LSBsetup.exe - setup.exe

info
MZ
PE
resources
imports
exports
foremost
version info
signature
hexdump
disasm
log
discuss
donate

filename	LSBsetup.exe
size	611400 (0x95448)
md5	f43d0a465dbd80ef34927eaf5f0eec12

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x118

Rich Header

lib id	version	times used
242	30703	26
241	30703	12
243	30703	154
259	22823	20
260	22823	64
261	22823	64
203	65501	23
1	0	350
259	23007	1
261	23007	31
256	23007	1
255	23007	1
258	23007	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	5
TimeDateStamp	0x559b7119
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x122
Magic	0x10b
LinkerVersion	14.0
SizeOfCode	0x59000
SizeOfInitializedData	0x38c00
SizeOfUninitializedData	0
AddressOfEntryPoint	0x330c2
BaseOfCode	0x1000
BaseOfData	0x5a000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	5.1
ImageVersion	10.0
SubsystemVersion	5.1
Reserved1	0
SizeOfImage	0x97000
SizeOfHeaders	0x400
CheckSum	0x972e6
Subsystem	2
DllCharacteristics	0x8140
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x2000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x58e58	0x59000	R-X CODE
.data	0x5a000	0x3d2c	0x1800	RW- IDATA
.idata	0x5e000	0x152a	0x1600	R-- IDATA
.rsrc	0x60000	0x32098	0x32200	R-- IDATA
.reloc	0x93000	0x3b4c	0x3c00	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0x59de0	0x78
IMPORT	0x5e330	0xc8
RESOURCE	0x60000	0x32098
EXCEPTION	0	0
SECURITY	0x92000	0x3448
BASERELOC	0x93000	0x3b4c
DEBUG	0xf240	0x54
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0x77a8	0x40
Bound_IAT	0	0
IAT	0x5e000	0x330
Delay_IAT	0x59a94	0x80
CLR_Header	0	0

show previews

type	name	size	cp
ICON	#1	7702	1252
ICON	#2	3752	1252
ICON	#3	2216	1252
ICON	#4	1384	1252
ICON	#5	7820	1252
ICON	#6	16936	1252
ICON	#7	9640	1252
ICON	#8	4264	1252
ICON	#9	1128	1252
ICON	#10	1885	1252
ICON	#11	3752	1252
ICON	#12	2216	1252
ICON	#13	1384	1252
ICON	#14	2096	1252
ICON	#15	16936	1252
ICON	#16	9640	1252
ICON	#17	4264	1252
ICON	#18	1128	1252
DIALOG	#119	144	1252
DIALOG	#120	436	1252
DIALOG	#1101	420	1252
GROUP_ICON	#107	132	1252
GROUP_ICON	#108	132	1252
VERSION	#1	732	1252
MANIFEST	#1	1378	1252
#40	BASEURL	66	1252
#40	HOMESITE	10	1252
#41	SETUPCFG	78604	1252
#43	1000	16	1252
#43	1001	20	1252
#43	1002	14	1252
#43	1003	24	1252
#43	1004	24	1252
#43	1005	8	1252
#43	1006	6	1252
#43	1008	122	1252
#43	1009	138	1252
#43	1010	52	1252
#43	1011	60	1252
#43	1012	18	1252
#43	1013	34	1252
#43	1016	290	1252
#43	1017	422	1252
#43	1018	1040	1252
#43	1019	54	1252
#43	1020	14	1252
#43	1021	98	1252
#43	1023	10	1252
#43	1025	72	1252
#43	1026	154	1252
#43	1028	122	1252
#43	1029	132	1252
#43	1030	382	1252
#43	1031	70	1252
#43	1032	196	1252
#43	1033	74	1252
#43	1034	102	1252
#43	1035	256	1252
#43	1036	12	1252
#43	1037	72	1252
#43	1038	32	1252
#43	1039	66	1252
#43	1041	116	1252
#43	1042	108	1252
#43	1043	158	1252
#43	1044	90	1252
#43	1045	104	1252
#43	1046	88	1252
#43	1047	2	1252
#43	1048	22	1252
#43	1049	88	1252
#43	1050	166	1252
#43	1051	14	1252
#43	1052	48	1252
#43	1053	18	1252
#43	1054	184	1252
#43	1055	16	1252
#43	1057	332	1252
#43	1058	120	1252
#43	1200	60	1252
#43	1201	206	1252
#43	1202	46	1252
#43	1203	116	1252
#43	1204	182	1252
#43	1205	16	1252
#43	1206	28	1252
#43	1207	120	1252
#43	1208	108	1252
#43	1209	82	1252
#43	1210	78	1252
#43	1211	18	1252
#43	1212	16	1252
#43	1213	18	1252
#43	1400	304	1252
#43	1401	86	1252
#43	1402	74	1252
#43	1405	108	1252
#43	1416	118	1252
#43	1420	68	1252
#43	1423	68	1252
#43	1424	90	1252
#43	1425	218	1252
#43	1426	132	1252
#43	1427	210	1252
#43	1429	94	1252
#43	1430	140	1252
#43	1432	200	1252
#43	1433	210	1252
#43	1435	80	1252
#43	1436	136	1252
#43	1437	120	1252
#43	1438	78	1252
#43	1442	142	1252
#43	1443	168	1252
#43	1444	108	1252
#43	1446	130	1252
#43	1447	228	1252
#43	1448	122	1252
#43	1449	238	1252
#43	CULTURE	6	1252
#44	COUNT	4	1252
#44	EULA0	6220	1252
#45	CODEPAGE	10	1252
#45	SETUPRES	514	1252

module_name	hint	ord	function_name
KERNEL32.dll	628		GetNativeSystemInfo
KERNEL32.dll	292		EndUpdateResourceW
KERNEL32.dll	241		CreateToolhelp32Snapshot
KERNEL32.dll	1037		Process32FirstW
KERNEL32.dll	1039		Process32NextW
KERNEL32.dll	1263		SetEvent
KERNEL32.dll	182		CreateEventW
KERNEL32.dll	939		LoadResource
KERNEL32.dll	957		LockResource
KERNEL32.dll	1359		SizeofResource
KERNEL32.dll	393		FindResourceW
KERNEL32.dll	553		GetEnvironmentVariableW
KERNEL32.dll	341		ExpandEnvironmentStringsW
KERNEL32.dll	178		CreateDirectoryW
KERNEL32.dll	266		DeleteFileW
KERNEL32.dll	565		GetFileAttributesW
KERNEL32.dll	737		GetTempFileNameW
KERNEL32.dll	1103		ReadFile
KERNEL32.dll	1006		OpenProcess
KERNEL32.dll	521		GetCurrentProcess
KERNEL32.dll	720		GetSystemInfo
KERNEL32.dll	717		GetSystemDirectoryW
KERNEL32.dll	784		GetWindowsDirectoryW
KERNEL32.dll	773		GetVersionExW
KERNEL32.dll	611		GetModuleFileNameW
KERNEL32.dll	791		GlobalAlloc
KERNEL32.dll	798		GlobalFree
KERNEL32.dll	946		LocalFree
KERNEL32.dll	410		FormatMessageW
KERNEL32.dll	165		CopyFileW
KERNEL32.dll	531		GetDateFormatW
KERNEL32.dll	759		GetTimeFormatW
KERNEL32.dll	147		CompareStringW
KERNEL32.dll	1483		WideCharToMultiByte
KERNEL32.dll	1087		RaiseException
KERNEL32.dll	840		InitializeCriticalSectionAndSpinCount
KERNEL32.dll	522		GetCurrentProcessId
KERNEL32.dll	1360		Sleep
KERNEL32.dll	823		HeapSetInformation
KERNEL32.dll	1275		SetFilePointer
KERNEL32.dll	538		GetDiskFreeSpaceExW
KERNEL32.dll	194		CreateFileW
KERNEL32.dll	261		DeleteCriticalSection
KERNEL32.dll	232		CreateThread
KERNEL32.dll	930		LeaveCriticalSection
KERNEL32.dll	293		EnterCriticalSection
KERNEL32.dll	839		InitializeCriticalSection
KERNEL32.dll	1545		lstrlenW
KERNEL32.dll	976		MulDiv
KERNEL32.dll	754		GetTickCount
KERNEL32.dll	556		GetExitCodeProcess
KERNEL32.dll	936		LoadLibraryW
KERNEL32.dll	739		GetTempPathW
KERNEL32.dll	1370		SwitchToThread
KERNEL32.dll	383		FindNextFileW
KERNEL32.dll	1422		UpdateResourceA
KERNEL32.dll	94		BeginUpdateResourceA
KERNEL32.dll	390		FindResourceA
KERNEL32.dll	1544		lstrlenA
KERNEL32.dll	263		DeleteFileA
KERNEL32.dll	186		CreateFileA
KERNEL32.dll	1423		UpdateResourceW
KERNEL32.dll	95		BeginUpdateResourceW
KERNEL32.dll	771		GetVersion
KERNEL32.dll	552		GetEnvironmentVariableA
KERNEL32.dll	822		HeapReAlloc
KERNEL32.dll	824		HeapSize
KERNEL32.dll	1502		WriteConsoleW
KERNEL32.dll	1101		ReadConsoleW
KERNEL32.dll	674		GetProcessHeap
KERNEL32.dll	1312		SetStdHandle
KERNEL32.dll	413		FreeEnvironmentStringsW
KERNEL32.dll	551		GetEnvironmentStringsW
KERNEL32.dll	457		GetCommandLineW
KERNEL32.dll	456		GetCommandLineA
KERNEL32.dll	435		GetCPInfo
KERNEL32.dll	646		GetOEMCP
KERNEL32.dll	882		IsValidCodePage
KERNEL32.dll	366		FindFirstFileExW
KERNEL32.dll	1257		SetEndOfFile
KERNEL32.dll	1018		OutputDebugStringW
KERNEL32.dll	1276		SetFilePointerEx
KERNEL32.dll	494		GetConsoleMode
KERNEL32.dll	476		GetConsoleCP
KERNEL32.dll	402		FlushFileBuffers
KERNEL32.dll	327		EnumSystemLocalesW
KERNEL32.dll	764		GetUserDefaultLCID
KERNEL32.dll	884		IsValidLocale
KERNEL32.dll	596		GetLocaleInfoW
KERNEL32.dll	918		LCMapStringW
KERNEL32.dll	574		GetFileType
KERNEL32.dll	371		FindFirstFileW
KERNEL32.dll	360		FindClose
KERNEL32.dll	669		GetProcAddress
KERNEL32.dll	414		FreeLibrary
KERNEL32.dll	1449		WaitForSingleObject
KERNEL32.dll	592		GetLastError
KERNEL32.dll	127		CloseHandle
KERNEL32.dll	1503		WriteFile
KERNEL32.dll	709		GetStringTypeW
KERNEL32.dll	815		HeapAlloc
KERNEL32.dll	819		HeapFree
KERNEL32.dll	420		GetACP
KERNEL32.dll	614		GetModuleHandleExW
KERNEL32.dll	337		ExitProcess
KERNEL32.dll	977		MultiByteToWideChar
KERNEL32.dll	1439		VirtualProtect
KERNEL32.dll	1441		VirtualQuery
KERNEL32.dll	615		GetModuleHandleW
KERNEL32.dll	934		LoadLibraryExA
KERNEL32.dll	1069		QueryPerformanceCounter
KERNEL32.dll	526		GetCurrentThreadId
KERNEL32.dll	726		GetSystemTimeAsFileTime
KERNEL32.dll	843		InitializeSListHead
KERNEL32.dll	871		IsDebuggerPresent
KERNEL32.dll	1408		UnhandledExceptionFilter
KERNEL32.dll	1345		SetUnhandledExceptionFilter
KERNEL32.dll	702		GetStartupInfoW
KERNEL32.dll	877		IsProcessorFeaturePresent
KERNEL32.dll	1375		TerminateProcess
KERNEL32.dll	1196		RtlUnwind
KERNEL32.dll	1290		SetLastError
KERNEL32.dll	1393		TlsAlloc
KERNEL32.dll	1395		TlsGetValue
KERNEL32.dll	1396		TlsSetValue
KERNEL32.dll	1394		TlsFree
KERNEL32.dll	935		LoadLibraryExW
KERNEL32.dll	704		GetStdHandle
GDI32.dll	568		GetStockObject
GDI32.dll	333		EnumFontFamiliesExW
GDI32.dll	270		DeleteObject
GDI32.dll	65		CreateFontIndirectW
GDI32.dll	552		GetObjectW
GDI32.dll	593		GetTextMetricsW
GDI32.dll	724		SelectObject
GDI32.dll	585		GetTextExtentPoint32W
GDI32.dll	502		GetDeviceCaps
GDI32.dll	267		DeleteDC
GDI32.dll	49		CreateCompatibleDC
ole32.dll	127		CoUninitialize
ole32.dll	79		CoInitialize
Secur32.dll	26		GetComputerObjectNameW
SHELL32.dll	310		ShellExecuteExW
SHELL32.dll	225		SHGetMalloc
SHELL32.dll	233		SHGetPathFromIDListW
SHELL32.dll	241		SHGetSpecialFolderLocation
SHELL32.dll	311		ShellExecuteW
SHELL32.dll	307		ShellExecuteA
USER32.dll	815		SystemParametersInfoW
USER32.dll	510		IsDialogMessageW
USER32.dll	549		LoadImageW
USER32.dll	547		LoadIconW
USER32.dll	545		LoadCursorW
USER32.dll	708		SetClassLongW
USER32.dll	685		ScreenToClient
USER32.dll	459		GetWindowRect
USER32.dll	293		GetClientRect
USER32.dll	788		SetWindowTextW
USER32.dll	797		ShowScrollBar
USER32.dll	725		SetForegroundWindow
USER32.dll	228		EnableWindow
USER32.dll	322		GetFocus
USER32.dll	724		SetFocus
USER32.dll	691		SendDlgItemMessageW
USER32.dll	722		SetDlgItemTextW
USER32.dll	316		GetDlgItem
USER32.dll	100		CreateDialogIndirectParamW
USER32.dll	102		CreateDialogParamW
USER32.dll	595		MoveWindow
USER32.dll	800		ShowWindow
USER32.dll	173		DestroyWindow
USER32.dll	700		SendMessageW
USER32.dll	695		SendMessageA
USER32.dll	620		PeekMessageW
USER32.dll	181		DispatchMessageW
USER32.dll	831		TranslateMessage
USER32.dll	260		ExitWindowsEx
USER32.dll	589		MessageBoxW
USER32.dll	677		ReleaseDC
USER32.dll	308		GetDC
USER32.dll	214		DrawTextW
USER32.dll	426		GetSystemMetrics
USER32.dll	312		GetDialogBaseUnits
USER32.dll	582		MessageBoxA
USER32.dll	713		SetCursor
USER32.dll	596		MsgWaitForMultipleObjects
CRYPT32.dll	69		CertGetCertificateChain
CRYPT32.dll	61		CertFreeCertificateChain
CRYPT32.dll	117		CertVerifyCertificateChainPolicy
WININET.dll	155		InternetCrackUrlW
WININET.dll	148		InternetCombineUrlW
msi.dll		8
msi.dll		78
msi.dll		150
msi.dll		92

ord	entry_va	function_name
1	0x1fc22	_DecodePointerInternal@4
2	0x1fc3d	_EncodePointerInternal@4

module_name	setup.exe
flags	0
timestamp	2015-07-07 06:26:33
version	0.0
ordinal_base	1
nFunctions	2
nNames	2
Names(2)	0x59e10
Functions(2)	0x59e08
NameOrdinals(2)	0x59e18

StringTable 040904b0

CompanyName
FileDescription	Setup
FileVersion	14.0.23107.0 built by: D14REL
InternalName	setup.exe
LegalCopyright	© Microsoft Corporation. All rights reserved.
OriginalFilename	setup.exe
ProductName
ProductVersion	14.0.23107.0

VS_FIXEDFILEINFO

FileVersion	14.0.23107.0
ProductVersion	14.0.23107.0
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	4
FileType	1
FileSubtype	0

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa (c)10/CN=VeriSign Class 3 Code Signing 2010 CA

serial: 5C1DAF428D584A0DB390B080FDC3B921

Certificates (4)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
        Validity
            Not Before: Dec 21 00:00:00 2012 GMT
            Not After : Dec 30 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:b3:49:54:4b:97:1c:12:0a:d8:25:79:91:
                    22:57:2a:6f:dc:b8:26:c4:43:73:6b:c2:bf:2e:50:
                    5a:fb:14:c2:76:8e:43:01:25:43:b4:a1:e2:45:f4:
                    e8:b7:7b:c3:74:cc:22:d7:b4:94:00:02:f7:4d:ed:
                    bf:b4:b7:44:24:6b:cd:5f:45:3b:d1:44:ce:43:12:
                    73:17:82:8b:69:b4:2b:cb:99:1e:ac:72:1b:26:4d:
                    71:1f:b1:31:dd:fb:51:61:02:53:a6:aa:f5:49:2c:
                    05:78:45:a5:2f:89:ce:e7:99:e7:fe:8c:e2:57:3f:
                    3d:c6:92:dc:4a:f8:7b:33:e4:79:0a:fb:f0:75:88:
                    41:9c:ff:c5:03:51:99:aa:d7:6c:9f:93:69:87:65:
                    29:83:85:c2:60:14:c4:c8:c9:3b:14:da:c0:81:f0:
                    1f:0d:74:de:92:22:ab:ca:f7:fb:74:7c:27:e6:f7:
                    4a:1b:7f:a7:c3:9e:2d:ae:8a:ea:a6:e6:aa:27:16:
                    7d:61:f7:98:71:11:bc:e2:50:a1:4b:e5:5d:fa:e5:
                    0e:a7:2c:9f:aa:65:20:d3:d8:96:e8:c8:7c:a5:4e:
                    48:44:ff:19:e2:44:07:92:0b:d7:68:84:80:5d:6a:
                    78:64:45:cd:60:46:7e:54:c1:13:7c:c5:79:f1:c9:
                    c1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD
            Authority Information Access: 
                OCSP - URI:http://ocsp.thawte.com

            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.thawte.com/ThawteTimestampingCA.crl

            X509v3 Extended Key Usage: 
                Time Stamping
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-1
    Signature Algorithm: sha1WithRSAEncryption
         03:09:9b:8f:79:ef:7f:59:30:aa:ef:68:b5:fa:e3:09:1d:bb:
         4f:82:06:5d:37:5f:a6:52:9f:16:8d:ea:1c:92:09:44:6e:f5:
         6d:eb:58:7c:30:e8:f9:69:8d:23:73:0b:12:6f:47:a9:ae:39:
         11:f8:2a:b1:9b:b0:1a:c3:8e:eb:59:96:00:ad:ce:0c:4d:b2:
         d0:31:a6:08:5c:2a:7a:fc:e2:7a:1d:57:4c:a8:65:18:e9:79:
         40:62:25:96:6e:c7:c7:37:6a:83:21:08:8e:41:ea:dd:d9:57:
         3f:1d:77:49:87:2a:16:06:5e:a6:38:6a:22:12:a3:51:19:83:
         7e:b6

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Validity
            Not Before: Oct 18 00:00:00 2012 GMT
            Not After : Dec 29 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer - G4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:63:0b:39:44:b8:bb:23:a7:44:49:bb:0e:ff:
                    a1:f0:61:0a:53:93:b0:98:db:ad:2c:0f:4a:c5:6e:
                    ff:86:3c:53:55:0f:15:ce:04:3f:2b:fd:a9:96:96:
                    d9:be:61:79:0b:5b:c9:4c:86:76:e5:e0:43:4b:22:
                    95:ee:c2:2b:43:c1:9f:d8:68:b4:8e:40:4f:ee:85:
                    38:b9:11:c5:23:f2:64:58:f0:15:32:6f:4e:57:a1:
                    ae:88:a4:02:d7:2a:1e:cd:4b:e1:dd:63:d5:17:89:
                    32:5b:b0:5e:99:5a:a8:9d:28:50:0e:17:ee:96:db:
                    61:3b:45:51:1d:cf:12:56:0b:92:47:fc:ab:ae:f6:
                    66:3d:47:ac:70:72:e7:92:e7:5f:cd:10:b9:c4:83:
                    64:94:19:bd:25:80:e1:e8:d2:22:a5:d0:ba:02:7a:
                    a1:77:93:5b:65:c3:ee:17:74:bc:41:86:2a:dc:08:
                    4c:8c:92:8c:91:2d:9e:77:44:1f:68:d6:a8:74:77:
                    db:0e:5b:32:8b:56:8b:33:bd:d9:63:c8:49:9d:3a:
                    c5:c5:ea:33:0b:d2:f1:a3:1b:f4:8b:be:d9:b3:57:
                    8b:3b:de:04:a7:7a:22:b2:24:ae:2e:c7:70:c5:be:
                    4e:83:26:08:fb:0b:bd:a9:4f:99:08:e1:10:28:72:
                    aa:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                OCSP - URI:http://ts-ocsp.ws.symantec.com
                CA Issuers - URI:http://ts-aia.ws.symantec.com/tss-ca-g2.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ts-crl.ws.symantec.com/tss-ca-g2.crl

            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-2
            X509v3 Subject Key Identifier: 
                46:C6:69:A3:0E:4A:14:1E:D5:4C:DA:52:63:17:3F:5E:36:BC:0D:E6
            X509v3 Authority Key Identifier: 
                keyid:5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD

    Signature Algorithm: sha1WithRSAEncryption
         78:3b:b4:91:2a:00:4c:f0:8f:62:30:37:78:a3:84:27:07:6f:
         18:b2:de:25:dc:a0:d4:94:03:aa:86:4e:25:9f:9a:40:03:1c:
         dd:ce:e3:79:cb:21:68:06:da:b6:32:b4:6d:bf:f4:2c:26:63:
         33:e4:49:64:6d:0d:e6:c3:67:0e:f7:05:a4:35:6c:7c:89:16:
         c6:e9:b2:df:b2:e9:dd:20:c6:71:0f:cd:95:74:dc:b6:5c:de:
         bd:37:1f:43:78:e6:78:b5:cd:28:04:20:a3:aa:f1:4b:c4:88:
         29:91:0e:80:d1:11:fc:dd:5c:76:6e:4f:5e:0e:45:46:41:6e:
         0d:b0:ea:38:9a:b1:3a:da:09:71:10:fc:1c:79:b4:80:7b:ac:
         69:f4:fd:9c:b6:0c:16:2b:f1:7f:5b:09:3d:9b:5b:e2:16:ca:
         13:81:6d:00:2e:38:0d:a8:29:8f:2c:e1:b2:f4:5a:a9:01:af:
         15:9c:2c:2f:49:1b:db:22:bb:c3:fe:78:94:51:c3:86:b1:82:
         88:5d:f0:3d:b4:51:a1:79:33:2b:2e:7b:b9:dc:20:09:13:71:
         eb:6a:19:5b:cf:e8:a5:30:57:2c:89:49:3f:b9:cf:7f:c9:bf:
         3e:22:68:63:53:9a:bd:69:74:ac:c5:1d:3c:7f:92:e0:c3:bc:
         1c:d8:04:75

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:1d:af:42:8d:58:4a:0d:b3:90:b0:80:fd:c3:b9:21
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA
        Validity
            Not Before: May  6 00:00:00 2016 GMT
            Not After : Jun  3 23:59:59 2017 GMT
        Subject: C=US, ST=North Carolina, L=MORRISVILLE, O=LENOVO (UNITED STATES) INC., CN=LENOVO (UNITED STATES) INC.
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:5e:c8:5e:d1:f8:81:7f:b6:c2:43:47:2c:40:
                    38:a4:18:25:8e:84:f2:fb:6e:9e:e8:65:17:d4:9b:
                    79:2d:ce:52:6e:0c:64:60:5a:b3:3b:72:fb:36:48:
                    df:55:d8:3d:17:01:b0:bc:3b:6e:9f:fa:d5:94:27:
                    25:23:6f:35:e5:62:48:04:bd:3d:cf:ef:12:00:e1:
                    f0:30:df:7b:1f:59:6b:c4:ea:76:62:31:6a:2f:ba:
                    f6:63:f2:8a:05:b3:8e:5b:b0:38:4d:cf:f6:8e:02:
                    9c:ea:9b:5f:9d:34:b8:36:c3:0d:09:49:c9:0c:09:
                    fd:86:f7:e4:b3:ca:d5:7f:01:54:4a:03:ea:02:13:
                    2f:13:11:fd:78:d2:b4:4b:3e:41:51:c1:30:44:cf:
                    79:12:f1:6e:13:2f:eb:64:2b:82:ce:4c:d3:68:71:
                    87:83:69:65:5b:88:1c:e7:d6:67:65:bf:7d:1c:96:
                    5a:1a:1d:8c:b4:53:08:4b:76:15:ce:7a:b4:27:1b:
                    04:bb:9e:ff:37:be:f6:44:7e:9d:a8:b8:c9:e1:dd:
                    4d:ce:77:f1:9d:76:ed:e4:31:81:1b:f6:3e:15:a8:
                    11:a6:bf:29:a4:09:2c:ac:d1:9b:9a:a7:dc:3c:49:
                    87:26:29:6c:09:3d:c5:3a:86:3b:5f:a5:2e:20:f1:
                    85:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://sf.symcb.com/sf.crl

            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.4.1
                  CPS: https://d.symcb.com/cps
                  User Notice:
                    Explicit Text: https://d.symcb.com/rpa

            X509v3 Extended Key Usage: 
                Code Signing
            Authority Information Access: 
                OCSP - URI:http://sf.symcd.com
                CA Issuers - URI:http://sf.symcb.com/sf.crt

            X509v3 Authority Key Identifier: 
                keyid:CF:99:A9:EA:7B:26:F4:4B:C9:8E:8F:D7:F0:05:26:EF:E3:D2:A7:9D

            X509v3 Subject Key Identifier: 
                F8:0D:55:3E:DE:A0:A1:FB:E4:35:CC:A7:AF:D1:A2:74:64:E0:3A:EB
    Signature Algorithm: sha1WithRSAEncryption
         05:28:9f:9b:bb:dc:7d:f2:dc:3c:da:76:2b:4c:86:39:e2:12:
         8c:71:1c:5e:c5:9e:18:c1:3f:90:28:b0:a0:e6:b7:64:9b:68:
         bd:b5:d9:70:60:c5:92:e6:8b:57:a9:44:8e:d9:66:1a:f9:20:
         03:90:c1:a0:97:9a:83:0b:ec:da:f6:74:da:27:a0:3c:57:9e:
         11:1e:f3:8c:3e:1b:fe:a2:55:28:45:24:24:88:d2:b5:af:f1:
         68:c6:6e:79:8a:bd:85:15:28:e3:00:2b:93:dd:2f:81:3b:d4:
         81:f8:84:85:c7:b8:79:f6:8c:3e:bf:87:e3:63:93:25:dc:15:
         a5:66:dd:13:18:23:6e:b4:79:15:78:22:af:17:b8:38:e4:00:
         de:bb:27:15:4c:e8:4d:23:49:6b:69:79:48:d0:31:95:d4:68:
         34:b2:d3:d4:07:66:8c:5c:d7:b6:92:7a:47:e0:b8:33:5b:b8:
         6f:0a:fa:62:1a:1a:6b:f1:a6:26:5a:f0:ef:00:72:89:c1:5c:
         e5:0f:27:25:b2:6c:cd:41:59:43:62:89:89:80:d4:f4:ce:05:
         9b:b4:82:9a:17:6a:c7:56:81:ac:24:90:4f:13:f6:02:2c:e9:
         e8:48:0c:4b:85:8f:70:76:76:3a:80:e2:21:6a:7e:82:dd:b0:
         25:71:d5:c3

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
        Validity
            Not Before: Feb  8 00:00:00 2010 GMT
            Not After : Feb  7 23:59:59 2020 GMT
        Subject: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:23:4b:5e:a5:d7:8a:bb:32:e9:d4:57:f7:ef:
                    e4:c7:26:7e:ad:19:98:fe:a8:9d:7d:94:f6:36:6b:
                    10:d7:75:81:30:7f:04:68:7f:cb:2b:75:1e:cd:1d:
                    08:8c:df:69:94:a7:37:a3:9c:7b:80:e0:99:e1:ee:
                    37:4d:5f:ce:3b:14:ee:86:d4:d0:f5:27:35:bc:25:
                    0b:38:a7:8c:63:9d:17:a3:08:a5:ab:b0:fb:cd:6a:
                    62:82:4c:d5:21:da:1b:d9:f1:e3:84:3b:8a:2a:4f:
                    85:5b:90:01:4f:c9:a7:76:10:7f:27:03:7c:be:ae:
                    7e:7d:c1:dd:f9:05:bc:1b:48:9c:69:e7:c0:a4:3c:
                    3c:41:00:3e:df:96:e5:c5:e4:94:71:d6:55:01:c7:
                    00:26:4a:40:3c:b5:a1:26:a9:0c:a7:6d:80:8e:90:
                    25:7b:cf:bf:3f:1c:eb:2f:96:fa:e5:87:77:c6:b5:
                    56:b2:7a:3b:54:30:53:1b:df:62:34:ff:1e:d1:f4:
                    5a:93:28:85:e5:4c:17:4e:7e:5b:fd:a4:93:99:7f:
                    df:cd:ef:a4:75:ef:ef:15:f6:47:e7:f8:19:72:d8:
                    2e:34:1a:a6:b4:a7:4c:7e:bd:bb:4f:0c:3d:57:f1:
                    30:d6:a6:36:8e:d6:80:76:d7:19:2e:a5:cd:7e:34:
                    2d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/cps
                  User Notice:
                    Explicit Text: https://www.verisign.com/rpa

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            1.3.6.1.5.5.7.1.12: 
                0_.].[0Y0W0U..image/gif0!0.0...+..............k...j.H.,{..0%.#http://logo.verisign.com/vslogo.gif
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.verisign.com/pca3-g5.crl

            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com

            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, Code Signing
            X509v3 Subject Alternative Name: 
                DirName:/CN=VeriSignMPKI-2-8
            X509v3 Subject Key Identifier: 
                CF:99:A9:EA:7B:26:F4:4B:C9:8E:8F:D7:F0:05:26:EF:E3:D2:A7:9D
            X509v3 Authority Key Identifier: 
                keyid:7F:D3:65:A7:C2:DD:EC:BB:F0:30:09:F3:43:39:FA:02:AF:33:31:33

    Signature Algorithm: sha1WithRSAEncryption
         56:22:e6:34:a4:c4:61:cb:48:b9:01:ad:56:a8:64:0f:d9:8c:
         91:c4:bb:cc:0c:e5:ad:7a:a0:22:7f:df:47:38:4a:2d:6c:d1:
         7f:71:1a:7c:ec:70:a9:b1:f0:4f:e4:0f:0c:53:fa:15:5e:fe:
         74:98:49:24:85:81:26:1c:91:14:47:b0:4c:63:8c:bb:a1:34:
         d4:c6:45:e8:0d:85:26:73:03:d0:a9:8c:64:6d:dc:71:92:e6:
         45:05:60:15:59:51:39:fc:58:14:6b:fe:d4:a4:ed:79:6b:08:
         0c:41:72:e7:37:22:06:09:be:23:e9:3f:44:9a:1e:e9:61:9d:
         cc:b1:90:5c:fc:3d:d2:8d:ac:42:3d:65:36:d4:b4:3d:40:28:
         8f:9b:10:cf:23:26:cc:4b:20:cb:90:1f:5d:8c:4c:34:ca:3c:
         d8:e5:37:d6:6f:a5:20:bd:34:eb:26:d9:ae:0d:e7:c5:9a:f7:
         a1:b4:21:91:33:6f:86:e8:58:bb:25:7c:74:0e:58:fe:75:1b:
         63:3f:ce:31:7c:9b:8f:1b:96:9e:c5:53:76:84:5b:9c:ad:91:
         fa:ac:ed:93:ba:5d:c8:21:53:c2:82:53:63:af:12:0d:50:87:
         11:1b:3d:54:52:96:8a:2c:9c:3d:92:1a:08:9a:05:2e:c7:93:
         a5:48:91:d3

pkcs7-signedData

SHA1: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15
- :

SHA1

0e 38 21 0c 2f b8 4b 59 03 72 6a bf d9 dd 4c c3 |.8!./.KY.rj...L.| 2a 67 37 86 |*g7. |

Certificates
- Certificate #0
  - 2
    - 7E:93:EB:FB:7C:C6:4E:59:EA:4B:9A:77:D4:06:FC:3B
    - RSA-SHA1: nil
    - Issuer
      - C: ZA
      - ST: Western Cape
      - L: Durbanville
      - O: Thawte
      - OU: Thawte Certification
      - CN: Thawte Timestamping CA
    - 2012-12-21 00:00:00 UTC: 2020-12-30 23:59:59 UTC
    - Subject
      - C: US
      - O: Symantec Corporation
      - CN: Symantec Time Stamping Services CA - G2
    - #5
      - rsaEncryption: nil
      - B1:AC:B3:49:54:4B:97:1C:12:0A:D8:25:79:91:22:57:
        2A:6F:DC:B8:26:C4:43:73:6B:C2:BF:2E:50:5A:FB:14:
        C2:76:8E:43:01:25:43:B4:A1:E2:45:F4:E8:B7:7B:C3:
        74:CC:22:D7:B4:94:00:02:F7:4D:ED:BF:B4:B7:44:24:
        6B:CD:5F:45:3B:D1:44:CE:43:12:73:17:82:8B:69:B4:
        2B:CB:99:1E:AC:72:1B:26:4D:71:1F:B1:31:DD:FB:51:
        61:02:53:A6:AA:F5:49:2C:05:78:45:A5:2F:89:CE:E7:
        99:E7:FE:8C:E2:57:3F:3D:C6:92:DC:4A:F8:7B:33:E4:
        79:0A:FB:F0:75:88:41:9C:FF:C5:03:51:99:AA:D7:6C:
        9F:93:69:87:65:29:83:85:C2:60:14:C4:C8:C9:3B:14:
        DA:C0:81:F0:1F:0D:74:DE:92:22:AB:CA:F7:FB:74:7C:
        27:E6:F7:4A:1B:7F:A7:C3:9E:2D:AE:8A:EA:A6:E6:AA:
        27:16:7D:61:F7:98:71:11:BC:E2:50:A1:4B:E5:5D:FA:
        E5:0E:A7:2C:9F:AA:65:20:D3:D8:96:E8:C8:7C:A5:4E:
        48:44:FF:19:E2:44:07:92:0B:D7:68:84:80:5D:6A:78:
        64:45:CD:60:46:7E:54:C1:13:7C:C5:79:F1:C9:C1:71: 0x010001
    - #6
      - subjectKeyIdentifier:
        5f 9a f5 6e 5c cc cc 74 9a d4 dd 7d ef 3f db ec |_..n\..t...}.?..| 4c 80 2e dd |L... |
      - authorityInfoAccess
        OCSP: http://ocsp.thawte.com
      - basicConstraints
        true
        true: 0
      - crlDistributionPoints: http://crl.thawte.com/ThawteTimestampingCA.crl
      - extendedKeyUsage: timeStamping
      - keyUsage: true, 6
      - subjectAltName
        CN: TimeStamp-2048-1
  - RSA-SHA1:
```
03 09 9b 8f 79 ef 7f 59  30 aa ef 68 b5 fa e3 09  |....y..Y0..h....|
1d bb 4f 82 06 5d 37 5f  a6 52 9f 16 8d ea 1c 92  |..O..]7_.R......|
09 44 6e f5 6d eb 58 7c  30 e8 f9 69 8d 23 73 0b  |.Dn.m.X|0..i.#s.|
12 6f 47 a9 ae 39 11 f8  2a b1 9b b0 1a c3 8e eb  |.oG..9..*.......|
59 96 00 ad ce 0c 4d b2  d0 31 a6 08 5c 2a 7a fc  |Y.....M..1..\*z.|
e2 7a 1d 57 4c a8 65 18  e9 79 40 62 25 96 6e c7  |.z.WL.e..y@b%.n.|
c7 37 6a 83 21 08 8e 41  ea dd d9 57 3f 1d 77 49  |.7j.!..A...W?.wI|
87 2a 16 06 5e a6 38 6a  22 12 a3 51 19 83 7e b6  |.*..^.8j"..Q..~.|
```
- Certificate #1
  - 2
    - 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - O: Symantec Corporation
      - CN: Symantec Time Stamping Services CA - G2
    - 2012-10-18 00:00:00 UTC: 2020-12-29 23:59:59 UTC
    - Subject
      - C: US
      - O: Symantec Corporation
      - CN: Symantec Time Stamping Services Signer - G4
    - #5
      - rsaEncryption: nil
      - A2:63:0B:39:44:B8:BB:23:A7:44:49:BB:0E:FF:A1:F0:
        61:0A:53:93:B0:98:DB:AD:2C:0F:4A:C5:6E:FF:86:3C:
        53:55:0F:15:CE:04:3F:2B:FD:A9:96:96:D9:BE:61:79:
        0B:5B:C9:4C:86:76:E5:E0:43:4B:22:95:EE:C2:2B:43:
        C1:9F:D8:68:B4:8E:40:4F:EE:85:38:B9:11:C5:23:F2:
        64:58:F0:15:32:6F:4E:57:A1:AE:88:A4:02:D7:2A:1E:
        CD:4B:E1:DD:63:D5:17:89:32:5B:B0:5E:99:5A:A8:9D:
        28:50:0E:17:EE:96:DB:61:3B:45:51:1D:CF:12:56:0B:
        92:47:FC:AB:AE:F6:66:3D:47:AC:70:72:E7:92:E7:5F:
        CD:10:B9:C4:83:64:94:19:BD:25:80:E1:E8:D2:22:A5:
        D0:BA:02:7A:A1:77:93:5B:65:C3:EE:17:74:BC:41:86:
        2A:DC:08:4C:8C:92:8C:91:2D:9E:77:44:1F:68:D6:A8:
        74:77:DB:0E:5B:32:8B:56:8B:33:BD:D9:63:C8:49:9D:
        3A:C5:C5:EA:33:0B:D2:F1:A3:1B:F4:8B:BE:D9:B3:57:
        8B:3B:DE:04:A7:7A:22:B2:24:AE:2E:C7:70:C5:BE:4E:
        83:26:08:FB:0B:BD:A9:4F:99:08:E1:10:28:72:AA:CD: 0x010001
    - X509v3 extensions
      - basicConstraints
        true
        nil
      - extendedKeyUsage: true, timeStamping
      - keyUsage: true, 0x80
      - authorityInfoAccess
        #0
        OCSP: http://ts-ocsp.ws.symantec.com
        caIssuers: http://ts-aia.ws.symantec.com/tss-ca-g2.cer
      - crlDistributionPoints: http://ts-crl.ws.symantec.com/tss-ca-g2.crl
      - subjectAltName
        CN: TimeStamp-2048-2
      - subjectKeyIdentifier:
        46 c6 69 a3 0e 4a 14 1e d5 4c da 52 63 17 3f 5e |F.i..J...L.Rc.?^| 36 bc 0d e6 |6... |
      - authorityKeyIdentifier:
        5f 9a f5 6e 5c cc cc 74 9a d4 dd 7d ef 3f db ec |_..n\..t...}.?..| 4c 80 2e dd |L... |
  - RSA-SHA1:
```
78 3b b4 91 2a 00 4c f0  8f 62 30 37 78 a3 84 27  |x;..*.L..b07x..'|
07 6f 18 b2 de 25 dc a0  d4 94 03 aa 86 4e 25 9f  |.o...%.......N%.|
9a 40 03 1c dd ce e3 79  cb 21 68 06 da b6 32 b4  |.@.....y.!h...2.|
6d bf f4 2c 26 63 33 e4  49 64 6d 0d e6 c3 67 0e  |m..,&c3.Idm...g.|
f7 05 a4 35 6c 7c 89 16  c6 e9 b2 df b2 e9 dd 20  |...5l|......... |
c6 71 0f cd 95 74 dc b6  5c de bd 37 1f 43 78 e6  |.q...t..\..7.Cx.|
78 b5 cd 28 04 20 a3 aa  f1 4b c4 88 29 91 0e 80  |x..(. ...K..)...|
d1 11 fc dd 5c 76 6e 4f  5e 0e 45 46 41 6e 0d b0  |....\vnO^.EFAn..|
ea 38 9a b1 3a da 09 71  10 fc 1c 79 b4 80 7b ac  |.8..:..q...y..{.|
69 f4 fd 9c b6 0c 16 2b  f1 7f 5b 09 3d 9b 5b e2  |i......+..[.=.[.|
16 ca 13 81 6d 00 2e 38  0d a8 29 8f 2c e1 b2 f4  |....m..8..).,...|
5a a9 01 af 15 9c 2c 2f  49 1b db 22 bb c3 fe 78  |Z.....,/I.."...x|
94 51 c3 86 b1 82 88 5d  f0 3d b4 51 a1 79 33 2b  |.Q.....].=.Q.y3+|
2e 7b b9 dc 20 09 13 71  eb 6a 19 5b cf e8 a5 30  |.{.. ..q.j.[...0|
57 2c 89 49 3f b9 cf 7f  c9 bf 3e 22 68 63 53 9a  |W,.I?.....>"hcS.|
bd 69 74 ac c5 1d 3c 7f  92 e0 c3 bc 1c d8 04 75  |.it...<........u|
```
- Certificate #2
  - 2
    - 5C:1D:AF:42:8D:58:4A:0D:B3:90:B0:80:FD:C3:B9:21
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - O: VeriSign, Inc.
      - OU: VeriSign Trust Network
      - OU: Terms of use at https://www.verisign.com/rpa (c)10
      - CN: VeriSign Class 3 Code Signing 2010 CA
    - 2016-05-06 00:00:00 UTC: 2017-06-03 23:59:59 UTC
    - Subject
      - C: US
      - ST: North Carolina
      - L: MORRISVILLE
      - O: LENOVO (UNITED STATES) INC.
      - CN: LENOVO (UNITED STATES) INC.
    - #5
      - rsaEncryption: nil
      - 93:5E:C8:5E:D1:F8:81:7F:B6:C2:43:47:2C:40:38:A4:
        18:25:8E:84:F2:FB:6E:9E:E8:65:17:D4:9B:79:2D:CE:
        52:6E:0C:64:60:5A:B3:3B:72:FB:36:48:DF:55:D8:3D:
        17:01:B0:BC:3B:6E:9F:FA:D5:94:27:25:23:6F:35:E5:
        62:48:04:BD:3D:CF:EF:12:00:E1:F0:30:DF:7B:1F:59:
        6B:C4:EA:76:62:31:6A:2F:BA:F6:63:F2:8A:05:B3:8E:
        5B:B0:38:4D:CF:F6:8E:02:9C:EA:9B:5F:9D:34:B8:36:
        C3:0D:09:49:C9:0C:09:FD:86:F7:E4:B3:CA:D5:7F:01:
        54:4A:03:EA:02:13:2F:13:11:FD:78:D2:B4:4B:3E:41:
        51:C1:30:44:CF:79:12:F1:6E:13:2F:EB:64:2B:82:CE:
        4C:D3:68:71:87:83:69:65:5B:88:1C:E7:D6:67:65:BF:
        7D:1C:96:5A:1A:1D:8C:B4:53:08:4B:76:15:CE:7A:B4:
        27:1B:04:BB:9E:FF:37:BE:F6:44:7E:9D:A8:B8:C9:E1:
        DD:4D:CE:77:F1:9D:76:ED:E4:31:81:1B:F6:3E:15:A8:
        11:A6:BF:29:A4:09:2C:AC:D1:9B:9A:A7:DC:3C:49:87:
        26:29:6C:09:3D:C5:3A:86:3B:5F:A5:2E:20:F1:85:79: 0x010001
    - X509v3 extensions
      - basicConstraints
        nil
      - keyUsage: true, 0x80
      - crlDistributionPoints: http://sf.symcb.com/sf.crl
      - certificatePolicies
        2.23.140.1.4.1
        #0
        id-qt-cps: https://d.symcb.com/cps
        id-qt-unotice: https://d.symcb.com/rpa
      - extendedKeyUsage: codeSigning
      - authorityInfoAccess
        #0
        OCSP: http://sf.symcd.com
        caIssuers: http://sf.symcb.com/sf.crt
      - authorityKeyIdentifier:
        cf 99 a9 ea 7b 26 f4 4b c9 8e 8f d7 f0 05 26 ef |....{&.K......&.| e3 d2 a7 9d |.... |
      - subjectKeyIdentifier:
        f8 0d 55 3e de a0 a1 fb e4 35 cc a7 af d1 a2 74 |..U>.....5.....t| 64 e0 3a eb |d.:. |
  - RSA-SHA1:
```
05 28 9f 9b bb dc 7d f2  dc 3c da 76 2b 4c 86 39  |.(....}..<.v+L.9|
e2 12 8c 71 1c 5e c5 9e  18 c1 3f 90 28 b0 a0 e6  |...q.^....?.(...|
b7 64 9b 68 bd b5 d9 70  60 c5 92 e6 8b 57 a9 44  |.d.h...p`....W.D|
8e d9 66 1a f9 20 03 90  c1 a0 97 9a 83 0b ec da  |..f.. ..........|
f6 74 da 27 a0 3c 57 9e  11 1e f3 8c 3e 1b fe a2  |.t.'....|
55 28 45 24 24 88 d2 b5  af f1 68 c6 6e 79 8a bd  |U(E$$.....h.ny..|
85 15 28 e3 00 2b 93 dd  2f 81 3b d4 81 f8 84 85  |..(..+../.;.....|
c7 b8 79 f6 8c 3e bf 87  e3 63 93 25 dc 15 a5 66  |..y..>...c.%...f|
dd 13 18 23 6e b4 79 15  78 22 af 17 b8 38 e4 00  |...#n.y.x"...8..|
de bb 27 15 4c e8 4d 23  49 6b 69 79 48 d0 31 95  |..'.L.M#IkiyH.1.|
d4 68 34 b2 d3 d4 07 66  8c 5c d7 b6 92 7a 47 e0  |.h4....f.\...zG.|
b8 33 5b b8 6f 0a fa 62  1a 1a 6b f1 a6 26 5a f0  |.3[.o..b..k..&Z.|
ef 00 72 89 c1 5c e5 0f  27 25 b2 6c cd 41 59 43  |..r..\..'%.l.AYC|
62 89 89 80 d4 f4 ce 05  9b b4 82 9a 17 6a c7 56  |b............j.V|
81 ac 24 90 4f 13 f6 02  2c e9 e8 48 0c 4b 85 8f  |..$.O...,..H.K..|
70 76 76 3a 80 e2 21 6a  7e 82 dd b0 25 71 d5 c3  |pvv:..!j~...%q..|
```
- Certificate #3
  - 2
    - 52:00:E5:AA:25:56:FC:1A:86:ED:96:C9:D4:4B:33:C7
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - O: VeriSign, Inc.
      - OU: VeriSign Trust Network
      - OU: (c) 2006 VeriSign, Inc. - For authorized use only
      - CN: VeriSign Class 3 Public Primary Certification Authority - G5
    - 2010-02-08 00:00:00 UTC: 2020-02-07 23:59:59 UTC
    - Subject
      - C: US
      - O: VeriSign, Inc.
      - OU: VeriSign Trust Network
      - OU: Terms of use at https://www.verisign.com/rpa (c)10
      - CN: VeriSign Class 3 Code Signing 2010 CA
    - #5
      - rsaEncryption: nil
      - F5:23:4B:5E:A5:D7:8A:BB:32:E9:D4:57:F7:EF:E4:C7:
        26:7E:AD:19:98:FE:A8:9D:7D:94:F6:36:6B:10:D7:75:
        81:30:7F:04:68:7F:CB:2B:75:1E:CD:1D:08:8C:DF:69:
        94:A7:37:A3:9C:7B:80:E0:99:E1:EE:37:4D:5F:CE:3B:
        14:EE:86:D4:D0:F5:27:35:BC:25:0B:38:A7:8C:63:9D:
        17:A3:08:A5:AB:B0:FB:CD:6A:62:82:4C:D5:21:DA:1B:
        D9:F1:E3:84:3B:8A:2A:4F:85:5B:90:01:4F:C9:A7:76:
        10:7F:27:03:7C:BE:AE:7E:7D:C1:DD:F9:05:BC:1B:48:
        9C:69:E7:C0:A4:3C:3C:41:00:3E:DF:96:E5:C5:E4:94:
        71:D6:55:01:C7:00:26:4A:40:3C:B5:A1:26:A9:0C:A7:
        6D:80:8E:90:25:7B:CF:BF:3F:1C:EB:2F:96:FA:E5:87:
        77:C6:B5:56:B2:7A:3B:54:30:53:1B:DF:62:34:FF:1E:
        D1:F4:5A:93:28:85:E5:4C:17:4E:7E:5B:FD:A4:93:99:
        7F:DF:CD:EF:A4:75:EF:EF:15:F6:47:E7:F8:19:72:D8:
        2E:34:1A:A6:B4:A7:4C:7E:BD:BB:4F:0C:3D:57:F1:30:
        D6:A6:36:8E:D6:80:76:D7:19:2E:A5:CD:7E:34:2D:89: 0x010001
    - X509v3 extensions
      - basicConstraints
        true
        true: 0
      - certificatePolicies
        2.16.840.1.113733.1.7.23.3
        #0
        id-qt-cps: https://www.verisign.com/cps
        id-qt-unotice: https://www.verisign.com/rpa
      - keyUsage: true, 6
      - 1.3.6.1.5.5.7.1.12
        image/gif
        SHA1:
        8f e5 d3 1a 86 ac 8d 8e 6b c3 cf 80 6a d4 48 18 |........k...j.H.| 2c 7b 19 2e |,{.. |
        http://logo.verisign.com/vslogo.gif
      - crlDistributionPoints: http://crl.verisign.com/pca3-g5.crl
      - authorityInfoAccess
        OCSP: http://ocsp.verisign.com
      - extendedKeyUsage
        clientAuth: codeSigning
      - subjectAltName
        CN: VeriSignMPKI-2-8
      - subjectKeyIdentifier:
        cf 99 a9 ea 7b 26 f4 4b c9 8e 8f d7 f0 05 26 ef |....{&.K......&.| e3 d2 a7 9d |.... |
      - authorityKeyIdentifier:
        7f d3 65 a7 c2 dd ec bb f0 30 09 f3 43 39 fa 02 |..e......0..C9..| af 33 31 33 |.313 |
  - RSA-SHA1:
```
56 22 e6 34 a4 c4 61 cb  48 b9 01 ad 56 a8 64 0f  |V".4..a.H...V.d.|
d9 8c 91 c4 bb cc 0c e5  ad 7a a0 22 7f df 47 38  |.........z."..G8|
4a 2d 6c d1 7f 71 1a 7c  ec 70 a9 b1 f0 4f e4 0f  |J-l..q.|.p...O..|
0c 53 fa 15 5e fe 74 98  49 24 85 81 26 1c 91 14  |.S..^.t.I$..&...|
47 b0 4c 63 8c bb a1 34  d4 c6 45 e8 0d 85 26 73  |G.Lc...4..E...&s|
03 d0 a9 8c 64 6d dc 71  92 e6 45 05 60 15 59 51  |....dm.q..E.`.YQ|
39 fc 58 14 6b fe d4 a4  ed 79 6b 08 0c 41 72 e7  |9.X.k....yk..Ar.|
37 22 06 09 be 23 e9 3f  44 9a 1e e9 61 9d cc b1  |7"...#.?D...a...|
90 5c fc 3d d2 8d ac 42  3d 65 36 d4 b4 3d 40 28  |.\.=...B=e6..=@(|
8f 9b 10 cf 23 26 cc 4b  20 cb 90 1f 5d 8c 4c 34  |....#&.K ...].L4|
ca 3c d8 e5 37 d6 6f a5  20 bd 34 eb 26 d9 ae 0d  |.<..7.o. .4.&...|
e7 c5 9a f7 a1 b4 21 91  33 6f 86 e8 58 bb 25 7c  |......!.3o..X.%||
74 0e 58 fe 75 1b 63 3f  ce 31 7c 9b 8f 1b 96 9e  |t.X.u.c?.1|.....|
c5 53 76 84 5b 9c ad 91  fa ac ed 93 ba 5d c8 21  |.Sv.[........].!|
53 c2 82 53 63 af 12 0d  50 87 11 1b 3d 54 52 96  |S..Sc...P...=TR.|
8a 2c 9c 3d 92 1a 08 9a  05 2e c7 93 a5 48 91 d3  |.,.=.........H..|
```

Signer

1
unnamed
- #0
  - C: US
  - O: VeriSign, Inc.
  - OU: VeriSign Trust Network
  - OU: Terms of use at https://www.verisign.com/rpa (c)10
  - CN: VeriSign Class 3 Code Signing 2010 CA
- 5C:1D:AF:42:8D:58:4A:0D:B3:90:B0:80:FD:C3:B9:21
SHA1: nil

1.3.6.1.4.1.311.2.1.12
- nil
contentType: 1.3.6.1.4.1.311.2.1.4
1.3.6.1.4.1.311.2.1.11: msCodeInd

messageDigest:

80 17 5a 19 24 a7 0f f3  24 8c 54 cf 3e 43 d5 92  |..Z.$...$.T.>C..|
f7 1c 24 b5                                       |..$.            |

rsaEncryption:

7c 83 d0 27 b4 47 d5 60  d9 58 dc d7 1f b5 92 02  ||..'.G.`.X......|
2c 19 34 43 86 cd 99 e1  fb ac 24 cc 56 88 9d a3  |,.4C......$.V...|
cd 4a 3b a4 b3 07 87 17  40 eb cf e7 fc de 3e 3f  |.J;.....@.....>?|
4b 8c 35 96 e6 8b fa c1  4f 91 92 8f b5 6d 3b a8  |K.5.....O....m;.|
8b 9f 19 eb 5c cf 56 84  b1 9c bb 50 b1 f3 19 20  |....\.V....P... |
55 d1 25 2f b3 1c ee 72  75 a2 c3 69 14 06 87 b6  |U.%/...ru..i....|
1f 61 47 36 f8 10 e7 19  95 ca 0c 20 9c 37 e3 f7  |.aG6....... .7..|
7a 0c 58 92 f0 ce 26 d8  c2 92 f3 00 59 df ee 7b  |z.X...&.....Y..{|
66 25 94 db d4 65 bb a1  26 ef 55 aa 79 83 73 e1  |f%...e..&.U.y.s.|
2e c5 2f 26 5a ae 60 1e  b9 7d 7a 05 1e 55 73 da  |../&Z.`..}z..Us.|
9d a0 49 4f 2d 8f f8 ae  07 a5 5d 47 c0 b1 8d 6e  |..IO-.....]G...n|
ec 1d 9f da e8 a8 41 c8  11 d3 e9 42 39 b9 1b 6b  |......A....B9..k|
77 bf 1b 11 cc 38 3f f0  50 5f 4d 62 11 c2 38 a5  |w....8?.P_Mb..8.|
c1 e9 77 66 6c 2f 89 20  29 25 dd 47 78 35 ba 68  |..wfl/. )%.Gx5.h|
70 e6 a0 c0 ac 08 05 4c  64 ad be 27 b6 db c3 85  |p......Ld..'....|
2d f2 1b c4 b3 af 4f d5  02 5d bb 97 26 4b af 87  |-.....O..]..&K..|

countersignature

unnamed
- #0
  - C: US
  - O: Symantec Corporation
  - CN: Symantec Time Stamping Services CA - G2
- 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
SHA1: nil

contentType: pkcs7-data
signingTime: 2017-01-19 09:53:42 UTC

messageDigest:

3e 81 7d 95 1e fb ea c0  ab b0 11 09 bf f5 18 30  |>.}............0|
a8 4c 85 d3                                       |.L..            |

rsaEncryption:

9a 38 7b 54 fd 31 13 fc  0b 19 25 0f a3 52 6e 84  |.8{T.1....%..Rn.|
56 be 5e 3f e7 66 42 50  47 69 0e 90 60 11 fe 94  |V.^?.fBPGi..`...|
07 19 70 c7 36 9d a8 ad  56 44 79 a6 67 96 46 f2  |..p.6...VDy.g.F.|
29 65 f2 03 a7 9d a4 b1  a0 35 ab 49 6f 9a 3d 6b  |)e.......5.Io.=k|
f1 ac c5 2f 15 e4 b6 f6  fb 28 d7 a7 cc bd 7e 34  |.../.....(....~4|
92 34 37 12 41 d0 d4 fd  c3 c3 b0 75 03 71 3a cc  |.47.A......u.q:.|
a5 5a 20 fa 65 ff 8b 0b  3c b6 32 e3 80 69 26 1d  |.Z .e...<.2..i&.|
37 88 63 d7 82 c2 2b df  76 8f 84 a8 c4 c6 a6 f4  |7.c...+.v.......|
3b c1 70 bb 05 0c 2a fa  fd fd 10 1e 08 17 3b 23  |;.p...*.......;#|
65 a3 2a 4d 63 80 08 a1  06 e6 f5 73 9d 81 96 d3  |e.*Mc......s....|
ba 09 2d c6 ad 53 7a 3d  5a 4c ed 10 a0 c5 33 74  |..-..Sz=ZL....3t|
32 97 ec de 8b 98 80 14  ab 43 b6 21 11 fc 3b bb  |2........C.!..;.|
cf 9e b2 d6 dd ca 90 ac  97 b8 29 76 8c 0c 92 b8  |..........)v....|
7e 3b 64 1a 6f 35 5b d8  89 72 fd eb 07 e1 a3 6d  |~;d.o5[..r.....m|
7c 79 93 fd e1 95 a2 f8  64 81 e2 ef f2 c3 2c 26  ||y......d.....,&|
91 c8 a0 1b ec 4c 1b 08  09 cf 71 f4 5c cc 62 65  |.....L....q.\.be|

1.3.6.1.4.1.311.2.4.1

pkcs7-signedData

SHA256: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15
- :

SHA256

99 14 7a 1a 19 a9 c8 23 ae 91 72 84 06 2e 62 37 |..z....#..r...b7| d3 c4 c5 10 36 11 bc 75 c7 b7 2b a9 40 63 72 5b |....6..u..+.@cr[|

Certificates
- Certificate #0
  - 2
    - 48:20:91:4F:E0:C3:5F:96:2C:35:2D:D2:BC:FF:91:5C
    - RSA-SHA256: nil
    - Issuer
      - C: US
      - O: Symantec Corporation
      - OU: Symantec Trust Network
      - CN: Symantec Class 3 SHA256 Code Signing CA
    - 2016-05-05 00:00:00 UTC: 2017-06-03 23:59:59 UTC
    - Subject
      - C: US
      - ST: North Carolina
      - L: MORRISVILLE
      - O: LENOVO (UNITED STATES) INC.
      - CN: LENOVO (UNITED STATES) INC.
    - #5
      - rsaEncryption: nil
      - C1:AE:0A:24:FF:73:2B:0B:02:33:47:72:7C:42:46:8C:
        89:2A:9A:78:4A:AD:9D:DF:69:AD:DC:01:86:60:5A:82:
        2E:10:6C:62:4C:01:C0:3E:74:31:91:7E:58:8D:68:17:
        B2:CF:C3:58:ED:E2:90:0C:E2:93:8F:73:8A:FD:5E:FE:
        05:0C:F3:9D:9E:99:2C:D9:92:AB:99:90:C1:BC:98:77:
        33:F3:F6:F6:11:59:F4:5C:2F:60:7B:D8:8A:00:A9:A4:
        DB:0A:26:64:EC:EF:66:CA:5C:02:1C:DE:CA:F8:2A:85:
        18:E7:17:64:7C:CA:30:7C:09:71:DF:22:D6:6F:87:89:
        01:BE:87:12:DB:3B:ED:96:DC:9B:32:FF:AC:18:FA:AF:
        EA:53:0B:40:5D:DB:FF:B3:B6:EE:ED:E7:1C:0A:71:D3:
        EB:95:7F:9B:F8:3C:BC:77:5A:68:60:04:E9:3A:2E:D4:
        A9:49:FA:F7:BB:B0:61:F3:F4:AD:A2:43:66:53:76:76:
        75:0F:28:EC:E5:E9:DA:D4:88:83:22:A3:0D:B9:5D:D7:
        20:A0:F0:7A:50:0D:DB:35:5E:DC:07:A4:B7:8A:20:6B:
        5A:10:E3:01:D9:71:CA:F0:CB:65:82:3E:9B:4A:AC:3F:
        F6:E1:28:5D:87:D9:F3:FA:6F:8A:D3:5F:B1:70:F3:D7: 0x010001
    - X509v3 extensions
      - basicConstraints
        nil
      - keyUsage: true, 0x80
      - crlDistributionPoints: http://sv.symcb.com/sv.crl
      - certificatePolicies
        2.23.140.1.4.1
        #0
        id-qt-cps: https://d.symcb.com/cps
        id-qt-unotice: https://d.symcb.com/rpa
      - extendedKeyUsage: codeSigning
      - authorityInfoAccess
        #0
        OCSP: http://sv.symcd.com
        caIssuers: http://sv.symcb.com/sv.crt
      - authorityKeyIdentifier:
        96 3b 53 f0 79 33 97 af 7d 83 ef 2e 2b cc ca b7 |.;S.y3..}...+...| 86 1e 72 66 |..rf |
      - subjectKeyIdentifier:
        b8 75 37 3d dd ba 00 34 9f 9a f3 d5 b7 9a 2d 1a |.u7=...4......-.| 41 f1 7c ed |A.|. |
  - RSA-SHA256:
```
1f 0a bd da 94 00 df 68  c0 bd 6c 48 23 58 3d a9  |.......h..lH#X=.|
c4 54 b8 a7 da a1 20 7d  9d 9b 41 0a 4f 4b 2b fa  |.T.... }..A.OK+.|
cd 91 d2 a4 15 36 70 b3  d4 c9 73 02 27 cb d5 61  |.....6p...s.'..a|
71 42 01 60 50 30 b2 59  4d 30 47 f5 79 3f 6c aa  |qB.`P0.YM0G.y?l.|
7f f1 74 a2 1a 06 de e9  54 a2 95 46 66 a0 69 e1  |..t.....T..Ff.i.|
ff 30 c5 6d a6 26 61 19  cc 1b 61 60 ed a7 4b 58  |.0.m.&a...a`..KX|
ea 68 69 3a 0f fc 4d 23  10 62 17 a8 19 1e 8c 41  |.hi:..M#.b.....A|
25 19 18 83 a9 65 7a 7b  92 5f ed ed e2 7f 33 52  |%....ez{._....3R|
f9 73 93 a4 55 5a 46 19  5a 4d 6a 76 05 5f a4 19  |.s..UZF.ZMjv._..|
ec 86 72 ab 53 0d 8d 95  45 09 f7 0f 43 e5 78 6d  |..r.S...E...C.xm|
5d 5d 88 68 b0 2b f3 dd  b9 a2 de fe 90 99 e7 68  |]].h.+.........h|
b5 cd fd ff 39 99 f7 83  7c ab 66 6e 65 34 55 56  |....9...|.fne4UV|
6a 88 b3 82 ef fe 66 7a  dc 7e 58 69 4b 18 25 37  |j.....fz.~XiK.%7|
6d 37 a6 5a 0f d6 6d 49  5e f6 40 32 61 e9 da 18  |m7.Z..mI^.@2a...|
5f dd 73 4c 5a ce b9 c0  be 0a 54 03 c4 d2 e1 20  |_.sLZ.....T.... |
f6 67 85 d2 41 83 c2 d1  6c e7 67 71 db b7 95 4f  |.g..A...l.gq...O|
```
- Certificate #1
  - 2
    - 3D:78:D7:F9:76:49:60:B2:61:7D:F4:F0:1E:CA:86:2A
    - RSA-SHA256: nil
    - Issuer
      - C: US
      - O: VeriSign, Inc.
      - OU: VeriSign Trust Network
      - OU: (c) 2006 VeriSign, Inc. - For authorized use only
      - CN: VeriSign Class 3 Public Primary Certification Authority - G5
    - 2013-12-10 00:00:00 UTC: 2023-12-09 23:59:59 UTC
    - Subject
      - C: US
      - O: Symantec Corporation
      - OU: Symantec Trust Network
      - CN: Symantec Class 3 SHA256 Code Signing CA
    - #5
      - rsaEncryption: nil
      - 97:83:1E:00:16:AF:2C:B1:D2:08:C4:D7:68:93:51:60:
        1E:71:F6:E2:47:B4:DB:58:4D:23:62:6A:B4:BF:5A:1B:
        51:F7:A3:0D:18:77:68:BB:D8:36:AB:2F:21:50:DA:9E:
        F3:E7:5F:27:4E:0B:C2:97:C8:09:70:93:A9:DA:5C:0D:
        4E:A4:0D:91:A0:B4:EC:14:CE:91:72:54:2E:CE:A3:DB:
        44:E9:52:1B:3F:41:3C:CA:4A:E4:AA:C0:E8:39:AB:53:
        CC:21:D0:CC:CF:7F:9B:E6:C2:CC:58:6A:82:15:EE:3D:
        36:CF:1C:C5:97:07:24:8E:F1:7B:BE:31:2D:3D:6E:DC:
        B5:99:42:9F:4B:61:95:5F:1C:70:EE:17:7D:DB:8B:E5:
        61:89:78:C7:68:1B:AF:11:78:1A:98:AE:C4:55:47:53:
        D9:B3:32:D6:A1:0E:46:40:C5:97:92:8A:D1:53:A7:99:
        5B:85:35:57:D3:EA:93:62:61:20:0A:C7:30:77:24:11:
        4D:62:83:B6:BA:7B:68:82:31:EE:65:CA:DF:F9:D5:8D:
        B2:35:DC:8C:2B:6F:6A:72:5C:60:84:9C:F2:0C:94:5E:
        C0:56:52:00:48:CC:D3:F8:A5:7D:DE:2F:D7:13:E4:38:
        A8:84:D5:46:B8:13:86:C2:1B:9D:EA:5A:38:DD:9B:DB: 0x010001
    - X509v3 extensions
      - authorityInfoAccess
        OCSP: http://s2.symcb.com
      - basicConstraints
        true
        true: 0
      - certificatePolicies
        2.16.840.1.113733.1.7.23.3
        #0
        id-qt-cps: http://www.symauth.com/cps
        id-qt-unotice: http://www.symauth.com/rpa
      - crlDistributionPoints: http://s1.symcb.com/pca3-g5.crl
      - extendedKeyUsage
        clientAuth: codeSigning
      - keyUsage: true, 6
      - subjectAltName
        CN: SymantecPKI-1-567
      - subjectKeyIdentifier:
        96 3b 53 f0 79 33 97 af 7d 83 ef 2e 2b cc ca b7 |.;S.y3..}...+...| 86 1e 72 66 |..rf |
      - authorityKeyIdentifier:
        7f d3 65 a7 c2 dd ec bb f0 30 09 f3 43 39 fa 02 |..e......0..C9..| af 33 31 33 |.313 |
  - RSA-SHA256:
```
13 85 1a 1e 69 a9 37 f7  a0 bd a4 af 7e 1d 61 53  |....i.7.....~.aS|
fe 9d 8c 5e 0c a6 75 1e  78 17 23 dd fd ec 1a 03  |...^..u.x.#.....|
55 39 fb 71 95 c7 65 5a  a7 8e 30 d2 44 5a 61 db  |U9.q..eZ..0.DZa.|
70 6f da 21 05 c2 2e 73  ba 49 f1 d1 93 fe 5d c9  |po.!...s.I....].|
cd 5e 03 e0 89 9e 3f 74  1e d7 f7 38 8b a9 d6 cf  |.^....?t...8....|
bb 35 2f 33 58 a8 92 56  d1 c8 4d 3b 82 e6 79 84  |.5/3X..V..M;..y.|
16 fc 28 b0 b1 47 f3 1d  a2 3e ee 87 d9 a6 7f a4  |..(..G...>......|
56 a5 3f ad 84 2e 29 de  7c bc a8 aa a3 3d 04 01  |V.?...).|....=..|
ea ba 93 a2 0e 50 22 29  17 4c 87 e4 3a 11 5f d6  |.....P").L..:._.|
a4 25 89 9b 05 6b 2f b4  c9 01 4c 27 7b 0b ac 19  |.%...k/...L'{...|
05 22 a0 60 15 3f da c9  fb 4d 4c 8f fb 72 67 77  |.".`.?...ML..rgw|
fd 27 94 c7 ba 35 0e 88  49 fe 8d fd 28 af 4a 12  |.'...5..I...(.J.|
bd 0d b3 97 05 de 44 0c  15 fa 36 2b 03 dc c1 50  |......D...6+...P|
01 f1 a1 11 5d 14 e5 e2  bd 27 4b 54 be 2b 84 5e  |....]....'KT.+.^|
0f a6 c3 74 05 0a ef 97  c3 89 22 b1 1f 77 f3 bd  |...t......"..w..|
cd 43 d4 f1 4c a9 3f b5  8b 84 af 64 f2 d0 14 21  |.C..L.?....d...!|
```

Signer

1
unnamed
- #0
  - C: US
  - O: Symantec Corporation
  - OU: Symantec Trust Network
  - CN: Symantec Class 3 SHA256 Code Signing CA
- 48:20:91:4F:E0:C3:5F:96:2C:35:2D:D2:BC:FF:91:5C
SHA256: nil

1.3.6.1.4.1.311.2.1.12
- nil
1.2.840.113549.1.9.25.4: 1
contentType: 1.3.6.1.4.1.311.2.1.4
1.3.6.1.4.1.311.2.1.11: msCodeInd

messageDigest:

86 6c 2e 48 cf 9d 51 ad  f7 16 74 bb a1 25 fa 1d  |.l.H..Q...t..%..|
ca df 12 75 1d a3 19 6a  f1 07 79 c7 de 73 70 a2  |...u...j..y..sp.|

rsaEncryption:

55 ee f5 35 65 1f 90 c1  8d 1e 8c 18 a0 35 8a 0a  |U..5e........5..|
63 e0 13 a7 1c 4a 2f a6  3b c6 5c 75 b0 85 0d b6  |c....J/.;.\u....|
21 f7 85 01 7f 02 11 bb  43 f1 79 0a 34 4a 53 6e  |!.......C.y.4JSn|
01 7a 88 10 b2 c0 c1 12  3e b5 75 5a d3 f5 3b 47  |.z......>.uZ..;G|
fe e4 da 6f b0 5d ce 0c  86 5a 28 0d 82 5b b9 68  |...o.]...Z(..[.h|
0f 42 e0 a4 14 f2 e4 b7  74 62 1a a0 1f c6 e9 c1  |.B......tb......|
91 3d 0e e9 22 f8 c2 ab  08 0a 1d 99 4d a0 eb cf  |.=..".......M...|
34 d6 eb 2d 1f e1 ef d6  0f 5b c5 44 10 91 9f 95  |4..-.....[.D....|
36 5a 1f c8 4e 3d 56 36  63 a5 86 10 2d 41 3a 55  |6Z..N=V6c...-A:U|
3f f3 fa 6e 4d 63 2b 30  6e d4 f7 c3 58 f5 f9 be  |?..nMc+0n...X...|
a2 db 36 97 83 89 e5 8d  20 b3 f9 9a 2a 78 e1 c0  |..6..... ...*x..|
c7 8e 58 84 c9 9c e9 65  9f 60 5e b6 6f f3 0e c0  |..X....e.`^.o...|
f9 dd f5 fe db b1 2e bc  a8 9f 5f f3 99 89 23 32  |.........._...#2|
20 12 2f e5 d4 e9 86 c6  fe 39 79 11 0c 82 55 ee  | ./......9y...U.|
5f c9 a7 5c d9 92 42 7d  61 90 af 49 3c 97 bc dc  |_..\..B}a..I<...|
14 bc 37 22 0f c0 95 3c  e4 7b 51 c5 ad 04 72 c8  |..7"...<.{Q...r.|

1.3.6.1.4.1.311.3.3.1

pkcs7-signedData

SHA1: nil

id-smime-ct-TSTInfo

1.1.2

SHA1

4d 11 a9 c4 80 2f df 46 40 4b 35 d4 9f 8d 23 a9 |M..../.F@K5...#.| 60 8a 2d 16 |`.-. |

0x433CD869
2017-01-19 09:53:43 UTC
0x3C
#5
- C: US
- O: GeoTrust Inc
- CN: GeoTrust 2048-bit Timestamping Signer 4

Certificates
- Certificate #0
  - 2
    - 70:A0:1C:F4:EA:EF:99:FD:46:6C:ED:16:30:C1:B0:1F
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - O: Symantec Corporation
      - CN: Symantec Time Stamping Services CA - G2
    - 2015-06-11 00:00:00 UTC: 2020-12-29 23:59:59 UTC
    - Subject
      - C: US
      - O: GeoTrust Inc
      - CN: GeoTrust 2048-bit Timestamping Signer 4
    - #5
      - rsaEncryption: nil
      - BE:AC:D2:85:9B:7A:D2:95:14:29:07:EC:06:9D:36:3D:
        19:7F:EB:CA:62:FB:43:BD:B3:C9:11:98:7C:8A:F2:96:
        9B:08:16:4C:81:85:6A:56:5D:FF:B2:7A:87:EA:AD:A2:
        12:95:86:9B:3A:69:40:6A:1B:98:B2:E9:D1:58:88:AC:
        21:73:B4:6B:13:7C:87:52:65:DC:EE:6B:A1:26:7D:8F:
        6E:74:CD:8B:C5:CD:96:07:61:A5:DF:8C:21:25:61:ED:
        00:C7:22:7A:4A:58:09:D7:27:22:86:3B:D2:E1:51:EF:
        EF:1E:B4:71:83:C5:3E:96:46:E5:E7:90:09:45:C5:B8:
        09:44:0B:AB:97:D7:F3:23:CE:11:93:F4:5A:D3:DF:C1:
        EE:BC:AF:86:D8:8C:14:81:86:F4:B5:15:7D:6A:31:4C:
        F5:33:33:77:BD:5F:E4:A2:C7:3D:1F:CC:DB:52:48:1C:
        42:2F:37:EA:24:83:18:E6:38:38:01:66:F8:EE:81:62:
        F5:4D:78:E3:8D:42:DB:A6:4B:42:82:00:72:2B:18:CB:
        8F:17:D2:C7:47:24:E6:BA:91:56:B4:15:68:08:F6:CB:
        31:8C:83:42:33:F9:88:EC:85:00:9E:7B:7D:E6:76:96:
        8C:94:BD:F7:4F:7B:15:B0:57:0C:45:9F:AD:55:56:6D: 0x010001
    - X509v3 extensions
      - authorityInfoAccess
        #0
        OCSP: http://ts-ocsp.ws.symantec.com
        caIssuers: http://ts-aia.ws.symantec.com/tss-ca-g2.cer
      - basicConstraints
        true
        nil
      - crlDistributionPoints: http://ts-crl.ws.symantec.com/tss-ca-g2.crl
      - extendedKeyUsage: true, timeStamping
      - keyUsage: true, 0x80
      - subjectKeyIdentifier:
        99 8a 1b 1f 43 ba 3f d3 13 c3 bc c4 94 3d 1c 1d |....C.?......=..| e8 b2 e1 4e |...N |
      - authorityKeyIdentifier:
        5f 9a f5 6e 5c cc cc 74 9a d4 dd 7d ef 3f db ec |_..n\..t...}.?..| 4c 80 2e dd |L... |
  - RSA-SHA1:
```
7e 07 3f ae 44 31 0e 00  1d 28 51 00 59 a0 76 f6  |~.?.D1...(Q.Y.v.|
55 8b f0 2c dd de 95 5f  0b 28 7c 7d 7d da 81 84  |U..,..._.(|}}...|
d7 2b 0e 8f 02 c9 6f 99  17 b3 e2 d7 c4 e5 11 59  |.+....o........Y|
bb 27 68 89 dd 39 be b9  6c 0f 47 9c e8 b0 40 d9  |.'h..9..l.G...@.|
09 d8 c3 30 77 2c 63 b8  71 42 32 2e f0 6b f0 d4  |...0w,c.qB2..k..|
c1 59 34 52 41 17 ad 19  4a b8 14 09 25 a8 ad 4e  |.Y4RA...J...%..N|
9e ba 7d 30 d5 aa e4 f3  c9 00 f6 df fd 4b c9 14  |..}0.........K..|
d9 77 2e 63 e3 39 af e8  e3 d1 92 f9 06 64 a6 77  |.w.c.9.......d.w|
e4 e1 ed 5c 3a e9 8b 1d  41 f0 a9 d3 0c c5 ca 3e  |...\:...A......>|
c6 ba ae a2 1a c4 1f a6  13 9c eb d8 c2 7a 04 10  |.............z..|
9b a5 ff 49 7f 61 b2 a2  0f f3 25 9e 19 56 11 d7  |...I.a....%..V..|
08 3d 8c 50 cd 4c fb 59  0d c0 0a 87 ff e9 ba 7b  |.=.P.L.Y.......{|
3d 5d d7 79 b4 81 c7 ec  2b 41 2b da ce 5b 72 4e  |=].y....+A+..[rN|
e4 9e 2e 74 7c cb cd dc  b1 63 1d e6 74 33 1b ac  |...t|....c..t3..|
4f e0 68 40 17 1d a6 49  2a 54 19 6b b5 b6 e7 a7  |O.h@...I*T.k....|
9c 9b ca f3 bd 22 1d ac  3f e4 49 d2 07 d6 2c 50  |....."..?.I...,P|
```
- Certificate #1
  - 2
    - 0
    - RSA-MD5: nil
    - Issuer
      - C: ZA
      - ST: Western Cape
      - L: Durbanville
      - O: Thawte
      - OU: Thawte Certification
      - CN: Thawte Timestamping CA
    - 1997-01-01 00:00:00 UTC: 2020-12-31 23:59:59 UTC
    - Subject
      - C: ZA
      - ST: Western Cape
      - L: Durbanville
      - O: Thawte
      - OU: Thawte Certification
      - CN: Thawte Timestamping CA
    - #5
      - rsaEncryption: nil
      - D6:2B:58:78:61:45:86:53:EA:34:7B:51:9C:ED:B0:E6:
        2E:18:0E:FE:E0:5F:A8:27:D3:B4:C9:E0:7C:59:4E:16:
        0E:73:54:60:C1:7F:F6:9F:2E:E9:3A:85:24:15:3C:DB:
        47:04:63:C3:9E:C4:94:1A:5A:DF:4C:7A:F3:D9:43:1D:
        3C:10:7A:79:25:DB:90:FE:F0:51:E7:30:D6:41:00:FD:
        9F:28:DF:79:BE:94:BB:9D:B6:14:E3:23:85:D7:A9:41:
        E0:4C:A4:79:B0:2B:1A:8B:F2:F8:3B:8A:3E:45:AC:71:
        92:00:B4:90:41:98:FB:5F:ED:FA:B7:2E:8A:F8:88:37: 0x010001
    - basicConstraints: true, true
  - RSA-MD5:
```
67 db e2 c2 e6 87 3d 40  83 86 37 35 7d 1f ce 9a  |g.....=@..75}...|
c3 0c 66 20 a8 ba aa 04  89 86 c2 f5 10 08 0d bf  |..f ............|
cb a2 05 8a d0 4d 36 3e  f4 d7 ef 69 c6 5e e4 b0  |.....M6>...i.^..|
94 6f 4a b9 e7 de 5b 88  b6 7b db e3 27 e5 76 c3  |.oJ...[..{..'.v.|
f0 35 c1 cb b5 27 9b 33  79 dc 90 a6 00 9e 77 fa  |.5...'.3y.....w.|
fc cd 27 94 42 16 9c d3  1c 68 ec bf 5c dd e5 a9  |..'.B....h..\...|
7b 10 0a 32 74 54 13 31  8b 85 03 84 91 b7 58 01  |{..2tT.1......X.|
30 14 38 af 28 ca fc b1  50 19 19 09 ac 89 49 d3  |0.8.(...P.....I.|
```
- Certificate #2
  - 2
    - 7E:93:EB:FB:7C:C6:4E:59:EA:4B:9A:77:D4:06:FC:3B
    - RSA-SHA1: nil
    - Issuer
      - C: ZA
      - ST: Western Cape
      - L: Durbanville
      - O: Thawte
      - OU: Thawte Certification
      - CN: Thawte Timestamping CA
    - 2012-12-21 00:00:00 UTC: 2020-12-30 23:59:59 UTC
    - Subject
      - C: US
      - O: Symantec Corporation
      - CN: Symantec Time Stamping Services CA - G2
    - #5
      - rsaEncryption: nil
      - B1:AC:B3:49:54:4B:97:1C:12:0A:D8:25:79:91:22:57:
        2A:6F:DC:B8:26:C4:43:73:6B:C2:BF:2E:50:5A:FB:14:
        C2:76:8E:43:01:25:43:B4:A1:E2:45:F4:E8:B7:7B:C3:
        74:CC:22:D7:B4:94:00:02:F7:4D:ED:BF:B4:B7:44:24:
        6B:CD:5F:45:3B:D1:44:CE:43:12:73:17:82:8B:69:B4:
        2B:CB:99:1E:AC:72:1B:26:4D:71:1F:B1:31:DD:FB:51:
        61:02:53:A6:AA:F5:49:2C:05:78:45:A5:2F:89:CE:E7:
        99:E7:FE:8C:E2:57:3F:3D:C6:92:DC:4A:F8:7B:33:E4:
        79:0A:FB:F0:75:88:41:9C:FF:C5:03:51:99:AA:D7:6C:
        9F:93:69:87:65:29:83:85:C2:60:14:C4:C8:C9:3B:14:
        DA:C0:81:F0:1F:0D:74:DE:92:22:AB:CA:F7:FB:74:7C:
        27:E6:F7:4A:1B:7F:A7:C3:9E:2D:AE:8A:EA:A6:E6:AA:
        27:16:7D:61:F7:98:71:11:BC:E2:50:A1:4B:E5:5D:FA:
        E5:0E:A7:2C:9F:AA:65:20:D3:D8:96:E8:C8:7C:A5:4E:
        48:44:FF:19:E2:44:07:92:0B:D7:68:84:80:5D:6A:78:
        64:45:CD:60:46:7E:54:C1:13:7C:C5:79:F1:C9:C1:71: 0x010001
    - #6
      - subjectKeyIdentifier:
        5f 9a f5 6e 5c cc cc 74 9a d4 dd 7d ef 3f db ec |_..n\..t...}.?..| 4c 80 2e dd |L... |
      - authorityInfoAccess
        OCSP: http://ocsp.thawte.com
      - basicConstraints
        true
        true: 0
      - crlDistributionPoints: http://crl.thawte.com/ThawteTimestampingCA.crl
      - extendedKeyUsage: timeStamping
      - keyUsage: true, 6
      - subjectAltName
        CN: TimeStamp-2048-1
  - RSA-SHA1:
```
03 09 9b 8f 79 ef 7f 59  30 aa ef 68 b5 fa e3 09  |....y..Y0..h....|
1d bb 4f 82 06 5d 37 5f  a6 52 9f 16 8d ea 1c 92  |..O..]7_.R......|
09 44 6e f5 6d eb 58 7c  30 e8 f9 69 8d 23 73 0b  |.Dn.m.X|0..i.#s.|
12 6f 47 a9 ae 39 11 f8  2a b1 9b b0 1a c3 8e eb  |.oG..9..*.......|
59 96 00 ad ce 0c 4d b2  d0 31 a6 08 5c 2a 7a fc  |Y.....M..1..\*z.|
e2 7a 1d 57 4c a8 65 18  e9 79 40 62 25 96 6e c7  |.z.WL.e..y@b%.n.|
c7 37 6a 83 21 08 8e 41  ea dd d9 57 3f 1d 77 49  |.7j.!..A...W?.wI|
87 2a 16 06 5e a6 38 6a  22 12 a3 51 19 83 7e b6  |.*..^.8j"..Q..~.|
```

unnamed
- #0
  - C: US
  - O: Symantec Corporation
  - CN: Symantec Time Stamping Services CA - G2
- 70:A0:1C:F4:EA:EF:99:FD:46:6C:ED:16:30:C1:B0:1F
SHA1: nil

contentType: id-smime-ct-TSTInfo
signingTime: 2017-01-19 09:53:43 UTC

messageDigest:

41 80 c3 21 d6 a4 67 55  82 3d f0 bc 4e d4 3a 9e  |A..!..gU.=..N.:.|
dc 43 c6 9d                                       |.C..            |

id-smime-aa-signingCertificate:

d2 0f 38 91 b9 0c 1f af  d0 00 e4 44 58 cd 69 7a  |..8........DX.iz|
bc 4e 3a 4c                                       |.N:L            |

rsaEncryption:

b5 0c 44 ea d1 9a 0b db  1b 9b 79 b0 35 6c 03 d6  |..D.......y.5l..|
d7 68 24 dd ec 20 d9 24  ad 25 1d d9 b2 60 4d ed  |.h$.. .$.%...`M.|
c9 b5 a9 fa e5 79 9a 4a  aa ed 43 e9 30 06 d9 f6  |.....y.J..C.0...|
f6 54 39 e7 04 be b3 03  d0 86 e7 19 06 59 6f 48  |.T9..........YoH|
75 32 96 bd 7f c9 ea 15  08 27 1e 84 d2 9e 68 40  |u2.......'....h@|
bc 63 fb ec 7d 6a 5a c4  7a 42 ba 50 b5 8b 70 3d  |.c..}jZ.zB.P..p=|
da 52 82 1e d5 50 32 95  78 33 6c 91 d5 fe 32 4e  |.R...P2.x3l...2N|
1b a5 2b 54 71 ad 5a f7  69 89 ce c4 3a 94 8a c0  |..+Tq.Z.i...:...|
67 4a 86 8f 1f ad 5a b7  f8 77 88 76 f7 56 3a 43  |gJ....Z..w.v.V:C|
af ac 5a 71 c9 61 ac 95  ed 1b c6 a2 ea 36 69 6f  |..Zq.a.......6io|
57 28 fe 37 18 5f 6f 74  82 19 e2 57 51 d8 6c 75  |W(.7._ot...WQ.lu|
c7 46 2b b6 54 52 42 7a  78 e4 ed 39 58 97 d2 c4  |.F+.TRBzx..9X...|
58 aa ac f4 a3 9d 33 cd  36 dd 0c 7b e9 41 49 27  |X.....3.6..{.AI'|
7b 21 d0 e1 37 5b ba d8  ba 8c 63 b4 9e 46 b2 2e  |{!..7[....c..F..|
9b c5 a5 bb ea 12 f4 c1  1d 48 ea 62 17 13 cb 0f  |.........H.b....|
0e 0a 9b 05 aa c7 31 33  1b f3 0b f4 9b 44 e9 6f  |......13.....D.o|

show previews

offset	size	type	comment
0	598016	EXE	07/07/2015 06:26:33	#
15c1	15	HTM		#
5de50	7702	PNG	(256 x 256)	#
61920	7820	PNG	(256 x 256)	#
6b48c	1885	PNG	(256 x 256)	#
6d8a4	2096	PNG	(256 x 256)	#
92000	13384	PKCS7	Authenticode Signature	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] ignoring invalid PEdump::BITMAPINFOHEADER

LSBsetup.exe- setup.exe - Setup

MZ Header

Rich Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 040904b0

VS_FIXEDFILEINFO

Signers (1)

Certificates (4)

LSBsetup.exe
- setup.exe - Setup