filenameNSUCC.exe
size1179888 (0x1200f0)
md5db2f9160f56fc8afd7aa12b8ddc8da23
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavWin.Malware.Noobyprotect-6622929-0 FOUND
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x56ddbb43
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x103
Magic0x10b
LinkerVersion80.0
SizeOfCode0
SizeOfInitializedData0
SizeOfUninitializedData0
AddressOfEntryPoint0x108143
BaseOfCode0
BaseOfData0
ImageBase0x400000
SectionAlignment0x2000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion5.0
Reserved10
SizeOfImage0x122000
SizeOfHeaders0x400
CheckSum0x12c042
Subsystem2
DllCharacteristics0x8100
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x20000x4a0000x4a000RWX CODE IDATA
.ccdata0x4c0000xbe0000xbca00RWX CODE
.idata0x10a0000x20000x200RW- IDATA
.rsrc0x10c0000x140000x12e00RW- IDATA
.ccdata0x1200000x20000x2000R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x10a05f0xb4
RESOURCE0x10c0000x12e00
EXCEPTION00
SECURITY0x11ef780x1178
BASERELOC00
DEBUG0x105a8c0x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x20008
Delay_IAT00
CLR_Header00
typenamesizecp
ICON#1164930
ICON#2380560
ICON#396400
ICON#442640
ICON#524400
ICON#611280
GROUP_ICON#32512900
VERSION#18760
MANIFEST#134220
module_namehintordfunction_name
mscoree.dll_CorExeMain
mscoree.dll54104
43 26 d5 7a ce 54 ca ad  5c ed 41 c3 4b 08 49 03  |C&.z.T..\.A.K.I.|
21 10 d9 38 1b 72 6d 7c                           |!..8.rm|        |
MSVCRT.dllstrncpy
MSVCRT.dll2147483647
IPHLPAPI.DLLGetInterfaceInfo
IPHLPAPI.DLL2147483647
PSAPI.DLLGetMappedFileNameW
PSAPI.DLL2147483647
KERNEL32.dllGetModuleFileNameW
KERNEL32.dll2147483647
USER32.dllGetWindow
USER32.dll2147483647
ADVAPI32.dllRegDeleteKeyA
ADVAPI32.dll2147483647
SHELL32.dllSHGetFolderPathW
SHELL32.dll2147483647

StringTable 000004b0

Comments成都东软学院校园客户端
CompanyName成都东软学院信息中心
FileDescription成都东软学院校园客户端
FileVersion1.16.3.8013
InternalNameNSUCC.exe
LegalCopyrightCopyright © 2015 成都东软学院信息中心
LegalTrademarksNSU-IC
OriginalFilenameNSUCC.exe
ProductNameNSUCC
ProductVersion1.16.3.8013
Assembly Version1.16.3.8013

VS_FIXEDFILEINFO

FileVersion1.16.3.8013
ProductVersion1.16.3.8013
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS4
FileType1
FileSubtype0

Signers (1)

issuer: /CN=\xE6\x88\x90\xE9\x83\xBD\xE4\xB8\x9C\xE8\xBD\xAF\xE5\xAD\xA6\xE9\x99\xA2
serial: 2D0000000241390C5AE846E086000000000002

Certificates (3)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
        Validity
            Not Before: Dec 21 00:00:00 2012 GMT
            Not After : Dec 30 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:b3:49:54:4b:97:1c:12:0a:d8:25:79:91:
                    22:57:2a:6f:dc:b8:26:c4:43:73:6b:c2:bf:2e:50:
                    5a:fb:14:c2:76:8e:43:01:25:43:b4:a1:e2:45:f4:
                    e8:b7:7b:c3:74:cc:22:d7:b4:94:00:02:f7:4d:ed:
                    bf:b4:b7:44:24:6b:cd:5f:45:3b:d1:44:ce:43:12:
                    73:17:82:8b:69:b4:2b:cb:99:1e:ac:72:1b:26:4d:
                    71:1f:b1:31:dd:fb:51:61:02:53:a6:aa:f5:49:2c:
                    05:78:45:a5:2f:89:ce:e7:99:e7:fe:8c:e2:57:3f:
                    3d:c6:92:dc:4a:f8:7b:33:e4:79:0a:fb:f0:75:88:
                    41:9c:ff:c5:03:51:99:aa:d7:6c:9f:93:69:87:65:
                    29:83:85:c2:60:14:c4:c8:c9:3b:14:da:c0:81:f0:
                    1f:0d:74:de:92:22:ab:ca:f7:fb:74:7c:27:e6:f7:
                    4a:1b:7f:a7:c3:9e:2d:ae:8a:ea:a6:e6:aa:27:16:
                    7d:61:f7:98:71:11:bc:e2:50:a1:4b:e5:5d:fa:e5:
                    0e:a7:2c:9f:aa:65:20:d3:d8:96:e8:c8:7c:a5:4e:
                    48:44:ff:19:e2:44:07:92:0b:d7:68:84:80:5d:6a:
                    78:64:45:cd:60:46:7e:54:c1:13:7c:c5:79:f1:c9:
                    c1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD
            Authority Information Access: 
                OCSP - URI:http://ocsp.thawte.com
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.thawte.com/ThawteTimestampingCA.crl
            X509v3 Extended Key Usage: 
                Time Stamping
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-1
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        03:09:9b:8f:79:ef:7f:59:30:aa:ef:68:b5:fa:e3:09:1d:bb:
        4f:82:06:5d:37:5f:a6:52:9f:16:8d:ea:1c:92:09:44:6e:f5:
        6d:eb:58:7c:30:e8:f9:69:8d:23:73:0b:12:6f:47:a9:ae:39:
        11:f8:2a:b1:9b:b0:1a:c3:8e:eb:59:96:00:ad:ce:0c:4d:b2:
        d0:31:a6:08:5c:2a:7a:fc:e2:7a:1d:57:4c:a8:65:18:e9:79:
        40:62:25:96:6e:c7:c7:37:6a:83:21:08:8e:41:ea:dd:d9:57:
        3f:1d:77:49:87:2a:16:06:5e:a6:38:6a:22:12:a3:51:19:83:
        7e:b6

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:00:00:00:02:41:39:0c:5a:e8:46:e0:86:00:00:00:00:00:02
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: CN=\xE6\x88\x90\xE9\x83\xBD\xE4\xB8\x9C\xE8\xBD\xAF\xE5\xAD\xA6\xE9\x99\xA2
        Validity
            Not Before: Dec 16 02:57:05 2015 GMT
            Not After : Dec 16 03:07:05 2025 GMT
        Subject: C=CN, ST=\xE5\x9B\x9B\xE5\xB7\x9D, L=\xE6\x88\x90\xE9\x83\xBD, O=\xE6\x88\x90\xE9\x83\xBD\xE4\xB8\x9C\xE8\xBD\xAF\xE5\xAD\xA6\xE9\x99\xA2, OU=\xE4\xBF\xA1\xE6\x81\xAF\xE4\xB8\xAD\xE5\xBF\x83, CN=\xE6\xA0\xA1\xE5\x9B\xAD\xE5\xAE\xA2\xE6\x88\xB7\xE7\xAB\xAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:dc:b2:68:1e:a6:31:2b:29:5a:02:01:dd:53:4c:
                    a2:d5:bc:f0:f8:f8:2d:3f:02:95:f8:ea:73:99:07:
                    d9:c8:df:a5:3a:35:da:ea:aa:39:07:58:aa:0c:e7:
                    96:99:38:b9:76:cf:f8:fe:4a:63:fb:67:15:71:79:
                    a9:9d:67:83:18:17:12:5d:6e:fc:ba:f4:21:7f:f6:
                    12:77:da:cb:2a:60:be:49:c0:9a:c1:b6:52:2b:0b:
                    4a:c2:e1:1c:4a:c4:0d:73:c5:76:37:8d:83:3e:54:
                    6f:cf:ee:74:59:cd:19:1c:f4:a3:8f:ea:ff:bd:f1:
                    09:bf:e8:38:e9:ab:59:ae:5f:96:00:9a:d5:21:4c:
                    39:c2:8d:6b:e5:85:db:9a:d3:fb:dc:1d:6d:00:a7:
                    cc:ad:93:66:65:96:de:03:c7:f4:a8:f9:df:0a:03:
                    5b:a9:5c:73:bb:a0:c2:c0:29:cf:39:3d:99:d1:18:
                    c3:4d:d2:88:f7:38:c4:ad:ef:be:9c:0b:f7:f9:de:
                    f9:80:fa:2d:b1:a6:98:67:7e:a0:69:4b:48:7f:a2:
                    93:29:5c:f6:e5:29:72:94:71:9f:53:35:60:bd:63:
                    70:d0:b2:86:a1:ea:e7:2e:42:36:1f:a1:85:39:5f:
                    e5:6a:d4:14:27:45:9e:46:8b:77:11:da:62:21:01:
                    c7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 Subject Key Identifier: 
                2D:31:59:7E:39:E5:ED:AC:90:45:ED:72:7F:34:93:52:AD:52:68:4E
            X509v3 Authority Key Identifier: 
                7A:71:5B:A6:3F:47:68:38:A2:25:97:FB:9B:10:F4:C3:D6:E5:22:4C
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://ca.nsu.edu.cn/CertEnroll/!6210!90fd!4e1c!8f6f!5b66!9662.crl
            Authority Information Access: 
                CA Issuers - URI:http://ca.nsu.edu.cn/CertEnroll/ca.nsu.edu.cn_!6210!90fd!4e1c!8f6f!5b66!9662.crt
            X509v3 Basic Constraints: critical
                CA:FALSE
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        61:88:fc:87:ab:46:28:74:4e:c1:d3:5e:d6:77:9e:13:72:18:
        a2:3b:cb:df:22:78:95:16:60:db:6e:d3:f3:20:71:e0:25:89:
        97:9e:bb:7f:26:16:c2:88:67:dc:0d:13:83:7c:b0:be:c4:ee:
        7a:da:10:49:29:b8:3c:f3:a4:f7:2b:55:93:8d:14:4e:4e:94:
        07:02:dd:bc:b6:74:3e:51:08:84:44:cc:67:4b:fc:48:d1:fd:
        48:2e:30:f0:bd:18:60:03:6f:9a:31:e7:85:58:a2:5f:3e:f2:
        0c:5d:5d:93:bc:70:21:17:6a:a5:5d:59:4e:31:55:d9:71:27:
        c6:82:c8:e8:c5:71:dc:0f:58:0f:b5:fa:e5:b9:38:d1:cf:9b:
        7a:27:76:b4:a2:4c:b5:7b:7e:6e:b9:7d:4a:b0:74:14:8a:48:
        84:59:6c:d2:32:96:48:a9:7b:ce:8b:4f:52:9d:ca:c1:82:70:
        66:3b:ac:ed:87:a2:86:dc:43:cb:77:f9:03:1c:4d:ba:59:3f:
        29:b4:f3:ca:9e:67:2e:d1:4f:de:3a:a2:82:42:08:40:2b:c2:
        f7:9f:c2:4f:6b:80:db:47:27:21:b3:f9:3a:10:6f:d2:28:8d:
        29:08:5d:72:f8:39:e1:af:60:64:fd:34:94:32:dd:ec:44:97:
        d6:1d:8f:7a

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Validity
            Not Before: Oct 18 00:00:00 2012 GMT
            Not After : Dec 29 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer - G4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a2:63:0b:39:44:b8:bb:23:a7:44:49:bb:0e:ff:
                    a1:f0:61:0a:53:93:b0:98:db:ad:2c:0f:4a:c5:6e:
                    ff:86:3c:53:55:0f:15:ce:04:3f:2b:fd:a9:96:96:
                    d9:be:61:79:0b:5b:c9:4c:86:76:e5:e0:43:4b:22:
                    95:ee:c2:2b:43:c1:9f:d8:68:b4:8e:40:4f:ee:85:
                    38:b9:11:c5:23:f2:64:58:f0:15:32:6f:4e:57:a1:
                    ae:88:a4:02:d7:2a:1e:cd:4b:e1:dd:63:d5:17:89:
                    32:5b:b0:5e:99:5a:a8:9d:28:50:0e:17:ee:96:db:
                    61:3b:45:51:1d:cf:12:56:0b:92:47:fc:ab:ae:f6:
                    66:3d:47:ac:70:72:e7:92:e7:5f:cd:10:b9:c4:83:
                    64:94:19:bd:25:80:e1:e8:d2:22:a5:d0:ba:02:7a:
                    a1:77:93:5b:65:c3:ee:17:74:bc:41:86:2a:dc:08:
                    4c:8c:92:8c:91:2d:9e:77:44:1f:68:d6:a8:74:77:
                    db:0e:5b:32:8b:56:8b:33:bd:d9:63:c8:49:9d:3a:
                    c5:c5:ea:33:0b:d2:f1:a3:1b:f4:8b:be:d9:b3:57:
                    8b:3b:de:04:a7:7a:22:b2:24:ae:2e:c7:70:c5:be:
                    4e:83:26:08:fb:0b:bd:a9:4f:99:08:e1:10:28:72:
                    aa:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                OCSP - URI:http://ts-ocsp.ws.symantec.com
                CA Issuers - URI:http://ts-aia.ws.symantec.com/tss-ca-g2.cer
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://ts-crl.ws.symantec.com/tss-ca-g2.crl
            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-2
            X509v3 Subject Key Identifier: 
                46:C6:69:A3:0E:4A:14:1E:D5:4C:DA:52:63:17:3F:5E:36:BC:0D:E6
            X509v3 Authority Key Identifier: 
                5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        78:3b:b4:91:2a:00:4c:f0:8f:62:30:37:78:a3:84:27:07:6f:
        18:b2:de:25:dc:a0:d4:94:03:aa:86:4e:25:9f:9a:40:03:1c:
        dd:ce:e3:79:cb:21:68:06:da:b6:32:b4:6d:bf:f4:2c:26:63:
        33:e4:49:64:6d:0d:e6:c3:67:0e:f7:05:a4:35:6c:7c:89:16:
        c6:e9:b2:df:b2:e9:dd:20:c6:71:0f:cd:95:74:dc:b6:5c:de:
        bd:37:1f:43:78:e6:78:b5:cd:28:04:20:a3:aa:f1:4b:c4:88:
        29:91:0e:80:d1:11:fc:dd:5c:76:6e:4f:5e:0e:45:46:41:6e:
        0d:b0:ea:38:9a:b1:3a:da:09:71:10:fc:1c:79:b4:80:7b:ac:
        69:f4:fd:9c:b6:0c:16:2b:f1:7f:5b:09:3d:9b:5b:e2:16:ca:
        13:81:6d:00:2e:38:0d:a8:29:8f:2c:e1:b2:f4:5a:a9:01:af:
        15:9c:2c:2f:49:1b:db:22:bb:c3:fe:78:94:51:c3:86:b1:82:
        88:5d:f0:3d:b4:51:a1:79:33:2b:2e:7b:b9:dc:20:09:13:71:
        eb:6a:19:5b:cf:e8:a5:30:57:2c:89:49:3f:b9:cf:7f:c9:bf:
        3e:22:68:63:53:9a:bd:69:74:ac:c5:1d:3c:7f:92:e0:c3:bc:
        1c:d8:04:75
pkcs7-signedData
  • 1
    • SHA1: nil
    • 1.3.6.1.4.1.311.2.1.4
      • #0
        • 1.3.6.1.4.1.311.2.1.15
          • :
        • SHA1
          • ce 86 b1 f7 45 e3 68 a6  f5 ed b3 ee 73 ef 6d 63  |....E.h.....s.mc|
dc a2 e5 53                                       |...S            |
    • unnamed
      • Certificate #0
        • 2
          • 7E:93:EB:FB:7C:C6:4E:59:EA:4B:9A:77:D4:06:FC:3B
          • RSA-SHA1: nil
          • Issuer
            • C: ZA
            • ST: Western Cape
            • L: Durbanville
            • O: Thawte
            • OU: Thawte Certification
            • CN: Thawte Timestamping CA
          • 2012-12-21 00:00:00 UTC: 2020-12-30 23:59:59 UTC
          • Subject
            • C: US
            • O: Symantec Corporation
            • CN: Symantec Time Stamping Services CA - G2
          • #5
            • rsaEncryption: nil
            • B1:AC:B3:49:54:4B:97:1C:12:0A:D8:25:79:91:22:57:
              2A:6F:DC:B8:26:C4:43:73:6B:C2:BF:2E:50:5A:FB:14:
              C2:76:8E:43:01:25:43:B4:A1:E2:45:F4:E8:B7:7B:C3:
              74:CC:22:D7:B4:94:00:02:F7:4D:ED:BF:B4:B7:44:24:
              6B:CD:5F:45:3B:D1:44:CE:43:12:73:17:82:8B:69:B4:
              2B:CB:99:1E:AC:72:1B:26:4D:71:1F:B1:31:DD:FB:51:
              61:02:53:A6:AA:F5:49:2C:05:78:45:A5:2F:89:CE:E7:
              99:E7:FE:8C:E2:57:3F:3D:C6:92:DC:4A:F8:7B:33:E4:
              79:0A:FB:F0:75:88:41:9C:FF:C5:03:51:99:AA:D7:6C:
              9F:93:69:87:65:29:83:85:C2:60:14:C4:C8:C9:3B:14:
              DA:C0:81:F0:1F:0D:74:DE:92:22:AB:CA:F7:FB:74:7C:
              27:E6:F7:4A:1B:7F:A7:C3:9E:2D:AE:8A:EA:A6:E6:AA:
              27:16:7D:61:F7:98:71:11:BC:E2:50:A1:4B:E5:5D:FA:
              E5:0E:A7:2C:9F:AA:65:20:D3:D8:96:E8:C8:7C:A5:4E:
              48:44:FF:19:E2:44:07:92:0B:D7:68:84:80:5D:6A:78:
              64:45:CD:60:46:7E:54:C1:13:7C:C5:79:F1:C9:C1:71              : 0x010001
          • #6
            • subjectKeyIdentifier: 
              5f 9a f5 6e 5c cc cc 74  9a d4 dd 7d ef 3f db ec  |_..n\..t...}.?..|
4c 80 2e dd                                       |L...            |
            • authorityInfoAccess
              • OCSP: http://ocsp.thawte.com
            • basicConstraints
              • true
              • true: 0
            • crlDistributionPoints: http://crl.thawte.com/ThawteTimestampingCA.crl
            • extendedKeyUsage: timeStamping
            • keyUsage: true, 6
            • subjectAltName
              • CN: TimeStamp-2048-1
        • RSA-SHA1: 
          03 09 9b 8f 79 ef 7f 59  30 aa ef 68 b5 fa e3 09  |....y..Y0..h....|
1d bb 4f 82 06 5d 37 5f  a6 52 9f 16 8d ea 1c 92  |..O..]7_.R......|
09 44 6e f5 6d eb 58 7c  30 e8 f9 69 8d 23 73 0b  |.Dn.m.X|0..i.#s.|
12 6f 47 a9 ae 39 11 f8  2a b1 9b b0 1a c3 8e eb  |.oG..9..*.......|
59 96 00 ad ce 0c 4d b2  d0 31 a6 08 5c 2a 7a fc  |Y.....M..1..\*z.|
e2 7a 1d 57 4c a8 65 18  e9 79 40 62 25 96 6e c7  |.z.WL.e..y@b%.n.|
c7 37 6a 83 21 08 8e 41  ea dd d9 57 3f 1d 77 49  |.7j.!..A...W?.wI|
87 2a 16 06 5e a6 38 6a  22 12 a3 51 19 83 7e b6  |.*..^.8j"..Q..~.|
      • #1
        • 2
          • 2D:00:00:00:02:41:39:0C:5A:E8:46:E0:86:00:00:00:
            00:00:02
          • RSA-SHA1: nil
          • CN: 
            e6 88 90 e9 83 bd e4 b8  9c e8 bd af e5 ad a6 e9  |................|
99 a2                                             |..              |
          • 2015-12-16 02:57:05 UTC: 2025-12-16 03:07:05 UTC
          • Subject
            • C: CN
            • ST: 
              e5 9b 9b e5 b7 9d                                 |......          |
            • L: 
              e6 88 90 e9 83 bd                                 |......          |
            • O: 
              e6 88 90 e9 83 bd e4 b8  9c e8 bd af e5 ad a6 e9  |................|
99 a2                                             |..              |
            • OU: 
              e4 bf a1 e6 81 af e4 b8  ad e5 bf 83              |............    |
            • CN: 
              e6 a0 a1 e5 9b ad e5 ae  a2 e6 88 b7 e7 ab af     |............... |
          • #5
            • rsaEncryption: nil
            • DC:B2:68:1E:A6:31:2B:29:5A:02:01:DD:53:4C:A2:D5:
              BC:F0:F8:F8:2D:3F:02:95:F8:EA:73:99:07:D9:C8:DF:
              A5:3A:35:DA:EA:AA:39:07:58:AA:0C:E7:96:99:38:B9:
              76:CF:F8:FE:4A:63:FB:67:15:71:79:A9:9D:67:83:18:
              17:12:5D:6E:FC:BA:F4:21:7F:F6:12:77:DA:CB:2A:60:
              BE:49:C0:9A:C1:B6:52:2B:0B:4A:C2:E1:1C:4A:C4:0D:
              73:C5:76:37:8D:83:3E:54:6F:CF:EE:74:59:CD:19:1C:
              F4:A3:8F:EA:FF:BD:F1:09:BF:E8:38:E9:AB:59:AE:5F:
              96:00:9A:D5:21:4C:39:C2:8D:6B:E5:85:DB:9A:D3:FB:
              DC:1D:6D:00:A7:CC:AD:93:66:65:96:DE:03:C7:F4:A8:
              F9:DF:0A:03:5B:A9:5C:73:BB:A0:C2:C0:29:CF:39:3D:
              99:D1:18:C3:4D:D2:88:F7:38:C4:AD:EF:BE:9C:0B:F7:
              F9:DE:F9:80:FA:2D:B1:A6:98:67:7E:A0:69:4B:48:7F:
              A2:93:29:5C:F6:E5:29:72:94:71:9F:53:35:60:BD:63:
              70:D0:B2:86:A1:EA:E7:2E:42:36:1F:A1:85:39:5F:E5:
              6A:D4:14:27:45:9E:46:8B:77:11:DA:62:21:01:C7:87              : 0x010001
          • #6
            • keyUsage: true, 0xf0
            • extendedKeyUsage: codeSigning
            • subjectKeyIdentifier: 
              2d 31 59 7e 39 e5 ed ac  90 45 ed 72 7f 34 93 52  |-1Y~9....E.r.4.R|
ad 52 68 4e                                       |.RhN            |
            • authorityKeyIdentifier: 
              7a 71 5b a6 3f 47 68 38  a2 25 97 fb 9b 10 f4 c3  |zq[.?Gh8.%......|
d6 e5 22 4c                                       |.."L            |
            • crlDistributionPoints: http://ca.nsu.edu.cn/CertEnroll/!6210!90fd!4e1c!8f6f!5b66!9662.crl
            • authorityInfoAccess
              • caIssuers: http://ca.nsu.edu.cn/CertEnroll/ca.nsu.edu.cn_!6210!90fd!4e1c!8f6f!5b66!9662.crt
            • basicConstraints
              • true
              • nil
        • RSA-SHA1: 
          61 88 fc 87 ab 46 28 74  4e c1 d3 5e d6 77 9e 13  |a....F(tN..^.w..|
72 18 a2 3b cb df 22 78  95 16 60 db 6e d3 f3 20  |r..;.."x..`.n.. |
71 e0 25 89 97 9e bb 7f  26 16 c2 88 67 dc 0d 13  |q.%.....&...g...|
83 7c b0 be c4 ee 7a da  10 49 29 b8 3c f3 a4 f7  |.|....z..I).<...|
2b 55 93 8d 14 4e 4e 94  07 02 dd bc b6 74 3e 51  |+U...NN......t>Q|
08 84 44 cc 67 4b fc 48  d1 fd 48 2e 30 f0 bd 18  |..D.gK.H..H.0...|
60 03 6f 9a 31 e7 85 58  a2 5f 3e f2 0c 5d 5d 93  |`.o.1..X._>..]].|
bc 70 21 17 6a a5 5d 59  4e 31 55 d9 71 27 c6 82  |.p!.j.]YN1U.q'..|
c8 e8 c5 71 dc 0f 58 0f  b5 fa e5 b9 38 d1 cf 9b  |...q..X.....8...|
7a 27 76 b4 a2 4c b5 7b  7e 6e b9 7d 4a b0 74 14  |z'v..L.{~n.}J.t.|
8a 48 84 59 6c d2 32 96  48 a9 7b ce 8b 4f 52 9d  |.H.Yl.2.H.{..OR.|
ca c1 82 70 66 3b ac ed  87 a2 86 dc 43 cb 77 f9  |...pf;......C.w.|
03 1c 4d ba 59 3f 29 b4  f3 ca 9e 67 2e d1 4f de  |..M.Y?)....g..O.|
3a a2 82 42 08 40 2b c2  f7 9f c2 4f 6b 80 db 47  |:..B.@+....Ok..G|
27 21 b3 f9 3a 10 6f d2  28 8d 29 08 5d 72 f8 39  |'!..:.o.(.).]r.9|
e1 af 60 64 fd 34 94 32  dd ec 44 97 d6 1d 8f 7a  |..`d.4.2..D....z|
      • Certificate #2
        • 2
          • 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • O: Symantec Corporation
            • CN: Symantec Time Stamping Services CA - G2
          • 2012-10-18 00:00:00 UTC: 2020-12-29 23:59:59 UTC
          • Subject
            • C: US
            • O: Symantec Corporation
            • CN: Symantec Time Stamping Services Signer - G4
          • #5
            • rsaEncryption: nil
            • A2:63:0B:39:44:B8:BB:23:A7:44:49:BB:0E:FF:A1:F0:
              61:0A:53:93:B0:98:DB:AD:2C:0F:4A:C5:6E:FF:86:3C:
              53:55:0F:15:CE:04:3F:2B:FD:A9:96:96:D9:BE:61:79:
              0B:5B:C9:4C:86:76:E5:E0:43:4B:22:95:EE:C2:2B:43:
              C1:9F:D8:68:B4:8E:40:4F:EE:85:38:B9:11:C5:23:F2:
              64:58:F0:15:32:6F:4E:57:A1:AE:88:A4:02:D7:2A:1E:
              CD:4B:E1:DD:63:D5:17:89:32:5B:B0:5E:99:5A:A8:9D:
              28:50:0E:17:EE:96:DB:61:3B:45:51:1D:CF:12:56:0B:
              92:47:FC:AB:AE:F6:66:3D:47:AC:70:72:E7:92:E7:5F:
              CD:10:B9:C4:83:64:94:19:BD:25:80:E1:E8:D2:22:A5:
              D0:BA:02:7A:A1:77:93:5B:65:C3:EE:17:74:BC:41:86:
              2A:DC:08:4C:8C:92:8C:91:2D:9E:77:44:1F:68:D6:A8:
              74:77:DB:0E:5B:32:8B:56:8B:33:BD:D9:63:C8:49:9D:
              3A:C5:C5:EA:33:0B:D2:F1:A3:1B:F4:8B:BE:D9:B3:57:
              8B:3B:DE:04:A7:7A:22:B2:24:AE:2E:C7:70:C5:BE:4E:
              83:26:08:FB:0B:BD:A9:4F:99:08:E1:10:28:72:AA:CD              : 0x010001
          • X509v3 extensions
            • basicConstraints
              • true
              • nil
            • extendedKeyUsage: true, timeStamping
            • keyUsage: true, 0x80
            • authorityInfoAccess
              • #0
                • OCSP: http://ts-ocsp.ws.symantec.com
                • caIssuers: http://ts-aia.ws.symantec.com/tss-ca-g2.cer
            • crlDistributionPoints: http://ts-crl.ws.symantec.com/tss-ca-g2.crl
            • subjectAltName
              • CN: TimeStamp-2048-2
            • subjectKeyIdentifier: 
              46 c6 69 a3 0e 4a 14 1e  d5 4c da 52 63 17 3f 5e  |F.i..J...L.Rc.?^|
36 bc 0d e6                                       |6...            |
            • authorityKeyIdentifier: 
              5f 9a f5 6e 5c cc cc 74  9a d4 dd 7d ef 3f db ec  |_..n\..t...}.?..|
4c 80 2e dd                                       |L...            |
        • RSA-SHA1: 
          78 3b b4 91 2a 00 4c f0  8f 62 30 37 78 a3 84 27  |x;..*.L..b07x..'|
07 6f 18 b2 de 25 dc a0  d4 94 03 aa 86 4e 25 9f  |.o...%.......N%.|
9a 40 03 1c dd ce e3 79  cb 21 68 06 da b6 32 b4  |.@.....y.!h...2.|
6d bf f4 2c 26 63 33 e4  49 64 6d 0d e6 c3 67 0e  |m..,&c3.Idm...g.|
f7 05 a4 35 6c 7c 89 16  c6 e9 b2 df b2 e9 dd 20  |...5l|......... |
c6 71 0f cd 95 74 dc b6  5c de bd 37 1f 43 78 e6  |.q...t..\..7.Cx.|
78 b5 cd 28 04 20 a3 aa  f1 4b c4 88 29 91 0e 80  |x..(. ...K..)...|
d1 11 fc dd 5c 76 6e 4f  5e 0e 45 46 41 6e 0d b0  |....\vnO^.EFAn..|
ea 38 9a b1 3a da 09 71  10 fc 1c 79 b4 80 7b ac  |.8..:..q...y..{.|
69 f4 fd 9c b6 0c 16 2b  f1 7f 5b 09 3d 9b 5b e2  |i......+..[.=.[.|
16 ca 13 81 6d 00 2e 38  0d a8 29 8f 2c e1 b2 f4  |....m..8..).,...|
5a a9 01 af 15 9c 2c 2f  49 1b db 22 bb c3 fe 78  |Z.....,/I.."...x|
94 51 c3 86 b1 82 88 5d  f0 3d b4 51 a1 79 33 2b  |.Q.....].=.Q.y3+|
2e 7b b9 dc 20 09 13 71  eb 6a 19 5b cf e8 a5 30  |.{.. ..q.j.[...0|
57 2c 89 49 3f b9 cf 7f  c9 bf 3e 22 68 63 53 9a  |W,.I?.....>"hcS.|
bd 69 74 ac c5 1d 3c 7f  92 e0 c3 bc 1c d8 04 75  |.it...<........u|
    • 1
      • #0
        • CN: 
          e6 88 90 e9 83 bd e4 b8  9c e8 bd af e5 ad a6 e9  |................|
99 a2                                             |..              |
        • 2D:00:00:00:02:41:39:0C:5A:E8:46:E0:86:00:00:00:
          00:00:02
      • SHA1: nil
      • #2
        • contentType: 1.3.6.1.4.1.311.2.1.4
        • 1.3.6.1.4.1.311.2.1.11: msCodeInd
        • 1.3.6.1.4.1.311.2.1.12: 
          00 31 00 31 00 32 00 32  00 33 00 33              |.1.1.2.2.3.3    |
        • messageDigest: 
          fb f3 ea 5a c4 a9 bc 94  48 42 56 6d 5e d8 8e 46  |...Z....HBVm^..F|
cf 13 4a ed                                       |..J.            |
      • rsaEncryption: 
        93 fa 4d 53 12 9c 6f 8d  2c 90 47 5a cc 9a 83 02  |..MS..o.,.GZ....|
e5 a3 91 31 8d 31 84 ee  a1 59 2d f2 06 40 58 90  |...1.1...Y-..@X.|
d5 8c df 35 11 65 b3 76  6c 2b 8c 60 3f 6b 5a 49  |...5.e.vl+.`?kZI|
ea c4 ba f0 d7 42 e4 46  d9 b7 dd 8d 61 7f 1e 5b  |.....B.F....a..[|
c0 63 74 a0 b9 c9 bd f5  b5 01 85 54 17 e8 27 35  |.ct........T..'5|
49 70 42 dc 5e 20 79 f6  4c 7c 77 02 75 6e b0 25  |IpB.^ y.L|w.un.%|
06 33 f8 eb 22 fb b0 c0  f0 5b 7b 56 13 41 94 2b  |.3.."....[{V.A.+|
4c fe 57 fc c7 e1 f6 5e  88 f4 80 21 e5 a0 ea 70  |L.W....^...!...p|
30 36 b3 88 62 37 b8 b5  95 c7 fa 23 19 d0 d0 46  |06..b7.....#...F|
11 be 5b a3 f6 64 23 ef  a0 36 12 ad 86 d0 68 56  |..[..d#..6....hV|
26 86 81 ec c9 c4 30 0d  d9 a9 6c fb 82 c7 58 bc  |&.....0...l...X.|
1d 3c b4 7c d7 62 92 e8  f8 65 17 d7 b4 ec 92 fa  |.<.|.b...e......|
4a f7 d1 95 f7 05 28 02  62 8e cf 13 75 ec 02 6e  |J.....(.b...u..n|
29 65 63 f2 38 f2 ea 56  76 20 49 ee dd 72 ab 76  |)ec.8..Vv I..r.v|
af 3b fd 5c 99 e5 fa 23  ac 6d 50 22 ad b3 02 4e  |.;.\...#.mP"...N|
dd 86 93 84 03 c1 7b e7  3a 3c b7 3e f0 d5 eb c4  |......{.:<.>....|
      • countersignature
        • 1
          • unnamed
            • #0
              • C: US
              • O: Symantec Corporation
              • CN: Symantec Time Stamping Services CA - G2
            • 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
          • SHA1: nil
          • #2
            • contentType: pkcs7-data
            • signingTime: 2016-03-07 17:38:16 UTC
            • messageDigest: 
              60 ef 0c f3 68 7f 13 e6  45 ae d1 d6 0c b9 61 0e  |`...h...E.....a.|
5f f2 93 06                                       |_...            |
          • rsaEncryption: 
            99 d4 c1 63 d1 d4 a5 41  d2 da 7f 6f 26 0c c8 dc  |...c...A...o&...|
c4 ff 80 9d e2 45 64 66  68 01 cf 9c 97 c9 d4 a3  |.....Edfh.......|
e9 d0 12 68 56 9e 32 56  3b 1e 9a c7 98 f8 20 16  |...hV.2V;..... .|
d2 0f 55 52 a4 64 ae 8e  ee 1e f4 1d 7e 73 06 63  |..UR.d......~s.c|
e0 73 4a c2 a0 f4 48 69  da f2 1c 7e 0c 15 cf ca  |.sJ...Hi...~....|
97 72 0e f9 4f c1 f1 9d  9c e4 8d ab 6f 30 fb a9  |.r..O.......o0..|
39 e0 87 5d aa b2 10 69  47 73 bd cc a1 4a 6c 91  |9..]...iGs...Jl.|
e7 1a f0 c3 29 de d1 a9  a6 e1 a5 14 da 27 81 4e  |....)........'.N|
17 36 e0 be 89 b8 a1 82  ec f4 90 05 1c 35 a9 17  |.6...........5..|
d2 dd e2 5a 62 ea ce bd  46 2f 95 67 bb 85 26 df  |...Zb...F/.g..&.|
db ed 4c 9c 18 b4 20 15  ee 5e 5e 3b fc a1 e7 ac  |..L... ..^^;....|
f7 79 72 48 bf c5 50 c7  23 99 c1 0f 35 77 b3 76  |.yrH..P.#...5w.v|
55 8d fb 72 54 fb ad 47  88 3b c4 3b e6 f9 f4 4f  |U..rT..G.;.;...O|
89 ed ff 08 ed b9 a6 82  2e 4f 43 f3 e6 39 89 06  |.........OC..9..|
b6 f8 a4 61 fb 8d 4a dd  32 aa 19 a4 83 2e 00 df  |...a..J.2.......|
23 f2 4e d5 e8 5c 16 49  0f 40 7b d5 72 d9 e3 64  |#.N..\.I.@{.r..d|
offsetsizetypecomment
01162752EXE03/07/2016 17:32:51#
15c115HTM#
165418631PNG(273 x 44)#
18b8116493PNG(256 x 256)#
10722016493PNG(256 x 256)#
11be0017136BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] ignoring invalid PEdump::BITMAPINFOHEADER