filename | restoration-2-5-14.exe | |
---|---|---|
size | 592736 (0x90b60) | |
md5 | 70386f1160a38893adba7b3c69ffd291 | |
type | PE32 executable (GUI) Intel 80386, for MS Windows | |
mimetype | application/x-dosexec | |
clamav | OK | |
virustotal | → scan with virustotal.com | |
histogram |
MZ Header
signature | MZ |
bytes_in_last_block | 0x90 |
blocks_in_file | 3 |
num_relocs | 0 |
header_paragraphs | 4 |
min_extra_paragraphs | 0 |
max_extra_paragraphs | 0xffff |
ss | 0 |
sp | 0xb8 |
checksum | 0 |
ip | 0 |
cs | 0 |
reloc_table_offset | 0x40 |
overlay_number | 0 |
reserved0 | 0 |
oem_id | 0 |
oem_info | 0 |
reserved2 | 0 |
reserved3 | 0 |
reserved4 | 0 |
reserved5 | 0 |
reserved6 | 0 |
lfanew | 0xb8 |
DOS stub
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
PE Header
Packer / Compiler
Sections
name | va | vsize | raw size | flags | |
---|---|---|---|---|---|
.text | 0x1000 | 0xc218 | 0xd000 | R-X CODE | |
.data | 0xe000 | 0xa94 | 0x1000 | RW- IDATA | |
.rsrc | 0xf000 | 0x80988 | 0x81000 | R-- IDATA |
Data Directory
type | name | size | cp | |
---|---|---|---|---|
CUSTOM | #101 | 319488 | 1200 | |
CUSTOM | #102 | 192512 | 1200 | |
ICON | #30001 | 9640 | 1200 | |
GROUP_ICON | #1 | 20 | 1200 | |
VERSION | #1 | 728 | 1200 | |
MANIFEST | #1 | 692 | 1200 |
module_name | hint | ord | function_name |
---|---|---|---|
MSVBVM60.DLL | __vbaVarTstGt | ||
MSVBVM60.DLL | __vbaVarSub | ||
MSVBVM60.DLL | _CIcos | ||
MSVBVM60.DLL | _adj_fptan | ||
MSVBVM60.DLL | __vbaVarMove | ||
MSVBVM60.DLL | __vbaVarVargNofree | ||
MSVBVM60.DLL | __vbaFreeVar | ||
MSVBVM60.DLL | __vbaAryMove | ||
MSVBVM60.DLL | __vbaLenBstr | ||
MSVBVM60.DLL | __vbaStrVarMove | ||
MSVBVM60.DLL | __vbaFreeVarList | ||
MSVBVM60.DLL | __vbaEnd | ||
MSVBVM60.DLL | _adj_fdiv_m64 | ||
MSVBVM60.DLL | __vbaStrErrVarCopy | ||
MSVBVM60.DLL | _adj_fprem1 | ||
MSVBVM60.DLL | __vbaStrCat | ||
MSVBVM60.DLL | __vbaSetSystemError | ||
MSVBVM60.DLL | __vbaHresultCheckObj | ||
MSVBVM60.DLL | _adj_fdiv_m32 | ||
MSVBVM60.DLL | __vbaAryDestruct | ||
MSVBVM60.DLL | 593 | ||
MSVBVM60.DLL | 594 | ||
MSVBVM60.DLL | __vbaOnError | ||
MSVBVM60.DLL | 595 | ||
MSVBVM60.DLL | _adj_fdiv_m16i | ||
MSVBVM60.DLL | _adj_fdivr_m16i | ||
MSVBVM60.DLL | _CIsin | ||
MSVBVM60.DLL | 632 | ||
MSVBVM60.DLL | __vbaChkstk | ||
MSVBVM60.DLL | 526 | ||
MSVBVM60.DLL | __vbaFileClose | ||
MSVBVM60.DLL | EVENT_SINK_AddRef | ||
MSVBVM60.DLL | 527 | ||
MSVBVM60.DLL | __vbaStrCmp | ||
MSVBVM60.DLL | __vbaPutOwner4 | ||
MSVBVM60.DLL | DllFunctionCall | ||
MSVBVM60.DLL | 563 | ||
MSVBVM60.DLL | _adj_fpatan | ||
MSVBVM60.DLL | EVENT_SINK_Release | ||
MSVBVM60.DLL | 600 | ||
MSVBVM60.DLL | _CIsqrt | ||
MSVBVM60.DLL | EVENT_SINK_QueryInterface | ||
MSVBVM60.DLL | __vbaExceptHandler | ||
MSVBVM60.DLL | __vbaStrToUnicode | ||
MSVBVM60.DLL | __vbaPrintFile | ||
MSVBVM60.DLL | 606 | ||
MSVBVM60.DLL | _adj_fprem | ||
MSVBVM60.DLL | _adj_fdivr_m64 | ||
MSVBVM60.DLL | 608 | ||
MSVBVM60.DLL | 531 | ||
MSVBVM60.DLL | __vbaFPException | ||
MSVBVM60.DLL | __vbaInStrVar | ||
MSVBVM60.DLL | 645 | ||
MSVBVM60.DLL | _CIlog | ||
MSVBVM60.DLL | __vbaErrorOverflow | ||
MSVBVM60.DLL | __vbaFileOpen | ||
MSVBVM60.DLL | __vbaVar2Vec | ||
MSVBVM60.DLL | __vbaNew2 | ||
MSVBVM60.DLL | _adj_fdiv_m32i | ||
MSVBVM60.DLL | _adj_fdivr_m32i | ||
MSVBVM60.DLL | __vbaStrCopy | ||
MSVBVM60.DLL | __vbaFreeStrList | ||
MSVBVM60.DLL | _adj_fdivr_m32 | ||
MSVBVM60.DLL | _adj_fdiv_r | ||
MSVBVM60.DLL | 100 | ||
MSVBVM60.DLL | 579 | ||
MSVBVM60.DLL | __vbaStrToAnsi | ||
MSVBVM60.DLL | 616 | ||
MSVBVM60.DLL | __vbaFpI4 | ||
MSVBVM60.DLL | 617 | ||
MSVBVM60.DLL | _CIatan | ||
MSVBVM60.DLL | __vbaStrMove | ||
MSVBVM60.DLL | 618 | ||
MSVBVM60.DLL | _allmul | ||
MSVBVM60.DLL | _CItan | ||
MSVBVM60.DLL | __vbaFPInt | ||
MSVBVM60.DLL | _CIexp | ||
MSVBVM60.DLL | __vbaFreeStr | ||
MSVBVM60.DLL | __vbaI4ErrVar | ||
MSVBVM60.DLL | __vbaFreeObj |
StringTable 040904B0
Comments | OCSClient v5.0 |
CompanyName | www.download-sponsor.de |
LegalCopyright | Copyright @ www.download-sponsor.de |
ProductName | OCSClient |
FileVersion | 1.00 |
ProductVersion | 1.00 |
InternalName | ocsclient |
OriginalFilename | ocsclient.exe |
VS_FIXEDFILEINFO
FileVersion | 1.0.0.0 |
ProductVersion | 1.0.0.0 |
StrucVersion | 0x10000 |
FileFlagsMask | 0 |
FileFlags | 0 |
FileOS | 4 |
FileType | 1 |
FileSubtype | 0 |
Signers (1)
issuer: /C=US/O=Thawte, Inc./CN=Thawte Code Signing CA - G2
serial: 07887F9E890968F4282F5DDADFFE84E7
Certificates (2)
Certificate: Data: Version: 3 (0x2) Serial Number: 07:88:7f:9e:89:09:68:f4:28:2f:5d:da:df:fe:84:e7 Signature Algorithm: sha1WithRSAEncryption Issuer: C=US, O=Thawte, Inc., CN=Thawte Code Signing CA - G2 Validity Not Before: Nov 19 00:00:00 2012 GMT Not After : Nov 19 23:59:59 2013 GMT Subject: C=DE, ST=Bayern, L=Pfarrkirchen, O=ThinkLABs Ltd. & Co. KG, CN=ThinkLABs Ltd. & Co. KG Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ad:ec:18:a4:13:3e:bd:6e:93:af:db:c8:32: 5c:9d:d2:b8:43:c2:72:3f:31:ea:16:ff:15:c5:35: d6:58:ca:d9:5d:74:ad:63:50:ab:58:c1:ed:3e:e7: 0f:ce:17:a2:ab:d0:0a:1c:ca:c4:d6:80:2c:6b:47: 2d:b8:10:83:d7:8b:93:01:93:a3:a7:cc:99:81:e9: 62:ee:f6:3b:d1:ee:fd:a8:24:00:03:30:bc:cc:cc: 8c:3b:4b:ca:16:a4:ce:a3:de:98:ea:53:5a:b2:1c: 2e:47:98:46:db:a2:e4:12:5e:4a:36:e0:57:94:a3: b7:7a:fa:2f:77:5b:30:0d:87:8b:d7:ef:96:d2:b0: c5:d2:d6:4a:fb:64:87:26:58:8d:ef:98:ab:87:cd: 1c:a5:02:85:0b:5b:02:62:2f:6c:43:3c:4b:c6:78: 5c:0d:ce:50:c8:78:05:77:23:d6:05:d4:3c:bb:44: 2f:67:50:1e:0f:d9:6f:1b:01:6a:7f:e6:aa:b4:78: 7d:de:9e:04:50:16:22:c8:ff:55:2a:6a:a6:4f:e8: 6b:8c:39:24:7c:85:97:41:03:ef:bb:25:c1:8e:fb: f6:5c:62:3a:65:43:cd:16:b1:42:9d:57:1d:8f:11: 8a:b2:4f:69:49:a1:35:54:04:d1:32:68:05:bb:b2: ee:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 CRL Distribution Points: Full Name: URI:http://cs-g2-crl.thawte.com/ThawteCSG2.crl X509v3 Extended Key Usage: Code Signing, Microsoft Commercial Code Signing 2.5.29.4: 0.0.0.. +.....7....... Authority Information Access: OCSP - URI:http://ocsp.thawte.com Netscape Cert Type: Object Signing Signature Algorithm: sha1WithRSAEncryption 76:ba:3d:14:23:07:cc:6f:f4:9e:89:7c:c7:05:4b:ba:2d:65: 44:b4:c0:f2:0a:6f:ad:05:11:86:11:89:9c:ea:15:bd:20:4e: c6:68:db:45:6a:f2:84:65:f2:87:f2:50:be:ad:86:e2:9e:64: 5c:16:c4:b1:65:36:11:fc:eb:70:f6:cf:b4:07:65:da:03:a3: a4:cb:d8:a8:c4:02:43:d6:4a:1c:b1:1c:fc:2a:49:84:3e:41: b0:0b:48:fa:85:49:c6:73:07:30:22:9e:ab:bc:74:f0:bc:a8: 92:22:ff:50:4f:43:eb:ab:9b:79:a4:30:b6:f8:77:78:e3:d0: d9:a3:bf:fd:41:94:f1:87:04:51:dd:ca:6a:22:aa:20:39:05: 06:6f:fd:42:28:f8:cc:14:6a:3c:5b:f1:de:87:4e:15:82:89: b0:33:6b:39:ab:75:6b:b5:85:ed:49:ae:61:f9:c2:b5:7f:7b: c3:be:73:86:03:62:01:f4:73:68:9b:4f:58:bb:99:d3:a8:ef: 80:80:ff:ba:4f:5a:7c:aa:0c:83:e0:41:69:5c:f5:49:ee:22: fc:1c:3e:7a:5c:9d:3e:d1:67:a8:e6:55:c8:1d:02:d0:bc:fb: 10:e0:c4:43:f3:69:f5:58:43:7d:ab:c2:43:94:d1:b3:4a:e9: 67:9e:14:80
Certificate: Data: Version: 3 (0x2) Serial Number: 47:97:4d:78:73:a5:bc:ab:0d:2f:b3:70:19:2f:ce:5e Signature Algorithm: sha1WithRSAEncryption Issuer: C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2006 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA Validity Not Before: Feb 8 00:00:00 2010 GMT Not After : Feb 7 23:59:59 2020 GMT Subject: C=US, O=Thawte, Inc., CN=Thawte Code Signing CA - G2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8b:cf:75:5b:9f:25:da:7e:39:b0:93:db:38: d3:a9:23:d0:82:fa:e9:24:7e:5c:0b:8e:83:f8:e6: 7a:59:e6:a3:c5:98:a7:99:d2:44:ff:00:a6:a5:39: 04:8a:da:29:88:ea:db:a2:f3:1c:99:15:26:c2:b1: f4:fc:e1:0c:47:a9:09:11:06:0a:20:92:b9:c7:a0: 04:8c:5c:94:19:ab:5b:25:2c:1d:62:7e:70:0d:ce: 61:6c:dd:2b:82:c9:ce:5d:48:5f:f7:c2:be:bc:41: 23:1e:4f:29:5d:d7:4f:bc:f4:c5:2a:fc:63:e6:7c: 26:4e:99:a7:79:41:9e:10:4a:7a:79:c9:c6:86:f7: 86:95:d2:26:ce:3c:18:2a:d6:7c:ce:af:cd:ad:bb: f7:82:2c:70:26:37:45:e5:0f:47:22:c6:01:28:bd: 2e:83:5c:6a:a4:47:c1:e7:d0:d8:6b:81:46:3f:21: 17:f5:07:c5:43:5a:a6:67:2c:b8:7b:60:11:b5:83: ee:f5:74:0a:72:71:44:3d:58:fe:e8:1a:ab:38:c3: 59:db:7f:6e:38:7d:76:c7:72:69:98:36:96:57:d3: 66:1c:d2:54:91:04:2e:54:19:b0:dc:3d:b5:22:5e: 86:d5:2a:7e:20:df:5d:e6:7a:b1:65:fe:c5:02:4e: 31:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE, pathlen:0 X509v3 CRL Distribution Points: Full Name: URI:http://crl.thawte.com/ThawtePCA.crl X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: OCSP - URI:http://ocsp.thawte.com X509v3 Extended Key Usage: TLS Web Client Authentication, Code Signing X509v3 Subject Alternative Name: DirName:/CN=VeriSignMPKI-2-10 X509v3 Subject Key Identifier: D4:0D:65:3F:7A:BD:34:C6:FE:47:E7:4C:0D:C0:BD:F2:DE:15:AB:71 X509v3 Authority Key Identifier: keyid:7B:5B:45:CF:AF:CE:CB:7A:FD:31:92:1A:6A:B6:F3:46:EB:57:48:50 Signature Algorithm: sha1WithRSAEncryption 56:fe:53:5c:e1:c7:9e:bc:a7:ed:7e:53:6d:6a:14:4b:51:8c: 40:5e:80:5f:aa:a4:e8:2f:ef:38:c8:04:c9:ca:3e:cf:df:3a: 58:4e:b0:d4:b6:63:c5:29:57:fa:02:05:9a:45:4d:68:db:2a: 1b:d4:34:3d:9f:00:c3:5a:cb:95:49:a5:6e:e1:b0:c5:fc:41: 4d:41:4a:6f:d3:77:c8:d7:38:8d:e4:19:de:18:f3:1f:15:65: 83:6d:45:0c:53:f9:0a:9a:2e:a5:5d:bf:6f:32:81:18:92:19: 6a:55:00:ad:63:1c:52:06:7e:55:d9:29:68:ae:4a:7c:18:9a: 79:88:6b:23:23:d8:27:38:2a:29:87:76:ca:fb:c7:b6:62:23: 1f:ed:7a:56:4c:dd:9c:32:5b:f5:3d:0c:46:18:95:3b:2a:23: 68:83:64:41:d9:00:6d:0f:19:24:15:68:72:bd:c5:71:67:6e: ac:4c:db:90:eb:51:a5:1a:62:07:d0:be:6a:00:47:3c:72:2f: ec:4f:61:3e:73:85:ce:5a:0a:b7:ba:c0:1c:13:75:e3:22:39: 28:dd:6d:1d:09:46:9d:4f:ba:e8:40:81:91:c6:a4:ce:94:72: 1b:01:cf:2a:6e:15:67:95:89:ae:7d:b7:b7:cd:f9:0a:3d:75: b6:6b:3c:25
pkcs7-signedData
- 1
- SHA1: nil
- 1.3.6.1.4.1.311.2.1.4
- #0
- 1.3.6.1.4.1.311.2.1.15
- :
00 3c 00 3c 00 3c 00 4f 00 62 00 73 00 6f 00 6c |.<.<.<.O.b.s.o.l| 00 65 00 74 00 65 00 3e 00 3e 00 3e |.e.t.e.>.>.> |
- :
- SHA1
44 07 98 36 42 30 14 39 1c d8 9b 07 92 19 5a be |D..6B0.9......Z.| 03 4d 98 35 |.M.5 |
- 1.3.6.1.4.1.311.2.1.15
- #0
- Certificates
- Certificate #0
- 2
- 07:88:7F:9E:89:09:68:F4:28:2F:5D:DA:DF:FE:84:E7
- RSA-SHA1: nil
- Issuer
- C: US
- O: Thawte, Inc.
- CN: Thawte Code Signing CA - G2
- 2012-11-19 00:00:00 UTC: 2013-11-19 23:59:59 UTC
- Subject
- C: DE
- ST: Bayern
- L: Pfarrkirchen
- O: ThinkLABs Ltd. & Co. KG
- CN: ThinkLABs Ltd. & Co. KG
- #5
- rsaEncryption: nil
- 94:AD:EC:18:A4:13:3E:BD:6E:93:AF:DB:C8:32:5C:9D:
D2:B8:43:C2:72:3F:31:EA:16:FF:15:C5:35:D6:58:CA:
D9:5D:74:AD:63:50:AB:58:C1:ED:3E:E7:0F:CE:17:A2:
AB:D0:0A:1C:CA:C4:D6:80:2C:6B:47:2D:B8:10:83:D7:
8B:93:01:93:A3:A7:CC:99:81:E9:62:EE:F6:3B:D1:EE:
FD:A8:24:00:03:30:BC:CC:CC:8C:3B:4B:CA:16:A4:CE:
A3:DE:98:EA:53:5A:B2:1C:2E:47:98:46:DB:A2:E4:12:
5E:4A:36:E0:57:94:A3:B7:7A:FA:2F:77:5B:30:0D:87:
8B:D7:EF:96:D2:B0:C5:D2:D6:4A:FB:64:87:26:58:8D:
EF:98:AB:87:CD:1C:A5:02:85:0B:5B:02:62:2F:6C:43:
3C:4B:C6:78:5C:0D:CE:50:C8:78:05:77:23:D6:05:D4:
3C:BB:44:2F:67:50:1E:0F:D9:6F:1B:01:6A:7F:E6:AA:
B4:78:7D:DE:9E:04:50:16:22:C8:FF:55:2A:6A:A6:4F:
E8:6B:8C:39:24:7C:85:97:41:03:EF:BB:25:C1:8E:FB:
F6:5C:62:3A:65:43:CD:16:B1:42:9D:57:1D:8F:11:8A:
B2:4F:69:49:A1:35:54:04:D1:32:68:05:BB:B2:EE:F7: 0x010001
- X509v3 extensions
- basicConstraints
- true
- nil
- crlDistributionPoints: http://cs-g2-crl.thawte.com/ThawteCSG2.crl
- extendedKeyUsage
- codeSigning: msCodeCom
- 2.5.29.4
- msCodeCom: 0x80
- authorityInfoAccess
- OCSP: http://ocsp.thawte.com
- nsCertType: 0x10
- basicConstraints
- RSA-SHA1:
76 ba 3d 14 23 07 cc 6f f4 9e 89 7c c7 05 4b ba |v.=.#..o...|..K.| 2d 65 44 b4 c0 f2 0a 6f ad 05 11 86 11 89 9c ea |-eD....o........| 15 bd 20 4e c6 68 db 45 6a f2 84 65 f2 87 f2 50 |.. N.h.Ej..e...P| be ad 86 e2 9e 64 5c 16 c4 b1 65 36 11 fc eb 70 |.....d\...e6...p| f6 cf b4 07 65 da 03 a3 a4 cb d8 a8 c4 02 43 d6 |....e.........C.| 4a 1c b1 1c fc 2a 49 84 3e 41 b0 0b 48 fa 85 49 |J....*I.>A..H..I| c6 73 07 30 22 9e ab bc 74 f0 bc a8 92 22 ff 50 |.s.0"...t....".P| 4f 43 eb ab 9b 79 a4 30 b6 f8 77 78 e3 d0 d9 a3 |OC...y.0..wx....| bf fd 41 94 f1 87 04 51 dd ca 6a 22 aa 20 39 05 |..A....Q..j". 9.| 06 6f fd 42 28 f8 cc 14 6a 3c 5b f1 de 87 4e 15 |.o.B(...j<[...N.| 82 89 b0 33 6b 39 ab 75 6b b5 85 ed 49 ae 61 f9 |...3k9.uk...I.a.| c2 b5 7f 7b c3 be 73 86 03 62 01 f4 73 68 9b 4f |...{..s..b..sh.O| 58 bb 99 d3 a8 ef 80 80 ff ba 4f 5a 7c aa 0c 83 |X.........OZ|...| e0 41 69 5c f5 49 ee 22 fc 1c 3e 7a 5c 9d 3e d1 |.Ai\.I."..>z\.>.| 67 a8 e6 55 c8 1d 02 d0 bc fb 10 e0 c4 43 f3 69 |g..U.........C.i| f5 58 43 7d ab c2 43 94 d1 b3 4a e9 67 9e 14 80 |.XC}..C...J.g...|
- 2
- Certificate #1
- 2
- 47:97:4D:78:73:A5:BC:AB:0D:2F:B3:70:19:2F:CE:5E
- RSA-SHA1: nil
- Issuer
- C: US
- O: thawte, Inc.
- OU: Certification Services Division
- OU: (c) 2006 thawte, Inc. - For authorized use only
- CN: thawte Primary Root CA
- 2010-02-08 00:00:00 UTC: 2020-02-07 23:59:59 UTC
- Subject
- C: US
- O: Thawte, Inc.
- CN: Thawte Code Signing CA - G2
- #5
- rsaEncryption: nil
- B7:8B:CF:75:5B:9F:25:DA:7E:39:B0:93:DB:38:D3:A9:
23:D0:82:FA:E9:24:7E:5C:0B:8E:83:F8:E6:7A:59:E6:
A3:C5:98:A7:99:D2:44:FF:00:A6:A5:39:04:8A:DA:29:
88:EA:DB:A2:F3:1C:99:15:26:C2:B1:F4:FC:E1:0C:47:
A9:09:11:06:0A:20:92:B9:C7:A0:04:8C:5C:94:19:AB:
5B:25:2C:1D:62:7E:70:0D:CE:61:6C:DD:2B:82:C9:CE:
5D:48:5F:F7:C2:BE:BC:41:23:1E:4F:29:5D:D7:4F:BC:
F4:C5:2A:FC:63:E6:7C:26:4E:99:A7:79:41:9E:10:4A:
7A:79:C9:C6:86:F7:86:95:D2:26:CE:3C:18:2A:D6:7C:
CE:AF:CD:AD:BB:F7:82:2C:70:26:37:45:E5:0F:47:22:
C6:01:28:BD:2E:83:5C:6A:A4:47:C1:E7:D0:D8:6B:81:
46:3F:21:17:F5:07:C5:43:5A:A6:67:2C:B8:7B:60:11:
B5:83:EE:F5:74:0A:72:71:44:3D:58:FE:E8:1A:AB:38:
C3:59:DB:7F:6E:38:7D:76:C7:72:69:98:36:96:57:D3:
66:1C:D2:54:91:04:2E:54:19:B0:DC:3D:B5:22:5E:86:
D5:2A:7E:20:DF:5D:E6:7A:B1:65:FE:C5:02:4E:31:2D: 0x010001
- X509v3 extensions
- basicConstraints
- true
- true: 0
- crlDistributionPoints: http://crl.thawte.com/ThawtePCA.crl
- keyUsage: true, 6
- authorityInfoAccess
- OCSP: http://ocsp.thawte.com
- extendedKeyUsage
- clientAuth: codeSigning
- subjectAltName
- CN: VeriSignMPKI-2-10
- subjectKeyIdentifier:
d4 0d 65 3f 7a bd 34 c6 fe 47 e7 4c 0d c0 bd f2 |..e?z.4..G.L....| de 15 ab 71 |...q |
- authorityKeyIdentifier:
7b 5b 45 cf af ce cb 7a fd 31 92 1a 6a b6 f3 46 |{[E....z.1..j..F| eb 57 48 50 |.WHP |
- basicConstraints
- RSA-SHA1:
56 fe 53 5c e1 c7 9e bc a7 ed 7e 53 6d 6a 14 4b |V.S\......~Smj.K| 51 8c 40 5e 80 5f aa a4 e8 2f ef 38 c8 04 c9 ca |Q.@^._.../.8....| 3e cf df 3a 58 4e b0 d4 b6 63 c5 29 57 fa 02 05 |>..:XN...c.)W...| 9a 45 4d 68 db 2a 1b d4 34 3d 9f 00 c3 5a cb 95 |.EMh.*..4=...Z..| 49 a5 6e e1 b0 c5 fc 41 4d 41 4a 6f d3 77 c8 d7 |I.n....AMAJo.w..| 38 8d e4 19 de 18 f3 1f 15 65 83 6d 45 0c 53 f9 |8........e.mE.S.| 0a 9a 2e a5 5d bf 6f 32 81 18 92 19 6a 55 00 ad |....].o2....jU..| 63 1c 52 06 7e 55 d9 29 68 ae 4a 7c 18 9a 79 88 |c.R.~U.)h.J|..y.| 6b 23 23 d8 27 38 2a 29 87 76 ca fb c7 b6 62 23 |k##.'8*).v....b#| 1f ed 7a 56 4c dd 9c 32 5b f5 3d 0c 46 18 95 3b |..zVL..2[.=.F..;| 2a 23 68 83 64 41 d9 00 6d 0f 19 24 15 68 72 bd |*#h.dA..m..$.hr.| c5 71 67 6e ac 4c db 90 eb 51 a5 1a 62 07 d0 be |.qgn.L...Q..b...| 6a 00 47 3c 72 2f ec 4f 61 3e 73 85 ce 5a 0a b7 |j.G
s..Z..| ba c0 1c 13 75 e3 22 39 28 dd 6d 1d 09 46 9d 4f |....u."9(.m..F.O| ba e8 40 81 91 c6 a4 ce 94 72 1b 01 cf 2a 6e 15 |..@......r...*n.| 67 95 89 ae 7d b7 b7 cd f9 0a 3d 75 b6 6b 3c 25 |g...}.....=u.k<%|
- 2
- Certificate #0
- 1
- unnamed
- #0
- C: US
- O: Thawte, Inc.
- CN: Thawte Code Signing CA - G2
- 07:88:7F:9E:89:09:68:F4:28:2F:5D:DA:DF:FE:84:E7
- #0
- SHA1: nil
- #2
- 1.3.6.1.4.1.311.2.1.12
- nil
- contentType: 1.3.6.1.4.1.311.2.1.4
- 1.3.6.1.4.1.311.2.1.11: msCodeCom
- messageDigest:
08 a1 3a 92 19 9e 65 55 e8 fc 3f 89 48 e2 0b 23 |..:...eU..?.H..#| 4c 6d d5 39 |Lm.9 |
- 1.3.6.1.4.1.311.2.1.12
- rsaEncryption:
7c bf 32 b2 c8 c6 9f 82 2a ee 68 5d 6b c1 f0 a9 ||.2.....*.h]k...| 49 71 17 c1 1f 05 df 44 1e 63 c5 e8 2e 66 c6 02 |Iq.....D.c...f..| 35 dc 89 79 2e c5 dc ff 4d fd fc 7c 08 cc 15 6d |5..y....M..|...m| e1 66 bf 54 8d 5a b3 c7 21 d8 8d f7 31 1b c1 90 |.f.T.Z..!...1...| 69 96 c9 05 f6 0c fc 22 87 13 77 f9 81 d7 b8 de |i......"..w.....| b3 17 ae 91 82 9b 70 ce c7 c1 98 c4 3e a2 aa 07 |......p.....>...| 09 dc 9e b6 49 a2 a5 f7 d5 69 a3 23 26 8f ee 50 |....I....i.#&..P| f7 8c 13 d8 d0 79 b2 0f 90 2f 9d 1a bb 77 f2 a7 |.....y.../...w..| 5a 22 53 58 5d 10 45 94 d9 43 62 87 f7 4e 47 0d |Z"SX].E..Cb..NG.| fb 10 df 3b c4 06 80 8c 15 bb d1 85 8c 47 9d ac |...;.........G..| 0c 8d c4 1a dc 27 9c 93 c3 77 4f 5c a9 b1 d1 9c |.....'...wO\....| ae a5 79 67 da e7 cc d9 0c ef cd 04 2c 9b 43 1e |..yg........,.C.| cb fc 24 10 d8 3b 9a a4 98 ce f6 b8 ab d4 cd 1b |..$..;..........| 7c ca b6 ab ab 84 16 03 0d d9 a9 54 5f c8 63 e4 ||..........T_.c.| 3f 00 d0 83 73 3c 45 ec 57 81 2d 7b fd 7b 12 2f |?...s
- unnamed
offset | size | type | comment | |
---|---|---|---|---|
0 | 589824 | EXE | 02/08/2013 17:48:55 | # |
15c1 | 15 | HTM | # | |
13b01 | 455 | PNG | (13 x 13) | # |
13d6b | 418 | PNG | (13 x 13) | # |
13fb0 | 358 | PNG | (13 x 13) | # |
141b9 | 345 | PNG | (13 x 13) | # |
143b5 | 12061 | JPG | # | |
17375 | 14234 | JPG | # | |
1abb2 | 1986 | PNG | (32 x 32) | # |
1b417 | 109 | GIF | (8 x 11) | # |
1b527 | 121 | GIF | (9 x 11) | # |
1b643 | 175 | GIF | (11 x 8) | # |
1b795 | 93 | GIF | (9 x 11) | # |
1b895 | 25494 | JPG | # | |
21cce | 5434 | GIF | (202 x 223) | # |
232ab | 429 | GIF | (289 x 21) | # |
234fb | 2075 | GIF | (496 x 352) | # |
23db9 | 3490 | PNG | (49 x 43) | # |
24bfe | 3299 | JPG | # | |
90000 | 2912 | PKCS7 | Authenticode Signature | # |
Please donate some bucks to keep this site up and running: | |
Ko-fi | |
---|---|
Yandex.Money | |
Thank you! |
[?] can't find file_offset of VA 0x228