| filename | Gw.exe | |
|---|---|---|
| size | 8138688 (0x7c2fc0) | |
| md5 | 94fec81b5d2b836775453d2ba9122ab4 | |
| type | PE32 executable (GUI) Intel 80386, for MS Windows | |
| mimetype | application/x-dosexec | |
| clamav | OK | |
| virustotal | → scan with virustotal.com | |
| histogram | ||
MZ Header
| signature | MZ |
| bytes_in_last_block | 0x90 |
| blocks_in_file | 3 |
| num_relocs | 0 |
| header_paragraphs | 4 |
| min_extra_paragraphs | 0 |
| max_extra_paragraphs | 0xffff |
| ss | 0 |
| sp | 0xb8 |
| checksum | 0 |
| ip | 0 |
| cs | 0 |
| reloc_table_offset | 0x40 |
| overlay_number | 0 |
| reserved0 | 0 |
| oem_id | 0 |
| oem_info | 0 |
| reserved2 | 0 |
| reserved3 | 0 |
| reserved4 | 0 |
| reserved5 | 0 |
| reserved6 | 0 |
| lfanew | 0xf0 |
DOS stub
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
PE Header
Packer / Compiler
Sections
Data Directory
TLS
| raw start | raw end | index | callbks | zero fill | flags | |
|---|---|---|---|---|---|---|
| 0xe19000 | 0xe19010 | 0xd526e8 | 0x9c714c | 0 | 0 |
| module_name | hint | ord | function_name |
|---|---|---|---|
| WSOCK32.dll | 108 | ||
| WSOCK32.dll | 21 | ||
| WSOCK32.dll | 22 | ||
| WSOCK32.dll | 5 | ||
| WSOCK32.dll | 7 | ||
| WSOCK32.dll | 101 | ||
| WSOCK32.dll | 1 | ||
| WSOCK32.dll | 2 | ||
| WSOCK32.dll | 13 | ||
| WSOCK32.dll | 10 | ||
| WSOCK32.dll | 12 | ||
| WSOCK32.dll | 103 | ||
| WSOCK32.dll | 8 | ||
| WSOCK32.dll | 111 | ||
| WSOCK32.dll | 15 | ||
| WSOCK32.dll | 16 | ||
| WSOCK32.dll | 9 | ||
| WSOCK32.dll | 23 | ||
| WSOCK32.dll | 4 | ||
| WSOCK32.dll | 3 | ||
| WSOCK32.dll | 19 | ||
| WSOCK32.dll | 115 | ||
| WSOCK32.dll | 57 | ||
| WSOCK32.dll | 52 | ||
| WSOCK32.dll | 11 | ||
| WSOCK32.dll | 116 | ||
| WSOCK32.dll | 18 | ||
| KERNEL32.dll | 365 | GetTickCount | |
| KERNEL32.dll | 74 | CreateThread | |
| KERNEL32.dll | 268 | GetExitCodeThread | |
| KERNEL32.dll | 49 | CreateEventA | |
| KERNEL32.dll | 373 | GetVersionExA | |
| KERNEL32.dll | 718 | WaitForSingleObject | |
| KERNEL32.dll | 716 | WaitForMultipleObjects | |
| KERNEL32.dll | 613 | SetEvent | |
| KERNEL32.dll | 87 | DeleteFileA | |
| KERNEL32.dll | 355 | GetTempFileNameA | |
| KERNEL32.dll | 357 | GetTempPathA | |
| KERNEL32.dll | 267 | GetExitCodeProcess | |
| KERNEL32.dll | 68 | CreateProcessA | |
| KERNEL32.dll | 175 | FormatMessageA | |
| KERNEL32.dll | 536 | ReadFile | |
| KERNEL32.dll | 99 | DuplicateHandle | |
| KERNEL32.dll | 67 | CreatePipe | |
| KERNEL32.dll | 336 | GetStartupInfoA | |
| KERNEL32.dll | 202 | GetCommandLineA | |
| KERNEL32.dll | 125 | ExitProcess | |
| KERNEL32.dll | 559 | RtlUnwind | |
| KERNEL32.dll | 409 | HeapAlloc | |
| KERNEL32.dll | 418 | HeapReAlloc | |
| KERNEL32.dll | 419 | HeapSize | |
| KERNEL32.dll | 415 | HeapFree | |
| KERNEL32.dll | 685 | UnhandledExceptionFilter | |
| KERNEL32.dll | 178 | FreeEnvironmentStringsA | |
| KERNEL32.dll | 179 | FreeEnvironmentStringsW | |
| KERNEL32.dll | 722 | WideCharToMultiByte | |
| KERNEL32.dll | 262 | GetEnvironmentStrings | |
| KERNEL32.dll | 264 | GetEnvironmentStringsW | |
| KERNEL32.dll | 621 | SetHandleCount | |
| KERNEL32.dll | 338 | GetStdHandle | |
| KERNEL32.dll | 277 | GetFileType | |
| KERNEL32.dll | 85 | DeleteCriticalSection | |
| KERNEL32.dll | 677 | TlsSetValue | |
| KERNEL32.dll | 674 | TlsAlloc | |
| KERNEL32.dll | 675 | TlsFree | |
| KERNEL32.dll | 625 | SetLastError | |
| KERNEL32.dll | 676 | TlsGetValue | |
| KERNEL32.dll | 265 | GetEnvironmentVariableA | |
| KERNEL32.dll | 413 | HeapDestroy | |
| KERNEL32.dll | 411 | HeapCreate | |
| KERNEL32.dll | 426 | InitializeCriticalSection | |
| KERNEL32.dll | 102 | EnterCriticalSection | |
| KERNEL32.dll | 449 | LeaveCriticalSection | |
| KERNEL32.dll | 440 | IsBadWritePtr | |
| KERNEL32.dll | 191 | GetCPInfo | |
| KERNEL32.dll | 185 | GetACP | |
| KERNEL32.dll | 305 | GetOEMCP | |
| KERNEL32.dll | 429 | InterlockedDecrement | |
| KERNEL32.dll | 432 | InterlockedIncrement | |
| KERNEL32.dll | 484 | MultiByteToWideChar | |
| KERNEL32.dll | 447 | LCMapStringA | |
| KERNEL32.dll | 448 | LCMapStringW | |
| KERNEL32.dll | 339 | GetStringTypeA | |
| KERNEL32.dll | 342 | GetStringTypeW | |
| KERNEL32.dll | 523 | RaiseException | |
| KERNEL32.dll | 284 | GetLocaleInfoA | |
| KERNEL32.dll | 369 | GetUserDefaultLCID | |
| KERNEL32.dll | 33 | CompareStringA | |
| KERNEL32.dll | 34 | CompareStringW | |
| KERNEL32.dll | 735 | WriteFile | |
| KERNEL32.dll | 282 | GetLastError | |
| KERNEL32.dll | 52 | CreateFileA | |
| KERNEL32.dll | 434 | IsBadCodePtr | |
| KERNEL32.dll | 260 | GetDriveTypeA | |
| KERNEL32.dll | 488 | OpenFile | |
| KERNEL32.dll | 489 | OpenFileMappingA | |
| KERNEL32.dll | 53 | CreateFileMappingA | |
| KERNEL32.dll | 470 | MapViewOfFile | |
| KERNEL32.dll | 486 | OpenEventA | |
| KERNEL32.dll | 688 | UnmapViewOfFile | |
| KERNEL32.dll | 493 | OpenMutexA | |
| KERNEL32.dll | 710 | VirtualQuery | |
| KERNEL32.dll | 707 | VirtualProtect | |
| KERNEL32.dll | 71 | CreateSemaphoreA | |
| KERNEL32.dll | 27 | CloseHandle | |
| KERNEL32.dll | 703 | VirtualFree | |
| KERNEL32.dll | 170 | FlushFileBuffers | |
| KERNEL32.dll | 699 | VirtualAlloc | |
| KERNEL32.dll | 618 | SetFilePointer | |
| KERNEL32.dll | 397 | GlobalMemoryStatus | |
| KERNEL32.dll | 671 | TerminateThread | |
| KERNEL32.dll | 249 | GetCurrentThread | |
| KERNEL32.dll | 651 | SetUnhandledExceptionFilter | |
| KERNEL32.dll | 670 | TerminateProcess | |
| KERNEL32.dll | 611 | SetEnvironmentVariableW | |
| KERNEL32.dll | 636 | SetStdHandle | |
| KERNEL32.dll | 126 | ExitThread | |
| KERNEL32.dll | 345 | GetSystemDirectoryA | |
| KERNEL32.dll | 346 | GetSystemDirectoryW | |
| KERNEL32.dll | 392 | GlobalFree | |
| KERNEL32.dll | 396 | GlobalLock | |
| KERNEL32.dll | 400 | GlobalSize | |
| KERNEL32.dll | 403 | GlobalUnlock | |
| KERNEL32.dll | 385 | GlobalAlloc | |
| KERNEL32.dll | 442 | IsDBCSLeadByteEx | |
| KERNEL32.dll | 555 | ResetEvent | |
| KERNEL32.dll | 276 | GetFileTime | |
| KERNEL32.dll | 620 | SetFileTime | |
| KERNEL32.dll | 351 | GetSystemTimeAsFileTime | |
| KERNEL32.dll | 138 | FileTimeToSystemTime | |
| KERNEL32.dll | 137 | FileTimeToLocalFileTime | |
| KERNEL32.dll | 519 | QueryPerformanceFrequency | |
| KERNEL32.dll | 518 | QueryPerformanceCounter | |
| KERNEL32.dll | 549 | ReleaseMutex | |
| KERNEL32.dll | 274 | GetFileSize | |
| KERNEL32.dll | 63 | CreateMutexA | |
| KERNEL32.dll | 609 | SetEndOfFile | |
| KERNEL32.dll | 203 | GetCommandLineW | |
| KERNEL32.dll | 294 | GetModuleHandleA | |
| KERNEL32.dll | 292 | GetModuleFileNameA | |
| KERNEL32.dll | 69 | CreateProcessW | |
| KERNEL32.dll | 723 | WinExec | |
| KERNEL32.dll | 129 | ExpandEnvironmentStringsW | |
| KERNEL32.dll | 144 | FindClose | |
| KERNEL32.dll | 92 | DeviceIoControl | |
| KERNEL32.dll | 361 | GetThreadPriority | |
| KERNEL32.dll | 307 | GetPriorityClass | |
| KERNEL32.dll | 647 | SetThreadPriority | |
| KERNEL32.dll | 631 | SetPriorityClass | |
| KERNEL32.dll | 256 | GetDiskFreeSpaceA | |
| KERNEL32.dll | 259 | GetDiskFreeSpaceW | |
| KERNEL32.dll | 477 | MoveFileA | |
| KERNEL32.dll | 480 | MoveFileW | |
| KERNEL32.dll | 643 | SetThreadContext | |
| KERNEL32.dll | 664 | SuspendThread | |
| KERNEL32.dll | 359 | GetThreadContext | |
| KERNEL32.dll | 556 | ResumeThread | |
| KERNEL32.dll | 662 | Sleep | |
| KERNEL32.dll | 283 | GetLocalTime | |
| KERNEL32.dll | 206 | GetComputerNameA | |
| KERNEL32.dll | 347 | GetSystemInfo | |
| KERNEL32.dll | 372 | GetVersion | |
| KERNEL32.dll | 437 | IsBadReadPtr | |
| KERNEL32.dll | 450 | LoadLibraryA | |
| KERNEL32.dll | 318 | GetProcAddress | |
| KERNEL32.dll | 250 | GetCurrentThreadId | |
| KERNEL32.dll | 248 | GetCurrentProcessId | |
| KERNEL32.dll | 180 | FreeLibrary | |
| KERNEL32.dll | 247 | GetCurrentProcess | |
| KERNEL32.dll | 431 | InterlockedExchangeAdd | |
| KERNEL32.dll | 430 | InterlockedExchange | |
| KERNEL32.dll | 293 | GetModuleFileNameW | |
| KERNEL32.dll | 279 | GetFullPathNameW | |
| KERNEL32.dll | 88 | DeleteFileW | |
| KERNEL32.dll | 358 | GetTempPathW | |
| KERNEL32.dll | 246 | GetCurrentDirectoryW | |
| KERNEL32.dll | 245 | GetCurrentDirectoryA | |
| KERNEL32.dll | 606 | SetCurrentDirectoryW | |
| KERNEL32.dll | 605 | SetCurrentDirectoryA | |
| KERNEL32.dll | 151 | FindFirstFileW | |
| KERNEL32.dll | 148 | FindFirstFileA | |
| KERNEL32.dll | 158 | FindNextFileW | |
| KERNEL32.dll | 157 | FindNextFileA | |
| KERNEL32.dll | 48 | CreateDirectoryW | |
| KERNEL32.dll | 45 | CreateDirectoryA | |
| KERNEL32.dll | 552 | RemoveDirectoryW | |
| KERNEL32.dll | 551 | RemoveDirectoryA | |
| KERNEL32.dll | 272 | GetFileAttributesW | |
| KERNEL32.dll | 269 | GetFileAttributesA | |
| KERNEL32.dll | 617 | SetFileAttributesW | |
| KERNEL32.dll | 616 | SetFileAttributesA | |
| KERNEL32.dll | 55 | CreateFileW | |
| KERNEL32.dll | 278 | GetFullPathNameA | |
| USER32.dll | 221 | GetActiveWindow | |
| USER32.dll | 144 | DialogBoxIndirectParamA | |
| USER32.dll | 614 | ShowCursor | |
| USER32.dll | 560 | SetForegroundWindow | |
| USER32.dll | 338 | GetWindow | |
| USER32.dll | 60 | CloseClipboard | |
| USER32.dll | 242 | GetClipboardData | |
| USER32.dll | 467 | OpenClipboard | |
| USER32.dll | 390 | IsClipboardFormatAvailable | |
| USER32.dll | 547 | SetClipboardData | |
| USER32.dll | 414 | LoadIconA | |
| USER32.dll | 544 | SetClassLongA | |
| USER32.dll | 478 | PostMessageA | |
| USER32.dll | 607 | SetWindowTextW | |
| USER32.dll | 399 | IsWindow | |
| USER32.dll | 353 | GetWindowTextW | |
| USER32.dll | 438 | MapVirtualKeyExA | |
| USER32.dll | 418 | LoadKeyboardLayoutA | |
| USER32.dll | 58 | ClientToScreen | |
| USER32.dll | 635 | TrackMouseEvent | |
| USER32.dll | 552 | SetCursorPos | |
| USER32.dll | 241 | GetClipCursor | |
| USER32.dll | 522 | ScreenToClient | |
| USER32.dll | 514 | ReleaseCapture | |
| USER32.dll | 541 | SetCapture | |
| USER32.dll | 149 | DispatchMessageA | |
| USER32.dll | 642 | TranslateMessage | |
| USER32.dll | 252 | GetCursorPos | |
| USER32.dll | 180 | EmptyClipboard | |
| USER32.dll | 274 | GetKeyState | |
| USER32.dll | 437 | MapVirtualKeyA | |
| USER32.dll | 326 | GetSystemMetrics | |
| USER32.dll | 237 | GetClassNameA | |
| USER32.dll | 147 | DialogBoxParamA | |
| USER32.dll | 410 | LoadCursorA | |
| USER32.dll | 1 | AdjustWindowRect | |
| USER32.dll | 132 | DefWindowProcA | |
| USER32.dll | 515 | ReleaseDC | |
| USER32.dll | 187 | EndPaint | |
| USER32.dll | 253 | GetDC | |
| USER32.dll | 12 | BeginPaint | |
| USER32.dll | 298 | GetMessageA | |
| USER32.dll | 476 | PeekMessageA | |
| USER32.dll | 37 | CharNextA | |
| USER32.dll | 396 | IsIconic | |
| USER32.dll | 275 | GetKeyboardLayout | |
| USER32.dll | 682 | keybd_event | |
| USER32.dll | 441 | MapWindowPoints | |
| USER32.dll | 240 | GetClientRect | |
| USER32.dll | 212 | FillRect | |
| USER32.dll | 625 | SystemParametersInfoA | |
| USER32.dll | 84 | CreateIconIndirect | |
| USER32.dll | 550 | SetCursor | |
| USER32.dll | 139 | DestroyCursor | |
| USER32.dll | 574 | SetParent | |
| USER32.dll | 402 | IsWindowVisible | |
| USER32.dll | 457 | MoveWindow | |
| USER32.dll | 90 | CreateWindowExW | |
| USER32.dll | 501 | RegisterClassW | |
| USER32.dll | 73 | CreateCursor | |
| USER32.dll | 133 | DefWindowProcW | |
| USER32.dll | 480 | PostQuitMessage | |
| USER32.dll | 59 | ClipCursor | |
| USER32.dll | 323 | GetSysColor | |
| USER32.dll | 142 | DestroyWindow | |
| USER32.dll | 348 | GetWindowRect | |
| USER32.dll | 405 | KillTimer | |
| USER32.dll | 600 | SetWindowLongA | |
| USER32.dll | 208 | EnumWindows | |
| USER32.dll | 227 | GetAsyncKeyState | |
| USER32.dll | 281 | GetLastActivePopup | |
| USER32.dll | 618 | ShowWindow | |
| USER32.dll | 354 | GetWindowThreadProcessId | |
| USER32.dll | 606 | SetWindowTextA | |
| USER32.dll | 532 | SendMessageA | |
| USER32.dll | 51 | CheckDlgButton | |
| USER32.dll | 559 | SetFocus | |
| USER32.dll | 556 | SetDlgItemTextA | |
| USER32.dll | 213 | FindWindowA | |
| USER32.dll | 185 | EndDialog | |
| USER32.dll | 350 | GetWindowTextA | |
| USER32.dll | 183 | EnableWindow | |
| USER32.dll | 394 | IsDlgButtonChecked | |
| USER32.dll | 258 | GetDlgItem | |
| USER32.dll | 594 | SetTimer | |
| USER32.dll | 255 | GetDesktopWindow | |
| USER32.dll | 498 | RegisterClassA | |
| USER32.dll | 34 | CharLowerBuffA | |
| USER32.dll | 342 | GetWindowLongA | |
| USER32.dll | 603 | SetWindowPos | |
| USER32.dll | 446 | MessageBoxA | |
| USER32.dll | 89 | CreateWindowExA | |
| SHELL32.dll | 67 | SHGetDataFromIDListA | |
| SHELL32.dll | 72 | SHGetFileInfoA | |
| SHELL32.dll | 116 | ShellExecuteExA | |
| SHELL32.dll | 117 | ShellExecuteExW | |
| SHELL32.dll | 83 | SHGetSpecialFolderLocation | |
| SHELL32.dll | 80 | SHGetPathFromIDListA | |
| SHELL32.dll | 75 | SHGetMalloc | |
| SHELL32.dll | 59 | SHChangeNotify | |
| SHELL32.dll | 69 | SHGetDesktopFolder | |
| SHELL32.dll | 84 | SHGetSpecialFolderPathA | |
| SHELL32.dll | 85 | SHGetSpecialFolderPathW | |
| SHELL32.dll | 114 | ShellExecuteA | |
| SHELL32.dll | 118 | ShellExecuteW | |
| COMCTL32.dll | 17 | ||
| ole32.dll | 269 | StringFromGUID2 | |
| ole32.dll | 13 | CoCreateInstance | |
| ole32.dll | 83 | CoUninitialize | |
| ole32.dll | 45 | CoInitialize | |
| ole32.dll | 232 | PropVariantClear | |
| ole32.dll | 79 | CoTaskMemFree | |
| ole32.dll | 6 | CLSIDFromString | |
| OLEAUT32.dll | 10 | ||
| OLEAUT32.dll | 2 | ||
| OLEAUT32.dll | 6 | ||
| OLEAUT32.dll | 8 | ||
| OLEAUT32.dll | 9 | ||
| VERSION.dll | 2 | GetFileVersionInfoSizeW | |
| VERSION.dll | 1 | GetFileVersionInfoSizeA | |
| VERSION.dll | GetFileVersionInfoA | ||
| VERSION.dll | 10 | VerQueryValueA | |
| VERSION.dll | 3 | GetFileVersionInfoW | |
| GDI32.dll | 461 | SetBkColor | |
| GDI32.dll | 59 | CreateFontW | |
| GDI32.dll | 36 | CreateBitmap | |
| GDI32.dll | 362 | GetTextExtentExPointA | |
| GDI32.dll | 497 | SetTextAlign | |
| GDI32.dll | 462 | SetBkMode | |
| GDI32.dll | 499 | SetTextColor | |
| GDI32.dll | 158 | ExtTextOutA | |
| GDI32.dll | 518 | TextOutW | |
| GDI32.dll | 351 | GetStockObject | |
| GDI32.dll | 335 | GetObjectA | |
| GDI32.dll | 55 | CreateFontIndirectA | |
| GDI32.dll | 83 | DeleteObject | |
| GDI32.dll | 42 | CreateCompatibleDC | |
| GDI32.dll | 47 | CreateDIBSection | |
| GDI32.dll | 455 | SelectObject | |
| GDI32.dll | 17 | BitBlt | |
| GDI32.dll | 80 | DeleteDC | |
| GDI32.dll | 54 | CreateFontA | |
| GDI32.dll | 215 | GdiFlush | |
| ADVAPI32.dll | 369 | RegOpenKeyA | |
| ADVAPI32.dll | 358 | RegEnumKeyA | |
| ADVAPI32.dll | 356 | RegDeleteValueA | |
| ADVAPI32.dll | 357 | RegDeleteValueW | |
| ADVAPI32.dll | 390 | RegSetValueExA | |
| ADVAPI32.dll | 391 | RegSetValueExW | |
| ADVAPI32.dll | 379 | RegQueryValueExA | |
| ADVAPI32.dll | 380 | RegQueryValueExW | |
| ADVAPI32.dll | 347 | RegCloseKey | |
| ADVAPI32.dll | 354 | RegDeleteKeyA | |
| ADVAPI32.dll | 355 | RegDeleteKeyW | |
| ADVAPI32.dll | 370 | RegOpenKeyExA | |
| ADVAPI32.dll | 371 | RegOpenKeyExW | |
| ADVAPI32.dll | 351 | RegCreateKeyExA | |
| ADVAPI32.dll | 352 | RegCreateKeyExW | |
| ADVAPI32.dll | 215 | GetUserNameA | |
| ADVAPI32.dll | 412 | SetFileSecurityW | |
| ADVAPI32.dll | 421 | SetSecurityDescriptorDacl | |
| ADVAPI32.dll | 223 | InitializeSecurityDescriptor | |
| WINMM.dll | 167 | waveInReset | |
| WINMM.dll | 155 | waveInAddBuffer | |
| WINMM.dll | 181 | waveOutGetPosition | |
| WINMM.dll | 187 | waveOutReset | |
| WINMM.dll | 193 | waveOutWrite | |
| WINMM.dll | 192 | waveOutUnprepareHeader | |
| WINMM.dll | 186 | waveOutPrepareHeader | |
| WINMM.dll | 184 | waveOutOpen | |
| WINMM.dll | 172 | waveOutClose | |
| WINMM.dll | 173 | waveOutGetDevCapsA | |
| WINMM.dll | 153 | timeKillEvent | |
| WINMM.dll | 154 | timeSetEvent | |
| WINMM.dll | 178 | waveOutGetNumDevs | |
| WINMM.dll | 162 | waveInGetNumDevs | |
| WINMM.dll | 152 | timeGetTime | |
| WINMM.dll | 156 | waveInClose | |
| WINMM.dll | 165 | waveInOpen | |
| WINMM.dll | 170 | waveInUnprepareHeader | |
| WINMM.dll | 166 | waveInPrepareHeader | |
| WINMM.dll | 157 | waveInGetDevCapsA | |
| WINMM.dll | 168 | waveInStart | |
| MSACM32.dll | 39 | acmStreamOpen | |
| MSACM32.dll | 28 | acmFormatSuggest | |
| MSACM32.dll | 43 | acmStreamUnprepareHeader | |
| MSACM32.dll | 37 | acmStreamConvert | |
| MSACM32.dll | 40 | acmStreamPrepareHeader | |
| MSACM32.dll | 42 | acmStreamSize |
StringTable 040904b0
| CompanyName | ArenaNet |
| FileVersion | 1, 0, 0, 1 |
| FileDescription | Guild Wars Game Client |
| LegalCopyright | Copyright (c) 2006 ArenaNet |
| ProductName | Guild Wars |
| ProductVersion | 1, 0, 0, 1 |
VS_FIXEDFILEINFO
| FileVersion | 1.0.0.1 |
| ProductVersion | 1.0.0.1 |
| StrucVersion | 0x10000 |
| FileFlagsMask | 0x3f |
| FileFlags | 0 |
| FileOS | 4 |
| FileType | 1 |
| FileSubtype | 0 |
Signers (1)
issuer: /C=US/O=Thawte, Inc./CN=Thawte Code Signing CA - G2
serial: 2FA9E90DE8610E1EA052674B9ED2E452
Certificates (3)
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Signature Algorithm: sha1WithRSAEncryption
Issuer: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA
Validity
Not Before: Jun 15 00:00:00 2007 GMT
Not After : Jun 14 23:59:59 2012 GMT
Subject: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer - G2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (1024 bit)
Modulus:
00:c4:b5:f2:52:15:bc:88:86:60:29:16:4a:5b:2f:
4b:91:6b:87:91:f3:35:54:58:35:ea:d1:36:5e:62:
4d:52:51:34:71:c2:7b:66:1d:89:c8:dd:2a:c4:6a:
0a:f6:37:d9:98:74:91:f6:92:ae:b0:b5:76:96:f1:
a9:4a:63:45:47:2e:6b:0b:92:4e:4b:2b:8c:ee:58:
4a:8b:d4:07:e4:1a:2c:f8:82:aa:58:d9:cd:42:f3:
2d:c0:75:de:8d:ab:c7:8e:1d:9a:6c:4c:08:95:1e:
de:db:ef:67:e1:72:c2:49:c2:9e:60:3c:e1:e2:be:
16:a3:63:78:69:14:7b:ad:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
Authority Information Access:
OCSP - URI:http://ocsp.verisign.com
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 CRL Distribution Points:
Full Name:
URI:http://crl.verisign.com/tss-ca.crl
X509v3 Extended Key Usage: critical
Time Stamping
X509v3 Key Usage: critical
Digital Signature, Non Repudiation
X509v3 Subject Alternative Name:
DirName:/CN=TSA1-2
Signature Algorithm: sha1WithRSAEncryption
Signature Value:
50:c5:4b:c8:24:80:df:e4:0d:24:c2:de:1a:b1:a1:02:a1:a6:
82:2d:0c:83:15:81:37:0a:82:0e:2c:b0:5a:17:61:b5:d8:05:
fe:88:db:f1:91:91:b3:56:1a:40:a6:eb:92:be:38:39:b0:75:
36:74:3a:98:4f:e4:37:ba:99:89:ca:95:42:1d:b0:b9:c7:a0:
8d:57:e0:fa:d5:64:04:42:35:4e:01:d1:33:a2:17:c8:4d:aa:
27:c7:f2:e1:86:4c:02:38:4d:83:78:c6:fc:53:e0:eb:e0:06:
87:dd:a4:96:9e:5e:0c:98:e2:a5:be:bf:82:85:c3:60:e1:df:
ad:28:d8:c7:a5:4b:64:da:c7:1b:5b:bd:ac:39:08:d5:38:22:
a1:33:8b:2f:8a:9a:eb:bc:07:21:3f:44:41:09:07:b5:65:1c:
24:bc:48:d3:44:80:eb:a1:cf:c9:02:b4:14:cf:54:c7:16:a3:
80:5c:f9:79:3e:5d:72:7d:88:17:9e:2c:43:a2:ca:53:ce:7d:
3d:f6:2a:3a:b8:4f:94:00:a5:6d:0a:83:5d:f9:5e:53:f4:18:
b3:57:0f:70:c3:fb:f5:ad:95:a0:0e:17:de:c4:16:80:60:c9:
0f:2b:6e:86:04:f1:eb:f4:78:27:d1:05:c5:ee:34:5b:5e:b9:
49:32:f2:33
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Signature Algorithm: sha1WithRSAEncryption
Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
Validity
Not Before: Dec 4 00:00:00 2003 GMT
Not After : Dec 3 23:59:59 2013 GMT
Subject: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:a9:ca:b2:a4:cc:cd:20:af:0a:7d:89:ac:87:75:
f0:b4:4e:f1:df:c1:0f:bf:67:61:bd:a3:64:1c:da:
bb:f9:ca:33:ab:84:30:89:58:7e:8c:db:6b:dd:36:
9e:0f:bf:d1:ec:78:f2:77:a6:7e:6f:3c:bf:93:af:
0d:ba:68:f4:6c:94:ca:bd:52:2d:ab:48:3d:f5:b6:
d5:5d:5f:1b:02:9f:fa:2f:6b:1e:a4:f7:a3:9a:a6:
1a:c8:02:e1:7f:4c:52:e3:0e:60:ec:40:1c:7e:b9:
0d:de:3f:c7:b4:df:87:bd:5f:7a:6a:31:2e:03:99:
81:13:a8:47:20:ce:31:73:0d:57:2d:cd:78:34:33:
95:12:99:12:b9:de:68:2f:aa:e6:e3:c2:8a:8c:2a:
c3:8b:21:87:66:bd:83:58:57:6f:75:bf:3c:aa:26:
87:5d:ca:10:15:3c:9f:84:ea:54:c1:0a:6e:c4:fe:
c5:4a:dd:b9:07:11:97:22:7c:db:3e:27:d1:1e:78:
ec:9f:31:c9:f1:e6:22:19:db:c4:b3:47:43:9a:1a:
5f:a0:1e:90:e4:5e:f5:ee:7c:f1:7d:ab:62:01:8f:
f5:4d:0b:de:d0:22:56:a8:95:cd:ae:88:76:ae:ee:
ba:0d:f3:e4:4d:d9:a0:fb:68:a0:ae:14:3b:b3:87:
c1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
Authority Information Access:
OCSP - URI:http://ocsp.verisign.com
X509v3 Basic Constraints: critical
CA:TRUE, pathlen:0
X509v3 CRL Distribution Points:
Full Name:
URI:http://crl.verisign.com/ThawteTimestampingCA.crl
X509v3 Extended Key Usage:
Time Stamping
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Subject Alternative Name:
DirName:/CN=TSA2048-1-53
Signature Algorithm: sha1WithRSAEncryption
Signature Value:
4a:6b:f9:ea:58:c2:44:1c:31:89:79:99:2b:96:bf:82:ac:01:
d6:1c:4c:cd:b0:8a:58:6e:df:08:29:a3:5e:c8:ca:93:13:e7:
04:52:0d:ef:47:27:2f:00:38:b0:e4:c9:93:4e:9a:d4:22:62:
15:f7:3f:37:21:4f:70:31:80:f1:8b:38:87:b3:e8:e8:97:00:
fe:cf:55:96:4e:24:d2:a9:27:4e:7a:ae:b7:61:41:f3:2a:ce:
e7:c9:d9:5e:dd:bb:2b:85:3e:b5:9d:b5:d9:e1:57:ff:be:b4:
c5:7e:f5:cf:0c:9e:f0:97:fe:2b:d3:3b:52:1b:1b:38:27:f7:
3f:4a
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:a9:e9:0d:e8:61:0e:1e:a0:52:67:4b:9e:d2:e4:52
Signature Algorithm: sha1WithRSAEncryption
Issuer: C=US, O=Thawte, Inc., CN=Thawte Code Signing CA - G2
Validity
Not Before: Nov 7 00:00:00 2011 GMT
Not After : Nov 6 23:59:59 2012 GMT
Subject: C=US, ST=Washington, L=Bellevue, O=ArenaNet, OU=Information Technologies, CN=ArenaNet
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:98:fb:2f:e4:45:fd:3b:ba:9c:fb:7f:ed:42:14:
01:22:42:c3:2c:b1:2d:c4:6b:4a:77:90:13:ae:c6:
d8:d2:91:cb:2e:6e:31:f3:57:28:a4:dc:fd:b2:b9:
a4:f4:b4:ee:be:07:62:d9:4c:45:c3:ce:a5:0e:83:
7b:74:be:8c:76:0c:77:cf:49:6e:e5:9d:9f:2f:5e:
4a:3d:19:98:ec:28:96:98:a8:a6:43:26:f4:0b:ce:
3e:be:78:b1:f9:1b:08:d7:94:72:19:b1:ba:9f:21:
a6:65:f9:a3:1f:5c:39:5a:46:75:2d:fa:3a:4d:74:
70:df:0e:a8:72:2c:7a:4b:fd:9c:44:cb:4f:78:e5:
6f:4f:f4:34:4b:bb:fe:0c:b5:cf:54:e1:6b:84:60:
41:bf:7a:b1:4b:93:1c:e8:38:a5:ea:c9:fb:96:42:
a8:d3:ae:aa:6e:77:bf:a5:8b:e6:35:d3:4f:59:44:
62:25:51:de:47:59:0c:e5:76:b6:32:64:e4:29:5f:
6e:a7:66:e8:a4:02:bc:db:ff:d7:c9:99:7a:1f:6e:
0f:76:e2:76:7e:18:25:e9:ea:55:dd:0a:09:9a:ee:
b3:73:80:4c:92:7a:53:7f:a1:6f:d7:55:e4:04:73:
22:6f:0a:25:a8:c4:a3:c8:d2:1c:37:fe:96:d7:5f:
48:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 CRL Distribution Points:
Full Name:
URI:http://cs-g2-crl.thawte.com/ThawteCSG2.crl
X509v3 Extended Key Usage:
Code Signing, Microsoft Commercial Code Signing
2.5.29.4:
0.0.0..
+.....7.......
Authority Information Access:
OCSP - URI:http://ocsp.thawte.com
Netscape Cert Type:
Object Signing
Signature Algorithm: sha1WithRSAEncryption
Signature Value:
9e:29:db:d4:6d:6b:43:44:1b:71:25:f8:16:40:88:0f:69:93:
e3:12:0f:07:20:7b:b0:60:c8:8c:31:fa:4a:fe:cc:11:10:13:
c7:89:0a:b1:62:54:0a:31:98:b1:5a:67:6b:67:13:ff:62:da:
53:3e:e2:b9:fe:89:06:29:66:54:03:31:47:04:20:75:0d:92:
8e:cc:32:64:00:2f:e5:12:9b:db:6b:88:1b:fe:07:cd:66:f7:
61:69:8d:3f:1e:30:86:21:84:f8:ce:94:25:f5:25:b9:5e:bb:
35:a5:55:a8:68:32:bd:16:c9:6f:40:4c:b0:a2:e6:80:16:0d:
0c:5c:56:8c:bc:27:dd:d3:31:f1:65:a2:4f:89:ea:49:00:e9:
f5:a0:7e:1e:82:52:27:07:40:d5:2e:11:1c:a8:fc:3e:55:06:
07:34:d3:0a:77:8f:d4:0b:e7:90:fd:24:94:52:80:f2:f1:bb:
3c:5b:70:d2:7a:44:a9:8f:57:bb:0c:2d:38:af:f5:f9:c9:dc:
9b:87:2f:26:9c:52:3c:3d:50:37:b1:5d:c0:56:86:b4:d6:30:
54:d1:db:d4:18:0a:09:0b:df:20:2f:49:98:8a:51:3d:91:d0:
00:64:ba:30:be:da:9f:60:2b:4c:51:63:fc:39:4e:07:b4:48:
cc:55:08:84
pkcs7-signedData
- 1
- SHA1: nil
- 1.3.6.1.4.1.311.2.1.4
- #0
- 1.3.6.1.4.1.311.2.1.15
- :
00 3c 00 3c 00 3c 00 4f 00 62 00 73 00 6f 00 6c |.<.<.<.O.b.s.o.l| 00 65 00 74 00 65 00 3e 00 3e 00 3e |.e.t.e.>.>.> |
- :
- SHA1
b1 dd e9 ea 65 0c 23 27 7b 03 94 ec 70 67 db f6 |....e.#'{...pg..| b7 34 e3 ad |.4.. |
- 1.3.6.1.4.1.311.2.1.15
- #0
- Certificates
- Certificate #0
- 2
- 38:25:D7:FA:F8:61:AF:9E:F4:90:E7:26:B5:D6:5A:D5
- RSA-SHA1: nil
- Issuer
- C: US
- O: VeriSign, Inc.
- CN: VeriSign Time Stamping Services CA
- 2007-06-15 00:00:00 UTC: 2012-06-14 23:59:59 UTC
- Subject
- C: US
- O: VeriSign, Inc.
- CN: VeriSign Time Stamping Services Signer - G2
- #5
- rsaEncryption: nil
- C4:B5:F2:52:15:BC:88:86:60:29:16:4A:5B:2F:4B:91:
6B:87:91:F3:35:54:58:35:EA:D1:36:5E:62:4D:52:51:
34:71:C2:7B:66:1D:89:C8:DD:2A:C4:6A:0A:F6:37:D9:
98:74:91:F6:92:AE:B0:B5:76:96:F1:A9:4A:63:45:47:
2E:6B:0B:92:4E:4B:2B:8C:EE:58:4A:8B:D4:07:E4:1A:
2C:F8:82:AA:58:D9:CD:42:F3:2D:C0:75:DE:8D:AB:C7:
8E:1D:9A:6C:4C:08:95:1E:DE:DB:EF:67:E1:72:C2:49:
C2:9E:60:3C:E1:E2:BE:16:A3:63:78:69:14:7B:AD:2D: 0x010001
- X509v3 extensions
- authorityInfoAccess
- OCSP: http://ocsp.verisign.com
- basicConstraints
- true
- nil
- crlDistributionPoints: http://crl.verisign.com/tss-ca.crl
- extendedKeyUsage: true, timeStamping
- keyUsage: true, 0xc0
- subjectAltName
- CN: TSA1-2
- authorityInfoAccess
- RSA-SHA1:
50 c5 4b c8 24 80 df e4 0d 24 c2 de 1a b1 a1 02 |P.K.$....$......| a1 a6 82 2d 0c 83 15 81 37 0a 82 0e 2c b0 5a 17 |...-....7...,.Z.| 61 b5 d8 05 fe 88 db f1 91 91 b3 56 1a 40 a6 eb |a..........V.@..| 92 be 38 39 b0 75 36 74 3a 98 4f e4 37 ba 99 89 |..89.u6t:.O.7...| ca 95 42 1d b0 b9 c7 a0 8d 57 e0 fa d5 64 04 42 |..B......W...d.B| 35 4e 01 d1 33 a2 17 c8 4d aa 27 c7 f2 e1 86 4c |5N..3...M.'....L| 02 38 4d 83 78 c6 fc 53 e0 eb e0 06 87 dd a4 96 |.8M.x..S........| 9e 5e 0c 98 e2 a5 be bf 82 85 c3 60 e1 df ad 28 |.^.........`...(| d8 c7 a5 4b 64 da c7 1b 5b bd ac 39 08 d5 38 22 |...Kd...[..9..8"| a1 33 8b 2f 8a 9a eb bc 07 21 3f 44 41 09 07 b5 |.3./.....!?DA...| 65 1c 24 bc 48 d3 44 80 eb a1 cf c9 02 b4 14 cf |e.$.H.D.........| 54 c7 16 a3 80 5c f9 79 3e 5d 72 7d 88 17 9e 2c |T....\.y>]r}...,| 43 a2 ca 53 ce 7d 3d f6 2a 3a b8 4f 94 00 a5 6d |C..S.}=.*:.O...m| 0a 83 5d f9 5e 53 f4 18 b3 57 0f 70 c3 fb f5 ad |..].^S...W.p....| 95 a0 0e 17 de c4 16 80 60 c9 0f 2b 6e 86 04 f1 |........`..+n...| eb f4 78 27 d1 05 c5 ee 34 5b 5e b9 49 32 f2 33 |..x'....4[^.I2.3|
- 2
- Certificate #1
- 2
- 47:BF:19:95:DF:8D:52:46:43:F7:DB:6D:48:0D:31:A4
- RSA-SHA1: nil
- Issuer
- C: ZA
- ST: Western Cape
- L: Durbanville
- O: Thawte
- OU: Thawte Certification
- CN: Thawte Timestamping CA
- 2003-12-04 00:00:00 UTC: 2013-12-03 23:59:59 UTC
- Subject
- C: US
- O: VeriSign, Inc.
- CN: VeriSign Time Stamping Services CA
- #5
- rsaEncryption: nil
- A9:CA:B2:A4:CC:CD:20:AF:0A:7D:89:AC:87:75:F0:B4:
4E:F1:DF:C1:0F:BF:67:61:BD:A3:64:1C:DA:BB:F9:CA:
33:AB:84:30:89:58:7E:8C:DB:6B:DD:36:9E:0F:BF:D1:
EC:78:F2:77:A6:7E:6F:3C:BF:93:AF:0D:BA:68:F4:6C:
94:CA:BD:52:2D:AB:48:3D:F5:B6:D5:5D:5F:1B:02:9F:
FA:2F:6B:1E:A4:F7:A3:9A:A6:1A:C8:02:E1:7F:4C:52:
E3:0E:60:EC:40:1C:7E:B9:0D:DE:3F:C7:B4:DF:87:BD:
5F:7A:6A:31:2E:03:99:81:13:A8:47:20:CE:31:73:0D:
57:2D:CD:78:34:33:95:12:99:12:B9:DE:68:2F:AA:E6:
E3:C2:8A:8C:2A:C3:8B:21:87:66:BD:83:58:57:6F:75:
BF:3C:AA:26:87:5D:CA:10:15:3C:9F:84:EA:54:C1:0A:
6E:C4:FE:C5:4A:DD:B9:07:11:97:22:7C:DB:3E:27:D1:
1E:78:EC:9F:31:C9:F1:E6:22:19:DB:C4:B3:47:43:9A:
1A:5F:A0:1E:90:E4:5E:F5:EE:7C:F1:7D:AB:62:01:8F:
F5:4D:0B:DE:D0:22:56:A8:95:CD:AE:88:76:AE:EE:BA:
0D:F3:E4:4D:D9:A0:FB:68:A0:AE:14:3B:B3:87:C1:BB: 0x010001
- X509v3 extensions
- authorityInfoAccess
- OCSP: http://ocsp.verisign.com
- basicConstraints
- true
- true: 0
- crlDistributionPoints: http://crl.verisign.com/ThawteTimestampingCA.crl
- extendedKeyUsage: timeStamping
- keyUsage: true, 6
- subjectAltName
- CN: TSA2048-1-53
- authorityInfoAccess
- RSA-SHA1:
4a 6b f9 ea 58 c2 44 1c 31 89 79 99 2b 96 bf 82 |Jk..X.D.1.y.+...| ac 01 d6 1c 4c cd b0 8a 58 6e df 08 29 a3 5e c8 |....L...Xn..).^.| ca 93 13 e7 04 52 0d ef 47 27 2f 00 38 b0 e4 c9 |.....R..G'/.8...| 93 4e 9a d4 22 62 15 f7 3f 37 21 4f 70 31 80 f1 |.N.."b..?7!Op1..| 8b 38 87 b3 e8 e8 97 00 fe cf 55 96 4e 24 d2 a9 |.8........U.N$..| 27 4e 7a ae b7 61 41 f3 2a ce e7 c9 d9 5e dd bb |'Nz..aA.*....^..| 2b 85 3e b5 9d b5 d9 e1 57 ff be b4 c5 7e f5 cf |+.>.....W....~..| 0c 9e f0 97 fe 2b d3 3b 52 1b 1b 38 27 f7 3f 4a |.....+.;R..8'.?J|
- 2
- Certificate #2
- 2
- 2F:A9:E9:0D:E8:61:0E:1E:A0:52:67:4B:9E:D2:E4:52
- RSA-SHA1: nil
- Issuer
- C: US
- O: Thawte, Inc.
- CN: Thawte Code Signing CA - G2
- 2011-11-07 00:00:00 UTC: 2012-11-06 23:59:59 UTC
- Subject
- C: US
- ST: Washington
- L: Bellevue
- O: ArenaNet
- OU: Information Technologies
- CN: ArenaNet
- #5
- rsaEncryption: nil
- 98:FB:2F:E4:45:FD:3B:BA:9C:FB:7F:ED:42:14:01:22:
42:C3:2C:B1:2D:C4:6B:4A:77:90:13:AE:C6:D8:D2:91:
CB:2E:6E:31:F3:57:28:A4:DC:FD:B2:B9:A4:F4:B4:EE:
BE:07:62:D9:4C:45:C3:CE:A5:0E:83:7B:74:BE:8C:76:
0C:77:CF:49:6E:E5:9D:9F:2F:5E:4A:3D:19:98:EC:28:
96:98:A8:A6:43:26:F4:0B:CE:3E:BE:78:B1:F9:1B:08:
D7:94:72:19:B1:BA:9F:21:A6:65:F9:A3:1F:5C:39:5A:
46:75:2D:FA:3A:4D:74:70:DF:0E:A8:72:2C:7A:4B:FD:
9C:44:CB:4F:78:E5:6F:4F:F4:34:4B:BB:FE:0C:B5:CF:
54:E1:6B:84:60:41:BF:7A:B1:4B:93:1C:E8:38:A5:EA:
C9:FB:96:42:A8:D3:AE:AA:6E:77:BF:A5:8B:E6:35:D3:
4F:59:44:62:25:51:DE:47:59:0C:E5:76:B6:32:64:E4:
29:5F:6E:A7:66:E8:A4:02:BC:DB:FF:D7:C9:99:7A:1F:
6E:0F:76:E2:76:7E:18:25:E9:EA:55:DD:0A:09:9A:EE:
B3:73:80:4C:92:7A:53:7F:A1:6F:D7:55:E4:04:73:22:
6F:0A:25:A8:C4:A3:C8:D2:1C:37:FE:96:D7:5F:48:D7: 0x010001
- X509v3 extensions
- basicConstraints
- true
- nil
- crlDistributionPoints: http://cs-g2-crl.thawte.com/ThawteCSG2.crl
- extendedKeyUsage
- codeSigning: msCodeCom
- 2.5.29.4
- msCodeCom: 0x80
- authorityInfoAccess
- OCSP: http://ocsp.thawte.com
- nsCertType: 0x10
- basicConstraints
- RSA-SHA1:
9e 29 db d4 6d 6b 43 44 1b 71 25 f8 16 40 88 0f |.)..mkCD.q%..@..| 69 93 e3 12 0f 07 20 7b b0 60 c8 8c 31 fa 4a fe |i..... {.`..1.J.| cc 11 10 13 c7 89 0a b1 62 54 0a 31 98 b1 5a 67 |........bT.1..Zg| 6b 67 13 ff 62 da 53 3e e2 b9 fe 89 06 29 66 54 |kg..b.S>.....)fT| 03 31 47 04 20 75 0d 92 8e cc 32 64 00 2f e5 12 |.1G. u....2d./..| 9b db 6b 88 1b fe 07 cd 66 f7 61 69 8d 3f 1e 30 |..k.....f.ai.?.0| 86 21 84 f8 ce 94 25 f5 25 b9 5e bb 35 a5 55 a8 |.!....%.%.^.5.U.| 68 32 bd 16 c9 6f 40 4c b0 a2 e6 80 16 0d 0c 5c |h2...o@L.......\| 56 8c bc 27 dd d3 31 f1 65 a2 4f 89 ea 49 00 e9 |V..'..1.e.O..I..| f5 a0 7e 1e 82 52 27 07 40 d5 2e 11 1c a8 fc 3e |..~..R'.@......>| 55 06 07 34 d3 0a 77 8f d4 0b e7 90 fd 24 94 52 |U..4..w......$.R| 80 f2 f1 bb 3c 5b 70 d2 7a 44 a9 8f 57 bb 0c 2d |....<[p.zD..W..-| 38 af f5 f9 c9 dc 9b 87 2f 26 9c 52 3c 3d 50 37 |8......./&.R<=P7| b1 5d c0 56 86 b4 d6 30 54 d1 db d4 18 0a 09 0b |.].V...0T.......| df 20 2f 49 98 8a 51 3d 91 d0 00 64 ba 30 be da |. /I..Q=...d.0..| 9f 60 2b 4c 51 63 fc 39 4e 07 b4 48 cc 55 08 84 |.`+LQc.9N..H.U..|
- 2
- Certificate #0
- 1
- unnamed
- #0
- C: US
- O: Thawte, Inc.
- CN: Thawte Code Signing CA - G2
- 2F:A9:E9:0D:E8:61:0E:1E:A0:52:67:4B:9E:D2:E4:52
- #0
- SHA1: nil
- #2
- 1.3.6.1.4.1.311.2.1.12
- nil
- contentType: 1.3.6.1.4.1.311.2.1.4
- 1.3.6.1.4.1.311.2.1.11: msCodeCom
- messageDigest:
d1 b5 70 31 82 34 a7 ee 97 62 ff d5 a5 5d b0 68 |..p1.4...b...].h| 3c 74 db 58 |
- 1.3.6.1.4.1.311.2.1.12
- rsaEncryption:
43 fc 79 d7 96 8c 4a 5f 6f 18 66 c0 f2 72 6f c4 |C.y...J_o.f..ro.| 44 b3 48 b2 ad 1f d4 95 3d 04 b4 ea 27 c8 df 93 |D.H.....=...'...| 7f bd 72 99 b7 9b f0 78 96 12 4e da 68 66 ad d7 |..r....x..N.hf..| 70 30 9b 56 55 b1 0f d9 c5 bb a0 ce b3 f9 6c ef |p0.VU.........l.| 72 37 fe c9 ca 8c 9a 48 86 b6 87 11 a5 8f 71 24 |r7.....H......q$| aa 4c 5c 93 5e 2b 2c ba 95 c7 d8 bc 63 21 59 2e |.L\.^+,.....c!Y.| a1 0b e0 a7 51 87 43 61 7f 84 5e 88 d4 4a df 37 |....Q.Ca..^..J.7| 29 e2 b3 4a 1e 35 72 3f 77 c9 54 0f d9 97 20 59 |)..J.5r?w.T... Y| db 58 45 b5 b4 b0 9d 1a 48 bb 62 c8 75 19 d4 2e |.XE.....H.b.u...| 44 bc 64 3b 8a a6 bc 5f 48 21 fc bd 27 57 7a 3c |D.d;..._H!..'Wz<| 13 a8 d7 81 37 20 03 ce c0 9d 3d 2b 65 0e bf 38 |....7 ....=+e..8| 05 9b f1 cd d5 87 d5 31 0f 7d e2 ce 5e a9 aa a0 |.......1.}..^...| f9 d0 9e b1 9c 01 df c4 4d c8 bb f2 09 5b 14 15 |........M....[..| 0a 47 2b 8b 18 fc fc 86 4c 76 59 0c 30 4b 93 27 |.G+.....LvY.0K.'| b0 18 0e 49 a3 38 1f 58 1d 94 7b 55 bc 19 4c 72 |...I.8.X..{U..Lr| fa c2 40 b9 82 72 40 73 91 a3 ab c4 1c 37 1c 41 |..@..r@s.....7.A| - countersignature
- 1
- unnamed
- #0
- C: US
- O: VeriSign, Inc.
- CN: VeriSign Time Stamping Services CA
- 38:25:D7:FA:F8:61:AF:9E:F4:90:E7:26:B5:D6:5A:D5
- #0
- SHA1: nil
- #2
- contentType: pkcs7-data
- signingTime: 2011-12-08 23:13:00 UTC
- messageDigest:
3b 69 56 b5 e9 03 f7 c9 4d e2 34 3f 29 13 22 3c |;iV.....M.4?)."<| ca 69 b5 d2 |.i.. |
- rsaEncryption:
2b ef d3 67 f4 a0 8b 80 13 80 80 94 6d e2 90 79 |+..g........m..y| 01 87 d2 7c 0b 96 b9 85 c6 38 cd c1 1c af c0 60 |...|.....8.....`| 7d 5b 4a 8b 4d e8 92 fa e4 1f 79 41 40 53 24 7c |}[J.M.....yA@S$|| 8a 2a c4 33 53 21 bb f8 d5 d3 46 26 0d 78 c7 e2 |.*.3S!....F&.x..| 6e 4b 86 81 21 43 82 ac d9 27 f5 19 ca 65 15 9c |nK..!C...'...e..| da ce 7a 6a 83 d5 f2 dd 9b 3c 4f e5 fc 47 14 5b |..zj.....
.d..|
- unnamed
- 1
- unnamed
| offset | size | type | comment | |
|---|---|---|---|---|
| 15c1 | 15 | HTM | # | |
| 4a8334 | 9755 | JPG | # | |
| 628bc0 | 140954 | PNG | (256 x 256) | # |
| 64b25c | 140954 | PNG | (256 x 256) | # |
| 66d8f8 | 140954 | PNG | (256 x 256) | # |
| 68ff94 | 140954 | PNG | (256 x 256) | # |
| 6b2630 | 140954 | PNG | (256 x 256) | # |
| 6d4ccc | 140954 | PNG | (256 x 256) | # |
| 6f7368 | 140954 | PNG | (256 x 256) | # |
| 719a04 | 140954 | PNG | (256 x 256) | # |
| 73c0a0 | 140954 | PNG | (256 x 256) | # |
| 75e73c | 140954 | PNG | (256 x 256) | # |
| 780dd8 | 140954 | PNG | (256 x 256) | # |
| 7a3472 | 129870 | BIN | overlay data past EOF | # |
![]() |
| Please donate some bucks to keep this site up and running: | |
| Ko-fi | |
|---|---|
| Yandex.Money | |
| Thank you! | |
[?] can't find file_offset of VA 0x9526e8
offset:( 0x )