filename | metin2client.exe | |
---|---|---|
size | 2047336 (0x1f3d68) | |
md5 | 45904f8332fabef669c436105bfaea37 | |
type | PE32 executable (GUI) Intel 80386, for MS Windows | |
mimetype | application/x-dosexec | |
clamav | OK | |
virustotal | → scan with virustotal.com | |
histogram |
MZ Header
signature | MZ |
bytes_in_last_block | 0x90 |
blocks_in_file | 3 |
num_relocs | 0 |
header_paragraphs | 4 |
min_extra_paragraphs | 0 |
max_extra_paragraphs | 0xffff |
ss | 0 |
sp | 0xb8 |
checksum | 0 |
ip | 0 |
cs | 0 |
reloc_table_offset | 0x40 |
overlay_number | 0 |
reserved0 | 0 |
oem_id | 0 |
oem_info | 0 |
reserved2 | 0 |
reserved3 | 0 |
reserved4 | 0 |
reserved5 | 0 |
reserved6 | 0 |
lfanew | 0x148 |
Rich Header
lib id | version | times used |
---|---|---|
48 | 9044 | 1 |
10 | 9782 | 3 |
11 | 9782 | 7 |
150 | 20413 | 8 |
149 | 30729 | 64 |
4 | 8447 | 119 |
28 | 9178 | 2 |
29 | 9178 | 76 |
18 | 8444 | 1 |
0 | 0 | 8 |
25 | 9210 | 4 |
131 | 30729 | 241 |
109 | 50727 | 7 |
123 | 50727 | 25 |
1 | 0 | 452 |
138 | 30729 | 55 |
132 | 30729 | 366 |
148 | 21022 | 1 |
151 | 0 | 1 |
145 | 30729 | 1 |
DOS stub
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
PE Header
Sections
Data Directory
type | va | size | |
---|---|---|---|
EXPORT | 0 | 0 | |
IMPORT | 0x31d06d | 0x95 | |
RESOURCE | 0x311000 | 0xb318 | |
EXCEPTION | 0 | 0 | |
SECURITY | 0x1f2a20 | 0x1348 | |
BASERELOC | 0 | 0 | |
DEBUG | 0 | 0 | |
ARCHITECTURE | 0 | 0 | |
GLOBALPTR | 0 | 0 | |
TLS | 0 | 0 | |
LOAD_CONFIG | 0 | 0 | |
Bound_IAT | 0 | 0 | |
IAT | 0 | 0 | |
Delay_IAT | 0 | 0 | |
CLR_Header | 0 | 0 |
module_name | hint | ord | function_name |
---|---|---|---|
kernel32.dll | lstrcpy | ||
comctl32.dll | InitCommonControls |
StringTable 080003b5
CompanyName | Ymir Entertainment |
FileDescription | Metin2Client |
FileVersion | 1.0.28249.1 |
InternalName | Metin2Client |
LegalCopyright | Copyright (C) 2011 |
OriginalFilename | Metin2Client.exe |
ProductName | Metin2Client |
ProductVersion | 1, 0, 0, 1 |
VS_FIXEDFILEINFO
FileVersion | 1.0.28249.0 |
ProductVersion | 1.0.0.1 |
StrucVersion | 0x10000 |
FileFlagsMask | 0x17 |
FileFlags | 0 |
FileOS | 4 |
FileType | 1 |
FileSubtype | 0 |
Signers (1)
issuer: /C=US/O=Thawte, Inc./CN=Thawte Code Signing CA - G2
serial: 6F477406D09ECE11694104306C6B449A
Certificates (4)
Certificate: Data: Version: 3 (0x2) Serial Number: 38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5 Signature Algorithm: sha1WithRSAEncryption Issuer: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA Validity Not Before: Jun 15 00:00:00 2007 GMT Not After : Jun 14 23:59:59 2012 GMT Subject: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer - G2 Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (1024 bit) Modulus: 00:c4:b5:f2:52:15:bc:88:86:60:29:16:4a:5b:2f: 4b:91:6b:87:91:f3:35:54:58:35:ea:d1:36:5e:62: 4d:52:51:34:71:c2:7b:66:1d:89:c8:dd:2a:c4:6a: 0a:f6:37:d9:98:74:91:f6:92:ae:b0:b5:76:96:f1: a9:4a:63:45:47:2e:6b:0b:92:4e:4b:2b:8c:ee:58: 4a:8b:d4:07:e4:1a:2c:f8:82:aa:58:d9:cd:42:f3: 2d:c0:75:de:8d:ab:c7:8e:1d:9a:6c:4c:08:95:1e: de:db:ef:67:e1:72:c2:49:c2:9e:60:3c:e1:e2:be: 16:a3:63:78:69:14:7b:ad:2d Exponent: 65537 (0x10001) X509v3 extensions: Authority Information Access: OCSP - URI:http://ocsp.verisign.com X509v3 Basic Constraints: critical CA:FALSE X509v3 CRL Distribution Points: Full Name: URI:http://crl.verisign.com/tss-ca.crl X509v3 Extended Key Usage: critical Time Stamping X509v3 Key Usage: critical Digital Signature, Non Repudiation X509v3 Subject Alternative Name: DirName:/CN=TSA1-2 Signature Algorithm: sha1WithRSAEncryption Signature Value: 50:c5:4b:c8:24:80:df:e4:0d:24:c2:de:1a:b1:a1:02:a1:a6: 82:2d:0c:83:15:81:37:0a:82:0e:2c:b0:5a:17:61:b5:d8:05: fe:88:db:f1:91:91:b3:56:1a:40:a6:eb:92:be:38:39:b0:75: 36:74:3a:98:4f:e4:37:ba:99:89:ca:95:42:1d:b0:b9:c7:a0: 8d:57:e0:fa:d5:64:04:42:35:4e:01:d1:33:a2:17:c8:4d:aa: 27:c7:f2:e1:86:4c:02:38:4d:83:78:c6:fc:53:e0:eb:e0:06: 87:dd:a4:96:9e:5e:0c:98:e2:a5:be:bf:82:85:c3:60:e1:df: ad:28:d8:c7:a5:4b:64:da:c7:1b:5b:bd:ac:39:08:d5:38:22: a1:33:8b:2f:8a:9a:eb:bc:07:21:3f:44:41:09:07:b5:65:1c: 24:bc:48:d3:44:80:eb:a1:cf:c9:02:b4:14:cf:54:c7:16:a3: 80:5c:f9:79:3e:5d:72:7d:88:17:9e:2c:43:a2:ca:53:ce:7d: 3d:f6:2a:3a:b8:4f:94:00:a5:6d:0a:83:5d:f9:5e:53:f4:18: b3:57:0f:70:c3:fb:f5:ad:95:a0:0e:17:de:c4:16:80:60:c9: 0f:2b:6e:86:04:f1:eb:f4:78:27:d1:05:c5:ee:34:5b:5e:b9: 49:32:f2:33
Certificate: Data: Version: 3 (0x2) Serial Number: 6f:47:74:06:d0:9e:ce:11:69:41:04:30:6c:6b:44:9a Signature Algorithm: sha1WithRSAEncryption Issuer: C=US, O=Thawte, Inc., CN=Thawte Code Signing CA - G2 Validity Not Before: Jul 19 00:00:00 2010 GMT Not After : Jun 23 23:59:59 2012 GMT Subject: C=KR, ST=Seoul, L=Mapo-gu, O=Ymir Entertainment Co., Ltd, CN=Ymir Entertainment Co., Ltd Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (1024 bit) Modulus: 00:c5:68:13:38:06:08:a2:33:27:37:69:76:fe:6f: ec:95:84:65:65:2a:f4:ef:e4:6d:67:0e:03:35:3a: 7e:67:84:84:b1:da:da:74:fe:5c:54:c7:ef:ae:0c: 66:64:13:57:0d:ae:f9:4b:5e:91:ed:b3:5a:23:91: 97:a2:ec:57:67:71:ee:29:67:62:6f:64:91:2b:1f: 60:bc:45:12:31:f1:e0:fb:f6:65:03:b3:83:30:b6: 85:3d:32:93:f8:a5:02:17:3d:6e:af:59:9f:c5:cb: 59:71:a5:4b:6d:c7:28:9f:dc:71:1e:d1:78:c4:ca: 7b:fb:05:ab:b1:df:be:dc:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 CRL Distribution Points: Full Name: URI:http://cs-g2-crl.thawte.com/ThawteCSG2.crl X509v3 Extended Key Usage: Code Signing, Microsoft Commercial Code Signing 2.5.29.4: 0.0.0.. +.....7....... Authority Information Access: OCSP - URI:http://ocsp.thawte.com Netscape Cert Type: Object Signing Signature Algorithm: sha1WithRSAEncryption Signature Value: 5f:f2:23:04:76:42:55:78:7b:1c:3c:be:63:8a:b3:ac:63:1c: e8:0e:d6:a4:2b:65:40:01:17:81:e3:09:27:63:96:8f:0d:97: 22:f3:8d:4c:2e:06:5c:64:28:a3:22:c1:41:c9:9e:2c:56:4a: 98:ef:5a:42:3e:09:1f:30:e7:eb:4a:f3:15:7a:91:98:f1:d1: bd:a2:9b:b2:32:90:fa:67:32:61:1d:10:68:6d:82:b7:89:17: c0:6d:ba:7a:74:01:ee:8a:0e:bb:7d:76:9a:60:86:5e:5d:55: e8:6d:8e:30:bb:79:7d:9e:05:49:ba:5d:74:fd:f6:9b:d8:21: 96:a1:b6:1a:58:b3:3c:97:45:1f:3a:20:69:65:c0:6f:e1:2f: 16:ce:d1:ea:38:f8:92:66:3d:e1:db:31:aa:21:3d:52:08:aa: 15:76:32:e9:f5:76:74:49:6a:20:f4:7c:d9:33:99:ea:55:8a: 56:0e:a4:ae:52:a4:09:df:91:b4:80:41:ed:36:55:5c:45:84: 73:30:20:b6:24:03:7f:9f:db:9a:6c:19:c4:27:99:94:9a:5b: 3e:2a:82:7c:8a:aa:fe:bd:67:12:a2:da:79:e6:14:68:fc:5f: 0f:9f:13:f1:6e:19:66:90:9c:5b:7a:44:c2:ca:82:13:19:a5: 18:02:d3:a9
Certificate: Data: Version: 3 (0x2) Serial Number: 47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4 Signature Algorithm: sha1WithRSAEncryption Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA Validity Not Before: Dec 4 00:00:00 2003 GMT Not After : Dec 3 23:59:59 2013 GMT Subject: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:a9:ca:b2:a4:cc:cd:20:af:0a:7d:89:ac:87:75: f0:b4:4e:f1:df:c1:0f:bf:67:61:bd:a3:64:1c:da: bb:f9:ca:33:ab:84:30:89:58:7e:8c:db:6b:dd:36: 9e:0f:bf:d1:ec:78:f2:77:a6:7e:6f:3c:bf:93:af: 0d:ba:68:f4:6c:94:ca:bd:52:2d:ab:48:3d:f5:b6: d5:5d:5f:1b:02:9f:fa:2f:6b:1e:a4:f7:a3:9a:a6: 1a:c8:02:e1:7f:4c:52:e3:0e:60:ec:40:1c:7e:b9: 0d:de:3f:c7:b4:df:87:bd:5f:7a:6a:31:2e:03:99: 81:13:a8:47:20:ce:31:73:0d:57:2d:cd:78:34:33: 95:12:99:12:b9:de:68:2f:aa:e6:e3:c2:8a:8c:2a: c3:8b:21:87:66:bd:83:58:57:6f:75:bf:3c:aa:26: 87:5d:ca:10:15:3c:9f:84:ea:54:c1:0a:6e:c4:fe: c5:4a:dd:b9:07:11:97:22:7c:db:3e:27:d1:1e:78: ec:9f:31:c9:f1:e6:22:19:db:c4:b3:47:43:9a:1a: 5f:a0:1e:90:e4:5e:f5:ee:7c:f1:7d:ab:62:01:8f: f5:4d:0b:de:d0:22:56:a8:95:cd:ae:88:76:ae:ee: ba:0d:f3:e4:4d:d9:a0:fb:68:a0:ae:14:3b:b3:87: c1:bb Exponent: 65537 (0x10001) X509v3 extensions: Authority Information Access: OCSP - URI:http://ocsp.verisign.com X509v3 Basic Constraints: critical CA:TRUE, pathlen:0 X509v3 CRL Distribution Points: Full Name: URI:http://crl.verisign.com/ThawteTimestampingCA.crl X509v3 Extended Key Usage: Time Stamping X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Subject Alternative Name: DirName:/CN=TSA2048-1-53 Signature Algorithm: sha1WithRSAEncryption Signature Value: 4a:6b:f9:ea:58:c2:44:1c:31:89:79:99:2b:96:bf:82:ac:01: d6:1c:4c:cd:b0:8a:58:6e:df:08:29:a3:5e:c8:ca:93:13:e7: 04:52:0d:ef:47:27:2f:00:38:b0:e4:c9:93:4e:9a:d4:22:62: 15:f7:3f:37:21:4f:70:31:80:f1:8b:38:87:b3:e8:e8:97:00: fe:cf:55:96:4e:24:d2:a9:27:4e:7a:ae:b7:61:41:f3:2a:ce: e7:c9:d9:5e:dd:bb:2b:85:3e:b5:9d:b5:d9:e1:57:ff:be:b4: c5:7e:f5:cf:0c:9e:f0:97:fe:2b:d3:3b:52:1b:1b:38:27:f7: 3f:4a
Certificate: Data: Version: 3 (0x2) Serial Number: 47:97:4d:78:73:a5:bc:ab:0d:2f:b3:70:19:2f:ce:5e Signature Algorithm: sha1WithRSAEncryption Issuer: C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2006 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA Validity Not Before: Feb 8 00:00:00 2010 GMT Not After : Feb 7 23:59:59 2020 GMT Subject: C=US, O=Thawte, Inc., CN=Thawte Code Signing CA - G2 Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:b7:8b:cf:75:5b:9f:25:da:7e:39:b0:93:db:38: d3:a9:23:d0:82:fa:e9:24:7e:5c:0b:8e:83:f8:e6: 7a:59:e6:a3:c5:98:a7:99:d2:44:ff:00:a6:a5:39: 04:8a:da:29:88:ea:db:a2:f3:1c:99:15:26:c2:b1: f4:fc:e1:0c:47:a9:09:11:06:0a:20:92:b9:c7:a0: 04:8c:5c:94:19:ab:5b:25:2c:1d:62:7e:70:0d:ce: 61:6c:dd:2b:82:c9:ce:5d:48:5f:f7:c2:be:bc:41: 23:1e:4f:29:5d:d7:4f:bc:f4:c5:2a:fc:63:e6:7c: 26:4e:99:a7:79:41:9e:10:4a:7a:79:c9:c6:86:f7: 86:95:d2:26:ce:3c:18:2a:d6:7c:ce:af:cd:ad:bb: f7:82:2c:70:26:37:45:e5:0f:47:22:c6:01:28:bd: 2e:83:5c:6a:a4:47:c1:e7:d0:d8:6b:81:46:3f:21: 17:f5:07:c5:43:5a:a6:67:2c:b8:7b:60:11:b5:83: ee:f5:74:0a:72:71:44:3d:58:fe:e8:1a:ab:38:c3: 59:db:7f:6e:38:7d:76:c7:72:69:98:36:96:57:d3: 66:1c:d2:54:91:04:2e:54:19:b0:dc:3d:b5:22:5e: 86:d5:2a:7e:20:df:5d:e6:7a:b1:65:fe:c5:02:4e: 31:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE, pathlen:0 X509v3 CRL Distribution Points: Full Name: URI:http://crl.thawte.com/ThawtePCA.crl X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: OCSP - URI:http://ocsp.thawte.com X509v3 Extended Key Usage: TLS Web Client Authentication, Code Signing X509v3 Subject Alternative Name: DirName:/CN=VeriSignMPKI-2-10 X509v3 Subject Key Identifier: D4:0D:65:3F:7A:BD:34:C6:FE:47:E7:4C:0D:C0:BD:F2:DE:15:AB:71 X509v3 Authority Key Identifier: 7B:5B:45:CF:AF:CE:CB:7A:FD:31:92:1A:6A:B6:F3:46:EB:57:48:50 Signature Algorithm: sha1WithRSAEncryption Signature Value: 56:fe:53:5c:e1:c7:9e:bc:a7:ed:7e:53:6d:6a:14:4b:51:8c: 40:5e:80:5f:aa:a4:e8:2f:ef:38:c8:04:c9:ca:3e:cf:df:3a: 58:4e:b0:d4:b6:63:c5:29:57:fa:02:05:9a:45:4d:68:db:2a: 1b:d4:34:3d:9f:00:c3:5a:cb:95:49:a5:6e:e1:b0:c5:fc:41: 4d:41:4a:6f:d3:77:c8:d7:38:8d:e4:19:de:18:f3:1f:15:65: 83:6d:45:0c:53:f9:0a:9a:2e:a5:5d:bf:6f:32:81:18:92:19: 6a:55:00:ad:63:1c:52:06:7e:55:d9:29:68:ae:4a:7c:18:9a: 79:88:6b:23:23:d8:27:38:2a:29:87:76:ca:fb:c7:b6:62:23: 1f:ed:7a:56:4c:dd:9c:32:5b:f5:3d:0c:46:18:95:3b:2a:23: 68:83:64:41:d9:00:6d:0f:19:24:15:68:72:bd:c5:71:67:6e: ac:4c:db:90:eb:51:a5:1a:62:07:d0:be:6a:00:47:3c:72:2f: ec:4f:61:3e:73:85:ce:5a:0a:b7:ba:c0:1c:13:75:e3:22:39: 28:dd:6d:1d:09:46:9d:4f:ba:e8:40:81:91:c6:a4:ce:94:72: 1b:01:cf:2a:6e:15:67:95:89:ae:7d:b7:b7:cd:f9:0a:3d:75: b6:6b:3c:25
- 1
- SHA1: nil
- 1.3.6.1.4.1.311.2.1.4
- #0
- 1.3.6.1.4.1.311.2.1.15
- :
00 3c 00 3c 00 3c 00 4f 00 62 00 73 00 6f 00 6c |.<.<.<.O.b.s.o.l| 00 65 00 74 00 65 00 3e 00 3e 00 3e |.e.t.e.>.>.> |
- :
- SHA1
4e e8 70 97 42 a4 e8 95 34 c7 c7 eb d9 c0 83 fa |N.p.B...4.......| a2 d5 8c f9 |.... |
- 1.3.6.1.4.1.311.2.1.15
- #0
- Certificates
- Certificate #0
- 2
- 38:25:D7:FA:F8:61:AF:9E:F4:90:E7:26:B5:D6:5A:D5
- RSA-SHA1: nil
- Issuer
- C: US
- O: VeriSign, Inc.
- CN: VeriSign Time Stamping Services CA
- 2007-06-15 00:00:00 UTC: 2012-06-14 23:59:59 UTC
- Subject
- C: US
- O: VeriSign, Inc.
- CN: VeriSign Time Stamping Services Signer - G2
- #5
- rsaEncryption: nil
- C4:B5:F2:52:15:BC:88:86:60:29:16:4A:5B:2F:4B:91:
6B:87:91:F3:35:54:58:35:EA:D1:36:5E:62:4D:52:51:
34:71:C2:7B:66:1D:89:C8:DD:2A:C4:6A:0A:F6:37:D9:
98:74:91:F6:92:AE:B0:B5:76:96:F1:A9:4A:63:45:47:
2E:6B:0B:92:4E:4B:2B:8C:EE:58:4A:8B:D4:07:E4:1A:
2C:F8:82:AA:58:D9:CD:42:F3:2D:C0:75:DE:8D:AB:C7:
8E:1D:9A:6C:4C:08:95:1E:DE:DB:EF:67:E1:72:C2:49:
C2:9E:60:3C:E1:E2:BE:16:A3:63:78:69:14:7B:AD:2D: 0x010001
- X509v3 extensions
- authorityInfoAccess
- OCSP: http://ocsp.verisign.com
- basicConstraints
- true
- nil
- crlDistributionPoints: http://crl.verisign.com/tss-ca.crl
- extendedKeyUsage: true, timeStamping
- keyUsage: true, 0xc0
- subjectAltName
- CN: TSA1-2
- authorityInfoAccess
- RSA-SHA1:
50 c5 4b c8 24 80 df e4 0d 24 c2 de 1a b1 a1 02 |P.K.$....$......| a1 a6 82 2d 0c 83 15 81 37 0a 82 0e 2c b0 5a 17 |...-....7...,.Z.| 61 b5 d8 05 fe 88 db f1 91 91 b3 56 1a 40 a6 eb |a..........V.@..| 92 be 38 39 b0 75 36 74 3a 98 4f e4 37 ba 99 89 |..89.u6t:.O.7...| ca 95 42 1d b0 b9 c7 a0 8d 57 e0 fa d5 64 04 42 |..B......W...d.B| 35 4e 01 d1 33 a2 17 c8 4d aa 27 c7 f2 e1 86 4c |5N..3...M.'....L| 02 38 4d 83 78 c6 fc 53 e0 eb e0 06 87 dd a4 96 |.8M.x..S........| 9e 5e 0c 98 e2 a5 be bf 82 85 c3 60 e1 df ad 28 |.^.........`...(| d8 c7 a5 4b 64 da c7 1b 5b bd ac 39 08 d5 38 22 |...Kd...[..9..8"| a1 33 8b 2f 8a 9a eb bc 07 21 3f 44 41 09 07 b5 |.3./.....!?DA...| 65 1c 24 bc 48 d3 44 80 eb a1 cf c9 02 b4 14 cf |e.$.H.D.........| 54 c7 16 a3 80 5c f9 79 3e 5d 72 7d 88 17 9e 2c |T....\.y>]r}...,| 43 a2 ca 53 ce 7d 3d f6 2a 3a b8 4f 94 00 a5 6d |C..S.}=.*:.O...m| 0a 83 5d f9 5e 53 f4 18 b3 57 0f 70 c3 fb f5 ad |..].^S...W.p....| 95 a0 0e 17 de c4 16 80 60 c9 0f 2b 6e 86 04 f1 |........`..+n...| eb f4 78 27 d1 05 c5 ee 34 5b 5e b9 49 32 f2 33 |..x'....4[^.I2.3|
- 2
- Certificate #1
- 2
- 6F:47:74:06:D0:9E:CE:11:69:41:04:30:6C:6B:44:9A
- RSA-SHA1: nil
- Issuer
- C: US
- O: Thawte, Inc.
- CN: Thawte Code Signing CA - G2
- 2010-07-19 00:00:00 UTC: 2012-06-23 23:59:59 UTC
- Subject
- C: KR
- ST: Seoul
- L: Mapo-gu
- O: Ymir Entertainment Co., Ltd
- CN: Ymir Entertainment Co., Ltd
- #5
- rsaEncryption: nil
- C5:68:13:38:06:08:A2:33:27:37:69:76:FE:6F:EC:95:
84:65:65:2A:F4:EF:E4:6D:67:0E:03:35:3A:7E:67:84:
84:B1:DA:DA:74:FE:5C:54:C7:EF:AE:0C:66:64:13:57:
0D:AE:F9:4B:5E:91:ED:B3:5A:23:91:97:A2:EC:57:67:
71:EE:29:67:62:6F:64:91:2B:1F:60:BC:45:12:31:F1:
E0:FB:F6:65:03:B3:83:30:B6:85:3D:32:93:F8:A5:02:
17:3D:6E:AF:59:9F:C5:CB:59:71:A5:4B:6D:C7:28:9F:
DC:71:1E:D1:78:C4:CA:7B:FB:05:AB:B1:DF:BE:DC:23: 0x010001
- X509v3 extensions
- basicConstraints
- true
- nil
- crlDistributionPoints: http://cs-g2-crl.thawte.com/ThawteCSG2.crl
- extendedKeyUsage
- codeSigning: msCodeCom
- 2.5.29.4
- msCodeCom: 0x80
- authorityInfoAccess
- OCSP: http://ocsp.thawte.com
- nsCertType: 0x10
- basicConstraints
- RSA-SHA1:
5f f2 23 04 76 42 55 78 7b 1c 3c be 63 8a b3 ac |_.#.vBUx{.<.c...| 63 1c e8 0e d6 a4 2b 65 40 01 17 81 e3 09 27 63 |c.....+e@.....'c| 96 8f 0d 97 22 f3 8d 4c 2e 06 5c 64 28 a3 22 c1 |...."..L..\d(.".| 41 c9 9e 2c 56 4a 98 ef 5a 42 3e 09 1f 30 e7 eb |A..,VJ..ZB>..0..| 4a f3 15 7a 91 98 f1 d1 bd a2 9b b2 32 90 fa 67 |J..z........2..g| 32 61 1d 10 68 6d 82 b7 89 17 c0 6d ba 7a 74 01 |2a..hm.....m.zt.| ee 8a 0e bb 7d 76 9a 60 86 5e 5d 55 e8 6d 8e 30 |....}v.`.^]U.m.0| bb 79 7d 9e 05 49 ba 5d 74 fd f6 9b d8 21 96 a1 |.y}..I.]t....!..| b6 1a 58 b3 3c 97 45 1f 3a 20 69 65 c0 6f e1 2f |..X.<.E.: ie.o./| 16 ce d1 ea 38 f8 92 66 3d e1 db 31 aa 21 3d 52 |....8..f=..1.!=R| 08 aa 15 76 32 e9 f5 76 74 49 6a 20 f4 7c d9 33 |...v2..vtIj .|.3| 99 ea 55 8a 56 0e a4 ae 52 a4 09 df 91 b4 80 41 |..U.V...R......A| ed 36 55 5c 45 84 73 30 20 b6 24 03 7f 9f db 9a |.6U\E.s0 .$.....| 6c 19 c4 27 99 94 9a 5b 3e 2a 82 7c 8a aa fe bd |l..'...[>*.|....| 67 12 a2 da 79 e6 14 68 fc 5f 0f 9f 13 f1 6e 19 |g...y..h._....n.| 66 90 9c 5b 7a 44 c2 ca 82 13 19 a5 18 02 d3 a9 |f..[zD..........|
- 2
- Certificate #2
- 2
- 47:BF:19:95:DF:8D:52:46:43:F7:DB:6D:48:0D:31:A4
- RSA-SHA1: nil
- Issuer
- C: ZA
- ST: Western Cape
- L: Durbanville
- O: Thawte
- OU: Thawte Certification
- CN: Thawte Timestamping CA
- 2003-12-04 00:00:00 UTC: 2013-12-03 23:59:59 UTC
- Subject
- C: US
- O: VeriSign, Inc.
- CN: VeriSign Time Stamping Services CA
- #5
- rsaEncryption: nil
- A9:CA:B2:A4:CC:CD:20:AF:0A:7D:89:AC:87:75:F0:B4:
4E:F1:DF:C1:0F:BF:67:61:BD:A3:64:1C:DA:BB:F9:CA:
33:AB:84:30:89:58:7E:8C:DB:6B:DD:36:9E:0F:BF:D1:
EC:78:F2:77:A6:7E:6F:3C:BF:93:AF:0D:BA:68:F4:6C:
94:CA:BD:52:2D:AB:48:3D:F5:B6:D5:5D:5F:1B:02:9F:
FA:2F:6B:1E:A4:F7:A3:9A:A6:1A:C8:02:E1:7F:4C:52:
E3:0E:60:EC:40:1C:7E:B9:0D:DE:3F:C7:B4:DF:87:BD:
5F:7A:6A:31:2E:03:99:81:13:A8:47:20:CE:31:73:0D:
57:2D:CD:78:34:33:95:12:99:12:B9:DE:68:2F:AA:E6:
E3:C2:8A:8C:2A:C3:8B:21:87:66:BD:83:58:57:6F:75:
BF:3C:AA:26:87:5D:CA:10:15:3C:9F:84:EA:54:C1:0A:
6E:C4:FE:C5:4A:DD:B9:07:11:97:22:7C:DB:3E:27:D1:
1E:78:EC:9F:31:C9:F1:E6:22:19:DB:C4:B3:47:43:9A:
1A:5F:A0:1E:90:E4:5E:F5:EE:7C:F1:7D:AB:62:01:8F:
F5:4D:0B:DE:D0:22:56:A8:95:CD:AE:88:76:AE:EE:BA:
0D:F3:E4:4D:D9:A0:FB:68:A0:AE:14:3B:B3:87:C1:BB: 0x010001
- X509v3 extensions
- authorityInfoAccess
- OCSP: http://ocsp.verisign.com
- basicConstraints
- true
- true: 0
- crlDistributionPoints: http://crl.verisign.com/ThawteTimestampingCA.crl
- extendedKeyUsage: timeStamping
- keyUsage: true, 6
- subjectAltName
- CN: TSA2048-1-53
- authorityInfoAccess
- RSA-SHA1:
4a 6b f9 ea 58 c2 44 1c 31 89 79 99 2b 96 bf 82 |Jk..X.D.1.y.+...| ac 01 d6 1c 4c cd b0 8a 58 6e df 08 29 a3 5e c8 |....L...Xn..).^.| ca 93 13 e7 04 52 0d ef 47 27 2f 00 38 b0 e4 c9 |.....R..G'/.8...| 93 4e 9a d4 22 62 15 f7 3f 37 21 4f 70 31 80 f1 |.N.."b..?7!Op1..| 8b 38 87 b3 e8 e8 97 00 fe cf 55 96 4e 24 d2 a9 |.8........U.N$..| 27 4e 7a ae b7 61 41 f3 2a ce e7 c9 d9 5e dd bb |'Nz..aA.*....^..| 2b 85 3e b5 9d b5 d9 e1 57 ff be b4 c5 7e f5 cf |+.>.....W....~..| 0c 9e f0 97 fe 2b d3 3b 52 1b 1b 38 27 f7 3f 4a |.....+.;R..8'.?J|
- 2
- Certificate #3
- 2
- 47:97:4D:78:73:A5:BC:AB:0D:2F:B3:70:19:2F:CE:5E
- RSA-SHA1: nil
- Issuer
- C: US
- O: thawte, Inc.
- OU: Certification Services Division
- OU: (c) 2006 thawte, Inc. - For authorized use only
- CN: thawte Primary Root CA
- 2010-02-08 00:00:00 UTC: 2020-02-07 23:59:59 UTC
- Subject
- C: US
- O: Thawte, Inc.
- CN: Thawte Code Signing CA - G2
- #5
- rsaEncryption: nil
- B7:8B:CF:75:5B:9F:25:DA:7E:39:B0:93:DB:38:D3:A9:
23:D0:82:FA:E9:24:7E:5C:0B:8E:83:F8:E6:7A:59:E6:
A3:C5:98:A7:99:D2:44:FF:00:A6:A5:39:04:8A:DA:29:
88:EA:DB:A2:F3:1C:99:15:26:C2:B1:F4:FC:E1:0C:47:
A9:09:11:06:0A:20:92:B9:C7:A0:04:8C:5C:94:19:AB:
5B:25:2C:1D:62:7E:70:0D:CE:61:6C:DD:2B:82:C9:CE:
5D:48:5F:F7:C2:BE:BC:41:23:1E:4F:29:5D:D7:4F:BC:
F4:C5:2A:FC:63:E6:7C:26:4E:99:A7:79:41:9E:10:4A:
7A:79:C9:C6:86:F7:86:95:D2:26:CE:3C:18:2A:D6:7C:
CE:AF:CD:AD:BB:F7:82:2C:70:26:37:45:E5:0F:47:22:
C6:01:28:BD:2E:83:5C:6A:A4:47:C1:E7:D0:D8:6B:81:
46:3F:21:17:F5:07:C5:43:5A:A6:67:2C:B8:7B:60:11:
B5:83:EE:F5:74:0A:72:71:44:3D:58:FE:E8:1A:AB:38:
C3:59:DB:7F:6E:38:7D:76:C7:72:69:98:36:96:57:D3:
66:1C:D2:54:91:04:2E:54:19:B0:DC:3D:B5:22:5E:86:
D5:2A:7E:20:DF:5D:E6:7A:B1:65:FE:C5:02:4E:31:2D: 0x010001
- X509v3 extensions
- basicConstraints
- true
- true: 0
- crlDistributionPoints: http://crl.thawte.com/ThawtePCA.crl
- keyUsage: true, 6
- authorityInfoAccess
- OCSP: http://ocsp.thawte.com
- extendedKeyUsage
- clientAuth: codeSigning
- subjectAltName
- CN: VeriSignMPKI-2-10
- subjectKeyIdentifier:
d4 0d 65 3f 7a bd 34 c6 fe 47 e7 4c 0d c0 bd f2 |..e?z.4..G.L....| de 15 ab 71 |...q |
- authorityKeyIdentifier:
7b 5b 45 cf af ce cb 7a fd 31 92 1a 6a b6 f3 46 |{[E....z.1..j..F| eb 57 48 50 |.WHP |
- basicConstraints
- RSA-SHA1:
56 fe 53 5c e1 c7 9e bc a7 ed 7e 53 6d 6a 14 4b |V.S\......~Smj.K| 51 8c 40 5e 80 5f aa a4 e8 2f ef 38 c8 04 c9 ca |Q.@^._.../.8....| 3e cf df 3a 58 4e b0 d4 b6 63 c5 29 57 fa 02 05 |>..:XN...c.)W...| 9a 45 4d 68 db 2a 1b d4 34 3d 9f 00 c3 5a cb 95 |.EMh.*..4=...Z..| 49 a5 6e e1 b0 c5 fc 41 4d 41 4a 6f d3 77 c8 d7 |I.n....AMAJo.w..| 38 8d e4 19 de 18 f3 1f 15 65 83 6d 45 0c 53 f9 |8........e.mE.S.| 0a 9a 2e a5 5d bf 6f 32 81 18 92 19 6a 55 00 ad |....].o2....jU..| 63 1c 52 06 7e 55 d9 29 68 ae 4a 7c 18 9a 79 88 |c.R.~U.)h.J|..y.| 6b 23 23 d8 27 38 2a 29 87 76 ca fb c7 b6 62 23 |k##.'8*).v....b#| 1f ed 7a 56 4c dd 9c 32 5b f5 3d 0c 46 18 95 3b |..zVL..2[.=.F..;| 2a 23 68 83 64 41 d9 00 6d 0f 19 24 15 68 72 bd |*#h.dA..m..$.hr.| c5 71 67 6e ac 4c db 90 eb 51 a5 1a 62 07 d0 be |.qgn.L...Q..b...| 6a 00 47 3c 72 2f ec 4f 61 3e 73 85 ce 5a 0a b7 |j.G
s..Z..| ba c0 1c 13 75 e3 22 39 28 dd 6d 1d 09 46 9d 4f |....u."9(.m..F.O| ba e8 40 81 91 c6 a4 ce 94 72 1b 01 cf 2a 6e 15 |..@......r...*n.| 67 95 89 ae 7d b7 b7 cd f9 0a 3d 75 b6 6b 3c 25 |g...}.....=u.k<%|
- 2
- Certificate #0
- 1
- unnamed
- #0
- C: US
- O: Thawte, Inc.
- CN: Thawte Code Signing CA - G2
- 6F:47:74:06:D0:9E:CE:11:69:41:04:30:6C:6B:44:9A
- #0
- SHA1: nil
- #2
- contentType: 1.3.6.1.4.1.311.2.1.4
- 1.3.6.1.4.1.311.2.1.11: msCodeCom
- messageDigest:
83 bb d6 6e 88 ff 0e af c6 23 8e 8f 93 5c cb 02 |...n.....#...\..| 64 dd db a2 |d... |
- 1.3.6.1.4.1.311.2.1.12:
00 4d 00 65 00 74 00 69 00 6e 00 32 00 20 00 43 |.M.e.t.i.n.2. .C| 00 6c 00 69 00 65 00 6e 00 74 |.l.i.e.n.t |
- rsaEncryption:
0c 80 db 8d 1b 06 60 45 93 b1 93 dc e1 76 ed 99 |......`E.....v..| 83 19 f5 fd 56 60 40 e3 bd 50 8f c1 ea c2 d6 0d |....V`@..P......| 7a 07 4f 6b ce 13 5f 9d c7 2b a0 d3 cf c6 d0 1a |z.Ok.._..+......| d7 82 5a d6 9b 01 d2 0c c1 b6 90 13 fc 89 48 33 |..Z...........H3| d0 33 f1 d4 6e 9d 0c 68 e5 af fd 7e aa bd 88 02 |.3..n..h...~....| ae 0d ec fc 93 ce 4e 77 1c fe 88 da 06 1a 25 19 |......Nw......%.| e0 7c 61 a5 2f 07 c0 89 23 8d 10 97 cc 83 20 d4 |.|a./...#..... .| 41 7f 56 fc 52 aa 51 3a b6 02 d7 5f 14 71 01 d2 |A.V.R.Q:..._.q..|
- countersignature
- 1
- unnamed
- #0
- C: US
- O: VeriSign, Inc.
- CN: VeriSign Time Stamping Services CA
- 38:25:D7:FA:F8:61:AF:9E:F4:90:E7:26:B5:D6:5A:D5
- #0
- SHA1: nil
- #2
- contentType: pkcs7-data
- signingTime: 2012-03-22 12:03:05 UTC
- messageDigest:
8a da af 12 48 d2 ad 66 1d e7 6e b4 10 08 3b 67 |....H..f..n...;g| a5 58 77 ed |.Xw. |
- rsaEncryption:
97 3b d6 a1 97 31 8b 45 d2 8b 04 8c 41 9d 56 b4 |.;...1.E....A.V.| 24 d5 72 57 66 ee 69 c6 b3 dd ee 80 67 34 a7 7c |$.rWf.i.....g4.|| 6f b1 02 3b 01 b5 83 d2 bf a6 d1 76 ce e3 30 6e |o..;.......v..0n| b1 ad 1c 8d 5e b4 d6 4c d0 0c cd cf 52 d9 cd 08 |....^..L....R...| fb e9 c0 20 43 e7 35 ce 88 cf d9 c0 1a 4a a4 fa |... C.5......J..| 72 50 4b 46 77 db 8c 2a fb a8 20 81 81 c4 ad 68 |rPKFw..*.. ....h| 03 7e 4f da c4 eb d0 fc e9 2a 40 46 34 f7 d9 1b |.~O......*@F4...| 4f 11 b7 80 ab 1b 9b 69 03 83 68 ca ac 6f 06 2b |O......i..h..o.+|
- unnamed
- 1
- unnamed
Please donate some bucks to keep this site up and running: | |
Ko-fi | |
---|---|
Yandex.Money | |
Thank you! |
[?] can't find file_offset of VA 0x314cf0
[?] can't find file_offset of VA 0x3155b8
[?] can't find file_offset of VA 0x316280
[?] can't find file_offset of VA 0x316f48
[?] can't find file_offset of VA 0x317810
[?] can't find file_offset of VA 0x3184d8
[?] can't find file_offset of VA 0x3191a0
[?] ignoring invalid PEdump::BITMAPINFOHEADER
[?] can't find file_offset of VA 0x31c070
[?] can't find file_offset of VA 0x31be40
[?] can't find file_offset of VA 0x31bee0
[?] can't find file_offset of VA 0x31be68
[?] can't find file_offset of VA 0x3155a0
[?] can't find file_offset of VA 0x314cd8
[?] can't find file_offset of VA 0x316268
[?] can't find file_offset of VA 0x316f30
[?] can't find file_offset of VA 0x3177f8
[?] can't find file_offset of VA 0x3184c0
[?] can't find file_offset of VA 0x319188
[?] can't find file_offset of VA 0x319e50
[!] refusing to read CURDIRENTRY beyond resource size