chrome_elf.dll - Google Chrome

info
MZ
PE
resources
imports
exports
foremost
version info
signature
hexdump
disasm
log
discuss
donate

filename	chrome_elf.dll
size	127640 (0x1f298)
md5	e2f3235991948ef3a4cea66c0038145a

type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xf8

Rich Header

lib id	version	times used
223	21005	22
224	21005	122
225	21005	49
203	65501	5
1	0	116
229	31101	1
225	31101	15
220	31101	1
219	21005	1
151	0	1
222	31101	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	6
TimeDateStamp	0x56c51dea
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x2122
Magic	0x10b
LinkerVersion	12.0
SizeOfCode	0x11a00
SizeOfInitializedData	0xd200
SizeOfUninitializedData	0
AddressOfEntryPoint	0x6bdd
BaseOfCode	0x1000
BaseOfData	0x13000
ImageBase	0x1c20000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	5.1
ImageVersion	0.0
SubsystemVersion	5.1
Reserved1	0
SizeOfImage	0x23000
SizeOfHeaders	0x400
CheckSum	0x20dff
Subsystem	2
DllCharacteristics	0x140
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ 6.0 - 8.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x1193d	0x11a00	R-X CODE
.rdata	0x13000	0x736c	0x7400	R-- IDATA
.data	0x1b000	0x3dc0	0x1600	RW- IDATA
.crthunk	0x1f000	0x40	0x200	R-X IDATA
.rsrc	0x20000	0x680	0x800	R-- IDATA
.reloc	0x21000	0x14fc	0x1600	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0x199f0	0xc8
IMPORT	0x19ab8	0x3c
RESOURCE	0x20000	0x680
EXCEPTION	0	0
SECURITY	0x1c800	0x2a98
BASERELOC	0x21000	0x14fc
DEBUG	0x131d0	0x1c
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0x19178	0x40
Bound_IAT	0	0
IAT	0x13000	0x180
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
VERSION	#1	1120	0
MANIFEST	#2	383	0

module_name	hint	function_name
KERNEL32.dll	611	GetModuleFileNameW
KERNEL32.dll	946	LocalFree
KERNEL32.dll	773	GetVersionExW
KERNEL32.dll	1193	RtlCaptureContext
KERNEL32.dll	194	CreateFileW
KERNEL32.dll	1347	SetUnhandledExceptionFilter
KERNEL32.dll	839	InitializeCriticalSection
KERNEL32.dll	293	EnterCriticalSection
KERNEL32.dll	930	LeaveCriticalSection
KERNEL32.dll	261	DeleteCriticalSection
KERNEL32.dll	1168	ReleaseSemaphore
KERNEL32.dll	1451	WaitForSingleObject
KERNEL32.dll	232	CreateThread
KERNEL32.dll	526	GetCurrentThreadId
KERNEL32.dll	1444	VirtualQueryEx
KERNEL32.dll	521	GetCurrentProcess
KERNEL32.dll	225	CreateSemaphoreW
KERNEL32.dll	936	LoadLibraryW
KERNEL32.dll	1505	WriteFile
KERNEL32.dll	592	GetLastError
KERNEL32.dll	1300	SetNamedPipeHandleState
KERNEL32.dll	1400	TransactNamedPipe
KERNEL32.dll	1458	WaitNamedPipeW
KERNEL32.dll	1264	SetEvent
KERNEL32.dll	1186	ResetEvent
KERNEL32.dll	1449	WaitForMultipleObjects
KERNEL32.dll	1107	ReadProcessMemory
KERNEL32.dll	1514	WriteProcessMemory
KERNEL32.dll	614	GetModuleHandleExW
KERNEL32.dll	1442	VirtualProtectEx
KERNEL32.dll	127	CloseHandle
KERNEL32.dll	739	GetTempPathW
KERNEL32.dll	553	GetEnvironmentVariableW
KERNEL32.dll	457	GetCommandLineW
KERNEL32.dll	669	GetProcAddress
KERNEL32.dll	676	GetProcessId
KERNEL32.dll	522	GetCurrentProcessId
KERNEL32.dll	615	GetModuleHandleW
KERNEL32.dll	1441	VirtualProtect
KERNEL32.dll	289	EncodePointer
KERNEL32.dll	254	DecodePointer
KERNEL32.dll	456	GetCommandLineA
KERNEL32.dll	871	IsDebuggerPresent
KERNEL32.dll	877	IsProcessorFeaturePresent
KERNEL32.dll	337	ExitProcess
KERNEL32.dll	977	MultiByteToWideChar
KERNEL32.dll	1485	WideCharToMultiByte
KERNEL32.dll	1088	RaiseException
KERNEL32.dll	1197	RtlUnwind
KERNEL32.dll	815	HeapAlloc
KERNEL32.dll	819	HeapFree
KERNEL32.dll	824	HeapSize
KERNEL32.dll	1291	SetLastError
KERNEL32.dll	674	GetProcessHeap
KERNEL32.dll	704	GetStdHandle
KERNEL32.dll	574	GetFileType
KERNEL32.dll	702	GetStartupInfoW
KERNEL32.dll	610	GetModuleFileNameA
KERNEL32.dll	1069	QueryPerformanceCounter
KERNEL32.dll	726	GetSystemTimeAsFileTime
KERNEL32.dll	551	GetEnvironmentStringsW
KERNEL32.dll	413	FreeEnvironmentStringsW
KERNEL32.dll	1410	UnhandledExceptionFilter
KERNEL32.dll	840	InitializeCriticalSectionAndSpinCount
KERNEL32.dll	1362	Sleep
KERNEL32.dll	1377	TerminateProcess
KERNEL32.dll	1395	TlsAlloc
KERNEL32.dll	1397	TlsGetValue
KERNEL32.dll	1398	TlsSetValue
KERNEL32.dll	1396	TlsFree
KERNEL32.dll	882	IsValidCodePage
KERNEL32.dll	420	GetACP
KERNEL32.dll	646	GetOEMCP
KERNEL32.dll	435	GetCPInfo
KERNEL32.dll	935	LoadLibraryExW
KERNEL32.dll	918	LCMapStringW
KERNEL32.dll	822	HeapReAlloc
KERNEL32.dll	709	GetStringTypeW
KERNEL32.dll	1018	OutputDebugStringW
KERNEL32.dll	402	FlushFileBuffers
KERNEL32.dll	476	GetConsoleCP
KERNEL32.dll	494	GetConsoleMode
KERNEL32.dll	1277	SetFilePointerEx
KERNEL32.dll	1314	SetStdHandle
KERNEL32.dll	1504	WriteConsoleW
ADVAPI32.dll	367	GetTokenInformation
ADVAPI32.dll	530	OpenProcessToken
ADVAPI32.dll	674	RegSetValueExW
ADVAPI32.dll	658	RegQueryValueExW
ADVAPI32.dll	645	RegOpenKeyExW
ADVAPI32.dll	630	RegEnumValueW
ADVAPI32.dll	605	RegCreateKeyExW
ADVAPI32.dll	596	RegCloseKey
ADVAPI32.dll	123	ConvertSidToStringSidW

ord	entry_va	function_name
1	0x1b23	AddDllToBlacklist
2	0x1cc7	GetBlacklistIndex
3	0x1cf7	IsBlacklistInitialized
4	0x1781	SignalChromeElf
5	0x1cfd	SuccessfullyBlocked

module_name	chrome_elf.dll
flags	0
timestamp	2016-02-18 01:27:06
version	0.0
ordinal_base	1
nFunctions	5
nNames	5
Names(5)	0x19a2c
Functions(5)	0x19a18
NameOrdinals(5)	0x19a40

StringTable 040904b0

CompanyName	Google Inc.
FileDescription	Google Chrome
FileVersion	48.0.2564.116
InternalName	chrome_elf_dll
LegalCopyright	Copyright 2015 Google Inc. All rights reserved.
OriginalFilename	chrome_elf.dll
ProductName	Google Chrome
ProductVersion	48.0.2564.116
CompanyShortName	Google
ProductShortName	Chrome
LastChange	700a0e589ecfa7e0f65cace17e2f75470c4adf9d-refs/branch-heads/2564@{#706}
Official Build	1

VS_FIXEDFILEINFO

FileVersion	48.0.2564.116
ProductVersion	48.0.2564.116
StrucVersion	0x10000
FileFlagsMask	0x17
FileFlags	0
FileOS	4
FileType	1
FileSubtype	0

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa (c)10/CN=VeriSign Class 3 Code Signing 2010 CA

serial: 4C40DBA5F988FAE57A57D6457495F98B

Certificates (3)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Object
        Validity
            Not Before: Dec 31 00:00:00 2015 GMT
            Not After : Jul  9 18:40:36 2019 GMT
        Subject: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO SHA-1 Time Stamping Signer
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e9:3d:df:d7:37:08:c9:1e:38:b2:52:53:42:
                    6d:22:f1:b1:c4:06:04:6b:9e:fd:82:74:50:43:7d:
                    c6:a0:bb:1f:4e:f9:02:71:26:b1:ef:43:d8:83:8c:
                    48:fc:e7:0f:97:7a:9a:eb:9c:de:a6:a3:0e:3b:1c:
                    44:18:75:8e:78:a5:17:69:fe:49:18:a4:e2:bb:5c:
                    4e:fe:8e:2a:54:7a:50:f0:d5:f6:cc:91:e7:99:79:
                    d7:de:79:94:d7:96:33:fe:0e:83:be:22:bf:63:16:
                    2c:a3:dd:28:1b:af:3d:ab:ea:97:d2:f1:bf:04:10:
                    e7:3d:48:45:fd:1f:68:65:c1:7f:59:99:69:c0:22:
                    31:0c:62:6e:a7:5c:65:01:21:b0:63:c4:22:18:27:
                    ee:e6:fc:d2:00:3d:47:2e:a8:b8:86:56:5d:04:dc:
                    13:17:25:6e:1c:df:44:0f:15:cd:b7:db:a5:57:76:
                    42:6f:00:68:82:99:d2:e3:c1:de:f0:8b:94:57:4c:
                    ec:08:90:22:21:ce:22:2b:98:0c:42:e6:42:93:94:
                    98:93:ef:fd:06:d9:3f:bc:5b:9b:54:3c:20:b1:ee:
                    6a:d6:47:7a:c5:ab:80:e9:30:9a:de:f1:a4:3f:55:
                    4d:0a:09:34:8a:75:29:d2:69:ad:97:0f:50:bf:f8:
                    ca:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:DA:ED:64:74:14:9C:14:3C:AB:DD:99:A9:BD:5B:28:4D:8B:3C:C9:D8

            X509v3 Subject Key Identifier: 
                8E:6B:2D:33:6B:F4:33:A7:93:B3:13:9A:A5:E0:0A:F7:12:35:6A:88
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.usertrust.com/UTN-USERFirst-Object.crl

            Authority Information Access: 
                OCSP - URI:http://ocsp.usertrust.com

    Signature Algorithm: sha1WithRSAEncryption
         ba:33:24:40:40:8c:7c:db:58:9f:b3:60:98:b2:f5:c0:31:fe:
         eb:1f:6e:50:f6:0a:e0:e4:e6:81:ad:26:87:a2:df:fd:b3:da:
         f4:73:f3:00:fb:29:1b:89:1b:15:3e:db:6b:52:93:2b:c4:ac:
         39:81:d7:3c:67:57:9a:39:36:e0:28:08:9a:e3:39:4f:9b:89:
         09:7f:7b:c5:61:7f:59:89:32:25:0a:6a:ae:1a:3e:f0:a2:27:
         a8:b6:c3:b8:87:f7:16:04:48:41:3d:5c:d8:ec:9f:4d:20:31:
         04:d9:65:a1:ed:cd:69:07:53:16:3d:dd:36:02:0a:88:eb:40:
         e5:06:30:0b:b8:16:4b:dc:ef:bc:55:09:ff:c6:3e:12:2e:76:
         b3:dc:ce:42:ef:f9:76:57:e1:b7:0a:05:40:98:58:9a:5d:71:
         16:93:71:8c:65:81:ea:6f:f3:89:f7:fb:73:ad:b4:e7:bf:d9:
         8e:6f:aa:0b:4f:25:f3:b8:e1:d5:dd:75:98:68:81:f8:aa:c0:
         d1:80:c2:c4:c4:39:89:c1:f6:c9:9e:6c:d7:74:f9:d9:97:f8:
         4f:c2:9a:0a:cd:5e:8f:f8:19:e9:e0:a5:9f:c4:f0:92:21:e6:
         2d:79:25:c9:22:f9:c3:f0:3a:84:57:ad:3a:16:f4:63:94:10:
         1d:5d:d0:c6

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:40:db:a5:f9:88:fa:e5:7a:57:d6:45:74:95:f9:8b
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA
        Validity
            Not Before: Dec 14 00:00:00 2015 GMT
            Not After : Dec 14 23:59:59 2016 GMT
        Subject: C=US, ST=California, L=Mountain View, O=Google Inc, CN=Google Inc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c1:1e:ca:21:1c:a1:dc:c5:53:6c:39:ce:3d:
                    97:73:7d:48:5f:f3:54:b6:1d:d3:ab:f0:85:ff:3d:
                    a9:c4:16:96:e8:7c:e2:03:fe:37:6a:ae:d1:eb:f8:
                    c6:cb:c2:8c:f1:9d:02:88:62:88:1b:a9:c6:21:9b:
                    28:de:ac:55:6d:01:80:1d:be:b6:70:be:9e:7e:9f:
                    2f:57:da:0c:45:fa:6e:4a:b9:2b:52:a4:bf:92:67:
                    0e:fe:02:8b:7f:56:d7:37:9c:f8:ba:e9:6a:33:c3:
                    29:f2:f7:2d:99:17:91:31:50:97:5b:72:99:9c:91:
                    a4:4a:41:6e:73:b6:de:40:4a:74:86:0d:ad:71:71:
                    c1:bb:4f:27:05:ed:4d:44:ad:a7:6e:98:27:a8:b1:
                    65:4f:4d:24:79:e1:c1:70:3a:df:a6:48:25:37:f3:
                    33:2a:5b:3f:05:03:eb:ba:b6:be:72:6a:a2:04:a8:
                    c0:c5:a4:5c:9a:3e:4b:1d:74:46:ff:16:69:83:0a:
                    a2:85:90:0d:84:bd:a6:1b:55:a9:54:11:2a:dd:a7:
                    b8:b3:08:4b:2f:8a:a3:0e:3e:b7:0e:cd:00:9a:dd:
                    7e:52:6c:82:ec:04:38:32:15:15:ef:13:61:4a:13:
                    bc:f8:73:32:94:9c:5a:3c:31:7b:a6:04:23:3c:32:
                    89:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://d.symcb.com/cps
                  User Notice:
                    Explicit Text: https://d.symcb.com/rpa

            X509v3 Authority Key Identifier: 
                keyid:CF:99:A9:EA:7B:26:F4:4B:C9:8E:8F:D7:F0:05:26:EF:E3:D2:A7:9D

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://sf.symcb.com/sf.crl

            Authority Information Access: 
                OCSP - URI:http://sf.symcd.com
                CA Issuers - URI:http://sf.symcb.com/sf.crt

            Netscape Cert Type: 
                Object Signing
            1.3.6.1.4.1.311.2.1.27: 
                0.......
    Signature Algorithm: sha1WithRSAEncryption
         55:7a:27:95:56:9a:85:c6:3c:e4:c6:c9:79:8f:11:6a:58:98:
         66:c8:1b:da:6b:db:a1:97:e9:f6:a8:ad:ba:96:d2:28:e5:54:
         65:f6:38:fc:a5:ba:b0:40:f1:7b:4f:f0:cd:6b:9e:85:ca:98:
         8e:c3:82:f3:71:61:8d:98:6b:88:b4:00:b8:74:6a:30:77:cc:
         7f:6d:25:4d:2d:14:57:5e:21:15:a3:2a:9d:d1:36:d9:89:1d:
         c9:c0:f4:a1:db:c0:ad:08:34:87:fb:24:32:cb:54:a6:59:db:
         1d:61:1f:45:db:09:9d:6c:e1:2b:7b:73:26:21:c0:43:16:0f:
         12:15:e0:4b:48:92:87:49:05:e9:8a:3f:36:f2:d4:97:f7:c0:
         a8:39:2e:f9:d4:92:ae:93:57:7e:30:18:11:2c:bb:3b:ae:ed:
         99:28:8c:bb:50:d4:a0:d2:98:c0:6d:10:62:39:d7:04:4a:90:
         d8:b6:25:92:31:c0:af:0c:61:57:d3:be:7e:be:a8:13:b0:41:
         66:fc:2e:69:07:a4:06:3e:7b:3a:89:bd:be:15:f1:9e:7f:2b:
         a0:32:da:c1:5c:57:e1:6e:34:94:11:73:24:86:9d:fa:d0:7b:
         57:c7:0d:8e:ab:60:f1:c1:10:90:cd:d4:fd:7c:56:1b:68:87:
         a1:2b:b2:82

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
        Validity
            Not Before: Feb  8 00:00:00 2010 GMT
            Not After : Feb  7 23:59:59 2020 GMT
        Subject: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:23:4b:5e:a5:d7:8a:bb:32:e9:d4:57:f7:ef:
                    e4:c7:26:7e:ad:19:98:fe:a8:9d:7d:94:f6:36:6b:
                    10:d7:75:81:30:7f:04:68:7f:cb:2b:75:1e:cd:1d:
                    08:8c:df:69:94:a7:37:a3:9c:7b:80:e0:99:e1:ee:
                    37:4d:5f:ce:3b:14:ee:86:d4:d0:f5:27:35:bc:25:
                    0b:38:a7:8c:63:9d:17:a3:08:a5:ab:b0:fb:cd:6a:
                    62:82:4c:d5:21:da:1b:d9:f1:e3:84:3b:8a:2a:4f:
                    85:5b:90:01:4f:c9:a7:76:10:7f:27:03:7c:be:ae:
                    7e:7d:c1:dd:f9:05:bc:1b:48:9c:69:e7:c0:a4:3c:
                    3c:41:00:3e:df:96:e5:c5:e4:94:71:d6:55:01:c7:
                    00:26:4a:40:3c:b5:a1:26:a9:0c:a7:6d:80:8e:90:
                    25:7b:cf:bf:3f:1c:eb:2f:96:fa:e5:87:77:c6:b5:
                    56:b2:7a:3b:54:30:53:1b:df:62:34:ff:1e:d1:f4:
                    5a:93:28:85:e5:4c:17:4e:7e:5b:fd:a4:93:99:7f:
                    df:cd:ef:a4:75:ef:ef:15:f6:47:e7:f8:19:72:d8:
                    2e:34:1a:a6:b4:a7:4c:7e:bd:bb:4f:0c:3d:57:f1:
                    30:d6:a6:36:8e:d6:80:76:d7:19:2e:a5:cd:7e:34:
                    2d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/cps
                  User Notice:
                    Explicit Text: https://www.verisign.com/rpa

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            1.3.6.1.5.5.7.1.12: 
                0_.].[0Y0W0U..image/gif0!0.0...+..............k...j.H.,{..0%.#http://logo.verisign.com/vslogo.gif
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.verisign.com/pca3-g5.crl

            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com

            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, Code Signing
            X509v3 Subject Alternative Name: 
                DirName:/CN=VeriSignMPKI-2-8
            X509v3 Subject Key Identifier: 
                CF:99:A9:EA:7B:26:F4:4B:C9:8E:8F:D7:F0:05:26:EF:E3:D2:A7:9D
            X509v3 Authority Key Identifier: 
                keyid:7F:D3:65:A7:C2:DD:EC:BB:F0:30:09:F3:43:39:FA:02:AF:33:31:33

    Signature Algorithm: sha1WithRSAEncryption
         56:22:e6:34:a4:c4:61:cb:48:b9:01:ad:56:a8:64:0f:d9:8c:
         91:c4:bb:cc:0c:e5:ad:7a:a0:22:7f:df:47:38:4a:2d:6c:d1:
         7f:71:1a:7c:ec:70:a9:b1:f0:4f:e4:0f:0c:53:fa:15:5e:fe:
         74:98:49:24:85:81:26:1c:91:14:47:b0:4c:63:8c:bb:a1:34:
         d4:c6:45:e8:0d:85:26:73:03:d0:a9:8c:64:6d:dc:71:92:e6:
         45:05:60:15:59:51:39:fc:58:14:6b:fe:d4:a4:ed:79:6b:08:
         0c:41:72:e7:37:22:06:09:be:23:e9:3f:44:9a:1e:e9:61:9d:
         cc:b1:90:5c:fc:3d:d2:8d:ac:42:3d:65:36:d4:b4:3d:40:28:
         8f:9b:10:cf:23:26:cc:4b:20:cb:90:1f:5d:8c:4c:34:ca:3c:
         d8:e5:37:d6:6f:a5:20:bd:34:eb:26:d9:ae:0d:e7:c5:9a:f7:
         a1:b4:21:91:33:6f:86:e8:58:bb:25:7c:74:0e:58:fe:75:1b:
         63:3f:ce:31:7c:9b:8f:1b:96:9e:c5:53:76:84:5b:9c:ad:91:
         fa:ac:ed:93:ba:5d:c8:21:53:c2:82:53:63:af:12:0d:50:87:
         11:1b:3d:54:52:96:8a:2c:9c:3d:92:1a:08:9a:05:2e:c7:93:
         a5:48:91:d3

pkcs7-signedData

SHA1: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15
- :

SHA1

4c b6 cd db ca 16 ae a7 20 c3 49 d3 78 0d a2 fe |L....... .I.x...| 66 52 47 97 |fRG. |

Certificates
- Certificate #0
  - 2
    - 16:88:F0:39:25:5E:63:8E:69:14:39:07:E6:33:0B
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - ST: UT
      - L: Salt Lake City
      - O: The USERTRUST Network
      - OU: http://www.usertrust.com
      - CN: UTN-USERFirst-Object
    - 2015-12-31 00:00:00 UTC: 2019-07-09 18:40:36 UTC
    - Subject
      - C: GB
      - ST: Greater Manchester
      - L: Salford
      - O: COMODO CA Limited
      - CN: COMODO SHA-1 Time Stamping Signer
    - #5
      - rsaEncryption: nil
      - E9:E9:3D:DF:D7:37:08:C9:1E:38:B2:52:53:42:6D:22:
        F1:B1:C4:06:04:6B:9E:FD:82:74:50:43:7D:C6:A0:BB:
        1F:4E:F9:02:71:26:B1:EF:43:D8:83:8C:48:FC:E7:0F:
        97:7A:9A:EB:9C:DE:A6:A3:0E:3B:1C:44:18:75:8E:78:
        A5:17:69:FE:49:18:A4:E2:BB:5C:4E:FE:8E:2A:54:7A:
        50:F0:D5:F6:CC:91:E7:99:79:D7:DE:79:94:D7:96:33:
        FE:0E:83:BE:22:BF:63:16:2C:A3:DD:28:1B:AF:3D:AB:
        EA:97:D2:F1:BF:04:10:E7:3D:48:45:FD:1F:68:65:C1:
        7F:59:99:69:C0:22:31:0C:62:6E:A7:5C:65:01:21:B0:
        63:C4:22:18:27:EE:E6:FC:D2:00:3D:47:2E:A8:B8:86:
        56:5D:04:DC:13:17:25:6E:1C:DF:44:0F:15:CD:B7:DB:
        A5:57:76:42:6F:00:68:82:99:D2:E3:C1:DE:F0:8B:94:
        57:4C:EC:08:90:22:21:CE:22:2B:98:0C:42:E6:42:93:
        94:98:93:EF:FD:06:D9:3F:BC:5B:9B:54:3C:20:B1:EE:
        6A:D6:47:7A:C5:AB:80:E9:30:9A:DE:F1:A4:3F:55:4D:
        0A:09:34:8A:75:29:D2:69:AD:97:0F:50:BF:F8:CA:09: 0x010001
    - #6
      - authorityKeyIdentifier:
        da ed 64 74 14 9c 14 3c ab dd 99 a9 bd 5b 28 4d |..dt...<.....[(M| 8b 3c c9 d8 |.<.. |
      - subjectKeyIdentifier:
        8e 6b 2d 33 6b f4 33 a7 93 b3 13 9a a5 e0 0a f7 |.k-3k.3.........| 12 35 6a 88 |.5j. |
      - keyUsage: true, 0xc0
      - basicConstraints
        true
        nil
      - extendedKeyUsage: true, timeStamping
      - crlDistributionPoints: http://crl.usertrust.com/UTN-USERFirst-Object.crl
      - authorityInfoAccess
        OCSP: http://ocsp.usertrust.com
  - RSA-SHA1:
```
ba 33 24 40 40 8c 7c db  58 9f b3 60 98 b2 f5 c0  |.3$@@.|.X..`....|
31 fe eb 1f 6e 50 f6 0a  e0 e4 e6 81 ad 26 87 a2  |1...nP.......&..|
df fd b3 da f4 73 f3 00  fb 29 1b 89 1b 15 3e db  |.....s...)....>.|
6b 52 93 2b c4 ac 39 81  d7 3c 67 57 9a 39 36 e0  |kR.+..9....'......|
16 04 48 41 3d 5c d8 ec  9f 4d 20 31 04 d9 65 a1  |..HA=\...M 1..e.|
ed cd 69 07 53 16 3d dd  36 02 0a 88 eb 40 e5 06  |..i.S.=.6....@..|
30 0b b8 16 4b dc ef bc  55 09 ff c6 3e 12 2e 76  |0...K...U...>..v|
b3 dc ce 42 ef f9 76 57  e1 b7 0a 05 40 98 58 9a  |...B..vW....@.X.|
5d 71 16 93 71 8c 65 81  ea 6f f3 89 f7 fb 73 ad  |]q..q.e..o....s.|
b4 e7 bf d9 8e 6f aa 0b  4f 25 f3 b8 e1 d5 dd 75  |.....o..O%.....u|
98 68 81 f8 aa c0 d1 80  c2 c4 c4 39 89 c1 f6 c9  |.h.........9....|
9e 6c d7 74 f9 d9 97 f8  4f c2 9a 0a cd 5e 8f f8  |.l.t....O....^..|
19 e9 e0 a5 9f c4 f0 92  21 e6 2d 79 25 c9 22 f9  |........!.-y%.".|
c3 f0 3a 84 57 ad 3a 16  f4 63 94 10 1d 5d d0 c6  |..:.W.:..c...]..|
```
- Certificate #1
  - 2
    - 4C:40:DB:A5:F9:88:FA:E5:7A:57:D6:45:74:95:F9:8B
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - O: VeriSign, Inc.
      - OU: VeriSign Trust Network
      - OU: Terms of use at https://www.verisign.com/rpa (c)10
      - CN: VeriSign Class 3 Code Signing 2010 CA
    - 2015-12-14 00:00:00 UTC: 2016-12-14 23:59:59 UTC
    - Subject
      - C: US
      - ST: California
      - L: Mountain View
      - O: Google Inc
      - CN: Google Inc
    - #5
      - rsaEncryption: nil
      - B7:C1:1E:CA:21:1C:A1:DC:C5:53:6C:39:CE:3D:97:73:
        7D:48:5F:F3:54:B6:1D:D3:AB:F0:85:FF:3D:A9:C4:16:
        96:E8:7C:E2:03:FE:37:6A:AE:D1:EB:F8:C6:CB:C2:8C:
        F1:9D:02:88:62:88:1B:A9:C6:21:9B:28:DE:AC:55:6D:
        01:80:1D:BE:B6:70:BE:9E:7E:9F:2F:57:DA:0C:45:FA:
        6E:4A:B9:2B:52:A4:BF:92:67:0E:FE:02:8B:7F:56:D7:
        37:9C:F8:BA:E9:6A:33:C3:29:F2:F7:2D:99:17:91:31:
        50:97:5B:72:99:9C:91:A4:4A:41:6E:73:B6:DE:40:4A:
        74:86:0D:AD:71:71:C1:BB:4F:27:05:ED:4D:44:AD:A7:
        6E:98:27:A8:B1:65:4F:4D:24:79:E1:C1:70:3A:DF:A6:
        48:25:37:F3:33:2A:5B:3F:05:03:EB:BA:B6:BE:72:6A:
        A2:04:A8:C0:C5:A4:5C:9A:3E:4B:1D:74:46:FF:16:69:
        83:0A:A2:85:90:0D:84:BD:A6:1B:55:A9:54:11:2A:DD:
        A7:B8:B3:08:4B:2F:8A:A3:0E:3E:B7:0E:CD:00:9A:DD:
        7E:52:6C:82:EC:04:38:32:15:15:EF:13:61:4A:13:BC:
        F8:73:32:94:9C:5A:3C:31:7B:A6:04:23:3C:32:89:61: 0x010001
    - X509v3 extensions
      - basicConstraints
        nil
      - keyUsage: true, 0x80
      - extendedKeyUsage: codeSigning
      - certificatePolicies
        2.16.840.1.113733.1.7.23.3
        #0
        id-qt-cps: https://d.symcb.com/cps
        id-qt-unotice: https://d.symcb.com/rpa
      - authorityKeyIdentifier:
        cf 99 a9 ea 7b 26 f4 4b c9 8e 8f d7 f0 05 26 ef |....{&.K......&.| e3 d2 a7 9d |.... |
      - crlDistributionPoints: http://sf.symcb.com/sf.crl
      - authorityInfoAccess
        #0
        OCSP: http://sf.symcd.com
        caIssuers: http://sf.symcb.com/sf.crt
      - nsCertType: 0x10
      - 1.3.6.1.4.1.311.2.1.27
        false: true
  - RSA-SHA1:
```
55 7a 27 95 56 9a 85 c6  3c e4 c6 c9 79 8f 11 6a  |Uz'.V...<...y..j|
58 98 66 c8 1b da 6b db  a1 97 e9 f6 a8 ad ba 96  |X.f...k.........|
d2 28 e5 54 65 f6 38 fc  a5 ba b0 40 f1 7b 4f f0  |.(.Te.8....@.{O.|
cd 6b 9e 85 ca 98 8e c3  82 f3 71 61 8d 98 6b 88  |.k........qa..k.|
b4 00 b8 74 6a 30 77 cc  7f 6d 25 4d 2d 14 57 5e  |...tj0w..m%M-.W^|
21 15 a3 2a 9d d1 36 d9  89 1d c9 c0 f4 a1 db c0  |!..*..6.........|
ad 08 34 87 fb 24 32 cb  54 a6 59 db 1d 61 1f 45  |..4..$2.T.Y..a.E|
db 09 9d 6c e1 2b 7b 73  26 21 c0 43 16 0f 12 15  |...l.+{s&!.C....|
e0 4b 48 92 87 49 05 e9  8a 3f 36 f2 d4 97 f7 c0  |.KH..I...?6.....|
a8 39 2e f9 d4 92 ae 93  57 7e 30 18 11 2c bb 3b  |.9......W~0..,.;|
ae ed 99 28 8c bb 50 d4  a0 d2 98 c0 6d 10 62 39  |...(..P.....m.b9|
d7 04 4a 90 d8 b6 25 92  31 c0 af 0c 61 57 d3 be  |..J...%.1...aW..|
7e be a8 13 b0 41 66 fc  2e 69 07 a4 06 3e 7b 3a  |~....Af..i...>{:|
89 bd be 15 f1 9e 7f 2b  a0 32 da c1 5c 57 e1 6e  |.......+.2..\W.n|
34 94 11 73 24 86 9d fa  d0 7b 57 c7 0d 8e ab 60  |4..s$....{W....`|
f1 c1 10 90 cd d4 fd 7c  56 1b 68 87 a1 2b b2 82  |.......|V.h..+..|
```
- Certificate #2
  - 2
    - 52:00:E5:AA:25:56:FC:1A:86:ED:96:C9:D4:4B:33:C7
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - O: VeriSign, Inc.
      - OU: VeriSign Trust Network
      - OU: (c) 2006 VeriSign, Inc. - For authorized use only
      - CN: VeriSign Class 3 Public Primary Certification Authority - G5
    - 2010-02-08 00:00:00 UTC: 2020-02-07 23:59:59 UTC
    - Subject
      - C: US
      - O: VeriSign, Inc.
      - OU: VeriSign Trust Network
      - OU: Terms of use at https://www.verisign.com/rpa (c)10
      - CN: VeriSign Class 3 Code Signing 2010 CA
    - #5
      - rsaEncryption: nil
      - F5:23:4B:5E:A5:D7:8A:BB:32:E9:D4:57:F7:EF:E4:C7:
        26:7E:AD:19:98:FE:A8:9D:7D:94:F6:36:6B:10:D7:75:
        81:30:7F:04:68:7F:CB:2B:75:1E:CD:1D:08:8C:DF:69:
        94:A7:37:A3:9C:7B:80:E0:99:E1:EE:37:4D:5F:CE:3B:
        14:EE:86:D4:D0:F5:27:35:BC:25:0B:38:A7:8C:63:9D:
        17:A3:08:A5:AB:B0:FB:CD:6A:62:82:4C:D5:21:DA:1B:
        D9:F1:E3:84:3B:8A:2A:4F:85:5B:90:01:4F:C9:A7:76:
        10:7F:27:03:7C:BE:AE:7E:7D:C1:DD:F9:05:BC:1B:48:
        9C:69:E7:C0:A4:3C:3C:41:00:3E:DF:96:E5:C5:E4:94:
        71:D6:55:01:C7:00:26:4A:40:3C:B5:A1:26:A9:0C:A7:
        6D:80:8E:90:25:7B:CF:BF:3F:1C:EB:2F:96:FA:E5:87:
        77:C6:B5:56:B2:7A:3B:54:30:53:1B:DF:62:34:FF:1E:
        D1:F4:5A:93:28:85:E5:4C:17:4E:7E:5B:FD:A4:93:99:
        7F:DF:CD:EF:A4:75:EF:EF:15:F6:47:E7:F8:19:72:D8:
        2E:34:1A:A6:B4:A7:4C:7E:BD:BB:4F:0C:3D:57:F1:30:
        D6:A6:36:8E:D6:80:76:D7:19:2E:A5:CD:7E:34:2D:89: 0x010001
    - X509v3 extensions
      - basicConstraints
        true
        true: 0
      - certificatePolicies
        2.16.840.1.113733.1.7.23.3
        #0
        id-qt-cps: https://www.verisign.com/cps
        id-qt-unotice: https://www.verisign.com/rpa
      - keyUsage: true, 6
      - 1.3.6.1.5.5.7.1.12
        image/gif
        SHA1:
        8f e5 d3 1a 86 ac 8d 8e 6b c3 cf 80 6a d4 48 18 |........k...j.H.| 2c 7b 19 2e |,{.. |
        http://logo.verisign.com/vslogo.gif
      - crlDistributionPoints: http://crl.verisign.com/pca3-g5.crl
      - authorityInfoAccess
        OCSP: http://ocsp.verisign.com
      - extendedKeyUsage
        clientAuth: codeSigning
      - subjectAltName
        CN: VeriSignMPKI-2-8
      - subjectKeyIdentifier:
        cf 99 a9 ea 7b 26 f4 4b c9 8e 8f d7 f0 05 26 ef |....{&.K......&.| e3 d2 a7 9d |.... |
      - authorityKeyIdentifier:
        7f d3 65 a7 c2 dd ec bb f0 30 09 f3 43 39 fa 02 |..e......0..C9..| af 33 31 33 |.313 |
  - RSA-SHA1:
```
56 22 e6 34 a4 c4 61 cb  48 b9 01 ad 56 a8 64 0f  |V".4..a.H...V.d.|
d9 8c 91 c4 bb cc 0c e5  ad 7a a0 22 7f df 47 38  |.........z."..G8|
4a 2d 6c d1 7f 71 1a 7c  ec 70 a9 b1 f0 4f e4 0f  |J-l..q.|.p...O..|
0c 53 fa 15 5e fe 74 98  49 24 85 81 26 1c 91 14  |.S..^.t.I$..&...|
47 b0 4c 63 8c bb a1 34  d4 c6 45 e8 0d 85 26 73  |G.Lc...4..E...&s|
03 d0 a9 8c 64 6d dc 71  92 e6 45 05 60 15 59 51  |....dm.q..E.`.YQ|
39 fc 58 14 6b fe d4 a4  ed 79 6b 08 0c 41 72 e7  |9.X.k....yk..Ar.|
37 22 06 09 be 23 e9 3f  44 9a 1e e9 61 9d cc b1  |7"...#.?D...a...|
90 5c fc 3d d2 8d ac 42  3d 65 36 d4 b4 3d 40 28  |.\.=...B=e6..=@(|
8f 9b 10 cf 23 26 cc 4b  20 cb 90 1f 5d 8c 4c 34  |....#&.K ...].L4|
ca 3c d8 e5 37 d6 6f a5  20 bd 34 eb 26 d9 ae 0d  |.<..7.o. .4.&...|
e7 c5 9a f7 a1 b4 21 91  33 6f 86 e8 58 bb 25 7c  |......!.3o..X.%||
74 0e 58 fe 75 1b 63 3f  ce 31 7c 9b 8f 1b 96 9e  |t.X.u.c?.1|.....|
c5 53 76 84 5b 9c ad 91  fa ac ed 93 ba 5d c8 21  |.Sv.[........].!|
53 c2 82 53 63 af 12 0d  50 87 11 1b 3d 54 52 96  |S..Sc...P...=TR.|
8a 2c 9c 3d 92 1a 08 9a  05 2e c7 93 a5 48 91 d3  |.,.=.........H..|
```

Signer

1
unnamed
- #0
  - C: US
  - O: VeriSign, Inc.
  - OU: VeriSign Trust Network
  - OU: Terms of use at https://www.verisign.com/rpa (c)10
  - CN: VeriSign Class 3 Code Signing 2010 CA
- 4C:40:DB:A5:F9:88:FA:E5:7A:57:D6:45:74:95:F9:8B
SHA1: nil

1.3.6.1.4.1.311.2.1.12
- nil
contentType: 1.3.6.1.4.1.311.2.1.4
1.3.6.1.4.1.311.2.1.11: msCodeInd

messageDigest:

0d c8 41 f6 a6 54 1d f0  1e 00 d8 0a 5e 6d b3 a7  |..A..T......^m..|
f2 c1 a7 58                                       |...X            |

rsaEncryption:

86 a8 cb 42 73 35 49 84  e2 30 9f c5 1d ed 73 9c  |...Bs5I..0....s.|
11 77 39 5d 0c 73 1c 23  0f 41 22 02 39 fe 04 d9  |.w9].s.#.A".9...|
ba 4f 67 a1 c1 a2 15 0c  7f 00 d7 56 0c 06 29 0d  |.Og........V..).|
90 7f dc ae 7f d2 f3 53  46 f2 15 37 72 a0 0c 9c  |.......SF..7r...|
9d 66 c3 7e 7b f9 9e 51  14 3b 99 50 59 6d 6c f4  |.f.~{..Q.;.PYml.|
9c ca 15 59 b4 1a 2a 95  7e 19 51 17 d9 40 6b 73  |...Y..*.~.Q..@ks|
6e da c4 af 23 6e cb c9  f0 e5 e0 3a ee 79 91 aa  |n...#n.....:.y..|
eb fb c0 67 2f fa 37 39  98 26 47 88 6d 4d 05 76  |...g/.79.&G.mM.v|
86 2b 50 83 40 13 45 7f  41 6f 57 31 d8 12 48 b3  |.+P.@.E.AoW1..H.|
4b b7 5e 0d 16 ef 08 0f  df 60 5b 43 74 de ea f9  |K.^......`[Ct...|
d9 89 61 9c 3b 3a 8a 9b  da 47 ae 41 b9 2f 16 d0  |..a.;:...G.A./..|
2a 2a 9b c1 ec d4 b2 65  94 68 ee 2b f3 d3 60 0a  |**.....e.h.+..`.|
a1 dc d2 e5 ee f1 ae de  d2 99 f1 2e 84 de 5c f7  |..............\.|
d7 1a a2 d2 11 2d b1 d1  ec ed 93 86 d7 b5 5b 07  |.....-........[.|
5f ab 6e 04 10 ec 64 60  66 30 3c f7 97 1e ce d5  |_.n...d`f0<.....|
ed 32 f5 c5 87 6e f2 f1  0f d2 9b 0e b4 0a db 35  |.2...n.........5|

countersignature

unnamed
- #0
  - C: US
  - ST: UT
  - L: Salt Lake City
  - O: The USERTRUST Network
  - OU: http://www.usertrust.com
  - CN: UTN-USERFirst-Object
- 16:88:F0:39:25:5E:63:8E:69:14:39:07:E6:33:0B
SHA1: nil

contentType: pkcs7-data
signingTime: 2016-02-18 04:14:31 UTC

messageDigest:

79 fd e4 30 60 cf af 36  31 6b c5 67 9e 05 76 2f  |y..0`..61k.g..v/|
15 b7 aa a6                                       |....            |

rsaEncryption:

cd ce ff c1 b0 9b a5 50  41 a0 44 ab 4f 74 16 af  |.......PA.D.Ot..|
43 37 67 7b d0 4b 69 59  ab c4 1b 0f e6 ce 6b 86  |C7g{.KiY......k.|
df 8f 44 0f 11 d8 c3 1d  d4 18 5b 3e 09 02 c7 f3  |..D.......[>....|
3c e8 87 10 c0 0d 20 8e  f4 4a bd f3 f9 ef 84 1b  |<..... ..J......|
8a 49 a8 0d c7 97 86 76  ea 76 c4 b7 d5 d3 74 4a  |.I.....v.v....tJ|
2d f5 41 08 c0 89 62 47  89 25 1b 47 6c 50 0d b6  |-.A...bG.%.GlP..|
3e c3 f8 58 22 90 f4 f9  fb b4 7a 7d 3b 55 c0 59  |>..X".....z};U.Y|
34 85 c2 45 7c 27 b1 74  b1 29 ea e2 58 d0 e9 35  |4..E|'.t.)..X..5|
79 e9 da 99 66 db 20 47  5d 9c 5b 66 24 71 17 c7  |y...f. G].[f$q..|
94 17 7b 57 25 6a 06 e9  95 52 54 80 b2 2e cd a6  |..{W%j...RT.....|
48 cf 2f fb 4f cf eb 92  39 22 2d f9 d8 3d a7 89  |H./.O...9"-..=..|
e7 cd fb f6 91 01 9f e4  36 e7 af d5 82 f5 e3 4d  |........6......M|
db 95 57 e8 f6 aa d4 a8  26 03 e4 fd 45 d1 ab 18  |..W.....&...E...|
a8 ad dc e9 00 91 30 36  ac 7f f4 0e 40 74 1c ec  |......06....@t..|
b3 f4 3b c2 20 32 51 b5  10 c9 f1 0f b9 1c 90 79  |..;. 2Q........y|
43 c6 aa 95 c0 77 76 8f  6a 9f 24 23 ef 01 f9 e3  |C....wv.j.$#....|

1.3.6.1.4.1.311.2.4.1

pkcs7-signedData

SHA256: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15
- :

SHA256

af b3 ea 39 53 34 f2 e8 0c 67 ef 93 15 a4 d1 8e |...9S4...g......| 16 bf 7f f5 0e 59 8a 5a f6 08 7b 20 2f b3 ce a1 |.....Y.Z..{ /...|

Certificates
- Certificate #0
  - 2
    - 2A:9C:21:AC:AA:A6:3A:3C:58:A7:B9:32:2B:EE:94:8D
    - RSA-SHA256: nil
    - Issuer
      - C: US
      - O: Symantec Corporation
      - OU: Symantec Trust Network
      - CN: Symantec Class 3 SHA256 Code Signing CA
    - 2015-12-16 00:00:00 UTC: 2018-12-16 23:59:59 UTC
    - Subject
      - C: US
      - ST: California
      - L: Mountain View
      - O: Google Inc
      - CN: Google Inc
    - #5
      - rsaEncryption: nil
      - C4:0D:82:C4:41:29:28:E5:FD:0C:3F:A5:C7:0E:66:BD:
        A5:C4:8B:B3:8A:AC:84:03:9F:84:2E:38:DF:06:B1:4E:
        FD:33:60:58:38:36:DD:22:CF:DF:F1:50:1F:47:F1:55:
        05:C1:81:01:E7:28:3E:FF:5F:89:12:09:EA:DF:AA:17:
        49:2C:71:AB:48:D1:9D:2E:F4:51:E0:03:E0:F7:16:6C:
        7B:0C:22:75:6D:7E:1F:49:C4:43:28:88:41:DC:6C:ED:
        13:2A:03:99:EB:62:14:F9:35:26:6E:12:2C:03:E2:F7:
        81:B9:1A:05:67:06:7C:A6:1A:5B:ED:20:15:E5:2D:83:
        DE:8E:36:FA:1E:08:41:1C:1A:48:9F:B6:F1:C3:2F:02:
        13:4B:A7:CA:BA:EF:1C:58:6F:8E:D3:0F:14:A4:0B:2B:
        5D:BA:F4:5A:A3:0D:64:34:A5:8A:D7:8F:4D:22:66:4D:
        A4:AE:E1:F9:CD:C6:58:E6:C6:11:77:32:DF:BA:DF:39:
        48:8A:D1:27:D7:33:77:A8:C9:E4:5E:ED:FA:12:CF:F3:
        FD:FA:EE:AB:80:86:13:34:EB:5A:7E:6F:6C:1B:EE:D8:
        4B:B2:CC:77:98:87:AC:CA:F5:BB:64:6F:49:1E:5B:91:
        63:50:1F:63:2D:83:27:73:07:9F:2B:16:F4:7B:71:29: 0x010001
    - X509v3 extensions
      - basicConstraints
        nil
      - keyUsage: true, 0x80
      - extendedKeyUsage: codeSigning
      - certificatePolicies
        2.16.840.1.113733.1.7.23.3
        #0
        id-qt-cps: https://d.symcb.com/cps
        id-qt-unotice: https://d.symcb.com/rpa
      - authorityKeyIdentifier:
        96 3b 53 f0 79 33 97 af 7d 83 ef 2e 2b cc ca b7 |.;S.y3..}...+...| 86 1e 72 66 |..rf |
      - crlDistributionPoints: http://sv.symcb.com/sv.crl
      - authorityInfoAccess
        #0
        OCSP: http://sv.symcd.com
        caIssuers: http://sv.symcb.com/sv.crt
      - nsCertType: 0x10
      - 1.3.6.1.4.1.311.2.1.27
        false: true
  - RSA-SHA256:
```
23 e7 93 93 af db a8 4d  af af 54 e8 d8 26 95 80  |#......M..T..&..|
cd 23 91 70 ed 0b 5b b1  e9 d8 dd 1e 40 37 78 97  |.#.p..[.....@7x.|
18 ed 9f e5 84 67 85 06  50 b5 f1 ab e6 83 5a 17  |.....g..P.....Z.|
7b 51 be 7f 18 c6 47 5e  2b aa f4 a0 1f 35 3e 05  |{Q....G^+....5>.|
9f 43 40 f7 9f d1 f4 e1  a7 02 f3 8e c9 71 fe 18  |.C@..........q..|
37 48 42 d7 e4 36 73 10  92 d4 d8 d9 1c c4 26 58  |7HB..6s.......&X|
18 67 b6 24 22 69 63 02  f7 49 51 6b 75 f6 b4 7d  |.g.$"ic..IQku..}|
56 ff 2c f4 88 f7 67 6f  08 86 f3 8b 0b 30 02 7f  |V.,...go.....0..|
6d 92 d9 4e bd 99 f7 7b  74 86 0c cb b9 ad 2c bf  |m..N...{t.....,.|
44 79 a8 00 82 9c 62 f4  aa 11 df d2 bf f0 e1 92  |Dy....b.........|
28 11 90 bb 5e 33 88 86  96 4d dd 0b af c3 67 a1  |(...^3...M....g.|
95 2d 44 32 c6 fa f7 b8  80 c1 4e 38 be 1f b6 84  |.-D2......N8....|
f7 f1 21 31 67 49 a8 9f  8a 75 07 df 3b 3a c3 ea  |..!1gI...u..;:..|
72 cd 40 7f a7 da 7c c9  2e 7c a9 0c f1 5d 5c 82  |r.@...|..|...]\.|
42 62 b9 49 94 8f 70 e6  a5 c0 5f 17 fb 40 36 c1  |Bb.I..p..._..@6.|
3a 89 63 03 1c 3f 66 a0  3d 8f a1 4c 4e 5c ac bf  |:.c..?f.=..LN\..|
```
- Certificate #1
  - 2
    - 3D:78:D7:F9:76:49:60:B2:61:7D:F4:F0:1E:CA:86:2A
    - RSA-SHA256: nil
    - Issuer
      - C: US
      - O: VeriSign, Inc.
      - OU: VeriSign Trust Network
      - OU: (c) 2006 VeriSign, Inc. - For authorized use only
      - CN: VeriSign Class 3 Public Primary Certification Authority - G5
    - 2013-12-10 00:00:00 UTC: 2023-12-09 23:59:59 UTC
    - Subject
      - C: US
      - O: Symantec Corporation
      - OU: Symantec Trust Network
      - CN: Symantec Class 3 SHA256 Code Signing CA
    - #5
      - rsaEncryption: nil
      - 97:83:1E:00:16:AF:2C:B1:D2:08:C4:D7:68:93:51:60:
        1E:71:F6:E2:47:B4:DB:58:4D:23:62:6A:B4:BF:5A:1B:
        51:F7:A3:0D:18:77:68:BB:D8:36:AB:2F:21:50:DA:9E:
        F3:E7:5F:27:4E:0B:C2:97:C8:09:70:93:A9:DA:5C:0D:
        4E:A4:0D:91:A0:B4:EC:14:CE:91:72:54:2E:CE:A3:DB:
        44:E9:52:1B:3F:41:3C:CA:4A:E4:AA:C0:E8:39:AB:53:
        CC:21:D0:CC:CF:7F:9B:E6:C2:CC:58:6A:82:15:EE:3D:
        36:CF:1C:C5:97:07:24:8E:F1:7B:BE:31:2D:3D:6E:DC:
        B5:99:42:9F:4B:61:95:5F:1C:70:EE:17:7D:DB:8B:E5:
        61:89:78:C7:68:1B:AF:11:78:1A:98:AE:C4:55:47:53:
        D9:B3:32:D6:A1:0E:46:40:C5:97:92:8A:D1:53:A7:99:
        5B:85:35:57:D3:EA:93:62:61:20:0A:C7:30:77:24:11:
        4D:62:83:B6:BA:7B:68:82:31:EE:65:CA:DF:F9:D5:8D:
        B2:35:DC:8C:2B:6F:6A:72:5C:60:84:9C:F2:0C:94:5E:
        C0:56:52:00:48:CC:D3:F8:A5:7D:DE:2F:D7:13:E4:38:
        A8:84:D5:46:B8:13:86:C2:1B:9D:EA:5A:38:DD:9B:DB: 0x010001
    - X509v3 extensions
      - authorityInfoAccess
        OCSP: http://s2.symcb.com
      - basicConstraints
        true
        true: 0
      - certificatePolicies
        2.16.840.1.113733.1.7.23.3
        #0
        id-qt-cps: http://www.symauth.com/cps
        id-qt-unotice: http://www.symauth.com/rpa
      - crlDistributionPoints: http://s1.symcb.com/pca3-g5.crl
      - extendedKeyUsage
        clientAuth: codeSigning
      - keyUsage: true, 6
      - subjectAltName
        CN: SymantecPKI-1-567
      - subjectKeyIdentifier:
        96 3b 53 f0 79 33 97 af 7d 83 ef 2e 2b cc ca b7 |.;S.y3..}...+...| 86 1e 72 66 |..rf |
      - authorityKeyIdentifier:
        7f d3 65 a7 c2 dd ec bb f0 30 09 f3 43 39 fa 02 |..e......0..C9..| af 33 31 33 |.313 |
  - RSA-SHA256:
```
13 85 1a 1e 69 a9 37 f7  a0 bd a4 af 7e 1d 61 53  |....i.7.....~.aS|
fe 9d 8c 5e 0c a6 75 1e  78 17 23 dd fd ec 1a 03  |...^..u.x.#.....|
55 39 fb 71 95 c7 65 5a  a7 8e 30 d2 44 5a 61 db  |U9.q..eZ..0.DZa.|
70 6f da 21 05 c2 2e 73  ba 49 f1 d1 93 fe 5d c9  |po.!...s.I....].|
cd 5e 03 e0 89 9e 3f 74  1e d7 f7 38 8b a9 d6 cf  |.^....?t...8....|
bb 35 2f 33 58 a8 92 56  d1 c8 4d 3b 82 e6 79 84  |.5/3X..V..M;..y.|
16 fc 28 b0 b1 47 f3 1d  a2 3e ee 87 d9 a6 7f a4  |..(..G...>......|
56 a5 3f ad 84 2e 29 de  7c bc a8 aa a3 3d 04 01  |V.?...).|....=..|
ea ba 93 a2 0e 50 22 29  17 4c 87 e4 3a 11 5f d6  |.....P").L..:._.|
a4 25 89 9b 05 6b 2f b4  c9 01 4c 27 7b 0b ac 19  |.%...k/...L'{...|
05 22 a0 60 15 3f da c9  fb 4d 4c 8f fb 72 67 77  |.".`.?...ML..rgw|
fd 27 94 c7 ba 35 0e 88  49 fe 8d fd 28 af 4a 12  |.'...5..I...(.J.|
bd 0d b3 97 05 de 44 0c  15 fa 36 2b 03 dc c1 50  |......D...6+...P|
01 f1 a1 11 5d 14 e5 e2  bd 27 4b 54 be 2b 84 5e  |....]....'KT.+.^|
0f a6 c3 74 05 0a ef 97  c3 89 22 b1 1f 77 f3 bd  |...t......"..w..|
cd 43 d4 f1 4c a9 3f b5  8b 84 af 64 f2 d0 14 21  |.C..L.?....d...!|
```

Signer

1
unnamed
- #0
  - C: US
  - O: Symantec Corporation
  - OU: Symantec Trust Network
  - CN: Symantec Class 3 SHA256 Code Signing CA
- 2A:9C:21:AC:AA:A6:3A:3C:58:A7:B9:32:2B:EE:94:8D
SHA256: nil

1.3.6.1.4.1.311.2.1.12
- nil
1.2.840.113549.1.9.25.4: 1
contentType: 1.3.6.1.4.1.311.2.1.4
1.3.6.1.4.1.311.2.1.11: msCodeInd

messageDigest:

ff 49 8a 99 c3 18 0e de  f3 dd e3 1b ab bb 94 8d  |.I..............|
61 c7 54 f8 5f fb 71 b0  a5 d3 a1 34 c2 08 af f4  |a.T._.q....4....|

rsaEncryption:

a1 36 4c db d3 ae 58 08  b2 5e 44 b2 d6 c4 7e 5c  |.6L...X..^D...~\|
f7 9b 76 dd bb dd 0b ec  d5 a7 39 68 80 af c2 48  |..v.......9h...H|
f5 ab 44 39 40 f4 02 4e  bb 34 89 c9 4e 29 31 c7  |..D9@..N.4..N)1.|
1c ea 58 36 16 8d bd c7  c4 6d 67 02 36 3b 77 2b  |..X6.....mg.6;w+|
5d d3 ea d8 08 51 4a 96  2a 1e cb 67 57 da 9a 73  |]....QJ.*..gW..s|
4b 2b 62 8e a3 08 35 41  07 d7 6a cc 58 ef 19 8e  |K+b...5A..j.X...|
e4 12 e7 78 0d 4d 77 43  12 ac 41 5c f0 ec ea 9b  |...x.MwC..A\....|
27 3a 15 f0 46 6b 7e bf  5d 28 74 38 64 34 d3 64  |':..Fk~.](t8d4.d|
84 d5 a9 90 e4 8b fd b6  86 c3 27 75 a2 4e c1 4f  |..........'u.N.O|
ae 87 b4 72 76 ec 63 c2  69 6c 59 80 cc 3b 60 29  |...rv.c.ilY..;`)|
bd 88 20 4f 42 44 86 97  05 6f aa fe 78 f3 6d c9  |.. OBD...o..x.m.|
01 6e e9 6d 8d f5 0a 4e  d8 13 93 95 0c 9c 64 08  |.n.m...N......d.|
4c d9 01 e4 9e 92 e1 7b  98 ed 65 1a ec a0 d3 3d  |L......{..e....=|
6a a4 14 76 11 ee 30 61  e8 5d bb 12 0b f6 07 bf  |j..v..0a.]......|
94 51 a2 1c 8e 27 60 98  97 cc cd a6 bd ed 7a f2  |.Q...'`.......z.|
9b 8a 12 a1 b3 49 6d 15  3a 86 a5 0f 92 8e e2 78  |.....Im.:......x|

1.3.6.1.4.1.311.3.3.1

pkcs7-signedData

SHA256: nil
id-smime-ct-TSTInfo
- 1
  - 1.3.6.1.4.1.6449.2.1.1
  - SHA256
    - 40 09 b0 a8 7b 36 52 28 9a 4e 91 30 f2 7d fe d0 |@...{6R(.N.0.}..| 08 d3 a8 5c a1 df 95 b0 c9 04 55 01 de 95 28 ec |...\......U...(.|
  - 29:40:C1:A0:86:6D:FC:D6:5B:FD:FC:65:1F:24:7A:DC:
    7F:5E:49:7B
  - 2016-02-18 04:14:34 UTC
  - Subject
    - C: GB
    - ST: Greater Manchester
    - L: Salford
    - O: COMODO CA Limited
    - CN: COMODO SHA-256 Time Stamping Signer
Certificate #2
- 2
  - 4E:B0:87:8F:CC:24:35:36:B2:D8:C9:F7:BF:39:55:77
  - RSA-SHA256: nil
  - Issuer
    - C: US
    - ST: UT
    - L: Salt Lake City
    - O: The USERTRUST Network
    - OU: http://www.usertrust.com
    - CN: UTN-USERFirst-Object
  - 2015-12-31 00:00:00 UTC: 2019-07-09 18:40:36 UTC
  - Subject
    - C: GB
    - ST: Greater Manchester
    - L: Salford
    - O: COMODO CA Limited
    - CN: COMODO SHA-256 Time Stamping Signer
  - #5
    - rsaEncryption: nil
    - CE:BC:74:B7:70:80:4F:5E:F3:3F:98:AA:2E:CB:D4:12:
      01:23:35:69:0B:22:BC:E6:FD:09:6C:28:E4:13:12:AC:
      BB:BA:2D:E5:D5:DD:22:EE:73:B6:2C:F8:D2:A4:71:E7:
      49:25:78:AB:25:B7:90:10:A0:9B:8B:77:26:DD:40:EA:
      41:A3:FD:88:CD:72:A6:89:3B:50:57:1C:7A:25:24:22:
      02:51:40:35:67:8A:31:69:0D:E5:39:73:49:39:9B:95:
      01:85:52:F2:2B:14:89:9A:4E:04:A4:BC:40:AE:39:A6:
      DD:40:02:E0:3A:75:FE:3D:7D:55:94:5B:F1:4E:24:7C:
      C8:B8:58:19:CA:C0:DA:BE:58:13:9A:E6:1C:E7:D1:C1:
      3B:F0:5D:8F:49:08:21:9E:D0:F3:BE:D6:D4:66:4F:5C:
      72:36:7B:C3:82:D3:98:08:94:AF:AB:44:4F:18:C7:14:
      DA:16:B1:1E:32:0E:12:38:C0:B5:3C:76:EC:75:50:00:
      20:04:11:19:ED:C6:FF:DF:4E:FE:08:81:27:31:4F:71:
      74:6E:03:0C:70:27:81:55:6A:9A:43:92:A4:7F:DB:FD:
      3F:C5:17:1E:41:BB:CE:E8:A7:7F:8C:95:F9:FD:7F:F8:
      61:88:89:00:3E:FF:0B:01:DB:FD:D5:B5:A4:E4:91:11: 0x010001
  - #6
    - authorityKeyIdentifier:
```
da ed 64 74 14 9c 14 3c  ab dd 99 a9 bd 5b 28 4d  |..dt...<.....[(M|
8b 3c c9 d8                                       |.<..            |
```
    - subjectKeyIdentifier:
```
7d bf 91 d7 a7 6c 5a 47  66 44 7b 90 d4 8e 90 72  |}....lZGfD{....r|
41 8f 17 c2                                       |A...            |
```
    - keyUsage: true, 0xc0
    - basicConstraints
      - true
      - nil
    - extendedKeyUsage: true, timeStamping
    - crlDistributionPoints: http://crl.usertrust.com/UTN-USERFirst-Object.crl
    - authorityInfoAccess
      - OCSP: http://ocsp.usertrust.com
- RSA-SHA256:
```
50 b0 f5 df 5f ad 33 dc  c3 53 58 58 bc c2 13 75  |P..._.3..SXX...u|
7b 20 1d 54 ca ba 3f 50  3f ba 8a f4 6b 09 63 c0  |{ .T..?P?...k.c.|
5b 5d 8b d6 75 1a 73 bd  8b ff 47 f1 15 dc 51 16  |[]..u.s...G...Q.|
23 19 32 e6 6e 92 4d d1  c6 2e 5a 1e 88 42 14 c9  |#.2.n.M...Z..B..|
72 e5 d7 08 50 8a 6a f5  64 40 56 ae 24 e3 61 97  |r...P.j.d@V.$.a.|
15 42 f0 2c 48 ae 83 e6  35 3c 8b 5b c2 8f ae 8e  |.B.,H...5<.[....|
cc 34 52 34 e0 fb fe ca  fd b1 24 68 d1 a4 11 23  |.4R4......$h...#|
10 06 fd b2 c2 24 27 c7  d7 e9 4a 1c 8f 3f 3e cf  |.....$'...J..?>.|
ed eb 75 79 6c 8e 5f f7  21 b6 50 e6 25 a1 cd 66  |..uyl._.!.P.%..f|
94 12 6c bf db b3 ae 87  d8 68 03 72 20 02 c2 7e  |..l......h.r ..~|
da 94 f3 72 07 3c 57 e8  55 24 e7 05 a0 1d c4 81  |...r........._.[|
bb 87 76 c6 9e 4c 54 61  d0 67 db 93 84 da 31 87  |..v..LTa.g....1.|
03 92 e7 9f e3 e9 cf 5a  56 c8 68 e0 52 49 94 5c  |.......ZV.h.RI.\|
```

unnamed
- #0
  - C: US
  - ST: UT
  - L: Salt Lake City
  - O: The USERTRUST Network
  - OU: http://www.usertrust.com
  - CN: UTN-USERFirst-Object
- 4E:B0:87:8F:CC:24:35:36:B2:D8:C9:F7:BF:39:55:77
SHA256: nil

contentType: id-smime-ct-TSTInfo
signingTime: 2016-02-18 04:14:34 UTC

id-smime-aa-signingCertificate:

36 52 7d 4f a2 6a 68 f9  eb 45 96 f1 d9 9a bb 2c  |6R}O.jh..E.....,|
0e a7 6d fa                                       |..m.            |

messageDigest:

0d 06 6e 48 3a 67 d8 e2  a5 b2 27 fe e3 f6 2f 38  |..nH:g....'.../8|
da ad 3f ff a7 74 1b 17  3a c2 57 95 4c 31 47 0f  |..?..t..:.W.L1G.|

rsaEncryption:

5f c8 b6 0b 81 d0 32 51  fc 5d 25 c5 a3 fa 3e f0  |_.....2Q.]%...>.|
ed 77 0e c0 e1 e8 db 19  03 25 a2 d9 cd 5c 75 0b  |.w.......%...\u.|
d2 b3 00 c3 2f f7 1d 83  31 54 c5 61 c0 f5 a3 f3  |..../...1T.a....|
ed 4e 89 a2 aa e3 1c df  7a 3f b9 9b 69 b6 8a 7a  |.N......z?..i..z|
5a 6f a0 6d bd 96 ed 17  9a c7 6d 62 7d 8a 70 7f  |Zo.m......mb}.p.|
22 6d 1e 1f ef 4d 22 fb  1f bd e7 42 24 7f 6b 95  |"m...M"....B$.k.|
4a 66 9d be 34 cf a3 6c  f8 be e8 5a d7 ba 6f 2f  |Jf..4..l...Z..o/|
0a 51 6b f6 da 31 df e9  55 9a 52 da df 69 85 b8  |.Qk..1..U.R..i..|
61 9e e0 ac 6d 77 c3 2d  72 2f ae 99 14 b7 83 cf  |a...mw.-r/......|
22 c5 7f 2b 07 6b ba 4d  e5 97 8c be 75 f7 0b ec  |"..+.k.M....u...|
45 98 ca b6 f3 9a e6 61  2f 51 40 a4 4c a9 a4 31  |E......a/Q@.L..1|
ab e9 14 34 51 c2 c1 36  67 8e 17 95 d2 f9 2e 9c  |...4Q..6g.......|
00 4e 88 ff 20 11 7d b0  44 0d 72 1e b4 16 db de  |.N.. .}.D.r.....|
3c ae 25 44 a1 eb 67 76  f1 b7 42 fd 4b 95 03 1c  |<.%D..gv..B.K...|
40 d7 a3 6e a1 a9 00 04  07 0a e7 42 8e 75 01 9c  |@..n.......B.u..|
33 5f 15 3f 31 60 ea d1  37 54 5a 58 1d 4d 63 8e  |3_.?1`..7TZX.Mc.|

show previews

offset	size	type	comment
0	116736	DLL	02/18/2016 01:27:06	#
15c1	15	HTM		#
1c800	10904	PKCS7	Authenticode Signature	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

chrome_elf.dll- Google Chrome

MZ Header

Rich Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 040904b0

VS_FIXEDFILEINFO

Signers (1)

Certificates (3)

chrome_elf.dll
- Google Chrome