filename | SFrame.exe | |
---|---|---|
size | 4202568 (0x402048) | |
md5 | 24643380f530302e55fac91f0a6f16aa | |
type | PE32 executable (GUI) Intel 80386, for MS Windows | |
mimetype | application/x-dosexec | |
clamav | OK | |
virustotal | → scan with virustotal.com | |
histogram |
MZ Header
signature | MZ |
bytes_in_last_block | 0x90 |
blocks_in_file | 3 |
num_relocs | 0 |
header_paragraphs | 4 |
min_extra_paragraphs | 0 |
max_extra_paragraphs | 0xffff |
ss | 0 |
sp | 0xb8 |
checksum | 0 |
ip | 0 |
cs | 0 |
reloc_table_offset | 0x40 |
overlay_number | 2 |
reserved0 | 0 |
oem_id | 0 |
oem_info | 0 |
reserved2 | 0x380c5cf4 |
reserved3 | 0x7ace8f2d |
reserved4 | 0 |
reserved5 | 0x82e91059 |
reserved6 | 0xf3a9383f |
lfanew | 0x138 |
Rich Header
lib id | version | times used |
---|---|---|
0 | 0 | 30 |
126 | 50327 | 10 |
125 | 50727 | 71 |
11 | 8168 | 9 |
93 | 3077 | 2 |
96 | 3077 | 1 |
109 | 50727 | 272 |
114 | 50727 | 1 |
4 | 8447 | 6 |
25 | 9210 | 2 |
95 | 3077 | 36 |
95 | 4035 | 19 |
15 | 4035 | 6 |
96 | 4035 | 146 |
93 | 4035 | 37 |
1 | 0 | 498 |
110 | 50727 | 680 |
124 | 50727 | 1 |
120 | 50727 | 1 |
DOS stub
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
PE Header
Packer / Compiler
Sections
Data Directory
TLS
raw start | raw end | index | callbks | zero fill | flags | |
---|---|---|---|---|---|---|
0xd84000 | 0xd8453c | 0xd4f144 | 0xab2330 | 0 | 0 |
id | lang | string |
---|---|---|
103 | 1042 | 2004-07-15 PD Version - Second Build |
109 | 1042 | SFRAME |
module_name | hint | ord | function_name |
---|---|---|---|
kernel32.dll | GetProcAddress | ||
kernel32.dll | GetModuleHandleA | ||
kernel32.dll | LoadLibraryA | ||
d3d9.dll | Direct3DCreate9 | ||
psapi.dll | GetProcessMemoryInfo | ||
ws2_32.dll | 11 | ||
imm32.dll | ImmGetVirtualKey | ||
version.dll | GetFileVersionInfoSizeA | ||
audiere.dll | _AdrGetSampleSize@4 | ||
devil.dll | ilSetInteger | ||
ilu.dll | iluErrorString | ||
mss32.dll | _AIL_stream_status@4 | ||
user32.dll | GetDlgItem | ||
gdi32.dll | CreateSolidBrush | ||
comdlg32.dll | GetOpenFileNameA | ||
advapi32.dll | RegSetValueExA | ||
shell32.dll | SHGetFolderPathA | ||
ole32.dll | CoCreateInstance | ||
oleaut32.dll | 161 | ||
winmm.dll | timeGetTime | ||
iphlpapi.dll | GetAdaptersInfo | ||
dbghelp.dll | SymGetModuleBase | ||
wininet.dll | InternetOpenA | ||
oleaut32.dll | VariantChangeTypeEx |
Signers (1)
issuer: /C=US/O=Thawte, Inc./CN=Thawte Code Signing CA - G2
serial: 0DF9EE3CFBC6D8DEE0777F9263CE06DF
Certificates (4)
Certificate: Data: Version: 3 (0x2) Serial Number: 7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b Signature Algorithm: sha1WithRSAEncryption Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA Validity Not Before: Dec 21 00:00:00 2012 GMT Not After : Dec 30 23:59:59 2020 GMT Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ac:b3:49:54:4b:97:1c:12:0a:d8:25:79:91: 22:57:2a:6f:dc:b8:26:c4:43:73:6b:c2:bf:2e:50: 5a:fb:14:c2:76:8e:43:01:25:43:b4:a1:e2:45:f4: e8:b7:7b:c3:74:cc:22:d7:b4:94:00:02:f7:4d:ed: bf:b4:b7:44:24:6b:cd:5f:45:3b:d1:44:ce:43:12: 73:17:82:8b:69:b4:2b:cb:99:1e:ac:72:1b:26:4d: 71:1f:b1:31:dd:fb:51:61:02:53:a6:aa:f5:49:2c: 05:78:45:a5:2f:89:ce:e7:99:e7:fe:8c:e2:57:3f: 3d:c6:92:dc:4a:f8:7b:33:e4:79:0a:fb:f0:75:88: 41:9c:ff:c5:03:51:99:aa:d7:6c:9f:93:69:87:65: 29:83:85:c2:60:14:c4:c8:c9:3b:14:da:c0:81:f0: 1f:0d:74:de:92:22:ab:ca:f7:fb:74:7c:27:e6:f7: 4a:1b:7f:a7:c3:9e:2d:ae:8a:ea:a6:e6:aa:27:16: 7d:61:f7:98:71:11:bc:e2:50:a1:4b:e5:5d:fa:e5: 0e:a7:2c:9f:aa:65:20:d3:d8:96:e8:c8:7c:a5:4e: 48:44:ff:19:e2:44:07:92:0b:d7:68:84:80:5d:6a: 78:64:45:cd:60:46:7e:54:c1:13:7c:c5:79:f1:c9: c1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD Authority Information Access: OCSP - URI:http://ocsp.thawte.com X509v3 Basic Constraints: critical CA:TRUE, pathlen:0 X509v3 CRL Distribution Points: Full Name: URI:http://crl.thawte.com/ThawteTimestampingCA.crl X509v3 Extended Key Usage: Time Stamping X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Subject Alternative Name: DirName:/CN=TimeStamp-2048-1 Signature Algorithm: sha1WithRSAEncryption 03:09:9b:8f:79:ef:7f:59:30:aa:ef:68:b5:fa:e3:09:1d:bb: 4f:82:06:5d:37:5f:a6:52:9f:16:8d:ea:1c:92:09:44:6e:f5: 6d:eb:58:7c:30:e8:f9:69:8d:23:73:0b:12:6f:47:a9:ae:39: 11:f8:2a:b1:9b:b0:1a:c3:8e:eb:59:96:00:ad:ce:0c:4d:b2: d0:31:a6:08:5c:2a:7a:fc:e2:7a:1d:57:4c:a8:65:18:e9:79: 40:62:25:96:6e:c7:c7:37:6a:83:21:08:8e:41:ea:dd:d9:57: 3f:1d:77:49:87:2a:16:06:5e:a6:38:6a:22:12:a3:51:19:83: 7e:b6
Certificate: Data: Version: 3 (0x2) Serial Number: 0d:f9:ee:3c:fb:c6:d8:de:e0:77:7f:92:63:ce:06:df Signature Algorithm: sha1WithRSAEncryption Issuer: C=US, O=Thawte, Inc., CN=Thawte Code Signing CA - G2 Validity Not Before: Aug 23 00:00:00 2012 GMT Not After : Aug 23 23:59:59 2014 GMT Subject: C=KR, ST=Seoul, L=Gangnam-gu, O=Gala Lab Corp., OU=Tech Support Headquarters, CN=Gala Lab Corp. Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:31:3c:56:1a:48:a0:de:80:f8:bd:71:40:76: 33:ff:f8:8d:8e:97:c2:b6:3b:e4:2b:35:a6:28:f9: cf:bb:43:14:b5:c2:bf:02:c5:0e:6d:ed:f4:46:ba: bd:e1:b4:0b:85:f7:32:b9:e8:b4:8e:72:ce:86:83: a2:14:97:b7:37:9d:29:1d:4a:f8:41:01:ca:71:57: 35:96:4d:60:8c:44:91:d3:7d:30:97:3f:d1:6c:68: f5:ed:1d:a5:25:ad:8a:ba:90:be:19:a8:f8:51:e2: 59:ae:55:b1:76:27:89:da:41:9b:c5:91:57:d1:df: 03:3c:3c:f7:31:85:bc:52:3a:06:b8:00:a0:54:cf: 93:23:79:00:a1:76:48:f4:48:a5:cc:2d:4d:a5:c3: f1:5d:9f:63:52:ff:1f:6c:8b:13:0a:a1:09:14:01: 5d:38:4b:02:0e:eb:1a:cf:52:6a:3d:47:31:6a:66: 66:b2:d8:14:66:9c:08:35:fe:8b:01:52:c4:a5:e5: 58:1b:c2:51:e8:24:3b:ff:01:6b:4e:84:c6:f9:85: 8e:3a:44:cc:78:df:f8:71:b1:08:49:1c:3b:8a:0e: c9:f5:63:a5:24:1d:8d:aa:f1:4c:a1:83:15:2b:d2: a4:28:67:07:2f:73:ae:f3:60:5e:ef:01:01:c8:0c: 5e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 CRL Distribution Points: Full Name: URI:http://cs-g2-crl.thawte.com/ThawteCSG2.crl X509v3 Extended Key Usage: Code Signing, Microsoft Commercial Code Signing 2.5.29.4: 0.0.0.. +.....7....... Authority Information Access: OCSP - URI:http://ocsp.thawte.com Netscape Cert Type: Object Signing Signature Algorithm: sha1WithRSAEncryption 45:fe:af:60:2d:a8:4e:91:98:31:48:0c:43:1c:a2:55:d3:23: 17:c8:e9:c0:19:62:b4:2d:b9:f0:29:c1:b8:a1:26:91:b1:bb: 5c:a4:0a:6a:8a:0d:9f:2d:0f:8b:3e:f4:e5:12:3d:c2:23:25: 76:50:64:69:06:dd:db:e9:bb:64:ab:72:6c:70:7a:78:a2:a0: 02:75:58:2f:e4:e4:56:45:68:3a:ac:2b:e8:d4:30:2f:f3:d0: 40:e6:59:1b:c0:39:22:92:79:1a:9b:f9:0f:ba:85:49:25:25: 0d:9b:a0:21:a1:d5:c0:1c:90:ea:0b:50:f4:34:14:be:11:c2: 5e:93:55:f9:f0:7d:38:b6:c7:88:70:9a:c7:a9:72:a0:af:8f: 75:7e:d9:be:7f:91:1f:a0:dd:33:8b:24:15:fa:01:47:7f:f8: 34:64:86:be:fa:56:f4:bf:e6:65:d6:e5:49:57:20:6b:2d:07: 08:4e:3b:db:a6:ff:90:93:91:fb:69:64:d8:07:10:60:7a:d5: c2:52:dc:44:6e:bc:28:5a:e7:51:df:85:8d:ee:5f:42:a4:6f: a0:2b:ed:67:08:a1:49:6a:bd:9a:e3:dd:7e:50:d6:63:3b:20: 97:9b:65:ae:56:01:ac:ab:5f:93:57:ff:f2:cb:bb:c1:eb:28: 26:ec:6c:d9
Certificate: Data: Version: 3 (0x2) Serial Number: 47:97:4d:78:73:a5:bc:ab:0d:2f:b3:70:19:2f:ce:5e Signature Algorithm: sha1WithRSAEncryption Issuer: C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2006 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA Validity Not Before: Feb 8 00:00:00 2010 GMT Not After : Feb 7 23:59:59 2020 GMT Subject: C=US, O=Thawte, Inc., CN=Thawte Code Signing CA - G2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8b:cf:75:5b:9f:25:da:7e:39:b0:93:db:38: d3:a9:23:d0:82:fa:e9:24:7e:5c:0b:8e:83:f8:e6: 7a:59:e6:a3:c5:98:a7:99:d2:44:ff:00:a6:a5:39: 04:8a:da:29:88:ea:db:a2:f3:1c:99:15:26:c2:b1: f4:fc:e1:0c:47:a9:09:11:06:0a:20:92:b9:c7:a0: 04:8c:5c:94:19:ab:5b:25:2c:1d:62:7e:70:0d:ce: 61:6c:dd:2b:82:c9:ce:5d:48:5f:f7:c2:be:bc:41: 23:1e:4f:29:5d:d7:4f:bc:f4:c5:2a:fc:63:e6:7c: 26:4e:99:a7:79:41:9e:10:4a:7a:79:c9:c6:86:f7: 86:95:d2:26:ce:3c:18:2a:d6:7c:ce:af:cd:ad:bb: f7:82:2c:70:26:37:45:e5:0f:47:22:c6:01:28:bd: 2e:83:5c:6a:a4:47:c1:e7:d0:d8:6b:81:46:3f:21: 17:f5:07:c5:43:5a:a6:67:2c:b8:7b:60:11:b5:83: ee:f5:74:0a:72:71:44:3d:58:fe:e8:1a:ab:38:c3: 59:db:7f:6e:38:7d:76:c7:72:69:98:36:96:57:d3: 66:1c:d2:54:91:04:2e:54:19:b0:dc:3d:b5:22:5e: 86:d5:2a:7e:20:df:5d:e6:7a:b1:65:fe:c5:02:4e: 31:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE, pathlen:0 X509v3 CRL Distribution Points: Full Name: URI:http://crl.thawte.com/ThawtePCA.crl X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: OCSP - URI:http://ocsp.thawte.com X509v3 Extended Key Usage: TLS Web Client Authentication, Code Signing X509v3 Subject Alternative Name: DirName:/CN=VeriSignMPKI-2-10 X509v3 Subject Key Identifier: D4:0D:65:3F:7A:BD:34:C6:FE:47:E7:4C:0D:C0:BD:F2:DE:15:AB:71 X509v3 Authority Key Identifier: keyid:7B:5B:45:CF:AF:CE:CB:7A:FD:31:92:1A:6A:B6:F3:46:EB:57:48:50 Signature Algorithm: sha1WithRSAEncryption 56:fe:53:5c:e1:c7:9e:bc:a7:ed:7e:53:6d:6a:14:4b:51:8c: 40:5e:80:5f:aa:a4:e8:2f:ef:38:c8:04:c9:ca:3e:cf:df:3a: 58:4e:b0:d4:b6:63:c5:29:57:fa:02:05:9a:45:4d:68:db:2a: 1b:d4:34:3d:9f:00:c3:5a:cb:95:49:a5:6e:e1:b0:c5:fc:41: 4d:41:4a:6f:d3:77:c8:d7:38:8d:e4:19:de:18:f3:1f:15:65: 83:6d:45:0c:53:f9:0a:9a:2e:a5:5d:bf:6f:32:81:18:92:19: 6a:55:00:ad:63:1c:52:06:7e:55:d9:29:68:ae:4a:7c:18:9a: 79:88:6b:23:23:d8:27:38:2a:29:87:76:ca:fb:c7:b6:62:23: 1f:ed:7a:56:4c:dd:9c:32:5b:f5:3d:0c:46:18:95:3b:2a:23: 68:83:64:41:d9:00:6d:0f:19:24:15:68:72:bd:c5:71:67:6e: ac:4c:db:90:eb:51:a5:1a:62:07:d0:be:6a:00:47:3c:72:2f: ec:4f:61:3e:73:85:ce:5a:0a:b7:ba:c0:1c:13:75:e3:22:39: 28:dd:6d:1d:09:46:9d:4f:ba:e8:40:81:91:c6:a4:ce:94:72: 1b:01:cf:2a:6e:15:67:95:89:ae:7d:b7:b7:cd:f9:0a:3d:75: b6:6b:3c:25
Certificate: Data: Version: 3 (0x2) Serial Number: 0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50 Signature Algorithm: sha1WithRSAEncryption Issuer: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2 Validity Not Before: Oct 18 00:00:00 2012 GMT Not After : Dec 29 23:59:59 2020 GMT Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer - G4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:63:0b:39:44:b8:bb:23:a7:44:49:bb:0e:ff: a1:f0:61:0a:53:93:b0:98:db:ad:2c:0f:4a:c5:6e: ff:86:3c:53:55:0f:15:ce:04:3f:2b:fd:a9:96:96: d9:be:61:79:0b:5b:c9:4c:86:76:e5:e0:43:4b:22: 95:ee:c2:2b:43:c1:9f:d8:68:b4:8e:40:4f:ee:85: 38:b9:11:c5:23:f2:64:58:f0:15:32:6f:4e:57:a1: ae:88:a4:02:d7:2a:1e:cd:4b:e1:dd:63:d5:17:89: 32:5b:b0:5e:99:5a:a8:9d:28:50:0e:17:ee:96:db: 61:3b:45:51:1d:cf:12:56:0b:92:47:fc:ab:ae:f6: 66:3d:47:ac:70:72:e7:92:e7:5f:cd:10:b9:c4:83: 64:94:19:bd:25:80:e1:e8:d2:22:a5:d0:ba:02:7a: a1:77:93:5b:65:c3:ee:17:74:bc:41:86:2a:dc:08: 4c:8c:92:8c:91:2d:9e:77:44:1f:68:d6:a8:74:77: db:0e:5b:32:8b:56:8b:33:bd:d9:63:c8:49:9d:3a: c5:c5:ea:33:0b:d2:f1:a3:1b:f4:8b:be:d9:b3:57: 8b:3b:de:04:a7:7a:22:b2:24:ae:2e:c7:70:c5:be: 4e:83:26:08:fb:0b:bd:a9:4f:99:08:e1:10:28:72: aa:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Extended Key Usage: critical Time Stamping X509v3 Key Usage: critical Digital Signature Authority Information Access: OCSP - URI:http://ts-ocsp.ws.symantec.com CA Issuers - URI:http://ts-aia.ws.symantec.com/tss-ca-g2.cer X509v3 CRL Distribution Points: Full Name: URI:http://ts-crl.ws.symantec.com/tss-ca-g2.crl X509v3 Subject Alternative Name: DirName:/CN=TimeStamp-2048-2 X509v3 Subject Key Identifier: 46:C6:69:A3:0E:4A:14:1E:D5:4C:DA:52:63:17:3F:5E:36:BC:0D:E6 X509v3 Authority Key Identifier: keyid:5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD Signature Algorithm: sha1WithRSAEncryption 78:3b:b4:91:2a:00:4c:f0:8f:62:30:37:78:a3:84:27:07:6f: 18:b2:de:25:dc:a0:d4:94:03:aa:86:4e:25:9f:9a:40:03:1c: dd:ce:e3:79:cb:21:68:06:da:b6:32:b4:6d:bf:f4:2c:26:63: 33:e4:49:64:6d:0d:e6:c3:67:0e:f7:05:a4:35:6c:7c:89:16: c6:e9:b2:df:b2:e9:dd:20:c6:71:0f:cd:95:74:dc:b6:5c:de: bd:37:1f:43:78:e6:78:b5:cd:28:04:20:a3:aa:f1:4b:c4:88: 29:91:0e:80:d1:11:fc:dd:5c:76:6e:4f:5e:0e:45:46:41:6e: 0d:b0:ea:38:9a:b1:3a:da:09:71:10:fc:1c:79:b4:80:7b:ac: 69:f4:fd:9c:b6:0c:16:2b:f1:7f:5b:09:3d:9b:5b:e2:16:ca: 13:81:6d:00:2e:38:0d:a8:29:8f:2c:e1:b2:f4:5a:a9:01:af: 15:9c:2c:2f:49:1b:db:22:bb:c3:fe:78:94:51:c3:86:b1:82: 88:5d:f0:3d:b4:51:a1:79:33:2b:2e:7b:b9:dc:20:09:13:71: eb:6a:19:5b:cf:e8:a5:30:57:2c:89:49:3f:b9:cf:7f:c9:bf: 3e:22:68:63:53:9a:bd:69:74:ac:c5:1d:3c:7f:92:e0:c3:bc: 1c:d8:04:75
pkcs7-signedData
- 1
- SHA1: nil
- 1.3.6.1.4.1.311.2.1.4
- #0
- 1.3.6.1.4.1.311.2.1.15
- :
00 3c 00 3c 00 3c 00 4f 00 62 00 73 00 6f 00 6c |.<.<.<.O.b.s.o.l| 00 65 00 74 00 65 00 3e 00 3e 00 3e |.e.t.e.>.>.> |
- :
- SHA1
86 6a bc bf 4a b7 9d ed f9 e8 13 48 78 58 4b 6e |.j..J......HxXKn| 8b b4 33 51 |..3Q |
- 1.3.6.1.4.1.311.2.1.15
- #0
- Certificates
- Certificate #0
- 2
- 7E:93:EB:FB:7C:C6:4E:59:EA:4B:9A:77:D4:06:FC:3B
- RSA-SHA1: nil
- Issuer
- C: ZA
- ST: Western Cape
- L: Durbanville
- O: Thawte
- OU: Thawte Certification
- CN: Thawte Timestamping CA
- 2012-12-21 00:00:00 UTC: 2020-12-30 23:59:59 UTC
- Subject
- C: US
- O: Symantec Corporation
- CN: Symantec Time Stamping Services CA - G2
- #5
- rsaEncryption: nil
- B1:AC:B3:49:54:4B:97:1C:12:0A:D8:25:79:91:22:57:
2A:6F:DC:B8:26:C4:43:73:6B:C2:BF:2E:50:5A:FB:14:
C2:76:8E:43:01:25:43:B4:A1:E2:45:F4:E8:B7:7B:C3:
74:CC:22:D7:B4:94:00:02:F7:4D:ED:BF:B4:B7:44:24:
6B:CD:5F:45:3B:D1:44:CE:43:12:73:17:82:8B:69:B4:
2B:CB:99:1E:AC:72:1B:26:4D:71:1F:B1:31:DD:FB:51:
61:02:53:A6:AA:F5:49:2C:05:78:45:A5:2F:89:CE:E7:
99:E7:FE:8C:E2:57:3F:3D:C6:92:DC:4A:F8:7B:33:E4:
79:0A:FB:F0:75:88:41:9C:FF:C5:03:51:99:AA:D7:6C:
9F:93:69:87:65:29:83:85:C2:60:14:C4:C8:C9:3B:14:
DA:C0:81:F0:1F:0D:74:DE:92:22:AB:CA:F7:FB:74:7C:
27:E6:F7:4A:1B:7F:A7:C3:9E:2D:AE:8A:EA:A6:E6:AA:
27:16:7D:61:F7:98:71:11:BC:E2:50:A1:4B:E5:5D:FA:
E5:0E:A7:2C:9F:AA:65:20:D3:D8:96:E8:C8:7C:A5:4E:
48:44:FF:19:E2:44:07:92:0B:D7:68:84:80:5D:6A:78:
64:45:CD:60:46:7E:54:C1:13:7C:C5:79:F1:C9:C1:71: 0x010001
- #6
- subjectKeyIdentifier:
5f 9a f5 6e 5c cc cc 74 9a d4 dd 7d ef 3f db ec |_..n\..t...}.?..| 4c 80 2e dd |L... |
- authorityInfoAccess
- OCSP: http://ocsp.thawte.com
- basicConstraints
- true
- true: 0
- crlDistributionPoints: http://crl.thawte.com/ThawteTimestampingCA.crl
- extendedKeyUsage: timeStamping
- keyUsage: true, 6
- subjectAltName
- CN: TimeStamp-2048-1
- subjectKeyIdentifier:
- RSA-SHA1:
03 09 9b 8f 79 ef 7f 59 30 aa ef 68 b5 fa e3 09 |....y..Y0..h....| 1d bb 4f 82 06 5d 37 5f a6 52 9f 16 8d ea 1c 92 |..O..]7_.R......| 09 44 6e f5 6d eb 58 7c 30 e8 f9 69 8d 23 73 0b |.Dn.m.X|0..i.#s.| 12 6f 47 a9 ae 39 11 f8 2a b1 9b b0 1a c3 8e eb |.oG..9..*.......| 59 96 00 ad ce 0c 4d b2 d0 31 a6 08 5c 2a 7a fc |Y.....M..1..\*z.| e2 7a 1d 57 4c a8 65 18 e9 79 40 62 25 96 6e c7 |.z.WL.e..y@b%.n.| c7 37 6a 83 21 08 8e 41 ea dd d9 57 3f 1d 77 49 |.7j.!..A...W?.wI| 87 2a 16 06 5e a6 38 6a 22 12 a3 51 19 83 7e b6 |.*..^.8j"..Q..~.|
- 2
- Certificate #1
- 2
- 0D:F9:EE:3C:FB:C6:D8:DE:E0:77:7F:92:63:CE:06:DF
- RSA-SHA1: nil
- Issuer
- C: US
- O: Thawte, Inc.
- CN: Thawte Code Signing CA - G2
- 2012-08-23 00:00:00 UTC: 2014-08-23 23:59:59 UTC
- Subject
- C: KR
- ST: Seoul
- L: Gangnam-gu
- O: Gala Lab Corp.
- OU: Tech Support Headquarters
- CN: Gala Lab Corp.
- #5
- rsaEncryption: nil
- A0:31:3C:56:1A:48:A0:DE:80:F8:BD:71:40:76:33:FF:
F8:8D:8E:97:C2:B6:3B:E4:2B:35:A6:28:F9:CF:BB:43:
14:B5:C2:BF:02:C5:0E:6D:ED:F4:46:BA:BD:E1:B4:0B:
85:F7:32:B9:E8:B4:8E:72:CE:86:83:A2:14:97:B7:37:
9D:29:1D:4A:F8:41:01:CA:71:57:35:96:4D:60:8C:44:
91:D3:7D:30:97:3F:D1:6C:68:F5:ED:1D:A5:25:AD:8A:
BA:90:BE:19:A8:F8:51:E2:59:AE:55:B1:76:27:89:DA:
41:9B:C5:91:57:D1:DF:03:3C:3C:F7:31:85:BC:52:3A:
06:B8:00:A0:54:CF:93:23:79:00:A1:76:48:F4:48:A5:
CC:2D:4D:A5:C3:F1:5D:9F:63:52:FF:1F:6C:8B:13:0A:
A1:09:14:01:5D:38:4B:02:0E:EB:1A:CF:52:6A:3D:47:
31:6A:66:66:B2:D8:14:66:9C:08:35:FE:8B:01:52:C4:
A5:E5:58:1B:C2:51:E8:24:3B:FF:01:6B:4E:84:C6:F9:
85:8E:3A:44:CC:78:DF:F8:71:B1:08:49:1C:3B:8A:0E:
C9:F5:63:A5:24:1D:8D:AA:F1:4C:A1:83:15:2B:D2:A4:
28:67:07:2F:73:AE:F3:60:5E:EF:01:01:C8:0C:5E:15: 0x010001
- X509v3 extensions
- basicConstraints
- true
- nil
- crlDistributionPoints: http://cs-g2-crl.thawte.com/ThawteCSG2.crl
- extendedKeyUsage
- codeSigning: msCodeCom
- 2.5.29.4
- msCodeCom: 0x80
- authorityInfoAccess
- OCSP: http://ocsp.thawte.com
- nsCertType: 0x10
- basicConstraints
- RSA-SHA1:
45 fe af 60 2d a8 4e 91 98 31 48 0c 43 1c a2 55 |E..`-.N..1H.C..U| d3 23 17 c8 e9 c0 19 62 b4 2d b9 f0 29 c1 b8 a1 |.#.....b.-..)...| 26 91 b1 bb 5c a4 0a 6a 8a 0d 9f 2d 0f 8b 3e f4 |&...\..j...-..>.| e5 12 3d c2 23 25 76 50 64 69 06 dd db e9 bb 64 |..=.#%vPdi.....d| ab 72 6c 70 7a 78 a2 a0 02 75 58 2f e4 e4 56 45 |.rlpzx...uX/..VE| 68 3a ac 2b e8 d4 30 2f f3 d0 40 e6 59 1b c0 39 |h:.+..0/..@.Y..9| 22 92 79 1a 9b f9 0f ba 85 49 25 25 0d 9b a0 21 |".y......I%%...!| a1 d5 c0 1c 90 ea 0b 50 f4 34 14 be 11 c2 5e 93 |.......P.4....^.| 55 f9 f0 7d 38 b6 c7 88 70 9a c7 a9 72 a0 af 8f |U..}8...p...r...| 75 7e d9 be 7f 91 1f a0 dd 33 8b 24 15 fa 01 47 |u~.......3.$...G| 7f f8 34 64 86 be fa 56 f4 bf e6 65 d6 e5 49 57 |..4d...V...e..IW| 20 6b 2d 07 08 4e 3b db a6 ff 90 93 91 fb 69 64 | k-..N;.......id| d8 07 10 60 7a d5 c2 52 dc 44 6e bc 28 5a e7 51 |...`z..R.Dn.(Z.Q| df 85 8d ee 5f 42 a4 6f a0 2b ed 67 08 a1 49 6a |...._B.o.+.g..Ij| bd 9a e3 dd 7e 50 d6 63 3b 20 97 9b 65 ae 56 01 |....~P.c; ..e.V.| ac ab 5f 93 57 ff f2 cb bb c1 eb 28 26 ec 6c d9 |.._.W......(&.l.|
- 2
- Certificate #2
- 2
- 47:97:4D:78:73:A5:BC:AB:0D:2F:B3:70:19:2F:CE:5E
- RSA-SHA1: nil
- Issuer
- C: US
- O: thawte, Inc.
- OU: Certification Services Division
- OU: (c) 2006 thawte, Inc. - For authorized use only
- CN: thawte Primary Root CA
- 2010-02-08 00:00:00 UTC: 2020-02-07 23:59:59 UTC
- Subject
- C: US
- O: Thawte, Inc.
- CN: Thawte Code Signing CA - G2
- #5
- rsaEncryption: nil
- B7:8B:CF:75:5B:9F:25:DA:7E:39:B0:93:DB:38:D3:A9:
23:D0:82:FA:E9:24:7E:5C:0B:8E:83:F8:E6:7A:59:E6:
A3:C5:98:A7:99:D2:44:FF:00:A6:A5:39:04:8A:DA:29:
88:EA:DB:A2:F3:1C:99:15:26:C2:B1:F4:FC:E1:0C:47:
A9:09:11:06:0A:20:92:B9:C7:A0:04:8C:5C:94:19:AB:
5B:25:2C:1D:62:7E:70:0D:CE:61:6C:DD:2B:82:C9:CE:
5D:48:5F:F7:C2:BE:BC:41:23:1E:4F:29:5D:D7:4F:BC:
F4:C5:2A:FC:63:E6:7C:26:4E:99:A7:79:41:9E:10:4A:
7A:79:C9:C6:86:F7:86:95:D2:26:CE:3C:18:2A:D6:7C:
CE:AF:CD:AD:BB:F7:82:2C:70:26:37:45:E5:0F:47:22:
C6:01:28:BD:2E:83:5C:6A:A4:47:C1:E7:D0:D8:6B:81:
46:3F:21:17:F5:07:C5:43:5A:A6:67:2C:B8:7B:60:11:
B5:83:EE:F5:74:0A:72:71:44:3D:58:FE:E8:1A:AB:38:
C3:59:DB:7F:6E:38:7D:76:C7:72:69:98:36:96:57:D3:
66:1C:D2:54:91:04:2E:54:19:B0:DC:3D:B5:22:5E:86:
D5:2A:7E:20:DF:5D:E6:7A:B1:65:FE:C5:02:4E:31:2D: 0x010001
- X509v3 extensions
- basicConstraints
- true
- true: 0
- crlDistributionPoints: http://crl.thawte.com/ThawtePCA.crl
- keyUsage: true, 6
- authorityInfoAccess
- OCSP: http://ocsp.thawte.com
- extendedKeyUsage
- clientAuth: codeSigning
- subjectAltName
- CN: VeriSignMPKI-2-10
- subjectKeyIdentifier:
d4 0d 65 3f 7a bd 34 c6 fe 47 e7 4c 0d c0 bd f2 |..e?z.4..G.L....| de 15 ab 71 |...q |
- authorityKeyIdentifier:
7b 5b 45 cf af ce cb 7a fd 31 92 1a 6a b6 f3 46 |{[E....z.1..j..F| eb 57 48 50 |.WHP |
- basicConstraints
- RSA-SHA1:
56 fe 53 5c e1 c7 9e bc a7 ed 7e 53 6d 6a 14 4b |V.S\......~Smj.K| 51 8c 40 5e 80 5f aa a4 e8 2f ef 38 c8 04 c9 ca |Q.@^._.../.8....| 3e cf df 3a 58 4e b0 d4 b6 63 c5 29 57 fa 02 05 |>..:XN...c.)W...| 9a 45 4d 68 db 2a 1b d4 34 3d 9f 00 c3 5a cb 95 |.EMh.*..4=...Z..| 49 a5 6e e1 b0 c5 fc 41 4d 41 4a 6f d3 77 c8 d7 |I.n....AMAJo.w..| 38 8d e4 19 de 18 f3 1f 15 65 83 6d 45 0c 53 f9 |8........e.mE.S.| 0a 9a 2e a5 5d bf 6f 32 81 18 92 19 6a 55 00 ad |....].o2....jU..| 63 1c 52 06 7e 55 d9 29 68 ae 4a 7c 18 9a 79 88 |c.R.~U.)h.J|..y.| 6b 23 23 d8 27 38 2a 29 87 76 ca fb c7 b6 62 23 |k##.'8*).v....b#| 1f ed 7a 56 4c dd 9c 32 5b f5 3d 0c 46 18 95 3b |..zVL..2[.=.F..;| 2a 23 68 83 64 41 d9 00 6d 0f 19 24 15 68 72 bd |*#h.dA..m..$.hr.| c5 71 67 6e ac 4c db 90 eb 51 a5 1a 62 07 d0 be |.qgn.L...Q..b...| 6a 00 47 3c 72 2f ec 4f 61 3e 73 85 ce 5a 0a b7 |j.G
s..Z..| ba c0 1c 13 75 e3 22 39 28 dd 6d 1d 09 46 9d 4f |....u."9(.m..F.O| ba e8 40 81 91 c6 a4 ce 94 72 1b 01 cf 2a 6e 15 |..@......r...*n.| 67 95 89 ae 7d b7 b7 cd f9 0a 3d 75 b6 6b 3c 25 |g...}.....=u.k<%|
- 2
- Certificate #3
- 2
- 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
- RSA-SHA1: nil
- Issuer
- C: US
- O: Symantec Corporation
- CN: Symantec Time Stamping Services CA - G2
- 2012-10-18 00:00:00 UTC: 2020-12-29 23:59:59 UTC
- Subject
- C: US
- O: Symantec Corporation
- CN: Symantec Time Stamping Services Signer - G4
- #5
- rsaEncryption: nil
- A2:63:0B:39:44:B8:BB:23:A7:44:49:BB:0E:FF:A1:F0:
61:0A:53:93:B0:98:DB:AD:2C:0F:4A:C5:6E:FF:86:3C:
53:55:0F:15:CE:04:3F:2B:FD:A9:96:96:D9:BE:61:79:
0B:5B:C9:4C:86:76:E5:E0:43:4B:22:95:EE:C2:2B:43:
C1:9F:D8:68:B4:8E:40:4F:EE:85:38:B9:11:C5:23:F2:
64:58:F0:15:32:6F:4E:57:A1:AE:88:A4:02:D7:2A:1E:
CD:4B:E1:DD:63:D5:17:89:32:5B:B0:5E:99:5A:A8:9D:
28:50:0E:17:EE:96:DB:61:3B:45:51:1D:CF:12:56:0B:
92:47:FC:AB:AE:F6:66:3D:47:AC:70:72:E7:92:E7:5F:
CD:10:B9:C4:83:64:94:19:BD:25:80:E1:E8:D2:22:A5:
D0:BA:02:7A:A1:77:93:5B:65:C3:EE:17:74:BC:41:86:
2A:DC:08:4C:8C:92:8C:91:2D:9E:77:44:1F:68:D6:A8:
74:77:DB:0E:5B:32:8B:56:8B:33:BD:D9:63:C8:49:9D:
3A:C5:C5:EA:33:0B:D2:F1:A3:1B:F4:8B:BE:D9:B3:57:
8B:3B:DE:04:A7:7A:22:B2:24:AE:2E:C7:70:C5:BE:4E:
83:26:08:FB:0B:BD:A9:4F:99:08:E1:10:28:72:AA:CD: 0x010001
- X509v3 extensions
- basicConstraints
- true
- nil
- extendedKeyUsage: true, timeStamping
- keyUsage: true, 0x80
- authorityInfoAccess
- #0
- OCSP: http://ts-ocsp.ws.symantec.com
- caIssuers: http://ts-aia.ws.symantec.com/tss-ca-g2.cer
- #0
- crlDistributionPoints: http://ts-crl.ws.symantec.com/tss-ca-g2.crl
- subjectAltName
- CN: TimeStamp-2048-2
- subjectKeyIdentifier:
46 c6 69 a3 0e 4a 14 1e d5 4c da 52 63 17 3f 5e |F.i..J...L.Rc.?^| 36 bc 0d e6 |6... |
- authorityKeyIdentifier:
5f 9a f5 6e 5c cc cc 74 9a d4 dd 7d ef 3f db ec |_..n\..t...}.?..| 4c 80 2e dd |L... |
- basicConstraints
- RSA-SHA1:
78 3b b4 91 2a 00 4c f0 8f 62 30 37 78 a3 84 27 |x;..*.L..b07x..'| 07 6f 18 b2 de 25 dc a0 d4 94 03 aa 86 4e 25 9f |.o...%.......N%.| 9a 40 03 1c dd ce e3 79 cb 21 68 06 da b6 32 b4 |.@.....y.!h...2.| 6d bf f4 2c 26 63 33 e4 49 64 6d 0d e6 c3 67 0e |m..,&c3.Idm...g.| f7 05 a4 35 6c 7c 89 16 c6 e9 b2 df b2 e9 dd 20 |...5l|......... | c6 71 0f cd 95 74 dc b6 5c de bd 37 1f 43 78 e6 |.q...t..\..7.Cx.| 78 b5 cd 28 04 20 a3 aa f1 4b c4 88 29 91 0e 80 |x..(. ...K..)...| d1 11 fc dd 5c 76 6e 4f 5e 0e 45 46 41 6e 0d b0 |....\vnO^.EFAn..| ea 38 9a b1 3a da 09 71 10 fc 1c 79 b4 80 7b ac |.8..:..q...y..{.| 69 f4 fd 9c b6 0c 16 2b f1 7f 5b 09 3d 9b 5b e2 |i......+..[.=.[.| 16 ca 13 81 6d 00 2e 38 0d a8 29 8f 2c e1 b2 f4 |....m..8..).,...| 5a a9 01 af 15 9c 2c 2f 49 1b db 22 bb c3 fe 78 |Z.....,/I.."...x| 94 51 c3 86 b1 82 88 5d f0 3d b4 51 a1 79 33 2b |.Q.....].=.Q.y3+| 2e 7b b9 dc 20 09 13 71 eb 6a 19 5b cf e8 a5 30 |.{.. ..q.j.[...0| 57 2c 89 49 3f b9 cf 7f c9 bf 3e 22 68 63 53 9a |W,.I?.....>"hcS.| bd 69 74 ac c5 1d 3c 7f 92 e0 c3 bc 1c d8 04 75 |.it...<........u|
- 2
- Certificate #0
- 1
- unnamed
- #0
- C: US
- O: Thawte, Inc.
- CN: Thawte Code Signing CA - G2
- 0D:F9:EE:3C:FB:C6:D8:DE:E0:77:7F:92:63:CE:06:DF
- #0
- SHA1: nil
- #2
- contentType: 1.3.6.1.4.1.311.2.1.4
- 1.3.6.1.4.1.311.2.1.11: msCodeCom
- messageDigest:
4d df 57 5e c5 bd cb 59 2b 31 05 84 a9 2e c9 aa |M.W^...Y+1......| df 93 16 3a |...: |
- 1.3.6.1.4.1.311.2.1.12
00 52 00 61 00 70 00 70 00 65 00 6c 00 7a |.R.a.p.p.e.l.z |
: http://www.galalab.kr
- rsaEncryption:
00 52 2c ea 46 b4 44 d4 6a 95 a2 67 bf 5c 92 b3 |.R,.F.D.j..g.\..| 15 ce c4 64 cc 27 c3 80 be 9c 1b 90 fc 25 c3 a6 |...d.'.......%..| 4e 1e 1c 8c a2 ee 43 ce d6 58 03 af 56 d4 8b a2 |N.....C..X..V...| 02 10 59 2e 21 f8 30 2b 72 56 4c 6f c8 a1 ec 98 |..Y.!.0+rVLo....| 91 f8 69 63 20 ae fb 11 20 05 e5 07 08 c2 c4 86 |..ic ... .......| b7 aa ce 28 8b d1 c2 a0 bb 3e 65 b0 68 57 4e 98 |...(.....>e.hWN.| 5b 5f f3 ff e3 b2 66 24 35 aa 93 f8 5a 08 81 81 |[_....f$5...Z...| 9d dc b0 0f 42 58 ed 54 e5 39 f1 50 b1 f1 e5 90 |....BX.T.9.P....| 9a 31 8b 33 3f fc 83 82 e8 6b 5b 46 2d 83 b0 cd |.1.3?....k[F-...| e4 c3 91 c2 7b 8b 8b bc ae ac 48 4b e7 61 2f 1d |....{.....HK.a/.| 25 1c bf a2 df c2 3d 2a 44 82 83 d3 b0 6b e9 dc |%.....=*D....k..| 9c 66 55 ad 7c c5 fb d3 21 81 e3 aa fd 52 01 1a |.fU.|...!....R..| 96 ab 3f 2a 5a d3 e3 4e 0f fe 71 f0 85 e3 1e 4e |..?*Z..N..q....N| a4 1c d3 f4 5f 68 90 2f 28 da 85 7f 95 78 37 20 |...._h./(....x7 | 33 05 32 86 c4 74 9f 8a c7 23 f7 70 9f 36 0e c5 |3.2..t...#.p.6..| 08 64 e8 ac 21 16 76 94 c4 df 14 63 b4 61 fe 63 |.d..!.v....c.a.c|
- countersignature
- 1
- unnamed
- #0
- C: US
- O: Symantec Corporation
- CN: Symantec Time Stamping Services CA - G2
- 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
- #0
- SHA1: nil
- #2
- contentType: pkcs7-data
- signingTime: 2013-01-22 06:01:41 UTC
- messageDigest:
5f b9 83 3a 09 6f 1b 85 ee 0e c7 54 3b ed 8d 10 |_..:.o.....T;...| 84 0d 3a 35 |..:5 |
- rsaEncryption:
56 ed db 28 74 71 c1 76 4b 08 26 b5 99 fe 55 15 |V..(tq.vK.&...U.| 51 04 78 8a 87 86 9a d8 da 45 64 ff f1 5c 8a 35 |Q.x......Ed..\.5| 9d fe 01 5f 1f e3 5d ca 42 6b 31 35 5f f6 dd e8 |..._..].Bk15_...| 40 c7 82 7d c8 82 c7 da 40 2f a7 91 55 1c 27 ce |@..}....@/..U.'.| 49 21 45 92 d4 35 16 09 16 16 33 41 90 53 b8 b7 |I!E..5....3A.S..| 7b 2c a8 2a 99 6e 66 ec 8d 8c fe c9 66 a7 13 75 |{,.*.nf.....f..u| 59 a3 e3 ce 42 a7 a4 b5 0a 41 92 1d db 84 81 7f |Y...B....A......| 6c 31 ec 40 5d 3f c8 6a 0a 08 5b 93 92 25 f7 50 |l1.@]?.j..[..%.P| 35 24 82 27 f5 a9 18 52 ac cf b1 70 c7 cd aa 9d |5$.'...R...p....| 36 95 9e ed 1c 0d 09 ae b1 48 55 62 e8 54 e1 cd |6........HUb.T..| 65 5a 87 ca 6e 42 e5 3f ec 98 26 85 68 d4 8b 2e |eZ..nB.?..&.h...| b2 a7 6b 7b 70 c8 49 dd b8 72 86 e3 c6 4f 8a b9 |..k{p.I..r...O..| 9d 84 e3 03 c2 71 82 07 d2 7f 79 26 3b d9 4e 71 |.....q....y&;.Nq| b9 c0 22 4e 95 29 7f 47 22 5c 8e 3c 30 c3 c0 c7 |.."N.).G"\.<0...| c0 c5 b8 69 38 8d ef 7f 1d 69 7d 76 68 a5 ff f1 |...i8....i}vh...| cf a9 3f 58 ba 04 78 4b 00 81 25 e3 8e 93 e6 05 |..?X..xK..%.....|
- unnamed
- 1
- unnamed
Please donate some bucks to keep this site up and running: | |
Ko-fi | |
---|---|
Yandex.Money | |
Thank you! |
[?] can't find file_offset of VA 0x94f144
[?] can't find file_offset of VA 0x0