:96:E8:C8:7C:A5:4E:
      48:44:FF:19:E2:44:07:92:0B:D7:68:84:80:5D:6A:78:
      64:45:CD:60:46:7E:54:C1:13:7C:C5:79:F1:C9:C1:71: 0x010001
  - #6
    - subjectKeyIdentifier:
```
5f 9a f5 6e 5c cc cc 74  9a d4 dd 7d ef 3f db ec  |_..n\..t...}.?..|
4c 80 2e dd                                       |L...            |
```
    - authorityInfoAccess
      - OCSP: http://ocsp.thawte.com
    - basicConstraints
      - true
      - true: 0
    - crlDistributionPoints: http://crl.thawte.com/ThawteTimestampingCA.crl
    - extendedKeyUsage: timeStamping
    - keyUsage: true, 6
    - subjectAltName
      - CN: TimeStamp-2048-1
- RSA-SHA1:
```
03 09 9b 8f 79 ef 7f 59  30 aa ef 68 b5 fa e3 09  |....y..Y0..h....|
1d bb 4f 82 06 5d 37 5f  a6 52 9f 16 8d ea 1c 92  |..O..]7_.R......|
09 44 6e f5 6d eb 58 7c  30 e8 f9 69 8d 23 73 0b  |.Dn.m.X|0..i.#s.|
12 6f 47 a9 ae 39 11 f8  2a b1 9b b0 1a c3 8e eb  |.oG..9..*.......|
59 96 00 ad ce 0c 4d b2  d0 31 a6 08 5c 2a 7a fc  |Y.....M..1..\*z.|
e2 7a 1d 57 4c a8 65 18  e9 79 40 62 25 96 6e c7  |.z.WL.e..y@b%.n.|
c7 37 6a 83 21 08 8e 41  ea dd d9 57 3f 1d 77 49  |.7j.!..A...W?.wI|
87 2a 16 06 5e a6 38 6a  22 12 a3 51 19 83 7e b6  |.*..^.8j"..Q..~.|
```
Certificate #1
- 2
  - 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
  - RSA-SHA1: nil
  - Issuer
    - C: US
    - O: Symantec Corporation
    - CN: Symantec Time Stamping Services CA - G2
  - 2012-10-18 00:00:00 UTC: 2020-12-29 23:59:59 UTC
  - Subject
    - C: US
    - O: Symantec Corporation
    - CN: Symantec Time Stamping Services Signer - G4
  - #5
    - rsaEncryption: nil
    - A2:63:0B:39:44:B8:BB:23:A7:44:49:BB:0E:FF:A1:F0:
      61:0A:53:93:B0:98:DB:AD:2C:0F:4A:C5:6E:FF:86:3C:
      53:55:0F:15:CE:04:3F:2B:FD:A9:96:96:D9:BE:61:79:
      0B:5B:C9:4C:86:76:E5:E0:43:4B:22:95:EE:C2:2B:43:
      C1:9F:D8:68:B4:8E:40:4F:EE:85:38:B9:11:C5:23:F2:
      64:58:F0:15:32:6F:4E:57:A1:AE:88:A4:02:D7:2A:1E:
      CD:4B:E1:DD:63:D5:17:89:32:5B:B0:5E:99:5A:A8:9D:
      28:50:0E:17:EE:96:DB:61:3B:45:51:1D:CF:12:56:0B:
      92:47:FC:AB:AE:F6:66:3D:47:AC:70:72:E7:92:E7:5F:
      CD:10:B9:C4:83:64:94:19:BD:25:80:E1:E8:D2:22:A5:
      D0:BA:02:7A:A1:77:93:5B:65:C3:EE:17:74:BC:41:86:
      2A:DC:08:4C:8C:92:8C:91:2D:9E:77:44:1F:68:D6:A8:
      74:77:DB:0E:5B:32:8B:56:8B:33:BD:D9:63:C8:49:9D:
      3A:C5:C5:EA:33:0B:D2:F1:A3:1B:F4:8B:BE:D9:B3:57:
      8B:3B:DE:04:A7:7A:22:B2:24:AE:2E:C7:70:C5:BE:4E:
      83:26:08:FB:0B:BD:A9:4F:99:08:E1:10:28:72:AA:CD: 0x010001
  - X509v3 extensions
    - basicConstraints
      - true
      - nil
    - extendedKeyUsage: true, timeStamping
    - keyUsage: true, 0x80
    - authorityInfoAccess
      - #0
        OCSP: http://ts-ocsp.ws.symantec.com
        caIssuers: http://ts-aia.ws.symantec.com/tss-ca-g2.cer
    - crlDistributionPoints: http://ts-crl.ws.symantec.com/tss-ca-g2.crl
    - subjectAltName
      - CN: TimeStamp-2048-2
    - subjectKeyIdentifier:
```
46 c6 69 a3 0e 4a 14 1e  d5 4c da 52 63 17 3f 5e  |F.i..J...L.Rc.?^|
36 bc 0d e6                                       |6...            |
```
    - authorityKeyIdentifier:
```
5f 9a f5 6e 5c cc cc 74  9a d4 dd 7d ef 3f db ec  |_..n\..t...}.?..|
4c 80 2e dd                                       |L...            |
```
- RSA-SHA1:
```
78 3b b4 91 2a 00 4c f0  8f 62 30 37 78 a3 84 27  |x;..*.L..b07x..'|
07 6f 18 b2 de 25 dc a0  d4 94 03 aa 86 4e 25 9f  |.o...%.......N%.|
9a 40 03 1c dd ce e3 79  cb 21 68 06 da b6 32 b4  |.@.....y.!h...2.|
6d bf f4 2c 26 63 33 e4  49 64 6d 0d e6 c3 67 0e  |m..,&c3.Idm...g.|
f7 05 a4 35 6c 7c 89 16  c6 e9 b2 df b2 e9 dd 20  |...5l|......... |
c6 71 0f cd 95 74 dc b6  5c de bd 37 1f 43 78 e6  |.q...t..\..7.Cx.|
78 b5 cd 28 04 20 a3 aa  f1 4b c4 88 29 91 0e 80  |x..(. ...K..)...|
d1 11 fc dd 5c 76 6e 4f  5e 0e 45 46 41 6e 0d b0  |....\vnO^.EFAn..|
ea 38 9a b1 3a da 09 71  10 fc 1c 79 b4 80 7b ac  |.8..:..q...y..{.|
69 f4 fd 9c b6 0c 16 2b  f1 7f 5b 09 3d 9b 5b e2  |i......+..[.=.[.|
16 ca 13 81 6d 00 2e 38  0d a8 29 8f 2c e1 b2 f4  |....m..8..).,...|
5a a9 01 af 15 9c 2c 2f  49 1b db 22 bb c3 fe 78  |Z.....,/I.."...x|
94 51 c3 86 b1 82 88 5d  f0 3d b4 51 a1 79 33 2b  |.Q.....].=.Q.y3+|
2e 7b b9 dc 20 09 13 71  eb 6a 19 5b cf e8 a5 30  |.{.. ..q.j.[...0|
57 2c 89 49 3f b9 cf 7f  c9 bf 3e 22 68 63 53 9a  |W,.I?.....>"hcS.|
bd 69 74 ac c5 1d 3c 7f  92 e0 c3 bc 1c d8 04 75  |.it...<........u|
```
Certificate #2
- 2
  - 0E:A0:FE:4D:FB:74:CC:64:BC:32:14:31:03:C2:7C:8B
  - RSA-SHA1: nil
  - Issuer
    - C: US
    - O: DigiCert Inc
    - OU: www.digicert.com
    - CN: DigiCert High Assurance Code Signing CA-1
  - 2019-07-12 00:00:00 UTC: 2020-07-10 12:00:00 UTC
  - Subject
    - C: TW
    - L: Taipei
    - O: Trend Micro, Inc.
    - OU: Taipei, TW
    - CN: Trend Micro, Inc.
  - #5
    - rsaEncryption: nil
    - F2:DC:BE:58:FB:08:31:AA:36:2C:C0:29:89:35:22:DD:
      51:E4:C4:61:28:DA:69:D5:21:EF:15:07:8B:88:5F:BE:
      6D:03:BE:7B:ED:D9:F3:C0:44:CE:69:24:CA:86:F3:FF:
      FE:A9:4E:0B:2A:30:0F:01:B7:D3:8D:C8:AA:1A:90:0A:
      9F:41:78:E4:6F:09:A7:A3:E3:B7:62:A8:75:47:A0:FC:
      C4:6E:05:12:81:84:E1:59:35:79:68:C9:95:58:AC:05:
      DF:87:88:2B:8B:8B:C0:99:D9:FD:14:11:E7:24:D3:25:
      12:3E:CC:11:A3:B4:FE:92:43:34:96:5B:60:D0:A3:09:
      D5:C3:ED:C1:A5:19:51:62:95:96:96:51:F4:44:22:46:
      E0:78:E7:AB:DC:5F:15:94:13:EA:D7:64:99:77:83:C4:
      BC:FA:1D:9D:D9:A4:2A:DA:A7:84:C0:1D:78:48:E1:31:
      19:9D:A1:65:1C:8A:38:AA:67:F6:DB:F6:CE:2B:F7:98:
      1E:91:88:66:F0:5C:34:E0:73:06:40:17:53:A0:E3:C7:
      92:D0:20:D0:06:30:C6:72:AB:7A:62:AB:13:B3:2E:37:
      87:B6:E4:20:D2:4E:44:83:89:9C:33:8E:8B:96:A1:28:
      83:06:DE:8A:6B:DE:0E:C9:B3:43:6A:FF:82:42:91:39: 0x010001
  - #6
    - authorityKeyIdentifier:
```
97 48 03 eb 15 08 6b b9  b2 58 23 cc 94 2e f1 c6  |.H....k..X#.....|
65 d2 64 8e                                       |e.d.            |
```
    - subjectKeyIdentifier:
```
f7 bd f0 93 07 81 71 84  a9 6b 09 b1 18 67 5c 37  |......q..k...g\7|
a1 da 2f 9a                                       |../.            |
```
    - keyUsage: true, 0x80
    - extendedKeyUsage: codeSigning
    - crlDistributionPoints
      - http://crl3.digicert.com/ha-cs-2011a.crl: http://crl4.digicert.com/ha-cs-2011a.crl
    - certificatePolicies
      - #0
        2.16.840.1.114412.3.1
        id-qt-cps: https://www.digicert.com/CPS
        2.23.140.1.4.1
    - authorityInfoAccess
      - #0
        OCSP: http://ocsp.digicert.com
        caIssuers: http://cacerts.digicert.com/DigiCertHighAssuranceCodeSigningCA-1.crt
    - basicConstraints
      - true
      - nil
- RSA-SHA1:
```
5c 08 ae 5d 58 6a 47 51  19 53 82 d6 88 9d c2 fc  |\..]XjGQ.S......|
50 0e 7c 39 c6 41 e1 a5  8d ef 8d 92 3e 12 b7 54  |P.|9.A......>..T|
e2 cc 35 72 0c c8 d3 d2  93 82 98 0d eb f7 d9 8f  |..5r............|
cc 17 d7 64 18 71 26 dd  07 c1 34 fd bb 96 dd 44  |...d.q&...4....D|
fe 8a 40 19 5d f6 f6 ac  d1 88 1f a5 ba 29 21 da  |..@.]........)!.|
dc eb 3f 64 42 23 44 67  28 34 81 39 16 bb df 31  |..?dB#Dg(4.9...1|
75 33 cf 6a af 33 17 d7  81 97 d7 d6 c5 60 ad 68  |u3.j.3.......`.h|
1d e1 35 f3 9e 2d 4a d3  45 b7 fe 49 11 62 66 0a  |..5..-J.E..I.bf.|
54 62 c6 07 5f d7 25 38  2d f1 e6 e6 bc 3a 4c 44  |Tb.._.%8-....:LD|
3b e7 78 f7 9b 07 f1 81  08 2e 38 15 0c a2 8a b9  |;.x.......8.....|
32 f9 9e 4b c4 18 5d c5  b3 b6 ed f2 2c 18 7f df  |2..K..].....,...|
d8 4e 23 a2 1e 7d a1 98  98 37 f4 3b 89 aa 17 2e  |.N#..}...7.;....|
6b 34 db cb 29 7b ff d5  11 a1 d1 c1 00 b2 5e 0e  |k4..){........^.|
92 1f 62 2a 08 45 e2 33  17 f9 fe c8 36 59 ca 21  |..b*.E.3....6Y.!|
c2 41 80 06 83 e0 dd 66  ce 4d 04 2a 8a ef c4 14  |.A.....f.M.*....|
2b 59 23 a6 fa 93 ee 72  c4 8e 8d c0 4c 13 b4 b0  |+Y#....r....L...|
```

Certificate #3

02:C4:D1:E5:8A:4A:68:0C:56:8D:A3:04:7E:7E:4D:5F
RSA-SHA1: nil
Issuer
- C: US
- O: DigiCert Inc
- OU: www.digicert.com
- CN: DigiCert High Assurance EV Root CA
2011-02-11 12:00:00 UTC: 2026-02-10 12:00:00 UTC
Subject
- C: US
- O: DigiCert Inc
- OU: www.digicert.com
- CN: DigiCert High Assurance Code Signing CA-1
#5
- rsaEncryption: nil
- C5:F9:23:E6:94:27:C4:80:14:A4:80:32:5F:40:A3:8D:
  6F:70:C0:E5:36:71:71:3A:75:A4:AA:1A:92:94:89:5E:
  AC:23:71:CB:4E:67:7D:41:3F:AA:E3:4B:B7:7B:BE:9D:
  C1:A8:38:8F:69:2F:3A:24:E9:77:59:12:C7:66:04:43:
  C2:0D:26:82:89:40:19:F2:2C:EA:E7:4C:E7:7C:05:1A:
  B8:FF:88:09:4F:26:37:EF:3A:A4:FA:22:6C:88:C9:4A:
  1B:61:F2:AE:10:5E:6F:BC:D1:79:9B:59:18:60:E5:EE:
  29:B5:03:2A:A4:CE:F1:83:19:4F:69:05:73:28:09:FB:
  22:10:93:22:A0:90:19:1A:4C:31:F2:D3:2B:D8:84:43:
  AF:3C:63:FF:98:DB:20:D2:09:2B:54:C1:EA:FD:6A:83:
  E7:10:A3:12:71:F5:D6:D7:E1:12:7A:D5:E0:56:5A:CE:
  EA:01:5B:68:65:5B:C1:3F:58:52:33:A9:35:61:4E:22:
  CB:81:CA:36:A3:12:CB:06:D6:CF:1B:4D:18:7E:B9:92:
  B9:12:CF:40:26:D8:9A:36:85:B3:15:AA:47:93:84:6B:
  07:BB:BC:D5:B3:DE:25:00:11:89:00:68:C1:29:3C:EA:
  3E:2D:EE:50:AB:D7:1C:30:06:78:3C:A5:10:23:67:91: 0x010001

keyUsage: true, 0x86
extendedKeyUsage: codeSigning

certificatePolicies

2.16.840.1.114412.3

id-qt-cps: http://www.digicert.com/ssl-cps-repository.htm

id-qt-unotice:

00 41 00 6e 00 79 00 20  00 75 00 73 00 65 00 20  |.A.n.y. .u.s.e. |
00 6f 00 66 00 20 00 74  00 68 00 69 00 73 00 20  |.o.f. .t.h.i.s. |
00 43 00 65 00 72 00 74  00 69 00 66 00 69 00 63  |.C.e.r.t.i.f.i.c|
00 61 00 74 00 65 00 20  00 63 00 6f 00 6e 00 73  |.a.t.e. .c.o.n.s|
00 74 00 69 00 74 00 75  00 74 00 65 00 73 00 20  |.t.i.t.u.t.e.s. |
00 61 00 63 00 63 00 65  00 70 00 74 00 61 00 6e  |.a.c.c.e.p.t.a.n|
00 63 00 65 00 20 00 6f  00 66 00 20 00 74 00 68  |.c.e. .o.f. .t.h|
00 65 00 20 00 44 00 69  00 67 00 69 00 43 00 65  |.e. .D.i.g.i.C.e|
00 72 00 74 00 20 00 43  00 50 00 2f 00 43 00 50  |.r.t. .C.P./.C.P|
00 53 00 20 00 61 00 6e  00 64 00 20 00 74 00 68  |.S. .a.n.d. .t.h|
00 65 00 20 00 52 00 65  00 6c 00 79 00 69 00 6e  |.e. .R.e.l.y.i.n|
00 67 00 20 00 50 00 61  00 72 00 74 00 79 00 20  |.g. .P.a.r.t.y. |
00 41 00 67 00 72 00 65  00 65 00 6d 00 65 00 6e  |.A.g.r.e.e.m.e.n|
00 74 00 20 00 77 00 68  00 69 00 63 00 68 00 20  |.t. .w.h.i.c.h. |
00 6c 00 69 00 6d 00 69  00 74 00 20 00 6c 00 69  |.l.i.m.i.t. .l.i|
00 61 00 62 00 69 00 6c  00 69 00 74 00 79 00 20  |.a.b.i.l.i.t.y. |
00 61 00 6e 00 64 00 20  00 61 00 72 00 65 00 20  |.a.n.d. .a.r.e. |
00 69 00 6e 00 63 00 6f  00 72 00 70 00 6f 00 72  |.i.n.c.o.r.p.o.r|
00 61 00 74 00 65 00 64  00 20 00 68 00 65 00 72  |.a.t.e.d. .h.e.r|
00 65 00 69 00 6e 00 20  00 62 00 79 00 20 00 72  |.e.i.n. .b.y. .r|
00 65 00 66 00 65 00 72  00 65 00 6e 00 63 00 65  |.e.f.e.r.e.n.c.e|
00 2e                                             |..              |

basicConstraints
- true
- true: 0
authorityInfoAccess
- #0
  - OCSP: http://ocsp.digicert.com
  - caIssuers: http://cacerts.digicert.com/DigiCertHighAssuranceEVRootCA.crt
crlDistributionPoints
- http://crl3.digicert.com/DigiCertHighAssuranceEVRootCA.crl: http://crl4.digicert.com/DigiCertHighAssuranceEVRootCA.crl

subjectKeyIdentifier:

97 48 03 eb 15 08 6b b9  b2 58 23 cc 94 2e f1 c6  |.H....k..X#.....|
65 d2 64 8e                                       |e.d.            |

authorityKeyIdentifier:

b1 3e c3 69 03 f8 bf 47  01 d4 98 26 1a 08 02 ef  |.>.i...G...&....|
63 64 2b c3                                       |cd+.            |

RSA-SHA1:

49 eb 7c 60 be ae ef c9  7c b3 c5 ba 4b 64 df 16  |I.|`....|...Kd..|
69 e2 86 fa 29 d9 de 98  85 7d 40 66 26 33 2f 44  |i...)....}@f&3/D|
55 aa aa 90 e9 35 70 0a  34 be d3 ae 54 2e 8e 65  |U....5p.4...T..e|
00 d6 7a 32 20 3e 6c 26  b8 98 a9 39 b1 bc 95 c7  |..z2 >l&...9....|
aa e9 f5 ee 46 66 c6 b3  e8 12 f8 b3 97 9d ff 74  |....Ff.........t|
58 82 34 99 75 50 ac 44  8f e8 92 ce 7d 8b 0f 31  |X.4.uP.D....}..1|
96 c7 dc d3 11 30 98 74  16 c6 e5 6b 45 76 a3 94  |.....0.t...kEv..|
01 cd 33 00 7a 48 f6 6f  86 31 c9 56 2b 33 22 d5  |..3.zH.o.1.V+3".|
f8 01 b6 44 ce 8c b4 ca  88 d2 e4 16 e3 e7 f6 e2  |...D............|
3e e1 09 c0 9d 79 43 43  7f 55 5c 05 ad 93 10 c6  |>....yCC.U\.....|
2c 0d 6b c0 9e ea 78 e5  d2 77 d6 b8 da 9a 98 7f  |,.k...x..w......|
ba 4c 92 2b 9d bd a4 88  b1 dd af c3 4c d2 97 9b  |.L.+........L...|
03 c6 ae 5f 1b 44 0f 33  37 15 e3 cb ff 2f 56 d3  |..._.D.37..../V.|
16 a4 5b 55 67 9d a2 ca  db 34 6c 0c 73 4a b5 7b  |..[Ug....4l.sJ.{|
a4 b6 b3 e9 35 02 78 70  ec 00 7a cb fc 4b 4f 22  |....5.xp..z..KO"|
36 bb 14 84 c9 8f 91 dd  0f 3c 75 8c ca 0b 88 e7  |6........

Signer

1
unnamed
- #0
  - C: US
  - O: DigiCert Inc
  - OU: www.digicert.com
  - CN: DigiCert High Assurance Code Signing CA-1
- 0E:A0:FE:4D:FB:74:CC:64:BC:32:14:31:03:C2:7C:8B
SHA1: nil
#3
- 1.3.6.1.4.1.311.2.1.12
  - nil
- contentType: 1.3.6.1.4.1.311.2.1.4
- 1.3.6.1.4.1.311.2.1.11: msCodeInd
- messageDigest:
```
13 66 76 5f c3 44 3f 22  5a 3c 50 54 b7 f2 ad f1  |.fv_.D?"Z
```

rsaEncryption:

ba d8 36 09 91 18 97 68  88 82 da 0b 9d b7 96 47  |..6....h.......G|
a7 dc e8 00 f9 1f 14 63  71 e1 9e 1d 89 3a dc 54  |.......cq....:.T|
43 33 f3 a5 ea 39 ea 47  81 ac d4 04 11 08 90 ca  |C3...9.G........|
81 e2 33 62 27 a0 72 bf  94 e4 15 b5 12 c6 e4 c6  |..3b'.r.........|
64 61 7d a1 c9 49 5a e1  7e 90 63 25 ff b0 6a d0  |da}..IZ.~.c%..j.|
43 a0 45 cd 5b 72 64 92  0a 29 df ed e4 cc 1c c3  |C.E.[rd..)......|
1e 79 ed 3f 63 91 d4 5d  03 b6 aa e9 e4 9e 14 93  |.y.?c..]........|
87 3a 8e 7e a0 0d 3d 03  f8 fc 5f 90 0d 7b 84 e8  |.:.~..=..._..{..|
65 3e 1c d1 21 39 7b 5a  8f b3 ad 66 cc dc 91 16  |e>..!9{Z...f....|
0d 61 75 2b c0 81 23 ca  9f 1e 11 78 a2 af 55 a7  |.au+..#....x..U.|
94 c4 4c 31 b8 10 fa 7b  da ba 25 5a 1a 32 82 60  |..L1...{..%Z.2.`|
cb ca 1f 11 2b cc 08 74  8b 39 7c 96 95 df dd 6b  |....+..t.9|....k|
b4 e0 15 95 94 5f e3 39  6a fc 88 13 2e b9 86 c8  |....._.9j.......|
32 9d 40 bc 4f 9f 98 1a  0b 5a 1b b5 4d d9 cc 08  |2.@.O....Z..M...|
dd dd 28 25 7c 04 b2 97  81 ec 49 b0 11 b8 d3 73  |..(%|.....I....s|
13 42 c8 1a c7 71 1c b4  10 9a 70 f7 4d 75 6c f7  |.B...q....p.Mul.|

countersignature

unnamed
- #0
  - C: US
  - O: Symantec Corporation
  - CN: Symantec Time Stamping Services CA - G2
- 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
SHA1: nil

contentType: pkcs7-data
signingTime: 2019-08-20 02:34:40 UTC

messageDigest:

77 4f a3 6a a0 02 ca 24  fe d1 8a 0d 0e 82 0a e1  |wO.j...$........|
2e e0 5e 60                                       |..^`            |

rsaEncryption:

91 0f fb 27 a0 6e e9 7f  50 84 aa d5 b7 38 5e b3  |...'.n..P....8^.|
fc 6e ec bf 64 30 f3 bc  df 14 40 73 43 5b 59 bd  |.n..d0....@sC[Y.|
ff 11 5e c7 d0 c4 8b 19  a0 32 55 08 6f e3 ca e3  |..^......2U.o...|
cf 04 fc 67 ae 04 cb 9e  58 76 08 0d d9 0f 7d c2  |...g....Xv....}.|
80 8d 3f 6b aa 12 fe c1  a2 72 20 7a a0 c6 28 bb  |..?k.....r z..(.|
9c f4 cf ad 35 cd 0c 35  0a 9c fa 84 c5 c2 a2 92  |....5..5........|
66 c0 71 12 1c 60 4a 92  51 12 51 ef 1a 7b 13 83  |f.q..`J.Q.Q..{..|
b4 be 8e 6d 09 d1 f2 c5  ee 9a 18 4b 83 f6 2c 7b  |...m.......K..,{|
14 cc 88 eb 00 a0 51 f0  23 64 5a 75 44 b6 ba d2  |......Q.#dZuD...|
1e bd 02 4a af 83 cc 37  52 0c f7 58 66 c1 7a 2c  |...J...7R..Xf.z,|
9f 05 f2 46 83 70 66 f9  97 c5 3e 46 65 88 6d b5  |...F.pf...>Fe.m.|
7d 4e e2 d8 8a 7e d7 2f  a1 1f 97 25 4d 5d e8 67  |}N...~./...%M].g|
61 1d cd d9 bd f4 e0 69  99 04 a6 51 80 6d 91 9a  |a......i...Q.m..|
af 43 6c 1b b8 fb 16 58  c5 02 28 42 48 84 ab b8  |.Cl....X..(BH...|
93 d1 27 96 d3 fb 45 9c  fe b8 fb 8c 72 1b ed e1  |..'...E.....r...|
13 e2 44 4e c5 7f 43 c0  62 a1 2a 61 14 ad 09 af  |..DN..C.b.*a....|

1.3.6.1.4.1.311.2.4.1

pkcs7-signedData

SHA256: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15
- :

SHA256

fa 56 85 53 d7 4d e1 a2 a8 b3 14 01 e7 8a 96 db |.V.S.M..........| c0 c3 ea 38 17 b3 55 2c 7c 61 79 fe 4a 95 53 cb |...8..U,|ay.J.S.|

Certificates
- Certificate #0
  - 2
    - 59:40:B8:27:93:45:F0:1C:05:84:33:53:8D:7E:59:0C
    - RSA-SHA256: nil
    - Issuer
      - C: US
      - O: Symantec Corporation
      - OU: Symantec Trust Network
      - CN: Symantec Class 3 SHA256 Code Signing CA
    - 2019-06-14 00:00:00 UTC: 2020-08-03 23:59:59 UTC
    - Subject
      - C: TW
      - L: Taipei
      - O: Trend Micro, Inc.
      - CN: Trend Micro, Inc.
    - #5
      - rsaEncryption: nil
      - 9D:54:0E:51:5D:F1:D1:BC:EA:0C:28:35:6E:0D:CB:2F:
        2B:B2:F0:B6:56:58:63:E3:4C:0A:4F:B4:0B:0C:C0:C7:
        F4:7D:29:9B:F2:E7:EE:EB:58:FB:6D:10:68:C2:5B:10:
        C0:17:C3:F9:D1:EA:E6:6F:3A:67:65:66:3B:E2:42:22:
        B4:37:39:03:48:D5:D2:4A:11:89:72:C0:09:F3:9F:CD:
        DD:52:6D:4D:E4:2A:CC:8B:74:F6:88:30:0C:95:09:AA:
        88:CF:E0:47:4E:82:48:4E:6F:F0:3E:3D:A8:30:AF:30:
        27:5E:03:CA:5A:0B:23:E8:55:DA:4E:04:20:1A:EB:27:
        0D:02:97:39:03:CA:82:B2:FF:DB:AB:B1:BF:51:44:4F:
        49:48:01:93:73:4E:D3:BE:D5:7E:50:DF:90:6E:01:DB:
        AA:39:2E:35:82:0C:5B:0F:06:9A:C4:2D:6C:6D:F6:55:
        DD:B9:A3:3F:C7:4D:7A:4F:4D:7C:7B:10:63:A9:78:17:
        60:64:79:1A:5C:69:78:16:D4:88:10:0E:86:FA:E8:FE:
        4B:AB:4A:BD:86:4A:C9:9B:F4:B3:58:78:9E:32:EF:B3:
        4E:D6:B1:C9:A6:29:6A:41:89:DD:A4:2F:22:74:05:F6:
        DB:F8:97:9E:E9:75:44:5E:5A:0F:AF:A2:24:80:51:E1: 0x010001
    - X509v3 extensions
      - basicConstraints
        nil
      - keyUsage: true, 0x80
      - crlDistributionPoints: http://sv.symcb.com/sv.crl
      - certificatePolicies
        2.23.140.1.4.1
        #0
        id-qt-cps: https://d.symcb.com/cps
        id-qt-unotice: https://d.symcb.com/rpa
      - extendedKeyUsage: codeSigning
      - authorityInfoAccess
        #0
        OCSP: http://sv.symcd.com
        caIssuers: http://sv.symcb.com/sv.crt
      - authorityKeyIdentifier:
        96 3b 53 f0 79 33 97 af 7d 83 ef 2e 2b cc ca b7 |.;S.y3..}...+...| 86 1e 72 66 |..rf |
      - subjectKeyIdentifier:
        34 21 7a 02 66 2e c4 34 77 35 a2 de 00 8e 5a 03 |4!z.f..4w5....Z.| 33 01 01 a1 |3... |
  - RSA-SHA256:
```
38 5b e8 20 55 23 fc 2b  2b 07 eb 7a 65 58 cc 0d  |8[. U#.++..zeX..|
9a 63 06 56 ac f3 c8 e0  23 21 20 e7 e3 ba e9 15  |.c.V....#! .....|
81 b1 96 ff 05 68 ae c1  4b ab ae 38 e8 ab 0a 5a  |.....h..K..8...Z|
57 46 43 3d f3 5e 2d 38  1e fb fc 3f 39 2b 80 af  |WFC=.^-8...?9+..|
0a 54 e6 5d 51 fc 06 d6  c3 50 f6 51 f9 d6 74 1f  |.T.]Q....P.Q..t.|
47 57 88 f1 2d 59 ab 33  a4 9d 6a f0 d5 3f ac d4  |GW..-Y.3..j..?..|
96 71 98 d4 33 c1 37 f8  33 ee f4 c1 96 50 9b dd  |.q..3.7.3....P..|
b9 30 04 74 34 12 2e ea  d1 05 e1 24 3c a7 07 6a  |.0.t4......$<..j|
f4 0d 0b 71 e6 8d 87 52  89 96 bf e8 6d cb 43 7e  |...q...R....m.C~|
8f a4 71 cf df f9 b7 41  bc 8e 4f ea 14 99 e3 42  |..q....A..O....B|
0d 07 b6 b1 55 17 8e f3  b1 29 3b c3 08 c5 08 03  |....U....);.....|
3d fc 2f 67 48 38 36 2c  d4 e7 a5 5d ed d5 79 57  |=./gH86,...]..yW|
5e 92 16 c8 6d 39 b4 e0  9f 2a dd 67 9a ce af f7  |^...m9...*.g....|
d1 a4 59 6f 08 68 f4 0d  e3 35 d7 a8 0a 58 25 68  |..Yo.h...5...X%h|
d1 3c 31 42 d8 32 18 ee  d3 8a 55 d5 ae 7f 1b 51  |.<1B.2....U....Q|
22 68 92 a0 88 00 59 98  81 01 08 f6 7e a5 ca c6  |"h....Y.....~...|
```
- Certificate #1
  - 2
    - 3D:78:D7:F9:76:49:60:B2:61:7D:F4:F0:1E:CA:86:2A
    - RSA-SHA256: nil
    - Issuer
      - C: US
      - O: VeriSign, Inc.
      - OU: VeriSign Trust Network
      - OU: (c) 2006 VeriSign, Inc. - For authorized use only
      - CN: VeriSign Class 3 Public Primary Certification Authority - G5
    - 2013-12-10 00:00:00 UTC: 2023-12-09 23:59:59 UTC
    - Subject
      - C: US
      - O: Symantec Corporation
      - OU: Symantec Trust Network
      - CN: Symantec Class 3 SHA256 Code Signing CA
    - #5
      - rsaEncryption: nil
      - 97:83:1E:00:16:AF:2C:B1:D2:08:C4:D7:68:93:51:60:
        1E:71:F6:E2:47:B4:DB:58:4D:23:62:6A:B4:BF:5A:1B:
        51:F7:A3:0D:18:77:68:BB:D8:36:AB:2F:21:50:DA:9E:
        F3:E7:5F:27:4E:0B:C2:97:C8:09:70:93:A9:DA:5C:0D:
        4E:A4:0D:91:A0:B4:EC:14:CE:91:72:54:2E:CE:A3:DB:
        44:E9:52:1B:3F:41:3C:CA:4A:E4:AA:C0:E8:39:AB:53:
        CC:21:D0:CC:CF:7F:9B:E6:C2:CC:58:6A:82:15:EE:3D:
        36:CF:1C:C5:97:07:24:8E:F1:7B:BE:31:2D:3D:6E:DC:
        B5:99:42:9F:4B:61:95:5F:1C:70:EE:17:7D:DB:8B:E5:
        61:89:78:C7:68:1B:AF:11:78:1A:98:AE:C4:55:47:53:
        D9:B3:32:D6:A1:0E:46:40:C5:97:92:8A:D1:53:A7:99:
        5B:85:35:57:D3:EA:93:62:61:20:0A:C7:30:77:24:11:
        4D:62:83:B6:BA:7B:68:82:31:EE:65:CA:DF:F9:D5:8D:
        B2:35:DC:8C:2B:6F:6A:72:5C:60:84:9C:F2:0C:94:5E:
        C0:56:52:00:48:CC:D3:F8:A5:7D:DE:2F:D7:13:E4:38:
        A8:84:D5:46:B8:13:86:C2:1B:9D:EA:5A:38:DD:9B:DB: 0x010001
    - X509v3 extensions
      - authorityInfoAccess
        OCSP: http://s2.symcb.com
      - basicConstraints
        true
        true: 0
      - certificatePolicies
        2.16.840.1.113733.1.7.23.3
        #0
        id-qt-cps: http://www.symauth.com/cps
        id-qt-unotice: http://www.symauth.com/rpa
      - crlDistributionPoints: http://s1.symcb.com/pca3-g5.crl
      - extendedKeyUsage
        clientAuth: codeSigning
      - keyUsage: true, 6
      - subjectAltName
        CN: SymantecPKI-1-567
      - subjectKeyIdentifier:
        96 3b 53 f0 79 33 97 af 7d 83 ef 2e 2b cc ca b7 |.;S.y3..}...+...| 86 1e 72 66 |..rf |
      - authorityKeyIdentifier:
        7f d3 65 a7 c2 dd ec bb f0 30 09 f3 43 39 fa 02 |..e......0..C9..| af 33 31 33 |.313 |
  - RSA-SHA256:
```
13 85 1a 1e 69 a9 37 f7  a0 bd a4 af 7e 1d 61 53  |....i.7.....~.aS|
fe 9d 8c 5e 0c a6 75 1e  78 17 23 dd fd ec 1a 03  |...^..u.x.#.....|
55 39 fb 71 95 c7 65 5a  a7 8e 30 d2 44 5a 61 db  |U9.q..eZ..0.DZa.|
70 6f da 21 05 c2 2e 73  ba 49 f1 d1 93 fe 5d c9  |po.!...s.I....].|
cd 5e 03 e0 89 9e 3f 74  1e d7 f7 38 8b a9 d6 cf  |.^....?t...8....|
bb 35 2f 33 58 a8 92 56  d1 c8 4d 3b 82 e6 79 84  |.5/3X..V..M;..y.|
16 fc 28 b0 b1 47 f3 1d  a2 3e ee 87 d9 a6 7f a4  |..(..G...>......|
56 a5 3f ad 84 2e 29 de  7c bc a8 aa a3 3d 04 01  |V.?...).|....=..|
ea ba 93 a2 0e 50 22 29  17 4c 87 e4 3a 11 5f d6  |.....P").L..:._.|
a4 25 89 9b 05 6b 2f b4  c9 01 4c 27 7b 0b ac 19  |.%...k/...L'{...|
05 22 a0 60 15 3f da c9  fb 4d 4c 8f fb 72 67 77  |.".`.?...ML..rgw|
fd 27 94 c7 ba 35 0e 88  49 fe 8d fd 28 af 4a 12  |.'...5..I...(.J.|
bd 0d b3 97 05 de 44 0c  15 fa 36 2b 03 dc c1 50  |......D...6+...P|
01 f1 a1 11 5d 14 e5 e2  bd 27 4b 54 be 2b 84 5e  |....]....'KT.+.^|
0f a6 c3 74 05 0a ef 97  c3 89 22 b1 1f 77 f3 bd  |...t......"..w..|
cd 43 d4 f1 4c a9 3f b5  8b 84 af 64 f2 d0 14 21  |.C..L.?....d...!|
```

Signer

1
unnamed
- #0
  - C: US
  - O: Symantec Corporation
  - OU: Symantec Trust Network
  - CN: Symantec Class 3 SHA256 Code Signing CA
- 59:40:B8:27:93:45:F0:1C:05:84:33:53:8D:7E:59:0C
SHA256: nil

1.3.6.1.4.1.311.2.1.12
- nil
1.2.840.113549.1.9.25.4: 1
contentType: 1.3.6.1.4.1.311.2.1.4
1.3.6.1.4.1.311.2.1.11: msCodeInd

messageDigest:

db ac 13 83 f3 1a d5 3d  c8 c2 43 11 de 5c 5b 16  |.......=..C..\[.|
d6 ff 47 d3 99 46 f1 f5  66 da 4f 1b 47 6a 7e e1  |..G..F..f.O.Gj~.|

rsaEncryption:

5a c0 4a 06 58 7f c3 d2  e2 3e a3 9e 95 e7 1d e4  |Z.J.X....>......|
11 4d 03 1e e9 b2 91 05  74 fd e6 a8 a8 ce d0 2a  |.M......t......*|
3b 63 07 1a 91 a7 54 44  81 b5 9d 24 18 32 3a 57  |;c....TD...$.2:W|
be 7c 57 79 2e 7c 1c 67  05 e3 db ec 6f 0f c3 e8  |.|Wy.|.g....o...|
90 5a 7e 4c ae cb 2f 95  25 92 0f 01 22 e5 33 97  |.Z~L../.%...".3.|
68 34 9a 6b 4d 05 53 3c  ea 8d 46 40 e0 09 8b fd  |h4.kM.S<..F@....|
b3 ae 41 b7 ff 44 71 cb  2c d0 0a 1c 8a 58 b7 99  |..A..Dq.,....X..|
ca 6a 33 c1 1d 08 97 f3  18 da cf 3c dc b6 39 fa  |.j3........<..9.|
68 c6 0e a4 bf 54 c9 a8  16 70 e0 30 db 66 e7 7e  |h....T...p.0.f.~|
3d 3e aa 8f 8a d3 34 85  49 cb 0c af 38 a3 80 f3  |=>....4.I...8...|
f3 72 02 4b f7 7f 56 84  e9 b3 f3 e7 86 0d 87 7a  |.r.K..V........z|
08 8d a7 68 42 e8 33 1c  6d 3b d9 1b 89 42 30 76  |...hB.3.m;...B0v|
f3 0a 57 51 ea 78 1f 87  51 a1 e6 8f b9 0f ba 66  |..WQ.x..Q......f|
48 b4 09 9e 3a a6 c4 00  60 da 39 89 e7 69 99 cc  |H...:...`.9..i..|
06 8c 91 83 3a 83 d1 c4  b2 6b 09 a6 99 b0 c6 14  |....:....k......|
2a dd e5 f1 f1 d5 20 3f  95 d1 2f 86 b1 d6 09 73  |*..... ?../....s|

1.3.6.1.4.1.311.3.3.1

pkcs7-signedData

SHA256
id-smime-ct-TSTInfo
- 1
  - 2.16.840.1.113733.1.7.23.3
  - SHA256
    - 3b 01 41 b7 87 b5 a4 5b c9 84 d3 10 ed 1a 19 84 |;.A....[........| 8e 96 82 4e 7d 3c 9d a3 ee af d9 a3 dc 1b a3 01 |...N}<..........|
  - 67:81:D5:62:BD:9B:36:38:96:3D:55:AE:B5:86:53:5B:
    48:AB:85:D2
  - 2019-08-20 02:34:43 UTC
  - 0x1E
  - #5
    - C: US
    - O: Symantec Corporation
    - OU: Symantec Trust Network
    - CN: Symantec SHA256 TimeStamping Signer - G3
Certificates
- Certificate #0
  - 2
    - 7B:05:B1:D4:49:68:51:44:F7:C9:89:D2:9C:19:9D:12
    - RSA-SHA256: nil
    - Issuer
      - C: US
      - O: VeriSign, Inc.
      - OU: VeriSign Trust Network
      - OU: (c) 2008 VeriSign, Inc. - For authorized use only
      - CN: VeriSign Universal Root Certification Authority
    - 2016-01-12 00:00:00 UTC: 2031-01-11 23:59:59 UTC
    - Subject
      - C: US
      - O: Symantec Corporation
      - OU: Symantec Trust Network
      - CN: Symantec SHA256 TimeStamping CA
    - #5
      - rsaEncryption: nil
      - BB:59:9D:59:55:4F:9D:8C:72:5D:1A:81:A2:EB:55:F3:
        B0:01:AD:3C:71:AC:32:8F:05:6B:86:9A:27:00:32:97:
        6A:4D:C9:64:14:4B:29:BB:C2:D9:29:B9:2E:EC:63:B3:
        E1:CF:3F:0B:56:90:F8:62:1B:7E:EB:A6:07:E2:DE:7F:
        5E:6D:40:38:D4:91:06:E7:41:7C:79:1C:CB:CB:AD:1B:
        BF:D8:95:91:F3:F0:EE:6C:F8:AD:96:39:2E:7F:C1:27:
        B8:78:39:C5:84:A5:ED:ED:AF:87:8E:CE:8D:C7:6D:EA:
        D2:98:B5:3A:1F:1E:39:9D:C3:F4:9A:A8:F4:84:E1:C4:
        D1:7C:71:C6:06:29:B4:3F:E4:83:0D:26:C3:7B:08:3E:
        4D:F9:0A:B7:33:49:FF:CA:3B:D4:F5:B2:9B:4B:E1:88:
        99:1A:F5:C0:E9:33:14:D6:DF:C7:80:DB:91:EE:FE:BC:
        92:57:72:77:F4:CD:A8:CC:FE:09:F5:93:37:BE:95:88:
        6A:C5:DC:F4:B1:4B:D4:CE:E8:09:91:5F:B5:84:79:35:
        8A:78:AC:19:32:8F:23:C1:32:41:1B:59:0E:A9:3E:B1:
        CC:F9:D6:2B:EF:B7:D8:E4:D5:1D:6D:11:3A:92:F6:93:
        C9:9C:E3:48:EE:BB:53:0E:D4:36:97:86:78:C5:A1:37: 0x010001
    - #6
      - keyUsage: true, 6
      - basicConstraints
        true
        true: 0
      - certificatePolicies
        2.16.840.1.113733.1.7.23.3
        #0
        id-qt-cps: https://d.symcb.com/cps
        id-qt-unotice: https://d.symcb.com/rpa
      - authorityInfoAccess
        OCSP: http://s.symcd.com
      - crlDistributionPoints: http://s.symcb.com/universal-root.crl
      - extendedKeyUsage: timeStamping
      - subjectAltName
        CN: TimeStamp-2048-3
      - subjectKeyIdentifier:
        af 63 d6 ca a3 4e 85 72 e0 a7 bc 41 f3 29 a2 38 |.c...N.r...A.).8| 7f 80 75 62 |..ub |
      - authorityKeyIdentifier:
        b6 77 fa 69 48 47 9f 53 12 d5 c2 ea 07 32 76 07 |.w.iHG.S.....2v.| d1 97 07 19 |.... |
  - RSA-SHA256:
```
75 ea b0 2d d5 34 19 5c  32 45 fe 0e e1 d4 4f a6  |u..-.4.\2E....O.|
78 c1 6f d7 ea dd dc 4f  f3 a1 c8 81 88 f7 a7 8f  |x.o....O........|
15 e6 40 29 ad e6 5d f4  a2 d9 56 64 84 71 30 2a  |..@)..]...Vd.q0*|
dd 1e 61 17 66 20 56 06  98 19 8d 5d 71 f2 f8 97  |..a.f V....]q...|
bc 09 fd 1c 91 47 c9 e2  e8 8d 03 fb cc 90 2f d6  |.....G......../.|
0a 6c 4e 33 ec d6 b4 93  c8 4c 90 63 48 39 40 21  |.lN3.....L.cH9@!|
c4 dd d6 6e 89 98 3c b5  98 97 e8 a9 06 b7 09 c9  |...n..<.........|
8f 53 57 41 90 2f e1 1e  4d 4e dc ca 10 78 6c 42  |.SWA./..MN...xlB|
6e f0 b6 c5 f8 61 5c 52  f5 4e f6 6b 8d f7 4a 7a  |n....a\R.N.k..Jz|
be f3 cd fd 03 d7 d9 f6  03 a8 0f e3 53 f7 0a 75  |............S..u|
ec c6 75 2e aa 66 85 04  99 b7 f8 06 57 e1 c6 0e  |..u..f......W...|
f6 e8 af da ec 9b 18 1f  aa b9 e3 3a 00 bf ce 8a  |...........:....|
94 cb 01 db 9e c7 38 bb  0f 52 ab d1 e3 94 03 60  |......8..R.....`|
0a 4d a0 fe 27 6d 14 32  fc 3f 97 40 e1 bf 99 89  |.M..'m.2.?.@....|
db e4 39 14 bd da e4 d3  c3 ea 2b 5a b3 95 58 55  |..9.......+Z..XU|
04 7d c7 9a ec 23 03 8d  85 2a d2 ff ae a9 61 81  |.}...#...*....a.|
```
- Certificate #1
  - 2
    - 7B:D4:E5:AF:BA:CC:07:3F:A1:01:23:04:22:41:4D:12
    - RSA-SHA256: nil
    - Issuer
      - C: US
      - O: Symantec Corporation
      - OU: Symantec Trust Network
      - CN: Symantec SHA256 TimeStamping CA
    - 2017-12-23 00:00:00 UTC: 2029-03-22 23:59:59 UTC
    - Subject
      - C: US
      - O: Symantec Corporation
      - OU: Symantec Trust Network
      - CN: Symantec SHA256 TimeStamping Signer - G3
    - #5
      - rsaEncryption: nil
      - AF:0E:8A:AA:F8:DC:BF:69:7B:54:17:71:47:09:BD:8D:
        3C:81:F8:74:15:77:67:90:9C:FD:DE:4E:02:9E:4B:76:
        F6:E5:36:3E:65:D5:24:20:6D:30:F9:DD:1D:83:E9:3F:
        27:4A:33:4E:6D:16:8A:E4:8D:40:8D:22:AA:BE:A7:0B:
        1B:D2:07:B6:3C:B5:1A:24:28:F8:1B:72:51:3D:C8:09:
        88:26:08:3A:F9:FA:43:23:75:47:70:0C:B3:5F:5B:8F:
        08:1D:72:48:57:65:4D:AF:02:3C:40:F7:F4:DD:32:38:
        93:3F:E5:2C:A6:F3:59:23:CB:80:DE:13:4D:F9:10:C9:
        AA:0A:18:6C:55:61:57:D1:F1:02:2C:C4:B5:AB:F2:6C:
        23:D2:9F:0D:0F:19:6C:AD:85:62:69:FD:4E:85:C1:8A:
        52:31:AB:5B:D8:C9:74:52:E3:57:6C:22:BF:55:7F:6F:
        CA:06:AB:3F:4A:B7:22:76:65:EC:EC:36:F2:96:95:81:
        26:2C:FD:BB:98:AA:01:38:D3:AF:25:40:9B:09:53:F0:
        29:57:85:58:5E:EA:85:48:41:21:87:E5:DE:B4:D3:26:
        B2:7B:40:53:58:79:8E:52:31:06:4D:94:03:45:C4:CE:
        3C:03:EC:B7:00:F2:3A:22:C5:B4:6F:E5:EF:B0:8A:9B: 0x010001
    - X509v3 extensions
      - basicConstraints
        true
        nil
      - certificatePolicies
        2.16.840.1.113733.1.7.23.3
        #0
        id-qt-cps: https://d.symcb.com/cps
        id-qt-unotice: https://d.symcb.com/rpa
      - crlDistributionPoints: http://ts-crl.ws.symantec.com/sha256-tss-ca.crl
      - extendedKeyUsage: true, timeStamping
      - keyUsage: true, 0x80
      - authorityInfoAccess
        #0
        OCSP: http://ts-ocsp.ws.symantec.com
        caIssuers: http://ts-aia.ws.symantec.com/sha256-tss-ca.cer
      - subjectAltName
        CN: TimeStamp-2048-6
      - subjectKeyIdentifier:
        a5 13 01 a9 9f 85 cc 1b 6e 16 1e 5f 3b 31 aa 79 |........n.._;1.y| 36 00 7b 1d |6.{. |
      - authorityKeyIdentifier:
        af 63 d6 ca a3 4e 85 72 e0 a7 bc 41 f3 29 a2 38 |.c...N.r...A.).8| 7f 80 75 62 |..ub |
  - RSA-SHA256:
```
46 9e af f0 b8 a2 5f a2  99 48 cf a8 27 4b 21 cd  |F....._..H..'K!.|
b2 b9 a6 72 70 63 2f e3  55 29 7b 39 46 4e e7 7e  |...rpc/.U){9FN.~|
65 06 58 8b bc 57 8a 92  0d 08 d8 10 ba 36 24 fa  |e.X..W.......6$.|
0a 7b fb 3b d3 62 bf 4a  94 15 e6 82 db 8a 54 6d  |.{.;.b.J......Tm|
ff 28 fe 67 cf 71 3f e6  33 09 d9 a2 59 10 f4 1e  |.(.g.q?.3...Y...|
4a fe 65 cc de d4 6b e3  52 29 75 00 4a 2b a5 cc  |J.e...k.R)u.J+..|
cb 9b e8 a9 4d f7 b4 17  59 92 41 c3 b7 3f 86 e6  |....M...Y.A..?..|
f6 c0 7f 44 3c 46 5c 17  5a e3 a4 3b d5 69 26 d5  |...D.z.".t..G....|
91 25 b2 1b 96 e9 85 08  e8 dd ea 74 60 6e 60 a5  |.%.........t`n`.|
56 7a 0d c8 44 58 dc e6  f9 48 14 9e e5 bf de 00  |Vz..DX...H......|
bd 77 b1 98 14 72 14 24  df c7 11 2c 1f 00 3f c3  |.w...r.$...,..?.|
4b 14 c6 67 1c cc 1e 06  a3 90 5f 5c 54 8b 3e e3  |K..g......_\T.>.|
33 5b 82 0f c5 b7 86 02  4e 71 9f e9 66 45 3f 76  |3[......Nq..fE?v|
```

unnamed
- #0
  - C: US
  - O: Symantec Corporation
  - OU: Symantec Trust Network
  - CN: Symantec SHA256 TimeStamping CA
- 7B:D4:E5:AF:BA:CC:07:3F:A1:01:23:04:22:41:4D:12
SHA256

contentType: id-smime-ct-TSTInfo
signingTime: 2019-08-20 02:34:43 UTC

messageDigest:

6c 66 39 84 8c 27 30 12  5f b6 6d 42 93 86 8b a7  |lf9..'0._.mB....|
7a fa c4 ac ed 22 be 06  3a ab 4a f7 8c c3 44 51  |z...."..:.J...DQ|

id-smime-aa-signingCertificateV2:

c4 74 ce 76 00 7d 02 39  4e 0d a5 e4 de 7c 14 c6  |.t.v.}.9N....|..|
80 f9 e2 82 01 3c fe f6  53 ef 5d b7 1f df 61 f8  |.....<..S.]...a.|

rsaEncryption

1e c6 63 b7 a5 95 ad 9e 2e 06 5a 4a a3 1a 23 2c |..c.......ZJ..#,| f8 40 a4 08 a7 49 e7 b6 f5 d0 35 33 96 33 40 df |.@...I....53.3@.| 55 09 80 3e ab c4 2a 5b 84 bb c8 5b 33 70 f8 82 |U..>..*[...[3p..| e2 15 20 ce 8a 52 a4 8c ad 3c b6 f4 94 47 c0 84 |.. ..R...<...G..| cf a8 38 bc 40 20 3f 27 1a 4c b5 d5 5f a7 9a 12 |..8.@ ?'.L.._...| 74 64 b0 b6 06 c6 aa 94 a1 ee ed 5a 57 30 07 60 |td.........ZW0.`| 86 8d 1a 18 41 27 78 ec 1a bd 29 bb 96 27 4f c8 |....A'x...)..'O.| 12 c6 12 0f 2d 70 49 3e 6e 38 fb 90 87 5e 1a 57 |....-pI>n8...^.W| ff 89 f3 67 89 82 51 36 e6 f2 2e 9e 34 f9 80 6b |...g..Q6....4..k| 70 41 cb dc e3 3b 68 b9 70 55 7b ea ee 59 cc 00 |pA...;h.pU{..Y..| 74 52 2d 24 dc 5a c7 d0 79 d1 21 c5 e6 ba 50 5e |tR-$.Z..y.!...P^| 79 a0 76 e4 8c 6b 5d 80 07 91 1e d0 b8 14 2a df |y.v..k].......*.| 8f 08 9a 03 9f b6 29 7e 31 4a 92 d2 d1 fc 34 bd |......)~1J....4.| a6 8d 16 0e 43 60 f7 f1 31 c2 9c 79 c1 72 84 e6 |....C`..1..y.r..| e3 05 fe 28 8c c2 c9 c2 76 5f 76 12 d2 e9 e6 5a |...(....v_v....Z| 9f 19 75 cf 80 ce 5e c9 33 64 6b d8 40 73 14 d3 |..u...^.3dk.@s..|

show previews

offset	size	type	comment
0	158208	EXE	08/20/2019 02:15:42	#
15c1	15	HTM		#
26a00	13456	PKCS7	Authenticode Signature	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] can't find file_offset of VA 0x25b58

HostedAgent.exe-

MZ Header

Rich Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

TLS

StringTable 040904b0

VS_FIXEDFILEINFO

Signers (1)

Certificates (4)

HostedAgent.exe
-