filename | TechNotice.exe | |
---|---|---|
size | 1467424 (0x166420) | |
md5 | 9f3df48f93c34bb2dfc76be12fcef56c | |
type | PE32 executable (GUI) Intel 80386, for MS Windows | |
mimetype | application/x-dosexec | |
clamav | OK | |
virustotal | → scan with virustotal.com | |
histogram |
MZ Header
signature | MZ |
bytes_in_last_block | 0x90 |
blocks_in_file | 3 |
num_relocs | 0 |
header_paragraphs | 4 |
min_extra_paragraphs | 0 |
max_extra_paragraphs | 0xffff |
ss | 0 |
sp | 0xb8 |
checksum | 0 |
ip | 0 |
cs | 0 |
reloc_table_offset | 0x40 |
overlay_number | 0 |
reserved0 | 0 |
oem_id | 0 |
oem_info | 0 |
reserved2 | 0 |
reserved3 | 0 |
reserved4 | 0 |
reserved5 | 0 |
reserved6 | 0 |
lfanew | 0xf0 |
Rich Header
lib id | version | times used |
---|---|---|
149 | 30729 | 27 |
132 | 30729 | 78 |
131 | 30729 | 159 |
147 | 30729 | 25 |
1 | 0 | 304 |
138 | 30729 | 31 |
148 | 30729 | 1 |
145 | 30729 | 1 |
DOS stub
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
PE Header
Packer / Compiler
Sections
Data Directory
id | lang | string |
---|---|---|
103 | 1033 | SA |
109 | 1033 | SA |
module_name | hint | ord | function_name |
---|---|---|---|
KERNEL32.dll | 399 | GetComputerNameW | |
KERNEL32.dll | 578 | GetPrivateProfileStringW | |
KERNEL32.dll | 896 | OpenProcess | |
KERNEL32.dll | 624 | GetSystemDirectoryW | |
KERNEL32.dll | 676 | GetVersionExW | |
KERNEL32.dll | 490 | GetFileAttributesW | |
KERNEL32.dll | 1216 | TerminateProcess | |
KERNEL32.dll | 143 | CreateFileW | |
KERNEL32.dll | 645 | GetTempPathW | |
KERNEL32.dll | 1256 | VerifyVersionInfoW | |
KERNEL32.dll | 1139 | SetLastError | |
KERNEL32.dll | 918 | Process32FirstW | |
KERNEL32.dll | 1271 | WaitForMultipleObjects | |
KERNEL32.dll | 920 | Process32NextW | |
KERNEL32.dll | 533 | GetModuleHandleA | |
KERNEL32.dll | 190 | CreateToolhelp32Snapshot | |
KERNEL32.dll | 609 | GetShortPathNameW | |
KERNEL32.dll | 905 | OutputDebugStringA | |
KERNEL32.dll | 82 | CloseHandle | |
KERNEL32.dll | 674 | GetVersion | |
KERNEL32.dll | 840 | LocalFree | |
KERNEL32.dll | 679 | GetVolumeInformationW | |
KERNEL32.dll | 313 | FindFirstFileW | |
KERNEL32.dll | 325 | FindNextFileW | |
KERNEL32.dll | 496 | GetFileSize | |
KERNEL32.dll | 1126 | SetFilePointer | |
KERNEL32.dll | 1107 | SetEndOfFile | |
KERNEL32.dll | 719 | HeapFree | |
KERNEL32.dll | 586 | GetProcessHeap | |
KERNEL32.dll | 349 | FormatMessageA | |
KERNEL32.dll | 1317 | WriteFile | |
KERNEL32.dll | 960 | ReadFile | |
KERNEL32.dll | 343 | FlushFileBuffers | |
KERNEL32.dll | 214 | DeleteFileW | |
KERNEL32.dll | 715 | HeapAlloc | |
KERNEL32.dll | 588 | GetProcessId | |
KERNEL32.dll | 449 | GetCurrentProcessId | |
KERNEL32.dll | 117 | CopyFileW | |
KERNEL32.dll | 350 | FormatMessageW | |
KERNEL32.dll | 285 | ExpandEnvironmentStringsW | |
KERNEL32.dll | 864 | MoveFileExW | |
KERNEL32.dll | 129 | CreateDirectoryW | |
KERNEL32.dll | 302 | FindClose | |
KERNEL32.dll | 631 | GetSystemTime | |
KERNEL32.dll | 1121 | SetFileAttributesW | |
KERNEL32.dll | 507 | GetFullPathNameW | |
KERNEL32.dll | 504 | GetFullPathNameA | |
KERNEL32.dll | 136 | CreateFileA | |
KERNEL32.dll | 1238 | UnmapViewOfFile | |
KERNEL32.dll | 935 | QueryPerformanceCounter | |
KERNEL32.dll | 745 | InterlockedCompareExchange | |
KERNEL32.dll | 1236 | UnlockFile | |
KERNEL32.dll | 850 | LockFile | |
KERNEL32.dll | 659 | GetTickCount | |
KERNEL32.dll | 1237 | UnlockFileEx | |
KERNEL32.dll | 633 | GetSystemTimeAsFileTime | |
KERNEL32.dll | 485 | GetFileAttributesA | |
KERNEL32.dll | 851 | LockFileEx | |
KERNEL32.dll | 463 | GetDiskFreeSpaceW | |
KERNEL32.dll | 828 | LoadLibraryA | |
KERNEL32.dll | 140 | CreateFileMappingW | |
KERNEL32.dll | 460 | GetDiskFreeSpaceA | |
KERNEL32.dll | 627 | GetSystemInfo | |
KERNEL32.dll | 487 | GetFileAttributesExW | |
KERNEL32.dll | 644 | GetTempPathA | |
KERNEL32.dll | 21 | AreFileApisANSI | |
KERNEL32.dll | 211 | DeleteFileA | |
KERNEL32.dll | 453 | GetCurrentThreadId | |
KERNEL32.dll | 718 | HeapDestroy | |
KERNEL32.dll | 722 | HeapReAlloc | |
KERNEL32.dll | 724 | HeapSize | |
KERNEL32.dll | 1110 | SetEnvironmentVariableA | |
KERNEL32.dll | 100 | CompareStringW | |
KERNEL32.dll | 97 | CompareStringA | |
KERNEL32.dll | 1316 | WriteConsoleW | |
KERNEL32.dll | 432 | GetConsoleOutputCP | |
KERNEL32.dll | 1306 | WriteConsoleA | |
KERNEL32.dll | 1159 | SetStdHandle | |
KERNEL32.dll | 518 | GetLocaleInfoW | |
KERNEL32.dll | 739 | InitializeCriticalSectionAndSpinCount | |
KERNEL32.dll | 428 | GetConsoleMode | |
KERNEL32.dll | 410 | GetConsoleCP | |
KERNEL32.dll | 617 | GetStringTypeW | |
KERNEL32.dll | 614 | GetStringTypeA | |
KERNEL32.dll | 780 | IsValidLocale | |
KERNEL32.dll | 269 | EnumSystemLocalesA | |
KERNEL32.dll | 516 | GetLocaleInfoA | |
KERNEL32.dll | 667 | GetUserDefaultLCID | |
KERNEL32.dll | 664 | GetTimeZoneInformation | |
KERNEL32.dll | 610 | GetStartupInfoA | |
KERNEL32.dll | 499 | GetFileType | |
KERNEL32.dll | 1135 | SetHandleCount | |
KERNEL32.dll | 391 | GetCommandLineW | |
KERNEL32.dll | 474 | GetEnvironmentStringsW | |
KERNEL32.dll | 353 | FreeEnvironmentStringsW | |
KERNEL32.dll | 531 | GetModuleFileNameA | |
KERNEL32.dll | 612 | GetStdHandle | |
KERNEL32.dll | 717 | HeapCreate | |
KERNEL32.dll | 281 | ExitProcess | |
KERNEL32.dll | 1222 | TlsFree | |
KERNEL32.dll | 1224 | TlsSetValue | |
KERNEL32.dll | 1221 | TlsAlloc | |
KERNEL32.dll | 448 | GetCurrentProcess | |
KERNEL32.dll | 1252 | VerSetConditionMask | |
KERNEL32.dll | 1357 | lstrlenA | |
KERNEL32.dll | 476 | GetEnvironmentVariableW | |
KERNEL32.dll | 532 | GetModuleFileNameW | |
KERNEL32.dll | 536 | GetModuleHandleW | |
KERNEL32.dll | 830 | LoadLibraryExW | |
KERNEL32.dll | 945 | RaiseException | |
KERNEL32.dll | 1349 | lstrcmpiW | |
KERNEL32.dll | 1358 | lstrlenW | |
KERNEL32.dll | 747 | InterlockedDecrement | |
KERNEL32.dll | 751 | InterlockedIncrement | |
KERNEL32.dll | 514 | GetLastError | |
KERNEL32.dll | 825 | LeaveCriticalSection | |
KERNEL32.dll | 238 | EnterCriticalSection | |
KERNEL32.dll | 209 | DeleteCriticalSection | |
KERNEL32.dll | 738 | InitializeCriticalSection | |
KERNEL32.dll | 1297 | WideCharToMultiByte | |
KERNEL32.dll | 333 | FindResourceExW | |
KERNEL32.dll | 334 | FindResourceW | |
KERNEL32.dll | 833 | LoadResource | |
KERNEL32.dll | 852 | LockResource | |
KERNEL32.dll | 1201 | SizeofResource | |
KERNEL32.dll | 871 | MultiByteToWideChar | |
KERNEL32.dll | 1202 | Sleep | |
KERNEL32.dll | 354 | FreeLibrary | |
KERNEL32.dll | 581 | GetProcAddress | |
KERNEL32.dll | 855 | MapViewOfFile | |
KERNEL32.dll | 831 | LoadLibraryW | |
KERNEL32.dll | 1223 | TlsGetValue | |
KERNEL32.dll | 778 | IsValidCodePage | |
KERNEL32.dll | 567 | GetOEMCP | |
KERNEL32.dll | 360 | GetACP | |
KERNEL32.dll | 370 | GetCPInfo | |
KERNEL32.dll | 813 | LCMapStringW | |
KERNEL32.dll | 811 | LCMapStringA | |
KERNEL32.dll | 1048 | RtlUnwind | |
KERNEL32.dll | 1265 | VirtualQuery | |
KERNEL32.dll | 1263 | VirtualProtect | |
KERNEL32.dll | 611 | GetStartupInfoW | |
KERNEL32.dll | 768 | IsDebuggerPresent | |
KERNEL32.dll | 1189 | SetUnhandledExceptionFilter | |
KERNEL32.dll | 1235 | UnhandledExceptionFilter | |
KERNEL32.dll | 748 | InterlockedExchange | |
KERNEL32.dll | 1257 | VirtualAlloc | |
KERNEL32.dll | 1260 | VirtualFree | |
USER32.dll | 49 | CharNextW | |
USER32.dll | 166 | DestroyWindow | |
USER32.dll | 242 | EnumWindows | |
USER32.dll | 773 | UnregisterClassA | |
USER32.dll | 274 | GetClassNameW | |
USER32.dll | 223 | EnumChildWindows | |
USER32.dll | 659 | SetForegroundWindow | |
USER32.dll | 520 | MapVirtualKeyW | |
USER32.dll | 801 | VkKeyScanW | |
USER32.dll | 816 | keybd_event | |
USER32.dll | 451 | IsCharAlphaNumericW | |
USER32.dll | 249 | FindWindowExW | |
USER32.dll | 475 | IsWindow | |
USER32.dll | 480 | IsWindowVisible | |
USER32.dll | 636 | SendMessageW | |
USER32.dll | 420 | GetWindowThreadProcessId | |
ADVAPI32.dll | 200 | CryptHashData | |
ADVAPI32.dll | 182 | CryptDestroyHash | |
ADVAPI32.dll | 179 | CryptCreateHash | |
ADVAPI32.dll | 203 | CryptReleaseContext | |
ADVAPI32.dll | 177 | CryptAcquireContextW | |
ADVAPI32.dll | 196 | CryptGetHashParam | |
ADVAPI32.dll | 108 | ConvertSidToStringSidW | |
ADVAPI32.dll | 310 | GetLengthSid | |
ADVAPI32.dll | 390 | IsValidSid | |
ADVAPI32.dll | 223 | DuplicateTokenEx | |
ADVAPI32.dll | 399 | LookupAccountNameW | |
ADVAPI32.dll | 622 | RegQueryValueExW | |
ADVAPI32.dll | 118 | CopySid | |
ADVAPI32.dll | 346 | GetTokenInformation | |
ADVAPI32.dll | 503 | OpenProcessToken | |
ADVAPI32.dll | 584 | RegDeleteValueW | |
ADVAPI32.dll | 569 | RegCreateKeyExW | |
ADVAPI32.dll | 638 | RegSetValueExW | |
ADVAPI32.dll | 609 | RegOpenKeyExW | |
ADVAPI32.dll | 591 | RegEnumKeyExW | |
ADVAPI32.dll | 616 | RegQueryInfoKeyW | |
ADVAPI32.dll | 560 | RegCloseKey | |
ADVAPI32.dll | 580 | RegDeleteKeyW | |
SHELL32.dll | 290 | ShellExecuteW | |
SHELL32.dll | 195 | SHGetFolderPathW | |
SHELL32.dll | 289 | ShellExecuteExW | |
ole32.dll | 16 | CoCreateInstance | |
ole32.dll | 105 | CoTaskMemRealloc | |
ole32.dll | 103 | CoTaskMemAlloc | |
ole32.dll | 62 | CoInitialize | |
ole32.dll | 99 | CoSetProxyBlanket | |
ole32.dll | 15 | CoCreateGuid | |
ole32.dll | 377 | StringFromGUID2 | |
ole32.dll | 104 | CoTaskMemFree | |
ole32.dll | 8 | CLSIDFromString | |
OLEAUT32.dll | 6 | ||
OLEAUT32.dll | 2 | ||
OLEAUT32.dll | 9 | ||
OLEAUT32.dll | 277 | ||
OLEAUT32.dll | 8 | ||
SHLWAPI.dll | 91 | PathIsDirectoryW | |
SHLWAPI.dll | 348 | UrlEscapeW | |
SHLWAPI.dll | 69 | PathFileExistsW | |
SHLWAPI.dll | 139 | PathRemoveFileSpecW | |
USERENV.dll | 44 | UnloadUserProfile | |
WININET.dll | 130 | InternetGetConnectedState | |
WININET.dll | 154 | InternetOpenW | |
WININET.dll | 158 | InternetQueryOptionW | |
WININET.dll | 116 | InternetCrackUrlW | |
WININET.dll | 159 | InternetReadFile | |
WININET.dll | 114 | InternetConnectW | |
WININET.dll | 94 | HttpSendRequestW | |
WININET.dll | 175 | InternetSetOptionW | |
WININET.dll | 90 | HttpQueryInfoW | |
WININET.dll | 88 | HttpOpenRequestW | |
WININET.dll | 107 | InternetCloseHandle | |
OLEACC.dll | 3 | AccessibleObjectFromWindow |
StringTable 040904b0
VS_FIXEDFILEINFO
FileVersion | 0.0.0.0 |
ProductVersion | 0.0.0.0 |
StrucVersion | 0x10000 |
FileFlagsMask | 0x17 |
FileFlags | 0 |
FileOS | 4 |
FileType | 1 |
FileSubtype | 0 |
Signers (1)
issuer: /C=US/O=thawte, Inc./CN=thawte SHA256 Code Signing CA
serial: 285E23F43D6CA57A1D3D11700B017A1B
Certificates (2)
Certificate: Data: Version: 3 (0x2) Serial Number: 71:a0:b7:36:95:dd:b1:af:c2:3b:2b:9a:18:ee:54:cb Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2006 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA Validity Not Before: Dec 10 00:00:00 2013 GMT Not After : Dec 9 23:59:59 2023 GMT Subject: C=US, O=thawte, Inc., CN=thawte SHA256 Code Signing CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:55:02:4c:17:05:e9:d0:66:c3:fc:28:ad:d3: c0:fe:ef:e0:e9:7e:d4:1e:f6:aa:1b:91:46:fd:f5: 16:ed:98:07:53:fa:ba:87:1b:7d:9e:1f:01:27:ab: b9:d2:67:ca:b7:10:25:53:f4:e3:be:9b:90:b8:ed: 23:5c:42:ef:64:25:58:e5:88:22:1a:be:f5:c7:ae: f5:be:8a:b1:11:11:93:1a:22:a9:74:69:c1:74:b6: 68:87:a7:83:30:f9:64:f1:b1:e3:38:3e:f4:d6:c1: fc:12:fe:73:57:17:35:57:8a:dd:50:8d:03:f8:66: cd:ca:76:83:13:c8:d7:0e:71:1d:e4:63:c9:ba:17: f8:d1:b9:e4:88:d2:2c:28:c8:21:20:0d:41:b7:0b: e2:2f:c2:80:e6:88:7b:53:6c:c3:44:63:81:7f:68: 47:8c:2b:2a:cf:5b:f4:8c:49:61:ba:69:85:fd:6b: 00:78:05:26:69:13:30:80:38:4e:f1:5a:55:c9:c5: 50:d6:aa:38:89:47:43:5c:fe:4d:73:a5:49:c5:93: 69:fe:77:96:9a:af:f3:8c:0e:57:ba:33:d9:0e:c6: 42:d3:03:77:c4:bb:39:ad:91:f9:f3:f7:96:5c:3a: 64:a6:ed:27:57:c1:e8:40:f3:53:f2:be:29:34:fe: 5f:f9 Exponent: 65537 (0x10001) X509v3 extensions: Authority Information Access: OCSP - URI:http://t2.symcb.com X509v3 Basic Constraints: critical CA:TRUE, pathlen:0 X509v3 CRL Distribution Points: Full Name: URI:http://t1.symcb.com/ThawtePCA.crl X509v3 Extended Key Usage: TLS Web Client Authentication, Code Signing X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Subject Alternative Name: DirName:/CN=SymantecPKI-1-568 X509v3 Subject Key Identifier: 57:86:9B:54:B8:BE:A6:29:8A:E4:F6:C2:E2:13:18:89:85:CD:DC:B7 X509v3 Authority Key Identifier: keyid:7B:5B:45:CF:AF:CE:CB:7A:FD:31:92:1A:6A:B6:F3:46:EB:57:48:50 Signature Algorithm: sha256WithRSAEncryption 24:3b:f5:d7:a0:36:13:c7:43:fe:f0:09:87:68:d1:98:31:6e: 12:e4:3f:1e:1f:96:7b:6b:4c:1e:87:9e:8b:c5:6c:a3:b1:0c: 7b:50:92:d5:81:9c:b1:8f:2c:29:b7:ee:f9:91:05:b9:8e:41: f1:2c:f6:d0:59:2d:98:e0:b9:ea:80:01:47:40:95:b8:3d:9d: 03:bd:79:bb:35:b6:ad:9c:4c:27:f6:67:45:10:c9:c5:bc:87: 4e:55:7b:d2:87:bb:dd:dc:30:ef:c6:d4:6c:cc:99:35:6d:1c: e0:60:d3:cd:68:8f:29:59:4b:89:96:08:46:c9:8e:fc:75:4f: c5:dc:09:cc:4e:27:8b:44:cd:07:bc:ac:04:e0:b5:33:a5:87: 9f:f4:dd:73:0c:91:ea:12:81:6f:e3:75:f0:1e:b5:93:6c:44: 17:d5:3e:97:c9:bd:07:2c:56:77:1f:85:dd:46:e8:bf:de:2c: 81:94:a3:f7:e5:b7:a7:c1:37:9f:75:ca:55:77:4d:5e:36:29: ca:85:d8:45:41:72:57:75:c0:79:5b:fa:34:10:06:6d:64:20: 42:b7:3a:c8:1f:1d:46:64:02:5f:c6:47:be:f0:c4:3a:28:54: da:f6:1e:4f:9a:a2:19:43:a4:6f:49:f8:fc:5e:42:20:28:84: 8b:47:20:6e
Certificate: Data: Version: 3 (0x2) Serial Number: 28:5e:23:f4:3d:6c:a5:7a:1d:3d:11:70:0b:01:7a:1b Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=thawte, Inc., CN=thawte SHA256 Code Signing CA Validity Not Before: Mar 3 00:00:00 2016 GMT Not After : Feb 28 23:59:59 2017 GMT Subject: C=US, ST=Nevada, L=Incline Village, O=Cloud Software, CN=Cloud Software Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:71:79:57:ca:5f:f5:ab:9c:00:4c:47:ce:32: 23:f3:be:36:13:52:d7:fb:d8:a1:d5:3c:5f:39:99: 02:ea:75:76:f1:5b:29:e5:6c:66:56:f7:ce:68:96: db:3a:0f:8e:36:fc:f2:09:d6:c5:eb:13:37:ed:b7: 31:95:59:62:4b:12:d6:16:7a:cc:3c:80:c1:e2:8c: 43:fc:50:db:ef:bf:e5:59:17:18:be:33:c9:2f:ba: 2e:ed:3d:52:c3:b8:5f:5a:13:02:62:3e:e4:c8:e8: 52:e3:a5:ee:05:1e:b0:29:e0:1e:38:97:d3:c5:dc: b3:ed:8d:a3:75:e7:6b:51:01:d6:fa:85:bd:43:6a: 58:7b:93:05:bd:cd:75:62:c8:f2:74:14:d5:b9:e3: 32:81:2f:2d:99:b9:66:d3:9b:10:d3:14:31:2d:f6: 31:f4:da:f6:f4:25:19:49:c4:a5:ab:10:40:42:04: f9:de:1f:09:83:d8:75:90:a0:6e:8d:2b:c1:6e:21: ac:a0:3a:5c:58:de:d1:bb:af:18:65:35:02:42:e5: 61:f9:db:16:84:80:13:19:9f:bd:2d:37:c7:ac:f0: bc:85:0c:1d:c0:1f:2a:98:e8:53:8e:17:40:34:76: 00:5a:51:af:59:19:36:6c:eb:a8:17:cf:db:92:b9: 92:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: CA:FALSE X509v3 Authority Key Identifier: keyid:57:86:9B:54:B8:BE:A6:29:8A:E4:F6:C2:E2:13:18:89:85:CD:DC:B7 X509v3 Subject Key Identifier: 85:84:A1:6E:FA:F6:BA:A1:39:E6:84:C1:0F:D3:64:73:E4:1B:96:95 X509v3 CRL Distribution Points: Full Name: URI:http://tl.symcb.com/tl.crl X509v3 Key Usage: critical Digital Signature X509v3 Extended Key Usage: Code Signing X509v3 Certificate Policies: Policy: 2.23.140.1.4.1 CPS: https://www.thawte.com/cps User Notice: Explicit Text: https://www.thawte.com/repository 2.5.29.4: 0.0.0.. +.....7....... Authority Information Access: OCSP - URI:http://tl.symcd.com CA Issuers - URI:http://tl.symcb.com/tl.crt Netscape Cert Type: Object Signing Signature Algorithm: sha256WithRSAEncryption 5f:b6:03:6a:4d:1b:4e:8e:a0:41:81:ed:69:a5:b4:4d:6f:0f: 3d:69:6c:a1:5f:7e:bd:6c:d2:35:af:3b:61:07:ce:67:74:8a: 58:76:c2:c1:02:ed:b4:b3:2f:bd:06:32:88:b8:a0:25:15:2f: df:3a:e2:8e:10:6d:5b:d2:4a:27:b9:3e:10:61:76:2a:df:53: 3d:aa:e1:fe:40:0e:04:3b:22:8a:7a:79:27:a6:ad:7d:fb:15: c6:9a:e0:21:04:1d:89:01:cd:dd:55:24:9d:21:54:dc:44:21: 8c:6a:a9:e7:06:0f:f7:69:b4:83:ec:d5:95:36:c0:f4:65:30: 7c:1c:8a:25:e7:26:8a:e7:33:cf:56:1b:a7:c4:23:39:29:fd: b2:86:42:e1:4f:98:80:cb:71:4a:cc:da:94:6f:c4:59:7e:fc: c8:7f:aa:2c:56:92:49:7a:78:d2:46:56:74:2e:c7:e2:5c:5d: 9f:78:5f:76:91:b6:06:53:ab:c8:cd:65:b0:12:00:60:e9:7e: 5d:3a:04:bf:93:5b:22:0e:e3:1f:10:9e:89:89:e0:e5:b9:ef: cd:eb:69:d1:bc:f9:18:75:ca:6b:fd:36:d7:31:13:6a:30:9d: ae:20:dd:43:9a:cc:25:7b:3d:f6:02:e2:2b:af:66:0c:1c:0e: 36:b0:e2:d5
pkcs7-signedData
- 1
- SHA1: nil
- 1.3.6.1.4.1.311.2.1.4
- #0
- 1.3.6.1.4.1.311.2.1.15
- :
00 3c 00 3c 00 3c 00 4f 00 62 00 73 00 6f 00 6c |.<.<.<.O.b.s.o.l| 00 65 00 74 00 65 00 3e 00 3e 00 3e |.e.t.e.>.>.> |
- :
- SHA1
38 a6 d4 05 5c e6 da 5a 99 99 90 41 c3 27 9c 7e |8...\..Z...A.'.~| 2d e4 fc 9c |-... |
- 1.3.6.1.4.1.311.2.1.15
- #0
- Certificates
- Certificate #0
- 2
- 71:A0:B7:36:95:DD:B1:AF:C2:3B:2B:9A:18:EE:54:CB
- RSA-SHA256: nil
- Issuer
- C: US
- O: thawte, Inc.
- OU: Certification Services Division
- OU: (c) 2006 thawte, Inc. - For authorized use only
- CN: thawte Primary Root CA
- 2013-12-10 00:00:00 UTC: 2023-12-09 23:59:59 UTC
- Subject
- C: US
- O: thawte, Inc.
- CN: thawte SHA256 Code Signing CA
- #5
- rsaEncryption: nil
- 9B:55:02:4C:17:05:E9:D0:66:C3:FC:28:AD:D3:C0:FE:
EF:E0:E9:7E:D4:1E:F6:AA:1B:91:46:FD:F5:16:ED:98:
07:53:FA:BA:87:1B:7D:9E:1F:01:27:AB:B9:D2:67:CA:
B7:10:25:53:F4:E3:BE:9B:90:B8:ED:23:5C:42:EF:64:
25:58:E5:88:22:1A:BE:F5:C7:AE:F5:BE:8A:B1:11:11:
93:1A:22:A9:74:69:C1:74:B6:68:87:A7:83:30:F9:64:
F1:B1:E3:38:3E:F4:D6:C1:FC:12:FE:73:57:17:35:57:
8A:DD:50:8D:03:F8:66:CD:CA:76:83:13:C8:D7:0E:71:
1D:E4:63:C9:BA:17:F8:D1:B9:E4:88:D2:2C:28:C8:21:
20:0D:41:B7:0B:E2:2F:C2:80:E6:88:7B:53:6C:C3:44:
63:81:7F:68:47:8C:2B:2A:CF:5B:F4:8C:49:61:BA:69:
85:FD:6B:00:78:05:26:69:13:30:80:38:4E:F1:5A:55:
C9:C5:50:D6:AA:38:89:47:43:5C:FE:4D:73:A5:49:C5:
93:69:FE:77:96:9A:AF:F3:8C:0E:57:BA:33:D9:0E:C6:
42:D3:03:77:C4:BB:39:AD:91:F9:F3:F7:96:5C:3A:64:
A6:ED:27:57:C1:E8:40:F3:53:F2:BE:29:34:FE:5F:F9: 0x010001
- X509v3 extensions
- authorityInfoAccess
- OCSP: http://t2.symcb.com
- basicConstraints
- true
- true: 0
- crlDistributionPoints: http://t1.symcb.com/ThawtePCA.crl
- extendedKeyUsage
- clientAuth: codeSigning
- keyUsage: true, 6
- subjectAltName
- CN: SymantecPKI-1-568
- subjectKeyIdentifier:
57 86 9b 54 b8 be a6 29 8a e4 f6 c2 e2 13 18 89 |W..T...)........| 85 cd dc b7 |.... |
- authorityKeyIdentifier:
7b 5b 45 cf af ce cb 7a fd 31 92 1a 6a b6 f3 46 |{[E....z.1..j..F| eb 57 48 50 |.WHP |
- authorityInfoAccess
- RSA-SHA256:
24 3b f5 d7 a0 36 13 c7 43 fe f0 09 87 68 d1 98 |$;...6..C....h..| 31 6e 12 e4 3f 1e 1f 96 7b 6b 4c 1e 87 9e 8b c5 |1n..?...{kL.....| 6c a3 b1 0c 7b 50 92 d5 81 9c b1 8f 2c 29 b7 ee |l...{P......,)..| f9 91 05 b9 8e 41 f1 2c f6 d0 59 2d 98 e0 b9 ea |.....A.,..Y-....| 80 01 47 40 95 b8 3d 9d 03 bd 79 bb 35 b6 ad 9c |..G@..=...y.5...| 4c 27 f6 67 45 10 c9 c5 bc 87 4e 55 7b d2 87 bb |L'.gE.....NU{...| dd dc 30 ef c6 d4 6c cc 99 35 6d 1c e0 60 d3 cd |..0...l..5m..`..| 68 8f 29 59 4b 89 96 08 46 c9 8e fc 75 4f c5 dc |h.)YK...F...uO..| 09 cc 4e 27 8b 44 cd 07 bc ac 04 e0 b5 33 a5 87 |..N'.D.......3..| 9f f4 dd 73 0c 91 ea 12 81 6f e3 75 f0 1e b5 93 |...s.....o.u....| 6c 44 17 d5 3e 97 c9 bd 07 2c 56 77 1f 85 dd 46 |lD..>....,Vw...F| e8 bf de 2c 81 94 a3 f7 e5 b7 a7 c1 37 9f 75 ca |...,........7.u.| 55 77 4d 5e 36 29 ca 85 d8 45 41 72 57 75 c0 79 |UwM^6)...EArWu.y| 5b fa 34 10 06 6d 64 20 42 b7 3a c8 1f 1d 46 64 |[.4..md B.:...Fd| 02 5f c6 47 be f0 c4 3a 28 54 da f6 1e 4f 9a a2 |._.G...:(T...O..| 19 43 a4 6f 49 f8 fc 5e 42 20 28 84 8b 47 20 6e |.C.oI..^B (..G n|
- 2
- Certificate #1
- 2
- 28:5E:23:F4:3D:6C:A5:7A:1D:3D:11:70:0B:01:7A:1B
- RSA-SHA256: nil
- Issuer
- C: US
- O: thawte, Inc.
- CN: thawte SHA256 Code Signing CA
- 2016-03-03 00:00:00 UTC: 2017-02-28 23:59:59 UTC
- Subject
- C: US
- ST: Nevada
- L: Incline Village
- O: Cloud Software
- CN: Cloud Software
- #5
- rsaEncryption: nil
- AB:71:79:57:CA:5F:F5:AB:9C:00:4C:47:CE:32:23:F3:
BE:36:13:52:D7:FB:D8:A1:D5:3C:5F:39:99:02:EA:75:
76:F1:5B:29:E5:6C:66:56:F7:CE:68:96:DB:3A:0F:8E:
36:FC:F2:09:D6:C5:EB:13:37:ED:B7:31:95:59:62:4B:
12:D6:16:7A:CC:3C:80:C1:E2:8C:43:FC:50:DB:EF:BF:
E5:59:17:18:BE:33:C9:2F:BA:2E:ED:3D:52:C3:B8:5F:
5A:13:02:62:3E:E4:C8:E8:52:E3:A5:EE:05:1E:B0:29:
E0:1E:38:97:D3:C5:DC:B3:ED:8D:A3:75:E7:6B:51:01:
D6:FA:85:BD:43:6A:58:7B:93:05:BD:CD:75:62:C8:F2:
74:14:D5:B9:E3:32:81:2F:2D:99:B9:66:D3:9B:10:D3:
14:31:2D:F6:31:F4:DA:F6:F4:25:19:49:C4:A5:AB:10:
40:42:04:F9:DE:1F:09:83:D8:75:90:A0:6E:8D:2B:C1:
6E:21:AC:A0:3A:5C:58:DE:D1:BB:AF:18:65:35:02:42:
E5:61:F9:DB:16:84:80:13:19:9F:BD:2D:37:C7:AC:F0:
BC:85:0C:1D:C0:1F:2A:98:E8:53:8E:17:40:34:76:00:
5A:51:AF:59:19:36:6C:EB:A8:17:CF:DB:92:B9:92:09: 0x010001
- X509v3 extensions
- basicConstraints
- nil
- authorityKeyIdentifier:
57 86 9b 54 b8 be a6 29 8a e4 f6 c2 e2 13 18 89 |W..T...)........| 85 cd dc b7 |.... |
- subjectKeyIdentifier:
85 84 a1 6e fa f6 ba a1 39 e6 84 c1 0f d3 64 73 |...n....9.....ds| e4 1b 96 95 |.... |
- crlDistributionPoints: http://tl.symcb.com/tl.crl
- keyUsage: true, 0x80
- extendedKeyUsage: codeSigning
- certificatePolicies
- 2.23.140.1.4.1
- #0
- id-qt-cps: https://www.thawte.com/cps
- id-qt-unotice: https://www.thawte.com/repository
- #0
- 2.23.140.1.4.1
- 2.5.29.4
- msCodeCom: 0x80
- authorityInfoAccess
- #0
- OCSP: http://tl.symcd.com
- caIssuers: http://tl.symcb.com/tl.crt
- #0
- nsCertType: 0x10
- basicConstraints
- RSA-SHA256:
5f b6 03 6a 4d 1b 4e 8e a0 41 81 ed 69 a5 b4 4d |_..jM.N..A..i..M| 6f 0f 3d 69 6c a1 5f 7e bd 6c d2 35 af 3b 61 07 |o.=il._~.l.5.;a.| ce 67 74 8a 58 76 c2 c1 02 ed b4 b3 2f bd 06 32 |.gt.Xv....../..2| 88 b8 a0 25 15 2f df 3a e2 8e 10 6d 5b d2 4a 27 |...%./.:...m[.J'| b9 3e 10 61 76 2a df 53 3d aa e1 fe 40 0e 04 3b |.>.av*.S=...@..;| 22 8a 7a 79 27 a6 ad 7d fb 15 c6 9a e0 21 04 1d |".zy'..}.....!..| 89 01 cd dd 55 24 9d 21 54 dc 44 21 8c 6a a9 e7 |....U$.!T.D!.j..| 06 0f f7 69 b4 83 ec d5 95 36 c0 f4 65 30 7c 1c |...i.....6..e0|.| 8a 25 e7 26 8a e7 33 cf 56 1b a7 c4 23 39 29 fd |.%.&..3.V...#9).| b2 86 42 e1 4f 98 80 cb 71 4a cc da 94 6f c4 59 |..B.O...qJ...o.Y| 7e fc c8 7f aa 2c 56 92 49 7a 78 d2 46 56 74 2e |~....,V.Izx.FVt.| c7 e2 5c 5d 9f 78 5f 76 91 b6 06 53 ab c8 cd 65 |..\].x_v...S...e| b0 12 00 60 e9 7e 5d 3a 04 bf 93 5b 22 0e e3 1f |...`.~]:...["...| 10 9e 89 89 e0 e5 b9 ef cd eb 69 d1 bc f9 18 75 |..........i....u| ca 6b fd 36 d7 31 13 6a 30 9d ae 20 dd 43 9a cc |.k.6.1.j0.. .C..| 25 7b 3d f6 02 e2 2b af 66 0c 1c 0e 36 b0 e2 d5 |%{=...+.f...6...|
- 2
- Certificate #0
- 1
- unnamed
- #0
- C: US
- O: thawte, Inc.
- CN: thawte SHA256 Code Signing CA
- 28:5E:23:F4:3D:6C:A5:7A:1D:3D:11:70:0B:01:7A:1B
- #0
- SHA1: nil
- #2
- 1.3.6.1.4.1.311.2.1.12
- nil
- contentType: 1.3.6.1.4.1.311.2.1.4
- 1.3.6.1.4.1.311.2.1.11: msCodeCom
- messageDigest:
6a 4a 99 bf ea f7 19 de 68 9a 50 21 ad d6 e1 d9 |jJ......h.P!....| 24 74 01 cb |$t.. |
- 1.3.6.1.4.1.311.2.1.12
- rsaEncryption:
6c 7e a9 c1 06 cc 91 a5 ef d0 17 8d 89 2b 6a 6e |l~...........+jn| 18 0a 30 7d 1d 50 01 97 e6 d4 2b 8b 5a 22 c4 d0 |..0}.P....+.Z"..| be 95 08 13 55 19 07 99 ca 1e b6 9c dc 2a e2 18 |....U........*..| aa 94 b0 ef bf 63 61 85 ae ba 20 cd 6a f1 bd e5 |.....ca... .j...| 31 f9 cb 99 6c f7 f1 8a 72 ac 8c 79 9b fc 49 a4 |1...l...r..y..I.| 9f 81 ee a0 c9 51 5f f1 e4 71 82 c5 52 8f 41 78 |.....Q_..q..R.Ax| 06 ca 77 c3 bb ad ef af 93 7a 96 3a c6 47 a3 9c |..w......z.:.G..| 58 47 5a 04 93 de 0b 01 b7 54 26 97 df e1 84 07 |XGZ......T&.....| 34 34 eb 77 f7 08 02 ef a3 39 04 94 66 d3 55 02 |44.w.....9..f.U.| a0 00 2d 8e 93 ef b1 ed e5 fd d6 c0 8f e0 35 86 |..-...........5.| e7 b1 ad 53 f4 03 54 30 8e 8a 58 9f 7f ec 4b e6 |...S..T0..X...K.| a2 60 e8 b8 c5 3c 62 3a 1e 80 fa 49 d2 cb 47 87 |.`...
- unnamed
offset | size | type | comment | |
---|---|---|---|---|
0 | 1464320 | EXE | 06/22/2016 14:55:35 | # |
15c1 | 15 | HTM | # | |
165800 | 3104 | PKCS7 | Authenticode Signature | # |
Please donate some bucks to keep this site up and running: | |
Ko-fi | |
---|---|
Yandex.Money | |
Thank you! |
everything is OK