filename | BatteryMon2.1cn.exe | |
---|---|---|
size | 1225728 (0x12b400) | |
md5 | de6ff3ab1a9478bcc1451f5e53c3c86a | |
type | PE32 executable (GUI) Intel 80386, for MS Windows | |
mimetype | application/x-dosexec | |
clamav | OK | |
virustotal | → scan with virustotal.com | |
histogram |
MZ Header
signature | MZ |
bytes_in_last_block | 0x90 |
blocks_in_file | 3 |
num_relocs | 0 |
header_paragraphs | 4 |
min_extra_paragraphs | 0 |
max_extra_paragraphs | 0xffff |
ss | 0 |
sp | 0xb8 |
checksum | 0 |
ip | 0 |
cs | 0 |
reloc_table_offset | 0x40 |
overlay_number | 0 |
reserved0 | 0 |
oem_id | 0 |
oem_info | 0 |
reserved2 | 0 |
reserved3 | 0 |
reserved4 | 0 |
reserved5 | 0x82fff |
reserved6 | 0xfff7d000 |
lfanew | 0xe8 |
DOS stub
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
PE Header
Packer / Compiler
Sections
Data Directory
id | lang | string |
---|---|---|
1084 | 3081 | Unknown Intel |
1085 | 3081 | Pentium III Class |
1086 | 3081 | Could not open PerformanceTest preferences file %s |
1087 | 3081 | Intel compatible |
1088 | 3081 | Unknown New Intel |
1089 | 3081 | Unknown K6 |
1090 | 3081 | Unknown New Athlon |
1091 | 3081 | Unknown New AMD |
1092 | 3081 | 386 Class |
1093 | 3081 | Unknown Cyrix 6x86 |
1094 | 3081 | 6x86MX or MII |
1095 | 3081 | Unknown New MII? |
1096 | 3081 | Unknown New Cyrix |
1097 | 3081 | Unknown Cyrix |
1098 | 3081 | Unknown |
module_name | hint | ord | function_name |
---|---|---|---|
KERNEL32.dll | 74 | CreateThread | |
KERNEL32.dll | 403 | GlobalUnlock | |
KERNEL32.dll | 396 | GlobalLock | |
KERNEL32.dll | 385 | GlobalAlloc | |
KERNEL32.dll | 365 | GetTickCount | |
KERNEL32.dll | 722 | WideCharToMultiByte | |
KERNEL32.dll | 437 | IsBadReadPtr | |
KERNEL32.dll | 383 | GlobalAddAtomA | |
KERNEL32.dll | 384 | GlobalAddAtomW | |
KERNEL32.dll | 294 | GetModuleHandleA | |
KERNEL32.dll | 392 | GlobalFree | |
KERNEL32.dll | 393 | GlobalGetAtomNameA | |
KERNEL32.dll | 387 | GlobalDeleteAtom | |
KERNEL32.dll | 394 | GlobalGetAtomNameW | |
KERNEL32.dll | 177 | FreeConsole | |
KERNEL32.dll | 265 | GetEnvironmentVariableA | |
KERNEL32.dll | 707 | VirtualProtect | |
KERNEL32.dll | 699 | VirtualAlloc | |
KERNEL32.dll | 318 | GetProcAddress | |
KERNEL32.dll | 282 | GetLastError | |
KERNEL32.dll | 450 | LoadLibraryA | |
KERNEL32.dll | 625 | SetLastError | |
KERNEL32.dll | 647 | SetThreadPriority | |
KERNEL32.dll | 249 | GetCurrentThread | |
KERNEL32.dll | 68 | CreateProcessA | |
KERNEL32.dll | 202 | GetCommandLineA | |
KERNEL32.dll | 336 | GetStartupInfoA | |
KERNEL32.dll | 610 | SetEnvironmentVariableA | |
KERNEL32.dll | 549 | ReleaseMutex | |
KERNEL32.dll | 718 | WaitForSingleObject | |
KERNEL32.dll | 63 | CreateMutexA | |
KERNEL32.dll | 493 | OpenMutexA | |
KERNEL32.dll | 250 | GetCurrentThreadId | |
KERNEL32.dll | 536 | ReadFile | |
KERNEL32.dll | 274 | GetFileSize | |
KERNEL32.dll | 52 | CreateFileA | |
KERNEL32.dll | 144 | FindClose | |
KERNEL32.dll | 148 | FindFirstFileA | |
KERNEL32.dll | 151 | FindFirstFileW | |
KERNEL32.dll | 711 | VirtualQueryEx | |
KERNEL32.dll | 267 | GetExitCodeProcess | |
KERNEL32.dll | 540 | ReadProcessMemory | |
KERNEL32.dll | 688 | UnmapViewOfFile | |
KERNEL32.dll | 37 | ContinueDebugEvent | |
KERNEL32.dll | 643 | SetThreadContext | |
KERNEL32.dll | 359 | GetThreadContext | |
KERNEL32.dll | 715 | WaitForDebugEvent | |
KERNEL32.dll | 27 | CloseHandle | |
KERNEL32.dll | 80 | DebugActiveProcess | |
KERNEL32.dll | 556 | ResumeThread | |
KERNEL32.dll | 69 | CreateProcessW | |
KERNEL32.dll | 203 | GetCommandLineW | |
KERNEL32.dll | 337 | GetStartupInfoW | |
KERNEL32.dll | 470 | MapViewOfFile | |
KERNEL32.dll | 99 | DuplicateHandle | |
KERNEL32.dll | 247 | GetCurrentProcess | |
KERNEL32.dll | 53 | CreateFileMappingA | |
KERNEL32.dll | 708 | VirtualProtectEx | |
KERNEL32.dll | 745 | WriteProcessMemory | |
KERNEL32.dll | 125 | ExitProcess | |
KERNEL32.dll | 283 | GetLocalTime | |
KERNEL32.dll | 33 | CompareStringA | |
KERNEL32.dll | 170 | FlushFileBuffers | |
KERNEL32.dll | 448 | LCMapStringW | |
KERNEL32.dll | 447 | LCMapStringA | |
KERNEL32.dll | 636 | SetStdHandle | |
KERNEL32.dll | 305 | GetOEMCP | |
KERNEL32.dll | 185 | GetACP | |
KERNEL32.dll | 191 | GetCPInfo | |
KERNEL32.dll | 34 | CompareStringW | |
KERNEL32.dll | 342 | GetStringTypeW | |
KERNEL32.dll | 339 | GetStringTypeA | |
KERNEL32.dll | 484 | MultiByteToWideChar | |
KERNEL32.dll | 618 | SetFilePointer | |
KERNEL32.dll | 418 | HeapReAlloc | |
KERNEL32.dll | 735 | WriteFile | |
KERNEL32.dll | 703 | VirtualFree | |
KERNEL32.dll | 411 | HeapCreate | |
KERNEL32.dll | 413 | HeapDestroy | |
KERNEL32.dll | 277 | GetFileType | |
KERNEL32.dll | 338 | GetStdHandle | |
KERNEL32.dll | 621 | SetHandleCount | |
KERNEL32.dll | 264 | GetEnvironmentStringsW | |
KERNEL32.dll | 262 | GetEnvironmentStrings | |
KERNEL32.dll | 179 | FreeEnvironmentStringsW | |
KERNEL32.dll | 178 | FreeEnvironmentStringsA | |
KERNEL32.dll | 685 | UnhandledExceptionFilter | |
KERNEL32.dll | 415 | HeapFree | |
KERNEL32.dll | 409 | HeapAlloc | |
KERNEL32.dll | 372 | GetVersion | |
KERNEL32.dll | 349 | GetSystemTime | |
KERNEL32.dll | 368 | GetTimeZoneInformation | |
KERNEL32.dll | 559 | RtlUnwind | |
KERNEL32.dll | 670 | TerminateProcess | |
KERNEL32.dll | 662 | Sleep | |
KERNEL32.dll | 102 | EnterCriticalSection | |
KERNEL32.dll | 449 | LeaveCriticalSection | |
KERNEL32.dll | 373 | GetVersionExA | |
KERNEL32.dll | 426 | InitializeCriticalSection | |
KERNEL32.dll | 248 | GetCurrentProcessId | |
KERNEL32.dll | 293 | GetModuleFileNameW | |
KERNEL32.dll | 335 | GetShortPathNameW | |
KERNEL32.dll | 292 | GetModuleFileNameA | |
KERNEL32.dll | 664 | SuspendThread | |
KERNEL32.dll | 334 | GetShortPathNameA | |
USER32.dll | 255 | GetDesktopWindow | |
USER32.dll | 457 | MoveWindow | |
USER32.dll | 578 | SetPropA | |
USER32.dll | 205 | EnumThreadWindows | |
USER32.dll | 314 | GetPropA | |
USER32.dll | 298 | GetMessageA | |
USER32.dll | 12 | BeginPaint | |
USER32.dll | 187 | EndPaint | |
USER32.dll | 405 | KillTimer | |
USER32.dll | 227 | GetAsyncKeyState | |
USER32.dll | 326 | GetSystemMetrics | |
USER32.dll | 594 | SetTimer | |
USER32.dll | 606 | SetWindowTextA | |
USER32.dll | 258 | GetDlgItem | |
USER32.dll | 76 | CreateDialogIndirectParamA | |
USER32.dll | 618 | ShowWindow | |
USER32.dll | 657 | UpdateWindow | |
USER32.dll | 427 | LoadStringA | |
USER32.dll | 428 | LoadStringW | |
USER32.dll | 213 | FindWindowA | |
USER32.dll | 676 | WaitForInputIdle | |
USER32.dll | 142 | DestroyWindow | |
USER32.dll | 446 | MessageBoxA | |
USER32.dll | 367 | InSendMessage | |
USER32.dll | 650 | UnpackDDElParam | |
USER32.dll | 220 | FreeDDElParam | |
USER32.dll | 132 | DefWindowProcA | |
USER32.dll | 410 | LoadCursorA | |
USER32.dll | 501 | RegisterClassW | |
USER32.dll | 90 | CreateWindowExW | |
USER32.dll | 498 | RegisterClassA | |
USER32.dll | 89 | CreateWindowExA | |
USER32.dll | 354 | GetWindowThreadProcessId | |
USER32.dll | 537 | SendMessageW | |
USER32.dll | 532 | SendMessageA | |
USER32.dll | 642 | TranslateMessage | |
USER32.dll | 149 | DispatchMessageA | |
USER32.dll | 208 | EnumWindows | |
USER32.dll | 401 | IsWindowUnicode | |
USER32.dll | 474 | PackDDElParam | |
USER32.dll | 479 | PostMessageW | |
USER32.dll | 478 | PostMessageA | |
USER32.dll | 399 | IsWindow | |
USER32.dll | 476 | PeekMessageA | |
GDI32.dll | 80 | DeleteDC | |
GDI32.dll | 428 | RealizePalette | |
GDI32.dll | 456 | SelectPalette | |
GDI32.dll | 43 | CreateDCA | |
GDI32.dll | 66 | CreatePalette | |
GDI32.dll | 83 | DeleteObject | |
GDI32.dll | 17 | BitBlt | |
GDI32.dll | 455 | SelectObject | |
GDI32.dll | 42 | CreateCompatibleDC | |
GDI32.dll | 48 | CreateDIBitmap |
StringTable 0c0904b0
Comments | Battery charge monitor from PassMark (R) Software (www.passmark.com) |
CompanyName | PassMark (R) Software |
FileDescription | BatteryMon |
FileVersion | 2, 1, 0, 1000 |
InternalName | BatteryMon |
LegalCopyright | Copyright © 2007 |
OriginalFilename | BatteryMon.exe |
PrivateBuild | 8130326膯龙ߖ‴ኞ |
ProductName | PassMark (TM) Software Battery Monitor |
ProductVersion | 2, 1, 0, 1000 |
VS_FIXEDFILEINFO
FileVersion | 2.1.0.1000 |
ProductVersion | 2.1.0.1000 |
StrucVersion | 0x10000 |
FileFlagsMask | 0x3f |
FileFlags | 8 |
FileOS | 0x40004 |
FileType | 1 |
FileSubtype | 0 |
Signers (1)
issuer: /C=ZA/O=Thawte Consulting (Pty) Ltd./CN=Thawte Code Signing CA
serial: 401630
Certificates (4)
Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha1WithRSAEncryption Issuer: C=ZA, ST=Western Cape, L=Cape Town, O=Thawte Consulting cc, OU=Certification Services Division, CN=Thawte Premium Server CA/emailAddress=premium-server@thawte.com Validity Not Before: Aug 6 00:00:00 2003 GMT Not After : Aug 5 23:59:59 2013 GMT Subject: C=ZA, O=Thawte Consulting (Pty) Ltd., CN=Thawte Code Signing CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (1024 bit) Modulus: 00:c6:b8:b9:27:60:af:0b:e3:91:69:65:db:7e:8d: ed:91:e6:aa:f1:be:d5:ed:fe:6d:d4:2c:7f:d1:70: 77:fb:26:99:57:b4:dd:3f:30:b8:dc:21:ea:68:8d: 81:92:fc:2e:4b:91:35:84:20:f2:da:4a:ba:b4:fc: e6:da:88:f2:20:c5:21:92:09:47:95:a0:09:1c:a6: 79:be:b1:4c:1d:fc:f1:8a:6e:54:d2:69:a1:f1:4c: 93:3a:41:fe:7d:d4:64:7b:63:45:f7:60:60:1d:31: 1d:a4:e9:d3:0f:8b:fb:6e:26:24:b3:a8:ff:e5:e5: 90:d4:b4:c2:dc:50:60:ae:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE, pathlen:0 X509v3 CRL Distribution Points: Full Name: URI:http://crl.thawte.com/ThawtePremiumServerCA.crl X509v3 Extended Key Usage: TLS Web Client Authentication, Code Signing X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Subject Alternative Name: DirName:/CN=PrivateLabel2-144 Signature Algorithm: sha1WithRSAEncryption 76:b2:9c:ee:13:9f:1b:f6:2d:34:92:94:45:73:34:dc:8e:6b: 2e:5c:fc:4c:7d:89:eb:c3:68:f1:d7:99:0f:2e:1d:17:c8:b5: 16:8b:be:cd:8a:05:06:f2:19:49:3a:03:5b:05:c9:20:8e:6d: 52:e1:76:81:a0:c3:65:8a:22:67:e4:1c:53:53:37:46:bf:bc: d7:2f:eb:7b:9e:d0:14:45:6c:40:21:08:e2:5d:75:76:66:30: 1e:f4:df:82:8a:2f:bd:f3:a2:0c:bf:1d:db:9f:14:a2:9a:72: 37:4d:b0:77:48:e8:4a:3f:09:ce:55:19:2c:ef:e6:07:24:e1: af:ec
Certificate: Data: Version: 3 (0x2) Serial Number: 47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4 Signature Algorithm: sha1WithRSAEncryption Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA Validity Not Before: Dec 4 00:00:00 2003 GMT Not After : Dec 3 23:59:59 2013 GMT Subject: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ca:b2:a4:cc:cd:20:af:0a:7d:89:ac:87:75: f0:b4:4e:f1:df:c1:0f:bf:67:61:bd:a3:64:1c:da: bb:f9:ca:33:ab:84:30:89:58:7e:8c:db:6b:dd:36: 9e:0f:bf:d1:ec:78:f2:77:a6:7e:6f:3c:bf:93:af: 0d:ba:68:f4:6c:94:ca:bd:52:2d:ab:48:3d:f5:b6: d5:5d:5f:1b:02:9f:fa:2f:6b:1e:a4:f7:a3:9a:a6: 1a:c8:02:e1:7f:4c:52:e3:0e:60:ec:40:1c:7e:b9: 0d:de:3f:c7:b4:df:87:bd:5f:7a:6a:31:2e:03:99: 81:13:a8:47:20:ce:31:73:0d:57:2d:cd:78:34:33: 95:12:99:12:b9:de:68:2f:aa:e6:e3:c2:8a:8c:2a: c3:8b:21:87:66:bd:83:58:57:6f:75:bf:3c:aa:26: 87:5d:ca:10:15:3c:9f:84:ea:54:c1:0a:6e:c4:fe: c5:4a:dd:b9:07:11:97:22:7c:db:3e:27:d1:1e:78: ec:9f:31:c9:f1:e6:22:19:db:c4:b3:47:43:9a:1a: 5f:a0:1e:90:e4:5e:f5:ee:7c:f1:7d:ab:62:01:8f: f5:4d:0b:de:d0:22:56:a8:95:cd:ae:88:76:ae:ee: ba:0d:f3:e4:4d:d9:a0:fb:68:a0:ae:14:3b:b3:87: c1:bb Exponent: 65537 (0x10001) X509v3 extensions: Authority Information Access: OCSP - URI:http://ocsp.verisign.com X509v3 Basic Constraints: critical CA:TRUE, pathlen:0 X509v3 CRL Distribution Points: Full Name: URI:http://crl.verisign.com/ThawteTimestampingCA.crl X509v3 Extended Key Usage: Time Stamping X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Subject Alternative Name: DirName:/CN=TSA2048-1-53 Signature Algorithm: sha1WithRSAEncryption 4a:6b:f9:ea:58:c2:44:1c:31:89:79:99:2b:96:bf:82:ac:01: d6:1c:4c:cd:b0:8a:58:6e:df:08:29:a3:5e:c8:ca:93:13:e7: 04:52:0d:ef:47:27:2f:00:38:b0:e4:c9:93:4e:9a:d4:22:62: 15:f7:3f:37:21:4f:70:31:80:f1:8b:38:87:b3:e8:e8:97:00: fe:cf:55:96:4e:24:d2:a9:27:4e:7a:ae:b7:61:41:f3:2a:ce: e7:c9:d9:5e:dd:bb:2b:85:3e:b5:9d:b5:d9:e1:57:ff:be:b4: c5:7e:f5:cf:0c:9e:f0:97:fe:2b:d3:3b:52:1b:1b:38:27:f7: 3f:4a
Certificate: Data: Version: 3 (0x2) Serial Number: 4199984 (0x401630) Signature Algorithm: md5WithRSAEncryption Issuer: C=ZA, O=Thawte Consulting (Pty) Ltd., CN=Thawte Code Signing CA Validity Not Before: Oct 20 07:03:10 2005 GMT Not After : Oct 20 07:03:10 2007 GMT Subject: C=AU, ST=NSW, L=Sydney, O=PassMark Software Pty Ltd, OU=Secure Application Development, CN=PassMark Software Pty Ltd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:2d:a9:90:5e:4c:1a:c7:d8:52:3f:ac:4c:1e: 77:b8:88:60:26:52:bb:e4:a9:32:8f:bb:44:17:c8: 05:22:30:7d:3b:a4:82:f6:c5:84:96:27:fc:5a:1a: 18:f0:a2:11:c4:64:e7:6d:56:6c:65:6c:1b:80:2b: a0:4f:e4:0a:2a:2b:49:5d:80:e6:a7:63:cd:40:4c: cf:79:73:eb:99:5d:d0:f2:a0:50:d6:11:40:46:65: 37:af:0b:d3:b7:9e:98:d4:ee:9c:2d:25:6a:2f:01: 3b:32:0b:46:49:15:d6:b9:12:81:b5:89:49:db:3f: e0:24:53:42:d9:28:c3:24:e2:0d:c7:14:04:20:30: 7f:94:71:26:84:47:97:b7:37:ff:66:10:e9:b7:48: 9a:cd:32:5b:96:46:25:30:d2:36:06:4a:ff:82:05: a7:9e:54:e5:6c:65:d0:a6:77:30:8c:80:ca:fb:a0: b0:47:6d:58:1a:be:96:77:4f:65:6b:5d:d4:16:d7: 96:43:c5:49:d2:fe:f4:5d:8d:52:93:ac:09:da:39: 60:bc:eb:4c:b3:66:7c:81:d9:f8:ca:62:91:c1:42: dd:3d:89:80:63:db:f5:72:18:df:6c:8e:94:77:c6: 30:88:d6:4c:ce:19:ef:5c:21:8d:07:02:61:4d:7d: 1c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Extended Key Usage: Code Signing, Microsoft Commercial Code Signing Netscape Cert Type: Object Signing 2.5.29.4: 0.0.0.. +.....7....... X509v3 Subject Alternative Name: DNS:www.passmark.com X509v3 CRL Distribution Points: Full Name: URI:http://crl.thawte.com/ThawteCodeSigningCA.crl Authority Information Access: OCSP - URI:http://ocsp.thawte.com X509v3 Basic Constraints: critical CA:FALSE Signature Algorithm: md5WithRSAEncryption 31:16:ad:5e:e2:03:16:61:e8:93:bf:fa:3e:28:03:64:40:e1: 34:2a:c8:2c:b0:0f:fa:19:b5:41:cc:55:8b:b4:94:ac:84:5d: 40:18:92:bc:23:6a:2d:26:f6:82:6d:58:0d:a1:b6:eb:99:8a: 81:ea:38:67:dd:b0:7f:df:2a:26:74:52:f6:ab:c7:12:42:c3: dc:90:4e:52:89:53:ec:2e:eb:db:5c:a5:dd:9c:1e:60:75:27: 82:2d:ff:5f:b5:77:a2:be:4f:bd:b3:33:32:ab:d6:24:48:75: 10:55:ec:5a:85:7f:f1:46:bf:07:cc:b4:85:6e:84:f3:2d:eb: aa:67
Certificate: Data: Version: 3 (0x2) Serial Number: 0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88 Signature Algorithm: sha1WithRSAEncryption Issuer: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA Validity Not Before: Dec 4 00:00:00 2003 GMT Not After : Dec 3 23:59:59 2008 GMT Subject: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:50:28:48:dd:d3:68:7a:84:18:44:66:75:5d: 7e:c4:b8:9f:63:26:ff:3d:43:9c:7c:11:38:10:25: 55:73:d9:75:27:69:fd:4e:b9:20:5c:d3:0a:f9:a0: 1b:2a:ed:55:56:21:61:d8:1e:db:e4:bc:33:6b:c7: ef:dd:a3:37:65:8e:1b:93:0c:b6:53:1e:5c:7c:66: 35:5f:05:8a:45:fe:76:4e:df:53:80:a2:81:20:9d: ae:88:5c:a2:08:f7:e5:30:f9:ee:22:37:4c:42:0a: ce:df:c6:1f:c4:d6:55:e9:81:3f:b5:52:a3:2c:aa: 01:7a:f2:a2:aa:8d:35:fe:9f:e6:5d:6a:05:9f:3d: 6b:e3:bf:96:c0:fe:cc:60:f9:40:e7:07:a0:44:eb: 81:51:6e:a5:2a:f2:b6:8a:10:28:ed:8f:dc:06:a0: 86:50:9a:7b:4a:08:0d:30:1d:ca:10:9e:6b:f7:e9: 58:ae:04:a9:40:99:b2:28:e8:8f:16:ac:3c:e3:53: 6f:4b:d3:35:9d:b5:6f:64:1d:b3:96:2c:bb:3d:e7: 79:eb:6d:7a:f9:16:e6:26:ad:af:ef:99:53:b7:40: 2c:95:b8:79:aa:fe:d4:52:ab:29:74:7e:42:ec:39: 1e:a2:6a:16:e6:59:bb:24:68:d8:00:80:43:10:87: 80:6b Exponent: 65537 (0x10001) X509v3 extensions: Authority Information Access: OCSP - URI:http://ocsp.verisign.com X509v3 Basic Constraints: critical CA:FALSE X509v3 CRL Distribution Points: Full Name: URI:http://crl.verisign.com/tss-ca.crl X509v3 Extended Key Usage: critical Time Stamping X509v3 Key Usage: critical Digital Signature, Non Repudiation X509v3 Subject Alternative Name: DirName:/CN=TSA2048-1-54 Signature Algorithm: sha1WithRSAEncryption 87:78:70:da:4e:52:01:20:5b:e0:79:c9:82:30:c4:fd:b9:19: 96:bd:91:00:c3:bd:cd:cd:c6:f4:0e:d8:ff:f9:4d:c0:33:62: 30:11:c5:f5:74:1b:d4:92:de:5f:9c:20:13:b1:7c:45:be:50: cd:83:e7:80:17:83:a7:27:93:67:13:46:fb:ca:b8:98:41:03: cc:9b:51:5b:05:8b:7f:a8:6f:f3:1b:50:1b:24:2e:f2:69:8d: 6c:22:f7:bb:ca:16:95:ed:0c:74:c0:68:77:d9:eb:99:62:87: c1:73:90:f8:89:74:7a:23:ab:a3:98:7b:97:b1:f7:8f:29:71: 4d:2e:75:1b:48:41:da:f0:b5:0d:20:54:d6:77:a0:97:82:63: 69:fd:09:cf:8a:f0:75:bb:09:9b:d9:f9:11:55:26:9a:61:32: be:7a:02:b0:7b:86:be:a2:c3:8b:22:2c:78:d1:35:76:bc:92: 73:5c:f9:b9:e6:4c:15:0a:23:cc:e4:d2:d4:34:2e:49:40:15: 3c:0f:60:7a:24:c6:a5:66:ef:96:cf:70:eb:3e:e7:f4:0d:7e: dc:d1:7c:a3:76:71:69:c1:9c:4f:47:30:35:21:b1:a2:af:1a: 62:3c:2b:d9:8e:aa:2a:07:7b:d8:18:b3:5c:7b:e2:9d:a5:6f: fe:3c:89:ad
pkcs7-signedData
- 1
- SHA1: nil
- 1.3.6.1.4.1.311.2.1.4
- #0
- 1.3.6.1.4.1.311.2.1.15
- :
00 3c 00 3c 00 3c 00 4f 00 62 00 73 00 6f 00 6c |.<.<.<.O.b.s.o.l| 00 65 00 74 00 65 00 3e 00 3e 00 3e |.e.t.e.>.>.> |
- :
- SHA1
84 10 75 70 74 b2 62 7e 55 d4 4c be a3 72 9a 49 |..upt.b~U.L..r.I| 78 3a bd 89 |x:.. |
- 1.3.6.1.4.1.311.2.1.15
- #0
- Certificates
- Certificate #0
- 2
- 0x0A
- RSA-SHA1: nil
- Issuer
- C: ZA
- ST: Western Cape
- L: Cape Town
- O: Thawte Consulting cc
- OU: Certification Services Division
- CN: Thawte Premium Server CA
- emailAddress: premium-server@thawte.com
- 2003-08-06 00:00:00 UTC: 2013-08-05 23:59:59 UTC
- Subject
- C: ZA
- O: Thawte Consulting (Pty) Ltd.
- CN: Thawte Code Signing CA
- #5
- rsaEncryption: nil
- C6:B8:B9:27:60:AF:0B:E3:91:69:65:DB:7E:8D:ED:91:
E6:AA:F1:BE:D5:ED:FE:6D:D4:2C:7F:D1:70:77:FB:26:
99:57:B4:DD:3F:30:B8:DC:21:EA:68:8D:81:92:FC:2E:
4B:91:35:84:20:F2:DA:4A:BA:B4:FC:E6:DA:88:F2:20:
C5:21:92:09:47:95:A0:09:1C:A6:79:BE:B1:4C:1D:FC:
F1:8A:6E:54:D2:69:A1:F1:4C:93:3A:41:FE:7D:D4:64:
7B:63:45:F7:60:60:1D:31:1D:A4:E9:D3:0F:8B:FB:6E:
26:24:B3:A8:FF:E5:E5:90:D4:B4:C2:DC:50:60:AE:59: 0x010001
- X509v3 extensions
- basicConstraints
- true
- true: 0
- crlDistributionPoints: http://crl.thawte.com/ThawtePremiumServerCA.crl
- extendedKeyUsage
- clientAuth: codeSigning
- keyUsage: true, 6
- subjectAltName
- CN: PrivateLabel2-144
- basicConstraints
- RSA-SHA1:
76 b2 9c ee 13 9f 1b f6 2d 34 92 94 45 73 34 dc |v.......-4..Es4.| 8e 6b 2e 5c fc 4c 7d 89 eb c3 68 f1 d7 99 0f 2e |.k.\.L}...h.....| 1d 17 c8 b5 16 8b be cd 8a 05 06 f2 19 49 3a 03 |.............I:.| 5b 05 c9 20 8e 6d 52 e1 76 81 a0 c3 65 8a 22 67 |[.. .mR.v...e."g| e4 1c 53 53 37 46 bf bc d7 2f eb 7b 9e d0 14 45 |..SS7F.../.{...E| 6c 40 21 08 e2 5d 75 76 66 30 1e f4 df 82 8a 2f |l@!..]uvf0...../| bd f3 a2 0c bf 1d db 9f 14 a2 9a 72 37 4d b0 77 |...........r7M.w| 48 e8 4a 3f 09 ce 55 19 2c ef e6 07 24 e1 af ec |H.J?..U.,...$...|
- 2
- Certificate #1
- 2
- 47:BF:19:95:DF:8D:52:46:43:F7:DB:6D:48:0D:31:A4
- RSA-SHA1: nil
- Issuer
- C: ZA
- ST: Western Cape
- L: Durbanville
- O: Thawte
- OU: Thawte Certification
- CN: Thawte Timestamping CA
- 2003-12-04 00:00:00 UTC: 2013-12-03 23:59:59 UTC
- Subject
- C: US
- O: VeriSign, Inc.
- CN: VeriSign Time Stamping Services CA
- #5
- rsaEncryption: nil
- A9:CA:B2:A4:CC:CD:20:AF:0A:7D:89:AC:87:75:F0:B4:
4E:F1:DF:C1:0F:BF:67:61:BD:A3:64:1C:DA:BB:F9:CA:
33:AB:84:30:89:58:7E:8C:DB:6B:DD:36:9E:0F:BF:D1:
EC:78:F2:77:A6:7E:6F:3C:BF:93:AF:0D:BA:68:F4:6C:
94:CA:BD:52:2D:AB:48:3D:F5:B6:D5:5D:5F:1B:02:9F:
FA:2F:6B:1E:A4:F7:A3:9A:A6:1A:C8:02:E1:7F:4C:52:
E3:0E:60:EC:40:1C:7E:B9:0D:DE:3F:C7:B4:DF:87:BD:
5F:7A:6A:31:2E:03:99:81:13:A8:47:20:CE:31:73:0D:
57:2D:CD:78:34:33:95:12:99:12:B9:DE:68:2F:AA:E6:
E3:C2:8A:8C:2A:C3:8B:21:87:66:BD:83:58:57:6F:75:
BF:3C:AA:26:87:5D:CA:10:15:3C:9F:84:EA:54:C1:0A:
6E:C4:FE:C5:4A:DD:B9:07:11:97:22:7C:DB:3E:27:D1:
1E:78:EC:9F:31:C9:F1:E6:22:19:DB:C4:B3:47:43:9A:
1A:5F:A0:1E:90:E4:5E:F5:EE:7C:F1:7D:AB:62:01:8F:
F5:4D:0B:DE:D0:22:56:A8:95:CD:AE:88:76:AE:EE:BA:
0D:F3:E4:4D:D9:A0:FB:68:A0:AE:14:3B:B3:87:C1:BB: 0x010001
- X509v3 extensions
- authorityInfoAccess
- OCSP: http://ocsp.verisign.com
- basicConstraints
- true
- true: 0
- crlDistributionPoints: http://crl.verisign.com/ThawteTimestampingCA.crl
- extendedKeyUsage: timeStamping
- keyUsage: true, 6
- subjectAltName
- CN: TSA2048-1-53
- authorityInfoAccess
- RSA-SHA1:
4a 6b f9 ea 58 c2 44 1c 31 89 79 99 2b 96 bf 82 |Jk..X.D.1.y.+...| ac 01 d6 1c 4c cd b0 8a 58 6e df 08 29 a3 5e c8 |....L...Xn..).^.| ca 93 13 e7 04 52 0d ef 47 27 2f 00 38 b0 e4 c9 |.....R..G'/.8...| 93 4e 9a d4 22 62 15 f7 3f 37 21 4f 70 31 80 f1 |.N.."b..?7!Op1..| 8b 38 87 b3 e8 e8 97 00 fe cf 55 96 4e 24 d2 a9 |.8........U.N$..| 27 4e 7a ae b7 61 41 f3 2a ce e7 c9 d9 5e dd bb |'Nz..aA.*....^..| 2b 85 3e b5 9d b5 d9 e1 57 ff be b4 c5 7e f5 cf |+.>.....W....~..| 0c 9e f0 97 fe 2b d3 3b 52 1b 1b 38 27 f7 3f 4a |.....+.;R..8'.?J|
- 2
- Certificate #2
- 2
- 0x401630
- RSA-MD5: nil
- Issuer
- C: ZA
- O: Thawte Consulting (Pty) Ltd.
- CN: Thawte Code Signing CA
- 2005-10-20 07:03:10 UTC: 2007-10-20 07:03:10 UTC
- Subject
- C: AU
- ST: NSW
- L: Sydney
- O: PassMark Software Pty Ltd
- OU: Secure Application Development
- CN: PassMark Software Pty Ltd
- #5
- rsaEncryption: nil
- DA:2D:A9:90:5E:4C:1A:C7:D8:52:3F:AC:4C:1E:77:B8:
88:60:26:52:BB:E4:A9:32:8F:BB:44:17:C8:05:22:30:
7D:3B:A4:82:F6:C5:84:96:27:FC:5A:1A:18:F0:A2:11:
C4:64:E7:6D:56:6C:65:6C:1B:80:2B:A0:4F:E4:0A:2A:
2B:49:5D:80:E6:A7:63:CD:40:4C:CF:79:73:EB:99:5D:
D0:F2:A0:50:D6:11:40:46:65:37:AF:0B:D3:B7:9E:98:
D4:EE:9C:2D:25:6A:2F:01:3B:32:0B:46:49:15:D6:B9:
12:81:B5:89:49:DB:3F:E0:24:53:42:D9:28:C3:24:E2:
0D:C7:14:04:20:30:7F:94:71:26:84:47:97:B7:37:FF:
66:10:E9:B7:48:9A:CD:32:5B:96:46:25:30:D2:36:06:
4A:FF:82:05:A7:9E:54:E5:6C:65:D0:A6:77:30:8C:80:
CA:FB:A0:B0:47:6D:58:1A:BE:96:77:4F:65:6B:5D:D4:
16:D7:96:43:C5:49:D2:FE:F4:5D:8D:52:93:AC:09:DA:
39:60:BC:EB:4C:B3:66:7C:81:D9:F8:CA:62:91:C1:42:
DD:3D:89:80:63:DB:F5:72:18:DF:6C:8E:94:77:C6:30:
88:D6:4C:CE:19:EF:5C:21:8D:07:02:61:4D:7D:1C:23: 0x010001
- #6
- extendedKeyUsage
- codeSigning: msCodeCom
- nsCertType: 0x10
- 2.5.29.4
- msCodeCom: 0x80
- subjectAltName: www.passmark.com
- crlDistributionPoints: http://crl.thawte.com/ThawteCodeSigningCA.crl
- authorityInfoAccess
- OCSP: http://ocsp.thawte.com
- basicConstraints
- true
- nil
- extendedKeyUsage
- RSA-MD5:
31 16 ad 5e e2 03 16 61 e8 93 bf fa 3e 28 03 64 |1..^...a....>(.d| 40 e1 34 2a c8 2c b0 0f fa 19 b5 41 cc 55 8b b4 |@.4*.,.....A.U..| 94 ac 84 5d 40 18 92 bc 23 6a 2d 26 f6 82 6d 58 |...]@...#j-&..mX| 0d a1 b6 eb 99 8a 81 ea 38 67 dd b0 7f df 2a 26 |........8g....*&| 74 52 f6 ab c7 12 42 c3 dc 90 4e 52 89 53 ec 2e |tR....B...NR.S..| eb db 5c a5 dd 9c 1e 60 75 27 82 2d ff 5f b5 77 |..\....`u'.-._.w| a2 be 4f bd b3 33 32 ab d6 24 48 75 10 55 ec 5a |..O..32..$Hu.U.Z| 85 7f f1 46 bf 07 cc b4 85 6e 84 f3 2d eb aa 67 |...F.....n..-..g|
- 2
- Certificate #3
- 2
- 0D:E9:2B:F0:D4:D8:29:88:18:32:05:09:5E:9A:76:88
- RSA-SHA1: nil
- Issuer
- C: US
- O: VeriSign, Inc.
- CN: VeriSign Time Stamping Services CA
- 2003-12-04 00:00:00 UTC: 2008-12-03 23:59:59 UTC
- Subject
- C: US
- O: VeriSign, Inc.
- CN: VeriSign Time Stamping Services Signer
- #5
- rsaEncryption: nil
- B2:50:28:48:DD:D3:68:7A:84:18:44:66:75:5D:7E:C4:
B8:9F:63:26:FF:3D:43:9C:7C:11:38:10:25:55:73:D9:
75:27:69:FD:4E:B9:20:5C:D3:0A:F9:A0:1B:2A:ED:55:
56:21:61:D8:1E:DB:E4:BC:33:6B:C7:EF:DD:A3:37:65:
8E:1B:93:0C:B6:53:1E:5C:7C:66:35:5F:05:8A:45:FE:
76:4E:DF:53:80:A2:81:20:9D:AE:88:5C:A2:08:F7:E5:
30:F9:EE:22:37:4C:42:0A:CE:DF:C6:1F:C4:D6:55:E9:
81:3F:B5:52:A3:2C:AA:01:7A:F2:A2:AA:8D:35:FE:9F:
E6:5D:6A:05:9F:3D:6B:E3:BF:96:C0:FE:CC:60:F9:40:
E7:07:A0:44:EB:81:51:6E:A5:2A:F2:B6:8A:10:28:ED:
8F:DC:06:A0:86:50:9A:7B:4A:08:0D:30:1D:CA:10:9E:
6B:F7:E9:58:AE:04:A9:40:99:B2:28:E8:8F:16:AC:3C:
E3:53:6F:4B:D3:35:9D:B5:6F:64:1D:B3:96:2C:BB:3D:
E7:79:EB:6D:7A:F9:16:E6:26:AD:AF:EF:99:53:B7:40:
2C:95:B8:79:AA:FE:D4:52:AB:29:74:7E:42:EC:39:1E:
A2:6A:16:E6:59:BB:24:68:D8:00:80:43:10:87:80:6B: 0x010001
- X509v3 extensions
- authorityInfoAccess
- OCSP: http://ocsp.verisign.com
- basicConstraints
- true
- nil
- crlDistributionPoints: http://crl.verisign.com/tss-ca.crl
- extendedKeyUsage: true, timeStamping
- keyUsage: true, 0xc0
- subjectAltName
- CN: TSA2048-1-54
- authorityInfoAccess
- RSA-SHA1:
87 78 70 da 4e 52 01 20 5b e0 79 c9 82 30 c4 fd |.xp.NR. [.y..0..| b9 19 96 bd 91 00 c3 bd cd cd c6 f4 0e d8 ff f9 |................| 4d c0 33 62 30 11 c5 f5 74 1b d4 92 de 5f 9c 20 |M.3b0...t...._. | 13 b1 7c 45 be 50 cd 83 e7 80 17 83 a7 27 93 67 |..|E.P.......'.g| 13 46 fb ca b8 98 41 03 cc 9b 51 5b 05 8b 7f a8 |.F....A...Q[....| 6f f3 1b 50 1b 24 2e f2 69 8d 6c 22 f7 bb ca 16 |o..P.$..i.l"....| 95 ed 0c 74 c0 68 77 d9 eb 99 62 87 c1 73 90 f8 |...t.hw...b..s..| 89 74 7a 23 ab a3 98 7b 97 b1 f7 8f 29 71 4d 2e |.tz#...{....)qM.| 75 1b 48 41 da f0 b5 0d 20 54 d6 77 a0 97 82 63 |u.HA.... T.w...c| 69 fd 09 cf 8a f0 75 bb 09 9b d9 f9 11 55 26 9a |i.....u......U&.| 61 32 be 7a 02 b0 7b 86 be a2 c3 8b 22 2c 78 d1 |a2.z..{.....",x.| 35 76 bc 92 73 5c f9 b9 e6 4c 15 0a 23 cc e4 d2 |5v..s\...L..#...| d4 34 2e 49 40 15 3c 0f 60 7a 24 c6 a5 66 ef 96 |.4.I@.<.`z$..f..| cf 70 eb 3e e7 f4 0d 7e dc d1 7c a3 76 71 69 c1 |.p.>...~..|.vqi.| 9c 4f 47 30 35 21 b1 a2 af 1a 62 3c 2b d9 8e aa |.OG05!....b<+...| 2a 07 7b d8 18 b3 5c 7b e2 9d a5 6f fe 3c 89 ad |*.{...\{...o.<..|
- 2
- Certificate #0
- 1
- unnamed
- #0
- C: ZA
- O: Thawte Consulting (Pty) Ltd.
- CN: Thawte Code Signing CA
- 0x401630
- #0
- SHA1: nil
- #2
- contentType: 1.3.6.1.4.1.311.2.1.4
- 1.3.6.1.4.1.311.2.1.11: msCodeCom
- messageDigest:
06 3c 39 8b d1 78 96 89 a1 72 43 00 3c a3 be 64 |.<9..x...rC.<..d| ec ee b4 17 |.... |
- 1.3.6.1.4.1.311.2.1.12
00 42 00 61 00 74 00 74 00 65 00 72 00 79 00 4d |.B.a.t.t.e.r.y.M| 00 6f 00 6e 00 20 00 32 00 2e 00 31 00 20 00 28 |.o.n. .2...1. .(| 00 62 00 79 00 20 00 70 00 61 00 73 00 73 00 6d |.b.y. .p.a.s.s.m| 00 61 00 72 00 6b 00 2e 00 63 00 6f 00 6d 00 29 |.a.r.k...c.o.m.)|
: http://www.passmark.com/
- rsaEncryption:
7c 17 1c f5 55 d6 de 5b 97 c8 84 67 72 15 bc cf ||...U..[...gr...| 69 16 30 ce ec b4 ba c5 e7 88 b8 29 78 66 ba 11 |i.0........)xf..| d8 a8 fb 26 04 f4 b0 1b 25 f7 aa 6a 06 bf 1e a4 |...&....%..j....| bf 69 2e cf af cc 36 a2 f0 49 64 c1 c2 96 9e 4d |.i....6..Id....M| 54 68 6b 85 1a ef f8 16 75 0d c3 80 91 e4 4e 01 |Thk.....u.....N.| aa 8e b4 6a c9 90 85 a6 b7 13 71 b7 3a f7 6d 6c |...j......q.:.ml| 99 34 1e 63 d1 c9 35 4f f6 1e c3 49 72 b4 b5 aa |.4.c..5O...Ir...| 1b be 3c bc f0 dc 68 20 f6 8e 89 c2 a9 de 36 05 |..<...h ......6.| c4 46 da d4 7f f1 b7 ca 90 22 98 42 60 71 07 9e |.F.......".B`q..| b7 c3 34 c7 b6 44 e6 0c 46 44 7d ed 42 45 9e 74 |..4..D..FD}.BE.t| e3 87 82 a8 97 bb cc 58 22 0e fc 85 c1 94 bc a9 |.......X".......| ee 4f 81 c5 80 aa 28 04 fb 14 cf 88 c5 a0 96 84 |.O....(.........| 46 9f 37 b6 77 58 cd aa b1 52 dd 71 49 f2 9f 36 |F.7.wX...R.qI..6| b2 a8 9e ee 32 87 69 43 82 cd e1 55 df 71 8b 72 |....2.iC...U.q.r| 0b 71 dd ee 45 b7 a0 f9 79 d1 68 03 6f e6 1f 05 |.q..E...y.h.o...| 6c b1 d3 88 7b 89 2c 76 d5 46 d5 c4 81 73 92 59 |l...{.,v.F...s.Y|
- countersignature
- 1
- unnamed
- #0
- C: US
- O: VeriSign, Inc.
- CN: VeriSign Time Stamping Services CA
- 0D:E9:2B:F0:D4:D8:29:88:18:32:05:09:5E:9A:76:88
- #0
- MD5: nil
- #2
- contentType: pkcs7-data
- signingTime: 2007-04-26 02:39:46 UTC
- messageDigest:
ea 3d b3 e2 3a b0 c9 b3 5e 2b 32 43 b0 31 f8 c9 |.=..:...^+2C.1..|
- rsaEncryption:
09 0a 0a c8 96 f3 20 18 a5 cb d3 35 df 20 f5 85 |...... ....5. ..| fd bb b4 95 6f a6 b2 9f 14 50 08 df 0e 34 a8 cd |....o....P...4..| a6 96 a8 79 6f 93 d5 d4 e8 60 99 14 75 3d 0f 1c |...yo....`..u=..| cf 00 ee fd 55 50 0d c5 20 ba 02 76 69 fd 94 a6 |....UP.. ..vi...| 46 10 a6 d2 2e ef 29 f1 01 d5 a9 8b 5e d4 7e 7b |F.....).....^.~{| 40 84 00 d4 0c db a0 13 14 21 44 01 0f cd 11 54 |@........!D....T| 07 b1 b5 a4 e7 22 85 be 86 5f 23 9d 27 80 cf f1 |....."..._#.'...| 93 b2 75 47 9c 3d bf 63 fa e2 10 18 0b a9 40 a9 |..uG.=.c......@.| 73 94 5c 78 52 8e c7 50 e5 d8 64 d1 02 b1 c2 32 |s.\xR..P..d....2| b5 e0 1a 98 08 8f c9 10 87 48 76 27 60 e3 d1 73 |.........Hv'`..s| 5e 7d 29 f1 83 8c 7b ad 72 1a 06 94 ae ad 07 fe |^})...{.r.......| 28 c0 65 ec 5c c4 51 c7 97 e0 fb 55 95 a1 71 d5 |(.e.\.Q....U..q.| 4a 47 4a 65 6f 51 10 f3 fa 0e 2b e8 ce c6 17 21 |JGJeoQ....+....!| d8 0d ed ce bf 6b ac fc cf 38 bd a4 e3 1e 82 37 |.....k...8.....7| 76 12 70 00 e6 e6 7e b2 66 31 bb 1e b6 87 c7 78 |v.p...~.f1.....x| 58 f5 36 d7 8f f6 b0 79 13 a3 53 70 44 8c e6 4c |X.6....y..SpD..L|
- unnamed
- 1
- unnamed
offset | size | type | comment | |
---|---|---|---|---|
0 | 1220608 | EXE | 04/26/2007 02:41:19 | # |
15c1 | 15 | HTM | # | |
12a000 | 5120 | PKCS7 | Authenticode Signature | # |
Please donate some bucks to keep this site up and running: | |
Ko-fi | |
---|---|
Yandex.Money | |
Thank you! |
everything is OK