filename | Procmon.exe | |
---|---|---|
size | 2474608 (0x25c270) | |
md5 | 9c85f494132cc6027762d8ddf1dd5a12 | |
type | PE32 executable (GUI) Intel 80386, for MS Windows | |
mimetype | application/x-dosexec | |
clamav | OK | |
virustotal | → scan with virustotal.com | |
histogram |
MZ Header
signature | MZ |
bytes_in_last_block | 0x90 |
blocks_in_file | 3 |
num_relocs | 0 |
header_paragraphs | 4 |
min_extra_paragraphs | 0 |
max_extra_paragraphs | 0xffff |
ss | 0 |
sp | 0xb8 |
checksum | 0 |
ip | 0 |
cs | 0 |
reloc_table_offset | 0x40 |
overlay_number | 0 |
reserved0 | 0 |
oem_id | 0 |
oem_info | 0 |
reserved2 | 0 |
reserved3 | 0 |
reserved4 | 0 |
reserved5 | 0 |
reserved6 | 0 |
lfanew | 0xe8 |
Rich Header
lib id | version | times used |
---|---|---|
149 | 30729 | 31 |
132 | 21022 | 5 |
19 | 9049 | 2 |
1 | 0 | 452 |
147 | 30729 | 27 |
131 | 30729 | 166 |
132 | 30729 | 104 |
148 | 30729 | 1 |
145 | 30729 | 1 |
DOS stub
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
PE Header
Packer / Compiler
Sections
Data Directory
id | lang | string |
---|---|---|
40005 | 1033 | Save (Ctrl+S) |
40006 | 1033 | High Resolution Date & Time |
40018 | 1033 | Capture (Ctrl+E) |
40019 | 1033 | Autoscroll (Ctrl+A) |
40020 | 1033 | Clear (Ctrl+X) |
40021 | 1033 | Show Process Tree |
40023 | 1033 | Filter (Ctrl+L) |
40024 | 1033 | Find (Ctrl+F) |
40036 | 1033 | Open |
40041 | 1033 | Show File System Activity |
40042 | 1033 | Show Registry Activity |
40043 | 1033 | Show Network Activity |
40044 | 1033 | Show Process and Thread Activity |
40045 | 1033 | Highlight (Ctrl+H) |
40046 | 1033 | Show Profiling Events |
40047 | 1033 | Include Process From Window |
40051 | 1033 | Jump to Object (Ctrl+J) |
40052 | 1033 | Date & Time |
40053 | 1033 | Process Name |
40054 | 1033 | PID |
40055 | 1033 | Operation |
40056 | 1033 | Result |
40057 | 1033 | Detail |
40058 | 1033 | Sequence |
40059 | 1033 | Object Reference |
40064 | 1033 | Company |
40065 | 1033 | Description |
40066 | 1033 | Command Line |
40067 | 1033 | User |
40068 | 1033 | Image Path |
40069 | 1033 | Session |
40070 | 1033 | Event Complete |
40071 | 1033 | Path |
40072 | 1033 | TID |
40073 | 1033 | Image Load |
40074 | 1033 | Frame |
40075 | 1033 | Address |
40076 | 1033 | Relative Time |
40077 | 1033 | Duration |
40078 | 1033 | Time of Day |
40079 | 1033 | Module |
40080 | 1033 | Location |
40081 | 1033 | Version |
40082 | 1033 | Event Class |
40083 | 1033 | Authentication ID |
40084 | 1033 | Virtualized |
40085 | 1033 | Integrity |
40086 | 1033 | Category |
40087 | 1033 | Parent PID |
40088 | 1033 | Architecture |
module_name | hint | ord | function_name |
---|---|---|---|
WS2_32.dll | 16 | ||
WS2_32.dll | 6 | ||
WS2_32.dll | 2 | ||
WS2_32.dll | 3 | ||
WS2_32.dll | 19 | ||
WS2_32.dll | 13 | ||
WS2_32.dll | 1 | ||
WS2_32.dll | 8 | ||
WS2_32.dll | 56 | ||
WS2_32.dll | 51 | ||
WS2_32.dll | 11 | ||
WS2_32.dll | 55 | ||
WS2_32.dll | 9 | ||
WS2_32.dll | 12 | ||
WS2_32.dll | 112 | ||
WS2_32.dll | 115 | ||
WS2_32.dll | 15 | ||
WS2_32.dll | 4 | ||
WS2_32.dll | 111 | ||
WS2_32.dll | 23 | ||
WS2_32.dll | 52 | ||
VERSION.dll | 6 | GetFileVersionInfoW | |
VERSION.dll | 14 | VerQueryValueW | |
VERSION.dll | 5 | GetFileVersionInfoSizeW | |
COMCTL32.dll | 113 | ImageList_SetBkColor | |
COMCTL32.dll | 83 | ImageList_Create | |
COMCTL32.dll | 17 | ||
COMCTL32.dll | 77 | ImageList_Add | |
COMCTL32.dll | 99 | ImageList_GetIconSize | |
COMCTL32.dll | 98 | ImageList_GetIcon | |
COMCTL32.dll | 119 | ImageList_SetOverlayImage | |
COMCTL32.dll | 14 | CreateToolbarEx | |
COMCTL32.dll | 12 | CreateStatusWindowW | |
COMCTL32.dll | 123 | InitCommonControlsEx | |
COMCTL32.dll | 91 | ImageList_DrawEx | |
COMCTL32.dll | 84 | ImageList_Destroy | |
COMCTL32.dll | 111 | ImageList_ReplaceIcon | |
FLTLIB.DLL | 11 | FilterGetMessage | |
FLTLIB.DLL | 19 | FilterReplyMessage | |
FLTLIB.DLL | 3 | FilterConnectCommunicationPort | |
FLTLIB.DLL | 20 | FilterSendMessage | |
KERNEL32.dll | 496 | GetFileSize | |
KERNEL32.dll | 143 | CreateFileW | |
KERNEL32.dll | 140 | CreateFileMappingW | |
KERNEL32.dll | 1107 | SetEndOfFile | |
KERNEL32.dll | 1126 | SetFilePointer | |
KERNEL32.dll | 1238 | UnmapViewOfFile | |
KERNEL32.dll | 1230 | TryEnterCriticalSection | |
KERNEL32.dll | 855 | MapViewOfFile | |
KERNEL32.dll | 350 | FormatMessageW | |
KERNEL32.dll | 838 | LocalFileTimeToFileTime | |
KERNEL32.dll | 1213 | SystemTimeToFileTime | |
KERNEL32.dll | 663 | GetTimeFormatW | |
KERNEL32.dll | 456 | GetDateFormatW | |
KERNEL32.dll | 293 | FileTimeToSystemTime | |
KERNEL32.dll | 292 | FileTimeToLocalFileTime | |
KERNEL32.dll | 563 | GetNumberFormatW | |
KERNEL32.dll | 674 | GetVersion | |
KERNEL32.dll | 1317 | WriteFile | |
KERNEL32.dll | 960 | ReadFile | |
KERNEL32.dll | 1177 | SetThreadPriority | |
KERNEL32.dll | 452 | GetCurrentThread | |
KERNEL32.dll | 1022 | ReleaseSemaphore | |
KERNEL32.dll | 724 | HeapSize | |
KERNEL32.dll | 715 | HeapAlloc | |
KERNEL32.dll | 281 | ExitProcess | |
KERNEL32.dll | 1271 | WaitForMultipleObjects | |
KERNEL32.dll | 133 | CreateEventW | |
KERNEL32.dll | 719 | HeapFree | |
KERNEL32.dll | 396 | GetComputerNameA | |
KERNEL32.dll | 1039 | ResetEvent | |
KERNEL32.dll | 1113 | SetEvent | |
KERNEL32.dll | 691 | GlobalAlloc | |
KERNEL32.dll | 935 | QueryPerformanceCounter | |
KERNEL32.dll | 717 | HeapCreate | |
KERNEL32.dll | 174 | CreateSemaphoreW | |
KERNEL32.dll | 718 | HeapDestroy | |
KERNEL32.dll | 487 | GetFileAttributesExW | |
KERNEL32.dll | 1155 | SetProcessShutdownParameters | |
KERNEL32.dll | 1069 | SetConsoleCtrlHandler | |
KERNEL32.dll | 399 | GetComputerNameW | |
KERNEL32.dll | 901 | OpenThread | |
KERNEL32.dll | 646 | GetThreadContext | |
KERNEL32.dll | 449 | GetCurrentProcessId | |
KERNEL32.dll | 828 | LoadLibraryA | |
KERNEL32.dll | 623 | GetSystemDirectoryA | |
KERNEL32.dll | 302 | FindClose | |
KERNEL32.dll | 325 | FindNextFileW | |
KERNEL32.dll | 313 | FindFirstFileW | |
KERNEL32.dll | 1111 | SetEnvironmentVariableW | |
KERNEL32.dll | 476 | GetEnvironmentVariableW | |
KERNEL32.dll | 284 | ExpandEnvironmentStringsA | |
KERNEL32.dll | 1222 | TlsFree | |
KERNEL32.dll | 1224 | TlsSetValue | |
KERNEL32.dll | 1221 | TlsAlloc | |
KERNEL32.dll | 1223 | TlsGetValue | |
KERNEL32.dll | 531 | GetModuleFileNameA | |
KERNEL32.dll | 612 | GetStdHandle | |
KERNEL32.dll | 610 | GetStartupInfoA | |
KERNEL32.dll | 390 | GetCommandLineA | |
KERNEL32.dll | 453 | GetCurrentThreadId | |
KERNEL32.dll | 282 | ExitThread | |
KERNEL32.dll | 722 | HeapReAlloc | |
KERNEL32.dll | 945 | RaiseException | |
KERNEL32.dll | 768 | IsDebuggerPresent | |
KERNEL32.dll | 1189 | SetUnhandledExceptionFilter | |
KERNEL32.dll | 1235 | UnhandledExceptionFilter | |
KERNEL32.dll | 1216 | TerminateProcess | |
KERNEL32.dll | 1048 | RtlUnwind | |
KERNEL32.dll | 586 | GetProcessHeap | |
KERNEL32.dll | 1297 | WideCharToMultiByte | |
KERNEL32.dll | 1357 | lstrlenA | |
KERNEL32.dll | 871 | MultiByteToWideChar | |
KERNEL32.dll | 702 | GlobalLock | |
KERNEL32.dll | 709 | GlobalUnlock | |
KERNEL32.dll | 518 | GetLocaleInfoW | |
KERNEL32.dll | 100 | CompareStringW | |
KERNEL32.dll | 168 | CreateProcessW | |
KERNEL32.dll | 896 | OpenProcess | |
KERNEL32.dll | 830 | LoadLibraryExW | |
KERNEL32.dll | 258 | EnumResourceNamesW | |
KERNEL32.dll | 690 | GlobalAddAtomW | |
KERNEL32.dll | 354 | FreeLibrary | |
KERNEL32.dll | 870 | MulDiv | |
KERNEL32.dll | 1260 | VirtualFree | |
KERNEL32.dll | 627 | GetSystemInfo | |
KERNEL32.dll | 704 | GlobalMemoryStatusEx | |
KERNEL32.dll | 676 | GetVersionExW | |
KERNEL32.dll | 490 | GetFileAttributesW | |
KERNEL32.dll | 507 | GetFullPathNameW | |
KERNEL32.dll | 567 | GetOEMCP | |
KERNEL32.dll | 778 | IsValidCodePage | |
KERNEL32.dll | 410 | GetConsoleCP | |
KERNEL32.dll | 428 | GetConsoleMode | |
KERNEL32.dll | 1135 | SetHandleCount | |
KERNEL32.dll | 499 | GetFileType | |
KERNEL32.dll | 811 | LCMapStringA | |
KERNEL32.dll | 813 | LCMapStringW | |
KERNEL32.dll | 391 | GetCommandLineW | |
KERNEL32.dll | 836 | LocalAlloc | |
KERNEL32.dll | 840 | LocalFree | |
KERNEL32.dll | 751 | InterlockedIncrement | |
KERNEL32.dll | 214 | DeleteFileW | |
KERNEL32.dll | 1139 | SetLastError | |
KERNEL32.dll | 624 | GetSystemDirectoryW | |
KERNEL32.dll | 447 | GetCurrentDirectoryW | |
KERNEL32.dll | 285 | ExpandEnvironmentStringsW | |
KERNEL32.dll | 334 | FindResourceW | |
KERNEL32.dll | 833 | LoadResource | |
KERNEL32.dll | 1201 | SizeofResource | |
KERNEL32.dll | 852 | LockResource | |
KERNEL32.dll | 1121 | SetFileAttributesW | |
KERNEL32.dll | 448 | GetCurrentProcess | |
KERNEL32.dll | 514 | GetLastError | |
KERNEL32.dll | 1257 | VirtualAlloc | |
KERNEL32.dll | 209 | DeleteCriticalSection | |
KERNEL32.dll | 738 | InitializeCriticalSection | |
KERNEL32.dll | 633 | GetSystemTimeAsFileTime | |
KERNEL32.dll | 1202 | Sleep | |
KERNEL32.dll | 1273 | WaitForSingleObject | |
KERNEL32.dll | 82 | CloseHandle | |
KERNEL32.dll | 659 | GetTickCount | |
KERNEL32.dll | 181 | CreateThread | |
KERNEL32.dll | 825 | LeaveCriticalSection | |
KERNEL32.dll | 238 | EnterCriticalSection | |
KERNEL32.dll | 747 | InterlockedDecrement | |
KERNEL32.dll | 831 | LoadLibraryW | |
KERNEL32.dll | 581 | GetProcAddress | |
KERNEL32.dll | 536 | GetModuleHandleW | |
KERNEL32.dll | 532 | GetModuleFileNameW | |
KERNEL32.dll | 533 | GetModuleHandleA | |
KERNEL32.dll | 370 | GetCPInfo | |
KERNEL32.dll | 352 | FreeEnvironmentStringsA | |
KERNEL32.dll | 472 | GetEnvironmentStrings | |
KERNEL32.dll | 353 | FreeEnvironmentStringsW | |
KERNEL32.dll | 474 | GetEnvironmentStringsW | |
KERNEL32.dll | 739 | InitializeCriticalSectionAndSpinCount | |
KERNEL32.dll | 614 | GetStringTypeA | |
KERNEL32.dll | 617 | GetStringTypeW | |
KERNEL32.dll | 516 | GetLocaleInfoA | |
KERNEL32.dll | 1159 | SetStdHandle | |
KERNEL32.dll | 343 | FlushFileBuffers | |
KERNEL32.dll | 1306 | WriteConsoleA | |
KERNEL32.dll | 432 | GetConsoleOutputCP | |
KERNEL32.dll | 1316 | WriteConsoleW | |
KERNEL32.dll | 136 | CreateFileA | |
KERNEL32.dll | 936 | QueryPerformanceFrequency | |
KERNEL32.dll | 360 | GetACP | |
USER32.dll | 175 | DispatchMessageW | |
USER32.dll | 590 | RegisterClassW | |
USER32.dll | 487 | LoadBitmapW | |
USER32.dll | 158 | DeleteMenu | |
USER32.dll | 442 | InsertMenuW | |
USER32.dll | 483 | KillTimer | |
USER32.dll | 164 | DestroyMenu | |
USER32.dll | 567 | PostQuitMessage | |
USER32.dll | 671 | SetMenuInfo | |
USER32.dll | 670 | SetMenuDefaultItem | |
USER32.dll | 107 | CreatePopupMenu | |
USER32.dll | 441 | InsertMenuItemW | |
USER32.dll | 337 | GetMenuItemCount | |
USER32.dll | 340 | GetMenuItemInfoW | |
USER32.dll | 331 | GetMenu | |
USER32.dll | 63 | CheckMenuItem | |
USER32.dll | 296 | GetDlgItemInt | |
USER32.dll | 243 | EqualRect | |
USER32.dll | 252 | FlashWindowEx | |
USER32.dll | 476 | IsWindowEnabled | |
USER32.dll | 480 | IsWindowVisible | |
USER32.dll | 503 | LoadMenuW | |
USER32.dll | 378 | GetSubMenu | |
USER32.dll | 214 | EnableMenuItem | |
USER32.dll | 758 | TrackPopupMenu | |
USER32.dll | 654 | SetDlgItemInt | |
USER32.dll | 525 | MessageBeep | |
USER32.dll | 639 | SetActiveWindow | |
USER32.dll | 298 | GetDlgItemTextW | |
USER32.dll | 611 | RegisterWindowMessageW | |
USER32.dll | 65 | CheckRadioButton | |
USER32.dll | 99 | CreateDialogParamW | |
USER32.dll | 621 | ScreenToClient | |
USER32.dll | 274 | GetClassNameW | |
USER32.dll | 157 | DeferWindowPos | |
USER32.dll | 13 | BeginDeferWindowPos | |
USER32.dll | 223 | EnumChildWindows | |
USER32.dll | 217 | EndDeferWindowPos | |
USER32.dll | 769 | UnionRect | |
USER32.dll | 482 | IsZoomed | |
USER32.dll | 198 | DrawFrameControl | |
USER32.dll | 714 | SetWindowTextA | |
USER32.dll | 709 | SetWindowPlacement | |
USER32.dll | 411 | GetWindowPlacement | |
USER32.dll | 398 | GetWindow | |
USER32.dll | 377 | GetShellWindow | |
USER32.dll | 256 | GetActiveWindow | |
USER32.dll | 71 | ClientToScreen | |
USER32.dll | 550 | OpenClipboard | |
USER32.dll | 764 | TranslateMessage | |
USER32.dll | 646 | SetClipboardData | |
USER32.dll | 73 | CloseClipboard | |
USER32.dll | 495 | LoadImageW | |
USER32.dll | 250 | FindWindowW | |
USER32.dll | 806 | WaitForInputIdle | |
USER32.dll | 420 | GetWindowThreadProcessId | |
USER32.dll | 465 | IsIconic | |
USER32.dll | 249 | FindWindowExW | |
USER32.dll | 658 | SetFocus | |
USER32.dll | 102 | CreateIconFromResourceEx | |
USER32.dll | 264 | GetCapture | |
USER32.dll | 485 | LoadAcceleratorsW | |
USER32.dll | 685 | SetPropW | |
USER32.dll | 363 | GetPropW | |
USER32.dll | 166 | DestroyWindow | |
USER32.dll | 644 | SetClassLongW | |
USER32.dll | 163 | DestroyIcon | |
USER32.dll | 493 | LoadIconW | |
USER32.dll | 62 | CheckDlgButton | |
USER32.dll | 462 | IsDlgButtonChecked | |
USER32.dll | 288 | GetCursorPos | |
USER32.dll | 710 | SetWindowPos | |
USER32.dll | 30 | CallWindowProcW | |
USER32.dll | 549 | OffsetRect | |
USER32.dll | 285 | GetCursor | |
USER32.dll | 461 | IsDialogMessageW | |
USER32.dll | 762 | TranslateAcceleratorW | |
USER32.dll | 812 | WindowFromPoint | |
USER32.dll | 402 | GetWindowDC | |
USER32.dll | 272 | GetClassLongW | |
USER32.dll | 392 | GetUpdateRgn | |
USER32.dll | 317 | GetKeyState | |
USER32.dll | 445 | IntersectRect | |
USER32.dll | 373 | GetScrollInfo | |
USER32.dll | 688 | SetScrollInfo | |
USER32.dll | 536 | MonitorFromPoint | |
USER32.dll | 351 | GetMonitorInfoW | |
USER32.dll | 307 | GetIconInfo | |
USER32.dll | 300 | GetFocus | |
USER32.dll | 200 | DrawIconEx | |
USER32.dll | 253 | FrameRect | |
USER32.dll | 246 | FillRect | |
USER32.dll | 566 | PostMessageW | |
USER32.dll | 506 | LoadStringW | |
USER32.dll | 648 | SetCursor | |
USER32.dll | 437 | InflateRect | |
USER32.dll | 170 | DialogBoxIndirectParamW | |
USER32.dll | 533 | MessageBoxW | |
USER32.dll | 289 | GetDC | |
USER32.dll | 613 | ReleaseDC | |
USER32.dll | 715 | SetWindowTextW | |
USER32.dll | 699 | SetTimer | |
USER32.dll | 785 | UpdateWindow | |
USER32.dll | 172 | DialogBoxParamW | |
USER32.dll | 382 | GetSystemMetrics | |
USER32.dll | 260 | GetAncestor | |
USER32.dll | 291 | GetDesktopWindow | |
USER32.dll | 216 | EnableWindow | |
USER32.dll | 406 | GetWindowLongW | |
USER32.dll | 708 | SetWindowLongW | |
USER32.dll | 213 | EmptyClipboard | |
USER32.dll | 625 | ScrollWindowEx | |
USER32.dll | 67 | ChildWindowFromPoint | |
USER32.dll | 640 | SetCapture | |
USER32.dll | 612 | ReleaseCapture | |
USER32.dll | 446 | InvalidateRect | |
USER32.dll | 14 | BeginPaint | |
USER32.dll | 276 | GetClientRect | |
USER32.dll | 419 | GetWindowTextW | |
USER32.dll | 380 | GetSysColorBrush | |
USER32.dll | 379 | GetSysColor | |
USER32.dll | 208 | DrawTextW | |
USER32.dll | 220 | EndPaint | |
USER32.dll | 156 | DefWindowProcW | |
USER32.dll | 491 | LoadCursorW | |
USER32.dll | 589 | RegisterClassExW | |
USER32.dll | 636 | SendMessageW | |
USER32.dll | 735 | ShowWindow | |
USER32.dll | 356 | GetParent | |
USER32.dll | 521 | MapWindowPoints | |
USER32.dll | 110 | CreateWindowExW | |
USER32.dll | 295 | GetDlgItem | |
USER32.dll | 412 | GetWindowRect | |
USER32.dll | 539 | MoveWindow | |
USER32.dll | 656 | SetDlgItemTextW | |
USER32.dll | 218 | EndDialog | |
USER32.dll | 576 | PtInRect | |
USER32.dll | 349 | GetMessageW | |
USER32.dll | 659 | SetForegroundWindow | |
GDI32.dll | 624 | SaveDC | |
GDI32.dll | 671 | SetROP2 | |
GDI32.dll | 607 | Rectangle | |
GDI32.dll | 617 | RestoreDC | |
GDI32.dll | 599 | Polyline | |
GDI32.dll | 79 | CreateRectRgn | |
GDI32.dll | 605 | RectInRegion | |
GDI32.dll | 80 | CreateRectRgnIndirect | |
GDI32.dll | 629 | SelectClipRgn | |
GDI32.dll | 426 | GetBkMode | |
GDI32.dll | 550 | GetTextMetricsW | |
GDI32.dll | 373 | GdiFlush | |
GDI32.dll | 516 | GetPixel | |
GDI32.dll | 667 | SetPixel | |
GDI32.dll | 65 | CreateFontW | |
GDI32.dll | 525 | GetStockObject | |
GDI32.dll | 47 | CreateCompatibleBitmap | |
GDI32.dll | 75 | CreatePen | |
GDI32.dll | 598 | Polygon | |
GDI32.dll | 570 | MoveToEx | |
GDI32.dll | 639 | SetBkMode | |
GDI32.dll | 509 | GetObjectW | |
GDI32.dll | 64 | CreateFontIndirectW | |
GDI32.dll | 423 | GetBitmapBits | |
GDI32.dll | 425 | GetBkColor | |
GDI32.dll | 84 | CreateSolidBrush | |
GDI32.dll | 459 | GetDeviceCaps | |
GDI32.dll | 660 | SetMapMode | |
GDI32.dll | 688 | StartDocW | |
GDI32.dll | 690 | StartPage | |
GDI32.dll | 242 | EndPage | |
GDI32.dll | 239 | EndDoc | |
GDI32.dll | 638 | SetBkColor | |
GDI32.dll | 19 | BitBlt | |
GDI32.dll | 48 | CreateCompatibleDC | |
GDI32.dll | 227 | DeleteDC | |
GDI32.dll | 230 | DeleteObject | |
GDI32.dll | 631 | SelectObject | |
GDI32.dll | 678 | SetTextColor | |
GDI32.dll | 566 | LineTo | |
COMDLG32.dll | 21 | PrintDlgW | |
COMDLG32.dll | 1 | ChooseColorW | |
COMDLG32.dll | 12 | GetOpenFileNameW | |
COMDLG32.dll | 8 | FindTextW | |
COMDLG32.dll | 3 | ChooseFontW | |
COMDLG32.dll | 14 | GetSaveFileNameW | |
ADVAPI32.dll | 608 | RegOpenKeyExA | |
ADVAPI32.dll | 621 | RegQueryValueExA | |
ADVAPI32.dll | 594 | RegEnumValueW | |
ADVAPI32.dll | 116 | ConvertStringSidToSidW | |
ADVAPI32.dll | 223 | DuplicateTokenEx | |
ADVAPI32.dll | 32 | AllocateAndInitializeSid | |
ADVAPI32.dll | 263 | EqualSid | |
ADVAPI32.dll | 288 | FreeSid | |
ADVAPI32.dll | 310 | GetLengthSid | |
ADVAPI32.dll | 401 | LookupAccountSidW | |
ADVAPI32.dll | 569 | RegCreateKeyExW | |
ADVAPI32.dll | 639 | RegSetValueW | |
ADVAPI32.dll | 592 | RegEnumKeyW | |
ADVAPI32.dll | 346 | GetTokenInformation | |
ADVAPI32.dll | 609 | RegOpenKeyExW | |
ADVAPI32.dll | 483 | MapGenericMask | |
ADVAPI32.dll | 108 | ConvertSidToStringSidW | |
ADVAPI32.dll | 622 | RegQueryValueExW | |
ADVAPI32.dll | 612 | RegOpenKeyW | |
ADVAPI32.dll | 580 | RegDeleteKeyW | |
ADVAPI32.dll | 584 | RegDeleteValueW | |
ADVAPI32.dll | 638 | RegSetValueExW | |
ADVAPI32.dll | 572 | RegCreateKeyW | |
ADVAPI32.dll | 560 | RegCloseKey | |
ADVAPI32.dll | 407 | LookupPrivilegeValueW | |
ADVAPI32.dll | 503 | OpenProcessToken | |
ADVAPI32.dll | 31 | AdjustTokenPrivileges | |
SHELL32.dll | 207 | SHGetMalloc | |
SHELL32.dll | 215 | SHGetPathFromIDListW | |
SHELL32.dll | 6 | CommandLineToArgvW | |
SHELL32.dll | 31 | DragQueryFileW | |
SHELL32.dll | 127 | SHChangeNotify | |
SHELL32.dll | 290 | ShellExecuteW | |
SHELL32.dll | 223 | SHGetSpecialFolderLocation | |
SHELL32.dll | 123 | SHBrowseForFolderW | |
SHELL32.dll | 289 | ShellExecuteExW | |
SHELL32.dll | 189 | SHGetFileInfoW | |
ole32.dll | 99 | CoSetProxyBlanket | |
ole32.dll | 16 | CoCreateInstance | |
ole32.dll | 62 | CoInitialize | |
ole32.dll | 343 | RegisterDragDrop | |
ole32.dll | 344 | ReleaseStgMedium | |
ole32.dll | 306 | OleInitialize | |
ole32.dll | 121 | CreateBindCtx | |
OLEAUT32.dll | 2 | ||
OLEAUT32.dll | 6 | ||
OLEAUT32.dll | 150 | ||
OLEAUT32.dll | 7 | ||
OLEAUT32.dll | 9 | ||
OLEAUT32.dll | 8 | ||
OLEAUT32.dll | 25 | ||
OLEAUT32.dll | 12 | ||
OLEAUT32.dll | 16 | ||
OLEAUT32.dll | 24 | ||
OLEAUT32.dll | 23 | ||
OLEAUT32.dll | 19 | ||
OLEAUT32.dll | 20 | ||
OLEAUT32.dll | 185 | ||
OLEAUT32.dll | 4 | ||
OLEAUT32.dll | 149 | ||
SHLWAPI.dll | 164 | SHAutoComplete |
StringTable 040904b0
CompanyName | Sysinternals - www.sysinternals.com |
FileDescription | Process Monitor |
FileVersion | 3.03 |
InternalName | Procmon |
LegalCopyright | Copyright © 1996-2012 Mark Russinovich and Bryce Cogswell |
OriginalFilename | Procmon.exe |
ProductName | Sysinternals Procmon |
ProductVersion | 3.03 |
VS_FIXEDFILEINFO
FileVersion | 3.3.0.0 |
ProductVersion | 3.3.0.0 |
StrucVersion | 0x10000 |
FileFlagsMask | 0x3f |
FileFlags | 0 |
FileOS | 0x40004 |
FileType | 1 |
FileSubtype | 0 |
Signers (1)
issuer: /C=US/ST=Washington/L=Redmond/O=Microsoft Corporation/CN=Microsoft Code Signing PCA
serial: 6119CC93000100000066
Certificates (4)
Certificate: Data: Version: 3 (0x2) Serial Number: 61:19:cc:93:00:01:00:00:00:66 Signature Algorithm: sha1WithRSAEncryption Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Code Signing PCA Validity Not Before: Oct 10 20:32:25 2011 GMT Not After : Jan 10 20:32:25 2013 GMT Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=MOPR, CN=Microsoft Corporation Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:5b:be:7d:11:24:e3:86:06:e0:66:ff:48:b5: 17:bd:02:e4:b4:0c:32:f0:72:3e:7d:2e:87:d7:4e: a1:b1:a7:43:2f:f7:65:9e:31:e1:32:31:45:ae:d7: c1:24:84:21:d7:2e:b5:84:7e:fa:35:d3:53:1c:d7: b6:51:1e:4f:ce:66:b9:eb:b7:0c:02:fd:29:5c:ad: a8:87:f6:ca:22:b4:d5:bf:08:75:f5:8a:70:8f:63: d7:ef:8a:1e:e9:8f:43:24:64:5a:d3:87:7d:90:6d: 3b:ac:76:cd:57:36:7d:e8:bc:10:56:ac:98:f0:89: 5d:2e:64:c6:af:26:09:5e:1e:63:15:f1:3d:bf:16: 8f:99:88:02:c3:30:b7:c1:0b:60:1f:0f:72:cc:d6: b7:a8:35:12:86:9b:a1:0b:0a:e6:93:5b:8e:fa:54: 9c:c1:f3:19:5f:42:8d:12:9f:1d:3f:90:b7:27:13: 83:19:32:82:1d:f3:d9:87:d4:21:b2:3c:a2:b6:07: 4f:d7:24:aa:ee:8d:f5:b3:d9:fa:f9:39:4f:a7:e9: f2:af:59:52:f4:dc:41:9b:2f:11:70:63:dd:ea:de: aa:f1:6d:21:04:10:53:33:bb:b2:4f:c5:e1:53:b2: 41:65:47:6e:37:f6:bc:e9:9b:16:41:91:6b:2e:5b: 30:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Extended Key Usage: Code Signing X509v3 Subject Key Identifier: 1B:52:0E:F3:11:2A:B7:C0:89:C3:11:81:3D:D4:96:58:B9:A3:53:6E X509v3 Key Usage: critical Digital Signature X509v3 Authority Key Identifier: keyid:CB:11:E8:CA:D2:B4:16:58:01:C9:37:2E:33:16:16:B9:4C:9A:0A:1F X509v3 CRL Distribution Points: Full Name: URI:http://crl.microsoft.com/pki/crl/products/MicCodSigPCA_08-31-2010.crl Authority Information Access: CA Issuers - URI:http://www.microsoft.com/pki/certs/MicCodSigPCA_08-31-2010.crt Signature Algorithm: sha1WithRSAEncryption a5:5b:36:6c:ad:4e:9b:69:12:e3:6f:8a:02:9b:69:77:c3:6c: 64:72:28:88:d9:3d:45:6d:2c:18:7b:d4:28:2f:13:e2:59:6a: 1b:c2:0b:34:b7:8a:fd:ea:b9:94:ec:07:31:e6:6a:f4:75:04: d3:a7:da:5e:3a:06:9e:10:fd:a9:0d:bd:9c:51:43:6f:ff:67: 94:9c:e1:cf:7c:f0:24:b0:35:cc:83:5d:ee:da:c0:6f:36:49: c0:5a:0a:57:f6:73:e1:9e:f3:e3:08:4c:3b:3e:2f:cc:d2:cd: ee:4f:22:70:f7:04:1f:02:a6:4b:9b:b8:8f:5c:88:0e:36:94: 6c:33:07:b8:a9:ad:51:a0:d0:c2:dc:8e:22:12:bd:c3:df:82: d7:56:a1:f7:dd:f0:a5:20:57:10:10:9d:ee:ac:86:74:6c:71: 9b:c1:f0:f2:c2:70:5e:a7:db:6d:4d:37:58:99:4d:79:40:d0: 34:5d:5a:25:ae:67:eb:1b:4e:46:06:b0:8c:29:1f:a3:10:8f: a5:33:9f:23:d5:f8:b5:46:7d:e0:ee:63:98:90:4b:3e:05:a8: 2f:b0:18:b3:59:a4:af:41:53:8e:08:05:10:2d:2a:c9:3a:06: 4c:1c:2e:a9:31:51:56:64:ac:9a:cc:ac:97:98:29:8a:97:90: 87:ea:9d:b6
Certificate: Data: Version: 3 (0x2) Serial Number: 61:05:13:36:00:00:00:00:00:1a Signature Algorithm: sha1WithRSAEncryption Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Time-Stamp PCA Validity Not Before: Jul 25 20:42:17 2011 GMT Not After : Oct 25 20:42:17 2012 GMT Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=MOPR, OU=nCipher DSE ESN:159C-A3F7-2570, CN=Microsoft Time-Stamp Service Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:34:98:19:c9:09:29:63:99:02:16:75:a8:88: 57:7d:a1:bb:a9:41:12:fc:64:91:a5:d6:05:78:bf: 77:dc:ec:e6:ae:b8:50:4e:c0:e3:1a:bd:ed:b7:fd: f8:20:8a:71:39:aa:72:92:72:9f:8a:09:e5:13:ef: 91:41:ed:61:25:6b:51:ad:ee:a8:43:b5:61:42:2c: 9d:f2:1d:b1:d2:fc:b7:f5:7b:a3:73:76:13:b3:2b: a3:db:94:61:80:55:a1:0f:6d:dd:d8:ec:16:ff:85: 7f:96:9e:88:7f:00:2e:8e:7a:24:ba:68:9d:8f:c6: ca:f4:90:79:7a:e1:9b:ef:06:5d:7e:f8:2e:c3:6a: 15:9c:3c:14:2f:e7:d5:94:c8:22:1b:51:cb:a9:55: 86:21:b7:5a:f3:41:12:39:9f:f0:55:a9:4e:aa:25: 2b:63:fb:91:72:3c:0f:7c:c0:96:72:dc:c1:a3:c1: 08:ca:de:c5:c9:b5:c0:0a:5f:a5:9c:0b:aa:72:0a: 5d:0a:40:7d:2e:98:d0:ab:b2:88:8f:86:80:e8:7d: d1:be:55:6b:e0:58:2c:c8:36:3f:f9:e6:11:c3:f0: 43:05:85:78:03:17:e5:2c:a7:29:7c:d3:e2:95:17: 00:6c:db:dc:ad:3c:19:3a:02:e0:7d:62:d4:ce:f6: 1d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:83:8B:20:87:11:EE:83:CB:DB:DE:85:A2:D2:68:86:37:61:74:90 X509v3 Authority Key Identifier: keyid:23:34:F8:D9:52:46:70:0A:ED:40:FB:76:FB:B3:2B:B0:C3:35:B3:0F X509v3 CRL Distribution Points: Full Name: URI:http://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl Authority Information Access: CA Issuers - URI:http://www.microsoft.com/pki/certs/MicrosoftTimeStampPCA.crt X509v3 Extended Key Usage: Time Stamping Signature Algorithm: sha1WithRSAEncryption 62:f4:05:0d:4f:e7:1b:6b:82:e7:52:0c:df:79:8c:a8:55:81: 33:97:d3:a4:ca:c9:fe:af:48:db:7b:da:6f:7a:28:4f:c7:d0: b7:89:d8:d1:a6:99:cc:91:56:00:3b:38:e8:b7:32:2f:ee:f9: cf:6b:d9:98:de:d6:02:f5:42:58:52:6b:8e:da:40:dc:16:a0: b3:d4:bf:26:15:cb:48:42:cc:d3:fd:b4:fa:e4:44:89:66:0f: 42:0e:5e:f7:04:9f:23:48:5b:b4:89:41:c4:da:6c:f8:36:f4: 3f:c2:1e:15:df:98:4c:00:c4:b2:ec:de:5f:01:01:43:9c:b8: 42:d6:22:c8:93:9a:9e:c9:a5:18:67:fc:47:84:1e:91:5d:9b: f2:76:f7:b1:8e:72:1d:80:76:3c:36:11:46:ca:7e:3a:48:f3: af:e3:49:f6:17:33:8d:bb:00:63:82:9c:57:a3:56:a7:c3:6e: 90:a3:3e:95:b7:fc:64:d1:5d:18:c2:0b:01:50:63:a7:fc:f3: d1:80:9e:84:e3:32:34:dd:57:95:40:a3:6d:7e:da:eb:2e:5a: 08:b4:10:06:5e:32:c9:09:e9:32:82:71:16:a7:fa:c6:af:66: 98:89:f9:d9:9e:b5:5f:10:23:a3:77:80:f2:4d:d6:28:00:72: 50:85:bc:e5
Certificate: Data: Version: 3 (0x2) Serial Number: 61:33:26:1a:00:00:00:00:00:31 Signature Algorithm: sha1WithRSAEncryption Issuer: DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority Validity Not Before: Aug 31 22:19:32 2010 GMT Not After : Aug 31 22:29:32 2020 GMT Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Code Signing PCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:72:59:5c:19:30:64:bf:1d:9a:60:20:20:42: 99:76:53:6c:3e:1b:d6:6f:cc:cb:f1:ea:6b:fe:97: 16:10:e0:df:3a:74:83:1a:b7:2f:a0:32:ec:ff:de: c2:42:4e:23:d5:72:00:db:35:57:0a:89:ca:ae:20: 49:f4:f0:68:ac:4d:4b:8d:a5:bd:79:4b:71:9b:47: 07:da:fd:25:df:9d:75:88:cf:aa:73:44:7f:d7:81: db:f3:bd:f2:36:a4:c9:5c:45:dc:af:ad:3d:e0:28: 68:97:1a:a7:a5:72:73:56:f1:17:94:e4:fd:35:94: 72:a0:d6:76:5f:1e:77:45:83:85:38:16:d0:73:5b: 05:ba:67:52:8d:a5:b2:69:2f:da:19:0b:fe:92:74: 29:e2:76:2f:54:dd:14:30:59:f8:d2:8d:62:fd:cb: c9:5f:46:31:50:b9:27:13:e4:40:30:cf:72:29:10: 28:22:c7:37:4e:3d:a0:32:3d:90:cd:a1:38:06:85: 5c:4e:56:82:28:2a:05:32:b7:4b:d7:4f:63:e7:d2: 2d:62:f1:45:3d:e7:ac:08:00:f6:46:a1:9e:d1:5b: 8c:26:53:e8:7a:aa:4a:f2:46:cf:37:3c:38:9e:b4: 77:5c:a5:17:9e:8d:cb:11:8f:56:3c:c1:ac:09:5f: 03:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CB:11:E8:CA:D2:B4:16:58:01:C9:37:2E:33:16:16:B9:4C:9A:0A:1F X509v3 Key Usage: Digital Signature, Certificate Sign, CRL Sign 1.3.6.1.4.1.311.21.1: ..... 1.3.6.1.4.1.311.21.2: ....1N.&....`;.1o.<..- 1.3.6.1.4.1.311.20.2: . .S.u.b.C.A X509v3 Authority Key Identifier: keyid:0E:AC:82:60:40:56:27:97:E5:25:13:FC:2A:E1:0A:53:95:59:E4:A4 X509v3 CRL Distribution Points: Full Name: URI:http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl Authority Information Access: CA Issuers - URI:http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt Signature Algorithm: sha1WithRSAEncryption 59:39:3e:7f:26:46:af:eb:6f:40:b1:32:b5:6a:eb:0e:2f:6e: a8:49:f7:eb:5f:75:ed:4c:3b:2d:d7:43:ad:0b:fe:cb:e9:2d: 31:a3:23:cc:7c:50:98:80:21:5d:ac:3d:2f:4c:ba:a2:a8:56: 9c:e3:70:bb:b8:b4:f8:79:b5:49:72:f7:3e:ea:41:7f:ca:e1: 0c:17:69:cb:a5:9c:20:2d:fa:0b:50:c4:56:cd:2d:e3:4a:d2: bc:70:e7:a8:0d:a2:03:a5:56:e0:b8:8a:4b:57:f2:95:42:9c: f1:f3:ef:ee:e3:86:1f:34:3c:b8:56:9a:f0:53:23:85:2a:a4: 82:1c:93:e2:94:07:1d:f2:e2:4e:f8:8c:a1:ca:e8:13:a5:91: 4e:c8:1b:d2:8f:72:95:2a:71:6d:9b:1a:f8:1c:f0:53:d6:67: cc:22:ff:5c:1d:cd:a2:8c:bd:27:b2:79:63:56:44:a2:51:cd: f9:e9:a3:58:56:dd:9b:02:45:44:2f:5f:f4:da:ae:d4:82:32: 6e:fc:a4:95:13:e4:eb:69:e7:a9:a2:2c:be:c8:2b:10:0e:65: 8e:99:db:f5:a2:fa:12:26:09:65:38:94:f1:7a:1f:4a:bb:d1: e1:56:e8:d0:78:96:18:5c:c9:35:16:5f:dd:93:1d:49:8e:2d: be:ad:34:44:1c:ee:10:15:1a:00:5d:dd:35:5b:21:ce:98:c7: 09:ee:85:0e:8c:4f:6d:0e:13:4e:3d:7c:29:48:9c:72:d1:f3: 6c:ca:c1:ec:70:a3:57:92:57:7d:94:8d:a0:1b:48:03:5a:f7: cf:a3:67:0a:74:a5:36:ed:2d:2f:17:c8:e6:72:37:12:f4:6f: b1:3c:67:82:f9:52:b2:8d:33:16:65:1e:0e:8a:dd:10:de:64: f4:6f:ce:46:d4:d3:17:e9:79:c4:04:b4:d3:fb:2c:df:1f:8a: 9e:ac:0a:fb:13:27:40:ad:e4:f9:e1:a9:7f:46:bb:07:60:47: 65:60:40:4e:b0:42:ec:4e:ed:b3:76:79:d8:0a:34:09:6d:1c: 80:31:1f:e2:0e:54:dd:e5:a1:fb:e5:47:10:ad:64:98:ff:50: 16:2e:7c:bf:05:21:7a:e2:95:41:27:69:c3:93:8f:95:c9:8d: d8:9b:21:ae:0d:5c:9c:f0:a2:ae:86:68:83:0c:6a:2d:bb:76: 6b:00:1d:96:ad:f2:16:7b:f6:16:83:24:b9:88:cf:6a:a8:47: 31:2f:9a:dc:e3:71:3d:d7:00:7e:62:47:d1:ce:88:c9:b8:18: fa:0e:72:8d:c1:a3:3d:af:02:40:6a:ff:69:9b:96:e2:10:a8: 10:b4:37:50:08:d6:c3:3d
Certificate: Data: Version: 3 (0x2) Serial Number: 61:16:68:34:00:00:00:00:00:1c Signature Algorithm: sha1WithRSAEncryption Issuer: DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority Validity Not Before: Apr 3 12:53:09 2007 GMT Not After : Apr 3 13:03:09 2021 GMT Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Time-Stamp PCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a1:6c:b1:df:db:48:92:2a:7c:6b:2e:19:e1: bd:e2:e3:c5:99:51:23:50:ad:ce:dd:18:4e:24:0f: ee:d1:a7:d1:4c:ad:74:30:20:11:eb:07:d5:54:95: 15:49:94:1b:42:92:ae:98:5c:30:26:da:00:6b:e8: 7b:bd:ec:89:07:0f:f7:0e:04:98:f0:89:cc:1f:cb: 33:24:87:9d:f2:f4:67:1c:2c:fc:7b:e7:88:1d:ea: e7:4e:a3:a1:c1:23:53:ca:8d:fa:45:cf:09:d0:5e: af:d0:b0:42:04:a2:f9:a6:6c:93:67:d7:28:dc:46: 53:b0:86:d0:e5:28:46:2e:27:ac:86:4f:55:52:0c: e4:03:2c:fb:6a:90:90:30:6e:87:f3:59:30:9d:fa: 7e:d6:97:b3:e8:21:97:7e:f8:d2:13:f3:08:b7:53: 6d:52:b4:45:90:9f:48:00:4a:47:66:11:27:29:66: a8:97:e4:d3:06:81:4a:a2:f9:84:a7:11:47:14:09: 82:9f:84:ed:55:78:fe:01:9a:1d:50:08:85:00:10: 30:46:ed:b7:de:23:46:bb:c4:2d:54:9f:af:1e:78: 41:31:77:cc:9b:df:3b:83:93:a1:61:02:b5:1d:0d: b1:fc:f7:9b:b2:01:ce:22:4b:54:ff:f9:05:c3:c2: 20:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 23:34:F8:D9:52:46:70:0A:ED:40:FB:76:FB:B3:2B:B0:C3:35:B3:0F X509v3 Key Usage: Digital Signature, Certificate Sign, CRL Sign 1.3.6.1.4.1.311.21.1: ... X509v3 Authority Key Identifier: keyid:0E:AC:82:60:40:56:27:97:E5:25:13:FC:2A:E1:0A:53:95:59:E4:A4 DirName:/DC=com/DC=microsoft/CN=Microsoft Root Certificate Authority serial:79:AD:16:A1:4A:A0:A5:AD:4C:73:58:F4:07:13:2E:65 X509v3 CRL Distribution Points: Full Name: URI:http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl Authority Information Access: CA Issuers - URI:http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt X509v3 Extended Key Usage: Time Stamping Signature Algorithm: sha1WithRSAEncryption 10:97:8a:c3:5c:03:44:36:dd:e9:b4:ad:77:db:ce:79:51:4d: 01:b1:2e:74:71:5b:6d:0c:13:ab:ce:be:7b:8f:b8:2e:d4:12: a2:8c:6d:62:b8:57:02:cb:4e:20:13:50:99:dd:7a:40:e2:57: bb:af:58:9a:1c:e1:1d:01:86:ac:bb:78:f2:8b:d0:ec:3b:01: ee:e2:be:8f:0a:05:c8:8d:48:e2:f0:53:15:dd:4f:ab:92:e4: e7:8d:6a:d5:80:c1:e6:94:f2:06:2f:85:03:e9:91:2a:24:22: 70:fb:f6:fc:e4:78:99:2e:0d:f7:07:e2:70:bc:18:4e:9d:8e: 6b:0a:72:95:b8:a1:39:9c:67:2d:c5:51:0e:ea:62:5c:3f:16: 98:8b:20:3f:e2:07:1a:32:f9:cc:31:4a:76:31:3d:2b:72:0b: c8:ea:70:3d:ff:85:0a:13:df:c2:0a:61:8e:f0:d7:b8:17:eb: 4e:8b:7f:c5:35:2b:5e:a3:bf:eb:bc:7d:0b:42:7b:d4:53:72: 21:ee:30:ca:bb:78:65:5c:5b:01:17:0a:14:0e:d2:da:14:98: f5:3c:b9:66:58:b3:2d:2f:e7:f9:85:86:cc:51:56:e8:9d:70: 94:6c:ac:39:4c:d4:f6:79:bf:aa:18:7a:62:29:ef:a2:9b:29: 34:06:77:1a:62:c9:3d:1e:6d:1f:82:f0:0b:c7:2c:bb:cf:43: b3:e5:f9:ec:7d:b5:e3:a4:a8:74:35:b8:4e:c5:71:23:12:26: 76:0b:3c:52:8c:71:5a:46:43:14:bc:b3:b3:b0:4d:67:c8:9f: 42:ff:80:79:21:80:9e:15:30:66:e8:42:12:5e:1a:c8:9e:22: 21:d0:43:e9:2b:e9:bb:f4:48:cc:2c:d4:d8:32:80:4c:26:2a: 48:24:5f:5a:ea:56:ef:a6:de:99:9d:ca:3a:6f:bd:81:27:74: 06:11:ee:76:21:bf:9b:82:c1:27:54:b6:b1:6a:3d:89:a1:76: 61:b4:6e:a1:13:a6:bf:aa:47:f0:12:6f:fd:8a:32:6c:b2:fe: df:51:c8:8c:23:c9:66:bd:9d:1d:87:12:64:02:3d:2d:af:59: 8f:b8:e4:21:e5:b5:b0:ca:63:b4:78:54:05:d4:41:2e:50:ac: 94:b0:a5:78:ab:b3:a0:96:75:1a:d9:92:87:13:75:22:2f:32: a8:08:6e:a0:5b:8c:25:bf:a0:ef:84:ca:21:d6:eb:1e:4f:c9: 9a:ee:49:e0:f7:01:65:6f:89:0b:7d:c8:69:c8:e6:6e:ea:a7: 97:ce:31:29:ff:0e:c5:5b:5c:d8:4d:1b:a1:d8:fa:2f:9e:3f: 2e:55:16:6b:c9:13:a3:fd
pkcs7-signedData
- 1
- SHA1: nil
- 1.3.6.1.4.1.311.2.1.4
- #0
- 1.3.6.1.4.1.311.2.1.15
- :
00 3c 00 3c 00 3c 00 4f 00 62 00 73 00 6f 00 6c |.<.<.<.O.b.s.o.l| 00 65 00 74 00 65 00 3e 00 3e 00 3e |.e.t.e.>.>.> |
- :
- SHA1
f5 cd 97 6d 1d 87 40 9a 20 e4 f7 bd 4d 34 60 4b |...m..@. ...M4`K| 92 15 67 6c |..gl |
- 1.3.6.1.4.1.311.2.1.15
- #0
- unnamed
- Certificate #0
- 2
- 61:19:CC:93:00:01:00:00:00:66
- RSA-SHA1: nil
- Issuer
- C: US
- ST: Washington
- L: Redmond
- O: Microsoft Corporation
- CN: Microsoft Code Signing PCA
- 2011-10-10 20:32:25 UTC: 2013-01-10 20:32:25 UTC
- Subject
- C: US
- ST: Washington
- L: Redmond
- O: Microsoft Corporation
- OU: MOPR
- CN: Microsoft Corporation
- #5
- rsaEncryption: nil
- EE:5B:BE:7D:11:24:E3:86:06:E0:66:FF:48:B5:17:BD:
02:E4:B4:0C:32:F0:72:3E:7D:2E:87:D7:4E:A1:B1:A7:
43:2F:F7:65:9E:31:E1:32:31:45:AE:D7:C1:24:84:21:
D7:2E:B5:84:7E:FA:35:D3:53:1C:D7:B6:51:1E:4F:CE:
66:B9:EB:B7:0C:02:FD:29:5C:AD:A8:87:F6:CA:22:B4:
D5:BF:08:75:F5:8A:70:8F:63:D7:EF:8A:1E:E9:8F:43:
24:64:5A:D3:87:7D:90:6D:3B:AC:76:CD:57:36:7D:E8:
BC:10:56:AC:98:F0:89:5D:2E:64:C6:AF:26:09:5E:1E:
63:15:F1:3D:BF:16:8F:99:88:02:C3:30:B7:C1:0B:60:
1F:0F:72:CC:D6:B7:A8:35:12:86:9B:A1:0B:0A:E6:93:
5B:8E:FA:54:9C:C1:F3:19:5F:42:8D:12:9F:1D:3F:90:
B7:27:13:83:19:32:82:1D:F3:D9:87:D4:21:B2:3C:A2:
B6:07:4F:D7:24:AA:EE:8D:F5:B3:D9:FA:F9:39:4F:A7:
E9:F2:AF:59:52:F4:DC:41:9B:2F:11:70:63:DD:EA:DE:
AA:F1:6D:21:04:10:53:33:BB:B2:4F:C5:E1:53:B2:41:
65:47:6E:37:F6:BC:E9:9B:16:41:91:6B:2E:5B:30:C3: 0x010001
- #6
- extendedKeyUsage: codeSigning
- subjectKeyIdentifier:
1b 52 0e f3 11 2a b7 c0 89 c3 11 81 3d d4 96 58 |.R...*......=..X| b9 a3 53 6e |..Sn |
- keyUsage: true, 0x80
- authorityKeyIdentifier:
cb 11 e8 ca d2 b4 16 58 01 c9 37 2e 33 16 16 b9 |.......X..7.3...| 4c 9a 0a 1f |L... |
- crlDistributionPoints: http://crl.microsoft.com/pki/crl/products/MicCodSigPCA_08-31-2010.crl
- authorityInfoAccess
- caIssuers: http://www.microsoft.com/pki/certs/MicCodSigPCA_08-31-2010.crt
- RSA-SHA1:
a5 5b 36 6c ad 4e 9b 69 12 e3 6f 8a 02 9b 69 77 |.[6l.N.i..o...iw| c3 6c 64 72 28 88 d9 3d 45 6d 2c 18 7b d4 28 2f |.ldr(..=Em,.{.(/| 13 e2 59 6a 1b c2 0b 34 b7 8a fd ea b9 94 ec 07 |..Yj...4........| 31 e6 6a f4 75 04 d3 a7 da 5e 3a 06 9e 10 fd a9 |1.j.u....^:.....| 0d bd 9c 51 43 6f ff 67 94 9c e1 cf 7c f0 24 b0 |...QCo.g....|.$.| 35 cc 83 5d ee da c0 6f 36 49 c0 5a 0a 57 f6 73 |5..]...o6I.Z.W.s| e1 9e f3 e3 08 4c 3b 3e 2f cc d2 cd ee 4f 22 70 |.....L;>/....O"p| f7 04 1f 02 a6 4b 9b b8 8f 5c 88 0e 36 94 6c 33 |.....K...\..6.l3| 07 b8 a9 ad 51 a0 d0 c2 dc 8e 22 12 bd c3 df 82 |....Q.....".....| d7 56 a1 f7 dd f0 a5 20 57 10 10 9d ee ac 86 74 |.V..... W......t| 6c 71 9b c1 f0 f2 c2 70 5e a7 db 6d 4d 37 58 99 |lq.....p^..mM7X.| 4d 79 40 d0 34 5d 5a 25 ae 67 eb 1b 4e 46 06 b0 |My@.4]Z%.g..NF..| 8c 29 1f a3 10 8f a5 33 9f 23 d5 f8 b5 46 7d e0 |.).....3.#...F}.| ee 63 98 90 4b 3e 05 a8 2f b0 18 b3 59 a4 af 41 |.c..K>../...Y..A| 53 8e 08 05 10 2d 2a c9 3a 06 4c 1c 2e a9 31 51 |S....-*.:.L...1Q| 56 64 ac 9a cc ac 97 98 29 8a 97 90 87 ea 9d b6 |Vd......).......|
- 2
- Certificate #1
- 2
- 61:05:13:36:00:00:00:00:00:1A
- RSA-SHA1: nil
- Issuer
- C: US
- ST: Washington
- L: Redmond
- O: Microsoft Corporation
- CN: Microsoft Time-Stamp PCA
- 2011-07-25 20:42:17 UTC: 2012-10-25 20:42:17 UTC
- Subject
- C: US
- ST: Washington
- L: Redmond
- O: Microsoft Corporation
- OU: MOPR
- OU: nCipher DSE ESN:159C-A3F7-2570
- CN: Microsoft Time-Stamp Service
- #5
- rsaEncryption: nil
- 9C:34:98:19:C9:09:29:63:99:02:16:75:A8:88:57:7D:
A1:BB:A9:41:12:FC:64:91:A5:D6:05:78:BF:77:DC:EC:
E6:AE:B8:50:4E:C0:E3:1A:BD:ED:B7:FD:F8:20:8A:71:
39:AA:72:92:72:9F:8A:09:E5:13:EF:91:41:ED:61:25:
6B:51:AD:EE:A8:43:B5:61:42:2C:9D:F2:1D:B1:D2:FC:
B7:F5:7B:A3:73:76:13:B3:2B:A3:DB:94:61:80:55:A1:
0F:6D:DD:D8:EC:16:FF:85:7F:96:9E:88:7F:00:2E:8E:
7A:24:BA:68:9D:8F:C6:CA:F4:90:79:7A:E1:9B:EF:06:
5D:7E:F8:2E:C3:6A:15:9C:3C:14:2F:E7:D5:94:C8:22:
1B:51:CB:A9:55:86:21:B7:5A:F3:41:12:39:9F:F0:55:
A9:4E:AA:25:2B:63:FB:91:72:3C:0F:7C:C0:96:72:DC:
C1:A3:C1:08:CA:DE:C5:C9:B5:C0:0A:5F:A5:9C:0B:AA:
72:0A:5D:0A:40:7D:2E:98:D0:AB:B2:88:8F:86:80:E8:
7D:D1:BE:55:6B:E0:58:2C:C8:36:3F:F9:E6:11:C3:F0:
43:05:85:78:03:17:E5:2C:A7:29:7C:D3:E2:95:17:00:
6C:DB:DC:AD:3C:19:3A:02:E0:7D:62:D4:CE:F6:1D:3D: 0x010001
- #6
- subjectKeyIdentifier:
f6 83 8b 20 87 11 ee 83 cb db de 85 a2 d2 68 86 |... ..........h.| 37 61 74 90 |7at. |
- authorityKeyIdentifier:
23 34 f8 d9 52 46 70 0a ed 40 fb 76 fb b3 2b b0 |#4..RFp..@.v..+.| c3 35 b3 0f |.5.. |
- crlDistributionPoints: http://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl
- authorityInfoAccess
- caIssuers: http://www.microsoft.com/pki/certs/MicrosoftTimeStampPCA.crt
- extendedKeyUsage: timeStamping
- subjectKeyIdentifier:
- RSA-SHA1:
62 f4 05 0d 4f e7 1b 6b 82 e7 52 0c df 79 8c a8 |b...O..k..R..y..| 55 81 33 97 d3 a4 ca c9 fe af 48 db 7b da 6f 7a |U.3.......H.{.oz| 28 4f c7 d0 b7 89 d8 d1 a6 99 cc 91 56 00 3b 38 |(O..........V.;8| e8 b7 32 2f ee f9 cf 6b d9 98 de d6 02 f5 42 58 |..2/...k......BX| 52 6b 8e da 40 dc 16 a0 b3 d4 bf 26 15 cb 48 42 |Rk..@......&..HB| cc d3 fd b4 fa e4 44 89 66 0f 42 0e 5e f7 04 9f |......D.f.B.^...| 23 48 5b b4 89 41 c4 da 6c f8 36 f4 3f c2 1e 15 |#H[..A..l.6.?...| df 98 4c 00 c4 b2 ec de 5f 01 01 43 9c b8 42 d6 |..L....._..C..B.| 22 c8 93 9a 9e c9 a5 18 67 fc 47 84 1e 91 5d 9b |".......g.G...].| f2 76 f7 b1 8e 72 1d 80 76 3c 36 11 46 ca 7e 3a |.v...r..v<6.F.~:| 48 f3 af e3 49 f6 17 33 8d bb 00 63 82 9c 57 a3 |H...I..3...c..W.| 56 a7 c3 6e 90 a3 3e 95 b7 fc 64 d1 5d 18 c2 0b |V..n..>...d.]...| 01 50 63 a7 fc f3 d1 80 9e 84 e3 32 34 dd 57 95 |.Pc........24.W.| 40 a3 6d 7e da eb 2e 5a 08 b4 10 06 5e 32 c9 09 |@.m~...Z....^2..| e9 32 82 71 16 a7 fa c6 af 66 98 89 f9 d9 9e b5 |.2.q.....f......| 5f 10 23 a3 77 80 f2 4d d6 28 00 72 50 85 bc e5 |_.#.w..M.(.rP...|
- 2
- #2
- 2
- 61:33:26:1A:00:00:00:00:00:31
- RSA-SHA1: nil
- #2
- DC: com
- DC: microsoft
- CN: Microsoft Root Certificate Authority
- 2010-08-31 22:19:32 UTC: 2020-08-31 22:29:32 UTC
- Subject
- C: US
- ST: Washington
- L: Redmond
- O: Microsoft Corporation
- CN: Microsoft Code Signing PCA
- #5
- rsaEncryption: nil
- B2:72:59:5C:19:30:64:BF:1D:9A:60:20:20:42:99:76:
53:6C:3E:1B:D6:6F:CC:CB:F1:EA:6B:FE:97:16:10:E0:
DF:3A:74:83:1A:B7:2F:A0:32:EC:FF:DE:C2:42:4E:23:
D5:72:00:DB:35:57:0A:89:CA:AE:20:49:F4:F0:68:AC:
4D:4B:8D:A5:BD:79:4B:71:9B:47:07:DA:FD:25:DF:9D:
75:88:CF:AA:73:44:7F:D7:81:DB:F3:BD:F2:36:A4:C9:
5C:45:DC:AF:AD:3D:E0:28:68:97:1A:A7:A5:72:73:56:
F1:17:94:E4:FD:35:94:72:A0:D6:76:5F:1E:77:45:83:
85:38:16:D0:73:5B:05:BA:67:52:8D:A5:B2:69:2F:DA:
19:0B:FE:92:74:29:E2:76:2F:54:DD:14:30:59:F8:D2:
8D:62:FD:CB:C9:5F:46:31:50:B9:27:13:E4:40:30:CF:
72:29:10:28:22:C7:37:4E:3D:A0:32:3D:90:CD:A1:38:
06:85:5C:4E:56:82:28:2A:05:32:B7:4B:D7:4F:63:E7:
D2:2D:62:F1:45:3D:E7:AC:08:00:F6:46:A1:9E:D1:5B:
8C:26:53:E8:7A:AA:4A:F2:46:CF:37:3C:38:9E:B4:77:
5C:A5:17:9E:8D:CB:11:8F:56:3C:C1:AC:09:5F:03:D3: 0x010001
- X509v3 extensions
- basicConstraints: true, true
- subjectKeyIdentifier:
cb 11 e8 ca d2 b4 16 58 01 c9 37 2e 33 16 16 b9 |.......X..7.3...| 4c 9a 0a 1f |L... |
- keyUsage: 0x86
- 1.3.6.1.4.1.311.21.1: 0x010001
- 1.3.6.1.4.1.311.21.2:
fd d1 31 4e d3 26 8a 95 e1 98 60 3b a8 31 6f a6 |..1N.&....`;.1o.| 3c bc d8 2d |<..- |
- 1.3.6.1.4.1.311.20.2:
00 53 00 75 00 62 00 43 00 41 |.S.u.b.C.A |
- authorityKeyIdentifier:
0e ac 82 60 40 56 27 97 e5 25 13 fc 2a e1 0a 53 |...`@V'..%..*..S| 95 59 e4 a4 |.Y.. |
- crlDistributionPoints: http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl
- authorityInfoAccess
- caIssuers: http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt
- RSA-SHA1:
59 39 3e 7f 26 46 af eb 6f 40 b1 32 b5 6a eb 0e |Y9>.&F..o@.2.j..| 2f 6e a8 49 f7 eb 5f 75 ed 4c 3b 2d d7 43 ad 0b |/n.I.._u.L;-.C..| fe cb e9 2d 31 a3 23 cc 7c 50 98 80 21 5d ac 3d |...-1.#.|P..!].=| 2f 4c ba a2 a8 56 9c e3 70 bb b8 b4 f8 79 b5 49 |/L...V..p....y.I| 72 f7 3e ea 41 7f ca e1 0c 17 69 cb a5 9c 20 2d |r.>.A.....i... -| fa 0b 50 c4 56 cd 2d e3 4a d2 bc 70 e7 a8 0d a2 |..P.V.-.J..p....| 03 a5 56 e0 b8 8a 4b 57 f2 95 42 9c f1 f3 ef ee |..V...KW..B.....| e3 86 1f 34 3c b8 56 9a f0 53 23 85 2a a4 82 1c |...4<.V..S#.*...| 93 e2 94 07 1d f2 e2 4e f8 8c a1 ca e8 13 a5 91 |.......N........| 4e c8 1b d2 8f 72 95 2a 71 6d 9b 1a f8 1c f0 53 |N....r.*qm.....S| d6 67 cc 22 ff 5c 1d cd a2 8c bd 27 b2 79 63 56 |.g.".\.....'.ycV| 44 a2 51 cd f9 e9 a3 58 56 dd 9b 02 45 44 2f 5f |D.Q....XV...ED/_| f4 da ae d4 82 32 6e fc a4 95 13 e4 eb 69 e7 a9 |.....2n......i..| a2 2c be c8 2b 10 0e 65 8e 99 db f5 a2 fa 12 26 |.,..+..e.......&| 09 65 38 94 f1 7a 1f 4a bb d1 e1 56 e8 d0 78 96 |.e8..z.J...V..x.| 18 5c c9 35 16 5f dd 93 1d 49 8e 2d be ad 34 44 |.\.5._...I.-..4D| 1c ee 10 15 1a 00 5d dd 35 5b 21 ce 98 c7 09 ee |......].5[!.....| 85 0e 8c 4f 6d 0e 13 4e 3d 7c 29 48 9c 72 d1 f3 |...Om..N=|)H.r..| 6c ca c1 ec 70 a3 57 92 57 7d 94 8d a0 1b 48 03 |l...p.W.W}....H.| 5a f7 cf a3 67 0a 74 a5 36 ed 2d 2f 17 c8 e6 72 |Z...g.t.6.-/...r| 37 12 f4 6f b1 3c 67 82 f9 52 b2 8d 33 16 65 1e |7..o.
- 2
- #3
- 2
- 61:16:68:34:00:00:00:00:00:1C
- RSA-SHA1: nil
- #2
- DC: com
- DC: microsoft
- CN: Microsoft Root Certificate Authority
- 2007-04-03 12:53:09 UTC: 2021-04-03 13:03:09 UTC
- Subject
- C: US
- ST: Washington
- L: Redmond
- O: Microsoft Corporation
- CN: Microsoft Time-Stamp PCA
- #5
- rsaEncryption: nil
- 9F:A1:6C:B1:DF:DB:48:92:2A:7C:6B:2E:19:E1:BD:E2:
E3:C5:99:51:23:50:AD:CE:DD:18:4E:24:0F:EE:D1:A7:
D1:4C:AD:74:30:20:11:EB:07:D5:54:95:15:49:94:1B:
42:92:AE:98:5C:30:26:DA:00:6B:E8:7B:BD:EC:89:07:
0F:F7:0E:04:98:F0:89:CC:1F:CB:33:24:87:9D:F2:F4:
67:1C:2C:FC:7B:E7:88:1D:EA:E7:4E:A3:A1:C1:23:53:
CA:8D:FA:45:CF:09:D0:5E:AF:D0:B0:42:04:A2:F9:A6:
6C:93:67:D7:28:DC:46:53:B0:86:D0:E5:28:46:2E:27:
AC:86:4F:55:52:0C:E4:03:2C:FB:6A:90:90:30:6E:87:
F3:59:30:9D:FA:7E:D6:97:B3:E8:21:97:7E:F8:D2:13:
F3:08:B7:53:6D:52:B4:45:90:9F:48:00:4A:47:66:11:
27:29:66:A8:97:E4:D3:06:81:4A:A2:F9:84:A7:11:47:
14:09:82:9F:84:ED:55:78:FE:01:9A:1D:50:08:85:00:
10:30:46:ED:B7:DE:23:46:BB:C4:2D:54:9F:AF:1E:78:
41:31:77:CC:9B:DF:3B:83:93:A1:61:02:B5:1D:0D:B1:
FC:F7:9B:B2:01:CE:22:4B:54:FF:F9:05:C3:C2:20:0B: 0x010001
- X509v3 extensions
- basicConstraints: true, true
- subjectKeyIdentifier:
23 34 f8 d9 52 46 70 0a ed 40 fb 76 fb b3 2b b0 |#4..RFp..@.v..+.| c3 35 b3 0f |.5.. |
- keyUsage: 0x86
- 1.3.6.1.4.1.311.21.1: 0
- authorityKeyIdentifier
0e ac 82 60 40 56 27 97 e5 25 13 fc 2a e1 0a 53 |...`@V'..%..*..S| 95 59 e4 a4 |.Y.. |
- #0
- DC: com
- DC: microsoft
- CN: Microsoft Root Certificate Authority
79 ad 16 a1 4a a0 a5 ad 4c 73 58 f4 07 13 2e 65 |y...J...LsX....e|
- #0
- crlDistributionPoints: http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl
- authorityInfoAccess
- caIssuers: http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt
- extendedKeyUsage: timeStamping
- RSA-SHA1:
10 97 8a c3 5c 03 44 36 dd e9 b4 ad 77 db ce 79 |....\.D6....w..y| 51 4d 01 b1 2e 74 71 5b 6d 0c 13 ab ce be 7b 8f |QM...tq[m.....{.| b8 2e d4 12 a2 8c 6d 62 b8 57 02 cb 4e 20 13 50 |......mb.W..N .P| 99 dd 7a 40 e2 57 bb af 58 9a 1c e1 1d 01 86 ac |..z@.W..X.......| bb 78 f2 8b d0 ec 3b 01 ee e2 be 8f 0a 05 c8 8d |.x....;.........| 48 e2 f0 53 15 dd 4f ab 92 e4 e7 8d 6a d5 80 c1 |H..S..O.....j...| e6 94 f2 06 2f 85 03 e9 91 2a 24 22 70 fb f6 fc |..../....*$"p...| e4 78 99 2e 0d f7 07 e2 70 bc 18 4e 9d 8e 6b 0a |.x......p..N..k.| 72 95 b8 a1 39 9c 67 2d c5 51 0e ea 62 5c 3f 16 |r...9.g-.Q..b\?.| 98 8b 20 3f e2 07 1a 32 f9 cc 31 4a 76 31 3d 2b |.. ?...2..1Jv1=+| 72 0b c8 ea 70 3d ff 85 0a 13 df c2 0a 61 8e f0 |r...p=.......a..| d7 b8 17 eb 4e 8b 7f c5 35 2b 5e a3 bf eb bc 7d |....N...5+^....}| 0b 42 7b d4 53 72 21 ee 30 ca bb 78 65 5c 5b 01 |.B{.Sr!.0..xe\[.| 17 0a 14 0e d2 da 14 98 f5 3c b9 66 58 b3 2d 2f |.........<.fX.-/| e7 f9 85 86 cc 51 56 e8 9d 70 94 6c ac 39 4c d4 |.....QV..p.l.9L.| f6 79 bf aa 18 7a 62 29 ef a2 9b 29 34 06 77 1a |.y...zb)...)4.w.| 62 c9 3d 1e 6d 1f 82 f0 0b c7 2c bb cf 43 b3 e5 |b.=.m.....,..C..| f9 ec 7d b5 e3 a4 a8 74 35 b8 4e c5 71 23 12 26 |..}....t5.N.q#.&| 76 0b 3c 52 8c 71 5a 46 43 14 bc b3 b3 b0 4d 67 |v.
- 2
- Certificate #0
- Signer
- 1
- unnamed
- #0
- C: US
- ST: Washington
- L: Redmond
- O: Microsoft Corporation
- CN: Microsoft Code Signing PCA
- 61:19:CC:93:00:01:00:00:00:66
- #0
- SHA1: nil
- #3
- contentType: 1.3.6.1.4.1.311.2.1.4
- 1.3.6.1.4.1.311.2.1.11: msCodeInd
- messageDigest:
29 79 ff 14 21 a7 3d b2 89 05 5f e9 d9 c9 d2 06 |)y..!.=..._.....| c6 c9 21 a9 |..!. |
- 1.3.6.1.4.1.311.2.1.12
00 53 00 79 00 73 00 69 00 6e 00 74 00 65 00 72 |.S.y.s.i.n.t.e.r| 00 6e 00 61 00 6c 00 73 00 20 00 55 00 74 00 69 |.n.a.l.s. .U.t.i| 00 6c 00 69 00 74 00 69 00 65 00 73 |.l.i.t.i.e.s |
: http://technet.microsoft.com/sysinternals
- rsaEncryption:
79 e1 f7 dc e6 b6 ac 79 15 d0 b3 7b 6f 1d 6f b6 |y......y...{o.o.| 77 0a 74 f3 a1 84 a5 3d 24 fd ba 39 cc f4 41 71 |w.t....=$..9..Aq| d8 68 44 2b 53 78 c1 0c 8c 0c 9f 4f 10 4a ef 4b |.hD+Sx.....O.J.K| f1 d6 b2 57 3f 25 ce c3 27 b9 e8 7a 3a 37 b9 8a |...W?%..'..z:7..| 44 df fd 2d 40 0c 24 8f 99 1b d9 f1 19 4d b2 a5 |D..-@.$......M..| b8 0c 0e 57 9f a4 dc 47 a0 58 60 de 8e 5d e3 26 |...W...G.X`..].&| 13 2a b0 8e 6f 5d 60 25 40 13 94 2d b3 f5 4d 09 |.*..o]`%@..-..M.| 52 90 07 f0 ee 1f 32 c2 04 fb 29 12 7b 72 07 a9 |R.....2...).{r..| 7c c9 ee d6 74 eb f4 2b 88 df 2e a2 61 f2 41 97 ||...t..+....a.A.| ee 7f 65 7c 85 bf 33 b5 37 58 94 d5 15 8f 73 95 |..e|..3.7X....s.| 91 f0 f6 05 d2 29 50 14 ed bd a9 57 2f 2a 5c e2 |.....)P....W/*\.| 23 c9 78 8d 88 0e 11 8d c6 06 0f ef 96 ea 91 56 |#.x............V| 0b ed 4f a0 18 29 70 3b 74 5e 83 04 7d 4e db aa |..O..)p;t^..}N..| e1 b5 71 ef c4 72 4e d8 8c d3 3f 5d 56 b5 1b 1e |..q..rN...?]V...| 79 a6 19 4a 5d c1 38 c9 d7 31 89 33 ea d4 5c a1 |y..J].8..1.3..\.| ef 9b 6c 1b a9 e9 f7 96 53 cc 40 22 34 7c c4 2f |..l.....S.@"4|./|
- countersignature
- 1
- unnamed
- #0
- C: US
- ST: Washington
- L: Redmond
- O: Microsoft Corporation
- CN: Microsoft Time-Stamp PCA
- 61:05:13:36:00:00:00:00:00:1A
- #0
- SHA1
- #2
- contentType: pkcs7-data
- signingTime: 2012-07-12 00:43:39 UTC
- messageDigest:
47 04 cf 4d f4 f1 e9 ed ae d6 4b c4 f5 7a 46 45 |G..M......K..zFE| 6f b1 80 eb |o... |
- RSA-SHA1:
87 21 ba 22 79 1d 11 c7 ea 34 40 66 9d 65 d3 7b |.!."y....4@f.e.{| ba aa a4 ce 03 a3 f8 e0 05 9b 65 4e 32 24 4b f6 |..........eN2$K.| 31 90 e5 57 04 7f 30 96 cc c6 11 54 30 d7 7a 33 |1..W..0....T0.z3| 7c e1 c7 c1 3c 81 2c bc 48 1c 09 2b 2d 1c b6 e6 ||...<.,.H..+-...| cc 2b b8 f7 ca ef e5 8c 66 0a 43 da 15 31 16 30 |.+......f.C..1.0| ad 7b 0c 9f 39 cf 08 02 be 53 f8 e2 24 37 46 06 |.{..9....S..$7F.| ea 26 d4 93 1e 7c 7b 17 53 3b a9 3d 11 4c 6a 3b |.&...|{.S;.=.Lj;| 57 c2 1d 48 72 27 91 2b 6a 55 2d f8 fd a3 60 dd |W..Hr'.+jU-...`.| 7c 7b b6 13 48 fc 5b 9e e8 d1 63 4d f6 31 37 a0 ||{..H.[...cM.17.| a7 14 00 7e b5 33 65 88 7a 0a 64 e4 3d 75 09 22 |...~.3e.z.d.=u."| 17 4e 75 57 6a 26 75 90 f0 2f df 92 01 d7 ca 6e |.NuWj&u../.....n| 1c e8 58 07 53 fc e5 91 90 4d a5 b0 e0 bb 7e 0c |..X.S....M....~.| df 07 0b fa 76 73 14 4e 6c e8 ce be fc 07 f7 68 |....vs.Nl......h| 47 e7 d4 96 5a 9a fc f4 1d b8 28 e6 a9 7a 6d 51 |G...Z.....(..zmQ| 3d 2a 73 f8 ae ca b6 57 fe 69 91 77 66 50 68 63 |=*s....W.i.wfPhc| 95 de 84 2d a7 0d ee 25 f4 39 43 2a 7c 16 07 ca |...-...%.9C*|...|
- unnamed
- 1
offset | size | type | comment | |
---|---|---|---|---|
0 | 2467840 | EXE | 07/10/2012 23:15:16 | # |
15c1 | 15 | HTM | # | |
25a800 | 6768 | PKCS7 | Authenticode Signature | # |
Please donate some bucks to keep this site up and running: | |
Ko-fi | |
---|---|
Yandex.Money | |
Thank you! |
everything is OK