psiphon3 (1).exe

info
MZ
PE
resources
strings
imports
foremost
signature
hexdump
disasm
log
discuss
donate

filename	psiphon3 (1).exe
size	6313072 (0x605470)
md5	d72ec1790fa83dcebfdc8a0e3fe62b3c

type	PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x120

Rich Header

lib id	version	times used
241	40116	18
243	40116	155
242	40116	38
259	23013	25
261	23013	67
260	23013	65
131	30729	12
147	30729	31
1	0	378
260	22816	22
265	23026	69
255	23026	1
151	0	1
258	23026	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	3
TimeDateStamp	0x5d78a00d
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x102
Magic	0x10b
LinkerVersion	14.0
SizeOfCode	0x5ee000
SizeOfInitializedData	0x16000
SizeOfUninitializedData	0xb5c000
AddressOfEntryPoint	0x114a470
BaseOfCode	0xb5d000
BaseOfData	0x114b000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	5.1
ImageVersion	0.0
SubsystemVersion	5.1
Reserved1	0
SizeOfImage	0x1161000
SizeOfHeaders	0x1000
CheckSum	0x611783
Subsystem	2
DllCharacteristics	0x8140
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

UPX Modified >> *$igBy Ahmed18

This file is packed with UPX. Analysis will be incomplete without unpacking.
We can unpack it for you.

»» Analyze unpacked file

Sections

name	va	vsize	raw size	flags
UPX0	0x1000	0xb5c000	0	RWX UDATA
UPX1	0xb5d000	0x5ee000	0x5ed800	RWX IDATA
.rsrc	0x114b000	0x16000	0x15c00	RW- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x116077c	0x374
RESOURCE	0x114b000	0x1577c
EXCEPTION	0	0
SECURITY	0x603800	0x1c70
BASERELOC	0x1160af0	0x18
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0x114a65c	0x18
LOAD_CONFIG	0x114a67c	0x5c
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0	0
CLR_Header	0	0

TLS

raw start	raw end	index	callbks	zero fill	flags
0x154a674	0x154a67c	0x671564	0	0	0x300000

show previews

type	name	size
ICON	#1	296
ICON	#2	744
ICON	#3	1384
ICON	#4	2216
ICON	#5	3752
ICON	#6	1128
ICON	#7	4264
ICON	#8	9640
ICON	#9	19543
ICON	#10	41745
ICON	#11	296
ICON	#12	744
ICON	#13	1384
ICON	#14	2216
ICON	#15	3752
ICON	#16	1128
ICON	#17	4264
ICON	#18	9640
ICON	#19	18585
ICON	#20	40306
ICON	#21	296
ICON	#22	744
ICON	#23	1384
ICON	#24	2216
ICON	#25	3752
ICON	#26	1128
ICON	#27	4264
ICON	#28	9640
ICON	#29	19543
ICON	#30	41745
STRING	#7	66
RCDATA	COUNTRY_DIALING_CODES.JSON	27532
RCDATA	#131	13033072
RCDATA	#132	285808
GROUP_ICON	#133	146
GROUP_ICON	#146	146
GROUP_ICON	#147	146
HTML	BANNER.PNG	16484
HTML	FLAGS32.PNG	52279
HTML	FLAG_UNKNOWN_32.PNG	904
HTML	FLAG_UNKNOWN_64.PNG	2535
HTML	ICOMOON.EOT	18636
HTML	LOGO-BW.PNG	4309
HTML	LOGO.PNG	4320
HTML	MAIN.HTML	1755780
MANIFEST	#1	381

lang

string

1033

00 97 01 0d 82 08 aa 97  e3 47 23 03 03 76 05 03  |.........G#..v..|
43 b1 d5 c2 ad 42 b3 27  17 6b 27 db ee 10 17 fe  |C....B.'.k'.....|
07 75 04 2b 05 76 39 b1  6a 8f 6e b1 b1 65 db ab  |.u.+.v9.j.n..e..|
f7 33 3a 04 36 32 17 05  eb 88 b5 c3 c1 17 25 1f  |.3:.62........%.|
24 be                                             |$.              |

module_name	ord	function_name
KERNEL32.DLL		LoadLibraryA
KERNEL32.DLL		GetProcAddress
KERNEL32.DLL		VirtualProtect
KERNEL32.DLL		VirtualAlloc
KERNEL32.DLL		VirtualFree
KERNEL32.DLL		ExitProcess
ADVAPI32.dll		RegCloseKey
COMCTL32.dll	17
CRYPT32.dll		CryptStringToBinaryA
GDI32.dll		LPtoDP
ole32.dll		CoCreateGuid
OLEAUT32.dll	6
RASAPI32.dll		RasDialW
SHELL32.dll		ShellExecuteW
SHLWAPI.dll		StrStrIA
USER32.dll		GetDCEx
VERSION.dll		VerQueryValueW
WINHTTP.dll		WinHttpOpen
WININET.dll		InternetSetOptionW
WS2_32.dll	9

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert SHA2 Assured ID Code Signing CA

serial: 0A55A3071693FE880F0F6164EB93665E

Certificates (4)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:55:a3:07:16:93:fe:88:0f:0f:61:64:eb:93:66:5e
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 Assured ID Code Signing CA
        Validity
            Not Before: Jul  6 00:00:00 2017 GMT
            Not After : Oct  3 12:00:00 2020 GMT
        Subject: C=CA, ST=Ontario, L=Toronto, O=Psiphon Inc., CN=Psiphon Inc.
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:e7:5e:c3:f0:3a:47:86:6e:e1:12:34:94:48:8a:
                    d3:36:0b:7e:aa:de:24:ff:0c:8d:81:0e:96:12:1a:
                    1d:20:9d:9a:4c:22:0f:ad:f1:2f:df:9c:fc:64:06:
                    04:a4:c3:3e:d8:8b:fc:75:c3:9e:e7:7e:85:19:23:
                    d5:07:c1:cb:73:19:c3:6a:a0:39:fb:f8:2b:22:94:
                    15:12:b3:a0:51:4a:3b:43:d4:c0:ef:9b:84:9e:7c:
                    04:45:c4:0e:dd:01:1b:22:10:c5:7a:76:0b:56:e0:
                    1e:23:27:a7:46:0c:64:c4:97:91:06:26:a3:62:d8:
                    33:34:42:5b:f1:e5:b1:95:d3:08:b5:61:03:e8:b2:
                    fd:85:3f:63:26:ca:9d:7a:23:ec:a8:1f:11:da:52:
                    bc:41:b9:d0:0b:0d:bf:d3:af:a9:07:65:ed:8d:59:
                    c9:b0:fb:70:91:4e:dd:09:9b:a6:10:43:95:af:1e:
                    44:8c:54:8d:27:7b:30:2c:9c:68:25:95:fe:08:fd:
                    79:48:1f:82:67:32:10:50:ae:bb:a1:4a:88:da:8b:
                    ed:08:f6:4f:59:dc:d8:7b:88:7d:01:ad:4d:aa:6c:
                    46:51:e0:42:e3:89:68:d4:26:f0:71:85:a3:b6:8d:
                    c3:3b:cc:3e:bc:6b:97:a1:67:13:e3:55:de:bc:0d:
                    94:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                5A:C4:B9:7B:2A:0A:A3:A5:EA:71:03:C0:60:F9:2D:F6:65:75:0E:58
            X509v3 Subject Key Identifier: 
                31:49:5B:92:6D:6B:94:59:7A:9F:2F:BD:73:32:11:54:C4:72:7A:DF
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl3.digicert.com/sha2-assured-cs-g1.crl
                Full Name:
                  URI:http://crl4.digicert.com/sha2-assured-cs-g1.crl
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.114412.3.1
                  CPS: https://www.digicert.com/CPS
                Policy: 2.23.140.1.4.1
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com
                CA Issuers - URI:http://cacerts.digicert.com/DigiCertSHA2AssuredIDCodeSigningCA.crt
            X509v3 Basic Constraints: critical
                CA:FALSE
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        7e:34:72:bd:0b:27:ad:31:b5:70:0b:77:2e:c9:0b:03:43:ec:
        3e:54:a8:ae:f5:e7:59:6c:73:76:43:05:b9:33:48:b1:75:82:
        4f:f7:1a:bd:b5:a0:aa:ed:f2:8b:03:6c:4d:57:5f:93:e7:11:
        d3:de:71:b2:ef:f6:a6:ba:1a:15:29:e1:10:d8:28:0b:1d:51:
        5e:79:cb:d0:55:c7:f3:d1:c7:d3:61:94:9a:82:c8:5b:48:3f:
        27:d8:5c:7c:0d:12:3c:6d:02:3f:d2:ae:0f:38:13:bb:00:ec:
        62:c5:c0:95:4e:89:a7:e4:4c:b0:b9:6a:8e:e9:46:21:a2:aa:
        6d:c3:01:9c:d8:90:df:3b:55:c3:ce:0a:53:77:90:77:09:1d:
        56:5c:fe:2b:7a:d5:9a:b8:a9:3e:bb:76:15:c7:ca:fb:ba:50:
        eb:7b:4a:15:22:77:4a:a6:41:65:72:de:62:36:58:3e:95:5d:
        c6:ff:2f:e1:67:0b:4a:fa:9f:0f:93:a3:72:33:2c:18:04:41:
        32:a4:b2:3d:9e:13:d4:bc:51:8c:99:01:4f:b9:ff:56:ac:e0:
        67:d3:8c:c5:5d:76:65:22:b3:c4:d7:ae:c4:2b:85:25:6a:4c:
        f9:a1:52:e8:2d:2f:d4:03:77:f7:4e:07:1c:10:53:e8:35:90:
        b4:9f:02:8b

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root CA
        Validity
            Not Before: Oct 22 12:00:00 2013 GMT
            Not After : Oct 22 12:00:00 2028 GMT
        Subject: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 Assured ID Code Signing CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:f8:d3:b3:1c:7f:0e:11:af:67:77:07:d3:0b:31:
                    49:19:cf:d0:fb:45:99:b1:3a:db:44:f5:7f:e5:a8:
                    9d:db:32:d7:71:ea:76:9d:05:2e:b7:8f:fa:92:43:
                    c0:a5:f9:89:d4:37:19:d7:b6:aa:f0:9c:86:a5:d8:
                    25:ac:0e:79:28:3a:7e:e9:d1:67:d3:c6:fb:29:27:
                    c7:d3:7b:23:94:e4:91:23:96:90:77:82:f9:a1:84:
                    23:66:12:54:33:50:74:b1:28:26:bb:24:69:c2:c2:
                    52:f2:14:67:8a:89:45:d4:2d:a1:a3:e9:88:2c:20:
                    95:ae:1c:4a:87:08:df:0c:f5:e2:4d:60:18:be:aa:
                    c4:b2:ae:70:31:66:33:71:3e:ac:70:a2:ab:ce:7f:
                    e9:7c:cb:92:a1:e5:3b:31:1c:cf:ea:f2:0a:e4:57:
                    bb:4a:b5:e9:74:e6:2b:fe:6c:cb:7e:74:39:36:0d:
                    90:ef:e4:b5:4e:a4:a9:ea:6a:0a:ab:84:f3:ac:67:
                    4e:b5:c4:f7:8c:d1:20:25:23:eb:08:64:3e:52:96:
                    c1:f2:0f:12:f4:c5:8e:0f:c1:a2:e8:2c:51:f7:73:
                    bc:bd:85:b1:62:83:73:41:82:07:e4:38:8b:6a:73:
                    20:d0:0f:64:73:3c:9e:9f:a6:33:a9:fd:19:df:25:
                    93:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                Code Signing
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com
                CA Issuers - URI:http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl
                Full Name:
                  URI:http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.114412.0.2.4
                  CPS: https://www.digicert.com/CPS
                Policy: 2.16.840.1.114412.3
            X509v3 Subject Key Identifier: 
                5A:C4:B9:7B:2A:0A:A3:A5:EA:71:03:C0:60:F9:2D:F6:65:75:0E:58
            X509v3 Authority Key Identifier: 
                45:EB:A2:AF:F4:92:CB:82:31:2D:51:8B:A7:A7:21:9D:F3:6D:C8:0F
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        3e:ec:0d:5a:24:b3:f3:22:d1:15:c8:2c:7c:25:29:76:a8:1d:
        5d:1c:2d:3a:1a:c4:ef:30:61:d7:7e:0b:60:fd:c3:3d:0f:c4:
        af:8b:fd:ef:2a:df:20:55:37:b0:e1:f6:d1:92:75:0f:51:b4:
        6e:a5:8e:5a:e2:5e:24:81:4e:10:a4:ee:3f:71:8e:63:0e:13:
        4b:ad:d7:5f:44:79:f3:36:14:06:8a:f7:9c:46:4e:5c:ff:90:
        b1:1b:07:0e:91:15:fb:ba:af:b5:51:c2:8d:24:ae:24:c6:c7:
        27:2a:a1:29:28:1a:3a:71:28:02:3c:2e:91:a3:c0:25:11:e2:
        9c:14:47:a1:7a:68:68:af:9b:a7:5c:20:5c:d9:71:b1:0c:8f:
        bb:a8:f8:c5:12:68:9f:cf:40:cb:40:44:a5:13:f0:e6:64:0c:
        25:08:42:32:b2:36:8a:24:02:fe:2f:72:7e:1c:d7:49:45:96:
        e8:59:1d:e9:fa:74:64:6b:b2:eb:66:43:da:b3:b0:8c:d5:e9:
        0d:dd:f6:01:20:ce:99:31:63:3d:08:1a:18:b3:81:9b:4f:c6:
        93:10:06:fc:07:81:fa:8b:da:f9:82:49:f7:62:6e:a1:53:fa:
        12:94:18:85:2e:92:91:ea:68:6c:44:32:b2:66:a1:e7:18:a4:
        9a:64:51:ef

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID CA-1
        Validity
            Not Before: Oct 22 00:00:00 2014 GMT
            Not After : Oct 22 00:00:00 2024 GMT
        Subject: C=US, O=DigiCert, CN=DigiCert Timestamp Responder
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a3:64:5d:fc:7c:b3:e0:82:35:e0:e0:f6:c6:2a:
                    e6:49:75:3b:cc:6e:e0:53:a9:9f:1f:64:59:e6:7c:
                    6b:7f:6b:8c:9d:55:f8:92:e3:9e:d5:5a:63:5b:02:
                    49:50:d9:83:ce:6f:66:ee:dd:cb:85:e9:5f:a5:f9:
                    d4:87:74:88:44:3b:19:c9:e5:f5:91:9f:c6:14:39:
                    ac:24:ea:a8:4b:2c:91:89:cc:5e:28:f4:64:b6:50:
                    b7:f5:12:b3:73:96:0a:67:a3:be:61:9f:ae:f3:fd:
                    12:78:75:0e:a6:5b:14:fd:45:23:8e:86:44:55:7d:
                    18:86:05:8c:55:87:79:48:46:f7:ca:0e:8d:a7:de:
                    4e:5f:e2:a8:b6:2d:59:02:61:88:61:72:18:68:b9:
                    b8:7c:ee:e6:e7:34:2f:31:77:81:30:1f:bb:36:01:
                    8d:ef:27:e3:f7:9a:f0:4c:31:64:8d:e3:eb:fa:19:
                    87:a8:7e:cf:ec:8c:0c:36:5b:7a:c1:7a:b8:78:c7:
                    c9:06:2e:46:10:c8:8d:e8:04:60:db:bc:73:74:fa:
                    4e:d8:fe:aa:40:f1:b2:ce:70:46:83:e9:da:40:a1:
                    59:3a:d9:15:09:57:99:56:30:93:f3:c9:61:cc:d0:
                    08:cc:6b:ec:62:42:91:ac:02:c0:ef:a4:f0:89:11:
                    8f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.114412.7.1
                  CPS: https://www.digicert.com/CPS
                  User Notice:
                    Explicit Text: 
                Policy: 2.16.840.1.114412.3.21
            X509v3 Authority Key Identifier: 
                15:00:12:2B:13:98:B2:99:07:ED:1E:DF:A2:BE:57:0D:2B:67:02:CD
            X509v3 Subject Key Identifier: 
                61:5A:4D:24:B6:49:32:9D:4A:2A:79:1A:83:4B:F4:1E:89:C1:CA:7D
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl3.digicert.com/DigiCertAssuredIDCA-1.crl
                Full Name:
                  URI:http://crl4.digicert.com/DigiCertAssuredIDCA-1.crl
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com
                CA Issuers - URI:http://cacerts.digicert.com/DigiCertAssuredIDCA-1.crt
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        9d:25:7e:1b:33:4d:b2:26:81:5c:9b:86:ce:23:20:0f:80:87:
        e5:88:ff:ff:b1:d4:6a:2c:31:ed:3a:17:19:71:17:cd:a9:1b:
        bc:5a:16:39:00:9d:e3:6c:84:e4:5a:40:fb:de:06:01:8c:37:
        fa:9b:b1:9d:24:7e:fe:20:a4:57:ad:5b:b7:9a:b0:60:26:ea:
        69:57:21:5d:34:2f:1f:71:b0:83:94:19:05:6b:35:90:10:a0:
        7b:97:c7:f6:3f:e7:e2:11:41:a6:bd:62:d9:f0:27:3d:38:1d:
        28:6f:3a:52:09:f0:ec:70:62:d3:62:4b:b0:e0:73:a6:92:c0:
        d3:8e:31:d8:2f:e3:6d:17:13:06:ee:e4:03:b6:14:ab:f3:8f:
        43:a7:71:9d:21:dd:14:ca:15:5d:92:41:da:f9:0f:81:d1:99:
        74:0d:26:c4:0e:7f:1b:b5:f5:a0:f1:c6:77:06:28:15:e9:d8:
        93:e5:55:16:f0:bb:0a:ab:1c:db:5c:48:27:66:c8:a3:8b:0a:
        1c:e5:95:da:ae:c4:2e:59:a0:61:dd:da:f3:6d:a2:61:e9:8a:
        0b:6d:ec:12:18:bd:f7:55:54:40:03:92:2b:6b:c2:51:c2:0a:
        48:af:b0:d4:6e:e0:f4:14:0a:3a:1b:e3:8f:3d:ca:af:6a:8d:
        7b:dc:d8:44

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root CA
        Validity
            Not Before: Nov 10 00:00:00 2006 GMT
            Not After : Nov 10 00:00:00 2021 GMT
        Subject: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID CA-1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:e8:82:2d:99:f9:ca:c2:42:95:a5:80:73:40:70:
                    d2:9e:56:54:5c:a9:c4:d2:41:06:8f:c9:33:fc:4d:
                    45:91:5c:81:9f:ed:2c:9c:f8:16:59:df:9e:b5:24:
                    15:c2:98:b9:b4:77:49:dc:89:c4:0a:da:af:cb:5e:
                    6b:ed:ad:b0:71:31:eb:cf:3a:40:0c:46:4d:93:ec:
                    8b:7a:36:08:03:ab:0c:34:fe:18:49:82:fe:c7:c7:
                    31:48:80:7c:1e:a2:0f:92:0e:50:c9:c6:87:eb:36:
                    3f:d8:30:c3:ff:a6:f7:fb:a2:cd:6f:73:23:fe:ac:
                    56:05:90:f0:32:21:16:89:c6:70:88:f9:05:97:7d:
                    a3:c7:43:dd:02:e8:3b:3d:ed:b1:41:a3:ed:3f:be:
                    db:95:48:c4:ee:1e:b3:f2:bc:0c:2b:99:d0:c6:5d:
                    12:42:81:e1:83:6e:82:73:3f:26:4b:14:90:ae:59:
                    66:0a:c4:8d:be:d2:ce:06:ae:ad:84:6f:48:84:9b:
                    4f:40:b9:f1:4c:f2:af:98:fb:f6:ce:40:5d:5c:f6:
                    a8:f1:2f:af:ec:89:22:f2:6b:18:65:b1:c1:73:ad:
                    d7:f1:d8:cf:1e:0a:74:5c:42:b8:68:7e:b7:d5:77:
                    0a:27:56:7c:0f:62:a4:3f:32:14:60:95:fd:07:04:
                    a2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication, Code Signing, E-mail Protection, Time Stamping
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.114412.0.1.4
                  CPS: http://www.digicert.com/ssl-cps-repository.htm
                  User Notice:
                    Explicit Text: 
                Policy: 2.16.840.1.114412.3.21
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com
                CA Issuers - URI:http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl
                Full Name:
                  URI:http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl
            X509v3 Subject Key Identifier: 
                15:00:12:2B:13:98:B2:99:07:ED:1E:DF:A2:BE:57:0D:2B:67:02:CD
            X509v3 Authority Key Identifier: 
                45:EB:A2:AF:F4:92:CB:82:31:2D:51:8B:A7:A7:21:9D:F3:6D:C8:0F
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        46:50:3e:c9:b7:28:24:a7:38:1d:b6:5b:29:af:52:cf:52:e9:
        31:47:ab:56:5c:7b:d5:0d:0b:41:b3:ef:ec:75:1f:74:38:f2:
        b2:5c:61:a2:9c:95:c3:50:e4:82:b9:23:d1:ba:3a:86:72:ad:
        38:78:ac:75:5d:17:17:34:72:47:85:94:56:d1:eb:bb:36:84:
        77:cc:24:a5:f3:04:19:55:a9:e7:e3:e7:ab:62:cd:fb:8b:2d:
        90:c2:c0:d2:b5:94:bd:5e:4f:b1:05:d2:0e:3d:1a:a9:14:5b:
        a6:86:31:62:a8:a8:33:e4:9b:39:a7:c4:f5:ce:1d:78:76:94:
        25:73:e4:2a:ab:cf:9c:76:4b:ed:5f:c2:4b:16:e4:4b:70:4c:
        00:89:1e:fc:c5:79:bc:4c:12:57:fe:5f:e1:1e:bc:02:5d:a8:
        fe:fb:07:38:4f:0d:c6:5d:91:b9:0f:67:45:cd:d6:83:ed:e7:
        92:0d:8d:b1:69:8c:4f:fb:59:e0:23:0f:d2:aa:ae:00:7c:ee:
        9c:42:0e:cf:91:d7:27:b7:16:ee:0f:c3:bd:7c:0a:a0:ee:2c:
        08:55:85:22:b8:eb:18:1a:4d:fc:2a:21:ad:49:31:83:47:95:
        77:71:dc:b1:1b:4b:4b:1c:10:9c:77:14:c1:9d:4f:2f:5a:95:
        08:29:10:26

pkcs7-signedData

SHA1: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15

00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |

SHA1

7d 24 0b 54 54 d0 3b 8b 23 e9 b1 1e 66 fb 2c bb |}$.TT.;.#...f.,.| 0f 74 15 49 |.t.I |

Certificates

Certificate #0
- 2
  - 0A:55:A3:07:16:93:FE:88:0F:0F:61:64:EB:93:66:5E
  - RSA-SHA256: nil
  - Issuer
    - C: US
    - O: DigiCert Inc
    - OU: www.digicert.com
    - CN: DigiCert SHA2 Assured ID Code Signing CA
  - 2017-07-06 00:00:00 UTC: 2020-10-03 12:00:00 UTC
  - Subject
    - C: CA
    - ST: Ontario
    - L: Toronto
    - O: Psiphon Inc.
    - CN: Psiphon Inc.
  - #5
    - rsaEncryption: nil
    - E7:5E:C3:F0:3A:47:86:6E:E1:12:34:94:48:8A:D3:36:
      0B:7E:AA:DE:24:FF:0C:8D:81:0E:96:12:1A:1D:20:9D:
      9A:4C:22:0F:AD:F1:2F:DF:9C:FC:64:06:04:A4:C3:3E:
      D8:8B:FC:75:C3:9E:E7:7E:85:19:23:D5:07:C1:CB:73:
      19:C3:6A:A0:39:FB:F8:2B:22:94:15:12:B3:A0:51:4A:
      3B:43:D4:C0:EF:9B:84:9E:7C:04:45:C4:0E:DD:01:1B:
      22:10:C5:7A:76:0B:56:E0:1E:23:27:A7:46:0C:64:C4:
      97:91:06:26:A3:62:D8:33:34:42:5B:F1:E5:B1:95:D3:
      08:B5:61:03:E8:B2:FD:85:3F:63:26:CA:9D:7A:23:EC:
      A8:1F:11:DA:52:BC:41:B9:D0:0B:0D:BF:D3:AF:A9:07:
      65:ED:8D:59:C9:B0:FB:70:91:4E:DD:09:9B:A6:10:43:
      95:AF:1E:44:8C:54:8D:27:7B:30:2C:9C:68:25:95:FE:
      08:FD:79:48:1F:82:67:32:10:50:AE:BB:A1:4A:88:DA:
      8B:ED:08:F6:4F:59:DC:D8:7B:88:7D:01:AD:4D:AA:6C:
      46:51:E0:42:E3:89:68:D4:26:F0:71:85:A3:B6:8D:C3:
      3B:CC:3E:BC:6B:97:A1:67:13:E3:55:DE:BC:0D:94:5D: 0x010001
  - #6
    - authorityKeyIdentifier:
```
5a c4 b9 7b 2a 0a a3 a5  ea 71 03 c0 60 f9 2d f6  |Z..{*....q..`.-.|
65 75 0e 58                                       |eu.X            |
```
    - subjectKeyIdentifier:
```
31 49 5b 92 6d 6b 94 59  7a 9f 2f bd 73 32 11 54  |1I[.mk.Yz./.s2.T|
c4 72 7a df                                       |.rz.            |
```
    - keyUsage: true, 0x80
    - extendedKeyUsage: codeSigning
    - crlDistributionPoints
      - http://crl3.digicert.com/sha2-assured-cs-g1.crl: http://crl4.digicert.com/sha2-assured-cs-g1.crl
    - certificatePolicies
      - #0
        2.16.840.1.114412.3.1
        id-qt-cps: https://www.digicert.com/CPS
        2.23.140.1.4.1
    - authorityInfoAccess
      - #0
        OCSP: http://ocsp.digicert.com
        caIssuers: http://cacerts.digicert.com/DigiCertSHA2AssuredIDCodeSigningCA.crt
    - basicConstraints
      - true
      - nil
- RSA-SHA256:
```
7e 34 72 bd 0b 27 ad 31  b5 70 0b 77 2e c9 0b 03  |~4r..'.1.p.w....|
43 ec 3e 54 a8 ae f5 e7  59 6c 73 76 43 05 b9 33  |C.>T....YlsvC..3|
48 b1 75 82 4f f7 1a bd  b5 a0 aa ed f2 8b 03 6c  |H.u.O..........l|
4d 57 5f 93 e7 11 d3 de  71 b2 ef f6 a6 ba 1a 15  |MW_.....q.......|
29 e1 10 d8 28 0b 1d 51  5e 79 cb d0 55 c7 f3 d1  |)...(..Q^y..U...|
c7 d3 61 94 9a 82 c8 5b  48 3f 27 d8 5c 7c 0d 12  |..a....[H?'.\|..|
3c 6d 02 3f d2 ae 0f 38  13 bb 00 ec 62 c5 c0 95  |.v....|
ba 50 eb 7b 4a 15 22 77  4a a6 41 65 72 de 62 36  |.P.{J."wJ.Aer.b6|
58 3e 95 5d c6 ff 2f e1  67 0b 4a fa 9f 0f 93 a3  |X>.]../.g.J.....|
72 33 2c 18 04 41 32 a4  b2 3d 9e 13 d4 bc 51 8c  |r3,..A2..=....Q.|
99 01 4f b9 ff 56 ac e0  67 d3 8c c5 5d 76 65 22  |..O..V..g...]ve"|
b3 c4 d7 ae c4 2b 85 25  6a 4c f9 a1 52 e8 2d 2f  |.....+.%jL..R.-/|
d4 03 77 f7 4e 07 1c 10  53 e8 35 90 b4 9f 02 8b  |..w.N...S.5.....|
```
Certificate #1
- 2
  - 04:09:18:1B:5F:D5:BB:66:75:53:43:B5:6F:95:50:08
  - RSA-SHA256: nil
  - Issuer
    - C: US
    - O: DigiCert Inc
    - OU: www.digicert.com
    - CN: DigiCert Assured ID Root CA
  - 2013-10-22 12:00:00 UTC: 2028-10-22 12:00:00 UTC
  - Subject
    - C: US
    - O: DigiCert Inc
    - OU: www.digicert.com
    - CN: DigiCert SHA2 Assured ID Code Signing CA
  - #5
    - rsaEncryption: nil
    - F8:D3:B3:1C:7F:0E:11:AF:67:77:07:D3:0B:31:49:19:
      CF:D0:FB:45:99:B1:3A:DB:44:F5:7F:E5:A8:9D:DB:32:
      D7:71:EA:76:9D:05:2E:B7:8F:FA:92:43:C0:A5:F9:89:
      D4:37:19:D7:B6:AA:F0:9C:86:A5:D8:25:AC:0E:79:28:
      3A:7E:E9:D1:67:D3:C6:FB:29:27:C7:D3:7B:23:94:E4:
      91:23:96:90:77:82:F9:A1:84:23:66:12:54:33:50:74:
      B1:28:26:BB:24:69:C2:C2:52:F2:14:67:8A:89:45:D4:
      2D:A1:A3:E9:88:2C:20:95:AE:1C:4A:87:08:DF:0C:F5:
      E2:4D:60:18:BE:AA:C4:B2:AE:70:31:66:33:71:3E:AC:
      70:A2:AB:CE:7F:E9:7C:CB:92:A1:E5:3B:31:1C:CF:EA:
      F2:0A:E4:57:BB:4A:B5:E9:74:E6:2B:FE:6C:CB:7E:74:
      39:36:0D:90:EF:E4:B5:4E:A4:A9:EA:6A:0A:AB:84:F3:
      AC:67:4E:B5:C4:F7:8C:D1:20:25:23:EB:08:64:3E:52:
      96:C1:F2:0F:12:F4:C5:8E:0F:C1:A2:E8:2C:51:F7:73:
      BC:BD:85:B1:62:83:73:41:82:07:E4:38:8B:6A:73:20:
      D0:0F:64:73:3C:9E:9F:A6:33:A9:FD:19:DF:25:93:D1: 0x010001
  - X509v3 extensions
    - basicConstraints
      - true
      - true: 0
    - keyUsage: true, 0x86
    - extendedKeyUsage: codeSigning
    - authorityInfoAccess
      - #0
        OCSP: http://ocsp.digicert.com
        caIssuers: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt
    - crlDistributionPoints
      - http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl
    - certificatePolicies
      - #0
        2.16.840.1.114412.0.2.4
        id-qt-cps: https://www.digicert.com/CPS
        2.16.840.1.114412.3
    - subjectKeyIdentifier:
```
5a c4 b9 7b 2a 0a a3 a5  ea 71 03 c0 60 f9 2d f6  |Z..{*....q..`.-.|
65 75 0e 58                                       |eu.X            |
```
    - authorityKeyIdentifier:
```
45 eb a2 af f4 92 cb 82  31 2d 51 8b a7 a7 21 9d  |E.......1-Q...!.|
f3 6d c8 0f                                       |.m..            |
```
- RSA-SHA256:
```
3e ec 0d 5a 24 b3 f3 22  d1 15 c8 2c 7c 25 29 76  |>..Z$.."...,|%)v|
a8 1d 5d 1c 2d 3a 1a c4  ef 30 61 d7 7e 0b 60 fd  |..].-:...0a.~.`.|
c3 3d 0f c4 af 8b fd ef  2a df 20 55 37 b0 e1 f6  |.=......*. U7...|
d1 92 75 0f 51 b4 6e a5  8e 5a e2 5e 24 81 4e 10  |..u.Q.n..Z.^$.N.|
a4 ee 3f 71 8e 63 0e 13  4b ad d7 5f 44 79 f3 36  |..?q.c..K.._Dy.6|
14 06 8a f7 9c 46 4e 5c  ff 90 b1 1b 07 0e 91 15  |.....FN\........|
fb ba af b5 51 c2 8d 24  ae 24 c6 c7 27 2a a1 29  |....Q..$.$..'*.)|
28 1a 3a 71 28 02 3c 2e  91 a3 c0 25 11 e2 9c 14  |(.:q(.<....%....|
47 a1 7a 68 68 af 9b a7  5c 20 5c d9 71 b1 0c 8f  |G.zhh...\ \.q...|
bb a8 f8 c5 12 68 9f cf  40 cb 40 44 a5 13 f0 e6  |.....h..@.@D....|
64 0c 25 08 42 32 b2 36  8a 24 02 fe 2f 72 7e 1c  |d.%.B2.6.$../r~.|
d7 49 45 96 e8 59 1d e9  fa 74 64 6b b2 eb 66 43  |.IE..Y...tdk..fC|
da b3 b0 8c d5 e9 0d dd  f6 01 20 ce 99 31 63 3d  |.......... ..1c=|
08 1a 18 b3 81 9b 4f c6  93 10 06 fc 07 81 fa 8b  |......O.........|
da f9 82 49 f7 62 6e a1  53 fa 12 94 18 85 2e 92  |...I.bn.S.......|
91 ea 68 6c 44 32 b2 66  a1 e7 18 a4 9a 64 51 ef  |..hlD2.f.....dQ.|
```

Certificate #2

03:01:9A:02:3A:FF:58:B1:6B:D6:D5:EA:E6:17:F0:66
RSA-SHA1: nil
Issuer
- C: US
- O: DigiCert Inc
- OU: www.digicert.com
- CN: DigiCert Assured ID CA-1
2014-10-22 00:00:00 UTC: 2024-10-22 00:00:00 UTC
Subject
- C: US
- O: DigiCert
- CN: DigiCert Timestamp Responder
#5
- rsaEncryption: nil
- A3:64:5D:FC:7C:B3:E0:82:35:E0:E0:F6:C6:2A:E6:49:
  75:3B:CC:6E:E0:53:A9:9F:1F:64:59:E6:7C:6B:7F:6B:
  8C:9D:55:F8:92:E3:9E:D5:5A:63:5B:02:49:50:D9:83:
  CE:6F:66:EE:DD:CB:85:E9:5F:A5:F9:D4:87:74:88:44:
  3B:19:C9:E5:F5:91:9F:C6:14:39:AC:24:EA:A8:4B:2C:
  91:89:CC:5E:28:F4:64:B6:50:B7:F5:12:B3:73:96:0A:
  67:A3:BE:61:9F:AE:F3:FD:12:78:75:0E:A6:5B:14:FD:
  45:23:8E:86:44:55:7D:18:86:05:8C:55:87:79:48:46:
  F7:CA:0E:8D:A7:DE:4E:5F:E2:A8:B6:2D:59:02:61:88:
  61:72:18:68:B9:B8:7C:EE:E6:E7:34:2F:31:77:81:30:
  1F:BB:36:01:8D:EF:27:E3:F7:9A:F0:4C:31:64:8D:E3:
  EB:FA:19:87:A8:7E:CF:EC:8C:0C:36:5B:7A:C1:7A:B8:
  78:C7:C9:06:2E:46:10:C8:8D:E8:04:60:DB:BC:73:74:
  FA:4E:D8:FE:AA:40:F1:B2:CE:70:46:83:E9:DA:40:A1:
  59:3A:D9:15:09:57:99:56:30:93:F3:C9:61:CC:D0:08:
  CC:6B:EC:62:42:91:AC:02:C0:EF:A4:F0:89:11:8F:77: 0x010001

keyUsage: true, 0x80
basicConstraints
- true
- nil
extendedKeyUsage: true, timeStamping

certificatePolicies

2.16.840.1.114412.7.1

id-qt-cps: https://www.digicert.com/CPS

id-qt-unotice:

00 41 00 6e 00 79 00 20  00 75 00 73 00 65 00 20  |.A.n.y. .u.s.e. |
00 6f 00 66 00 20 00 74  00 68 00 69 00 73 00 20  |.o.f. .t.h.i.s. |
00 43 00 65 00 72 00 74  00 69 00 66 00 69 00 63  |.C.e.r.t.i.f.i.c|
00 61 00 74 00 65 00 20  00 63 00 6f 00 6e 00 73  |.a.t.e. .c.o.n.s|
00 74 00 69 00 74 00 75  00 74 00 65 00 73 00 20  |.t.i.t.u.t.e.s. |
00 61 00 63 00 63 00 65  00 70 00 74 00 61 00 6e  |.a.c.c.e.p.t.a.n|
00 63 00 65 00 20 00 6f  00 66 00 20 00 74 00 68  |.c.e. .o.f. .t.h|
00 65 00 20 00 44 00 69  00 67 00 69 00 43 00 65  |.e. .D.i.g.i.C.e|
00 72 00 74 00 20 00 43  00 50 00 2f 00 43 00 50  |.r.t. .C.P./.C.P|
00 53 00 20 00 61 00 6e  00 64 00 20 00 74 00 68  |.S. .a.n.d. .t.h|
00 65 00 20 00 52 00 65  00 6c 00 79 00 69 00 6e  |.e. .R.e.l.y.i.n|
00 67 00 20 00 50 00 61  00 72 00 74 00 79 00 20  |.g. .P.a.r.t.y. |
00 41 00 67 00 72 00 65  00 65 00 6d 00 65 00 6e  |.A.g.r.e.e.m.e.n|
00 74 00 20 00 77 00 68  00 69 00 63 00 68 00 20  |.t. .w.h.i.c.h. |
00 6c 00 69 00 6d 00 69  00 74 00 20 00 6c 00 69  |.l.i.m.i.t. .l.i|
00 61 00 62 00 69 00 6c  00 69 00 74 00 79 00 20  |.a.b.i.l.i.t.y. |
00 61 00 6e 00 64 00 20  00 61 00 72 00 65 00 20  |.a.n.d. .a.r.e. |
00 69 00 6e 00 63 00 6f  00 72 00 70 00 6f 00 72  |.i.n.c.o.r.p.o.r|
00 61 00 74 00 65 00 64  00 20 00 68 00 65 00 72  |.a.t.e.d. .h.e.r|
00 65 00 69 00 6e 00 20  00 62 00 79 00 20 00 72  |.e.i.n. .b.y. .r|
00 65 00 66 00 65 00 72  00 65 00 6e 00 63 00 65  |.e.f.e.r.e.n.c.e|
00 2e                                             |..              |

2.16.840.1.114412.3.21

authorityKeyIdentifier:

15 00 12 2b 13 98 b2 99  07 ed 1e df a2 be 57 0d  |...+..........W.|
2b 67 02 cd                                       |+g..            |

subjectKeyIdentifier:

61 5a 4d 24 b6 49 32 9d  4a 2a 79 1a 83 4b f4 1e  |aZM$.I2.J*y..K..|
89 c1 ca 7d                                       |...}            |

crlDistributionPoints
- http://crl3.digicert.com/DigiCertAssuredIDCA-1.crl: http://crl4.digicert.com/DigiCertAssuredIDCA-1.crl
authorityInfoAccess
- #0
  - OCSP: http://ocsp.digicert.com
  - caIssuers: http://cacerts.digicert.com/DigiCertAssuredIDCA-1.crt

RSA-SHA1:

9d 25 7e 1b 33 4d b2 26  81 5c 9b 86 ce 23 20 0f  |.%~.3M.&.\...# .|
80 87 e5 88 ff ff b1 d4  6a 2c 31 ed 3a 17 19 71  |........j,1.:..q|
17 cd a9 1b bc 5a 16 39  00 9d e3 6c 84 e4 5a 40  |.....Z.9...l..Z@|
fb de 06 01 8c 37 fa 9b  b1 9d 24 7e fe 20 a4 57  |.....7....$~. .W|
ad 5b b7 9a b0 60 26 ea  69 57 21 5d 34 2f 1f 71  |.[...`&.iW!]4/.q|
b0 83 94 19 05 6b 35 90  10 a0 7b 97 c7 f6 3f e7  |.....k5...{...?.|
e2 11 41 a6 bd 62 d9 f0  27 3d 38 1d 28 6f 3a 52  |..A..b..'=8.(o:R|
09 f0 ec 70 62 d3 62 4b  b0 e0 73 a6 92 c0 d3 8e  |...pb.bK..s.....|
31 d8 2f e3 6d 17 13 06  ee e4 03 b6 14 ab f3 8f  |1./.m...........|
43 a7 71 9d 21 dd 14 ca  15 5d 92 41 da f9 0f 81  |C.q.!....].A....|
d1 99 74 0d 26 c4 0e 7f  1b b5 f5 a0 f1 c6 77 06  |..t.&.........w.|
28 15 e9 d8 93 e5 55 16  f0 bb 0a ab 1c db 5c 48  |(.....U.......\H|
27 66 c8 a3 8b 0a 1c e5  95 da ae c4 2e 59 a0 61  |'f...........Y.a|
dd da f3 6d a2 61 e9 8a  0b 6d ec 12 18 bd f7 55  |...m.a...m.....U|
54 40 03 92 2b 6b c2 51  c2 0a 48 af b0 d4 6e e0  |T@..+k.Q..H...n.|
f4 14 0a 3a 1b e3 8f 3d  ca af 6a 8d 7b dc d8 44  |...:...=..j.{..D|

Certificate #3

06:FD:F9:03:96:03:AD:EA:00:0A:EB:3F:27:BB:BA:1B
RSA-SHA1: nil
Issuer
- C: US
- O: DigiCert Inc
- OU: www.digicert.com
- CN: DigiCert Assured ID Root CA
2006-11-10 00:00:00 UTC: 2021-11-10 00:00:00 UTC
Subject
- C: US
- O: DigiCert Inc
- OU: www.digicert.com
- CN: DigiCert Assured ID CA-1
#5
- rsaEncryption: nil
- E8:82:2D:99:F9:CA:C2:42:95:A5:80:73:40:70:D2:9E:
  56:54:5C:A9:C4:D2:41:06:8F:C9:33:FC:4D:45:91:5C:
  81:9F:ED:2C:9C:F8:16:59:DF:9E:B5:24:15:C2:98:B9:
  B4:77:49:DC:89:C4:0A:DA:AF:CB:5E:6B:ED:AD:B0:71:
  31:EB:CF:3A:40:0C:46:4D:93:EC:8B:7A:36:08:03:AB:
  0C:34:FE:18:49:82:FE:C7:C7:31:48:80:7C:1E:A2:0F:
  92:0E:50:C9:C6:87:EB:36:3F:D8:30:C3:FF:A6:F7:FB:
  A2:CD:6F:73:23:FE:AC:56:05:90:F0:32:21:16:89:C6:
  70:88:F9:05:97:7D:A3:C7:43:DD:02:E8:3B:3D:ED:B1:
  41:A3:ED:3F:BE:DB:95:48:C4:EE:1E:B3:F2:BC:0C:2B:
  99:D0:C6:5D:12:42:81:E1:83:6E:82:73:3F:26:4B:14:
  90:AE:59:66:0A:C4:8D:BE:D2:CE:06:AE:AD:84:6F:48:
  84:9B:4F:40:B9:F1:4C:F2:AF:98:FB:F6:CE:40:5D:5C:
  F6:A8:F1:2F:AF:EC:89:22:F2:6B:18:65:B1:C1:73:AD:
  D7:F1:D8:CF:1E:0A:74:5C:42:B8:68:7E:B7:D5:77:0A:
  27:56:7C:0F:62:A4:3F:32:14:60:95:FD:07:04:A2:09: 0x010001

keyUsage: true, 0x86
extendedKeyUsage
- serverAuth: clientAuth, codeSigning, emailProtection, timeStamping

certificatePolicies

2.16.840.1.114412.0.1.4

id-qt-cps: http://www.digicert.com/ssl-cps-repository.htm

id-qt-unotice:

00 41 00 6e 00 79 00 20  00 75 00 73 00 65 00 20  |.A.n.y. .u.s.e. |
00 6f 00 66 00 20 00 74  00 68 00 69 00 73 00 20  |.o.f. .t.h.i.s. |
00 43 00 65 00 72 00 74  00 69 00 66 00 69 00 63  |.C.e.r.t.i.f.i.c|
00 61 00 74 00 65 00 20  00 63 00 6f 00 6e 00 73  |.a.t.e. .c.o.n.s|
00 74 00 69 00 74 00 75  00 74 00 65 00 73 00 20  |.t.i.t.u.t.e.s. |
00 61 00 63 00 63 00 65  00 70 00 74 00 61 00 6e  |.a.c.c.e.p.t.a.n|
00 63 00 65 00 20 00 6f  00 66 00 20 00 74 00 68  |.c.e. .o.f. .t.h|
00 65 00 20 00 44 00 69  00 67 00 69 00 43 00 65  |.e. .D.i.g.i.C.e|
00 72 00 74 00 20 00 43  00 50 00 2f 00 43 00 50  |.r.t. .C.P./.C.P|
00 53 00 20 00 61 00 6e  00 64 00 20 00 74 00 68  |.S. .a.n.d. .t.h|
00 65 00 20 00 52 00 65  00 6c 00 79 00 69 00 6e  |.e. .R.e.l.y.i.n|
00 67 00 20 00 50 00 61  00 72 00 74 00 79 00 20  |.g. .P.a.r.t.y. |
00 41 00 67 00 72 00 65  00 65 00 6d 00 65 00 6e  |.A.g.r.e.e.m.e.n|
00 74 00 20 00 77 00 68  00 69 00 63 00 68 00 20  |.t. .w.h.i.c.h. |
00 6c 00 69 00 6d 00 69  00 74 00 20 00 6c 00 69  |.l.i.m.i.t. .l.i|
00 61 00 62 00 69 00 6c  00 69 00 74 00 79 00 20  |.a.b.i.l.i.t.y. |
00 61 00 6e 00 64 00 20  00 61 00 72 00 65 00 20  |.a.n.d. .a.r.e. |
00 69 00 6e 00 63 00 6f  00 72 00 70 00 6f 00 72  |.i.n.c.o.r.p.o.r|
00 61 00 74 00 65 00 64  00 20 00 68 00 65 00 72  |.a.t.e.d. .h.e.r|
00 65 00 69 00 6e 00 20  00 62 00 79 00 20 00 72  |.e.i.n. .b.y. .r|
00 65 00 66 00 65 00 72  00 65 00 6e 00 63 00 65  |.e.f.e.r.e.n.c.e|
00 2e                                             |..              |

2.16.840.1.114412.3.21

basicConstraints
- true
- true: 0
authorityInfoAccess
- #0
  - OCSP: http://ocsp.digicert.com
  - caIssuers: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt
crlDistributionPoints
- http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl

subjectKeyIdentifier:

15 00 12 2b 13 98 b2 99  07 ed 1e df a2 be 57 0d  |...+..........W.|
2b 67 02 cd                                       |+g..            |

authorityKeyIdentifier:

45 eb a2 af f4 92 cb 82  31 2d 51 8b a7 a7 21 9d  |E.......1-Q...!.|
f3 6d c8 0f                                       |.m..            |

RSA-SHA1:

46 50 3e c9 b7 28 24 a7  38 1d b6 5b 29 af 52 cf  |FP>..($.8..[).R.|
52 e9 31 47 ab 56 5c 7b  d5 0d 0b 41 b3 ef ec 75  |R.1G.V\{...A...u|
1f 74 38 f2 b2 5c 61 a2  9c 95 c3 50 e4 82 b9 23  |.t8..\a....P...#|
d1 ba 3a 86 72 ad 38 78  ac 75 5d 17 17 34 72 47  |..:.r.8x.u]..4rG|
85 94 56 d1 eb bb 36 84  77 cc 24 a5 f3 04 19 55  |..V...6.w.$....U|
a9 e7 e3 e7 ab 62 cd fb  8b 2d 90 c2 c0 d2 b5 94  |.....b...-......|
bd 5e 4f b1 05 d2 0e 3d  1a a9 14 5b a6 86 31 62  |.^O....=...[..1b|
a8 a8 33 e4 9b 39 a7 c4  f5 ce 1d 78 76 94 25 73  |..3..9.....xv.%s|
e4 2a ab cf 9c 76 4b ed  5f c2 4b 16 e4 4b 70 4c  |.*...vK._.K..KpL|
00 89 1e fc c5 79 bc 4c  12 57 fe 5f e1 1e bc 02  |.....y.L.W._....|
5d a8 fe fb 07 38 4f 0d  c6 5d 91 b9 0f 67 45 cd  |]....8O..]...gE.|
d6 83 ed e7 92 0d 8d b1  69 8c 4f fb 59 e0 23 0f  |........i.O.Y.#.|
d2 aa ae 00 7c ee 9c 42  0e cf 91 d7 27 b7 16 ee  |....|..B....'...|
0f c3 bd 7c 0a a0 ee 2c  08 55 85 22 b8 eb 18 1a  |...|...,.U."....|
4d fc 2a 21 ad 49 31 83  47 95 77 71 dc b1 1b 4b  |M.*!.I1.G.wq...K|
4b 1c 10 9c 77 14 c1 9d  4f 2f 5a 95 08 29 10 26  |K...w...O/Z..).&|

Signer

1
unnamed
- #0
  - C: US
  - O: DigiCert Inc
  - OU: www.digicert.com
  - CN: DigiCert SHA2 Assured ID Code Signing CA
- 0A:55:A3:07:16:93:FE:88:0F:0F:61:64:EB:93:66:5E
SHA1: nil

1.3.6.1.4.1.311.2.1.12
- nil
contentType: 1.3.6.1.4.1.311.2.1.4
1.3.6.1.4.1.311.2.1.11: msCodeInd

messageDigest:

f1 ad 2e 37 f6 44 b7 0a  6b 4f 8a f0 fb 5e 68 45  |...7.D..kO...^hE|
62 6b af 46                                       |bk.F            |

rsaEncryption:

35 04 a7 03 50 13 ca 1f  68 b0 68 ae 12 13 8c fb  |5...P...h.h.....|
ec 02 fa 23 8f 9b 04 02  35 47 04 35 71 79 55 a8  |...#....5G.5qyU.|
9e 86 70 1f c7 ca 4e 21  ba 21 d8 83 51 67 15 73  |..p...N!.!..Qg.s|
de 7e 8e 03 3d ef aa f0  38 91 4f e7 84 c1 08 3b  |.~..=...8.O....;|
33 3f ea 94 6e dc 81 f5  77 76 81 45 7b 67 71 27  |3?..n...wv.E{gq'|
86 09 db bb 59 6f 81 e8  fa 99 2d eb 5b ef 88 02  |....Yo....-.[...|
af fb 5a 5c 73 7b 21 5b  fe f1 73 35 b7 b8 a3 20  |..Z\s{![..s5... |
1b 6e fb 6e 30 35 2b fe  df 15 19 83 cf 64 1c 65  |.n.n05+......d.e|
b2 34 71 c3 1f 9d 0c f0  cb 1c db bc 38 6e 45 ec  |.4q.........8nE.|
7a bb 7d d9 4a 44 5a af  80 42 84 1b 65 88 75 09  |z.}.JDZ..B..e.u.|
25 5e dd 37 3f b6 75 75  36 9b cd 5f 2e da 7d 8c  |%^.7?.uu6.._..}.|
9f 91 fb 86 2e c5 21 e9  0e a7 e9 80 04 8d 8e 67  |......!........g|
cc 9a 14 a9 24 81 53 ce  e8 90 09 13 b3 9b 4a 6c  |....$.S.......Jl|
ea 63 21 93 bb 47 11 30  85 9f fd 41 2e 23 00 b4  |.c!..G.0...A.#..|
f7 30 3b c2 93 b2 04 5c  ee 67 0a d4 2e 1c 9a 00  |.0;....\.g......|
46 6f a2 5a a5 99 43 a8  54 a8 0c b4 e1 6e 47 68  |Fo.Z..C.T....nGh|

countersignature

unnamed
- #0
  - C: US
  - O: DigiCert Inc
  - OU: www.digicert.com
  - CN: DigiCert Assured ID CA-1
- 03:01:9A:02:3A:FF:58:B1:6B:D6:D5:EA:E6:17:F0:66
SHA1: nil

contentType: pkcs7-data
signingTime: 2019-09-11 07:20:05 UTC

messageDigest:

eb 0a 53 46 1a 09 98 c9  eb d3 a8 71 2a 6a ec 3d  |..SF.......q*j.=|
d5 2e ad 12                                       |....            |

rsaEncryption:

36 2b 4f eb 8e a5 d9 c1  5b 40 8f 0e e3 44 56 82  |6+O.....[@...DV.|
e1 0e 48 0b 56 84 9e 4e  14 45 d0 06 ef 7c 62 55  |..H.V..N.E...|bU|
d1 87 6b 63 eb 2d 68 b2  84 86 3a 87 85 41 de 71  |..kc.-h...:..A.q|
77 85 c5 94 d3 0e 41 ca  83 36 2d c9 0b f1 71 3c  |w.....A..6-...q<|
42 bf f6 97 91 6d 53 a0  07 98 56 e0 37 b0 12 64  |B....mS...V.7..d|
dc b7 0f 0c 0a 76 2b 0c  d2 2a 60 bc 67 91 cf 7c  |.....v+..*`.g..||
07 7a 1d f1 60 72 4a de  01 91 8b bd 47 88 c1 8d  |.z..`rJ.....G...|
31 ee 28 cb 1f 6f 1a 7a  a6 05 77 c7 82 59 28 e7  |1.(..o.z..w..Y(.|
be be 6e ca 6e 8d 62 b7  73 c0 d2 4c 5a 68 5e f2  |..n.n.b.s..LZh^.|
82 e5 7a e1 c1 b8 f1 1a  d5 d8 7f d5 5c 06 98 1f  |..z.........\...|
20 f4 f4 db ef ff 73 83  e4 b0 32 23 a7 ab c4 2a  | .....s...2#...*|
e9 b6 46 16 53 ac 8f dc  2f b9 38 ca b7 1e 24 20  |..F.S.../.8...$ |
d9 0a 94 84 c1 53 33 46  fb c1 58 57 59 2b 9c 50  |.....S3F..XWY+.P|
33 c8 45 1f 52 32 5e 61  af 86 00 76 86 44 51 5a  |3.E.R2^a...v.DQZ|
2b 36 be 07 ac 96 91 b8  c9 e5 13 93 9d 24 78 55  |+6...........$xU|
4e ab bd 91 91 cb a6 66  19 d8 b1 e4 69 b7 d7 69  |N......f....i..i|

show previews

offset	size	type	comment
15c1	15	HTM		#
5441d4	7118	GIF	(15822 x 9021)	#
5f41f0	19543	PNG	(256 x 256)	#
5f8e4c	41745	PNG	(512 x 512)	#
60315d	8979	BIN	overlay data past EOF	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] can't find file_offset of VA 0x28a5d8

[?] can't find file_offset of VA 0x28a700

[?] can't find file_offset of VA 0x28a9e8

[?] can't find file_offset of VA 0x28af50

[?] can't find file_offset of VA 0x28b7f8

[?] can't find file_offset of VA 0x28c6a0

[?] can't find file_offset of VA 0x28cb08

[?] can't find file_offset of VA 0x28dbb0

[?] can't find file_offset of VA 0x290158

[?] can't find file_offset of VA 0x2949f8

[?] can't find file_offset of VA 0x29e808

[?] can't find file_offset of VA 0x29e930

[?] can't find file_offset of VA 0x29ec18

[?] can't find file_offset of VA 0x29f180

[?] can't find file_offset of VA 0x29fa28

[?] can't find file_offset of VA 0x2a08d0

[?] can't find file_offset of VA 0x2a0d38

[?] can't find file_offset of VA 0x2a1de0

[?] can't find file_offset of VA 0x2a4388

[?] can't find file_offset of VA 0x2a8fe0

[?] ignoring invalid PEdump::BITMAPINFOHEADER

[!] string size(77312) > stringtable size(66). truncated to 64

[!] cannot convert "\x01\r\x82\b\xAA\x97\xE3G#\x03\x03v\x05\x03C\xB1"... to UTF-16

[?] can't find file_offset of VA 0x2f9000

[?] can't find file_offset of VA 0x2b3390

[?] can't find file_offset of VA 0x29e770

[?] can't find file_offset of VA 0x2b32f8

[?] can't find file_offset of VA 0x271564