filenamemain (NeoSpy stalkerware - Keylogger binary 4).exe
size2305656 (0x232e78)
md58a81b0f6b0379e32d8de8fb270fbf89c
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x50
blocks_in_file2
num_relocs0
header_paragraphs4
min_extra_paragraphs0xf
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0x1a
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x100

DOS stub

00000000: ba 10 00 0e 1f b4 09 cd  21 b8 01 4c cd 21 90 90  |........!..L.!..|
00000010: 54 68 69 73 20 70 72 6f  67 72 61 6d 20 6d 75 73  |This program mus|
00000020: 74 20 62 65 20 72 75 6e  20 75 6e 64 65 72 20 57  |t be run under W|
00000030: 69 6e 33 32 0d 0a 24 37  00 00 00 00 00 00 00 00  |in32..$7........|
00000040: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
000000c0:

PE Header

SignaturePE
Machine0x14c
NumberOfSections0xa
TimeDateStamp0x5e31ae6a
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x818e
Magic0x10b
LinkerVersion2.25
SizeOfCode0x1ae400
SizeOfInitializedData0x82e00
SizeOfUninitializedData0
AddressOfEntryPoint0x1af330
BaseOfCode0x1000
BaseOfData0x1b0000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.0
ImageVersion0.0
SubsystemVersion5.0
Reserved10
SizeOfImage0x2c0000
SizeOfHeaders0x400
CheckSum0x23b652
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x4000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v6.0 DLL

Sections

namevavsizeraw sizeflags
.text0x10000x1abac40x1abc00R-X CODE
.itext0x1ad0000x26400x2800R-X CODE
.data0x1b00000xe2900xe400RW- IDATA
.bss0x1bf0000x8713c0RW-
.idata0x2470000x3b6a0x3c00RW- IDATA
.didata0x24b0000x3260x400RW- IDATA
.tls0x24c0000x400RW-
.rdata0x24d0000x180x200R-- IDATA
.reloc0x24e0000x256000x25600R-- IDATA DISCARDABLE
.rsrc0x2740000x4b2000x4b200R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x2470000x3b6a
RESOURCE0x2740000x4b200
EXCEPTION00
SECURITY0x2316000x1878
BASERELOC0x24e0000x25600
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS0x24d0000x18
LOAD_CONFIG00
Bound_IAT00
IAT0x247afc0x91c
Delay_IAT0x24b0000x326
CLR_Header00

TLS

raw
start		raw
end		indexcallbkszero
fill		flags
0x64c0000x64c0400x5b0a000x64d01000
typenamesizecp
UNICODEDATACASE292470
UNICODEDATACATEGORIES324450
UNICODEDATACOMBINING17040
UNICODEDATACOMPOSITION449250
UNICODEDATADECOMPOSITION542230
UNICODEDATANUMBERS53170
CURSOR#13080
CURSOR#23080
CURSOR#33080
CURSOR#43080
CURSOR#53080
CURSOR#63080
CURSOR#73080
CURSOR#83080
CURSOR#93080
ICON#111280
ICON#242640
ICON#396400
ICON#4169360
STRING#40483960
STRING#40499320
STRING#405011600
STRING#405123200
STRING#405225960
STRING#40535920
STRING#405422000
STRING#405542040
STRING#405625520
STRING#405721960
STRING#405821720
STRING#405913320
STRING#406017680
STRING#406121480
STRING#406221480
STRING#406319960
STRING#406422600
STRING#406525920
STRING#406616640
STRING#40676040
STRING#40685760
STRING#40692880
STRING#40703040
STRING#40712240
STRING#407211120
STRING#40737440
STRING#407412840
STRING#40759680
STRING#407611640
STRING#40779520
STRING#40789560
STRING#40797720
STRING#40808040
STRING#40819280
STRING#40821560
STRING#40832440
STRING#40849560
STRING#408510480
STRING#40868440
STRING#408710840
STRING#40888960
STRING#40899600
STRING#40909200
STRING#40912040
STRING#40921760
STRING#40936640
STRING#409411320
STRING#40958440
STRING#40966920
RCDATACHARTABLE335120
RCDATADVCLAL160
RCDATAPACKAGEINFO40800
RCDATATNEOSMODULE8750
GROUP_CURSORJVDRAGCURSOR200
GROUP_CURSORJVHANDCURSOR200
GROUP_CURSOR#32761200
GROUP_CURSOR#32762200
GROUP_CURSOR#32763200
GROUP_CURSOR#32764200
GROUP_CURSOR#32765200
GROUP_CURSOR#32766200
GROUP_CURSOR#32767200
GROUP_ICONMAINICON620
VERSION#16760
MANIFEST#113100
idlangstring
647520Image is empty
647530Invalid reduction method
647540GIF Image
647550Loading...
647560Saving...
647570Converting...
647580Rendering...
647590Copying...
647600Optimizing...
647610Cannot change the size of a JPEG image
647620JPEG error #%d
647630JPEG Image File
647680Unknown GIF block type
647690Object type not supported for operation
647700Invalid GIF data
647710Image height too small for contained frames
647720Image width too small for contained frames
647730Failed to store GIF on clipboard
647740Image exceeds Logical Screen size
647750No global or local color table defined
647760Invalid pixel coordinates
647770Unsupported PixelFormat
647780Invalid image dimensions
647790Image has no DIB
647800Invalid stream operation
647810Color not in color table
647820Invalid Bits Per Pixel value
647830Color table is empty
647840Unable to retrieve a pointer to a running object registered with OLE for %s/%s
647850Premature end of data
647860Color table overflow
647870Invalid color index
647880Unsupported GIF version
647890Invalid GIF signature
647900Invalid number of colors specified in Screen Descriptor
647910Invalid number of colors specified in Image Descriptor
647920Unknown extension type
647930Invalid extension introducer
647940Failed to allocate memory for GIF DIB
647950Decoder bit buffer under-run
647960Circular decoder table entry
647970Invalid Image trailer
647980Internal error: Extension Instance does not match Extension Label
647990Unsupported Application Extension block size
648000The chunks must be compatible to be assigned.
648010This "Portable Network Graphics" image is invalid because the decoder found an unexpected end of the file.
648020This "Portable Network Graphics" image contains no data.
648030The program tried to add a existent critical chunk to the current image which is not allowed.
648040It's not allowed to add a new chunk because the current image is invalid.
648050The png image could not be loaded from the resource ID.
648060Some operation could not be performed because the system is out of resources. Close some windows and try again.
648070Setting bit transparency color is not allowed for png images containing alpha value for each pixel (COLOR_RGBALPHA and COLOR_GRAYSCALEALPHA)
648080This operation is not valid because the current image contains no valid header.
648090The new size provided for image resizing is invalid.
648100The "Portable Network Graphics" could not be created because invalid image type parameters have being provided.
648110'%s' is not a valid property value
648120OLE control activation failed
648130Could not obtain OLE control window handle
648140License information for %s is invalid
648150License information for %s not found. You cannot use this control in design mode
648160Connect Failed
648170Connect Exit
648180Handshake Start
648190Handshake Done
648200This "Portable Network Graphics" image is not valid because it contains invalid pieces of data (crc error)
648210The "Portable Network Graphics" image could not be loaded because one of its main piece of data (ihdr) might be corrupted
648220This "Portable Network Graphics" image is invalid because it has missing image parts.
648230Could not decompress the image because it contains invalid compressed data. Description:
648240The "Portable Network Graphics" image contains an invalid palette.
648250The file being read is not a valid "Portable Network Graphics" image because it contains an invalid header. This file may be corrupted, try obtaining it again
648260This "Portable Network Graphics" image is not supported or it might be invalid. (IHDR chunk is not the first)
648270This "Portable Network Graphics" image is not supported because either it's width or height exceeds the maximum size, which is 65535 pixels length.
648280There is no such palette entry.
648290This "Portable Network Graphics" image contains an unknown critical part which could not be decoded.
648300This "Portable Network Graphics" image is encoded with an unknown compression scheme which could not be decoded.
648310This "Portable Network Graphics" image uses an unknown interlace scheme which could not be decoded.
648320Unknown credentials use
648330Do AcquireCredentialsHandle first
648340CompleteAuthToken is not supported
648350Failed to load %s.
648360Mode has not been set.
648370Could not load SSL library.
648380SSL status: "%s"
648390%s Alert
648400%s Read Alert
648410%s Write Alert
648420Accept Loop
648430Accept Error
648440Accept Failed
648450Accept Exit
648460Connect Loop
648470Connect Error
648480The domain controller certificate used for smartcard logon has expired. Please contact your system administrator with the contents of your system event log.
648490The domain controller certificate used for smartcard logon has been revoked. Please contact your system administrator with the contents of your system event log.
648500A signature operation must be performed before the user can authenticate.
648510One or more of the parameters passed to the function was invalid.
648520Client policy does not allow credential delegation to target server.
648530Client policy does not allow credential delegation to target server with NLTM only authentication.
648540The recipient rejected the renegotiation request.
648550The required security context does not exist.
648560The PKU2U protocol encountered an error while attempting to utilize the associated certificates.
648570The identity of the server computer could not be verified.
648580Unknown error
648590SSPI %s returns error #%d(0x%x): %s
648600SSPI interface has failed to initialise properly
648610No PSecPkgInfo specified
648620No credential handle acquired
648630Can not change credentials after handle aquired. Use Release first
648640An unsupported preauthentication mechanism was presented to the Kerberos package.
648650The requested operation cannot be completed. The computer must be trusted for delegation and the current user account must be configured to allow delegation.
648660Client's supplied SSPI channel bindings were incorrect.
648670The received certificate was mapped to multiple accounts.
648680SEC_E_NO_KERB_KEY
648690The certificate is not valid for the requested usage.
648700The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you.
648710The smartcard certificate used for authentication has been revoked. Please contact your system administrator. There may be additional information in the event log.
648720An untrusted certificate authority was detected While processing the smartcard certificate used for authentication. Please contact your system administrator.
648730The revocation status of the smartcard certificate used for authentication could not be determined. Please contact your system administrator.
648740The smartcard certificate used for authentication was not trusted. Please contact your system administrator.
648750The smartcard certificate used for authentication has expired. Please contact your system administrator.
648760The Kerberos subsystem encountered an error. A service for user protocol request was made against a domain controller which does not support service for user.
648770An attempt was made by this server to make a Kerberos constrained delegation request for a target outside of the server's realm. This is not supported, and indicates a misconfiguration on this server's allowed to delegate to list. Please contact your administrator.
648780The revocation status of the domain controller certificate used for smartcard authentication could not be determined. There is additional information in the system event log. Please contact your system administrator.
648790An untrusted certificate authority was detected while processing the domain controller certificate used for authentication. There is additional information in the system event log. Please contact your system administrator.
648800A security context was deleted before the context was completed. This is considered a logon failure.
648810The client is trying to negotiate a context and the server requires user-to-user but didn't send a TGT reply.
648820Unable to accomplish the requested task because the local machine does not have any IP addresses.
648830The supplied credential handle does not match the credential associated with the security context.
648840The crypto system or checksum function is invalid because a required function is unavailable.
648850The number of maximum ticket referrals has been exceeded.
648860The local machine must be a Kerberos KDC (domain controller) and it is not.
648870The other end of the security negotiation is requires strong crypto but it is not supported on the local machine.
648880The KDC reply contained more than one principal name.
648890Expected to find PA data for a hint of what etype to use, but it was not found.
648900The client certificate does not contain a valid UPN, or does not match the client name in the logon request. Please contact your administrator.
648910Smartcard logon is required and was not used.
648920A system shutdown is in progress.
648930An invalid request was sent to the KDC.
648940The KDC was unable to generate a referral for the service requested.
648950The encryption type requested is not supported by the KDC.
648960The supplied message is incomplete. The signature was not verified.
648970The credentials supplied were not complete, and could not be verified. The context could not be initialized.
648980The buffers supplied to a function was too small.
648990The credentials supplied were not complete, and could not be verified. Additional information can be returned from the context.
649000The context data must be renegotiated with the peer.
649010The target principal name is incorrect.
649020There is no LSA mode context associated with this context.
649030The clocks on the client and server machines are skewed.
649040The certificate chain was issued by an untrusted authority.
649050The message received was unexpected or badly formatted.
649060An unknown error occurred while processing the certificate.
649070The received certificate has expired.
649080The specified data could not be encrypted.
649090The specified data could not be decrypted.
649100The client and server cannot communicate, because they do not possess a common algorithm.
649110The security context could not be established due to a failure in the requested quality of service (e.g. mutual authentication or delegation).
649120The token supplied to the function is invalid
649130The security package is not able to marshall the logon buffer, so the logon attempt has failed
649140The per-message Quality of Protection is not supported by the security package
649150The security context does not allow impersonation of the client
649160The logon attempt failed
649170The credentials supplied to the package were not recognized
649180No credentials are available in the security package
649190The message or signature supplied for verification has been altered
649200The message supplied for verification is out of sequence
649210No authority could be contacted for authentication.
649220The function completed successfully, but must be called again to complete the context
649230The function completed successfully, but CompleteToken must be called
649240The function completed successfully, but both CompleteToken and this function must be called to complete the context
649250The logon was completed, but no network authority was available. The logon was made using locally known information
649260The requested security package does not exist
649270The context has expired and can no longer be used.
649280The MMF named "%s" cannot be created empty
649290Win32 error: %s (%u)%s%s
649300OLE error %.8x
649310Method '%s' not supported by automation object
649320Variant does not reference an automation object
649330Dispatch methods do not support more than 64 parameters
649340DCOM not installed
649350Successfull API call
649360Not enough memory is available to complete this request
649370The handle specified is invalid
649380The function requested is not supported
649390The specified target is unknown or unreachable
649400The Local Security Authority cannot be contacted
649410The requested security package does not exist
649420The caller is not the owner of the desired credentials
649430The security package failed to initialize, and cannot be installed
6494403rd-level cache: 4 MByte, 8-way set associative, 64 byte line size
6494503rd-level cache: 1.5 MByte, 12-way set associative, 64 byte line size
6494603rd-level cache: 3 MByte, 12-way set associative, 64 byte line size
6494703rd-level cache: 6 MByte, 12-way set associative, 64 byte line size
6494803rd-level cache: 2 MByte, 16-way set associative, 64 byte line size
6494903rd-level cache: 4 MByte, 16-way set associative, 64 byte line size
6495003rd-level cache: 8 MByte, 16-way set associative, 64 byte line size
6495103rd-level cache: 12 MByte, 24-way set associative, 64 byte line size
6495203rd-level cache: 18 MByte, 24-way set associative, 64 byte line size
6495303rd-level cache: 24 MByte, 24-way set associative, 64 byte line size
64954064-Byte Prefetching
649550128-Byte Prefetching
649560CPUID leaf 2 does not report cache descriptor information, use CPUID leaf 4 to query cache parameters
649570Windows 8.1
649580Windows Server 2012 R2
649590Invalid MMF name "%s"
6496002nd-level cache: 2 MBytes, 8-way associative, 32 byte line size
6496102nd-level cache: 512 KByte, 4-way set associative, 64 byte line size
6496202nd-level cache: 1 MByte, 8-way set associative, 64 byte line size
649630Instruction TLB: 4 KByte pages, 4-way set associative, 128 entries
649640Instruction TLB: 2 MByte pages, 4-way, 8 entries or 4 MByte pages, 4-way, 4 entries
649650Instruction TLB: 4 KByte pages, 4-way set associative, 64 entries
649660Data TLB: 4 KByte pages, 4-way set associative, 128 entries
649670Data TLB1: 4 KByte pages, 4-way set associative, 256 entries
649680Data TLB1: 4 KByte pages, 4-way set associative, 64 entries
649690Data TLB: 4 KByte and 4 MByte pages, 4-way set associative, 8 entries
649700Shared 2nd-Level TLB: 4 KByte pages, 4-way associative, 512 entries
6497103rd-level cache: 512 KByte, 4-way set associative, 64 byte line size
6497203rd-level cache: 1 MByte, 4-way set associative, 64 byte line size
6497303rd-level cache: 2 MByte, 4-way set associative, 64 byte line size
6497403rd-level cache: 1 MByte, 8-way set associative, 64 byte line size
6497503rd-level cache: 2 MByte, 8-way set associative, 64 byte line size
649760Trace cache: 12 K-Ops, 8-way set associative
649770Trace cache: 16 K-Ops, 8-way set associative
649780Trace cache: 32 K-Ops, 8-way set associative
649790Trace cache: 64 K-Ops, 8-way set associative
649800Instruction TLB: 2M/4M pages, fully associative, 8 entries
6498102nd-level cache: 1 MBytes, 4-way set associative, 64 bytes line size
6498202nd-level cache: 128 KBytes, 8-way set associative, 64 bytes line size, 2 lines per sector
6498302nd-level cache: 256 KBytes, 8-way set associative, 64 bytes line size, 2 lines per sector
6498402nd-level cache: 512 KBytes, 8-way set associative, 64 bytes line size, 2 lines per sector
6498502nd-level cache: 1 MBytes, 8-way set associative, 64 bytes line size, 2 lines per sector
6498602nd-level cache: 2 MBytes, 8-way set associative, 64 byte line size
6498702nd-level cache: 512 KBytes, 2-way set associative, 64 byte line size
6498802nd-level cache: 512 KBytes, 8-way set associative, 64 byte line size
6498902nd-level cache: 256 KBytes, 8-way associative, 32 byte line size
6499002nd-level cache: 512 KBytes, 8-way associative, 32 byte line size
6499102nd-level cache: 1 MBytes, 8-way associative, 32 byte line size
649920Instruction TLB: 4 KByte pages, 32 Entries
649930Instruction TLB: 4 KByte and 2 MByte or 4 MByte pages, 64 Entries
649940Instruction TLB: 4 KByte and 2 MByte or 4 MByte pages, 128 Entries
649950Instruction TLB: 4 KByte and 2 MByte or 4 MByte pages, 256 Entries
649960Instruction TLB: 2-MByte or 4-MByte pages, fully associative, 7 entries
649970Data TLB0: 4 MByte pages, 4-way set associative, 16 entries
649980Data TLB0: 4 KByte pages, 4-way associative, 16 entries
649990Data TLB0: 4 KByte pages, fully associative, 16 entries
650000Data TLB0: 2 MByte or 4 MByte pages, 4-way set associative, 32 entries
650010Data TLB: 4 KByte and 4 MByte pages, 64 Entries
650020Data TLB: 4 KByte and 4 MByte pages, 128 Entries
650030Data TLB: 4 KByte and 4 MByte pages, 256 Entries
6500401st-level data cache: 16 KByte, 8-way set associative, 64 byte line size
6500501st-level data cache: 8 KBytes, 4-way set associative, 64 byte line size
6500601st-level data cache: 16 KBytes, 4-way set associative, 64 byte line size
6500701st-level data cache: 32 KBytes, 4-way set associative, 64 byte line size
6500802nd-level cache: 512 KBytes, 4-way set associative, sectored cache, 64-byte line size
650090No 2nd-level cache or, if processor contains a valid 2nd-level cache, no 3rd-level cache
6501002nd-level cache: 128 KBytes, 4-way set associative, 32 byte line size
6501102nd-level cache: 256 KBytes, 4-way set associative, 32 byte line size
6501202nd-level cache: 512 KBytes, 4-way set associative, 32 byte line size
6501302nd-level cache: 1 MBytes, 4-way set associative, 32 byte line size
6501402nd-level cache: 2 MBytes, 4-way set associative, 32 byte line size
6501503rd-level cache: 4 MBytes, 4-way set associative, 64 byte line size
6501603rd-level cache: 8 MBytes, 4-way set associative, 64 byte line size
6501703rd-level cache: 8 MByte, 8-way set associative, 64 byte line size
6501802nd-level cache: 4 MBytes, 16-way set associative, 64 byte line size
6501903rd-level cache: 6MByte, 12-way set associative, 64 byte line size
6502003rd-level cache: 8MByte, 16-way set associative, 64 byte line size
6502103rd-level cache: 12MByte, 12-way set associative, 64 byte line size
6502203rd-level cache: 16MByte, 16-way set associative, 64 byte line size
6502302nd-level cache: 6MByte, 24-way set associative, 64 byte line size
650240Instruction TLB: 4 MByte pages, 4-way set associative, 4 entries
6502501st level data cache: 16 KBytes, 4-way set associative, 32 byte line size
6502601st level data cache: 16 KBytes, 4-way set associative, 64 byte line size
6502701st level data cache: 24 KBytes, 6-way set associative, 64 byte line size
6502802nd level cache: 256 KBytes, 8-way set associative, 64 byte line size
6502903rd level cache: 512 KBytes, 4-way set associative, 64 byte line size, 2 lines per sector
6503003rd level cache: 1 MBytes, 8-way set associative, 64 byte line size, 2 lines per sector
6503103rd level cache: 2 MBytes, 8-way set associative, 64 byte line size, 2 lines per sector
6503203rd level cache: 4 MBytes, 8-way set associative, 64 byte line size, 2 lines per sector
6503301st level data cache: 32 KBytes, 8-way set associative, 64 byte line size
6503401st level instruction cache: 32 KBytes, 8-way set associative, 64 byte line size
6503502nd-level cache: 128 KBytes, 4-way set associative, sectored cache, 64-byte line size
6503602nd-level cache: 192 KBytes, 6-way set associative, sectored cache, 64-byte line size
6503702nd-level cache: 128 KBytes, 2-way set associative, sectored cache, 64-byte line size
6503802nd-level cache: 256 KBytes, 4-way set associative, sectored cache, 64-byte line size
6503902nd-level cache: 384 KBytes, 6-way set associative, sectored cache, 64-byte line size
650400Unable to open key "%s\%s" for read
650410Unable to open key "%s\%s" and access value "%s"
650420"%s\%s\%s" is of wrong kind or size
650430"%s" does not match RootKey
650440Failed to create mutex
650450Failed to open mutex
650460Null descriptor
650470Instruction TLB: 4 KByte pages, 4-way set associative, 32 entries
650480Instruction TLB: 4 MByte pages, 4-way set associative, 2 entries
650490Data TLB: 4 KByte pages, 4-way set associative, 64 entries
650500Data TLB: 4 MByte pages, 4-way set associative, 8 entries
650510Data TLB1: 4 MByte pages, 4-way set associative, 32 entries
6505201st level instruction cache: 8 KBytes, 4-way set associative, 32 byte line size
6505301st level instruction cache: 16 KBytes, 4-way set associative, 32 byte line size
6505401st level instruction cache: 32 KBytes, 4-way set associative, 64 byte line size
6505501st level data cache: 8 KBytes, 2-way set associative, 32 byte line size
650560Button face
650570Button shadow
650580Dimmed text
650590Button text
650600Inactive window title bar text
650610Button highlight
650620Dark shadow 3D elements
650630Highlight 3D elements
650640Tooltip text
650650Tooltip background
650660Gradient Active Caption
650670Gradient Inactive Caption
650680Hot Light
650690Menu Bar
650700Menu Highlight
650710Failed to get ANSI replacement character
650720Lavender
650730Scrollbar
650740Desktop background
650750Active window title bar
650760Inactive window title bar
650770Menu background
650780Window background
650790Window frame
650800Menu text
650810Window text
650820Active window title bar text
650830Active window border
650840Inactive window border
650850Application workspace
650860Selection background
650870Selection text
650880Sea Green
650890Light Blue
650900Violet
650910Gray 40%
650920Pink
650930Gold
650940Bright Green
650950Turquoise
650960Plum
650970Gray 25%
650980Rose
650990Tan
651000Light Yellow
651010Light Green
651020Light Turquoise
651030Pale Blue
651040Sky blue
651050Cream
651060Medium gray
651070Brown
651080Olive Green
651090Dark Green
651100Dark Teal
651110Dark Blue
651120Indigo
651130Gray 80%
651140Dark Red
651150Orange
651160Dark Yellow
651170Blue Gray
651180Gray 50%
651190Light Orange
651200Maroon
651210Green
651220Olive green
651230Navy blue
651240Purple
651250Teal
651260Gray
651270Silver
651280Red
651290Lime
651300Yellow
651310Blue
651320Fuchsia
651330Aqua
651340White
651350Money green
651360Set LargeStream to True to send streams greater than 2GB
651370Data is too large for stream
651380Connect timed out.
651390Cannot call TerminateAndWaitFor on FreeAndTerminate threads
651400Already connected.
651410Maximum number of line allowed exceeded
651420The IOHandler already has a different Intercept assigned
651430Transparent proxy cannot bind.
651440UDP Not supported by this proxy.
651450Buffer terminator must be specified.
651460Buffer start position is invalid.
651470Cannot change a connected IOHandler.
651480No IOHandler of type %s is installed.
651490Reply Code is not valid: %s
651500Reply Code already exists: %s
651510Black
651520Network unreachable.
651530Host unreachable.
651540Connection refused.
651550TTL expired.
651560Command not supported.
651570Address type not supported.
651580%d: Circular links are not allowed
651590Not enough data in buffer. (%d/%d)
651600Too much data in buffer.
651610File "%s" not found
651620Not Connected
651630Object type not supported.
651640No data to read.
651650Read timed out.
651660Max line read attempts exceeded.
651670Max line length exceeded.
651680Message encoder not found
651690Unrecognized UUE encoding scheme.
651700SSL IOHandler is required for this setting
651710This value can not be set while the client is connected.
651720SSL is not available on this server.
651730Could not encode header data using charset "%s"
651740UDP is not support in this SOCKS version.
651750Request rejected or failed.
651760Request rejected because SOCKS server cannot connect.
651770Request rejected because the client program and identd report different user-ids.
651780Unknown socks error.
651790Socks server did not respond.
651800Invalid socks authentication method.
651810Authentication error to socks server.
651820General SOCKS server failure.
651830Connection not allowed by ruleset.
651840Error saving attachment.
651850Attachment %s is blocked.
651860Error accepting connection with SSL.
651870Error connecting with SSL.
651880SetCipher failed.
651890Error creating SSL session.
651900Error creating SSL context.
651910Could not load root certificate.
651920Could not load certificate.
651930Could not load key, check password.
651940Could not load DH Parameters.
651950Error getting SSL method.
651960Error setting File Descriptor for SSL
651970Error binding data to SSL socket.
651980EOF was observed that violates the protocol
651990Message decoder not found
652000The requested IPVersion / Address family is not supported.
652010Not all bytes sent.
652020Package Size Too Big.
652030Set Size Exceeded.
652040End of stream: Class %s at %d
652050Algorithm %s not permitted in FIPS mode
652060Extension is empty
652070Mimetype is empty
652080Extension already exits
652090Cannot load message from file %s
652100Encoding text
652110Encoding attachment
652120Message parts cannot be used in a message which has a ContentTransferEncoding value.
652130Unsupported hash algorithm. This implementation supports only MD5 encoding.
652140No FTP list parsers have been registered.
652150TIdMessagePart can not be created. Use descendant classes.
652160Too many levels of symbolic links.
652170File name too long.
652180Host is down.
652190No route to host.
652200Directory not empty
652210Host not found.
652220Stack Class is undefined.
652230Stack already created.
652240Only one TIdAntiFreeze can exist per application.
652250Cannot change IPVersion when connected
652260Can not bind in port range (%d - %d)
652270Connection Closed Gracefully.
652280Could not bind socket. Address and port are already in use.
652290Invalid Port Range (%d - %d)
652300%s is not a valid service.
652310%s is not a valid IPv6 address
652320Protocol family not supported.
652330Address family not supported by protocol family.
652340Address already in use.
652350Cannot assign requested address.
652360Network is down.
652370Network is unreachable.
652380Net dropped connection or reset.
652390Software caused connection abort.
652400Connection reset by peer.
652410No buffer space available.
652420Socket is already connected.
652430Socket is not connected.
652440Cannot send or receive after socket is closed.
652450Too many references, cannot splice.
652460Connection timed out.
652470Connection refused.
652480Bad file number.
652490Access denied.
652500Buffer fault.
652510Invalid argument.
652520Too many open files.
652530Operation would block.
652540Operation now in progress.
652550Operation already in progress.
652560Socket operation on non-socket.
652570Destination address required.
652580Message too long.
652590Protocol wrong type for socket.
652600Bad protocol option.
652610Protocol not supported.
652620Socket type not supported.
652630Operation not supported on socket.
652640Invalid destination array
652650Character index out of bounds (%d)
652660Invalid count (%d)
652670Invalid destination index (%d)
652680Invalid codepage (%d)
652690Failed attempting to retrieve time zone information.
652700Error on call to Winsock2 library function %s
652710Error on loading Winsock2 library (%s)
652720Resolving hostname %s.
652730Connecting to %s.
652740Connected.
652750Disconnecting.
652760Disconnected.
652770%s
652780Socket Error # %d %s
652790Interrupted system call.
652800Shift+
652810Ctrl+
652820Alt+
652830All
652840Invalid clipboard format
652850Clipboard does not support Icons
652860Cannot open clipboard: %s
652870Operation not supported on selected printer
652880There is no default printer currently selected
652890Menu '%s' is already being used by another form
652900Docked control must have a name
652910Error removing control from dock tree
652920- Dock zone not found
652930- Dock zone has no control
652940Error loading dock zone from the stream. Expecting version %d, but found %d.
652950Invalid source array
652960&Close
652970BkSp
652980Tab
652990Esc
653000Enter
653010Space
653020PgUp
653030PgDn
653040End
653050Home
653060Left
653070Up
653080Right
653090Down
653100Ins
653110Del
653120TIFF Images
653130Warning
653140Error
653150Information
653160Confirm
653170&Yes
653180&No
653190OK
653200Cancel
653210&Help
653220&Abort
653230&Retry
653240&Ignore
653250&All
653260N&o to All
653270Yes to &All
653280Printing in progress
653290Printer index out of range
653300Printer selected is not valid
653310%s on %s
653320GroupIndex cannot be less than a previous menu item's GroupIndex
653330Cannot create form. No MDI forms are currently active
653340A control cannot have itself as its parent
653350Cannot drag a form
653360An error returned from DDE ($0%x)
653370DDE Error - conversation not established ($0%x)
653380Error occurred when DDE ran out of memory ($0%x)
653390Unable to connect DDE conversation
653400Metafiles
653410Enhanced Metafiles
653420Icons
653430Bitmaps
653440Invalid ImageList Index
653450Failed to read ImageList data from stream
653460Failed to write ImageList data to stream
653470Error creating window device context
653480Error creating window class
653490Cannot focus a disabled or invisible window
653500Control '%s' has no parent window
653510Parent given is not a parent of '%s'
653520Cannot hide an MDI Child Form
653530Cannot change Visible in OnShow or OnHide
653540Cannot make a visible window modal
653550Menu index out of range
653560Menu inserted twice
653570Sub-menu is not in menu
653580Not enough timers available
653590Printer is not currently printing
653600Bitmap image is not valid
653610Icon image is not valid
653620Metafile is not valid
653630Invalid pixel format
653640Invalid image
653650Scan line index out of range
653660Cannot change the size of an icon
653670Cannot change the size of a WIC Image
653680Invalid operation on TOleGraphic
653690Unknown picture file extension (.%s)
653700Unsupported clipboard format
653710Out of system resources
653720Canvas does not allow drawing
653730Invalid image size
653740Invalid ImageList
653750Unable to Replace Image
653760Cannot wait for an externally created thread
653770Cannot call Start on a running or suspended thread
653780Parameter %s cannot be a negative value
653790Input buffer exceeded for %s = %d, %s = %d
653800The specified file was not found
653810No help viewer that supports filters
653820Invalid Timeout value: %s
653830''%s'' is not a valid integer value
653840Invalid argument to time encode
653850No context-sensitive help installed
653860No help found for context
653870Unable to open Index
653880Unable to open Search
653890Unable to find a Table of Contents
653900No topic-based help system installed
653910No help found for %s
653920%s has not been registered as a COM class
653930Error reading %s%s%s: %s
653940Stream read error
653950Property is read-only
653960Failed to create key %s
653970Failed to get data for '%s'
653980Failed to set data for '%s'
653990Resource %s not found
654000%s.Seek not implemented
654010Operation not allowed on sorted list
654020%s not in a class registration group
654030Property %s does not exist
654040Stream write error
654050Thread creation error: %s
654060Thread Error: %s (%d)
654070Cannot terminate an externally created thread
654080List does not allow duplicates ($0%x)
654090A component named %s already exists
654100String list does not allow duplicates
654110Cannot create file "%s". %s
654120Cannot open file "%s". %s
654130Invalid file name - %s
654140Invalid stream format
654150''%s'' is not a valid component name
654160Invalid property value
654170Invalid property path
654180Invalid property value
654190Invalid data type for '%s'
654200List capacity out of bounds (%d)
654210List count out of bounds (%d)
654220List index out of bounds (%d)
654230Out of memory while expanding memory stream
654240Saturday
654250Unable to create directory
654260Invalid source array
654270Invalid destination array
654280Character index out of bounds (%d)
654290Start index out of bounds (%d)
654300Invalid count (%d)
654310Invalid destination index (%d)
654320Invalid code page
654330Ancestor for '%s' not found
654340Cannot assign a %s to a %s
654350Bits index out of range
654360Can't write to a read-only resource stream
654370CheckSynchronize called from thread $%x, which is NOT the main thread
654380Class %s not found
654390A class named %s already exists
654400October
654410November
654420December
654430Sun
654440Mon
654450Tue
654460Wed
654470Thu
654480Fri
654490Sat
654500Sunday
654510Monday
654520Tuesday
654530Wednesday
654540Thursday
654550Friday
654560Jun
654570Jul
654580Aug
654590Sep
654600Oct
654610Nov
654620Dec
654630January
654640February
654650March
654660April
654670May
654680June
654690July
654700August
654710September
654720External exception %x
654730Assertion failed
654740Interface not supported
654750Exception in safecall method
654760Object lock not owned
654770Monitor support function not initialized
654780%s (%s, line %d)
654790Abstract Error
654800Access violation at address %p in module '%s'. %s of address %p
654810System Error. Code: %d. %s
654820A call to an OS function failed
654830Jan
654840Feb
654850Mar
654860Apr
654870May
654880Variant or safe array is locked
654890Invalid variant type conversion
654900Invalid variant operation
654910Invalid NULL variant operation
654920Invalid variant operation (%s%.8x) %s
654930Custom variant type (%s%.4x) is out of range
654940Custom variant type (%s%.4x) already used by %s
654950Custom variant type (%s%.4x) is not usable
654960Too many custom variant types have been registered
654970Could not convert variant of type (%s) into type (%s)
654980Overflow while converting variant of type (%s) into type (%s)
654990Variant overflow
655000Invalid argument
655010Invalid variant type
655020Operation not supported
655030Unexpected variant error
655040Invalid class typecast
655050Access violation at address %p. %s of address %p
655060Access violation
655070Stack overflow
655080Control-C hit
655090Privileged instruction
655100Operation aborted
655110Exception %s in module %s at %p. %s%s
655120Application Error
655130Format '%s' invalid or incompatible with argument
655140No argument for format '%s'
655150Variant method calls not supported
655160Read
655170Write
655180Error creating variant or safe array
655190Variant or safe array index out of bounds
655200Invalid argument to date encode
655210Out of memory
655220I/O error %d
655230Too many open files
655240File access denied
655250Read beyond end of file
655260Disk full
655270Invalid numeric input
655280Division by zero
655290Range check error
655300Integer overflow
655310Invalid floating point operation
655320Floating point division by zero
655330Floating point overflow
655340Floating point underflow
655350Invalid pointer operation
module_namehintordfunction_name
oleaut32.dllSysFreeString
oleaut32.dllSysReAllocStringLen
oleaut32.dllSysAllocStringLen
advapi32.dllRegQueryValueExW
advapi32.dllRegOpenKeyExW
advapi32.dllRegCloseKey
user32.dllLoadStringW
user32.dllMessageBoxA
user32.dllCharNextW
kernel32.dlllstrcmpiA
kernel32.dllLoadLibraryA
kernel32.dllLocalFree
kernel32.dllLocalAlloc
kernel32.dllGetACP
kernel32.dllSleep
kernel32.dllVirtualFree
kernel32.dllVirtualAlloc
kernel32.dllGetSystemInfo
kernel32.dllGetTickCount
kernel32.dllQueryPerformanceCounter
kernel32.dllGetVersion
kernel32.dllGetCurrentThreadId
kernel32.dllVirtualQuery
kernel32.dllWideCharToMultiByte
kernel32.dllMultiByteToWideChar
kernel32.dlllstrlenW
kernel32.dlllstrcpynW
kernel32.dllLoadLibraryExW
kernel32.dllIsValidLocale
kernel32.dllGetSystemDefaultUILanguage
kernel32.dllGetStartupInfoA
kernel32.dllGetProcAddress
kernel32.dllGetModuleHandleW
kernel32.dllGetModuleFileNameW
kernel32.dllGetUserDefaultUILanguage
kernel32.dllGetLocaleInfoW
kernel32.dllGetLastError
kernel32.dllGetCommandLineW
kernel32.dllFreeLibrary
kernel32.dllFindFirstFileW
kernel32.dllFindClose
kernel32.dllExitProcess
kernel32.dllExitThread
kernel32.dllCreateThread
kernel32.dllCompareStringW
kernel32.dllWriteFile
kernel32.dllUnhandledExceptionFilter
kernel32.dllRtlUnwind
kernel32.dllRaiseException
kernel32.dllGetStdHandle
kernel32.dllDeleteCriticalSection
kernel32.dllLeaveCriticalSection
kernel32.dllEnterCriticalSection
kernel32.dllInitializeCriticalSection
kernel32.dllCloseHandle
kernel32.dllTlsSetValue
kernel32.dllTlsGetValue
kernel32.dllLocalAlloc
kernel32.dllGetModuleHandleW
user32.dllCreateWindowExW
user32.dllWindowFromPoint
user32.dllWaitMessage
user32.dllUpdateWindow
user32.dllUnregisterClassW
user32.dllUnhookWindowsHookEx
user32.dllTranslateMessage
user32.dllTranslateMDISysAccel
user32.dllTrackPopupMenu
user32.dllSystemParametersInfoW
user32.dllShowWindow
user32.dllShowScrollBar
user32.dllShowOwnedPopups
user32.dllSetWindowsHookExW
user32.dllSetWindowTextW
user32.dllSetWindowPos
user32.dllSetWindowPlacement
user32.dllSetWindowLongW
user32.dllSetTimer
user32.dllSetScrollRange
user32.dllSetScrollPos
user32.dllSetScrollInfo
user32.dllSetRect
user32.dllSetPropW
user32.dllSetParent
user32.dllSetMenuItemInfoW
user32.dllSetMenu
user32.dllSetForegroundWindow
user32.dllSetFocus
user32.dllSetCursorPos
user32.dllSetCursor
user32.dllSetClipboardData
user32.dllSetClassLongW
user32.dllSetCapture
user32.dllSetActiveWindow
user32.dllSendMessageA
user32.dllSendMessageW
user32.dllScrollWindow
user32.dllScreenToClient
user32.dllRemovePropW
user32.dllRemoveMenu
user32.dllReleaseDC
user32.dllReleaseCapture
user32.dllRegisterWindowMessageW
user32.dllRegisterClipboardFormatW
user32.dllRegisterClassW
user32.dllRedrawWindow
user32.dllPostQuitMessage
user32.dllPostMessageW
user32.dllPeekMessageA
user32.dllPeekMessageW
user32.dllOpenClipboard
user32.dllOffsetRect
user32.dllMsgWaitForMultipleObjectsEx
user32.dllMsgWaitForMultipleObjects
user32.dllMessageBoxW
user32.dllMapWindowPoints
user32.dllMapVirtualKeyW
user32.dllLoadStringW
user32.dllLoadKeyboardLayoutW
user32.dllLoadIconW
user32.dllLoadCursorW
user32.dllLoadBitmapW
user32.dllKillTimer
user32.dllIsZoomed
user32.dllIsWindowVisible
user32.dllIsWindowUnicode
user32.dllIsWindowEnabled
user32.dllIsWindow
user32.dllIsIconic
user32.dllIsDialogMessageA
user32.dllIsDialogMessageW
user32.dllIsClipboardFormatAvailable
user32.dllIsChild
user32.dllInvalidateRect
user32.dllIntersectRect
user32.dllInsertMenuItemW
user32.dllInsertMenuW
user32.dllInflateRect
user32.dllGetWindowThreadProcessId
user32.dllGetWindowTextW
user32.dllGetWindowRect
user32.dllGetWindowPlacement
user32.dllGetWindowLongW
user32.dllGetWindowDC
user32.dllGetTopWindow
user32.dllGetSystemMetrics
user32.dllGetSystemMenu
user32.dllGetSysColorBrush
user32.dllGetSysColor
user32.dllGetSubMenu
user32.dllGetScrollRange
user32.dllGetScrollPos
user32.dllGetScrollInfo
user32.dllGetPropW
user32.dllGetParent
user32.dllGetWindow
user32.dllGetMessageTime
user32.dllGetMessagePos
user32.dllGetMessageExtraInfo
user32.dllGetMenuStringW
user32.dllGetMenuState
user32.dllGetMenuItemInfoW
user32.dllGetMenuItemID
user32.dllGetMenuItemCount
user32.dllGetMenu
user32.dllGetLastActivePopup
user32.dllGetKeyboardState
user32.dllGetKeyboardLayoutNameW
user32.dllGetKeyboardLayoutList
user32.dllGetKeyboardLayout
user32.dllGetKeyState
user32.dllGetKeyNameTextW
user32.dllGetIconInfo
user32.dllGetForegroundWindow
user32.dllGetFocus
user32.dllGetDesktopWindow
user32.dllGetDCEx
user32.dllGetDC
user32.dllGetCursorPos
user32.dllGetCursor
user32.dllGetClipboardData
user32.dllGetClientRect
user32.dllGetClassLongW
user32.dllGetClassInfoW
user32.dllGetCapture
user32.dllGetActiveWindow
user32.dllFrameRect
user32.dllFindWindowExW
user32.dllFindWindowW
user32.dllFillRect
user32.dllEqualRect
user32.dllEnumWindows
user32.dllEnumThreadWindows
user32.dllEnumClipboardFormats
user32.dllEnumChildWindows
user32.dllEndPaint
user32.dllEnableWindow
user32.dllEnableScrollBar
user32.dllEnableMenuItem
user32.dllEmptyClipboard
user32.dllDrawTextExW
user32.dllDrawTextW
user32.dllDrawMenuBar
user32.dllDrawIconEx
user32.dllDrawIcon
user32.dllDrawFrameControl
user32.dllDrawFocusRect
user32.dllDrawEdge
user32.dllDispatchMessageA
user32.dllDispatchMessageW
user32.dllDestroyWindow
user32.dllDestroyMenu
user32.dllDestroyIcon
user32.dllDestroyCursor
user32.dllDeleteMenu
user32.dllDefWindowProcW
user32.dllDefMDIChildProcW
user32.dllDefFrameProcW
user32.dllCreatePopupMenu
user32.dllCreateMenu
user32.dllCreateIcon
user32.dllCreateAcceleratorTableW
user32.dllCountClipboardFormats
user32.dllCopyImage
user32.dllCopyIcon
user32.dllCloseClipboard
user32.dllClientToScreen
user32.dllCheckMenuItem
user32.dllCharUpperBuffW
user32.dllCharNextW
user32.dllCharLowerBuffW
user32.dllCharLowerW
user32.dllCallWindowProcW
user32.dllCallNextHookEx
user32.dllBeginPaint
user32.dllCharLowerBuffA
user32.dllCharUpperBuffA
user32.dllAdjustWindowRectEx
user32.dllActivateKeyboardLayout
msimg32.dllAlphaBlend
gdi32.dllUnrealizeObject
gdi32.dllStretchDIBits
gdi32.dllStretchBlt
gdi32.dllStartPage
gdi32.dllStartDocW
gdi32.dllSetWindowOrgEx
gdi32.dllSetWinMetaFileBits
gdi32.dllSetViewportOrgEx
gdi32.dllSetTextColor
gdi32.dllSetStretchBltMode
gdi32.dllSetROP2
gdi32.dllSetPixel
gdi32.dllSetMapMode
gdi32.dllSetEnhMetaFileBits
gdi32.dllSetDIBits
gdi32.dllSetDIBColorTable
gdi32.dllSetBrushOrgEx
gdi32.dllSetBkMode
gdi32.dllSetBkColor
gdi32.dllSetAbortProc
gdi32.dllSelectPalette
gdi32.dllSelectObject
gdi32.dllSaveDC
gdi32.dllRoundRect
gdi32.dllRestoreDC
gdi32.dllResizePalette
gdi32.dllRectangle
gdi32.dllRectVisible
gdi32.dllRealizePalette
gdi32.dllPolyline
gdi32.dllPolygon
gdi32.dllPolyBezierTo
gdi32.dllPolyBezier
gdi32.dllPlayEnhMetaFile
gdi32.dllPie
gdi32.dllPatBlt
gdi32.dllMoveToEx
gdi32.dllMaskBlt
gdi32.dllLineTo
gdi32.dllLPtoDP
gdi32.dllIntersectClipRect
gdi32.dllGetWindowOrgEx
gdi32.dllGetWinMetaFileBits
gdi32.dllGetTextMetricsW
gdi32.dllGetTextExtentPoint32W
gdi32.dllGetSystemPaletteEntries
gdi32.dllGetStockObject
gdi32.dllGetRgnBox
gdi32.dllGetPixel
gdi32.dllGetPaletteEntries
gdi32.dllGetObjectType
gdi32.dllGetObjectW
gdi32.dllGetNearestPaletteIndex
gdi32.dllGetEnhMetaFilePaletteEntries
gdi32.dllGetEnhMetaFileHeader
gdi32.dllGetEnhMetaFileDescriptionW
gdi32.dllGetEnhMetaFileBits
gdi32.dllGetDeviceCaps
gdi32.dllGetDIBits
gdi32.dllGetDIBColorTable
gdi32.dllGetDCOrgEx
gdi32.dllGetCurrentPositionEx
gdi32.dllGetClipBox
gdi32.dllGetBrushOrgEx
gdi32.dllGetBitmapBits
gdi32.dllGdiFlush
gdi32.dllFrameRgn
gdi32.dllExtTextOutW
gdi32.dllExtFloodFill
gdi32.dllExcludeClipRect
gdi32.dllEnumFontsW
gdi32.dllEnumFontFamiliesExW
gdi32.dllEndPage
gdi32.dllEndDoc
gdi32.dllEllipse
gdi32.dllDeleteObject
gdi32.dllDeleteEnhMetaFile
gdi32.dllDeleteDC
gdi32.dllCreateSolidBrush
gdi32.dllCreateRectRgn
gdi32.dllCreatePenIndirect
gdi32.dllCreatePalette
gdi32.dllCreateICW
gdi32.dllCreateHalftonePalette
gdi32.dllCreateFontIndirectW
gdi32.dllCreateEnhMetaFileW
gdi32.dllCreateDIBitmap
gdi32.dllCreateDIBSection
gdi32.dllCreateDCW
gdi32.dllCreateCompatibleDC
gdi32.dllCreateCompatibleBitmap
gdi32.dllCreateBrushIndirect
gdi32.dllCreateBitmap
gdi32.dllCopyEnhMetaFileW
gdi32.dllCloseEnhMetaFile
gdi32.dllChord
gdi32.dllBitBlt
gdi32.dllArc
gdi32.dllAbortDoc
version.dllVerQueryValueW
version.dllGetFileVersionInfoSizeW
version.dllGetFileVersionInfoW
kernel32.dlllstrcpyW
kernel32.dllWriteFile
kernel32.dllWinExec
kernel32.dllWideCharToMultiByte
kernel32.dllWaitForSingleObjectEx
kernel32.dllWaitForSingleObject
kernel32.dllWaitForMultipleObjectsEx
kernel32.dllVirtualQueryEx
kernel32.dllVirtualQuery
kernel32.dllVirtualFree
kernel32.dllVirtualAlloc
kernel32.dllUnmapViewOfFile
kernel32.dllTryEnterCriticalSection
kernel32.dllTerminateProcess
kernel32.dllSwitchToThread
kernel32.dllSuspendThread
kernel32.dllSleep
kernel32.dllSizeofResource
kernel32.dllSignalObjectAndWait
kernel32.dllSetThreadPriority
kernel32.dllSetThreadLocale
kernel32.dllSetLastError
kernel32.dllSetFilePointer
kernel32.dllSetEvent
kernel32.dllSetErrorMode
kernel32.dllSetEndOfFile
kernel32.dllResumeThread
kernel32.dllResetEvent
kernel32.dllReleaseMutex
kernel32.dllReadFile
kernel32.dllRaiseException
kernel32.dllIsDebuggerPresent
kernel32.dllOpenProcess
kernel32.dllOpenMutexW
kernel32.dllOpenFileMappingW
kernel32.dllMultiByteToWideChar
kernel32.dllMulDiv
kernel32.dllMapViewOfFile
kernel32.dllLockResource
kernel32.dllLoadResource
kernel32.dllLoadLibraryW
kernel32.dllLeaveCriticalSection
kernel32.dllInitializeCriticalSection
kernel32.dllGlobalUnlock
kernel32.dllGlobalSize
kernel32.dllGlobalHandle
kernel32.dllGlobalLock
kernel32.dllGlobalFree
kernel32.dllGlobalFindAtomW
kernel32.dllGlobalDeleteAtom
kernel32.dllGlobalAlloc
kernel32.dllGlobalAddAtomW
kernel32.dllGetVersionExW
kernel32.dllGetVersion
kernel32.dllGetUserDefaultLCID
kernel32.dllGetTimeZoneInformation
kernel32.dllGetTickCount
kernel32.dllGetThreadPriority
kernel32.dllGetThreadLocale
kernel32.dllGetTempPathW
kernel32.dllGetSystemInfo
kernel32.dllGetStringTypeExA
kernel32.dllGetStringTypeExW
kernel32.dllGetStdHandle
kernel32.dllGetProcAddress
kernel32.dllGetModuleHandleW
kernel32.dllGetModuleFileNameW
kernel32.dllGetLocaleInfoW
kernel32.dllGetLocalTime
kernel32.dllGetLastError
kernel32.dllGetFullPathNameW
kernel32.dllGetFileSize
kernel32.dllGetFileAttributesW
kernel32.dllGetExitCodeThread
kernel32.dllGetExitCodeProcess
kernel32.dllGetEnvironmentVariableW
kernel32.dllGetDiskFreeSpaceW
kernel32.dllGetDateFormatW
kernel32.dllGetCurrentThreadId
kernel32.dllGetCurrentThread
kernel32.dllGetCurrentProcessId
kernel32.dllGetCurrentProcess
kernel32.dllGetComputerNameW
kernel32.dllGetCPInfo
kernel32.dllGetACP
kernel32.dllFreeResource
kernel32.dllInterlockedExchangeAdd
kernel32.dllInterlockedExchange
kernel32.dllInterlockedCompareExchange
kernel32.dllFreeLibrary
kernel32.dllFormatMessageW
kernel32.dllFindResourceW
kernel32.dllFindFirstFileW
kernel32.dllFindClose
kernel32.dllExitProcess
kernel32.dllEnumCalendarInfoW
kernel32.dllEnterCriticalSection
kernel32.dllDeleteFileW
kernel32.dllDeleteCriticalSection
kernel32.dllCreateThread
kernel32.dllCreateFileMappingW
kernel32.dllCreateFileW
kernel32.dllCreateEventW
kernel32.dllCreateDirectoryW
kernel32.dllCopyFileW
kernel32.dllCompareStringA
kernel32.dllCompareStringW
kernel32.dllCloseHandle
advapi32.dllRegUnLoadKeyW
advapi32.dllRegSetValueExW
advapi32.dllRegSaveKeyW
advapi32.dllRegRestoreKeyW
advapi32.dllRegReplaceKeyW
advapi32.dllRegQueryValueExA
advapi32.dllRegQueryValueExW
advapi32.dllRegQueryInfoKeyW
advapi32.dllRegOpenKeyExA
advapi32.dllRegOpenKeyExW
advapi32.dllRegLoadKeyW
advapi32.dllRegFlushKey
advapi32.dllRegEnumValueW
advapi32.dllRegEnumKeyExW
advapi32.dllRegDeleteValueW
advapi32.dllRegDeleteKeyW
advapi32.dllRegCreateKeyExW
advapi32.dllRegConnectRegistryW
advapi32.dllRegCloseKey
advapi32.dllGetUserNameW
oleaut32.dllGetErrorInfo
oleaut32.dllGetActiveObject
oleaut32.dllSysFreeString
ole32.dllCreateStreamOnHGlobal
ole32.dllOleRegEnumVerbs
ole32.dllIsAccelerator
ole32.dllOleDraw
ole32.dllOleSetMenuDescriptor
ole32.dllOleUninitialize
ole32.dllOleInitialize
ole32.dllCoTaskMemFree
ole32.dllProgIDFromCLSID
ole32.dllStringFromCLSID
ole32.dllCoCreateInstance
ole32.dllCoGetClassObject
ole32.dllCoUninitialize
ole32.dllCoInitialize
ole32.dllIsEqualGUID
kernel32.dllSleep
ole32.dllIsEqualGUID
oleaut32.dllSafeArrayPtrOfIndex
oleaut32.dllSafeArrayGetUBound
oleaut32.dllSafeArrayGetLBound
oleaut32.dllSafeArrayCreate
oleaut32.dllVariantChangeType
oleaut32.dllVariantCopy
oleaut32.dllVariantClear
oleaut32.dllVariantInit
comctl32.dllInitializeFlatSB
comctl32.dllFlatSB_SetScrollProp
comctl32.dllFlatSB_SetScrollPos
comctl32.dllFlatSB_SetScrollInfo
comctl32.dllFlatSB_GetScrollPos
comctl32.dllFlatSB_GetScrollInfo
comctl32.dll_TrackMouseEvent
comctl32.dllImageList_GetImageInfo
comctl32.dllImageList_SetIconSize
comctl32.dllImageList_GetIconSize
comctl32.dllImageList_Write
comctl32.dllImageList_Read
comctl32.dllImageList_GetDragImage
comctl32.dllImageList_DragShowNolock
comctl32.dllImageList_DragMove
comctl32.dllImageList_DragLeave
comctl32.dllImageList_DragEnter
comctl32.dllImageList_EndDrag
comctl32.dllImageList_BeginDrag
comctl32.dllImageList_Copy
comctl32.dllImageList_LoadImageW
comctl32.dllImageList_GetIcon
comctl32.dllImageList_Remove
comctl32.dllImageList_DrawEx
comctl32.dllImageList_Replace
comctl32.dllImageList_Draw
comctl32.dllImageList_SetOverlayImage
comctl32.dllImageList_GetBkColor
comctl32.dllImageList_SetBkColor
comctl32.dllImageList_ReplaceIcon
comctl32.dllImageList_Add
comctl32.dllImageList_SetImageCount
comctl32.dllImageList_GetImageCount
comctl32.dllImageList_Destroy
comctl32.dllImageList_Create
shell32.dllShellExecuteW
winspool.drvOpenPrinterW
winspool.drvEnumPrintersW
winspool.drvDocumentPropertiesW
winspool.drvClosePrinter
winspool.drvGetDefaultPrinterW
user32.dllDdeCmpStringHandles
user32.dllDdeFreeStringHandle
user32.dllDdeQueryStringA
user32.dllDdeCreateStringHandleA
user32.dllDdeGetLastError
user32.dllDdeFreeDataHandle
user32.dllDdeUnaccessData
user32.dllDdeAccessData
user32.dllDdeCreateDataHandle
user32.dllDdeClientTransaction
user32.dllDdeNameService
user32.dllDdePostAdvise
user32.dllDdeSetUserHandle
user32.dllDdeQueryConvInfo
user32.dllDdeDisconnect
user32.dllDdeConnect
user32.dllDdeUninitialize
user32.dllDdeInitializeA
kernel32.dllGetVersionExW
kernel32.dllCreateMutexW
winmm.dlltimeGetTime

StringTable 040904E4

CompanyNameMCsoft
FileDescriptionUser Activity Monitor
FileVersion5.9.48.60
InternalName
LegalCopyright
LegalTrademarks
OriginalFilename
ProductName
ProductVersion5.9
Comments

VS_FIXEDFILEINFO

FileVersion5.9.48.60
ProductVersion5.9.48.60
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS4
FileType1
FileSubtype0

Signers (1)

issuer: /C=BE/O=GlobalSign nv-sa/CN=GlobalSign CodeSigning CA - SHA256 - G3
serial: 551A07B88D6A1CBD021DFFCD

Certificates (2)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: OU=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign
        Validity
            Not Before: Jun 15 00:00:00 2016 GMT
            Not After : Jun 15 00:00:00 2024 GMT
        Subject: C=BE, O=GlobalSign nv-sa, CN=GlobalSign CodeSigning CA - SHA256 - G3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:85:55:23:a9:1f:53:af:c9:ed:36:c2:29:b5:
                    6e:d8:f9:42:f5:21:8b:87:f0:43:a1:2f:c0:3f:97:
                    e3:18:47:d4:96:4e:88:ab:c6:63:e9:b6:49:15:85:
                    f1:d9:9b:7b:1b:fd:d8:4a:cc:6d:4e:86:40:17:cd:
                    7b:ba:47:28:b5:d6:14:40:0c:86:ee:1e:4b:33:f3:
                    2c:55:ee:21:8c:da:b6:c1:fe:b0:4e:3a:ae:51:9f:
                    a5:14:e3:10:e6:93:ca:fa:f9:5d:b1:90:87:ef:f8:
                    35:2d:fc:a2:5c:26:ee:7b:15:8b:1f:d9:c3:a1:97:
                    35:41:b3:30:fd:72:13:ad:91:97:3a:ce:72:9d:06:
                    0a:75:3c:1f:98:e3:cb:18:2f:8c:9f:08:4a:91:0a:
                    d9:d9:35:d9:83:92:76:62:5e:df:83:ae:e4:d6:01:
                    4e:cc:f3:3c:70:61:58:37:1f:14:e3:6a:a0:af:6b:
                    f4:d9:d2:6c:2c:19:30:5d:a0:6f:52:df:d1:9c:c9:
                    e0:0d:d9:75:11:65:96:d9:43:b4:a7:90:39:ae:47:
                    1c:54:cb:b1:95:6e:25:de:8e:f1:12:1c:f0:d7:6e:
                    e7:14:4d:b3:1a:65:d6:84:4a:57:ee:04:af:62:38:
                    c5:10:9b:43:8e:52:b8:3e:b6:ae:9e:2c:97:ff:8e:
                    74:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                Code Signing, OCSP Signing
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Subject Key Identifier: 
                0F:3A:E7:AC:94:91:74:2D:96:02:73:83:AD:9C:2E:49:3F:19:AA:54
            X509v3 Authority Key Identifier: 
                keyid:8F:F0:4B:7F:A8:2E:45:24:AE:4D:50:FA:63:9A:8B:DE:E2:DD:1B:BC

            Authority Information Access: 
                OCSP - URI:http://ocsp2.globalsign.com/rootr3

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.globalsign.com/root-r3.crl

            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.4146.1.50
                Policy: 2.23.140.1.4.1
                Policy: 1.3.6.1.4.1.4146.1.95
                  CPS: https://www.globalsign.com/repository/

    Signature Algorithm: sha256WithRSAEncryption
         15:84:28:0c:ed:a1:c3:19:82:db:63:27:41:d7:cc:63:7d:d6:
         bc:cf:36:9b:cf:d2:5d:4c:02:8b:58:1a:16:08:7a:b1:98:99:
         7f:d8:33:8a:5c:9e:62:0a:9a:ea:90:c2:c5:63:04:0b:e8:87:
         58:06:00:07:82:59:c3:a8:94:32:d9:e0:14:4d:a0:d5:23:e0:
         c7:dd:ba:f0:69:e2:4a:45:65:2d:4d:49:90:78:66:32:0e:b0:
         68:c0:b0:88:b0:8e:ed:5c:06:f8:5c:10:48:3f:23:73:ba:3b:
         53:84:52:80:cd:f0:b3:15:c8:11:0a:8b:05:78:46:59:08:d4:
         be:b7:ff:4b:f5:9c:6a:4c:9c:76:a2:11:85:45:8c:d4:37:ee:
         50:dd:e1:33:34:a9:a1:1f:3a:0b:f1:56:44:8a:6f:b3:33:d0:
         b1:8e:d1:0c:60:07:ee:32:c2:f0:24:6f:bf:af:fb:81:01:76:
         67:c4:a3:e8:e0:ab:dc:33:55:28:e3:67:47:3c:eb:6a:a4:df:
         94:e9:f4:a6:c0:81:d1:52:98:51:a6:d6:02:b7:3c:ea:4a:ef:
         d0:ba:65:d2:37:83:53:4b:7e:67:7c:8c:40:f6:07:1c:b0:af:
         04:06:dc:f8:6c:46:88:72:9c:eb:4e:9d:c3:b0:b9:54:a3:b9:
         4e:97:ca:14
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:1a:07:b8:8d:6a:1c:bd:02:1d:ff:cd
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign CodeSigning CA - SHA256 - G3
        Validity
            Not Before: Apr  3 12:53:04 2018 GMT
            Not After : Jul 19 13:56:45 2020 GMT
        Subject: C=RU, ST=Perm Krai, L=Perm, O=MCsoft, CN=MCsoft
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:43:f9:83:60:c7:4e:4c:e2:ff:5c:86:cd:fb:
                    bc:d9:15:ad:d0:33:bd:3c:15:71:82:38:5b:54:1f:
                    ec:05:1c:c2:33:85:92:1a:c8:cb:2e:fe:7d:8e:76:
                    48:f3:ab:22:c6:23:50:d6:ff:46:6e:cd:9c:08:be:
                    20:02:aa:0a:30:8a:a4:63:62:db:17:b3:9d:8f:ca:
                    b0:e4:50:e4:8d:d6:86:48:ab:8d:ac:90:86:00:9f:
                    8a:bc:7a:6d:bb:55:91:43:0c:21:9f:ee:fd:41:81:
                    dc:35:05:8d:5d:ee:52:fc:15:e7:7a:e8:e8:6c:2a:
                    19:64:85:f6:2b:f0:6c:ad:55:ff:6c:76:96:85:6b:
                    0f:cb:1a:d7:7f:bf:90:51:b3:03:bf:ad:a2:66:45:
                    af:35:59:8f:f0:33:89:c5:5f:c4:df:a7:7e:79:31:
                    70:b6:d4:f4:7a:53:e3:5a:d8:89:6d:cf:2f:db:a9:
                    c5:9e:77:f7:dd:f6:91:d1:10:9e:bd:1b:8b:d3:9a:
                    02:07:f2:2a:27:59:c6:33:1b:e4:da:e2:12:ef:0c:
                    87:67:ea:ef:bc:61:67:81:d6:73:38:dd:a7:80:93:
                    f4:89:db:ff:4d:1b:be:12:b3:eb:64:ca:dc:80:ff:
                    e2:1a:5e:a3:3b:c5:df:11:03:4a:d9:eb:25:b8:e4:
                    41:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:http://secure.globalsign.com/cacert/gscodesignsha2g3ocsp.crt
                OCSP - URI:http://ocsp2.globalsign.com/gscodesignsha2g3

            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.4146.1.50
                  CPS: https://www.globalsign.com/repository/
                Policy: 2.23.140.1.4.1

            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.globalsign.com/gscodesignsha2g3.crl

            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 Subject Key Identifier: 
                E9:F0:B9:E1:E2:A1:FF:AE:88:35:68:CA:1D:D9:58:FB:CC:63:67:7D
            X509v3 Authority Key Identifier: 
                keyid:0F:3A:E7:AC:94:91:74:2D:96:02:73:83:AD:9C:2E:49:3F:19:AA:54

    Signature Algorithm: sha256WithRSAEncryption
         2a:ab:ab:b8:b5:f9:95:1c:16:75:40:3e:5d:e4:9c:62:b8:ef:
         16:f4:f4:43:54:60:f2:ce:21:fc:8c:c8:1d:20:79:52:e6:7b:
         89:78:f3:96:ee:00:cf:28:8c:8b:8c:a5:4c:66:db:78:97:0f:
         32:27:b1:b1:eb:a1:9c:de:86:36:cb:f7:55:2f:3c:76:fb:3d:
         b1:79:45:e4:0a:5d:58:2b:2a:dd:aa:9f:f0:13:8d:35:5c:d5:
         6b:3c:f8:e3:ce:3c:49:70:37:67:21:b7:16:37:f5:45:b4:82:
         70:2b:d0:a1:72:a7:e9:a0:df:76:98:6f:c3:3d:40:35:fc:60:
         0d:27:cc:d5:e4:e5:2c:89:f7:a9:46:2e:1b:e3:32:41:04:ae:
         10:42:ba:76:c8:7d:89:a0:48:45:02:c6:b9:15:b3:c2:c0:75:
         03:72:80:cd:c4:81:60:14:02:60:a9:2b:61:88:ef:8f:57:8e:
         f0:45:db:51:0c:17:32:e7:c1:13:d8:e1:49:f2:85:71:b1:8f:
         e0:4d:5d:af:63:62:95:a9:5d:42:08:1a:ed:25:ab:16:2c:e6:
         f0:88:72:b1:05:90:da:35:74:46:fb:49:2c:04:9f:68:9f:02:
         93:67:51:db:80:bd:cb:07:a0:e5:c1:7a:e1:1c:66:4f:e4:58:
         31:dc:51:2c
pkcs7-signedData
  • 1
    • SHA1: nil
    • 1.3.6.1.4.1.311.2.1.4
      • #0
        • 1.3.6.1.4.1.311.2.1.15
          • :
        • SHA1
          • d9 02 a4 0a f6 0f 0b e5  fd 6f 1e dc 2d 61 32 a0  |.........o..-a2.|
c6 90 8f 1b                                       |....            |
    • unnamed
      • #0
        • 2
          • 48:1B:6A:07:26:D2:E8:3F:26:02:D4:82:5A:CD
          • RSA-SHA256: nil
          • #2
            • OU: GlobalSign Root CA - R3
            • O: GlobalSign
            • CN: GlobalSign
          • 2016-06-15 00:00:00 UTC: 2024-06-15 00:00:00 UTC
          • Subject
            • C: BE
            • O: GlobalSign nv-sa
            • CN: GlobalSign CodeSigning CA - SHA256 - G3
          • #5
            • rsaEncryption: nil
            • 8D:85:55:23:A9:1F:53:AF:C9:ED:36:C2:29:B5:6E:D8:
              F9:42:F5:21:8B:87:F0:43:A1:2F:C0:3F:97:E3:18:47:
              D4:96:4E:88:AB:C6:63:E9:B6:49:15:85:F1:D9:9B:7B:
              1B:FD:D8:4A:CC:6D:4E:86:40:17:CD:7B:BA:47:28:B5:
              D6:14:40:0C:86:EE:1E:4B:33:F3:2C:55:EE:21:8C:DA:
              B6:C1:FE:B0:4E:3A:AE:51:9F:A5:14:E3:10:E6:93:CA:
              FA:F9:5D:B1:90:87:EF:F8:35:2D:FC:A2:5C:26:EE:7B:
              15:8B:1F:D9:C3:A1:97:35:41:B3:30:FD:72:13:AD:91:
              97:3A:CE:72:9D:06:0A:75:3C:1F:98:E3:CB:18:2F:8C:
              9F:08:4A:91:0A:D9:D9:35:D9:83:92:76:62:5E:DF:83:
              AE:E4:D6:01:4E:CC:F3:3C:70:61:58:37:1F:14:E3:6A:
              A0:AF:6B:F4:D9:D2:6C:2C:19:30:5D:A0:6F:52:DF:D1:
              9C:C9:E0:0D:D9:75:11:65:96:D9:43:B4:A7:90:39:AE:
              47:1C:54:CB:B1:95:6E:25:DE:8E:F1:12:1C:F0:D7:6E:
              E7:14:4D:B3:1A:65:D6:84:4A:57:EE:04:AF:62:38:C5:
              10:9B:43:8E:52:B8:3E:B6:AE:9E:2C:97:FF:8E:74:EF              : 0x010001
          • #6
            • keyUsage: true, 6
            • extendedKeyUsage
              • codeSigning: OCSPSigning
            • basicConstraints
              • true
              • true: 0
            • subjectKeyIdentifier: 
              0f 3a e7 ac 94 91 74 2d  96 02 73 83 ad 9c 2e 49  |.:....t-..s....I|
3f 19 aa 54                                       |?..T            |
            • authorityKeyIdentifier: 
              8f f0 4b 7f a8 2e 45 24  ae 4d 50 fa 63 9a 8b de  |..K...E$.MP.c...|
e2 dd 1b bc                                       |....            |
            • authorityInfoAccess
              • OCSP: http://ocsp2.globalsign.com/rootr3
            • crlDistributionPoints: http://crl.globalsign.com/root-r3.crl
            • certificatePolicies
              • 1.3.6.1.4.1.4146.1.50
                • 2.23.140.1.4.1
                • 1.3.6.1.4.1.4146.1.95
                  • id-qt-cps: https://www.globalsign.com/repository/
        • RSA-SHA256: 
          15 84 28 0c ed a1 c3 19  82 db 63 27 41 d7 cc 63  |..(.......c'A..c|
7d d6 bc cf 36 9b cf d2  5d 4c 02 8b 58 1a 16 08  |}...6...]L..X...|
7a b1 98 99 7f d8 33 8a  5c 9e 62 0a 9a ea 90 c2  |z.....3.\.b.....|
c5 63 04 0b e8 87 58 06  00 07 82 59 c3 a8 94 32  |.c....X....Y...2|
d9 e0 14 4d a0 d5 23 e0  c7 dd ba f0 69 e2 4a 45  |...M..#.....i.JE|
65 2d 4d 49 90 78 66 32  0e b0 68 c0 b0 88 b0 8e  |e-MI.xf2..h.....|
ed 5c 06 f8 5c 10 48 3f  23 73 ba 3b 53 84 52 80  |.\..\.H?#s.;S.R.|
cd f0 b3 15 c8 11 0a 8b  05 78 46 59 08 d4 be b7  |.........xFY....|
ff 4b f5 9c 6a 4c 9c 76  a2 11 85 45 8c d4 37 ee  |.K..jL.v...E..7.|
50 dd e1 33 34 a9 a1 1f  3a 0b f1 56 44 8a 6f b3  |P..34...:..VD.o.|
33 d0 b1 8e d1 0c 60 07  ee 32 c2 f0 24 6f bf af  |3.....`..2..$o..|
fb 81 01 76 67 c4 a3 e8  e0 ab dc 33 55 28 e3 67  |...vg......3U(.g|
47 3c eb 6a a4 df 94 e9  f4 a6 c0 81 d1 52 98 51  |G<.j.........R.Q|
a6 d6 02 b7 3c ea 4a ef  d0 ba 65 d2 37 83 53 4b  |....<.J...e.7.SK|
7e 67 7c 8c 40 f6 07 1c  b0 af 04 06 dc f8 6c 46  |~g|.@.........lF|
88 72 9c eb 4e 9d c3 b0  b9 54 a3 b9 4e 97 ca 14  |.r..N....T..N...|
      • Certificate #1
        • 2
          • 55:1A:07:B8:8D:6A:1C:BD:02:1D:FF:CD
          • RSA-SHA256: nil
          • Issuer
            • C: BE
            • O: GlobalSign nv-sa
            • CN: GlobalSign CodeSigning CA - SHA256 - G3
          • 2018-04-03 12:53:04 UTC: 2020-07-19 13:56:45 UTC
          • Subject
            • C: RU
            • ST: Perm Krai
            • L: Perm
            • O: MCsoft
            • CN: MCsoft
          • #5
            • rsaEncryption: nil
            • C0:43:F9:83:60:C7:4E:4C:E2:FF:5C:86:CD:FB:BC:D9:
              15:AD:D0:33:BD:3C:15:71:82:38:5B:54:1F:EC:05:1C:
              C2:33:85:92:1A:C8:CB:2E:FE:7D:8E:76:48:F3:AB:22:
              C6:23:50:D6:FF:46:6E:CD:9C:08:BE:20:02:AA:0A:30:
              8A:A4:63:62:DB:17:B3:9D:8F:CA:B0:E4:50:E4:8D:D6:
              86:48:AB:8D:AC:90:86:00:9F:8A:BC:7A:6D:BB:55:91:
              43:0C:21:9F:EE:FD:41:81:DC:35:05:8D:5D:EE:52:FC:
              15:E7:7A:E8:E8:6C:2A:19:64:85:F6:2B:F0:6C:AD:55:
              FF:6C:76:96:85:6B:0F:CB:1A:D7:7F:BF:90:51:B3:03:
              BF:AD:A2:66:45:AF:35:59:8F:F0:33:89:C5:5F:C4:DF:
              A7:7E:79:31:70:B6:D4:F4:7A:53:E3:5A:D8:89:6D:CF:
              2F:DB:A9:C5:9E:77:F7:DD:F6:91:D1:10:9E:BD:1B:8B:
              D3:9A:02:07:F2:2A:27:59:C6:33:1B:E4:DA:E2:12:EF:
              0C:87:67:EA:EF:BC:61:67:81:D6:73:38:DD:A7:80:93:
              F4:89:DB:FF:4D:1B:BE:12:B3:EB:64:CA:DC:80:FF:E2:
              1A:5E:A3:3B:C5:DF:11:03:4A:D9:EB:25:B8:E4:41:D5              : 0x010001
          • #6
            • keyUsage: true, 0x80
            • authorityInfoAccess
              • #0
                • caIssuers: http://secure.globalsign.com/cacert/gscodesignsha2g3ocsp.crt
                • OCSP: http://ocsp2.globalsign.com/gscodesignsha2g3
            • certificatePolicies
              • #0
                • 1.3.6.1.4.1.4146.1.50
                  • id-qt-cps: https://www.globalsign.com/repository/
                • 2.23.140.1.4.1
            • basicConstraints
              • nil
            • crlDistributionPoints: http://crl.globalsign.com/gscodesignsha2g3.crl
            • extendedKeyUsage: codeSigning
            • subjectKeyIdentifier: 
              e9 f0 b9 e1 e2 a1 ff ae  88 35 68 ca 1d d9 58 fb  |.........5h...X.|
cc 63 67 7d                                       |.cg}            |
            • authorityKeyIdentifier: 
              0f 3a e7 ac 94 91 74 2d  96 02 73 83 ad 9c 2e 49  |.:....t-..s....I|
3f 19 aa 54                                       |?..T            |
        • RSA-SHA256: 
          2a ab ab b8 b5 f9 95 1c  16 75 40 3e 5d e4 9c 62  |*........u@>]..b|
b8 ef 16 f4 f4 43 54 60  f2 ce 21 fc 8c c8 1d 20  |.....CT`..!.... |
79 52 e6 7b 89 78 f3 96  ee 00 cf 28 8c 8b 8c a5  |yR.{.x.....(....|
4c 66 db 78 97 0f 32 27  b1 b1 eb a1 9c de 86 36  |Lf.x..2'.......6|
cb f7 55 2f 3c 76 fb 3d  b1 79 45 e4 0a 5d 58 2b  |..U/
    • Signer
      • 1
      • unnamed
        • #0
          • C: BE
          • O: GlobalSign nv-sa
          • CN: GlobalSign CodeSigning CA - SHA256 - G3
        • 55:1A:07:B8:8D:6A:1C:BD:02:1D:FF:CD
      • SHA1: nil
      • #3
        • 1.3.6.1.4.1.311.2.1.12
          • nil
        • contentType: 1.3.6.1.4.1.311.2.1.4
        • 1.3.6.1.4.1.311.2.1.11: msCodeInd
        • messageDigest: 
          10 2f 1e 6e 11 23 c9 27  39 12 e7 08 1a 1d aa 80  |./.n.#.'9.......|
ae 71 ba 52                                       |.q.R            |
      • rsaEncryption: 
        74 f5 dc 49 0a f6 e0 67  0a 3d 9b 9b 3e a9 a9 5a  |t..I...g.=..>..Z|
98 dd f9 d0 fb 52 c1 21  88 5b d7 35 3b d6 7e 98  |.....R.!.[.5;.~.|
15 34 bd 72 ed 7b 42 53  3e 56 26 9f c8 19 37 39  |.4.r.{BS>V&...79|
05 e3 f6 c9 54 fc a8 46  64 58 5e 1d 01 1e 0b e9  |....T..FdX^.....|
41 dc 2f a9 cf 88 36 5b  78 c5 1d d8 05 03 90 7e  |A./...6[x......~|
66 2e 5a 2c b5 11 8b b9  40 6d 10 da 54 28 b1 28  |f.Z,....@m..T(.(|
73 75 df 72 55 b1 d3 91  7c 38 da 10 9f ba 0c 97  |su.rU...|8......|
98 18 c1 5d 69 ad 51 a2  51 d0 06 45 2b 8a 37 1d  |...]i.Q.Q..E+.7.|
66 7a 08 3b 6f cc c5 86  c9 61 a5 92 ec 2c ba 43  |fz.;o....a...,.C|
28 a6 69 4a 22 98 14 18  88 99 ae 40 d8 34 39 9a  |(.iJ"......@.49.|
30 de c8 dc 2b 2d 3a 08  0f 85 33 7b bc 07 62 0f  |0...+-:...3{..b.|
cf 40 88 4d b0 e1 ec 5b  8f 1a 9f b4 28 e6 99 af  |.@.M...[....(...|
fe 8a 85 86 31 2d aa f8  8e 5f 27 3b 3a 68 a9 56  |....1-..._';:h.V|
09 40 9d 3d 67 ae c6 ee  82 6d 87 f5 6d 46 57 a3  |.@.=g....m..mFW.|
93 4d 49 e2 ab 85 0e c5  29 ce d1 22 99 cf da a9  |.MI.....).."....|
85 5e 02 01 0b ae ee 02  1b a1 00 5c 3d ae c8 ec  |.^.........\=...|
      • 1.3.6.1.4.1.311.3.3.1
        • pkcs7-signedData
          • 3
            • SHA256: nil
            • id-smime-ct-TSTInfo
              • 1
                • 1.3.6.1.4.1.4146.2.3
                • SHA256
                  • 9f c0 f5 7b ee 3f a5 9f  a8 35 c7 f6 10 44 02 2d  |...{.?...5...D.-|
a8 7a 36 d6 29 96 f3 1c  1c 4a 1d 78 11 3c ca 9f  |.z6.)....J.x.<..|
                • 21:27:4A:26:6D:FF:DB:D7:47:0C:BE:6F:DB:B6:0E:8D:
                  31:78:8D:B0
                • 2020-01-29 16:10:19 UTC
                • CN: GlobalSign TSA for Advanced - G2
            • unnamed
              • Certificate #0
                • 2
                  • 0C:A7:CF:5D:07:07:24:AC:89:E7:9A:3A
                  • RSA-SHA256: nil
                  • Issuer
                    • C: BE
                    • O: GlobalSign nv-sa
                    • CN: GlobalSign Timestamping CA - SHA256 - G2
                  • 2018-02-19 00:00:00 UTC: 2029-03-18 10:00:00 UTC
                  • CN: GlobalSign TSA for Advanced - G2
                  • #5
                    • rsaEncryption: nil
                    • B7:C7:92:8A:28:D8:F3:91:CB:50:0D:5D:EB:29:44:C1:
                      82:59:A5:CA:64:CE:BD:83:B5:51:E5:94:CC:6E:80:9A:
                      17:6C:DC:FF:62:E6:36:43:5E:01:C2:0C:64:8D:CA:77:
                      9E:F6:5D:77:45:B9:5E:C8:24:EB:41:37:11:66:37:AC:
                      C8:CD:74:9B:CC:B3:EF:4C:E2:7F:1B:CE:73:BE:C9:96:
                      9D:35:1E:7C:F7:54:F7:6C:EC:A0:12:D6:AE:99:9D:63:
                      C4:78:5F:59:A9:2E:22:F5:C3:27:D8:B2:5B:45:63:27:
                      90:FF:8C:B1:3D:A9:B4:F3:0E:C0:F1:20:65:06:89:9D:
                      03:1C:A3:B0:52:41:85:34:EB:BC:CB:CE:54:F6:12:FE:
                      B3:01:89:4A:A6:FA:54:C5:1F:FB:D3:1C:C0:E3:BF:97:
                      E3:3F:D0:1B:F9:40:C7:1B:D5:EB:26:7C:43:30:C7:70:
                      F2:78:11:AA:85:4E:A5:0E:0D:00:4A:3A:11:77:A3:CA:
                      23:01:80:9E:C8:93:56:5D:46:CC:8A:D8:D2:AA:0A:84:
                      85:B2:89:5B:D5:32:CE:41:7B:18:4E:54:CA:AB:D1:52:
                      5E:12:D3:24:9E:56:F3:0C:8F:DD:BD:92:8E:79:D5:41:
                      89:C3:A3:A0:E5:91:FC:C7:67:9D:87:33:CE:71:32:73                      : 0x010001
                  • #6
                    • keyUsage: true, 0x80
                    • certificatePolicies
                      • 1.3.6.1.4.1.4146.1.30
                        • id-qt-cps: https://www.globalsign.com/repository/
                    • basicConstraints
                      • nil
                    • extendedKeyUsage: true, timeStamping
                    • crlDistributionPoints: http://crl.globalsign.com/gs/gstimestampingsha2g2.crl
                    • authorityInfoAccess
                      • #0
                        • caIssuers: http://secure.globalsign.com/cacert/gstimestampingsha2g2.crt
                        • OCSP: http://ocsp2.globalsign.com/gstimestampingsha2g2
                    • subjectKeyIdentifier: 
                      2d 6e 6e d1 8d e5 03 80  ee e7 63 e9 a7 d9 da 0b  |-nn.......c.....|
3c 57 22 3d                                       |
                    • authorityKeyIdentifier: 
                      92 21 a7 4a 95 5d 64 b0  9b b4 1e e6 00 37 47 e6  |.!.J.]d......7G.|
9d 41 2b 4c                                       |.A+L            |
                • RSA-SHA256: 
                  8d fd 1d 1f 8f 88 d3 65  f8 b5 5c 46 e9 a7 d3 b6  |.......e..\F....|
3f 4a cb 43 05 c2 07 0d  c3 5e 03 84 23 37 a8 7a  |?J.C.....^..#7.z|
8c 97 23 ff 27 9c 84 7d  61 eb 5c 4b 57 3e 9b f4  |..#.'..}a.\KW>..|
44 db 80 58 f7 b6 65 de  8f 12 0a 5f a7 87 74 b7  |D..X..e...._..t.|
da 14 40 87 51 ec 9f 4a  47 55 f0 17 e8 18 3e 71  |..@.Q..JGU....>q|
20 31 e6 28 22 ab 4e f6  ae 9c 6b c2 e7 44 fb 68  | 1.(".N...k..D.h|
0d 20 7f 53 3f 94 1b a1  86 82 4e 32 16 10 5a 3f  |. .S?.....N2..Z?|
89 58 c1 d0 b4 db b6 90  fb 8d 32 e9 a1 4b 46 50  |.X........2..KFP|
37 b6 c3 3a e9 29 24 12  92 5a 4e 2b b9 b6 0a 7a  |7..:.)$..ZN+...z|
36 8c 97 c0 ef 89 7c 33  de 31 e1 a1 97 e4 e7 45  |6.....|3.1.....E|
ad 61 52 fd 5a 89 d3 54  7e 8a 4d 5b 89 7b 0e 96  |.aR.Z..T~.M[.{..|
77 d1 f2 3c 38 1b da f9  a5 61 20 65 02 bc c5 ad  |w..<8....a e....|
d7 0c 62 10 28 2c dd b6  e3 a8 61 00 ac 08 26 a3  |..b.(,....a...&.|
8d 85 d0 64 c9 36 90 1e  8a 52 c9 87 8d 35 a5 5d  |...d.6...R...5.]|
48 91 fc 93 a6 a5 65 f1  ec f9 3a dc a5 2c 9e 04  |H.....e...:..,..|
6d 62 33 fe de fa 9f c5  ce af 95 f3 51 a8 f2 ce  |mb3.........Q...|
              • #1
                • 2
                  • 04:00:00:00:00:01:31:89:C6:50:04
                  • RSA-SHA256: nil
                  • #2
                    • OU: GlobalSign Root CA - R3
                    • O: GlobalSign
                    • CN: GlobalSign
                  • 2011-08-02 10:00:00 UTC: 2029-03-29 10:00:00 UTC
                  • Subject
                    • C: BE
                    • O: GlobalSign nv-sa
                    • CN: GlobalSign Timestamping CA - SHA256 - G2
                  • #5
                    • rsaEncryption: nil
                    • AA:9B:8E:C3:AB:11:51:25:01:B6:96:94:E2:4F:D8:C1:
                      08:F6:46:23:D9:45:C5:95:97:5B:AB:1A:BF:D2:6C:57:
                      C9:33:06:1F:A0:0F:C6:3C:7E:53:48:7A:BF:9D:87:9E:
                      AF:EE:C3:8C:47:E1:42:EC:E3:E3:A1:4A:6C:0C:17:C4:
                      A6:C1:B9:CD:5B:F1:1E:44:89:8E:FE:0B:DE:21:58:13:
                      EE:4D:C8:C5:67:0B:1C:B2:B3:F1:34:76:91:A2:CB:07:
                      6D:37:C5:A0:47:26:02:15:A4:90:91:A9:79:9E:D7:EB:
                      57:9D:2B:7C:22:D8:14:D7:F1:07:1E:78:22:36:6B:77:
                      79:AF:AF:F9:7F:8E:4E:E1:B5:08:31:FD:EA:ED:4B:71:
                      62:8C:23:F1:03:39:8F:44:79:B6:76:03:57:9E:AD:2F:
                      08:46:DC:D2:8C:BC:F4:8E:74:CE:C8:68:69:51:76:11:
                      8B:0F:5D:24:5B:19:54:3D:26:CC:40:8D:82:27:1B:59:
                      20:7D:59:F6:93:80:8E:F8:2A:38:FD:6B:A0:40:65:1F:
                      57:76:CC:5B:8E:04:4F:2C:A8:DB:84:50:13:4F:C6:DC:
                      8B:B9:F8:DD:69:4C:88:EB:9C:7B:30:26:FC:7A:58:BB:
                      59:BC:14:72:92:81:57:B7:76:C9:D8:80:0A:80:6E:09                      : 0x010001
                  • #6
                    • keyUsage: true, 6
                    • basicConstraints
                      • true
                      • true: 0
                    • subjectKeyIdentifier: 
                      92 21 a7 4a 95 5d 64 b0  9b b4 1e e6 00 37 47 e6  |.!.J.]d......7G.|
9d 41 2b 4c                                       |.A+L            |
                    • certificatePolicies
                      • anyPolicy
                        • id-qt-cps: https://www.globalsign.com/repository/
                    • crlDistributionPoints: http://crl.globalsign.net/root-r3.crl
                    • authorityKeyIdentifier: 
                      8f f0 4b 7f a8 2e 45 24  ae 4d 50 fa 63 9a 8b de  |..K...E$.MP.c...|
e2 dd 1b bc                                       |....            |
                • RSA-SHA256: 
                  04 56 82 4a 7c d0 ce c9  bf 36 66 d1 be 35 9e 93  |.V.J|....6f..5..|
6c 97 e8 06 ce 31 18 59  f9 6c 41 5f 80 2e c0 42  |l....1.Y.lA_...B|
25 b8 18 c7 fc d4 b1 37  c4 68 a0 cf 28 6a 03 74  |%......7.h..(j.t|
4b 63 97 85 77 61 3b d7  2f e3 f5 bd 33 a2 92 7d  |Kc..wa;./...3..}|
11 1f 9e 8a 6c ef 2c b0  f4 62 8d 36 73 d1 16 36  |....l.,..b.6s..6|
f1 bc 5e ec b4 80 98 78  fc d2 76 79 e8 e1 21 94  |..^....x..vy..!.|
e0 1f c4 a2 e1 aa 67 db  b3 9c 73 e5 40 22 cf 39  |......g...s.@".9|
ce db e6 77 95 a7 bb b2  cb f6 19 86 9d 9f c8 d4  |...w............|
98 05 b2 71 6f 4e 75 ae  f1 3d 64 6a 3b 5e 4e 46  |...qoNu..=dj;^NF|
a6 2a 5d 08 92 f1 a3 f3  1d 74 bf 62 0d 23 8c 5c  |.*]......t.b.#.\|
2a 38 95 d2 c0 d5 cd cf  88 da 1f 28 b5 ba 81 69  |*8.........(...i|
64 2a b5 a6 a2 d5 73 af  dc 46 db 04 ae 91 d7 6e  |d*....s..F.....n|
c5 98 ba d4 47 c4 56 74  80 47 78 58 8c be ef 2b  |....G.Vt.GxX...+|
fd ec 6c bf d1 94 f7 bf  50 e0 7b e0 90 fd 20 18  |..l.....P.{... .|
78 18 22 5d 08 2e 8c 1c  a0 97 f3 1d 99 7d a3 9d  |x."].........}..|
91 d3 06 44 4e 04 6e 7a  1c 20 e3 36 f0 b6 50 b9  |...DN.nz. .6..P.|
            • 1
              • unnamed
                • #0
                  • C: BE
                  • O: GlobalSign nv-sa
                  • CN: GlobalSign Timestamping CA - SHA256 - G2
                • 0C:A7:CF:5D:07:07:24:AC:89:E7:9A:3A
              • SHA256: nil
              • #2
                • contentType: id-smime-ct-TSTInfo
                • signingTime: 2020-01-29 16:10:19 UTC
                • messageDigest: 
                  d0 0e 32 3e 94 1e c3 1a  1a bf ac 88 a0 a9 46 90  |..2>..........F.|
a5 64 0b fd 5d 89 1a ac  2d ee 5a f2 e6 8b 46 c9  |.d..]...-.Z...F.|
                • id-smime-aa-signingCertificate
                  • 05 7a e7 2a af f6 d6 37  72 b4 9f 6a 23 6f 26 49  |.z.*...7r..j#o&I|
cd a9                                             |..              |
                    • unnamed
                      • #0
                        • C: BE
                        • O: GlobalSign nv-sa
                        • CN: GlobalSign Timestamping CA - SHA256 - G2
                      • 0C:A7:CF:5D:07:07:24:AC:89:E7:9A:3A
              • rsaEncryption: 
                15 d5 07 f2 ea 63 67 75  12 e4 2c c7 e8 1c 35 41  |.....cgu..,...5A|
8f 50 3e dd 33 15 a7 c4  b8 da a8 57 79 29 58 97  |.P>.3......Wy)X.|
25 d5 ac 3c 8b d0 9b 9f  03 7b e5 a0 cd 0f f7 50  |%..<.....{.....P|
fc a9 04 38 b3 05 ef 0b  48 1b 45 16 a1 3b 6c 64  |...8....H.E..;ld|
2d b9 a0 59 20 83 c6 db  9c d9 27 9b 88 9b 95 1f  |-..Y .....'.....|
9d f0 e5 b9 33 89 a2 1c  47 56 39 20 fa 67 2f c6  |....3...GV9 .g/.|
ae 78 98 36 c1 70 f4 40  83 30 53 52 e3 fe 69 61  |.x.6.p.@.0SR..ia|
7a 5c 21 34 82 e0 83 e6  4b 93 ac 3e f4 bd 84 d6  |z\!4....K..>....|
77 4d 6b 72 42 07 12 04  bc e0 57 db 41 63 d0 7f  |wMkrB.....W.Ac..|
f3 71 2c f2 56 d1 3e d7  3e b6 2d 68 c3 dc 83 bf  |.q,.V.>.>.-h....|
96 7b 15 dc 2f 80 83 f3  ad ee c2 63 2c 57 72 a1  |.{../......c,Wr.|
da b6 68 b2 7f 53 57 84  ac d8 78 58 5f 1a 91 39  |..h..SW...xX_..9|
8f 2a 31 82 9f 6b f6 73  e8 73 09 bc eb 90 67 7a  |.*1..k.s.s....gz|
b1 ed 1e 31 85 10 e7 cf  8f 84 f3 93 43 fc 3d 26  |...1........C.=&|
51 10 26 21 9c 63 08 fd  47 35 a3 d3 30 1c 02 58  |Q.&!.c..G5..0..X|
a9 2c 6a 05 05 c1 8f 8e  cf f1 c7 56 9f 06 cb 9b  |.,j........V....|
offsetsizetypecomment
02299392EXE01/29/2020 16:10:18#
15c115HTM#
2316006264PKCS7Authenticode Signature#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable







everything is OK