filename | SFrame.exe | |
---|---|---|
size | 4060760 (0x3df658) | |
md5 | fe39a6d801081e4fc93d473780e1e449 | |
type | PE32 executable (GUI) Intel 80386, for MS Windows | |
mimetype | application/x-dosexec | |
clamav | OK | |
virustotal | → scan with virustotal.com | |
histogram |
MZ Header
signature | MZ |
bytes_in_last_block | 0x90 |
blocks_in_file | 3 |
num_relocs | 0 |
header_paragraphs | 4 |
min_extra_paragraphs | 0 |
max_extra_paragraphs | 0xffff |
ss | 0 |
sp | 0xb8 |
checksum | 0 |
ip | 0 |
cs | 0 |
reloc_table_offset | 0x40 |
overlay_number | 2 |
reserved0 | 0 |
oem_id | 0 |
oem_info | 0 |
reserved2 | 0x380e1af4 |
reserved3 | 0x1600ae4d |
reserved4 | 0 |
reserved5 | 0x820705db |
reserved6 | 0xb05bd6 |
lfanew | 0x140 |
Rich Header
lib id | version | times used |
---|---|---|
0 | 0 | 30 |
126 | 50327 | 10 |
125 | 50727 | 71 |
11 | 8168 | 9 |
93 | 3077 | 2 |
96 | 3077 | 1 |
109 | 50727 | 272 |
114 | 50727 | 1 |
4 | 8447 | 14 |
25 | 9210 | 2 |
95 | 3077 | 36 |
95 | 4035 | 19 |
15 | 4035 | 6 |
96 | 4035 | 146 |
93 | 4035 | 37 |
1 | 0 | 549 |
110 | 50727 | 636 |
124 | 50727 | 1 |
120 | 50727 | 1 |
DOS stub
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
PE Header
Packer / Compiler
Sections
Data Directory
TLS
raw start | raw end | index | callbks | zero fill | flags | |
---|---|---|---|---|---|---|
0xd26000 | 0xd2653c | 0xcf119c | 0xa622a0 | 0 | 0 |
id | lang | string |
---|---|---|
103 | 1042 | 2004-07-15 PD Version - Second Build |
109 | 1042 | SFRAME |
module_name | hint | ord | function_name |
---|---|---|---|
kernel32.dll | GetProcAddress | ||
kernel32.dll | GetModuleHandleA | ||
kernel32.dll | LoadLibraryA | ||
d3d9.dll | Direct3DCreate9 | ||
psapi.dll | GetProcessMemoryInfo | ||
ws2_32.dll | 20 | ||
imm32.dll | ImmGetVirtualKey | ||
version.dll | GetFileVersionInfoA | ||
audiere.dll | _AdrGetSampleSize@4 | ||
devil.dll | ilSetInteger | ||
ilu.dll | iluErrorString | ||
libgobject-2.0-0.dll | g_object_ref | ||
libcairo-2.dll | cairo_image_surface_get_data | ||
libpango-1.0-0.dll | pango_font_map_create_context | ||
libpangocairo-1.0-0.dll | pango_cairo_update_context | ||
mss32.dll | _AIL_release_sample_handle@4 | ||
user32.dll | EmptyClipboard | ||
gdi32.dll | GetObjectA | ||
comdlg32.dll | GetOpenFileNameA | ||
advapi32.dll | RegDeleteValueA | ||
shell32.dll | ShellExecuteA | ||
ole32.dll | CoCreateInstance | ||
oleaut32.dll | 9 | ||
winmm.dll | timeGetTime | ||
iphlpapi.dll | GetAdaptersInfo | ||
dbghelp.dll | SymInitialize | ||
wininet.dll | HttpQueryInfoA | ||
oleaut32.dll | VariantChangeTypeEx |
Signers (1)
issuer: /C=US/O=Thawte, Inc./CN=Thawte Code Signing CA - G2
serial: 69CBF2716573D8320C4523E455080837
Certificates (4)
Certificate: Data: Version: 3 (0x2) Serial Number: 38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5 Signature Algorithm: sha1WithRSAEncryption Issuer: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA Validity Not Before: Jun 15 00:00:00 2007 GMT Not After : Jun 14 23:59:59 2012 GMT Subject: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer - G2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (1024 bit) Modulus: 00:c4:b5:f2:52:15:bc:88:86:60:29:16:4a:5b:2f: 4b:91:6b:87:91:f3:35:54:58:35:ea:d1:36:5e:62: 4d:52:51:34:71:c2:7b:66:1d:89:c8:dd:2a:c4:6a: 0a:f6:37:d9:98:74:91:f6:92:ae:b0:b5:76:96:f1: a9:4a:63:45:47:2e:6b:0b:92:4e:4b:2b:8c:ee:58: 4a:8b:d4:07:e4:1a:2c:f8:82:aa:58:d9:cd:42:f3: 2d:c0:75:de:8d:ab:c7:8e:1d:9a:6c:4c:08:95:1e: de:db:ef:67:e1:72:c2:49:c2:9e:60:3c:e1:e2:be: 16:a3:63:78:69:14:7b:ad:2d Exponent: 65537 (0x10001) X509v3 extensions: Authority Information Access: OCSP - URI:http://ocsp.verisign.com X509v3 Basic Constraints: critical CA:FALSE X509v3 CRL Distribution Points: Full Name: URI:http://crl.verisign.com/tss-ca.crl X509v3 Extended Key Usage: critical Time Stamping X509v3 Key Usage: critical Digital Signature, Non Repudiation X509v3 Subject Alternative Name: DirName:/CN=TSA1-2 Signature Algorithm: sha1WithRSAEncryption 50:c5:4b:c8:24:80:df:e4:0d:24:c2:de:1a:b1:a1:02:a1:a6: 82:2d:0c:83:15:81:37:0a:82:0e:2c:b0:5a:17:61:b5:d8:05: fe:88:db:f1:91:91:b3:56:1a:40:a6:eb:92:be:38:39:b0:75: 36:74:3a:98:4f:e4:37:ba:99:89:ca:95:42:1d:b0:b9:c7:a0: 8d:57:e0:fa:d5:64:04:42:35:4e:01:d1:33:a2:17:c8:4d:aa: 27:c7:f2:e1:86:4c:02:38:4d:83:78:c6:fc:53:e0:eb:e0:06: 87:dd:a4:96:9e:5e:0c:98:e2:a5:be:bf:82:85:c3:60:e1:df: ad:28:d8:c7:a5:4b:64:da:c7:1b:5b:bd:ac:39:08:d5:38:22: a1:33:8b:2f:8a:9a:eb:bc:07:21:3f:44:41:09:07:b5:65:1c: 24:bc:48:d3:44:80:eb:a1:cf:c9:02:b4:14:cf:54:c7:16:a3: 80:5c:f9:79:3e:5d:72:7d:88:17:9e:2c:43:a2:ca:53:ce:7d: 3d:f6:2a:3a:b8:4f:94:00:a5:6d:0a:83:5d:f9:5e:53:f4:18: b3:57:0f:70:c3:fb:f5:ad:95:a0:0e:17:de:c4:16:80:60:c9: 0f:2b:6e:86:04:f1:eb:f4:78:27:d1:05:c5:ee:34:5b:5e:b9: 49:32:f2:33
Certificate: Data: Version: 3 (0x2) Serial Number: 47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4 Signature Algorithm: sha1WithRSAEncryption Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA Validity Not Before: Dec 4 00:00:00 2003 GMT Not After : Dec 3 23:59:59 2013 GMT Subject: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ca:b2:a4:cc:cd:20:af:0a:7d:89:ac:87:75: f0:b4:4e:f1:df:c1:0f:bf:67:61:bd:a3:64:1c:da: bb:f9:ca:33:ab:84:30:89:58:7e:8c:db:6b:dd:36: 9e:0f:bf:d1:ec:78:f2:77:a6:7e:6f:3c:bf:93:af: 0d:ba:68:f4:6c:94:ca:bd:52:2d:ab:48:3d:f5:b6: d5:5d:5f:1b:02:9f:fa:2f:6b:1e:a4:f7:a3:9a:a6: 1a:c8:02:e1:7f:4c:52:e3:0e:60:ec:40:1c:7e:b9: 0d:de:3f:c7:b4:df:87:bd:5f:7a:6a:31:2e:03:99: 81:13:a8:47:20:ce:31:73:0d:57:2d:cd:78:34:33: 95:12:99:12:b9:de:68:2f:aa:e6:e3:c2:8a:8c:2a: c3:8b:21:87:66:bd:83:58:57:6f:75:bf:3c:aa:26: 87:5d:ca:10:15:3c:9f:84:ea:54:c1:0a:6e:c4:fe: c5:4a:dd:b9:07:11:97:22:7c:db:3e:27:d1:1e:78: ec:9f:31:c9:f1:e6:22:19:db:c4:b3:47:43:9a:1a: 5f:a0:1e:90:e4:5e:f5:ee:7c:f1:7d:ab:62:01:8f: f5:4d:0b:de:d0:22:56:a8:95:cd:ae:88:76:ae:ee: ba:0d:f3:e4:4d:d9:a0:fb:68:a0:ae:14:3b:b3:87: c1:bb Exponent: 65537 (0x10001) X509v3 extensions: Authority Information Access: OCSP - URI:http://ocsp.verisign.com X509v3 Basic Constraints: critical CA:TRUE, pathlen:0 X509v3 CRL Distribution Points: Full Name: URI:http://crl.verisign.com/ThawteTimestampingCA.crl X509v3 Extended Key Usage: Time Stamping X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Subject Alternative Name: DirName:/CN=TSA2048-1-53 Signature Algorithm: sha1WithRSAEncryption 4a:6b:f9:ea:58:c2:44:1c:31:89:79:99:2b:96:bf:82:ac:01: d6:1c:4c:cd:b0:8a:58:6e:df:08:29:a3:5e:c8:ca:93:13:e7: 04:52:0d:ef:47:27:2f:00:38:b0:e4:c9:93:4e:9a:d4:22:62: 15:f7:3f:37:21:4f:70:31:80:f1:8b:38:87:b3:e8:e8:97:00: fe:cf:55:96:4e:24:d2:a9:27:4e:7a:ae:b7:61:41:f3:2a:ce: e7:c9:d9:5e:dd:bb:2b:85:3e:b5:9d:b5:d9:e1:57:ff:be:b4: c5:7e:f5:cf:0c:9e:f0:97:fe:2b:d3:3b:52:1b:1b:38:27:f7: 3f:4a
Certificate: Data: Version: 3 (0x2) Serial Number: 69:cb:f2:71:65:73:d8:32:0c:45:23:e4:55:08:08:37 Signature Algorithm: sha1WithRSAEncryption Issuer: C=US, O=Thawte, Inc., CN=Thawte Code Signing CA - G2 Validity Not Before: Aug 25 00:00:00 2010 GMT Not After : Aug 24 23:59:59 2012 GMT Subject: C=KR, ST=Seoul, L=Gangnam-gu, O=Gala Lab, OU=Tech Support Headquarters, CN=Gala Lab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a9:7d:33:34:b5:5d:12:28:ea:1e:75:bd:ca: 79:c1:2c:68:ca:25:65:ed:46:0b:65:0c:2a:e9:bd: 00:0f:b6:9a:17:03:bc:cd:2c:33:e9:69:1f:f7:48: dc:0a:dc:2d:fb:1b:0b:94:2f:c0:ca:cf:64:53:1c: 21:49:f1:e9:d5:23:fa:16:f2:84:b5:c9:1b:2b:cd: 06:22:29:2e:72:01:52:59:ec:d6:cf:1d:cc:99:8d: 8a:d7:65:ac:3b:48:93:45:e4:2d:bb:87:52:e8:b0: 2f:56:12:79:94:dc:42:63:7e:80:d1:8a:85:b2:df: 18:37:95:bd:59:45:66:50:b7:9d:6c:02:8f:4b:0c: 45:87:47:5c:e2:d5:51:7f:b5:cc:7c:65:60:31:d1: 5d:ce:b1:a5:49:9f:78:77:57:69:3e:e2:a5:cc:9f: 0c:ea:65:93:bb:62:ee:b7:a8:33:ab:ce:5a:8a:75: c9:3e:8f:4f:44:ed:3b:e6:34:12:a3:ec:88:61:74: e8:b8:f9:f0:ff:39:5d:46:a4:b9:85:cf:62:c9:35: f2:e1:5d:26:9f:0f:a9:7a:b4:6f:20:b3:4f:54:6a: 1d:12:51:a4:03:9e:37:bc:a4:01:9f:b3:9a:07:e6: d7:e1:4e:b1:64:7b:b2:28:58:f5:2d:f1:b1:ba:a1: d4:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 CRL Distribution Points: Full Name: URI:http://cs-g2-crl.thawte.com/ThawteCSG2.crl X509v3 Extended Key Usage: Code Signing, Microsoft Commercial Code Signing 2.5.29.4: 0.0.0.. +.....7....... Authority Information Access: OCSP - URI:http://ocsp.thawte.com Netscape Cert Type: Object Signing Signature Algorithm: sha1WithRSAEncryption 5e:c3:69:91:1b:a3:4c:71:b0:ce:3f:21:3b:53:dc:83:47:82: b7:3b:7c:39:c4:b3:cb:77:d0:34:33:28:64:e5:08:aa:ab:5f: c6:bb:66:5f:84:13:03:f3:a0:e6:56:82:b3:96:84:6a:dd:43: 65:3f:09:e6:c4:dd:52:d1:09:bc:b9:3c:22:e4:fd:52:9c:ac: da:c3:e0:8a:75:31:48:47:cd:07:a3:35:c8:a7:20:26:09:34: 48:84:c1:16:76:78:14:fe:9e:65:79:9e:5b:2d:74:5c:4a:c8: 07:e7:19:89:03:ac:6d:c2:00:59:66:ab:e2:f2:77:5a:8d:b8: c9:5c:d5:39:14:39:94:7d:f3:b7:d1:35:f8:9c:13:b0:61:fd: df:89:18:ec:c0:12:e5:85:c5:c1:aa:4f:80:fd:80:3a:8f:10: 8b:9f:83:c0:72:d7:ca:73:c1:8b:f7:4c:45:5f:ed:74:e2:c1: 4e:cd:49:c7:2e:06:be:a0:42:24:b2:1a:90:ee:d2:f1:98:ee: 9c:a3:ac:bf:cf:3c:c5:ab:29:33:b4:29:a9:c7:50:79:bb:57: 9f:c5:cc:e1:01:9c:8e:bc:26:2f:af:23:bf:e1:46:91:86:48: 0d:ac:bd:e2:8f:33:9a:71:8e:c9:d8:7a:4c:00:cd:ab:bb:ba: 72:3b:94:cc
Certificate: Data: Version: 3 (0x2) Serial Number: 47:97:4d:78:73:a5:bc:ab:0d:2f:b3:70:19:2f:ce:5e Signature Algorithm: sha1WithRSAEncryption Issuer: C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2006 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA Validity Not Before: Feb 8 00:00:00 2010 GMT Not After : Feb 7 23:59:59 2020 GMT Subject: C=US, O=Thawte, Inc., CN=Thawte Code Signing CA - G2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8b:cf:75:5b:9f:25:da:7e:39:b0:93:db:38: d3:a9:23:d0:82:fa:e9:24:7e:5c:0b:8e:83:f8:e6: 7a:59:e6:a3:c5:98:a7:99:d2:44:ff:00:a6:a5:39: 04:8a:da:29:88:ea:db:a2:f3:1c:99:15:26:c2:b1: f4:fc:e1:0c:47:a9:09:11:06:0a:20:92:b9:c7:a0: 04:8c:5c:94:19:ab:5b:25:2c:1d:62:7e:70:0d:ce: 61:6c:dd:2b:82:c9:ce:5d:48:5f:f7:c2:be:bc:41: 23:1e:4f:29:5d:d7:4f:bc:f4:c5:2a:fc:63:e6:7c: 26:4e:99:a7:79:41:9e:10:4a:7a:79:c9:c6:86:f7: 86:95:d2:26:ce:3c:18:2a:d6:7c:ce:af:cd:ad:bb: f7:82:2c:70:26:37:45:e5:0f:47:22:c6:01:28:bd: 2e:83:5c:6a:a4:47:c1:e7:d0:d8:6b:81:46:3f:21: 17:f5:07:c5:43:5a:a6:67:2c:b8:7b:60:11:b5:83: ee:f5:74:0a:72:71:44:3d:58:fe:e8:1a:ab:38:c3: 59:db:7f:6e:38:7d:76:c7:72:69:98:36:96:57:d3: 66:1c:d2:54:91:04:2e:54:19:b0:dc:3d:b5:22:5e: 86:d5:2a:7e:20:df:5d:e6:7a:b1:65:fe:c5:02:4e: 31:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE, pathlen:0 X509v3 CRL Distribution Points: Full Name: URI:http://crl.thawte.com/ThawtePCA.crl X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: OCSP - URI:http://ocsp.thawte.com X509v3 Extended Key Usage: TLS Web Client Authentication, Code Signing X509v3 Subject Alternative Name: DirName:/CN=VeriSignMPKI-2-10 X509v3 Subject Key Identifier: D4:0D:65:3F:7A:BD:34:C6:FE:47:E7:4C:0D:C0:BD:F2:DE:15:AB:71 X509v3 Authority Key Identifier: keyid:7B:5B:45:CF:AF:CE:CB:7A:FD:31:92:1A:6A:B6:F3:46:EB:57:48:50 Signature Algorithm: sha1WithRSAEncryption 56:fe:53:5c:e1:c7:9e:bc:a7:ed:7e:53:6d:6a:14:4b:51:8c: 40:5e:80:5f:aa:a4:e8:2f:ef:38:c8:04:c9:ca:3e:cf:df:3a: 58:4e:b0:d4:b6:63:c5:29:57:fa:02:05:9a:45:4d:68:db:2a: 1b:d4:34:3d:9f:00:c3:5a:cb:95:49:a5:6e:e1:b0:c5:fc:41: 4d:41:4a:6f:d3:77:c8:d7:38:8d:e4:19:de:18:f3:1f:15:65: 83:6d:45:0c:53:f9:0a:9a:2e:a5:5d:bf:6f:32:81:18:92:19: 6a:55:00:ad:63:1c:52:06:7e:55:d9:29:68:ae:4a:7c:18:9a: 79:88:6b:23:23:d8:27:38:2a:29:87:76:ca:fb:c7:b6:62:23: 1f:ed:7a:56:4c:dd:9c:32:5b:f5:3d:0c:46:18:95:3b:2a:23: 68:83:64:41:d9:00:6d:0f:19:24:15:68:72:bd:c5:71:67:6e: ac:4c:db:90:eb:51:a5:1a:62:07:d0:be:6a:00:47:3c:72:2f: ec:4f:61:3e:73:85:ce:5a:0a:b7:ba:c0:1c:13:75:e3:22:39: 28:dd:6d:1d:09:46:9d:4f:ba:e8:40:81:91:c6:a4:ce:94:72: 1b:01:cf:2a:6e:15:67:95:89:ae:7d:b7:b7:cd:f9:0a:3d:75: b6:6b:3c:25
pkcs7-signedData
- 1
- SHA1: nil
- 1.3.6.1.4.1.311.2.1.4
- #0
- 1.3.6.1.4.1.311.2.1.15
- :
00 3c 00 3c 00 3c 00 4f 00 62 00 73 00 6f 00 6c |.<.<.<.O.b.s.o.l| 00 65 00 74 00 65 00 3e 00 3e 00 3e |.e.t.e.>.>.> |
- :
- SHA1
fa 89 cc e8 85 7e 6b ce 6b 8f 39 93 28 37 5d b2 |.....~k.k.9.(7].| f3 1a 1c 23 |...# |
- 1.3.6.1.4.1.311.2.1.15
- #0
- Certificates
- Certificate #0
- 2
- 38:25:D7:FA:F8:61:AF:9E:F4:90:E7:26:B5:D6:5A:D5
- RSA-SHA1: nil
- Issuer
- C: US
- O: VeriSign, Inc.
- CN: VeriSign Time Stamping Services CA
- 2007-06-15 00:00:00 UTC: 2012-06-14 23:59:59 UTC
- Subject
- C: US
- O: VeriSign, Inc.
- CN: VeriSign Time Stamping Services Signer - G2
- #5
- rsaEncryption: nil
- C4:B5:F2:52:15:BC:88:86:60:29:16:4A:5B:2F:4B:91:
6B:87:91:F3:35:54:58:35:EA:D1:36:5E:62:4D:52:51:
34:71:C2:7B:66:1D:89:C8:DD:2A:C4:6A:0A:F6:37:D9:
98:74:91:F6:92:AE:B0:B5:76:96:F1:A9:4A:63:45:47:
2E:6B:0B:92:4E:4B:2B:8C:EE:58:4A:8B:D4:07:E4:1A:
2C:F8:82:AA:58:D9:CD:42:F3:2D:C0:75:DE:8D:AB:C7:
8E:1D:9A:6C:4C:08:95:1E:DE:DB:EF:67:E1:72:C2:49:
C2:9E:60:3C:E1:E2:BE:16:A3:63:78:69:14:7B:AD:2D: 0x010001
- X509v3 extensions
- authorityInfoAccess
- OCSP: http://ocsp.verisign.com
- basicConstraints
- true
- nil
- crlDistributionPoints: http://crl.verisign.com/tss-ca.crl
- extendedKeyUsage: true, timeStamping
- keyUsage: true, 0xc0
- subjectAltName
- CN: TSA1-2
- authorityInfoAccess
- RSA-SHA1:
50 c5 4b c8 24 80 df e4 0d 24 c2 de 1a b1 a1 02 |P.K.$....$......| a1 a6 82 2d 0c 83 15 81 37 0a 82 0e 2c b0 5a 17 |...-....7...,.Z.| 61 b5 d8 05 fe 88 db f1 91 91 b3 56 1a 40 a6 eb |a..........V.@..| 92 be 38 39 b0 75 36 74 3a 98 4f e4 37 ba 99 89 |..89.u6t:.O.7...| ca 95 42 1d b0 b9 c7 a0 8d 57 e0 fa d5 64 04 42 |..B......W...d.B| 35 4e 01 d1 33 a2 17 c8 4d aa 27 c7 f2 e1 86 4c |5N..3...M.'....L| 02 38 4d 83 78 c6 fc 53 e0 eb e0 06 87 dd a4 96 |.8M.x..S........| 9e 5e 0c 98 e2 a5 be bf 82 85 c3 60 e1 df ad 28 |.^.........`...(| d8 c7 a5 4b 64 da c7 1b 5b bd ac 39 08 d5 38 22 |...Kd...[..9..8"| a1 33 8b 2f 8a 9a eb bc 07 21 3f 44 41 09 07 b5 |.3./.....!?DA...| 65 1c 24 bc 48 d3 44 80 eb a1 cf c9 02 b4 14 cf |e.$.H.D.........| 54 c7 16 a3 80 5c f9 79 3e 5d 72 7d 88 17 9e 2c |T....\.y>]r}...,| 43 a2 ca 53 ce 7d 3d f6 2a 3a b8 4f 94 00 a5 6d |C..S.}=.*:.O...m| 0a 83 5d f9 5e 53 f4 18 b3 57 0f 70 c3 fb f5 ad |..].^S...W.p....| 95 a0 0e 17 de c4 16 80 60 c9 0f 2b 6e 86 04 f1 |........`..+n...| eb f4 78 27 d1 05 c5 ee 34 5b 5e b9 49 32 f2 33 |..x'....4[^.I2.3|
- 2
- Certificate #1
- 2
- 47:BF:19:95:DF:8D:52:46:43:F7:DB:6D:48:0D:31:A4
- RSA-SHA1: nil
- Issuer
- C: ZA
- ST: Western Cape
- L: Durbanville
- O: Thawte
- OU: Thawte Certification
- CN: Thawte Timestamping CA
- 2003-12-04 00:00:00 UTC: 2013-12-03 23:59:59 UTC
- Subject
- C: US
- O: VeriSign, Inc.
- CN: VeriSign Time Stamping Services CA
- #5
- rsaEncryption: nil
- A9:CA:B2:A4:CC:CD:20:AF:0A:7D:89:AC:87:75:F0:B4:
4E:F1:DF:C1:0F:BF:67:61:BD:A3:64:1C:DA:BB:F9:CA:
33:AB:84:30:89:58:7E:8C:DB:6B:DD:36:9E:0F:BF:D1:
EC:78:F2:77:A6:7E:6F:3C:BF:93:AF:0D:BA:68:F4:6C:
94:CA:BD:52:2D:AB:48:3D:F5:B6:D5:5D:5F:1B:02:9F:
FA:2F:6B:1E:A4:F7:A3:9A:A6:1A:C8:02:E1:7F:4C:52:
E3:0E:60:EC:40:1C:7E:B9:0D:DE:3F:C7:B4:DF:87:BD:
5F:7A:6A:31:2E:03:99:81:13:A8:47:20:CE:31:73:0D:
57:2D:CD:78:34:33:95:12:99:12:B9:DE:68:2F:AA:E6:
E3:C2:8A:8C:2A:C3:8B:21:87:66:BD:83:58:57:6F:75:
BF:3C:AA:26:87:5D:CA:10:15:3C:9F:84:EA:54:C1:0A:
6E:C4:FE:C5:4A:DD:B9:07:11:97:22:7C:DB:3E:27:D1:
1E:78:EC:9F:31:C9:F1:E6:22:19:DB:C4:B3:47:43:9A:
1A:5F:A0:1E:90:E4:5E:F5:EE:7C:F1:7D:AB:62:01:8F:
F5:4D:0B:DE:D0:22:56:A8:95:CD:AE:88:76:AE:EE:BA:
0D:F3:E4:4D:D9:A0:FB:68:A0:AE:14:3B:B3:87:C1:BB: 0x010001
- X509v3 extensions
- authorityInfoAccess
- OCSP: http://ocsp.verisign.com
- basicConstraints
- true
- true: 0
- crlDistributionPoints: http://crl.verisign.com/ThawteTimestampingCA.crl
- extendedKeyUsage: timeStamping
- keyUsage: true, 6
- subjectAltName
- CN: TSA2048-1-53
- authorityInfoAccess
- RSA-SHA1:
4a 6b f9 ea 58 c2 44 1c 31 89 79 99 2b 96 bf 82 |Jk..X.D.1.y.+...| ac 01 d6 1c 4c cd b0 8a 58 6e df 08 29 a3 5e c8 |....L...Xn..).^.| ca 93 13 e7 04 52 0d ef 47 27 2f 00 38 b0 e4 c9 |.....R..G'/.8...| 93 4e 9a d4 22 62 15 f7 3f 37 21 4f 70 31 80 f1 |.N.."b..?7!Op1..| 8b 38 87 b3 e8 e8 97 00 fe cf 55 96 4e 24 d2 a9 |.8........U.N$..| 27 4e 7a ae b7 61 41 f3 2a ce e7 c9 d9 5e dd bb |'Nz..aA.*....^..| 2b 85 3e b5 9d b5 d9 e1 57 ff be b4 c5 7e f5 cf |+.>.....W....~..| 0c 9e f0 97 fe 2b d3 3b 52 1b 1b 38 27 f7 3f 4a |.....+.;R..8'.?J|
- 2
- Certificate #2
- 2
- 69:CB:F2:71:65:73:D8:32:0C:45:23:E4:55:08:08:37
- RSA-SHA1: nil
- Issuer
- C: US
- O: Thawte, Inc.
- CN: Thawte Code Signing CA - G2
- 2010-08-25 00:00:00 UTC: 2012-08-24 23:59:59 UTC
- Subject
- C: KR
- ST: Seoul
- L: Gangnam-gu
- O: Gala Lab
- OU: Tech Support Headquarters
- CN: Gala Lab
- #5
- rsaEncryption: nil
- B1:A9:7D:33:34:B5:5D:12:28:EA:1E:75:BD:CA:79:C1:
2C:68:CA:25:65:ED:46:0B:65:0C:2A:E9:BD:00:0F:B6:
9A:17:03:BC:CD:2C:33:E9:69:1F:F7:48:DC:0A:DC:2D:
FB:1B:0B:94:2F:C0:CA:CF:64:53:1C:21:49:F1:E9:D5:
23:FA:16:F2:84:B5:C9:1B:2B:CD:06:22:29:2E:72:01:
52:59:EC:D6:CF:1D:CC:99:8D:8A:D7:65:AC:3B:48:93:
45:E4:2D:BB:87:52:E8:B0:2F:56:12:79:94:DC:42:63:
7E:80:D1:8A:85:B2:DF:18:37:95:BD:59:45:66:50:B7:
9D:6C:02:8F:4B:0C:45:87:47:5C:E2:D5:51:7F:B5:CC:
7C:65:60:31:D1:5D:CE:B1:A5:49:9F:78:77:57:69:3E:
E2:A5:CC:9F:0C:EA:65:93:BB:62:EE:B7:A8:33:AB:CE:
5A:8A:75:C9:3E:8F:4F:44:ED:3B:E6:34:12:A3:EC:88:
61:74:E8:B8:F9:F0:FF:39:5D:46:A4:B9:85:CF:62:C9:
35:F2:E1:5D:26:9F:0F:A9:7A:B4:6F:20:B3:4F:54:6A:
1D:12:51:A4:03:9E:37:BC:A4:01:9F:B3:9A:07:E6:D7:
E1:4E:B1:64:7B:B2:28:58:F5:2D:F1:B1:BA:A1:D4:7D: 0x010001
- X509v3 extensions
- basicConstraints
- true
- nil
- crlDistributionPoints: http://cs-g2-crl.thawte.com/ThawteCSG2.crl
- extendedKeyUsage
- codeSigning: msCodeCom
- 2.5.29.4
- msCodeCom: 0x80
- authorityInfoAccess
- OCSP: http://ocsp.thawte.com
- nsCertType: 0x10
- basicConstraints
- RSA-SHA1:
5e c3 69 91 1b a3 4c 71 b0 ce 3f 21 3b 53 dc 83 |^.i...Lq..?!;S..| 47 82 b7 3b 7c 39 c4 b3 cb 77 d0 34 33 28 64 e5 |G..;|9...w.43(d.| 08 aa ab 5f c6 bb 66 5f 84 13 03 f3 a0 e6 56 82 |..._..f_......V.| b3 96 84 6a dd 43 65 3f 09 e6 c4 dd 52 d1 09 bc |...j.Ce?....R...| b9 3c 22 e4 fd 52 9c ac da c3 e0 8a 75 31 48 47 |.<"..R......u1HG| cd 07 a3 35 c8 a7 20 26 09 34 48 84 c1 16 76 78 |...5.. &.4H...vx| 14 fe 9e 65 79 9e 5b 2d 74 5c 4a c8 07 e7 19 89 |...ey.[-t\J.....| 03 ac 6d c2 00 59 66 ab e2 f2 77 5a 8d b8 c9 5c |..m..Yf...wZ...\| d5 39 14 39 94 7d f3 b7 d1 35 f8 9c 13 b0 61 fd |.9.9.}...5....a.| df 89 18 ec c0 12 e5 85 c5 c1 aa 4f 80 fd 80 3a |...........O...:| 8f 10 8b 9f 83 c0 72 d7 ca 73 c1 8b f7 4c 45 5f |......r..s...LE_| ed 74 e2 c1 4e cd 49 c7 2e 06 be a0 42 24 b2 1a |.t..N.I.....B$..| 90 ee d2 f1 98 ee 9c a3 ac bf cf 3c c5 ab 29 33 |...........<..)3| b4 29 a9 c7 50 79 bb 57 9f c5 cc e1 01 9c 8e bc |.)..Py.W........| 26 2f af 23 bf e1 46 91 86 48 0d ac bd e2 8f 33 |&/.#..F..H.....3| 9a 71 8e c9 d8 7a 4c 00 cd ab bb ba 72 3b 94 cc |.q...zL.....r;..|
- 2
- Certificate #3
- 2
- 47:97:4D:78:73:A5:BC:AB:0D:2F:B3:70:19:2F:CE:5E
- RSA-SHA1: nil
- Issuer
- C: US
- O: thawte, Inc.
- OU: Certification Services Division
- OU: (c) 2006 thawte, Inc. - For authorized use only
- CN: thawte Primary Root CA
- 2010-02-08 00:00:00 UTC: 2020-02-07 23:59:59 UTC
- Subject
- C: US
- O: Thawte, Inc.
- CN: Thawte Code Signing CA - G2
- #5
- rsaEncryption: nil
- B7:8B:CF:75:5B:9F:25:DA:7E:39:B0:93:DB:38:D3:A9:
23:D0:82:FA:E9:24:7E:5C:0B:8E:83:F8:E6:7A:59:E6:
A3:C5:98:A7:99:D2:44:FF:00:A6:A5:39:04:8A:DA:29:
88:EA:DB:A2:F3:1C:99:15:26:C2:B1:F4:FC:E1:0C:47:
A9:09:11:06:0A:20:92:B9:C7:A0:04:8C:5C:94:19:AB:
5B:25:2C:1D:62:7E:70:0D:CE:61:6C:DD:2B:82:C9:CE:
5D:48:5F:F7:C2:BE:BC:41:23:1E:4F:29:5D:D7:4F:BC:
F4:C5:2A:FC:63:E6:7C:26:4E:99:A7:79:41:9E:10:4A:
7A:79:C9:C6:86:F7:86:95:D2:26:CE:3C:18:2A:D6:7C:
CE:AF:CD:AD:BB:F7:82:2C:70:26:37:45:E5:0F:47:22:
C6:01:28:BD:2E:83:5C:6A:A4:47:C1:E7:D0:D8:6B:81:
46:3F:21:17:F5:07:C5:43:5A:A6:67:2C:B8:7B:60:11:
B5:83:EE:F5:74:0A:72:71:44:3D:58:FE:E8:1A:AB:38:
C3:59:DB:7F:6E:38:7D:76:C7:72:69:98:36:96:57:D3:
66:1C:D2:54:91:04:2E:54:19:B0:DC:3D:B5:22:5E:86:
D5:2A:7E:20:DF:5D:E6:7A:B1:65:FE:C5:02:4E:31:2D: 0x010001
- X509v3 extensions
- basicConstraints
- true
- true: 0
- crlDistributionPoints: http://crl.thawte.com/ThawtePCA.crl
- keyUsage: true, 6
- authorityInfoAccess
- OCSP: http://ocsp.thawte.com
- extendedKeyUsage
- clientAuth: codeSigning
- subjectAltName
- CN: VeriSignMPKI-2-10
- subjectKeyIdentifier:
d4 0d 65 3f 7a bd 34 c6 fe 47 e7 4c 0d c0 bd f2 |..e?z.4..G.L....| de 15 ab 71 |...q |
- authorityKeyIdentifier:
7b 5b 45 cf af ce cb 7a fd 31 92 1a 6a b6 f3 46 |{[E....z.1..j..F| eb 57 48 50 |.WHP |
- basicConstraints
- RSA-SHA1:
56 fe 53 5c e1 c7 9e bc a7 ed 7e 53 6d 6a 14 4b |V.S\......~Smj.K| 51 8c 40 5e 80 5f aa a4 e8 2f ef 38 c8 04 c9 ca |Q.@^._.../.8....| 3e cf df 3a 58 4e b0 d4 b6 63 c5 29 57 fa 02 05 |>..:XN...c.)W...| 9a 45 4d 68 db 2a 1b d4 34 3d 9f 00 c3 5a cb 95 |.EMh.*..4=...Z..| 49 a5 6e e1 b0 c5 fc 41 4d 41 4a 6f d3 77 c8 d7 |I.n....AMAJo.w..| 38 8d e4 19 de 18 f3 1f 15 65 83 6d 45 0c 53 f9 |8........e.mE.S.| 0a 9a 2e a5 5d bf 6f 32 81 18 92 19 6a 55 00 ad |....].o2....jU..| 63 1c 52 06 7e 55 d9 29 68 ae 4a 7c 18 9a 79 88 |c.R.~U.)h.J|..y.| 6b 23 23 d8 27 38 2a 29 87 76 ca fb c7 b6 62 23 |k##.'8*).v....b#| 1f ed 7a 56 4c dd 9c 32 5b f5 3d 0c 46 18 95 3b |..zVL..2[.=.F..;| 2a 23 68 83 64 41 d9 00 6d 0f 19 24 15 68 72 bd |*#h.dA..m..$.hr.| c5 71 67 6e ac 4c db 90 eb 51 a5 1a 62 07 d0 be |.qgn.L...Q..b...| 6a 00 47 3c 72 2f ec 4f 61 3e 73 85 ce 5a 0a b7 |j.G
s..Z..| ba c0 1c 13 75 e3 22 39 28 dd 6d 1d 09 46 9d 4f |....u."9(.m..F.O| ba e8 40 81 91 c6 a4 ce 94 72 1b 01 cf 2a 6e 15 |..@......r...*n.| 67 95 89 ae 7d b7 b7 cd f9 0a 3d 75 b6 6b 3c 25 |g...}.....=u.k<%|
- 2
- Certificate #0
- 1
- unnamed
- #0
- C: US
- O: Thawte, Inc.
- CN: Thawte Code Signing CA - G2
- 69:CB:F2:71:65:73:D8:32:0C:45:23:E4:55:08:08:37
- #0
- SHA1: nil
- #2
- contentType: 1.3.6.1.4.1.311.2.1.4
- 1.3.6.1.4.1.311.2.1.11: msCodeCom
- messageDigest:
49 73 1d b7 37 71 e9 d4 2b f4 8c 98 85 cb 9a 54 |Is..7q..+......T| ab 82 12 db |.... |
- 1.3.6.1.4.1.311.2.1.12
00 52 00 61 00 70 00 70 00 65 00 6c 00 7a |.R.a.p.p.e.l.z |
: http://www.galalab.kr
- rsaEncryption:
55 3b 24 89 51 11 f8 16 09 0e 3f ef 87 ec 47 4f |U;$.Q.....?...GO| b9 79 bb a3 1e c6 15 b3 9a ce 28 f2 40 4b a4 a8 |.y........(.@K..| 79 ab cf d5 fe 13 bd 25 56 2f 2a a9 8a 20 67 db |y......%V/*.. g.| 0e 17 c5 e8 d5 9e 76 bf e9 2d b3 23 3c 6c f7 5f |......v..-.#
....O._..([(i..| fd 02 c1 cc 95 2f ad e4 fb 7c 91 2f 7d 2f f5 92 |...../...|./}/..| 66 86 57 f6 9c 17 ec 00 90 45 70 08 5c 69 5d 13 |f.W......Ep.\i].| fb 80 ef 5f 79 44 52 29 bb 8e 9d 55 5e f1 b1 6c |..._yDR)...U^..l| 10 c9 4a 50 81 c3 1d a4 6e 58 e5 e6 9a 2b dd 94 |..JP....nX...+..| 1c 6d b1 6a af 3f 56 d6 a5 fe 47 4a a0 31 e4 2a |.m.j.?V...GJ.1.*| 9f 55 e8 d8 d0 67 64 c8 b9 7f 0f de f5 f0 02 c7 |.U...gd.........| ea 8d c8 73 26 45 b7 c8 11 f4 f0 fc 4c e5 9a 8c |...s&E......L...| - countersignature
- 1
- unnamed
- #0
- C: US
- O: VeriSign, Inc.
- CN: VeriSign Time Stamping Services CA
- 38:25:D7:FA:F8:61:AF:9E:F4:90:E7:26:B5:D6:5A:D5
- #0
- SHA1: nil
- #2
- contentType: pkcs7-data
- signingTime: 2012-04-17 08:31:05 UTC
- messageDigest:
fb 1c 0b 64 2b 44 62 93 9e ab 1b c1 b9 14 e4 a1 |...d+Db.........| b3 a6 8f 44 |...D |
- rsaEncryption:
19 14 77 d7 0b 2d 20 c4 17 f4 73 50 a6 4a 25 4b |..w..- ...sP.J%K| bd e3 a8 27 ba 1b 4d 10 5b 07 f3 ee d3 15 03 82 |...'..M.[.......| f5 bc 2e 5a 2c b4 a1 e9 12 4c ef 83 2b 03 9f 34 |...Z,....L..+..4| 54 d3 ed 00 f3 f6 e8 99 bb bb 86 0f 09 60 44 1f |T............`D.| 84 3d 8b 6e bc 5a 0b 3e 95 b1 92 43 3a 78 4f 7f |.=.n.Z.>...C:xO.| 77 ed 01 7f 4f ae bc fc 47 58 02 fc 8d cd 11 ae |w...O...GX......| 5a 5d 50 4a 6f ba 80 85 29 60 78 8a 1d ba 93 3d |Z]PJo...)`x....=| 9d 62 08 84 ab ab 51 f1 b4 c6 ae f3 eb 2a 31 72 |.b....Q......*1r|
- unnamed
- 1
- unnamed
offset | size | type | comment | |
---|---|---|---|---|
0 | 4055552 | EXE | 04/17/2012 02:38:37 | # |
15c1 | 15 | HTM | # | |
3de200 | 5208 | PKCS7 | Authenticode Signature | # |
Please donate some bucks to keep this site up and running: | |
Ko-fi | |
---|---|
Yandex.Money | |
Thank you! |
[?] can't find file_offset of VA 0x8f119c
[?] can't find file_offset of VA 0x0