PK25.exe - PocketBuilder Development Environment

info
MZ
PE
resources
strings
imports
foremost
version info
signature
hexdump
disasm
log
discuss
donate

filename	PK25.exe
size	54656 (0xd580)
md5	89277da6663d2c8dacb21395be9fa655

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xf0

Rich Header

lib id	version	times used
12	7291	1
93	2179	4
11	8047	1
14	7299	12
10	8047	27
1	0	50
4	8447	5
10	8966	1
6	1735	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	4
TimeDateStamp	0x47421328
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x10f
Magic	0x10b
LinkerVersion	6.0
SizeOfCode	0x4000
SizeOfInitializedData	0x7000
SizeOfUninitializedData	0
AddressOfEntryPoint	0x119e
BaseOfCode	0x1000
BaseOfData	0x5000
ImageBase	0x10000000
SectionAlignment	0x1000
FileAlignment	0x1000
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0xc000
SizeOfHeaders	0x1000
CheckSum	0x1532a
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

Armadillo v4.x

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x3776	0x4000	R-X CODE
.rdata	0x5000	0x8a6	0x1000	R-- IDATA
.data	0x6000	0x2b3c	0x3000	RW- IDATA
.rsrc	0x9000	0x2520	0x3000	R-- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x546c	0x64
RESOURCE	0x9000	0x2520
EXCEPTION	0	0
SECURITY	0xc000	0x1580
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x5000	0xd4
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size
ICON	#1	2216
ICON	#2	2216
ICON	#3	2216
STRING	#7	180
STRING	#13	98
GROUP_ICON	#1	20
GROUP_ICON	#2	20
GROUP_ICON	#1028	20
VERSION	#1	936
MANIFEST	#1	933

id	lang	string
100	1033	PowerUser
101	1033	Powersoft Corporation
102	1033	0000000112
200	1033	PowerBuilder
201	1033	%s is already running

module_name	hint	ord	function_name
PKSYS25.dll		354
PKSYS25.dll		352
PKSYS25.dll		513
PKSYS25.dll		350
PKSYS25.dll		815
KERNEL32.dll	888		VirtualFree
KERNEL32.dll	336		GetEnvironmentVariableA
KERNEL32.dll	479		GetVersionExA
KERNEL32.dll	434		GetStringTypeA
KERNEL32.dll	571		LCMapStringW
KERNEL32.dll	375		GetModuleHandleA
KERNEL32.dll	431		GetStartupInfoA
KERNEL32.dll	264		GetCommandLineA
KERNEL32.dll	478		GetVersion
KERNEL32.dll	175		ExitProcess
KERNEL32.dll	849		TerminateProcess
KERNEL32.dll	314		GetCurrentProcess
KERNEL32.dll	866		UnhandledExceptionFilter
KERNEL32.dll	373		GetModuleFileNameA
KERNEL32.dll	237		FreeEnvironmentStringsA
KERNEL32.dll	238		FreeEnvironmentStringsW
KERNEL32.dll	905		WideCharToMultiByte
KERNEL32.dll	333		GetEnvironmentStrings
KERNEL32.dll	335		GetEnvironmentStringsW
KERNEL32.dll	793		SetHandleCount
KERNEL32.dll	433		GetStdHandle
KERNEL32.dll	350		GetFileType
KERNEL32.dll	245		GetACP
KERNEL32.dll	437		GetStringTypeW
KERNEL32.dll	522		HeapDestroy
KERNEL32.dll	520		HeapCreate
KERNEL32.dll	518		HeapAlloc
KERNEL32.dll	524		HeapFree
KERNEL32.dll	716		RtlUnwind
KERNEL32.dll	919		WriteFile
KERNEL32.dll	252		GetCPInfo
KERNEL32.dll	395		GetOEMCP
KERNEL32.dll	885		VirtualAlloc
KERNEL32.dll	528		HeapReAlloc
KERNEL32.dll	619		MultiByteToWideChar
KERNEL32.dll	408		GetProcAddress
KERNEL32.dll	584		LoadLibraryA
KERNEL32.dll	570		LCMapStringA
USER32.dll	477		MessageBeep
USER32.dll	485		MessageBoxW
USER32.dll	459		LoadStringW
USER32.dll	726		wsprintfW
PKTL25.dll		101
PKTL25.dll		100

StringTable 040904E4

Comments	PocketBuilder Mobile Application Development Tool.
CompanyName	Sybase Inc.
FileDescription	PocketBuilder Development Environment
FileVersion	2.5.0.1123
InternalName	PK 2.5
LegalCopyright	Copyright © Sybase Inc. 2003-2007
ProductName	PocketBuilder Mobile Application Development Environment
ProductVersion	2.5.0.1123

VS_FIXEDFILEINFO

FileVersion	2.5.0.1123
ProductVersion	2.5.0.0
StrucVersion	0x10000
FileFlagsMask	3
FileFlags	2
FileOS	0x10001
FileType	1
FileSubtype	0x65

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa (c)04/CN=VeriSign Class 3 Code Signing 2004 CA

serial: 61CF225A2C96483169631376DC152A4C

Certificates (4)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA
        Validity
            Not Before: Jun 15 00:00:00 2007 GMT
            Not After : Jun 14 23:59:59 2012 GMT
        Subject: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (1024 bit)
                Modulus:
                    00:c4:b5:f2:52:15:bc:88:86:60:29:16:4a:5b:2f:
                    4b:91:6b:87:91:f3:35:54:58:35:ea:d1:36:5e:62:
                    4d:52:51:34:71:c2:7b:66:1d:89:c8:dd:2a:c4:6a:
                    0a:f6:37:d9:98:74:91:f6:92:ae:b0:b5:76:96:f1:
                    a9:4a:63:45:47:2e:6b:0b:92:4e:4b:2b:8c:ee:58:
                    4a:8b:d4:07:e4:1a:2c:f8:82:aa:58:d9:cd:42:f3:
                    2d:c0:75:de:8d:ab:c7:8e:1d:9a:6c:4c:08:95:1e:
                    de:db:ef:67:e1:72:c2:49:c2:9e:60:3c:e1:e2:be:
                    16:a3:63:78:69:14:7b:ad:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com

            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.verisign.com/tss-ca.crl

            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation
            X509v3 Subject Alternative Name: 
                DirName:/CN=TSA1-2
    Signature Algorithm: sha1WithRSAEncryption
         50:c5:4b:c8:24:80:df:e4:0d:24:c2:de:1a:b1:a1:02:a1:a6:
         82:2d:0c:83:15:81:37:0a:82:0e:2c:b0:5a:17:61:b5:d8:05:
         fe:88:db:f1:91:91:b3:56:1a:40:a6:eb:92:be:38:39:b0:75:
         36:74:3a:98:4f:e4:37:ba:99:89:ca:95:42:1d:b0:b9:c7:a0:
         8d:57:e0:fa:d5:64:04:42:35:4e:01:d1:33:a2:17:c8:4d:aa:
         27:c7:f2:e1:86:4c:02:38:4d:83:78:c6:fc:53:e0:eb:e0:06:
         87:dd:a4:96:9e:5e:0c:98:e2:a5:be:bf:82:85:c3:60:e1:df:
         ad:28:d8:c7:a5:4b:64:da:c7:1b:5b:bd:ac:39:08:d5:38:22:
         a1:33:8b:2f:8a:9a:eb:bc:07:21:3f:44:41:09:07:b5:65:1c:
         24:bc:48:d3:44:80:eb:a1:cf:c9:02:b4:14:cf:54:c7:16:a3:
         80:5c:f9:79:3e:5d:72:7d:88:17:9e:2c:43:a2:ca:53:ce:7d:
         3d:f6:2a:3a:b8:4f:94:00:a5:6d:0a:83:5d:f9:5e:53:f4:18:
         b3:57:0f:70:c3:fb:f5:ad:95:a0:0e:17:de:c4:16:80:60:c9:
         0f:2b:6e:86:04:f1:eb:f4:78:27:d1:05:c5:ee:34:5b:5e:b9:
         49:32:f2:33

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
        Validity
            Not Before: Dec  4 00:00:00 2003 GMT
            Not After : Dec  3 23:59:59 2013 GMT
        Subject: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ca:b2:a4:cc:cd:20:af:0a:7d:89:ac:87:75:
                    f0:b4:4e:f1:df:c1:0f:bf:67:61:bd:a3:64:1c:da:
                    bb:f9:ca:33:ab:84:30:89:58:7e:8c:db:6b:dd:36:
                    9e:0f:bf:d1:ec:78:f2:77:a6:7e:6f:3c:bf:93:af:
                    0d:ba:68:f4:6c:94:ca:bd:52:2d:ab:48:3d:f5:b6:
                    d5:5d:5f:1b:02:9f:fa:2f:6b:1e:a4:f7:a3:9a:a6:
                    1a:c8:02:e1:7f:4c:52:e3:0e:60:ec:40:1c:7e:b9:
                    0d:de:3f:c7:b4:df:87:bd:5f:7a:6a:31:2e:03:99:
                    81:13:a8:47:20:ce:31:73:0d:57:2d:cd:78:34:33:
                    95:12:99:12:b9:de:68:2f:aa:e6:e3:c2:8a:8c:2a:
                    c3:8b:21:87:66:bd:83:58:57:6f:75:bf:3c:aa:26:
                    87:5d:ca:10:15:3c:9f:84:ea:54:c1:0a:6e:c4:fe:
                    c5:4a:dd:b9:07:11:97:22:7c:db:3e:27:d1:1e:78:
                    ec:9f:31:c9:f1:e6:22:19:db:c4:b3:47:43:9a:1a:
                    5f:a0:1e:90:e4:5e:f5:ee:7c:f1:7d:ab:62:01:8f:
                    f5:4d:0b:de:d0:22:56:a8:95:cd:ae:88:76:ae:ee:
                    ba:0d:f3:e4:4d:d9:a0:fb:68:a0:ae:14:3b:b3:87:
                    c1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com

            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.verisign.com/ThawteTimestampingCA.crl

            X509v3 Extended Key Usage: 
                Time Stamping
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=TSA2048-1-53
    Signature Algorithm: sha1WithRSAEncryption
         4a:6b:f9:ea:58:c2:44:1c:31:89:79:99:2b:96:bf:82:ac:01:
         d6:1c:4c:cd:b0:8a:58:6e:df:08:29:a3:5e:c8:ca:93:13:e7:
         04:52:0d:ef:47:27:2f:00:38:b0:e4:c9:93:4e:9a:d4:22:62:
         15:f7:3f:37:21:4f:70:31:80:f1:8b:38:87:b3:e8:e8:97:00:
         fe:cf:55:96:4e:24:d2:a9:27:4e:7a:ae:b7:61:41:f3:2a:ce:
         e7:c9:d9:5e:dd:bb:2b:85:3e:b5:9d:b5:d9:e1:57:ff:be:b4:
         c5:7e:f5:cf:0c:9e:f0:97:fe:2b:d3:3b:52:1b:1b:38:27:f7:
         3f:4a

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:64:6e:2b:55:00:23:d4:90:53:4a:55:3e:ab:0d:0a
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority
        Validity
            Not Before: Jul 16 00:00:00 2004 GMT
            Not After : Jul 15 23:59:59 2009 GMT
        Subject: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)04, CN=VeriSign Class 3 Code Signing 2004 CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bc:ee:bc:7e:ef:83:eb:e0:37:4f:fb:03:10:
                    38:be:08:d2:8c:7d:9d:fa:92:7f:19:0c:c2:6b:ee:
                    42:52:8c:de:d3:1c:48:13:25:ea:c1:63:7a:f9:51:
                    65:ee:d3:aa:3b:f5:f0:94:9c:2b:fb:f2:66:d4:24:
                    da:f7:f5:9f:6e:19:39:36:bc:d0:a3:76:08:1e:22:
                    27:24:6c:38:91:27:e2:84:49:ae:1b:8a:a1:fd:25:
                    82:2c:10:30:e8:71:ab:28:e8:77:4a:51:f1:ec:cd:
                    f8:f0:54:d4:6f:c0:e3:6d:0a:8f:d9:d8:64:8d:63:
                    b2:2d:4e:27:f6:85:0e:fe:6d:e3:29:99:e2:85:47:
                    7c:2d:86:7f:e8:57:8f:ad:67:c2:33:32:91:13:20:
                    fc:a9:23:14:9a:6d:c2:84:4b:76:68:04:d5:71:2c:
                    5d:21:fa:88:0d:26:fd:1f:2d:91:2b:e7:01:55:4d:
                    f2:6d:35:28:82:df:d9:6b:5c:b6:d6:d9:aa:81:fd:
                    5f:cd:83:ba:63:9d:d0:22:fc:a9:3b:42:69:b2:8e:
                    3a:b5:bc:b4:9e:0f:5e:c4:ea:2c:82:8b:28:fd:53:
                    08:96:dd:b5:01:20:d1:f9:a5:18:e7:c0:ee:51:70:
                    37:e1:b6:05:48:52:48:6f:38:ea:c3:e8:6c:7b:44:
                    84:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/rpa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.verisign.com/pca3.crl

            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, Code Signing
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Netscape Cert Type: 
                Object Signing CA
            X509v3 Subject Alternative Name: 
                DirName:/CN=Class3CA2048-1-43
            X509v3 Subject Key Identifier: 
                08:F5:51:E8:FB:FE:3D:3D:64:36:7C:68:CF:5B:78:A8:DF:B9:C5:37
            X509v3 Authority Key Identifier: 
                DirName:/C=US/O=VeriSign, Inc./OU=Class 3 Public Primary Certification Authority
                serial:70:BA:E4:1D:10:D9:29:34:B6:38:CA:7B:03:CC:BA:BF

    Signature Algorithm: sha1WithRSAEncryption
         9a:65:f5:d8:d7:e1:a4:d0:5d:de:d8:7d:7b:c3:ee:c4:08:c2:
         56:d0:8c:dc:ed:ac:22:8d:e7:50:06:0d:07:2c:a0:a4:69:95:
         cc:99:df:cc:63:31:cf:b0:c1:e4:96:cb:38:ce:21:fb:7c:e7:
         58:0a:23:21:07:2c:90:97:ab:d8:96:04:93:54:53:ba:3a:10:
         48:72:0d:85:ec:1b:0a:41:25:cc:7d:6c:ac:7b:03:f1:f7:78:
         3c:f2:a8:40:d0:55:72:db:be:0b:28:b5:c8:c7:05:fe:d3:e0:
         b5:21:dc:bc:40:b7:be:bc:60:f5:b8:e3:d8:5e:3b:65:dd:66:
         56:5f

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:cf:22:5a:2c:96:48:31:69:63:13:76:dc:15:2a:4c
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)04, CN=VeriSign Class 3 Code Signing 2004 CA
        Validity
            Not Before: Jun 23 00:00:00 2006 GMT
            Not After : Jun 22 23:59:59 2009 GMT
        Subject: C=US, ST=MA, L=Concord, O=Sybase, Inc., OU=Digital ID Class 3 - Microsoft Software Validation v2, OU=ESD Engineering, CN=Sybase, Inc.
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (1024 bit)
                Modulus:
                    00:c3:54:bf:94:b6:a5:8f:eb:d8:54:11:59:12:84:
                    1d:56:3e:2e:72:1b:b7:b7:f2:7f:2f:0c:59:96:46:
                    92:6c:ff:10:3a:2c:26:0d:f8:db:62:c8:d2:1d:5e:
                    cd:09:82:d7:24:9a:d1:38:50:ae:9b:75:23:7b:7d:
                    4f:49:df:21:ca:d6:b2:18:4f:2e:f4:69:dc:36:d0:
                    eb:08:e6:3d:ac:76:1c:7b:18:7c:2d:3e:bf:9a:fb:
                    51:6b:9a:b8:29:b5:66:3d:2d:b4:65:24:26:6d:bc:
                    f4:b4:f4:91:6a:22:00:c0:21:bb:7c:b6:c9:e8:bc:
                    48:2c:64:7e:a0:e5:7e:80:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://CSC3-2004-crl.verisign.com/CSC3-2004.crl

            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/rpa

            X509v3 Extended Key Usage: 
                Code Signing
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com
                CA Issuers - URI:http://CSC3-2004-aia.verisign.com/CSC3-2004-aia.cer

            X509v3 Authority Key Identifier: 
                keyid:08:F5:51:E8:FB:FE:3D:3D:64:36:7C:68:CF:5B:78:A8:DF:B9:C5:37

            Netscape Cert Type: 
                Object Signing
            1.3.6.1.4.1.311.2.1.27: 
                0.......
    Signature Algorithm: sha1WithRSAEncryption
         35:2e:a4:77:5a:87:51:a7:55:3d:4f:5b:eb:8f:83:b4:dd:05:
         4e:ce:1d:5c:7d:4c:9b:52:66:b0:39:1b:06:1d:84:2d:c8:5e:
         02:c2:3b:97:ef:35:15:80:94:46:54:0c:70:ca:03:5e:8c:95:
         80:9e:86:8b:7d:90:70:2f:1b:72:cc:25:46:c3:93:c4:e7:47:
         3a:1c:ab:c6:e9:79:50:eb:3c:02:8f:ce:50:c4:1b:ca:03:38:
         00:78:c4:52:02:9f:dc:ff:64:7c:1d:8b:ef:3e:01:16:6e:d9:
         e2:24:26:d5:11:06:06:29:cb:66:b0:bb:7c:4b:51:c6:4a:c6:
         e9:3a:5c:cb:04:a1:fa:5f:a0:c4:89:71:e1:b9:93:0f:f5:e4:
         7f:e6:d0:95:7f:58:f9:24:44:cf:88:48:8b:0c:08:7b:0e:93:
         04:ec:15:bc:19:80:65:60:3f:60:30:d0:02:29:c0:b0:0b:5a:
         80:7d:53:3e:98:f4:61:bb:28:b5:3a:6d:be:d9:dd:f4:1e:23:
         4b:6c:e2:ee:62:25:0c:ff:1e:3e:63:7c:7f:d9:c3:68:2c:4f:
         13:62:0d:da:9e:15:a7:65:ac:59:7b:c3:29:94:d1:cf:27:2b:
         d3:8f:52:1d:2c:69:4d:60:45:9a:50:3f:52:5a:eb:95:99:59:
         59:20:67:64

pkcs7-signedData

1
- MD5: nil
- 1.3.6.1.4.1.311.2.1.4
  - #0
    - 1.3.6.1.4.1.311.2.1.15
      - :
        00 3c 00 3c 00 3c 00 4f 00 62 00 73 00 6f 00 6c |.<.<.<.O.b.s.o.l| 00 65 00 74 00 65 00 3e 00 3e 00 3e |.e.t.e.>.>.> |
    - MD5
      - 9e 17 64 1c 33 33 9f 91 69 40 a8 7a 90 06 c3 ef |..d.33..i@.z....|
- Certificates
  - Certificate #0
    - 2
      - 38:25:D7:FA:F8:61:AF:9E:F4:90:E7:26:B5:D6:5A:D5
      - RSA-SHA1: nil
      - Issuer
        C: US
        O: VeriSign, Inc.
        CN: VeriSign Time Stamping Services CA
      - 2007-06-15 00:00:00 UTC: 2012-06-14 23:59:59 UTC
      - Subject
        C: US
        O: VeriSign, Inc.
        CN: VeriSign Time Stamping Services Signer - G2
      - #5
        rsaEncryption: nil
        C4:B5:F2:52:15:BC:88:86:60:29:16:4A:5B:2F:4B:91:
        6B:87:91:F3:35:54:58:35:EA:D1:36:5E:62:4D:52:51:
        34:71:C2:7B:66:1D:89:C8:DD:2A:C4:6A:0A:F6:37:D9:
        98:74:91:F6:92:AE:B0:B5:76:96:F1:A9:4A:63:45:47:
        2E:6B:0B:92:4E:4B:2B:8C:EE:58:4A:8B:D4:07:E4:1A:
        2C:F8:82:AA:58:D9:CD:42:F3:2D:C0:75:DE:8D:AB:C7:
        8E:1D:9A:6C:4C:08:95:1E:DE:DB:EF:67:E1:72:C2:49:
        C2:9E:60:3C:E1:E2:BE:16:A3:63:78:69:14:7B:AD:2D: 0x010001
      - X509v3 extensions
        authorityInfoAccess
        OCSP: http://ocsp.verisign.com
        basicConstraints
        true
        nil
        crlDistributionPoints: http://crl.verisign.com/tss-ca.crl
        extendedKeyUsage: true, timeStamping
        keyUsage: true, 0xc0
        subjectAltName
        CN: TSA1-2
    - RSA-SHA1:
```
50 c5 4b c8 24 80 df e4  0d 24 c2 de 1a b1 a1 02  |P.K.$....$......|
a1 a6 82 2d 0c 83 15 81  37 0a 82 0e 2c b0 5a 17  |...-....7...,.Z.|
61 b5 d8 05 fe 88 db f1  91 91 b3 56 1a 40 a6 eb  |a..........V.@..|
92 be 38 39 b0 75 36 74  3a 98 4f e4 37 ba 99 89  |..89.u6t:.O.7...|
ca 95 42 1d b0 b9 c7 a0  8d 57 e0 fa d5 64 04 42  |..B......W...d.B|
35 4e 01 d1 33 a2 17 c8  4d aa 27 c7 f2 e1 86 4c  |5N..3...M.'....L|
02 38 4d 83 78 c6 fc 53  e0 eb e0 06 87 dd a4 96  |.8M.x..S........|
9e 5e 0c 98 e2 a5 be bf  82 85 c3 60 e1 df ad 28  |.^.........`...(|
d8 c7 a5 4b 64 da c7 1b  5b bd ac 39 08 d5 38 22  |...Kd...[..9..8"|
a1 33 8b 2f 8a 9a eb bc  07 21 3f 44 41 09 07 b5  |.3./.....!?DA...|
65 1c 24 bc 48 d3 44 80  eb a1 cf c9 02 b4 14 cf  |e.$.H.D.........|
54 c7 16 a3 80 5c f9 79  3e 5d 72 7d 88 17 9e 2c  |T....\.y>]r}...,|
43 a2 ca 53 ce 7d 3d f6  2a 3a b8 4f 94 00 a5 6d  |C..S.}=.*:.O...m|
0a 83 5d f9 5e 53 f4 18  b3 57 0f 70 c3 fb f5 ad  |..].^S...W.p....|
95 a0 0e 17 de c4 16 80  60 c9 0f 2b 6e 86 04 f1  |........`..+n...|
eb f4 78 27 d1 05 c5 ee  34 5b 5e b9 49 32 f2 33  |..x'....4[^.I2.3|
```
  - Certificate #1
    - 2
      - 47:BF:19:95:DF:8D:52:46:43:F7:DB:6D:48:0D:31:A4
      - RSA-SHA1: nil
      - Issuer
        C: ZA
        ST: Western Cape
        L: Durbanville
        O: Thawte
        OU: Thawte Certification
        CN: Thawte Timestamping CA
      - 2003-12-04 00:00:00 UTC: 2013-12-03 23:59:59 UTC
      - Subject
        C: US
        O: VeriSign, Inc.
        CN: VeriSign Time Stamping Services CA
      - #5
        rsaEncryption: nil
        A9:CA:B2:A4:CC:CD:20:AF:0A:7D:89:AC:87:75:F0:B4:
        4E:F1:DF:C1:0F:BF:67:61:BD:A3:64:1C:DA:BB:F9:CA:
        33:AB:84:30:89:58:7E:8C:DB:6B:DD:36:9E:0F:BF:D1:
        EC:78:F2:77:A6:7E:6F:3C:BF:93:AF:0D:BA:68:F4:6C:
        94:CA:BD:52:2D:AB:48:3D:F5:B6:D5:5D:5F:1B:02:9F:
        FA:2F:6B:1E:A4:F7:A3:9A:A6:1A:C8:02:E1:7F:4C:52:
        E3:0E:60:EC:40:1C:7E:B9:0D:DE:3F:C7:B4:DF:87:BD:
        5F:7A:6A:31:2E:03:99:81:13:A8:47:20:CE:31:73:0D:
        57:2D:CD:78:34:33:95:12:99:12:B9:DE:68:2F:AA:E6:
        E3:C2:8A:8C:2A:C3:8B:21:87:66:BD:83:58:57:6F:75:
        BF:3C:AA:26:87:5D:CA:10:15:3C:9F:84:EA:54:C1:0A:
        6E:C4:FE:C5:4A:DD:B9:07:11:97:22:7C:DB:3E:27:D1:
        1E:78:EC:9F:31:C9:F1:E6:22:19:DB:C4:B3:47:43:9A:
        1A:5F:A0:1E:90:E4:5E:F5:EE:7C:F1:7D:AB:62:01:8F:
        F5:4D:0B:DE:D0:22:56:A8:95:CD:AE:88:76:AE:EE:BA:
        0D:F3:E4:4D:D9:A0:FB:68:A0:AE:14:3B:B3:87:C1:BB: 0x010001
      - X509v3 extensions
        authorityInfoAccess
        OCSP: http://ocsp.verisign.com
        basicConstraints
        true
        true: 0
        crlDistributionPoints: http://crl.verisign.com/ThawteTimestampingCA.crl
        extendedKeyUsage: timeStamping
        keyUsage: true, 6
        subjectAltName
        CN: TSA2048-1-53
    - RSA-SHA1:
```
4a 6b f9 ea 58 c2 44 1c  31 89 79 99 2b 96 bf 82  |Jk..X.D.1.y.+...|
ac 01 d6 1c 4c cd b0 8a  58 6e df 08 29 a3 5e c8  |....L...Xn..).^.|
ca 93 13 e7 04 52 0d ef  47 27 2f 00 38 b0 e4 c9  |.....R..G'/.8...|
93 4e 9a d4 22 62 15 f7  3f 37 21 4f 70 31 80 f1  |.N.."b..?7!Op1..|
8b 38 87 b3 e8 e8 97 00  fe cf 55 96 4e 24 d2 a9  |.8........U.N$..|
27 4e 7a ae b7 61 41 f3  2a ce e7 c9 d9 5e dd bb  |'Nz..aA.*....^..|
2b 85 3e b5 9d b5 d9 e1  57 ff be b4 c5 7e f5 cf  |+.>.....W....~..|
0c 9e f0 97 fe 2b d3 3b  52 1b 1b 38 27 f7 3f 4a  |.....+.;R..8'.?J|
```
  - Certificate #2
    - 2
      - 57:64:6E:2B:55:00:23:D4:90:53:4A:55:3E:AB:0D:0A
      - RSA-SHA1: nil
      - Issuer
        C: US
        O: VeriSign, Inc.
        OU: Class 3 Public Primary Certification Authority
      - 2004-07-16 00:00:00 UTC: 2009-07-15 23:59:59 UTC
      - Subject
        C: US
        O: VeriSign, Inc.
        OU: VeriSign Trust Network
        OU: Terms of use at https://www.verisign.com/rpa (c)04
        CN: VeriSign Class 3 Code Signing 2004 CA
      - #5
        rsaEncryption: nil
        BE:BC:EE:BC:7E:EF:83:EB:E0:37:4F:FB:03:10:38:BE:
        08:D2:8C:7D:9D:FA:92:7F:19:0C:C2:6B:EE:42:52:8C:
        DE:D3:1C:48:13:25:EA:C1:63:7A:F9:51:65:EE:D3:AA:
        3B:F5:F0:94:9C:2B:FB:F2:66:D4:24:DA:F7:F5:9F:6E:
        19:39:36:BC:D0:A3:76:08:1E:22:27:24:6C:38:91:27:
        E2:84:49:AE:1B:8A:A1:FD:25:82:2C:10:30:E8:71:AB:
        28:E8:77:4A:51:F1:EC:CD:F8:F0:54:D4:6F:C0:E3:6D:
        0A:8F:D9:D8:64:8D:63:B2:2D:4E:27:F6:85:0E:FE:6D:
        E3:29:99:E2:85:47:7C:2D:86:7F:E8:57:8F:AD:67:C2:
        33:32:91:13:20:FC:A9:23:14:9A:6D:C2:84:4B:76:68:
        04:D5:71:2C:5D:21:FA:88:0D:26:FD:1F:2D:91:2B:E7:
        01:55:4D:F2:6D:35:28:82:DF:D9:6B:5C:B6:D6:D9:AA:
        81:FD:5F:CD:83:BA:63:9D:D0:22:FC:A9:3B:42:69:B2:
        8E:3A:B5:BC:B4:9E:0F:5E:C4:EA:2C:82:8B:28:FD:53:
        08:96:DD:B5:01:20:D1:F9:A5:18:E7:C0:EE:51:70:37:
        E1:B6:05:48:52:48:6F:38:EA:C3:E8:6C:7B:44:84:BB: 0x010001
      - X509v3 extensions
        basicConstraints
        true
        true: 0
        certificatePolicies
        2.16.840.1.113733.1.7.23.3
        id-qt-cps: https://www.verisign.com/rpa
        crlDistributionPoints: http://crl.verisign.com/pca3.crl
        extendedKeyUsage
        clientAuth: codeSigning
        keyUsage: true, 6
        nsCertType: 1
        subjectAltName
        CN: Class3CA2048-1-43
        subjectKeyIdentifier:
        08 f5 51 e8 fb fe 3d 3d 64 36 7c 68 cf 5b 78 a8 |..Q...==d6|h.[x.| df b9 c5 37 |...7 |
        authorityKeyIdentifier
        unnamed
        #0
        C: US
        O: VeriSign, Inc.
        OU: Class 3 Public Primary Certification Authority
        70 ba e4 1d 10 d9 29 34 b6 38 ca 7b 03 cc ba bf |p.....)4.8.{....|
    - RSA-SHA1:
```
9a 65 f5 d8 d7 e1 a4 d0  5d de d8 7d 7b c3 ee c4  |.e......]..}{...|
08 c2 56 d0 8c dc ed ac  22 8d e7 50 06 0d 07 2c  |..V....."..P...,|
a0 a4 69 95 cc 99 df cc  63 31 cf b0 c1 e4 96 cb  |..i.....c1......|
38 ce 21 fb 7c e7 58 0a  23 21 07 2c 90 97 ab d8  |8.!.|.X.#!.,....|
96 04 93 54 53 ba 3a 10  48 72 0d 85 ec 1b 0a 41  |...TS.:.Hr.....A|
25 cc 7d 6c ac 7b 03 f1  f7 78 3c f2 a8 40 d0 55  |%.}l.{...x<..@.U|
72 db be 0b 28 b5 c8 c7  05 fe d3 e0 b5 21 dc bc  |r...(........!..|
40 b7 be bc 60 f5 b8 e3  d8 5e 3b 65 dd 66 56 5f  |@...`....^;e.fV_|
```
  - Certificate #3
    - 2
      - 61:CF:22:5A:2C:96:48:31:69:63:13:76:DC:15:2A:4C
      - RSA-SHA1: nil
      - Issuer
        C: US
        O: VeriSign, Inc.
        OU: VeriSign Trust Network
        OU: Terms of use at https://www.verisign.com/rpa (c)04
        CN: VeriSign Class 3 Code Signing 2004 CA
      - 2006-06-23 00:00:00 UTC: 2009-06-22 23:59:59 UTC
      - Subject
        C: US
        ST: MA
        L: Concord
        O: Sybase, Inc.
        OU: Digital ID Class 3 - Microsoft Software Validation v2
        OU: ESD Engineering
        CN: Sybase, Inc.
      - #5
        rsaEncryption: nil
        C3:54:BF:94:B6:A5:8F:EB:D8:54:11:59:12:84:1D:56:
        3E:2E:72:1B:B7:B7:F2:7F:2F:0C:59:96:46:92:6C:FF:
        10:3A:2C:26:0D:F8:DB:62:C8:D2:1D:5E:CD:09:82:D7:
        24:9A:D1:38:50:AE:9B:75:23:7B:7D:4F:49:DF:21:CA:
        D6:B2:18:4F:2E:F4:69:DC:36:D0:EB:08:E6:3D:AC:76:
        1C:7B:18:7C:2D:3E:BF:9A:FB:51:6B:9A:B8:29:B5:66:
        3D:2D:B4:65:24:26:6D:BC:F4:B4:F4:91:6A:22:00:C0:
        21:BB:7C:B6:C9:E8:BC:48:2C:64:7E:A0:E5:7E:80:8B: 0x010001
      - X509v3 extensions
        basicConstraints
        nil
        keyUsage: true, 0x80
        crlDistributionPoints: http://CSC3-2004-crl.verisign.com/CSC3-2004.crl
        certificatePolicies
        2.16.840.1.113733.1.7.23.3
        id-qt-cps: https://www.verisign.com/rpa
        extendedKeyUsage: codeSigning
        authorityInfoAccess
        #0
        OCSP: http://ocsp.verisign.com
        caIssuers: http://CSC3-2004-aia.verisign.com/CSC3-2004-aia.cer
        authorityKeyIdentifier:
        08 f5 51 e8 fb fe 3d 3d 64 36 7c 68 cf 5b 78 a8 |..Q...==d6|h.[x.| df b9 c5 37 |...7 |
        nsCertType: 0x10
        1.3.6.1.4.1.311.2.1.27
        false: true
    - RSA-SHA1:
```
35 2e a4 77 5a 87 51 a7  55 3d 4f 5b eb 8f 83 b4  |5..wZ.Q.U=O[....|
dd 05 4e ce 1d 5c 7d 4c  9b 52 66 b0 39 1b 06 1d  |..N..\}L.Rf.9...|
84 2d c8 5e 02 c2 3b 97  ef 35 15 80 94 46 54 0c  |.-.^..;..5...FT.|
70 ca 03 5e 8c 95 80 9e  86 8b 7d 90 70 2f 1b 72  |p..^......}.p/.r|
cc 25 46 c3 93 c4 e7 47  3a 1c ab c6 e9 79 50 eb  |.%F....G:....yP.|
3c 02 8f ce 50 c4 1b ca  03 38 00 78 c4 52 02 9f  |<...P....8.x.R..|
dc ff 64 7c 1d 8b ef 3e  01 16 6e d9 e2 24 26 d5  |..d|...>..n..$&.|
11 06 06 29 cb 66 b0 bb  7c 4b 51 c6 4a c6 e9 3a  |...).f..|KQ.J..:|
5c cb 04 a1 fa 5f a0 c4  89 71 e1 b9 93 0f f5 e4  |\...._...q......|
7f e6 d0 95 7f 58 f9 24  44 cf 88 48 8b 0c 08 7b  |.....X.$D..H...{|
0e 93 04 ec 15 bc 19 80  65 60 3f 60 30 d0 02 29  |........e`?`0..)|
c0 b0 0b 5a 80 7d 53 3e  98 f4 61 bb 28 b5 3a 6d  |...Z.}S>..a.(.:m|
be d9 dd f4 1e 23 4b 6c  e2 ee 62 25 0c ff 1e 3e  |.....#Kl..b%...>|
63 7c 7f d9 c3 68 2c 4f  13 62 0d da 9e 15 a7 65  |c|...h,O.b.....e|
ac 59 7b c3 29 94 d1 cf  27 2b d3 8f 52 1d 2c 69  |.Y{.)...'+..R.,i|
4d 60 45 9a 50 3f 52 5a  eb 95 99 59 59 20 67 64  |M`E.P?RZ...YY gd|
```
- Signer
  - 1
  - unnamed
    - #0
      - C: US
      - O: VeriSign, Inc.
      - OU: VeriSign Trust Network
      - OU: Terms of use at https://www.verisign.com/rpa (c)04
      - CN: VeriSign Class 3 Code Signing 2004 CA
    - 61:CF:22:5A:2C:96:48:31:69:63:13:76:DC:15:2A:4C
  - MD5: nil
  - #3
    - contentType: 1.3.6.1.4.1.311.2.1.4
    - 1.3.6.1.4.1.311.2.1.11: msCodeInd
    - messageDigest:
```
25 4b 9b fc 50 c0 00 29  14 9a 90 60 8c 79 2c fe  |%K..P..)...`.y,.|
```
    - 1.3.6.1.4.1.311.2.1.12
      - 00 53 00 69 00 67 00 6e 00 65 00 64 00 20 00 66 |.S.i.g.n.e.d. .f| 00 6f 00 72 00 20 00 50 00 6f 00 63 00 6b 00 65 |.o.r. .P.o.c.k.e| 00 74 00 42 00 75 00 69 00 6c 00 64 00 65 00 72 |.t.B.u.i.l.d.e.r| 00 20 00 44 00 65 00 76 00 65 00 6c 00 6f 00 70 |. .D.e.v.e.l.o.p| 00 6d 00 65 00 6e 00 74 |.m.e.n.t |
        : http://www.sybase.com/pocketbuilder
  - rsaEncryption:
```
0b 6c 41 1b dc 93 0e bf  b3 70 30 08 59 54 21 28  |.lA......p0.YT!(|
4e 1a 58 c7 36 13 bf aa  2b 16 3d 71 d8 fc c6 8c  |N.X.6...+.=q....|
74 e1 c9 dd 5c 62 71 81  b9 fc 9f 69 28 2e b7 99  |t...\bq....i(...|
c4 1c 2a 1b d5 fe e5 78  b9 5c c3 e0 26 38 8f 20  |..*....x.\..&8. |
66 1b 57 e8 75 45 c7 af  a7 36 c9 cc 0f c6 1e 3a  |f.W.uE...6.....:|
f7 df 38 5f 83 ff 45 a2  4c 7b d1 1c 07 26 f6 16  |..8_..E.L{...&..|
d4 c9 00 2c e6 81 b4 60  09 9c f5 21 d9 a9 07 35  |...,...`...!...5|
3e 88 75 68 cf 03 97 92  fd a9 cf 51 21 cb b5 73  |>.uh.......Q!..s|
```
  - countersignature
    - 1
      - unnamed
        #0
        C: US
        O: VeriSign, Inc.
        CN: VeriSign Time Stamping Services CA
        38:25:D7:FA:F8:61:AF:9E:F4:90:E7:26:B5:D6:5A:D5
      - MD5: nil
      - #2
        contentType: pkcs7-data
        signingTime: 2007-11-21 18:11:52 UTC
        messageDigest:
        a6 46 8b d1 ad 13 f8 23 2b 53 83 48 ea 6e 04 0e |.F.....#+S.H.n..|
      - rsaEncryption:
        b6 2d 8f 73 9b 40 3a c5 3e c9 0b 62 f5 fc 96 b8 |.-.s.@:.>..b....| 30 95 b1 0a 9f 80 c0 38 7a c5 4f aa ab 5c 73 ea |0......8z.O..\s.| c1 d5 5d 65 f4 6d 79 7c 44 02 b4 b2 c1 2c e9 c0 |..]e.my|D....,..| 02 d2 19 1a dd 98 99 27 06 a1 37 11 07 9b b2 2c |.......'..7....,| 01 3a 2a 5c 89 19 1b f1 61 2c 7a cc 02 7d 9f 3f |.:*\....a,z..}.?| 50 54 de ac bf 47 23 fb 1d 06 da 5b 91 47 f4 01 |PT...G#....[.G..| b3 8b 62 6e 2f 16 ee fb 3f 58 11 57 5d dc 31 3e |..bn/...?X.W].1>| 68 a1 bd c0 80 4e 98 3c 18 9b 93 1a c3 55 9d 1c |h....N.<.....U..|

show previews

offset	size	type	comment
0	49152	EXE	11/19/2007 22:50:16	#
15c1	15	HTM		#
c000	5504	PKCS7	Authenticode Signature	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

PK25.exe- PocketBuilder Development Environment

MZ Header

Rich Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 040904E4

VS_FIXEDFILEINFO

Signers (1)

Certificates (4)

PK25.exe
- PocketBuilder Development Environment