| filename | u1210.exe | |
|---|---|---|
| size | 1910376 (0x1d2668) | |
| md5 | 198717353aa52fdc8b895b219d425677 | |
| type | PE32 executable (GUI) Intel 80386, for MS Windows | |
| mimetype | application/x-dosexec | |
| clamav | OK | |
| virustotal | → scan with virustotal.com | |
| histogram | ||
MZ Header
| signature | MZ |
| bytes_in_last_block | 0x90 |
| blocks_in_file | 3 |
| num_relocs | 0 |
| header_paragraphs | 4 |
| min_extra_paragraphs | 0 |
| max_extra_paragraphs | 0xffff |
| ss | 0 |
| sp | 0xb8 |
| checksum | 0 |
| ip | 0 |
| cs | 0 |
| reloc_table_offset | 0x40 |
| overlay_number | 0 |
| reserved0 | 0 |
| oem_id | 0 |
| oem_info | 0 |
| reserved2 | 0 |
| reserved3 | 0 |
| reserved4 | 0 |
| reserved5 | 0 |
| reserved6 | 0 |
| lfanew | 0xf8 |
DOS stub
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
PE Header
Sections
Data Directory
| module_name | hint | ord | function_name |
|---|---|---|---|
| kernel32.dll | lstrcpy | ||
| comctl32.dll | InitCommonControls |
| ord | entry_va | function_name | |
|---|---|---|---|
| 1 | 0xde30 | _EXECryptor_GetHardwareID@0 | |
| 2 | 0xde10 | _EXECryptor_IsAppProtected@0 |
Signers (1)
issuer: /C=BE/O=GlobalSign nv-sa/CN=GlobalSign CodeSigning CA - G2
serial: 1121C51978F0ED636CA3C5B5C4D33D022C10
Certificates (4)
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:00:00:00:00:01:20:19:c1:90:66
Signature Algorithm: sha1WithRSAEncryption
Issuer: C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA
Validity
Not Before: Mar 18 11:00:00 2009 GMT
Not After : Jan 28 12:00:00 2028 GMT
Subject: OU=Timestamping CA, O=GlobalSign, CN=GlobalSign Timestamping CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:c3:0c:b7:12:0d:4d:68:8a:33:de:36:05:f0:3c:
ba:f5:da:cd:0e:53:7b:46:9f:82:f2:62:13:d7:c1:
77:ad:bb:81:37:7e:4f:1e:93:81:c1:06:22:da:1d:
50:84:c6:97:95:92:a9:93:b6:3d:ab:86:79:19:54:
7d:0e:16:04:4c:c4:88:97:2c:c6:a1:a8:5f:15:3a:
d2:64:2b:cc:3e:0c:7a:e8:a4:56:b1:1e:bb:cf:84:
ce:8d:35:3a:34:9c:6c:2d:c0:77:b5:30:a9:1f:67:
e6:3a:09:44:3a:43:72:41:a2:91:c3:46:9a:1f:b6:
b9:a7:0f:af:1c:75:1b:64:25:e7:08:6c:14:47:f5:
47:1a:de:8e:ea:a2:63:95:7d:f5:a8:ad:55:a2:64:
9b:72:6f:b9:02:73:3f:39:8a:39:5c:c4:fe:8f:fb:
11:9c:bd:10:19:49:63:d0:43:22:8b:d6:ab:92:99:
74:14:cf:30:07:be:4f:bd:fd:8a:8f:9e:5a:df:6d:
3c:cc:5a:99:50:90:b9:ad:c2:97:43:c2:5f:ed:cd:
33:3d:87:cc:c1:a0:5b:a9:62:3b:78:7d:64:a3:ac:
4d:1f:2b:d7:03:11:6c:71:54:8a:b0:ab:b1:1c:d6:
7d:23:db:40:07:37:26:db:50:af:38:3d:a6:07:75:
6f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE, pathlen:0
X509v3 Subject Key Identifier:
E8:C2:F1:C4:32:DC:33:35:37:BC:65:76:F5:9C:17:2E:17:45:2C:FE
X509v3 Certificate Policies:
Policy: 1.3.6.1.4.1.4146.1.30
CPS: http://www.globalsign.net/repository/
X509v3 CRL Distribution Points:
Full Name:
URI:http://crl.globalsign.net/root.crl
X509v3 Authority Key Identifier:
60:7B:66:1A:45:0D:97:CA:89:50:2F:7D:04:CD:34:A8:FF:FC:FD:4B
Signature Algorithm: sha1WithRSAEncryption
Signature Value:
5d:f6:cb:2b:0d:01:40:84:9f:85:7a:43:70:6a:e0:c5:e7:aa:
06:00:d7:67:13:c9:08:91:31:65:4f:14:a8:a9:05:dc:38:9e:
6a:a0:30:0a:bd:8d:c7:80:28:ee:42:45:ca:94:f3:de:58:45:
a9:80:32:04:f5:59:5c:6a:70:00:39:27:94:4d:f5:b4:46:34:
e8:1c:53:31:b2:b3:54:16:e9:cc:42:ab:d5:d9:59:30:1c:fb:
46:27:25:b8:87:23:b1:e8:75:88:24:83:1e:c8:76:37:7b:01:
49:45:48:a4:ed:e2:5d:d2:7c:9c:a2:dc:2d:ba:10:5a:12:62:
65:ab:ae:00:c7:10:34:3b:cb:72:bd:14:24:0c:dc:c3:76:27:
b4:a7:fe:e1:58:29:f2:0e:16:9f:91:39:1d:89:a6:e6:0f:1c:
87:8c:e2:58:ac:92:7e:24:3e:aa:ec:14:e7:3a:33:34:8b:c6:
3b:ac:83:ab:0f:14:62:7a:ba:1a:2d:4d:4b:1b:c5:30:f0:0b:
92:79:7d:3c:78:e0:f8:e6:d2:15:96:59:99:39:2b:30:61:e8:
b8:f8:c0:a1:e9:22:14:11:78:7d:c4:dc:89:be:c0:bb:94:e1:
72:ae:eb:b5:40:40:4f:ef:17:1e:58:5e:d0:a8:89:96:ac:92:
28:e9:ba:bf
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:00:00:00:00:01:2f:4e:e1:35:5c
Signature Algorithm: sha1WithRSAEncryption
Issuer: C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA
Validity
Not Before: Apr 13 10:00:00 2011 GMT
Not After : Apr 13 10:00:00 2019 GMT
Subject: C=BE, O=GlobalSign nv-sa, CN=GlobalSign CodeSigning CA - G2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:b2:4f:14:e7:10:be:d7:26:72:ab:36:97:ef:53:
bf:42:84:5e:58:d1:8a:28:fc:43:46:6f:7e:28:44:
50:0b:75:5d:00:d7:3c:0a:44:9e:20:6a:a4:f7:45:
4a:37:60:a3:6e:3f:12:fa:6d:fa:b6:46:c3:6a:a3:
b8:0c:27:28:02:57:28:d1:50:f7:61:39:55:b8:c3:
e1:25:86:52:3c:bf:05:1d:d7:b3:9a:f8:9a:24:31:
49:d5:a2:a9:e2:d3:91:ab:3e:3c:73:ef:f6:29:f1:
c8:35:d0:30:7b:7f:4e:92:a5:06:8f:87:e2:ce:f5:
c1:63:66:ac:18:69:2a:c1:5e:bb:5a:e8:6e:95:ff:
3b:80:62:9d:99:c7:c7:2f:66:d5:fd:62:1a:82:55:
5a:c6:fa:40:77:8e:c9:30:3c:1b:f0:f2:35:b8:6c:
59:9c:fd:e9:d6:ca:b4:40:1e:f7:04:ca:d1:67:a9:
74:e3:a5:08:54:d9:83:35:3b:8e:8c:23:0c:75:b6:
de:86:4a:9e:1a:3e:0a:50:49:38:9c:d2:a8:90:bf:
98:fa:c8:8c:2b:27:11:7e:2a:fb:ce:de:a9:ae:38:
93:22:fa:a6:ec:fb:5c:61:76:c3:44:d6:cc:0c:7e:
2f:6d:06:80:a2:74:40:bb:b7:1f:f4:3b:d7:73:54:
1f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE, pathlen:0
X509v3 Subject Key Identifier:
08:6E:D8:B6:9C:8A:BF:ED:3E:D7:C3:74:5D:CC:80:1F:A8:2F:50:7A
X509v3 Certificate Policies:
Policy: X509v3 Any Policy
CPS: https://www.globalsign.com/repository/
X509v3 CRL Distribution Points:
Full Name:
URI:http://crl.globalsign.net/root.crl
X509v3 Extended Key Usage:
Code Signing
X509v3 Authority Key Identifier:
60:7B:66:1A:45:0D:97:CA:89:50:2F:7D:04:CD:34:A8:FF:FC:FD:4B
Signature Algorithm: sha1WithRSAEncryption
Signature Value:
22:5c:c5:dd:3d:f4:0b:70:d8:e3:f5:e7:c5:8e:09:01:bb:b1:
96:36:5c:5a:07:ad:c7:a8:44:49:51:25:7a:ae:0d:a4:19:3b:
92:9c:cf:b9:42:26:bb:3b:6c:97:e7:c7:ce:11:6d:68:91:da:
8d:6d:f1:53:4d:54:38:8c:61:f3:c8:82:76:69:be:81:32:0b:
31:c3:6c:c9:9e:20:0a:58:2f:f0:48:fe:7e:48:07:aa:d7:43:
58:94:73:54:04:31:a9:78:0d:3b:8c:b0:70:c1:3d:7e:d7:bd:
2f:2a:c3:e2:f5:8f:0c:90:dc:6b:a5:c8:be:68:5e:5d:6d:f8:
78:d2:be:49:95:1e:15:78:08:91:fb:34:c8:be:84:ad:bc:e0:
c6:dd:18:db:f3:ca:f0:7b:c2:14:3c:18:b8:03:ba:95:3e:21:
1e:3f:60:69:7a:7f:6a:03:9e:8d:4a:f9:f0:28:2c:30:84:5e:
ec:26:72:42:b1:6d:cb:64:c3:12:8c:d6:84:4b:67:41:7c:b1:
03:17:78:09:e3:ad:a8:b6:96:2d:a4:7e:80:03:4f:88:f7:c1:
6b:5a:46:15:cd:2c:19:8b:d8:70:9c:e5:2d:49:88:60:72:a8:
a4:19:52:70:43:5e:da:d6:46:03:b0:68:0e:24:ef:4a:f6:0b:
25:24:ef:24
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:00:00:00:00:01:25:b0:b4:cc:01
Signature Algorithm: sha1WithRSAEncryption
Issuer: OU=Timestamping CA, O=GlobalSign, CN=GlobalSign Timestamping CA
Validity
Not Before: Dec 21 09:32:56 2009 GMT
Not After : Dec 22 09:32:56 2020 GMT
Subject: C=BE, O=GlobalSign NV, CN=GlobalSign Time Stamping Authority
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:cd:c2:3d:5d:77:22:d0:c2:7d:38:32:c3:15:83:
1f:42:6a:3b:53:66:dd:6a:36:44:0d:69:cf:68:8d:
89:45:9f:7e:2f:ee:42:3a:33:7c:3e:00:d3:97:6a:
d8:5a:d5:c3:4d:92:0a:5f:06:50:fd:bf:6c:c4:03:
a2:82:60:d8:ed:52:2e:13:74:de:97:c6:45:21:7b:
55:f6:ea:b1:64:03:fc:74:6b:b2:5f:c7:6c:6c:43:
14:8a:24:10:37:49:95:81:d2:48:12:a5:a2:76:49:
50:21:7f:ca:85:73:0a:3c:5d:b5:2e:ad:90:aa:5e:
4d:32:cb:17:93:d9:7f:96:c0:c0:89:65:56:d9:c5:
b1:3f:98:1b:27:fa:49:ee:1d:1b:cb:06:8c:30:1c:
3b:c5:a7:70:5b:a8:ab:18:5a:fe:c8:f6:8e:bf:01:
5d:8f:61:98:34:0f:58:51:ff:df:32:ea:54:65:1c:
14:2b:6c:fc:0c:90:19:67:ed:9b:d9:da:63:9b:d6:
5a:24:a3:74:8e:08:23:00:a1:92:b5:1e:0b:d1:08:
a0:66:7f:92:1b:a3:ed:80:64:02:49:8f:b6:84:ef:
d1:55:8e:5e:a9:97:5a:c5:08:02:88:94:56:bf:92:
eb:2a:2d:06:35:92:b5:37:36:31:ec:c3:fe:7a:3b:
c2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Authority Key Identifier:
E8:C2:F1:C4:32:DC:33:35:37:BC:65:76:F5:9C:17:2E:17:45:2C:FE
X509v3 CRL Distribution Points:
Full Name:
URI:http://crl.globalsign.net/Timestamping1.crl
X509v3 Subject Key Identifier:
AA:AA:A6:8A:EF:A4:64:73:D6:95:E2:79:C8:8F:EA:CF:A5:60:29:CA
X509v3 Basic Constraints:
CA:FALSE
X509v3 Key Usage: critical
Digital Signature
X509v3 Extended Key Usage: critical
Time Stamping
X509v3 Certificate Policies:
Policy: 1.3.6.1.4.1.4146.1.30
CPS: http://www.globalsign.net/repository/
Signature Algorithm: sha1WithRSAEncryption
Signature Value:
bc:89:ec:fe:e6:36:55:93:5c:79:d4:11:7a:86:80:8f:17:b6:
93:b2:6d:9b:91:a1:56:18:11:c6:55:ea:f6:08:ed:ad:9b:9e:
f5:2b:81:c8:bb:dd:60:7b:1b:47:99:1e:6d:40:3e:1d:80:c2:
13:d5:8e:04:05:2f:db:e7:ae:52:9e:68:84:72:a1:e5:4a:60:
3c:f8:9b:d5:2f:46:d8:c3:b2:b7:93:53:ac:9b:6c:43:24:24:
d1:f1:fc:e9:56:2e:34:11:58:18:43:ea:ef:ff:34:74:6c:a0:
c0:6c:7f:ad:03:19:69:88:1e:95:60:ca:bb:bd:0c:bb:76:ef:
c7:24:b0:81:c6:38:31:cf:36:ad:0c:38:b8:90:20:84:9b:2e:
8f:28:b9:9f:f6:ca:94:27:cd:ac:39:61:57:e0:e3:95:5a:9c:
76:92:30:f5:de:a6:97:3d:72:1c:2a:60:32:a8:33:4d:86:35:
33:8a:5c:f3:a4:fd:f7:06:2c:e1:6b:4b:30:f5:cb:d3:43:62:
f8:41:b9:de:7d:20:cb:05:8c:8e:2c:f6:5f:35:fd:33:8d:42:
89:65:08:36:2c:a3:89:f4:5a:85:8b:b0:b9:7b:db:6c:cb:a1:
f8:d2:0e:1b:bb:97:7c:d1:27:79:be:9d:7c:3b:e6:a7:56:34:
d8:c9:91:a9
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:21:c5:19:78:f0:ed:63:6c:a3:c5:b5:c4:d3:3d:02:2c:10
Signature Algorithm: sha1WithRSAEncryption
Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign CodeSigning CA - G2
Validity
Not Before: Dec 5 21:33:59 2012 GMT
Not After : Jan 11 15:34:39 2016 GMT
Subject: C=US, ST=WY, L=Cheyenne, O=Ultrareach Internet Corp., CN=Ultrareach Internet Corp.
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:b2:42:75:85:2f:d2:14:da:a8:aa:2c:89:0d:ba:
74:2d:97:cc:56:6d:76:68:34:5d:c4:17:fd:61:e8:
5c:0c:a6:cc:00:25:3f:9d:44:2e:a6:13:77:e8:be:
0b:51:8a:df:c2:38:0f:77:5a:05:d5:aa:7f:25:a1:
69:85:7a:72:b9:2b:6e:ae:df:ae:14:23:c8:72:7f:
a7:05:b1:1e:c5:4b:d4:a8:ec:39:d7:33:9b:86:4b:
bf:32:42:c5:ab:4e:e2:89:a3:d7:64:8e:13:3b:70:
32:2a:7c:af:3c:df:ec:4c:dc:7b:ba:0e:63:db:19:
dc:df:47:35:eb:f1:83:1c:b3:b4:02:77:76:27:f1:
ce:64:25:7a:47:5a:84:af:f5:4f:7d:6d:c9:7e:0c:
26:3e:b0:b4:1d:3a:af:3f:2d:a9:52:26:72:8d:71:
35:b4:7f:3d:1a:ce:02:7c:e6:2a:cb:64:0b:e2:ec:
20:17:c3:2f:7b:e0:cb:99:9e:c4:56:78:f3:c3:75:
32:06:e5:ba:f8:d7:33:b2:23:10:a8:4d:07:1f:92:
90:8a:0d:76:c2:0c:81:a1:51:2f:47:c7:54:cd:6c:
bc:51:df:72:9f:b3:77:4a:a0:70:d8:c6:8f:c2:ff:
b6:5d:67:5f:5e:fd:28:28:13:d4:e4:85:96:7f:14:
fb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature
X509v3 Certificate Policies:
Policy: 1.3.6.1.4.1.4146.1.50
CPS: https://www.globalsign.com/repository/
X509v3 Basic Constraints:
CA:FALSE
X509v3 Extended Key Usage:
Code Signing
X509v3 CRL Distribution Points:
Full Name:
URI:http://crl.globalsign.com/gs/gscodesigng2.crl
Authority Information Access:
CA Issuers - URI:http://secure.globalsign.com/cacert/gscodesigng2.crt
X509v3 Subject Key Identifier:
16:2D:AF:C5:7D:EF:55:6D:6A:99:D5:2A:FF:25:C3:47:D8:25:45:50
X509v3 Authority Key Identifier:
08:6E:D8:B6:9C:8A:BF:ED:3E:D7:C3:74:5D:CC:80:1F:A8:2F:50:7A
Signature Algorithm: sha1WithRSAEncryption
Signature Value:
91:3f:2d:37:84:95:ef:6d:c3:fa:bd:2f:a3:7c:1b:21:bb:f9:
46:8f:90:f1:7f:91:a6:6c:4f:14:0e:ea:b5:39:91:72:b5:f7:
f8:82:2c:84:f6:e3:fd:6d:29:be:cb:53:01:6f:a5:0b:ad:07:
13:df:56:ce:e5:e0:a7:ff:59:c4:7a:d0:6d:f6:f5:d3:af:d1:
77:39:00:21:f0:8d:d9:d2:6c:53:a2:09:a1:c8:d7:1f:32:08:
cf:1c:11:67:ef:ce:cd:b9:56:db:8e:a0:e5:9d:f2:44:92:81:
da:4b:72:0f:2c:83:b9:38:11:dc:3a:49:f8:40:53:1f:87:57:
c6:da:a3:75:5a:20:40:36:5f:59:9f:c5:f8:f8:b7:96:8a:18:
f2:d7:b0:41:3b:b7:d6:68:59:88:5c:fc:09:93:8e:8d:29:9c:
4c:11:36:03:7a:6b:6d:0d:c3:8d:35:53:f9:34:a5:2e:02:65:
c1:7c:78:c3:0b:3c:e1:2a:5b:6e:d6:fa:4b:65:07:16:65:1c:
bc:9b:18:d1:03:cb:0b:0e:6b:bb:08:75:b0:9c:9b:e1:24:8a:
aa:41:5a:c9:b3:f2:96:9f:09:19:17:7b:12:27:b3:2b:48:72:
44:d9:36:cb:f7:75:14:06:90:9a:b4:0a:6e:15:1e:56:54:50:
61:97:6f:6c
- 1
- SHA1: nil
- 1.3.6.1.4.1.311.2.1.4
- #0
- 1.3.6.1.4.1.311.2.1.15
- :
00 3c 00 3c 00 3c 00 4f 00 62 00 73 00 6f 00 6c |.<.<.<.O.b.s.o.l| 00 65 00 74 00 65 00 3e 00 3e 00 3e |.e.t.e.>.>.> |
- :
- SHA1
39 1c 54 a1 41 74 b7 b0 d3 bb e6 80 b3 43 be 86 |9.T.At.......C..| 3a da 27 d2 |:.'. |
- 1.3.6.1.4.1.311.2.1.15
- #0
- unnamed
- Certificate #0
- 2
- 04:00:00:00:00:01:20:19:C1:90:66
- RSA-SHA1: nil
- Issuer
- C: BE
- O: GlobalSign nv-sa
- OU: Root CA
- CN: GlobalSign Root CA
- 2009-03-18 11:00:00 UTC: 2028-01-28 12:00:00 UTC
- #4
- OU: Timestamping CA
- O: GlobalSign
- CN: GlobalSign Timestamping CA
- #5
- rsaEncryption: nil
- C3:0C:B7:12:0D:4D:68:8A:33:DE:36:05:F0:3C:BA:F5:
DA:CD:0E:53:7B:46:9F:82:F2:62:13:D7:C1:77:AD:BB:
81:37:7E:4F:1E:93:81:C1:06:22:DA:1D:50:84:C6:97:
95:92:A9:93:B6:3D:AB:86:79:19:54:7D:0E:16:04:4C:
C4:88:97:2C:C6:A1:A8:5F:15:3A:D2:64:2B:CC:3E:0C:
7A:E8:A4:56:B1:1E:BB:CF:84:CE:8D:35:3A:34:9C:6C:
2D:C0:77:B5:30:A9:1F:67:E6:3A:09:44:3A:43:72:41:
A2:91:C3:46:9A:1F:B6:B9:A7:0F:AF:1C:75:1B:64:25:
E7:08:6C:14:47:F5:47:1A:DE:8E:EA:A2:63:95:7D:F5:
A8:AD:55:A2:64:9B:72:6F:B9:02:73:3F:39:8A:39:5C:
C4:FE:8F:FB:11:9C:BD:10:19:49:63:D0:43:22:8B:D6:
AB:92:99:74:14:CF:30:07:BE:4F:BD:FD:8A:8F:9E:5A:
DF:6D:3C:CC:5A:99:50:90:B9:AD:C2:97:43:C2:5F:ED:
CD:33:3D:87:CC:C1:A0:5B:A9:62:3B:78:7D:64:A3:AC:
4D:1F:2B:D7:03:11:6C:71:54:8A:B0:AB:B1:1C:D6:7D:
23:DB:40:07:37:26:DB:50:AF:38:3D:A6:07:75:6F:97: 0x010001
- #6
- keyUsage: true, 6
- basicConstraints
- true
- true: 0
- subjectKeyIdentifier:
e8 c2 f1 c4 32 dc 33 35 37 bc 65 76 f5 9c 17 2e |....2.357.ev....| 17 45 2c fe |.E,. |
- certificatePolicies
- 1.3.6.1.4.1.4146.1.30
- id-qt-cps: http://www.globalsign.net/repository/
- 1.3.6.1.4.1.4146.1.30
- crlDistributionPoints: http://crl.globalsign.net/root.crl
- authorityKeyIdentifier:
60 7b 66 1a 45 0d 97 ca 89 50 2f 7d 04 cd 34 a8 |`{f.E....P/}..4.| ff fc fd 4b |...K |
- RSA-SHA1:
5d f6 cb 2b 0d 01 40 84 9f 85 7a 43 70 6a e0 c5 |]..+..@...zCpj..| e7 aa 06 00 d7 67 13 c9 08 91 31 65 4f 14 a8 a9 |.....g....1eO...| 05 dc 38 9e 6a a0 30 0a bd 8d c7 80 28 ee 42 45 |..8.j.0.....(.BE| ca 94 f3 de 58 45 a9 80 32 04 f5 59 5c 6a 70 00 |....XE..2..Y\jp.| 39 27 94 4d f5 b4 46 34 e8 1c 53 31 b2 b3 54 16 |9'.M..F4..S1..T.| e9 cc 42 ab d5 d9 59 30 1c fb 46 27 25 b8 87 23 |..B...Y0..F'%..#| b1 e8 75 88 24 83 1e c8 76 37 7b 01 49 45 48 a4 |..u.$...v7{.IEH.| ed e2 5d d2 7c 9c a2 dc 2d ba 10 5a 12 62 65 ab |..].|...-..Z.be.| ae 00 c7 10 34 3b cb 72 bd 14 24 0c dc c3 76 27 |....4;.r..$...v'| b4 a7 fe e1 58 29 f2 0e 16 9f 91 39 1d 89 a6 e6 |....X).....9....| 0f 1c 87 8c e2 58 ac 92 7e 24 3e aa ec 14 e7 3a |.....X..~$>....:| 33 34 8b c6 3b ac 83 ab 0f 14 62 7a ba 1a 2d 4d |34..;.....bz..-M| 4b 1b c5 30 f0 0b 92 79 7d 3c 78 e0 f8 e6 d2 15 |K..0...y}
- 2
- Certificate #1
- 2
- 04:00:00:00:00:01:2F:4E:E1:35:5C
- RSA-SHA1: nil
- Issuer
- C: BE
- O: GlobalSign nv-sa
- OU: Root CA
- CN: GlobalSign Root CA
- 2011-04-13 10:00:00 UTC: 2019-04-13 10:00:00 UTC
- Subject
- C: BE
- O: GlobalSign nv-sa
- CN: GlobalSign CodeSigning CA - G2
- #5
- rsaEncryption: nil
- B2:4F:14:E7:10:BE:D7:26:72:AB:36:97:EF:53:BF:42:
84:5E:58:D1:8A:28:FC:43:46:6F:7E:28:44:50:0B:75:
5D:00:D7:3C:0A:44:9E:20:6A:A4:F7:45:4A:37:60:A3:
6E:3F:12:FA:6D:FA:B6:46:C3:6A:A3:B8:0C:27:28:02:
57:28:D1:50:F7:61:39:55:B8:C3:E1:25:86:52:3C:BF:
05:1D:D7:B3:9A:F8:9A:24:31:49:D5:A2:A9:E2:D3:91:
AB:3E:3C:73:EF:F6:29:F1:C8:35:D0:30:7B:7F:4E:92:
A5:06:8F:87:E2:CE:F5:C1:63:66:AC:18:69:2A:C1:5E:
BB:5A:E8:6E:95:FF:3B:80:62:9D:99:C7:C7:2F:66:D5:
FD:62:1A:82:55:5A:C6:FA:40:77:8E:C9:30:3C:1B:F0:
F2:35:B8:6C:59:9C:FD:E9:D6:CA:B4:40:1E:F7:04:CA:
D1:67:A9:74:E3:A5:08:54:D9:83:35:3B:8E:8C:23:0C:
75:B6:DE:86:4A:9E:1A:3E:0A:50:49:38:9C:D2:A8:90:
BF:98:FA:C8:8C:2B:27:11:7E:2A:FB:CE:DE:A9:AE:38:
93:22:FA:A6:EC:FB:5C:61:76:C3:44:D6:CC:0C:7E:2F:
6D:06:80:A2:74:40:BB:B7:1F:F4:3B:D7:73:54:1F:F3: 0x010001
- #6
- keyUsage: true, 6
- basicConstraints
- true
- true: 0
- subjectKeyIdentifier:
08 6e d8 b6 9c 8a bf ed 3e d7 c3 74 5d cc 80 1f |.n......>..t]...| a8 2f 50 7a |./Pz |
- certificatePolicies
- anyPolicy
- id-qt-cps: https://www.globalsign.com/repository/
- anyPolicy
- crlDistributionPoints: http://crl.globalsign.net/root.crl
- extendedKeyUsage: codeSigning
- authorityKeyIdentifier:
60 7b 66 1a 45 0d 97 ca 89 50 2f 7d 04 cd 34 a8 |`{f.E....P/}..4.| ff fc fd 4b |...K |
- RSA-SHA1:
22 5c c5 dd 3d f4 0b 70 d8 e3 f5 e7 c5 8e 09 01 |"\..=..p........| bb b1 96 36 5c 5a 07 ad c7 a8 44 49 51 25 7a ae |...6\Z....DIQ%z.| 0d a4 19 3b 92 9c cf b9 42 26 bb 3b 6c 97 e7 c7 |...;....B&.;l...| ce 11 6d 68 91 da 8d 6d f1 53 4d 54 38 8c 61 f3 |..mh...m.SMT8.a.| c8 82 76 69 be 81 32 0b 31 c3 6c c9 9e 20 0a 58 |..vi..2.1.l.. .X| 2f f0 48 fe 7e 48 07 aa d7 43 58 94 73 54 04 31 |/.H.~H...CX.sT.1| a9 78 0d 3b 8c b0 70 c1 3d 7e d7 bd 2f 2a c3 e2 |.x.;..p.=~../*..| f5 8f 0c 90 dc 6b a5 c8 be 68 5e 5d 6d f8 78 d2 |.....k...h^]m.x.| be 49 95 1e 15 78 08 91 fb 34 c8 be 84 ad bc e0 |.I...x...4......| c6 dd 18 db f3 ca f0 7b c2 14 3c 18 b8 03 ba 95 |.......{..<.....| 3e 21 1e 3f 60 69 7a 7f 6a 03 9e 8d 4a f9 f0 28 |>!.?`iz.j...J..(| 2c 30 84 5e ec 26 72 42 b1 6d cb 64 c3 12 8c d6 |,0.^.&rB.m.d....| 84 4b 67 41 7c b1 03 17 78 09 e3 ad a8 b6 96 2d |.KgA|...x......-| a4 7e 80 03 4f 88 f7 c1 6b 5a 46 15 cd 2c 19 8b |.~..O...kZF..,..| d8 70 9c e5 2d 49 88 60 72 a8 a4 19 52 70 43 5e |.p..-I.`r...RpC^| da d6 46 03 b0 68 0e 24 ef 4a f6 0b 25 24 ef 24 |..F..h.$.J..%$.$|
- 2
- #2
- 2
- 01:00:00:00:00:01:25:B0:B4:CC:01
- RSA-SHA1: nil
- #2
- OU: Timestamping CA
- O: GlobalSign
- CN: GlobalSign Timestamping CA
- 2009-12-21 09:32:56 UTC: 2020-12-22 09:32:56 UTC
- Subject
- C: BE
- O: GlobalSign NV
- CN: GlobalSign Time Stamping Authority
- #5
- rsaEncryption: nil
- CD:C2:3D:5D:77:22:D0:C2:7D:38:32:C3:15:83:1F:42:
6A:3B:53:66:DD:6A:36:44:0D:69:CF:68:8D:89:45:9F:
7E:2F:EE:42:3A:33:7C:3E:00:D3:97:6A:D8:5A:D5:C3:
4D:92:0A:5F:06:50:FD:BF:6C:C4:03:A2:82:60:D8:ED:
52:2E:13:74:DE:97:C6:45:21:7B:55:F6:EA:B1:64:03:
FC:74:6B:B2:5F:C7:6C:6C:43:14:8A:24:10:37:49:95:
81:D2:48:12:A5:A2:76:49:50:21:7F:CA:85:73:0A:3C:
5D:B5:2E:AD:90:AA:5E:4D:32:CB:17:93:D9:7F:96:C0:
C0:89:65:56:D9:C5:B1:3F:98:1B:27:FA:49:EE:1D:1B:
CB:06:8C:30:1C:3B:C5:A7:70:5B:A8:AB:18:5A:FE:C8:
F6:8E:BF:01:5D:8F:61:98:34:0F:58:51:FF:DF:32:EA:
54:65:1C:14:2B:6C:FC:0C:90:19:67:ED:9B:D9:DA:63:
9B:D6:5A:24:A3:74:8E:08:23:00:A1:92:B5:1E:0B:D1:
08:A0:66:7F:92:1B:A3:ED:80:64:02:49:8F:B6:84:EF:
D1:55:8E:5E:A9:97:5A:C5:08:02:88:94:56:BF:92:EB:
2A:2D:06:35:92:B5:37:36:31:EC:C3:FE:7A:3B:C2:85: 0x010001
- #6
- authorityKeyIdentifier:
e8 c2 f1 c4 32 dc 33 35 37 bc 65 76 f5 9c 17 2e |....2.357.ev....| 17 45 2c fe |.E,. |
- crlDistributionPoints: http://crl.globalsign.net/Timestamping1.crl
- subjectKeyIdentifier:
aa aa a6 8a ef a4 64 73 d6 95 e2 79 c8 8f ea cf |......ds...y....| a5 60 29 ca |.`). |
- basicConstraints
- nil
- keyUsage: true, 0x80
- extendedKeyUsage: true, timeStamping
- certificatePolicies
- 1.3.6.1.4.1.4146.1.30
- id-qt-cps: http://www.globalsign.net/repository/
- 1.3.6.1.4.1.4146.1.30
- authorityKeyIdentifier:
- RSA-SHA1:
bc 89 ec fe e6 36 55 93 5c 79 d4 11 7a 86 80 8f |.....6U.\y..z...| 17 b6 93 b2 6d 9b 91 a1 56 18 11 c6 55 ea f6 08 |....m...V...U...| ed ad 9b 9e f5 2b 81 c8 bb dd 60 7b 1b 47 99 1e |.....+....`{.G..| 6d 40 3e 1d 80 c2 13 d5 8e 04 05 2f db e7 ae 52 |m@>......../...R| 9e 68 84 72 a1 e5 4a 60 3c f8 9b d5 2f 46 d8 c3 |.h.r..J`<.../F..| b2 b7 93 53 ac 9b 6c 43 24 24 d1 f1 fc e9 56 2e |...S..lC$$....V.| 34 11 58 18 43 ea ef ff 34 74 6c a0 c0 6c 7f ad |4.X.C...4tl..l..| 03 19 69 88 1e 95 60 ca bb bd 0c bb 76 ef c7 24 |..i...`.....v..$| b0 81 c6 38 31 cf 36 ad 0c 38 b8 90 20 84 9b 2e |...81.6..8.. ...| 8f 28 b9 9f f6 ca 94 27 cd ac 39 61 57 e0 e3 95 |.(.....'..9aW...| 5a 9c 76 92 30 f5 de a6 97 3d 72 1c 2a 60 32 a8 |Z.v.0....=r.*`2.| 33 4d 86 35 33 8a 5c f3 a4 fd f7 06 2c e1 6b 4b |3M.53.\.....,.kK| 30 f5 cb d3 43 62 f8 41 b9 de 7d 20 cb 05 8c 8e |0...Cb.A..} ....| 2c f6 5f 35 fd 33 8d 42 89 65 08 36 2c a3 89 f4 |,._5.3.B.e.6,...| 5a 85 8b b0 b9 7b db 6c cb a1 f8 d2 0e 1b bb 97 |Z....{.l........| 7c d1 27 79 be 9d 7c 3b e6 a7 56 34 d8 c9 91 a9 ||.'y..|;..V4....|
- 2
- Certificate #3
- 2
- 11:21:C5:19:78:F0:ED:63:6C:A3:C5:B5:C4:D3:3D:02:
2C:10 - RSA-SHA1: nil
- Issuer
- C: BE
- O: GlobalSign nv-sa
- CN: GlobalSign CodeSigning CA - G2
- 2012-12-05 21:33:59 UTC: 2016-01-11 15:34:39 UTC
- Subject
- C: US
- ST: WY
- L: Cheyenne
- O: Ultrareach Internet Corp.
- CN: Ultrareach Internet Corp.
- #5
- rsaEncryption: nil
- B2:42:75:85:2F:D2:14:DA:A8:AA:2C:89:0D:BA:74:2D:
97:CC:56:6D:76:68:34:5D:C4:17:FD:61:E8:5C:0C:A6:
CC:00:25:3F:9D:44:2E:A6:13:77:E8:BE:0B:51:8A:DF:
C2:38:0F:77:5A:05:D5:AA:7F:25:A1:69:85:7A:72:B9:
2B:6E:AE:DF:AE:14:23:C8:72:7F:A7:05:B1:1E:C5:4B:
D4:A8:EC:39:D7:33:9B:86:4B:BF:32:42:C5:AB:4E:E2:
89:A3:D7:64:8E:13:3B:70:32:2A:7C:AF:3C:DF:EC:4C:
DC:7B:BA:0E:63:DB:19:DC:DF:47:35:EB:F1:83:1C:B3:
B4:02:77:76:27:F1:CE:64:25:7A:47:5A:84:AF:F5:4F:
7D:6D:C9:7E:0C:26:3E:B0:B4:1D:3A:AF:3F:2D:A9:52:
26:72:8D:71:35:B4:7F:3D:1A:CE:02:7C:E6:2A:CB:64:
0B:E2:EC:20:17:C3:2F:7B:E0:CB:99:9E:C4:56:78:F3:
C3:75:32:06:E5:BA:F8:D7:33:B2:23:10:A8:4D:07:1F:
92:90:8A:0D:76:C2:0C:81:A1:51:2F:47:C7:54:CD:6C:
BC:51:DF:72:9F:B3:77:4A:A0:70:D8:C6:8F:C2:FF:B6:
5D:67:5F:5E:FD:28:28:13:D4:E4:85:96:7F:14:FB:21: 0x010001
- #6
- keyUsage: true, 0x80
- certificatePolicies
- 1.3.6.1.4.1.4146.1.50
- id-qt-cps: https://www.globalsign.com/repository/
- 1.3.6.1.4.1.4146.1.50
- basicConstraints
- nil
- extendedKeyUsage: codeSigning
- crlDistributionPoints: http://crl.globalsign.com/gs/gscodesigng2.crl
- authorityInfoAccess
- caIssuers: http://secure.globalsign.com/cacert/gscodesigng2.crt
- subjectKeyIdentifier:
16 2d af c5 7d ef 55 6d 6a 99 d5 2a ff 25 c3 47 |.-..}.Umj..*.%.G| d8 25 45 50 |.%EP |
- authorityKeyIdentifier:
08 6e d8 b6 9c 8a bf ed 3e d7 c3 74 5d cc 80 1f |.n......>..t]...| a8 2f 50 7a |./Pz |
- 11:21:C5:19:78:F0:ED:63:6C:A3:C5:B5:C4:D3:3D:02:
- RSA-SHA1:
91 3f 2d 37 84 95 ef 6d c3 fa bd 2f a3 7c 1b 21 |.?-7...m.../.|.!| bb f9 46 8f 90 f1 7f 91 a6 6c 4f 14 0e ea b5 39 |..F......lO....9| 91 72 b5 f7 f8 82 2c 84 f6 e3 fd 6d 29 be cb 53 |.r....,....m)..S| 01 6f a5 0b ad 07 13 df 56 ce e5 e0 a7 ff 59 c4 |.o......V.....Y.| 7a d0 6d f6 f5 d3 af d1 77 39 00 21 f0 8d d9 d2 |z.m.....w9.!....| 6c 53 a2 09 a1 c8 d7 1f 32 08 cf 1c 11 67 ef ce |lS......2....g..| cd b9 56 db 8e a0 e5 9d f2 44 92 81 da 4b 72 0f |..V......D...Kr.| 2c 83 b9 38 11 dc 3a 49 f8 40 53 1f 87 57 c6 da |,..8..:I.@S..W..| a3 75 5a 20 40 36 5f 59 9f c5 f8 f8 b7 96 8a 18 |.uZ @6_Y........| f2 d7 b0 41 3b b7 d6 68 59 88 5c fc 09 93 8e 8d |...A;..hY.\.....| 29 9c 4c 11 36 03 7a 6b 6d 0d c3 8d 35 53 f9 34 |).L.6.zkm...5S.4| a5 2e 02 65 c1 7c 78 c3 0b 3c e1 2a 5b 6e d6 fa |...e.|x..<.*[n..| 4b 65 07 16 65 1c bc 9b 18 d1 03 cb 0b 0e 6b bb |Ke..e.........k.| 08 75 b0 9c 9b e1 24 8a aa 41 5a c9 b3 f2 96 9f |.u....$..AZ.....| 09 19 17 7b 12 27 b3 2b 48 72 44 d9 36 cb f7 75 |...{.'.+HrD.6..u| 14 06 90 9a b4 0a 6e 15 1e 56 54 50 61 97 6f 6c |......n..VTPa.ol|
- 2
- Certificate #0
- Signer
- 1
- unnamed
- #0
- C: BE
- O: GlobalSign nv-sa
- CN: GlobalSign CodeSigning CA - G2
- 11:21:C5:19:78:F0:ED:63:6C:A3:C5:B5:C4:D3:3D:02:
2C:10
- #0
- SHA1: nil
- #3
- 1.3.6.1.4.1.311.2.1.12
- nil
- contentType: 1.3.6.1.4.1.311.2.1.4
- 1.3.6.1.4.1.311.2.1.11: msCodeInd
- messageDigest:
a1 c3 d1 54 a1 70 ca f3 3a 87 b1 c0 60 e5 91 7d |...T.p..:...`..}| 94 49 d1 47 |.I.G |
- 1.3.6.1.4.1.311.2.1.12
- rsaEncryption:
47 c2 7b 95 e5 bc 64 ec f7 c1 90 53 60 32 cd bd |G.{...d....S`2..| 86 66 ff 9d 2a 6d 11 84 00 7b 01 e9 d0 e7 46 ee |.f..*m...{....F.| 13 11 d1 ab 40 c3 01 17 be 2b 40 cd fa e6 3c 69 |....@....+@...- countersignature
- 1
- unnamed
- #0
- OU: Timestamping CA
- O: GlobalSign
- CN: GlobalSign Timestamping CA
- 01:00:00:00:00:01:25:B0:B4:CC:01
- #0
- SHA1: nil
- #2
- contentType: pkcs7-data
- signingTime: 2012-12-31 08:09:18 UTC
- messageDigest:
1d e9 c6 6f 62 a1 8d 04 30 50 dd 5f 0c a8 45 9e |...ob...0P._..E.| c2 a0 ef 59 |...Y |
- id-smime-aa-signingCertificate
ae df 7d f7 6b ba 24 10 d6 7d ba f1 8f 5b a1 5b |..}.k.$..}...[.[| 41 7e 49 6c |A~Il |
- unnamed
- #0
- OU: Timestamping CA
- O: GlobalSign
- CN: GlobalSign Timestamping CA
- 01:00:00:00:00:01:25:B0:B4:CC:01
- #0
- unnamed
- rsaEncryption:
ab 54 25 8e 94 21 9b 46 6e e3 71 fc 53 c4 30 b0 |.T%..!.Fn.q.S.0.| 84 a7 6b a0 7b 49 c2 bc b7 13 3c 53 2e 14 25 ec |..k.{I....
- unnamed
- countersignature
| offset | size | type | comment | |
|---|---|---|---|---|
| 0 | 1904640 | EXE | 12/31/2012 07:58:08 | # |
| 15c1 | 15 | HTM | # | |
| 1d1000 | 5736 | PKCS7 | Authenticode Signature | # |
![]() |
| Please donate some bucks to keep this site up and running: | |
| Ko-fi | |
|---|---|
| Yandex.Money | |
| Thank you! | |
[?] can't find file_offset of VA 0x575058
[?] can't find file_offset of VA 0x574f28
[?] can't find file_offset of VA 0x574f90
[?] can't find file_offset of VA 0x575000
[?] can't find file_offset of VA 0x574e68
[?] can't find file_offset of VA 0x573848
[?] can't find file_offset of VA 0x5739b8
[?] can't find file_offset of VA 0x5740e0
[?] can't find file_offset of VA 0x5743a8
[?] can't find file_offset of VA 0x574948
[?] can't find file_offset of VA 0x574ba0
[?] can't find file_offset of VA 0x574de8
[?] can't find file_offset of VA 0x574a60
[?] can't find file_offset of VA 0x575dc0
[?] can't find file_offset of VA 0x575b80
[?] can't find file_offset of VA 0x5758a0
[?] can't find file_offset of VA 0x575f50
[?] can't find file_offset of VA 0x575c08
[?] can't find file_offset of VA 0x575960
offset:( 0x )