| filename | swf_player.exe | |
|---|---|---|
| size | 1973632 (0x1e1d80) | |
| md5 | 8e17ce39477b1ba5f87d26b304c41502 | |
| type | PE32 executable (GUI) Intel 80386, for MS Windows | |
| mimetype | application/x-dosexec | |
| clamav | OK | |
| virustotal | → scan with virustotal.com | |
| histogram | ||
MZ Header
| signature | MZ |
| bytes_in_last_block | 0x50 |
| blocks_in_file | 2 |
| num_relocs | 0 |
| header_paragraphs | 4 |
| min_extra_paragraphs | 0xf |
| max_extra_paragraphs | 0xffff |
| ss | 0 |
| sp | 0xb8 |
| checksum | 0 |
| ip | 0 |
| cs | 0 |
| reloc_table_offset | 0x40 |
| overlay_number | 0x1a |
| reserved0 | 0 |
| oem_id | 0 |
| oem_info | 0 |
| reserved2 | 0 |
| reserved3 | 0 |
| reserved4 | 0 |
| reserved5 | 0x4c10 |
| reserved6 | 0xffffb3ef |
| lfanew | 0x100 |
DOS stub
00000000: ba 10 00 0e 1f b4 09 cd 21 b8 01 4c cd 21 90 90 |........!..L.!..| 00000010: 54 68 69 73 20 70 72 6f 67 72 61 6d 20 6d 75 73 |This program mus| 00000020: 74 20 62 65 20 72 75 6e 20 75 6e 64 65 72 20 57 |t be run under W| 00000030: 69 6e 33 32 0d 0a 24 37 00 00 00 00 00 00 00 00 |in32..$7........| 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| * 000000c0:
PE Header
Packer / Compiler
Sections
Data Directory
TLS
| raw start | raw end | index | callbks | zero fill | flags | |
|---|---|---|---|---|---|---|
| 0xb52000 | 0xb520cc | 0x5bf794 | 0xb53010 | 0 | 0 |
| module_name | hint | ord | function_name |
|---|---|---|---|
| KERNEL32.dll | 403 | GlobalUnlock | |
| KERNEL32.dll | 396 | GlobalLock | |
| KERNEL32.dll | 385 | GlobalAlloc | |
| KERNEL32.dll | 365 | GetTickCount | |
| KERNEL32.dll | 722 | WideCharToMultiByte | |
| KERNEL32.dll | 437 | IsBadReadPtr | |
| KERNEL32.dll | 383 | GlobalAddAtomA | |
| KERNEL32.dll | 384 | GlobalAddAtomW | |
| KERNEL32.dll | 294 | GetModuleHandleA | |
| KERNEL32.dll | 392 | GlobalFree | |
| KERNEL32.dll | 393 | GlobalGetAtomNameA | |
| KERNEL32.dll | 387 | GlobalDeleteAtom | |
| KERNEL32.dll | 394 | GlobalGetAtomNameW | |
| KERNEL32.dll | 177 | FreeConsole | |
| KERNEL32.dll | 265 | GetEnvironmentVariableA | |
| KERNEL32.dll | 707 | VirtualProtect | |
| KERNEL32.dll | 699 | VirtualAlloc | |
| KERNEL32.dll | 318 | GetProcAddress | |
| KERNEL32.dll | 282 | GetLastError | |
| KERNEL32.dll | 450 | LoadLibraryA | |
| KERNEL32.dll | 625 | SetLastError | |
| KERNEL32.dll | 647 | SetThreadPriority | |
| KERNEL32.dll | 249 | GetCurrentThread | |
| KERNEL32.dll | 68 | CreateProcessA | |
| KERNEL32.dll | 202 | GetCommandLineA | |
| KERNEL32.dll | 336 | GetStartupInfoA | |
| KERNEL32.dll | 610 | SetEnvironmentVariableA | |
| KERNEL32.dll | 549 | ReleaseMutex | |
| KERNEL32.dll | 718 | WaitForSingleObject | |
| KERNEL32.dll | 63 | CreateMutexA | |
| KERNEL32.dll | 493 | OpenMutexA | |
| KERNEL32.dll | 250 | GetCurrentThreadId | |
| KERNEL32.dll | 27 | CloseHandle | |
| KERNEL32.dll | 536 | ReadFile | |
| KERNEL32.dll | 274 | GetFileSize | |
| KERNEL32.dll | 52 | CreateFileA | |
| KERNEL32.dll | 144 | FindClose | |
| KERNEL32.dll | 148 | FindFirstFileA | |
| KERNEL32.dll | 151 | FindFirstFileW | |
| KERNEL32.dll | 711 | VirtualQueryEx | |
| KERNEL32.dll | 267 | GetExitCodeProcess | |
| KERNEL32.dll | 540 | ReadProcessMemory | |
| KERNEL32.dll | 37 | ContinueDebugEvent | |
| KERNEL32.dll | 643 | SetThreadContext | |
| KERNEL32.dll | 359 | GetThreadContext | |
| KERNEL32.dll | 715 | WaitForDebugEvent | |
| KERNEL32.dll | 664 | SuspendThread | |
| KERNEL32.dll | 74 | CreateThread | |
| KERNEL32.dll | 556 | ResumeThread | |
| KERNEL32.dll | 69 | CreateProcessW | |
| KERNEL32.dll | 203 | GetCommandLineW | |
| KERNEL32.dll | 337 | GetStartupInfoW | |
| KERNEL32.dll | 470 | MapViewOfFile | |
| KERNEL32.dll | 99 | DuplicateHandle | |
| KERNEL32.dll | 247 | GetCurrentProcess | |
| KERNEL32.dll | 53 | CreateFileMappingA | |
| KERNEL32.dll | 708 | VirtualProtectEx | |
| KERNEL32.dll | 745 | WriteProcessMemory | |
| KERNEL32.dll | 125 | ExitProcess | |
| KERNEL32.dll | 33 | CompareStringA | |
| KERNEL32.dll | 170 | FlushFileBuffers | |
| KERNEL32.dll | 448 | LCMapStringW | |
| KERNEL32.dll | 447 | LCMapStringA | |
| KERNEL32.dll | 636 | SetStdHandle | |
| KERNEL32.dll | 305 | GetOEMCP | |
| KERNEL32.dll | 185 | GetACP | |
| KERNEL32.dll | 191 | GetCPInfo | |
| KERNEL32.dll | 342 | GetStringTypeW | |
| KERNEL32.dll | 339 | GetStringTypeA | |
| KERNEL32.dll | 34 | CompareStringW | |
| KERNEL32.dll | 484 | MultiByteToWideChar | |
| KERNEL32.dll | 618 | SetFilePointer | |
| KERNEL32.dll | 418 | HeapReAlloc | |
| KERNEL32.dll | 735 | WriteFile | |
| KERNEL32.dll | 703 | VirtualFree | |
| KERNEL32.dll | 411 | HeapCreate | |
| KERNEL32.dll | 413 | HeapDestroy | |
| KERNEL32.dll | 277 | GetFileType | |
| KERNEL32.dll | 338 | GetStdHandle | |
| KERNEL32.dll | 621 | SetHandleCount | |
| KERNEL32.dll | 264 | GetEnvironmentStringsW | |
| KERNEL32.dll | 262 | GetEnvironmentStrings | |
| KERNEL32.dll | 179 | FreeEnvironmentStringsW | |
| KERNEL32.dll | 178 | FreeEnvironmentStringsA | |
| KERNEL32.dll | 685 | UnhandledExceptionFilter | |
| KERNEL32.dll | 415 | HeapFree | |
| KERNEL32.dll | 409 | HeapAlloc | |
| KERNEL32.dll | 372 | GetVersion | |
| KERNEL32.dll | 283 | GetLocalTime | |
| KERNEL32.dll | 349 | GetSystemTime | |
| KERNEL32.dll | 368 | GetTimeZoneInformation | |
| KERNEL32.dll | 559 | RtlUnwind | |
| KERNEL32.dll | 670 | TerminateProcess | |
| KERNEL32.dll | 662 | Sleep | |
| KERNEL32.dll | 102 | EnterCriticalSection | |
| KERNEL32.dll | 449 | LeaveCriticalSection | |
| KERNEL32.dll | 373 | GetVersionExA | |
| KERNEL32.dll | 426 | InitializeCriticalSection | |
| KERNEL32.dll | 248 | GetCurrentProcessId | |
| KERNEL32.dll | 293 | GetModuleFileNameW | |
| KERNEL32.dll | 335 | GetShortPathNameW | |
| KERNEL32.dll | 292 | GetModuleFileNameA | |
| KERNEL32.dll | 80 | DebugActiveProcess | |
| KERNEL32.dll | 334 | GetShortPathNameA | |
| USER32.dll | 255 | GetDesktopWindow | |
| USER32.dll | 457 | MoveWindow | |
| USER32.dll | 578 | SetPropA | |
| USER32.dll | 205 | EnumThreadWindows | |
| USER32.dll | 314 | GetPropA | |
| USER32.dll | 298 | GetMessageA | |
| USER32.dll | 12 | BeginPaint | |
| USER32.dll | 187 | EndPaint | |
| USER32.dll | 405 | KillTimer | |
| USER32.dll | 227 | GetAsyncKeyState | |
| USER32.dll | 326 | GetSystemMetrics | |
| USER32.dll | 594 | SetTimer | |
| USER32.dll | 606 | SetWindowTextA | |
| USER32.dll | 258 | GetDlgItem | |
| USER32.dll | 76 | CreateDialogIndirectParamA | |
| USER32.dll | 618 | ShowWindow | |
| USER32.dll | 657 | UpdateWindow | |
| USER32.dll | 427 | LoadStringA | |
| USER32.dll | 428 | LoadStringW | |
| USER32.dll | 213 | FindWindowA | |
| USER32.dll | 676 | WaitForInputIdle | |
| USER32.dll | 142 | DestroyWindow | |
| USER32.dll | 446 | MessageBoxA | |
| USER32.dll | 367 | InSendMessage | |
| USER32.dll | 650 | UnpackDDElParam | |
| USER32.dll | 220 | FreeDDElParam | |
| USER32.dll | 132 | DefWindowProcA | |
| USER32.dll | 410 | LoadCursorA | |
| USER32.dll | 501 | RegisterClassW | |
| USER32.dll | 90 | CreateWindowExW | |
| USER32.dll | 498 | RegisterClassA | |
| USER32.dll | 89 | CreateWindowExA | |
| USER32.dll | 354 | GetWindowThreadProcessId | |
| USER32.dll | 532 | SendMessageA | |
| USER32.dll | 476 | PeekMessageA | |
| USER32.dll | 642 | TranslateMessage | |
| USER32.dll | 149 | DispatchMessageA | |
| USER32.dll | 208 | EnumWindows | |
| USER32.dll | 401 | IsWindowUnicode | |
| USER32.dll | 474 | PackDDElParam | |
| USER32.dll | 479 | PostMessageW | |
| USER32.dll | 478 | PostMessageA | |
| USER32.dll | 399 | IsWindow | |
| USER32.dll | 537 | SendMessageW | |
| GDI32.dll | 80 | DeleteDC | |
| GDI32.dll | 428 | RealizePalette | |
| GDI32.dll | 456 | SelectPalette | |
| GDI32.dll | 43 | CreateDCA | |
| GDI32.dll | 66 | CreatePalette | |
| GDI32.dll | 83 | DeleteObject | |
| GDI32.dll | 17 | BitBlt | |
| GDI32.dll | 455 | SelectObject | |
| GDI32.dll | 42 | CreateCompatibleDC | |
| GDI32.dll | 48 | CreateDIBitmap |
StringTable 040904E4
| CompanyName | Eltima Software |
| FileDescription | SWF & FLV Movie player |
| FileVersion | 3.0.33.5106 |
| InternalName | swf_player |
| LegalCopyright | Eltima Software |
| LegalTrademarks | Eltima Software |
| OriginalFilename | swf_player.exe |
| ProductName | SWF & FLV Movie Player |
| ProductVersion | 3.0 |
| Comments |
VS_FIXEDFILEINFO
| FileVersion | 3.0.33.5106 |
| ProductVersion | 3.0.33.5106 |
| StrucVersion | 0x10000 |
| FileFlagsMask | 0x3f |
| FileFlags | 0 |
| FileOS | 4 |
| FileType | 1 |
| FileSubtype | 0 |
Signers (1)
issuer: /C=BE/O=GlobalSign nv-sa/OU=ObjectSign CA/CN=GlobalSign ObjectSign CA
serial: 01000000000110A156753B
Certificates (3)
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:00:00:00:00:01:10:a1:56:75:3b
Signature Algorithm: sha1WithRSAEncryption
Issuer: C=BE, O=GlobalSign nv-sa, OU=ObjectSign CA, CN=GlobalSign ObjectSign CA
Validity
Not Before: Feb 8 12:31:42 2007 GMT
Not After : Feb 8 12:31:42 2008 GMT
Subject: C=DE, O=Eltima Software, CN=Eltima Software/emailAddress=sales@eltima.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (1024 bit)
Modulus:
00:c3:52:5c:bd:53:8e:b9:a5:0b:0e:75:92:49:4d:
c3:65:d7:dd:50:06:db:fa:7a:74:d8:32:46:af:0d:
3f:fd:c3:e5:0b:7a:3e:ac:cb:05:94:0d:b6:73:d7:
0e:67:8f:60:9b:c1:71:72:97:f7:24:ba:19:1d:f0:
17:21:a0:6d:29:c3:e9:2d:7f:45:b3:68:23:9a:d0:
91:7d:23:50:c3:2c:7e:f1:dc:27:0c:a8:5a:0a:26:
9d:e6:84:ef:22:8b:30:65:aa:ff:1c:43:31:d7:2d:
96:89:b5:e5:d5:bc:63:82:90:50:08:08:73:15:bd:
88:f7:2c:16:27:0a:d6:d0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
Netscape Cert Type:
Object Signing
X509v3 Key Usage: critical
Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment
X509v3 Authority Key Identifier:
D2:5B:F3:4B:26:4B:A5:B0:E7:5D:FD:56:7F:F6:F1:2E:38:4E:53:A0
X509v3 CRL Distribution Points:
Full Name:
URI:http://crl.globalsign.net/ObjectSign.crl
Signature Algorithm: sha1WithRSAEncryption
Signature Value:
98:83:10:1d:b0:8f:f8:5b:2c:f0:51:8b:93:78:74:ac:1a:47:
f1:0b:e6:1b:fc:e7:fe:dc:2d:3b:3c:a4:8c:4e:56:39:20:4c:
e8:e3:8b:e7:1a:2b:09:7a:6a:e1:65:e3:e4:d4:a0:ee:e4:ff:
ab:34:a2:91:5f:de:1f:c7:63:f4:2d:3e:19:5f:1b:17:b8:52:
5d:7a:28:d0:04:c4:75:38:5f:c3:62:9e:03:5b:fc:bf:fe:7c:
97:0d:08:ef:bd:a3:35:0c:0e:61:3d:c1:33:3c:c1:f1:19:e8:
90:de:d1:6d:2b:8b:bd:cb:29:eb:a0:ba:0c:48:ca:23:d1:b3:
9d:db:40:26:5e:90:17:ee:f1:db:63:b0:92:2c:49:82:ed:33:
2a:89:0e:46:9e:3f:75:0b:a7:06:b4:df:72:b7:ea:91:2a:e3:
ab:03:3e:65:37:61:ee:5c:1d:1a:a7:15:2d:c4:d2:52:7f:b5:
da:30:f5:89:11:41:e6:87:e1:5e:ec:3e:0f:71:76:4b:f5:6f:
66:75:d1:1e:25:c0:34:9a:1f:a6:df:bd:38:7f:7e:16:c9:f8:
96:79:e6:0c:49:69:2a:27:b3:e4:4d:27:fd:e6:85:f1:5e:31:
5c:de:67:c8:95:a3:75:5c:43:70:d2:b9:06:8a:e8:d2:d9:73:
21:18:cf:f5
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:00:00:00:00:01:08:d9:61:1c:d6
Signature Algorithm: sha1WithRSAEncryption
Issuer: C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA
Validity
Not Before: Jan 28 12:00:00 1999 GMT
Not After : Jan 27 11:00:00 2014 GMT
Subject: C=BE, O=GlobalSign nv-sa, OU=Primary Object Publishing CA, CN=GlobalSign Primary Object Publishing CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:a2:9b:75:2a:a7:13:ba:09:71:24:18:df:a1:06:
62:29:12:9e:dc:9e:75:73:e8:df:56:57:69:96:13:
56:4f:f2:c8:bc:01:58:ed:26:86:72:0b:60:f5:19:
c5:55:03:57:9b:b9:10:c9:a1:d4:74:40:ff:6c:00:
e8:e6:53:37:fe:b7:da:79:3e:b8:52:38:e9:81:2c:
9f:0e:33:52:a6:cd:70:ce:4a:5d:62:f4:d1:67:5e:
bc:97:4a:07:ca:bc:dd:8d:47:b1:cd:f1:65:5b:85:
01:b0:4b:6b:de:cd:8e:2e:f5:50:e8:a3:9c:9d:26:
98:6b:36:63:41:03:70:44:f0:5f:e2:25:75:79:50:
7d:5f:a1:06:a2:46:0c:55:95:47:14:d3:91:46:86:
68:99:e7:27:f4:94:ec:9a:41:51:f7:96:d4:7a:8c:
e1:44:97:68:71:03:d8:58:6f:bd:b4:10:42:ee:0d:
66:75:46:8b:44:96:d2:30:00:12:07:63:f7:44:9b:
01:70:ca:56:6f:9c:58:97:2a:27:17:8b:2e:71:52:
6d:46:ab:a7:2b:0f:7f:16:48:64:c8:52:fa:06:17:
00:07:74:d7:45:b3:0c:f5:78:95:73:e8:0a:ee:c4:
e0:72:8c:1e:11:aa:1e:bb:5e:ce:f9:b4:00:ee:73:
bd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
15:51:79:1A:7C:0C:59:F9:DA:CD:D8:C4:3A:13:9A:C9:78:2D:7F:4D
X509v3 CRL Distribution Points:
Full Name:
URI:http://crl.globalsign.net/Root.crl
X509v3 Authority Key Identifier:
60:7B:66:1A:45:0D:97:CA:89:50:2F:7D:04:CD:34:A8:FF:FC:FD:4B
Signature Algorithm: sha1WithRSAEncryption
Signature Value:
a0:42:2e:b8:76:a7:42:71:86:40:4d:46:4d:5b:26:b0:b0:74:
f9:3f:89:a8:7b:7c:b7:f1:c6:97:e0:82:39:99:9d:43:fe:60:
82:36:42:b5:5b:87:8d:f5:5d:f4:bb:ff:a9:10:44:a8:71:d3:
c7:f1:22:41:f2:9a:a4:a5:ec:63:fa:e5:eb:65:4a:19:30:9d:
8b:c7:b6:fd:dc:3f:e1:6c:fd:d5:52:14:07:fc:6d:24:cc:b3:
cc:81:a2:c0:52:f3:27:b9:6d:9e:06:3d:d8:a8:49:02:32:69:
c7:05:42:94:d0:bb:e3:bb:a9:08:c3:93:50:1b:db:84:6d:c0:
ba:1e:52:98:65:9c:13:76:bd:b3:d5:67:29:2f:1f:7b:aa:2c:
51:a0:fd:85:4f:26:3c:48:a3:81:27:a6:fe:ee:7f:78:99:c2:
45:cf:9d:1f:52:7e:d7:95:8b:fd:e1:d0:20:c3:af:7e:51:a2:
2f:66:3b:ab:2d:cf:2d:8e:8c:4d:7d:18:39:21:28:fb:dc:ae:
6d:65:81:d0:e0:d7:18:4b:e7:b5:f7:74:d7:84:e6:52:2a:ac:
3b:68:fd:3b:4a:b8:01:54:84:91:32:bb:95:d2:8e:63:30:a6:
9e:ce:23:96:fe:ab:2e:b8:6a:8b:74:dc:de:21:a1:14:c2:fb:
bf:53:af:10
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:00:00:00:00:01:08:d9:61:24:48
Signature Algorithm: sha1WithRSAEncryption
Issuer: C=BE, O=GlobalSign nv-sa, OU=Primary Object Publishing CA, CN=GlobalSign Primary Object Publishing CA
Validity
Not Before: Jan 22 09:00:00 2004 GMT
Not After : Jan 27 10:00:00 2014 GMT
Subject: C=BE, O=GlobalSign nv-sa, OU=ObjectSign CA, CN=GlobalSign ObjectSign CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:b0:b1:f2:80:00:70:ce:ec:c3:8c:b4:97:ed:c6:
09:8c:26:6f:89:df:67:59:81:cf:de:14:13:4c:c2:
b1:45:e2:53:75:41:fa:07:36:6f:ba:11:70:28:94:
7c:6d:72:bd:07:15:25:65:3a:09:ff:85:dc:fa:7b:
5e:37:87:38:e4:c7:4b:08:80:98:9e:8a:cd:58:09:
02:c0:c3:01:49:96:58:88:89:26:59:f5:6d:c6:b9:
c1:fb:18:25:ed:d8:62:4e:ca:0a:6c:5d:70:ef:ce:
d3:9b:29:0b:09:c6:f6:ee:b6:16:d4:3c:54:8e:cc:
5d:e0:af:db:dd:23:09:32:7b:32:81:16:62:0a:06:
cb:7a:cf:34:21:b6:6f:36:b6:b1:ce:cb:9a:29:35:
40:3e:9d:58:7c:ff:ad:82:98:fa:b8:d5:89:ca:35:
dd:cb:cd:57:06:cb:9b:e4:bf:94:a8:80:98:5f:77:
96:f0:b6:e7:ab:74:79:40:21:a6:63:e9:d0:07:91:
bd:85:38:b4:ae:96:ac:a1:ff:14:73:da:a5:45:b8:
4d:86:ce:2a:3c:ef:d4:df:28:0e:75:a9:a8:88:13:
c2:e4:7c:60:93:f2:25:cc:03:84:97:e6:4e:b6:9f:
2d:d6:b5:8b:34:3c:ab:d5:38:3a:c8:3d:c4:b1:f9:
94:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE, pathlen:0
X509v3 Subject Key Identifier:
D2:5B:F3:4B:26:4B:A5:B0:E7:5D:FD:56:7F:F6:F1:2E:38:4E:53:A0
X509v3 CRL Distribution Points:
Full Name:
URI:http://crl.globalsign.net/primobject.crl
Netscape Cert Type:
Object Signing CA
X509v3 Authority Key Identifier:
15:51:79:1A:7C:0C:59:F9:DA:CD:D8:C4:3A:13:9A:C9:78:2D:7F:4D
Signature Algorithm: sha1WithRSAEncryption
Signature Value:
11:d4:5d:8a:f4:3d:0d:9d:7e:4f:a7:00:71:61:0b:56:b3:4c:
aa:70:e1:b2:d1:de:c7:88:6d:1d:89:7c:2b:a9:46:e5:8b:1f:
8e:4c:c2:66:95:91:1f:e3:4d:39:4a:e3:1b:70:b7:44:6e:dc:
06:8a:4d:6d:25:e8:98:12:dc:bc:a0:dd:86:4e:ae:8f:81:13:
05:40:90:5a:54:25:29:94:4a:ca:f1:65:b4:ef:06:79:da:e7:
cb:86:f0:04:c9:18:dc:ee:72:b3:20:01:57:48:df:e3:33:e1:
2c:cd:9c:07:7f:94:47:27:8d:88:8d:34:0c:a6:7c:5c:20:c1:
7d:07:b3:73:6b:64:8c:26:d2:9b:d7:e8:79:65:a6:a8:91:a1:
74:86:2a:05:02:82:c1:84:7c:f2:79:cd:3c:2a:2b:0f:99:29:
1e:ea:8c:8a:1a:b1:6a:ea:a2:66:38:0e:65:e1:ad:d8:c6:c9:
1f:88:8d:39:76:ee:17:82:c4:13:8d:97:ce:63:41:e7:7a:f5:
b4:b6:6c:15:c3:38:13:b3:93:0b:62:06:88:dd:e1:44:7f:10:
a9:50:24:8b:60:dc:05:f7:5b:a5:14:b2:7b:56:72:0b:96:ea:
bf:fc:05:70:90:65:9e:05:1c:a4:dd:07:af:4b:57:de:c6:39:
67:3b:c5:74
- 1
- SHA1: nil
- 1.3.6.1.4.1.311.2.1.4
- #0
- 1.3.6.1.4.1.311.2.1.15
- :
00 3c 00 3c 00 3c 00 4f 00 62 00 73 00 6f 00 6c |.<.<.<.O.b.s.o.l| 00 65 00 74 00 65 00 3e 00 3e 00 3e |.e.t.e.>.>.> |
- :
- SHA1
04 20 40 8d 1e d6 16 72 fd 4f cb 82 bd 58 3b a6 |. @....r.O...X;.| e4 82 90 49 |...I |
- 1.3.6.1.4.1.311.2.1.15
- #0
- Certificates
- Certificate #0
- 2
- 01:00:00:00:00:01:10:A1:56:75:3B
- RSA-SHA1: nil
- Issuer
- C: BE
- O: GlobalSign nv-sa
- OU: ObjectSign CA
- CN: GlobalSign ObjectSign CA
- 2007-02-08 12:31:42 UTC: 2008-02-08 12:31:42 UTC
- Subject
- C: DE
- O: Eltima Software
- CN: Eltima Software
- emailAddress: sales@eltima.com
- #5
- rsaEncryption: nil
- C3:52:5C:BD:53:8E:B9:A5:0B:0E:75:92:49:4D:C3:65:
D7:DD:50:06:DB:FA:7A:74:D8:32:46:AF:0D:3F:FD:C3:
E5:0B:7A:3E:AC:CB:05:94:0D:B6:73:D7:0E:67:8F:60:
9B:C1:71:72:97:F7:24:BA:19:1D:F0:17:21:A0:6D:29:
C3:E9:2D:7F:45:B3:68:23:9A:D0:91:7D:23:50:C3:2C:
7E:F1:DC:27:0C:A8:5A:0A:26:9D:E6:84:EF:22:8B:30:
65:AA:FF:1C:43:31:D7:2D:96:89:B5:E5:D5:BC:63:82:
90:50:08:08:73:15:BD:88:F7:2C:16:27:0A:D6:D0:B5: 0x010001
- #6
- nsCertType: 0x10
- keyUsage: true, 0xf0
- authorityKeyIdentifier:
d2 5b f3 4b 26 4b a5 b0 e7 5d fd 56 7f f6 f1 2e |.[.K&K...].V....| 38 4e 53 a0 |8NS. |
- crlDistributionPoints: http://crl.globalsign.net/ObjectSign.crl
- RSA-SHA1:
98 83 10 1d b0 8f f8 5b 2c f0 51 8b 93 78 74 ac |.......[,.Q..xt.| 1a 47 f1 0b e6 1b fc e7 fe dc 2d 3b 3c a4 8c 4e |.G........-;<..N| 56 39 20 4c e8 e3 8b e7 1a 2b 09 7a 6a e1 65 e3 |V9 L.....+.zj.e.| e4 d4 a0 ee e4 ff ab 34 a2 91 5f de 1f c7 63 f4 |.......4.._...c.| 2d 3e 19 5f 1b 17 b8 52 5d 7a 28 d0 04 c4 75 38 |->._...R]z(...u8| 5f c3 62 9e 03 5b fc bf fe 7c 97 0d 08 ef bd a3 |_.b..[...|......| 35 0c 0e 61 3d c1 33 3c c1 f1 19 e8 90 de d1 6d |5..a=.3<.......m| 2b 8b bd cb 29 eb a0 ba 0c 48 ca 23 d1 b3 9d db |+...)....H.#....| 40 26 5e 90 17 ee f1 db 63 b0 92 2c 49 82 ed 33 |@&^.....c..,I..3| 2a 89 0e 46 9e 3f 75 0b a7 06 b4 df 72 b7 ea 91 |*..F.?u.....r...| 2a e3 ab 03 3e 65 37 61 ee 5c 1d 1a a7 15 2d c4 |*...>e7a.\....-.| d2 52 7f b5 da 30 f5 89 11 41 e6 87 e1 5e ec 3e |.R...0...A...^.>| 0f 71 76 4b f5 6f 66 75 d1 1e 25 c0 34 9a 1f a6 |.qvK.ofu..%.4...| df bd 38 7f 7e 16 c9 f8 96 79 e6 0c 49 69 2a 27 |..8.~....y..Ii*'| b3 e4 4d 27 fd e6 85 f1 5e 31 5c de 67 c8 95 a3 |..M'....^1\.g...| 75 5c 43 70 d2 b9 06 8a e8 d2 d9 73 21 18 cf f5 |u\Cp.......s!...|
- 2
- Certificate #1
- 2
- 04:00:00:00:00:01:08:D9:61:1C:D6
- RSA-SHA1: nil
- Issuer
- C: BE
- O: GlobalSign nv-sa
- OU: Root CA
- CN: GlobalSign Root CA
- 1999-01-28 12:00:00 UTC: 2014-01-27 11:00:00 UTC
- Subject
- C: BE
- O: GlobalSign nv-sa
- OU: Primary Object Publishing CA
- CN: GlobalSign Primary Object Publishing CA
- #5
- rsaEncryption: nil
- A2:9B:75:2A:A7:13:BA:09:71:24:18:DF:A1:06:62:29:
12:9E:DC:9E:75:73:E8:DF:56:57:69:96:13:56:4F:F2:
C8:BC:01:58:ED:26:86:72:0B:60:F5:19:C5:55:03:57:
9B:B9:10:C9:A1:D4:74:40:FF:6C:00:E8:E6:53:37:FE:
B7:DA:79:3E:B8:52:38:E9:81:2C:9F:0E:33:52:A6:CD:
70:CE:4A:5D:62:F4:D1:67:5E:BC:97:4A:07:CA:BC:DD:
8D:47:B1:CD:F1:65:5B:85:01:B0:4B:6B:DE:CD:8E:2E:
F5:50:E8:A3:9C:9D:26:98:6B:36:63:41:03:70:44:F0:
5F:E2:25:75:79:50:7D:5F:A1:06:A2:46:0C:55:95:47:
14:D3:91:46:86:68:99:E7:27:F4:94:EC:9A:41:51:F7:
96:D4:7A:8C:E1:44:97:68:71:03:D8:58:6F:BD:B4:10:
42:EE:0D:66:75:46:8B:44:96:D2:30:00:12:07:63:F7:
44:9B:01:70:CA:56:6F:9C:58:97:2A:27:17:8B:2E:71:
52:6D:46:AB:A7:2B:0F:7F:16:48:64:C8:52:FA:06:17:
00:07:74:D7:45:B3:0C:F5:78:95:73:E8:0A:EE:C4:E0:
72:8C:1E:11:AA:1E:BB:5E:CE:F9:B4:00:EE:73:BD:CD: 0x010001
- #6
- keyUsage: true, 6
- basicConstraints: true, true
- subjectKeyIdentifier:
15 51 79 1a 7c 0c 59 f9 da cd d8 c4 3a 13 9a c9 |.Qy.|.Y.....:...| 78 2d 7f 4d |x-.M |
- crlDistributionPoints: http://crl.globalsign.net/Root.crl
- authorityKeyIdentifier:
60 7b 66 1a 45 0d 97 ca 89 50 2f 7d 04 cd 34 a8 |`{f.E....P/}..4.| ff fc fd 4b |...K |
- RSA-SHA1:
a0 42 2e b8 76 a7 42 71 86 40 4d 46 4d 5b 26 b0 |.B..v.Bq.@MFM[&.| b0 74 f9 3f 89 a8 7b 7c b7 f1 c6 97 e0 82 39 99 |.t.?..{|......9.| 9d 43 fe 60 82 36 42 b5 5b 87 8d f5 5d f4 bb ff |.C.`.6B.[...]...| a9 10 44 a8 71 d3 c7 f1 22 41 f2 9a a4 a5 ec 63 |..D.q..."A.....c| fa e5 eb 65 4a 19 30 9d 8b c7 b6 fd dc 3f e1 6c |...eJ.0......?.l| fd d5 52 14 07 fc 6d 24 cc b3 cc 81 a2 c0 52 f3 |..R...m$......R.| 27 b9 6d 9e 06 3d d8 a8 49 02 32 69 c7 05 42 94 |'.m..=..I.2i..B.| d0 bb e3 bb a9 08 c3 93 50 1b db 84 6d c0 ba 1e |........P...m...| 52 98 65 9c 13 76 bd b3 d5 67 29 2f 1f 7b aa 2c |R.e..v...g)/.{.,| 51 a0 fd 85 4f 26 3c 48 a3 81 27 a6 fe ee 7f 78 |Q...O&
- 2
- Certificate #2
- 2
- 04:00:00:00:00:01:08:D9:61:24:48
- RSA-SHA1: nil
- Issuer
- C: BE
- O: GlobalSign nv-sa
- OU: Primary Object Publishing CA
- CN: GlobalSign Primary Object Publishing CA
- 2004-01-22 09:00:00 UTC: 2014-01-27 10:00:00 UTC
- Subject
- C: BE
- O: GlobalSign nv-sa
- OU: ObjectSign CA
- CN: GlobalSign ObjectSign CA
- #5
- rsaEncryption: nil
- B0:B1:F2:80:00:70:CE:EC:C3:8C:B4:97:ED:C6:09:8C:
26:6F:89:DF:67:59:81:CF:DE:14:13:4C:C2:B1:45:E2:
53:75:41:FA:07:36:6F:BA:11:70:28:94:7C:6D:72:BD:
07:15:25:65:3A:09:FF:85:DC:FA:7B:5E:37:87:38:E4:
C7:4B:08:80:98:9E:8A:CD:58:09:02:C0:C3:01:49:96:
58:88:89:26:59:F5:6D:C6:B9:C1:FB:18:25:ED:D8:62:
4E:CA:0A:6C:5D:70:EF:CE:D3:9B:29:0B:09:C6:F6:EE:
B6:16:D4:3C:54:8E:CC:5D:E0:AF:DB:DD:23:09:32:7B:
32:81:16:62:0A:06:CB:7A:CF:34:21:B6:6F:36:B6:B1:
CE:CB:9A:29:35:40:3E:9D:58:7C:FF:AD:82:98:FA:B8:
D5:89:CA:35:DD:CB:CD:57:06:CB:9B:E4:BF:94:A8:80:
98:5F:77:96:F0:B6:E7:AB:74:79:40:21:A6:63:E9:D0:
07:91:BD:85:38:B4:AE:96:AC:A1:FF:14:73:DA:A5:45:
B8:4D:86:CE:2A:3C:EF:D4:DF:28:0E:75:A9:A8:88:13:
C2:E4:7C:60:93:F2:25:CC:03:84:97:E6:4E:B6:9F:2D:
D6:B5:8B:34:3C:AB:D5:38:3A:C8:3D:C4:B1:F9:94:CD: 0x010001
- #6
- keyUsage: true, 6
- basicConstraints
- true
- true: 0
- subjectKeyIdentifier:
d2 5b f3 4b 26 4b a5 b0 e7 5d fd 56 7f f6 f1 2e |.[.K&K...].V....| 38 4e 53 a0 |8NS. |
- crlDistributionPoints: http://crl.globalsign.net/primobject.crl
- nsCertType: 1
- authorityKeyIdentifier:
15 51 79 1a 7c 0c 59 f9 da cd d8 c4 3a 13 9a c9 |.Qy.|.Y.....:...| 78 2d 7f 4d |x-.M |
- RSA-SHA1:
11 d4 5d 8a f4 3d 0d 9d 7e 4f a7 00 71 61 0b 56 |..]..=..~O..qa.V| b3 4c aa 70 e1 b2 d1 de c7 88 6d 1d 89 7c 2b a9 |.L.p......m..|+.| 46 e5 8b 1f 8e 4c c2 66 95 91 1f e3 4d 39 4a e3 |F....L.f....M9J.| 1b 70 b7 44 6e dc 06 8a 4d 6d 25 e8 98 12 dc bc |.p.Dn...Mm%.....| a0 dd 86 4e ae 8f 81 13 05 40 90 5a 54 25 29 94 |...N.....@.ZT%).| 4a ca f1 65 b4 ef 06 79 da e7 cb 86 f0 04 c9 18 |J..e...y........| dc ee 72 b3 20 01 57 48 df e3 33 e1 2c cd 9c 07 |..r. .WH..3.,...| 7f 94 47 27 8d 88 8d 34 0c a6 7c 5c 20 c1 7d 07 |..G'...4..|\ .}.| b3 73 6b 64 8c 26 d2 9b d7 e8 79 65 a6 a8 91 a1 |.skd.&....ye....| 74 86 2a 05 02 82 c1 84 7c f2 79 cd 3c 2a 2b 0f |t.*.....|.y.<*+.| 99 29 1e ea 8c 8a 1a b1 6a ea a2 66 38 0e 65 e1 |.)......j..f8.e.| ad d8 c6 c9 1f 88 8d 39 76 ee 17 82 c4 13 8d 97 |.......9v.......| ce 63 41 e7 7a f5 b4 b6 6c 15 c3 38 13 b3 93 0b |.cA.z...l..8....| 62 06 88 dd e1 44 7f 10 a9 50 24 8b 60 dc 05 f7 |b....D...P$.`...| 5b a5 14 b2 7b 56 72 0b 96 ea bf fc 05 70 90 65 |[...{Vr......p.e| 9e 05 1c a4 dd 07 af 4b 57 de c6 39 67 3b c5 74 |.......KW..9g;.t|
- 2
- Certificate #0
- 1
- unnamed
- #0
- C: BE
- O: GlobalSign nv-sa
- OU: ObjectSign CA
- CN: GlobalSign ObjectSign CA
- 01:00:00:00:00:01:10:A1:56:75:3B
- #0
- SHA1: nil
- #2
- 1.3.6.1.4.1.311.2.1.12
- nil
- contentType: 1.3.6.1.4.1.311.2.1.4
- messageDigest:
0d 53 6a e4 9c ff e4 48 09 da d6 7c dc 74 1f f2 |.Sj....H...|.t..| 44 ce 0e 5f |D.._ |
- 1.3.6.1.4.1.311.2.1.12
- rsaEncryption:
8a db aa b4 65 85 5e 26 83 ee 48 3c 2f a4 c8 b3 |....e.^&..H
- unnamed
| offset | size | type | comment | |
|---|---|---|---|---|
| 0 | 1970176 | EXE | 08/22/2007 12:22:12 | # |
| 15c1 | 15 | HTM | # | |
| 1e1000 | 3456 | PKCS7 | Authenticode Signature | # |
![]() |
| Please donate some bucks to keep this site up and running: | |
| Ko-fi | |
|---|---|
| Yandex.Money | |
| Thank you! | |
[?] can't find file_offset of VA 0x9753e4
[?] can't find file_offset of VA 0x975518
[?] can't find file_offset of VA 0x97564c
[?] can't find file_offset of VA 0x975780
[?] can't find file_offset of VA 0x9758b4
[?] can't find file_offset of VA 0x9759e8
[?] can't find file_offset of VA 0x975b1c
[?] can't find file_offset of VA 0x975c50
[?] can't find file_offset of VA 0x975f3c
[?] can't find file_offset of VA 0x976228
[?] can't find file_offset of VA 0x976514
[?] can't find file_offset of VA 0x976800
[?] can't find file_offset of VA 0x976934
[?] can't find file_offset of VA 0x976a68
[?] can't find file_offset of VA 0x976d54
[?] can't find file_offset of VA 0x976e88
[?] can't find file_offset of VA 0x977174
[?] can't find file_offset of VA 0x977460
[?] can't find file_offset of VA 0x97774c
[?] can't find file_offset of VA 0x977a38
[?] can't find file_offset of VA 0x977d24
[?] can't find file_offset of VA 0x978010
[?] can't find file_offset of VA 0x978144
[?] can't find file_offset of VA 0x978314
[?] can't find file_offset of VA 0x9784f8
[?] can't find file_offset of VA 0x9786c8
[?] can't find file_offset of VA 0x978898
[?] can't find file_offset of VA 0x978a68
[?] can't find file_offset of VA 0x978c38
[?] can't find file_offset of VA 0x978e08
[?] can't find file_offset of VA 0x978fd8
[?] can't find file_offset of VA 0x9791a8
[?] can't find file_offset of VA 0x979378
[?] can't find file_offset of VA 0x9a7200
[?] can't find file_offset of VA 0x9d5088
[?] can't find file_offset of VA 0x9d5148
[?] can't find file_offset of VA 0x9d5228
[?] can't find file_offset of VA 0x9d5308
[?] can't find file_offset of VA 0x9e02f8
[?] can't find file_offset of VA 0x9e03d8
[?] can't find file_offset of VA 0x9e0498
[?] can't find file_offset of VA 0x9e0558
[?] can't find file_offset of VA 0x9e0638
[?] can't find file_offset of VA 0x9e06f8
[?] can't find file_offset of VA 0x9e07d8
[?] can't find file_offset of VA 0x9e08c0
[?] can't find file_offset of VA 0x9e0980
[?] can't find file_offset of VA 0x9e0d1c
[?] can't find file_offset of VA 0x9e10b8
[?] can't find file_offset of VA 0x9e1454
[?] can't find file_offset of VA 0x9e17f0
[?] can't find file_offset of VA 0x9e1b8c
[?] can't find file_offset of VA 0x9e1df4
[?] can't find file_offset of VA 0x9e1f7c
[?] can't find file_offset of VA 0x9e2104
[?] can't find file_offset of VA 0x9e21b4
[?] can't find file_offset of VA 0x9e233c
[?] can't find file_offset of VA 0x9e241c
[?] can't find file_offset of VA 0x9e3104
[?] can't find file_offset of VA 0x9e3dec
[?] can't find file_offset of VA 0x9e4ad4
[?] can't find file_offset of VA 0x9e4d3c
[?] can't find file_offset of VA 0x9e4fa4
[?] can't find file_offset of VA 0x9e520c
[?] can't find file_offset of VA 0x9e5ef4
[?] can't find file_offset of VA 0x9e6bdc
[?] can't find file_offset of VA 0x9e7904
[?] can't find file_offset of VA 0x9ec430
[?] can't find file_offset of VA 0x9ec558
[?] can't find file_offset of VA 0x9ec680
[?] can't find file_offset of VA 0x9ec6d4
[?] can't find file_offset of VA 0x9ec728
[?] can't find file_offset of VA 0x9ec79c
[?] can't find file_offset of VA 0x9ecb48
[?] can't find file_offset of VA 0x9ecd18
[?] can't find file_offset of VA 0x9ecf68
[?] can't find file_offset of VA 0x9ed358
[?] can't find file_offset of VA 0x9ed6a4
[?] can't find file_offset of VA 0x9edb4c
[?] can't find file_offset of VA 0x9edea4
[?] can't find file_offset of VA 0x9ee238
[?] can't find file_offset of VA 0x9ee49c
[?] can't find file_offset of VA 0x9eeaf8
[?] can't find file_offset of VA 0x9eefe4
[?] can't find file_offset of VA 0x9efbb4
[?] can't find file_offset of VA 0x9f0134
[?] can't find file_offset of VA 0x9f0480
[?] can't find file_offset of VA 0x9f0580
[?] can't find file_offset of VA 0x9f064c
[?] can't find file_offset of VA 0x9f075c
[?] can't find file_offset of VA 0x9f0b64
[?] can't find file_offset of VA 0x9f0f10
[?] can't find file_offset of VA 0x9f12f8
[?] can't find file_offset of VA 0x9f1668
[?] can't find file_offset of VA 0x9f1a74
[?] can't find file_offset of VA 0x9f1b44
[?] can't find file_offset of VA 0x9f1bfc
[?] can't find file_offset of VA 0x9f1e50
[?] can't find file_offset of VA 0x9f2210
[?] can't find file_offset of VA 0x9f2578
[?] can't find file_offset of VA 0x9f2818
[?] too many errors getting resource data, stopped on 0 of 1
[?] can't find file_offset of VA 0x1bf794
offset:( 0x )