hp_pt_1.exe

info
MZ
PE
resources
strings
imports
foremost
signature
hexdump
disasm
log
discuss
donate

filename	hp_pt_1.exe
size	811648 (0xc6280)
md5	4c31d82ca430aaecf0566b4f4dfc464f

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x50
blocks_in_file	2
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0xf
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0x1a
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x100

DOS stub

00000000: ba 10 00 0e 1f b4 09 cd  21 b8 01 4c cd 21 90 90  |........!..L.!..|
00000010: 54 68 69 73 20 70 72 6f  67 72 61 6d 20 6d 75 73  |This program mus|
00000020: 74 20 62 65 20 72 75 6e  20 75 6e 64 65 72 20 57  |t be run under W|
00000030: 69 6e 33 32 0d 0a 24 37  00 00 00 00 00 00 00 00  |in32..$7........|
00000040: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
000000c0:

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	9
TimeDateStamp	0x52e0d726
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x818e
Magic	0x10b
LinkerVersion	2.25
SizeOfCode	0xa0c00
SizeOfInitializedData	0x24400
SizeOfUninitializedData	0
AddressOfEntryPoint	0xa173c
BaseOfCode	0x1000
BaseOfData	0xa2000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	5.0
ImageVersion	0.0
SubsystemVersion	5.0
Reserved1	0
SizeOfImage	0xd1000
SizeOfHeaders	0x400
CheckSum	0xd1f78
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x4000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

BobSoft Mini Delphi (BoB / BobSoft)

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x9fd20	0x9fe00	R-X CODE
.itext	0xa1000	0xc10	0xe00	R-X CODE
.data	0xa2000	0xf5f4	0xf600	RW- IDATA
.bss	0xb2000	0x52c0	0	RW-
.idata	0xb8000	0x14a4	0x1600	RW- IDATA
.tls	0xba000	0x34	0	RW-
.rdata	0xbb000	0x18	0x200	R-- IDATA
.reloc	0xbc000	0x922c	0x9400	R-- IDATA DISCARDABLE
.rsrc	0xc6000	0xa200	0xa200	R-- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0xb8000	0x14a4
RESOURCE	0xc6000	0xa200
EXCEPTION	0	0
SECURITY	0xc5400	0xe80
BASERELOC	0xbc000	0x922c
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0xbb000	0x18
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0xb8408	0x318
Delay_IAT	0	0
CLR_Header	0	0

TLS

raw start	raw end	index	callbks	zero fill	flags
0x4ba000	0x4ba034	0x4a29e8	0x4bb010	0	0

show previews

type	name	size
STRING	#4087	156
STRING	#4088	960
STRING	#4089	888
STRING	#4090	908
STRING	#4091	208
STRING	#4092	184
STRING	#4093	628
STRING	#4094	1112
STRING	#4095	872
STRING	#4096	712
RCDATA	CHARTABLE	33512
RCDATA	DVCLAL	16
RCDATA	PACKAGEINFO	412

id	lang	string
65376	0	''%s'' is not a valid time
65377	0	SQLite Error %d
65378	0	SQLite Error %d - %s
65392	0	Failed to create key %s
65393	0	Failed to get data for '%s'
65394	0	Failed to set data for '%s'
65395	0	%s.Seek not implemented
65396	0	Operation not allowed on sorted list
65397	0	%s not in a class registration group
65398	0	Property %s does not exist
65399	0	Stream write error
65400	0	Invalid characters in path
65401	0	The specified path is too long
65402	0	The specified path was not found
65403	0	The path format is not supported
65404	0	The specified file was not found
65405	0	''%s'' is not a valid date
65406	0	''%s'' is not a valid date and time
65407	0	''%s'' is not a valid integer value
65408	0	Unable to write to %s
65409	0	Invalid file name - %s
65410	0	Invalid stream format
65411	0	''%s'' is not a valid component name
65412	0	Invalid property value
65413	0	Invalid property path
65414	0	Invalid property value
65415	0	Invalid data type for '%s'
65416	0	List capacity out of bounds (%d)
65417	0	List count out of bounds (%d)
65418	0	List index out of bounds (%d)
65419	0	Out of memory while expanding memory stream
65420	0	%s has not been registered as a COM class
65421	0	Error reading %s%s%s: %s
65422	0	Stream read error
65423	0	Property is read-only
65424	0	Invalid source array
65425	0	Invalid destination array
65426	0	Character index out of bounds (%d)
65427	0	Start index out of bounds (%d)
65428	0	Invalid count (%d)
65429	0	Invalid destination index (%d)
65430	0	Invalid code page
65431	0	Ancestor for '%s' not found
65432	0	Cannot assign a %s to a %s
65433	0	Class %s not found
65434	0	A class named %s already exists
65435	0	List does not allow duplicates ($0%x)
65436	0	A component named %s already exists
65437	0	String list does not allow duplicates
65438	0	Cannot create file "%s". %s
65439	0	Cannot open file "%s". %s
65440	0	November
65441	0	December
65442	0	Sun
65443	0	Mon
65444	0	Tue
65445	0	Wed
65446	0	Thu
65447	0	Fri
65448	0	Sat
65449	0	Sunday
65450	0	Monday
65451	0	Tuesday
65452	0	Wednesday
65453	0	Thursday
65454	0	Friday
65455	0	Saturday
65456	0	Jul
65457	0	Aug
65458	0	Sep
65459	0	Oct
65460	0	Nov
65461	0	Dec
65462	0	January
65463	0	February
65464	0	March
65465	0	April
65466	0	May
65467	0	June
65468	0	July
65469	0	August
65470	0	September
65471	0	October
65472	0	Assertion failed
65473	0	Interface not supported
65474	0	Exception in safecall method
65475	0	Object lock not owned
65476	0	Monitor support function not initialized
65477	0	%s (%s, line %d)
65478	0	Abstract Error
65479	0	Access violation at address %p in module '%s'. %s of address %p
65480	0	System Error. Code: %d. %s
65481	0	A call to an OS function failed
65482	0	Jan
65483	0	Feb
65484	0	Mar
65485	0	Apr
65486	0	May
65487	0	Jun
65488	0	Invalid variant type conversion
65489	0	Invalid variant operation
65490	0	Invalid NULL variant operation
65491	0	Invalid variant operation (%s%.8x) %s
65492	0	Custom variant type (%s%.4x) is out of range
65493	0	Custom variant type (%s%.4x) already used by %s
65494	0	Custom variant type (%s%.4x) is not usable
65495	0	Too many custom variant types have been registered
65496	0	Could not convert variant of type (%s) into type (%s)
65497	0	Overflow while converting variant of type (%s) into type (%s)
65498	0	Variant overflow
65499	0	Invalid argument
65500	0	Invalid variant type
65501	0	Operation not supported
65502	0	Unexpected variant error
65503	0	External exception %x
65504	0	Invalid class typecast
65505	0	Access violation at address %p. %s of address %p
65506	0	Access violation
65507	0	Stack overflow
65508	0	Control-C hit
65509	0	Privileged instruction
65510	0	Exception %s in module %s at %p. %s%s
65511	0	Application Error
65512	0	Format '%s' invalid or incompatible with argument
65513	0	No argument for format '%s'
65514	0	Variant method calls not supported
65515	0	Read
65516	0	Write
65517	0	Error creating variant or safe array
65518	0	Variant or safe array index out of bounds
65519	0	Variant or safe array is locked
65520	0	'%s' is not a valid floating point value
65521	0	Out of memory
65522	0	I/O error %d
65523	0	Too many open files
65524	0	File access denied
65525	0	Read beyond end of file
65526	0	Disk full
65527	0	Invalid numeric input
65528	0	Division by zero
65529	0	Range check error
65530	0	Integer overflow
65531	0	Invalid floating point operation
65532	0	Floating point division by zero
65533	0	Floating point overflow
65534	0	Floating point underflow
65535	0	Invalid pointer operation

module_name	hint	ord	function_name
oleaut32.dll			SysFreeString
oleaut32.dll			SysReAllocStringLen
oleaut32.dll			SysAllocStringLen
advapi32.dll			RegQueryValueExW
advapi32.dll			RegOpenKeyExW
advapi32.dll			RegCloseKey
user32.dll			LoadStringW
user32.dll			MessageBoxA
user32.dll			CharNextW
kernel32.dll			lstrcmpiA
kernel32.dll			LoadLibraryA
kernel32.dll			LocalFree
kernel32.dll			LocalAlloc
kernel32.dll			GetACP
kernel32.dll			Sleep
kernel32.dll			VirtualFree
kernel32.dll			VirtualAlloc
kernel32.dll			GetSystemInfo
kernel32.dll			GetTickCount
kernel32.dll			QueryPerformanceCounter
kernel32.dll			GetVersion
kernel32.dll			GetCurrentThreadId
kernel32.dll			VirtualQuery
kernel32.dll			WideCharToMultiByte
kernel32.dll			MultiByteToWideChar
kernel32.dll			lstrlenW
kernel32.dll			lstrcpynW
kernel32.dll			LoadLibraryExW
kernel32.dll			IsValidLocale
kernel32.dll			GetSystemDefaultUILanguage
kernel32.dll			GetStartupInfoA
kernel32.dll			GetProcAddress
kernel32.dll			GetModuleHandleW
kernel32.dll			GetModuleFileNameW
kernel32.dll			GetUserDefaultUILanguage
kernel32.dll			GetLocaleInfoW
kernel32.dll			GetLastError
kernel32.dll			GetCommandLineW
kernel32.dll			FreeLibrary
kernel32.dll			FindFirstFileW
kernel32.dll			FindClose
kernel32.dll			ExitProcess
kernel32.dll			CompareStringW
kernel32.dll			WriteFile
kernel32.dll			UnhandledExceptionFilter
kernel32.dll			RtlUnwind
kernel32.dll			RaiseException
kernel32.dll			GetStdHandle
kernel32.dll			DeleteCriticalSection
kernel32.dll			LeaveCriticalSection
kernel32.dll			EnterCriticalSection
kernel32.dll			InitializeCriticalSection
kernel32.dll			CloseHandle
kernel32.dll			TlsSetValue
kernel32.dll			TlsGetValue
kernel32.dll			LocalAlloc
kernel32.dll			GetModuleHandleW
user32.dll			MessageBoxW
user32.dll			LoadStringW
user32.dll			GetSystemMetrics
user32.dll			CharUpperBuffW
user32.dll			CharNextW
kernel32.dll			WritePrivateProfileStringW
kernel32.dll			WriteFile
kernel32.dll			WinExec
kernel32.dll			WideCharToMultiByte
kernel32.dll			WaitForSingleObject
kernel32.dll			VirtualQueryEx
kernel32.dll			VirtualQuery
kernel32.dll			VirtualFree
kernel32.dll			UnmapViewOfFile
kernel32.dll			UnlockFileEx
kernel32.dll			UnlockFile
kernel32.dll			SystemTimeToFileTime
kernel32.dll			SignalObjectAndWait
kernel32.dll			SetLastError
kernel32.dll			SetFilePointer
kernel32.dll			SetEvent
kernel32.dll			SetEndOfFile
kernel32.dll			ResetEvent
kernel32.dll			ReadFile
kernel32.dll			QueryPerformanceCounter
kernel32.dll			OutputDebugStringA
kernel32.dll			OutputDebugStringW
kernel32.dll			MultiByteToWideChar
kernel32.dll			MapViewOfFile
kernel32.dll			LockResource
kernel32.dll			LockFileEx
kernel32.dll			LockFile
kernel32.dll			LocalFree
kernel32.dll			LoadResource
kernel32.dll			LoadLibraryA
kernel32.dll			LoadLibraryW
kernel32.dll			LeaveCriticalSection
kernel32.dll			IsValidLocale
kernel32.dll			InitializeCriticalSection
kernel32.dll			HeapValidate
kernel32.dll			HeapSize
kernel32.dll			HeapReAlloc
kernel32.dll			HeapFree
kernel32.dll			HeapDestroy
kernel32.dll			HeapCreate
kernel32.dll			HeapAlloc
kernel32.dll			GetVersionExA
kernel32.dll			GetVersionExW
kernel32.dll			GetTickCount
kernel32.dll			GetThreadLocale
kernel32.dll			GetTempPathA
kernel32.dll			GetTempPathW
kernel32.dll			GetSystemTimeAsFileTime
kernel32.dll			GetSystemTime
kernel32.dll			GetSystemInfo
kernel32.dll			GetSystemDefaultLangID
kernel32.dll			GetStdHandle
kernel32.dll			GetProcessHeap
kernel32.dll			GetProcAddress
kernel32.dll			GetPrivateProfileStringW
kernel32.dll			GetModuleHandleW
kernel32.dll			GetModuleFileNameW
kernel32.dll			GetLocaleInfoW
kernel32.dll			GetLocalTime
kernel32.dll			GetLastError
kernel32.dll			GetFullPathNameA
kernel32.dll			GetFullPathNameW
kernel32.dll			GetFileSize
kernel32.dll			GetFileAttributesExW
kernel32.dll			GetFileAttributesA
kernel32.dll			GetFileAttributesW
kernel32.dll			GetDiskFreeSpaceA
kernel32.dll			GetDiskFreeSpaceW
kernel32.dll			GetDateFormatW
kernel32.dll			GetCurrentThreadId
kernel32.dll			GetCurrentProcessId
kernel32.dll			GetCurrentProcess
kernel32.dll			GetCPInfo
kernel32.dll			InterlockedExchange
kernel32.dll			InterlockedCompareExchange
kernel32.dll			FreeLibrary
kernel32.dll			FormatMessageA
kernel32.dll			FormatMessageW
kernel32.dll			FlushFileBuffers
kernel32.dll			FindResourceW
kernel32.dll			FindFirstFileW
kernel32.dll			FindClose
kernel32.dll			FileTimeToSystemTime
kernel32.dll			FileTimeToLocalFileTime
kernel32.dll			EnumCalendarInfoW
kernel32.dll			EnterCriticalSection
kernel32.dll			DeleteFileA
kernel32.dll			DeleteFileW
kernel32.dll			DeleteCriticalSection
kernel32.dll			CreateMutexW
kernel32.dll			CreateFileMappingA
kernel32.dll			CreateFileMappingW
kernel32.dll			CreateFileA
kernel32.dll			CreateFileW
kernel32.dll			CreateEventW
kernel32.dll			CompareStringW
kernel32.dll			CloseHandle
kernel32.dll			AreFileApisANSI
advapi32.dll			RegUnLoadKeyW
advapi32.dll			RegSetValueExW
advapi32.dll			RegSaveKeyW
advapi32.dll			RegRestoreKeyW
advapi32.dll			RegReplaceKeyW
advapi32.dll			RegQueryValueExW
advapi32.dll			RegQueryInfoKeyW
advapi32.dll			RegOpenKeyExW
advapi32.dll			RegLoadKeyW
advapi32.dll			RegFlushKey
advapi32.dll			RegEnumValueW
advapi32.dll			RegEnumKeyExW
advapi32.dll			RegDeleteValueW
advapi32.dll			RegDeleteKeyW
advapi32.dll			RegCreateKeyExW
advapi32.dll			RegConnectRegistryW
advapi32.dll			RegCloseKey
kernel32.dll			Sleep
shell32.dll			SHGetSpecialFolderPathW
oleaut32.dll			SafeArrayPtrOfIndex
oleaut32.dll			SafeArrayGetUBound
oleaut32.dll			SafeArrayGetLBound
oleaut32.dll			SafeArrayCreate
oleaut32.dll			VariantChangeType
oleaut32.dll			VariantCopy
oleaut32.dll			VariantClear
oleaut32.dll			VariantInit

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa (c)10/CN=VeriSign Class 3 Code Signing 2010 CA

serial: 4849CA3C762A3ED2D31F1C8C95D39684

Certificates (2)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:49:ca:3c:76:2a:3e:d2:d3:1f:1c:8c:95:d3:96:84
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA
        Validity
            Not Before: Jun  4 00:00:00 2012 GMT
            Not After : Aug  1 23:59:59 2015 GMT
        Subject: C=US, ST=Virginia, L=Alexandria, O=MyPlayCity Inc, OU=Digital ID Class 3 - Microsoft Software Validation v2, CN=MyPlayCity Inc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d9:ba:0b:19:3e:04:8d:e2:35:6f:37:ae:e4:
                    9b:cd:76:92:2a:3d:63:8a:96:bb:7f:fb:4f:c9:ed:
                    3f:60:e2:92:f8:5b:fb:8e:5c:aa:21:d2:40:29:6b:
                    de:fd:05:6d:6b:29:b9:b9:10:fd:68:fe:f5:e1:00:
                    e8:66:2b:09:0e:6a:fb:e0:46:7f:5f:b5:cc:7a:41:
                    24:22:ff:d3:25:ea:0b:94:07:af:47:40:93:3f:a6:
                    8d:f6:9c:2c:61:fe:bf:87:cc:14:b9:3d:dd:e6:df:
                    22:32:fa:e0:c3:ff:53:b4:41:46:0f:a7:7e:77:ae:
                    7d:09:60:83:a0:51:37:bf:65:25:04:5c:e8:b7:69:
                    b0:02:8a:a0:4e:a4:e8:c0:7c:ed:ba:c6:f5:3c:bd:
                    ce:fb:06:ea:9e:1b:b6:8b:78:fd:eb:a7:84:69:dc:
                    ea:f3:9b:ae:fa:ea:ac:87:a3:a8:0e:8a:7b:7c:e5:
                    09:f4:7c:b7:6b:82:0c:0a:a9:bc:0b:9b:65:4a:cd:
                    82:10:c8:b9:e6:f0:41:40:fa:4d:c0:27:94:4a:a7:
                    6b:d8:32:14:40:ff:2c:ba:59:59:28:33:a2:e2:50:
                    d9:ce:da:bd:5b:8a:3c:75:55:40:ea:98:54:2e:19:
                    0c:8a:78:40:ee:72:f7:8f:4a:a9:98:33:b6:ba:a3:
                    9a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://csc3-2010-crl.verisign.com/CSC3-2010.crl

            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/rpa

            X509v3 Extended Key Usage: 
                Code Signing
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com
                CA Issuers - URI:http://csc3-2010-aia.verisign.com/CSC3-2010.cer

            X509v3 Authority Key Identifier: 
                keyid:CF:99:A9:EA:7B:26:F4:4B:C9:8E:8F:D7:F0:05:26:EF:E3:D2:A7:9D

            Netscape Cert Type: 
                Object Signing
            1.3.6.1.4.1.311.2.1.27: 
                0.......
    Signature Algorithm: sha1WithRSAEncryption
         a7:da:d0:73:fa:b8:d5:fd:95:d1:49:a9:5b:5f:55:74:3b:cd:
         27:2f:51:b2:af:a5:7a:af:bd:dd:67:32:92:31:bd:77:fd:a8:
         b5:26:ee:dc:de:14:09:56:15:9d:97:7f:a5:fa:e0:e8:2e:28:
         ae:07:07:b1:b0:72:c1:07:93:a0:35:9e:c8:52:75:ec:71:8e:
         c0:5e:4d:31:a4:1c:df:34:29:b5:bb:d0:61:2d:cd:c4:4c:0e:
         2e:66:1c:79:21:ff:d5:e6:1a:1d:82:e3:3d:de:09:f2:97:1a:
         78:55:4b:97:54:45:ca:5d:9d:76:57:99:7c:e2:bc:6b:9a:b5:
         0e:33:07:58:04:6c:a5:71:74:6c:fc:b0:82:2c:74:33:01:a8:
         ab:c9:49:13:ed:7b:a0:9b:70:12:9b:42:a5:8e:7f:41:32:80:
         37:70:b0:0d:ef:aa:0a:3c:53:7a:c8:5f:b9:1d:0d:3d:c4:a7:
         4c:17:33:98:41:9e:e8:cf:95:42:68:00:e6:1e:cd:33:2e:20:
         54:c5:e2:47:20:bd:91:09:62:41:47:20:47:a1:7e:ce:35:98:
         ae:d0:5b:ca:bb:b7:fc:cf:a7:95:da:2e:a8:58:bf:b8:cb:29:
         6e:c1:ae:f5:cb:5b:7d:1a:cd:4b:19:19:b0:da:4b:4c:10:f9:
         fe:de:0f:ec

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
        Validity
            Not Before: Feb  8 00:00:00 2010 GMT
            Not After : Feb  7 23:59:59 2020 GMT
        Subject: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:23:4b:5e:a5:d7:8a:bb:32:e9:d4:57:f7:ef:
                    e4:c7:26:7e:ad:19:98:fe:a8:9d:7d:94:f6:36:6b:
                    10:d7:75:81:30:7f:04:68:7f:cb:2b:75:1e:cd:1d:
                    08:8c:df:69:94:a7:37:a3:9c:7b:80:e0:99:e1:ee:
                    37:4d:5f:ce:3b:14:ee:86:d4:d0:f5:27:35:bc:25:
                    0b:38:a7:8c:63:9d:17:a3:08:a5:ab:b0:fb:cd:6a:
                    62:82:4c:d5:21:da:1b:d9:f1:e3:84:3b:8a:2a:4f:
                    85:5b:90:01:4f:c9:a7:76:10:7f:27:03:7c:be:ae:
                    7e:7d:c1:dd:f9:05:bc:1b:48:9c:69:e7:c0:a4:3c:
                    3c:41:00:3e:df:96:e5:c5:e4:94:71:d6:55:01:c7:
                    00:26:4a:40:3c:b5:a1:26:a9:0c:a7:6d:80:8e:90:
                    25:7b:cf:bf:3f:1c:eb:2f:96:fa:e5:87:77:c6:b5:
                    56:b2:7a:3b:54:30:53:1b:df:62:34:ff:1e:d1:f4:
                    5a:93:28:85:e5:4c:17:4e:7e:5b:fd:a4:93:99:7f:
                    df:cd:ef:a4:75:ef:ef:15:f6:47:e7:f8:19:72:d8:
                    2e:34:1a:a6:b4:a7:4c:7e:bd:bb:4f:0c:3d:57:f1:
                    30:d6:a6:36:8e:d6:80:76:d7:19:2e:a5:cd:7e:34:
                    2d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/cps
                  User Notice:
                    Explicit Text: https://www.verisign.com/rpa

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            1.3.6.1.5.5.7.1.12: 
                0_.].[0Y0W0U..image/gif0!0.0...+..............k...j.H.,{..0%.#http://logo.verisign.com/vslogo.gif
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.verisign.com/pca3-g5.crl

            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com

            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, Code Signing
            X509v3 Subject Alternative Name: 
                DirName:/CN=VeriSignMPKI-2-8
            X509v3 Subject Key Identifier: 
                CF:99:A9:EA:7B:26:F4:4B:C9:8E:8F:D7:F0:05:26:EF:E3:D2:A7:9D
            X509v3 Authority Key Identifier: 
                keyid:7F:D3:65:A7:C2:DD:EC:BB:F0:30:09:F3:43:39:FA:02:AF:33:31:33

    Signature Algorithm: sha1WithRSAEncryption
         56:22:e6:34:a4:c4:61:cb:48:b9:01:ad:56:a8:64:0f:d9:8c:
         91:c4:bb:cc:0c:e5:ad:7a:a0:22:7f:df:47:38:4a:2d:6c:d1:
         7f:71:1a:7c:ec:70:a9:b1:f0:4f:e4:0f:0c:53:fa:15:5e:fe:
         74:98:49:24:85:81:26:1c:91:14:47:b0:4c:63:8c:bb:a1:34:
         d4:c6:45:e8:0d:85:26:73:03:d0:a9:8c:64:6d:dc:71:92:e6:
         45:05:60:15:59:51:39:fc:58:14:6b:fe:d4:a4:ed:79:6b:08:
         0c:41:72:e7:37:22:06:09:be:23:e9:3f:44:9a:1e:e9:61:9d:
         cc:b1:90:5c:fc:3d:d2:8d:ac:42:3d:65:36:d4:b4:3d:40:28:
         8f:9b:10:cf:23:26:cc:4b:20:cb:90:1f:5d:8c:4c:34:ca:3c:
         d8:e5:37:d6:6f:a5:20:bd:34:eb:26:d9:ae:0d:e7:c5:9a:f7:
         a1:b4:21:91:33:6f:86:e8:58:bb:25:7c:74:0e:58:fe:75:1b:
         63:3f:ce:31:7c:9b:8f:1b:96:9e:c5:53:76:84:5b:9c:ad:91:
         fa:ac:ed:93:ba:5d:c8:21:53:c2:82:53:63:af:12:0d:50:87:
         11:1b:3d:54:52:96:8a:2c:9c:3d:92:1a:08:9a:05:2e:c7:93:
         a5:48:91:d3

pkcs7-signedData

SHA1: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15

00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |

SHA1

0f 5c 64 78 e0 c6 96 d6 5f 5d 7f ad 11 68 82 f5 |.\dx...._]...h..| a9 74 7c c0 |.t|. |

Certificates
- Certificate #0
  - 2
    - 48:49:CA:3C:76:2A:3E:D2:D3:1F:1C:8C:95:D3:96:84
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - O: VeriSign, Inc.
      - OU: VeriSign Trust Network
      - OU: Terms of use at https://www.verisign.com/rpa (c)10
      - CN: VeriSign Class 3 Code Signing 2010 CA
    - 2012-06-04 00:00:00 UTC: 2015-08-01 23:59:59 UTC
    - Subject
      - C: US
      - ST: Virginia
      - L: Alexandria
      - O: MyPlayCity Inc
      - OU: Digital ID Class 3 - Microsoft Software Validation v2
      - CN: MyPlayCity Inc
    - #5
      - rsaEncryption: nil
      - 99:D9:BA:0B:19:3E:04:8D:E2:35:6F:37:AE:E4:9B:CD:
        76:92:2A:3D:63:8A:96:BB:7F:FB:4F:C9:ED:3F:60:E2:
        92:F8:5B:FB:8E:5C:AA:21:D2:40:29:6B:DE:FD:05:6D:
        6B:29:B9:B9:10:FD:68:FE:F5:E1:00:E8:66:2B:09:0E:
        6A:FB:E0:46:7F:5F:B5:CC:7A:41:24:22:FF:D3:25:EA:
        0B:94:07:AF:47:40:93:3F:A6:8D:F6:9C:2C:61:FE:BF:
        87:CC:14:B9:3D:DD:E6:DF:22:32:FA:E0:C3:FF:53:B4:
        41:46:0F:A7:7E:77:AE:7D:09:60:83:A0:51:37:BF:65:
        25:04:5C:E8:B7:69:B0:02:8A:A0:4E:A4:E8:C0:7C:ED:
        BA:C6:F5:3C:BD:CE:FB:06:EA:9E:1B:B6:8B:78:FD:EB:
        A7:84:69:DC:EA:F3:9B:AE:FA:EA:AC:87:A3:A8:0E:8A:
        7B:7C:E5:09:F4:7C:B7:6B:82:0C:0A:A9:BC:0B:9B:65:
        4A:CD:82:10:C8:B9:E6:F0:41:40:FA:4D:C0:27:94:4A:
        A7:6B:D8:32:14:40:FF:2C:BA:59:59:28:33:A2:E2:50:
        D9:CE:DA:BD:5B:8A:3C:75:55:40:EA:98:54:2E:19:0C:
        8A:78:40:EE:72:F7:8F:4A:A9:98:33:B6:BA:A3:9A:BB: 0x010001
    - X509v3 extensions
      - basicConstraints
        nil
      - keyUsage: true, 0x80
      - crlDistributionPoints: http://csc3-2010-crl.verisign.com/CSC3-2010.crl
      - certificatePolicies
        2.16.840.1.113733.1.7.23.3
        id-qt-cps: https://www.verisign.com/rpa
      - extendedKeyUsage: codeSigning
      - authorityInfoAccess
        #0
        OCSP: http://ocsp.verisign.com
        caIssuers: http://csc3-2010-aia.verisign.com/CSC3-2010.cer
      - authorityKeyIdentifier:
        cf 99 a9 ea 7b 26 f4 4b c9 8e 8f d7 f0 05 26 ef |....{&.K......&.| e3 d2 a7 9d |.... |
      - nsCertType: 0x10
      - 1.3.6.1.4.1.311.2.1.27
        false: true
  - RSA-SHA1:
```
a7 da d0 73 fa b8 d5 fd  95 d1 49 a9 5b 5f 55 74  |...s......I.[_Ut|
3b cd 27 2f 51 b2 af a5  7a af bd dd 67 32 92 31  |;.'/Q...z...g2.1|
bd 77 fd a8 b5 26 ee dc  de 14 09 56 15 9d 97 7f  |.w...&.....V....|
a5 fa e0 e8 2e 28 ae 07  07 b1 b0 72 c1 07 93 a0  |.....(.....r....|
35 9e c8 52 75 ec 71 8e  c0 5e 4d 31 a4 1c df 34  |5..Ru.q..^M1...4|
29 b5 bb d0 61 2d cd c4  4c 0e 2e 66 1c 79 21 ff  |)...a-..L..f.y!.|
d5 e6 1a 1d 82 e3 3d de  09 f2 97 1a 78 55 4b 97  |......=.....xUK.|
54 45 ca 5d 9d 76 57 99  7c e2 bc 6b 9a b5 0e 33  |TE.].vW.|..k...3|
07 58 04 6c a5 71 74 6c  fc b0 82 2c 74 33 01 a8  |.X.l.qtl...,t3..|
ab c9 49 13 ed 7b a0 9b  70 12 9b 42 a5 8e 7f 41  |..I..{..p..B...A|
32 80 37 70 b0 0d ef aa  0a 3c 53 7a c8 5f b9 1d  |2.7p.....
```
- Certificate #1
  - 2
    - 52:00:E5:AA:25:56:FC:1A:86:ED:96:C9:D4:4B:33:C7
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - O: VeriSign, Inc.
      - OU: VeriSign Trust Network
      - OU: (c) 2006 VeriSign, Inc. - For authorized use only
      - CN: VeriSign Class 3 Public Primary Certification Authority - G5
    - 2010-02-08 00:00:00 UTC: 2020-02-07 23:59:59 UTC
    - Subject
      - C: US
      - O: VeriSign, Inc.
      - OU: VeriSign Trust Network
      - OU: Terms of use at https://www.verisign.com/rpa (c)10
      - CN: VeriSign Class 3 Code Signing 2010 CA
    - #5
      - rsaEncryption: nil
      - F5:23:4B:5E:A5:D7:8A:BB:32:E9:D4:57:F7:EF:E4:C7:
        26:7E:AD:19:98:FE:A8:9D:7D:94:F6:36:6B:10:D7:75:
        81:30:7F:04:68:7F:CB:2B:75:1E:CD:1D:08:8C:DF:69:
        94:A7:37:A3:9C:7B:80:E0:99:E1:EE:37:4D:5F:CE:3B:
        14:EE:86:D4:D0:F5:27:35:BC:25:0B:38:A7:8C:63:9D:
        17:A3:08:A5:AB:B0:FB:CD:6A:62:82:4C:D5:21:DA:1B:
        D9:F1:E3:84:3B:8A:2A:4F:85:5B:90:01:4F:C9:A7:76:
        10:7F:27:03:7C:BE:AE:7E:7D:C1:DD:F9:05:BC:1B:48:
        9C:69:E7:C0:A4:3C:3C:41:00:3E:DF:96:E5:C5:E4:94:
        71:D6:55:01:C7:00:26:4A:40:3C:B5:A1:26:A9:0C:A7:
        6D:80:8E:90:25:7B:CF:BF:3F:1C:EB:2F:96:FA:E5:87:
        77:C6:B5:56:B2:7A:3B:54:30:53:1B:DF:62:34:FF:1E:
        D1:F4:5A:93:28:85:E5:4C:17:4E:7E:5B:FD:A4:93:99:
        7F:DF:CD:EF:A4:75:EF:EF:15:F6:47:E7:F8:19:72:D8:
        2E:34:1A:A6:B4:A7:4C:7E:BD:BB:4F:0C:3D:57:F1:30:
        D6:A6:36:8E:D6:80:76:D7:19:2E:A5:CD:7E:34:2D:89: 0x010001
    - X509v3 extensions
      - basicConstraints
        true
        true: 0
      - certificatePolicies
        2.16.840.1.113733.1.7.23.3
        #0
        id-qt-cps: https://www.verisign.com/cps
        id-qt-unotice: https://www.verisign.com/rpa
      - keyUsage: true, 6
      - 1.3.6.1.5.5.7.1.12
        image/gif
        SHA1:
        8f e5 d3 1a 86 ac 8d 8e 6b c3 cf 80 6a d4 48 18 |........k...j.H.| 2c 7b 19 2e |,{.. |
        http://logo.verisign.com/vslogo.gif
      - crlDistributionPoints: http://crl.verisign.com/pca3-g5.crl
      - authorityInfoAccess
        OCSP: http://ocsp.verisign.com
      - extendedKeyUsage
        clientAuth: codeSigning
      - subjectAltName
        CN: VeriSignMPKI-2-8
      - subjectKeyIdentifier:
        cf 99 a9 ea 7b 26 f4 4b c9 8e 8f d7 f0 05 26 ef |....{&.K......&.| e3 d2 a7 9d |.... |
      - authorityKeyIdentifier:
        7f d3 65 a7 c2 dd ec bb f0 30 09 f3 43 39 fa 02 |..e......0..C9..| af 33 31 33 |.313 |
  - RSA-SHA1:
```
56 22 e6 34 a4 c4 61 cb  48 b9 01 ad 56 a8 64 0f  |V".4..a.H...V.d.|
d9 8c 91 c4 bb cc 0c e5  ad 7a a0 22 7f df 47 38  |.........z."..G8|
4a 2d 6c d1 7f 71 1a 7c  ec 70 a9 b1 f0 4f e4 0f  |J-l..q.|.p...O..|
0c 53 fa 15 5e fe 74 98  49 24 85 81 26 1c 91 14  |.S..^.t.I$..&...|
47 b0 4c 63 8c bb a1 34  d4 c6 45 e8 0d 85 26 73  |G.Lc...4..E...&s|
03 d0 a9 8c 64 6d dc 71  92 e6 45 05 60 15 59 51  |....dm.q..E.`.YQ|
39 fc 58 14 6b fe d4 a4  ed 79 6b 08 0c 41 72 e7  |9.X.k....yk..Ar.|
37 22 06 09 be 23 e9 3f  44 9a 1e e9 61 9d cc b1  |7"...#.?D...a...|
90 5c fc 3d d2 8d ac 42  3d 65 36 d4 b4 3d 40 28  |.\.=...B=e6..=@(|
8f 9b 10 cf 23 26 cc 4b  20 cb 90 1f 5d 8c 4c 34  |....#&.K ...].L4|
ca 3c d8 e5 37 d6 6f a5  20 bd 34 eb 26 d9 ae 0d  |.<..7.o. .4.&...|
e7 c5 9a f7 a1 b4 21 91  33 6f 86 e8 58 bb 25 7c  |......!.3o..X.%||
74 0e 58 fe 75 1b 63 3f  ce 31 7c 9b 8f 1b 96 9e  |t.X.u.c?.1|.....|
c5 53 76 84 5b 9c ad 91  fa ac ed 93 ba 5d c8 21  |.Sv.[........].!|
53 c2 82 53 63 af 12 0d  50 87 11 1b 3d 54 52 96  |S..Sc...P...=TR.|
8a 2c 9c 3d 92 1a 08 9a  05 2e c7 93 a5 48 91 d3  |.,.=.........H..|
```

Signer

1
unnamed
- #0
  - C: US
  - O: VeriSign, Inc.
  - OU: VeriSign Trust Network
  - OU: Terms of use at https://www.verisign.com/rpa (c)10
  - CN: VeriSign Class 3 Code Signing 2010 CA
- 48:49:CA:3C:76:2A:3E:D2:D3:1F:1C:8C:95:D3:96:84
SHA1: nil

1.3.6.1.4.1.311.2.1.12
- nil
contentType: 1.3.6.1.4.1.311.2.1.4
1.3.6.1.4.1.311.2.1.11: msCodeInd

messageDigest:

0a 72 ab 7c 93 1c 64 13  84 2b 81 cc 72 11 0c c2  |.r.|..d..+..r...|
e3 21 60 12                                       |.!`.            |

rsaEncryption:

4e f7 d9 20 c9 34 18 e5  ca de 8f 3a 40 c6 b2 df  |N.. .4.....:@...|
bd c8 70 ad b0 3e 84 07  1a 7c a5 a5 58 d9 64 27  |..p..>...|..X.d'|
34 e1 ad 8d cf f9 c7 97  cb 91 ad 1a 6d b4 e2 f5  |4...........m...|
98 f0 10 ac a0 41 d6 eb  f1 89 47 77 d3 b5 2f ce  |.....A....Gw../.|
60 0f 09 92 95 2d 48 b9  5f 0d 6a 56 4a 45 36 90  |`....-H._.jVJE6.|
11 51 fa 50 69 44 e8 aa  36 a4 f8 69 50 ec c3 89  |.Q.PiD..6..iP...|
a0 a3 3b a7 2a 9a 12 ec  41 ba 24 f4 b3 67 54 e7  |..;.*...A.$..gT.|
f4 1d a9 01 e2 93 da 1d  cd 68 c9 be 2c 8b cd 49  |.........h..,..I|
fa 5a b6 c1 85 59 73 1f  4f 76 ed 09 92 d4 b5 80  |.Z...Ys.Ov......|
a6 ff f5 d1 93 2d 0a ac  51 26 db 50 96 62 26 0f  |.....-..Q&.P.b&.|
c6 32 dc cb e8 df bf 9a  85 55 59 39 87 42 81 bb  |.2.......UY9.B..|
67 e4 53 34 80 0d 67 eb  47 14 69 b8 e7 0a d9 37  |g.S4..g.G.i....7|
33 69 49 6c 44 d2 02 89  7a 16 15 ae 87 b0 1d b3  |3iIlD...z.......|
b4 cb 74 a4 80 7c 7e ea  6d 6b 93 d9 2f 13 2f cb  |..t..|~.mk.././.|
26 fb 7c 63 0c 24 c4 c6  fb 32 ec 80 d9 3a ae 8b  |&.|c.$...2...:..|
5c 16 ac 67 7c d0 23 56  f2 39 74 28 21 4f a6 cb  |\..g|.#V.9t(!O..|

show previews

offset	size	type	comment
0	807936	EXE	01/23/2014 08:47:34	#
15c1	15	HTM		#
c5400	3712	PKCS7	Authenticode Signature	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK