filename | expressinvoice.exe | |
---|---|---|
size | 2627624 (0x281828) | |
md5 | e77e00bf399e34b286502a7f9cc09781 | |
type | PE32 executable (GUI) Intel 80386, for MS Windows | |
mimetype | application/x-dosexec | |
clamav | OK | |
virustotal | → scan with virustotal.com | |
histogram |
MZ Header
signature | MZ |
bytes_in_last_block | 0x90 |
blocks_in_file | 3 |
num_relocs | 0 |
header_paragraphs | 4 |
min_extra_paragraphs | 0 |
max_extra_paragraphs | 0xffff |
ss | 0 |
sp | 0xb8 |
checksum | 0 |
ip | 0 |
cs | 0 |
reloc_table_offset | 0x40 |
overlay_number | 0 |
reserved0 | 0 |
oem_id | 0 |
oem_info | 0 |
reserved2 | 0 |
reserved3 | 0 |
reserved4 | 0 |
reserved5 | 0 |
reserved6 | 0 |
lfanew | 0x108 |
Rich Header
lib id | version | times used |
---|---|---|
126 | 50327 | 6 |
125 | 50727 | 30 |
109 | 50727 | 155 |
110 | 50727 | 68 |
95 | 4035 | 6 |
96 | 4035 | 1 |
93 | 4035 | 39 |
1 | 0 | 596 |
114 | 50727 | 207 |
124 | 50727 | 1 |
120 | 50727 | 1 |
DOS stub
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
PE Header
Packer / Compiler
Sections
name | va | vsize | raw size | flags | |
---|---|---|---|---|---|
.rdata | 0x1000 | 0x9c240 | 0x9c400 | R-- IDATA | |
.data | 0x9e000 | 0x150444 | 0x135000 | RW- IDATA | |
.rsrc | 0x1ef000 | 0xae9a8 | 0xaea00 | R-- IDATA |
Data Directory
StringTable 0c0904b0
CompanyName | NCH Software |
FileDescription | Express Invoice |
FileVersion | 3.97ES+ |
ProductName | ExpressInvoice |
LegalCopyright | NCH Software |
InternalName | ExpressInvoice |
StringTable 0c0904b0
CompanyName | NCH Software |
FileDescription | Express Invoice |
FileVersion | 3.97ES+ |
ProductName | ExpressInvoice |
LegalCopyright | NCH Software |
InternalName | ExpressInvoice |
VS_FIXEDFILEINFO
FileVersion | 0.0.0.0 |
ProductVersion | 0.0.0.0 |
StrucVersion | 0x10000 |
FileFlagsMask | 0x17 |
FileFlags | 0 |
FileOS | 4 |
FileType | 1 |
FileSubtype | 0 |
VS_FIXEDFILEINFO
FileVersion | 0.0.0.0 |
ProductVersion | 0.0.0.0 |
StrucVersion | 0x10000 |
FileFlagsMask | 0x17 |
FileFlags | 0 |
FileOS | 4 |
FileType | 1 |
FileSubtype | 0 |
Signers (1)
issuer: /C=US/O=Thawte, Inc./CN=Thawte Code Signing CA - G2
serial: 6A560820FA3E9AD8E5411734B1D40AD5
Certificates (4)
Certificate: Data: Version: 3 (0x2) Serial Number: 7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b Signature Algorithm: sha1WithRSAEncryption Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA Validity Not Before: Dec 21 00:00:00 2012 GMT Not After : Dec 30 23:59:59 2020 GMT Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ac:b3:49:54:4b:97:1c:12:0a:d8:25:79:91: 22:57:2a:6f:dc:b8:26:c4:43:73:6b:c2:bf:2e:50: 5a:fb:14:c2:76:8e:43:01:25:43:b4:a1:e2:45:f4: e8:b7:7b:c3:74:cc:22:d7:b4:94:00:02:f7:4d:ed: bf:b4:b7:44:24:6b:cd:5f:45:3b:d1:44:ce:43:12: 73:17:82:8b:69:b4:2b:cb:99:1e:ac:72:1b:26:4d: 71:1f:b1:31:dd:fb:51:61:02:53:a6:aa:f5:49:2c: 05:78:45:a5:2f:89:ce:e7:99:e7:fe:8c:e2:57:3f: 3d:c6:92:dc:4a:f8:7b:33:e4:79:0a:fb:f0:75:88: 41:9c:ff:c5:03:51:99:aa:d7:6c:9f:93:69:87:65: 29:83:85:c2:60:14:c4:c8:c9:3b:14:da:c0:81:f0: 1f:0d:74:de:92:22:ab:ca:f7:fb:74:7c:27:e6:f7: 4a:1b:7f:a7:c3:9e:2d:ae:8a:ea:a6:e6:aa:27:16: 7d:61:f7:98:71:11:bc:e2:50:a1:4b:e5:5d:fa:e5: 0e:a7:2c:9f:aa:65:20:d3:d8:96:e8:c8:7c:a5:4e: 48:44:ff:19:e2:44:07:92:0b:d7:68:84:80:5d:6a: 78:64:45:cd:60:46:7e:54:c1:13:7c:c5:79:f1:c9: c1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD Authority Information Access: OCSP - URI:http://ocsp.thawte.com X509v3 Basic Constraints: critical CA:TRUE, pathlen:0 X509v3 CRL Distribution Points: Full Name: URI:http://crl.thawte.com/ThawteTimestampingCA.crl X509v3 Extended Key Usage: Time Stamping X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Subject Alternative Name: DirName:/CN=TimeStamp-2048-1 Signature Algorithm: sha1WithRSAEncryption 03:09:9b:8f:79:ef:7f:59:30:aa:ef:68:b5:fa:e3:09:1d:bb: 4f:82:06:5d:37:5f:a6:52:9f:16:8d:ea:1c:92:09:44:6e:f5: 6d:eb:58:7c:30:e8:f9:69:8d:23:73:0b:12:6f:47:a9:ae:39: 11:f8:2a:b1:9b:b0:1a:c3:8e:eb:59:96:00:ad:ce:0c:4d:b2: d0:31:a6:08:5c:2a:7a:fc:e2:7a:1d:57:4c:a8:65:18:e9:79: 40:62:25:96:6e:c7:c7:37:6a:83:21:08:8e:41:ea:dd:d9:57: 3f:1d:77:49:87:2a:16:06:5e:a6:38:6a:22:12:a3:51:19:83: 7e:b6
Certificate: Data: Version: 3 (0x2) Serial Number: 6a:56:08:20:fa:3e:9a:d8:e5:41:17:34:b1:d4:0a:d5 Signature Algorithm: sha1WithRSAEncryption Issuer: C=US, O=Thawte, Inc., CN=Thawte Code Signing CA - G2 Validity Not Before: May 20 00:00:00 2013 GMT Not After : Aug 7 23:59:59 2015 GMT Subject: C=AU, ST=Australian Capital Territory, L=Canberra, O=NCH Software, CN=NCH Software Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:52:45:a9:33:8e:d4:65:dd:52:64:09:22:3d: ba:35:87:94:df:d2:62:fc:24:2d:ca:fc:76:dd:3b: b4:34:27:c2:59:21:33:81:41:6d:07:98:20:43:c1: 31:6d:b4:d5:e5:b1:c0:9a:cc:ad:dd:91:35:da:94: 9d:d9:41:9a:3b:72:a8:89:58:3d:ca:84:79:d0:aa: e6:8c:bf:91:3a:42:84:0a:bd:8a:b8:0d:49:62:2e: 04:6d:a9:39:03:96:03:14:4b:d3:d6:78:1a:e4:4c: 1c:ea:d1:d5:05:3b:ab:82:6e:da:d2:b8:7e:72:0e: 54:4f:cd:f9:a5:20:2b:a8:75:78:e4:fc:48:40:3b: 99:d7:06:a7:92:26:1a:0c:5b:51:9d:d1:48:10:83: 8c:9a:59:da:36:2a:7a:ef:50:9d:f0:7d:56:70:50: ad:34:e9:7f:95:be:1d:2e:67:6b:87:0d:e8:44:e3: 16:9c:09:87:ce:8c:da:ce:61:e7:a6:a5:86:50:e6: db:ed:3d:c3:31:1b:85:92:12:07:7f:47:3b:45:68: ad:c3:45:1f:b4:c7:ab:d5:25:19:bc:e9:ff:33:1b: 2d:a9:4a:97:e3:db:bb:89:13:d1:dd:b9:35:de:5d: 53:1f:04:1f:a9:19:29:4a:cd:c9:83:3b:fa:6e:c8: 0b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 CRL Distribution Points: Full Name: URI:http://cs-g2-crl.thawte.com/ThawteCSG2.crl X509v3 Extended Key Usage: Code Signing, Microsoft Commercial Code Signing 2.5.29.4: 0.0.0.. +.....7....... Authority Information Access: OCSP - URI:http://ocsp.thawte.com Netscape Cert Type: Object Signing Signature Algorithm: sha1WithRSAEncryption 6c:25:15:1a:ff:2a:ab:e3:69:0c:d0:69:cf:74:88:2b:08:53: 7c:a9:c0:b7:c5:e7:bb:b6:57:39:4b:d1:ce:3f:e8:b9:da:84: be:30:d9:68:c9:28:1a:53:d1:f0:9a:c4:8e:af:97:e5:88:88: b1:fc:d2:35:55:66:64:b4:e7:d6:e5:ca:4a:89:64:42:d8:80: 01:da:48:dc:16:e1:94:97:ba:c0:26:28:a9:65:7d:9c:b7:4c: 7b:dc:ef:3f:14:db:26:6a:21:28:aa:78:d4:12:c9:b2:b1:0a: a8:ea:ac:a5:fb:13:8b:fd:60:dc:04:f2:cb:f1:80:10:ce:ad: 5e:9f:eb:67:d6:7e:41:7a:ec:c3:ef:90:fa:f1:2b:e4:7d:7c: 12:7d:51:c6:4a:49:03:93:3f:89:05:0e:b3:74:ab:b5:c6:b6: 25:fc:7c:85:3e:40:03:49:86:92:ac:ab:8c:7f:79:c0:7a:f9: 46:85:83:77:1d:5b:fc:56:41:7a:7b:36:6b:cf:c3:8c:07:3f: 0f:d1:d7:d1:b3:5d:5c:3d:32:f7:ed:a6:7b:38:f9:42:54:6d: cf:aa:9b:bf:aa:63:49:e7:ce:6f:44:03:d4:4e:68:d1:d8:99: 47:52:b4:dc:94:0a:30:9e:d6:e4:2d:07:27:b2:39:8a:24:ca: b5:c6:d8:11
Certificate: Data: Version: 3 (0x2) Serial Number: 47:97:4d:78:73:a5:bc:ab:0d:2f:b3:70:19:2f:ce:5e Signature Algorithm: sha1WithRSAEncryption Issuer: C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2006 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA Validity Not Before: Feb 8 00:00:00 2010 GMT Not After : Feb 7 23:59:59 2020 GMT Subject: C=US, O=Thawte, Inc., CN=Thawte Code Signing CA - G2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8b:cf:75:5b:9f:25:da:7e:39:b0:93:db:38: d3:a9:23:d0:82:fa:e9:24:7e:5c:0b:8e:83:f8:e6: 7a:59:e6:a3:c5:98:a7:99:d2:44:ff:00:a6:a5:39: 04:8a:da:29:88:ea:db:a2:f3:1c:99:15:26:c2:b1: f4:fc:e1:0c:47:a9:09:11:06:0a:20:92:b9:c7:a0: 04:8c:5c:94:19:ab:5b:25:2c:1d:62:7e:70:0d:ce: 61:6c:dd:2b:82:c9:ce:5d:48:5f:f7:c2:be:bc:41: 23:1e:4f:29:5d:d7:4f:bc:f4:c5:2a:fc:63:e6:7c: 26:4e:99:a7:79:41:9e:10:4a:7a:79:c9:c6:86:f7: 86:95:d2:26:ce:3c:18:2a:d6:7c:ce:af:cd:ad:bb: f7:82:2c:70:26:37:45:e5:0f:47:22:c6:01:28:bd: 2e:83:5c:6a:a4:47:c1:e7:d0:d8:6b:81:46:3f:21: 17:f5:07:c5:43:5a:a6:67:2c:b8:7b:60:11:b5:83: ee:f5:74:0a:72:71:44:3d:58:fe:e8:1a:ab:38:c3: 59:db:7f:6e:38:7d:76:c7:72:69:98:36:96:57:d3: 66:1c:d2:54:91:04:2e:54:19:b0:dc:3d:b5:22:5e: 86:d5:2a:7e:20:df:5d:e6:7a:b1:65:fe:c5:02:4e: 31:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE, pathlen:0 X509v3 CRL Distribution Points: Full Name: URI:http://crl.thawte.com/ThawtePCA.crl X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: OCSP - URI:http://ocsp.thawte.com X509v3 Extended Key Usage: TLS Web Client Authentication, Code Signing X509v3 Subject Alternative Name: DirName:/CN=VeriSignMPKI-2-10 X509v3 Subject Key Identifier: D4:0D:65:3F:7A:BD:34:C6:FE:47:E7:4C:0D:C0:BD:F2:DE:15:AB:71 X509v3 Authority Key Identifier: keyid:7B:5B:45:CF:AF:CE:CB:7A:FD:31:92:1A:6A:B6:F3:46:EB:57:48:50 Signature Algorithm: sha1WithRSAEncryption 56:fe:53:5c:e1:c7:9e:bc:a7:ed:7e:53:6d:6a:14:4b:51:8c: 40:5e:80:5f:aa:a4:e8:2f:ef:38:c8:04:c9:ca:3e:cf:df:3a: 58:4e:b0:d4:b6:63:c5:29:57:fa:02:05:9a:45:4d:68:db:2a: 1b:d4:34:3d:9f:00:c3:5a:cb:95:49:a5:6e:e1:b0:c5:fc:41: 4d:41:4a:6f:d3:77:c8:d7:38:8d:e4:19:de:18:f3:1f:15:65: 83:6d:45:0c:53:f9:0a:9a:2e:a5:5d:bf:6f:32:81:18:92:19: 6a:55:00:ad:63:1c:52:06:7e:55:d9:29:68:ae:4a:7c:18:9a: 79:88:6b:23:23:d8:27:38:2a:29:87:76:ca:fb:c7:b6:62:23: 1f:ed:7a:56:4c:dd:9c:32:5b:f5:3d:0c:46:18:95:3b:2a:23: 68:83:64:41:d9:00:6d:0f:19:24:15:68:72:bd:c5:71:67:6e: ac:4c:db:90:eb:51:a5:1a:62:07:d0:be:6a:00:47:3c:72:2f: ec:4f:61:3e:73:85:ce:5a:0a:b7:ba:c0:1c:13:75:e3:22:39: 28:dd:6d:1d:09:46:9d:4f:ba:e8:40:81:91:c6:a4:ce:94:72: 1b:01:cf:2a:6e:15:67:95:89:ae:7d:b7:b7:cd:f9:0a:3d:75: b6:6b:3c:25
Certificate: Data: Version: 3 (0x2) Serial Number: 0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50 Signature Algorithm: sha1WithRSAEncryption Issuer: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2 Validity Not Before: Oct 18 00:00:00 2012 GMT Not After : Dec 29 23:59:59 2020 GMT Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer - G4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:63:0b:39:44:b8:bb:23:a7:44:49:bb:0e:ff: a1:f0:61:0a:53:93:b0:98:db:ad:2c:0f:4a:c5:6e: ff:86:3c:53:55:0f:15:ce:04:3f:2b:fd:a9:96:96: d9:be:61:79:0b:5b:c9:4c:86:76:e5:e0:43:4b:22: 95:ee:c2:2b:43:c1:9f:d8:68:b4:8e:40:4f:ee:85: 38:b9:11:c5:23:f2:64:58:f0:15:32:6f:4e:57:a1: ae:88:a4:02:d7:2a:1e:cd:4b:e1:dd:63:d5:17:89: 32:5b:b0:5e:99:5a:a8:9d:28:50:0e:17:ee:96:db: 61:3b:45:51:1d:cf:12:56:0b:92:47:fc:ab:ae:f6: 66:3d:47:ac:70:72:e7:92:e7:5f:cd:10:b9:c4:83: 64:94:19:bd:25:80:e1:e8:d2:22:a5:d0:ba:02:7a: a1:77:93:5b:65:c3:ee:17:74:bc:41:86:2a:dc:08: 4c:8c:92:8c:91:2d:9e:77:44:1f:68:d6:a8:74:77: db:0e:5b:32:8b:56:8b:33:bd:d9:63:c8:49:9d:3a: c5:c5:ea:33:0b:d2:f1:a3:1b:f4:8b:be:d9:b3:57: 8b:3b:de:04:a7:7a:22:b2:24:ae:2e:c7:70:c5:be: 4e:83:26:08:fb:0b:bd:a9:4f:99:08:e1:10:28:72: aa:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Extended Key Usage: critical Time Stamping X509v3 Key Usage: critical Digital Signature Authority Information Access: OCSP - URI:http://ts-ocsp.ws.symantec.com CA Issuers - URI:http://ts-aia.ws.symantec.com/tss-ca-g2.cer X509v3 CRL Distribution Points: Full Name: URI:http://ts-crl.ws.symantec.com/tss-ca-g2.crl X509v3 Subject Alternative Name: DirName:/CN=TimeStamp-2048-2 X509v3 Subject Key Identifier: 46:C6:69:A3:0E:4A:14:1E:D5:4C:DA:52:63:17:3F:5E:36:BC:0D:E6 X509v3 Authority Key Identifier: keyid:5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD Signature Algorithm: sha1WithRSAEncryption 78:3b:b4:91:2a:00:4c:f0:8f:62:30:37:78:a3:84:27:07:6f: 18:b2:de:25:dc:a0:d4:94:03:aa:86:4e:25:9f:9a:40:03:1c: dd:ce:e3:79:cb:21:68:06:da:b6:32:b4:6d:bf:f4:2c:26:63: 33:e4:49:64:6d:0d:e6:c3:67:0e:f7:05:a4:35:6c:7c:89:16: c6:e9:b2:df:b2:e9:dd:20:c6:71:0f:cd:95:74:dc:b6:5c:de: bd:37:1f:43:78:e6:78:b5:cd:28:04:20:a3:aa:f1:4b:c4:88: 29:91:0e:80:d1:11:fc:dd:5c:76:6e:4f:5e:0e:45:46:41:6e: 0d:b0:ea:38:9a:b1:3a:da:09:71:10:fc:1c:79:b4:80:7b:ac: 69:f4:fd:9c:b6:0c:16:2b:f1:7f:5b:09:3d:9b:5b:e2:16:ca: 13:81:6d:00:2e:38:0d:a8:29:8f:2c:e1:b2:f4:5a:a9:01:af: 15:9c:2c:2f:49:1b:db:22:bb:c3:fe:78:94:51:c3:86:b1:82: 88:5d:f0:3d:b4:51:a1:79:33:2b:2e:7b:b9:dc:20:09:13:71: eb:6a:19:5b:cf:e8:a5:30:57:2c:89:49:3f:b9:cf:7f:c9:bf: 3e:22:68:63:53:9a:bd:69:74:ac:c5:1d:3c:7f:92:e0:c3:bc: 1c:d8:04:75
pkcs7-signedData
- 1
- SHA1: nil
- 1.3.6.1.4.1.311.2.1.4
- #0
- 1.3.6.1.4.1.311.2.1.15
- :
00 3c 00 3c 00 3c 00 4f 00 62 00 73 00 6f 00 6c |.<.<.<.O.b.s.o.l| 00 65 00 74 00 65 00 3e 00 3e 00 3e |.e.t.e.>.>.> |
- :
- SHA1
57 fb cd 76 52 dd 23 d6 b6 ff bb 14 34 8a f0 b5 |W..vR.#.....4...| 29 c6 1c 25 |)..% |
- 1.3.6.1.4.1.311.2.1.15
- #0
- Certificates
- Certificate #0
- 2
- 7E:93:EB:FB:7C:C6:4E:59:EA:4B:9A:77:D4:06:FC:3B
- RSA-SHA1: nil
- Issuer
- C: ZA
- ST: Western Cape
- L: Durbanville
- O: Thawte
- OU: Thawte Certification
- CN: Thawte Timestamping CA
- 2012-12-21 00:00:00 UTC: 2020-12-30 23:59:59 UTC
- Subject
- C: US
- O: Symantec Corporation
- CN: Symantec Time Stamping Services CA - G2
- #5
- rsaEncryption: nil
- B1:AC:B3:49:54:4B:97:1C:12:0A:D8:25:79:91:22:57:
2A:6F:DC:B8:26:C4:43:73:6B:C2:BF:2E:50:5A:FB:14:
C2:76:8E:43:01:25:43:B4:A1:E2:45:F4:E8:B7:7B:C3:
74:CC:22:D7:B4:94:00:02:F7:4D:ED:BF:B4:B7:44:24:
6B:CD:5F:45:3B:D1:44:CE:43:12:73:17:82:8B:69:B4:
2B:CB:99:1E:AC:72:1B:26:4D:71:1F:B1:31:DD:FB:51:
61:02:53:A6:AA:F5:49:2C:05:78:45:A5:2F:89:CE:E7:
99:E7:FE:8C:E2:57:3F:3D:C6:92:DC:4A:F8:7B:33:E4:
79:0A:FB:F0:75:88:41:9C:FF:C5:03:51:99:AA:D7:6C:
9F:93:69:87:65:29:83:85:C2:60:14:C4:C8:C9:3B:14:
DA:C0:81:F0:1F:0D:74:DE:92:22:AB:CA:F7:FB:74:7C:
27:E6:F7:4A:1B:7F:A7:C3:9E:2D:AE:8A:EA:A6:E6:AA:
27:16:7D:61:F7:98:71:11:BC:E2:50:A1:4B:E5:5D:FA:
E5:0E:A7:2C:9F:AA:65:20:D3:D8:96:E8:C8:7C:A5:4E:
48:44:FF:19:E2:44:07:92:0B:D7:68:84:80:5D:6A:78:
64:45:CD:60:46:7E:54:C1:13:7C:C5:79:F1:C9:C1:71: 0x010001
- #6
- subjectKeyIdentifier:
5f 9a f5 6e 5c cc cc 74 9a d4 dd 7d ef 3f db ec |_..n\..t...}.?..| 4c 80 2e dd |L... |
- authorityInfoAccess
- OCSP: http://ocsp.thawte.com
- basicConstraints
- true
- true: 0
- crlDistributionPoints: http://crl.thawte.com/ThawteTimestampingCA.crl
- extendedKeyUsage: timeStamping
- keyUsage: true, 6
- subjectAltName
- CN: TimeStamp-2048-1
- subjectKeyIdentifier:
- RSA-SHA1:
03 09 9b 8f 79 ef 7f 59 30 aa ef 68 b5 fa e3 09 |....y..Y0..h....| 1d bb 4f 82 06 5d 37 5f a6 52 9f 16 8d ea 1c 92 |..O..]7_.R......| 09 44 6e f5 6d eb 58 7c 30 e8 f9 69 8d 23 73 0b |.Dn.m.X|0..i.#s.| 12 6f 47 a9 ae 39 11 f8 2a b1 9b b0 1a c3 8e eb |.oG..9..*.......| 59 96 00 ad ce 0c 4d b2 d0 31 a6 08 5c 2a 7a fc |Y.....M..1..\*z.| e2 7a 1d 57 4c a8 65 18 e9 79 40 62 25 96 6e c7 |.z.WL.e..y@b%.n.| c7 37 6a 83 21 08 8e 41 ea dd d9 57 3f 1d 77 49 |.7j.!..A...W?.wI| 87 2a 16 06 5e a6 38 6a 22 12 a3 51 19 83 7e b6 |.*..^.8j"..Q..~.|
- 2
- Certificate #1
- 2
- 6A:56:08:20:FA:3E:9A:D8:E5:41:17:34:B1:D4:0A:D5
- RSA-SHA1: nil
- Issuer
- C: US
- O: Thawte, Inc.
- CN: Thawte Code Signing CA - G2
- 2013-05-20 00:00:00 UTC: 2015-08-07 23:59:59 UTC
- Subject
- C: AU
- ST: Australian Capital Territory
- L: Canberra
- O: NCH Software
- CN: NCH Software
- #5
- rsaEncryption: nil
- B8:52:45:A9:33:8E:D4:65:DD:52:64:09:22:3D:BA:35:
87:94:DF:D2:62:FC:24:2D:CA:FC:76:DD:3B:B4:34:27:
C2:59:21:33:81:41:6D:07:98:20:43:C1:31:6D:B4:D5:
E5:B1:C0:9A:CC:AD:DD:91:35:DA:94:9D:D9:41:9A:3B:
72:A8:89:58:3D:CA:84:79:D0:AA:E6:8C:BF:91:3A:42:
84:0A:BD:8A:B8:0D:49:62:2E:04:6D:A9:39:03:96:03:
14:4B:D3:D6:78:1A:E4:4C:1C:EA:D1:D5:05:3B:AB:82:
6E:DA:D2:B8:7E:72:0E:54:4F:CD:F9:A5:20:2B:A8:75:
78:E4:FC:48:40:3B:99:D7:06:A7:92:26:1A:0C:5B:51:
9D:D1:48:10:83:8C:9A:59:DA:36:2A:7A:EF:50:9D:F0:
7D:56:70:50:AD:34:E9:7F:95:BE:1D:2E:67:6B:87:0D:
E8:44:E3:16:9C:09:87:CE:8C:DA:CE:61:E7:A6:A5:86:
50:E6:DB:ED:3D:C3:31:1B:85:92:12:07:7F:47:3B:45:
68:AD:C3:45:1F:B4:C7:AB:D5:25:19:BC:E9:FF:33:1B:
2D:A9:4A:97:E3:DB:BB:89:13:D1:DD:B9:35:DE:5D:53:
1F:04:1F:A9:19:29:4A:CD:C9:83:3B:FA:6E:C8:0B:CD: 0x010001
- X509v3 extensions
- basicConstraints
- true
- nil
- crlDistributionPoints: http://cs-g2-crl.thawte.com/ThawteCSG2.crl
- extendedKeyUsage
- codeSigning: msCodeCom
- 2.5.29.4
- msCodeCom: 0x80
- authorityInfoAccess
- OCSP: http://ocsp.thawte.com
- nsCertType: 0x10
- basicConstraints
- RSA-SHA1:
6c 25 15 1a ff 2a ab e3 69 0c d0 69 cf 74 88 2b |l%...*..i..i.t.+| 08 53 7c a9 c0 b7 c5 e7 bb b6 57 39 4b d1 ce 3f |.S|.......W9K..?| e8 b9 da 84 be 30 d9 68 c9 28 1a 53 d1 f0 9a c4 |.....0.h.(.S....| 8e af 97 e5 88 88 b1 fc d2 35 55 66 64 b4 e7 d6 |.........5Ufd...| e5 ca 4a 89 64 42 d8 80 01 da 48 dc 16 e1 94 97 |..J.dB....H.....| ba c0 26 28 a9 65 7d 9c b7 4c 7b dc ef 3f 14 db |..&(.e}..L{..?..| 26 6a 21 28 aa 78 d4 12 c9 b2 b1 0a a8 ea ac a5 |&j!(.x..........| fb 13 8b fd 60 dc 04 f2 cb f1 80 10 ce ad 5e 9f |....`.........^.| eb 67 d6 7e 41 7a ec c3 ef 90 fa f1 2b e4 7d 7c |.g.~Az......+.}|| 12 7d 51 c6 4a 49 03 93 3f 89 05 0e b3 74 ab b5 |.}Q.JI..?....t..| c6 b6 25 fc 7c 85 3e 40 03 49 86 92 ac ab 8c 7f |..%.|.>@.I......| 79 c0 7a f9 46 85 83 77 1d 5b fc 56 41 7a 7b 36 |y.z.F..w.[.VAz{6| 6b cf c3 8c 07 3f 0f d1 d7 d1 b3 5d 5c 3d 32 f7 |k....?.....]\=2.| ed a6 7b 38 f9 42 54 6d cf aa 9b bf aa 63 49 e7 |..{8.BTm.....cI.| ce 6f 44 03 d4 4e 68 d1 d8 99 47 52 b4 dc 94 0a |.oD..Nh...GR....| 30 9e d6 e4 2d 07 27 b2 39 8a 24 ca b5 c6 d8 11 |0...-.'.9.$.....|
- 2
- Certificate #2
- 2
- 47:97:4D:78:73:A5:BC:AB:0D:2F:B3:70:19:2F:CE:5E
- RSA-SHA1: nil
- Issuer
- C: US
- O: thawte, Inc.
- OU: Certification Services Division
- OU: (c) 2006 thawte, Inc. - For authorized use only
- CN: thawte Primary Root CA
- 2010-02-08 00:00:00 UTC: 2020-02-07 23:59:59 UTC
- Subject
- C: US
- O: Thawte, Inc.
- CN: Thawte Code Signing CA - G2
- #5
- rsaEncryption: nil
- B7:8B:CF:75:5B:9F:25:DA:7E:39:B0:93:DB:38:D3:A9:
23:D0:82:FA:E9:24:7E:5C:0B:8E:83:F8:E6:7A:59:E6:
A3:C5:98:A7:99:D2:44:FF:00:A6:A5:39:04:8A:DA:29:
88:EA:DB:A2:F3:1C:99:15:26:C2:B1:F4:FC:E1:0C:47:
A9:09:11:06:0A:20:92:B9:C7:A0:04:8C:5C:94:19:AB:
5B:25:2C:1D:62:7E:70:0D:CE:61:6C:DD:2B:82:C9:CE:
5D:48:5F:F7:C2:BE:BC:41:23:1E:4F:29:5D:D7:4F:BC:
F4:C5:2A:FC:63:E6:7C:26:4E:99:A7:79:41:9E:10:4A:
7A:79:C9:C6:86:F7:86:95:D2:26:CE:3C:18:2A:D6:7C:
CE:AF:CD:AD:BB:F7:82:2C:70:26:37:45:E5:0F:47:22:
C6:01:28:BD:2E:83:5C:6A:A4:47:C1:E7:D0:D8:6B:81:
46:3F:21:17:F5:07:C5:43:5A:A6:67:2C:B8:7B:60:11:
B5:83:EE:F5:74:0A:72:71:44:3D:58:FE:E8:1A:AB:38:
C3:59:DB:7F:6E:38:7D:76:C7:72:69:98:36:96:57:D3:
66:1C:D2:54:91:04:2E:54:19:B0:DC:3D:B5:22:5E:86:
D5:2A:7E:20:DF:5D:E6:7A:B1:65:FE:C5:02:4E:31:2D: 0x010001
- X509v3 extensions
- basicConstraints
- true
- true: 0
- crlDistributionPoints: http://crl.thawte.com/ThawtePCA.crl
- keyUsage: true, 6
- authorityInfoAccess
- OCSP: http://ocsp.thawte.com
- extendedKeyUsage
- clientAuth: codeSigning
- subjectAltName
- CN: VeriSignMPKI-2-10
- subjectKeyIdentifier:
d4 0d 65 3f 7a bd 34 c6 fe 47 e7 4c 0d c0 bd f2 |..e?z.4..G.L....| de 15 ab 71 |...q |
- authorityKeyIdentifier:
7b 5b 45 cf af ce cb 7a fd 31 92 1a 6a b6 f3 46 |{[E....z.1..j..F| eb 57 48 50 |.WHP |
- basicConstraints
- RSA-SHA1:
56 fe 53 5c e1 c7 9e bc a7 ed 7e 53 6d 6a 14 4b |V.S\......~Smj.K| 51 8c 40 5e 80 5f aa a4 e8 2f ef 38 c8 04 c9 ca |Q.@^._.../.8....| 3e cf df 3a 58 4e b0 d4 b6 63 c5 29 57 fa 02 05 |>..:XN...c.)W...| 9a 45 4d 68 db 2a 1b d4 34 3d 9f 00 c3 5a cb 95 |.EMh.*..4=...Z..| 49 a5 6e e1 b0 c5 fc 41 4d 41 4a 6f d3 77 c8 d7 |I.n....AMAJo.w..| 38 8d e4 19 de 18 f3 1f 15 65 83 6d 45 0c 53 f9 |8........e.mE.S.| 0a 9a 2e a5 5d bf 6f 32 81 18 92 19 6a 55 00 ad |....].o2....jU..| 63 1c 52 06 7e 55 d9 29 68 ae 4a 7c 18 9a 79 88 |c.R.~U.)h.J|..y.| 6b 23 23 d8 27 38 2a 29 87 76 ca fb c7 b6 62 23 |k##.'8*).v....b#| 1f ed 7a 56 4c dd 9c 32 5b f5 3d 0c 46 18 95 3b |..zVL..2[.=.F..;| 2a 23 68 83 64 41 d9 00 6d 0f 19 24 15 68 72 bd |*#h.dA..m..$.hr.| c5 71 67 6e ac 4c db 90 eb 51 a5 1a 62 07 d0 be |.qgn.L...Q..b...| 6a 00 47 3c 72 2f ec 4f 61 3e 73 85 ce 5a 0a b7 |j.G
s..Z..| ba c0 1c 13 75 e3 22 39 28 dd 6d 1d 09 46 9d 4f |....u."9(.m..F.O| ba e8 40 81 91 c6 a4 ce 94 72 1b 01 cf 2a 6e 15 |..@......r...*n.| 67 95 89 ae 7d b7 b7 cd f9 0a 3d 75 b6 6b 3c 25 |g...}.....=u.k<%|
- 2
- Certificate #3
- 2
- 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
- RSA-SHA1: nil
- Issuer
- C: US
- O: Symantec Corporation
- CN: Symantec Time Stamping Services CA - G2
- 2012-10-18 00:00:00 UTC: 2020-12-29 23:59:59 UTC
- Subject
- C: US
- O: Symantec Corporation
- CN: Symantec Time Stamping Services Signer - G4
- #5
- rsaEncryption: nil
- A2:63:0B:39:44:B8:BB:23:A7:44:49:BB:0E:FF:A1:F0:
61:0A:53:93:B0:98:DB:AD:2C:0F:4A:C5:6E:FF:86:3C:
53:55:0F:15:CE:04:3F:2B:FD:A9:96:96:D9:BE:61:79:
0B:5B:C9:4C:86:76:E5:E0:43:4B:22:95:EE:C2:2B:43:
C1:9F:D8:68:B4:8E:40:4F:EE:85:38:B9:11:C5:23:F2:
64:58:F0:15:32:6F:4E:57:A1:AE:88:A4:02:D7:2A:1E:
CD:4B:E1:DD:63:D5:17:89:32:5B:B0:5E:99:5A:A8:9D:
28:50:0E:17:EE:96:DB:61:3B:45:51:1D:CF:12:56:0B:
92:47:FC:AB:AE:F6:66:3D:47:AC:70:72:E7:92:E7:5F:
CD:10:B9:C4:83:64:94:19:BD:25:80:E1:E8:D2:22:A5:
D0:BA:02:7A:A1:77:93:5B:65:C3:EE:17:74:BC:41:86:
2A:DC:08:4C:8C:92:8C:91:2D:9E:77:44:1F:68:D6:A8:
74:77:DB:0E:5B:32:8B:56:8B:33:BD:D9:63:C8:49:9D:
3A:C5:C5:EA:33:0B:D2:F1:A3:1B:F4:8B:BE:D9:B3:57:
8B:3B:DE:04:A7:7A:22:B2:24:AE:2E:C7:70:C5:BE:4E:
83:26:08:FB:0B:BD:A9:4F:99:08:E1:10:28:72:AA:CD: 0x010001
- X509v3 extensions
- basicConstraints
- true
- nil
- extendedKeyUsage: true, timeStamping
- keyUsage: true, 0x80
- authorityInfoAccess
- #0
- OCSP: http://ts-ocsp.ws.symantec.com
- caIssuers: http://ts-aia.ws.symantec.com/tss-ca-g2.cer
- #0
- crlDistributionPoints: http://ts-crl.ws.symantec.com/tss-ca-g2.crl
- subjectAltName
- CN: TimeStamp-2048-2
- subjectKeyIdentifier:
46 c6 69 a3 0e 4a 14 1e d5 4c da 52 63 17 3f 5e |F.i..J...L.Rc.?^| 36 bc 0d e6 |6... |
- authorityKeyIdentifier:
5f 9a f5 6e 5c cc cc 74 9a d4 dd 7d ef 3f db ec |_..n\..t...}.?..| 4c 80 2e dd |L... |
- basicConstraints
- RSA-SHA1:
78 3b b4 91 2a 00 4c f0 8f 62 30 37 78 a3 84 27 |x;..*.L..b07x..'| 07 6f 18 b2 de 25 dc a0 d4 94 03 aa 86 4e 25 9f |.o...%.......N%.| 9a 40 03 1c dd ce e3 79 cb 21 68 06 da b6 32 b4 |.@.....y.!h...2.| 6d bf f4 2c 26 63 33 e4 49 64 6d 0d e6 c3 67 0e |m..,&c3.Idm...g.| f7 05 a4 35 6c 7c 89 16 c6 e9 b2 df b2 e9 dd 20 |...5l|......... | c6 71 0f cd 95 74 dc b6 5c de bd 37 1f 43 78 e6 |.q...t..\..7.Cx.| 78 b5 cd 28 04 20 a3 aa f1 4b c4 88 29 91 0e 80 |x..(. ...K..)...| d1 11 fc dd 5c 76 6e 4f 5e 0e 45 46 41 6e 0d b0 |....\vnO^.EFAn..| ea 38 9a b1 3a da 09 71 10 fc 1c 79 b4 80 7b ac |.8..:..q...y..{.| 69 f4 fd 9c b6 0c 16 2b f1 7f 5b 09 3d 9b 5b e2 |i......+..[.=.[.| 16 ca 13 81 6d 00 2e 38 0d a8 29 8f 2c e1 b2 f4 |....m..8..).,...| 5a a9 01 af 15 9c 2c 2f 49 1b db 22 bb c3 fe 78 |Z.....,/I.."...x| 94 51 c3 86 b1 82 88 5d f0 3d b4 51 a1 79 33 2b |.Q.....].=.Q.y3+| 2e 7b b9 dc 20 09 13 71 eb 6a 19 5b cf e8 a5 30 |.{.. ..q.j.[...0| 57 2c 89 49 3f b9 cf 7f c9 bf 3e 22 68 63 53 9a |W,.I?.....>"hcS.| bd 69 74 ac c5 1d 3c 7f 92 e0 c3 bc 1c d8 04 75 |.it...<........u|
- 2
- Certificate #0
- 1
- unnamed
- #0
- C: US
- O: Thawte, Inc.
- CN: Thawte Code Signing CA - G2
- 6A:56:08:20:FA:3E:9A:D8:E5:41:17:34:B1:D4:0A:D5
- #0
- SHA1: nil
- #2
- contentType: 1.3.6.1.4.1.311.2.1.4
- 1.3.6.1.4.1.311.2.1.11: msCodeCom
- messageDigest:
69 5c bf 22 c1 12 c5 d8 cc c2 0d 1d de ad d9 30 |i\."...........0| fa 5b d2 83 |.[.. |
- 1.3.6.1.4.1.311.2.1.12:
00 45 00 78 00 70 00 72 00 65 00 73 00 73 00 49 |.E.x.p.r.e.s.s.I| 00 6e 00 76 00 6f 00 69 00 63 00 65 |.n.v.o.i.c.e |
- rsaEncryption:
79 50 75 9a 8e e5 c8 6b b6 22 9d 0b ef 95 e1 d4 |yPu....k."......| fe 3b 7e 6b 86 ee 88 de cd 79 c2 fa 92 5d e3 57 |.;~k.....y...].W| 25 28 eb c3 94 d5 5e 94 0c 9e 71 1d 74 2b ce d1 |%(....^...q.t+..| 1a d4 e6 a6 48 01 d6 36 bf b0 c8 66 c9 ed d0 2f |....H..6...f.../| 53 60 21 3e 70 a1 4a cf 1e fe 8f 78 8f 32 0c 71 |S`!>p.J....x.2.q| 00 e5 c5 fc a7 0b 51 31 29 b1 bc 02 9b d5 89 72 |......Q1)......r| 18 7b 2b 22 7a 46 75 78 2b 7e 16 b5 d2 24 35 13 |.{+"zFux+~...$5.| 4b 7d 67 c8 86 56 b5 91 52 fa 95 a0 50 76 88 70 |K}g..V..R...Pv.p| fa dd 6f 54 f7 94 d5 26 5d b5 f2 c2 8e 50 40 07 |..oT...&]....P@.| 64 d7 52 f0 92 1c db 17 bd 64 65 38 81 20 a7 13 |d.R......de8. ..| 7a 64 f8 8e b6 37 01 51 03 a4 fd 11 78 b4 39 09 |zd...7.Q....x.9.| 30 40 be ba 70 cc db f9 38 3f 5b 66 da e5 67 d3 |0@..p...8?[f..g.| 2b aa 54 21 c4 79 30 4f 0f 95 e3 e6 f0 bf a8 b7 |+.T!.y0O........| e1 aa b5 b0 28 98 3b a9 13 9f 50 15 22 09 c8 f6 |....(.;...P."...| 87 37 02 98 d2 2d b7 ed b3 fd 02 64 0e 47 37 fe |.7...-.....d.G7.| 01 34 7e 31 43 96 14 2e 30 dc 5a 00 b5 fb 02 83 |.4~1C...0.Z.....|
- countersignature
- 1
- unnamed
- #0
- C: US
- O: Symantec Corporation
- CN: Symantec Time Stamping Services CA - G2
- 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
- #0
- SHA1: nil
- #2
- contentType: pkcs7-data
- signingTime: 2013-11-14 00:22:14 UTC
- messageDigest:
d9 c8 da d9 7e ec b7 d3 2a ee bc 9d 61 a0 53 11 |....~...*...a.S.| 5d d9 0c f3 |]... |
- rsaEncryption:
8e 4a 2e 45 e1 92 c4 fc 93 01 1e 0d eb 97 39 6b |.J.E..........9k| cd b3 03 19 7b 54 a7 02 25 42 59 2b 3e 4f e4 7a |....{T..%BY+>O.z| 65 15 d5 c7 3f ef 55 5c af 7e d1 95 3f 57 0b 40 |e...?.U\.~..?W.@| bc 28 de ee 68 b6 da e5 e0 98 87 a2 04 88 90 74 |.(..h..........t| 81 f8 4b 4b 20 aa 0b c6 53 a2 b5 ac 63 0e 5d 69 |..KK ...S...c.]i| 19 11 77 41 52 5e 81 3c fa 54 b7 03 2e 01 ba 54 |..wAR^.<.T.....T| 7b b4 1a a8 7a 06 2c bf 0b 2d 1c da 3a 1c 76 b8 |{...z.,..-..:.v.| f2 df dd 33 7e 6e 86 65 cf 74 15 4f d8 f4 82 cf |...3~n.e.t.O....| 93 34 2e 7e 04 15 8b fd 58 e6 4a 91 eb e0 90 b2 |.4.~....X.J.....| f0 ab d7 ae 07 63 7a f9 db e2 f4 29 b5 0a 39 b4 |.....cz....)..9.| 73 da 60 97 0d 50 82 65 6d 9d df 34 ca 12 e9 b3 |s.`..P.em..4....| ba 8e 9c 35 94 2f 29 d8 f0 dd 3c 89 6e e8 52 92 |...5./)...<.n.R.| 15 0c f3 bb 27 ad 62 82 ba 66 25 d2 82 fa c6 ae |....'.b..f%.....| 3f 28 b4 62 e9 71 cb ed 14 8c e2 93 b9 c9 f9 4b |?(.b.q.........K| 34 a1 3d 8d 89 27 3d a0 a7 fa ab 4c 17 51 3a c5 |4.=..'=....L.Q:.| 75 38 5d 38 6f f6 5c d2 6e e6 58 2e 82 b6 45 99 |u8]8o.\.n.X...E.|
- unnamed
- 1
- unnamed
offset | size | type | comment | |
---|---|---|---|---|
0 | 2621952 | EXE | 11/14/2013 00:22:07 | # |
15c1 | 15 | HTM | # | |
7ec01 | 202 | # | ||
278098 | 8796 | JPG | # | |
27a2f4 | 2869 | JPG | # | |
27ae2c | 21372 | JPG | # | |
280200 | 5672 | PKCS7 | Authenticode Signature | # |
Please donate some bucks to keep this site up and running: | |
Ko-fi | |
---|---|
Yandex.Money | |
Thank you! |
everything is OK