filenameweb-miner-setup-x64-1.2.502.1318.exe
size4634912 (0x46b920)
md5f09ebaf693bcc23ffcce1504deee4807
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf8

Rich Header

lib idversiontimes used
2075092933
2055092915
20650929104
131307295
1473072931
10322
2075110670
201511061
15102
204511061

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections7
TimeDateStamp0x52974fc4
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x102
Magic0x10b
LinkerVersion11.0
SizeOfCode0x39600
SizeOfInitializedData0x27400
SizeOfUninitializedData0
AddressOfEntryPoint0x267a5
BaseOfCode0x1000
BaseOfData0x3b000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.1
ImageVersion0.0
SubsystemVersion5.1
Reserved10
SizeOfImage0x68000
SizeOfHeaders0x400
CheckSum0x47128f
Subsystem2
DllCharacteristics0x8140
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

namevavsizeraw sizeflags
.text0x10000x395c40x39600R-X CODE
.rdata0x3b0000x1ac6e0x1ae00R-- IDATA
.data0x560000x30740x1000RW- IDATA
.wixburn0x5a0000x380x200R-- IDATA
.tls0x5b00090x200RW- IDATA
.rsrc0x5c0000x662c0x6800R-- IDATA
.reloc0x630000x48e20x4a00R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0x543640x12c
RESOURCE0x5c0000x662c
EXCEPTION00
SECURITY0x46a0880x1898
BASERELOC0x630000x3660
DEBUG0x3b4f00x38
ARCHITECTURE00
GLOBALPTR00
TLS0x53cd00x18
LOAD_CONFIG0x53c880x40
Bound_IAT00
IAT0x3b0000x474
Delay_IAT00
CLR_Header00

TLS

raw
start		raw
end		indexcallbkszero
fill		flags
0x45b0000x45b0080x456fa00x43b4c400
typenamesizecp
ICON#111281252
ICON#242641252
ICON#396401252
MESSAGETABLE#186601252
GROUP_ICON#1481252
VERSION#17801252
MANIFEST#111631252
module_namehintordfunction_name
ADVAPI32.dll503OpenProcessToken
ADVAPI32.dll31AdjustTokenPrivileges
ADVAPI32.dll407LookupPrivilegeValueW
ADVAPI32.dll381InitiateSystemShutdownExW
ADVAPI32.dll357GetUserNameW
ADVAPI32.dll560RegCloseKey
ADVAPI32.dll622RegQueryValueExW
ADVAPI32.dll584RegDeleteValueW
ADVAPI32.dll114ConvertStringSecurityDescriptorToSecurityDescriptorW
ADVAPI32.dll216DecryptFileW
ADVAPI32.dll131CreateWellKnownSid
ADVAPI32.dll374InitializeAcl
ADVAPI32.dll678SetEntriesInAclW
ADVAPI32.dll80ChangeServiceConfigW
ADVAPI32.dll87CloseServiceHandle
ADVAPI32.dll505OpenSCManagerW
ADVAPI32.dll507OpenServiceW
ADVAPI32.dll552QueryServiceStatus
ADVAPI32.dll182CryptDestroyHash
ADVAPI32.dll200CryptHashData
ADVAPI32.dll179CryptCreateHash
ADVAPI32.dll196CryptGetHashParam
ADVAPI32.dll203CryptReleaseContext
ADVAPI32.dll177CryptAcquireContextW
ADVAPI32.dll689SetNamedSecurityInfoW
ADVAPI32.dll81CheckTokenMembership
ADVAPI32.dll32AllocateAndInitializeSid
ADVAPI32.dll677SetEntriesInAclA
ADVAPI32.dll695SetSecurityDescriptorGroup
ADVAPI32.dll696SetSecurityDescriptorOwner
ADVAPI32.dll694SetSecurityDescriptorDacl
ADVAPI32.dll375InitializeSecurityDescriptor
ADVAPI32.dll638RegSetValueExW
ADVAPI32.dll616RegQueryInfoKeyW
ADVAPI32.dll594RegEnumValueW
ADVAPI32.dll591RegEnumKeyExW
ADVAPI32.dll580RegDeleteKeyW
ADVAPI32.dll569RegCreateKeyExW
ADVAPI32.dll346GetTokenInformation
ADVAPI32.dll609RegOpenKeyExW
ADVAPI32.dll548QueryServiceConfigW
USER32.dll349GetMessageW
USER32.dll563PeekMessageW
USER32.dll566PostMessageW
USER32.dll708SetWindowLongW
USER32.dll567PostQuitMessage
USER32.dll175DispatchMessageW
USER32.dll156DefWindowProcW
USER32.dll590RegisterClassW
USER32.dll774UnregisterClassW
USER32.dll110CreateWindowExW
USER32.dll491LoadCursorW
USER32.dll533MessageBoxW
USER32.dll487LoadBitmapW
USER32.dll764TranslateMessage
USER32.dll406GetWindowLongW
USER32.dll475IsWindow
USER32.dll540MsgWaitForMultipleObjects
USER32.dll806WaitForInputIdle
USER32.dll569PostThreadMessageW
USER32.dll351GetMonitorInfoW
USER32.dll536MonitorFromPoint
USER32.dll461IsDialogMessageW
USER32.dll288GetCursorPos
OLEAUT32.dll6
OLEAUT32.dll2
OLEAUT32.dll8
OLEAUT32.dll9
GDI32.dll509GetObjectW
GDI32.dll691StretchBlt
GDI32.dll631SelectObject
GDI32.dll230DeleteObject
GDI32.dll48CreateCompatibleDC
GDI32.dll227DeleteDC
SHELL32.dll289ShellExecuteExW
SHELL32.dll195SHGetFolderPathW
SHELL32.dll6CommandLineToArgvW
ole32.dll104CoTaskMemFree
ole32.dll64CoInitializeSecurity
ole32.dll6CLSIDFromProgID
ole32.dll16CoCreateInstance
ole32.dll377StringFromGUID2
ole32.dll62CoInitialize
ole32.dll63CoInitializeEx
ole32.dll108CoUninitialize
KERNEL32.dll676GetVersionExW
KERNEL32.dll100CompareStringW
KERNEL32.dll1252VerSetConditionMask
KERNEL32.dll354FreeLibrary
KERNEL32.dll581GetProcAddress
KERNEL32.dll238EnterCriticalSection
KERNEL32.dll825LeaveCriticalSection
KERNEL32.dll631GetSystemTime
KERNEL32.dll1358lstrlenW
KERNEL32.dll535GetModuleHandleExW
KERNEL32.dll624GetSystemDirectoryW
KERNEL32.dll645GetTempPathW
KERNEL32.dll687GetWindowsDirectoryW
KERNEL32.dll638GetSystemWow64DirectoryW
KERNEL32.dll399GetComputerNameW
KERNEL32.dll1256VerifyVersionInfoW
KERNEL32.dll683GetVolumePathNameW
KERNEL32.dll456GetDateFormatW
KERNEL32.dll620GetSystemDefaultLangID
KERNEL32.dll668GetUserDefaultLangID
KERNEL32.dll617GetStringTypeW
KERNEL32.dll285ExpandEnvironmentStringsW
KERNEL32.dll490GetFileAttributesW
KERNEL32.dll960ReadFile
KERNEL32.dll1127SetFilePointerEx
KERNEL32.dll143CreateFileW
KERNEL32.dll748InterlockedExchange
KERNEL32.dll745InterlockedCompareExchange
KERNEL32.dll831LoadLibraryW
KERNEL32.dll1357lstrlenA
KERNEL32.dll1027RemoveDirectoryW
KERNEL32.dll133CreateEventW
KERNEL32.dll906OutputDebugStringW
KERNEL32.dll921ProcessIdToSessionId
KERNEL32.dll896OpenProcess
KERNEL32.dll588GetProcessId
KERNEL32.dll1273WaitForSingleObject
KERNEL32.dll1317WriteFile
KERNEL32.dll101ConnectNamedPipe
KERNEL32.dll1148SetNamedPipeHandleState
KERNEL32.dll160CreateNamedPipeW
KERNEL32.dll181CreateThread
KERNEL32.dll480GetExitCodeThread
KERNEL32.dll302FindClose
KERNEL32.dll1121SetFileAttributesW
KERNEL32.dll313FindFirstFileW
KERNEL32.dll325FindNextFileW
KERNEL32.dll536GetModuleHandleW
KERNEL32.dll1271WaitForMultipleObjects
KERNEL32.dll751InterlockedIncrement
KERNEL32.dll747InterlockedDecrement
KERNEL32.dll232DuplicateHandle
KERNEL32.dll168CreateProcessW
KERNEL32.dll1101SetCurrentDirectoryW
KERNEL32.dll447GetCurrentDirectoryW
KERNEL32.dll479GetExitCodeProcess
KERNEL32.dll1171SetThreadExecutionState
KERNEL32.dll114CopyFileExW
KERNEL32.dll1039ResetEvent
KERNEL32.dll1107SetEndOfFile
KERNEL32.dll1130SetFileTime
KERNEL32.dll838LocalFileTimeToFileTime
KERNEL32.dll228DosDateTimeToFileTime
KERNEL32.dll136CreateFileA
KERNEL32.dll97CompareStringA
KERNEL32.dll855MapViewOfFile
KERNEL32.dll1238UnmapViewOfFile
KERNEL32.dll158CreateMutexW
KERNEL32.dll140CreateFileMappingW
KERNEL32.dll1257VirtualAlloc
KERNEL32.dll1260VirtualFree
KERNEL32.dll633GetSystemTimeAsFileTime
KERNEL32.dll214DeleteFileW
KERNEL32.dll652GetThreadLocale
KERNEL32.dll1222TlsFree
KERNEL32.dll1224TlsSetValue
KERNEL32.dll1223TlsGetValue
KERNEL32.dll1221TlsAlloc
KERNEL32.dll82CloseHandle
KERNEL32.dll1202Sleep
KERNEL32.dll1018ReleaseMutex
KERNEL32.dll209DeleteCriticalSection
KERNEL32.dll738InitializeCriticalSection
KERNEL32.dll514GetLastError
KERNEL32.dll664GetTimeZoneInformation
KERNEL32.dll370GetCPInfo
KERNEL32.dll567GetOEMCP
KERNEL32.dll360GetACP
KERNEL32.dll778IsValidCodePage
KERNEL32.dll719HeapFree
KERNEL32.dll945RaiseException
KERNEL32.dll715HeapAlloc
KERNEL32.dll772IsProcessorFeaturePresent
KERNEL32.dll768IsDebuggerPresent
KERNEL32.dll1216TerminateProcess
KERNEL32.dll1214SystemTimeToTzSpecificLocalTime
KERNEL32.dll1213SystemTimeToFileTime
KERNEL32.dll864MoveFileExW
KERNEL32.dll117CopyFileW
KERNEL32.dll1048RtlUnwind
KERNEL32.dll1297WideCharToMultiByte
KERNEL32.dll410GetConsoleCP
KERNEL32.dll428GetConsoleMode
KERNEL32.dll453GetCurrentThreadId
KERNEL32.dll448GetCurrentProcess
KERNEL32.dll840LocalFree
KERNEL32.dll723HeapSetInformation
KERNEL32.dll830LoadLibraryExW
KERNEL32.dll1113SetEvent
KERNEL32.dll722HeapReAlloc
KERNEL32.dll724HeapSize
KERNEL32.dll813LCMapStringW
KERNEL32.dll1159SetStdHandle
KERNEL32.dll1316WriteConsoleW
KERNEL32.dll343FlushFileBuffers
KERNEL32.dll1126SetFilePointer
KERNEL32.dll515GetLocalTime
KERNEL32.dll350FormatMessageW
KERNEL32.dll643GetTempFileNameW
KERNEL32.dll129CreateDirectoryW
KERNEL32.dll507GetFullPathNameW
KERNEL32.dll533GetModuleHandleA
KERNEL32.dll691GlobalAlloc
KERNEL32.dll449GetCurrentProcessId
KERNEL32.dll1189SetUnhandledExceptionFilter
KERNEL32.dll1235UnhandledExceptionFilter
KERNEL32.dll353FreeEnvironmentStringsW
KERNEL32.dll474GetEnvironmentStringsW
KERNEL32.dll935QueryPerformanceCounter
KERNEL32.dll611GetStartupInfoW
KERNEL32.dll739InitializeCriticalSectionAndSpinCount
KERNEL32.dll499GetFileType
KERNEL32.dll586GetProcessHeap
KERNEL32.dll532GetModuleFileNameW
KERNEL32.dll612GetStdHandle
KERNEL32.dll497GetFileSizeEx
KERNEL32.dll871MultiByteToWideChar
KERNEL32.dll281ExitProcess
KERNEL32.dll202DecodePointer
KERNEL32.dll391GetCommandLineW
KERNEL32.dll1139SetLastError
KERNEL32.dll234EncodePointer
KERNEL32.dll698GlobalFree
Cabinet.dll20
Cabinet.dll22
Cabinet.dll23
CRYPT32.dll70CertGetCertificateContextProperty
CRYPT32.dll161CryptHashPublicKeyInfo
msi.dll118
msi.dll115
msi.dll171
msi.dll125
msi.dll17
msi.dll8
msi.dll116
msi.dll111
msi.dll173
msi.dll45
msi.dll205
msi.dll90
msi.dll141
msi.dll137
msi.dll169
msi.dll70
msi.dll88
msi.dll190
msi.dll238
RPCRT4.dll507UuidCreate
WININET.dll90HttpQueryInfoW
WININET.dll154InternetOpenW
WININET.dll107InternetCloseHandle
WININET.dll114InternetConnectW
WININET.dll159InternetReadFile
WININET.dll175InternetSetOptionW
WININET.dll88HttpOpenRequestW
WININET.dll83HttpAddRequestHeadersW
WININET.dll94HttpSendRequestW
WININET.dll124InternetErrorDlg
WININET.dll116InternetCrackUrlW
WINTRUST.dll89WTHelperGetProvSignerFromChain
WINTRUST.dll4CryptCATAdminCalcHashFromFileHandle
WINTRUST.dll92WTHelperProvDataFromStateData
WINTRUST.dll115WinVerifyTrust
VERSION.dll6GetFileVersionInfoW
VERSION.dll14VerQueryValueW
VERSION.dll5GetFileVersionInfoSizeW

StringTable 040904E4

CompanyNameAvant Prime
FileDescriptionWeb Miner (64-bit)
FileVersion1.2.502.1318
InternalNamesetup
LegalCopyrightCopyright © 2014 Avant Prime
OriginalFilenamewebminer-setup-x64.exe
ProductNameWeb Miner (64-bit)
ProductVersion1.2.502.1318

VS_FIXEDFILEINFO

FileVersion1.2.502.1318
ProductVersion1.2.502.1318
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS4
FileType1
FileSubtype0

Signers (1)

issuer: /C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO Code Signing CA 2
serial: D7235E5B4827F64A214AFE0C96F4C12F

Certificates (4)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=SE, O=AddTrust AB, OU=AddTrust External TTP Network, CN=AddTrust External CA Root
        Validity
            Not Before: Jun  7 08:09:10 2005 GMT
            Not After : May 30 10:48:38 2020 GMT
        Subject: C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Object
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:aa:81:3f:a3:a3:61:78:aa:31:00:55:95:11:
                    9e:27:0f:1f:1c:df:3a:9b:82:68:30:c0:4a:61:1d:
                    f1:2f:0e:fa:be:79:f7:a5:23:ef:55:51:96:84:cd:
                    db:e3:b9:6e:3e:31:d8:0a:20:67:c7:f4:d9:bf:94:
                    eb:47:04:3e:02:ce:2a:a2:5d:87:04:09:f6:30:9d:
                    18:8a:97:b2:aa:1c:fc:41:d2:a1:36:cb:fb:3d:91:
                    ba:e7:d9:70:35:fa:e4:e7:90:c3:9b:a3:9b:d3:3c:
                    f5:12:99:77:b1:b7:09:e0:68:e6:1c:b8:f3:94:63:
                    88:6a:6a:fe:0b:76:c9:be:f4:22:e4:67:b9:ab:1a:
                    5e:77:c1:85:07:dd:0d:6c:bf:ee:06:c7:77:6a:41:
                    9e:a7:0f:d7:fb:ee:94:17:b7:fc:85:be:a4:ab:c4:
                    1c:31:dd:d7:b6:d1:e4:f0:ef:df:16:8f:b2:52:93:
                    d7:a1:d4:89:a1:07:2e:bf:e1:01:12:42:1e:1a:e1:
                    d8:95:34:db:64:79:28:ff:ba:2e:11:c2:e5:e8:5b:
                    92:48:fb:47:0b:c2:6c:da:ad:32:83:41:f3:a5:e5:
                    41:70:fd:65:90:6d:fa:fa:51:c4:f9:bd:96:2b:19:
                    04:2c:d3:6d:a7:dc:f0:7f:6f:83:65:e2:6a:ab:87:
                    86:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:AD:BD:98:7A:34:B4:26:F7:FA:C4:26:54:EF:03:BD:E0:24:CB:54:1A

            X509v3 Subject Key Identifier: 
                DA:ED:64:74:14:9C:14:3C:AB:DD:99:A9:BD:5B:28:4D:8B:3C:C9:D8
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.usertrust.com/AddTrustExternalCARoot.crl

            Authority Information Access: 
                OCSP - URI:http://ocsp.usertrust.com

    Signature Algorithm: sha1WithRSAEncryption
         4d:42:2f:a6:c1:8a:eb:07:80:90:58:46:8c:f8:19:39:66:2a:
         3c:5a:2c:6d:cf:d4:d9:87:55:8d:79:0b:12:88:7b:40:8f:d5:
         c7:f8:4b:8d:55:16:63:ad:b7:57:dc:3b:2b:bd:d3:c1:4f:1e:
         03:87:4b:44:9b:e3:e2:40:45:26:f3:26:49:2b:6a:84:f1:54:
         7a:d4:42:da:fc:d3:6a:bb:66:7e:ca:9e:ea:e9:bb:dc:07:c7:
         c3:92:4e:83:3c:81:49:9f:92:d5:32:09:ea:49:2e:a1:11:71:
         9a:36:d2:c5:4e:68:b6:cb:0e:1b:25:16:af:6c:de:5d:76:d8:
         1f:72:b1:93:26:86:17:db:18:de:af:45:e9:df:fb:98:af:14:
         18:ed:a4:5e:f6:89:94:45:f0:55:04:4a:dd:ff:27:dd:06:4a:
         40:f6:b4:bc:f1:e4:0f:99:02:bb:fd:5d:0e:2e:28:c1:be:3b:
         5f:1a:3f:97:10:84:bc:16:3e:d8:a3:9c:63:1d:66:cb:5c:5f:
         da:3e:f3:0f:0a:09:35:22:db:db:c0:3f:00:f9:e6:0d:5d:67:
         d1:fd:a0:1e:03:2b:d9:40:f7:be:cc:87:66:54:80:a6:a3:b8:
         f5:19:62:d5:d2:26:b1:98:26:ee:9a:cb:44:a7:45:5a:81:95:
         15:1a:f5:51
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Object
        Validity
            Not Before: May 10 00:00:00 2010 GMT
            Not After : May 10 23:59:59 2015 GMT
        Subject: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Time Stamping Signer
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:35:a0:36:70:22:81:11:c3:b2:83:b9:d3:28:
                    c6:36:cd:25:6b:a9:7b:b2:1c:f6:9b:51:9c:ef:35:
                    f4:ed:08:8e:5e:38:08:f8:77:3c:0a:42:e0:f3:70:
                    dc:a3:d7:ca:f5:4c:0b:cf:ff:22:9c:0a:7e:68:d6:
                    09:a2:2a:84:7b:a6:9d:b4:a9:c1:33:e2:ef:1f:17:
                    48:ca:3a:cd:46:e6:c5:aa:77:bd:e3:77:9a:fa:47:
                    53:40:28:59:43:93:f1:a4:81:ea:ef:80:b5:4f:a7:
                    08:ce:ba:6e:bc:ca:76:0c:97:64:59:86:24:bb:3d:
                    82:90:a8:55:b1:92:d3:a0:a7:05:ac:9f:53:25:08:
                    10:47:99:cd:98:de:68:e5:b4:50:78:a3:af:01:cc:
                    59:43:58:e4:76:6e:7e:ac:c7:e2:9e:1f:4f:b0:47:
                    2d:c8:0c:a3:49:27:80:75:8c:bb:06:91:65:0f:90:
                    9b:f4:ba:d1:81:c8:5c:6a:ec:14:e9:25:09:bf:23:
                    16:f4:95:46:40:40:21:bb:83:96:fd:86:1f:7a:c8:
                    0d:10:8e:a2:f8:19:07:58:7f:9f:bd:37:02:60:f2:
                    a4:e9:9d:44:3f:30:05:e4:a7:70:99:51:9a:e8:17:
                    f1:55:ca:b2:61:89:65:46:a7:6a:f2:58:46:7e:aa:
                    a0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:DA:ED:64:74:14:9C:14:3C:AB:DD:99:A9:BD:5B:28:4D:8B:3C:C9:D8

            X509v3 Subject Key Identifier: 
                2E:2D:B0:0A:44:4A:D3:87:C0:02:07:CE:97:7D:50:62:20:FD:0F:83
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.usertrust.com/UTN-USERFirst-Object.crl

            Authority Information Access: 
                OCSP - URI:http://ocsp.usertrust.com

    Signature Algorithm: sha1WithRSAEncryption
         c8:fb:63:f8:0b:75:75:2c:3a:f1:f2:13:a7:2d:b6:a3:1a:9c:
         ad:01:07:d3:34:8e:77:e0:c2:6e:ae:02:5d:48:4f:a4:d2:21:
         b6:36:fd:2a:35:43:7c:6b:df:80:87:0b:15:f0:76:32:00:b4:
         ce:b5:67:a4:2f:2f:20:1b:9c:54:9e:83:3f:1f:5f:14:95:62:
         82:0f:22:41:22:1f:70:b3:f3:f7:42:de:6c:51:cd:4b:f8:21:
         ac:9b:3b:8c:b1:e5:e6:28:8f:ce:2a:8a:f9:aa:52:4d:8c:5b:
         77:ba:4d:5a:58:db:bb:6a:04:cc:52:1e:9d:e2:28:37:0e:bb:
         e7:0e:91:c7:f8:db:f1:81:98:eb:cd:37:b3:0e:ab:65:d3:62:
         ec:3a:a5:76:eb:13:a8:35:93:c9:2e:0a:01:ec:c0:e8:cc:3d:
         7e:b6:eb:e2:c1:ec:d3:14:92:82:66:87:50:dc:fd:50:97:ac:
         b3:4a:76:73:06:c4:86:11:3a:b3:5f:43:04:52:6f:ea:b3:d0:
         74:36:4c:ca:f1:1b:79:84:37:70:63:ad:74:b9:aa:0e:f3:98:
         b0:86:08:eb:db:e0:1f:8c:10:f2:39:64:9b:ae:4f:0a:2c:92:
         8a:4f:18:b5:91:e5:8d:1a:93:5f:1f:ae:f1:a6:f0:2e:97:d0:
         d2:f6:2b:3c
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Object
        Validity
            Not Before: Aug 24 00:00:00 2011 GMT
            Not After : May 30 10:48:38 2020 GMT
        Subject: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Code Signing CA 2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f8:e7:a7:e8:f1:97:28:40:68:80:37:d2:c8:
                    3f:8e:92:8a:92:37:87:47:80:ea:4c:99:cf:6e:f9:
                    15:47:bd:ee:75:f4:44:ac:d0:c3:d4:4d:f7:19:c0:
                    d3:3c:4d:c1:47:b9:59:65:16:93:8c:d9:0a:84:9b:
                    9f:e8:f6:6a:63:58:fe:5f:dc:d1:7f:4b:51:9f:00:
                    1c:00:87:54:20:07:57:a0:82:c9:2f:98:af:33:8a:
                    bb:7b:80:22:25:6a:6c:af:c2:2c:6c:79:13:bd:a3:
                    2a:48:d6:b5:8e:61:55:e9:6b:e8:3d:80:bf:14:03:
                    85:18:8e:7e:4c:e9:c2:19:88:73:92:72:cd:fa:ff:
                    50:4d:cb:2c:a6:7b:1a:73:b1:00:90:2c:d9:32:e2:
                    fb:fd:ac:95:42:36:ec:34:c5:13:53:68:b2:c1:9f:
                    40:9f:da:7b:c8:9d:62:6c:93:a2:42:d7:79:9f:97:
                    4f:31:5b:50:21:a1:ab:af:d9:1c:b2:ce:75:be:5b:
                    2c:56:00:24:8d:11:c1:75:1f:f0:fe:d2:95:fe:f0:
                    e1:31:23:18:67:c0:5b:13:fd:5a:98:94:94:ff:ff:
                    59:02:1f:00:ac:e6:f1:f2:fa:3a:73:b3:1d:42:fc:
                    54:75:cf:51:31:2f:e3:db:81:d9:77:23:2a:4f:59:
                    ce:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:DA:ED:64:74:14:9C:14:3C:AB:DD:99:A9:BD:5B:28:4D:8B:3C:C9:D8

            X509v3 Subject Key Identifier: 
                1E:C5:B1:2C:7D:87:DA:02:68:7C:25:BC:0C:07:84:3F:B6:CF:DE:F1
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.usertrust.com/UTN-USERFirst-Object.crl

            Authority Information Access: 
                CA Issuers - URI:http://crt.usertrust.com/UTNAddTrustObject_CA.crt
                OCSP - URI:http://ocsp.usertrust.com

    Signature Algorithm: sha1WithRSAEncryption
         95:89:77:93:68:01:5e:7c:d9:2d:37:07:90:5d:5a:42:5e:0c:
         64:b4:36:b5:0f:f6:ab:d5:39:27:de:22:46:a4:49:1c:66:4b:
         46:19:59:2e:79:49:03:f6:9c:92:df:6d:50:35:5c:0c:91:2e:
         60:03:59:d0:f1:64:f7:69:09:f6:7e:fe:eb:34:b3:6d:b1:bf:
         66:9c:a3:ba:31:78:b9:87:35:61:3d:92:31:1b:ef:f4:e8:9e:
         d6:ac:45:fa:0c:36:3c:80:67:bb:bd:ef:2e:c2:90:e1:3d:71:
         2f:3b:c1:b0:58:7e:45:c3:52:71:03:07:f6:f3:39:4d:8b:36:
         21:1b:01:df:d9:da:5e:2b:eb:0e:97:80:1e:44:1c:50:88:f5:
         c6:12:33:4a:a8:4d:a5:8d:2f:94:0c:7b:c6:bf:9a:2c:c3:32:
         cd:bd:8c:27:26:f0:e1:30:03:50:06:82:bc:f4:3b:b3:83:75:
         06:c6:ef:ba:ee:d3:80:f8:52:c6:ac:cb:79:f2:38:9e:7b:b0:
         92:58:42:91:05:c8:96:21:ad:b9:4b:16:81:14:69:f1:37:b0:
         fe:34:f7:dc:b0:df:97:f5:43:10:9b:76:8f:b4:65:f5:e8:9f:
         13:b7:1e:ac:6f:c4:69:8a:5f:ba:3c:61:7e:5e:49:86:23:13:
         2e:af:15:48
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            d7:23:5e:5b:48:27:f6:4a:21:4a:fe:0c:96:f4:c1:2f
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Code Signing CA 2
        Validity
            Not Before: Feb  4 00:00:00 2014 GMT
            Not After : Feb  4 23:59:59 2015 GMT
        Subject: C=GB/postalCode=LE2 8DJ, ST=Leicestershire, L=Leicester/street=Aylestone/street=183 Wigston Lane, O=Avant Prime, CN=Avant Prime
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e4:72:40:25:47:84:d6:7a:f4:b0:87:27:ce:
                    bb:38:7b:e1:d0:4d:48:f4:ef:ab:21:97:8e:c4:eb:
                    0b:0c:5c:d4:77:9e:b3:09:cb:31:fe:d3:59:a6:06:
                    4a:fd:05:3f:3e:55:0d:df:7f:2d:d6:ad:6b:ad:dd:
                    77:7f:6e:8b:9c:30:68:2b:23:fe:4e:92:60:2b:c4:
                    b2:d3:22:ac:95:d3:10:04:12:50:05:2f:1f:ca:40:
                    17:4e:8c:9b:9f:6f:52:e1:f3:dd:61:6e:0a:51:ed:
                    9a:da:28:06:4b:43:77:ef:ed:6e:29:0c:db:18:8f:
                    64:71:6f:10:e3:a4:0c:b5:88:8a:21:df:38:ce:65:
                    2e:8d:a9:3e:d8:c2:dc:d6:2b:aa:f8:79:ed:87:68:
                    ff:7b:b3:36:b3:4b:89:03:fa:07:4d:60:b4:33:87:
                    06:b2:53:ac:59:3d:ad:3c:ce:e6:90:e4:6c:50:28:
                    7a:80:1e:e6:b1:50:a2:28:89:8b:ad:39:cd:07:81:
                    5f:2b:9a:6c:9a:41:df:8c:8e:12:2c:1a:c4:aa:f5:
                    89:27:0a:e7:a4:fe:1b:aa:e1:9a:82:f0:b9:77:ab:
                    af:97:9a:48:1e:70:f4:c9:a0:7a:b7:d1:0d:df:3b:
                    cc:a9:84:67:28:4a:9e:6a:80:2d:01:fe:c3:9c:13:
                    e9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:1E:C5:B1:2C:7D:87:DA:02:68:7C:25:BC:0C:07:84:3F:B6:CF:DE:F1

            X509v3 Subject Key Identifier: 
                4F:ED:4B:9D:4C:EA:EA:43:E1:7E:5C:18:5A:74:C8:DD:AE:20:17:7A
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                Code Signing
            Netscape Cert Type: 
                Object Signing
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.6449.1.2.1.3.2
                  CPS: https://secure.comodo.net/CPS

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.comodoca.com/COMODOCodeSigningCA2.crl

            Authority Information Access: 
                CA Issuers - URI:http://crt.comodoca.com/COMODOCodeSigningCA2.crt
                OCSP - URI:http://ocsp.comodoca.com

            X509v3 Subject Alternative Name: 
                email:services@avantprime.com
    Signature Algorithm: sha1WithRSAEncryption
         23:6c:56:36:f9:85:d4:6a:03:2b:67:e9:d9:20:02:c7:7f:50:
         18:3b:f9:a0:13:5b:6b:9a:62:ab:39:d1:93:e7:a9:ff:23:0c:
         dc:c3:4e:e2:40:6f:67:17:4a:63:5f:e7:72:a6:4f:50:f3:a6:
         0c:69:09:5f:f4:43:95:7d:6b:0a:51:3c:a0:78:3d:b1:78:d9:
         18:e4:19:95:9a:71:a8:cb:4d:d7:44:ff:25:92:2c:b5:6d:da:
         f8:73:86:72:c8:c5:fa:cf:62:82:94:10:9c:ce:4c:4e:76:56:
         87:9d:db:71:4e:d9:4d:fd:3a:bc:25:38:03:62:ba:3f:ba:1d:
         2f:35:7d:91:e6:4a:25:d5:8f:f4:84:54:fb:e6:82:8f:09:73:
         f3:4f:cd:cc:0d:8e:af:8a:7f:f6:78:ca:83:06:f8:ad:e1:6d:
         4e:f3:c8:4c:f2:5d:29:8a:65:1a:cc:85:6d:1f:53:d7:be:a8:
         38:7d:eb:b5:c9:42:91:1c:24:87:06:25:8c:94:3c:15:d3:3e:
         9e:95:dc:83:28:4e:1b:52:2f:aa:57:b4:52:09:23:95:78:07:
         88:5e:81:f3:21:78:06:6d:a8:fb:23:d3:b5:4a:34:53:f6:6a:
         93:c8:df:0a:88:97:6b:79:ac:a1:87:91:4a:48:dd:74:53:86:
         69:50:40:5e
pkcs7-signedData
  • 1
    • SHA1: nil
    • 1.3.6.1.4.1.311.2.1.4
      • #0
        • 1.3.6.1.4.1.311.2.1.15
          • : 
            00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |
        • SHA1
          • 1c b9 7a 11 57 67 ae 51  b6 0c fe f5 28 e3 de aa  |..z.Wg.Q....(...|
46 88 d1 02                                       |F...            |
    • Certificates
      • Certificate #0
        • 2
          • 42:1A:F2:94:09:84:19:1F:52:0A:4B:C6:24:26:A7:4B
          • RSA-SHA1: nil
          • Issuer
            • C: SE
            • O: AddTrust AB
            • OU: AddTrust External TTP Network
            • CN: AddTrust External CA Root
          • 2005-06-07 08:09:10 UTC: 2020-05-30 10:48:38 UTC
          • Subject
            • C: US
            • ST: UT
            • L: Salt Lake City
            • O: The USERTRUST Network
            • OU: http://www.usertrust.com
            • CN: UTN-USERFirst-Object
          • #5
            • rsaEncryption: nil
            • CE:AA:81:3F:A3:A3:61:78:AA:31:00:55:95:11:9E:27:
              0F:1F:1C:DF:3A:9B:82:68:30:C0:4A:61:1D:F1:2F:0E:
              FA:BE:79:F7:A5:23:EF:55:51:96:84:CD:DB:E3:B9:6E:
              3E:31:D8:0A:20:67:C7:F4:D9:BF:94:EB:47:04:3E:02:
              CE:2A:A2:5D:87:04:09:F6:30:9D:18:8A:97:B2:AA:1C:
              FC:41:D2:A1:36:CB:FB:3D:91:BA:E7:D9:70:35:FA:E4:
              E7:90:C3:9B:A3:9B:D3:3C:F5:12:99:77:B1:B7:09:E0:
              68:E6:1C:B8:F3:94:63:88:6A:6A:FE:0B:76:C9:BE:F4:
              22:E4:67:B9:AB:1A:5E:77:C1:85:07:DD:0D:6C:BF:EE:
              06:C7:77:6A:41:9E:A7:0F:D7:FB:EE:94:17:B7:FC:85:
              BE:A4:AB:C4:1C:31:DD:D7:B6:D1:E4:F0:EF:DF:16:8F:
              B2:52:93:D7:A1:D4:89:A1:07:2E:BF:E1:01:12:42:1E:
              1A:E1:D8:95:34:DB:64:79:28:FF:BA:2E:11:C2:E5:E8:
              5B:92:48:FB:47:0B:C2:6C:DA:AD:32:83:41:F3:A5:E5:
              41:70:FD:65:90:6D:FA:FA:51:C4:F9:BD:96:2B:19:04:
              2C:D3:6D:A7:DC:F0:7F:6F:83:65:E2:6A:AB:87:86:75              : 0x010001
          • #6
            • authorityKeyIdentifier: 
              ad bd 98 7a 34 b4 26 f7  fa c4 26 54 ef 03 bd e0  |...z4.&...&T....|
24 cb 54 1a                                       |$.T.            |
            • subjectKeyIdentifier: 
              da ed 64 74 14 9c 14 3c  ab dd 99 a9 bd 5b 28 4d  |..dt...<.....[(M|
8b 3c c9 d8                                       |.<..            |
            • keyUsage: true, 6
            • basicConstraints: true, true
            • certificatePolicies: anyPolicy
            • crlDistributionPoints: http://crl.usertrust.com/AddTrustExternalCARoot.crl
            • authorityInfoAccess
              • OCSP: http://ocsp.usertrust.com
        • RSA-SHA1: 
          4d 42 2f a6 c1 8a eb 07  80 90 58 46 8c f8 19 39  |MB/.......XF...9|
66 2a 3c 5a 2c 6d cf d4  d9 87 55 8d 79 0b 12 88  |f*...|
63 1d 66 cb 5c 5f da 3e  f3 0f 0a 09 35 22 db db  |c.f.\_.>....5"..|
c0 3f 00 f9 e6 0d 5d 67  d1 fd a0 1e 03 2b d9 40  |.?....]g.....+.@|
f7 be cc 87 66 54 80 a6  a3 b8 f5 19 62 d5 d2 26  |....fT......b..&|
b1 98 26 ee 9a cb 44 a7  45 5a 81 95 15 1a f5 51  |..&...D.EZ.....Q|
      • Certificate #1
        • 2
          • 47:8A:8E:FB:59:E1:D8:3F:0C:E1:42:D2:A2:87:07:BE
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • ST: UT
            • L: Salt Lake City
            • O: The USERTRUST Network
            • OU: http://www.usertrust.com
            • CN: UTN-USERFirst-Object
          • 2010-05-10 00:00:00 UTC: 2015-05-10 23:59:59 UTC
          • Subject
            • C: GB
            • ST: Greater Manchester
            • L: Salford
            • O: COMODO CA Limited
            • CN: COMODO Time Stamping Signer
          • #5
            • rsaEncryption: nil
            • BC:35:A0:36:70:22:81:11:C3:B2:83:B9:D3:28:C6:36:
              CD:25:6B:A9:7B:B2:1C:F6:9B:51:9C:EF:35:F4:ED:08:
              8E:5E:38:08:F8:77:3C:0A:42:E0:F3:70:DC:A3:D7:CA:
              F5:4C:0B:CF:FF:22:9C:0A:7E:68:D6:09:A2:2A:84:7B:
              A6:9D:B4:A9:C1:33:E2:EF:1F:17:48:CA:3A:CD:46:E6:
              C5:AA:77:BD:E3:77:9A:FA:47:53:40:28:59:43:93:F1:
              A4:81:EA:EF:80:B5:4F:A7:08:CE:BA:6E:BC:CA:76:0C:
              97:64:59:86:24:BB:3D:82:90:A8:55:B1:92:D3:A0:A7:
              05:AC:9F:53:25:08:10:47:99:CD:98:DE:68:E5:B4:50:
              78:A3:AF:01:CC:59:43:58:E4:76:6E:7E:AC:C7:E2:9E:
              1F:4F:B0:47:2D:C8:0C:A3:49:27:80:75:8C:BB:06:91:
              65:0F:90:9B:F4:BA:D1:81:C8:5C:6A:EC:14:E9:25:09:
              BF:23:16:F4:95:46:40:40:21:BB:83:96:FD:86:1F:7A:
              C8:0D:10:8E:A2:F8:19:07:58:7F:9F:BD:37:02:60:F2:
              A4:E9:9D:44:3F:30:05:E4:A7:70:99:51:9A:E8:17:F1:
              55:CA:B2:61:89:65:46:A7:6A:F2:58:46:7E:AA:A0:07              : 0x010001
          • #6
            • authorityKeyIdentifier: 
              da ed 64 74 14 9c 14 3c  ab dd 99 a9 bd 5b 28 4d  |..dt...<.....[(M|
8b 3c c9 d8                                       |.<..            |
            • subjectKeyIdentifier: 
              2e 2d b0 0a 44 4a d3 87  c0 02 07 ce 97 7d 50 62  |.-..DJ.......}Pb|
20 fd 0f 83                                       | ...            |
            • keyUsage: true, 0xc0
            • basicConstraints
              • true
              • nil
            • extendedKeyUsage: true, timeStamping
            • crlDistributionPoints: http://crl.usertrust.com/UTN-USERFirst-Object.crl
            • authorityInfoAccess
              • OCSP: http://ocsp.usertrust.com
        • RSA-SHA1: 
          c8 fb 63 f8 0b 75 75 2c  3a f1 f2 13 a7 2d b6 a3  |..c..uu,:....-..|
1a 9c ad 01 07 d3 34 8e  77 e0 c2 6e ae 02 5d 48  |......4.w..n..]H|
4f a4 d2 21 b6 36 fd 2a  35 43 7c 6b df 80 87 0b  |O..!.6.*5C|k....|
15 f0 76 32 00 b4 ce b5  67 a4 2f 2f 20 1b 9c 54  |..v2....g.// ..T|
9e 83 3f 1f 5f 14 95 62  82 0f 22 41 22 1f 70 b3  |..?._..b.."A".p.|
f3 f7 42 de 6c 51 cd 4b  f8 21 ac 9b 3b 8c b1 e5  |..B.lQ.K.!..;...|
e6 28 8f ce 2a 8a f9 aa  52 4d 8c 5b 77 ba 4d 5a  |.(..*...RM.[w.MZ|
58 db bb 6a 04 cc 52 1e  9d e2 28 37 0e bb e7 0e  |X..j..R...(7....|
91 c7 f8 db f1 81 98 eb  cd 37 b3 0e ab 65 d3 62  |.........7...e.b|
ec 3a a5 76 eb 13 a8 35  93 c9 2e 0a 01 ec c0 e8  |.:.v...5........|
cc 3d 7e b6 eb e2 c1 ec  d3 14 92 82 66 87 50 dc  |.=~.........f.P.|
fd 50 97 ac b3 4a 76 73  06 c4 86 11 3a b3 5f 43  |.P...Jvs....:._C|
04 52 6f ea b3 d0 74 36  4c ca f1 1b 79 84 37 70  |.Ro...t6L...y.7p|
63 ad 74 b9 aa 0e f3 98  b0 86 08 eb db e0 1f 8c  |c.t.............|
10 f2 39 64 9b ae 4f 0a  2c 92 8a 4f 18 b5 91 e5  |..9d..O.,..O....|
8d 1a 93 5f 1f ae f1 a6  f0 2e 97 d0 d2 f6 2b 3c  |..._..........+<|
      • Certificate #2
        • 2
          • 10:70:9D:4F:F5:54:08:D7:30:60:01:D8:EA:91:75:BB
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • ST: UT
            • L: Salt Lake City
            • O: The USERTRUST Network
            • OU: http://www.usertrust.com
            • CN: UTN-USERFirst-Object
          • 2011-08-24 00:00:00 UTC: 2020-05-30 10:48:38 UTC
          • Subject
            • C: GB
            • ST: Greater Manchester
            • L: Salford
            • O: COMODO CA Limited
            • CN: COMODO Code Signing CA 2
          • #5
            • rsaEncryption: nil
            • CB:F8:E7:A7:E8:F1:97:28:40:68:80:37:D2:C8:3F:8E:
              92:8A:92:37:87:47:80:EA:4C:99:CF:6E:F9:15:47:BD:
              EE:75:F4:44:AC:D0:C3:D4:4D:F7:19:C0:D3:3C:4D:C1:
              47:B9:59:65:16:93:8C:D9:0A:84:9B:9F:E8:F6:6A:63:
              58:FE:5F:DC:D1:7F:4B:51:9F:00:1C:00:87:54:20:07:
              57:A0:82:C9:2F:98:AF:33:8A:BB:7B:80:22:25:6A:6C:
              AF:C2:2C:6C:79:13:BD:A3:2A:48:D6:B5:8E:61:55:E9:
              6B:E8:3D:80:BF:14:03:85:18:8E:7E:4C:E9:C2:19:88:
              73:92:72:CD:FA:FF:50:4D:CB:2C:A6:7B:1A:73:B1:00:
              90:2C:D9:32:E2:FB:FD:AC:95:42:36:EC:34:C5:13:53:
              68:B2:C1:9F:40:9F:DA:7B:C8:9D:62:6C:93:A2:42:D7:
              79:9F:97:4F:31:5B:50:21:A1:AB:AF:D9:1C:B2:CE:75:
              BE:5B:2C:56:00:24:8D:11:C1:75:1F:F0:FE:D2:95:FE:
              F0:E1:31:23:18:67:C0:5B:13:FD:5A:98:94:94:FF:FF:
              59:02:1F:00:AC:E6:F1:F2:FA:3A:73:B3:1D:42:FC:54:
              75:CF:51:31:2F:E3:DB:81:D9:77:23:2A:4F:59:CE:23              : 0x010001
          • #6
            • authorityKeyIdentifier: 
              da ed 64 74 14 9c 14 3c  ab dd 99 a9 bd 5b 28 4d  |..dt...<.....[(M|
8b 3c c9 d8                                       |.<..            |
            • subjectKeyIdentifier: 
              1e c5 b1 2c 7d 87 da 02  68 7c 25 bc 0c 07 84 3f  |...,}...h|%....?|
b6 cf de f1                                       |....            |
            • keyUsage: true, 6
            • basicConstraints
              • true
              • true: 0
            • extendedKeyUsage: codeSigning
            • certificatePolicies: anyPolicy
            • crlDistributionPoints: http://crl.usertrust.com/UTN-USERFirst-Object.crl
            • authorityInfoAccess
              • #0
                • caIssuers: http://crt.usertrust.com/UTNAddTrustObject_CA.crt
                • OCSP: http://ocsp.usertrust.com
        • RSA-SHA1: 
          95 89 77 93 68 01 5e 7c  d9 2d 37 07 90 5d 5a 42  |..w.h.^|.-7..]ZB|
5e 0c 64 b4 36 b5 0f f6  ab d5 39 27 de 22 46 a4  |^.d.6.....9'."F.|
49 1c 66 4b 46 19 59 2e  79 49 03 f6 9c 92 df 6d  |I.fKF.Y.yI.....m|
50 35 5c 0c 91 2e 60 03  59 d0 f1 64 f7 69 09 f6  |P5\...`.Y..d.i..|
7e fe eb 34 b3 6d b1 bf  66 9c a3 ba 31 78 b9 87  |~..4.m..f...1x..|
35 61 3d 92 31 1b ef f4  e8 9e d6 ac 45 fa 0c 36  |5a=.1.......E..6|
3c 80 67 bb bd ef 2e c2  90 e1 3d 71 2f 3b c1 b0  |<.g.......=q/;..|
58 7e 45 c3 52 71 03 07  f6 f3 39 4d 8b 36 21 1b  |X~E.Rq....9M.6!.|
01 df d9 da 5e 2b eb 0e  97 80 1e 44 1c 50 88 f5  |....^+.....D.P..|
c6 12 33 4a a8 4d a5 8d  2f 94 0c 7b c6 bf 9a 2c  |..3J.M../..{...,|
c3 32 cd bd 8c 27 26 f0  e1 30 03 50 06 82 bc f4  |.2...'&..0.P....|
3b b3 83 75 06 c6 ef ba  ee d3 80 f8 52 c6 ac cb  |;..u........R...|
79 f2 38 9e 7b b0 92 58  42 91 05 c8 96 21 ad b9  |y.8.{..XB....!..|
4b 16 81 14 69 f1 37 b0  fe 34 f7 dc b0 df 97 f5  |K...i.7..4......|
43 10 9b 76 8f b4 65 f5  e8 9f 13 b7 1e ac 6f c4  |C..v..e.......o.|
69 8a 5f ba 3c 61 7e 5e  49 86 23 13 2e af 15 48  |i._.
      • Certificate #3
        • 2
          • D7:23:5E:5B:48:27:F6:4A:21:4A:FE:0C:96:F4:C1:2F
          • RSA-SHA1: nil
          • Issuer
            • C: GB
            • ST: Greater Manchester
            • L: Salford
            • O: COMODO CA Limited
            • CN: COMODO Code Signing CA 2
          • 2014-02-04 00:00:00 UTC: 2015-02-04 23:59:59 UTC
          • Subject
            • C: GB
            • postalCode: LE2 8DJ
            • ST: Leicestershire
            • L: Leicester
            • street: Aylestone
            • street: 183 Wigston Lane
            • O: Avant Prime
            • CN: Avant Prime
          • #5
            • rsaEncryption: nil
            • D4:E4:72:40:25:47:84:D6:7A:F4:B0:87:27:CE:BB:38:
              7B:E1:D0:4D:48:F4:EF:AB:21:97:8E:C4:EB:0B:0C:5C:
              D4:77:9E:B3:09:CB:31:FE:D3:59:A6:06:4A:FD:05:3F:
              3E:55:0D:DF:7F:2D:D6:AD:6B:AD:DD:77:7F:6E:8B:9C:
              30:68:2B:23:FE:4E:92:60:2B:C4:B2:D3:22:AC:95:D3:
              10:04:12:50:05:2F:1F:CA:40:17:4E:8C:9B:9F:6F:52:
              E1:F3:DD:61:6E:0A:51:ED:9A:DA:28:06:4B:43:77:EF:
              ED:6E:29:0C:DB:18:8F:64:71:6F:10:E3:A4:0C:B5:88:
              8A:21:DF:38:CE:65:2E:8D:A9:3E:D8:C2:DC:D6:2B:AA:
              F8:79:ED:87:68:FF:7B:B3:36:B3:4B:89:03:FA:07:4D:
              60:B4:33:87:06:B2:53:AC:59:3D:AD:3C:CE:E6:90:E4:
              6C:50:28:7A:80:1E:E6:B1:50:A2:28:89:8B:AD:39:CD:
              07:81:5F:2B:9A:6C:9A:41:DF:8C:8E:12:2C:1A:C4:AA:
              F5:89:27:0A:E7:A4:FE:1B:AA:E1:9A:82:F0:B9:77:AB:
              AF:97:9A:48:1E:70:F4:C9:A0:7A:B7:D1:0D:DF:3B:CC:
              A9:84:67:28:4A:9E:6A:80:2D:01:FE:C3:9C:13:E9:39              : 0x010001
          • #6
            • authorityKeyIdentifier: 
              1e c5 b1 2c 7d 87 da 02  68 7c 25 bc 0c 07 84 3f  |...,}...h|%....?|
b6 cf de f1                                       |....            |
            • subjectKeyIdentifier: 
              4f ed 4b 9d 4c ea ea 43  e1 7e 5c 18 5a 74 c8 dd  |O.K.L..C.~\.Zt..|
ae 20 17 7a                                       |. .z            |
            • keyUsage: true, 0x80
            • basicConstraints
              • true
              • nil
            • extendedKeyUsage: codeSigning
            • nsCertType: 0x10
            • certificatePolicies
              • 1.3.6.1.4.1.6449.1.2.1.3.2
                • id-qt-cps: https://secure.comodo.net/CPS
            • crlDistributionPoints: http://crl.comodoca.com/COMODOCodeSigningCA2.crl
            • authorityInfoAccess
              • #0
                • caIssuers: http://crt.comodoca.com/COMODOCodeSigningCA2.crt
                • OCSP: http://ocsp.comodoca.com
            • subjectAltName: services@avantprime.com
        • RSA-SHA1: 
          23 6c 56 36 f9 85 d4 6a  03 2b 67 e9 d9 20 02 c7  |#lV6...j.+g.. ..|
7f 50 18 3b f9 a0 13 5b  6b 9a 62 ab 39 d1 93 e7  |.P.;...[k.b.9...|
a9 ff 23 0c dc c3 4e e2  40 6f 67 17 4a 63 5f e7  |..#...N.@og.Jc_.|
72 a6 4f 50 f3 a6 0c 69  09 5f f4 43 95 7d 6b 0a  |r.OP...i._.C.}k.|
51 3c a0 78 3d b1 78 d9  18 e4 19 95 9a 71 a8 cb  |Q<.x=.x......q..|
4d d7 44 ff 25 92 2c b5  6d da f8 73 86 72 c8 c5  |M.D.%.,.m..s.r..|
fa cf 62 82 94 10 9c ce  4c 4e 76 56 87 9d db 71  |..b.....LNvV...q|
4e d9 4d fd 3a bc 25 38  03 62 ba 3f ba 1d 2f 35  |N.M.:.%8.b.?../5|
7d 91 e6 4a 25 d5 8f f4  84 54 fb e6 82 8f 09 73  |}..J%....T.....s|
f3 4f cd cc 0d 8e af 8a  7f f6 78 ca 83 06 f8 ad  |.O........x.....|
e1 6d 4e f3 c8 4c f2 5d  29 8a 65 1a cc 85 6d 1f  |.mN..L.]).e...m.|
53 d7 be a8 38 7d eb b5  c9 42 91 1c 24 87 06 25  |S...8}...B..$..%|
8c 94 3c 15 d3 3e 9e 95  dc 83 28 4e 1b 52 2f aa  |..<..>....(N.R/.|
57 b4 52 09 23 95 78 07  88 5e 81 f3 21 78 06 6d  |W.R.#.x..^..!x.m|
a8 fb 23 d3 b5 4a 34 53  f6 6a 93 c8 df 0a 88 97  |..#..J4S.j......|
6b 79 ac a1 87 91 4a 48  dd 74 53 86 69 50 40 5e  |ky....JH.tS.iP@^|
    • Signer
      • 1
      • unnamed
        • #0
          • C: GB
          • ST: Greater Manchester
          • L: Salford
          • O: COMODO CA Limited
          • CN: COMODO Code Signing CA 2
        • D7:23:5E:5B:48:27:F6:4A:21:4A:FE:0C:96:F4:C1:2F
      • SHA1: nil
      • #3
        • contentType: 1.3.6.1.4.1.311.2.1.4
        • 1.3.6.1.4.1.311.2.1.11: msCodeInd
        • messageDigest: 
          4f d9 14 41 ba f9 9e 52  51 7e 6c b6 e0 ab 18 5e  |O..A...RQ~l....^|
99 c1 3f 9e                                       |..?.            |
        • 1.3.6.1.4.1.311.2.1.12: 
          00 57 00 65 00 62 00 20  00 4d 00 69 00 6e 00 65  |.W.e.b. .M.i.n.e|
00 72                                             |.r              |
      • rsaEncryption: 
        7a 41 98 4c c3 93 2a 64  be bd 5b f0 63 5e 0a 51  |zA.L..*d..[.c^.Q|
2b 19 c2 eb c7 98 00 8e  10 ac aa a5 84 c1 5f d0  |+............._.|
bd 90 38 d6 a1 c2 ee b3  b5 c1 de 64 b1 90 62 c8  |..8........d..b.|
bb 47 59 1f 19 f0 c6 d0  81 9b 45 be 69 fe fc 28  |.GY.......E.i..(|
a6 d9 37 40 c5 76 7a 90  49 24 ef 2c df 11 d2 82  |..7@.vz.I$.,....|
6a 8e 7a f4 4b 43 12 c6  a9 9a 1c c4 9a 5c 0d a8  |j.z.KC.......\..|
41 8a 30 00 2c 14 2e e5  50 e1 a8 a3 66 4c ed 99  |A.0.,...P...fL..|
62 23 b0 12 a0 13 39 ba  9b 64 c3 7d 7c c2 0e ff  |b#....9..d.}|...|
e7 ea eb bb af 8d 7d 5c  ba 26 01 f3 36 18 03 c1  |......}\.&..6...|
f8 e1 91 fb 86 d9 44 1e  32 1f 4e e3 23 af 1c 03  |......D.2.N.#...|
19 9d cb 09 cc 74 ff c3  d0 cc f1 6c 75 b5 67 1c  |.....t.....lu.g.|
9f c3 d5 e3 ec 9c 45 cb  be 68 a0 66 67 15 29 90  |......E..h.fg.).|
16 25 4e 9c 4a d8 c3 fe  42 f2 fe 94 1d f1 95 de  |.%N.J...B.......|
64 0c 14 a9 d7 b5 92 27  53 8c ee 3e 23 f5 68 19  |d......'S..>#.h.|
6f 2a f2 0c 13 4b 43 cc  6d d9 95 bd 0e 6a 55 6c  |o*...KC.m....jUl|
82 63 f6 8d aa b4 5b 2f  32 ad 96 3f e4 d7 dd 50  |.c....[/2..?...P|
      • countersignature
        • 0
          • unnamed
            • #0
              • C: US
              • ST: UT
              • L: Salt Lake City
              • O: The USERTRUST Network
              • OU: http://www.usertrust.com
              • CN: UTN-USERFirst-Object
            • 47:8A:8E:FB:59:E1:D8:3F:0C:E1:42:D2:A2:87:07:BE
          • SHA1: nil
          • #2
            • contentType: pkcs7-data
            • signingTime: 2014-08-09 12:23:00 UTC
            • messageDigest: 
              bd 6d 6f 6b 47 f0 cd 9d  80 10 82 2a ca e1 99 51  |.mokG......*...Q|
36 34 a5 9e                                       |64..            |
          • rsaEncryption: 
            60 dc 92 78 fa be d8 1c  a0 d6 50 4a 0a 72 2e 15  |`..x......PJ.r..|
03 1a 0d 9d 22 dc 34 28  ea c9 0d ee c0 9e 8a 72  |....".4(.......r|
78 b8 f6 ee 40 56 fa d2  e9 5f 31 16 fe 2a 48 e5  |x...@V..._1..*H.|
4d 0f 58 a9 16 2b 24 1f  0c af df 9e 13 a5 1e 32  |M.X..+$........2|
50 5b d5 9f c7 d0 e6 3e  72 df 1c a1 ce 04 5c d1  |P[.....>r.....\.|
b0 03 d5 d2 04 f7 99 31  3c da 05 8e bb cf 13 cb  |.......1<.......|
95 06 f5 8d f4 b6 29 0a  6f 09 e6 a2 d9 1b 59 b6  |......).o.....Y.|
60 b4 25 e2 62 66 b8 69  50 7d 76 b3 e8 ca 6f 63  |`.%.bf.iP}v...oc|
7b 1d 4b 78 f0 62 88 63  2f 31 b9 3b 5e 6f 8e 01  |{.Kx.b.c/1.;^o..|
20 18 32 48 b0 b9 ce 82  de 48 6b b0 5e 27 2e da  | .2H.....Hk.^'..|
90 8e 58 13 e7 4c 3a 60  9d f8 a3 9a a1 46 a6 60  |..X..L:`.....F.`|
ba 16 c0 e6 73 f1 ae 76  d5 86 94 2a 1b 2e 9a 91  |....s..v...*....|
5a 91 35 14 26 2a ba 48  29 cb 3d 19 4d 33 b4 ea  |Z.5.&*.H).=.M3..|
e4 d4 5e c6 42 f3 61 85  af 2c 5e a4 1f e5 7d bf  |..^.B.a..,^...}.|
5b c3 9e 70 02 e1 09 58  5a fc d8 bd 20 e7 ad 91  |[..p...XZ... ...|
4a 1e 6c 62 fa 54 96 da  2c 8d d1 85 2d 42 e5 d5  |J.lb.T..,...-B..|
offsetsizetypecomment
0396800EXE11/28/2013 14:14:28#
15c115HTM#
60e004238112BINoverlay data past EOF#
Scanning the drive for archives:
1 file, 4634912 bytes (4527 KiB)


--
Type = PE
Physical Size = 4634912
CPU = x86
Characteristics = Executable 32-bit
Created = 2013-11-28 14:14:28
Headers Size = 1024
Checksum = 4657807
Image Size = 425984
Section Alignment = 4096
File Alignment = 512
Code Size = 235008
Initialized Data Size = 160768
Uninitialized Data Size = 0
Linker Version = 11.0
OS Version = 5.1
Image Version = 0.0
Subsystem Version = 5.1
Subsystem = Windows GUI
DLL Characteristics = Relocated NX-Compatible TerminalServerAware
Stack Reserve = 1048576
Stack Commit = 4096
Heap Reserve = 1048576
Heap Commit = 4096
Image Base = 4194304
Comment = FileVersion: 1.2.502.1318
ProductVersion: 1.2.502.1318
InternalName: setup
----
Path = [0]
Size = 4231816
Packed Size = 4231816
Virtual Size = 4231816
Offset = 396800
--
Path = [0]
Type = Cab
WARNINGS:
There are data after the end of archive
Physical Size = 84336
Tail Size = 4147480
Method = MSZip
Blocks = 1
Volumes = 1
Volume Index = 0
ID = 0

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
2014-08-09 13:23:02 ....A         5183               0
2013-11-28 06:14:42 ....A       138752               u0
2013-04-15 15:17:30 ....A         5881               u1
2013-05-14 21:56:58 ....A         2952               u2
2013-05-14 21:56:58 ....A          852               u3
2014-08-09 13:20:14 ....A        30176               u4
2014-08-09 13:23:00 ....A         3092               u5
------------------- ----- ------------ ------------  ------------------------
2014-08-09 13:23:02             186888      4634912  7 files

Warnings: 1
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable







everything is OK