filenamemalware_8CC02B721683F8B880C8D086ED055006DCF6155A6CD19435F74DD9296B74F5FC
size467720 (0x72308)
md5c6b57e042ceadb60d6fab217d3523e17
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavscan pending
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xe8

Rich Header

lib idversiontimes used
158303198
1703031955
1473072915
10140
1713031915
0019
154303191
157303191

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x569faefa
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x102
Magic0x10b
LinkerVersion10.0
SizeOfCode0x43e00
SizeOfInitializedData0x2dc00
SizeOfUninitializedData0
AddressOfEntryPoint0x3ea9d
BaseOfCode0x1000
BaseOfData0x45000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.1
ImageVersion0.0
SubsystemVersion5.1
Reserved10
SizeOfImage0x74000
SizeOfHeaders0x400
CheckSum0x7987a
Subsystem2
DllCharacteristics0x8040
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

namevavsizeraw sizeflags
.text0x10000x43c940x43e00R-X CODE
.rdata0x450000x68a60x6a00R-- IDATA
.data0x4c0000x12b400x11c00RW- IDATA
.rsrc0x5f0000xe7300xe800R-- IDATA
.reloc0x6e0000x5d940x5e00R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0x4ab540xa0
RESOURCE0x5f0000xe730
EXCEPTION00
SECURITY0x70e000x1508
BASERELOC0x6e0000x5af4
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x450000x24c
Delay_IAT00
CLR_Header00
typenamesizecp
ICON#166640
DIALOG#35192660
DIALOG#38935780
DIALOG#70174120
DIALOG#99984520
DIALOG#106892760
DIALOG#108103880
RCDATA#18448320
RCDATA#23848320
RCDATA#38148320
RCDATA#43748320
RCDATA#64448320
RCDATA#69448320
RCDATA#69548320
RCDATA#69848320
RCDATA#91448320
RCDATA#98548320
GROUP_ICON#1200
VERSION#17160
module_namehintordfunction_name
OLEAUT32.dll318
KERNEL32.dll281ExitProcess
KERNEL32.dll164CreateProcessA
KERNEL32.dll717HeapCreate
KERNEL32.dll222DisableThreadLibraryCalls
KERNEL32.dll21AreFileApisANSI
KERNEL32.dll723HeapSetInformation
KERNEL32.dll486GetFileAttributesExA
KERNEL32.dll772IsProcessorFeaturePresent
KERNEL32.dll722HeapReAlloc
KERNEL32.dll715HeapAlloc
KERNEL32.dll617GetStringTypeW
KERNEL32.dll871MultiByteToWideChar
KERNEL32.dll813LCMapStringW
KERNEL32.dll724HeapSize
KERNEL32.dll1048RtlUnwind
KERNEL32.dll1202Sleep
KERNEL32.dll719HeapFree
KERNEL32.dll778IsValidCodePage
KERNEL32.dll567GetOEMCP
KERNEL32.dll360GetACP
KERNEL32.dll370GetCPInfo
KERNEL32.dll448GetCurrentProcess
KERNEL32.dll1216TerminateProcess
KERNEL32.dll768IsDebuggerPresent
KERNEL32.dll1235UnhandledExceptionFilter
KERNEL32.dll518GetLocaleInfoW
KERNEL32.dll831LoadLibraryW
KERNEL32.dll748InterlockedExchange
KERNEL32.dll354FreeLibrary
KERNEL32.dll1069SetConsoleCtrlHandler
KERNEL32.dll238EnterCriticalSection
KERNEL32.dll288FatalAppExitA
KERNEL32.dll825LeaveCriticalSection
KERNEL32.dll633GetSystemTimeAsFileTime
KERNEL32.dll449GetCurrentProcessId
KERNEL32.dll659GetTickCount
KERNEL32.dll935QueryPerformanceCounter
KERNEL32.dll718HeapDestroy
KERNEL32.dll452GetCurrentThread
KERNEL32.dll747InterlockedDecrement
KERNEL32.dll514GetLastError
KERNEL32.dll453GetCurrentThreadId
KERNEL32.dll1139SetLastError
KERNEL32.dll751InterlockedIncrement
KERNEL32.dll1222TlsFree
KERNEL32.dll1224TlsSetValue
KERNEL32.dll1223TlsGetValue
KERNEL32.dll1221TlsAlloc
KERNEL32.dll234EncodePointer
KERNEL32.dll209DeleteCriticalSection
KERNEL32.dll499GetFileType
KERNEL32.dll739InitializeCriticalSectionAndSpinCount
KERNEL32.dll1135SetHandleCount
KERNEL32.dll474GetEnvironmentStringsW
KERNEL32.dll1297WideCharToMultiByte
KERNEL32.dll353FreeEnvironmentStringsW
KERNEL32.dll531GetModuleFileNameA
KERNEL32.dll532GetModuleFileNameW
KERNEL32.dll612GetStdHandle
KERNEL32.dll1317WriteFile
KERNEL32.dll202DecodePointer
KERNEL32.dll536GetModuleHandleW
KERNEL32.dll581GetProcAddress
KERNEL32.dll1189SetUnhandledExceptionFilter
KERNEL32.dll611GetStartupInfoW
KERNEL32.dll390GetCommandLineA
GDI32.dll375GdiGetBatchLimit
COMCTL32.dll113ImageList_SetBkColor
COMDLG32.dll9GetFileTitleA
ADVAPI32.dll343GetSidSubAuthority
USER32.dll715SetWindowTextW
USER32.dll689SetScrollPos
USER32.dll38ChangeDisplaySettingsW
USER32.dll58CharUpperBuffA
USER32.dll243EqualRect
USER32.dll620ReuseDDElParam
USER32.dll645SetClassWord
USER32.dll535ModifyMenuW
USER32.dll55CharToOemBuffW
USER32.dll192DrawCaption
USER32.dll184DlgDirSelectComboBoxExW
USER32.dll491LoadCursorW
USER32.dll485LoadAcceleratorsW
USER32.dll685SetPropW
USER32.dll380GetSysColorBrush
USER32.dll111CreateWindowStationA
USER32.dll618ReplyMessage
USER32.dll172DialogBoxParamW
USER32.dll87CreateAcceleratorTableA
USER32.dll707SetWindowLongA
USER32.dll186DlgDirSelectExW
USER32.dll455IsCharUpperA
USER32.dll496LoadKeyboardLayoutA
USER32.dll164DestroyMenu
USER32.dll273GetClassNameA
USER32.dll688SetScrollInfo
USER32.dll735ShowWindow
USER32.dll289GetDC
USER32.dll100CreateIcon
USER32.dll134DdeInitializeA
USER32.dll766UnhookWinEvent
USER32.dll500LoadMenuA
USER32.dll647SetClipboardViewer
USER32.dll410GetWindowModuleFileNameW
USER32.dll687SetRectEmpty
USER32.dll565PostMessageA
USER32.dll650SetCursorPos
USER32.dll331GetMenu
USER32.dll77CloseWindow
USER32.dll668SetMenu
USER32.dll441InsertMenuItemW
USER32.dll242EnumWindows
USER32.dll743SwapMouseButton
USER32.dll672SetMenuItemBitmaps
USER32.dll225EnumDesktopWindows
USER32.dll182DlgDirListW
USER32.dll157DeferWindowPos
USER32.dll54CharToOemBuffA
USER32.dll158DeleteMenu
USER32.dll181DlgDirListComboBoxW
USER32.dll748SystemParametersInfoW
USER32.dll730ShowCursor
USER32.dll81CopyAcceleratorTableA
USER32.dll276GetClientRect
USER32.dll669SetMenuContextHelpId
USER32.dll546OemToCharBuffA
USER32.dll324GetLastActivePopup
USER32.dll409GetWindowModuleFileNameA
USER32.dll512LookupIconIdFromDirectory
USER32.dll488LoadCursorA
USER32.dll719SetWindowsHookExW
USER32.dll119DdeCmpStringHandles
USER32.dll236EnumPropsExA
USER32.dll391GetUpdateRect
USER32.dll199DrawIcon
USER32.dll456IsCharUpperW
USER32.dll461IsDialogMessageW
USER32.dll301GetForegroundWindow
USER32.dll280GetClipboardFormatNameW

StringTable 040904E8

CompanyNameEnigmaticSoftware
FileDescriptiontechnically
FileVersion8.4.9.7
InternalNametrumpet.exe
LegalCopyrightCopyright 1 - 1984 - 2002
OriginalFilenametrumpet.exe
ProductVersion8.4.9.7
ProductNameaccomplice

VS_FIXEDFILEINFO

FileVersion8.4.9.7
ProductVersion8.4.9.7
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType1
FileSubtype0

Signers (1)

issuer: /C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO RSA Code Signing CA
serial: 1D275376A1DB6BFEC5179E527E1D3A6B

Certificates (3)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http:\/\/www.usertrust.com, CN=UTN-USERFirst-Object
        Validity
            Not Before: Dec 31 00:00:00 2015 GMT
            Not After : Jul  9 18:40:36 2019 GMT
        Subject: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO SHA-1 Time Stamping Signer
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:e9:e9:3d:df:d7:37:08:c9:1e:38:b2:52:53:42:
                    6d:22:f1:b1:c4:06:04:6b:9e:fd:82:74:50:43:7d:
                    c6:a0:bb:1f:4e:f9:02:71:26:b1:ef:43:d8:83:8c:
                    48:fc:e7:0f:97:7a:9a:eb:9c:de:a6:a3:0e:3b:1c:
                    44:18:75:8e:78:a5:17:69:fe:49:18:a4:e2:bb:5c:
                    4e:fe:8e:2a:54:7a:50:f0:d5:f6:cc:91:e7:99:79:
                    d7:de:79:94:d7:96:33:fe:0e:83:be:22:bf:63:16:
                    2c:a3:dd:28:1b:af:3d:ab:ea:97:d2:f1:bf:04:10:
                    e7:3d:48:45:fd:1f:68:65:c1:7f:59:99:69:c0:22:
                    31:0c:62:6e:a7:5c:65:01:21:b0:63:c4:22:18:27:
                    ee:e6:fc:d2:00:3d:47:2e:a8:b8:86:56:5d:04:dc:
                    13:17:25:6e:1c:df:44:0f:15:cd:b7:db:a5:57:76:
                    42:6f:00:68:82:99:d2:e3:c1:de:f0:8b:94:57:4c:
                    ec:08:90:22:21:ce:22:2b:98:0c:42:e6:42:93:94:
                    98:93:ef:fd:06:d9:3f:bc:5b:9b:54:3c:20:b1:ee:
                    6a:d6:47:7a:c5:ab:80:e9:30:9a:de:f1:a4:3f:55:
                    4d:0a:09:34:8a:75:29:d2:69:ad:97:0f:50:bf:f8:
                    ca:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                DA:ED:64:74:14:9C:14:3C:AB:DD:99:A9:BD:5B:28:4D:8B:3C:C9:D8
            X509v3 Subject Key Identifier: 
                8E:6B:2D:33:6B:F4:33:A7:93:B3:13:9A:A5:E0:0A:F7:12:35:6A:88
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.usertrust.com/UTN-USERFirst-Object.crl
            Authority Information Access: 
                OCSP - URI:http://ocsp.usertrust.com
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        ba:33:24:40:40:8c:7c:db:58:9f:b3:60:98:b2:f5:c0:31:fe:
        eb:1f:6e:50:f6:0a:e0:e4:e6:81:ad:26:87:a2:df:fd:b3:da:
        f4:73:f3:00:fb:29:1b:89:1b:15:3e:db:6b:52:93:2b:c4:ac:
        39:81:d7:3c:67:57:9a:39:36:e0:28:08:9a:e3:39:4f:9b:89:
        09:7f:7b:c5:61:7f:59:89:32:25:0a:6a:ae:1a:3e:f0:a2:27:
        a8:b6:c3:b8:87:f7:16:04:48:41:3d:5c:d8:ec:9f:4d:20:31:
        04:d9:65:a1:ed:cd:69:07:53:16:3d:dd:36:02:0a:88:eb:40:
        e5:06:30:0b:b8:16:4b:dc:ef:bc:55:09:ff:c6:3e:12:2e:76:
        b3:dc:ce:42:ef:f9:76:57:e1:b7:0a:05:40:98:58:9a:5d:71:
        16:93:71:8c:65:81:ea:6f:f3:89:f7:fb:73:ad:b4:e7:bf:d9:
        8e:6f:aa:0b:4f:25:f3:b8:e1:d5:dd:75:98:68:81:f8:aa:c0:
        d1:80:c2:c4:c4:39:89:c1:f6:c9:9e:6c:d7:74:f9:d9:97:f8:
        4f:c2:9a:0a:cd:5e:8f:f8:19:e9:e0:a5:9f:c4:f0:92:21:e6:
        2d:79:25:c9:22:f9:c3:f0:3a:84:57:ad:3a:16:f4:63:94:10:
        1d:5d:d0:c6

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:27:53:76:a1:db:6b:fe:c5:17:9e:52:7e:1d:3a:6b
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Code Signing CA
        Validity
            Not Before: Dec 25 00:00:00 2015 GMT
            Not After : Dec 24 23:59:59 2016 GMT
        Subject: C=GB/postalCode=SE18 6LF, ST=London, L=London/street=14-16 Powis Street/postOfficeBox=SE18 6LF, O=Extrusion Machinery Ltd, CN=Extrusion Machinery Ltd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:cb:04:8b:3e:f9:32:03:8d:71:10:c4:03:17:7f:
                    8c:56:62:16:12:bc:05:b3:02:ba:de:a4:94:6d:d9:
                    dd:31:54:13:1e:d8:48:2b:ee:a6:0e:31:7c:c0:21:
                    a5:55:77:f4:7a:f8:c8:b6:77:9b:31:b9:45:b4:66:
                    a3:27:f4:7e:1b:17:fb:8b:6f:4a:8c:42:a5:2d:ea:
                    64:98:9c:3b:89:87:c3:e8:bb:22:a2:b1:b4:a6:d2:
                    09:e1:23:c2:3f:2c:ce:61:31:1b:77:a9:8c:f0:ad:
                    bf:1e:b6:65:98:85:56:8f:0d:fb:6b:cc:b5:26:62:
                    d9:90:f8:fc:ad:84:91:60:10:f5:ec:36:de:05:80:
                    57:ea:77:b6:e1:ee:20:8b:25:14:e4:d7:a9:cd:e0:
                    31:c4:b7:2b:0e:51:89:19:45:0f:d2:1b:7b:f7:9e:
                    41:67:7e:2c:3c:01:f4:1e:37:1b:4b:68:e6:d5:07:
                    e1:3e:f1:10:42:54:8a:4a:a8:99:a2:3c:9b:29:df:
                    22:bd:3a:5f:70:a9:79:fc:6f:1f:e6:19:19:4b:db:
                    bf:c5:66:a8:48:e1:95:9a:66:ae:55:b8:2e:96:15:
                    12:d3:4c:35:e5:c0:70:7e:f9:67:6a:4a:37:3d:38:
                    22:fa:80:f9:19:31:24:d6:d3:4c:e0:d5:97:f0:ca:
                    c7:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                29:91:60:FF:8A:4D:FA:EB:F9:A6:6A:B8:CF:F9:E6:4B:BD:49:CE:12
            X509v3 Subject Key Identifier: 
                A0:12:74:2B:39:A9:42:EE:42:A2:18:26:5A:99:56:D1:E2:DD:B9:7C
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                Code Signing
            Netscape Cert Type: 
                Object Signing
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.6449.1.2.1.3.2
                  CPS: https://secure.comodo.net/CPS
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.comodoca.com/COMODORSACodeSigningCA.crl
            Authority Information Access: 
                CA Issuers - URI:http://crt.comodoca.com/COMODORSACodeSigningCA.crt
                OCSP - URI:http://ocsp.comodoca.com
            X509v3 Subject Alternative Name: 
                email:admin@extmachine.biz
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        43:2e:a9:ce:a4:79:ab:73:1b:41:85:6e:63:06:00:2a:a5:66:
        88:7e:d9:7b:aa:8a:a1:91:7d:f5:f2:80:38:bc:73:ef:31:a1:
        3f:c5:c4:00:d1:2e:94:34:4e:0e:47:23:f4:be:fb:47:40:3b:
        89:0e:9e:77:05:f2:1e:d2:df:64:b6:be:48:68:fe:b8:6d:39:
        ff:c3:88:ed:04:8d:7b:9a:52:07:9e:c4:08:68:6e:51:17:e9:
        37:2b:ac:23:13:35:07:a7:4c:69:67:9b:d6:77:2e:72:1a:14:
        6f:d9:96:4f:8b:e0:0c:a1:c5:9d:c5:c7:5e:4b:45:9c:0e:cc:
        17:1a:8a:f9:b0:71:21:19:dc:9f:93:fc:a9:6c:e5:ab:15:1a:
        de:9f:94:f0:4e:b4:04:39:59:f0:0c:50:16:15:51:d5:0d:e8:
        45:74:3d:08:17:be:71:34:e8:10:84:fc:22:6c:d6:33:15:7a:
        01:9c:12:80:d6:f2:77:15:7f:e5:39:95:4f:df:d8:52:02:d4:
        68:65:3d:b3:d1:7b:81:be:b9:68:68:e8:59:7a:8a:c9:75:44:
        13:81:13:ca:50:e3:e8:42:db:d7:3c:d0:ab:36:39:cc:dc:4b:
        b7:26:42:24:2f:24:bb:50:84:1f:5c:97:ec:cb:48:64:7d:97:
        ad:61:a7:a3

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
        Signature Algorithm: sha384WithRSAEncryption
        Issuer: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Certification Authority
        Validity
            Not Before: May  9 00:00:00 2013 GMT
            Not After : May  8 23:59:59 2028 GMT
        Subject: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Code Signing CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a6:98:90:63:77:91:34:7f:8a:d1:dd:e9:67:31:
                    11:eb:cc:1e:fd:31:1d:b3:b9:62:57:3f:93:bc:5b:
                    e3:9f:1e:24:32:11:27:6b:bc:51:91:a7:cf:9e:9e:
                    25:b3:5f:81:a8:18:0f:1d:1e:20:30:0e:fb:61:7b:
                    86:09:b3:e3:fd:a2:68:9d:1c:2c:9d:bf:72:e3:e4:
                    75:a0:e5:35:23:8e:c9:8a:ee:1a:0c:64:c7:d8:42:
                    a1:7b:b5:52:03:4b:3a:b0:8e:23:4b:4b:63:e0:22:
                    94:37:7b:d5:79:90:0a:14:18:51:2c:e6:fe:c1:12:
                    f0:1c:3f:61:61:0a:8c:a2:dc:f6:c3:30:aa:cd:28:
                    18:75:48:c1:79:5a:08:cd:bb:8c:55:8c:f7:d4:76:
                    90:3a:33:46:50:73:98:5c:f4:85:4a:6b:0f:80:dd:
                    5e:d6:bd:fd:a9:2f:c0:25:f5:f9:78:d7:8d:5f:10:
                    c2:44:55:3c:90:3c:31:46:cb:70:ae:07:a9:0a:e3:
                    af:c1:01:6f:90:1a:23:e2:5f:38:db:c6:08:5d:47:
                    b3:83:41:f0:2e:00:37:14:b9:12:aa:79:92:52:cd:
                    87:0f:7b:d8:62:29:a4:7e:30:bd:1b:b5:8c:72:b4:
                    48:f2:e3:e8:21:f9:5e:4c:62:79:8b:02:06:9f:7f:
                    d5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                BB:AF:7E:02:3D:FA:A6:F1:3C:84:8E:AD:EE:38:98:EC:D9:32:32:D4
            X509v3 Subject Key Identifier: 
                29:91:60:FF:8A:4D:FA:EB:F9:A6:6A:B8:CF:F9:E6:4B:BD:49:CE:12
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.comodoca.com/COMODORSACertificationAuthority.crl
            Authority Information Access: 
                CA Issuers - URI:http://crt.comodoca.com/COMODORSAAddTrustCA.crt
                OCSP - URI:http://ocsp.comodoca.com
    Signature Algorithm: sha384WithRSAEncryption
    Signature Value:
        02:3f:02:39:c3:ee:f8:ca:3b:89:de:0c:6d:4d:b1:f1:4e:92:
        4f:af:c2:38:2c:04:cc:c5:63:11:ab:09:63:af:ab:a2:d7:02:
        3f:cc:6f:19:c3:3d:d6:1a:08:94:ff:25:d8:a9:88:a7:2b:10:
        1a:e0:9b:b1:07:22:1a:51:1c:3a:d4:e1:e9:09:bf:e6:24:74:
        af:1e:7b:16:31:6e:23:ef:54:51:2d:52:02:e2:75:08:05:4c:
        f1:b7:51:e1:51:00:c6:87:f6:6c:ee:10:44:76:57:6a:f1:df:
        58:6b:21:aa:49:d4:7c:37:4e:bd:ff:b6:75:54:40:18:36:57:
        67:11:cd:4f:02:e4:fe:f3:da:fc:75:17:db:ec:b7:f7:65:09:
        23:49:1f:43:57:83:ea:7e:20:77:61:c8:4d:f2:bb:65:4d:a8:
        f7:85:45:07:af:7a:69:27:65:90:29:40:8b:df:7b:3a:51:39:
        8c:a8:1f:70:79:ad:6d:42:20:a2:cf:0c:6c:03:8c:4c:cd:73:
        07:94:e7:5a:8e:3a:04:ba:a2:a1:7c:1f:cb:63:3a:15:a7:d4:
        15:1b:a7:52:47:32:a9:f4:bf:64:47:d1:aa:1f:53:4e:32:30:
        73:c2:6f:b7:78:82:9d:5c:ff:46:bb:6b:22:1d:88:0b:f8:1b:
        aa:34:a6:fc:8c:f5:dd:7f:65:8c:8c:31:57:31:d0:36:ec:47:
        a1:cf:cb:8b:a8:ef:1c:18:58:c5:06:77:ca:4b:9b:51:af:4c:
        08:4a:7a:8f:e2:a3:52:e2:8e:8e:cc:26:e4:b2:d8:e5:38:c2:
        a8:ed:c6:81:9c:35:6b:a9:58:61:4a:0a:97:b4:4b:42:b6:55:
        9d:be:99:e7:70:6d:59:f8:6d:2a:0c:7f:19:60:5f:0c:9a:88:
        6c:30:ac:52:09:90:16:1b:ff:2b:9d:db:d0:20:ca:89:ea:28:
        7e:32:8e:19:df:7b:48:33:1e:d7:65:f8:ae:c9:f8:83:14:93:
        76:7d:64:d0:8e:ce:be:35:7d:ff:72:31:4d:9f:9e:bd:1e:6c:
        2f:a8:8f:0c:06:50:fb:8c:27:b3:76:c9:f4:e6:d7:c3:34:e2:
        8c:87:21:86:61:fe:bf:55:74:e1:21:77:03:0a:68:6c:bb:e4:
        c9:a9:e6:cf:59:25:eb:7c:ec:45:0e:79:66:68:e8:22:cd:b8:
        ef:98:85:4d:96:11:3c:09:8a:d0:7f:bc:28:28:13:fb:6a:ca:
        54:8d:92:5c:cd:c2:65:98:06:9e:ce:48:5b:d4:b5:37:93:46:
        41:7c:07:dd:cf:fa:43:ef:ba:67:61:ff:7d:49:e0:bb:30:7d:
        5c:80:e3:e6:16:39:4b:a7
pkcs7-signedData
  • 1
    • SHA1: nil
    • 1.3.6.1.4.1.311.2.1.4
      • #0
        • 1.3.6.1.4.1.311.2.1.15
          • : 
            00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |
        • SHA1
          • 28 26 65 4d 7c fe cd 3a  b0 28 27 7a b9 2d 20 08  |(&eM|..:.('z.- .|
58 5d a2 8d                                       |X]..            |
    • Certificates
      • Certificate #0
        • 2
          • 16:88:F0:39:25:5E:63:8E:69:14:39:07:E6:33:0B
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • ST: UT
            • L: Salt Lake City
            • O: The USERTRUST Network
            • OU: http://www.usertrust.com
            • CN: UTN-USERFirst-Object
          • 2015-12-31 00:00:00 UTC: 2019-07-09 18:40:36 UTC
          • Subject
            • C: GB
            • ST: Greater Manchester
            • L: Salford
            • O: COMODO CA Limited
            • CN: COMODO SHA-1 Time Stamping Signer
          • #5
            • rsaEncryption: nil
            • E9:E9:3D:DF:D7:37:08:C9:1E:38:B2:52:53:42:6D:22:
              F1:B1:C4:06:04:6B:9E:FD:82:74:50:43:7D:C6:A0:BB:
              1F:4E:F9:02:71:26:B1:EF:43:D8:83:8C:48:FC:E7:0F:
              97:7A:9A:EB:9C:DE:A6:A3:0E:3B:1C:44:18:75:8E:78:
              A5:17:69:FE:49:18:A4:E2:BB:5C:4E:FE:8E:2A:54:7A:
              50:F0:D5:F6:CC:91:E7:99:79:D7:DE:79:94:D7:96:33:
              FE:0E:83:BE:22:BF:63:16:2C:A3:DD:28:1B:AF:3D:AB:
              EA:97:D2:F1:BF:04:10:E7:3D:48:45:FD:1F:68:65:C1:
              7F:59:99:69:C0:22:31:0C:62:6E:A7:5C:65:01:21:B0:
              63:C4:22:18:27:EE:E6:FC:D2:00:3D:47:2E:A8:B8:86:
              56:5D:04:DC:13:17:25:6E:1C:DF:44:0F:15:CD:B7:DB:
              A5:57:76:42:6F:00:68:82:99:D2:E3:C1:DE:F0:8B:94:
              57:4C:EC:08:90:22:21:CE:22:2B:98:0C:42:E6:42:93:
              94:98:93:EF:FD:06:D9:3F:BC:5B:9B:54:3C:20:B1:EE:
              6A:D6:47:7A:C5:AB:80:E9:30:9A:DE:F1:A4:3F:55:4D:
              0A:09:34:8A:75:29:D2:69:AD:97:0F:50:BF:F8:CA:09              : 0x010001
          • #6
            • authorityKeyIdentifier: 
              da ed 64 74 14 9c 14 3c  ab dd 99 a9 bd 5b 28 4d  |..dt...<.....[(M|
8b 3c c9 d8                                       |.<..            |
            • subjectKeyIdentifier: 
              8e 6b 2d 33 6b f4 33 a7  93 b3 13 9a a5 e0 0a f7  |.k-3k.3.........|
12 35 6a 88                                       |.5j.            |
            • keyUsage: true, 0xc0
            • basicConstraints
              • true
              • nil
            • extendedKeyUsage: true, timeStamping
            • crlDistributionPoints: http://crl.usertrust.com/UTN-USERFirst-Object.crl
            • authorityInfoAccess
              • OCSP: http://ocsp.usertrust.com
        • RSA-SHA1: 
          ba 33 24 40 40 8c 7c db  58 9f b3 60 98 b2 f5 c0  |.3$@@.|.X..`....|
31 fe eb 1f 6e 50 f6 0a  e0 e4 e6 81 ad 26 87 a2  |1...nP.......&..|
df fd b3 da f4 73 f3 00  fb 29 1b 89 1b 15 3e db  |.....s...)....>.|
6b 52 93 2b c4 ac 39 81  d7 3c 67 57 9a 39 36 e0  |kR.+..9....'......|
16 04 48 41 3d 5c d8 ec  9f 4d 20 31 04 d9 65 a1  |..HA=\...M 1..e.|
ed cd 69 07 53 16 3d dd  36 02 0a 88 eb 40 e5 06  |..i.S.=.6....@..|
30 0b b8 16 4b dc ef bc  55 09 ff c6 3e 12 2e 76  |0...K...U...>..v|
b3 dc ce 42 ef f9 76 57  e1 b7 0a 05 40 98 58 9a  |...B..vW....@.X.|
5d 71 16 93 71 8c 65 81  ea 6f f3 89 f7 fb 73 ad  |]q..q.e..o....s.|
b4 e7 bf d9 8e 6f aa 0b  4f 25 f3 b8 e1 d5 dd 75  |.....o..O%.....u|
98 68 81 f8 aa c0 d1 80  c2 c4 c4 39 89 c1 f6 c9  |.h.........9....|
9e 6c d7 74 f9 d9 97 f8  4f c2 9a 0a cd 5e 8f f8  |.l.t....O....^..|
19 e9 e0 a5 9f c4 f0 92  21 e6 2d 79 25 c9 22 f9  |........!.-y%.".|
c3 f0 3a 84 57 ad 3a 16  f4 63 94 10 1d 5d d0 c6  |..:.W.:..c...]..|
      • Certificate #1
        • 2
          • 1D:27:53:76:A1:DB:6B:FE:C5:17:9E:52:7E:1D:3A:6B
          • RSA-SHA256: nil
          • Issuer
            • C: GB
            • ST: Greater Manchester
            • L: Salford
            • O: COMODO CA Limited
            • CN: COMODO RSA Code Signing CA
          • 2015-12-25 00:00:00 UTC: 2016-12-24 23:59:59 UTC
          • Subject
            • C: GB
            • postalCode: SE18 6LF
            • ST: London
            • L: London
            • street: 14-16 Powis Street
            • postOfficeBox: SE18 6LF
            • O: Extrusion Machinery Ltd
            • CN: Extrusion Machinery Ltd
          • #5
            • rsaEncryption: nil
            • CB:04:8B:3E:F9:32:03:8D:71:10:C4:03:17:7F:8C:56:
              62:16:12:BC:05:B3:02:BA:DE:A4:94:6D:D9:DD:31:54:
              13:1E:D8:48:2B:EE:A6:0E:31:7C:C0:21:A5:55:77:F4:
              7A:F8:C8:B6:77:9B:31:B9:45:B4:66:A3:27:F4:7E:1B:
              17:FB:8B:6F:4A:8C:42:A5:2D:EA:64:98:9C:3B:89:87:
              C3:E8:BB:22:A2:B1:B4:A6:D2:09:E1:23:C2:3F:2C:CE:
              61:31:1B:77:A9:8C:F0:AD:BF:1E:B6:65:98:85:56:8F:
              0D:FB:6B:CC:B5:26:62:D9:90:F8:FC:AD:84:91:60:10:
              F5:EC:36:DE:05:80:57:EA:77:B6:E1:EE:20:8B:25:14:
              E4:D7:A9:CD:E0:31:C4:B7:2B:0E:51:89:19:45:0F:D2:
              1B:7B:F7:9E:41:67:7E:2C:3C:01:F4:1E:37:1B:4B:68:
              E6:D5:07:E1:3E:F1:10:42:54:8A:4A:A8:99:A2:3C:9B:
              29:DF:22:BD:3A:5F:70:A9:79:FC:6F:1F:E6:19:19:4B:
              DB:BF:C5:66:A8:48:E1:95:9A:66:AE:55:B8:2E:96:15:
              12:D3:4C:35:E5:C0:70:7E:F9:67:6A:4A:37:3D:38:22:
              FA:80:F9:19:31:24:D6:D3:4C:E0:D5:97:F0:CA:C7:6F              : 0x010001
          • #6
            • authorityKeyIdentifier: 
              29 91 60 ff 8a 4d fa eb  f9 a6 6a b8 cf f9 e6 4b  |).`..M....j....K|
bd 49 ce 12                                       |.I..            |
            • subjectKeyIdentifier: 
              a0 12 74 2b 39 a9 42 ee  42 a2 18 26 5a 99 56 d1  |..t+9.B.B..&Z.V.|
e2 dd b9 7c                                       |...|            |
            • keyUsage: true, 0x80
            • basicConstraints
              • true
              • nil
            • extendedKeyUsage: codeSigning
            • nsCertType: 0x10
            • certificatePolicies
              • 1.3.6.1.4.1.6449.1.2.1.3.2
                • id-qt-cps: https://secure.comodo.net/CPS
            • crlDistributionPoints: http://crl.comodoca.com/COMODORSACodeSigningCA.crl
            • authorityInfoAccess
              • #0
                • caIssuers: http://crt.comodoca.com/COMODORSACodeSigningCA.crt
                • OCSP: http://ocsp.comodoca.com
            • subjectAltName: admin@extmachine.biz
        • RSA-SHA256: 
          43 2e a9 ce a4 79 ab 73  1b 41 85 6e 63 06 00 2a  |C....y.s.A.nc..*|
a5 66 88 7e d9 7b aa 8a  a1 91 7d f5 f2 80 38 bc  |.f.~.{....}...8.|
73 ef 31 a1 3f c5 c4 00  d1 2e 94 34 4e 0e 47 23  |s.1.?......4N.G#|
f4 be fb 47 40 3b 89 0e  9e 77 05 f2 1e d2 df 64  |...G@;...w.....d|
b6 be 48 68 fe b8 6d 39  ff c3 88 ed 04 8d 7b 9a  |..Hh..m9......{.|
52 07 9e c4 08 68 6e 51  17 e9 37 2b ac 23 13 35  |R....hnQ..7+.#.5|
07 a7 4c 69 67 9b d6 77  2e 72 1a 14 6f d9 96 4f  |..Lig..w.r..o..O|
8b e0 0c a1 c5 9d c5 c7  5e 4b 45 9c 0e cc 17 1a  |........^KE.....|
8a f9 b0 71 21 19 dc 9f  93 fc a9 6c e5 ab 15 1a  |...q!......l....|
de 9f 94 f0 4e b4 04 39  59 f0 0c 50 16 15 51 d5  |....N..9Y..P..Q.|
0d e8 45 74 3d 08 17 be  71 34 e8 10 84 fc 22 6c  |..Et=...q4...."l|
d6 33 15 7a 01 9c 12 80  d6 f2 77 15 7f e5 39 95  |.3.z......w...9.|
4f df d8 52 02 d4 68 65  3d b3 d1 7b 81 be b9 68  |O..R..he=..{...h|
68 e8 59 7a 8a c9 75 44  13 81 13 ca 50 e3 e8 42  |h.Yz..uD....P..B|
db d7 3c d0 ab 36 39 cc  dc 4b b7 26 42 24 2f 24  |..<..69..K.&B$/$|
bb 50 84 1f 5c 97 ec cb  48 64 7d 97 ad 61 a7 a3  |.P..\...Hd}..a..|
      • Certificate #2
        • 2
          • 2E:7C:87:CC:0E:93:4A:52:FE:94:FD:1C:B7:CD:34:AF
          • RSA-SHA384: nil
          • Issuer
            • C: GB
            • ST: Greater Manchester
            • L: Salford
            • O: COMODO CA Limited
            • CN: COMODO RSA Certification Authority
          • 2013-05-09 00:00:00 UTC: 2028-05-08 23:59:59 UTC
          • Subject
            • C: GB
            • ST: Greater Manchester
            • L: Salford
            • O: COMODO CA Limited
            • CN: COMODO RSA Code Signing CA
          • #5
            • rsaEncryption: nil
            • A6:98:90:63:77:91:34:7F:8A:D1:DD:E9:67:31:11:EB:
              CC:1E:FD:31:1D:B3:B9:62:57:3F:93:BC:5B:E3:9F:1E:
              24:32:11:27:6B:BC:51:91:A7:CF:9E:9E:25:B3:5F:81:
              A8:18:0F:1D:1E:20:30:0E:FB:61:7B:86:09:B3:E3:FD:
              A2:68:9D:1C:2C:9D:BF:72:E3:E4:75:A0:E5:35:23:8E:
              C9:8A:EE:1A:0C:64:C7:D8:42:A1:7B:B5:52:03:4B:3A:
              B0:8E:23:4B:4B:63:E0:22:94:37:7B:D5:79:90:0A:14:
              18:51:2C:E6:FE:C1:12:F0:1C:3F:61:61:0A:8C:A2:DC:
              F6:C3:30:AA:CD:28:18:75:48:C1:79:5A:08:CD:BB:8C:
              55:8C:F7:D4:76:90:3A:33:46:50:73:98:5C:F4:85:4A:
              6B:0F:80:DD:5E:D6:BD:FD:A9:2F:C0:25:F5:F9:78:D7:
              8D:5F:10:C2:44:55:3C:90:3C:31:46:CB:70:AE:07:A9:
              0A:E3:AF:C1:01:6F:90:1A:23:E2:5F:38:DB:C6:08:5D:
              47:B3:83:41:F0:2E:00:37:14:B9:12:AA:79:92:52:CD:
              87:0F:7B:D8:62:29:A4:7E:30:BD:1B:B5:8C:72:B4:48:
              F2:E3:E8:21:F9:5E:4C:62:79:8B:02:06:9F:7F:D5:0B              : 0x010001
          • #6
            • authorityKeyIdentifier: 
              bb af 7e 02 3d fa a6 f1  3c 84 8e ad ee 38 98 ec  |..~.=...<....8..|
d9 32 32 d4                                       |.22.            |
            • subjectKeyIdentifier: 
              29 91 60 ff 8a 4d fa eb  f9 a6 6a b8 cf f9 e6 4b  |).`..M....j....K|
bd 49 ce 12                                       |.I..            |
            • keyUsage: true, 0x86
            • basicConstraints
              • true
              • true: 0
            • extendedKeyUsage: codeSigning
            • certificatePolicies: anyPolicy
            • crlDistributionPoints: http://crl.comodoca.com/COMODORSACertificationAuthority.crl
            • authorityInfoAccess
              • #0
                • caIssuers: http://crt.comodoca.com/COMODORSAAddTrustCA.crt
                • OCSP: http://ocsp.comodoca.com
        • RSA-SHA384: 
          02 3f 02 39 c3 ee f8 ca  3b 89 de 0c 6d 4d b1 f1  |.?.9....;...mM..|
4e 92 4f af c2 38 2c 04  cc c5 63 11 ab 09 63 af  |N.O..8,...c...c.|
ab a2 d7 02 3f cc 6f 19  c3 3d d6 1a 08 94 ff 25  |....?.o..=.....%|
d8 a9 88 a7 2b 10 1a e0  9b b1 07 22 1a 51 1c 3a  |....+......".Q.:|
d4 e1 e9 09 bf e6 24 74  af 1e 7b 16 31 6e 23 ef  |......$t..{.1n#.|
54 51 2d 52 02 e2 75 08  05 4c f1 b7 51 e1 51 00  |TQ-R..u..L..Q.Q.|
c6 87 f6 6c ee 10 44 76  57 6a f1 df 58 6b 21 aa  |...l..DvWj..Xk!.|
49 d4 7c 37 4e bd ff b6  75 54 40 18 36 57 67 11  |I.|7N...uT@.6Wg.|
cd 4f 02 e4 fe f3 da fc  75 17 db ec b7 f7 65 09  |.O......u.....e.|
23 49 1f 43 57 83 ea 7e  20 77 61 c8 4d f2 bb 65  |#I.CW..~ wa.M..e|
4d a8 f7 85 45 07 af 7a  69 27 65 90 29 40 8b df  |M...E..zi'e.)@..|
7b 3a 51 39 8c a8 1f 70  79 ad 6d 42 20 a2 cf 0c  |{:Q9...py.mB ...|
6c 03 8c 4c cd 73 07 94  e7 5a 8e 3a 04 ba a2 a1  |l..L.s...Z.:....|
7c 1f cb 63 3a 15 a7 d4  15 1b a7 52 47 32 a9 f4  ||..c:......RG2..|
bf 64 47 d1 aa 1f 53 4e  32 30 73 c2 6f b7 78 82  |.dG...SN20s.o.x.|
9d 5c ff 46 bb 6b 22 1d  88 0b f8 1b aa 34 a6 fc  |.\.F.k"......4..|
8c f5 dd 7f 65 8c 8c 31  57 31 d0 36 ec 47 a1 cf  |....e..1W1.6.G..|
cb 8b a8 ef 1c 18 58 c5  06 77 ca 4b 9b 51 af 4c  |......X..w.K.Q.L|
08 4a 7a 8f e2 a3 52 e2  8e 8e cc 26 e4 b2 d8 e5  |.Jz...R....&....|
38 c2 a8 ed c6 81 9c 35  6b a9 58 61 4a 0a 97 b4  |8......5k.XaJ...|
4b 42 b6 55 9d be 99 e7  70 6d 59 f8 6d 2a 0c 7f  |KB.U....pmY.m*..|
19 60 5f 0c 9a 88 6c 30  ac 52 09 90 16 1b ff 2b  |.`_...l0.R.....+|
9d db d0 20 ca 89 ea 28  7e 32 8e 19 df 7b 48 33  |... ...(~2...{H3|
1e d7 65 f8 ae c9 f8 83  14 93 76 7d 64 d0 8e ce  |..e.......v}d...|
be 35 7d ff 72 31 4d 9f  9e bd 1e 6c 2f a8 8f 0c  |.5}.r1M....l/...|
06 50 fb 8c 27 b3 76 c9  f4 e6 d7 c3 34 e2 8c 87  |.P..'.v.....4...|
21 86 61 fe bf 55 74 e1  21 77 03 0a 68 6c bb e4  |!.a..Ut.!w..hl..|
c9 a9 e6 cf 59 25 eb 7c  ec 45 0e 79 66 68 e8 22  |....Y%.|.E.yfh."|
cd b8 ef 98 85 4d 96 11  3c 09 8a d0 7f bc 28 28  |.....M..<.....((|
13 fb 6a ca 54 8d 92 5c  cd c2 65 98 06 9e ce 48  |..j.T..\..e....H|
5b d4 b5 37 93 46 41 7c  07 dd cf fa 43 ef ba 67  |[..7.FA|....C..g|
61 ff 7d 49 e0 bb 30 7d  5c 80 e3 e6 16 39 4b a7  |a.}I..0}\....9K.|
    • Signer
      • 1
      • unnamed
        • #0
          • C: GB
          • ST: Greater Manchester
          • L: Salford
          • O: COMODO CA Limited
          • CN: COMODO RSA Code Signing CA
        • 1D:27:53:76:A1:DB:6B:FE:C5:17:9E:52:7E:1D:3A:6B
      • SHA1: nil
      • #3
        • 1.3.6.1.4.1.311.2.1.12
          • nil
        • contentType: 1.3.6.1.4.1.311.2.1.4
        • 1.3.6.1.4.1.311.2.1.11: msCodeInd
        • messageDigest: 
          d2 83 04 a7 01 1e d0 96  db ad 4b 6f 12 06 95 ab  |..........Ko....|
55 53 4c 6d                                       |USLm            |
      • rsaEncryption: 
        9d c7 19 ce 2e 46 e5 39  3b b0 79 b3 56 02 78 32  |.....F.9;.y.V.x2|
b7 a7 0b cc 18 7b cd 0b  1d 18 e8 73 f0 d3 a3 2d  |.....{.....s...-|
f7 69 7c a8 50 7e ef b8  d3 72 26 6c ee c6 52 c6  |.i|.P~...r&l..R.|
21 84 65 f2 b6 01 d2 7e  c5 e0 24 a9 88 18 61 e9  |!.e....~..$...a.|
00 5b 15 c4 09 c5 b6 d1  21 28 00 3b 91 4b c4 4f  |.[......!(.;.K.O|
22 3d 40 0f 43 c2 54 8f  65 9b e6 fc 10 15 96 3c  |"=@.C.T.e......<|
d1 fa c9 44 b7 ab 32 71  f2 6a 19 94 4b da cb b0  |...D..2q.j..K...|
6b 7f 33 52 86 81 9e 57  cb af 9e 69 ff 62 c1 dd  |k.3R...W...i.b..|
55 21 b0 0b 72 0d d7 67  e8 a3 4a a9 15 c6 0f f1  |U!..r..g..J.....|
c0 70 e8 9f 8c 49 e6 8a  70 52 b1 0e 61 f2 e9 49  |.p...I..pR..a..I|
9a 56 78 85 9f 8e e4 f4  e1 45 97 1e 4e 91 01 82  |.Vx......E..N...|
f0 2b f9 71 0d 1f 72 70  8d 05 e0 78 04 1a f9 26  |.+.q..rp...x...&|
a9 8d fb e0 2d e4 01 77  a8 3a 54 d5 29 9e 59 3f  |....-..w.:T.).Y?|
eb 19 e5 6c ff 90 0c 77  5f 06 b6 a6 19 ff f0 ed  |...l...w_.......|
70 c0 bb 63 f6 19 c3 b9  dd ce 19 7f e1 58 7c bb  |p..c.........X|.|
90 cf a1 97 ce ba ce b3  94 f7 dd 8b e4 22 b4 d7  |............."..|
      • countersignature
        • 0
          • unnamed
            • #0
              • C: US
              • ST: UT
              • L: Salt Lake City
              • O: The USERTRUST Network
              • OU: http://www.usertrust.com
              • CN: UTN-USERFirst-Object
            • 16:88:F0:39:25:5E:63:8E:69:14:39:07:E6:33:0B
          • SHA1: nil
          • #2
            • contentType: pkcs7-data
            • signingTime: 2016-01-20 16:07:48 UTC
            • messageDigest: 
              49 c8 e4 fa 86 3b 32 b0  cc 1d af 7b 07 4f 3a da  |I....;2....{.O:.|
f1 cd 70 bc                                       |..p.            |
          • rsaEncryption: 
            23 a3 0b df a3 0d 64 12  9c 97 4e 3b 22 5a 85 f3  |#.....d...N;"Z..|
18 93 d8 37 d5 b6 33 1a  2d 93 ad d0 d9 bd 71 1f  |...7..3.-.....q.|
d2 eb 1c 6e c9 78 d8 cb  f3 7d b3 04 9c c1 2a 3a  |...n.x...}....*:|
0a e8 8e 3c 4b 57 7c 85  ef 7e 95 ca 09 57 cb 36  |...`|
dc df ad 19 11 09 d3 09  6b b5 99 0d c8 e3 31 92  |........k.....1.|
26 fc 9a 74 13 a5 13 17  70 ed 2b bf 4b 0f 7e 4d  |&..t....p.+.K.~M|
14 0c 01 27 80 66 92 a8  2b c4 ff e6 01 92 69 af  |...'.f..+.....i.|
8d 2e e4 9f 30 6c 13 c7  22 69 36 4a ab c6 65 a0  |....0l.."i6J..e.|
51 19 59 2b 9f 96 c6 35  a9 d3 f0 00 af 6c 59 94  |Q.Y+...5.....lY.|
2b f4 07 65 ac 04 89 29  09 a4 36 0f 0b 80 f9 44  |+..e...)..6....D|
df 7d a5 46 e8 f6 ea ab  88 94 30 1f ad 2e 61 f4  |.}.F......0...a.|
13 04 6d 79 6e 31 c8 03  f3 f8 ed 60 19 7e e4 5c  |..myn1.....`.~.\|
offsetsizetypecomment
0462336EXE01/20/2016 15:59:54#
15c115HTM#
70e005384PKCS7Authenticode Signature#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK