| filename | ocevogyv.dll | |
|---|---|---|
| size | 4194416 (0x400070) | |
| md5 | 49768f01b009dd6a17235d6838f43a1d | |
| type | PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, UPX compressed | |
| mimetype | application/x-dosexec | |
| clamav | OK | |
| virustotal | → scan with virustotal.com | |
| histogram | ||
MZ Header
| signature | MZ |
| bytes_in_last_block | 0x90 |
| blocks_in_file | 3 |
| num_relocs | 0 |
| header_paragraphs | 4 |
| min_extra_paragraphs | 0 |
| max_extra_paragraphs | 0xffff |
| ss | 0 |
| sp | 0xb8 |
| checksum | 0 |
| ip | 0 |
| cs | 0 |
| reloc_table_offset | 0x40 |
| overlay_number | 0 |
| reserved0 | 0 |
| oem_id | 0 |
| oem_info | 0 |
| reserved2 | 0 |
| reserved3 | 0 |
| reserved4 | 0 |
| reserved5 | 0 |
| reserved6 | 0 |
| lfanew | 0x108 |
Rich Header
| lib id | version | times used |
|---|---|---|
| 126 | 50327 | 2 |
| 125 | 50727 | 27 |
| 109 | 50727 | 154 |
| 170 | 30319 | 7 |
| 93 | 4035 | 20 |
| 147 | 30729 | 3 |
| 1 | 0 | 299 |
| 171 | 30319 | 45 |
| 0 | 0 | 1 |
| 110 | 50727 | 96 |
| 122 | 50727 | 1 |
| 124 | 50727 | 1 |
| 120 | 50727 | 1 |
DOS stub
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
PE Header
Packer / Compiler
This file is packed with UPX. Analysis will be incomplete without unpacking. |
Sections
| name | va | vsize | raw size | flags | |
|---|---|---|---|---|---|
| UPX0 | 0x1000 | 0x437000 | 0 | RWX UDATA | |
| UPX1 | 0x438000 | 0x3ff000 | 0x3fe400 | RWX IDATA | |
| .rsrc | 0x837000 | 0x1000 | 0xa00 | RW- IDATA |
Data Directory
TLS
| raw start | raw end | index | callbks | zero fill | flags | |
|---|---|---|---|---|---|---|
| 0x10836384 | 0x10836390 | 0x1081e378 | 0 | 0 | 0 |
| module_name | hint | ord | function_name |
|---|---|---|---|
| KERNEL32.DLL | LoadLibraryA | ||
| KERNEL32.DLL | GetProcAddress | ||
| KERNEL32.DLL | VirtualProtect | ||
| KERNEL32.DLL | VirtualAlloc | ||
| KERNEL32.DLL | VirtualFree | ||
| ADVAPI32.dll | RegCloseKey | ||
| COMCTL32.dll | 17 | ||
| iphlpapi.dll | GetAdaptersInfo | ||
| SHLWAPI.dll | PathFileExistsW | ||
| USER32.dll | MessageBoxW | ||
| VERSION.dll | VerQueryValueW |
| ord | entry_va | function_name | |
|---|---|---|---|
| 1 | 0x356bd5 | PSM_0 | |
| 2 | 0x86b2 | PSA_DummyFunction | |
| 3 | 0x4e79 | PSA_Uninitialize | |
| 4 | 0x55b3 | PSC_EnterGlobalCriticalSection | |
| 5 | 0x51a2 | PSC_FinishInitializationFailure | |
| 6 | 0x511c | PSC_FinishInitializationSuccess | |
| 7 | 0x533c | PSC_GetErrorInformation | |
| 8 | 0x561b | PSC_LeaveGlobalCriticalSection | |
| 9 | 0x5705 | PSC_LoadString | |
| 10 | 0x52d4 | PSC_PerformInitializationAtValidLicense | |
| 11 | 0x500b | PSC_StartInitialization | |
| 12 | 0x5241 | PSC_Uninitialize | |
| 13 | 0x819480 | ProtectSdkVersion |
StringTable 040904E4
| CompanyName | Crytek Unkraine LLC |
| FileDescription | Host Library |
| FileVersion | 5.91.1807.284 |
| InternalName | ocevogyv.dll |
| LegalCopyright | (c) Crytek Unkraine LLC |
| OriginalFilename | ocevogyv.dll |
| ProductName | Warface |
| ProductVersion | 1, 18000, 944, 21500 |
| BuildInfo | 5.91.1807.284, 26.09.18 |
| ProjectGuidHash | D509A45A3BB8B710C411E95055EC802C |
| ActionGuid | {890c0092-8757-4213-9862-c538f852bac8} |
| TradeName | SF MMOG |
VS_FIXEDFILEINFO
| FileVersion | 5.91.1807.284 |
| ProductVersion | 0.0.0.0 |
| StrucVersion | 0x10000 |
| FileFlagsMask | 0x3f |
| FileFlags | 0 |
| FileOS | 0x40004 |
| FileType | 2 |
| FileSubtype | 0 |
Signers (1)
issuer: /CN=mail.ru
serial: 2F2D50DDFE9C6BBD475BF8B9EFC218FC
Certificates (3)
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:2d:50:dd:fe:9c:6b:bd:47:5b:f8:b9:ef:c2:18:fc
Signature Algorithm: sha1WithRSA
Issuer: CN=mail.ru
Validity
Not Before: Mar 1 08:28:47 2016 GMT
Not After : Dec 31 23:59:59 2039 GMT
Subject: CN=mail.ru
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (1024 bit)
Modulus:
00:af:94:9e:06:c1:ac:9f:aa:14:74:4e:5c:9f:2d:
6f:09:6b:20:fa:b9:32:40:0c:fb:ab:1b:17:73:e3:
57:71:54:99:74:6f:4a:75:b1:79:d7:dc:a9:81:74:
8c:63:f1:95:8b:15:c1:5b:90:fa:94:88:91:cc:d7:
83:fe:2d:40:94:2d:d8:58:e8:5e:9e:b1:a4:31:7b:
9c:d5:6c:aa:6c:2d:34:ed:ae:7c:f8:e5:e2:a4:bb:
b9:df:0f:95:17:70:50:10:2c:69:05:ad:ea:67:a3:
02:64:bd:7d:f6:b8:01:8b:88:fa:19:98:9b:82:13:
dd:ee:83:cc:c8:04:02:64:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
2.5.29.1:
0:....l.l....vZ$.No0..0.1.0...U....mail.ru../-P...k.G[......
Signature Algorithm: sha1WithRSA
Signature Value:
38:cf:5d:3f:77:43:58:e0:e2:4d:c3:62:d1:15:d1:db:52:c9:
a7:9e:1b:4a:ee:00:cf:e3:c8:3e:a6:3d:dd:6d:14:0a:75:29:
f7:e3:52:ce:79:8d:e8:23:00:f3:16:18:0f:c3:f2:71:3a:fe:
4a:b4:5e:b2:39:43:62:4c:42:6f:4c:9f:25:9b:33:8b:7b:c1:
6b:79:e3:b9:2c:e2:b7:4c:4e:fe:48:c7:da:a0:ed:19:30:ef:
06:00:82:43:47:d8:d3:7d:02:7d:5d:51:b7:73:45:39:cd:57:
4e:86:8c:57:cc:13:d8:23:3d:92:2b:9a:af:ec:30:06:7b:df:
6a:de
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Signature Algorithm: sha1WithRSAEncryption
Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
Validity
Not Before: Dec 21 00:00:00 2012 GMT
Not After : Dec 30 23:59:59 2020 GMT
Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:b1:ac:b3:49:54:4b:97:1c:12:0a:d8:25:79:91:
22:57:2a:6f:dc:b8:26:c4:43:73:6b:c2:bf:2e:50:
5a:fb:14:c2:76:8e:43:01:25:43:b4:a1:e2:45:f4:
e8:b7:7b:c3:74:cc:22:d7:b4:94:00:02:f7:4d:ed:
bf:b4:b7:44:24:6b:cd:5f:45:3b:d1:44:ce:43:12:
73:17:82:8b:69:b4:2b:cb:99:1e:ac:72:1b:26:4d:
71:1f:b1:31:dd:fb:51:61:02:53:a6:aa:f5:49:2c:
05:78:45:a5:2f:89:ce:e7:99:e7:fe:8c:e2:57:3f:
3d:c6:92:dc:4a:f8:7b:33:e4:79:0a:fb:f0:75:88:
41:9c:ff:c5:03:51:99:aa:d7:6c:9f:93:69:87:65:
29:83:85:c2:60:14:c4:c8:c9:3b:14:da:c0:81:f0:
1f:0d:74:de:92:22:ab:ca:f7:fb:74:7c:27:e6:f7:
4a:1b:7f:a7:c3:9e:2d:ae:8a:ea:a6:e6:aa:27:16:
7d:61:f7:98:71:11:bc:e2:50:a1:4b:e5:5d:fa:e5:
0e:a7:2c:9f:aa:65:20:d3:d8:96:e8:c8:7c:a5:4e:
48:44:ff:19:e2:44:07:92:0b:d7:68:84:80:5d:6a:
78:64:45:cd:60:46:7e:54:c1:13:7c:c5:79:f1:c9:
c1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD
Authority Information Access:
OCSP - URI:http://ocsp.thawte.com
X509v3 Basic Constraints: critical
CA:TRUE, pathlen:0
X509v3 CRL Distribution Points:
Full Name:
URI:http://crl.thawte.com/ThawteTimestampingCA.crl
X509v3 Extended Key Usage:
Time Stamping
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Subject Alternative Name:
DirName:/CN=TimeStamp-2048-1
Signature Algorithm: sha1WithRSAEncryption
Signature Value:
03:09:9b:8f:79:ef:7f:59:30:aa:ef:68:b5:fa:e3:09:1d:bb:
4f:82:06:5d:37:5f:a6:52:9f:16:8d:ea:1c:92:09:44:6e:f5:
6d:eb:58:7c:30:e8:f9:69:8d:23:73:0b:12:6f:47:a9:ae:39:
11:f8:2a:b1:9b:b0:1a:c3:8e:eb:59:96:00:ad:ce:0c:4d:b2:
d0:31:a6:08:5c:2a:7a:fc:e2:7a:1d:57:4c:a8:65:18:e9:79:
40:62:25:96:6e:c7:c7:37:6a:83:21:08:8e:41:ea:dd:d9:57:
3f:1d:77:49:87:2a:16:06:5e:a6:38:6a:22:12:a3:51:19:83:
7e:b6
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Signature Algorithm: sha1WithRSAEncryption
Issuer: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
Validity
Not Before: Oct 18 00:00:00 2012 GMT
Not After : Dec 29 23:59:59 2020 GMT
Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer - G4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:a2:63:0b:39:44:b8:bb:23:a7:44:49:bb:0e:ff:
a1:f0:61:0a:53:93:b0:98:db:ad:2c:0f:4a:c5:6e:
ff:86:3c:53:55:0f:15:ce:04:3f:2b:fd:a9:96:96:
d9:be:61:79:0b:5b:c9:4c:86:76:e5:e0:43:4b:22:
95:ee:c2:2b:43:c1:9f:d8:68:b4:8e:40:4f:ee:85:
38:b9:11:c5:23:f2:64:58:f0:15:32:6f:4e:57:a1:
ae:88:a4:02:d7:2a:1e:cd:4b:e1:dd:63:d5:17:89:
32:5b:b0:5e:99:5a:a8:9d:28:50:0e:17:ee:96:db:
61:3b:45:51:1d:cf:12:56:0b:92:47:fc:ab:ae:f6:
66:3d:47:ac:70:72:e7:92:e7:5f:cd:10:b9:c4:83:
64:94:19:bd:25:80:e1:e8:d2:22:a5:d0:ba:02:7a:
a1:77:93:5b:65:c3:ee:17:74:bc:41:86:2a:dc:08:
4c:8c:92:8c:91:2d:9e:77:44:1f:68:d6:a8:74:77:
db:0e:5b:32:8b:56:8b:33:bd:d9:63:c8:49:9d:3a:
c5:c5:ea:33:0b:d2:f1:a3:1b:f4:8b:be:d9:b3:57:
8b:3b:de:04:a7:7a:22:b2:24:ae:2e:c7:70:c5:be:
4e:83:26:08:fb:0b:bd:a9:4f:99:08:e1:10:28:72:
aa:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Extended Key Usage: critical
Time Stamping
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
OCSP - URI:http://ts-ocsp.ws.symantec.com
CA Issuers - URI:http://ts-aia.ws.symantec.com/tss-ca-g2.cer
X509v3 CRL Distribution Points:
Full Name:
URI:http://ts-crl.ws.symantec.com/tss-ca-g2.crl
X509v3 Subject Alternative Name:
DirName:/CN=TimeStamp-2048-2
X509v3 Subject Key Identifier:
46:C6:69:A3:0E:4A:14:1E:D5:4C:DA:52:63:17:3F:5E:36:BC:0D:E6
X509v3 Authority Key Identifier:
5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD
Signature Algorithm: sha1WithRSAEncryption
Signature Value:
78:3b:b4:91:2a:00:4c:f0:8f:62:30:37:78:a3:84:27:07:6f:
18:b2:de:25:dc:a0:d4:94:03:aa:86:4e:25:9f:9a:40:03:1c:
dd:ce:e3:79:cb:21:68:06:da:b6:32:b4:6d:bf:f4:2c:26:63:
33:e4:49:64:6d:0d:e6:c3:67:0e:f7:05:a4:35:6c:7c:89:16:
c6:e9:b2:df:b2:e9:dd:20:c6:71:0f:cd:95:74:dc:b6:5c:de:
bd:37:1f:43:78:e6:78:b5:cd:28:04:20:a3:aa:f1:4b:c4:88:
29:91:0e:80:d1:11:fc:dd:5c:76:6e:4f:5e:0e:45:46:41:6e:
0d:b0:ea:38:9a:b1:3a:da:09:71:10:fc:1c:79:b4:80:7b:ac:
69:f4:fd:9c:b6:0c:16:2b:f1:7f:5b:09:3d:9b:5b:e2:16:ca:
13:81:6d:00:2e:38:0d:a8:29:8f:2c:e1:b2:f4:5a:a9:01:af:
15:9c:2c:2f:49:1b:db:22:bb:c3:fe:78:94:51:c3:86:b1:82:
88:5d:f0:3d:b4:51:a1:79:33:2b:2e:7b:b9:dc:20:09:13:71:
eb:6a:19:5b:cf:e8:a5:30:57:2c:89:49:3f:b9:cf:7f:c9:bf:
3e:22:68:63:53:9a:bd:69:74:ac:c5:1d:3c:7f:92:e0:c3:bc:
1c:d8:04:75
pkcs7-signedData
- 1
- SHA1: nil
- 1.3.6.1.4.1.311.2.1.4
- #0
- 1.3.6.1.4.1.311.2.1.15
- :
- SHA1
fe 22 51 63 9a d7 90 af 1b 37 88 74 0a db 3b c9 |."Qc.....7.t..;.| 6b d0 ca a0 |k... |
- 1.3.6.1.4.1.311.2.1.15
- #0
- unnamed
- #0
- 2
- 2F:2D:50:DD:FE:9C:6B:BD:47:5B:F8:B9:EF:C2:18:FC
- RSA-SHA1-2: nil
- CN: mail.ru
- 2016-03-01 08:28:47 UTC: 2039-12-31 23:59:59 UTC
- CN: mail.ru
- #5
- rsaEncryption: nil
- AF:94:9E:06:C1:AC:9F:AA:14:74:4E:5C:9F:2D:6F:09:
6B:20:FA:B9:32:40:0C:FB:AB:1B:17:73:E3:57:71:54:
99:74:6F:4A:75:B1:79:D7:DC:A9:81:74:8C:63:F1:95:
8B:15:C1:5B:90:FA:94:88:91:CC:D7:83:FE:2D:40:94:
2D:D8:58:E8:5E:9E:B1:A4:31:7B:9C:D5:6C:AA:6C:2D:
34:ED:AE:7C:F8:E5:E2:A4:BB:B9:DF:0F:95:17:70:50:
10:2C:69:05:AD:EA:67:A3:02:64:BD:7D:F6:B8:01:8B:
88:FA:19:98:9B:82:13:DD:EE:83:CC:C8:04:02:64:EB: 0x010001
- 2.5.29.1
8c c0 6c a3 6c bb 01 e9 16 76 5a 24 b2 4e 6f 30 |..l.l....vZ$.No0|
- CN: mail.ru
2f 2d 50 dd fe 9c 6b bd 47 5b f8 b9 ef c2 18 fc |/-P...k.G[......|
- RSA-SHA1-2:
38 cf 5d 3f 77 43 58 e0 e2 4d c3 62 d1 15 d1 db |8.]?wCX..M.b....| 52 c9 a7 9e 1b 4a ee 00 cf e3 c8 3e a6 3d dd 6d |R....J.....>.=.m| 14 0a 75 29 f7 e3 52 ce 79 8d e8 23 00 f3 16 18 |..u)..R.y..#....| 0f c3 f2 71 3a fe 4a b4 5e b2 39 43 62 4c 42 6f |...q:.J.^.9CbLBo| 4c 9f 25 9b 33 8b 7b c1 6b 79 e3 b9 2c e2 b7 4c |L.%.3.{.ky..,..L| 4e fe 48 c7 da a0 ed 19 30 ef 06 00 82 43 47 d8 |N.H.....0....CG.| d3 7d 02 7d 5d 51 b7 73 45 39 cd 57 4e 86 8c 57 |.}.}]Q.sE9.WN..W| cc 13 d8 23 3d 92 2b 9a af ec 30 06 7b df 6a de |...#=.+...0.{.j.|
- 2
- Certificate #1
- 2
- 7E:93:EB:FB:7C:C6:4E:59:EA:4B:9A:77:D4:06:FC:3B
- RSA-SHA1: nil
- Issuer
- C: ZA
- ST: Western Cape
- L: Durbanville
- O: Thawte
- OU: Thawte Certification
- CN: Thawte Timestamping CA
- 2012-12-21 00:00:00 UTC: 2020-12-30 23:59:59 UTC
- Subject
- C: US
- O: Symantec Corporation
- CN: Symantec Time Stamping Services CA - G2
- #5
- rsaEncryption: nil
- B1:AC:B3:49:54:4B:97:1C:12:0A:D8:25:79:91:22:57:
2A:6F:DC:B8:26:C4:43:73:6B:C2:BF:2E:50:5A:FB:14:
C2:76:8E:43:01:25:43:B4:A1:E2:45:F4:E8:B7:7B:C3:
74:CC:22:D7:B4:94:00:02:F7:4D:ED:BF:B4:B7:44:24:
6B:CD:5F:45:3B:D1:44:CE:43:12:73:17:82:8B:69:B4:
2B:CB:99:1E:AC:72:1B:26:4D:71:1F:B1:31:DD:FB:51:
61:02:53:A6:AA:F5:49:2C:05:78:45:A5:2F:89:CE:E7:
99:E7:FE:8C:E2:57:3F:3D:C6:92:DC:4A:F8:7B:33:E4:
79:0A:FB:F0:75:88:41:9C:FF:C5:03:51:99:AA:D7:6C:
9F:93:69:87:65:29:83:85:C2:60:14:C4:C8:C9:3B:14:
DA:C0:81:F0:1F:0D:74:DE:92:22:AB:CA:F7:FB:74:7C:
27:E6:F7:4A:1B:7F:A7:C3:9E:2D:AE:8A:EA:A6:E6:AA:
27:16:7D:61:F7:98:71:11:BC:E2:50:A1:4B:E5:5D:FA:
E5:0E:A7:2C:9F:AA:65:20:D3:D8:96:E8:C8:7C:A5:4E:
48:44:FF:19:E2:44:07:92:0B:D7:68:84:80:5D:6A:78:
64:45:CD:60:46:7E:54:C1:13:7C:C5:79:F1:C9:C1:71: 0x010001
- #6
- subjectKeyIdentifier:
5f 9a f5 6e 5c cc cc 74 9a d4 dd 7d ef 3f db ec |_..n\..t...}.?..| 4c 80 2e dd |L... |
- authorityInfoAccess
- OCSP: http://ocsp.thawte.com
- basicConstraints
- true
- true: 0
- crlDistributionPoints: http://crl.thawte.com/ThawteTimestampingCA.crl
- extendedKeyUsage: timeStamping
- keyUsage: true, 6
- subjectAltName
- CN: TimeStamp-2048-1
- subjectKeyIdentifier:
- RSA-SHA1:
03 09 9b 8f 79 ef 7f 59 30 aa ef 68 b5 fa e3 09 |....y..Y0..h....| 1d bb 4f 82 06 5d 37 5f a6 52 9f 16 8d ea 1c 92 |..O..]7_.R......| 09 44 6e f5 6d eb 58 7c 30 e8 f9 69 8d 23 73 0b |.Dn.m.X|0..i.#s.| 12 6f 47 a9 ae 39 11 f8 2a b1 9b b0 1a c3 8e eb |.oG..9..*.......| 59 96 00 ad ce 0c 4d b2 d0 31 a6 08 5c 2a 7a fc |Y.....M..1..\*z.| e2 7a 1d 57 4c a8 65 18 e9 79 40 62 25 96 6e c7 |.z.WL.e..y@b%.n.| c7 37 6a 83 21 08 8e 41 ea dd d9 57 3f 1d 77 49 |.7j.!..A...W?.wI| 87 2a 16 06 5e a6 38 6a 22 12 a3 51 19 83 7e b6 |.*..^.8j"..Q..~.|
- 2
- Certificate #2
- 2
- 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
- RSA-SHA1: nil
- Issuer
- C: US
- O: Symantec Corporation
- CN: Symantec Time Stamping Services CA - G2
- 2012-10-18 00:00:00 UTC: 2020-12-29 23:59:59 UTC
- Subject
- C: US
- O: Symantec Corporation
- CN: Symantec Time Stamping Services Signer - G4
- #5
- rsaEncryption: nil
- A2:63:0B:39:44:B8:BB:23:A7:44:49:BB:0E:FF:A1:F0:
61:0A:53:93:B0:98:DB:AD:2C:0F:4A:C5:6E:FF:86:3C:
53:55:0F:15:CE:04:3F:2B:FD:A9:96:96:D9:BE:61:79:
0B:5B:C9:4C:86:76:E5:E0:43:4B:22:95:EE:C2:2B:43:
C1:9F:D8:68:B4:8E:40:4F:EE:85:38:B9:11:C5:23:F2:
64:58:F0:15:32:6F:4E:57:A1:AE:88:A4:02:D7:2A:1E:
CD:4B:E1:DD:63:D5:17:89:32:5B:B0:5E:99:5A:A8:9D:
28:50:0E:17:EE:96:DB:61:3B:45:51:1D:CF:12:56:0B:
92:47:FC:AB:AE:F6:66:3D:47:AC:70:72:E7:92:E7:5F:
CD:10:B9:C4:83:64:94:19:BD:25:80:E1:E8:D2:22:A5:
D0:BA:02:7A:A1:77:93:5B:65:C3:EE:17:74:BC:41:86:
2A:DC:08:4C:8C:92:8C:91:2D:9E:77:44:1F:68:D6:A8:
74:77:DB:0E:5B:32:8B:56:8B:33:BD:D9:63:C8:49:9D:
3A:C5:C5:EA:33:0B:D2:F1:A3:1B:F4:8B:BE:D9:B3:57:
8B:3B:DE:04:A7:7A:22:B2:24:AE:2E:C7:70:C5:BE:4E:
83:26:08:FB:0B:BD:A9:4F:99:08:E1:10:28:72:AA:CD: 0x010001
- X509v3 extensions
- basicConstraints
- true
- nil
- extendedKeyUsage: true, timeStamping
- keyUsage: true, 0x80
- authorityInfoAccess
- #0
- OCSP: http://ts-ocsp.ws.symantec.com
- caIssuers: http://ts-aia.ws.symantec.com/tss-ca-g2.cer
- #0
- crlDistributionPoints: http://ts-crl.ws.symantec.com/tss-ca-g2.crl
- subjectAltName
- CN: TimeStamp-2048-2
- subjectKeyIdentifier:
46 c6 69 a3 0e 4a 14 1e d5 4c da 52 63 17 3f 5e |F.i..J...L.Rc.?^| 36 bc 0d e6 |6... |
- authorityKeyIdentifier:
5f 9a f5 6e 5c cc cc 74 9a d4 dd 7d ef 3f db ec |_..n\..t...}.?..| 4c 80 2e dd |L... |
- basicConstraints
- RSA-SHA1:
78 3b b4 91 2a 00 4c f0 8f 62 30 37 78 a3 84 27 |x;..*.L..b07x..'| 07 6f 18 b2 de 25 dc a0 d4 94 03 aa 86 4e 25 9f |.o...%.......N%.| 9a 40 03 1c dd ce e3 79 cb 21 68 06 da b6 32 b4 |.@.....y.!h...2.| 6d bf f4 2c 26 63 33 e4 49 64 6d 0d e6 c3 67 0e |m..,&c3.Idm...g.| f7 05 a4 35 6c 7c 89 16 c6 e9 b2 df b2 e9 dd 20 |...5l|......... | c6 71 0f cd 95 74 dc b6 5c de bd 37 1f 43 78 e6 |.q...t..\..7.Cx.| 78 b5 cd 28 04 20 a3 aa f1 4b c4 88 29 91 0e 80 |x..(. ...K..)...| d1 11 fc dd 5c 76 6e 4f 5e 0e 45 46 41 6e 0d b0 |....\vnO^.EFAn..| ea 38 9a b1 3a da 09 71 10 fc 1c 79 b4 80 7b ac |.8..:..q...y..{.| 69 f4 fd 9c b6 0c 16 2b f1 7f 5b 09 3d 9b 5b e2 |i......+..[.=.[.| 16 ca 13 81 6d 00 2e 38 0d a8 29 8f 2c e1 b2 f4 |....m..8..).,...| 5a a9 01 af 15 9c 2c 2f 49 1b db 22 bb c3 fe 78 |Z.....,/I.."...x| 94 51 c3 86 b1 82 88 5d f0 3d b4 51 a1 79 33 2b |.Q.....].=.Q.y3+| 2e 7b b9 dc 20 09 13 71 eb 6a 19 5b cf e8 a5 30 |.{.. ..q.j.[...0| 57 2c 89 49 3f b9 cf 7f c9 bf 3e 22 68 63 53 9a |W,.I?.....>"hcS.| bd 69 74 ac c5 1d 3c 7f 92 e0 c3 bc 1c d8 04 75 |.it...<........u|
- 2
- #0
- 1
- #0
- CN: mail.ru
- 2F:2D:50:DD:FE:9C:6B:BD:47:5B:F8:B9:EF:C2:18:FC
- SHA1: nil
- #2
- contentType: 1.3.6.1.4.1.311.2.1.4
- messageDigest:
42 65 cf c9 b0 b8 ef 41 21 28 44 54 11 b6 d3 07 |Be.....A!(DT....| 07 bb 06 ad |.... |
- 1.3.6.1.4.1.311.2.1.12:
00 50 00 72 00 6f 00 74 00 65 00 63 00 74 00 69 |.P.r.o.t.e.c.t.i| 00 6f 00 6e 00 20 00 43 00 6f 00 72 00 65 00 20 |.o.n. .C.o.r.e. | 00 4c 00 69 00 62 00 72 00 61 00 72 00 79 |.L.i.b.r.a.r.y |
- rsaEncryption:
13 19 a5 22 c5 4b c8 9b f9 6a 2b df c7 69 10 ae |...".K...j+..i..| 28 08 4c 79 aa c0 66 0d 42 31 c0 62 44 2b cd b6 |(.Ly..f.B1.bD+..| 26 1e 39 19 aa b9 68 3f 2d 29 5a 65 38 f4 85 e7 |&.9...h?-)Ze8...| 19 06 e7 43 ef cb 7d 2a 2b 49 73 c0 df f1 b7 e2 |...C..}*+Is.....| 7b 2f 97 8f 67 74 5f 7e 7f 58 92 ef 0d 34 33 7a |{/..gt_~.X...43z| fa ef 0d 67 e6 40 d7 c8 ad 94 a0 0d 46 92 0b cd |...g.@......F...| 54 eb 92 f4 80 86 01 cc 22 10 7e 07 78 f9 54 b8 |T.......".~.x.T.| c6 0b fa 76 3b 6a 83 43 54 91 7b 2c 8a 9c 37 4a |...v;j.CT.{,..7J| - countersignature
- 1
- unnamed
- #0
- C: US
- O: Symantec Corporation
- CN: Symantec Time Stamping Services CA - G2
- 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
- #0
- SHA1: nil
- #2
- contentType: pkcs7-data
- signingTime: 2018-09-26 11:35:15 UTC
- messageDigest:
b6 73 37 04 38 31 c3 2d 0e 24 1a ee 14 c1 6a 5f |.s7.81.-.$....j_| 90 a4 b9 ba |.... |
- rsaEncryption:
4f 63 a1 7d 71 1a 70 58 c8 3f 72 d0 4f f7 24 cf |Oc.}q.pX.?r.O.$.| 00 11 d7 d8 d4 39 c6 a0 a9 3a f9 10 25 16 76 a1 |.....9...:..%.v.| af f6 e5 8d 4e 76 d7 3f 14 9e 8f da 06 c4 d4 fe |....Nv.?........| 16 7b 8c 9e b1 82 70 62 39 af 36 bc 6d 88 0f 7e |.{....pb9.6.m..~| 98 22 87 21 3e db 9e a6 6b 1f d8 02 b8 61 81 29 |.".!>...k....a.)| 5f db f3 39 1c 3b d2 87 0e f4 41 08 fa d7 b5 ec |_..9.;....A.....| 54 0d d0 8c e4 6c a0 90 f5 da 21 ba 53 91 44 25 |T....l....!.S.D%| dd 5b 6e 1a d1 9e d3 98 05 19 4c a1 80 9e 44 39 |.[n.......L...D9| b8 46 15 86 c0 85 51 37 6c 0c a6 ea f3 cc f2 a7 |.F....Q7l.......| 4a 33 e2 d6 ff a6 4c 42 b0 99 36 48 2b 98 9e a4 |J3....LB..6H+...| 3a 7c fc 40 77 6e 25 7d a2 68 a9 7a 2f c7 d1 4f |:|.@wn%}.h.z/..O| aa 72 3c c2 17 c2 10 3d b3 f8 a8 dd 2c 40 77 48 |.r<....=....,@wH| 13 51 3c 7b 3e ec 8a 7b 30 9e 46 15 f7 2a 99 c3 |.Q<{>..{0.F..*..| 76 cb 96 e6 72 28 ea cb 59 71 c8 42 2f eb 39 4a |v...r(..Yq.B/.9J| e1 c3 50 48 25 12 60 6c 99 57 a0 f6 b0 07 b9 07 |..PH%.`l.W......| e6 7c 1e d0 6d 4e 88 05 5d b6 1c be 4e 20 69 3d |.|..mN..]...N i=|
- unnamed
- 1
- #0
| offset | size | type | comment | |
|---|---|---|---|---|
| 0 | 4190720 | DLL | 09/26/2018 11:35:05 | # |
| 15c1 | 15 | HTM | # | |
| 3ff200 | 3696 | PKCS7 | Authenticode Signature | # |
![]() |
| Please donate some bucks to keep this site up and running: | |
| Ko-fi | |
|---|---|
| Yandex.Money | |
| Thank you! | |
everything is OK
offset:( 0x )