filenameclr.dll
size6876616 (0x68edc8)
md502e123ae9697dbf78f3c4f7e5a625e49
typePE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x118

Rich Header

lib idversiontimes used
190307164
188307169
1313072914
13230729181
203503232
2065032322
207503235
10693
1853071611
2055032321
21150323525
202503231
201503231
204503231

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x50387691
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x2122
Magic0x10b
LinkerVersion11.0
SizeOfCode0x62d200
SizeOfInitializedData0x5da00
SizeOfUninitializedData0
AddressOfEntryPoint0x82830
BaseOfCode0x1000
BaseOfData0x61e000
ImageBase0x10000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion6.0
ImageVersion10.0
SubsystemVersion6.0
Reserved10
SizeOfImage0x692000
SizeOfHeaders0x400
CheckSum0x699b5a
Subsystem2
DllCharacteristics0x140
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ 6.0 - 8.0

Sections

namevavsizeraw sizeflags
.text0x10000x62d05f0x62d200R-X CODE
.data0x62f0000x1223a0xf200RW- IDATA
.idata0x6420000x30d00x3200RW- IDATA
.rsrc0x6460000x5040x600R-- IDATA
.reloc0x6470000x4aea80x4b000R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0xc5d40xe29
IMPORT0x6427940x8c
RESOURCE0x6460000x504
EXCEPTION00
SECURITY0x68b0000x3dc8
BASERELOC0x6470000x4aea8
DEBUG0x62dfa80x54
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x1a20a80x40
Bound_IAT00
IAT0x6420000x794
Delay_IAT0x62cf080x260
CLR_Header00
typenamesizecp
RCDATACLRDEBUGINFO361252
VERSION#110601252
module_namehintordfunction_name
KERNEL32.dll354EnumTimeFormatsW
KERNEL32.dll322EnumCalendarInfoExW
KERNEL32.dll741GetSystemDefaultUILanguage
KERNEL32.dll555GetDateFormatW
KERNEL32.dll959LoadLibraryW
KERNEL32.dll650GetNativeSystemInfo
KERNEL32.dll910IsWow64Process
KERNEL32.dll1068QueryActCtxW
KERNEL32.dll237CreateProcessW
KERNEL32.dll409FindNextFileW
KERNEL32.dll575GetEnvironmentVariableA
KERNEL32.dll980LockResource
KERNEL32.dll1367SizeofResource
KERNEL32.dll962LoadResource
KERNEL32.dll417FindResourceExW
KERNEL32.dll781GetTickCount64
KERNEL32.dll810GetWindowsDirectoryW
KERNEL32.dll1168ReleaseActCtx
KERNEL32.dll270DeactivateActCtx
KERNEL32.dll3ActivateActCtx
KERNEL32.dll187CreateActCtxW
KERNEL32.dll386FindClose
KERNEL32.dll743GetSystemDirectoryW
KERNEL32.dll397FindFirstFileW
KERNEL32.dll618GetLocaleInfoW
KERNEL32.dll444GetACP
KERNEL32.dll893IsDBCSLeadByte
KERNEL32.dll459GetCPInfo
KERNEL32.dll1334SetThreadIdealProcessor
KERNEL32.dll1329SetThreadAffinityMask
KERNEL32.dll992MoveFileExW
KERNEL32.dll995MoveFileW
KERNEL32.dll427FlushFileBuffers
KERNEL32.dll162CompareFileTime
KERNEL32.dll596GetFileTime
KERNEL32.dll1253SetConsoleTitleW
KERNEL32.dll22AllocConsole
KERNEL32.dll435FreeConsole
KERNEL32.dll763GetTempFileNameW
KERNEL32.dll765GetTempPathW
KERNEL32.dll1039OutputDebugStringA
KERNEL32.dll1110ReadProcessMemory
KERNEL32.dll716GetQueuedCompletionStatus
KERNEL32.dll1050PostQueuedCompletionStatus
KERNEL32.dll217CreateIoCompletionPort
KERNEL32.dll790GetUserDefaultLCID
KERNEL32.dll738GetSystemDefaultLCID
KERNEL32.dll167ConnectNamedPipe
KERNEL32.dll229CreateNamedPipeW
KERNEL32.dll303DisconnectNamedPipe
KERNEL32.dll680GetPrivateProfileIntW
KERNEL32.dll469GetCalendarInfoW
KERNEL32.dll166CompareStringW
KERNEL32.dll793GetUserDefaultUILanguage
KERNEL32.dll314EncodePointer
KERNEL32.dll277DecodePointer
KERNEL32.dll983MapViewOfFile
KERNEL32.dll1180RemoveDirectoryW
KERNEL32.dll1287SetFileTime
KERNEL32.dll418FindResourceW
KERNEL32.dll184CopyFileW
KERNEL32.dll1514WritePrivateProfileStringW
KERNEL32.dll299DeviceIoControl
KERNEL32.dll615GetLocalTime
KERNEL32.dll802GetVolumeInformationW
KERNEL32.dll1278SetFileAttributesW
KERNEL32.dll306DosDateTimeToFileTime
KERNEL32.dll967LocalFileTimeToFileTime
KERNEL32.dll205CreateFileA
KERNEL32.dll1551lstrlenA
KERNEL32.dll809GetWindowsDirectoryA
KERNEL32.dll560GetDiskFreeSpaceA
KERNEL32.dll785GetTimeFormatW
KERNEL32.dll430FlushViewOfFile
KERNEL32.dll798GetVersionExA
KERNEL32.dll956LoadLibraryA
KERNEL32.dll965LocalAlloc
KERNEL32.dll848HeapReAlloc
KERNEL32.dll286DeleteFileA
KERNEL32.dll179CopyFileA
KERNEL32.dll583GetFileAttributesA
KERNEL32.dll1275SetFileAttributesA
KERNEL32.dll192CreateDirectoryA
KERNEL32.dll1177RemoveDirectoryA
KERNEL32.dll957LoadLibraryExA
KERNEL32.dll390FindFirstFileA
KERNEL32.dll407FindNextFileA
KERNEL32.dll797GetVersion
KERNEL32.dll871InterlockedCompareExchange
KERNEL32.dll668GetOEMCP
KERNEL32.dll44AreFileApisANSI
KERNEL32.dll603GetFullPathNameA
KERNEL32.dll1265SetEndOfFile
KERNEL32.dll742GetSystemDirectoryA
KERNEL32.dll874InterlockedExchange
KERNEL32.dll1306SetPriorityClass
KERNEL32.dll1284SetFilePointerEx
KERNEL32.dll734GetStringTypeW
KERNEL32.dll894IsDBCSLeadByteEx
KERNEL32.dll364ExitThread
KERNEL32.dll1019OpenFileMappingW
KERNEL32.dll1210SearchPathW
KERNEL32.dll907IsValidLocale
KERNEL32.dll787GetTimeZoneInformation
KERNEL32.dll639GetNLSVersionEx
KERNEL32.dll528GetConsoleTitleW
KERNEL32.dll799GetVersionExW
KERNEL32.dll595GetFileSizeEx
KERNEL32.dll999MultiByteToWideChar
KERNEL32.dll434FormatMessageW
KERNEL32.dll363ExitProcess
KERNEL32.dll958LoadLibraryExW
KERNEL32.dll633GetModuleFileNameW
KERNEL32.dll636GetModuleHandleExW
KERNEL32.dll941LCMapStringW
KERNEL32.dll614GetLastError
KERNEL32.dll637GetModuleHandleW
KERNEL32.dll141CloseHandle
KERNEL32.dll545GetCurrentProcess
KERNEL32.dll1458WaitForSingleObject
KERNEL32.dll1170ReleaseMutex
KERNEL32.dll1271SetEvent
KERNEL32.dll1174ReleaseSemaphore
KERNEL32.dll1457WaitForMultipleObjectsEx
KERNEL32.dll227CreateMutexW
KERNEL32.dll201CreateEventW
KERNEL32.dll243CreateSemaphoreW
KERNEL32.dll969LocalFree
KERNEL32.dll550GetCurrentThreadId
KERNEL32.dll780GetTickCount
KERNEL32.dll1226SetConsoleCtrlHandler
KERNEL32.dll274DebugBreak
KERNEL32.dll255CreateThread
KERNEL32.dll1296SetLastError
KERNEL32.dll481GetCommandLineW
KERNEL32.dll539GetCurrentDirectoryW
KERNEL32.dll1552lstrlenW
KERNEL32.dll606GetFullPathNameW
KERNEL32.dll721GetShortPathNameW
KERNEL32.dll627GetLongPathNameW
KERNEL32.dll746GetSystemInfo
KERNEL32.dll1403TlsGetValue
KERNEL32.dll546GetCurrentProcessId
KERNEL32.dll791GetUserDefaultLangID
KERNEL32.dll576GetEnvironmentVariableW
KERNEL32.dll1269SetEnvironmentVariableW
KERNEL32.dll696GetProcessId
KERNEL32.dll1062ProcessIdToSessionId
KERNEL32.dll669GetOverlappedResult
KERNEL32.dll121CancelIo
KERNEL32.dll689GetProcAddress
KERNEL32.dll694GetProcessHeap
KERNEL32.dll845HeapFree
KERNEL32.dll879InterlockedPushEntrySList
KERNEL32.dll1488WideCharToMultiByte
KERNEL32.dll869InitializeSListHead
KERNEL32.dll878InterlockedPopEntrySList
KERNEL32.dll1091RaiseException
KERNEL32.dll1508WriteFile
KERNEL32.dll729GetStdHandle
KERNEL32.dll522GetConsoleOutputCP
KERNEL32.dll590GetFileInformationByHandle
KERNEL32.dll588GetFileAttributesW
KERNEL32.dll197CreateDirectoryW
KERNEL32.dll549GetCurrentThread
KERNEL32.dll690GetProcessAffinityMask
KERNEL32.dll1307SetProcessAffinityMask
KERNEL32.dll1337SetThreadLocale
KERNEL32.dll984MapViewOfFileEx
KERNEL32.dll1450VirtualQuery
KERNEL32.dll1418UnmapViewOfFile
KERNEL32.dll1270SetErrorMode
KERNEL32.dll438FreeLibrary
KERNEL32.dll439FreeLibraryAndExitThread
KERNEL32.dll895IsDebuggerPresent
KERNEL32.dll429FlushProcessWriteBuffers
KERNEL32.dll1079QueryPerformanceCounter
KERNEL32.dll733GetStringTypeExW
KERNEL32.dll428FlushInstructionCache
KERNEL32.dll1027OpenProcess
KERNEL32.dll264CreateToolhelp32Snapshot
KERNEL32.dll1059Process32FirstW
KERNEL32.dll1061Process32NextW
KERNEL32.dll212CreateFileW
KERNEL32.dll1465WaitNamedPipeW
KERNEL32.dll1305SetNamedPipeHandleState
KERNEL32.dll1015OpenEventW
KERNEL32.dll1406TransactNamedPipe
KERNEL32.dll1442VirtualAlloc
KERNEL32.dll1445VirtualFree
KERNEL32.dll1448VirtualProtect
KERNEL32.dll843HeapCreate
KERNEL32.dll844HeapDestroy
KERNEL32.dll841HeapAlloc
KERNEL32.dll853HeapValidate
KERNEL32.dll1371SleepEx
KERNEL32.dll1379SwitchToThread
KERNEL32.dll574GetEnvironmentStringsW
KERNEL32.dll437FreeEnvironmentStringsW
KERNEL32.dll311DuplicateHandle
KERNEL32.dll1089QueueUserAPC
KERNEL32.dll1459WaitForSingleObjectEx
KERNEL32.dll1339SetThreadPriority
KERNEL32.dll775GetThreadPriority
KERNEL32.dll766GetThreadContext
KERNEL32.dll1377SuspendThread
KERNEL32.dll1200ResumeThread
KERNEL32.dll1404TlsSetValue
KERNEL32.dll1330SetThreadContext
KERNEL32.dll1401TlsAlloc
KERNEL32.dll1366SignalObjectAndWait
KERNEL32.dll1368Sleep
KERNEL32.dll634GetModuleHandleA
KERNEL32.dll1080QueryPerformanceFrequency
KERNEL32.dll778GetThreadTimes
KERNEL32.dll209CreateFileMappingW
KERNEL32.dll594GetFileSize
KERNEL32.dll830GlobalMemoryStatusEx
KERNEL32.dll1402TlsFree
KERNEL32.dll1283SetFilePointer
KERNEL32.dll1107ReadFile
KERNEL32.dll585GetFileAttributesExW
KERNEL32.dll1383TerminateProcess
KERNEL32.dll1415UnhandledExceptionFilter
KERNEL32.dll900IsProcessorFeaturePresent
KERNEL32.dll1441VerifyVersionInfoW
KERNEL32.dll1040OutputDebugStringW
KERNEL32.dll865InitializeCriticalSection
KERNEL32.dll284DeleteCriticalSection
KERNEL32.dll1410TryEnterCriticalSection
KERNEL32.dll318EnterCriticalSection
KERNEL32.dll953LeaveCriticalSection
KERNEL32.dll704GetProcessTimes
KERNEL32.dll750GetSystemTime
KERNEL32.dll1380SystemTimeToFileTime
KERNEL32.dll752GetSystemTimeAsFileTime
KERNEL32.dll259CreateThreadpoolTimer
KERNEL32.dll1347SetThreadpoolTimer
KERNEL32.dll1193ResetEvent
KERNEL32.dll1049PeekNamedPipe
KERNEL32.dll773GetThreadLocale
KERNEL32.dll289DeleteFileW
KERNEL32.dll876InterlockedFlushSList
KERNEL32.dll567GetDriveTypeW
KERNEL32.dll154CloseThreadpoolTimer
MSVCR110_CLR0400.dll472__iob_func
MSVCR110_CLR0400.dll426__CxxFrameHandler3
MSVCR110_CLR0400.dll397_CxxThrowException
MSVCR110_CLR0400.dll393_CItanh
MSVCR110_CLR0400.dll390_CIsinh
MSVCR110_CLR0400.dll388_CIpow
MSVCR110_CLR0400.dll387_CIlog10
MSVCR110_CLR0400.dll386_CIlog
MSVCR110_CLR0400.dll385_CIfmod
MSVCR110_CLR0400.dll384_CIexp
MSVCR110_CLR0400.dll383_CIcosh
MSVCR110_CLR0400.dll379_CIasin
MSVCR110_CLR0400.dll378_CIacos
MSVCR110_CLR0400.dll1711wcscpy_s
MSVCR110_CLR0400.dll1553fwrite
MSVCR110_CLR0400.dll878_isnan
MSVCR110_CLR0400.dll1521fclose
MSVCR110_CLR0400.dll1533fopen_s
MSVCR110_CLR0400.dll1700vswprintf_s
MSVCR110_CLR0400.dll1674strtoul
MSVCR110_CLR0400.dll1163_snprintf
MSVCR110_CLR0400.dll1614memset
MSVCR110_CLR0400.dll1599malloc
MSVCR110_CLR0400.dll1575isupper
MSVCR110_CLR0400.dll1589isxdigit
MSVCR110_CLR0400.dll1581iswdigit
MSVCR110_CLR0400.dll1588iswxdigit
MSVCR110_CLR0400.dll1738wmemcpy_s
MSVCR110_CLR0400.dll1434_wmakepath_s
MSVCR110_CLR0400.dll1468_wsplitpath_s
MSVCR110_CLR0400.dll1722wcsrchr
MSVCR110_CLR0400.dll1706wcscat_s
MSVCR110_CLR0400.dll1719wcsncpy_s
MSVCR110_CLR0400.dll1330_vsnwprintf
MSVCR110_CLR0400.dll1212_stricmp
MSVCR110_CLR0400.dll1610memcpy
MSVCR110_CLR0400.dll1107_purecall
MSVCR110_CLR0400.dll901_itow_s
MSVCR110_CLR0400.dll1659strlen
MSVCR110_CLR0400.dll1587iswupper
MSVCR110_CLR0400.dll1688towlower
MSVCR110_CLR0400.dll1651strcmp
MSVCR110_CLR0400.dll658_except_handler4_common
MSVCR110_CLR0400.dll449__clean_type_info_names_internal
MSVCR110_CLR0400.dll1092_onexit
MSVCR110_CLR0400.dll462__dllonexit
MSVCR110_CLR0400.dll589_calloc_crt
MSVCR110_CLR0400.dll1288_unlock
MSVCR110_CLR0400.dll926_lock
MSVCR110_CLR0400.dll311void __cdecl terminate(void)

?terminate@@YAXXZ

MSVCR110_CLR0400.dll459__crtTerminateProcess
MSVCR110_CLR0400.dll460__crtUnhandledException
MSVCR110_CLR0400.dll621_crt_debugger_hook
MSVCR110_CLR0400.dll112public: virtual __thiscall type_info::~type_info(void)

??1type_info@@UAE@XZ

MSVCR110_CLR0400.dll801_initterm_e
MSVCR110_CLR0400.dll800_initterm
MSVCR110_CLR0400.dll943_malloc_crt
MSVCR110_CLR0400.dll1542free
MSVCR110_CLR0400.dll567_amsg_exit
MSVCR110_CLR0400.dll421__CppXcptFilter
MSVCR110_CLR0400.dll1507bsearch
MSVCR110_CLR0400.dll1729wcstok_s
MSVCR110_CLR0400.dll1661strncat_s
MSVCR110_CLR0400.dll1115_putws
MSVCR110_CLR0400.dll693_flushall
MSVCR110_CLR0400.dll1740wprintf
MSVCR110_CLR0400.dll1551fwprintf
MSVCR110_CLR0400.dll1586iswspace
MSVCR110_CLR0400.dll1342_vswprintf_p
MSVCR110_CLR0400.dll1332_vsnwprintf_s
MSVCR110_CLR0400.dll1328_vsnprintf_s
MSVCR110_CLR0400.dll1374_wcsnicmp
MSVCR110_CLR0400.dll1260_time64
MSVCR110_CLR0400.dll1423_wfopen
MSVCR110_CLR0400.dll1720wcsnlen
MSVCR110_CLR0400.dll940_ltow_s
MSVCR110_CLR0400.dll1676swprintf_s
MSVCR110_CLR0400.dll1608memchr
MSVCR110_CLR0400.dll1717wcsncmp
MSVCR110_CLR0400.dll1505atoi
MSVCR110_CLR0400.dll1530floor
MSVCR110_CLR0400.dll1524fflush
MSVCR110_CLR0400.dll1566isalpha
MSVCR110_CLR0400.dll1511ceil
MSVCR110_CLR0400.dll610_copysign
MSVCR110_CLR0400.dll1615modf
MSVCR110_CLR0400.dll1689towupper
MSVCR110_CLR0400.dll1707wcschr
MSVCR110_CLR0400.dll1687toupper
MSVCR110_CLR0400.dll1578iswascii
MSVCR110_CLR0400.dll1716wcsncat_s
MSVCR110_CLR0400.dll1175_snwprintf_s
MSVCR110_CLR0400.dll1618printf
MSVCR110_CLR0400.dll1667strrchr
MSVCR110_CLR0400.dll1733wcstoul
MSVCR110_CLR0400.dll655_errno
MSVCR110_CLR0400.dll1609memcmp
MSVCR110_CLR0400.dll1646sscanf
MSVCR110_CLR0400.dll1568isdigit
MSVCR110_CLR0400.dll1222_strnicmp
MSVCR110_CLR0400.dll1665strnlen
MSVCR110_CLR0400.dll1506atol
MSVCR110_CLR0400.dll1664strncpy_s
MSVCR110_CLR0400.dll1649strcat_s
MSVCR110_CLR0400.dll1370_wcslwr_s
MSVCR110_CLR0400.dll1654strcpy_s
MSVCR110_CLR0400.dll1662strncmp
MSVCR110_CLR0400.dll1364_wcsicmp
MSVCR110_CLR0400.dll1534fprintf
MSVCR110_CLR0400.dll1612memmove
MSVCR110_CLR0400.dll1625qsort
MSVCR110_CLR0400.dll609_controlfp_s
MSVCR110_CLR0400.dll1324_vsnprintf
MSVCR110_CLR0400.dll1650strchr
MSVCR110_CLR0400.dll1643sprintf_s
MSVCR110_CLR0400.dll1611memcpy_s
MSVCR110_CLR0400.dll1678swscanf_s
MSVCR110_CLR0400.dll1483_wtoi
MSVCR110_CLR0400.dll1726wcsstr
ntdll.dll1115RtlNtStatusToDosError
ntdll.dll1484VerSetConditionMask
ntdll.dll1334RtlUnwind
ntdll.dll684RtlCaptureContext
USER32.dll893wsprintfW
USER32.dll312GetDesktopWindow
USER32.dll831TranslateMessage
USER32.dll621PeekMessageW
USER32.dll596MsgWaitForMultipleObjectsEx
USER32.dll182DispatchMessageW
USER32.dll560LoadStringW
USER32.dll402GetProcessWindowStation
USER32.dll439GetUserObjectInformationW
USER32.dll481InSendMessage
USER32.dll322GetFocus
SHLWAPI.dll370UrlIsW
SHLWAPI.dll372UrlUnescapeW
SHLWAPI.dll300StrCmpW
SHLWAPI.dll71PathCreateFromUrlW
SHLWAPI.dll349UrlCanonicalizeW
SHLWAPI.dll52PathAddBackslashW
SHLWAPI.dll120PathIsURLW
SHLWAPI.dll351UrlCombineW
SHLWAPI.dll337StrStrW
SHLWAPI.dll362UrlGetPartW
SHLWAPI.dll322StrRChrW
SHLWAPI.dll144PathRemoveFileSpecW
SHLWAPI.dll142PathRemoveExtensionW
SHLWAPI.dll343StrToIntW
SHLWAPI.dll299StrCmpNW
SHLWAPI.dll285StrChrW
SHLWAPI.dll106PathIsRelativeW
SHLWAPI.dll76PathFindExtensionW
SHLWAPI.dll138PathRemoveBackslashW
SHLWAPI.dll62PathCombineW
SHLWAPI.dll78PathFindFileNameW
SHLWAPI.dll60PathCanonicalizeW
SHLWAPI.dll118PathIsUNCW
SHLWAPI.dll357UrlEscapeW
ADVAPI32.dll201CryptEncrypt
ADVAPI32.dll210CryptGetDefaultProviderW
ADVAPI32.dll220CryptSetKeyParam
ADVAPI32.dll196CryptDeriveKey
ADVAPI32.dll221CryptSetProvParam
ADVAPI32.dll232DeleteAce
ADVAPI32.dll228CryptVerifySignatureA
ADVAPI32.dll219CryptSetHashParam
ADVAPI32.dll411IsValidSid
ADVAPI32.dll360GetSidIdentifierAuthority
ADVAPI32.dll204CryptEnumProvidersA
ADVAPI32.dll660RegQueryValueExA
ADVAPI32.dll607RegCreateKeyExA
ADVAPI32.dll146CreateWellKnownSid
ADVAPI32.dll17AddAccessAllowedAceEx
ADVAPI32.dll229CryptVerifySignatureW
ADVAPI32.dll654RegQueryInfoKeyA
ADVAPI32.dll213CryptGetProvParam
ADVAPI32.dll205CryptEnumProvidersW
ADVAPI32.dll227CryptSignHashW
ADVAPI32.dll212CryptGetKeyParam
ADVAPI32.dll214CryptGetUserKey
ADVAPI32.dll217CryptImportKey
ADVAPI32.dll198CryptDestroyKey
ADVAPI32.dll206CryptExportKey
ADVAPI32.dll207CryptGenKey
ADVAPI32.dll422LookupAccountSidW
ADVAPI32.dll341GetNamedSecurityInfoW
ADVAPI32.dll623RegDeleteValueW
ADVAPI32.dll191CryptAcquireContextA
ADVAPI32.dll215CryptHashData
ADVAPI32.dll197CryptDestroyHash
ADVAPI32.dll194CryptCreateHash
ADVAPI32.dll211CryptGetHashParam
ADVAPI32.dll133CopySid
ADVAPI32.dll237DuplicateToken
ADVAPI32.dll698ReportEventW
ADVAPI32.dll234DeregisterEventSource
ADVAPI32.dll682RegisterEventSourceW
ADVAPI32.dll363GetSidSubAuthorityCount
ADVAPI32.dll362GetSidSubAuthority
ADVAPI32.dll677RegSetValueExW
ADVAPI32.dll633RegEnumValueW
ADVAPI32.dll619RegDeleteKeyW
ADVAPI32.dll608RegCreateKeyExW
ADVAPI32.dll648RegOpenKeyExW
ADVAPI32.dll16AddAccessAllowedAce
ADVAPI32.dll329GetLengthSid
ADVAPI32.dll655RegQueryInfoKeyW
ADVAPI32.dll662RegQueryValueW
ADVAPI32.dll218CryptReleaseContext
ADVAPI32.dll208CryptGenRandom
ADVAPI32.dll192CryptAcquireContextW
ADVAPI32.dll287EventRegister
ADVAPI32.dll392ImpersonateLoggedOnUser
ADVAPI32.dll309GetAce
ADVAPI32.dll395InitializeAcl
ADVAPI32.dll347GetSecurityDescriptorDacl
ADVAPI32.dll729SetKernelObjectSecurity
ADVAPI32.dll749SetThreadToken
ADVAPI32.dll699RevertToSelf
ADVAPI32.dll661RegQueryValueExW
ADVAPI32.dll630RegEnumKeyExW
ADVAPI32.dll599RegCloseKey
ADVAPI32.dll534OpenThreadToken
ADVAPI32.dll129ConvertStringSecurityDescriptorToSecurityDescriptorW
ADVAPI32.dll123ConvertSidToStringSidW
ADVAPI32.dll290EventWrite
ADVAPI32.dll306FreeSid
ADVAPI32.dll738SetSecurityDescriptorDacl
ADVAPI32.dll396InitializeSecurityDescriptor
ADVAPI32.dll722SetEntriesInAclW
ADVAPI32.dll32AllocateAndInitializeSid
ADVAPI32.dll366GetTokenInformation
ADVAPI32.dll529OpenProcessToken
ADVAPI32.dll195CryptDecrypt
ordentry_vafunction_name
220x1d7017LoadStringRC
230x1d6d70ReOpenMetaDataWithMemory
240x1f16ca
250x151574CorDllMainForThunk
260x1f0447GetAddrOfContractShutoffFlag
270xc4569GetCLRFunction
280xbc074SetRuntimeInfo
290x47624d_AxlGetIssuerPublicKeyHash
300x475fad_AxlPublicKeyBlobToPublicKeyToken
310x47601d_AxlRSAKeyValueToPublicKeyToken
320x1f1e52AttachProfiler
330x47672aCertCreateAuthenticodeLicense
340x476587CertFreeAuthenticodeSignerInfo
350x476554CertFreeAuthenticodeTimestamperInfo
360x4765e7CertTimestampAuthenticodeLicense
370x476679CertVerifyAuthenticodeLicense
380x38c142ClearDownloadCache
390x157737ClrCreateManagedInstance
400x1db66eCoEEShutDownCOM
410x1d6f53CoInitializeCor
420x1dbd7bCoInitializeEE
430x1d6fb3CoUninitializeCor
440x1f844CoUninitializeEE
450x39e6b4CompareAssemblyIdentity
460x39dd21CompareAssemblyIdentityWithConfig
470x195c42CopyPDBs
480x1db7f3CorExitProcess
490x1f3a5eCorLaunchApplication
500x1d6fb3CorMarkThreadInThreadPool
510x476ae9CreateActContext
520xa6d23CreateApplicationContext
530x38d1ceCreateAssemblyCache
540x39d823CreateAssemblyConfigCookie
550x38f2e5CreateAssemblyEnum
560x2d499CreateAssemblyNameObject
570x476ab6CreateCMSFromXml
580x20f845CreateHistoryReader
590x38ffb5CreateInstallReferenceEnum
600x38caf4DeleteShadowCache
610x39d9c0DestroyAssemblyConfigCookie
620x1d6c19DllCanUnloadNowInternal
630x9c7e7DllGetActivationFactoryImpl
640xc5079DllGetClassObjectInternal
650x1240cDllRegisterServerInternal
660xa0f4DllUnregisterServerInternal
670x1dcfd0EEDllRegisterServer
680x1dd176EEDllUnregisterServer
690x476b15GetAppIdAuthority
700x3a1b00GetAssemblyIdentityFromFile
710x1d6eb1GetAssemblyMDImport
720x3a479bGetCLRIdentityManager
730x390be4GetCachePath
740x3c4889GetHashFromAssemblyFile
750x3c49faGetHashFromAssemblyFileW
760x3c4dddGetHashFromBlob
770x3c4b0fGetHashFromFile
780x3c4be4GetHashFromFileW
790x3c4cbeGetHashFromHandle
800x20f845GetHistoryFileDirectory
810xbb51aGetIdentityAuthority
820x65908GetMetaDataInternalInterface
830x16c6c7GetMetaDataInternalInterfaceFromPublic
840x195306GetMetaDataPublicInterfaceFromInternal
850x20bcbeGetPermissionRequests
860x87f82GetPrivateContextsPerfCounters
870x476a51GetUserStateManager
880x476a23GetUserStore
890xbcea0IEE
900xb754eInitializeFusion
910x1240cInstallCustomModule
920xbc2bb_IsOS@4
930x1d70cbLoadStringRCEx
940x1dd777LogHelp_LogAssert
950xa0f4LogHelp_NoGuiOnAssert
960x6eb40LogHelp_TerminateOnAssert
970x1d74f2LookupHistoryAssembly
980x15e17dMetaDataGetDispenser
990x163d9eNGenCreateNGenWorker
1000x38c142NukeDownloadedCache
1010x476a84ParseManifest
1020x3787a4PostErrorVA
1030x3a0a4dPreBindAssembly
1040x177b6bPreBindAssemblyEx
1050x1d6e10ReOpenMetaDataWithMemoryEx
1060x39495bSetMSIHandleForLogging
1070x3c2836StrongNameCompareAssemblies
1080x3c09adStrongNameErrorInfo
1090x68a98StrongNameFreeBuffer
1100x3c2583StrongNameGetBlob
1110x3c26d6StrongNameGetBlobFromImage
1120x3c1069StrongNameGetPublicKey
1130x3c111aStrongNameGetPublicKeyEx
1140x3c2b1fStrongNameHashSize
1150x3c0f78StrongNameKeyDelete
1160x3c0a92StrongNameKeyGen
1170x3c0bafStrongNameKeyGenEx
1180x3c0e1aStrongNameKeyInstall
1190x3c1533StrongNameSignatureGeneration
1200x3c169fStrongNameSignatureGenerationEx
1210x3c2c96StrongNameSignatureSize
1220x189ab6StrongNameSignatureVerification
1230x3c2180StrongNameSignatureVerificationEx2
1240x3c228aStrongNameSignatureVerificationEx
1250x3c23c6StrongNameSignatureVerificationFromImage
1260x3c1d2eStrongNameTokenFromAssembly
1270x3c1dd8StrongNameTokenFromAssemblyEx
1280x6872eStrongNameTokenFromPublicKey
1290x20bbfbTranslateSecurityAttributes
1300x1dbe13_CorDllMain
1310x1dc1df_CorExeMain2
1320x15414e_CorExeMain
module_nameclr.dll
flags0
timestamp2012-08-25 06:54:09
version0.0
ordinal_base22
nFunctions111
nNames110
Names(110)0xc7b8
Functions(111)0xc5fc
NameOrdinals(110)0xc970

StringTable 040904B0

CompanyNameMicrosoft Corporation
FileDescriptionMicrosoft .NET Runtime Common Language Runtime - WorkStation
FileVersion4.0.30319.18010 built by: FX45RTMGDR
InternalNameclr.dll
LegalCopyright© Microsoft Corporation. All rights reserved.
OriginalFilenameclr.dll
ProductNameMicrosoft® .NET Framework
ProductVersion4.0.30319.18010
CommentsFlavor=Retail
PrivateBuildDDBLD263

VS_FIXEDFILEINFO

FileVersion4.0.30319.18010
ProductVersion4.0.30319.18010
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags8
FileOS4
FileType2
FileSubtype0

Signers (1)

issuer: /C=US/ST=Washington/L=Redmond/O=Microsoft Corporation/CN=Microsoft Code Signing PCA
serial: 3300000088590E3C511FE26A67000100000088

Certificates (4)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:00:00:00:88:59:0e:3c:51:1f:e2:6a:67:00:01:00:00:00:88
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Code Signing PCA
        Validity
            Not Before: Jul 26 20:50:41 2012 GMT
            Not After : Oct 26 20:50:41 2013 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=MOPR, CN=Microsoft Corporation
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:74:74:d0:82:3c:87:a7:9a:d4:8e:b2:04:42:
                    80:97:25:2e:e4:41:ce:93:63:36:5f:13:f2:b4:78:
                    98:80:c6:28:7e:cc:8a:13:ef:3d:37:8c:3b:09:a0:
                    d8:14:c5:5c:5e:d8:a9:1d:7f:01:c1:b3:98:1b:50:
                    77:ec:fe:ea:7c:45:cf:7f:e1:21:0e:c5:84:ca:9f:
                    0f:6b:b3:09:38:b7:74:c4:57:1e:be:f0:48:a8:79:
                    5a:df:0e:9b:1c:9a:a8:bc:c8:52:b5:0c:69:8f:84:
                    ce:71:55:7b:ff:09:20:bf:40:77:37:21:30:74:5b:
                    95:df:77:cb:a0:e5:c1:72:12:06:3d:f2:c8:55:6c:
                    af:c1:fb:6a:16:27:c8:f5:b3:61:e3:d9:ce:1b:0f:
                    1e:f4:e4:cd:4c:34:6c:3e:47:11:e7:02:2b:5f:14:
                    7a:04:07:f5:d7:3d:8b:db:67:7d:57:3e:35:eb:6d:
                    8d:01:40:8d:1a:87:96:e2:0f:77:4c:89:ba:38:9c:
                    fb:8e:02:91:db:22:0f:e5:d0:36:a9:b8:37:45:d0:
                    2a:fc:96:8d:c1:60:71:33:a5:88:b1:f6:c2:04:30:
                    87:5b:c3:d7:2f:b2:79:11:d8:8b:65:62:a2:8a:11:
                    66:5d:7e:7f:05:7a:73:8a:1f:7a:85:e5:cd:28:10:
                    d1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 Subject Key Identifier: 
                26:5B:3E:5B:5D:96:5F:E2:F7:77:88:7F:5E:45:53:58:A8:2E:5B:B8
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Authority Key Identifier: 
                keyid:CB:11:E8:CA:D2:B4:16:58:01:C9:37:2E:33:16:16:B9:4C:9A:0A:1F

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/MicCodSigPCA_08-31-2010.crl

            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicCodSigPCA_08-31-2010.crt

    Signature Algorithm: sha1WithRSAEncryption
         0f:de:40:49:88:91:d1:31:37:a3:44:38:69:b2:6a:2b:d4:91:
         fb:68:85:ae:58:bb:1e:0c:8f:56:fa:99:d7:ca:97:27:4c:e8:
         85:8e:79:69:2c:e4:bd:96:3f:e5:70:66:97:95:30:65:29:ad:
         c6:ca:ac:f5:0f:79:a8:67:bf:69:f4:0f:97:e3:0a:0f:bf:ee:
         96:76:29:b2:22:d0:33:c6:ff:8b:49:ad:ae:b2:fd:bf:25:ea:
         ef:27:50:c0:eb:19:f8:1a:64:6a:a0:e1:17:59:af:f1:cf:ec:
         81:a8:89:e8:b1:d2:14:06:e3:6a:6d:74:52:64:da:96:94:2a:
         5c:69:6b:1f:ed:05:99:1a:dc:e8:65:aa:88:1b:15:95:1a:d3:
         a4:51:96:fd:55:95:f8:63:8d:9f:14:0c:b1:9e:7f:4a:04:ff:
         c3:66:ad:0a:af:ae:a4:de:63:fa:f0:ea:c3:b3:b2:eb:87:db:
         c5:38:ad:b6:73:d2:78:64:ea:ec:21:5b:6b:3b:d6:44:22:f4:
         81:52:a5:2b:43:29:8b:0c:a1:2a:71:82:42:cb:ab:1b:7e:d4:
         a5:a7:ad:f7:de:f7:46:9a:ce:43:39:e8:2a:53:ed:cf:40:e4:
         77:88:42:bf:47:16:e0:a5:36:6a:ef:a7:1a:8d:3a:3d:33:04:
         f6:25:20:23
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:02:8e:42:00:00:00:00:00:1f
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Time-Stamp PCA
        Validity
            Not Before: Jan  9 22:25:58 2012 GMT
            Not After : Apr  9 22:25:58 2013 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=MOPR, OU=nCipher DSE ESN:F528-3777-8A76, CN=Microsoft Time-Stamp Service
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ec:8e:47:4d:54:c2:5c:95:80:d7:4e:0b:3d:
                    bf:97:43:c3:4b:e3:60:67:11:2f:01:4d:0c:d8:d1:
                    46:2f:10:40:de:0b:a4:50:52:12:88:0b:43:7a:2d:
                    3f:ee:48:6e:66:c7:91:e6:03:ca:6e:ec:79:a9:6a:
                    23:9b:cd:62:9e:cd:6a:a4:3f:e7:a3:43:ff:62:47:
                    a1:b4:ba:44:fa:df:40:c1:85:54:7e:e8:a0:a7:2c:
                    43:23:9b:52:1f:32:35:f4:fe:9a:56:9f:8d:63:77:
                    7b:30:9e:0a:33:85:72:1b:ca:4a:c8:cc:25:cd:db:
                    5d:11:2e:c7:b0:8c:f1:8f:43:48:47:05:b5:7a:20:
                    0b:e5:f3:ef:c1:ba:f4:b3:d8:cd:38:8f:fb:21:aa:
                    3d:0a:6d:85:17:d0:ca:e7:86:03:c0:33:83:b5:25:
                    c4:cc:5a:9c:c4:c3:da:62:25:4d:53:25:14:61:8f:
                    fb:1b:e0:ec:f7:47:c6:80:45:e6:35:53:23:36:77:
                    ca:b0:dd:98:2b:39:c0:75:35:0f:dd:81:4c:21:3d:
                    76:30:c5:b2:b0:65:73:29:48:27:d8:c2:d2:b0:84:
                    47:bb:78:ba:d5:74:03:de:d7:4b:19:f7:53:de:78:
                    da:86:f7:61:88:26:33:b4:47:c6:a0:54:88:15:2b:
                    2c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                2F:E8:46:C8:68:D3:6E:4F:B2:20:D0:DE:89:4E:F1:47:EE:48:C1:F2
            X509v3 Authority Key Identifier: 
                keyid:23:34:F8:D9:52:46:70:0A:ED:40:FB:76:FB:B3:2B:B0:C3:35:B3:0F

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl

            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicrosoftTimeStampPCA.crt

            X509v3 Extended Key Usage: 
                Time Stamping
    Signature Algorithm: sha1WithRSAEncryption
         73:ff:7d:2e:9d:cd:8d:88:2b:7c:7d:e3:5e:15:71:e9:68:62:
         f0:08:b6:43:56:c4:5c:4a:2d:68:d8:f9:48:11:91:f3:11:9c:
         85:ec:12:d4:54:a0:75:a9:38:a1:59:7f:75:ee:c6:f5:34:d8:
         54:a4:e2:d0:cc:7c:97:ab:93:75:30:97:07:1d:04:53:2c:36:
         7f:7f:f1:40:1e:0c:9b:80:e2:12:0a:20:3a:31:c0:07:75:67:
         e0:fa:34:9c:ec:88:fb:57:1c:e5:58:62:20:90:45:2f:5d:45:
         a9:c8:8e:b3:7c:72:6d:10:27:c5:4b:d8:6f:a2:a8:12:b3:6d:
         35:23:67:fa:2c:db:25:2d:b9:5d:b1:1e:05:e7:43:28:3e:9c:
         05:76:77:f1:25:de:05:47:19:6d:de:49:85:a1:da:4a:4b:08:
         46:21:35:a8:75:36:4c:b7:b3:08:aa:df:b7:2b:d9:be:2a:6a:
         fd:df:35:17:cc:3f:0c:c7:dd:06:cf:4e:94:24:63:20:0b:2e:
         24:ae:5f:43:44:12:7a:5c:dd:37:db:a4:45:b3:91:3a:12:57:
         7d:e3:47:c6:66:d3:cf:9c:46:56:f4:4c:07:b1:e0:0c:aa:d5:
         f6:d5:3c:a2:e0:b5:d4:f8:1c:7e:04:55:10:6b:18:f4:91:cd:
         51:a7:95:65
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:33:26:1a:00:00:00:00:00:31
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority
        Validity
            Not Before: Aug 31 22:19:32 2010 GMT
            Not After : Aug 31 22:29:32 2020 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Code Signing PCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:72:59:5c:19:30:64:bf:1d:9a:60:20:20:42:
                    99:76:53:6c:3e:1b:d6:6f:cc:cb:f1:ea:6b:fe:97:
                    16:10:e0:df:3a:74:83:1a:b7:2f:a0:32:ec:ff:de:
                    c2:42:4e:23:d5:72:00:db:35:57:0a:89:ca:ae:20:
                    49:f4:f0:68:ac:4d:4b:8d:a5:bd:79:4b:71:9b:47:
                    07:da:fd:25:df:9d:75:88:cf:aa:73:44:7f:d7:81:
                    db:f3:bd:f2:36:a4:c9:5c:45:dc:af:ad:3d:e0:28:
                    68:97:1a:a7:a5:72:73:56:f1:17:94:e4:fd:35:94:
                    72:a0:d6:76:5f:1e:77:45:83:85:38:16:d0:73:5b:
                    05:ba:67:52:8d:a5:b2:69:2f:da:19:0b:fe:92:74:
                    29:e2:76:2f:54:dd:14:30:59:f8:d2:8d:62:fd:cb:
                    c9:5f:46:31:50:b9:27:13:e4:40:30:cf:72:29:10:
                    28:22:c7:37:4e:3d:a0:32:3d:90:cd:a1:38:06:85:
                    5c:4e:56:82:28:2a:05:32:b7:4b:d7:4f:63:e7:d2:
                    2d:62:f1:45:3d:e7:ac:08:00:f6:46:a1:9e:d1:5b:
                    8c:26:53:e8:7a:aa:4a:f2:46:cf:37:3c:38:9e:b4:
                    77:5c:a5:17:9e:8d:cb:11:8f:56:3c:c1:ac:09:5f:
                    03:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier: 
                CB:11:E8:CA:D2:B4:16:58:01:C9:37:2E:33:16:16:B9:4C:9A:0A:1F
            X509v3 Key Usage: 
                Digital Signature, Certificate Sign, CRL Sign
            1.3.6.1.4.1.311.21.1: 
                .....
            1.3.6.1.4.1.311.21.2: 
                ....1N.&....`;.1o.<..-
            1.3.6.1.4.1.311.20.2: 
                .
.S.u.b.C.A
            X509v3 Authority Key Identifier: 
                keyid:0E:AC:82:60:40:56:27:97:E5:25:13:FC:2A:E1:0A:53:95:59:E4:A4

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl

            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt

    Signature Algorithm: sha1WithRSAEncryption
         59:39:3e:7f:26:46:af:eb:6f:40:b1:32:b5:6a:eb:0e:2f:6e:
         a8:49:f7:eb:5f:75:ed:4c:3b:2d:d7:43:ad:0b:fe:cb:e9:2d:
         31:a3:23:cc:7c:50:98:80:21:5d:ac:3d:2f:4c:ba:a2:a8:56:
         9c:e3:70:bb:b8:b4:f8:79:b5:49:72:f7:3e:ea:41:7f:ca:e1:
         0c:17:69:cb:a5:9c:20:2d:fa:0b:50:c4:56:cd:2d:e3:4a:d2:
         bc:70:e7:a8:0d:a2:03:a5:56:e0:b8:8a:4b:57:f2:95:42:9c:
         f1:f3:ef:ee:e3:86:1f:34:3c:b8:56:9a:f0:53:23:85:2a:a4:
         82:1c:93:e2:94:07:1d:f2:e2:4e:f8:8c:a1:ca:e8:13:a5:91:
         4e:c8:1b:d2:8f:72:95:2a:71:6d:9b:1a:f8:1c:f0:53:d6:67:
         cc:22:ff:5c:1d:cd:a2:8c:bd:27:b2:79:63:56:44:a2:51:cd:
         f9:e9:a3:58:56:dd:9b:02:45:44:2f:5f:f4:da:ae:d4:82:32:
         6e:fc:a4:95:13:e4:eb:69:e7:a9:a2:2c:be:c8:2b:10:0e:65:
         8e:99:db:f5:a2:fa:12:26:09:65:38:94:f1:7a:1f:4a:bb:d1:
         e1:56:e8:d0:78:96:18:5c:c9:35:16:5f:dd:93:1d:49:8e:2d:
         be:ad:34:44:1c:ee:10:15:1a:00:5d:dd:35:5b:21:ce:98:c7:
         09:ee:85:0e:8c:4f:6d:0e:13:4e:3d:7c:29:48:9c:72:d1:f3:
         6c:ca:c1:ec:70:a3:57:92:57:7d:94:8d:a0:1b:48:03:5a:f7:
         cf:a3:67:0a:74:a5:36:ed:2d:2f:17:c8:e6:72:37:12:f4:6f:
         b1:3c:67:82:f9:52:b2:8d:33:16:65:1e:0e:8a:dd:10:de:64:
         f4:6f:ce:46:d4:d3:17:e9:79:c4:04:b4:d3:fb:2c:df:1f:8a:
         9e:ac:0a:fb:13:27:40:ad:e4:f9:e1:a9:7f:46:bb:07:60:47:
         65:60:40:4e:b0:42:ec:4e:ed:b3:76:79:d8:0a:34:09:6d:1c:
         80:31:1f:e2:0e:54:dd:e5:a1:fb:e5:47:10:ad:64:98:ff:50:
         16:2e:7c:bf:05:21:7a:e2:95:41:27:69:c3:93:8f:95:c9:8d:
         d8:9b:21:ae:0d:5c:9c:f0:a2:ae:86:68:83:0c:6a:2d:bb:76:
         6b:00:1d:96:ad:f2:16:7b:f6:16:83:24:b9:88:cf:6a:a8:47:
         31:2f:9a:dc:e3:71:3d:d7:00:7e:62:47:d1:ce:88:c9:b8:18:
         fa:0e:72:8d:c1:a3:3d:af:02:40:6a:ff:69:9b:96:e2:10:a8:
         10:b4:37:50:08:d6:c3:3d
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:16:68:34:00:00:00:00:00:1c
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority
        Validity
            Not Before: Apr  3 12:53:09 2007 GMT
            Not After : Apr  3 13:03:09 2021 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Time-Stamp PCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a1:6c:b1:df:db:48:92:2a:7c:6b:2e:19:e1:
                    bd:e2:e3:c5:99:51:23:50:ad:ce:dd:18:4e:24:0f:
                    ee:d1:a7:d1:4c:ad:74:30:20:11:eb:07:d5:54:95:
                    15:49:94:1b:42:92:ae:98:5c:30:26:da:00:6b:e8:
                    7b:bd:ec:89:07:0f:f7:0e:04:98:f0:89:cc:1f:cb:
                    33:24:87:9d:f2:f4:67:1c:2c:fc:7b:e7:88:1d:ea:
                    e7:4e:a3:a1:c1:23:53:ca:8d:fa:45:cf:09:d0:5e:
                    af:d0:b0:42:04:a2:f9:a6:6c:93:67:d7:28:dc:46:
                    53:b0:86:d0:e5:28:46:2e:27:ac:86:4f:55:52:0c:
                    e4:03:2c:fb:6a:90:90:30:6e:87:f3:59:30:9d:fa:
                    7e:d6:97:b3:e8:21:97:7e:f8:d2:13:f3:08:b7:53:
                    6d:52:b4:45:90:9f:48:00:4a:47:66:11:27:29:66:
                    a8:97:e4:d3:06:81:4a:a2:f9:84:a7:11:47:14:09:
                    82:9f:84:ed:55:78:fe:01:9a:1d:50:08:85:00:10:
                    30:46:ed:b7:de:23:46:bb:c4:2d:54:9f:af:1e:78:
                    41:31:77:cc:9b:df:3b:83:93:a1:61:02:b5:1d:0d:
                    b1:fc:f7:9b:b2:01:ce:22:4b:54:ff:f9:05:c3:c2:
                    20:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier: 
                23:34:F8:D9:52:46:70:0A:ED:40:FB:76:FB:B3:2B:B0:C3:35:B3:0F
            X509v3 Key Usage: 
                Digital Signature, Certificate Sign, CRL Sign
            1.3.6.1.4.1.311.21.1: 
                ...
            X509v3 Authority Key Identifier: 
                keyid:0E:AC:82:60:40:56:27:97:E5:25:13:FC:2A:E1:0A:53:95:59:E4:A4
                DirName:/DC=com/DC=microsoft/CN=Microsoft Root Certificate Authority
                serial:79:AD:16:A1:4A:A0:A5:AD:4C:73:58:F4:07:13:2E:65

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl

            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt

            X509v3 Extended Key Usage: 
                Time Stamping
    Signature Algorithm: sha1WithRSAEncryption
         10:97:8a:c3:5c:03:44:36:dd:e9:b4:ad:77:db:ce:79:51:4d:
         01:b1:2e:74:71:5b:6d:0c:13:ab:ce:be:7b:8f:b8:2e:d4:12:
         a2:8c:6d:62:b8:57:02:cb:4e:20:13:50:99:dd:7a:40:e2:57:
         bb:af:58:9a:1c:e1:1d:01:86:ac:bb:78:f2:8b:d0:ec:3b:01:
         ee:e2:be:8f:0a:05:c8:8d:48:e2:f0:53:15:dd:4f:ab:92:e4:
         e7:8d:6a:d5:80:c1:e6:94:f2:06:2f:85:03:e9:91:2a:24:22:
         70:fb:f6:fc:e4:78:99:2e:0d:f7:07:e2:70:bc:18:4e:9d:8e:
         6b:0a:72:95:b8:a1:39:9c:67:2d:c5:51:0e:ea:62:5c:3f:16:
         98:8b:20:3f:e2:07:1a:32:f9:cc:31:4a:76:31:3d:2b:72:0b:
         c8:ea:70:3d:ff:85:0a:13:df:c2:0a:61:8e:f0:d7:b8:17:eb:
         4e:8b:7f:c5:35:2b:5e:a3:bf:eb:bc:7d:0b:42:7b:d4:53:72:
         21:ee:30:ca:bb:78:65:5c:5b:01:17:0a:14:0e:d2:da:14:98:
         f5:3c:b9:66:58:b3:2d:2f:e7:f9:85:86:cc:51:56:e8:9d:70:
         94:6c:ac:39:4c:d4:f6:79:bf:aa:18:7a:62:29:ef:a2:9b:29:
         34:06:77:1a:62:c9:3d:1e:6d:1f:82:f0:0b:c7:2c:bb:cf:43:
         b3:e5:f9:ec:7d:b5:e3:a4:a8:74:35:b8:4e:c5:71:23:12:26:
         76:0b:3c:52:8c:71:5a:46:43:14:bc:b3:b3:b0:4d:67:c8:9f:
         42:ff:80:79:21:80:9e:15:30:66:e8:42:12:5e:1a:c8:9e:22:
         21:d0:43:e9:2b:e9:bb:f4:48:cc:2c:d4:d8:32:80:4c:26:2a:
         48:24:5f:5a:ea:56:ef:a6:de:99:9d:ca:3a:6f:bd:81:27:74:
         06:11:ee:76:21:bf:9b:82:c1:27:54:b6:b1:6a:3d:89:a1:76:
         61:b4:6e:a1:13:a6:bf:aa:47:f0:12:6f:fd:8a:32:6c:b2:fe:
         df:51:c8:8c:23:c9:66:bd:9d:1d:87:12:64:02:3d:2d:af:59:
         8f:b8:e4:21:e5:b5:b0:ca:63:b4:78:54:05:d4:41:2e:50:ac:
         94:b0:a5:78:ab:b3:a0:96:75:1a:d9:92:87:13:75:22:2f:32:
         a8:08:6e:a0:5b:8c:25:bf:a0:ef:84:ca:21:d6:eb:1e:4f:c9:
         9a:ee:49:e0:f7:01:65:6f:89:0b:7d:c8:69:c8:e6:6e:ea:a7:
         97:ce:31:29:ff:0e:c5:5b:5c:d8:4d:1b:a1:d8:fa:2f:9e:3f:
         2e:55:16:6b:c9:13:a3:fd

undefined method `first' for #

offsetsizetypecomment
15c115HTM#
15d06871032BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable







everything is OK