filename | NSUCC.exe | |
---|---|---|
size | 1179888 (0x1200f0) | |
md5 | db2f9160f56fc8afd7aa12b8ddc8da23 | |
type | PE32 executable (GUI) Intel 80386, for MS Windows | |
mimetype | application/x-dosexec | |
clamav | Win.Malware.Noobyprotect-6622929-0 FOUND | |
virustotal | → scan with virustotal.com | |
histogram |
MZ Header
signature | MZ |
bytes_in_last_block | 0x90 |
blocks_in_file | 3 |
num_relocs | 0 |
header_paragraphs | 4 |
min_extra_paragraphs | 0 |
max_extra_paragraphs | 0xffff |
ss | 0 |
sp | 0xb8 |
checksum | 0 |
ip | 0 |
cs | 0 |
reloc_table_offset | 0x40 |
overlay_number | 0 |
reserved0 | 0 |
oem_id | 0 |
oem_info | 0 |
reserved2 | 0 |
reserved3 | 0 |
reserved4 | 0 |
reserved5 | 0 |
reserved6 | 0 |
lfanew | 0x80 |
DOS stub
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
PE Header
Sections
Data Directory
type | name | size | cp | |
---|---|---|---|---|
ICON | #1 | 16493 | 0 | |
ICON | #2 | 38056 | 0 | |
ICON | #3 | 9640 | 0 | |
ICON | #4 | 4264 | 0 | |
ICON | #5 | 2440 | 0 | |
ICON | #6 | 1128 | 0 | |
GROUP_ICON | #32512 | 90 | 0 | |
VERSION | #1 | 876 | 0 | |
MANIFEST | #1 | 3422 | 0 |
module_name | hint | ord | function_name |
---|---|---|---|
mscoree.dll | _CorExeMain | ||
mscoree.dll | 54104 | 43 26 d5 7a ce 54 ca ad 5c ed 41 c3 4b 08 49 03 |C&.z.T..\.A.K.I.| 21 10 d9 38 1b 72 6d 7c |!..8.rm| | | |
MSVCRT.dll | strncpy | ||
MSVCRT.dll | 2147483647 | ||
IPHLPAPI.DLL | GetInterfaceInfo | ||
IPHLPAPI.DLL | 2147483647 | ||
PSAPI.DLL | GetMappedFileNameW | ||
PSAPI.DLL | 2147483647 | ||
KERNEL32.dll | GetModuleFileNameW | ||
KERNEL32.dll | 2147483647 | ||
USER32.dll | GetWindow | ||
USER32.dll | 2147483647 | ||
ADVAPI32.dll | RegDeleteKeyA | ||
ADVAPI32.dll | 2147483647 | ||
SHELL32.dll | SHGetFolderPathW | ||
SHELL32.dll | 2147483647 |
StringTable 000004b0
Comments | 成都东软学院校园客户端 |
CompanyName | 成都东软学院信息中心 |
FileDescription | 成都东软学院校园客户端 |
FileVersion | 1.16.3.8013 |
InternalName | NSUCC.exe |
LegalCopyright | Copyright © 2015 成都东软学院信息中心 |
LegalTrademarks | NSU-IC |
OriginalFilename | NSUCC.exe |
ProductName | NSUCC |
ProductVersion | 1.16.3.8013 |
Assembly Version | 1.16.3.8013 |
VS_FIXEDFILEINFO
FileVersion | 1.16.3.8013 |
ProductVersion | 1.16.3.8013 |
StrucVersion | 0x10000 |
FileFlagsMask | 0x3f |
FileFlags | 0 |
FileOS | 4 |
FileType | 1 |
FileSubtype | 0 |
Signers (1)
issuer: /CN=\xE6\x88\x90\xE9\x83\xBD\xE4\xB8\x9C\xE8\xBD\xAF\xE5\xAD\xA6\xE9\x99\xA2
serial: 2D0000000241390C5AE846E086000000000002
Certificates (3)
Certificate: Data: Version: 3 (0x2) Serial Number: 7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b Signature Algorithm: sha1WithRSAEncryption Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA Validity Not Before: Dec 21 00:00:00 2012 GMT Not After : Dec 30 23:59:59 2020 GMT Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ac:b3:49:54:4b:97:1c:12:0a:d8:25:79:91: 22:57:2a:6f:dc:b8:26:c4:43:73:6b:c2:bf:2e:50: 5a:fb:14:c2:76:8e:43:01:25:43:b4:a1:e2:45:f4: e8:b7:7b:c3:74:cc:22:d7:b4:94:00:02:f7:4d:ed: bf:b4:b7:44:24:6b:cd:5f:45:3b:d1:44:ce:43:12: 73:17:82:8b:69:b4:2b:cb:99:1e:ac:72:1b:26:4d: 71:1f:b1:31:dd:fb:51:61:02:53:a6:aa:f5:49:2c: 05:78:45:a5:2f:89:ce:e7:99:e7:fe:8c:e2:57:3f: 3d:c6:92:dc:4a:f8:7b:33:e4:79:0a:fb:f0:75:88: 41:9c:ff:c5:03:51:99:aa:d7:6c:9f:93:69:87:65: 29:83:85:c2:60:14:c4:c8:c9:3b:14:da:c0:81:f0: 1f:0d:74:de:92:22:ab:ca:f7:fb:74:7c:27:e6:f7: 4a:1b:7f:a7:c3:9e:2d:ae:8a:ea:a6:e6:aa:27:16: 7d:61:f7:98:71:11:bc:e2:50:a1:4b:e5:5d:fa:e5: 0e:a7:2c:9f:aa:65:20:d3:d8:96:e8:c8:7c:a5:4e: 48:44:ff:19:e2:44:07:92:0b:d7:68:84:80:5d:6a: 78:64:45:cd:60:46:7e:54:c1:13:7c:c5:79:f1:c9: c1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD Authority Information Access: OCSP - URI:http://ocsp.thawte.com X509v3 Basic Constraints: critical CA:TRUE, pathlen:0 X509v3 CRL Distribution Points: Full Name: URI:http://crl.thawte.com/ThawteTimestampingCA.crl X509v3 Extended Key Usage: Time Stamping X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Subject Alternative Name: DirName:/CN=TimeStamp-2048-1 Signature Algorithm: sha1WithRSAEncryption 03:09:9b:8f:79:ef:7f:59:30:aa:ef:68:b5:fa:e3:09:1d:bb: 4f:82:06:5d:37:5f:a6:52:9f:16:8d:ea:1c:92:09:44:6e:f5: 6d:eb:58:7c:30:e8:f9:69:8d:23:73:0b:12:6f:47:a9:ae:39: 11:f8:2a:b1:9b:b0:1a:c3:8e:eb:59:96:00:ad:ce:0c:4d:b2: d0:31:a6:08:5c:2a:7a:fc:e2:7a:1d:57:4c:a8:65:18:e9:79: 40:62:25:96:6e:c7:c7:37:6a:83:21:08:8e:41:ea:dd:d9:57: 3f:1d:77:49:87:2a:16:06:5e:a6:38:6a:22:12:a3:51:19:83: 7e:b6
Certificate: Data: Version: 3 (0x2) Serial Number: 2d:00:00:00:02:41:39:0c:5a:e8:46:e0:86:00:00:00:00:00:02 Signature Algorithm: sha1WithRSAEncryption Issuer: CN=\xE6\x88\x90\xE9\x83\xBD\xE4\xB8\x9C\xE8\xBD\xAF\xE5\xAD\xA6\xE9\x99\xA2 Validity Not Before: Dec 16 02:57:05 2015 GMT Not After : Dec 16 03:07:05 2025 GMT Subject: C=CN, ST=\xE5\x9B\x9B\xE5\xB7\x9D, L=\xE6\x88\x90\xE9\x83\xBD, O=\xE6\x88\x90\xE9\x83\xBD\xE4\xB8\x9C\xE8\xBD\xAF\xE5\xAD\xA6\xE9\x99\xA2, OU=\xE4\xBF\xA1\xE6\x81\xAF\xE4\xB8\xAD\xE5\xBF\x83, CN=\xE6\xA0\xA1\xE5\x9B\xAD\xE5\xAE\xA2\xE6\x88\xB7\xE7\xAB\xAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b2:68:1e:a6:31:2b:29:5a:02:01:dd:53:4c: a2:d5:bc:f0:f8:f8:2d:3f:02:95:f8:ea:73:99:07: d9:c8:df:a5:3a:35:da:ea:aa:39:07:58:aa:0c:e7: 96:99:38:b9:76:cf:f8:fe:4a:63:fb:67:15:71:79: a9:9d:67:83:18:17:12:5d:6e:fc:ba:f4:21:7f:f6: 12:77:da:cb:2a:60:be:49:c0:9a:c1:b6:52:2b:0b: 4a:c2:e1:1c:4a:c4:0d:73:c5:76:37:8d:83:3e:54: 6f:cf:ee:74:59:cd:19:1c:f4:a3:8f:ea:ff:bd:f1: 09:bf:e8:38:e9:ab:59:ae:5f:96:00:9a:d5:21:4c: 39:c2:8d:6b:e5:85:db:9a:d3:fb:dc:1d:6d:00:a7: cc:ad:93:66:65:96:de:03:c7:f4:a8:f9:df:0a:03: 5b:a9:5c:73:bb:a0:c2:c0:29:cf:39:3d:99:d1:18: c3:4d:d2:88:f7:38:c4:ad:ef:be:9c:0b:f7:f9:de: f9:80:fa:2d:b1:a6:98:67:7e:a0:69:4b:48:7f:a2: 93:29:5c:f6:e5:29:72:94:71:9f:53:35:60:bd:63: 70:d0:b2:86:a1:ea:e7:2e:42:36:1f:a1:85:39:5f: e5:6a:d4:14:27:45:9e:46:8b:77:11:da:62:21:01: c7:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Key Usage: critical Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment X509v3 Extended Key Usage: Code Signing X509v3 Subject Key Identifier: 2D:31:59:7E:39:E5:ED:AC:90:45:ED:72:7F:34:93:52:AD:52:68:4E X509v3 Authority Key Identifier: keyid:7A:71:5B:A6:3F:47:68:38:A2:25:97:FB:9B:10:F4:C3:D6:E5:22:4C X509v3 CRL Distribution Points: Full Name: URI:http://ca.nsu.edu.cn/CertEnroll/!6210!90fd!4e1c!8f6f!5b66!9662.crl Authority Information Access: CA Issuers - URI:http://ca.nsu.edu.cn/CertEnroll/ca.nsu.edu.cn_!6210!90fd!4e1c!8f6f!5b66!9662.crt X509v3 Basic Constraints: critical CA:FALSE Signature Algorithm: sha1WithRSAEncryption 61:88:fc:87:ab:46:28:74:4e:c1:d3:5e:d6:77:9e:13:72:18: a2:3b:cb:df:22:78:95:16:60:db:6e:d3:f3:20:71:e0:25:89: 97:9e:bb:7f:26:16:c2:88:67:dc:0d:13:83:7c:b0:be:c4:ee: 7a:da:10:49:29:b8:3c:f3:a4:f7:2b:55:93:8d:14:4e:4e:94: 07:02:dd:bc:b6:74:3e:51:08:84:44:cc:67:4b:fc:48:d1:fd: 48:2e:30:f0:bd:18:60:03:6f:9a:31:e7:85:58:a2:5f:3e:f2: 0c:5d:5d:93:bc:70:21:17:6a:a5:5d:59:4e:31:55:d9:71:27: c6:82:c8:e8:c5:71:dc:0f:58:0f:b5:fa:e5:b9:38:d1:cf:9b: 7a:27:76:b4:a2:4c:b5:7b:7e:6e:b9:7d:4a:b0:74:14:8a:48: 84:59:6c:d2:32:96:48:a9:7b:ce:8b:4f:52:9d:ca:c1:82:70: 66:3b:ac:ed:87:a2:86:dc:43:cb:77:f9:03:1c:4d:ba:59:3f: 29:b4:f3:ca:9e:67:2e:d1:4f:de:3a:a2:82:42:08:40:2b:c2: f7:9f:c2:4f:6b:80:db:47:27:21:b3:f9:3a:10:6f:d2:28:8d: 29:08:5d:72:f8:39:e1:af:60:64:fd:34:94:32:dd:ec:44:97: d6:1d:8f:7a
Certificate: Data: Version: 3 (0x2) Serial Number: 0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50 Signature Algorithm: sha1WithRSAEncryption Issuer: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2 Validity Not Before: Oct 18 00:00:00 2012 GMT Not After : Dec 29 23:59:59 2020 GMT Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer - G4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:63:0b:39:44:b8:bb:23:a7:44:49:bb:0e:ff: a1:f0:61:0a:53:93:b0:98:db:ad:2c:0f:4a:c5:6e: ff:86:3c:53:55:0f:15:ce:04:3f:2b:fd:a9:96:96: d9:be:61:79:0b:5b:c9:4c:86:76:e5:e0:43:4b:22: 95:ee:c2:2b:43:c1:9f:d8:68:b4:8e:40:4f:ee:85: 38:b9:11:c5:23:f2:64:58:f0:15:32:6f:4e:57:a1: ae:88:a4:02:d7:2a:1e:cd:4b:e1:dd:63:d5:17:89: 32:5b:b0:5e:99:5a:a8:9d:28:50:0e:17:ee:96:db: 61:3b:45:51:1d:cf:12:56:0b:92:47:fc:ab:ae:f6: 66:3d:47:ac:70:72:e7:92:e7:5f:cd:10:b9:c4:83: 64:94:19:bd:25:80:e1:e8:d2:22:a5:d0:ba:02:7a: a1:77:93:5b:65:c3:ee:17:74:bc:41:86:2a:dc:08: 4c:8c:92:8c:91:2d:9e:77:44:1f:68:d6:a8:74:77: db:0e:5b:32:8b:56:8b:33:bd:d9:63:c8:49:9d:3a: c5:c5:ea:33:0b:d2:f1:a3:1b:f4:8b:be:d9:b3:57: 8b:3b:de:04:a7:7a:22:b2:24:ae:2e:c7:70:c5:be: 4e:83:26:08:fb:0b:bd:a9:4f:99:08:e1:10:28:72: aa:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Extended Key Usage: critical Time Stamping X509v3 Key Usage: critical Digital Signature Authority Information Access: OCSP - URI:http://ts-ocsp.ws.symantec.com CA Issuers - URI:http://ts-aia.ws.symantec.com/tss-ca-g2.cer X509v3 CRL Distribution Points: Full Name: URI:http://ts-crl.ws.symantec.com/tss-ca-g2.crl X509v3 Subject Alternative Name: DirName:/CN=TimeStamp-2048-2 X509v3 Subject Key Identifier: 46:C6:69:A3:0E:4A:14:1E:D5:4C:DA:52:63:17:3F:5E:36:BC:0D:E6 X509v3 Authority Key Identifier: keyid:5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD Signature Algorithm: sha1WithRSAEncryption 78:3b:b4:91:2a:00:4c:f0:8f:62:30:37:78:a3:84:27:07:6f: 18:b2:de:25:dc:a0:d4:94:03:aa:86:4e:25:9f:9a:40:03:1c: dd:ce:e3:79:cb:21:68:06:da:b6:32:b4:6d:bf:f4:2c:26:63: 33:e4:49:64:6d:0d:e6:c3:67:0e:f7:05:a4:35:6c:7c:89:16: c6:e9:b2:df:b2:e9:dd:20:c6:71:0f:cd:95:74:dc:b6:5c:de: bd:37:1f:43:78:e6:78:b5:cd:28:04:20:a3:aa:f1:4b:c4:88: 29:91:0e:80:d1:11:fc:dd:5c:76:6e:4f:5e:0e:45:46:41:6e: 0d:b0:ea:38:9a:b1:3a:da:09:71:10:fc:1c:79:b4:80:7b:ac: 69:f4:fd:9c:b6:0c:16:2b:f1:7f:5b:09:3d:9b:5b:e2:16:ca: 13:81:6d:00:2e:38:0d:a8:29:8f:2c:e1:b2:f4:5a:a9:01:af: 15:9c:2c:2f:49:1b:db:22:bb:c3:fe:78:94:51:c3:86:b1:82: 88:5d:f0:3d:b4:51:a1:79:33:2b:2e:7b:b9:dc:20:09:13:71: eb:6a:19:5b:cf:e8:a5:30:57:2c:89:49:3f:b9:cf:7f:c9:bf: 3e:22:68:63:53:9a:bd:69:74:ac:c5:1d:3c:7f:92:e0:c3:bc: 1c:d8:04:75
pkcs7-signedData
- 1
- SHA1: nil
- 1.3.6.1.4.1.311.2.1.4
- #0
- 1.3.6.1.4.1.311.2.1.15
- :
- SHA1
ce 86 b1 f7 45 e3 68 a6 f5 ed b3 ee 73 ef 6d 63 |....E.h.....s.mc| dc a2 e5 53 |...S |
- 1.3.6.1.4.1.311.2.1.15
- #0
- unnamed
- Certificate #0
- 2
- 7E:93:EB:FB:7C:C6:4E:59:EA:4B:9A:77:D4:06:FC:3B
- RSA-SHA1: nil
- Issuer
- C: ZA
- ST: Western Cape
- L: Durbanville
- O: Thawte
- OU: Thawte Certification
- CN: Thawte Timestamping CA
- 2012-12-21 00:00:00 UTC: 2020-12-30 23:59:59 UTC
- Subject
- C: US
- O: Symantec Corporation
- CN: Symantec Time Stamping Services CA - G2
- #5
- rsaEncryption: nil
- B1:AC:B3:49:54:4B:97:1C:12:0A:D8:25:79:91:22:57:
2A:6F:DC:B8:26:C4:43:73:6B:C2:BF:2E:50:5A:FB:14:
C2:76:8E:43:01:25:43:B4:A1:E2:45:F4:E8:B7:7B:C3:
74:CC:22:D7:B4:94:00:02:F7:4D:ED:BF:B4:B7:44:24:
6B:CD:5F:45:3B:D1:44:CE:43:12:73:17:82:8B:69:B4:
2B:CB:99:1E:AC:72:1B:26:4D:71:1F:B1:31:DD:FB:51:
61:02:53:A6:AA:F5:49:2C:05:78:45:A5:2F:89:CE:E7:
99:E7:FE:8C:E2:57:3F:3D:C6:92:DC:4A:F8:7B:33:E4:
79:0A:FB:F0:75:88:41:9C:FF:C5:03:51:99:AA:D7:6C:
9F:93:69:87:65:29:83:85:C2:60:14:C4:C8:C9:3B:14:
DA:C0:81:F0:1F:0D:74:DE:92:22:AB:CA:F7:FB:74:7C:
27:E6:F7:4A:1B:7F:A7:C3:9E:2D:AE:8A:EA:A6:E6:AA:
27:16:7D:61:F7:98:71:11:BC:E2:50:A1:4B:E5:5D:FA:
E5:0E:A7:2C:9F:AA:65:20:D3:D8:96:E8:C8:7C:A5:4E:
48:44:FF:19:E2:44:07:92:0B:D7:68:84:80:5D:6A:78:
64:45:CD:60:46:7E:54:C1:13:7C:C5:79:F1:C9:C1:71: 0x010001
- #6
- subjectKeyIdentifier:
5f 9a f5 6e 5c cc cc 74 9a d4 dd 7d ef 3f db ec |_..n\..t...}.?..| 4c 80 2e dd |L... |
- authorityInfoAccess
- OCSP: http://ocsp.thawte.com
- basicConstraints
- true
- true: 0
- crlDistributionPoints: http://crl.thawte.com/ThawteTimestampingCA.crl
- extendedKeyUsage: timeStamping
- keyUsage: true, 6
- subjectAltName
- CN: TimeStamp-2048-1
- subjectKeyIdentifier:
- RSA-SHA1:
03 09 9b 8f 79 ef 7f 59 30 aa ef 68 b5 fa e3 09 |....y..Y0..h....| 1d bb 4f 82 06 5d 37 5f a6 52 9f 16 8d ea 1c 92 |..O..]7_.R......| 09 44 6e f5 6d eb 58 7c 30 e8 f9 69 8d 23 73 0b |.Dn.m.X|0..i.#s.| 12 6f 47 a9 ae 39 11 f8 2a b1 9b b0 1a c3 8e eb |.oG..9..*.......| 59 96 00 ad ce 0c 4d b2 d0 31 a6 08 5c 2a 7a fc |Y.....M..1..\*z.| e2 7a 1d 57 4c a8 65 18 e9 79 40 62 25 96 6e c7 |.z.WL.e..y@b%.n.| c7 37 6a 83 21 08 8e 41 ea dd d9 57 3f 1d 77 49 |.7j.!..A...W?.wI| 87 2a 16 06 5e a6 38 6a 22 12 a3 51 19 83 7e b6 |.*..^.8j"..Q..~.|
- 2
- #1
- 2
- 2D:00:00:00:02:41:39:0C:5A:E8:46:E0:86:00:00:00:
00:00:02 - RSA-SHA1: nil
- CN:
e6 88 90 e9 83 bd e4 b8 9c e8 bd af e5 ad a6 e9 |................| 99 a2 |.. |
- 2015-12-16 02:57:05 UTC: 2025-12-16 03:07:05 UTC
- Subject
- C: CN
- ST:
e5 9b 9b e5 b7 9d |...... |
- L:
e6 88 90 e9 83 bd |...... |
- O:
e6 88 90 e9 83 bd e4 b8 9c e8 bd af e5 ad a6 e9 |................| 99 a2 |.. |
- OU:
e4 bf a1 e6 81 af e4 b8 ad e5 bf 83 |............ |
- CN:
e6 a0 a1 e5 9b ad e5 ae a2 e6 88 b7 e7 ab af |............... |
- #5
- rsaEncryption: nil
- DC:B2:68:1E:A6:31:2B:29:5A:02:01:DD:53:4C:A2:D5:
BC:F0:F8:F8:2D:3F:02:95:F8:EA:73:99:07:D9:C8:DF:
A5:3A:35:DA:EA:AA:39:07:58:AA:0C:E7:96:99:38:B9:
76:CF:F8:FE:4A:63:FB:67:15:71:79:A9:9D:67:83:18:
17:12:5D:6E:FC:BA:F4:21:7F:F6:12:77:DA:CB:2A:60:
BE:49:C0:9A:C1:B6:52:2B:0B:4A:C2:E1:1C:4A:C4:0D:
73:C5:76:37:8D:83:3E:54:6F:CF:EE:74:59:CD:19:1C:
F4:A3:8F:EA:FF:BD:F1:09:BF:E8:38:E9:AB:59:AE:5F:
96:00:9A:D5:21:4C:39:C2:8D:6B:E5:85:DB:9A:D3:FB:
DC:1D:6D:00:A7:CC:AD:93:66:65:96:DE:03:C7:F4:A8:
F9:DF:0A:03:5B:A9:5C:73:BB:A0:C2:C0:29:CF:39:3D:
99:D1:18:C3:4D:D2:88:F7:38:C4:AD:EF:BE:9C:0B:F7:
F9:DE:F9:80:FA:2D:B1:A6:98:67:7E:A0:69:4B:48:7F:
A2:93:29:5C:F6:E5:29:72:94:71:9F:53:35:60:BD:63:
70:D0:B2:86:A1:EA:E7:2E:42:36:1F:A1:85:39:5F:E5:
6A:D4:14:27:45:9E:46:8B:77:11:DA:62:21:01:C7:87: 0x010001
- #6
- keyUsage: true, 0xf0
- extendedKeyUsage: codeSigning
- subjectKeyIdentifier:
2d 31 59 7e 39 e5 ed ac 90 45 ed 72 7f 34 93 52 |-1Y~9....E.r.4.R| ad 52 68 4e |.RhN |
- authorityKeyIdentifier:
7a 71 5b a6 3f 47 68 38 a2 25 97 fb 9b 10 f4 c3 |zq[.?Gh8.%......| d6 e5 22 4c |.."L |
- crlDistributionPoints: http://ca.nsu.edu.cn/CertEnroll/!6210!90fd!4e1c!8f6f!5b66!9662.crl
- authorityInfoAccess
- caIssuers: http://ca.nsu.edu.cn/CertEnroll/ca.nsu.edu.cn_!6210!90fd!4e1c!8f6f!5b66!9662.crt
- basicConstraints
- true
- nil
- 2D:00:00:00:02:41:39:0C:5A:E8:46:E0:86:00:00:00:
- RSA-SHA1:
61 88 fc 87 ab 46 28 74 4e c1 d3 5e d6 77 9e 13 |a....F(tN..^.w..| 72 18 a2 3b cb df 22 78 95 16 60 db 6e d3 f3 20 |r..;.."x..`.n.. | 71 e0 25 89 97 9e bb 7f 26 16 c2 88 67 dc 0d 13 |q.%.....&...g...| 83 7c b0 be c4 ee 7a da 10 49 29 b8 3c f3 a4 f7 |.|....z..I).<...| 2b 55 93 8d 14 4e 4e 94 07 02 dd bc b6 74 3e 51 |+U...NN......t>Q| 08 84 44 cc 67 4b fc 48 d1 fd 48 2e 30 f0 bd 18 |..D.gK.H..H.0...| 60 03 6f 9a 31 e7 85 58 a2 5f 3e f2 0c 5d 5d 93 |`.o.1..X._>..]].| bc 70 21 17 6a a5 5d 59 4e 31 55 d9 71 27 c6 82 |.p!.j.]YN1U.q'..| c8 e8 c5 71 dc 0f 58 0f b5 fa e5 b9 38 d1 cf 9b |...q..X.....8...| 7a 27 76 b4 a2 4c b5 7b 7e 6e b9 7d 4a b0 74 14 |z'v..L.{~n.}J.t.| 8a 48 84 59 6c d2 32 96 48 a9 7b ce 8b 4f 52 9d |.H.Yl.2.H.{..OR.| ca c1 82 70 66 3b ac ed 87 a2 86 dc 43 cb 77 f9 |...pf;......C.w.| 03 1c 4d ba 59 3f 29 b4 f3 ca 9e 67 2e d1 4f de |..M.Y?)....g..O.| 3a a2 82 42 08 40 2b c2 f7 9f c2 4f 6b 80 db 47 |:..B.@+....Ok..G| 27 21 b3 f9 3a 10 6f d2 28 8d 29 08 5d 72 f8 39 |'!..:.o.(.).]r.9| e1 af 60 64 fd 34 94 32 dd ec 44 97 d6 1d 8f 7a |..`d.4.2..D....z|
- 2
- Certificate #2
- 2
- 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
- RSA-SHA1: nil
- Issuer
- C: US
- O: Symantec Corporation
- CN: Symantec Time Stamping Services CA - G2
- 2012-10-18 00:00:00 UTC: 2020-12-29 23:59:59 UTC
- Subject
- C: US
- O: Symantec Corporation
- CN: Symantec Time Stamping Services Signer - G4
- #5
- rsaEncryption: nil
- A2:63:0B:39:44:B8:BB:23:A7:44:49:BB:0E:FF:A1:F0:
61:0A:53:93:B0:98:DB:AD:2C:0F:4A:C5:6E:FF:86:3C:
53:55:0F:15:CE:04:3F:2B:FD:A9:96:96:D9:BE:61:79:
0B:5B:C9:4C:86:76:E5:E0:43:4B:22:95:EE:C2:2B:43:
C1:9F:D8:68:B4:8E:40:4F:EE:85:38:B9:11:C5:23:F2:
64:58:F0:15:32:6F:4E:57:A1:AE:88:A4:02:D7:2A:1E:
CD:4B:E1:DD:63:D5:17:89:32:5B:B0:5E:99:5A:A8:9D:
28:50:0E:17:EE:96:DB:61:3B:45:51:1D:CF:12:56:0B:
92:47:FC:AB:AE:F6:66:3D:47:AC:70:72:E7:92:E7:5F:
CD:10:B9:C4:83:64:94:19:BD:25:80:E1:E8:D2:22:A5:
D0:BA:02:7A:A1:77:93:5B:65:C3:EE:17:74:BC:41:86:
2A:DC:08:4C:8C:92:8C:91:2D:9E:77:44:1F:68:D6:A8:
74:77:DB:0E:5B:32:8B:56:8B:33:BD:D9:63:C8:49:9D:
3A:C5:C5:EA:33:0B:D2:F1:A3:1B:F4:8B:BE:D9:B3:57:
8B:3B:DE:04:A7:7A:22:B2:24:AE:2E:C7:70:C5:BE:4E:
83:26:08:FB:0B:BD:A9:4F:99:08:E1:10:28:72:AA:CD: 0x010001
- X509v3 extensions
- basicConstraints
- true
- nil
- extendedKeyUsage: true, timeStamping
- keyUsage: true, 0x80
- authorityInfoAccess
- #0
- OCSP: http://ts-ocsp.ws.symantec.com
- caIssuers: http://ts-aia.ws.symantec.com/tss-ca-g2.cer
- #0
- crlDistributionPoints: http://ts-crl.ws.symantec.com/tss-ca-g2.crl
- subjectAltName
- CN: TimeStamp-2048-2
- subjectKeyIdentifier:
46 c6 69 a3 0e 4a 14 1e d5 4c da 52 63 17 3f 5e |F.i..J...L.Rc.?^| 36 bc 0d e6 |6... |
- authorityKeyIdentifier:
5f 9a f5 6e 5c cc cc 74 9a d4 dd 7d ef 3f db ec |_..n\..t...}.?..| 4c 80 2e dd |L... |
- basicConstraints
- RSA-SHA1:
78 3b b4 91 2a 00 4c f0 8f 62 30 37 78 a3 84 27 |x;..*.L..b07x..'| 07 6f 18 b2 de 25 dc a0 d4 94 03 aa 86 4e 25 9f |.o...%.......N%.| 9a 40 03 1c dd ce e3 79 cb 21 68 06 da b6 32 b4 |.@.....y.!h...2.| 6d bf f4 2c 26 63 33 e4 49 64 6d 0d e6 c3 67 0e |m..,&c3.Idm...g.| f7 05 a4 35 6c 7c 89 16 c6 e9 b2 df b2 e9 dd 20 |...5l|......... | c6 71 0f cd 95 74 dc b6 5c de bd 37 1f 43 78 e6 |.q...t..\..7.Cx.| 78 b5 cd 28 04 20 a3 aa f1 4b c4 88 29 91 0e 80 |x..(. ...K..)...| d1 11 fc dd 5c 76 6e 4f 5e 0e 45 46 41 6e 0d b0 |....\vnO^.EFAn..| ea 38 9a b1 3a da 09 71 10 fc 1c 79 b4 80 7b ac |.8..:..q...y..{.| 69 f4 fd 9c b6 0c 16 2b f1 7f 5b 09 3d 9b 5b e2 |i......+..[.=.[.| 16 ca 13 81 6d 00 2e 38 0d a8 29 8f 2c e1 b2 f4 |....m..8..).,...| 5a a9 01 af 15 9c 2c 2f 49 1b db 22 bb c3 fe 78 |Z.....,/I.."...x| 94 51 c3 86 b1 82 88 5d f0 3d b4 51 a1 79 33 2b |.Q.....].=.Q.y3+| 2e 7b b9 dc 20 09 13 71 eb 6a 19 5b cf e8 a5 30 |.{.. ..q.j.[...0| 57 2c 89 49 3f b9 cf 7f c9 bf 3e 22 68 63 53 9a |W,.I?.....>"hcS.| bd 69 74 ac c5 1d 3c 7f 92 e0 c3 bc 1c d8 04 75 |.it...<........u|
- 2
- Certificate #0
- 1
- #0
- CN:
e6 88 90 e9 83 bd e4 b8 9c e8 bd af e5 ad a6 e9 |................| 99 a2 |.. |
- 2D:00:00:00:02:41:39:0C:5A:E8:46:E0:86:00:00:00:
00:00:02
- CN:
- SHA1: nil
- #2
- contentType: 1.3.6.1.4.1.311.2.1.4
- 1.3.6.1.4.1.311.2.1.11: msCodeInd
- 1.3.6.1.4.1.311.2.1.12:
00 31 00 31 00 32 00 32 00 33 00 33 |.1.1.2.2.3.3 |
- messageDigest:
fb f3 ea 5a c4 a9 bc 94 48 42 56 6d 5e d8 8e 46 |...Z....HBVm^..F| cf 13 4a ed |..J. |
- rsaEncryption:
93 fa 4d 53 12 9c 6f 8d 2c 90 47 5a cc 9a 83 02 |..MS..o.,.GZ....| e5 a3 91 31 8d 31 84 ee a1 59 2d f2 06 40 58 90 |...1.1...Y-..@X.| d5 8c df 35 11 65 b3 76 6c 2b 8c 60 3f 6b 5a 49 |...5.e.vl+.`?kZI| ea c4 ba f0 d7 42 e4 46 d9 b7 dd 8d 61 7f 1e 5b |.....B.F....a..[| c0 63 74 a0 b9 c9 bd f5 b5 01 85 54 17 e8 27 35 |.ct........T..'5| 49 70 42 dc 5e 20 79 f6 4c 7c 77 02 75 6e b0 25 |IpB.^ y.L|w.un.%| 06 33 f8 eb 22 fb b0 c0 f0 5b 7b 56 13 41 94 2b |.3.."....[{V.A.+| 4c fe 57 fc c7 e1 f6 5e 88 f4 80 21 e5 a0 ea 70 |L.W....^...!...p| 30 36 b3 88 62 37 b8 b5 95 c7 fa 23 19 d0 d0 46 |06..b7.....#...F| 11 be 5b a3 f6 64 23 ef a0 36 12 ad 86 d0 68 56 |..[..d#..6....hV| 26 86 81 ec c9 c4 30 0d d9 a9 6c fb 82 c7 58 bc |&.....0...l...X.| 1d 3c b4 7c d7 62 92 e8 f8 65 17 d7 b4 ec 92 fa |.<.|.b...e......| 4a f7 d1 95 f7 05 28 02 62 8e cf 13 75 ec 02 6e |J.....(.b...u..n| 29 65 63 f2 38 f2 ea 56 76 20 49 ee dd 72 ab 76 |)ec.8..Vv I..r.v| af 3b fd 5c 99 e5 fa 23 ac 6d 50 22 ad b3 02 4e |.;.\...#.mP"...N| dd 86 93 84 03 c1 7b e7 3a 3c b7 3e f0 d5 eb c4 |......{.:<.>....|
- countersignature
- 1
- unnamed
- #0
- C: US
- O: Symantec Corporation
- CN: Symantec Time Stamping Services CA - G2
- 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
- #0
- SHA1: nil
- #2
- contentType: pkcs7-data
- signingTime: 2016-03-07 17:38:16 UTC
- messageDigest:
60 ef 0c f3 68 7f 13 e6 45 ae d1 d6 0c b9 61 0e |`...h...E.....a.| 5f f2 93 06 |_... |
- rsaEncryption:
99 d4 c1 63 d1 d4 a5 41 d2 da 7f 6f 26 0c c8 dc |...c...A...o&...| c4 ff 80 9d e2 45 64 66 68 01 cf 9c 97 c9 d4 a3 |.....Edfh.......| e9 d0 12 68 56 9e 32 56 3b 1e 9a c7 98 f8 20 16 |...hV.2V;..... .| d2 0f 55 52 a4 64 ae 8e ee 1e f4 1d 7e 73 06 63 |..UR.d......~s.c| e0 73 4a c2 a0 f4 48 69 da f2 1c 7e 0c 15 cf ca |.sJ...Hi...~....| 97 72 0e f9 4f c1 f1 9d 9c e4 8d ab 6f 30 fb a9 |.r..O.......o0..| 39 e0 87 5d aa b2 10 69 47 73 bd cc a1 4a 6c 91 |9..]...iGs...Jl.| e7 1a f0 c3 29 de d1 a9 a6 e1 a5 14 da 27 81 4e |....)........'.N| 17 36 e0 be 89 b8 a1 82 ec f4 90 05 1c 35 a9 17 |.6...........5..| d2 dd e2 5a 62 ea ce bd 46 2f 95 67 bb 85 26 df |...Zb...F/.g..&.| db ed 4c 9c 18 b4 20 15 ee 5e 5e 3b fc a1 e7 ac |..L... ..^^;....| f7 79 72 48 bf c5 50 c7 23 99 c1 0f 35 77 b3 76 |.yrH..P.#...5w.v| 55 8d fb 72 54 fb ad 47 88 3b c4 3b e6 f9 f4 4f |U..rT..G.;.;...O| 89 ed ff 08 ed b9 a6 82 2e 4f 43 f3 e6 39 89 06 |.........OC..9..| b6 f8 a4 61 fb 8d 4a dd 32 aa 19 a4 83 2e 00 df |...a..J.2.......| 23 f2 4e d5 e8 5c 16 49 0f 40 7b d5 72 d9 e3 64 |#.N..\.I.@{.r..d|
- unnamed
- 1
- #0
offset | size | type | comment | |
---|---|---|---|---|
0 | 1162752 | EXE | 03/07/2016 17:32:51 | # |
15c1 | 15 | HTM | # | |
16541 | 8631 | PNG | (273 x 44) | # |
18b81 | 16493 | PNG | (256 x 256) | # |
107220 | 16493 | PNG | (256 x 256) | # |
11be00 | 17136 | BIN | overlay data past EOF | # |
Please donate some bucks to keep this site up and running: | |
Ko-fi | |
---|---|
Yandex.Money | |
Thank you! |
[?] ignoring invalid PEdump::BITMAPINFOHEADER