filename | KerishDoctor.exe | |
---|---|---|
size | 3856032 (0x3ad6a0) | |
md5 | 19771024cd4b52d2bb4c257613fd4c62 | |
type | PE32 executable (GUI) Intel 80386, for MS Windows | |
mimetype | application/x-dosexec | |
clamav | OK | |
virustotal | → scan with virustotal.com | |
histogram |
MZ Header
signature | MZ |
bytes_in_last_block | 0x90 |
blocks_in_file | 3 |
num_relocs | 0 |
header_paragraphs | 4 |
min_extra_paragraphs | 0 |
max_extra_paragraphs | 0xffff |
ss | 0 |
sp | 0xb8 |
checksum | 0 |
ip | 0 |
cs | 0 |
reloc_table_offset | 0x40 |
overlay_number | 0 |
reserved0 | 0 |
oem_id | 0 |
oem_info | 0 |
reserved2 | 0 |
reserved3 | 0 |
reserved4 | 0 |
reserved5 | 0 |
reserved6 | 0 |
lfanew | 0xb8 |
DOS stub
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
PE Header
Packer / Compiler
Enigma Protector 1.1X-1.3X (Sukhov Vladimir & Serge N. Markin) |
Sections
Data Directory
module_name | hint | ord | function_name |
---|---|---|---|
kernel32.dll | GetModuleHandleA | ||
kernel32.dll | GetProcAddress | ||
kernel32.dll | ExitProcess | ||
kernel32.dll | LoadLibraryA | ||
user32.dll | MessageBoxA | ||
advapi32.dll | RegCloseKey | ||
oleaut32.dll | SysFreeString | ||
gdi32.dll | CreateFontA | ||
shell32.dll | ShellExecuteA | ||
version.dll | GetFileVersionInfoA | ||
MSVBVM60.DLL | EVENT_SINK_GetIDsOfNames |
StringTable 040904B0
Comments | Kerish Doctor |
CompanyName | Kerish Products |
FileDescription | Kerish Doctor |
LegalCopyright | Kerish Products 2005-2016. All rights reserved. |
LegalTrademarks | Kerish Products 2005-2016. All rights reserved. |
ProductName | Kerish Doctor |
FileVersion | 4.60 |
ProductVersion | 4.60 |
InternalName | KerishDoctor |
OriginalFilename | KerishDoctor.exe |
VS_FIXEDFILEINFO
FileVersion | 4.60.0.0 |
ProductVersion | 4.60.0.0 |
StrucVersion | 0x10000 |
FileFlagsMask | 0 |
FileFlags | 0 |
FileOS | 4 |
FileType | 1 |
FileSubtype | 0 |
Signers (1)
issuer: /C=US/O=thawte, Inc./CN=thawte SHA256 Code Signing CA
serial: 1D0F76AAF04C714C925B79F338122EE7
Certificates (4)
Certificate: Data: Version: 3 (0x2) Serial Number: 7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b Signature Algorithm: sha1WithRSAEncryption Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA Validity Not Before: Dec 21 00:00:00 2012 GMT Not After : Dec 30 23:59:59 2020 GMT Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ac:b3:49:54:4b:97:1c:12:0a:d8:25:79:91: 22:57:2a:6f:dc:b8:26:c4:43:73:6b:c2:bf:2e:50: 5a:fb:14:c2:76:8e:43:01:25:43:b4:a1:e2:45:f4: e8:b7:7b:c3:74:cc:22:d7:b4:94:00:02:f7:4d:ed: bf:b4:b7:44:24:6b:cd:5f:45:3b:d1:44:ce:43:12: 73:17:82:8b:69:b4:2b:cb:99:1e:ac:72:1b:26:4d: 71:1f:b1:31:dd:fb:51:61:02:53:a6:aa:f5:49:2c: 05:78:45:a5:2f:89:ce:e7:99:e7:fe:8c:e2:57:3f: 3d:c6:92:dc:4a:f8:7b:33:e4:79:0a:fb:f0:75:88: 41:9c:ff:c5:03:51:99:aa:d7:6c:9f:93:69:87:65: 29:83:85:c2:60:14:c4:c8:c9:3b:14:da:c0:81:f0: 1f:0d:74:de:92:22:ab:ca:f7:fb:74:7c:27:e6:f7: 4a:1b:7f:a7:c3:9e:2d:ae:8a:ea:a6:e6:aa:27:16: 7d:61:f7:98:71:11:bc:e2:50:a1:4b:e5:5d:fa:e5: 0e:a7:2c:9f:aa:65:20:d3:d8:96:e8:c8:7c:a5:4e: 48:44:ff:19:e2:44:07:92:0b:d7:68:84:80:5d:6a: 78:64:45:cd:60:46:7e:54:c1:13:7c:c5:79:f1:c9: c1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD Authority Information Access: OCSP - URI:http://ocsp.thawte.com X509v3 Basic Constraints: critical CA:TRUE, pathlen:0 X509v3 CRL Distribution Points: Full Name: URI:http://crl.thawte.com/ThawteTimestampingCA.crl X509v3 Extended Key Usage: Time Stamping X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Subject Alternative Name: DirName:/CN=TimeStamp-2048-1 Signature Algorithm: sha1WithRSAEncryption 03:09:9b:8f:79:ef:7f:59:30:aa:ef:68:b5:fa:e3:09:1d:bb: 4f:82:06:5d:37:5f:a6:52:9f:16:8d:ea:1c:92:09:44:6e:f5: 6d:eb:58:7c:30:e8:f9:69:8d:23:73:0b:12:6f:47:a9:ae:39: 11:f8:2a:b1:9b:b0:1a:c3:8e:eb:59:96:00:ad:ce:0c:4d:b2: d0:31:a6:08:5c:2a:7a:fc:e2:7a:1d:57:4c:a8:65:18:e9:79: 40:62:25:96:6e:c7:c7:37:6a:83:21:08:8e:41:ea:dd:d9:57: 3f:1d:77:49:87:2a:16:06:5e:a6:38:6a:22:12:a3:51:19:83: 7e:b6
Certificate: Data: Version: 3 (0x2) Serial Number: 71:a0:b7:36:95:dd:b1:af:c2:3b:2b:9a:18:ee:54:cb Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2006 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA Validity Not Before: Dec 10 00:00:00 2013 GMT Not After : Dec 9 23:59:59 2023 GMT Subject: C=US, O=thawte, Inc., CN=thawte SHA256 Code Signing CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:55:02:4c:17:05:e9:d0:66:c3:fc:28:ad:d3: c0:fe:ef:e0:e9:7e:d4:1e:f6:aa:1b:91:46:fd:f5: 16:ed:98:07:53:fa:ba:87:1b:7d:9e:1f:01:27:ab: b9:d2:67:ca:b7:10:25:53:f4:e3:be:9b:90:b8:ed: 23:5c:42:ef:64:25:58:e5:88:22:1a:be:f5:c7:ae: f5:be:8a:b1:11:11:93:1a:22:a9:74:69:c1:74:b6: 68:87:a7:83:30:f9:64:f1:b1:e3:38:3e:f4:d6:c1: fc:12:fe:73:57:17:35:57:8a:dd:50:8d:03:f8:66: cd:ca:76:83:13:c8:d7:0e:71:1d:e4:63:c9:ba:17: f8:d1:b9:e4:88:d2:2c:28:c8:21:20:0d:41:b7:0b: e2:2f:c2:80:e6:88:7b:53:6c:c3:44:63:81:7f:68: 47:8c:2b:2a:cf:5b:f4:8c:49:61:ba:69:85:fd:6b: 00:78:05:26:69:13:30:80:38:4e:f1:5a:55:c9:c5: 50:d6:aa:38:89:47:43:5c:fe:4d:73:a5:49:c5:93: 69:fe:77:96:9a:af:f3:8c:0e:57:ba:33:d9:0e:c6: 42:d3:03:77:c4:bb:39:ad:91:f9:f3:f7:96:5c:3a: 64:a6:ed:27:57:c1:e8:40:f3:53:f2:be:29:34:fe: 5f:f9 Exponent: 65537 (0x10001) X509v3 extensions: Authority Information Access: OCSP - URI:http://t2.symcb.com X509v3 Basic Constraints: critical CA:TRUE, pathlen:0 X509v3 CRL Distribution Points: Full Name: URI:http://t1.symcb.com/ThawtePCA.crl X509v3 Extended Key Usage: TLS Web Client Authentication, Code Signing X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Subject Alternative Name: DirName:/CN=SymantecPKI-1-568 X509v3 Subject Key Identifier: 57:86:9B:54:B8:BE:A6:29:8A:E4:F6:C2:E2:13:18:89:85:CD:DC:B7 X509v3 Authority Key Identifier: keyid:7B:5B:45:CF:AF:CE:CB:7A:FD:31:92:1A:6A:B6:F3:46:EB:57:48:50 Signature Algorithm: sha256WithRSAEncryption 24:3b:f5:d7:a0:36:13:c7:43:fe:f0:09:87:68:d1:98:31:6e: 12:e4:3f:1e:1f:96:7b:6b:4c:1e:87:9e:8b:c5:6c:a3:b1:0c: 7b:50:92:d5:81:9c:b1:8f:2c:29:b7:ee:f9:91:05:b9:8e:41: f1:2c:f6:d0:59:2d:98:e0:b9:ea:80:01:47:40:95:b8:3d:9d: 03:bd:79:bb:35:b6:ad:9c:4c:27:f6:67:45:10:c9:c5:bc:87: 4e:55:7b:d2:87:bb:dd:dc:30:ef:c6:d4:6c:cc:99:35:6d:1c: e0:60:d3:cd:68:8f:29:59:4b:89:96:08:46:c9:8e:fc:75:4f: c5:dc:09:cc:4e:27:8b:44:cd:07:bc:ac:04:e0:b5:33:a5:87: 9f:f4:dd:73:0c:91:ea:12:81:6f:e3:75:f0:1e:b5:93:6c:44: 17:d5:3e:97:c9:bd:07:2c:56:77:1f:85:dd:46:e8:bf:de:2c: 81:94:a3:f7:e5:b7:a7:c1:37:9f:75:ca:55:77:4d:5e:36:29: ca:85:d8:45:41:72:57:75:c0:79:5b:fa:34:10:06:6d:64:20: 42:b7:3a:c8:1f:1d:46:64:02:5f:c6:47:be:f0:c4:3a:28:54: da:f6:1e:4f:9a:a2:19:43:a4:6f:49:f8:fc:5e:42:20:28:84: 8b:47:20:6e
Certificate: Data: Version: 3 (0x2) Serial Number: 0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50 Signature Algorithm: sha1WithRSAEncryption Issuer: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2 Validity Not Before: Oct 18 00:00:00 2012 GMT Not After : Dec 29 23:59:59 2020 GMT Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer - G4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:63:0b:39:44:b8:bb:23:a7:44:49:bb:0e:ff: a1:f0:61:0a:53:93:b0:98:db:ad:2c:0f:4a:c5:6e: ff:86:3c:53:55:0f:15:ce:04:3f:2b:fd:a9:96:96: d9:be:61:79:0b:5b:c9:4c:86:76:e5:e0:43:4b:22: 95:ee:c2:2b:43:c1:9f:d8:68:b4:8e:40:4f:ee:85: 38:b9:11:c5:23:f2:64:58:f0:15:32:6f:4e:57:a1: ae:88:a4:02:d7:2a:1e:cd:4b:e1:dd:63:d5:17:89: 32:5b:b0:5e:99:5a:a8:9d:28:50:0e:17:ee:96:db: 61:3b:45:51:1d:cf:12:56:0b:92:47:fc:ab:ae:f6: 66:3d:47:ac:70:72:e7:92:e7:5f:cd:10:b9:c4:83: 64:94:19:bd:25:80:e1:e8:d2:22:a5:d0:ba:02:7a: a1:77:93:5b:65:c3:ee:17:74:bc:41:86:2a:dc:08: 4c:8c:92:8c:91:2d:9e:77:44:1f:68:d6:a8:74:77: db:0e:5b:32:8b:56:8b:33:bd:d9:63:c8:49:9d:3a: c5:c5:ea:33:0b:d2:f1:a3:1b:f4:8b:be:d9:b3:57: 8b:3b:de:04:a7:7a:22:b2:24:ae:2e:c7:70:c5:be: 4e:83:26:08:fb:0b:bd:a9:4f:99:08:e1:10:28:72: aa:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Extended Key Usage: critical Time Stamping X509v3 Key Usage: critical Digital Signature Authority Information Access: OCSP - URI:http://ts-ocsp.ws.symantec.com CA Issuers - URI:http://ts-aia.ws.symantec.com/tss-ca-g2.cer X509v3 CRL Distribution Points: Full Name: URI:http://ts-crl.ws.symantec.com/tss-ca-g2.crl X509v3 Subject Alternative Name: DirName:/CN=TimeStamp-2048-2 X509v3 Subject Key Identifier: 46:C6:69:A3:0E:4A:14:1E:D5:4C:DA:52:63:17:3F:5E:36:BC:0D:E6 X509v3 Authority Key Identifier: keyid:5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD Signature Algorithm: sha1WithRSAEncryption 78:3b:b4:91:2a:00:4c:f0:8f:62:30:37:78:a3:84:27:07:6f: 18:b2:de:25:dc:a0:d4:94:03:aa:86:4e:25:9f:9a:40:03:1c: dd:ce:e3:79:cb:21:68:06:da:b6:32:b4:6d:bf:f4:2c:26:63: 33:e4:49:64:6d:0d:e6:c3:67:0e:f7:05:a4:35:6c:7c:89:16: c6:e9:b2:df:b2:e9:dd:20:c6:71:0f:cd:95:74:dc:b6:5c:de: bd:37:1f:43:78:e6:78:b5:cd:28:04:20:a3:aa:f1:4b:c4:88: 29:91:0e:80:d1:11:fc:dd:5c:76:6e:4f:5e:0e:45:46:41:6e: 0d:b0:ea:38:9a:b1:3a:da:09:71:10:fc:1c:79:b4:80:7b:ac: 69:f4:fd:9c:b6:0c:16:2b:f1:7f:5b:09:3d:9b:5b:e2:16:ca: 13:81:6d:00:2e:38:0d:a8:29:8f:2c:e1:b2:f4:5a:a9:01:af: 15:9c:2c:2f:49:1b:db:22:bb:c3:fe:78:94:51:c3:86:b1:82: 88:5d:f0:3d:b4:51:a1:79:33:2b:2e:7b:b9:dc:20:09:13:71: eb:6a:19:5b:cf:e8:a5:30:57:2c:89:49:3f:b9:cf:7f:c9:bf: 3e:22:68:63:53:9a:bd:69:74:ac:c5:1d:3c:7f:92:e0:c3:bc: 1c:d8:04:75
Certificate: Data: Version: 3 (0x2) Serial Number: 1d:0f:76:aa:f0:4c:71:4c:92:5b:79:f3:38:12:2e:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=thawte, Inc., CN=thawte SHA256 Code Signing CA Validity Not Before: Sep 7 00:00:00 2015 GMT Not After : Oct 7 23:59:59 2017 GMT Subject: C=RU, ST=Voronezh region, L=Voronezh, O=OOO AMA, OU=OOO AMA, CN=OOO AMA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:88:81:b1:41:28:03:9c:a8:25:ee:84:7e:de: 98:71:7d:16:a7:e6:27:61:10:3d:e3:8e:24:cd:ad: 1f:1b:6d:26:8e:5d:e0:3b:9b:e6:c7:f8:9b:9f:29: 4d:f5:bb:9e:5a:72:9c:e6:54:b6:5f:c9:03:33:4b: 03:8a:d3:fe:eb:ee:41:75:09:d2:2a:95:6c:df:dd: da:18:19:c8:94:ca:0e:8c:23:a4:5d:0d:02:c4:65: 98:fa:f8:6b:17:19:4f:d2:27:5a:56:63:f5:03:cd: 14:af:73:9f:99:58:4c:c0:b1:11:26:7f:40:59:7b: 9f:fb:e1:dc:e0:8f:21:bb:e2:74:94:8b:dd:dc:be: 47:b0:2f:44:58:d5:97:ca:94:9d:fa:91:39:57:aa: 24:ba:66:f5:3d:01:0f:f5:72:ef:fd:6f:7a:d0:89: c5:68:f4:66:34:04:7a:6e:1e:ff:b3:57:8d:31:d8: 2a:02:ed:6f:84:2a:fc:5e:f5:b8:78:2f:3e:56:df: bb:3a:a1:b9:4a:40:3c:62:44:fc:e3:06:53:1e:ab: ea:1b:70:30:50:97:7b:be:84:9a:2d:cc:6a:6c:9d: 23:31:af:96:17:b8:9c:f0:a6:d6:d8:eb:a8:d7:90: 8a:d6:67:5b:81:6b:0d:d1:69:b7:5c:41:ad:27:7f: d2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: CA:FALSE X509v3 Authority Key Identifier: keyid:57:86:9B:54:B8:BE:A6:29:8A:E4:F6:C2:E2:13:18:89:85:CD:DC:B7 X509v3 Subject Key Identifier: 9C:69:31:DF:A4:3F:0F:9E:E2:2B:37:A4:3A:76:AC:AB:84:BA:23:F8 X509v3 CRL Distribution Points: Full Name: URI:http://tl.symcb.com/tl.crl X509v3 Key Usage: critical Digital Signature X509v3 Extended Key Usage: Code Signing X509v3 Certificate Policies: Policy: 2.16.840.1.113733.1.7.48.2 CPS: https://www.thawte.com/cps User Notice: Explicit Text: https://www.thawte.com/repository 2.5.29.4: 0.0.0.. +.....7....... Authority Information Access: OCSP - URI:http://tl.symcd.com CA Issuers - URI:http://tl.symcb.com/tl.crt Signature Algorithm: sha256WithRSAEncryption 38:0a:90:67:4b:d2:58:a2:32:38:a1:c8:7b:a0:9c:6a:06:c4: 24:a5:31:79:ef:84:22:70:a1:94:1e:c1:bd:66:95:45:4b:5a: de:e9:89:3b:6a:b6:d9:86:d0:3a:6f:71:48:31:ec:d5:ca:da: 96:d2:72:43:29:ca:0e:ac:6a:ca:2c:7b:ac:d6:fa:14:73:7b: a0:a9:ef:6c:43:7c:22:86:c2:e8:ad:6b:66:76:42:60:b9:40: 3c:c9:4c:46:82:56:a8:84:83:5b:a7:c0:8e:65:dd:33:09:c6: 18:22:a1:4f:dc:30:81:d3:90:d4:b5:17:0e:07:b3:95:d3:7f: 36:6b:1d:10:44:a4:b4:b1:fe:b1:8a:8e:96:6a:90:30:48:7f: f4:70:81:87:d9:06:34:19:77:81:e9:e9:6a:f8:8b:5b:4f:2e: be:76:e7:9a:99:1c:c9:3d:69:22:bc:71:09:c5:e2:e8:1e:32: c1:d0:2d:83:dc:b1:2e:69:79:1e:9b:8b:e7:e7:00:7e:8f:4a: c0:08:6a:19:52:2b:2b:8b:f5:2d:70:1d:2b:47:7d:e7:f3:d4: 5c:98:9a:13:58:6e:e0:3b:0b:c4:b3:b7:47:01:12:6c:5a:58: 4c:3f:3b:0c:b3:ad:46:f9:cb:84:b1:2b:a2:c8:96:0f:ee:50: 24:56:9e:c3
pkcs7-signedData
- 1
- SHA1: nil
- 1.3.6.1.4.1.311.2.1.4
- #0
- 1.3.6.1.4.1.311.2.1.15
- :
- SHA1
9c 50 61 ba 5c e5 3e 77 14 22 7c 90 9d ff 86 7f |.Pa.\.>w."|.....| f0 ac a1 55 |...U |
- 1.3.6.1.4.1.311.2.1.15
- #0
- Certificates
- Certificate #0
- 2
- 7E:93:EB:FB:7C:C6:4E:59:EA:4B:9A:77:D4:06:FC:3B
- RSA-SHA1: nil
- Issuer
- C: ZA
- ST: Western Cape
- L: Durbanville
- O: Thawte
- OU: Thawte Certification
- CN: Thawte Timestamping CA
- 2012-12-21 00:00:00 UTC: 2020-12-30 23:59:59 UTC
- Subject
- C: US
- O: Symantec Corporation
- CN: Symantec Time Stamping Services CA - G2
- #5
- rsaEncryption: nil
- B1:AC:B3:49:54:4B:97:1C:12:0A:D8:25:79:91:22:57:
2A:6F:DC:B8:26:C4:43:73:6B:C2:BF:2E:50:5A:FB:14:
C2:76:8E:43:01:25:43:B4:A1:E2:45:F4:E8:B7:7B:C3:
74:CC:22:D7:B4:94:00:02:F7:4D:ED:BF:B4:B7:44:24:
6B:CD:5F:45:3B:D1:44:CE:43:12:73:17:82:8B:69:B4:
2B:CB:99:1E:AC:72:1B:26:4D:71:1F:B1:31:DD:FB:51:
61:02:53:A6:AA:F5:49:2C:05:78:45:A5:2F:89:CE:E7:
99:E7:FE:8C:E2:57:3F:3D:C6:92:DC:4A:F8:7B:33:E4:
79:0A:FB:F0:75:88:41:9C:FF:C5:03:51:99:AA:D7:6C:
9F:93:69:87:65:29:83:85:C2:60:14:C4:C8:C9:3B:14:
DA:C0:81:F0:1F:0D:74:DE:92:22:AB:CA:F7:FB:74:7C:
27:E6:F7:4A:1B:7F:A7:C3:9E:2D:AE:8A:EA:A6:E6:AA:
27:16:7D:61:F7:98:71:11:BC:E2:50:A1:4B:E5:5D:FA:
E5:0E:A7:2C:9F:AA:65:20:D3:D8:96:E8:C8:7C:A5:4E:
48:44:FF:19:E2:44:07:92:0B:D7:68:84:80:5D:6A:78:
64:45:CD:60:46:7E:54:C1:13:7C:C5:79:F1:C9:C1:71: 0x010001
- #6
- subjectKeyIdentifier:
5f 9a f5 6e 5c cc cc 74 9a d4 dd 7d ef 3f db ec |_..n\..t...}.?..| 4c 80 2e dd |L... |
- authorityInfoAccess
- OCSP: http://ocsp.thawte.com
- basicConstraints
- true
- true: 0
- crlDistributionPoints: http://crl.thawte.com/ThawteTimestampingCA.crl
- extendedKeyUsage: timeStamping
- keyUsage: true, 6
- subjectAltName
- CN: TimeStamp-2048-1
- subjectKeyIdentifier:
- RSA-SHA1:
03 09 9b 8f 79 ef 7f 59 30 aa ef 68 b5 fa e3 09 |....y..Y0..h....| 1d bb 4f 82 06 5d 37 5f a6 52 9f 16 8d ea 1c 92 |..O..]7_.R......| 09 44 6e f5 6d eb 58 7c 30 e8 f9 69 8d 23 73 0b |.Dn.m.X|0..i.#s.| 12 6f 47 a9 ae 39 11 f8 2a b1 9b b0 1a c3 8e eb |.oG..9..*.......| 59 96 00 ad ce 0c 4d b2 d0 31 a6 08 5c 2a 7a fc |Y.....M..1..\*z.| e2 7a 1d 57 4c a8 65 18 e9 79 40 62 25 96 6e c7 |.z.WL.e..y@b%.n.| c7 37 6a 83 21 08 8e 41 ea dd d9 57 3f 1d 77 49 |.7j.!..A...W?.wI| 87 2a 16 06 5e a6 38 6a 22 12 a3 51 19 83 7e b6 |.*..^.8j"..Q..~.|
- 2
- Certificate #1
- 2
- 71:A0:B7:36:95:DD:B1:AF:C2:3B:2B:9A:18:EE:54:CB
- RSA-SHA256: nil
- Issuer
- C: US
- O: thawte, Inc.
- OU: Certification Services Division
- OU: (c) 2006 thawte, Inc. - For authorized use only
- CN: thawte Primary Root CA
- 2013-12-10 00:00:00 UTC: 2023-12-09 23:59:59 UTC
- Subject
- C: US
- O: thawte, Inc.
- CN: thawte SHA256 Code Signing CA
- #5
- rsaEncryption: nil
- 9B:55:02:4C:17:05:E9:D0:66:C3:FC:28:AD:D3:C0:FE:
EF:E0:E9:7E:D4:1E:F6:AA:1B:91:46:FD:F5:16:ED:98:
07:53:FA:BA:87:1B:7D:9E:1F:01:27:AB:B9:D2:67:CA:
B7:10:25:53:F4:E3:BE:9B:90:B8:ED:23:5C:42:EF:64:
25:58:E5:88:22:1A:BE:F5:C7:AE:F5:BE:8A:B1:11:11:
93:1A:22:A9:74:69:C1:74:B6:68:87:A7:83:30:F9:64:
F1:B1:E3:38:3E:F4:D6:C1:FC:12:FE:73:57:17:35:57:
8A:DD:50:8D:03:F8:66:CD:CA:76:83:13:C8:D7:0E:71:
1D:E4:63:C9:BA:17:F8:D1:B9:E4:88:D2:2C:28:C8:21:
20:0D:41:B7:0B:E2:2F:C2:80:E6:88:7B:53:6C:C3:44:
63:81:7F:68:47:8C:2B:2A:CF:5B:F4:8C:49:61:BA:69:
85:FD:6B:00:78:05:26:69:13:30:80:38:4E:F1:5A:55:
C9:C5:50:D6:AA:38:89:47:43:5C:FE:4D:73:A5:49:C5:
93:69:FE:77:96:9A:AF:F3:8C:0E:57:BA:33:D9:0E:C6:
42:D3:03:77:C4:BB:39:AD:91:F9:F3:F7:96:5C:3A:64:
A6:ED:27:57:C1:E8:40:F3:53:F2:BE:29:34:FE:5F:F9: 0x010001
- X509v3 extensions
- authorityInfoAccess
- OCSP: http://t2.symcb.com
- basicConstraints
- true
- true: 0
- crlDistributionPoints: http://t1.symcb.com/ThawtePCA.crl
- extendedKeyUsage
- clientAuth: codeSigning
- keyUsage: true, 6
- subjectAltName
- CN: SymantecPKI-1-568
- subjectKeyIdentifier:
57 86 9b 54 b8 be a6 29 8a e4 f6 c2 e2 13 18 89 |W..T...)........| 85 cd dc b7 |.... |
- authorityKeyIdentifier:
7b 5b 45 cf af ce cb 7a fd 31 92 1a 6a b6 f3 46 |{[E....z.1..j..F| eb 57 48 50 |.WHP |
- authorityInfoAccess
- RSA-SHA256:
24 3b f5 d7 a0 36 13 c7 43 fe f0 09 87 68 d1 98 |$;...6..C....h..| 31 6e 12 e4 3f 1e 1f 96 7b 6b 4c 1e 87 9e 8b c5 |1n..?...{kL.....| 6c a3 b1 0c 7b 50 92 d5 81 9c b1 8f 2c 29 b7 ee |l...{P......,)..| f9 91 05 b9 8e 41 f1 2c f6 d0 59 2d 98 e0 b9 ea |.....A.,..Y-....| 80 01 47 40 95 b8 3d 9d 03 bd 79 bb 35 b6 ad 9c |..G@..=...y.5...| 4c 27 f6 67 45 10 c9 c5 bc 87 4e 55 7b d2 87 bb |L'.gE.....NU{...| dd dc 30 ef c6 d4 6c cc 99 35 6d 1c e0 60 d3 cd |..0...l..5m..`..| 68 8f 29 59 4b 89 96 08 46 c9 8e fc 75 4f c5 dc |h.)YK...F...uO..| 09 cc 4e 27 8b 44 cd 07 bc ac 04 e0 b5 33 a5 87 |..N'.D.......3..| 9f f4 dd 73 0c 91 ea 12 81 6f e3 75 f0 1e b5 93 |...s.....o.u....| 6c 44 17 d5 3e 97 c9 bd 07 2c 56 77 1f 85 dd 46 |lD..>....,Vw...F| e8 bf de 2c 81 94 a3 f7 e5 b7 a7 c1 37 9f 75 ca |...,........7.u.| 55 77 4d 5e 36 29 ca 85 d8 45 41 72 57 75 c0 79 |UwM^6)...EArWu.y| 5b fa 34 10 06 6d 64 20 42 b7 3a c8 1f 1d 46 64 |[.4..md B.:...Fd| 02 5f c6 47 be f0 c4 3a 28 54 da f6 1e 4f 9a a2 |._.G...:(T...O..| 19 43 a4 6f 49 f8 fc 5e 42 20 28 84 8b 47 20 6e |.C.oI..^B (..G n|
- 2
- Certificate #2
- 2
- 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
- RSA-SHA1: nil
- Issuer
- C: US
- O: Symantec Corporation
- CN: Symantec Time Stamping Services CA - G2
- 2012-10-18 00:00:00 UTC: 2020-12-29 23:59:59 UTC
- Subject
- C: US
- O: Symantec Corporation
- CN: Symantec Time Stamping Services Signer - G4
- #5
- rsaEncryption: nil
- A2:63:0B:39:44:B8:BB:23:A7:44:49:BB:0E:FF:A1:F0:
61:0A:53:93:B0:98:DB:AD:2C:0F:4A:C5:6E:FF:86:3C:
53:55:0F:15:CE:04:3F:2B:FD:A9:96:96:D9:BE:61:79:
0B:5B:C9:4C:86:76:E5:E0:43:4B:22:95:EE:C2:2B:43:
C1:9F:D8:68:B4:8E:40:4F:EE:85:38:B9:11:C5:23:F2:
64:58:F0:15:32:6F:4E:57:A1:AE:88:A4:02:D7:2A:1E:
CD:4B:E1:DD:63:D5:17:89:32:5B:B0:5E:99:5A:A8:9D:
28:50:0E:17:EE:96:DB:61:3B:45:51:1D:CF:12:56:0B:
92:47:FC:AB:AE:F6:66:3D:47:AC:70:72:E7:92:E7:5F:
CD:10:B9:C4:83:64:94:19:BD:25:80:E1:E8:D2:22:A5:
D0:BA:02:7A:A1:77:93:5B:65:C3:EE:17:74:BC:41:86:
2A:DC:08:4C:8C:92:8C:91:2D:9E:77:44:1F:68:D6:A8:
74:77:DB:0E:5B:32:8B:56:8B:33:BD:D9:63:C8:49:9D:
3A:C5:C5:EA:33:0B:D2:F1:A3:1B:F4:8B:BE:D9:B3:57:
8B:3B:DE:04:A7:7A:22:B2:24:AE:2E:C7:70:C5:BE:4E:
83:26:08:FB:0B:BD:A9:4F:99:08:E1:10:28:72:AA:CD: 0x010001
- X509v3 extensions
- basicConstraints
- true
- nil
- extendedKeyUsage: true, timeStamping
- keyUsage: true, 0x80
- authorityInfoAccess
- #0
- OCSP: http://ts-ocsp.ws.symantec.com
- caIssuers: http://ts-aia.ws.symantec.com/tss-ca-g2.cer
- #0
- crlDistributionPoints: http://ts-crl.ws.symantec.com/tss-ca-g2.crl
- subjectAltName
- CN: TimeStamp-2048-2
- subjectKeyIdentifier:
46 c6 69 a3 0e 4a 14 1e d5 4c da 52 63 17 3f 5e |F.i..J...L.Rc.?^| 36 bc 0d e6 |6... |
- authorityKeyIdentifier:
5f 9a f5 6e 5c cc cc 74 9a d4 dd 7d ef 3f db ec |_..n\..t...}.?..| 4c 80 2e dd |L... |
- basicConstraints
- RSA-SHA1:
78 3b b4 91 2a 00 4c f0 8f 62 30 37 78 a3 84 27 |x;..*.L..b07x..'| 07 6f 18 b2 de 25 dc a0 d4 94 03 aa 86 4e 25 9f |.o...%.......N%.| 9a 40 03 1c dd ce e3 79 cb 21 68 06 da b6 32 b4 |.@.....y.!h...2.| 6d bf f4 2c 26 63 33 e4 49 64 6d 0d e6 c3 67 0e |m..,&c3.Idm...g.| f7 05 a4 35 6c 7c 89 16 c6 e9 b2 df b2 e9 dd 20 |...5l|......... | c6 71 0f cd 95 74 dc b6 5c de bd 37 1f 43 78 e6 |.q...t..\..7.Cx.| 78 b5 cd 28 04 20 a3 aa f1 4b c4 88 29 91 0e 80 |x..(. ...K..)...| d1 11 fc dd 5c 76 6e 4f 5e 0e 45 46 41 6e 0d b0 |....\vnO^.EFAn..| ea 38 9a b1 3a da 09 71 10 fc 1c 79 b4 80 7b ac |.8..:..q...y..{.| 69 f4 fd 9c b6 0c 16 2b f1 7f 5b 09 3d 9b 5b e2 |i......+..[.=.[.| 16 ca 13 81 6d 00 2e 38 0d a8 29 8f 2c e1 b2 f4 |....m..8..).,...| 5a a9 01 af 15 9c 2c 2f 49 1b db 22 bb c3 fe 78 |Z.....,/I.."...x| 94 51 c3 86 b1 82 88 5d f0 3d b4 51 a1 79 33 2b |.Q.....].=.Q.y3+| 2e 7b b9 dc 20 09 13 71 eb 6a 19 5b cf e8 a5 30 |.{.. ..q.j.[...0| 57 2c 89 49 3f b9 cf 7f c9 bf 3e 22 68 63 53 9a |W,.I?.....>"hcS.| bd 69 74 ac c5 1d 3c 7f 92 e0 c3 bc 1c d8 04 75 |.it...<........u|
- 2
- Certificate #3
- 2
- 1D:0F:76:AA:F0:4C:71:4C:92:5B:79:F3:38:12:2E:E7
- RSA-SHA256: nil
- Issuer
- C: US
- O: thawte, Inc.
- CN: thawte SHA256 Code Signing CA
- 2015-09-07 00:00:00 UTC: 2017-10-07 23:59:59 UTC
- Subject
- C: RU
- ST: Voronezh region
- L: Voronezh
- O: OOO AMA
- OU: OOO AMA
- CN: OOO AMA
- #5
- rsaEncryption: nil
- 9B:88:81:B1:41:28:03:9C:A8:25:EE:84:7E:DE:98:71:
7D:16:A7:E6:27:61:10:3D:E3:8E:24:CD:AD:1F:1B:6D:
26:8E:5D:E0:3B:9B:E6:C7:F8:9B:9F:29:4D:F5:BB:9E:
5A:72:9C:E6:54:B6:5F:C9:03:33:4B:03:8A:D3:FE:EB:
EE:41:75:09:D2:2A:95:6C:DF:DD:DA:18:19:C8:94:CA:
0E:8C:23:A4:5D:0D:02:C4:65:98:FA:F8:6B:17:19:4F:
D2:27:5A:56:63:F5:03:CD:14:AF:73:9F:99:58:4C:C0:
B1:11:26:7F:40:59:7B:9F:FB:E1:DC:E0:8F:21:BB:E2:
74:94:8B:DD:DC:BE:47:B0:2F:44:58:D5:97:CA:94:9D:
FA:91:39:57:AA:24:BA:66:F5:3D:01:0F:F5:72:EF:FD:
6F:7A:D0:89:C5:68:F4:66:34:04:7A:6E:1E:FF:B3:57:
8D:31:D8:2A:02:ED:6F:84:2A:FC:5E:F5:B8:78:2F:3E:
56:DF:BB:3A:A1:B9:4A:40:3C:62:44:FC:E3:06:53:1E:
AB:EA:1B:70:30:50:97:7B:BE:84:9A:2D:CC:6A:6C:9D:
23:31:AF:96:17:B8:9C:F0:A6:D6:D8:EB:A8:D7:90:8A:
D6:67:5B:81:6B:0D:D1:69:B7:5C:41:AD:27:7F:D2:17: 0x010001
- X509v3 extensions
- basicConstraints
- nil
- authorityKeyIdentifier:
57 86 9b 54 b8 be a6 29 8a e4 f6 c2 e2 13 18 89 |W..T...)........| 85 cd dc b7 |.... |
- subjectKeyIdentifier:
9c 69 31 df a4 3f 0f 9e e2 2b 37 a4 3a 76 ac ab |.i1..?...+7.:v..| 84 ba 23 f8 |..#. |
- crlDistributionPoints: http://tl.symcb.com/tl.crl
- keyUsage: true, 0x80
- extendedKeyUsage: codeSigning
- certificatePolicies
- 2.16.840.1.113733.1.7.48.2
- #0
- id-qt-cps: https://www.thawte.com/cps
- id-qt-unotice: https://www.thawte.com/repository
- #0
- 2.16.840.1.113733.1.7.48.2
- 2.5.29.4
- msCodeCom: 0x80
- authorityInfoAccess
- #0
- OCSP: http://tl.symcd.com
- caIssuers: http://tl.symcb.com/tl.crt
- #0
- basicConstraints
- RSA-SHA256:
38 0a 90 67 4b d2 58 a2 32 38 a1 c8 7b a0 9c 6a |8..gK.X.28..{..j| 06 c4 24 a5 31 79 ef 84 22 70 a1 94 1e c1 bd 66 |..$.1y.."p.....f| 95 45 4b 5a de e9 89 3b 6a b6 d9 86 d0 3a 6f 71 |.EKZ...;j....:oq| 48 31 ec d5 ca da 96 d2 72 43 29 ca 0e ac 6a ca |H1......rC)...j.| 2c 7b ac d6 fa 14 73 7b a0 a9 ef 6c 43 7c 22 86 |,{....s{...lC|".| c2 e8 ad 6b 66 76 42 60 b9 40 3c c9 4c 46 82 56 |...kfvB`.@<.LF.V| a8 84 83 5b a7 c0 8e 65 dd 33 09 c6 18 22 a1 4f |...[...e.3...".O| dc 30 81 d3 90 d4 b5 17 0e 07 b3 95 d3 7f 36 6b |.0............6k| 1d 10 44 a4 b4 b1 fe b1 8a 8e 96 6a 90 30 48 7f |..D........j.0H.| f4 70 81 87 d9 06 34 19 77 81 e9 e9 6a f8 8b 5b |.p....4.w...j..[| 4f 2e be 76 e7 9a 99 1c c9 3d 69 22 bc 71 09 c5 |O..v.....=i".q..| e2 e8 1e 32 c1 d0 2d 83 dc b1 2e 69 79 1e 9b 8b |...2..-....iy...| e7 e7 00 7e 8f 4a c0 08 6a 19 52 2b 2b 8b f5 2d |...~.J..j.R++..-| 70 1d 2b 47 7d e7 f3 d4 5c 98 9a 13 58 6e e0 3b |p.+G}...\...Xn.;| 0b c4 b3 b7 47 01 12 6c 5a 58 4c 3f 3b 0c b3 ad |....G..lZXL?;...| 46 f9 cb 84 b1 2b a2 c8 96 0f ee 50 24 56 9e c3 |F....+.....P$V..|
- 2
- Certificate #0
- 1
- unnamed
- #0
- C: US
- O: thawte, Inc.
- CN: thawte SHA256 Code Signing CA
- 1D:0F:76:AA:F0:4C:71:4C:92:5B:79:F3:38:12:2E:E7
- #0
- SHA1: nil
- #2
- 1.3.6.1.4.1.311.2.1.12
- nil
- contentType: 1.3.6.1.4.1.311.2.1.4
- 1.3.6.1.4.1.311.2.1.11: msCodeCom
- messageDigest:
6f 42 15 77 35 18 b8 21 1e 17 8e e8 63 c4 d3 70 |oB.w5..!....c..p| 51 4a fd a1 |QJ.. |
- 1.3.6.1.4.1.311.2.1.12
- rsaEncryption:
00 b6 f6 ca 73 ea 00 15 f7 2b 5e e3 ce bf 47 e5 |....s....+^...G.| 51 b2 7b f2 67 e1 63 b2 86 f2 73 e1 89 30 6a 1e |Q.{.g.c...s..0j.| bc f7 3a 6e bf ad 27 45 61 46 31 c9 16 6f 8f 51 |..:n..'EaF1..o.Q| 7a ce 59 8e 31 12 cd 0f 01 f4 9a ec b6 86 3e 14 |z.Y.1.........>.| 8f c0 38 62 7e 57 e7 5f 89 2f 19 21 b3 22 5e d3 |..8b~W._./.!."^.| 0b 8b 57 04 eb 74 51 7b 58 27 5f 1f 7d 0a ae 0c |..W..tQ{X'_.}...| 07 ee 78 30 65 77 6f 43 4e 35 b8 81 7e a1 1c c5 |..x0ewoCN5..~...| f4 95 2b 03 54 73 31 b9 3b 12 e4 b3 a7 e4 3e 67 |..+.Ts1.;.....>g| a2 df 7e de c0 d0 fc bd 18 53 5a 1a 5c d1 65 15 |..~......SZ.\.e.| 63 6a 6c 57 e5 d6 ca ee 2b 54 94 4b 11 cc 1d 49 |cjlW....+T.K...I| 97 eb 7a 82 ca 51 41 a3 fc e3 62 71 71 44 ee 41 |..z..QA...bqqD.A| 3a 97 50 ad 0f e0 e9 d0 29 5e f8 7e f3 58 de 4a |:.P.....)^.~.X.J| 5a 86 fe ed cf 3a e0 d3 5f 0c 02 ea 72 45 d6 f7 |Z....:.._...rE..| f6 d7 3e 6e 2d 74 b2 09 ca de 3b 57 9a 5a ae d1 |..>n-t....;W.Z..| 5e 55 b3 0b b5 cc ca d5 b5 19 9c c6 dd ff 56 6c |^U............Vl| dc b1 a5 62 0f a8 3c e0 5c 7f 55 a2 43 30 26 1e |...b..<.\.U.C0&.|
- countersignature
- 1
- unnamed
- #0
- C: US
- O: Symantec Corporation
- CN: Symantec Time Stamping Services CA - G2
- 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
- #0
- SHA1: nil
- #2
- contentType: pkcs7-data
- signingTime: 2016-10-21 12:16:46 UTC
- messageDigest:
ff f8 6a 73 f8 8e 19 00 1b 54 56 65 41 ef c1 69 |..js.....TVeA..i| 72 d6 7a ef |r.z. |
- rsaEncryption:
50 24 5b 01 05 b7 2c 89 a1 fb f5 c3 61 30 86 63 |P$[...,.....a0.c| 70 53 0d d9 74 f5 72 4e 99 a2 37 66 87 70 b4 36 |pS..t.rN..7f.p.6| 72 ba ad 36 56 4f 8b 78 bc 49 fe 5b bf 7c 37 6a |r..6VO.x.I.[.|7j| ac a3 8f 49 2f 45 da 46 bc b3 02 33 1e 14 75 f9 |...I/E.F...3..u.| 08 84 9c 90 ec 67 1e 3b 15 e6 27 f0 37 1c 8d 28 |.....g.;..'.7..(| a1 19 81 91 5e 3a da 50 09 bb 5e 30 7f 4b 55 56 |....^:.P..^0.KUV| 74 74 e8 b0 fe 76 62 ae d9 18 88 8c 86 01 dc ad |tt...vb.........| 53 85 94 71 a3 c1 c1 dc 8d e7 44 fc 71 51 64 ca |S..q......D.qQd.| fa 5d e5 98 21 27 4c a8 55 e6 ee 8c 2e af 67 94 |.]..!'L.U.....g.| ba 3f 78 47 d1 5c 46 8f 32 62 5d 9c 06 9f 2c 9f |.?xG.\F.2b]...,.| 88 15 27 5e 74 d2 82 47 4a 69 28 81 8e 49 58 9d |..'^t..GJi(..IX.| 5f 31 ae c4 bb af 27 1a 55 3f fd cf 7c 29 4a 80 |_1....'.U?..|)J.| 7a 6d 44 91 43 04 4d 0a 22 1a 49 54 8b 4c 26 bb |zmD.C.M.".IT.L&.| ba f1 52 a6 18 ad 7f 91 1c e5 e0 54 e5 c2 b3 de |..R........T....| ca 6b 68 4a bf df 49 db b1 3c b7 e1 da 37 ab 08 |.khJ..I..<...7..| 34 a4 b5 d1 e0 8a fd ca 48 bd 9c ea 4f 04 98 3c |4.......H...O..<|
- unnamed
- 1
- unnamed
offset | size | type | comment | |
---|---|---|---|---|
0 | 3850240 | EXE | 10/21/2016 12:14:30 | # |
15c1 | 15 | HTM | # | |
3ac000 | 5792 | PKCS7 | Authenticode Signature | # |
Please donate some bucks to keep this site up and running: | |
Ko-fi | |
---|---|
Yandex.Money | |
Thank you! |
everything is OK