filename | GROOVEEX.DLL | |
---|---|---|
size | 2333400 (0x239ad8) | |
md5 | 6435fdf20304b9f844d12f297eabe839 | |
type | PE32+ executable (DLL) (console) x86-64, for MS Windows | |
mimetype | application/x-dosexec | |
clamav | OK | |
virustotal | → scan with virustotal.com | |
histogram |
MZ Header
signature | MZ |
bytes_in_last_block | 0x90 |
blocks_in_file | 3 |
num_relocs | 0 |
header_paragraphs | 4 |
min_extra_paragraphs | 0 |
max_extra_paragraphs | 0xffff |
ss | 0 |
sp | 0xb8 |
checksum | 0 |
ip | 0 |
cs | 0 |
reloc_table_offset | 0x40 |
overlay_number | 0 |
reserved0 | 0 |
oem_id | 0 |
oem_info | 0 |
reserved2 | 0 |
reserved3 | 0 |
reserved4 | 0 |
reserved5 | 0 |
reserved6 | 0 |
lfanew | 0x128 |
Rich Header
lib id | version | times used |
---|---|---|
171 | 30319 | 3 |
156 | 40219 | 7 |
152 | 20115 | 1 |
158 | 40219 | 2 |
170 | 40219 | 11 |
171 | 40219 | 12 |
188 | 30716 | 14 |
185 | 30716 | 12 |
190 | 30716 | 6 |
1 | 0 | 732 |
184 | 30716 | 1 |
187 | 30716 | 2 |
189 | 30716 | 194 |
183 | 30716 | 1 |
186 | 30716 | 1 |
DOS stub
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
PE Header
Sections
Data Directory
module_name | hint | ord | function_name |
---|---|---|---|
MSVCR100.dll | 758 | _lock | |
MSVCR100.dll | 328 | __dllonexit | |
MSVCR100.dll | 1115 | _unlock | |
MSVCR100.dll | 326 | __crt_debugger_hook | |
MSVCR100.dll | 256 | void __cdecl terminate(void) ?terminate@@YAXXZ | |
MSVCR100.dll | 287 | __CppXcptFilter | |
MSVCR100.dll | 414 | _amsg_exit | |
MSVCR100.dll | 498 | _encoded_null | |
MSVCR100.dll | 647 | _initterm_e | |
MSVCR100.dll | 646 | _initterm | |
MSVCR100.dll | 775 | _malloc_crt | |
MSVCR100.dll | 1451 | memmove | |
MSVCR100.dll | 1155 | _vsnprintf_s | |
MSVCR100.dll | 1003 | _snwprintf_s | |
MSVCR100.dll | 1338 | bsearch | |
MSVCR100.dll | 1563 | wcsncat_s | |
MSVCR100.dll | 1553 | wcscat_s | |
MSVCR100.dll | 1295 | _wsplitpath_s | |
MSVCR100.dll | 1254 | _wfullpath | |
MSVCR100.dll | 1351 | div | |
MSVCR100.dll | 1535 | towlower | |
MSVCR100.dll | 1448 | memcmp | |
MSVCR100.dll | 266 | public: virtual char const * __ptr64 __cdecl std::exception::what(void)const __ptr64 ?what@exception@std@@UEBAPEBDXZ | |
MSVCR100.dll | 1566 | wcsncpy_s | |
MSVCR100.dll | 1379 | free | |
MSVCR100.dll | 949 | _recalloc | |
MSVCR100.dll | 1521 | swprintf_s | |
MSVCR100.dll | 122 | void __cdecl operator delete[](void * __ptr64) ??_V@YAXPEAX@Z | |
MSVCR100.dll | 270 | _CxxThrowException | |
MSVCR100.dll | 286 | __C_specific_handler | |
MSVCR100.dll | 296 | __CxxFrameHandler3 | |
MSVCR100.dll | 1449 | memcpy | |
MSVCR100.dll | 99 | void * __ptr64 __cdecl operator new(unsigned __int64) ??2@YAPEAX_K@Z | |
MSVCR100.dll | 1453 | memset | |
MSVCR100.dll | 650 | _invalid_parameter_noinfo_noreturn | |
MSVCR100.dll | 1450 | memcpy_s | |
MSVCR100.dll | 1452 | memmove_s | |
MSVCR100.dll | 120 | void * __ptr64 __cdecl operator new[](unsigned __int64) ??_U@YAPEAX_K@Z | |
MSVCR100.dll | 1438 | malloc | |
MSVCR100.dll | 1471 | realloc | |
MSVCR100.dll | 925 | _onexit | |
MSVCR100.dll | 1554 | wcschr | |
MSVCR100.dll | 1558 | wcscpy_s | |
MSVCR100.dll | 1564 | wcsncmp | |
MSVCR100.dll | 1568 | wcspbrk | |
MSVCR100.dll | 1569 | wcsrchr | |
MSVCR100.dll | 1573 | wcsstr | |
MSVCR100.dll | 1576 | wcstok_s | |
MSVCR100.dll | 1190 | _wcsicmp | |
MSVCR100.dll | 1200 | _wcsnicmp | |
MSVCR100.dll | 975 | _set_errno | |
MSVCR100.dll | 591 | _get_errno | |
MSVCR100.dll | 1341 | calloc | |
MSVCR100.dll | 772 | _ltow_s | |
MSVCR100.dll | 1104 | _ultow_s | |
MSVCR100.dll | 1574 | wcstod | |
MSVCR100.dll | 1577 | wcstol | |
MSVCR100.dll | 1580 | wcstoul | |
MSVCR100.dll | 1159 | _vsnwprintf_s | |
MSVCR100.dll | 1432 | localeconv | |
MSVCR100.dll | 277 | _HUGE | |
MSVCR100.dll | 1509 | strncpy_s | |
MSVCR100.dll | 1308 | _wtof | |
MSVCR100.dll | 1310 | _wtoi | |
MSVCR100.dll | 995 | _snprintf_s | |
MSVCR100.dll | 1547 | vswprintf_s | |
MSVCR100.dll | 1523 | swscanf_s | |
MSVCR100.dll | 757 | _localtime64_s | |
MSVCR100.dll | 428 | _beginthread | |
MSVCR100.dll | 429 | _beginthreadex | |
MSVCR100.dll | 500 | _endthreadex | |
MSVCR100.dll | 36 | public: __cdecl std::exception::exception(class std::exception const & __ptr64) __ptr64 ??0exception@std@@QEAA@AEBV01@@Z | |
MSVCR100.dll | 93 | public: virtual __cdecl std::exception::~exception(void) __ptr64 ??1exception@std@@UEAA@XZ | |
MSVCR100.dll | 574 | _ftime64_s | |
MSVCR100.dll | 320 | __clean_type_info_names_internal | |
MSVCR100.dll | 238 | public: void __cdecl type_info::_type_info_dtor_internal_method(void) __ptr64 ?_type_info_dtor_internal_method@type_info@@QEAAXXZ | |
MSVCR100.dll | 101 | void __cdecl operator delete(void * __ptr64) ??3@YAXPEAX@Z | |
MSVCR100.dll | 347 | __lconv_init | |
MSVCR100.dll | 644 | _i64tow_s | |
MSVCR100.dll | 35 | public: __cdecl std::exception::exception(char const * __ptr64 const & __ptr64, int) __ptr64 ??0exception@std@@QEAA@AEBQEBDH@Z | |
MSVCR100.dll | 1555 | wcscmp | |
MSVCR100.dll | 1546 | vsprintf_s | |
MSVCP100.dll | 650 | void __cdecl std::tr1::_Xfunc(void) ?_Xfunc@tr1@std@@YAXXZ | |
MSVCP100.dll | 652 | void __cdecl std::_Xlength_error(char const * __ptr64) ?_Xlength_error@std@@YAXPEBD@Z | |
MSVCP100.dll | 654 | void __cdecl std::_Xout_of_range(char const * __ptr64) ?_Xout_of_range@std@@YAXPEBD@Z | |
MSVCP100.dll | 593 | public: void __cdecl std::_Container_base0::_Orphan_all(void) __ptr64 ?_Orphan_all@_Container_base0@std@@QEAAXXZ | |
ATL100.DLL | 68 | ||
ATL100.DLL | 26 | ||
ATL100.DLL | 53 | ||
ATL100.DLL | 52 | ||
ATL100.DLL | 51 | ||
ATL100.DLL | 50 | ||
ATL100.DLL | 64 | ||
ATL100.DLL | 15 | ||
ATL100.DLL | 11 | ||
ATL100.DLL | 10 | ||
ATL100.DLL | 27 | ||
ATL100.DLL | 61 | ||
ATL100.DLL | 44 | ||
ATL100.DLL | 43 | ||
ATL100.DLL | 58 | ||
ATL100.DLL | 23 | ||
ATL100.DLL | 31 | ||
ATL100.DLL | 30 | ||
ATL100.DLL | 32 | ||
ATL100.DLL | 56 | ||
ATL100.DLL | 49 | ||
ADVAPI32.dll | 370 | GetTraceLoggerHandle | |
ADVAPI32.dll | 690 | RegisterTraceGuidsW | |
ADVAPI32.dll | 368 | GetTraceEnableFlags | |
ADVAPI32.dll | 530 | OpenProcessToken | |
ADVAPI32.dll | 363 | GetSidSubAuthority | |
ADVAPI32.dll | 364 | GetSidSubAuthorityCount | |
ADVAPI32.dll | 367 | GetTokenInformation | |
ADVAPI32.dll | 600 | RegCloseKey | |
ADVAPI32.dll | 609 | RegCreateKeyExW | |
ADVAPI32.dll | 620 | RegDeleteKeyW | |
ADVAPI32.dll | 624 | RegDeleteValueW | |
ADVAPI32.dll | 632 | RegEnumKeyW | |
ADVAPI32.dll | 631 | RegEnumKeyExW | |
ADVAPI32.dll | 649 | RegOpenKeyExW | |
ADVAPI32.dll | 656 | RegQueryInfoKeyW | |
ADVAPI32.dll | 662 | RegQueryValueExW | |
ADVAPI32.dll | 678 | RegSetValueExW | |
ADVAPI32.dll | 192 | CryptAcquireContextA | |
ADVAPI32.dll | 219 | CryptReleaseContext | |
ADVAPI32.dll | 212 | CryptGetHashParam | |
ADVAPI32.dll | 195 | CryptCreateHash | |
ADVAPI32.dll | 216 | CryptHashData | |
ADVAPI32.dll | 198 | CryptDestroyHash | |
ADVAPI32.dll | 801 | TraceEvent | |
ADVAPI32.dll | 330 | GetLengthSid | |
ADVAPI32.dll | 412 | IsValidSid | |
ADVAPI32.dll | 816 | UnregisterTraceGuids | |
ADVAPI32.dll | 291 | EventWrite | |
ADVAPI32.dll | 661 | RegQueryValueExA | |
ADVAPI32.dll | 699 | ReportEventW | |
ADVAPI32.dll | 683 | RegisterEventSourceW | |
ADVAPI32.dll | 235 | DeregisterEventSource | |
ADVAPI32.dll | 655 | RegQueryInfoKeyA | |
ADVAPI32.dll | 633 | RegEnumValueA | |
ADVAPI32.dll | 623 | RegDeleteValueA | |
ADVAPI32.dll | 638 | RegGetValueW | |
ADVAPI32.dll | 634 | RegEnumValueW | |
ADVAPI32.dll | 535 | OpenThreadToken | |
ADVAPI32.dll | 129 | ConvertStringSecurityDescriptorToSecurityDescriptorW | |
ADVAPI32.dll | 122 | ConvertSidToStringSidA | |
ADVAPI32.dll | 739 | SetSecurityDescriptorDacl | |
ADVAPI32.dll | 397 | InitializeSecurityDescriptor | |
ADVAPI32.dll | 396 | InitializeAcl | |
ADVAPI32.dll | 348 | GetSecurityDescriptorDacl | |
ADVAPI32.dll | 307 | FreeSid | |
ADVAPI32.dll | 280 | EqualSid | |
ADVAPI32.dll | 146 | CreateWellKnownSid | |
ADVAPI32.dll | 133 | CopySid | |
ADVAPI32.dll | 95 | CheckTokenMembership | |
ADVAPI32.dll | 32 | AllocateAndInitializeSid | |
ADVAPI32.dll | 19 | AddAccessDeniedAce | |
ADVAPI32.dll | 369 | GetTraceEnableLevel | |
ADVAPI32.dll | 16 | AddAccessAllowedAce | |
ADVAPI32.dll | 290 | EventUnregister | |
ADVAPI32.dll | 288 | EventRegister | |
ADVAPI32.dll | 648 | RegOpenKeyExA | |
GDI32.dll | 491 | GetDeviceCaps | |
GDI32.dll | 659 | RestoreDC | |
GDI32.dll | 666 | SaveDC | |
GDI32.dll | 260 | DeleteMetaFile | |
GDI32.dll | 758 | SetTextAlign | |
GDI32.dll | 779 | TextOutW | |
GDI32.dll | 81 | CreateRectRgnIndirect | |
GDI32.dll | 72 | CreateMetaFileW | |
GDI32.dll | 31 | CloseMetaFile | |
GDI32.dll | 763 | SetViewportOrgEx | |
GDI32.dll | 596 | LPtoDP | |
GDI32.dll | 739 | SetLayout | |
GDI32.dll | 261 | DeleteObject | |
GDI32.dll | 258 | DeleteDC | |
GDI32.dll | 742 | SetMapMode | |
GDI32.dll | 766 | SetWindowExtEx | |
GDI32.dll | 767 | SetWindowOrgEx | |
KERNEL32.dll | 720 | GetProductInfo | |
KERNEL32.dll | 807 | GetUserGeoID | |
KERNEL32.dll | 806 | GetUserDefaultUILanguage | |
KERNEL32.dll | 1482 | WaitForMultipleObjectsEx | |
KERNEL32.dll | 226 | CreateMutexA | |
KERNEL32.dll | 199 | CreateEventA | |
KERNEL32.dll | 235 | CreateProcessA | |
KERNEL32.dll | 207 | CreateFileMappingA | |
KERNEL32.dll | 1030 | OpenMutexA | |
KERNEL32.dll | 862 | HeapSetInformation | |
KERNEL32.dll | 1473 | VirtualProtect | |
KERNEL32.dll | 1496 | WerRegisterMemoryBlock | |
KERNEL32.dll | 320 | EncodePointer | |
KERNEL32.dll | 280 | DecodePointer | |
KERNEL32.dll | 1440 | UnhandledExceptionFilter | |
KERNEL32.dll | 1225 | RtlVirtualUnwind | |
KERNEL32.dll | 1218 | RtlLookupFunctionEntry | |
KERNEL32.dll | 1211 | RtlCaptureContext | |
KERNEL32.dll | 886 | InterlockedPushEntrySList | |
KERNEL32.dll | 1470 | VirtualFree | |
KERNEL32.dll | 1467 | VirtualAlloc | |
KERNEL32.dll | 885 | InterlockedPopEntrySList | |
KERNEL32.dll | 744 | GetStringTypeExW | |
KERNEL32.dll | 430 | FlsAlloc | |
KERNEL32.dll | 432 | FlsGetValue | |
KERNEL32.dll | 431 | FlsFree | |
KERNEL32.dll | 963 | LoadLibraryA | |
KERNEL32.dll | 606 | GetFileType | |
KERNEL32.dll | 642 | GetModuleFileNameA | |
KERNEL32.dll | 731 | GetShortPathNameA | |
KERNEL32.dll | 557 | GetCurrentThread | |
KERNEL32.dll | 1212 | RtlCaptureStackBackTrace | |
KERNEL32.dll | 1047 | OutputDebugStringA | |
KERNEL32.dll | 1100 | RaiseException | |
KERNEL32.dll | 624 | GetLastError | |
KERNEL32.dll | 1317 | SetLastError | |
KERNEL32.dll | 324 | EnterCriticalSection | |
KERNEL32.dll | 960 | LeaveCriticalSection | |
KERNEL32.dll | 287 | DeleteCriticalSection | |
KERNEL32.dll | 812 | GetVersionExW | |
KERNEL32.dll | 643 | GetModuleFileNameW | |
KERNEL32.dll | 647 | GetModuleHandleW | |
KERNEL32.dll | 646 | GetModuleHandleExW | |
KERNEL32.dll | 700 | GetProcAddress | |
KERNEL32.dll | 966 | LoadLibraryW | |
KERNEL32.dll | 188 | CreateActCtxW | |
KERNEL32.dll | 3 | ActivateActCtx | |
KERNEL32.dll | 273 | DeactivateActCtx | |
KERNEL32.dll | 390 | FindActCtxSectionStringW | |
KERNEL32.dll | 1076 | QueryActCtxW | |
KERNEL32.dll | 879 | InitializeCriticalSectionAndSpinCount | |
KERNEL32.dll | 553 | GetCurrentProcess | |
KERNEL32.dll | 436 | FlushInstructionCache | |
KERNEL32.dll | 1475 | VirtualQuery | |
KERNEL32.dll | 142 | CloseHandle | |
KERNEL32.dll | 972 | LocalAlloc | |
KERNEL32.dll | 976 | LocalFree | |
KERNEL32.dll | 393 | FindAtomW | |
KERNEL32.dll | 558 | GetCurrentThreadId | |
KERNEL32.dll | 446 | FreeLibrary | |
KERNEL32.dll | 965 | LoadLibraryExW | |
KERNEL32.dll | 1584 | lstrlenA | |
KERNEL32.dll | 167 | CompareStringW | |
KERNEL32.dll | 1007 | MultiByteToWideChar | |
KERNEL32.dll | 1517 | WideCharToMultiByte | |
KERNEL32.dll | 803 | GetUserDefaultLCID | |
KERNEL32.dll | 489 | GetCommandLineW | |
KERNEL32.dll | 198 | CreateDirectoryW | |
KERNEL32.dll | 214 | CreateFileW | |
KERNEL32.dll | 292 | DeleteFileW | |
KERNEL32.dll | 394 | FindClose | |
KERNEL32.dll | 405 | FindFirstFileW | |
KERNEL32.dll | 417 | FindNextFileW | |
KERNEL32.dll | 435 | FlushFileBuffers | |
KERNEL32.dll | 597 | GetFileAttributesW | |
KERNEL32.dll | 603 | GetFileSize | |
KERNEL32.dll | 637 | GetLongPathNameW | |
KERNEL32.dll | 774 | GetTempFileNameW | |
KERNEL32.dll | 1116 | ReadFile | |
KERNEL32.dll | 1189 | RemoveDirectoryW | |
KERNEL32.dll | 1285 | SetEndOfFile | |
KERNEL32.dll | 1298 | SetFileAttributesW | |
KERNEL32.dll | 1303 | SetFilePointer | |
KERNEL32.dll | 1537 | WriteFile | |
KERNEL32.dll | 776 | GetTempPathW | |
KERNEL32.dll | 902 | IsDebuggerPresent | |
KERNEL32.dll | 277 | DebugBreak | |
KERNEL32.dll | 1048 | OutputDebugStringW | |
KERNEL32.dll | 1087 | QueryPerformanceCounter | |
KERNEL32.dll | 1088 | QueryPerformanceFrequency | |
KERNEL32.dll | 854 | HeapAlloc | |
KERNEL32.dll | 858 | HeapFree | |
KERNEL32.dll | 878 | InitializeCriticalSection | |
KERNEL32.dll | 1291 | SetEvent | |
KERNEL32.dll | 1202 | ResetEvent | |
KERNEL32.dll | 1179 | ReleaseMutex | |
KERNEL32.dll | 1483 | WaitForSingleObject | |
KERNEL32.dll | 229 | CreateMutexW | |
KERNEL32.dll | 202 | CreateEventW | |
KERNEL32.dll | 1390 | Sleep | |
KERNEL32.dll | 554 | GetCurrentProcessId | |
KERNEL32.dll | 1406 | TerminateProcess | |
KERNEL32.dll | 1424 | TlsAlloc | |
KERNEL32.dll | 1426 | TlsGetValue | |
KERNEL32.dll | 1427 | TlsSetValue | |
KERNEL32.dll | 1425 | TlsFree | |
KERNEL32.dll | 239 | CreateProcessW | |
KERNEL32.dll | 843 | GlobalMemoryStatusEx | |
KERNEL32.dll | 761 | GetSystemTime | |
KERNEL32.dll | 791 | GetTickCount | |
KERNEL32.dll | 917 | IsWow64Process | |
KERNEL32.dll | 841 | GlobalLock | |
KERNEL32.dll | 848 | GlobalUnlock | |
KERNEL32.dll | 1481 | WaitForMultipleObjects | |
KERNEL32.dll | 442 | FormatMessageW | |
KERNEL32.dll | 1576 | lstrcmpiW | |
KERNEL32.dll | 1585 | lstrlenW | |
KERNEL32.dll | 245 | CreateSemaphoreW | |
KERNEL32.dll | 185 | CopyFileW | |
KERNEL32.dll | 1003 | MoveFileW | |
KERNEL32.dll | 1403 | SystemTimeToTzSpecificLocalTime | |
KERNEL32.dll | 1435 | TzSpecificLocalTimeToSystemTime | |
KERNEL32.dll | 383 | FileTimeToSystemTime | |
KERNEL32.dll | 1402 | SystemTimeToFileTime | |
KERNEL32.dll | 798 | GetTimeZoneInformation | |
KERNEL32.dll | 600 | GetFileInformationByHandleEx | |
KERNEL32.dll | 796 | GetTimeFormatW | |
KERNEL32.dll | 745 | GetStringTypeW | |
KERNEL32.dll | 452 | GetACP | |
KERNEL32.dll | 628 | GetLocaleInfoW | |
KERNEL32.dll | 675 | GetNumberFormatW | |
KERNEL32.dll | 540 | GetCurrencyFormatW | |
KERNEL32.dll | 172 | ConvertDefaultLocale | |
KERNEL32.dll | 358 | EnumSystemLocalesW | |
KERNEL32.dll | 757 | GetSystemInfo | |
KERNEL32.dll | 1375 | SetUnhandledExceptionFilter | |
KERNEL32.dll | 564 | GetDateFormatW | |
KERNEL32.dll | 547 | GetCurrentDirectoryW | |
KERNEL32.dll | 163 | CompareFileTime | |
KERNEL32.dll | 382 | FileTimeToLocalFileTime | |
KERNEL32.dll | 571 | GetDiskFreeSpaceExW | |
KERNEL32.dll | 974 | LocalFileTimeToFileTime | |
KERNEL32.dll | 1307 | SetFileTime | |
KERNEL32.dll | 1183 | ReleaseSemaphore | |
KERNEL32.dll | 823 | GetWindowsDirectoryW | |
KERNEL32.dll | 211 | CreateFileMappingW | |
KERNEL32.dll | 990 | MapViewOfFile | |
KERNEL32.dll | 438 | FlushViewOfFile | |
KERNEL32.dll | 1443 | UnmapViewOfFile | |
KERNEL32.dll | 969 | LoadResource | |
KERNEL32.dll | 987 | LockResource | |
KERNEL32.dll | 1389 | SizeofResource | |
KERNEL32.dll | 842 | GlobalMemoryStatus | |
KERNEL32.dll | 426 | FindResourceW | |
KERNEL32.dll | 1099 | QueueUserWorkItem | |
KERNEL32.dll | 830 | GlobalAlloc | |
KERNEL32.dll | 880 | InitializeCriticalSectionEx | |
KERNEL32.dll | 914 | IsValidLocale | |
KERNEL32.dll | 749 | GetSystemDefaultLCID | |
KERNEL32.dll | 165 | CompareStringEx | |
KERNEL32.dll | 945 | LCIDToLocaleName | |
KERNEL32.dll | 983 | LocaleNameToLCID | |
KERNEL32.dll | 805 | GetUserDefaultLocaleName | |
KERNEL32.dll | 751 | GetSystemDefaultLocaleName | |
KERNEL32.dll | 804 | GetUserDefaultLangID | |
KERNEL32.dll | 627 | GetLocaleInfoEx | |
KERNEL32.dll | 328 | EnumCalendarInfoExEx | |
KERNEL32.dll | 357 | EnumSystemLocalesEx | |
KERNEL32.dll | 563 | GetDateFormatEx | |
KERNEL32.dll | 476 | GetCalendarInfoEx | |
KERNEL32.dll | 333 | EnumDateFormatsExEx | |
KERNEL32.dll | 360 | EnumTimeFormatsEx | |
KERNEL32.dll | 705 | GetProcessHeap | |
KERNEL32.dll | 790 | GetThreadUILanguage | |
KERNEL32.dll | 763 | GetSystemTimeAsFileTime | |
KERNEL32.dll | 625 | GetLocalTime | |
KERNEL32.dll | 792 | GetTickCount64 | |
KERNEL32.dll | 317 | DuplicateHandle | |
KERNEL32.dll | 1484 | WaitForSingleObjectEx | |
KERNEL32.dll | 837 | GlobalFree | |
KERNEL32.dll | 1101 | RaiseFailFastException | |
KERNEL32.dll | 594 | GetFileAttributesExW | |
KERNEL32.dll | 754 | GetSystemDirectoryW | |
KERNEL32.dll | 660 | GetNativeSystemInfo | |
ole32.dll | 29 | CoCreateInstance | |
ole32.dll | 424 | OleRegEnumVerbs | |
ole32.dll | 426 | OleRegGetUserType | |
ole32.dll | 153 | CreateOleAdviseHolder | |
ole32.dll | 145 | CreateDataAdviseHolder | |
ole32.dll | 28 | CoCreateGuid | |
ole32.dll | 440 | ProgIDFromCLSID | |
ole32.dll | 302 | IIDFromString | |
ole32.dll | 124 | CoTaskMemAlloc | |
ole32.dll | 125 | CoTaskMemFree | |
ole32.dll | 506 | StringFromIID | |
ole32.dll | 504 | StringFromCLSID | |
ole32.dll | 27 | CoCreateFreeThreadedMarshaler | |
ole32.dll | 83 | CoInitializeEx | |
ole32.dll | 129 | CoUninitialize | |
ole32.dll | 16 | CLSIDFromString | |
ole32.dll | 14 | CLSIDFromProgID | |
OLEAUT32.dll | 2 | ||
OLEAUT32.dll | 6 | ||
OLEAUT32.dll | 7 | ||
OLEAUT32.dll | 8 | ||
OLEAUT32.dll | 417 | ||
OLEAUT32.dll | 146 | ||
OLEAUT32.dll | 149 | ||
OLEAUT32.dll | 94 | ||
OLEAUT32.dll | 185 | ||
OLEAUT32.dll | 200 | ||
OLEAUT32.dll | 201 | ||
OLEAUT32.dll | 162 | ||
OLEAUT32.dll | 183 | ||
OLEAUT32.dll | 12 | ||
OLEAUT32.dll | 11 | ||
OLEAUT32.dll | 10 | ||
OLEAUT32.dll | 9 | ||
OLEAUT32.dll | 411 | ||
OLEAUT32.dll | 77 | ||
OLEAUT32.dll | 24 | ||
OLEAUT32.dll | 23 | ||
OLEAUT32.dll | 20 | ||
OLEAUT32.dll | 19 | ||
OLEAUT32.dll | 17 | ||
OLEAUT32.dll | 16 | ||
OLEAUT32.dll | 5 | ||
OLEAUT32.dll | 4 | ||
OLEAUT32.dll | 161 | ||
OLEAUT32.dll | 186 | ||
OLEAUT32.dll | 163 |
ord | entry_va | function_name | |
---|---|---|---|
1 | 0xad884 | ExecuteSPFSVerbW | |
2 | 0xd3cc | DllCanUnloadNow | |
3 | 0x1860 | DllGetClassObject | |
4 | 0xa9a64 | DllRegisterServer | |
5 | 0xa9abc | DllUnregisterServer |
StringTable 040904E4
CompanyName | Microsoft Corporation |
FileDescription | Microsoft OneDrive for Business Extensions |
FileVersion | 15.0.4569.1503 |
InternalName | GrooveEX |
LegalTrademarks1 | Microsoft® is a registered trademark of Microsoft Corporation. |
LegalTrademarks2 | Windows® is a registered trademark of Microsoft Corporation. |
OriginalFilename | GrooveEX.dll |
ProductName | Microsoft Office 2013 |
ProductVersion | 15.0.4569.1503 |
VS_FIXEDFILEINFO
FileVersion | 15.0.4569.1503 |
ProductVersion | 15.0.4569.0 |
StrucVersion | 0x10000 |
FileFlagsMask | 0x3f |
FileFlags | 0 |
FileOS | 0x40004 |
FileType | 2 |
FileSubtype | 0 |
Signers (1)
issuer: /C=US/ST=Washington/L=Redmond/O=Microsoft Corporation/CN=Microsoft Code Signing PCA
serial: 33000000B011AF0A8BD03B9FDD0001000000B0
Certificates (4)
Certificate: Data: Version: 3 (0x2) Serial Number: 33:00:00:00:4c:a1:e8:4d:cc:b4:74:7b:3b:00:00:00:00:00:4c Signature Algorithm: sha1WithRSAEncryption Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Time-Stamp PCA Validity Not Before: Nov 11 22:11:31 2013 GMT Not After : Feb 11 22:11:31 2015 GMT Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=MOPR, OU=nCipher DSE ESN:C0F4-3086-DEF8, CN=Microsoft Time-Stamp Service Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:b1:d8:fa:1b:06:2b:77:a8:e4:94:5d:7c:0f:e6: 7a:a6:92:ee:8a:54:1d:a4:f9:84:75:85:97:cc:cb: 5c:96:d0:d7:75:2d:d9:08:fb:5b:d2:ee:2d:25:c6: 37:3e:f5:ab:7e:1a:53:e5:57:be:6b:e8:bf:ca:96: 0a:dc:46:f1:5a:1e:3e:02:d2:b2:e0:26:8e:00:64: 7b:be:3c:93:f8:58:32:79:87:d2:1a:5d:23:bc:9c: 51:c4:0f:10:fa:04:58:b5:16:76:6e:ec:bc:c6:e5: be:fc:ad:ac:c1:41:db:aa:ce:79:f5:1c:b2:99:41: a7:7a:25:2b:ff:ab:78:0d:58:3a:b1:5e:50:de:64: 4c:e0:ca:15:2a:df:a6:e9:fe:a4:66:2f:5b:10:09: 09:26:21:d4:3f:0d:2f:6d:d2:f8:77:90:03:6c:de: 14:12:a5:8c:e7:36:1f:f4:87:a5:b0:41:17:6f:e3: 4d:74:66:c2:fd:a2:71:46:35:51:cc:6b:17:51:63: fa:15:94:92:9a:5f:4b:28:ba:e6:16:45:49:e9:2c: b5:fe:8b:87:af:fc:a5:6d:43:dc:a6:30:fa:29:28: ef:9b:0d:2c:5c:83:de:12:8d:6a:b4:db:71:ef:5c: 14:5a:2a:23:28:ff:81:70:57:f1:8c:07:9a:13:d8: 2a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:0D:AD:B3:4D:F4:DA:9F:1A:B2:27:26:55:0D:20:44:D8:98:E2:F4 X509v3 Authority Key Identifier: 23:34:F8:D9:52:46:70:0A:ED:40:FB:76:FB:B3:2B:B0:C3:35:B3:0F X509v3 CRL Distribution Points: Full Name: URI:http://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl Authority Information Access: CA Issuers - URI:http://www.microsoft.com/pki/certs/MicrosoftTimeStampPCA.crt X509v3 Extended Key Usage: Time Stamping Signature Algorithm: sha1WithRSAEncryption Signature Value: 09:8a:4e:06:af:e8:ed:82:cf:1d:07:7e:d7:2a:a7:24:0b:2d: af:9a:5b:24:7f:94:71:0c:55:88:24:1a:52:15:63:e2:90:4d: 05:4a:98:4a:9c:fb:e1:a7:6d:68:55:82:b9:29:ea:69:a9:b2: d5:e3:0c:da:d1:d6:7a:25:37:78:67:1c:0c:fb:db:29:5a:1a: 97:38:2a:39:56:46:fb:35:81:b9:e4:3d:46:5a:8e:e4:fc:75: 37:58:59:49:8b:4e:db:3c:15:9d:73:52:4b:eb:7b:0c:3a:c2: 2d:c1:b3:9b:52:2d:e0:35:c5:b9:c1:57:b3:e8:3d:a1:3c:44: f2:23:16:1e:0a:aa:59:37:27:d0:95:52:5e:a8:7f:3f:54:f0: 81:e1:dc:9a:bd:65:d5:78:f6:f7:4c:39:bb:dd:e0:d6:37:0e: 91:9a:87:8c:73:e7:71:64:52:f7:3e:03:d8:c6:cd:72:b8:34: 34:98:5b:8c:d3:f5:08:a6:eb:78:c6:51:a0:0d:0e:6f:f4:6b: 3c:40:1a:60:16:2c:a9:06:52:9d:1c:13:90:ce:6f:02:1e:ea: 7b:9c:b3:f6:f8:97:60:f2:65:d1:d1:1f:87:3a:c1:75:f0:42: 8d:7a:ed:8c:72:b2:7b:fb:2c:8a:b4:91:47:54:e2:2e:69:cc: 16:54:1a:59
Certificate: Data: Version: 3 (0x2) Serial Number: 33:00:00:00:b0:11:af:0a:8b:d0:3b:9f:dd:00:01:00:00:00:b0 Signature Algorithm: sha1WithRSAEncryption Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Code Signing PCA Validity Not Before: Jan 24 22:33:39 2013 GMT Not After : Apr 24 22:33:39 2014 GMT Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=MOPR, CN=Microsoft Corporation Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:e8:af:5c:a2:20:0d:f8:28:7c:bc:05:7b:7f:ad: ee:eb:76:ac:28:53:3f:3a:db:40:7d:b3:8e:33:e6: 57:3f:a5:51:15:34:54:a5:cf:b4:8b:a9:3f:a8:37: e1:2d:50:ed:35:16:4e:ef:4d:7a:db:13:76:88:b0: 2c:f0:59:5c:a9:eb:e1:d7:29:75:e4:1b:85:27:9b: f3:f8:2d:9e:41:36:2b:0b:40:fb:be:3b:ba:b9:5c: 75:93:16:52:4b:ca:33:c5:37:b0:f3:eb:7e:a8:f5: 41:15:5c:08:65:1d:21:37:f0:2c:ba:22:0b:10:b1: 10:9d:77:22:85:84:7c:4f:b9:1b:90:b0:f5:a3:fe: 8b:f4:0c:9a:4e:a0:f5:c9:0a:21:e2:aa:e3:01:36: 47:fd:2f:82:6a:81:03:f5:a9:35:dc:94:57:9d:fb: 4b:d4:0e:82:db:38:8f:12:fe:e3:d6:7a:74:88:64: e1:62:c4:25:2e:2a:ae:9d:18:1f:0e:1e:b6:c2:af: 24:b4:0e:50:bc:de:1c:93:5c:49:a6:79:b5:b6:db: ce:f9:70:7b:28:01:84:b8:2a:29:cf:bf:a9:05:05: e1:e0:0f:71:4d:fd:ad:5c:23:83:29:eb:c7:c5:4a: c8:e8:27:84:d3:7e:c6:43:0b:95:00:05:b1:4f:65: 71:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Extended Key Usage: Code Signing X509v3 Subject Key Identifier: 59:71:A6:5A:33:4D:DA:98:07:80:FF:84:1E:BE:87:F9:72:32:41:F2 X509v3 Subject Alternative Name: DirName:/OU=MOPR/serialNumber=31595\+4faf0b71-ad37-4aa3-a671-76bc052344ad X509v3 Authority Key Identifier: CB:11:E8:CA:D2:B4:16:58:01:C9:37:2E:33:16:16:B9:4C:9A:0A:1F X509v3 CRL Distribution Points: Full Name: URI:http://crl.microsoft.com/pki/crl/products/MicCodSigPCA_08-31-2010.crl Authority Information Access: CA Issuers - URI:http://www.microsoft.com/pki/certs/MicCodSigPCA_08-31-2010.crt Signature Algorithm: sha1WithRSAEncryption Signature Value: 31:d7:6e:2a:12:57:33:81:d5:9d:c6:eb:f9:3a:d4:44:4d:08: 9e:ee:5e:df:6a:5b:b7:79:cf:02:9c:bc:76:68:9e:90:a1:9c: 0b:c3:7f:a2:8c:f1:4d:ba:95:39:fb:0d:e0:e1:9b:f4:5d:24: 0f:1b:8d:88:15:3a:7c:db:ad:ce:b3:c9:6c:ba:39:2c:45:7d: 24:11:54:26:30:0d:0d:ff:47:ea:03:07:e5:e4:66:5d:2c:7b: 9d:1d:a9:10:fa:1c:b0:74:f2:4f:69:6b:9e:a9:24:84:da:ed: 96:a0:df:73:a4:ef:6a:1a:ac:4b:62:9e:f1:7c:c0:14:7f:48: cd:4d:b2:44:f9:f0:3c:93:6d:42:d8:e8:7c:e6:17:a0:9b:68: 68:09:28:f9:02:97:ef:11:03:ba:67:52:ad:c1:e9:b3:73:a6: d2:63:cd:4a:e2:3e:e4:f3:4e:fd:ff:a1:e0:bb:02:13:3b:5d: 20:de:55:3f:a3:ae:90:40:31:38:75:28:5e:04:a9:46:6d:e6: f5:7a:79:40:bd:1f:cd:e8:45:d5:ae:e2:5d:3e:f5:75:c7:e6: 66:63:60:cc:d5:9a:84:87:8d:24:30:f7:ef:34:d0:63:1d:b1: 42:67:4a:0e:4b:bf:3a:0e:ef:b6:95:3a:a7:38:e4:25:92:08: a6:88:66:82
Certificate: Data: Version: 3 (0x2) Serial Number: 61:33:26:1a:00:00:00:00:00:31 Signature Algorithm: sha1WithRSAEncryption Issuer: DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority Validity Not Before: Aug 31 22:19:32 2010 GMT Not After : Aug 31 22:29:32 2020 GMT Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Code Signing PCA Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:b2:72:59:5c:19:30:64:bf:1d:9a:60:20:20:42: 99:76:53:6c:3e:1b:d6:6f:cc:cb:f1:ea:6b:fe:97: 16:10:e0:df:3a:74:83:1a:b7:2f:a0:32:ec:ff:de: c2:42:4e:23:d5:72:00:db:35:57:0a:89:ca:ae:20: 49:f4:f0:68:ac:4d:4b:8d:a5:bd:79:4b:71:9b:47: 07:da:fd:25:df:9d:75:88:cf:aa:73:44:7f:d7:81: db:f3:bd:f2:36:a4:c9:5c:45:dc:af:ad:3d:e0:28: 68:97:1a:a7:a5:72:73:56:f1:17:94:e4:fd:35:94: 72:a0:d6:76:5f:1e:77:45:83:85:38:16:d0:73:5b: 05:ba:67:52:8d:a5:b2:69:2f:da:19:0b:fe:92:74: 29:e2:76:2f:54:dd:14:30:59:f8:d2:8d:62:fd:cb: c9:5f:46:31:50:b9:27:13:e4:40:30:cf:72:29:10: 28:22:c7:37:4e:3d:a0:32:3d:90:cd:a1:38:06:85: 5c:4e:56:82:28:2a:05:32:b7:4b:d7:4f:63:e7:d2: 2d:62:f1:45:3d:e7:ac:08:00:f6:46:a1:9e:d1:5b: 8c:26:53:e8:7a:aa:4a:f2:46:cf:37:3c:38:9e:b4: 77:5c:a5:17:9e:8d:cb:11:8f:56:3c:c1:ac:09:5f: 03:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CB:11:E8:CA:D2:B4:16:58:01:C9:37:2E:33:16:16:B9:4C:9A:0A:1F X509v3 Key Usage: Digital Signature, Certificate Sign, CRL Sign 1.3.6.1.4.1.311.21.1: ..... 1.3.6.1.4.1.311.21.2: ....1N.&....`;.1o.<..- 1.3.6.1.4.1.311.20.2: . .S.u.b.C.A X509v3 Authority Key Identifier: 0E:AC:82:60:40:56:27:97:E5:25:13:FC:2A:E1:0A:53:95:59:E4:A4 X509v3 CRL Distribution Points: Full Name: URI:http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl Authority Information Access: CA Issuers - URI:http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt Signature Algorithm: sha1WithRSAEncryption Signature Value: 59:39:3e:7f:26:46:af:eb:6f:40:b1:32:b5:6a:eb:0e:2f:6e: a8:49:f7:eb:5f:75:ed:4c:3b:2d:d7:43:ad:0b:fe:cb:e9:2d: 31:a3:23:cc:7c:50:98:80:21:5d:ac:3d:2f:4c:ba:a2:a8:56: 9c:e3:70:bb:b8:b4:f8:79:b5:49:72:f7:3e:ea:41:7f:ca:e1: 0c:17:69:cb:a5:9c:20:2d:fa:0b:50:c4:56:cd:2d:e3:4a:d2: bc:70:e7:a8:0d:a2:03:a5:56:e0:b8:8a:4b:57:f2:95:42:9c: f1:f3:ef:ee:e3:86:1f:34:3c:b8:56:9a:f0:53:23:85:2a:a4: 82:1c:93:e2:94:07:1d:f2:e2:4e:f8:8c:a1:ca:e8:13:a5:91: 4e:c8:1b:d2:8f:72:95:2a:71:6d:9b:1a:f8:1c:f0:53:d6:67: cc:22:ff:5c:1d:cd:a2:8c:bd:27:b2:79:63:56:44:a2:51:cd: f9:e9:a3:58:56:dd:9b:02:45:44:2f:5f:f4:da:ae:d4:82:32: 6e:fc:a4:95:13:e4:eb:69:e7:a9:a2:2c:be:c8:2b:10:0e:65: 8e:99:db:f5:a2:fa:12:26:09:65:38:94:f1:7a:1f:4a:bb:d1: e1:56:e8:d0:78:96:18:5c:c9:35:16:5f:dd:93:1d:49:8e:2d: be:ad:34:44:1c:ee:10:15:1a:00:5d:dd:35:5b:21:ce:98:c7: 09:ee:85:0e:8c:4f:6d:0e:13:4e:3d:7c:29:48:9c:72:d1:f3: 6c:ca:c1:ec:70:a3:57:92:57:7d:94:8d:a0:1b:48:03:5a:f7: cf:a3:67:0a:74:a5:36:ed:2d:2f:17:c8:e6:72:37:12:f4:6f: b1:3c:67:82:f9:52:b2:8d:33:16:65:1e:0e:8a:dd:10:de:64: f4:6f:ce:46:d4:d3:17:e9:79:c4:04:b4:d3:fb:2c:df:1f:8a: 9e:ac:0a:fb:13:27:40:ad:e4:f9:e1:a9:7f:46:bb:07:60:47: 65:60:40:4e:b0:42:ec:4e:ed:b3:76:79:d8:0a:34:09:6d:1c: 80:31:1f:e2:0e:54:dd:e5:a1:fb:e5:47:10:ad:64:98:ff:50: 16:2e:7c:bf:05:21:7a:e2:95:41:27:69:c3:93:8f:95:c9:8d: d8:9b:21:ae:0d:5c:9c:f0:a2:ae:86:68:83:0c:6a:2d:bb:76: 6b:00:1d:96:ad:f2:16:7b:f6:16:83:24:b9:88:cf:6a:a8:47: 31:2f:9a:dc:e3:71:3d:d7:00:7e:62:47:d1:ce:88:c9:b8:18: fa:0e:72:8d:c1:a3:3d:af:02:40:6a:ff:69:9b:96:e2:10:a8: 10:b4:37:50:08:d6:c3:3d
Certificate: Data: Version: 3 (0x2) Serial Number: 61:16:68:34:00:00:00:00:00:1c Signature Algorithm: sha1WithRSAEncryption Issuer: DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority Validity Not Before: Apr 3 12:53:09 2007 GMT Not After : Apr 3 13:03:09 2021 GMT Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Time-Stamp PCA Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:9f:a1:6c:b1:df:db:48:92:2a:7c:6b:2e:19:e1: bd:e2:e3:c5:99:51:23:50:ad:ce:dd:18:4e:24:0f: ee:d1:a7:d1:4c:ad:74:30:20:11:eb:07:d5:54:95: 15:49:94:1b:42:92:ae:98:5c:30:26:da:00:6b:e8: 7b:bd:ec:89:07:0f:f7:0e:04:98:f0:89:cc:1f:cb: 33:24:87:9d:f2:f4:67:1c:2c:fc:7b:e7:88:1d:ea: e7:4e:a3:a1:c1:23:53:ca:8d:fa:45:cf:09:d0:5e: af:d0:b0:42:04:a2:f9:a6:6c:93:67:d7:28:dc:46: 53:b0:86:d0:e5:28:46:2e:27:ac:86:4f:55:52:0c: e4:03:2c:fb:6a:90:90:30:6e:87:f3:59:30:9d:fa: 7e:d6:97:b3:e8:21:97:7e:f8:d2:13:f3:08:b7:53: 6d:52:b4:45:90:9f:48:00:4a:47:66:11:27:29:66: a8:97:e4:d3:06:81:4a:a2:f9:84:a7:11:47:14:09: 82:9f:84:ed:55:78:fe:01:9a:1d:50:08:85:00:10: 30:46:ed:b7:de:23:46:bb:c4:2d:54:9f:af:1e:78: 41:31:77:cc:9b:df:3b:83:93:a1:61:02:b5:1d:0d: b1:fc:f7:9b:b2:01:ce:22:4b:54:ff:f9:05:c3:c2: 20:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 23:34:F8:D9:52:46:70:0A:ED:40:FB:76:FB:B3:2B:B0:C3:35:B3:0F X509v3 Key Usage: Digital Signature, Certificate Sign, CRL Sign 1.3.6.1.4.1.311.21.1: ... X509v3 Authority Key Identifier: keyid:0E:AC:82:60:40:56:27:97:E5:25:13:FC:2A:E1:0A:53:95:59:E4:A4 DirName:/DC=com/DC=microsoft/CN=Microsoft Root Certificate Authority serial:79:AD:16:A1:4A:A0:A5:AD:4C:73:58:F4:07:13:2E:65 X509v3 CRL Distribution Points: Full Name: URI:http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl Authority Information Access: CA Issuers - URI:http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt X509v3 Extended Key Usage: Time Stamping Signature Algorithm: sha1WithRSAEncryption Signature Value: 10:97:8a:c3:5c:03:44:36:dd:e9:b4:ad:77:db:ce:79:51:4d: 01:b1:2e:74:71:5b:6d:0c:13:ab:ce:be:7b:8f:b8:2e:d4:12: a2:8c:6d:62:b8:57:02:cb:4e:20:13:50:99:dd:7a:40:e2:57: bb:af:58:9a:1c:e1:1d:01:86:ac:bb:78:f2:8b:d0:ec:3b:01: ee:e2:be:8f:0a:05:c8:8d:48:e2:f0:53:15:dd:4f:ab:92:e4: e7:8d:6a:d5:80:c1:e6:94:f2:06:2f:85:03:e9:91:2a:24:22: 70:fb:f6:fc:e4:78:99:2e:0d:f7:07:e2:70:bc:18:4e:9d:8e: 6b:0a:72:95:b8:a1:39:9c:67:2d:c5:51:0e:ea:62:5c:3f:16: 98:8b:20:3f:e2:07:1a:32:f9:cc:31:4a:76:31:3d:2b:72:0b: c8:ea:70:3d:ff:85:0a:13:df:c2:0a:61:8e:f0:d7:b8:17:eb: 4e:8b:7f:c5:35:2b:5e:a3:bf:eb:bc:7d:0b:42:7b:d4:53:72: 21:ee:30:ca:bb:78:65:5c:5b:01:17:0a:14:0e:d2:da:14:98: f5:3c:b9:66:58:b3:2d:2f:e7:f9:85:86:cc:51:56:e8:9d:70: 94:6c:ac:39:4c:d4:f6:79:bf:aa:18:7a:62:29:ef:a2:9b:29: 34:06:77:1a:62:c9:3d:1e:6d:1f:82:f0:0b:c7:2c:bb:cf:43: b3:e5:f9:ec:7d:b5:e3:a4:a8:74:35:b8:4e:c5:71:23:12:26: 76:0b:3c:52:8c:71:5a:46:43:14:bc:b3:b3:b0:4d:67:c8:9f: 42:ff:80:79:21:80:9e:15:30:66:e8:42:12:5e:1a:c8:9e:22: 21:d0:43:e9:2b:e9:bb:f4:48:cc:2c:d4:d8:32:80:4c:26:2a: 48:24:5f:5a:ea:56:ef:a6:de:99:9d:ca:3a:6f:bd:81:27:74: 06:11:ee:76:21:bf:9b:82:c1:27:54:b6:b1:6a:3d:89:a1:76: 61:b4:6e:a1:13:a6:bf:aa:47:f0:12:6f:fd:8a:32:6c:b2:fe: df:51:c8:8c:23:c9:66:bd:9d:1d:87:12:64:02:3d:2d:af:59: 8f:b8:e4:21:e5:b5:b0:ca:63:b4:78:54:05:d4:41:2e:50:ac: 94:b0:a5:78:ab:b3:a0:96:75:1a:d9:92:87:13:75:22:2f:32: a8:08:6e:a0:5b:8c:25:bf:a0:ef:84:ca:21:d6:eb:1e:4f:c9: 9a:ee:49:e0:f7:01:65:6f:89:0b:7d:c8:69:c8:e6:6e:ea:a7: 97:ce:31:29:ff:0e:c5:5b:5c:d8:4d:1b:a1:d8:fa:2f:9e:3f: 2e:55:16:6b:c9:13:a3:fd
pkcs7-signedData
- 1
- SHA1: nil
- 1.3.6.1.4.1.311.2.1.4
- #0
- 1.3.6.1.4.1.311.2.1.15
- :
- SHA1
b0 61 9c 59 b5 35 78 91 8f fb cc 51 0a 05 30 21 |.a.Y.5x....Q..0!| 32 1b 31 69 |2.1i |
- 1.3.6.1.4.1.311.2.1.15
- #0
- unnamed
- Certificate #0
- 2
- 33:00:00:00:4C:A1:E8:4D:CC:B4:74:7B:3B:00:00:00:
00:00:4C - RSA-SHA1: nil
- Issuer
- C: US
- ST: Washington
- L: Redmond
- O: Microsoft Corporation
- CN: Microsoft Time-Stamp PCA
- 2013-11-11 22:11:31 UTC: 2015-02-11 22:11:31 UTC
- Subject
- C: US
- ST: Washington
- L: Redmond
- O: Microsoft Corporation
- OU: MOPR
- OU: nCipher DSE ESN:C0F4-3086-DEF8
- CN: Microsoft Time-Stamp Service
- #5
- rsaEncryption: nil
- B1:D8:FA:1B:06:2B:77:A8:E4:94:5D:7C:0F:E6:7A:A6:
92:EE:8A:54:1D:A4:F9:84:75:85:97:CC:CB:5C:96:D0:
D7:75:2D:D9:08:FB:5B:D2:EE:2D:25:C6:37:3E:F5:AB:
7E:1A:53:E5:57:BE:6B:E8:BF:CA:96:0A:DC:46:F1:5A:
1E:3E:02:D2:B2:E0:26:8E:00:64:7B:BE:3C:93:F8:58:
32:79:87:D2:1A:5D:23:BC:9C:51:C4:0F:10:FA:04:58:
B5:16:76:6E:EC:BC:C6:E5:BE:FC:AD:AC:C1:41:DB:AA:
CE:79:F5:1C:B2:99:41:A7:7A:25:2B:FF:AB:78:0D:58:
3A:B1:5E:50:DE:64:4C:E0:CA:15:2A:DF:A6:E9:FE:A4:
66:2F:5B:10:09:09:26:21:D4:3F:0D:2F:6D:D2:F8:77:
90:03:6C:DE:14:12:A5:8C:E7:36:1F:F4:87:A5:B0:41:
17:6F:E3:4D:74:66:C2:FD:A2:71:46:35:51:CC:6B:17:
51:63:FA:15:94:92:9A:5F:4B:28:BA:E6:16:45:49:E9:
2C:B5:FE:8B:87:AF:FC:A5:6D:43:DC:A6:30:FA:29:28:
EF:9B:0D:2C:5C:83:DE:12:8D:6A:B4:DB:71:EF:5C:14:
5A:2A:23:28:FF:81:70:57:F1:8C:07:9A:13:D8:2A:53: 0x010001
- #6
- subjectKeyIdentifier:
b9 0d ad b3 4d f4 da 9f 1a b2 27 26 55 0d 20 44 |....M.....'&U. D| d8 98 e2 f4 |.... |
- authorityKeyIdentifier:
23 34 f8 d9 52 46 70 0a ed 40 fb 76 fb b3 2b b0 |#4..RFp..@.v..+.| c3 35 b3 0f |.5.. |
- crlDistributionPoints: http://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl
- authorityInfoAccess
- caIssuers: http://www.microsoft.com/pki/certs/MicrosoftTimeStampPCA.crt
- extendedKeyUsage: timeStamping
- subjectKeyIdentifier:
- 33:00:00:00:4C:A1:E8:4D:CC:B4:74:7B:3B:00:00:00:
- RSA-SHA1:
09 8a 4e 06 af e8 ed 82 cf 1d 07 7e d7 2a a7 24 |..N........~.*.$| 0b 2d af 9a 5b 24 7f 94 71 0c 55 88 24 1a 52 15 |.-..[$..q.U.$.R.| 63 e2 90 4d 05 4a 98 4a 9c fb e1 a7 6d 68 55 82 |c..M.J.J....mhU.| b9 29 ea 69 a9 b2 d5 e3 0c da d1 d6 7a 25 37 78 |.).i........z%7x| 67 1c 0c fb db 29 5a 1a 97 38 2a 39 56 46 fb 35 |g....)Z..8*9VF.5| 81 b9 e4 3d 46 5a 8e e4 fc 75 37 58 59 49 8b 4e |...=FZ...u7XYI.N| db 3c 15 9d 73 52 4b eb 7b 0c 3a c2 2d c1 b3 9b |.<..sRK.{.:.-...| 52 2d e0 35 c5 b9 c1 57 b3 e8 3d a1 3c 44 f2 23 |R-.5...W..=.
...| cd 72 b8 34 34 98 5b 8c d3 f5 08 a6 eb 78 c6 51 |.r.44.[......x.Q| a0 0d 0e 6f f4 6b 3c 40 1a 60 16 2c a9 06 52 9d |...o.k<@.`.,..R.| 1c 13 90 ce 6f 02 1e ea 7b 9c b3 f6 f8 97 60 f2 |....o...{.....`.| 65 d1 d1 1f 87 3a c1 75 f0 42 8d 7a ed 8c 72 b2 |e....:.u.B.z..r.| 7b fb 2c 8a b4 91 47 54 e2 2e 69 cc 16 54 1a 59 |{.,...GT..i..T.Y|
- 2
- Certificate #1
- 2
- 33:00:00:00:B0:11:AF:0A:8B:D0:3B:9F:DD:00:01:00:
00:00:B0 - RSA-SHA1: nil
- Issuer
- C: US
- ST: Washington
- L: Redmond
- O: Microsoft Corporation
- CN: Microsoft Code Signing PCA
- 2013-01-24 22:33:39 UTC: 2014-04-24 22:33:39 UTC
- Subject
- C: US
- ST: Washington
- L: Redmond
- O: Microsoft Corporation
- OU: MOPR
- CN: Microsoft Corporation
- #5
- rsaEncryption: nil
- E8:AF:5C:A2:20:0D:F8:28:7C:BC:05:7B:7F:AD:EE:EB:
76:AC:28:53:3F:3A:DB:40:7D:B3:8E:33:E6:57:3F:A5:
51:15:34:54:A5:CF:B4:8B:A9:3F:A8:37:E1:2D:50:ED:
35:16:4E:EF:4D:7A:DB:13:76:88:B0:2C:F0:59:5C:A9:
EB:E1:D7:29:75:E4:1B:85:27:9B:F3:F8:2D:9E:41:36:
2B:0B:40:FB:BE:3B:BA:B9:5C:75:93:16:52:4B:CA:33:
C5:37:B0:F3:EB:7E:A8:F5:41:15:5C:08:65:1D:21:37:
F0:2C:BA:22:0B:10:B1:10:9D:77:22:85:84:7C:4F:B9:
1B:90:B0:F5:A3:FE:8B:F4:0C:9A:4E:A0:F5:C9:0A:21:
E2:AA:E3:01:36:47:FD:2F:82:6A:81:03:F5:A9:35:DC:
94:57:9D:FB:4B:D4:0E:82:DB:38:8F:12:FE:E3:D6:7A:
74:88:64:E1:62:C4:25:2E:2A:AE:9D:18:1F:0E:1E:B6:
C2:AF:24:B4:0E:50:BC:DE:1C:93:5C:49:A6:79:B5:B6:
DB:CE:F9:70:7B:28:01:84:B8:2A:29:CF:BF:A9:05:05:
E1:E0:0F:71:4D:FD:AD:5C:23:83:29:EB:C7:C5:4A:C8:
E8:27:84:D3:7E:C6:43:0B:95:00:05:B1:4F:65:71:C5: 0x010001
- #6
- extendedKeyUsage: codeSigning
- subjectKeyIdentifier:
59 71 a6 5a 33 4d da 98 07 80 ff 84 1e be 87 f9 |Yq.Z3M..........| 72 32 41 f2 |r2A. |
- subjectAltName
- #0
- OU: MOPR
- serialNumber: 31595+4faf0b71-ad37-4aa3-a671-76bc052344ad
- #0
- authorityKeyIdentifier:
cb 11 e8 ca d2 b4 16 58 01 c9 37 2e 33 16 16 b9 |.......X..7.3...| 4c 9a 0a 1f |L... |
- crlDistributionPoints: http://crl.microsoft.com/pki/crl/products/MicCodSigPCA_08-31-2010.crl
- authorityInfoAccess
- caIssuers: http://www.microsoft.com/pki/certs/MicCodSigPCA_08-31-2010.crt
- 33:00:00:00:B0:11:AF:0A:8B:D0:3B:9F:DD:00:01:00:
- RSA-SHA1:
31 d7 6e 2a 12 57 33 81 d5 9d c6 eb f9 3a d4 44 |1.n*.W3......:.D| 4d 08 9e ee 5e df 6a 5b b7 79 cf 02 9c bc 76 68 |M...^.j[.y....vh| 9e 90 a1 9c 0b c3 7f a2 8c f1 4d ba 95 39 fb 0d |..........M..9..| e0 e1 9b f4 5d 24 0f 1b 8d 88 15 3a 7c db ad ce |....]$.....:|...| b3 c9 6c ba 39 2c 45 7d 24 11 54 26 30 0d 0d ff |..l.9,E}$.T&0...| 47 ea 03 07 e5 e4 66 5d 2c 7b 9d 1d a9 10 fa 1c |G.....f],{......| b0 74 f2 4f 69 6b 9e a9 24 84 da ed 96 a0 df 73 |.t.Oik..$......s| a4 ef 6a 1a ac 4b 62 9e f1 7c c0 14 7f 48 cd 4d |..j..Kb..|...H.M| b2 44 f9 f0 3c 93 6d 42 d8 e8 7c e6 17 a0 9b 68 |.D..<.mB..|....h| 68 09 28 f9 02 97 ef 11 03 ba 67 52 ad c1 e9 b3 |h.(.......gR....| 73 a6 d2 63 cd 4a e2 3e e4 f3 4e fd ff a1 e0 bb |s..c.J.>..N.....| 02 13 3b 5d 20 de 55 3f a3 ae 90 40 31 38 75 28 |..;] .U?...@18u(| 5e 04 a9 46 6d e6 f5 7a 79 40 bd 1f cd e8 45 d5 |^..Fm..zy@....E.| ae e2 5d 3e f5 75 c7 e6 66 63 60 cc d5 9a 84 87 |..]>.u..fc`.....| 8d 24 30 f7 ef 34 d0 63 1d b1 42 67 4a 0e 4b bf |.$0..4.c..BgJ.K.| 3a 0e ef b6 95 3a a7 38 e4 25 92 08 a6 88 66 82 |:....:.8.%....f.|
- 2
- #2
- 2
- 61:33:26:1A:00:00:00:00:00:31
- RSA-SHA1: nil
- #2
- DC: com
- DC: microsoft
- CN: Microsoft Root Certificate Authority
- 2010-08-31 22:19:32 UTC: 2020-08-31 22:29:32 UTC
- Subject
- C: US
- ST: Washington
- L: Redmond
- O: Microsoft Corporation
- CN: Microsoft Code Signing PCA
- #5
- rsaEncryption: nil
- B2:72:59:5C:19:30:64:BF:1D:9A:60:20:20:42:99:76:
53:6C:3E:1B:D6:6F:CC:CB:F1:EA:6B:FE:97:16:10:E0:
DF:3A:74:83:1A:B7:2F:A0:32:EC:FF:DE:C2:42:4E:23:
D5:72:00:DB:35:57:0A:89:CA:AE:20:49:F4:F0:68:AC:
4D:4B:8D:A5:BD:79:4B:71:9B:47:07:DA:FD:25:DF:9D:
75:88:CF:AA:73:44:7F:D7:81:DB:F3:BD:F2:36:A4:C9:
5C:45:DC:AF:AD:3D:E0:28:68:97:1A:A7:A5:72:73:56:
F1:17:94:E4:FD:35:94:72:A0:D6:76:5F:1E:77:45:83:
85:38:16:D0:73:5B:05:BA:67:52:8D:A5:B2:69:2F:DA:
19:0B:FE:92:74:29:E2:76:2F:54:DD:14:30:59:F8:D2:
8D:62:FD:CB:C9:5F:46:31:50:B9:27:13:E4:40:30:CF:
72:29:10:28:22:C7:37:4E:3D:A0:32:3D:90:CD:A1:38:
06:85:5C:4E:56:82:28:2A:05:32:B7:4B:D7:4F:63:E7:
D2:2D:62:F1:45:3D:E7:AC:08:00:F6:46:A1:9E:D1:5B:
8C:26:53:E8:7A:AA:4A:F2:46:CF:37:3C:38:9E:B4:77:
5C:A5:17:9E:8D:CB:11:8F:56:3C:C1:AC:09:5F:03:D3: 0x010001
- X509v3 extensions
- basicConstraints: true, true
- subjectKeyIdentifier:
cb 11 e8 ca d2 b4 16 58 01 c9 37 2e 33 16 16 b9 |.......X..7.3...| 4c 9a 0a 1f |L... |
- keyUsage: 0x86
- 1.3.6.1.4.1.311.21.1: 0x010001
- 1.3.6.1.4.1.311.21.2:
fd d1 31 4e d3 26 8a 95 e1 98 60 3b a8 31 6f a6 |..1N.&....`;.1o.| 3c bc d8 2d |<..- |
- 1.3.6.1.4.1.311.20.2:
00 53 00 75 00 62 00 43 00 41 |.S.u.b.C.A |
- authorityKeyIdentifier:
0e ac 82 60 40 56 27 97 e5 25 13 fc 2a e1 0a 53 |...`@V'..%..*..S| 95 59 e4 a4 |.Y.. |
- crlDistributionPoints: http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl
- authorityInfoAccess
- caIssuers: http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt
- RSA-SHA1:
59 39 3e 7f 26 46 af eb 6f 40 b1 32 b5 6a eb 0e |Y9>.&F..o@.2.j..| 2f 6e a8 49 f7 eb 5f 75 ed 4c 3b 2d d7 43 ad 0b |/n.I.._u.L;-.C..| fe cb e9 2d 31 a3 23 cc 7c 50 98 80 21 5d ac 3d |...-1.#.|P..!].=| 2f 4c ba a2 a8 56 9c e3 70 bb b8 b4 f8 79 b5 49 |/L...V..p....y.I| 72 f7 3e ea 41 7f ca e1 0c 17 69 cb a5 9c 20 2d |r.>.A.....i... -| fa 0b 50 c4 56 cd 2d e3 4a d2 bc 70 e7 a8 0d a2 |..P.V.-.J..p....| 03 a5 56 e0 b8 8a 4b 57 f2 95 42 9c f1 f3 ef ee |..V...KW..B.....| e3 86 1f 34 3c b8 56 9a f0 53 23 85 2a a4 82 1c |...4<.V..S#.*...| 93 e2 94 07 1d f2 e2 4e f8 8c a1 ca e8 13 a5 91 |.......N........| 4e c8 1b d2 8f 72 95 2a 71 6d 9b 1a f8 1c f0 53 |N....r.*qm.....S| d6 67 cc 22 ff 5c 1d cd a2 8c bd 27 b2 79 63 56 |.g.".\.....'.ycV| 44 a2 51 cd f9 e9 a3 58 56 dd 9b 02 45 44 2f 5f |D.Q....XV...ED/_| f4 da ae d4 82 32 6e fc a4 95 13 e4 eb 69 e7 a9 |.....2n......i..| a2 2c be c8 2b 10 0e 65 8e 99 db f5 a2 fa 12 26 |.,..+..e.......&| 09 65 38 94 f1 7a 1f 4a bb d1 e1 56 e8 d0 78 96 |.e8..z.J...V..x.| 18 5c c9 35 16 5f dd 93 1d 49 8e 2d be ad 34 44 |.\.5._...I.-..4D| 1c ee 10 15 1a 00 5d dd 35 5b 21 ce 98 c7 09 ee |......].5[!.....| 85 0e 8c 4f 6d 0e 13 4e 3d 7c 29 48 9c 72 d1 f3 |...Om..N=|)H.r..| 6c ca c1 ec 70 a3 57 92 57 7d 94 8d a0 1b 48 03 |l...p.W.W}....H.| 5a f7 cf a3 67 0a 74 a5 36 ed 2d 2f 17 c8 e6 72 |Z...g.t.6.-/...r| 37 12 f4 6f b1 3c 67 82 f9 52 b2 8d 33 16 65 1e |7..o.
- 2
- #3
- 2
- 61:16:68:34:00:00:00:00:00:1C
- RSA-SHA1: nil
- #2
- DC: com
- DC: microsoft
- CN: Microsoft Root Certificate Authority
- 2007-04-03 12:53:09 UTC: 2021-04-03 13:03:09 UTC
- Subject
- C: US
- ST: Washington
- L: Redmond
- O: Microsoft Corporation
- CN: Microsoft Time-Stamp PCA
- #5
- rsaEncryption: nil
- 9F:A1:6C:B1:DF:DB:48:92:2A:7C:6B:2E:19:E1:BD:E2:
E3:C5:99:51:23:50:AD:CE:DD:18:4E:24:0F:EE:D1:A7:
D1:4C:AD:74:30:20:11:EB:07:D5:54:95:15:49:94:1B:
42:92:AE:98:5C:30:26:DA:00:6B:E8:7B:BD:EC:89:07:
0F:F7:0E:04:98:F0:89:CC:1F:CB:33:24:87:9D:F2:F4:
67:1C:2C:FC:7B:E7:88:1D:EA:E7:4E:A3:A1:C1:23:53:
CA:8D:FA:45:CF:09:D0:5E:AF:D0:B0:42:04:A2:F9:A6:
6C:93:67:D7:28:DC:46:53:B0:86:D0:E5:28:46:2E:27:
AC:86:4F:55:52:0C:E4:03:2C:FB:6A:90:90:30:6E:87:
F3:59:30:9D:FA:7E:D6:97:B3:E8:21:97:7E:F8:D2:13:
F3:08:B7:53:6D:52:B4:45:90:9F:48:00:4A:47:66:11:
27:29:66:A8:97:E4:D3:06:81:4A:A2:F9:84:A7:11:47:
14:09:82:9F:84:ED:55:78:FE:01:9A:1D:50:08:85:00:
10:30:46:ED:B7:DE:23:46:BB:C4:2D:54:9F:AF:1E:78:
41:31:77:CC:9B:DF:3B:83:93:A1:61:02:B5:1D:0D:B1:
FC:F7:9B:B2:01:CE:22:4B:54:FF:F9:05:C3:C2:20:0B: 0x010001
- X509v3 extensions
- basicConstraints: true, true
- subjectKeyIdentifier:
23 34 f8 d9 52 46 70 0a ed 40 fb 76 fb b3 2b b0 |#4..RFp..@.v..+.| c3 35 b3 0f |.5.. |
- keyUsage: 0x86
- 1.3.6.1.4.1.311.21.1: 0
- authorityKeyIdentifier
0e ac 82 60 40 56 27 97 e5 25 13 fc 2a e1 0a 53 |...`@V'..%..*..S| 95 59 e4 a4 |.Y.. |
- #0
- DC: com
- DC: microsoft
- CN: Microsoft Root Certificate Authority
79 ad 16 a1 4a a0 a5 ad 4c 73 58 f4 07 13 2e 65 |y...J...LsX....e|
- #0
- crlDistributionPoints: http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl
- authorityInfoAccess
- caIssuers: http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt
- extendedKeyUsage: timeStamping
- RSA-SHA1:
10 97 8a c3 5c 03 44 36 dd e9 b4 ad 77 db ce 79 |....\.D6....w..y| 51 4d 01 b1 2e 74 71 5b 6d 0c 13 ab ce be 7b 8f |QM...tq[m.....{.| b8 2e d4 12 a2 8c 6d 62 b8 57 02 cb 4e 20 13 50 |......mb.W..N .P| 99 dd 7a 40 e2 57 bb af 58 9a 1c e1 1d 01 86 ac |..z@.W..X.......| bb 78 f2 8b d0 ec 3b 01 ee e2 be 8f 0a 05 c8 8d |.x....;.........| 48 e2 f0 53 15 dd 4f ab 92 e4 e7 8d 6a d5 80 c1 |H..S..O.....j...| e6 94 f2 06 2f 85 03 e9 91 2a 24 22 70 fb f6 fc |..../....*$"p...| e4 78 99 2e 0d f7 07 e2 70 bc 18 4e 9d 8e 6b 0a |.x......p..N..k.| 72 95 b8 a1 39 9c 67 2d c5 51 0e ea 62 5c 3f 16 |r...9.g-.Q..b\?.| 98 8b 20 3f e2 07 1a 32 f9 cc 31 4a 76 31 3d 2b |.. ?...2..1Jv1=+| 72 0b c8 ea 70 3d ff 85 0a 13 df c2 0a 61 8e f0 |r...p=.......a..| d7 b8 17 eb 4e 8b 7f c5 35 2b 5e a3 bf eb bc 7d |....N...5+^....}| 0b 42 7b d4 53 72 21 ee 30 ca bb 78 65 5c 5b 01 |.B{.Sr!.0..xe\[.| 17 0a 14 0e d2 da 14 98 f5 3c b9 66 58 b3 2d 2f |.........<.fX.-/| e7 f9 85 86 cc 51 56 e8 9d 70 94 6c ac 39 4c d4 |.....QV..p.l.9L.| f6 79 bf aa 18 7a 62 29 ef a2 9b 29 34 06 77 1a |.y...zb)...)4.w.| 62 c9 3d 1e 6d 1f 82 f0 0b c7 2c bb cf 43 b3 e5 |b.=.m.....,..C..| f9 ec 7d b5 e3 a4 a8 74 35 b8 4e c5 71 23 12 26 |..}....t5.N.q#.&| 76 0b 3c 52 8c 71 5a 46 43 14 bc b3 b3 b0 4d 67 |v.
- 2
- Certificate #0
- Signer
- 1
- unnamed
- #0
- C: US
- ST: Washington
- L: Redmond
- O: Microsoft Corporation
- CN: Microsoft Code Signing PCA
- 33:00:00:00:B0:11:AF:0A:8B:D0:3B:9F:DD:00:01:00:
00:00:B0
- #0
- SHA1: nil
- #3
- contentType: 1.3.6.1.4.1.311.2.1.4
- 1.3.6.1.4.1.311.2.1.11: msCodeInd
- messageDigest:
af 34 29 4c 46 00 8e 90 62 4c 2c 19 c1 66 b8 2a |.4)LF...bL,..f.*| 90 ab f6 42 |...B |
- 1.3.6.1.4.1.311.2.1.12
00 4d 00 69 00 63 00 72 00 6f 00 73 00 6f 00 66 |.M.i.c.r.o.s.o.f| 00 74 00 20 00 4f 00 6e 00 65 00 44 00 72 00 69 |.t. .O.n.e.D.r.i| 00 76 00 65 00 20 00 66 00 6f 00 72 00 20 00 42 |.v.e. .f.o.r. .B| 00 75 00 73 00 69 00 6e 00 65 00 73 00 73 00 20 |.u.s.i.n.e.s.s. | 00 45 00 78 00 74 00 65 00 6e 00 73 00 69 00 6f |.E.x.t.e.n.s.i.o| 00 6e 00 73 |.n.s |
: http://office.microsoft.com
- rsaEncryption:
07 a8 7c 0b 1b 05 0f e6 a0 9b c9 6a ef 49 53 0f |..|........j.IS.| 97 c4 69 8e 2b 68 bd 02 cf 1e a9 39 7a e3 b5 86 |..i.+h.....9z...| 62 0a 1d 3b 94 93 50 3b 59 55 2e d9 fc 28 0e 97 |b..;..P;YU...(..| 6b 6c b3 61 b1 61 69 97 bf 6d 59 b7 eb 18 76 dc |kl.a.ai..mY...v.| ed f8 f8 2e af 6b 36 07 5c fa 12 32 0d 1a 7e 14 |.....k6.\..2..~.| b0 90 f8 8d 9f 29 a2 f1 72 24 78 c2 00 71 51 e0 |.....)..r$x..qQ.| bd 2f 8a ac 84 d9 fb 27 d5 49 da 90 f0 74 21 51 |./.....'.I...t!Q| a4 a4 73 df 0a 59 ff d0 3d f4 e8 73 32 da ff 17 |..s..Y..=..s2...| 1b 22 d3 e1 36 62 67 f6 58 e8 40 65 d9 94 b1 22 |."..6bg.X.@e..."| d4 e4 58 a2 87 ca 35 77 25 f2 63 be 10 ab 67 17 |..X...5w%.c...g.| a0 be 55 bd ac 52 1b 87 14 5d bd 1c 1f 1f 1c b8 |..U..R...]......| 51 d0 1a 59 00 b5 ea 14 14 dd c4 6f 64 ac cf 3f |Q..Y.......od..?| 14 d5 6a 41 e4 d2 dd bf c6 1b 5b 25 28 4d ee 69 |..jA......[%(M.i| b8 d3 17 3c d4 e3 a0 58 8d 1c 3c 88 9a 0c db 85 |...<...X..<.....| e8 6e 75 f3 b8 c7 84 5f 09 c6 dd b9 ad d6 64 ae |.nu...._......d.| 78 ed 01 46 05 fc e7 e8 55 75 14 ef ac 1b 60 28 |x..F....Uu....`(|
- countersignature
- 1
- unnamed
- #0
- C: US
- ST: Washington
- L: Redmond
- O: Microsoft Corporation
- CN: Microsoft Time-Stamp PCA
- 33:00:00:00:4C:A1:E8:4D:CC:B4:74:7B:3B:00:00:00:
00:00:4C
- #0
- SHA1: nil
- #2
- contentType: pkcs7-data
- signingTime: 2013-12-18 00:06:03 UTC
- messageDigest:
f8 ab 9d aa 17 dd e4 23 5a 7f 16 83 28 e8 8e e9 |.......#Z...(...| 30 da 12 ba |0... |
- RSA-SHA1:
39 35 fe dd cf c5 33 85 31 57 d9 96 ac 60 1d cd |95....3.1W...`..| 7c 3e 8f d3 4f 2b 9e fa 35 d1 ff cb 2e c6 e4 f6 ||>..O+..5.......| 5b b7 95 77 eb 2b 5f 86 63 02 86 7d 52 2a 82 1e |[..w.+_.c..}R*..| 2c 93 61 9c 9b 58 f5 16 64 75 ec ae cc d4 92 31 |,.a..X..du.....1| 2e cf bd 43 39 f9 a3 b8 53 dd ec cd d2 7c 4f a3 |...C9...S....|O.| 7a c8 8c cf c1 51 be 38 42 13 70 d4 02 74 e0 62 |z....Q.8B.p..t.b| 8c da 12 f5 d3 3a 04 c3 bd 90 dc b0 1a 06 d1 2e |.....:..........| da 17 ea 98 1c 57 53 dc 1f a5 8e f1 e9 7c 6b e4 |.....WS......|k.| 2b 99 3e 09 8b d4 91 43 e1 f3 8f 1f 96 b0 64 41 |+.>....C......dA| 2d 36 18 53 13 00 75 f7 84 11 6a dd 57 d0 e2 af |-6.S..u...j.W...| 7a 2c 0e b0 d6 60 ec f4 a0 af 27 c7 84 09 86 a6 |z,...`....'.....| fd c3 c5 50 98 31 3e a2 f5 cc 91 c8 fc fa 75 ff |...P.1>.......u.| eb ae 6f 93 6e 18 c5 a1 b8 1a 24 e1 a6 e5 21 2d |..o.n.....$...!-| 65 f9 39 d8 f0 99 74 9a a9 df 90 6b aa 0c ae 9d |e.9...t....k....| 4f 23 f5 dd fe a3 cf ce b1 30 df 54 ec 8e 4f 8f |O#.......0.T..O.| 4e 47 47 5f f2 54 eb 65 fa ad af f4 c5 3b 0d fa |NGG_.T.e.....;..|
- unnamed
- 1
offset | size | type | comment | |
---|---|---|---|---|
15c1 | 15 | HTM | # | |
1fa688 | 28506 | PNG | (256 x 256) | # |
2201d0 | 7329 | PNG | (256 x 256) | # |
221e71 | 97383 | BIN | overlay data past EOF | # |
Please donate some bucks to keep this site up and running: | |
Ko-fi | |
---|---|
Yandex.Money | |
Thank you! |
[?] ignoring invalid PEdump::BITMAPINFOHEADER