filename | procexp.exe | |
---|---|---|
size | 2738264 (0x29c858) | |
md5 | 82d12cefda39c8b6c8321d094cf7b421 | |
type | PE32 executable (GUI) Intel 80386, for MS Windows | |
mimetype | application/x-dosexec | |
clamav | OK | |
virustotal | → scan with virustotal.com | |
histogram |
MZ Header
signature | MZ |
bytes_in_last_block | 0x90 |
blocks_in_file | 3 |
num_relocs | 0 |
header_paragraphs | 4 |
min_extra_paragraphs | 0 |
max_extra_paragraphs | 0xffff |
ss | 0 |
sp | 0xb8 |
checksum | 0 |
ip | 0 |
cs | 0 |
reloc_table_offset | 0x40 |
overlay_number | 0 |
reserved0 | 0 |
oem_id | 0 |
oem_info | 0 |
reserved2 | 0 |
reserved3 | 0 |
reserved4 | 0 |
reserved5 | 0 |
reserved6 | 0 |
lfanew | 0xf0 |
Rich Header
lib id | version | times used |
---|---|---|
149 | 30729 | 26 |
132 | 21022 | 5 |
147 | 30729 | 35 |
1 | 0 | 527 |
131 | 30729 | 175 |
132 | 30729 | 122 |
148 | 30729 | 1 |
145 | 30729 | 1 |
DOS stub
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
PE Header
Packer / Compiler
Sections
Data Directory
id | lang | string |
---|---|---|
3 | 1033 | Process |
4 | 1033 | PID |
5 | 1033 | Priority |
6 | 1033 | Threads |
7 | 1033 | Cycle CPU Usage |
8 | 1033 | GPU |
9 | 1033 | Paged Pool |
10 | 1033 | Nonpaged Pool |
11 | 1033 | Programs (*.exe, *.com, *.bat, *.pif)|*.exe;*.com;*.bat|Executables (*.exe)|*.exe|Command Files (*.com)|*.com|Batch Files (*.bat)|*.bat|Pif Files (*.pif)|*.pif| |
12 | 1033 | There is insufficent memory to run the program |
13 | 1033 | The file is not a valid executable format |
14 | 1033 | Cannot find the specified file |
15 | 1033 | Cannot find the specified path |
16 | 1033 | Refresh process list |
18 | 1033 | Handles |
19 | 1033 | User Name |
20 | 1033 | Handle |
21 | 1033 | Type |
22 | 1033 | Name |
23 | 1033 | Base |
24 | 1033 | Size |
25 | 1033 | Version |
26 | 1033 | Name |
27 | 1033 | Show Unnamed Objects (Ctrl+U) |
28 | 1033 | Find (Ctrl+F) |
29 | 1033 | View Handles (Ctrl+H) |
30 | 1033 | Time |
31 | 1033 | Save (Ctrl+S) |
32 | 1033 | View DLLs (Ctrl+D) |
33 | 1033 | References |
34 | 1033 | Parent |
35 | 1033 | Window Title |
36 | 1033 | Kill Process/Close Handle |
37 | 1033 | Properties |
38 | 1033 | Description |
39 | 1033 | Access |
40 | 1033 | Mapping |
41 | 1033 | Refresh Now (F5) |
42 | 1033 | Description |
43 | 1033 | Frame |
44 | 1033 | Address |
1032 | 1033 | Command Line |
1033 | 1033 | Company Name |
1037 | 1033 | Share |
1039 | 1033 | Service |
1042 | 1033 | Description |
1044 | 1033 | Display Name |
1046 | 1033 | Group |
1047 | 1033 | Privilege |
1049 | 1033 | Flags |
1051 | 1033 | Flags |
1052 | 1033 | Handle |
1053 | 1033 | Handle or DLL |
1054 | 1033 | Show Process Tree |
1055 | 1033 | CPU |
1056 | 1033 | Session |
1057 | 1033 | Variable |
1058 | 1033 | Value |
1059 | 1033 | Page Faults |
1060 | 1033 | Private Bytes |
1061 | 1033 | Path |
1062 | 1033 | Peak Private Bytes |
1063 | 1033 | Working Set |
1064 | 1033 | Peak Working Set |
1065 | 1033 | Threads |
1066 | 1033 | GDI Objects |
1067 | 1033 | USER Objects |
1068 | 1033 | I/O Reads |
1069 | 1033 | I/O Read Bytes |
1070 | 1033 | I/O Writes |
1071 | 1033 | I/O Write Bytes |
1072 | 1033 | I/O Other |
1073 | 1033 | I/O Other Bytes |
1074 | 1033 | Image Base |
1075 | 1033 | Limit |
1076 | 1033 | TID |
1077 | 1033 | Start Address |
1078 | 1033 | Function |
1079 | 1033 | User Time |
1080 | 1033 | Kernel Time |
1086 | 1033 | Start Time |
1087 | 1033 | CPU Time |
1088 | 1033 | Show Lower Pane (Ctrl+L) |
1089 | 1033 | Hide Lower Pane (Ctrl+L) |
1090 | 1033 | Show Processes From &All Users |
1091 | 1033 | Context Switches |
1092 | 1033 | CSwitch Delta |
1093 | 1033 | Counter |
1094 | 1033 | Methods Jitted |
1095 | 1033 | % Time in JIT |
1096 | 1033 | AppDomains |
1097 | 1033 | Assemblies |
1098 | 1033 | Classes Loaded |
1099 | 1033 | Total AppDomains |
1100 | 1033 | Total Assemblies |
1101 | 1033 | Total Classes Loaded |
1102 | 1033 | Total Lock Contentions |
1103 | 1033 | Heap Bytes |
1104 | 1033 | Gen 0 Collections |
1105 | 1033 | Gen 1 Collections |
1106 | 1033 | Gen 2 Collections |
1107 | 1033 | % Time in GC |
1108 | 1033 | Allocated Bytes/s |
1109 | 1033 | Runtime Checks |
1110 | 1033 | Contentions |
1111 | 1033 | Path |
1112 | 1033 | Find Handle (Ctrl+F) |
1113 | 1033 | Find Handle or DLL (Ctrl+F) |
1114 | 1033 | Virtual Size |
1115 | 1033 | WS Total |
1116 | 1033 | WS Private |
1118 | 1033 | WS Shared |
1179 | 1033 | PF Delta |
1180 | 1033 | Desktop Integrity Level |
1181 | 1033 | Comment |
1182 | 1033 | PROCEXPLORER |
1183 | 1033 | Process Explorer |
1184 | 1033 | Local Address |
1185 | 1033 | Object Address |
1186 | 1033 | Remote Address |
1187 | 1033 | Verified Signer |
1188 | 1033 | State |
1189 | 1033 | Protocol |
1190 | 1033 | Image Type |
1191 | 1033 | CPU History |
1192 | 1033 | Private Delta Bytes |
1193 | 1033 | Private Bytes History |
1194 | 1033 | Share Flags |
1195 | 1033 | Cycles |
1196 | 1033 | Window Status |
1197 | 1033 | Find &Window's Process (drag over window) |
1198 | 1033 | System Information (Ctrl+I) |
1199 | 1033 | DEP |
1200 | 1033 | Cycles Delta |
1317 | 1033 | WS Shareable |
1326 | 1033 | I/O Delta Reads |
1327 | 1033 | I/O Delta Read Bytes |
1328 | 1033 | I/O Delta Writes |
1329 | 1033 | I/O Delta Write Bytes |
1330 | 1033 | I/O History |
1332 | 1033 | I/O Delta Other Bytes |
1333 | 1033 | I/O Delta Total Bytes |
1335 | 1033 | I/O Delta Other |
1336 | 1033 | Integrity |
1337 | 1033 | Virtualized |
1338 | 1033 | ASLR |
1339 | 1033 | Memory Priority |
1340 | 1033 | I/O Priority |
1341 | 1033 | Min Working Set |
1342 | 1033 | Max Working Set |
1343 | 1033 | Service |
1609 | 1033 | Network Receives |
1610 | 1033 | Network Delta Receives |
1611 | 1033 | Network Sends |
1612 | 1033 | Network Delta Sends |
1613 | 1033 | Network Other |
1614 | 1033 | Network Delta Others |
1615 | 1033 | Network History |
1616 | 1033 | Network Delta Receive Bytes |
1617 | 1033 | Network Receive Bytes |
1618 | 1033 | Network Send Bytes |
1619 | 1033 | Network Delta Send Bytes |
1620 | 1033 | Network Other Bytes |
1621 | 1033 | Network Delta Other Bytes |
1622 | 1033 | Network Delta Total Bytes |
1623 | 1033 | Disk Reads |
1624 | 1033 | Disk Delta Reads |
1625 | 1033 | Disk Writes |
1626 | 1033 | Disk Delta Writes |
1627 | 1033 | Disk Other |
1628 | 1033 | Disk Delta Others |
1629 | 1033 | Disk History |
1630 | 1033 | Disk Read Bytes |
1631 | 1033 | Disk Delta Read Bytes |
1632 | 1033 | Disk Write Bytes |
1633 | 1033 | Disk Delta Write Bytes |
1634 | 1033 | Disk Other Bytes |
1635 | 1033 | Disk Delta Other Bytes |
1636 | 1033 | Disk Delta Total Bytes |
1637 | 1033 | Tree CPU Usage |
1638 | 1033 | Processor |
1650 | 1033 | GPU |
1651 | 1033 | GPU System Bytes |
1652 | 1033 | GPU Dedicated Bytes |
1653 | 1033 | GPU Committed Bytes |
1654 | 1033 | Package Name |
1655 | 1033 | Process Timeline |
1656 | 1033 | Autostart Location |
module_name | hint | ord | function_name |
---|---|---|---|
SHLWAPI.dll | 363 | UrlUnescapeW | |
SHLWAPI.dll | 13 | ColorRGBToHLS | |
SHLWAPI.dll | 12 | ColorHLSToRGB | |
WS2_32.dll | 115 | ||
WS2_32.dll | 15 | ||
WS2_32.dll | 56 | ||
WS2_32.dll | 9 | ||
WS2_32.dll | 51 | ||
WS2_32.dll | 8 | ||
WS2_32.dll | 14 | ||
MPR.dll | 36 | WNetGetConnectionW | |
COMCTL32.dll | 12 | CreateStatusWindowW | |
COMCTL32.dll | 9 | CreatePropertySheetPageW | |
COMCTL32.dll | 14 | CreateToolbarEx | |
COMCTL32.dll | 123 | InitCommonControlsEx | |
COMCTL32.dll | 84 | ImageList_Destroy | |
COMCTL32.dll | 91 | ImageList_DrawEx | |
COMCTL32.dll | 77 | ImageList_Add | |
COMCTL32.dll | 111 | ImageList_ReplaceIcon | |
COMCTL32.dll | 83 | ImageList_Create | |
COMCTL32.dll | 17 | ||
COMCTL32.dll | 133 | PropertySheetW | |
VERSION.dll | 6 | GetFileVersionInfoW | |
VERSION.dll | 5 | GetFileVersionInfoSizeW | |
VERSION.dll | 14 | VerQueryValueW | |
credui.dll | 10 | CredUIPromptForCredentialsW | |
SETUPAPI.dll | 342 | SetupDiGetClassDevsW | |
SETUPAPI.dll | 366 | SetupDiGetDeviceInterfaceDetailW | |
SETUPAPI.dll | 323 | SetupDiEnumDeviceInterfaces | |
SETUPAPI.dll | 319 | SetupDiDestroyDeviceInfoList | |
CRYPT32.dll | 37 | CertDuplicateCertificateContext | |
CRYPT32.dll | 75 | CertGetNameStringW | |
KERNEL32.dll | 232 | DuplicateHandle | |
KERNEL32.dll | 596 | GetProcessWorkingSetSize | |
KERNEL32.dll | 447 | GetCurrentDirectoryW | |
KERNEL32.dll | 221 | DeviceIoControl | |
KERNEL32.dll | 467 | GetDriveTypeW | |
KERNEL32.dll | 1260 | VirtualFree | |
KERNEL32.dll | 1257 | VirtualAlloc | |
KERNEL32.dll | 498 | GetFileTime | |
KERNEL32.dll | 480 | GetExitCodeThread | |
KERNEL32.dll | 1297 | WideCharToMultiByte | |
KERNEL32.dll | 325 | FindNextFileW | |
KERNEL32.dll | 690 | GlobalAddAtomW | |
KERNEL32.dll | 627 | GetSystemInfo | |
KERNEL32.dll | 1223 | TlsGetValue | |
KERNEL32.dll | 920 | Process32NextW | |
KERNEL32.dll | 918 | Process32FirstW | |
KERNEL32.dll | 1224 | TlsSetValue | |
KERNEL32.dll | 687 | GetWindowsDirectoryW | |
KERNEL32.dll | 1317 | WriteFile | |
KERNEL32.dll | 612 | GetStdHandle | |
KERNEL32.dll | 349 | FormatMessageA | |
KERNEL32.dll | 350 | FormatMessageW | |
KERNEL32.dll | 496 | GetFileSize | |
KERNEL32.dll | 282 | ExitThread | |
KERNEL32.dll | 1221 | TlsAlloc | |
KERNEL32.dll | 578 | GetPrivateProfileStringW | |
KERNEL32.dll | 284 | ExpandEnvironmentStringsA | |
KERNEL32.dll | 828 | LoadLibraryA | |
KERNEL32.dll | 516 | GetLocaleInfoA | |
KERNEL32.dll | 739 | InitializeCriticalSectionAndSpinCount | |
KERNEL32.dll | 474 | GetEnvironmentStringsW | |
KERNEL32.dll | 353 | FreeEnvironmentStringsW | |
KERNEL32.dll | 343 | FlushFileBuffers | |
KERNEL32.dll | 610 | GetStartupInfoA | |
KERNEL32.dll | 499 | GetFileType | |
KERNEL32.dll | 1135 | SetHandleCount | |
KERNEL32.dll | 811 | LCMapStringA | |
KERNEL32.dll | 617 | GetStringTypeW | |
KERNEL32.dll | 614 | GetStringTypeA | |
KERNEL32.dll | 428 | GetConsoleMode | |
KERNEL32.dll | 410 | GetConsoleCP | |
KERNEL32.dll | 533 | GetModuleHandleA | |
KERNEL32.dll | 813 | LCMapStringW | |
KERNEL32.dll | 778 | IsValidCodePage | |
KERNEL32.dll | 567 | GetOEMCP | |
KERNEL32.dll | 360 | GetACP | |
KERNEL32.dll | 370 | GetCPInfo | |
KERNEL32.dll | 1222 | TlsFree | |
KERNEL32.dll | 531 | GetModuleFileNameA | |
KERNEL32.dll | 281 | ExitProcess | |
KERNEL32.dll | 717 | HeapCreate | |
KERNEL32.dll | 611 | GetStartupInfoW | |
KERNEL32.dll | 453 | GetCurrentThreadId | |
KERNEL32.dll | 768 | IsDebuggerPresent | |
KERNEL32.dll | 1189 | SetUnhandledExceptionFilter | |
KERNEL32.dll | 1235 | UnhandledExceptionFilter | |
KERNEL32.dll | 181 | CreateThread | |
KERNEL32.dll | 1048 | RtlUnwind | |
KERNEL32.dll | 945 | RaiseException | |
KERNEL32.dll | 724 | HeapSize | |
KERNEL32.dll | 722 | HeapReAlloc | |
KERNEL32.dll | 718 | HeapDestroy | |
KERNEL32.dll | 1357 | lstrlenA | |
KERNEL32.dll | 1156 | SetProcessWorkingSetSize | |
KERNEL32.dll | 588 | GetProcessId | |
KERNEL32.dll | 705 | GlobalReAlloc | |
KERNEL32.dll | 702 | GlobalLock | |
KERNEL32.dll | 691 | GlobalAlloc | |
KERNEL32.dll | 709 | GlobalUnlock | |
KERNEL32.dll | 313 | FindFirstFileW | |
KERNEL32.dll | 302 | FindClose | |
KERNEL32.dll | 1149 | SetPriorityClass | |
KERNEL32.dll | 1216 | TerminateProcess | |
KERNEL32.dll | 399 | GetComputerNameW | |
KERNEL32.dll | 518 | GetLocaleInfoW | |
KERNEL32.dll | 449 | GetCurrentProcessId | |
KERNEL32.dll | 1112 | SetErrorMode | |
KERNEL32.dll | 1271 | WaitForMultipleObjects | |
KERNEL32.dll | 659 | GetTickCount | |
KERNEL32.dll | 703 | GlobalMemoryStatus | |
KERNEL32.dll | 922 | PulseEvent | |
KERNEL32.dll | 140 | CreateFileMappingW | |
KERNEL32.dll | 855 | MapViewOfFile | |
KERNEL32.dll | 759 | IsBadReadPtr | |
KERNEL32.dll | 1238 | UnmapViewOfFile | |
KERNEL32.dll | 935 | QueryPerformanceCounter | |
KERNEL32.dll | 936 | QueryPerformanceFrequency | |
KERNEL32.dll | 1039 | ResetEvent | |
KERNEL32.dll | 676 | GetVersionExW | |
KERNEL32.dll | 1219 | Thread32First | |
KERNEL32.dll | 1220 | Thread32Next | |
KERNEL32.dll | 646 | GetThreadContext | |
KERNEL32.dll | 830 | LoadLibraryExW | |
KERNEL32.dll | 1043 | ResumeThread | |
KERNEL32.dll | 1210 | SuspendThread | |
KERNEL32.dll | 901 | OpenThread | |
KERNEL32.dll | 1111 | SetEnvironmentVariableW | |
KERNEL32.dll | 214 | DeleteFileW | |
KERNEL32.dll | 452 | GetCurrentThread | |
KERNEL32.dll | 1168 | SetThreadAffinityMask | |
KERNEL32.dll | 1202 | Sleep | |
KERNEL32.dll | 582 | GetProcessAffinityMask | |
KERNEL32.dll | 624 | GetSystemDirectoryW | |
KERNEL32.dll | 563 | GetNumberFormatW | |
KERNEL32.dll | 960 | ReadFile | |
KERNEL32.dll | 1126 | SetFilePointer | |
KERNEL32.dll | 896 | OpenProcess | |
KERNEL32.dll | 1266 | VirtualQueryEx | |
KERNEL32.dll | 490 | GetFileAttributesW | |
KERNEL32.dll | 1053 | SearchPathW | |
KERNEL32.dll | 285 | ExpandEnvironmentStringsW | |
KERNEL32.dll | 871 | MultiByteToWideChar | |
KERNEL32.dll | 1349 | lstrcmpiW | |
KERNEL32.dll | 1346 | lstrcmpW | |
KERNEL32.dll | 456 | GetDateFormatW | |
KERNEL32.dll | 963 | ReadProcessMemory | |
KERNEL32.dll | 586 | GetProcessHeap | |
KERNEL32.dll | 715 | HeapAlloc | |
KERNEL32.dll | 719 | HeapFree | |
KERNEL32.dll | 476 | GetEnvironmentVariableW | |
KERNEL32.dll | 870 | MulDiv | |
KERNEL32.dll | 133 | CreateEventW | |
KERNEL32.dll | 885 | OpenEventW | |
KERNEL32.dll | 391 | GetCommandLineW | |
KERNEL32.dll | 1139 | SetLastError | |
KERNEL32.dll | 143 | CreateFileW | |
KERNEL32.dll | 448 | GetCurrentProcess | |
KERNEL32.dll | 761 | IsBadStringPtrW | |
KERNEL32.dll | 1358 | lstrlenW | |
KERNEL32.dll | 633 | GetSystemTimeAsFileTime | |
KERNEL32.dll | 209 | DeleteCriticalSection | |
KERNEL32.dll | 292 | FileTimeToLocalFileTime | |
KERNEL32.dll | 293 | FileTimeToSystemTime | |
KERNEL32.dll | 663 | GetTimeFormatW | |
KERNEL32.dll | 631 | GetSystemTime | |
KERNEL32.dll | 1213 | SystemTimeToFileTime | |
KERNEL32.dll | 354 | FreeLibrary | |
KERNEL32.dll | 581 | GetProcAddress | |
KERNEL32.dll | 831 | LoadLibraryW | |
KERNEL32.dll | 1273 | WaitForSingleObject | |
KERNEL32.dll | 1217 | TerminateThread | |
KERNEL32.dll | 190 | CreateToolhelp32Snapshot | |
KERNEL32.dll | 859 | Module32FirstW | |
KERNEL32.dll | 861 | Module32NextW | |
KERNEL32.dll | 536 | GetModuleHandleW | |
KERNEL32.dll | 1113 | SetEvent | |
KERNEL32.dll | 674 | GetVersion | |
KERNEL32.dll | 333 | FindResourceExW | |
KERNEL32.dll | 833 | LoadResource | |
KERNEL32.dll | 852 | LockResource | |
KERNEL32.dll | 1201 | SizeofResource | |
KERNEL32.dll | 334 | FindResourceW | |
KERNEL32.dll | 747 | InterlockedDecrement | |
KERNEL32.dll | 751 | InterlockedIncrement | |
KERNEL32.dll | 738 | InitializeCriticalSection | |
KERNEL32.dll | 238 | EnterCriticalSection | |
KERNEL32.dll | 825 | LeaveCriticalSection | |
KERNEL32.dll | 168 | CreateProcessW | |
KERNEL32.dll | 82 | CloseHandle | |
KERNEL32.dll | 514 | GetLastError | |
KERNEL32.dll | 840 | LocalFree | |
KERNEL32.dll | 836 | LocalAlloc | |
KERNEL32.dll | 532 | GetModuleFileNameW | |
KERNEL32.dll | 1159 | SetStdHandle | |
KERNEL32.dll | 1306 | WriteConsoleA | |
KERNEL32.dll | 432 | GetConsoleOutputCP | |
KERNEL32.dll | 1316 | WriteConsoleW | |
KERNEL32.dll | 664 | GetTimeZoneInformation | |
KERNEL32.dll | 136 | CreateFileA | |
KERNEL32.dll | 1107 | SetEndOfFile | |
KERNEL32.dll | 97 | CompareStringA | |
KERNEL32.dll | 100 | CompareStringW | |
KERNEL32.dll | 1110 | SetEnvironmentVariableA | |
KERNEL32.dll | 507 | GetFullPathNameW | |
USER32.dll | 234 | EnumDisplaySettingsW | |
USER32.dll | 806 | WaitForInputIdle | |
USER32.dll | 272 | GetClassLongW | |
USER32.dll | 392 | GetUpdateRgn | |
USER32.dll | 391 | GetUpdateRect | |
USER32.dll | 445 | IntersectRect | |
USER32.dll | 796 | ValidateRect | |
USER32.dll | 373 | GetScrollInfo | |
USER32.dll | 688 | SetScrollInfo | |
USER32.dll | 625 | ScrollWindowEx | |
USER32.dll | 476 | IsWindowEnabled | |
USER32.dll | 294 | GetDlgCtrlID | |
USER32.dll | 563 | PeekMessageW | |
USER32.dll | 540 | MsgWaitForMultipleObjects | |
USER32.dll | 65 | CheckRadioButton | |
USER32.dll | 317 | GetKeyState | |
USER32.dll | 702 | SetUserObjectSecurity | |
USER32.dll | 396 | GetUserObjectSecurity | |
USER32.dll | 291 | GetDesktopWindow | |
USER32.dll | 398 | GetWindow | |
USER32.dll | 635 | SendMessageTimeoutW | |
USER32.dll | 550 | OpenClipboard | |
USER32.dll | 213 | EmptyClipboard | |
USER32.dll | 646 | SetClipboardData | |
USER32.dll | 73 | CloseClipboard | |
USER32.dll | 245 | ExitWindowsEx | |
USER32.dll | 485 | LoadAcceleratorsW | |
USER32.dll | 349 | GetMessageW | |
USER32.dll | 762 | TranslateAcceleratorW | |
USER32.dll | 461 | IsDialogMessageW | |
USER32.dll | 764 | TranslateMessage | |
USER32.dll | 175 | DispatchMessageW | |
USER32.dll | 99 | CreateDialogParamW | |
USER32.dll | 298 | GetDlgItemTextW | |
USER32.dll | 615 | RemoveMenu | |
USER32.dll | 201 | DrawMenuBar | |
USER32.dll | 567 | PostQuitMessage | |
USER32.dll | 200 | DrawIconEx | |
USER32.dll | 758 | TrackPopupMenu | |
USER32.dll | 475 | IsWindow | |
USER32.dll | 264 | GetCapture | |
USER32.dll | 612 | ReleaseCapture | |
USER32.dll | 640 | SetCapture | |
USER32.dll | 195 | DrawEdge | |
USER32.dll | 611 | RegisterWindowMessageW | |
USER32.dll | 503 | LoadMenuW | |
USER32.dll | 442 | InsertMenuW | |
USER32.dll | 63 | CheckMenuItem | |
USER32.dll | 106 | CreateMenu | |
USER32.dll | 64 | CheckMenuRadioItem | |
USER32.dll | 586 | RedrawWindow | |
USER32.dll | 736 | ShowWindowAsync | |
USER32.dll | 249 | FindWindowExW | |
USER32.dll | 465 | IsIconic | |
USER32.dll | 402 | GetWindowDC | |
USER32.dll | 674 | SetMenuItemInfoW | |
USER32.dll | 158 | DeleteMenu | |
USER32.dll | 216 | EnableWindow | |
USER32.dll | 62 | CheckDlgButton | |
USER32.dll | 462 | IsDlgButtonChecked | |
USER32.dll | 447 | InvalidateRgn | |
USER32.dll | 246 | FillRect | |
USER32.dll | 242 | EnumWindows | |
USER32.dll | 420 | GetWindowThreadProcessId | |
USER32.dll | 419 | GetWindowTextW | |
USER32.dll | 535 | ModifyMenuW | |
USER32.dll | 748 | SystemParametersInfoW | |
USER32.dll | 107 | CreatePopupMenu | |
USER32.dll | 10 | AppendMenuW | |
USER32.dll | 759 | TrackPopupMenuEx | |
USER32.dll | 378 | GetSubMenu | |
USER32.dll | 337 | GetMenuItemCount | |
USER32.dll | 338 | GetMenuItemID | |
USER32.dll | 331 | GetMenu | |
USER32.dll | 214 | EnableMenuItem | |
USER32.dll | 163 | DestroyIcon | |
USER32.dll | 644 | SetClassLongW | |
USER32.dll | 658 | SetFocus | |
USER32.dll | 699 | SetTimer | |
USER32.dll | 812 | WindowFromPoint | |
USER32.dll | 483 | KillTimer | |
USER32.dll | 411 | GetWindowPlacement | |
USER32.dll | 506 | LoadStringW | |
USER32.dll | 250 | FindWindowW | |
USER32.dll | 493 | LoadIconW | |
USER32.dll | 495 | LoadImageW | |
USER32.dll | 589 | RegisterClassExW | |
USER32.dll | 590 | RegisterClassW | |
USER32.dll | 709 | SetWindowPlacement | |
USER32.dll | 172 | DialogBoxParamW | |
USER32.dll | 648 | SetCursor | |
USER32.dll | 446 | InvalidateRect | |
USER32.dll | 67 | ChildWindowFromPoint | |
USER32.dll | 379 | GetSysColor | |
USER32.dll | 380 | GetSysColorBrush | |
USER32.dll | 785 | UpdateWindow | |
USER32.dll | 437 | InflateRect | |
USER32.dll | 715 | SetWindowTextW | |
USER32.dll | 170 | DialogBoxIndirectParamW | |
USER32.dll | 149 | DefDlgProcW | |
USER32.dll | 151 | DefFrameProcW | |
USER32.dll | 153 | DefMDIChildProcW | |
USER32.dll | 253 | FrameRect | |
USER32.dll | 289 | GetDC | |
USER32.dll | 208 | DrawTextW | |
USER32.dll | 71 | ClientToScreen | |
USER32.dll | 613 | ReleaseDC | |
USER32.dll | 103 | CreateIconIndirect | |
USER32.dll | 521 | MapWindowPoints | |
USER32.dll | 166 | DestroyWindow | |
USER32.dll | 110 | CreateWindowExW | |
USER32.dll | 480 | IsWindowVisible | |
USER32.dll | 300 | GetFocus | |
USER32.dll | 363 | GetPropW | |
USER32.dll | 621 | ScreenToClient | |
USER32.dll | 274 | GetClassNameW | |
USER32.dll | 157 | DeferWindowPos | |
USER32.dll | 13 | BeginDeferWindowPos | |
USER32.dll | 223 | EnumChildWindows | |
USER32.dll | 217 | EndDeferWindowPos | |
USER32.dll | 549 | OffsetRect | |
USER32.dll | 769 | UnionRect | |
USER32.dll | 482 | IsZoomed | |
USER32.dll | 382 | GetSystemMetrics | |
USER32.dll | 576 | PtInRect | |
USER32.dll | 14 | BeginPaint | |
USER32.dll | 198 | DrawFrameControl | |
USER32.dll | 220 | EndPaint | |
USER32.dll | 685 | SetPropW | |
USER32.dll | 30 | CallWindowProcW | |
USER32.dll | 156 | DefWindowProcW | |
USER32.dll | 276 | GetClientRect | |
USER32.dll | 85 | CopyRect | |
USER32.dll | 406 | GetWindowLongW | |
USER32.dll | 356 | GetParent | |
USER32.dll | 735 | ShowWindow | |
USER32.dll | 708 | SetWindowLongW | |
USER32.dll | 288 | GetCursorPos | |
USER32.dll | 710 | SetWindowPos | |
USER32.dll | 566 | PostMessageW | |
USER32.dll | 636 | SendMessageW | |
USER32.dll | 533 | MessageBoxW | |
USER32.dll | 218 | EndDialog | |
USER32.dll | 295 | GetDlgItem | |
USER32.dll | 412 | GetWindowRect | |
USER32.dll | 539 | MoveWindow | |
USER32.dll | 656 | SetDlgItemTextW | |
USER32.dll | 491 | LoadCursorW | |
USER32.dll | 659 | SetForegroundWindow | |
GDI32.dll | 629 | SelectClipRgn | |
GDI32.dll | 425 | GetBkColor | |
GDI32.dll | 426 | GetBkMode | |
GDI32.dll | 79 | CreateRectRgn | |
GDI32.dll | 678 | SetTextColor | |
GDI32.dll | 639 | SetBkMode | |
GDI32.dll | 80 | CreateRectRgnIndirect | |
GDI32.dll | 509 | GetObjectW | |
GDI32.dll | 631 | SelectObject | |
GDI32.dll | 605 | RectInRegion | |
GDI32.dll | 525 | GetStockObject | |
GDI32.dll | 230 | DeleteObject | |
GDI32.dll | 84 | CreateSolidBrush | |
GDI32.dll | 227 | DeleteDC | |
GDI32.dll | 48 | CreateCompatibleDC | |
GDI32.dll | 53 | CreateDIBSection | |
GDI32.dll | 19 | BitBlt | |
GDI32.dll | 638 | SetBkColor | |
GDI32.dll | 239 | EndDoc | |
GDI32.dll | 242 | EndPage | |
GDI32.dll | 690 | StartPage | |
GDI32.dll | 688 | StartDocW | |
GDI32.dll | 660 | SetMapMode | |
GDI32.dll | 459 | GetDeviceCaps | |
GDI32.dll | 542 | GetTextExtentPoint32W | |
GDI32.dll | 312 | ExtTextOutW | |
GDI32.dll | 676 | SetTextAlign | |
GDI32.dll | 617 | RestoreDC | |
GDI32.dll | 607 | Rectangle | |
GDI32.dll | 75 | CreatePen | |
GDI32.dll | 671 | SetROP2 | |
GDI32.dll | 624 | SaveDC | |
GDI32.dll | 47 | CreateCompatibleBitmap | |
GDI32.dll | 566 | LineTo | |
GDI32.dll | 570 | MoveToEx | |
GDI32.dll | 550 | GetTextMetricsW | |
GDI32.dll | 599 | Polyline | |
GDI32.dll | 64 | CreateFontIndirectW | |
COMDLG32.dll | 14 | GetSaveFileNameW | |
COMDLG32.dll | 21 | PrintDlgW | |
COMDLG32.dll | 3 | ChooseFontW | |
COMDLG32.dll | 12 | GetOpenFileNameW | |
COMDLG32.dll | 8 | FindTextW | |
COMDLG32.dll | 1 | ChooseColorW | |
ADVAPI32.dll | 594 | RegEnumValueW | |
ADVAPI32.dll | 608 | RegOpenKeyExA | |
ADVAPI32.dll | 621 | RegQueryValueExA | |
ADVAPI32.dll | 616 | RegQueryInfoKeyW | |
ADVAPI32.dll | 623 | RegQueryValueW | |
ADVAPI32.dll | 641 | RegUnLoadKeyW | |
ADVAPI32.dll | 602 | RegLoadKeyW | |
ADVAPI32.dll | 371 | ImpersonateLoggedOnUser | |
ADVAPI32.dll | 656 | RevertToSelf | |
ADVAPI32.dll | 592 | RegEnumKeyW | |
ADVAPI32.dll | 399 | LookupAccountNameW | |
ADVAPI32.dll | 405 | LookupPrivilegeNameW | |
ADVAPI32.dll | 713 | StartServiceW | |
ADVAPI32.dll | 92 | ControlService | |
ADVAPI32.dll | 87 | CloseServiceHandle | |
ADVAPI32.dll | 552 | QueryServiceStatus | |
ADVAPI32.dll | 389 | IsValidSecurityDescriptor | |
ADVAPI32.dll | 551 | QueryServiceObjectSecurity | |
ADVAPI32.dll | 703 | SetServiceObjectSecurity | |
ADVAPI32.dll | 483 | MapGenericMask | |
ADVAPI32.dll | 96 | ControlTraceW | |
ADVAPI32.dll | 715 | StartTraceW | |
ADVAPI32.dll | 89 | CloseTrace | |
ADVAPI32.dll | 685 | SetKernelObjectSecurity | |
ADVAPI32.dll | 309 | GetKernelObjectSecurity | |
ADVAPI32.dll | 505 | OpenSCManagerW | |
ADVAPI32.dll | 124 | CreateProcessAsUserW | |
ADVAPI32.dll | 564 | RegConnectRegistryW | |
ADVAPI32.dll | 283 | FlushTraceW | |
ADVAPI32.dll | 108 | ConvertSidToStringSidW | |
ADVAPI32.dll | 32 | AllocateAndInitializeSid | |
ADVAPI32.dll | 706 | SetTokenInformation | |
ADVAPI32.dll | 540 | ProcessTrace | |
ADVAPI32.dll | 511 | OpenTraceW | |
ADVAPI32.dll | 560 | RegCloseKey | |
ADVAPI32.dll | 622 | RegQueryValueExW | |
ADVAPI32.dll | 609 | RegOpenKeyExW | |
ADVAPI32.dll | 31 | AdjustTokenPrivileges | |
ADVAPI32.dll | 407 | LookupPrivilegeValueW | |
ADVAPI32.dll | 503 | OpenProcessToken | |
ADVAPI32.dll | 580 | RegDeleteKeyW | |
ADVAPI32.dll | 638 | RegSetValueExW | |
ADVAPI32.dll | 572 | RegCreateKeyW | |
ADVAPI32.dll | 569 | RegCreateKeyExW | |
ADVAPI32.dll | 584 | RegDeleteValueW | |
ADVAPI32.dll | 612 | RegOpenKeyW | |
ADVAPI32.dll | 548 | QueryServiceConfigW | |
ADVAPI32.dll | 507 | OpenServiceW | |
ADVAPI32.dll | 118 | CopySid | |
ADVAPI32.dll | 310 | GetLengthSid | |
ADVAPI32.dll | 401 | LookupAccountSidW | |
ADVAPI32.dll | 263 | EqualSid | |
ADVAPI32.dll | 343 | GetSidSubAuthority | |
ADVAPI32.dll | 344 | GetSidSubAuthorityCount | |
ADVAPI32.dll | 341 | GetSidIdentifierAuthority | |
ADVAPI32.dll | 390 | IsValidSid | |
ADVAPI32.dll | 346 | GetTokenInformation | |
ADVAPI32.dll | 413 | LsaClose | |
ADVAPI32.dll | 427 | LsaFreeMemory | |
ADVAPI32.dll | 420 | LsaEnumerateAccountRights | |
ADVAPI32.dll | 445 | LsaOpenPolicy | |
ADVAPI32.dll | 288 | FreeSid | |
ADVAPI32.dll | 699 | SetSecurityInfo | |
ADVAPI32.dll | 16 | AddAccessAllowedAce | |
ADVAPI32.dll | 22 | AddAce | |
ADVAPI32.dll | 291 | GetAce | |
ADVAPI32.dll | 374 | InitializeAcl | |
ADVAPI32.dll | 334 | GetSecurityInfo | |
SHELL32.dll | 207 | SHGetMalloc | |
SHELL32.dll | 189 | SHGetFileInfoW | |
SHELL32.dll | 223 | SHGetSpecialFolderLocation | |
SHELL32.dll | 123 | SHBrowseForFolderW | |
SHELL32.dll | 215 | SHGetPathFromIDListW | |
SHELL32.dll | 289 | ShellExecuteExW | |
SHELL32.dll | 302 | Shell_NotifyIconW | |
SHELL32.dll | 290 | ShellExecuteW | |
ole32.dll | 16 | CoCreateInstance | |
ole32.dll | 62 | CoInitialize | |
ole32.dll | 108 | CoUninitialize | |
ole32.dll | 99 | CoSetProxyBlanket | |
ole32.dll | 104 | CoTaskMemFree | |
OLEAUT32.dll | 19 | ||
OLEAUT32.dll | 149 | ||
OLEAUT32.dll | 4 | ||
OLEAUT32.dll | 150 | ||
OLEAUT32.dll | 20 | ||
OLEAUT32.dll | 2 | ||
OLEAUT32.dll | 7 | ||
OLEAUT32.dll | 6 | ||
OLEAUT32.dll | 9 | ||
OLEAUT32.dll | 8 | ||
OLEAUT32.dll | 25 | ||
OLEAUT32.dll | 12 | ||
OLEAUT32.dll | 16 | ||
OLEAUT32.dll | 24 | ||
OLEAUT32.dll | 23 | ||
PSAPI.DLL | 16 | GetModuleFileNameExW |
StringTable 040904e4
CompanyName | Sysinternals - www.sysinternals.com |
FileDescription | Sysinternals Process Explorer |
FileVersion | 15.3 |
InternalName | Process Explorer |
LegalCopyright | Copyright © 1998-2012 Mark Russinovich |
LegalTrademarks | Copyright (C) 1998-2012 Mark Russinovich |
OriginalFilename | Procexp.exe |
ProductName | Process Explorer |
ProductVersion | 15.3 |
VS_FIXEDFILEINFO
FileVersion | 15.30.0.0 |
ProductVersion | 15.30.0.0 |
StrucVersion | 0x10000 |
FileFlagsMask | 0x3f |
FileFlags | 8 |
FileOS | 4 |
FileType | 1 |
FileSubtype | 0 |
Signers (1)
issuer: /C=US/ST=Washington/L=Redmond/O=Microsoft Corporation/CN=Microsoft Code Signing PCA
serial: 330000009D1E8D27AEB8F3D83800010000009D
Certificates (4)
Certificate: Data: Version: 3 (0x2) Serial Number: 33:00:00:00:9d:1e:8d:27:ae:b8:f3:d8:38:00:01:00:00:00:9d Signature Algorithm: sha1WithRSAEncryption Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Code Signing PCA Validity Not Before: Sep 4 21:42:09 2012 GMT Not After : Mar 4 21:42:09 2013 GMT Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=MOPR, CN=Microsoft Corporation Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a4:49:6c:10:fb:22:9c:65:a2:16:98:3b:cb: 61:62:fa:74:29:ad:8d:06:19:d2:71:58:19:8a:5e: 57:0d:69:62:6e:36:a0:4e:fd:22:79:e0:1d:c7:1a: 61:8e:fa:fc:a3:11:25:16:c8:c0:58:2c:31:8a:88: ae:32:1e:88:db:7f:3e:74:57:f7:85:a4:36:53:ca: 41:ef:69:b8:69:9e:6d:56:eb:6e:e4:b2:26:4d:73: d1:64:71:b4:1f:d6:61:84:88:00:21:ef:68:58:83: 5b:49:8f:b4:df:d3:35:d6:cb:d9:30:9f:53:fc:7a: 6b:9a:84:2b:b7:21:67:74:d4:f6:78:b6:61:87:98: 94:7c:2a:cf:67:e9:19:be:d9:ba:63:ed:3c:4e:3e: 7d:02:eb:f3:7f:af:cf:0f:b7:81:7e:f4:fb:e8:f7: 91:48:bb:8f:3d:8c:c8:07:93:1c:f3:bd:75:e4:fc: 63:20:29:9f:39:f3:41:54:38:1e:54:64:40:b4:84: aa:37:ae:f3:00:8c:e2:0d:fa:a1:b2:0f:22:b5:a7: a9:ae:d6:17:b9:30:f0:02:23:20:10:fa:6b:59:0f: e0:ad:9f:9e:60:81:93:03:4c:0d:9b:62:19:b3:bb: 96:bc:91:5a:a6:78:86:76:9b:6c:cd:4c:ec:12:b5: 38:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Extended Key Usage: Code Signing X509v3 Subject Key Identifier: DE:51:DC:1B:F2:1E:4A:05:3F:12:1C:C1:BC:C3:B3:65:2C:91:05:98 X509v3 Authority Key Identifier: keyid:CB:11:E8:CA:D2:B4:16:58:01:C9:37:2E:33:16:16:B9:4C:9A:0A:1F X509v3 CRL Distribution Points: Full Name: URI:http://crl.microsoft.com/pki/crl/products/MicCodSigPCA_08-31-2010.crl Authority Information Access: CA Issuers - URI:http://www.microsoft.com/pki/certs/MicCodSigPCA_08-31-2010.crt Signature Algorithm: sha1WithRSAEncryption 2a:a4:f7:ee:c0:c3:26:7a:83:62:1a:78:9c:5b:c5:fd:ec:15: c4:a7:78:13:d1:17:53:28:0b:0c:00:42:3f:38:0f:89:dc:64: 19:84:35:7f:48:b9:cf:eb:7a:89:a1:cd:4f:a9:e0:bb:ed:47: 10:fe:17:da:87:89:10:d1:4c:15:a0:f0:11:ff:da:96:cf:64: cf:81:fd:33:a7:c3:78:93:e4:7c:d5:6d:87:71:d6:1c:61:e2: cc:4e:64:b7:73:3f:f9:7b:27:34:f6:52:3f:47:43:c0:0e:81: 70:53:c1:96:01:a2:4b:bb:bf:2a:03:77:7b:6e:fb:d0:46:8a: 17:28:31:a5:05:e3:16:8a:b8:f1:4a:69:15:5d:33:f9:df:7f: 94:3c:47:45:1d:ae:ca:8b:c7:f7:88:1e:ea:fe:91:0c:9f:4f: 07:09:ed:26:92:6e:b3:94:19:01:f8:5f:81:e7:ae:da:89:8f: 7f:5a:5e:84:5f:b5:be:7c:46:e5:47:af:fe:58:2b:91:7f:87: dc:46:1f:51:95:cc:c3:62:a1:b5:c7:5f:eb:c9:69:5c:71:91: a9:8d:56:20:2c:3a:4e:93:fd:9b:06:8f:ad:8a:f8:68:7e:3b: ba:79:42:93:39:49:f5:d0:5e:ec:70:8d:42:75:c5:82:55:90: 1b:b5:55:61
Certificate: Data: Version: 3 (0x2) Serial Number: 61:02:8e:42:00:00:00:00:00:1f Signature Algorithm: sha1WithRSAEncryption Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Time-Stamp PCA Validity Not Before: Jan 9 22:25:58 2012 GMT Not After : Apr 9 22:25:58 2013 GMT Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=MOPR, OU=nCipher DSE ESN:F528-3777-8A76, CN=Microsoft Time-Stamp Service Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ec:8e:47:4d:54:c2:5c:95:80:d7:4e:0b:3d: bf:97:43:c3:4b:e3:60:67:11:2f:01:4d:0c:d8:d1: 46:2f:10:40:de:0b:a4:50:52:12:88:0b:43:7a:2d: 3f:ee:48:6e:66:c7:91:e6:03:ca:6e:ec:79:a9:6a: 23:9b:cd:62:9e:cd:6a:a4:3f:e7:a3:43:ff:62:47: a1:b4:ba:44:fa:df:40:c1:85:54:7e:e8:a0:a7:2c: 43:23:9b:52:1f:32:35:f4:fe:9a:56:9f:8d:63:77: 7b:30:9e:0a:33:85:72:1b:ca:4a:c8:cc:25:cd:db: 5d:11:2e:c7:b0:8c:f1:8f:43:48:47:05:b5:7a:20: 0b:e5:f3:ef:c1:ba:f4:b3:d8:cd:38:8f:fb:21:aa: 3d:0a:6d:85:17:d0:ca:e7:86:03:c0:33:83:b5:25: c4:cc:5a:9c:c4:c3:da:62:25:4d:53:25:14:61:8f: fb:1b:e0:ec:f7:47:c6:80:45:e6:35:53:23:36:77: ca:b0:dd:98:2b:39:c0:75:35:0f:dd:81:4c:21:3d: 76:30:c5:b2:b0:65:73:29:48:27:d8:c2:d2:b0:84: 47:bb:78:ba:d5:74:03:de:d7:4b:19:f7:53:de:78: da:86:f7:61:88:26:33:b4:47:c6:a0:54:88:15:2b: 2c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:E8:46:C8:68:D3:6E:4F:B2:20:D0:DE:89:4E:F1:47:EE:48:C1:F2 X509v3 Authority Key Identifier: keyid:23:34:F8:D9:52:46:70:0A:ED:40:FB:76:FB:B3:2B:B0:C3:35:B3:0F X509v3 CRL Distribution Points: Full Name: URI:http://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl Authority Information Access: CA Issuers - URI:http://www.microsoft.com/pki/certs/MicrosoftTimeStampPCA.crt X509v3 Extended Key Usage: Time Stamping Signature Algorithm: sha1WithRSAEncryption 73:ff:7d:2e:9d:cd:8d:88:2b:7c:7d:e3:5e:15:71:e9:68:62: f0:08:b6:43:56:c4:5c:4a:2d:68:d8:f9:48:11:91:f3:11:9c: 85:ec:12:d4:54:a0:75:a9:38:a1:59:7f:75:ee:c6:f5:34:d8: 54:a4:e2:d0:cc:7c:97:ab:93:75:30:97:07:1d:04:53:2c:36: 7f:7f:f1:40:1e:0c:9b:80:e2:12:0a:20:3a:31:c0:07:75:67: e0:fa:34:9c:ec:88:fb:57:1c:e5:58:62:20:90:45:2f:5d:45: a9:c8:8e:b3:7c:72:6d:10:27:c5:4b:d8:6f:a2:a8:12:b3:6d: 35:23:67:fa:2c:db:25:2d:b9:5d:b1:1e:05:e7:43:28:3e:9c: 05:76:77:f1:25:de:05:47:19:6d:de:49:85:a1:da:4a:4b:08: 46:21:35:a8:75:36:4c:b7:b3:08:aa:df:b7:2b:d9:be:2a:6a: fd:df:35:17:cc:3f:0c:c7:dd:06:cf:4e:94:24:63:20:0b:2e: 24:ae:5f:43:44:12:7a:5c:dd:37:db:a4:45:b3:91:3a:12:57: 7d:e3:47:c6:66:d3:cf:9c:46:56:f4:4c:07:b1:e0:0c:aa:d5: f6:d5:3c:a2:e0:b5:d4:f8:1c:7e:04:55:10:6b:18:f4:91:cd: 51:a7:95:65
Certificate: Data: Version: 3 (0x2) Serial Number: 61:33:26:1a:00:00:00:00:00:31 Signature Algorithm: sha1WithRSAEncryption Issuer: DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority Validity Not Before: Aug 31 22:19:32 2010 GMT Not After : Aug 31 22:29:32 2020 GMT Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Code Signing PCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:72:59:5c:19:30:64:bf:1d:9a:60:20:20:42: 99:76:53:6c:3e:1b:d6:6f:cc:cb:f1:ea:6b:fe:97: 16:10:e0:df:3a:74:83:1a:b7:2f:a0:32:ec:ff:de: c2:42:4e:23:d5:72:00:db:35:57:0a:89:ca:ae:20: 49:f4:f0:68:ac:4d:4b:8d:a5:bd:79:4b:71:9b:47: 07:da:fd:25:df:9d:75:88:cf:aa:73:44:7f:d7:81: db:f3:bd:f2:36:a4:c9:5c:45:dc:af:ad:3d:e0:28: 68:97:1a:a7:a5:72:73:56:f1:17:94:e4:fd:35:94: 72:a0:d6:76:5f:1e:77:45:83:85:38:16:d0:73:5b: 05:ba:67:52:8d:a5:b2:69:2f:da:19:0b:fe:92:74: 29:e2:76:2f:54:dd:14:30:59:f8:d2:8d:62:fd:cb: c9:5f:46:31:50:b9:27:13:e4:40:30:cf:72:29:10: 28:22:c7:37:4e:3d:a0:32:3d:90:cd:a1:38:06:85: 5c:4e:56:82:28:2a:05:32:b7:4b:d7:4f:63:e7:d2: 2d:62:f1:45:3d:e7:ac:08:00:f6:46:a1:9e:d1:5b: 8c:26:53:e8:7a:aa:4a:f2:46:cf:37:3c:38:9e:b4: 77:5c:a5:17:9e:8d:cb:11:8f:56:3c:c1:ac:09:5f: 03:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CB:11:E8:CA:D2:B4:16:58:01:C9:37:2E:33:16:16:B9:4C:9A:0A:1F X509v3 Key Usage: Digital Signature, Certificate Sign, CRL Sign 1.3.6.1.4.1.311.21.1: ..... 1.3.6.1.4.1.311.21.2: ....1N.&....`;.1o.<..- 1.3.6.1.4.1.311.20.2: . .S.u.b.C.A X509v3 Authority Key Identifier: keyid:0E:AC:82:60:40:56:27:97:E5:25:13:FC:2A:E1:0A:53:95:59:E4:A4 X509v3 CRL Distribution Points: Full Name: URI:http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl Authority Information Access: CA Issuers - URI:http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt Signature Algorithm: sha1WithRSAEncryption 59:39:3e:7f:26:46:af:eb:6f:40:b1:32:b5:6a:eb:0e:2f:6e: a8:49:f7:eb:5f:75:ed:4c:3b:2d:d7:43:ad:0b:fe:cb:e9:2d: 31:a3:23:cc:7c:50:98:80:21:5d:ac:3d:2f:4c:ba:a2:a8:56: 9c:e3:70:bb:b8:b4:f8:79:b5:49:72:f7:3e:ea:41:7f:ca:e1: 0c:17:69:cb:a5:9c:20:2d:fa:0b:50:c4:56:cd:2d:e3:4a:d2: bc:70:e7:a8:0d:a2:03:a5:56:e0:b8:8a:4b:57:f2:95:42:9c: f1:f3:ef:ee:e3:86:1f:34:3c:b8:56:9a:f0:53:23:85:2a:a4: 82:1c:93:e2:94:07:1d:f2:e2:4e:f8:8c:a1:ca:e8:13:a5:91: 4e:c8:1b:d2:8f:72:95:2a:71:6d:9b:1a:f8:1c:f0:53:d6:67: cc:22:ff:5c:1d:cd:a2:8c:bd:27:b2:79:63:56:44:a2:51:cd: f9:e9:a3:58:56:dd:9b:02:45:44:2f:5f:f4:da:ae:d4:82:32: 6e:fc:a4:95:13:e4:eb:69:e7:a9:a2:2c:be:c8:2b:10:0e:65: 8e:99:db:f5:a2:fa:12:26:09:65:38:94:f1:7a:1f:4a:bb:d1: e1:56:e8:d0:78:96:18:5c:c9:35:16:5f:dd:93:1d:49:8e:2d: be:ad:34:44:1c:ee:10:15:1a:00:5d:dd:35:5b:21:ce:98:c7: 09:ee:85:0e:8c:4f:6d:0e:13:4e:3d:7c:29:48:9c:72:d1:f3: 6c:ca:c1:ec:70:a3:57:92:57:7d:94:8d:a0:1b:48:03:5a:f7: cf:a3:67:0a:74:a5:36:ed:2d:2f:17:c8:e6:72:37:12:f4:6f: b1:3c:67:82:f9:52:b2:8d:33:16:65:1e:0e:8a:dd:10:de:64: f4:6f:ce:46:d4:d3:17:e9:79:c4:04:b4:d3:fb:2c:df:1f:8a: 9e:ac:0a:fb:13:27:40:ad:e4:f9:e1:a9:7f:46:bb:07:60:47: 65:60:40:4e:b0:42:ec:4e:ed:b3:76:79:d8:0a:34:09:6d:1c: 80:31:1f:e2:0e:54:dd:e5:a1:fb:e5:47:10:ad:64:98:ff:50: 16:2e:7c:bf:05:21:7a:e2:95:41:27:69:c3:93:8f:95:c9:8d: d8:9b:21:ae:0d:5c:9c:f0:a2:ae:86:68:83:0c:6a:2d:bb:76: 6b:00:1d:96:ad:f2:16:7b:f6:16:83:24:b9:88:cf:6a:a8:47: 31:2f:9a:dc:e3:71:3d:d7:00:7e:62:47:d1:ce:88:c9:b8:18: fa:0e:72:8d:c1:a3:3d:af:02:40:6a:ff:69:9b:96:e2:10:a8: 10:b4:37:50:08:d6:c3:3d
Certificate: Data: Version: 3 (0x2) Serial Number: 61:16:68:34:00:00:00:00:00:1c Signature Algorithm: sha1WithRSAEncryption Issuer: DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority Validity Not Before: Apr 3 12:53:09 2007 GMT Not After : Apr 3 13:03:09 2021 GMT Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Time-Stamp PCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a1:6c:b1:df:db:48:92:2a:7c:6b:2e:19:e1: bd:e2:e3:c5:99:51:23:50:ad:ce:dd:18:4e:24:0f: ee:d1:a7:d1:4c:ad:74:30:20:11:eb:07:d5:54:95: 15:49:94:1b:42:92:ae:98:5c:30:26:da:00:6b:e8: 7b:bd:ec:89:07:0f:f7:0e:04:98:f0:89:cc:1f:cb: 33:24:87:9d:f2:f4:67:1c:2c:fc:7b:e7:88:1d:ea: e7:4e:a3:a1:c1:23:53:ca:8d:fa:45:cf:09:d0:5e: af:d0:b0:42:04:a2:f9:a6:6c:93:67:d7:28:dc:46: 53:b0:86:d0:e5:28:46:2e:27:ac:86:4f:55:52:0c: e4:03:2c:fb:6a:90:90:30:6e:87:f3:59:30:9d:fa: 7e:d6:97:b3:e8:21:97:7e:f8:d2:13:f3:08:b7:53: 6d:52:b4:45:90:9f:48:00:4a:47:66:11:27:29:66: a8:97:e4:d3:06:81:4a:a2:f9:84:a7:11:47:14:09: 82:9f:84:ed:55:78:fe:01:9a:1d:50:08:85:00:10: 30:46:ed:b7:de:23:46:bb:c4:2d:54:9f:af:1e:78: 41:31:77:cc:9b:df:3b:83:93:a1:61:02:b5:1d:0d: b1:fc:f7:9b:b2:01:ce:22:4b:54:ff:f9:05:c3:c2: 20:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 23:34:F8:D9:52:46:70:0A:ED:40:FB:76:FB:B3:2B:B0:C3:35:B3:0F X509v3 Key Usage: Digital Signature, Certificate Sign, CRL Sign 1.3.6.1.4.1.311.21.1: ... X509v3 Authority Key Identifier: keyid:0E:AC:82:60:40:56:27:97:E5:25:13:FC:2A:E1:0A:53:95:59:E4:A4 DirName:/DC=com/DC=microsoft/CN=Microsoft Root Certificate Authority serial:79:AD:16:A1:4A:A0:A5:AD:4C:73:58:F4:07:13:2E:65 X509v3 CRL Distribution Points: Full Name: URI:http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl Authority Information Access: CA Issuers - URI:http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt X509v3 Extended Key Usage: Time Stamping Signature Algorithm: sha1WithRSAEncryption 10:97:8a:c3:5c:03:44:36:dd:e9:b4:ad:77:db:ce:79:51:4d: 01:b1:2e:74:71:5b:6d:0c:13:ab:ce:be:7b:8f:b8:2e:d4:12: a2:8c:6d:62:b8:57:02:cb:4e:20:13:50:99:dd:7a:40:e2:57: bb:af:58:9a:1c:e1:1d:01:86:ac:bb:78:f2:8b:d0:ec:3b:01: ee:e2:be:8f:0a:05:c8:8d:48:e2:f0:53:15:dd:4f:ab:92:e4: e7:8d:6a:d5:80:c1:e6:94:f2:06:2f:85:03:e9:91:2a:24:22: 70:fb:f6:fc:e4:78:99:2e:0d:f7:07:e2:70:bc:18:4e:9d:8e: 6b:0a:72:95:b8:a1:39:9c:67:2d:c5:51:0e:ea:62:5c:3f:16: 98:8b:20:3f:e2:07:1a:32:f9:cc:31:4a:76:31:3d:2b:72:0b: c8:ea:70:3d:ff:85:0a:13:df:c2:0a:61:8e:f0:d7:b8:17:eb: 4e:8b:7f:c5:35:2b:5e:a3:bf:eb:bc:7d:0b:42:7b:d4:53:72: 21:ee:30:ca:bb:78:65:5c:5b:01:17:0a:14:0e:d2:da:14:98: f5:3c:b9:66:58:b3:2d:2f:e7:f9:85:86:cc:51:56:e8:9d:70: 94:6c:ac:39:4c:d4:f6:79:bf:aa:18:7a:62:29:ef:a2:9b:29: 34:06:77:1a:62:c9:3d:1e:6d:1f:82:f0:0b:c7:2c:bb:cf:43: b3:e5:f9:ec:7d:b5:e3:a4:a8:74:35:b8:4e:c5:71:23:12:26: 76:0b:3c:52:8c:71:5a:46:43:14:bc:b3:b3:b0:4d:67:c8:9f: 42:ff:80:79:21:80:9e:15:30:66:e8:42:12:5e:1a:c8:9e:22: 21:d0:43:e9:2b:e9:bb:f4:48:cc:2c:d4:d8:32:80:4c:26:2a: 48:24:5f:5a:ea:56:ef:a6:de:99:9d:ca:3a:6f:bd:81:27:74: 06:11:ee:76:21:bf:9b:82:c1:27:54:b6:b1:6a:3d:89:a1:76: 61:b4:6e:a1:13:a6:bf:aa:47:f0:12:6f:fd:8a:32:6c:b2:fe: df:51:c8:8c:23:c9:66:bd:9d:1d:87:12:64:02:3d:2d:af:59: 8f:b8:e4:21:e5:b5:b0:ca:63:b4:78:54:05:d4:41:2e:50:ac: 94:b0:a5:78:ab:b3:a0:96:75:1a:d9:92:87:13:75:22:2f:32: a8:08:6e:a0:5b:8c:25:bf:a0:ef:84:ca:21:d6:eb:1e:4f:c9: 9a:ee:49:e0:f7:01:65:6f:89:0b:7d:c8:69:c8:e6:6e:ea:a7: 97:ce:31:29:ff:0e:c5:5b:5c:d8:4d:1b:a1:d8:fa:2f:9e:3f: 2e:55:16:6b:c9:13:a3:fd
pkcs7-signedData
- 1
- SHA1: nil
- 1.3.6.1.4.1.311.2.1.4
- #0
- 1.3.6.1.4.1.311.2.1.15
- :
- SHA1
81 79 4d f6 06 2a ae 50 9c d3 02 a4 23 27 5f b4 |.yM..*.P....#'_.| 2c 28 70 0e |,(p. |
- 1.3.6.1.4.1.311.2.1.15
- #0
- unnamed
- Certificate #0
- 2
- 33:00:00:00:9D:1E:8D:27:AE:B8:F3:D8:38:00:01:00:
00:00:9D - RSA-SHA1: nil
- Issuer
- C: US
- ST: Washington
- L: Redmond
- O: Microsoft Corporation
- CN: Microsoft Code Signing PCA
- 2012-09-04 21:42:09 UTC: 2013-03-04 21:42:09 UTC
- Subject
- C: US
- ST: Washington
- L: Redmond
- O: Microsoft Corporation
- OU: MOPR
- CN: Microsoft Corporation
- #5
- rsaEncryption: nil
- BA:A4:49:6C:10:FB:22:9C:65:A2:16:98:3B:CB:61:62:
FA:74:29:AD:8D:06:19:D2:71:58:19:8A:5E:57:0D:69:
62:6E:36:A0:4E:FD:22:79:E0:1D:C7:1A:61:8E:FA:FC:
A3:11:25:16:C8:C0:58:2C:31:8A:88:AE:32:1E:88:DB:
7F:3E:74:57:F7:85:A4:36:53:CA:41:EF:69:B8:69:9E:
6D:56:EB:6E:E4:B2:26:4D:73:D1:64:71:B4:1F:D6:61:
84:88:00:21:EF:68:58:83:5B:49:8F:B4:DF:D3:35:D6:
CB:D9:30:9F:53:FC:7A:6B:9A:84:2B:B7:21:67:74:D4:
F6:78:B6:61:87:98:94:7C:2A:CF:67:E9:19:BE:D9:BA:
63:ED:3C:4E:3E:7D:02:EB:F3:7F:AF:CF:0F:B7:81:7E:
F4:FB:E8:F7:91:48:BB:8F:3D:8C:C8:07:93:1C:F3:BD:
75:E4:FC:63:20:29:9F:39:F3:41:54:38:1E:54:64:40:
B4:84:AA:37:AE:F3:00:8C:E2:0D:FA:A1:B2:0F:22:B5:
A7:A9:AE:D6:17:B9:30:F0:02:23:20:10:FA:6B:59:0F:
E0:AD:9F:9E:60:81:93:03:4C:0D:9B:62:19:B3:BB:96:
BC:91:5A:A6:78:86:76:9B:6C:CD:4C:EC:12:B5:38:47: 0x010001
- #6
- extendedKeyUsage: codeSigning
- subjectKeyIdentifier:
de 51 dc 1b f2 1e 4a 05 3f 12 1c c1 bc c3 b3 65 |.Q....J.?......e| 2c 91 05 98 |,... |
- authorityKeyIdentifier:
cb 11 e8 ca d2 b4 16 58 01 c9 37 2e 33 16 16 b9 |.......X..7.3...| 4c 9a 0a 1f |L... |
- crlDistributionPoints: http://crl.microsoft.com/pki/crl/products/MicCodSigPCA_08-31-2010.crl
- authorityInfoAccess
- caIssuers: http://www.microsoft.com/pki/certs/MicCodSigPCA_08-31-2010.crt
- 33:00:00:00:9D:1E:8D:27:AE:B8:F3:D8:38:00:01:00:
- RSA-SHA1:
2a a4 f7 ee c0 c3 26 7a 83 62 1a 78 9c 5b c5 fd |*.....&z.b.x.[..| ec 15 c4 a7 78 13 d1 17 53 28 0b 0c 00 42 3f 38 |....x...S(...B?8| 0f 89 dc 64 19 84 35 7f 48 b9 cf eb 7a 89 a1 cd |...d..5.H...z...| 4f a9 e0 bb ed 47 10 fe 17 da 87 89 10 d1 4c 15 |O....G........L.| a0 f0 11 ff da 96 cf 64 cf 81 fd 33 a7 c3 78 93 |.......d...3..x.| e4 7c d5 6d 87 71 d6 1c 61 e2 cc 4e 64 b7 73 3f |.|.m.q..a..Nd.s?| f9 7b 27 34 f6 52 3f 47 43 c0 0e 81 70 53 c1 96 |.{'4.R?GC...pS..| 01 a2 4b bb bf 2a 03 77 7b 6e fb d0 46 8a 17 28 |..K..*.w{n..F..(| 31 a5 05 e3 16 8a b8 f1 4a 69 15 5d 33 f9 df 7f |1.......Ji.]3...| 94 3c 47 45 1d ae ca 8b c7 f7 88 1e ea fe 91 0c |.
- 2
- Certificate #1
- 2
- 61:02:8E:42:00:00:00:00:00:1F
- RSA-SHA1: nil
- Issuer
- C: US
- ST: Washington
- L: Redmond
- O: Microsoft Corporation
- CN: Microsoft Time-Stamp PCA
- 2012-01-09 22:25:58 UTC: 2013-04-09 22:25:58 UTC
- Subject
- C: US
- ST: Washington
- L: Redmond
- O: Microsoft Corporation
- OU: MOPR
- OU: nCipher DSE ESN:F528-3777-8A76
- CN: Microsoft Time-Stamp Service
- #5
- rsaEncryption: nil
- 96:EC:8E:47:4D:54:C2:5C:95:80:D7:4E:0B:3D:BF:97:
43:C3:4B:E3:60:67:11:2F:01:4D:0C:D8:D1:46:2F:10:
40:DE:0B:A4:50:52:12:88:0B:43:7A:2D:3F:EE:48:6E:
66:C7:91:E6:03:CA:6E:EC:79:A9:6A:23:9B:CD:62:9E:
CD:6A:A4:3F:E7:A3:43:FF:62:47:A1:B4:BA:44:FA:DF:
40:C1:85:54:7E:E8:A0:A7:2C:43:23:9B:52:1F:32:35:
F4:FE:9A:56:9F:8D:63:77:7B:30:9E:0A:33:85:72:1B:
CA:4A:C8:CC:25:CD:DB:5D:11:2E:C7:B0:8C:F1:8F:43:
48:47:05:B5:7A:20:0B:E5:F3:EF:C1:BA:F4:B3:D8:CD:
38:8F:FB:21:AA:3D:0A:6D:85:17:D0:CA:E7:86:03:C0:
33:83:B5:25:C4:CC:5A:9C:C4:C3:DA:62:25:4D:53:25:
14:61:8F:FB:1B:E0:EC:F7:47:C6:80:45:E6:35:53:23:
36:77:CA:B0:DD:98:2B:39:C0:75:35:0F:DD:81:4C:21:
3D:76:30:C5:B2:B0:65:73:29:48:27:D8:C2:D2:B0:84:
47:BB:78:BA:D5:74:03:DE:D7:4B:19:F7:53:DE:78:DA:
86:F7:61:88:26:33:B4:47:C6:A0:54:88:15:2B:2C:75: 0x010001
- #6
- subjectKeyIdentifier:
2f e8 46 c8 68 d3 6e 4f b2 20 d0 de 89 4e f1 47 |/.F.h.nO. ...N.G| ee 48 c1 f2 |.H.. |
- authorityKeyIdentifier:
23 34 f8 d9 52 46 70 0a ed 40 fb 76 fb b3 2b b0 |#4..RFp..@.v..+.| c3 35 b3 0f |.5.. |
- crlDistributionPoints: http://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl
- authorityInfoAccess
- caIssuers: http://www.microsoft.com/pki/certs/MicrosoftTimeStampPCA.crt
- extendedKeyUsage: timeStamping
- subjectKeyIdentifier:
- RSA-SHA1:
73 ff 7d 2e 9d cd 8d 88 2b 7c 7d e3 5e 15 71 e9 |s.}.....+|}.^.q.| 68 62 f0 08 b6 43 56 c4 5c 4a 2d 68 d8 f9 48 11 |hb...CV.\J-h..H.| 91 f3 11 9c 85 ec 12 d4 54 a0 75 a9 38 a1 59 7f |........T.u.8.Y.| 75 ee c6 f5 34 d8 54 a4 e2 d0 cc 7c 97 ab 93 75 |u...4.T....|...u| 30 97 07 1d 04 53 2c 36 7f 7f f1 40 1e 0c 9b 80 |0....S,6...@....| e2 12 0a 20 3a 31 c0 07 75 67 e0 fa 34 9c ec 88 |... :1..ug..4...| fb 57 1c e5 58 62 20 90 45 2f 5d 45 a9 c8 8e b3 |.W..Xb .E/]E....| 7c 72 6d 10 27 c5 4b d8 6f a2 a8 12 b3 6d 35 23 ||rm.'.K.o....m5#| 67 fa 2c db 25 2d b9 5d b1 1e 05 e7 43 28 3e 9c |g.,.%-.]....C(>.| 05 76 77 f1 25 de 05 47 19 6d de 49 85 a1 da 4a |.vw.%..G.m.I...J| 4b 08 46 21 35 a8 75 36 4c b7 b3 08 aa df b7 2b |K.F!5.u6L......+| d9 be 2a 6a fd df 35 17 cc 3f 0c c7 dd 06 cf 4e |..*j..5..?.....N| 94 24 63 20 0b 2e 24 ae 5f 43 44 12 7a 5c dd 37 |.$c ..$._CD.z\.7| db a4 45 b3 91 3a 12 57 7d e3 47 c6 66 d3 cf 9c |..E..:.W}.G.f...| 46 56 f4 4c 07 b1 e0 0c aa d5 f6 d5 3c a2 e0 b5 |FV.L........<...| d4 f8 1c 7e 04 55 10 6b 18 f4 91 cd 51 a7 95 65 |...~.U.k....Q..e|
- 2
- #2
- 2
- 61:33:26:1A:00:00:00:00:00:31
- RSA-SHA1: nil
- #2
- DC: com
- DC: microsoft
- CN: Microsoft Root Certificate Authority
- 2010-08-31 22:19:32 UTC: 2020-08-31 22:29:32 UTC
- Subject
- C: US
- ST: Washington
- L: Redmond
- O: Microsoft Corporation
- CN: Microsoft Code Signing PCA
- #5
- rsaEncryption: nil
- B2:72:59:5C:19:30:64:BF:1D:9A:60:20:20:42:99:76:
53:6C:3E:1B:D6:6F:CC:CB:F1:EA:6B:FE:97:16:10:E0:
DF:3A:74:83:1A:B7:2F:A0:32:EC:FF:DE:C2:42:4E:23:
D5:72:00:DB:35:57:0A:89:CA:AE:20:49:F4:F0:68:AC:
4D:4B:8D:A5:BD:79:4B:71:9B:47:07:DA:FD:25:DF:9D:
75:88:CF:AA:73:44:7F:D7:81:DB:F3:BD:F2:36:A4:C9:
5C:45:DC:AF:AD:3D:E0:28:68:97:1A:A7:A5:72:73:56:
F1:17:94:E4:FD:35:94:72:A0:D6:76:5F:1E:77:45:83:
85:38:16:D0:73:5B:05:BA:67:52:8D:A5:B2:69:2F:DA:
19:0B:FE:92:74:29:E2:76:2F:54:DD:14:30:59:F8:D2:
8D:62:FD:CB:C9:5F:46:31:50:B9:27:13:E4:40:30:CF:
72:29:10:28:22:C7:37:4E:3D:A0:32:3D:90:CD:A1:38:
06:85:5C:4E:56:82:28:2A:05:32:B7:4B:D7:4F:63:E7:
D2:2D:62:F1:45:3D:E7:AC:08:00:F6:46:A1:9E:D1:5B:
8C:26:53:E8:7A:AA:4A:F2:46:CF:37:3C:38:9E:B4:77:
5C:A5:17:9E:8D:CB:11:8F:56:3C:C1:AC:09:5F:03:D3: 0x010001
- X509v3 extensions
- basicConstraints: true, true
- subjectKeyIdentifier:
cb 11 e8 ca d2 b4 16 58 01 c9 37 2e 33 16 16 b9 |.......X..7.3...| 4c 9a 0a 1f |L... |
- keyUsage: 0x86
- 1.3.6.1.4.1.311.21.1: 0x010001
- 1.3.6.1.4.1.311.21.2:
fd d1 31 4e d3 26 8a 95 e1 98 60 3b a8 31 6f a6 |..1N.&....`;.1o.| 3c bc d8 2d |<..- |
- 1.3.6.1.4.1.311.20.2:
00 53 00 75 00 62 00 43 00 41 |.S.u.b.C.A |
- authorityKeyIdentifier:
0e ac 82 60 40 56 27 97 e5 25 13 fc 2a e1 0a 53 |...`@V'..%..*..S| 95 59 e4 a4 |.Y.. |
- crlDistributionPoints: http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl
- authorityInfoAccess
- caIssuers: http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt
- RSA-SHA1:
59 39 3e 7f 26 46 af eb 6f 40 b1 32 b5 6a eb 0e |Y9>.&F..o@.2.j..| 2f 6e a8 49 f7 eb 5f 75 ed 4c 3b 2d d7 43 ad 0b |/n.I.._u.L;-.C..| fe cb e9 2d 31 a3 23 cc 7c 50 98 80 21 5d ac 3d |...-1.#.|P..!].=| 2f 4c ba a2 a8 56 9c e3 70 bb b8 b4 f8 79 b5 49 |/L...V..p....y.I| 72 f7 3e ea 41 7f ca e1 0c 17 69 cb a5 9c 20 2d |r.>.A.....i... -| fa 0b 50 c4 56 cd 2d e3 4a d2 bc 70 e7 a8 0d a2 |..P.V.-.J..p....| 03 a5 56 e0 b8 8a 4b 57 f2 95 42 9c f1 f3 ef ee |..V...KW..B.....| e3 86 1f 34 3c b8 56 9a f0 53 23 85 2a a4 82 1c |...4<.V..S#.*...| 93 e2 94 07 1d f2 e2 4e f8 8c a1 ca e8 13 a5 91 |.......N........| 4e c8 1b d2 8f 72 95 2a 71 6d 9b 1a f8 1c f0 53 |N....r.*qm.....S| d6 67 cc 22 ff 5c 1d cd a2 8c bd 27 b2 79 63 56 |.g.".\.....'.ycV| 44 a2 51 cd f9 e9 a3 58 56 dd 9b 02 45 44 2f 5f |D.Q....XV...ED/_| f4 da ae d4 82 32 6e fc a4 95 13 e4 eb 69 e7 a9 |.....2n......i..| a2 2c be c8 2b 10 0e 65 8e 99 db f5 a2 fa 12 26 |.,..+..e.......&| 09 65 38 94 f1 7a 1f 4a bb d1 e1 56 e8 d0 78 96 |.e8..z.J...V..x.| 18 5c c9 35 16 5f dd 93 1d 49 8e 2d be ad 34 44 |.\.5._...I.-..4D| 1c ee 10 15 1a 00 5d dd 35 5b 21 ce 98 c7 09 ee |......].5[!.....| 85 0e 8c 4f 6d 0e 13 4e 3d 7c 29 48 9c 72 d1 f3 |...Om..N=|)H.r..| 6c ca c1 ec 70 a3 57 92 57 7d 94 8d a0 1b 48 03 |l...p.W.W}....H.| 5a f7 cf a3 67 0a 74 a5 36 ed 2d 2f 17 c8 e6 72 |Z...g.t.6.-/...r| 37 12 f4 6f b1 3c 67 82 f9 52 b2 8d 33 16 65 1e |7..o.
- 2
- #3
- 2
- 61:16:68:34:00:00:00:00:00:1C
- RSA-SHA1: nil
- #2
- DC: com
- DC: microsoft
- CN: Microsoft Root Certificate Authority
- 2007-04-03 12:53:09 UTC: 2021-04-03 13:03:09 UTC
- Subject
- C: US
- ST: Washington
- L: Redmond
- O: Microsoft Corporation
- CN: Microsoft Time-Stamp PCA
- #5
- rsaEncryption: nil
- 9F:A1:6C:B1:DF:DB:48:92:2A:7C:6B:2E:19:E1:BD:E2:
E3:C5:99:51:23:50:AD:CE:DD:18:4E:24:0F:EE:D1:A7:
D1:4C:AD:74:30:20:11:EB:07:D5:54:95:15:49:94:1B:
42:92:AE:98:5C:30:26:DA:00:6B:E8:7B:BD:EC:89:07:
0F:F7:0E:04:98:F0:89:CC:1F:CB:33:24:87:9D:F2:F4:
67:1C:2C:FC:7B:E7:88:1D:EA:E7:4E:A3:A1:C1:23:53:
CA:8D:FA:45:CF:09:D0:5E:AF:D0:B0:42:04:A2:F9:A6:
6C:93:67:D7:28:DC:46:53:B0:86:D0:E5:28:46:2E:27:
AC:86:4F:55:52:0C:E4:03:2C:FB:6A:90:90:30:6E:87:
F3:59:30:9D:FA:7E:D6:97:B3:E8:21:97:7E:F8:D2:13:
F3:08:B7:53:6D:52:B4:45:90:9F:48:00:4A:47:66:11:
27:29:66:A8:97:E4:D3:06:81:4A:A2:F9:84:A7:11:47:
14:09:82:9F:84:ED:55:78:FE:01:9A:1D:50:08:85:00:
10:30:46:ED:B7:DE:23:46:BB:C4:2D:54:9F:AF:1E:78:
41:31:77:CC:9B:DF:3B:83:93:A1:61:02:B5:1D:0D:B1:
FC:F7:9B:B2:01:CE:22:4B:54:FF:F9:05:C3:C2:20:0B: 0x010001
- X509v3 extensions
- basicConstraints: true, true
- subjectKeyIdentifier:
23 34 f8 d9 52 46 70 0a ed 40 fb 76 fb b3 2b b0 |#4..RFp..@.v..+.| c3 35 b3 0f |.5.. |
- keyUsage: 0x86
- 1.3.6.1.4.1.311.21.1: 0
- authorityKeyIdentifier
0e ac 82 60 40 56 27 97 e5 25 13 fc 2a e1 0a 53 |...`@V'..%..*..S| 95 59 e4 a4 |.Y.. |
- #0
- DC: com
- DC: microsoft
- CN: Microsoft Root Certificate Authority
79 ad 16 a1 4a a0 a5 ad 4c 73 58 f4 07 13 2e 65 |y...J...LsX....e|
- #0
- crlDistributionPoints: http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl
- authorityInfoAccess
- caIssuers: http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt
- extendedKeyUsage: timeStamping
- RSA-SHA1:
10 97 8a c3 5c 03 44 36 dd e9 b4 ad 77 db ce 79 |....\.D6....w..y| 51 4d 01 b1 2e 74 71 5b 6d 0c 13 ab ce be 7b 8f |QM...tq[m.....{.| b8 2e d4 12 a2 8c 6d 62 b8 57 02 cb 4e 20 13 50 |......mb.W..N .P| 99 dd 7a 40 e2 57 bb af 58 9a 1c e1 1d 01 86 ac |..z@.W..X.......| bb 78 f2 8b d0 ec 3b 01 ee e2 be 8f 0a 05 c8 8d |.x....;.........| 48 e2 f0 53 15 dd 4f ab 92 e4 e7 8d 6a d5 80 c1 |H..S..O.....j...| e6 94 f2 06 2f 85 03 e9 91 2a 24 22 70 fb f6 fc |..../....*$"p...| e4 78 99 2e 0d f7 07 e2 70 bc 18 4e 9d 8e 6b 0a |.x......p..N..k.| 72 95 b8 a1 39 9c 67 2d c5 51 0e ea 62 5c 3f 16 |r...9.g-.Q..b\?.| 98 8b 20 3f e2 07 1a 32 f9 cc 31 4a 76 31 3d 2b |.. ?...2..1Jv1=+| 72 0b c8 ea 70 3d ff 85 0a 13 df c2 0a 61 8e f0 |r...p=.......a..| d7 b8 17 eb 4e 8b 7f c5 35 2b 5e a3 bf eb bc 7d |....N...5+^....}| 0b 42 7b d4 53 72 21 ee 30 ca bb 78 65 5c 5b 01 |.B{.Sr!.0..xe\[.| 17 0a 14 0e d2 da 14 98 f5 3c b9 66 58 b3 2d 2f |.........<.fX.-/| e7 f9 85 86 cc 51 56 e8 9d 70 94 6c ac 39 4c d4 |.....QV..p.l.9L.| f6 79 bf aa 18 7a 62 29 ef a2 9b 29 34 06 77 1a |.y...zb)...)4.w.| 62 c9 3d 1e 6d 1f 82 f0 0b c7 2c bb cf 43 b3 e5 |b.=.m.....,..C..| f9 ec 7d b5 e3 a4 a8 74 35 b8 4e c5 71 23 12 26 |..}....t5.N.q#.&| 76 0b 3c 52 8c 71 5a 46 43 14 bc b3 b3 b0 4d 67 |v.
- 2
- Certificate #0
- Signer
- 1
- unnamed
- #0
- C: US
- ST: Washington
- L: Redmond
- O: Microsoft Corporation
- CN: Microsoft Code Signing PCA
- 33:00:00:00:9D:1E:8D:27:AE:B8:F3:D8:38:00:01:00:
00:00:9D
- #0
- SHA1: nil
- #3
- contentType: 1.3.6.1.4.1.311.2.1.4
- 1.3.6.1.4.1.311.2.1.11: msCodeInd
- messageDigest:
d0 bb 69 f2 4c 23 39 d7 e4 8d f0 68 ed 8b 72 c5 |..i.L#9....h..r.| be c3 89 c3 |.... |
- 1.3.6.1.4.1.311.2.1.12
00 53 00 79 00 73 00 69 00 6e 00 74 00 65 00 72 |.S.y.s.i.n.t.e.r| 00 6e 00 61 00 6c 00 73 00 20 00 55 00 74 00 69 |.n.a.l.s. .U.t.i| 00 6c 00 69 00 74 00 69 00 65 00 73 |.l.i.t.i.e.s |
: http://technet.microsoft.com/sysinternals
- rsaEncryption:
42 c6 a6 f4 48 b9 28 6a c1 0f 2c 82 ff 39 4f 79 |B...H.(j..,..9Oy| 53 3f 0f f6 b3 0c e1 22 fd f3 b4 a5 5c c4 32 c0 |S?....."....\.2.| d4 d3 08 fd 2a 30 6b 66 1f ba 6e 8f 28 ab da b3 |....*0kf..n.(...| 3b 98 aa 93 c7 04 fa e8 1a 2d 0a 0b 34 f2 a3 23 |;........-..4..#| 95 a5 fa 28 d9 f5 b5 3f ac f6 32 34 14 e1 b0 9d |...(...?..24....| 93 ea ff 99 9c fa 14 d4 62 89 97 1a de 9d fc e7 |........b.......| f4 3b 66 bb 29 a6 58 e8 ea 5f 74 2c 25 2e 43 54 |.;f.).X.._t,%.CT| 17 77 1b eb 94 24 f3 f3 5f db 0c ae 09 56 8a 66 |.w...$.._....V.f| 8c 0a 84 1a 96 45 ac 1a 7e 56 c6 74 a4 a1 38 fe |.....E..~V.t..8.| 6d 5c 0d b0 d8 fb 7d 62 16 d2 1b 42 4c fd 30 7a |m\....}b...BL.0z| ef 09 7f 89 95 35 a4 1a a5 87 c3 eb aa 71 af da |.....5.......q..| 34 6c 07 68 ee 6b 44 de 2b 93 c2 6e 69 53 23 36 |4l.h.kD.+..niS#6| 1e 39 58 dd b6 c1 7a b6 56 24 30 e4 47 8b f0 b7 |.9X...z.V$0.G...| d8 f4 cf 89 72 5b 9d 11 b9 ce 99 c6 f8 ae f9 74 |....r[.........t| 31 20 33 50 77 51 43 bf 23 6d 6e 4c e6 4d 72 27 |1 3PwQC.#mnL.Mr'| f2 2d e6 b4 8b b1 a6 2b 44 a3 22 a1 82 cf 13 66 |.-.....+D."....f|
- countersignature
- 1
- unnamed
- #0
- C: US
- ST: Washington
- L: Redmond
- O: Microsoft Corporation
- CN: Microsoft Time-Stamp PCA
- 61:02:8E:42:00:00:00:00:00:1F
- #0
- SHA1: nil
- #2
- contentType: pkcs7-data
- signingTime: 2013-02-05 06:46:37 UTC
- messageDigest:
8c 0a 0b ff 5a 93 dc a7 c4 b9 f3 f2 56 af 73 25 |....Z.......V.s%| 7d c4 95 77 |}..w |
- RSA-SHA1:
60 87 d9 ae d5 5a 2a 57 10 d4 11 85 4e 81 14 a7 |`....Z*W....N...| 45 99 64 2e b1 0f 73 fd 8e 28 bf 34 79 53 63 1c |E.d...s..(.4ySc.| 3b 26 a1 10 2d 58 e7 71 6d ef 18 5d 2c b9 a9 24 |;&..-X.qm..],..$| 28 d1 5d f5 b9 ae 99 46 a3 cb 9e 59 59 a5 01 9d |(.]....F...YY...| 9a 09 8c 43 8c 7d 10 30 ab ff 10 c5 1d 91 4c de |...C.}.0......L.| 9b e3 53 e1 52 1c 55 bf de 43 b2 64 0e da 5e 76 |..S.R.U..C.d..^v| 98 78 ac 14 8a c6 5c 32 81 b6 b5 42 d8 65 30 59 |.x....\2...B.e0Y| fb af cb d4 69 2b 07 ab 5a 14 be 0b 48 b1 0e 60 |....i+..Z...H..`| ae d8 5f 2f 35 8f ab 72 ca 69 8f a1 1e 06 d4 75 |.._/5..r.i.....u| 29 3c 2e 68 26 0b f3 15 47 7a 64 11 b7 4f 73 c9 |)<.h&...Gzd..Os.| f7 ff 65 13 ca b6 04 c2 a2 cb a5 6f 5e 13 a5 02 |..e........o^...| 99 8a 82 62 68 7c 08 b5 13 33 af e0 45 ba 7a e1 |...bh|...3..E.z.| 5d 0a a9 35 6f 99 c6 bd 21 64 b8 3e 4d 25 e8 74 |]..5o...!d.>M%.t| 02 37 75 8c 2a 56 ee 76 fe 7d a5 1b d0 ff e3 ac |.7u.*V.v.}......| 8b 65 f4 0b 2b 61 f4 e7 d1 cd 10 57 b6 ba ef a5 |.e..+a.....W....| 1a c3 8f 32 3d 5a 90 56 c8 56 b4 20 db e6 31 8b |...2=Z.V.V. ..1.|
- unnamed
- 1
offset | size | type | comment | |
---|---|---|---|---|
0 | 2731520 | EXE | 02/04/2013 02:01:49 | # |
15c1 | 15 | HTM | # | |
29ae00 | 6744 | PKCS7 | Authenticode Signature | # |
Please donate some bucks to keep this site up and running: | |
Ko-fi | |
---|---|
Yandex.Money | |
Thank you! |
everything is OK