sample.exe - SAPISVR5

info
MZ
PE
resources
imports
foremost
version info
signature
hexdump
disasm
log
discuss
donate

filename	sample.exe
size	268304 (0x41810)
md5	b9cfefda9c238a7a2b90d77dc7a37646

type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xe0

Rich Header

lib id	version	times used
19	8078	21
123	50727	7
1	0	40
131	21022	1
0	0	1
148	21022	1
145	21022	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	5
TimeDateStamp	0x50bd8ee5
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x2102
Magic	0x10b
LinkerVersion	9.0
SizeOfCode	0x3200
SizeOfInitializedData	0x3c600
SizeOfUninitializedData	0
AddressOfEntryPoint	0x1020
BaseOfCode	0x1000
BaseOfData	0x5000
ImageBase	0x10000000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	5.0
ImageVersion	0.0
SubsystemVersion	5.0
Reserved1	0
SizeOfImage	0x44000
SizeOfHeaders	0x400
CheckSum	0x44ba5
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x3154	0x3200	R-X CODE
.rdata	0x5000	0x234aa	0x23600	R-- IDATA
.data	0x29000	0x18724	0x18800	RW- IDATA
.rsrc	0x42000	0x3d0	0x400	R-- IDATA
.reloc	0x43000	0x3d6	0x400	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x27f44	0x64
RESOURCE	0x42000	0x3d0
EXCEPTION	0	0
SECURITY	0x3fc00	0x1c10
BASERELOC	0x43000	0xe4
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x5000	0xfc
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
VERSION	#1	876	0

module_name	hint	function_name
KERNEL32.dll	429	GetCurrentThreadId
KERNEL32.dll	541	GetPrivateProfileStringW
KERNEL32.dll	570	GetStartupInfoW
KERNEL32.dll	591	GetSystemTimeAsFileTime
KERNEL32.dll	607	GetThreadLocale
KERNEL32.dll	614	GetTickCount
KERNEL32.dll	645	GlobalAlloc
KERNEL32.dll	659	GlobalReAlloc
KERNEL32.dll	660	GlobalSize
KERNEL32.dll	663	GlobalUnlock
KERNEL32.dll	755	LoadLibraryExW
KERNEL32.dll	426	GetCurrentProcessId
KERNEL32.dll	765	LocalFree
KERNEL32.dll	775	LockResource
KERNEL32.dll	794	MultiByteToWideChar
KERNEL32.dll	852	QueryPerformanceCounter
KERNEL32.dll	978	SetErrorMode
KERNEL32.dll	991	SetFilePointer
KERNEL32.dll	1045	SetUnhandledExceptionFilter
KERNEL32.dll	1069	TerminateProcess
KERNEL32.dll	1086	UnhandledExceptionFilter
KERNEL32.dll	1205	lstrlenA
KERNEL32.dll	335	FreeResource
KERNEL32.dll	425	GetCurrentProcess
KERNEL32.dll	332	FreeLibrary
KERNEL32.dll	313	FindResourceW
KERNEL32.dll	260	ExitProcess
KERNEL32.dll	237	EnumResourceNamesW
KERNEL32.dll	1109	VirtualAllocEx
KERNEL32.dll	872	ReadFile
KERNEL32.dll	758	LoadResource
KERNEL32.dll	368	GetCommandLineW
GDI32.dll	500	GetStockObject
ADVAPI32.dll	616	RegQueryValueExW
ADVAPI32.dll	603	RegOpenKeyExW
ADVAPI32.dll	574	RegDeleteKeyW
ADVAPI32.dll	563	RegCreateKeyExW
ADVAPI32.dll	554	RegCloseKey
ADVAPI32.dll	601	RegOpenKeyA
ADVAPI32.dll	632	RegSetValueExW
msvcrt.dll	24	_XcptFilter
msvcrt.dll	40	__getmainargs
msvcrt.dll	58	__p__commode
msvcrt.dll	63	__p__fmode
msvcrt.dll	81	__set_app_type
msvcrt.dll	83	__setusermatherr
msvcrt.dll	95	_acmdln
msvcrt.dll	109	_adjust_fdiv
msvcrt.dll	119	_c_exit
msvcrt.dll	122	_cexit
msvcrt.dll	135	_controlfp
msvcrt.dll	155	_except_handler3
msvcrt.dll	164	_exit
msvcrt.dll	231	_initterm
msvcrt.dll	413	_stricmp
msvcrt.dll	556	exit
msvcrt.dll	686	swprintf
msvcrt.dll	704	vswprintf
msvcrt.dll	713	wcslen

StringTable 040904B0

CompanyName	Microsoft Corporation
FileDescription	SAPISVR 5
FileVersion	5.1.4111.00 (XPClient.010817-1148)
InternalName	SAPISVR5
LegalCopyright	© Microsoft Corporation. All rights reserved.
OriginalFilename	SAPISVR5
ProductName	Microsoft® Windows(TM) Operating System
ProductVersion	5.1.4111.00

VS_FIXEDFILEINFO

FileVersion	5.1.4111.0
ProductVersion	5.1.4111.0
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x10004
FileType	1
FileSubtype	0

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer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ffggfgfgfgfgfggfggffg

serial: -1FB0A7F999A5A66EB32B29F154656574

Certificates (1)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
             (Negative)1f:b0:a7:f9:99:a5:a6:6e:b3:2b:29:f1:54:65:65:74
        Signature Algorithm: md5WithRSAEncryption
        Issuer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ffggfgfgfgfgfggfggffg
        Validity
            Not Before: Dec  1 07:01:21 2012 GMT
            Not After : Dec 31 23:59:59 2039 GMT
        Subject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ffggfgfgfgfgfggfggffg
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (1024 bit)
                Modulus:
                    00:d2:a4:31:fd:ed:91:2b:a0:4d:c6:d9:18:9d:5b:
                    27:f0:eb:a6:b0:cb:27:f6:10:72:f2:38:7f:d6:e9:
                    ce:23:57:03:e0:a6:25:45:03:f4:9d:7a:44:b5:65:
                    86:b7:0b:cb:a2:a3:fb:83:46:77:60:3d:e7:08:b6:
                    bf:48:7e:82:aa:de:de:99:66:ec:1c:30:e4:42:92:
                    0b:24:d5:b3:cf:2a:87:c5:e6:d5:05:6e:c2:cd:6b:
                    89:7e:a3:92:24:c4:62:96:8b:ef:cc:54:8b:44:76:
                    eb:f2:5f:10:b7:4a:b9:7c:35:28:5f:f7:79:b7:85:
                    c5:f5:eb:41:0b:a7:46:0d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Extended Key Usage: 
                Code Signing
            2.5.29.1: 
                0..H..........q...G...... 0...1...0.....U......A22CFCGGGBH1CA2DBBC2CBHHDEFCGD3EA2EH2BGE33FGGA2BFED1C2AEDHGFCBBD2B1FF3C22CBAGEC2AGBG1ECF32CHGBGBEG3CHE3221GEHG3CDDGCBF3EA332AAAE2G3BG3EGAHHFH3B2D11EEFA22D11H2BAABGEG2GB2GA3B1DHHGCF31HGBH1HGC3ADDEF2H2AEE22HDB1FGDFCGCHDCHHA13EG2G21G1HEFEACEHDEBE2ECEADFAECA1GB1EE2GC23GFBEDCGGADBAGDBGFACFEE23GGHD2CE1A3B31DCGE2AE2AD3G3BAD33FB2AHCDDACB32G2221HCA1DC3HFHD33F2GHEEHB1FDEA1GADACAAED1FH1DCGFBFE1CD32GAFGHFHBBGEAADAA1BGHA1DA1ACHGA2EAH133AG3212AFGEGFB1CH13F3CA1EE1AADHGHDCEDCHEDCBG1123DG2HEF1AEBCBD1CADBH21E11H32DFEAHHBGFAECH1C1B32GFAF3FH3GBAECC3F2FEAGHBHFF11CCF13C1HBE2F32D11FG1HD1EGH3AEGCAAHE2GBCHC1FBF2D1DDDAB22C33EGAE2ECG1DGF3ECE31BCHBG1BEF2HAEBFEC2BHC313F3BAFD22FHH2D1E2H32AHDE2EEDCAH3DDFA1ABCGFBF1DB112F2AC23EC1FDDH3D1HEBAGDG3CBEE1CH2C2G3221B3E1AFAB1D2G2CFG1HB2EC3ADBA2GDDGAHG2A2F1C12AGG1E11B3CBE13HBH1BH2D1G3CE21BGGCHA3ABBDA2AE2C1HFEC2HAGEHEEBFC33EC3H1F2HEBC3BC1AFCDHDHABE1EG12E2G1DE2CFCGBBFBDCFFCAFBBBDEBFFC1H1EHFB1A1FB22FA1E21C321AGGCG213CDAACDACDA2ACG3G313HCHG2FECEBGEAB1HF31G22AEBFEADBBB2AD2DC2C2A112 5555555555555ffggfgfgfgfgfggfggffg...OX.fZY.L.......
    Signature Algorithm: md5WithRSAEncryption
         44:0f:4f:b2:46:ec:ab:61:5c:5e:a7:3d:e3:33:8e:3d:2d:81:
         13:30:9f:13:1f:eb:03:59:a1:a1:16:1d:14:41:0e:9d:2e:e8:
         cf:c3:45:ed:25:ae:e6:3c:01:cb:88:33:6a:d0:06:b3:ef:30:
         9f:b5:3d:93:28:2a:b3:3e:33:a0:ab:fa:01:24:24:81:76:6c:
         6a:f1:c5:70:8f:c0:05:06:75:30:fe:73:ac:35:5d:1c:a6:b9:
         81:6c:ed:5f:c2:52:39:86:b7:f3:57:a0:22:50:87:8e:64:4a:
         d3:08:0a:26:21:94:9e:7f:df:e8:b6:cd:34:5e:40:13:a8:f1:
         72:f2

pkcs7-signedData

SHA1: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15

00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |

SHA1

fb fb c4 72 33 31 be ba 17 26 0f 80 0a 14 1e 08 |...r31...&......| 35 bf 83 38 |5..8 |

#2
- 2
  - -42123319054202262821210918877183436148
  - RSA-MD5: nil
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ffggfgfgfgfgfggfggffg
  - 2012-12-01 07:01:21 UTC: 2039-12-31 23:59:59 UTC
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ffggfgfgfgfgfggfggffg
  - #5
    - rsaEncryption: nil
    - D2:A4:31:FD:ED:91:2B:A0:4D:C6:D9:18:9D:5B:27:F0:
      EB:A6:B0:CB:27:F6:10:72:F2:38:7F:D6:E9:CE:23:57:
      03:E0:A6:25:45:03:F4:9D:7A:44:B5:65:86:B7:0B:CB:
      A2:A3:FB:83:46:77:60:3D:E7:08:B6:BF:48:7E:82:AA:
      DE:DE:99:66:EC:1C:30:E4:42:92:0B:24:D5:B3:CF:2A:
      87:C5:E6:D5:05:6E:C2:CD:6B:89:7E:A3:92:24:C4:62:
      96:8B:EF:CC:54:8B:44:76:EB:F2:5F:10:B7:4A:B9:7C:
      35:28:5F:F7:79:B7:85:C5:F5:EB:41:0B:A7:46:0D:DB: 0x010001
  - #6
    - extendedKeyUsage: codeSigning
    - 2.5.29.1
      - e3 e7 0e 8c 98 d2 ab fc 71 b7 db d7 47 dd d8 d6 |........q...G...|
        CN: A22CFCGGGBH1CA2DBBC2CBHHDEFCGD3EA2EH2BGE33FGGA2BFED1C2AEDHGFCBBD2B1FF3C22CBAGEC2AGBG1ECF32CHGBGBEG3CHE3221GEHG3CDDGCBF3EA332AAAE2G3BG3EGAHHFH3B2D11EEFA22D11H2BAABGEG2GB2GA3B1DHHGCF31HGBH1HGC3ADDEF2H2AEE22HDB1FGDFCGCHDCHHA13EG2G21G1HEFEACEHDEBE2ECEADFAECA1GB1EE2GC23GFBEDCGGADBAGDBGFACFEE23GGHD2CE1A3B31DCGE2AE2AD3G3BAD33FB2AHCDDACB32G2221HCA1DC3HFHD33F2GHEEHB1FDEA1GADACAAED1FH1DCGFBFE1CD32GAFGHFHBBGEAADAA1BGHA1DA1ACHGA2EAH133AG3212AFGEGFB1CH13F3CA1EE1AADHGHDCEDCHEDCBG1123DG2HEF1AEBCBD1CADBH21E11H32DFEAHHBGFAECH1C1B32GFAF3FH3GBAECC3F2FEAGHBHFF11CCF13C1HBE2F32D11FG1HD1EGH3AEGCAAHE2GBCHC1FBF2D1DDDAB22C33EGAE2ECG1DGF3ECE31BCHBG1BEF2HAEBFEC2BHC313F3BAFD22FHH2D1E2H32AHDE2EEDCAH3DDFA1ABCGFBF1DB112F2AC23EC1FDDH3D1HEBAGDG3CBEE1CH2C2G3221B3E1AFAB1D2G2CFG1HB2EC3ADBA2GDDGAHG2A2F1C12AGG1E11B3CBE13HBH1BH2D1G3CE21BGGCHA3ABBDA2AE2C1HFEC2HAGEHEEBFC33EC3H1F2HEBC3BC1AFCDHDHABE1EG12E2G1DE2CFCGBBFBDCFFCAFBBBDEBFFC1H1EHFB1A1FB22FA1E21C321AGGCG213CDAACDACDA2ACG3G313HCHG2FECEBGEAB1HF31G22AEBFEADBBB2AD2DC2C2A112 5555555555555ffggfgfgfgfgfggfggffg
        e0 4f 58 06 66 5a 59 91 4c d4 d6 0e ab 9a 9a 8c |.OX.fZY.L.......|
- RSA-MD5:
```
44 0f 4f b2 46 ec ab 61  5c 5e a7 3d e3 33 8e 3d  |D.O.F..a\^.=.3.=|
2d 81 13 30 9f 13 1f eb  03 59 a1 a1 16 1d 14 41  |-..0.....Y.....A|
0e 9d 2e e8 cf c3 45 ed  25 ae e6 3c 01 cb 88 33  |......E.%..<...3|
6a d0 06 b3 ef 30 9f b5  3d 93 28 2a b3 3e 33 a0  |j....0..=.(*.>3.|
ab fa 01 24 24 81 76 6c  6a f1 c5 70 8f c0 05 06  |...$$.vlj..p....|
75 30 fe 73 ac 35 5d 1c  a6 b9 81 6c ed 5f c2 52  |u0.s.5]....l._.R|
39 86 b7 f3 57 a0 22 50  87 8e 64 4a d3 08 0a 26  |9...W."P..dJ...&|
21 94 9e 7f df e8 b6 cd  34 5e 40 13 a8 f1 72 f2  |!.......4^@...r.|
```

#0
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ffggfgfgfgfgfggfggffg
- -42123319054202262821210918877183436148
SHA1: nil

contentType: 1.3.6.1.4.1.311.2.1.4
1.3.6.1.4.1.311.2.1.11: msCodeInd

messageDigest:

76 4c 21 5a 6f 3c 65 2a  38 85 b8 84 db 27 93 ef  |vL!Zo1.3.6.1.4.1.311.2.1.12: 00 32 00 20 00 41 00 32  00 32 00 43 00 46 00 43  |.2. .A.2.2.C.F.C|
00 47 00 47 00 47 00 42  00 48 00 31 00 43 00 41  |.G.G.G.B.H.1.C.A|
00 32 00 44 00 42 00 42  00 43 00 32 00 43 00 42  |.2.D.B.B.C.2.C.B|
00 48 00 48 00 44 00 45  00 46 00 43 00 47 00 44  |.H.H.D.E.F.C.G.D|
00 33 00 45 00 41 00 32  00 45 00 48 00 32 00 42  |.3.E.A.2.E.H.2.B|
00 47 00 45 00 33 00 33  00 46 00 47 00 47 00 41  |.G.E.3.3.F.G.G.A|
00 32 00 42 00 46 00 45  00 44 00 31 00 43 00 32  |.2.B.F.E.D.1.C.2|
00 41 00 45 00 44 00 48  00 47 00 46 00 43 00 42  |.A.E.D.H.G.F.C.B|
00 42 00 44 00 32 00 42  00 31 00 46 00 46 00 33  |.B.D.2.B.1.F.F.3|
00 43 00 32 00 32 00 43  00 42 00 41 00 47 00 45  |.C.2.2.C.B.A.G.E|
00 43 00 32 00 41 00 47  00 42 00 47 00 31 00 45  |.C.2.A.G.B.G.1.E|
00 43 00 46 00 33 00 32  00 43 00 48 00 47 00 42  |.C.F.3.2.C.H.G.B|
00 47 00 42 00 45 00 47  00 33 00 43 00 48 00 45  |.G.B.E.G.3.C.H.E|
00 33 00 32 00 32 00 31  00 47 00 45 00 48 00 47  |.3.2.2.1.G.E.H.G|
00 33 00 43 00 44 00 44  00 47 00 43 00 42 00 46  |.3.C.D.D.G.C.B.F|
00 33 00 45 00 41 00 33  00 33 00 32 00 41 00 41  |.3.E.A.3.3.2.A.A|
00 41 00 45 00 32 00 47  00 33 00 42 00 47 00 33  |.A.E.2.G.3.B.G.3|
00 45 00 47 00 41 00 48  00 48 00 46 00 48 00 33  |.E.G.A.H.H.F.H.3|
00 42 00 32 00 44 00 31  00 31 00 45 00 45 00 46  |.B.2.D.1.1.E.E.F|
00 41 00 32 00 32 00 44  00 31 00 31 00 48 00 32  |.A.2.2.D.1.1.H.2|
00 42 00 41 00 41 00 42  00 47 00 45 00 47 00 32  |.B.A.A.B.G.E.G.2|
00 47 00 42 00 32 00 47  00 41 00 33 00 42 00 31  |.G.B.2.G.A.3.B.1|
00 44 00 48 00 48 00 47  00 43 00 46 00 33 00 31  |.D.H.H.G.C.F.3.1|
00 48 00 47 00 42 00 48  00 31 00 48 00 47 00 43  |.H.G.B.H.1.H.G.C|
00 33 00 41 00 44 00 44  00 45 00 46 00 32 00 48  |.3.A.D.D.E.F.2.H|
00 32 00 41 00 45 00 45  00 32 00 32 00 48 00 44  |.2.A.E.E.2.2.H.D|
00 42 00 31 00 46 00 47  00 44 00 46 00 43 00 47  |.B.1.F.G.D.F.C.G|
00 43 00 48 00 44 00 43  00 48 00 48 00 41 00 31  |.C.H.D.C.H.H.A.1|
00 33 00 45 00 47 00 32  00 47 00 32 00 31 00 47  |.3.E.G.2.G.2.1.G|
00 31 00 48 00 45 00 46  00 45 00 41 00 43 00 45  |.1.H.E.F.E.A.C.E|
00 48 00 44 00 45 00 42  00 45 00 32 00 45 00 43  |.H.D.E.B.E.2.E.C|
00 45 00 41 00 44 00 46  00 41 00 45 00 43 00 41  |.E.A.D.F.A.E.C.A|
00 31 00 47 00 42 00 31  00 45 00 45 00 32 00 47  |.1.G.B.1.E.E.2.G|
00 43 00 32 00 33 00 47  00 46 00 42 00 45 00 44  |.C.2.3.G.F.B.E.D|
00 43 00 47 00 47 00 41  00 44 00 42 00 41 00 47  |.C.G.G.A.D.B.A.G|
00 44 00 42 00 47 00 46  00 41 00 43 00 46 00 45  |.D.B.G.F.A.C.F.E|
00 45 00 32 00 33 00 47  00 47 00 48 00 44 00 32  |.E.2.3.G.G.H.D.2|
00 43 00 45 00 31 00 41  00 33 00 42 00 33 00 31  |.C.E.1.A.3.B.3.1|
00 44 00 43 00 47 00 45  00 32 00 41 00 45 00 32  |.D.C.G.E.2.A.E.2|
00 41 00 44 00 33 00 47  00 33 00 42 00 41 00 44  |.A.D.3.G.3.B.A.D|
00 33 00 33 00 46 00 42  00 32 00 41 00 48 00 43  |.3.3.F.B.2.A.H.C|
00 44 00 44 00 41 00 43  00 42 00 33 00 32 00 47  |.D.D.A.C.B.3.2.G|
00 32 00 32 00 32 00 31  00 48 00 43 00 41 00 31  |.2.2.2.1.H.C.A.1|
00 44 00 43 00 33 00 48  00 46 00 48 00 44 00 33  |.D.C.3.H.F.H.D.3|
00 33 00 46 00 32 00 47  00 48 00 45 00 45 00 48  |.3.F.2.G.H.E.E.H|
00 42 00 31 00 46 00 44  00 45 00 41 00 31 00 47  |.B.1.F.D.E.A.1.G|
00 41 00 44 00 41 00 43  00 41 00 41 00 45 00 44  |.A.D.A.C.A.A.E.D|
00 31 00 46 00 48 00 31  00 44 00 43 00 47 00 46  |.1.F.H.1.D.C.G.F|
00 42 00 46 00 45 00 31  00 43 00 44 00 33 00 32  |.B.F.E.1.C.D.3.2|
00 47 00 41 00 46 00 47  00 48 00 46 00 48 00 42  |.G.A.F.G.H.F.H.B|
00 42 00 47 00 45 00 41  00 41 00 44 00 41 00 41  |.B.G.E.A.A.D.A.A|
00 31 00 42 00 47 00 48  00 41 00 31 00 44 00 41  |.1.B.G.H.A.1.D.A|
00 31 00 41 00 43 00 48  00 47 00 41 00 32 00 45  |.1.A.C.H.G.A.2.E|
00 41 00 48 00 31 00 33  00 33 00 41 00 47 00 33  |.A.H.1.3.3.A.G.3|
00 32 00 31 00 32 00 41  00 46 00 47 00 45 00 47  |.2.1.2.A.F.G.E.G|
00 46 00 42 00 31 00 43  00 48 00 31 00 33 00 46  |.F.B.1.C.H.1.3.F|
00 33 00 43 00 41 00 31  00 45 00 45 00 31 00 41  |.3.C.A.1.E.E.1.A|
00 41 00 44 00 48 00 47  00 48 00 44 00 43 00 45  |.A.D.H.G.H.D.C.E|
00 44 00 43 00 48 00 45  00 44 00 43 00 42 00 47  |.D.C.H.E.D.C.B.G|
00 31 00 31 00 32 00 33  00 44 00 47 00 32 00 48  |.1.1.2.3.D.G.2.H|
00 45 00 46 00 31 00 41  00 45 00 42 00 43 00 42  |.E.F.1.A.E.B.C.B|
00 44 00 31 00 43 00 41  00 44 00 42 00 48 00 32  |.D.1.C.A.D.B.H.2|
00 31 00 45 00 31 00 31  00 48 00 33 00 32 00 44  |.1.E.1.1.H.3.2.D|
00 46 00 45 00 41 00 48  00 48 00 42 00 47 00 46  |.F.E.A.H.H.B.G.F|
00 41 00 45 00 43 00 48  00 31 00 43 00 31 00 42  |.A.E.C.H.1.C.1.B|
00 33 00 32 00 47 00 46  00 41 00 46 00 33 00 46  |.3.2.G.F.A.F.3.F|
00 48 00 33 00 47 00 42  00 41 00 45 00 43 00 43  |.H.3.G.B.A.E.C.C|
00 33 00 46 00 32 00 46  00 45 00 41 00 47 00 48  |.3.F.2.F.E.A.G.H|
00 42 00 48 00 46 00 46  00 31 00 31 00 43 00 43  |.B.H.F.F.1.1.C.C|
00 46 00 31 00 33 00 43  00 31 00 48 00 42 00 45  |.F.1.3.C.1.H.B.E|
00 32 00 46 00 33 00 32  00 44 00 31 00 31 00 46  |.2.F.3.2.D.1.1.F|
00 47 00 31 00 48 00 44  00 31 00 45 00 47 00 48  |.G.1.H.D.1.E.G.H|
00 33 00 41 00 45 00 47  00 43 00 41 00 41 00 48  |.3.A.E.G.C.A.A.H|
00 45 00 32 00 47 00 42  00 43 00 48 00 43 00 31  |.E.2.G.B.C.H.C.1|
00 46 00 42 00 46 00 32  00 44 00 31 00 44 00 44  |.F.B.F.2.D.1.D.D|
00 44 00 41 00 42 00 32  00 32 00 43 00 33 00 33  |.D.A.B.2.2.C.3.3|
00 45 00 47 00 41 00 45  00 32 00 45 00 43 00 47  |.E.G.A.E.2.E.C.G|
00 31 00 44 00 47 00 46  00 33 00 45 00 43 00 45  |.1.D.G.F.3.E.C.E|
00 33 00 31 00 42 00 43  00 48 00 42 00 47 00 31  |.3.1.B.C.H.B.G.1|
00 42 00 45 00 46 00 32  00 48 00 41 00 45 00 42  |.B.E.F.2.H.A.E.B|
00 46 00 45 00 43 00 32  00 42 00 48 00 43 00 33  |.F.E.C.2.B.H.C.3|
00 31 00 33 00 46 00 33  00 42 00 41 00 46 00 44  |.1.3.F.3.B.A.F.D|
00 32 00 32 00 46 00 48  00 48 00 32 00 44 00 31  |.2.2.F.H.H.2.D.1|
00 45 00 32 00 48 00 33  00 32 00 41 00 48 00 44  |.E.2.H.3.2.A.H.D|
00 45 00 32 00 45 00 45  00 44 00 43 00 41 00 48  |.E.2.E.E.D.C.A.H|
00 33 00 44 00 44 00 46  00 41 00 31 00 41 00 42  |.3.D.D.F.A.1.A.B|
00 43 00 47 00 46 00 42  00 46 00 31 00 44 00 42  |.C.G.F.B.F.1.D.B|
00 31 00 31 00 32 00 46  00 32 00 41 00 43 00 32  |.1.1.2.F.2.A.C.2|
00 33 00 45 00 43 00 31  00 46 00 44 00 44 00 48  |.3.E.C.1.F.D.D.H|
00 33 00 44 00 31 00 48  00 45 00 42 00 41 00 47  |.3.D.1.H.E.B.A.G|
00 44 00 47 00 33 00 43  00 42 00 45 00 45 00 31  |.D.G.3.C.B.E.E.1|
00 43 00 48 00 32 00 43  00 32 00 47 00 33 00 32  |.C.H.2.C.2.G.3.2|
00 32 00 31 00 42 00 33  00 45 00 31 00 41 00 46  |.2.1.B.3.E.1.A.F|
00 41 00 42 00 31 00 44  00 32 00 47 00 32 00 43  |.A.B.1.D.2.G.2.C|
00 46 00 47 00 31 00 48  00 42 00 32 00 45 00 43  |.F.G.1.H.B.2.E.C|
00 33 00 41 00 44 00 42  00 41 00 32 00 47 00 44  |.3.A.D.B.A.2.G.D|
00 44 00 47 00 41 00 48  00 47 00 32 00 41 00 32  |.D.G.A.H.G.2.A.2|
00 46 00 31 00 43 00 31  00 32 00 41 00 47 00 47  |.F.1.C.1.2.A.G.G|
00 31 00 45 00 31 00 31  00 42 00 33 00 43 00 42  |.1.E.1.1.B.3.C.B|
00 45 00 31 00 33 00 48  00 42 00 48 00 31 00 42  |.E.1.3.H.B.H.1.B|
00 48 00 32 00 44 00 31  00 47 00 33 00 43 00 45  |.H.2.D.1.G.3.C.E|
00 32 00 31 00 42 00 47  00 47 00 43 00 48 00 41  |.2.1.B.G.G.C.H.A|
00 33 00 41 00 42 00 42  00 44 00 41 00 32 00 41  |.3.A.B.B.D.A.2.A|
00 45 00 32 00 43 00 31  00 48 00 46 00 45 00 43  |.E.2.C.1.H.F.E.C|
00 32 00 48 00 41 00 47  00 45 00 48 00 45 00 45  |.2.H.A.G.E.H.E.E|
00 42 00 46 00 43 00 33  00 33 00 45 00 43 00 33  |.B.F.C.3.3.E.C.3|
00 48 00 31 00 46 00 32  00 48 00 45 00 42 00 43  |.H.1.F.2.H.E.B.C|
00 33 00 42 00 43 00 31  00 41 00 46 00 43 00 44  |.3.B.C.1.A.F.C.D|
00 48 00 44 00 48 00 41  00 42 00 45 00 31 00 45  |.H.D.H.A.B.E.1.E|
00 47 00 31 00 32 00 45  00 32 00 47 00 31 00 44  |.G.1.2.E.2.G.1.D|
00 45 00 32 00 43 00 46  00 43 00 47 00 42 00 42  |.E.2.C.F.C.G.B.B|
00 46 00 42 00 44 00 43  00 46 00 46 00 43 00 41  |.F.B.D.C.F.F.C.A|
00 46 00 42 00 42 00 42  00 44 00 45 00 42 00 46  |.F.B.B.B.D.E.B.F|
00 46 00 43 00 31 00 48  00 31 00 45 00 48 00 46  |.F.C.1.H.1.E.H.F|
00 42 00 31 00 41 00 31  00 46 00 42 00 32 00 32  |.B.1.A.1.F.B.2.2|
00 46 00 41 00 31 00 45  00 32 00 31 00 43 00 33  |.F.A.1.E.2.1.C.3|
00 32 00 31 00 41 00 47  00 47 00 43 00 47 00 32  |.2.1.A.G.G.C.G.2|
00 31 00 33 00 43 00 44  00 41 00 41 00 43 00 44  |.1.3.C.D.A.A.C.D|
00 41 00 43 00 44 00 41  00 32 00 41 00 43 00 47  |.A.C.D.A.2.A.C.G|
00 33 00 47 00 33 00 31  00 33 00 48 00 43 00 48  |.3.G.3.1.3.H.C.H|
00 47 00 32 00 46 00 45  00 43 00 45 00 42 00 47  |.G.2.F.E.C.E.B.G|
00 45 00 41 00 42 00 31  00 48 00 46 00 33 00 31  |.E.A.B.1.H.F.3.1|
00 47 00 32 00 32 00 41  00 45 00 42 00 46 00 45  |.G.2.2.A.E.B.F.E|
00 41 00 44 00 42 00 42  00 42 00 32 00 41 00 44  |.A.D.B.B.B.2.A.D|
00 32 00 44 00 43 00 32  00 43 00 32 00 41 00 31  |.2.D.C.2.C.2.A.1|
00 31 00 32 00 20 00 33  00 34                    |.1.2. .3.4      |

rsaEncryption:

52 a1 a6 db dd 96 33 99  3b f5 d9 38 a8 e7 09 9b  |R.....3.;..8....|
34 eb 31 94 51 7b fa 5d  a4 40 3d e9 f5 3c 2b 07  |4.1.Q{.].@=..<+.|
2a 6b b0 4f 33 e8 30 c5  8a e0 fa 6e c2 54 ac 45  |*k.O3.0....n.T.E|
90 ed 4f 17 c8 ff 59 0d  0f 0e ad 0d b5 31 b8 74  |..O...Y......1.t|
33 a2 d7 f2 6d e4 7d 4b  ba 21 69 ce c8 c8 13 5d  |3...m.}K.!i....]|
77 68 02 2e 3d 92 77 ab  5e f2 43 15 46 31 03 e3  |wh..=.w.^.C.F1..|
85 00 55 e5 fb b1 78 02  01 1a ae d8 73 fd 8e 29  |..U...x.....s..)|
e1 fe f0 d6 28 4a f3 f3  1a 65 3f 26 40 02 a9 2c  |....(J...e?&@..,|