SWI32.DLL - Summus Wavelet Image Compressor DLL

info
MZ
PE
resources
imports
exports
foremost
version info
signature
hexdump
disasm
log
discuss
donate

filename	SWI32.DLL
size	249704 (0x3cf68)
md5	83fbea75c64c13399e5bf41f5e3287a4

type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	6
TimeDateStamp	0x345a57b0
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x210e
Magic	0x10b
LinkerVersion	5.0
SizeOfCode	0x34600
SizeOfInitializedData	0x8600
SizeOfUninitializedData	0
AddressOfEntryPoint	0x16d0
BaseOfCode	0x1000
BaseOfData	0x36000
ImageBase	0x10000000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x40000
SizeOfHeaders	0x400
CheckSum	0x41a45
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x1000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x34480	0x34600	R-X CODE
.rdata	0x36000	0xee0	0x1000	R-- IDATA
.data	0x37000	0x4f14	0x3a00	RW- IDATA
.idata	0x3c000	0x690	0x800	RW- IDATA
.rsrc	0x3d000	0x70c	0x800	R-- IDATA
.reloc	0x3e000	0x14fe	0x1600	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0x36c50	0x290
IMPORT	0x3c000	0x28
RESOURCE	0x3d000	0x70c
EXCEPTION	0	0
SECURITY	0x3ba00	0x1568
BASERELOC	0x3e000	0xf3c
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x3c128	0x100
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size
ICON	#1	744
GROUP_ICON	SWI32	20
VERSION	#1	784

module_name	hint	function_name
KERNEL32.dll	362	HeapCreate
KERNEL32.dll	348	GlobalFree
KERNEL32.dll	355	GlobalSize
KERNEL32.dll	170	GetCommandLineA
KERNEL32.dll	278	GetProcAddress
KERNEL32.dll	254	GetModuleHandleA
KERNEL32.dll	332	GetVersion
KERNEL32.dll	328	GetTimeZoneInformation
KERNEL32.dll	309	GetSystemTime
KERNEL32.dll	245	GetLocalTime
KERNEL32.dll	107	ExitProcess
KERNEL32.dll	582	TerminateProcess
KERNEL32.dll	211	GetCurrentProcess
KERNEL32.dll	214	GetCurrentThreadId
KERNEL32.dll	587	TlsSetValue
KERNEL32.dll	584	TlsAlloc
KERNEL32.dll	585	TlsFree
KERNEL32.dll	542	SetLastError
KERNEL32.dll	586	TlsGetValue
KERNEL32.dll	244	GetLastError
KERNEL32.dll	539	SetHandleCount
KERNEL32.dll	298	GetStdHandle
KERNEL32.dll	239	GetFileType
KERNEL32.dll	296	GetStartupInfoA
KERNEL32.dll	76	DeleteCriticalSection
KERNEL32.dll	252	GetModuleFileNameA
KERNEL32.dll	163	GetCPInfo
KERNEL32.dll	157	GetACP
KERNEL32.dll	265	GetOEMCP
KERNEL32.dll	150	FreeEnvironmentStringsA
KERNEL32.dll	427	MultiByteToWideChar
KERNEL32.dll	151	FreeEnvironmentStringsW
KERNEL32.dll	225	GetEnvironmentStrings
KERNEL32.dll	227	GetEnvironmentStringsW
KERNEL32.dll	622	WideCharToMultiByte
KERNEL32.dll	364	HeapDestroy
KERNEL32.dll	341	GlobalAlloc
KERNEL32.dll	606	VirtualFree
KERNEL32.dll	635	WriteFile
KERNEL32.dll	377	InitializeCriticalSection
KERNEL32.dll	88	EnterCriticalSection
KERNEL32.dll	399	LeaveCriticalSection
KERNEL32.dll	470	ReadFile
KERNEL32.dll	537	SetFilePointer
KERNEL32.dll	366	HeapFree
KERNEL32.dll	24	CloseHandle
KERNEL32.dll	360	HeapAlloc
KERNEL32.dll	603	VirtualAlloc
KERNEL32.dll	400	LoadLibraryA
KERNEL32.dll	379	InterlockedDecrement
KERNEL32.dll	382	InterlockedIncrement
KERNEL32.dll	553	SetStdHandle
KERNEL32.dll	142	FlushFileBuffers
KERNEL32.dll	299	GetStringTypeA
KERNEL32.dll	302	GetStringTypeW
KERNEL32.dll	30	CompareStringA
KERNEL32.dll	31	CompareStringW
KERNEL32.dll	529	SetEnvironmentVariableA
KERNEL32.dll	246	GetLocaleInfoA
KERNEL32.dll	247	GetLocaleInfoW
KERNEL32.dll	369	HeapReAlloc
KERNEL32.dll	397	LCMapStringA
KERNEL32.dll	398	LCMapStringW

ord	entry_va	function_name
1	0x9d20	SiCompress
2	0xa530	SiDecompress
3	0x9d60	SiFreeCmpDataInfo
4	0xa580	SiFreeImageInfo
5	0xa570	SiGetImageInfo
6	0x9db0	WiBeginDecompress
7	0x9490	WiCompress
8	0xa5e0	WiCreateCmpImage
9	0x9430	WiCreateCmpOptions
10	0x9d70	WiCreateDecmpOptions
11	0xa5b0	WiCreateRawImage
12	0xa1b0	WiDecompress
13	0x9f60	WiDecompressSubHeader
14	0xa060	WiDecompressSubImage
15	0xa600	WiDestroyCmpImage
16	0xa600	WiDestroyCmpOptions
17	0xa600	WiDestroyDecmpOptions
18	0xa600	WiDestroyRawImage
19	0xa180	WiEndDecompress
20	0xa580	WiFreeCmpImageData
21	0xa4c0	WiFreeRawImageData
22	0xa360	WiGetProgressiveImage

module_name	SWI32.dll
flags	0
timestamp	1997-10-31 22:12:00
version	0.0
ordinal_base	1
nFunctions	22
nNames	22
Names(22)	0x36cd0
Functions(22)	0x36c78
NameOrdinals(22)	0x36d28

StringTable 040904e4

CompanyName	Summus, Ltd.
FileDescription	Summus Wavelet Image Compressor DLL
FileVersion	4.08
InternalName	SWI32 Dynamic Link Library
LegalCopyright	Copyright © 1994-1998 Summus, Ltd.
OriginalFilename	SWI32.DLL
ProductName
ProductVersion	4, 0, 0, 8

VS_FIXEDFILEINFO

FileVersion	4.0.0.8
ProductVersion	4.0.0.8
StrucVersion	0x10000
FileFlagsMask	0
FileFlags	0
FileOS	4
FileType	2
FileSubtype	0

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa (c)09/CN=VeriSign Class 3 Code Signing 2009-2 CA

serial: 0B0308C3C672DA433819F1A8CA00F8C9

Certificates (4)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA
        Validity
            Not Before: Jun 15 00:00:00 2007 GMT
            Not After : Jun 14 23:59:59 2012 GMT
        Subject: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (1024 bit)
                Modulus:
                    00:c4:b5:f2:52:15:bc:88:86:60:29:16:4a:5b:2f:
                    4b:91:6b:87:91:f3:35:54:58:35:ea:d1:36:5e:62:
                    4d:52:51:34:71:c2:7b:66:1d:89:c8:dd:2a:c4:6a:
                    0a:f6:37:d9:98:74:91:f6:92:ae:b0:b5:76:96:f1:
                    a9:4a:63:45:47:2e:6b:0b:92:4e:4b:2b:8c:ee:58:
                    4a:8b:d4:07:e4:1a:2c:f8:82:aa:58:d9:cd:42:f3:
                    2d:c0:75:de:8d:ab:c7:8e:1d:9a:6c:4c:08:95:1e:
                    de:db:ef:67:e1:72:c2:49:c2:9e:60:3c:e1:e2:be:
                    16:a3:63:78:69:14:7b:ad:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com

            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.verisign.com/tss-ca.crl

            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation
            X509v3 Subject Alternative Name: 
                DirName:/CN=TSA1-2
    Signature Algorithm: sha1WithRSAEncryption
         50:c5:4b:c8:24:80:df:e4:0d:24:c2:de:1a:b1:a1:02:a1:a6:
         82:2d:0c:83:15:81:37:0a:82:0e:2c:b0:5a:17:61:b5:d8:05:
         fe:88:db:f1:91:91:b3:56:1a:40:a6:eb:92:be:38:39:b0:75:
         36:74:3a:98:4f:e4:37:ba:99:89:ca:95:42:1d:b0:b9:c7:a0:
         8d:57:e0:fa:d5:64:04:42:35:4e:01:d1:33:a2:17:c8:4d:aa:
         27:c7:f2:e1:86:4c:02:38:4d:83:78:c6:fc:53:e0:eb:e0:06:
         87:dd:a4:96:9e:5e:0c:98:e2:a5:be:bf:82:85:c3:60:e1:df:
         ad:28:d8:c7:a5:4b:64:da:c7:1b:5b:bd:ac:39:08:d5:38:22:
         a1:33:8b:2f:8a:9a:eb:bc:07:21:3f:44:41:09:07:b5:65:1c:
         24:bc:48:d3:44:80:eb:a1:cf:c9:02:b4:14:cf:54:c7:16:a3:
         80:5c:f9:79:3e:5d:72:7d:88:17:9e:2c:43:a2:ca:53:ce:7d:
         3d:f6:2a:3a:b8:4f:94:00:a5:6d:0a:83:5d:f9:5e:53:f4:18:
         b3:57:0f:70:c3:fb:f5:ad:95:a0:0e:17:de:c4:16:80:60:c9:
         0f:2b:6e:86:04:f1:eb:f4:78:27:d1:05:c5:ee:34:5b:5e:b9:
         49:32:f2:33

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
        Validity
            Not Before: Dec  4 00:00:00 2003 GMT
            Not After : Dec  3 23:59:59 2013 GMT
        Subject: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ca:b2:a4:cc:cd:20:af:0a:7d:89:ac:87:75:
                    f0:b4:4e:f1:df:c1:0f:bf:67:61:bd:a3:64:1c:da:
                    bb:f9:ca:33:ab:84:30:89:58:7e:8c:db:6b:dd:36:
                    9e:0f:bf:d1:ec:78:f2:77:a6:7e:6f:3c:bf:93:af:
                    0d:ba:68:f4:6c:94:ca:bd:52:2d:ab:48:3d:f5:b6:
                    d5:5d:5f:1b:02:9f:fa:2f:6b:1e:a4:f7:a3:9a:a6:
                    1a:c8:02:e1:7f:4c:52:e3:0e:60:ec:40:1c:7e:b9:
                    0d:de:3f:c7:b4:df:87:bd:5f:7a:6a:31:2e:03:99:
                    81:13:a8:47:20:ce:31:73:0d:57:2d:cd:78:34:33:
                    95:12:99:12:b9:de:68:2f:aa:e6:e3:c2:8a:8c:2a:
                    c3:8b:21:87:66:bd:83:58:57:6f:75:bf:3c:aa:26:
                    87:5d:ca:10:15:3c:9f:84:ea:54:c1:0a:6e:c4:fe:
                    c5:4a:dd:b9:07:11:97:22:7c:db:3e:27:d1:1e:78:
                    ec:9f:31:c9:f1:e6:22:19:db:c4:b3:47:43:9a:1a:
                    5f:a0:1e:90:e4:5e:f5:ee:7c:f1:7d:ab:62:01:8f:
                    f5:4d:0b:de:d0:22:56:a8:95:cd:ae:88:76:ae:ee:
                    ba:0d:f3:e4:4d:d9:a0:fb:68:a0:ae:14:3b:b3:87:
                    c1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com

            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.verisign.com/ThawteTimestampingCA.crl

            X509v3 Extended Key Usage: 
                Time Stamping
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=TSA2048-1-53
    Signature Algorithm: sha1WithRSAEncryption
         4a:6b:f9:ea:58:c2:44:1c:31:89:79:99:2b:96:bf:82:ac:01:
         d6:1c:4c:cd:b0:8a:58:6e:df:08:29:a3:5e:c8:ca:93:13:e7:
         04:52:0d:ef:47:27:2f:00:38:b0:e4:c9:93:4e:9a:d4:22:62:
         15:f7:3f:37:21:4f:70:31:80:f1:8b:38:87:b3:e8:e8:97:00:
         fe:cf:55:96:4e:24:d2:a9:27:4e:7a:ae:b7:61:41:f3:2a:ce:
         e7:c9:d9:5e:dd:bb:2b:85:3e:b5:9d:b5:d9:e1:57:ff:be:b4:
         c5:7e:f5:cf:0c:9e:f0:97:fe:2b:d3:3b:52:1b:1b:38:27:f7:
         3f:4a

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority
        Validity
            Not Before: May 21 00:00:00 2009 GMT
            Not After : May 20 23:59:59 2019 GMT
        Subject: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009-2 CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:67:1d:b4:60:aa:10:49:6f:56:17:7c:66:c9:
                    5e:86:0d:d5:f1:ac:a7:71:83:8e:8b:89:f8:88:04:
                    89:15:06:ba:2d:84:21:95:e4:d1:9c:50:4c:fb:d2:
                    22:bd:da:f2:b2:35:3b:1e:8f:c3:09:fb:fc:13:2e:
                    5a:bf:89:7c:3d:3b:25:1e:f6:f3:58:7b:9c:f4:01:
                    b5:c6:0a:b8:80:ce:be:27:74:61:67:27:4d:6a:e5:
                    ec:81:61:58:79:a3:e0:17:10:12:15:27:b0:e1:4d:
                    34:7f:2b:47:20:44:b9:de:66:24:66:8a:cd:4f:ba:
                    1f:c5:38:c8:54:90:e1:72:f6:19:66:75:6a:b9:49:
                    68:cf:38:79:0d:aa:30:a8:db:2c:60:48:9e:d7:aa:
                    14:01:a9:83:d7:38:91:30:39:13:96:03:3a:7c:40:
                    54:b6:ad:e0:2f:1b:83:dc:a8:11:52:3e:02:b3:d7:
                    2b:fd:21:b6:a7:5c:a3:0f:0b:a9:a6:10:50:0e:34:
                    2e:4d:a7:ce:c9:5e:25:d4:8c:bc:f3:6e:7c:29:bc:
                    01:5d:fc:31:87:5a:d5:8c:85:67:58:88:19:a0:bf:
                    35:f0:ea:2b:a3:21:e7:90:f6:83:e5:a8:ed:60:78:
                    5e:7b:60:83:fd:57:0b:5d:41:0d:63:54:60:d6:43:
                    21:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/cps
                  User Notice:
                    Explicit Text: https://www.verisign.com/rpa

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            1.3.6.1.5.5.7.1.12: 
                0_.].[0Y0W0U..image/gif0!0.0...+..............k...j.H.,{..0%.#http://logo.verisign.com/vslogo.gif
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, Code Signing
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.verisign.com/pca3.crl

            X509v3 Subject Alternative Name: 
                DirName:/CN=Class3CA2048-1-55
            X509v3 Subject Key Identifier: 
                97:D0:6B:A8:26:70:C8:A1:3F:94:1F:08:2D:C4:35:9B:A4:A1:1E:F2
    Signature Algorithm: sha1WithRSAEncryption
         8b:03:c0:dd:94:d8:41:a2:61:69:b0:15:a8:78:c7:30:c6:90:
         3c:7e:42:f7:24:b6:e4:83:73:17:04:7f:04:10:9c:a1:e2:fa:
         81:2f:eb:c0:ca:44:e7:72:e0:50:b6:55:10:20:83:6e:96:92:
         e4:9a:51:6a:b4:37:31:dc:a5:2d:eb:8c:00:c7:1d:4f:e7:4d:
         32:ba:85:f8:4e:be:fa:67:55:65:f0:6a:be:7a:ca:64:38:1a:
         10:10:78:45:76:31:f3:86:7a:03:0f:60:c2:b3:5d:9d:f6:8b:
         66:76:82:1b:59:e1:83:e5:bd:49:a5:38:56:e5:de:41:77:0e:
         58:0f

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:03:08:c3:c6:72:da:43:38:19:f1:a8:ca:00:f8:c9
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009-2 CA
        Validity
            Not Before: Jun 17 00:00:00 2009 GMT
            Not After : Jun 30 23:59:59 2010 GMT
        Subject: C=CA, ST=Ontario, L=Ottawa, O=Corel Corporation, OU=Digital ID Class 3 - Microsoft Software Validation v2, OU=Common Engineering Services, CN=Corel Corporation
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (1024 bit)
                Modulus:
                    00:d5:8c:d8:3d:da:98:6d:11:e6:39:a5:79:69:82:
                    3e:66:b0:a3:52:cb:a6:2f:09:6c:09:ca:67:2c:49:
                    34:fe:39:3f:d8:9f:81:06:23:79:02:e2:95:e2:05:
                    e9:28:17:f4:d7:71:66:e0:72:97:63:6d:b1:0f:a7:
                    cd:cb:54:9e:cf:34:7c:bc:ed:8e:6b:09:7c:cf:7a:
                    1e:4a:40:74:16:a8:08:3c:9d:5a:17:88:3a:c3:d7:
                    89:e1:3b:e7:2f:5f:3b:64:c5:42:7f:0a:84:c7:b5:
                    cf:76:51:83:ae:ed:b1:48:34:f1:eb:d0:ef:22:b7:
                    bc:74:27:42:6a:5d:08:88:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://csc3-2009-2-crl.verisign.com/CSC3-2009-2.crl

            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/rpa

            X509v3 Extended Key Usage: 
                Code Signing
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com
                CA Issuers - URI:http://csc3-2009-2-aia.verisign.com/CSC3-2009-2.cer

            X509v3 Authority Key Identifier: 
                keyid:97:D0:6B:A8:26:70:C8:A1:3F:94:1F:08:2D:C4:35:9B:A4:A1:1E:F2

            Netscape Cert Type: 
                Object Signing
            1.3.6.1.4.1.311.2.1.27: 
                0.......
    Signature Algorithm: sha1WithRSAEncryption
         28:94:b9:8a:f4:96:84:fa:9a:06:02:1e:f7:54:10:b4:e3:7c:
         7f:16:c6:83:5a:b2:c8:54:53:fc:73:c4:f4:3b:49:40:68:3f:
         da:5d:74:00:e2:33:09:5d:be:66:21:41:20:0c:49:9f:ba:2f:
         d9:8c:ea:aa:6a:f1:8c:e4:e6:fa:35:bd:fe:49:67:24:48:58:
         e8:ab:65:c3:54:cf:30:1d:e9:10:42:6f:aa:5e:d3:d0:ad:84:
         c0:2a:fd:c7:60:5c:c3:4f:84:3c:2c:3e:46:b4:21:3c:63:1e:
         5d:a4:94:f3:f0:8b:d4:7f:58:66:79:37:af:25:a4:c7:90:c9:
         4f:b4:4e:de:e5:50:3f:ef:47:7d:28:61:e1:40:3e:c4:77:de:
         1c:1c:b7:db:40:66:c0:a3:dd:fb:76:6b:78:c5:61:52:b4:c4:
         59:5e:0c:c4:f8:1a:0c:67:d4:e6:9b:70:bd:7f:ff:42:57:2c:
         22:52:29:c9:ec:9b:bf:ab:12:bc:97:45:46:5e:fa:e2:10:83:
         ae:77:65:5a:62:0a:a5:16:b8:ce:12:17:bd:2a:71:56:c9:53:
         aa:74:a4:ad:d2:37:03:10:03:ec:1f:31:fa:cb:56:ba:d1:58:
         fa:60:36:6a:70:f4:3f:50:ac:14:3e:85:8a:92:bd:9d:83:da:
         f0:b5:d1:8b

pkcs7-signedData

1
- SHA1: nil
- 1.3.6.1.4.1.311.2.1.4
  - #0
    - 1.3.6.1.4.1.311.2.1.15
      - :
        00 3c 00 3c 00 3c 00 4f 00 62 00 73 00 6f 00 6c |.<.<.<.O.b.s.o.l| 00 65 00 74 00 65 00 3e 00 3e 00 3e |.e.t.e.>.>.> |
    - SHA1
      - 26 48 4b e0 39 c4 3a 4d 1a eb 64 18 d8 a9 ba fb |&HK.9.:M..d.....| ac 38 8b f3 |.8.. |
- Certificates
  - Certificate #0
    - 2
      - 38:25:D7:FA:F8:61:AF:9E:F4:90:E7:26:B5:D6:5A:D5
      - RSA-SHA1: nil
      - Issuer
        C: US
        O: VeriSign, Inc.
        CN: VeriSign Time Stamping Services CA
      - 2007-06-15 00:00:00 UTC: 2012-06-14 23:59:59 UTC
      - Subject
        C: US
        O: VeriSign, Inc.
        CN: VeriSign Time Stamping Services Signer - G2
      - #5
        rsaEncryption: nil
        C4:B5:F2:52:15:BC:88:86:60:29:16:4A:5B:2F:4B:91:
        6B:87:91:F3:35:54:58:35:EA:D1:36:5E:62:4D:52:51:
        34:71:C2:7B:66:1D:89:C8:DD:2A:C4:6A:0A:F6:37:D9:
        98:74:91:F6:92:AE:B0:B5:76:96:F1:A9:4A:63:45:47:
        2E:6B:0B:92:4E:4B:2B:8C:EE:58:4A:8B:D4:07:E4:1A:
        2C:F8:82:AA:58:D9:CD:42:F3:2D:C0:75:DE:8D:AB:C7:
        8E:1D:9A:6C:4C:08:95:1E:DE:DB:EF:67:E1:72:C2:49:
        C2:9E:60:3C:E1:E2:BE:16:A3:63:78:69:14:7B:AD:2D: 0x010001
      - X509v3 extensions
        authorityInfoAccess
        OCSP: http://ocsp.verisign.com
        basicConstraints
        true
        nil
        crlDistributionPoints: http://crl.verisign.com/tss-ca.crl
        extendedKeyUsage: true, timeStamping
        keyUsage: true, 0xc0
        subjectAltName
        CN: TSA1-2
    - RSA-SHA1:
```
50 c5 4b c8 24 80 df e4  0d 24 c2 de 1a b1 a1 02  |P.K.$....$......|
a1 a6 82 2d 0c 83 15 81  37 0a 82 0e 2c b0 5a 17  |...-....7...,.Z.|
61 b5 d8 05 fe 88 db f1  91 91 b3 56 1a 40 a6 eb  |a..........V.@..|
92 be 38 39 b0 75 36 74  3a 98 4f e4 37 ba 99 89  |..89.u6t:.O.7...|
ca 95 42 1d b0 b9 c7 a0  8d 57 e0 fa d5 64 04 42  |..B......W...d.B|
35 4e 01 d1 33 a2 17 c8  4d aa 27 c7 f2 e1 86 4c  |5N..3...M.'....L|
02 38 4d 83 78 c6 fc 53  e0 eb e0 06 87 dd a4 96  |.8M.x..S........|
9e 5e 0c 98 e2 a5 be bf  82 85 c3 60 e1 df ad 28  |.^.........`...(|
d8 c7 a5 4b 64 da c7 1b  5b bd ac 39 08 d5 38 22  |...Kd...[..9..8"|
a1 33 8b 2f 8a 9a eb bc  07 21 3f 44 41 09 07 b5  |.3./.....!?DA...|
65 1c 24 bc 48 d3 44 80  eb a1 cf c9 02 b4 14 cf  |e.$.H.D.........|
54 c7 16 a3 80 5c f9 79  3e 5d 72 7d 88 17 9e 2c  |T....\.y>]r}...,|
43 a2 ca 53 ce 7d 3d f6  2a 3a b8 4f 94 00 a5 6d  |C..S.}=.*:.O...m|
0a 83 5d f9 5e 53 f4 18  b3 57 0f 70 c3 fb f5 ad  |..].^S...W.p....|
95 a0 0e 17 de c4 16 80  60 c9 0f 2b 6e 86 04 f1  |........`..+n...|
eb f4 78 27 d1 05 c5 ee  34 5b 5e b9 49 32 f2 33  |..x'....4[^.I2.3|
```
  - Certificate #1
    - 2
      - 47:BF:19:95:DF:8D:52:46:43:F7:DB:6D:48:0D:31:A4
      - RSA-SHA1: nil
      - Issuer
        C: ZA
        ST: Western Cape
        L: Durbanville
        O: Thawte
        OU: Thawte Certification
        CN: Thawte Timestamping CA
      - 2003-12-04 00:00:00 UTC: 2013-12-03 23:59:59 UTC
      - Subject
        C: US
        O: VeriSign, Inc.
        CN: VeriSign Time Stamping Services CA
      - #5
        rsaEncryption: nil
        A9:CA:B2:A4:CC:CD:20:AF:0A:7D:89:AC:87:75:F0:B4:
        4E:F1:DF:C1:0F:BF:67:61:BD:A3:64:1C:DA:BB:F9:CA:
        33:AB:84:30:89:58:7E:8C:DB:6B:DD:36:9E:0F:BF:D1:
        EC:78:F2:77:A6:7E:6F:3C:BF:93:AF:0D:BA:68:F4:6C:
        94:CA:BD:52:2D:AB:48:3D:F5:B6:D5:5D:5F:1B:02:9F:
        FA:2F:6B:1E:A4:F7:A3:9A:A6:1A:C8:02:E1:7F:4C:52:
        E3:0E:60:EC:40:1C:7E:B9:0D:DE:3F:C7:B4:DF:87:BD:
        5F:7A:6A:31:2E:03:99:81:13:A8:47:20:CE:31:73:0D:
        57:2D:CD:78:34:33:95:12:99:12:B9:DE:68:2F:AA:E6:
        E3:C2:8A:8C:2A:C3:8B:21:87:66:BD:83:58:57:6F:75:
        BF:3C:AA:26:87:5D:CA:10:15:3C:9F:84:EA:54:C1:0A:
        6E:C4:FE:C5:4A:DD:B9:07:11:97:22:7C:DB:3E:27:D1:
        1E:78:EC:9F:31:C9:F1:E6:22:19:DB:C4:B3:47:43:9A:
        1A:5F:A0:1E:90:E4:5E:F5:EE:7C:F1:7D:AB:62:01:8F:
        F5:4D:0B:DE:D0:22:56:A8:95:CD:AE:88:76:AE:EE:BA:
        0D:F3:E4:4D:D9:A0:FB:68:A0:AE:14:3B:B3:87:C1:BB: 0x010001
      - X509v3 extensions
        authorityInfoAccess
        OCSP: http://ocsp.verisign.com
        basicConstraints
        true
        true: 0
        crlDistributionPoints: http://crl.verisign.com/ThawteTimestampingCA.crl
        extendedKeyUsage: timeStamping
        keyUsage: true, 6
        subjectAltName
        CN: TSA2048-1-53
    - RSA-SHA1:
```
4a 6b f9 ea 58 c2 44 1c  31 89 79 99 2b 96 bf 82  |Jk..X.D.1.y.+...|
ac 01 d6 1c 4c cd b0 8a  58 6e df 08 29 a3 5e c8  |....L...Xn..).^.|
ca 93 13 e7 04 52 0d ef  47 27 2f 00 38 b0 e4 c9  |.....R..G'/.8...|
93 4e 9a d4 22 62 15 f7  3f 37 21 4f 70 31 80 f1  |.N.."b..?7!Op1..|
8b 38 87 b3 e8 e8 97 00  fe cf 55 96 4e 24 d2 a9  |.8........U.N$..|
27 4e 7a ae b7 61 41 f3  2a ce e7 c9 d9 5e dd bb  |'Nz..aA.*....^..|
2b 85 3e b5 9d b5 d9 e1  57 ff be b4 c5 7e f5 cf  |+.>.....W....~..|
0c 9e f0 97 fe 2b d3 3b  52 1b 1b 38 27 f7 3f 4a  |.....+.;R..8'.?J|
```
  - Certificate #2
    - 2
      - 65:52:26:E1:B2:2E:18:E1:59:0F:29:85:AC:22:E7:5C
      - RSA-SHA1: nil
      - Issuer
        C: US
        O: VeriSign, Inc.
        OU: Class 3 Public Primary Certification Authority
      - 2009-05-21 00:00:00 UTC: 2019-05-20 23:59:59 UTC
      - Subject
        C: US
        O: VeriSign, Inc.
        OU: VeriSign Trust Network
        OU: Terms of use at https://www.verisign.com/rpa (c)09
        CN: VeriSign Class 3 Code Signing 2009-2 CA
      - #5
        rsaEncryption: nil
        BE:67:1D:B4:60:AA:10:49:6F:56:17:7C:66:C9:5E:86:
        0D:D5:F1:AC:A7:71:83:8E:8B:89:F8:88:04:89:15:06:
        BA:2D:84:21:95:E4:D1:9C:50:4C:FB:D2:22:BD:DA:F2:
        B2:35:3B:1E:8F:C3:09:FB:FC:13:2E:5A:BF:89:7C:3D:
        3B:25:1E:F6:F3:58:7B:9C:F4:01:B5:C6:0A:B8:80:CE:
        BE:27:74:61:67:27:4D:6A:E5:EC:81:61:58:79:A3:E0:
        17:10:12:15:27:B0:E1:4D:34:7F:2B:47:20:44:B9:DE:
        66:24:66:8A:CD:4F:BA:1F:C5:38:C8:54:90:E1:72:F6:
        19:66:75:6A:B9:49:68:CF:38:79:0D:AA:30:A8:DB:2C:
        60:48:9E:D7:AA:14:01:A9:83:D7:38:91:30:39:13:96:
        03:3A:7C:40:54:B6:AD:E0:2F:1B:83:DC:A8:11:52:3E:
        02:B3:D7:2B:FD:21:B6:A7:5C:A3:0F:0B:A9:A6:10:50:
        0E:34:2E:4D:A7:CE:C9:5E:25:D4:8C:BC:F3:6E:7C:29:
        BC:01:5D:FC:31:87:5A:D5:8C:85:67:58:88:19:A0:BF:
        35:F0:EA:2B:A3:21:E7:90:F6:83:E5:A8:ED:60:78:5E:
        7B:60:83:FD:57:0B:5D:41:0D:63:54:60:D6:43:21:EF: 0x010001
      - X509v3 extensions
        basicConstraints
        true
        true: 0
        certificatePolicies
        2.16.840.1.113733.1.7.23.3
        #0
        id-qt-cps: https://www.verisign.com/cps
        id-qt-unotice: https://www.verisign.com/rpa
        keyUsage: true, 6
        1.3.6.1.5.5.7.1.12
        image/gif
        SHA1:
        8f e5 d3 1a 86 ac 8d 8e 6b c3 cf 80 6a d4 48 18 |........k...j.H.| 2c 7b 19 2e |,{.. |
        http://logo.verisign.com/vslogo.gif
        extendedKeyUsage
        clientAuth: codeSigning
        authorityInfoAccess
        OCSP: http://ocsp.verisign.com
        crlDistributionPoints: http://crl.verisign.com/pca3.crl
        subjectAltName
        CN: Class3CA2048-1-55
        subjectKeyIdentifier:
        97 d0 6b a8 26 70 c8 a1 3f 94 1f 08 2d c4 35 9b |..k.&p..?...-.5.| a4 a1 1e f2 |.... |
    - RSA-SHA1:
```
8b 03 c0 dd 94 d8 41 a2  61 69 b0 15 a8 78 c7 30  |......A.ai...x.0|
c6 90 3c 7e 42 f7 24 b6  e4 83 73 17 04 7f 04 10  |..<~B.$...s.....|
9c a1 e2 fa 81 2f eb c0  ca 44 e7 72 e0 50 b6 55  |...../...D.r.P.U|
10 20 83 6e 96 92 e4 9a  51 6a b4 37 31 dc a5 2d  |. .n....Qj.71..-|
eb 8c 00 c7 1d 4f e7 4d  32 ba 85 f8 4e be fa 67  |.....O.M2...N..g|
55 65 f0 6a be 7a ca 64  38 1a 10 10 78 45 76 31  |Ue.j.z.d8...xEv1|
f3 86 7a 03 0f 60 c2 b3  5d 9d f6 8b 66 76 82 1b  |..z..`..]...fv..|
59 e1 83 e5 bd 49 a5 38  56 e5 de 41 77 0e 58 0f  |Y....I.8V..Aw.X.|
```
  - Certificate #3
    - 2
      - 0B:03:08:C3:C6:72:DA:43:38:19:F1:A8:CA:00:F8:C9
      - RSA-SHA1: nil
      - Issuer
        C: US
        O: VeriSign, Inc.
        OU: VeriSign Trust Network
        OU: Terms of use at https://www.verisign.com/rpa (c)09
        CN: VeriSign Class 3 Code Signing 2009-2 CA
      - 2009-06-17 00:00:00 UTC: 2010-06-30 23:59:59 UTC
      - Subject
        C: CA
        ST: Ontario
        L: Ottawa
        O: Corel Corporation
        OU: Digital ID Class 3 - Microsoft Software Validation v2
        OU: Common Engineering Services
        CN: Corel Corporation
      - #5
        rsaEncryption: nil
        D5:8C:D8:3D:DA:98:6D:11:E6:39:A5:79:69:82:3E:66:
        B0:A3:52:CB:A6:2F:09:6C:09:CA:67:2C:49:34:FE:39:
        3F:D8:9F:81:06:23:79:02:E2:95:E2:05:E9:28:17:F4:
        D7:71:66:E0:72:97:63:6D:B1:0F:A7:CD:CB:54:9E:CF:
        34:7C:BC:ED:8E:6B:09:7C:CF:7A:1E:4A:40:74:16:A8:
        08:3C:9D:5A:17:88:3A:C3:D7:89:E1:3B:E7:2F:5F:3B:
        64:C5:42:7F:0A:84:C7:B5:CF:76:51:83:AE:ED:B1:48:
        34:F1:EB:D0:EF:22:B7:BC:74:27:42:6A:5D:08:88:95: 0x010001
      - X509v3 extensions
        basicConstraints
        nil
        keyUsage: true, 0x80
        crlDistributionPoints: http://csc3-2009-2-crl.verisign.com/CSC3-2009-2.crl
        certificatePolicies
        2.16.840.1.113733.1.7.23.3
        id-qt-cps: https://www.verisign.com/rpa
        extendedKeyUsage: codeSigning
        authorityInfoAccess
        #0
        OCSP: http://ocsp.verisign.com
        caIssuers: http://csc3-2009-2-aia.verisign.com/CSC3-2009-2.cer
        authorityKeyIdentifier:
        97 d0 6b a8 26 70 c8 a1 3f 94 1f 08 2d c4 35 9b |..k.&p..?...-.5.| a4 a1 1e f2 |.... |
        nsCertType: 0x10
        1.3.6.1.4.1.311.2.1.27
        false: true
    - RSA-SHA1:
```
28 94 b9 8a f4 96 84 fa  9a 06 02 1e f7 54 10 b4  |(............T..|
e3 7c 7f 16 c6 83 5a b2  c8 54 53 fc 73 c4 f4 3b  |.|....Z..TS.s..;|
49 40 68 3f da 5d 74 00  e2 33 09 5d be 66 21 41  |I@h?.]t..3.].f!A|
20 0c 49 9f ba 2f d9 8c  ea aa 6a f1 8c e4 e6 fa  | .I../....j.....|
35 bd fe 49 67 24 48 58  e8 ab 65 c3 54 cf 30 1d  |5..Ig$HX..e.T.0.|
e9 10 42 6f aa 5e d3 d0  ad 84 c0 2a fd c7 60 5c  |..Bo.^.....*..`\|
c3 4f 84 3c 2c 3e 46 b4  21 3c 63 1e 5d a4 94 f3  |.O.<,>F.!.w.|
1c 1c b7 db 40 66 c0 a3  dd fb 76 6b 78 c5 61 52  |....@f....vkx.aR|
b4 c4 59 5e 0c c4 f8 1a  0c 67 d4 e6 9b 70 bd 7f  |..Y^.....g...p..|
ff 42 57 2c 22 52 29 c9  ec 9b bf ab 12 bc 97 45  |.BW,"R)........E|
46 5e fa e2 10 83 ae 77  65 5a 62 0a a5 16 b8 ce  |F^.....weZb.....|
12 17 bd 2a 71 56 c9 53  aa 74 a4 ad d2 37 03 10  |...*qV.S.t...7..|
03 ec 1f 31 fa cb 56 ba  d1 58 fa 60 36 6a 70 f4  |...1..V..X.`6jp.|
3f 50 ac 14 3e 85 8a 92  bd 9d 83 da f0 b5 d1 8b  |?P..>...........|
```
- Signer
  - 1
  - unnamed
    - #0
      - C: US
      - O: VeriSign, Inc.
      - OU: VeriSign Trust Network
      - OU: Terms of use at https://www.verisign.com/rpa (c)09
      - CN: VeriSign Class 3 Code Signing 2009-2 CA
    - 0B:03:08:C3:C6:72:DA:43:38:19:F1:A8:CA:00:F8:C9
  - SHA1: nil
  - #3
    - 1.3.6.1.4.1.311.2.1.12
      - nil
    - contentType: 1.3.6.1.4.1.311.2.1.4
    - 1.3.6.1.4.1.311.2.1.11: msCodeInd
    - messageDigest:
```
4c 18 7b 8f eb f3 34 15  ad c1 c7 d4 87 de 2e 62  |L.{...4........b|
2e 63 f8 c6                                       |.c..            |
```
  - rsaEncryption:
```
b7 a7 aa 0a 54 eb 90 34  21 9a df 4b af 52 c0 e5  |....T..4!..K.R..|
76 e0 79 2e 9e 26 0e b8  83 4f de 03 27 32 3a dd  |v.y..&...O..'2:.|
d7 f7 54 71 30 14 86 78  c9 11 db 3b 9e 05 92 26  |..Tq0..x...;...&|
8a ea 6b 30 e9 17 6c 2d  b9 66 8e 98 9a ec b5 75  |..k0..l-.f.....u|
5d ed 2c d4 f6 dc d4 e9  57 54 58 a7 11 57 40 64  |].,.....WTX..W@d|
ab dc 99 70 c2 96 eb 56  e2 1d c9 59 9d 6a 77 16  |...p...V...Y.jw.|
8e c9 b3 b7 51 27 9b 6a  f7 5b 23 70 e7 fa 40 69  |....Q'.j.[#p..@i|
a4 14 4f 61 95 22 49 74  9f 8b 77 7f 80 8b 29 d7  |..Oa."It..w...).|
```
  - countersignature
    - 1
      - unnamed
        #0
        C: US
        O: VeriSign, Inc.
        CN: VeriSign Time Stamping Services CA
        38:25:D7:FA:F8:61:AF:9E:F4:90:E7:26:B5:D6:5A:D5
      - SHA1: nil
      - #2
        contentType: pkcs7-data
        signingTime: 2009-12-16 23:03:07 UTC
        messageDigest:
        e6 cf 9d 7a 0f 95 2d 56 20 6e f0 1d 03 8f 69 d8 |...z..-V n....i.| f3 50 32 52 |.P2R |
      - rsaEncryption:
        c3 8b 87 1e ab 46 88 fe df 0f 4a 5b 5a d6 ca df |.....F....J[Z...| bc c1 1d bd 05 3d a4 a8 7f e0 bc a3 d9 2d 34 91 |.....=.......-4.| b9 d4 98 7c 75 6a 28 9c dd ce 46 63 5a 46 bd b0 |...|uj(...FcZF..| 11 d1 4c 17 f8 39 dc b5 eb f5 45 2c ea 83 d9 31 |..L..9....E,...1| 07 b5 e0 a8 70 49 3a 68 4e 8f eb 24 15 c2 05 07 |....pI:hN..$....| 32 44 b1 aa ae 2a 54 f4 bc 07 7f ef 7c 97 ef 3e |2D...*T.....|..>| 2f 11 bb 38 86 85 94 77 c9 80 33 36 86 a5 00 a0 |/..8...w..36....| f3 4d 3f 27 da 8f c7 b7 85 e6 98 d5 34 df 68 08 |.M?'........4.h.|

show previews

offset	size	type	comment
0	244224	DLL	10/31/1997 22:12:00	#
15c1	15	HTM		#
3ba00	5480	PKCS7	Authenticode Signature	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

SWI32.DLL- Summus Wavelet Image Compressor DLL

MZ Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 040904e4

VS_FIXEDFILEINFO

Signers (1)

Certificates (4)

SWI32.DLL
- Summus Wavelet Image Compressor DLL