filenameblackbox.exe
size28764048 (0x1b6e790)
md5b89aeabd3cc95b5de7cf14f20e5f1c0f
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf8

Rich Header

lib idversiontimes used
1272912
14729930
109782147
1180473
3787552
2891783
1181683
10344
25921019
11978266
617351

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections4
TimeDateStamp0x4ab859b2
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10f
Magic0x10b
LinkerVersion6.0
SizeOfCode0x74600
SizeOfInitializedData0x6be00
SizeOfUninitializedData0
AddressOfEntryPoint0x56683
BaseOfCode0x1000
BaseOfData0x76000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion5.0
Reserved10
SizeOfImage0xe8000
SizeOfHeaders0x400
CheckSum0x1b7ac53
Subsystem2
DllCharacteristics0x8000
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v6.0

Sections

namevavsizeraw sizeflags
.text0x10000x745b00x74600R-X CODE
.rdata0x760000x1342c0x13600R-- IDATA
.data0x8a0000xff480xa800RW- IDATA
.rsrc0x9a0000x4de540x4e000R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x877e80xdc
RESOURCE0x9a0000x4de54
EXCEPTION00
SECURITY0x1b6cc000x1b90
BASERELOC00
DEBUG0x765400x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x760000x540
Delay_IAT0x877100x40
CLR_Header00
typenamesizecp
GIFIDR_GIF1223211252
GIFIDR_GIF1260021252
BITMAP#103824641252
BITMAP#1055070041252
BITMAP#10551145641252
BITMAP#1055346641252
BITMAP#10650259921252
BITMAP#10651736081252
ICON#116401252
ICON#27441252
ICON#32961252
ICON#437521252
ICON#522161252
ICON#613841252
ICON#796401252
ICON#842641252
ICON#911281252
ICON#107441252
ICON#117441252
DIALOG#1035101252
DIALOG#1056621252
DIALOG#1067361252
DIALOG#1071001252
DIALOG#108661252
DIALOG#1092301252
DIALOG#1192921252
DIALOG#1212301252
DIALOG#1256301252
DIALOG#1269841252
DIALOG#1273861252
DIALOG#1285401252
DIALOG#1295061252
DIALOG#1305461252
DIALOG#1311401252
DIALOG#1329721252
DIALOG#10003601252
DIALOG#10014901252
DIALOG#10082781252
DIALOG#10262381252
DIALOG#10344681252
DIALOG#30034921252
DIALOG#30046961252
STRING#693521252
STRING#705741252
STRING#718881252
STRING#725941252
STRING#735001252
STRING#7616441252
STRING#1018701252
STRING#1026381252
STRING#10313041252
STRING#10421781252
STRING#1055741252
STRING#1079541252
STRING#1083001252
STRING#113741252
STRING#1142181252
STRING#1152721252
STRING#1165221252
STRING#1171861252
STRING#1181681252
STRING#1192981252
STRING#12010581252
STRING#12614741252
STRING#134641252
STRING#13522901252
STRING#1386441252
GROUP_ICON#1001321252
GROUP_ICON#112201252
GROUP_ICON#217201252
VERSION#116521252
MANIFEST#111471252
idlangstring
11001033Setup Initialization Error
11011033%s
11021033%1 Setup is preparing the %2, which will guide you through the program setup process. Please wait.
11031033Checking Operating System Version
11041033Checking Windows(R) Installer Version
11051033Configuring Windows Installer
11061033Configuring %s
11071033Setup has completed configuring the Windows Installer on your system. The system needs to be restarted in order to continue with the installation. Please click Restart to reboot the system.
11081033%s
11251033Choose Setup Language
11261033Select the language for this installation from the choices below.
11271033The installer must restart your system to complete configuring the Windows Installer service. Click Yes to restart now or No if you plan to restart later.
11281033This setup will perform an upgrade of '%s'. Do you want to continue?
11291033A later version of '%s' is already installed on this machine. The setup cannot continue.
11301033OK
11311033Cancel
11321033Password:
11331033Install
11341033&Next >
11501033Setup has detected an incompatible version of Windows. Please click OK and verify that the target system is running either Windows 95 (or later version), or Windows NT 4.0 Service Pack 6 (or later version), before relaunching the installation
11511033Error writing to the temporary location
11521033Error extracting %s to the temporary location
11531033Error reading setup initialization file
11541033Installer not found in %s
11551033File %s not found
11561033Internal error in Windows Installer
11581033Error populating strings. Verify that all strings in Setup.ini are valid.
12001033Restart
12011033Setup needs %lu KB free disk space in %s. Please free up some space and try again
12021033You do not have sufficient privileges to complete this installation for all users of the machine. Log on as administrator and then retry this installation
12031033Command line parameters:
12041033/L language ID
12051033/S Hide intialization dialog. For silent mode use: /S /v/qn.
12061033/V parameters to MsiExec.exe
12071033Windows(R) Installer %s found. This is an older version of the Windows(R) Installer. Click OK to continue.
12081033ANSI code page for %s is not installed on the system and therefore setup cannot run in the selected language. Run the setup and select another language.
12101033Setup requires Windows Installer version %s or higher to install the Microsoft .NET Framework version 2.0. Please install the Windows Installer version %s or higher and try again.
16041033This setup does not contain the Windows Installer engine (%s) required to run the installation on this operating system.
16071033Unable to install %s Scripting Runtime.
16081033Unable to create InstallDriver instance, Return code: %d
16091033Please specify a location to save the installation package.
16111033Unable to extract the file %s.
16121033Extracting files.
16131033Downloading file %s.
16141033An error occurred while downloading the file %s. What would you like to do?
16151033hr
16161033min
16171033sec
16181033MB
16191033KB
16201033/sec
16211033Failed to verify signature of file %s.
16221033Estimated time remaining:
16231033%d %s of %d %s downloaded at %01d.%01d %s%s
16241033Preparing to Install...
16251033Get help for this installation.
16261033Help
16271033Unable to save file: %s
16281033Failed to complete installation.
16291033Invalid command line.
16301033/UA<url to InstMsiA.exe>
16311033/UW<url to InstMsiW.exe>
16321033/UM<url to msi package>
16331033/US<url to IsScript.msi>
16341033Setup Initialization Error, failed to clone the process.
16351033The file %s already exists. Would you like to replace it?
16421033Could not verify signature. You need Internet Explorer 3.02 or later with Authenticode update.
16431033Setup requires a newer version of WinInet.dll. You may need to install Internet Explorer 3.02 or later.
16441033You do not have sufficient privileges to complete this installation. Log on as administrator and then retry this installation
16451033Error installing Microsoft(R) .NET Framework, Return Code: %d
16461033%s optionally uses the Microsoft (R) .NET %s Framework. Would you like to install it now?
16481033Setup has detected an incompatible version of Windows. Please click OK and verify that the target system is running either Windows 95 (or later version), or Windows NT 4.0 Service Pack 3 (or later version), before relaunching the installation
16491033%s optionally uses the Visual J# Redistributable Package. Would you like to install it now?
16501033(This will also install the .NET Framework.)
16511033Setup has detected an incompatible version of Windows. Please click OK and verify that the target system is running Windows 2000 Service Pack 3 (or later version), before relaunching the installation
16521033%s requires the following items to be installed on your computer. Click Install to begin installing these requirements.
16531033Installing %s
16541033Would you like to cancel the setup after %s has finished installing?
16551033The files for installation requirement %s could not be found. The installation will now stop. This is probably due to a failed, or canceled download.
16561033The installation of %s appears to have failed. Do you want to continue the installation?
16571033Succeeded
16581033Installing
16591033Pending
16601033Installed
16611033Status
16621033Requirement
16631033Failed
16641033Extracting
16651033Downloading
16661033Skipped
16671033The installation of %s has failed. Setup will now exit.
16681033The installation of %s requires a reboot. Click Yes to restart now or No if you plan to restart later.
16691033%1 optionally uses %2. Would you like to install it now?
16711033Downloading file %2 of %3: %1
17021033This installation lets you install multiple instances of the product. Select the instance you would like to install, and then click Next to continue:
17031033&Install a new instance
17041033&Maintain or upgrade an existing instance
17051033Default
17061033Instance ID
17071033Product Name
17081033Location
17101033This installation lets you patch multiple instances of the product. Select an option below to specify how you would like to apply this patch, and then click Next to continue.
17111033Patch &all of the existing instances
17121033&Patch an existing instance
17131033This installation requires Windows Installer version 4.5 or newer. Setup will now exit.
17141033Decompressing
17151033Version
18041033Choose Setup Language
18121033Select the language for the installation from the choices below.
18131033&OK
18151033InstallShield Wizard
18221033Cancel
18341033&Next >
18351033< &Back
18371033Do you wish to install %s?
18381033Authenticity Verified
18391033The identity of this software publisher was verified by %s.
18401033Caution: %s affirms this software is safe. You should only continue if you trust %s to make this assertion.
18411033&Always trust software published by %s.
18421033This software has not been altered since publication by %s. To install %s, click OK.
18541033InstallShield
18651033Preparing Setup
18661033Please wait while the InstallShield Wizard prepares the setup.
18721033Finish
18731033Transfer rate:
18741033Estimated time left:
18801033/s
18871033%s - InstallShield Wizard
18881033Exit Setup
18891033Are you sure you want to cancel the setup?
19011033&Install a new instance of this application.
19031033Existing Installed Instances Detected
19041033Select the appropriate application instance to maintain or update.
19051033Setup has detected one or more instances of this application already installed on your system.
19061033&Maintain or update the instance of this application selected below:
19071033Setup has detected one or more instances of this application already installed on your system. You can maintain or update an existing instance or install a completely new instance.
19081033Select the instance of the application you want to &maintain or update below:
19091033Display Name
19101033Install Location
20011033%s Setup is preparing the InstallShield Wizard, which will guide you through the rest of the setup process. Please wait.
20021033Error Code:
20031033Error Information:
20041033An error (%s) has occurred while running the setup.
20051033Please make sure you have finished any previous setup and closed other applications. If the error still occurs, please contact your vendor: %s.
20061033&Detail
20071033&Report
20081033There is not enough space to initialize the setup. Please free up at least %ld KB on your %s drive before you run the setup.
20091033A user with administrator rights installed this application. You need to have similar privileges to modify or uninstall it.
20101033Another instance of this setup is already running. Please wait for the other instance to finish and then try again.
21431033Security Warning
21441033Do you want to run this setup?
21461033The origin and integrity of this application could not be verified. You should continue only if you can identify the publisher as someone you trust and are certain this application hasn't been altered since publication.
21471033I &do not trust this setup
21481033I &understand the security risk and wish to continue
21511033The origin and integrity of this application could not be verified because it was not signed by the publisher. You should continue only if you can identify the publisher as someone you trust and are certain this application hasn't been altered since publication.
21521033The origin and integrity of this application could not be verified. The certificate used to sign the software has expired or is invalid or untrusted. You should continue only if you can identify the publisher as someone you trust and are certain this application hasn't been altered since publication.
21531033The software is corrupted or has been altered since it was published. You should not continue this setup.
21541033This setup was created with a BETA VERSION of %s
21551033This Setup was created with an EVALUATION VERSION of %s
21561033Please enter the password
21941033InstallShield Setup Player V16
21951033The path to the installation contains unsupported characters. Try moving the installation to a location that does not have special characters, and then try relaunching it.
21961033This setup requires administrative privileges that appear to be unavailable. Would you like to try again?
module_namehintordfunction_name
VERSION.dll13VerQueryValueW
VERSION.dll2GetFileVersionInfoSizeW
VERSION.dll3GetFileVersionInfoW
SHELL32.dll155ShellExecuteExW
SHELL32.dll109SHGetSpecialFolderLocation
SHELL32.dll107SHGetPathFromIDListW
SHELL32.dll65SHBrowseForFolderW
SHELL32.dll156ShellExecuteW
SHELL32.dll4CommandLineToArgvW
SHELL32.dll101SHGetMalloc
COMCTL32.dll17
KERNEL32.dll175ExpandEnvironmentStringsW
KERNEL32.dll489GlobalUnlock
KERNEL32.dll482GlobalLock
KERNEL32.dll577LockResource
KERNEL32.dll471GlobalAlloc
KERNEL32.dll808SizeofResource
KERNEL32.dll563LoadResource
KERNEL32.dll215FindResourceW
KERNEL32.dll478GlobalFree
KERNEL32.dll446GetTickCount
KERNEL32.dll325GetExitCodeThread
KERNEL32.dll101CreateThread
KERNEL32.dll61CopyFileW
KERNEL32.dll522InterlockedIncrement
KERNEL32.dll518InterlockedDecrement
KERNEL32.dll639QueryPerformanceFrequency
KERNEL32.dll71CreateEventW
KERNEL32.dll912lstrcatW
KERNEL32.dll437GetTempFileNameW
KERNEL32.dll50CompareStringA
KERNEL32.dll51CompareStringW
KERNEL32.dll457GetVersionExW
KERNEL32.dll561LoadLibraryW
KERNEL32.dll229FreeLibrary
KERNEL32.dll393GetProcAddress
KERNEL32.dll420GetSystemDefaultLangID
KERNEL32.dll915lstrcmpW
KERNEL32.dll918lstrcmpiW
KERNEL32.dll848VerLanguageNameW
KERNEL32.dll589MoveFileW
KERNEL32.dll193FindClose
KERNEL32.dll207FindNextFileW
KERNEL32.dll49CompareFileTime
KERNEL32.dll200FindFirstFileW
KERNEL32.dll428GetSystemTimeAsFileTime
KERNEL32.dll752SetFileAttributesW
KERNEL32.dll390GetPrivateProfileStringW
KERNEL32.dll69CreateDirectoryW
KERNEL32.dll568LocalFree
KERNEL32.dll225FormatMessageW
KERNEL32.dll424GetSystemInfo
KERNEL32.dll592MulDiv
KERNEL32.dll541IsValidLocale
KERNEL32.dll455GetVersion
KERNEL32.dll362GetModuleHandleW
KERNEL32.dll254GetCommandLineW
KERNEL32.dll331GetFileAttributesW
KERNEL32.dll529IsBadReadPtr
KERNEL32.dll861VirtualQuery
KERNEL32.dll917lstrcmpiA
KERNEL32.dll920lstrcpyA
KERNEL32.dll219FlushFileBuffers
KERNEL32.dll744SetEndOfFile
KERNEL32.dll316GetDiskFreeSpaceW
KERNEL32.dll318GetDriveTypeW
KERNEL32.dll324GetExitCodeProcess
KERNEL32.dll305GetCurrentThread
KERNEL32.dll350GetLocaleInfoW
KERNEL32.dll235GetACP
KERNEL32.dll449GetTimeZoneInformation
KERNEL32.dll439GetTempPathW
KERNEL32.dll712SetConsoleCtrlHandler
KERNEL32.dll418GetStringTypeW
KERNEL32.dll415GetStringTypeA
KERNEL32.dll526IsBadCodePtr
KERNEL32.dll450GetUserDefaultLCID
KERNEL32.dll656ReadFile
KERNEL32.dll349GetLocaleInfoA
KERNEL32.dll539IsValidCodePage
KERNEL32.dll241GetCPInfo
KERNEL32.dll412GetStartupInfoA
KERNEL32.dll336GetFileType
KERNEL32.dll414GetStdHandle
KERNEL32.dll762SetHandleCount
KERNEL32.dll253GetCommandLineA
KERNEL32.dll319GetEnvironmentStrings
KERNEL32.dll321GetEnvironmentStringsW
KERNEL32.dll228FreeEnvironmentStringsW
KERNEL32.dll227FreeEnvironmentStringsA
KERNEL32.dll834UnhandledExceptionFilter
KERNEL32.dll532IsBadWritePtr
KERNEL32.dll853VirtualAlloc
KERNEL32.dll856VirtualFree
KERNEL32.dll497HeapCreate
KERNEL32.dll499HeapDestroy
KERNEL32.dll456GetVersionExA
KERNEL32.dll322GetEnvironmentVariableA
KERNEL32.dll357GetModuleFileNameA
KERNEL32.dll797SetUnhandledExceptionFilter
KERNEL32.dll545LCMapStringW
KERNEL32.dll544LCMapStringA
KERNEL32.dll179FatalAppExitA
KERNEL32.dll824TlsGetValue
KERNEL32.dll823TlsFree
KERNEL32.dll822TlsAlloc
KERNEL32.dll825TlsSetValue
KERNEL32.dll306GetCurrentThreadId
KERNEL32.dll507HeapSize
KERNEL32.dll505HeapReAlloc
KERNEL32.dll413GetStartupInfoW
KERNEL32.dll359GetModuleHandleA
KERNEL32.dll689RtlUnwind
KERNEL32.dll74CreateFileA
KERNEL32.dll75CreateFileMappingA
KERNEL32.dll923lstrcpynA
KERNEL32.dll814SystemTimeToFileTime
KERNEL32.dll924lstrcpynW
KERNEL32.dll638QueryPerformanceCounter
KERNEL32.dll748SetEvent
KERNEL32.dll681ResetEvent
KERNEL32.dll694SearchPathW
KERNEL32.dll859VirtualProtect
KERNEL32.dll304GetCurrentProcessId
KERNEL32.dll214FindResourceExW
KERNEL32.dll560LoadLibraryExW
KERNEL32.dll308GetDateFormatW
KERNEL32.dll448GetTimeFormatW
KERNEL32.dll348GetLocalTime
KERNEL32.dll817TerminateProcess
KERNEL32.dll400GetProcessTimes
KERNEL32.dll609OpenProcess
KERNEL32.dll302GetCurrentDirectoryW
KERNEL32.dll747SetErrorMode
KERNEL32.dll467GetWindowsDirectoryW
KERNEL32.dll921lstrcpyW
KERNEL32.dll423GetSystemDirectoryW
KERNEL32.dll741SetCurrentDirectoryW
KERNEL32.dll95CreateProcessW
KERNEL32.dll869WaitForSingleObject
KERNEL32.dll171ExitProcess
KERNEL32.dll303GetCurrentProcess
KERNEL32.dll136DuplicateHandle
KERNEL32.dll440GetThreadContext
KERNEL32.dll860VirtualProtectEx
KERNEL32.dll895WriteProcessMemory
KERNEL32.dll220FlushInstructionCache
KERNEL32.dll788SetThreadContext
KERNEL32.dll684ResumeThread
KERNEL32.dll121DeleteFileW
KERNEL32.dll809Sleep
KERNEL32.dll672RemoveDirectoryW
KERNEL32.dll753SetFilePointer
KERNEL32.dll395GetProcessHeap
KERNEL32.dll886WriteFile
KERNEL32.dll495HeapAlloc
KERNEL32.dll358GetModuleFileNameW
KERNEL32.dll927lstrlenW
KERNEL32.dll593MultiByteToWideChar
KERNEL32.dll873WideCharToMultiByte
KERNEL32.dll77CreateFileW
KERNEL32.dll333GetFileSize
KERNEL32.dll76CreateFileMappingW
KERNEL32.dll580MapViewOfFile
KERNEL32.dll837UnmapViewOfFile
KERNEL32.dll44CloseHandle
KERNEL32.dll926lstrlenA
KERNEL32.dll346GetLastError
KERNEL32.dll766SetLastError
KERNEL32.dll161EnumSystemLocalesA
KERNEL32.dll501HeapFree
KERNEL32.dll380GetOEMCP
KERNEL32.dll745SetEnvironmentVariableA
KERNEL32.dll447GetTimeFormatA
KERNEL32.dll557LeaveCriticalSection
KERNEL32.dll118DeleteCriticalSection
KERNEL32.dll514InitializeCriticalSection
KERNEL32.dll139EnterCriticalSection
KERNEL32.dll558LoadLibraryA
KERNEL32.dll307GetDateFormatA
KERNEL32.dll643RaiseException
KERNEL32.dll519InterlockedExchange
KERNEL32.dll914lstrcmpA
KERNEL32.dll780SetStdHandle
KERNEL32.dll564LocalAlloc
USER32.dll86CreateDialogParamW
USER32.dll589SetCursor
USER32.dll362GetWindow
USER32.dll276GetDlgItemTextW
USER32.dll598SetFocus
USER32.dll196EnableWindow
USER32.dll483MessageBoxW
USER32.dll596SetDlgItemTextW
USER32.dll599SetForegroundWindow
USER32.dll272GetDlgCtrlID
USER32.dll268GetDC
USER32.dll226FillRect
USER32.dll346GetSysColor
USER32.dll347GetSysColorBrush
USER32.dll418IsDialogMessageW
USER32.dll576SendMessageW
USER32.dll372GetWindowRect
USER32.dll349GetSystemMetrics
USER32.dll620SetRect
USER32.dll230FindWindowW
USER32.dll402IntersectRect
USER32.dll661SubtractRect
USER32.dll427IsWindow
USER32.dll153DestroyWindow
USER32.dll84CreateDialogIndirectParamW
USER32.dll44CharNextW
USER32.dll446LoadImageW
USER32.dll367GetWindowLongW
USER32.dll13BeginPaint
USER32.dll200EndPaint
USER32.dll641SetWindowLongW
USER32.dll255GetClientRect
USER32.dll64ClientToScreen
USER32.dll643SetWindowPos
USER32.dll364GetWindowDC
USER32.dll554ReleaseDC
USER32.dll198EndDialog
USER32.dll647SetWindowTextW
USER32.dll273GetDlgItem
USER32.dll658ShowWindow
USER32.dll157DialogBoxIndirectParamW
USER32.dll270GetDesktopWindow
USER32.dll729wsprintfW
USER32.dll490MsgWaitForMultipleObjects
USER32.dll510PeekMessageW
USER32.dll143DefWindowProcW
USER32.dll512PostMessageW
USER32.dll434KillTimer
USER32.dll513PostQuitMessage
USER32.dll634SetTimer
USER32.dll444LoadIconW
USER32.dll442LoadCursorW
USER32.dll537RegisterClassW
USER32.dll97CreateWindowExW
USER32.dll318GetMessageW
USER32.dll682TranslateMessage
USER32.dll162DispatchMessageW
USER32.dll489MoveWindow
USER32.dll731wvsprintfW
USER32.dll47CharPrevW
USER32.dll567SendDlgItemMessageW
USER32.dll225ExitWindowsEx
USER32.dll55CharUpperW
USER32.dll719WaitForInputIdle
USER32.dll579SetActiveWindow
GDI32.dll592UnrealizeObject
GDI32.dll525SelectPalette
GDI32.dll497RealizePalette
GDI32.dll361GetDIBColorTable
GDI32.dll425GetSystemPaletteEntries
GDI32.dll69CreatePalette
GDI32.dll63CreateHalftonePalette
GDI32.dll62CreateFontW
GDI32.dll532SetBkMode
GDI32.dll570SetTextColor
GDI32.dll407GetObjectW
GDI32.dll363GetDeviceCaps
GDI32.dll61CreateFontIndirectW
GDI32.dll80CreateSolidBrush
GDI32.dll45CreateCompatibleDC
GDI32.dll524SelectObject
GDI32.dll18BitBlt
GDI32.dll140DeleteDC
GDI32.dll51CreateDIBitmap
GDI32.dll143DeleteObject
GDI32.dll421GetStockObject
GDI32.dll590TranslateCharsetInfo
ADVAPI32.dll471RegEnumKeyW
ADVAPI32.dll28AdjustTokenPrivileges
ADVAPI32.dll332LookupPrivilegeValueW
ADVAPI32.dll491RegQueryValueExA
ADVAPI32.dll470RegEnumKeyExW
ADVAPI32.dll464RegDeleteKeyW
ADVAPI32.dll481RegOpenKeyExA
ADVAPI32.dll429OpenThreadToken
ADVAPI32.dll424OpenProcessToken
ADVAPI32.dll279GetTokenInformation
ADVAPI32.dll29AllocateAndInitializeSid
ADVAPI32.dll214EqualSid
ADVAPI32.dll223FreeSid
ADVAPI32.dll304InitializeSecurityDescriptor
ADVAPI32.dll560SetSecurityDescriptorOwner
ADVAPI32.dll559SetSecurityDescriptorGroup
ADVAPI32.dll558SetSecurityDescriptorDacl
ADVAPI32.dll473RegEnumValueW
ADVAPI32.dll461RegCreateKeyExW
ADVAPI32.dll505RegSetValueExW
ADVAPI32.dll466RegDeleteValueW
ADVAPI32.dll482RegOpenKeyExW
ADVAPI32.dll492RegQueryValueExW
ADVAPI32.dll456RegCloseKey
ADVAPI32.dll483RegOpenKeyW
ADVAPI32.dll462RegCreateKeyW
ole32.dll6CLSIDFromProgID
ole32.dll16CoCreateInstance
ole32.dll319StringFromCLSID
ole32.dll97CoTaskMemFree
ole32.dll59CoInitializeSecurity
ole32.dll137CreateItemMoniker
ole32.dll159GetRunningObjectTable
ole32.dll274ProgIDFromCLSID
ole32.dll320StringFromGUID2
ole32.dll101CoUninitialize
ole32.dll57CoInitialize
ole32.dll15CoCreateGuid
OLEAUT32.dll6
OLEAUT32.dll4
OLEAUT32.dll5
OLEAUT32.dll7
OLEAUT32.dll2
OLEAUT32.dll9
OLEAUT32.dll12
OLEAUT32.dll200
OLEAUT32.dll163
OLEAUT32.dll161
OLEAUT32.dll201
OLEAUT32.dll202
RPCRT4.dll485UuidToStringW
RPCRT4.dll476UuidCreate
RPCRT4.dll481UuidFromStringW
RPCRT4.dll467RpcStringFreeW

StringTable 040904B0

CompanyNameCASIO COMPUTER CO., LTD.
FileDescriptionClassWiz Emulator Subscription for fx-991DE X
FileVersion2.01.0020
InternalNameSetup
LegalCopyrightCopyright (C) 2016 CASIO COMPUTER CO., LTD.
OriginalFilenameSetup.exe
ProductNameClassWiz Emulator Subscription for fx-991DE X
ProductVersion2.01.0020
Internal Build Number92881

VS_FIXEDFILEINFO

FileVersion16.0.0.400
ProductVersion16.0.0.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS4
FileType2
FileSubtype0

Signers (1)

issuer: /C=US/O=Symantec Corporation/OU=Symantec Trust Network/CN=Symantec Class 3 SHA256 Code Signing CA
serial: 6DB612DA705C5C867F7188CFB9AD6A80

Certificates (2)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:b6:12:da:70:5c:5c:86:7f:71:88:cf:b9:ad:6a:80
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 SHA256 Code Signing CA
        Validity
            Not Before: Nov  1 00:00:00 2018 GMT
            Not After : Oct 31 23:59:59 2021 GMT
        Subject: C=JP, ST=Tokyo, L=Shibuya-ku, O=CASIO COMPUTER CO., LTD., OU=Consumer Product Development Unit, CN=CASIO COMPUTER CO., LTD.
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e1:e3:4d:98:89:80:e1:17:f9:ef:64:22:21:
                    52:d0:5c:f2:59:c5:02:59:75:dd:09:7c:ee:0e:87:
                    53:19:9e:6b:02:ec:6c:28:1c:6c:ac:2f:ba:ed:32:
                    f1:d3:f5:bb:95:db:19:a0:2a:2b:c1:33:01:a2:f1:
                    54:78:f6:38:a1:54:d9:fe:31:19:35:e9:8a:6b:1b:
                    cb:1c:6c:9d:4f:34:f9:c5:e1:4c:31:ba:ed:5e:09:
                    2b:b4:2b:a1:56:ab:96:bc:24:88:bc:8f:7b:d2:7b:
                    b3:45:38:3b:15:62:fc:e4:30:6a:0d:9e:18:6a:41:
                    61:6c:b4:60:a2:c3:f5:ca:04:ae:9e:b5:32:86:1f:
                    56:69:ed:2c:c6:02:63:34:1b:67:51:06:c0:77:38:
                    de:6e:ea:9d:c2:2d:21:45:a9:a8:69:2d:49:b6:dd:
                    c0:5f:d9:6a:76:d3:3b:dc:00:5c:1b:36:33:2f:ea:
                    f8:42:7a:f8:af:89:3b:0d:8a:b2:6a:cc:b5:4b:cb:
                    80:da:0c:8b:ff:ae:f7:cd:2f:42:20:54:1d:10:b0:
                    08:84:11:2e:68:e8:e4:75:fa:9c:69:b7:62:34:24:
                    d8:93:ed:68:9d:75:fb:44:55:99:12:d4:05:aa:c7:
                    ae:5c:d6:2d:71:b5:06:e3:c2:85:f4:f6:55:f1:e1:
                    c3:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://sv.symcb.com/sv.crl

            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.4.1
                  CPS: https://d.symcb.com/cps
                  User Notice:
                    Explicit Text: https://d.symcb.com/rpa

            X509v3 Extended Key Usage: 
                Code Signing
            Authority Information Access: 
                OCSP - URI:http://sv.symcd.com
                CA Issuers - URI:http://sv.symcb.com/sv.crt

            X509v3 Authority Key Identifier: 
                keyid:96:3B:53:F0:79:33:97:AF:7D:83:EF:2E:2B:CC:CA:B7:86:1E:72:66

            X509v3 Subject Key Identifier: 
                08:D4:60:12:B1:31:FE:8D:9E:BE:F5:5E:67:25:92:47:09:8D:E7:C6
    Signature Algorithm: sha256WithRSAEncryption
         27:98:f3:b2:db:e8:1c:c2:7e:2e:61:35:76:ce:48:b2:90:d0:
         56:6a:a3:cc:40:40:33:ee:64:1a:86:d6:c5:fa:10:73:0b:23:
         a9:26:43:4b:cd:9f:a1:01:fe:15:94:17:bc:9a:7e:be:04:80:
         78:b4:cd:30:61:54:52:e5:95:ef:42:cf:99:ec:37:8e:e6:91:
         38:64:6c:66:65:d0:8d:7c:b0:95:2e:09:02:6f:91:51:94:f5:
         37:3c:f4:58:29:4f:a9:12:4d:08:44:55:60:1f:2c:7f:0f:b3:
         e9:d6:40:da:d0:46:61:36:30:35:76:95:83:a7:a1:43:96:ec:
         c3:93:2b:8f:9f:00:05:9f:e3:a5:1d:8f:15:b8:e4:d3:3b:74:
         43:b2:40:5d:0c:18:96:41:4a:19:ee:3e:db:15:19:ce:2e:d7:
         0e:27:ad:03:3e:b1:98:2c:94:57:66:67:83:29:f9:e0:2a:d1:
         63:4b:73:82:fc:bf:52:e3:91:5c:81:ab:57:68:e2:85:58:18:
         8e:1c:33:1f:24:52:15:a2:7a:50:04:a0:3d:d0:e9:66:1e:c7:
         0e:f0:26:69:35:b2:1f:d4:24:ab:bd:74:ee:59:ac:5c:30:cd:
         30:1f:38:e6:85:9f:06:19:10:17:c1:61:be:26:a2:58:a5:c7:
         30:66:5c:e8
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
        Validity
            Not Before: Dec 10 00:00:00 2013 GMT
            Not After : Dec  9 23:59:59 2023 GMT
        Subject: C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 SHA256 Code Signing CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:83:1e:00:16:af:2c:b1:d2:08:c4:d7:68:93:
                    51:60:1e:71:f6:e2:47:b4:db:58:4d:23:62:6a:b4:
                    bf:5a:1b:51:f7:a3:0d:18:77:68:bb:d8:36:ab:2f:
                    21:50:da:9e:f3:e7:5f:27:4e:0b:c2:97:c8:09:70:
                    93:a9:da:5c:0d:4e:a4:0d:91:a0:b4:ec:14:ce:91:
                    72:54:2e:ce:a3:db:44:e9:52:1b:3f:41:3c:ca:4a:
                    e4:aa:c0:e8:39:ab:53:cc:21:d0:cc:cf:7f:9b:e6:
                    c2:cc:58:6a:82:15:ee:3d:36:cf:1c:c5:97:07:24:
                    8e:f1:7b:be:31:2d:3d:6e:dc:b5:99:42:9f:4b:61:
                    95:5f:1c:70:ee:17:7d:db:8b:e5:61:89:78:c7:68:
                    1b:af:11:78:1a:98:ae:c4:55:47:53:d9:b3:32:d6:
                    a1:0e:46:40:c5:97:92:8a:d1:53:a7:99:5b:85:35:
                    57:d3:ea:93:62:61:20:0a:c7:30:77:24:11:4d:62:
                    83:b6:ba:7b:68:82:31:ee:65:ca:df:f9:d5:8d:b2:
                    35:dc:8c:2b:6f:6a:72:5c:60:84:9c:f2:0c:94:5e:
                    c0:56:52:00:48:cc:d3:f8:a5:7d:de:2f:d7:13:e4:
                    38:a8:84:d5:46:b8:13:86:c2:1b:9d:ea:5a:38:dd:
                    9b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access: 
                OCSP - URI:http://s2.symcb.com

            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: http://www.symauth.com/cps
                  User Notice:
                    Explicit Text: http://www.symauth.com/rpa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://s1.symcb.com/pca3-g5.crl

            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, Code Signing
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=SymantecPKI-1-567
            X509v3 Subject Key Identifier: 
                96:3B:53:F0:79:33:97:AF:7D:83:EF:2E:2B:CC:CA:B7:86:1E:72:66
            X509v3 Authority Key Identifier: 
                keyid:7F:D3:65:A7:C2:DD:EC:BB:F0:30:09:F3:43:39:FA:02:AF:33:31:33

    Signature Algorithm: sha256WithRSAEncryption
         13:85:1a:1e:69:a9:37:f7:a0:bd:a4:af:7e:1d:61:53:fe:9d:
         8c:5e:0c:a6:75:1e:78:17:23:dd:fd:ec:1a:03:55:39:fb:71:
         95:c7:65:5a:a7:8e:30:d2:44:5a:61:db:70:6f:da:21:05:c2:
         2e:73:ba:49:f1:d1:93:fe:5d:c9:cd:5e:03:e0:89:9e:3f:74:
         1e:d7:f7:38:8b:a9:d6:cf:bb:35:2f:33:58:a8:92:56:d1:c8:
         4d:3b:82:e6:79:84:16:fc:28:b0:b1:47:f3:1d:a2:3e:ee:87:
         d9:a6:7f:a4:56:a5:3f:ad:84:2e:29:de:7c:bc:a8:aa:a3:3d:
         04:01:ea:ba:93:a2:0e:50:22:29:17:4c:87:e4:3a:11:5f:d6:
         a4:25:89:9b:05:6b:2f:b4:c9:01:4c:27:7b:0b:ac:19:05:22:
         a0:60:15:3f:da:c9:fb:4d:4c:8f:fb:72:67:77:fd:27:94:c7:
         ba:35:0e:88:49:fe:8d:fd:28:af:4a:12:bd:0d:b3:97:05:de:
         44:0c:15:fa:36:2b:03:dc:c1:50:01:f1:a1:11:5d:14:e5:e2:
         bd:27:4b:54:be:2b:84:5e:0f:a6:c3:74:05:0a:ef:97:c3:89:
         22:b1:1f:77:f3:bd:cd:43:d4:f1:4c:a9:3f:b5:8b:84:af:64:
         f2:d0:14:21
pkcs7-signedData
  • 1
    • SHA256: nil
    • 1.3.6.1.4.1.311.2.1.4
      • #0
        • 1.3.6.1.4.1.311.2.1.15
          • : 
            00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |
        • SHA256
          • 50 65 cd e7 4a cd 6e f2  32 d6 5a df 74 88 08 df  |Pe..J.n.2.Z.t...|
b1 74 59 f3 77 5c ef f6  5c a3 17 80 f2 a5 96 e1  |.tY.w\..\.......|
    • Certificates
      • Certificate #0
        • 2
          • 6D:B6:12:DA:70:5C:5C:86:7F:71:88:CF:B9:AD:6A:80
          • RSA-SHA256: nil
          • Issuer
            • C: US
            • O: Symantec Corporation
            • OU: Symantec Trust Network
            • CN: Symantec Class 3 SHA256 Code Signing CA
          • 2018-11-01 00:00:00 UTC: 2021-10-31 23:59:59 UTC
          • Subject
            • C: JP
            • ST: Tokyo
            • L: Shibuya-ku
            • O: CASIO COMPUTER CO., LTD.
            • OU: Consumer Product Development Unit
            • CN: CASIO COMPUTER CO., LTD.
          • #5
            • rsaEncryption: nil
            • B5:E1:E3:4D:98:89:80:E1:17:F9:EF:64:22:21:52:D0:
              5C:F2:59:C5:02:59:75:DD:09:7C:EE:0E:87:53:19:9E:
              6B:02:EC:6C:28:1C:6C:AC:2F:BA:ED:32:F1:D3:F5:BB:
              95:DB:19:A0:2A:2B:C1:33:01:A2:F1:54:78:F6:38:A1:
              54:D9:FE:31:19:35:E9:8A:6B:1B:CB:1C:6C:9D:4F:34:
              F9:C5:E1:4C:31:BA:ED:5E:09:2B:B4:2B:A1:56:AB:96:
              BC:24:88:BC:8F:7B:D2:7B:B3:45:38:3B:15:62:FC:E4:
              30:6A:0D:9E:18:6A:41:61:6C:B4:60:A2:C3:F5:CA:04:
              AE:9E:B5:32:86:1F:56:69:ED:2C:C6:02:63:34:1B:67:
              51:06:C0:77:38:DE:6E:EA:9D:C2:2D:21:45:A9:A8:69:
              2D:49:B6:DD:C0:5F:D9:6A:76:D3:3B:DC:00:5C:1B:36:
              33:2F:EA:F8:42:7A:F8:AF:89:3B:0D:8A:B2:6A:CC:B5:
              4B:CB:80:DA:0C:8B:FF:AE:F7:CD:2F:42:20:54:1D:10:
              B0:08:84:11:2E:68:E8:E4:75:FA:9C:69:B7:62:34:24:
              D8:93:ED:68:9D:75:FB:44:55:99:12:D4:05:AA:C7:AE:
              5C:D6:2D:71:B5:06:E3:C2:85:F4:F6:55:F1:E1:C3:5D              : 0x010001
          • X509v3 extensions
            • basicConstraints
              • nil
            • keyUsage: true, 0x80
            • crlDistributionPoints: http://sv.symcb.com/sv.crl
            • certificatePolicies
              • 2.23.140.1.4.1
                • #0
                  • id-qt-cps: https://d.symcb.com/cps
                  • id-qt-unotice: https://d.symcb.com/rpa
            • extendedKeyUsage: codeSigning
            • authorityInfoAccess
              • #0
                • OCSP: http://sv.symcd.com
                • caIssuers: http://sv.symcb.com/sv.crt
            • authorityKeyIdentifier: 
              96 3b 53 f0 79 33 97 af  7d 83 ef 2e 2b cc ca b7  |.;S.y3..}...+...|
86 1e 72 66                                       |..rf            |
            • subjectKeyIdentifier: 
              08 d4 60 12 b1 31 fe 8d  9e be f5 5e 67 25 92 47  |..`..1.....^g%.G|
09 8d e7 c6                                       |....            |
        • RSA-SHA256: 
          27 98 f3 b2 db e8 1c c2  7e 2e 61 35 76 ce 48 b2  |'.......~.a5v.H.|
90 d0 56 6a a3 cc 40 40  33 ee 64 1a 86 d6 c5 fa  |..Vj..@@3.d.....|
10 73 0b 23 a9 26 43 4b  cd 9f a1 01 fe 15 94 17  |.s.#.&CK........|
bc 9a 7e be 04 80 78 b4  cd 30 61 54 52 e5 95 ef  |..~...x..0aTR...|
42 cf 99 ec 37 8e e6 91  38 64 6c 66 65 d0 8d 7c  |B...7...8dlfe..||
b0 95 2e 09 02 6f 91 51  94 f5 37 3c f4 58 29 4f  |.....o.Q..7<.X)O|
a9 12 4d 08 44 55 60 1f  2c 7f 0f b3 e9 d6 40 da  |..M.DU`.,.....@.|
d0 46 61 36 30 35 76 95  83 a7 a1 43 96 ec c3 93  |.Fa605v....C....|
2b 8f 9f 00 05 9f e3 a5  1d 8f 15 b8 e4 d3 3b 74  |+.............;t|
43 b2 40 5d 0c 18 96 41  4a 19 ee 3e db 15 19 ce  |C.@]...AJ..>....|
2e d7 0e 27 ad 03 3e b1  98 2c 94 57 66 67 83 29  |...'..>..,.Wfg.)|
f9 e0 2a d1 63 4b 73 82  fc bf 52 e3 91 5c 81 ab  |..*.cKs...R..\..|
57 68 e2 85 58 18 8e 1c  33 1f 24 52 15 a2 7a 50  |Wh..X...3.$R..zP|
04 a0 3d d0 e9 66 1e c7  0e f0 26 69 35 b2 1f d4  |..=..f....&i5...|
24 ab bd 74 ee 59 ac 5c  30 cd 30 1f 38 e6 85 9f  |$..t.Y.\0.0.8...|
06 19 10 17 c1 61 be 26  a2 58 a5 c7 30 66 5c e8  |.....a.&.X..0f\.|
      • Certificate #1
        • 2
          • 3D:78:D7:F9:76:49:60:B2:61:7D:F4:F0:1E:CA:86:2A
          • RSA-SHA256: nil
          • Issuer
            • C: US
            • O: VeriSign, Inc.
            • OU: VeriSign Trust Network
            • OU: (c) 2006 VeriSign, Inc. - For authorized use only
            • CN: VeriSign Class 3 Public Primary Certification Authority - G5
          • 2013-12-10 00:00:00 UTC: 2023-12-09 23:59:59 UTC
          • Subject
            • C: US
            • O: Symantec Corporation
            • OU: Symantec Trust Network
            • CN: Symantec Class 3 SHA256 Code Signing CA
          • #5
            • rsaEncryption: nil
            • 97:83:1E:00:16:AF:2C:B1:D2:08:C4:D7:68:93:51:60:
              1E:71:F6:E2:47:B4:DB:58:4D:23:62:6A:B4:BF:5A:1B:
              51:F7:A3:0D:18:77:68:BB:D8:36:AB:2F:21:50:DA:9E:
              F3:E7:5F:27:4E:0B:C2:97:C8:09:70:93:A9:DA:5C:0D:
              4E:A4:0D:91:A0:B4:EC:14:CE:91:72:54:2E:CE:A3:DB:
              44:E9:52:1B:3F:41:3C:CA:4A:E4:AA:C0:E8:39:AB:53:
              CC:21:D0:CC:CF:7F:9B:E6:C2:CC:58:6A:82:15:EE:3D:
              36:CF:1C:C5:97:07:24:8E:F1:7B:BE:31:2D:3D:6E:DC:
              B5:99:42:9F:4B:61:95:5F:1C:70:EE:17:7D:DB:8B:E5:
              61:89:78:C7:68:1B:AF:11:78:1A:98:AE:C4:55:47:53:
              D9:B3:32:D6:A1:0E:46:40:C5:97:92:8A:D1:53:A7:99:
              5B:85:35:57:D3:EA:93:62:61:20:0A:C7:30:77:24:11:
              4D:62:83:B6:BA:7B:68:82:31:EE:65:CA:DF:F9:D5:8D:
              B2:35:DC:8C:2B:6F:6A:72:5C:60:84:9C:F2:0C:94:5E:
              C0:56:52:00:48:CC:D3:F8:A5:7D:DE:2F:D7:13:E4:38:
              A8:84:D5:46:B8:13:86:C2:1B:9D:EA:5A:38:DD:9B:DB              : 0x010001
          • X509v3 extensions
            • authorityInfoAccess
              • OCSP: http://s2.symcb.com
            • basicConstraints
              • true
              • true: 0
            • certificatePolicies
              • 2.16.840.1.113733.1.7.23.3
                • #0
                  • id-qt-cps: http://www.symauth.com/cps
                  • id-qt-unotice: http://www.symauth.com/rpa
            • crlDistributionPoints: http://s1.symcb.com/pca3-g5.crl
            • extendedKeyUsage
              • clientAuth: codeSigning
            • keyUsage: true, 6
            • subjectAltName
              • CN: SymantecPKI-1-567
            • subjectKeyIdentifier: 
              96 3b 53 f0 79 33 97 af  7d 83 ef 2e 2b cc ca b7  |.;S.y3..}...+...|
86 1e 72 66                                       |..rf            |
            • authorityKeyIdentifier: 
              7f d3 65 a7 c2 dd ec bb  f0 30 09 f3 43 39 fa 02  |..e......0..C9..|
af 33 31 33                                       |.313            |
        • RSA-SHA256: 
          13 85 1a 1e 69 a9 37 f7  a0 bd a4 af 7e 1d 61 53  |....i.7.....~.aS|
fe 9d 8c 5e 0c a6 75 1e  78 17 23 dd fd ec 1a 03  |...^..u.x.#.....|
55 39 fb 71 95 c7 65 5a  a7 8e 30 d2 44 5a 61 db  |U9.q..eZ..0.DZa.|
70 6f da 21 05 c2 2e 73  ba 49 f1 d1 93 fe 5d c9  |po.!...s.I....].|
cd 5e 03 e0 89 9e 3f 74  1e d7 f7 38 8b a9 d6 cf  |.^....?t...8....|
bb 35 2f 33 58 a8 92 56  d1 c8 4d 3b 82 e6 79 84  |.5/3X..V..M;..y.|
16 fc 28 b0 b1 47 f3 1d  a2 3e ee 87 d9 a6 7f a4  |..(..G...>......|
56 a5 3f ad 84 2e 29 de  7c bc a8 aa a3 3d 04 01  |V.?...).|....=..|
ea ba 93 a2 0e 50 22 29  17 4c 87 e4 3a 11 5f d6  |.....P").L..:._.|
a4 25 89 9b 05 6b 2f b4  c9 01 4c 27 7b 0b ac 19  |.%...k/...L'{...|
05 22 a0 60 15 3f da c9  fb 4d 4c 8f fb 72 67 77  |.".`.?...ML..rgw|
fd 27 94 c7 ba 35 0e 88  49 fe 8d fd 28 af 4a 12  |.'...5..I...(.J.|
bd 0d b3 97 05 de 44 0c  15 fa 36 2b 03 dc c1 50  |......D...6+...P|
01 f1 a1 11 5d 14 e5 e2  bd 27 4b 54 be 2b 84 5e  |....]....'KT.+.^|
0f a6 c3 74 05 0a ef 97  c3 89 22 b1 1f 77 f3 bd  |...t......"..w..|
cd 43 d4 f1 4c a9 3f b5  8b 84 af 64 f2 d0 14 21  |.C..L.?....d...!|
    • Signer
      • 1
      • unnamed
        • #0
          • C: US
          • O: Symantec Corporation
          • OU: Symantec Trust Network
          • CN: Symantec Class 3 SHA256 Code Signing CA
        • 6D:B6:12:DA:70:5C:5C:86:7F:71:88:CF:B9:AD:6A:80
      • SHA256: nil
      • #3
        • 1.3.6.1.4.1.311.2.1.12
          • nil
        • contentType: 1.3.6.1.4.1.311.2.1.4
        • 1.3.6.1.4.1.311.2.1.11: msCodeInd
        • messageDigest: 
          0c cb 51 7e aa 47 82 77  e8 4e 30 1d f9 c0 e8 f9  |..Q~.G.w.N0.....|
f6 4b 27 08 6c c3 42 d7  33 12 ab 7e 85 f1 05 2c  |.K'.l.B.3..~...,|
      • rsaEncryption: 
        a2 4f 62 9c 18 26 23 d6  e9 8b dc d6 d1 9e b9 be  |.Ob..&#.........|
70 37 6c e7 15 cb d3 69  ba 1d 87 5e 10 34 17 a1  |p7l....i...^.4..|
d1 d0 6b 65 42 d1 35 f5  f8 02 4d 98 3c 89 c4 45  |..keB.5...M.<..E|
a3 7b 75 96 d0 1b df e8  19 59 15 a8 ae 5a 25 9f  |.{u......Y...Z%.|
84 e7 7e 51 5c 35 4b f3  32 17 da ea e3 07 d4 3d  |..~Q\5K.2......=|
91 77 aa 14 ab 43 cb 65  5b fe d3 c2 6c 6d b0 5f  |.w...C.e[...lm._|
6e 78 97 08 d7 50 38 fe  00 10 cc 97 9b 53 95 e7  |nx...P8......S..|
a7 e7 b5 b5 85 10 f3 d7  80 b8 8e ae 5c f0 dc 7d  |............\..}|
d7 37 9b 8b 9d 60 98 ab  3a 51 2f 23 00 62 4d cc  |.7...`..:Q/#.bM.|
85 07 a0 c7 d8 2c 74 f1  36 0c 6c ae bd fb bb f5  |.....,t.6.l.....|
47 37 a6 91 5d 60 33 af  81 8b 08 a3 0b a6 ce 1c  |G7..]`3.........|
a7 fd af 25 1d be c1 8a  a9 68 c0 df 1d c4 e1 f7  |...%.....h......|
e8 f3 64 a4 73 4a d7 aa  f1 7c f3 4c 40 6e 2d 03  |..d.sJ...|.L@n-.|
de 39 44 de 61 ea c8 76  ee 60 8a 10 ff 7e 3a b0  |.9D.a..v.`...~:.|
96 91 cc 3b bf 36 f5 9d  50 54 7f 58 57 d7 63 1b  |...;.6..PT.XW.c.|
6f 93 cf 68 8e e2 f8 89  9d a1 59 98 b6 9d 94 1a  |o..h......Y.....|
      • 1.3.6.1.4.1.311.3.3.1
        • pkcs7-signedData
          • 3
            • SHA256
            • id-smime-ct-TSTInfo
              • 1
                • 2.16.840.1.113733.1.7.23.3
                • SHA1
                  • 4b aa 43 46 5e 18 e6 53  4e 51 53 93 70 f2 b2 88  |K.CF^..SNQS.p...|
0d b5 cb 3d                                       |...=            |
                • 19:26:40:83:E4:7E:23:A3:79:67:92:F6:48:BC:1B:2A:
                  4A:A1:CF:93
                • 2020-07-14 04:17:53 UTC
                • 0x1E
                • #5
                  • C: US
                  • O: Symantec Corporation
                  • OU: Symantec Trust Network
                  • CN: Symantec SHA256 TimeStamping Signer - G3
            • Certificates
              • Certificate #0
                • 2
                  • 7B:05:B1:D4:49:68:51:44:F7:C9:89:D2:9C:19:9D:12
                  • RSA-SHA256: nil
                  • Issuer
                    • C: US
                    • O: VeriSign, Inc.
                    • OU: VeriSign Trust Network
                    • OU: (c) 2008 VeriSign, Inc. - For authorized use only
                    • CN: VeriSign Universal Root Certification Authority
                  • 2016-01-12 00:00:00 UTC: 2031-01-11 23:59:59 UTC
                  • Subject
                    • C: US
                    • O: Symantec Corporation
                    • OU: Symantec Trust Network
                    • CN: Symantec SHA256 TimeStamping CA
                  • #5
                    • rsaEncryption: nil
                    • BB:59:9D:59:55:4F:9D:8C:72:5D:1A:81:A2:EB:55:F3:
                      B0:01:AD:3C:71:AC:32:8F:05:6B:86:9A:27:00:32:97:
                      6A:4D:C9:64:14:4B:29:BB:C2:D9:29:B9:2E:EC:63:B3:
                      E1:CF:3F:0B:56:90:F8:62:1B:7E:EB:A6:07:E2:DE:7F:
                      5E:6D:40:38:D4:91:06:E7:41:7C:79:1C:CB:CB:AD:1B:
                      BF:D8:95:91:F3:F0:EE:6C:F8:AD:96:39:2E:7F:C1:27:
                      B8:78:39:C5:84:A5:ED:ED:AF:87:8E:CE:8D:C7:6D:EA:
                      D2:98:B5:3A:1F:1E:39:9D:C3:F4:9A:A8:F4:84:E1:C4:
                      D1:7C:71:C6:06:29:B4:3F:E4:83:0D:26:C3:7B:08:3E:
                      4D:F9:0A:B7:33:49:FF:CA:3B:D4:F5:B2:9B:4B:E1:88:
                      99:1A:F5:C0:E9:33:14:D6:DF:C7:80:DB:91:EE:FE:BC:
                      92:57:72:77:F4:CD:A8:CC:FE:09:F5:93:37:BE:95:88:
                      6A:C5:DC:F4:B1:4B:D4:CE:E8:09:91:5F:B5:84:79:35:
                      8A:78:AC:19:32:8F:23:C1:32:41:1B:59:0E:A9:3E:B1:
                      CC:F9:D6:2B:EF:B7:D8:E4:D5:1D:6D:11:3A:92:F6:93:
                      C9:9C:E3:48:EE:BB:53:0E:D4:36:97:86:78:C5:A1:37                      : 0x010001
                  • #6
                    • keyUsage: true, 6
                    • basicConstraints
                      • true
                      • true: 0
                    • certificatePolicies
                      • 2.16.840.1.113733.1.7.23.3
                        • #0
                          • id-qt-cps: https://d.symcb.com/cps
                          • id-qt-unotice: https://d.symcb.com/rpa
                    • authorityInfoAccess
                      • OCSP: http://s.symcd.com
                    • crlDistributionPoints: http://s.symcb.com/universal-root.crl
                    • extendedKeyUsage: timeStamping
                    • subjectAltName
                      • CN: TimeStamp-2048-3
                    • subjectKeyIdentifier: 
                      af 63 d6 ca a3 4e 85 72  e0 a7 bc 41 f3 29 a2 38  |.c...N.r...A.).8|
7f 80 75 62                                       |..ub            |
                    • authorityKeyIdentifier: 
                      b6 77 fa 69 48 47 9f 53  12 d5 c2 ea 07 32 76 07  |.w.iHG.S.....2v.|
d1 97 07 19                                       |....            |
                • RSA-SHA256: 
                  75 ea b0 2d d5 34 19 5c  32 45 fe 0e e1 d4 4f a6  |u..-.4.\2E....O.|
78 c1 6f d7 ea dd dc 4f  f3 a1 c8 81 88 f7 a7 8f  |x.o....O........|
15 e6 40 29 ad e6 5d f4  a2 d9 56 64 84 71 30 2a  |..@)..]...Vd.q0*|
dd 1e 61 17 66 20 56 06  98 19 8d 5d 71 f2 f8 97  |..a.f V....]q...|
bc 09 fd 1c 91 47 c9 e2  e8 8d 03 fb cc 90 2f d6  |.....G......../.|
0a 6c 4e 33 ec d6 b4 93  c8 4c 90 63 48 39 40 21  |.lN3.....L.cH9@!|
c4 dd d6 6e 89 98 3c b5  98 97 e8 a9 06 b7 09 c9  |...n..<.........|
8f 53 57 41 90 2f e1 1e  4d 4e dc ca 10 78 6c 42  |.SWA./..MN...xlB|
6e f0 b6 c5 f8 61 5c 52  f5 4e f6 6b 8d f7 4a 7a  |n....a\R.N.k..Jz|
be f3 cd fd 03 d7 d9 f6  03 a8 0f e3 53 f7 0a 75  |............S..u|
ec c6 75 2e aa 66 85 04  99 b7 f8 06 57 e1 c6 0e  |..u..f......W...|
f6 e8 af da ec 9b 18 1f  aa b9 e3 3a 00 bf ce 8a  |...........:....|
94 cb 01 db 9e c7 38 bb  0f 52 ab d1 e3 94 03 60  |......8..R.....`|
0a 4d a0 fe 27 6d 14 32  fc 3f 97 40 e1 bf 99 89  |.M..'m.2.?.@....|
db e4 39 14 bd da e4 d3  c3 ea 2b 5a b3 95 58 55  |..9.......+Z..XU|
04 7d c7 9a ec 23 03 8d  85 2a d2 ff ae a9 61 81  |.}...#...*....a.|
              • Certificate #1
                • 2
                  • 7B:D4:E5:AF:BA:CC:07:3F:A1:01:23:04:22:41:4D:12
                  • RSA-SHA256: nil
                  • Issuer
                    • C: US
                    • O: Symantec Corporation
                    • OU: Symantec Trust Network
                    • CN: Symantec SHA256 TimeStamping CA
                  • 2017-12-23 00:00:00 UTC: 2029-03-22 23:59:59 UTC
                  • Subject
                    • C: US
                    • O: Symantec Corporation
                    • OU: Symantec Trust Network
                    • CN: Symantec SHA256 TimeStamping Signer - G3
                  • #5
                    • rsaEncryption: nil
                    • AF:0E:8A:AA:F8:DC:BF:69:7B:54:17:71:47:09:BD:8D:
                      3C:81:F8:74:15:77:67:90:9C:FD:DE:4E:02:9E:4B:76:
                      F6:E5:36:3E:65:D5:24:20:6D:30:F9:DD:1D:83:E9:3F:
                      27:4A:33:4E:6D:16:8A:E4:8D:40:8D:22:AA:BE:A7:0B:
                      1B:D2:07:B6:3C:B5:1A:24:28:F8:1B:72:51:3D:C8:09:
                      88:26:08:3A:F9:FA:43:23:75:47:70:0C:B3:5F:5B:8F:
                      08:1D:72:48:57:65:4D:AF:02:3C:40:F7:F4:DD:32:38:
                      93:3F:E5:2C:A6:F3:59:23:CB:80:DE:13:4D:F9:10:C9:
                      AA:0A:18:6C:55:61:57:D1:F1:02:2C:C4:B5:AB:F2:6C:
                      23:D2:9F:0D:0F:19:6C:AD:85:62:69:FD:4E:85:C1:8A:
                      52:31:AB:5B:D8:C9:74:52:E3:57:6C:22:BF:55:7F:6F:
                      CA:06:AB:3F:4A:B7:22:76:65:EC:EC:36:F2:96:95:81:
                      26:2C:FD:BB:98:AA:01:38:D3:AF:25:40:9B:09:53:F0:
                      29:57:85:58:5E:EA:85:48:41:21:87:E5:DE:B4:D3:26:
                      B2:7B:40:53:58:79:8E:52:31:06:4D:94:03:45:C4:CE:
                      3C:03:EC:B7:00:F2:3A:22:C5:B4:6F:E5:EF:B0:8A:9B                      : 0x010001
                  • X509v3 extensions
                    • basicConstraints
                      • true
                      • nil
                    • certificatePolicies
                      • 2.16.840.1.113733.1.7.23.3
                        • #0
                          • id-qt-cps: https://d.symcb.com/cps
                          • id-qt-unotice: https://d.symcb.com/rpa
                    • crlDistributionPoints: http://ts-crl.ws.symantec.com/sha256-tss-ca.crl
                    • extendedKeyUsage: true, timeStamping
                    • keyUsage: true, 0x80
                    • authorityInfoAccess
                      • #0
                        • OCSP: http://ts-ocsp.ws.symantec.com
                        • caIssuers: http://ts-aia.ws.symantec.com/sha256-tss-ca.cer
                    • subjectAltName
                      • CN: TimeStamp-2048-6
                    • subjectKeyIdentifier: 
                      a5 13 01 a9 9f 85 cc 1b  6e 16 1e 5f 3b 31 aa 79  |........n.._;1.y|
36 00 7b 1d                                       |6.{.            |
                    • authorityKeyIdentifier: 
                      af 63 d6 ca a3 4e 85 72  e0 a7 bc 41 f3 29 a2 38  |.c...N.r...A.).8|
7f 80 75 62                                       |..ub            |
                • RSA-SHA256: 
                  46 9e af f0 b8 a2 5f a2  99 48 cf a8 27 4b 21 cd  |F....._..H..'K!.|
b2 b9 a6 72 70 63 2f e3  55 29 7b 39 46 4e e7 7e  |...rpc/.U){9FN.~|
65 06 58 8b bc 57 8a 92  0d 08 d8 10 ba 36 24 fa  |e.X..W.......6$.|
0a 7b fb 3b d3 62 bf 4a  94 15 e6 82 db 8a 54 6d  |.{.;.b.J......Tm|
ff 28 fe 67 cf 71 3f e6  33 09 d9 a2 59 10 f4 1e  |.(.g.q?.3...Y...|
4a fe 65 cc de d4 6b e3  52 29 75 00 4a 2b a5 cc  |J.e...k.R)u.J+..|
cb 9b e8 a9 4d f7 b4 17  59 92 41 c3 b7 3f 86 e6  |....M...Y.A..?..|
f6 c0 7f 44 3c 46 5c 17  5a e3 a4 3b d5 69 26 d5  |...D.z.".t..G....|
91 25 b2 1b 96 e9 85 08  e8 dd ea 74 60 6e 60 a5  |.%.........t`n`.|
56 7a 0d c8 44 58 dc e6  f9 48 14 9e e5 bf de 00  |Vz..DX...H......|
bd 77 b1 98 14 72 14 24  df c7 11 2c 1f 00 3f c3  |.w...r.$...,..?.|
4b 14 c6 67 1c cc 1e 06  a3 90 5f 5c 54 8b 3e e3  |K..g......_\T.>.|
33 5b 82 0f c5 b7 86 02  4e 71 9f e9 66 45 3f 76  |3[......Nq..fE?v|
            • 1
              • unnamed
                • #0
                  • C: US
                  • O: Symantec Corporation
                  • OU: Symantec Trust Network
                  • CN: Symantec SHA256 TimeStamping CA
                • 7B:D4:E5:AF:BA:CC:07:3F:A1:01:23:04:22:41:4D:12
              • SHA256
              • #2
                • contentType: id-smime-ct-TSTInfo
                • signingTime: 2020-07-14 04:17:53 UTC
                • messageDigest: 
                  59 b5 5c 32 fc f8 f3 b5  47 5f 86 b2 e7 e6 06 ef  |Y.\2....G_......|
43 e0 f9 4f 8d ea 6a 12  4f 4a 03 36 d7 c9 ae 52  |C..O..j.OJ.6...R|
                • id-smime-aa-signingCertificateV2: 
                  c4 74 ce 76 00 7d 02 39  4e 0d a5 e4 de 7c 14 c6  |.t.v.}.9N....|..|
80 f9 e2 82 01 3c fe f6  53 ef 5d b7 1f df 61 f8  |.....<..S.]...a.|
              • rsaEncryption
              • a2 88 74 14 30 d8 07 ca  07 fa 30 ce fb fd ae 0d  |..t.0.....0.....|
f9 b1 61 71 45 de 88 7b  6d 60 46 39 c2 6b df 5f  |..aqE..{m`F9.k._|
05 68 79 58 f7 ef 63 45  dd 9a c2 0a c3 06 fe 98  |.hyX..cE........|
f9 9e 0d 1a 05 13 ca 11  cb 0a 57 7b aa 76 56 d9  |..........W{.vV.|
f3 d0 09 70 ac 14 34 96  f0 8e c5 84 8f c7 ca c7  |...p..4.........|
ed f0 dd fd cf 21 41 a6  97 bb ae 50 51 92 8d ef  |.....!A....PQ...|
b3 3e 31 c2 a6 20 54 ac  34 0c d1 2c b1 f3 ce 21  |.>1.. T.4..,...!|
ef 73 20 37 d1 5f 4e c4  b5 3a 3e 4a 02 cb 43 94  |.s 7._N..:>J..C.|
d2 7a 89 38 fb a3 71 88  7d 90 de 8f 77 3a 55 b5  |.z.8..q.}...w:U.|
cc f4 30 9b 6c 8b 70 41  b7 25 b2 e4 12 c0 5c f6  |..0.l.pA.%....\.|
0a 66 d2 49 e9 86 9d 50  ae 47 6a a7 10 26 6d a8  |.f.I...P.Gj..&m.|
17 d0 cf b5 ec 79 15 47  82 c0 18 84 90 36 39 b2  |.....y.G.....69.|
fa 2c 28 17 0d 8a 58 f7  b1 f0 01 6b 3b 86 eb 56  |.,(...X....k;..V|
eb 9e 7d 93 08 bf f6 03  59 7c 0d ec 9b 7d 38 3b  |..}.....Y|...}8;|
65 b5 71 75 64 e7 a2 16  e8 2a 79 7f 41 36 1f 09  |e.qud....*y.A6..|
87 dc 0a e3 0d c0 0d 5e  4c 96 d3 6b d7 1f 57 d2  |.......^L..k..W.|
offsetsizetypecomment
0919552EXE09/22/2009 04:59:30#
15c115HTM#
8cc648857GIF(0 x 18759)#
9365422321GIF(175 x 312)#
98d884494GIF(175 x 312)#
e080027844496BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable







everything is OK