avgnsa.exe - avgns.exe - AVG Online Shield Service

info
MZ
PE
resources
imports
foremost
version info
signature
hexdump
disasm
log
discuss
donate

filename	avgnsa.exe
size	1066512 (0x104610)
md5	c2c0a4c192ba8860aa171501d913ac3f

type	PE32+ executable (GUI) x86-64, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x110

Rich Header

lib id	version	times used
203	50929	2
199	41118	1
205	50929	2
206	50929	19
207	50929	11
156	40219	2
205	51106	1
203	51106	2
147	30729	3
1	0	348
211	51106	155
201	51106	1
151	0	1
204	51106	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x8664
NumberOfSections	7
TimeDateStamp	0x5293b9e5
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xf0
Characteristics	0x22
Magic	0x20b
LinkerVersion	11.0
SizeOfCode	0xbbe00
SizeOfInitializedData	0x49600
SizeOfUninitializedData	0
AddressOfEntryPoint	0xaba14
BaseOfCode	0x1000
ImageBase	0x140000000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	5.2
ImageVersion	0.0
SubsystemVersion	5.2
Reserved1	0
SizeOfImage	0x109000
SizeOfHeaders	0x400
CheckSum	0x10909f
Subsystem	2
DllCharacteristics	0x8160
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x1000	0xbbc9d	0xbbe00	R-X CODE
.rdata	0xbd000	0x3b45a	0x3b600	R-- IDATA
.data	0xf9000	0x3878	0x1800	RW- IDATA
.pdata	0xfd000	0x7b84	0x7c00	R-- IDATA
.tls	0x105000	0x11	0x200	RW- IDATA
.rsrc	0x106000	0x650	0x800	R-- IDATA
.reloc	0x107000	0x10cc	0x1200	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0xf50ec	0x64
RESOURCE	0x106000	0x650
EXCEPTION	0xfd000	0x7b84
SECURITY	0x102800	0x1e10
BASERELOC	0x107000	0x10cc
DEBUG	0xbd970	0x38
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0xd5370	0x28
LOAD_CONFIG	0xd5300	0x70
Bound_IAT	0	0
IAT	0xbd000	0x898
Delay_IAT	0	0
CLR_Header	0	0

TLS

raw start	raw end	index	callbks	zero fill	flags
0x140105000	0x140105010	0x1400fc848	0x1400bd968	0	0

show previews

type	name	size	cp
VERSION	#1	1068	0
MANIFEST	#1	381	0

module_name	hint	function_name
KERNEL32.dll	143	CreateFileW
KERNEL32.dll	575	GetOverlappedResult
KERNEL32.dll	520	GetLastError
KERNEL32.dll	225	DeviceIoControl
KERNEL32.dll	66	CancelIo
KERNEL32.dll	82	CloseHandle
KERNEL32.dll	133	CreateEventW
KERNEL32.dll	459	GetCurrentThreadId
KERNEL32.dll	455	GetCurrentProcessId
KERNEL32.dll	640	GetSystemTimeAsFileTime
KERNEL32.dll	937	QueryPerformanceCounter
KERNEL32.dll	203	DecodePointer
KERNEL32.dll	238	EncodePointer
KERNEL32.dll	873	MultiByteToWideChar
KERNEL32.dll	1312	WideCharToMultiByte
KERNEL32.dll	1287	WaitForMultipleObjectsEx
KERNEL32.dll	1286	WaitForMultipleObjects
KERNEL32.dll	168	CreateProcessW
KERNEL32.dll	1203	SetUnhandledExceptionFilter
avgsysa.dll	865	public: bool __cdecl AvgBasWaitable::IsInitialized(void)const __ptr64 ?IsInitialized@AvgBasWaitable@@QEBA_NXZ
avgsysa.dll	959	public: int __cdecl AvgBasCriticalSection::Release(void) __ptr64 ?Release@AvgBasCriticalSection@@QEAAHXZ
avgsysa.dll	95	public: int __cdecl AvgBasCriticalSection::Acquire(void) __ptr64 ?Acquire@AvgBasCriticalSection@@QEAAHXZ
avgsysa.dll	522	public: int __cdecl AvgBasCriticalSection::Create(void) __ptr64 ?Create@AvgBasCriticalSection@@QEAAHXZ
avgsysa.dll	48	public: __cdecl AvgBasCriticalSection::~AvgBasCriticalSection(void) __ptr64 ??1AvgBasCriticalSection@@QEAA@XZ
avgsysa.dll	3	public: __cdecl AvgBasCriticalSection::AvgBasCriticalSection(void) __ptr64 ??0AvgBasCriticalSection@@QEAA@XZ
avgsysa.dll	1059	public: int __cdecl AvgBasThread::WaitForThreadToStop(int) __ptr64 ?WaitForThreadToStop@AvgBasThread@@QEAAHH@Z
avgsysa.dll	1039	public: int __cdecl AvgBasThread::StartThread(enum AvgPriority, class AvgSecurityCtx * __ptr64, class AvgFlags<enum AvgBasThread::ThreadFlag>, char const * __ptr64) __ptr64 ?StartThread@AvgBasThread@@QEAAHW4AvgPriority@@PEAVAvgSecurityCtx@@V?$AvgFlags@W4ThreadFlag@AvgBasThread@@@@PEBD@Z
avgsysa.dll	819	public: int __cdecl AvgBasThread::Initialize(class AvgBasEvent * __ptr64) __ptr64 ?Initialize@AvgBasThread@@QEAAHPEAVAvgBasEvent@@@Z
avgsysa.dll	477	protected: virtual void __cdecl AvgBasThread::Cleanup(void) __ptr64 ?Cleanup@AvgBasThread@@MEAAXXZ
avgsysa.dll	961	public: int __cdecl AvgBasMutex::Release(void) __ptr64 ?Release@AvgBasMutex@@QEAAHXZ
avgsysa.dll	96	public: int __cdecl AvgBasMutex::Acquire(int) __ptr64 ?Acquire@AvgBasMutex@@QEAAHH@Z
avgsysa.dll	524	public: int __cdecl AvgBasMutex::Create(bool) __ptr64 ?Create@AvgBasMutex@@QEAAH_N@Z
avgsysa.dll	436	wchar_t __cdecl AvgToASCIIUpper(wchar_t) ?AvgToASCIIUpper@@YA_W_W@Z
avgsysa.dll	376	int __cdecl AvgLowerString(enum AvgCodePage, wchar_t * __ptr64, unsigned __int64, wchar_t const * __ptr64, unsigned __int64 * __ptr64, unsigned __int64) ?AvgLowerString@@YAHW4AvgCodePage@@PEA_W_KPEB_WPEA_K2@Z
avgsysa.dll	1040	public: int __cdecl AvgBasThread::StopThread(int) __ptr64 ?StopThread@AvgBasThread@@QEAAHH@Z
avgsysa.dll	864	public: bool __cdecl AvgBasThread::IsInitialized(void)const __ptr64 ?IsInitialized@AvgBasThread@@QEBA_NXZ
avgsysa.dll	792	public: class AvgBasEvent & __ptr64 __cdecl AvgBasThread::GetThreadStopRequestEvent(void) __ptr64 ?GetThreadStopRequestEvent@AvgBasThread@@QEAAAEAVAvgBasEvent@@XZ
avgsysa.dll	575	int __cdecl AvgBasFs::DirectoryExists(wchar_t const * __ptr64) ?DirectoryExists@AvgBasFs@@YAHPEB_W@Z
avgsysa.dll	174	int __cdecl AvgCompareString(wchar_t const * __ptr64, wchar_t const * __ptr64, unsigned __int64, unsigned __int64) ?AvgCompareString@@YAHPEB_W0_K1@Z
avgsysa.dll	430	int __cdecl AvgPrintV(wchar_t const * __ptr64, char * __ptr64) ?AvgPrintV@@YAHPEB_WPEAD@Z
avgsysa.dll	377	void __cdecl AvgMemXor(unsigned char * __ptr64, unsigned char const * __ptr64, unsigned __int64) ?AvgMemXor@@YAXPEAEPEBE_K@Z
avgsysa.dll	289	wchar_t const * __ptr64 __cdecl AvgFindSubStringFromRight(wchar_t const * __ptr64, wchar_t const * __ptr64, unsigned __int64, unsigned __int64) ?AvgFindSubStringFromRight@@YAPEB_WPEB_W0_K1@Z
avgsysa.dll	527	public: int __cdecl AvgBasWinEvent::Create(enum AvgBasWinEvent::ResetType, bool, wchar_t const * __ptr64, enum AvgBasWinSyncObjectNameSpace, class AvgWinSecurityDescriptor * __ptr64) __ptr64 ?Create@AvgBasWinEvent@@QEAAHW4ResetType@1@_NPEB_WW4AvgBasWinSyncObjectNameSpace@@PEAVAvgWinSecurityDescriptor@@@Z
avgsysa.dll	314	int __cdecl AvgGetSystemTime(unsigned __int64 & __ptr64) ?AvgGetSystemTime@@YAHAEA_K@Z
avgsysa.dll	295	void __cdecl AvgGenerateRandomBuffer(unsigned char * __ptr64, unsigned __int64) ?AvgGenerateRandomBuffer@@YAXPEAE_K@Z
avgsysa.dll	236	int __cdecl AvgConvertString2Number(unsigned long & __ptr64, wchar_t const * __ptr64, unsigned __int64, int, wchar_t const * __ptr64 * __ptr64) ?AvgConvertString2Number@@YAHAEAKPEB_W_KHPEAPEB_W@Z
avgsysa.dll	277	wchar_t const * __ptr64 __cdecl AvgFindElement(wchar_t const * __ptr64, wchar_t, unsigned __int64) ?AvgFindElement@@YAPEB_WPEB_W_W_K@Z
avgsysa.dll	285	wchar_t const * __ptr64 __cdecl AvgFindSubString(wchar_t const * __ptr64, wchar_t const * __ptr64, unsigned __int64, unsigned __int64) ?AvgFindSubString@@YAPEB_WPEB_W0_K1@Z
avgsysa.dll	545	int __cdecl AvgGuidUtils::CreateLuid(struct _AvgGuid & __ptr64) ?CreateLuid@AvgGuidUtils@@YAHAEAU_AvgGuid@@@Z
avgsysa.dll	833	public: int __cdecl AvgWinMandatoryLabel::Initialize(enum AvgWinMandatoryLabel::Label, class AvgFlags<enum AvgWinMandatoryLabel::FlagsValues>) __ptr64 ?Initialize@AvgWinMandatoryLabel@@QEAAHW4Label@1@V?$AvgFlags@W4FlagsValues@AvgWinMandatoryLabel@@@@@Z
avgsysa.dll	139	public: int __cdecl AvgUtf16CharHeapBuffer::Assign(wchar_t const * __ptr64, unsigned __int64) __ptr64 ?Assign@AvgUtf16CharHeapBuffer@@QEAAHPEB_W_K@Z
avgsysa.dll	77	public: __cdecl AvgUtf16CharHeapBuffer::~AvgUtf16CharHeapBuffer(void) __ptr64 ??1AvgUtf16CharHeapBuffer@@QEAA@XZ
avgsysa.dll	40	public: __cdecl AvgUtf16CharHeapBuffer::AvgUtf16CharHeapBuffer(void) __ptr64 ??0AvgUtf16CharHeapBuffer@@QEAA@XZ
avgsysa.dll	126	int __cdecl AvgWinSecurity::AppendDescriptorToObject(class AvgWinSecurityDescriptor & __ptr64, class AvgWinObject const & __ptr64, bool) ?AppendDescriptorToObject@AvgWinSecurity@@YAHAEAVAvgWinSecurityDescriptor@@AEBVAvgWinObject@@_N@Z
avgsysa.dll	537	int __cdecl AvgBasFs::CreateDir(wchar_t const * __ptr64, bool, class AvgSecurityCtx * __ptr64) ?CreateDir@AvgBasFs@@YAHPEB_W_NPEAVAvgSecurityCtx@@@Z
avgsysa.dll	834	public: int __cdecl AvgWinSecurityDescriptor::Initialize(void) __ptr64 ?Initialize@AvgWinSecurityDescriptor@@QEAAHXZ
avgsysa.dll	113	public: int __cdecl AvgWinSecurityDescriptor::AddDaclAce(enum AvgWinSecurityIdentifier::WellKnownSidType, int, enum AvgWinAce::Type, class AvgFlags<enum AvgWinAce::FlagsValues>) __ptr64 ?AddDaclAce@AvgWinSecurityDescriptor@@QEAAHW4WellKnownSidType@AvgWinSecurityIdentifier@@HW4Type@AvgWinAce@@V?$AvgFlags@W4FlagsValues@AvgWinAce@@@@@Z
avgsysa.dll	749	unsigned __int64 __cdecl AvgEnvironment::GetProcessorCount(void) ?GetProcessorCount@AvgEnvironment@@YA_KXZ
avgsysa.dll	267	int __cdecl AvgCreateErrorCodeFromWin32(enum _AvgErrorCodeSeverity, unsigned long) ?AvgCreateErrorCodeFromWin32@@YAHW4_AvgErrorCodeSeverity@@K@Z
avgsysa.dll	691	protected: void * __ptr64 __cdecl AvgBasWaitable::GetHandle(void)const __ptr64 ?GetHandle@AvgBasWaitable@@IEBAPEAXXZ
avgsysa.dll	1024	public: int __cdecl AvgBasThread::SetStopRequest(void) __ptr64 ?SetStopRequest@AvgBasThread@@QEAAHXZ
avgsysa.dll	501	int __cdecl AvgBasPath::CombinePaths(struct AvgMutableStringRefBase2<wchar_t, 0> const & __ptr64, struct AvgStringRefBase<wchar_t, 0> const & __ptr64, struct AvgStringRefBase<wchar_t, 0> const & __ptr64) ?CombinePaths@AvgBasPath@@YAHAEBU?$AvgMutableStringRefBase2@_W$0A@@@AEBU?$AvgStringRefBase@_W$0A@@@1@Z
avgsysa.dll	309	unsigned __int64 __cdecl AvgGetStringSizeInElements(char const * __ptr64) ?AvgGetStringSizeInElements@@YA_KPEBD@Z
avgsysa.dll	311	unsigned __int64 __cdecl AvgGetStringSizeInElements(wchar_t const * __ptr64) ?AvgGetStringSizeInElements@@YA_KPEB_W@Z
avgsysa.dll	255	int __cdecl AvgConvertVariantTimeToAvgTime(unsigned __int64 & __ptr64, double) ?AvgConvertVariantTimeToAvgTime@@YAHAEA_KN@Z
avgsysa.dll	373	void __cdecl AvgLowerASCIIString(char * __ptr64, unsigned __int64) ?AvgLowerASCIIString@@YAXPEAD_K@Z
avgsysa.dll	297	unsigned long __cdecl AvgGenerateRandomDWord(void) ?AvgGenerateRandomDWord@@YAKXZ
avgsysa.dll	288	char const * __ptr64 __cdecl AvgFindSubStringFromRight(char const * __ptr64, char const * __ptr64, unsigned __int64, unsigned __int64) ?AvgFindSubStringFromRight@@YAPEBDPEBD0_K1@Z
avgsysa.dll	643	void * __ptr64 __cdecl AvgProcess::GetCurrentModuleHandle(void) ?GetCurrentModuleHandle@AvgProcess@@YAPEAXXZ
avgsysa.dll	130	void __cdecl AvgGuidUtils::Assign(struct _AvgGuid & __ptr64, struct _AvgGuid const & __ptr64) ?Assign@AvgGuidUtils@@YAXAEAU_AvgGuid@@AEBU2@@Z
avgsysa.dll	594	protected: int __cdecl AvgBasWaitable::FreeResource(void) __ptr64 ?FreeResource@AvgBasWaitable@@IEAAHXZ
avgsysa.dll	371	long __cdecl AvgKernel32_UnhandledExceptionFilter(struct _EXCEPTION_POINTERS * __ptr64) ?AvgKernel32_UnhandledExceptionFilter@@YAJPEAU_EXCEPTION_POINTERS@@@Z
avgsysa.dll	466	bool __cdecl AvgWinIsProcessBeingDebugged(void) ?AvgWinIsProcessBeingDebugged@@YA_NXZ
avgsysa.dll	370	long (__cdecl__cdecl AvgKernel32_SetUnhandledExceptionFilter(long (__cdecl)(struct _EXCEPTION_POINTERS * __ptr64)))(struct _EXCEPTION_POINTERS * __ptr64) ?AvgKernel32_SetUnhandledExceptionFilter@@YAP6AJPEAU_EXCEPTION_POINTERS@@@ZP6AJ0@Z@Z
avgsysa.dll	352	bool __cdecl AvgKernel32IsFnLoaded_UnhandledExceptionFilter(void) ?AvgKernel32IsFnLoaded_UnhandledExceptionFilter@@YA_NXZ
avgsysa.dll	699	public: class AvgFlags<enum AvgWinSecurityDescriptor::InformationValues> __cdecl AvgWinSecurityDescriptor::GetInformationType(void)const __ptr64 ?GetInformationType@AvgWinSecurityDescriptor@@QEBA?AV?$AvgFlags@W4InformationValues@AvgWinSecurityDescriptor@@@@XZ
avgsysa.dll	493	protected: virtual int __cdecl AvgWinSecurityDescriptor::CloneImpl(class AvgSecurityCtx * __ptr64 & __ptr64)const __ptr64 ?CloneImpl@AvgWinSecurityDescriptor@@MEBAHAEAPEAVAvgSecurityCtx@@@Z
avgsysa.dll	491	public: void __cdecl AvgWinSecurityDescriptor::ClearSecurityAttributes(void) __ptr64 ?ClearSecurityAttributes@AvgWinSecurityDescriptor@@QEAAXXZ
avgsysa.dll	971	public: virtual void __cdecl AvgWinSecurityDescriptor::ReleaseClonedObject(void) __ptr64 ?ReleaseClonedObject@AvgWinSecurityDescriptor@@UEAAXXZ
avgsysa.dll	955	protected: static int __cdecl AvgWinSecurityDescriptor::ParseWinSecDes(class AvgWinSecurityDescriptor & __ptr64, void const * __ptr64, class AvgFlags<enum AvgWinSecurityDescriptor::InformationValues>) ?ParseWinSecDes@AvgWinSecurityDescriptor@@KAHAEAV1@PEBXV?$AvgFlags@W4InformationValues@AvgWinSecurityDescriptor@@@@@Z
avgsysa.dll	248	int __cdecl AvgConvertT2Utf16String(wchar_t * __ptr64, unsigned __int64, wchar_t const * __ptr64, unsigned __int64 * __ptr64, unsigned __int64) ?AvgConvertT2Utf16String@@YAHPEA_W_KPEB_WPEA_K1@Z
avgsysa.dll	257	int __cdecl AvgCopyString(struct _AVG_UTF16CHAR_STR & __ptr64, wchar_t const * __ptr64, unsigned __int64, unsigned __int64 * __ptr64) ?AvgCopyString@@YAHAEAU_AVG_UTF16CHAR_STR@@PEB_W_KPEA_K@Z
avgsysa.dll	1045	public: void __cdecl AvgUtf16CharHeapBuffer::Swap(class AvgUtf16CharHeapBuffer & __ptr64) __ptr64 ?Swap@AvgUtf16CharHeapBuffer@@QEAAXAEAV1@@Z
avgsysa.dll	499	int __cdecl AvgBasPath::CombinePaths(struct _AVG_UTF16CHAR_STR & __ptr64, wchar_t const * __ptr64, wchar_t const * __ptr64, unsigned __int64, unsigned __int64, unsigned __int64 * __ptr64) ?CombinePaths@AvgBasPath@@YAHAEAU_AVG_UTF16CHAR_STR@@PEB_W1_K2PEA_K@Z
avgsysa.dll	787	int __cdecl AvgBasPath::GetTempDirPath(class AvgUtf16CharHeapBuffer & __ptr64) ?GetTempDirPath@AvgBasPath@@YAHAEAVAvgUtf16CharHeapBuffer@@@Z
avgsysa.dll	983	public: int __cdecl AvgUtf16CharHeapBuffer::Resize(unsigned __int64) __ptr64 ?Resize@AvgUtf16CharHeapBuffer@@QEAAH_K@Z
avgsysa.dll	141	public: int __cdecl AvgWinSecurityDescriptor::Assign(class AvgSecurityCtx const & __ptr64) __ptr64 ?Assign@AvgWinSecurityDescriptor@@QEAAHAEBVAvgSecurityCtx@@@Z
avgsysa.dll	978	public: int __cdecl AvgBasEvent::Reset(void) __ptr64 ?Reset@AvgBasEvent@@QEAAHXZ
avgsysa.dll	274	char * __ptr64 __cdecl AvgFindElement(char * __ptr64, char, unsigned __int64) ?AvgFindElement@@YAPEADPEADD_K@Z
avgsysa.dll	177	int __cdecl AvgCompareSubString(wchar_t const * __ptr64, wchar_t const * __ptr64, unsigned __int64, unsigned __int64, unsigned __int64) ?AvgCompareSubString@@YAHPEB_W0_K11@Z
avgsysa.dll	280	char const * __ptr64 __cdecl AvgFindElementFromRight(char const * __ptr64, char, unsigned __int64) ?AvgFindElementFromRight@@YAPEBDPEBDD_K@Z
avgsysa.dll	241	int __cdecl AvgConvertString2Size(unsigned __int64 & __ptr64, char const * __ptr64, unsigned __int64, int, char const * __ptr64 * __ptr64) ?AvgConvertString2Size@@YAHAEA_KPEBD_KHPEAPEBD@Z
avgsysa.dll	292	int __cdecl AvgFormatStringV(enum AvgCodePage, char * __ptr64, unsigned __int64, char const * __ptr64, unsigned __int64 * __ptr64, char * __ptr64) ?AvgFormatStringV@@YAHW4AvgCodePage@@PEAD_KPEBDPEA_K1@Z
avgsysa.dll	252	int __cdecl AvgConvertUtf162MbString(char * __ptr64, unsigned __int64, wchar_t const * __ptr64, enum AvgCodePage, unsigned __int64 * __ptr64, unsigned __int64) ?AvgConvertUtf162MbString@@YAHPEAD_KPEB_WW4AvgCodePage@@PEA_K1@Z
avgsysa.dll	178	int __cdecl AvgCompareSubStringNoCase(enum AvgCodePage, wchar_t const * __ptr64, wchar_t const * __ptr64, unsigned __int64, unsigned __int64, unsigned __int64) ?AvgCompareSubStringNoCase@@YAHW4AvgCodePage@@PEB_W1_K22@Z
avgsysa.dll	234	int __cdecl AvgConvertString2Number(int & __ptr64, wchar_t const * __ptr64, unsigned __int64, int, wchar_t const * __ptr64 * __ptr64) ?AvgConvertString2Number@@YAHAEAHPEB_W_KHPEAPEB_W@Z
avgsysa.dll	235	int __cdecl AvgConvertString2Number(unsigned long & __ptr64, char const * __ptr64, unsigned __int64, int, char const * __ptr64 * __ptr64) ?AvgConvertString2Number@@YAHAEAKPEBD_KHPEAPEBD@Z
avgsysa.dll	233	int __cdecl AvgConvertString2Number(int & __ptr64, char const * __ptr64, unsigned __int64, int, char const * __ptr64 * __ptr64) ?AvgConvertString2Number@@YAHAEAHPEBD_KHPEAPEBD@Z
avgsysa.dll	173	int __cdecl AvgCompareString(char const * __ptr64, char const * __ptr64, unsigned __int64, unsigned __int64) ?AvgCompareString@@YAHPEBD0_K1@Z
avgsysa.dll	214	int __cdecl AvgConvertNumber2String(wchar_t * __ptr64, unsigned __int64, int, int, unsigned __int64 * __ptr64) ?AvgConvertNumber2String@@YAHPEA_W_KHHPEA_K@Z
avgsysa.dll	319	int __cdecl AvgGetUtf162MbStringSize(unsigned __int64 & __ptr64, wchar_t const * __ptr64, enum AvgCodePage, unsigned __int64) ?AvgGetUtf162MbStringSize@@YAHAEA_KPEB_WW4AvgCodePage@@_K@Z
avgsysa.dll	645	unsigned long __cdecl AvgProcess::GetCurrentProcessId(void) ?GetCurrentProcessId@AvgProcess@@YAKXZ
avgsysa.dll	237	int __cdecl AvgConvertString2Number(__int64 & __ptr64, char const * __ptr64, unsigned __int64, int, char const * __ptr64 * __ptr64) ?AvgConvertString2Number@@YAHAEA_JPEBD_KHPEAPEBD@Z
avgsysa.dll	276	char const * __ptr64 __cdecl AvgFindElement(char const * __ptr64, char, unsigned __int64) ?AvgFindElement@@YAPEBDPEBDD_K@Z
avgsysa.dll	8	public: __cdecl AvgBasSharedLibraryLoader::AvgBasSharedLibraryLoader(wchar_t const * __ptr64) __ptr64 ??0AvgBasSharedLibraryLoader@@QEAA@PEB_W@Z
avgsysa.dll	6	public: __cdecl AvgBasResource::AvgBasResource(void) __ptr64 ??0AvgBasResource@@QEAA@XZ
avgsysa.dll	51	public: virtual __cdecl AvgBasResource::~AvgBasResource(void) __ptr64 ??1AvgBasResource@@UEAA@XZ
avgsysa.dll	525	public: int __cdecl AvgBasResource::Create(void) __ptr64 ?Create@AvgBasResource@@QEAAHXZ
avgsysa.dll	99	public: int __cdecl AvgBasResource::AcquireExclusive(int) __ptr64 ?AcquireExclusive@AvgBasResource@@QEAAHH@Z
avgsysa.dll	101	public: int __cdecl AvgBasResource::AcquireShared(int) __ptr64 ?AcquireShared@AvgBasResource@@QEAAHH@Z
avgsysa.dll	962	public: int __cdecl AvgBasResource::Release(void) __ptr64 ?Release@AvgBasResource@@QEAAHXZ
avgsysa.dll	561	public: void __cdecl AvgBasResource::Destroy(void) __ptr64 ?Destroy@AvgBasResource@@QEAAXXZ
avgsysa.dll	523	public: int __cdecl AvgBasEvent::Create(enum AvgBasEvent::ResetType, bool) __ptr64 ?Create@AvgBasEvent@@QEAAHW4ResetType@1@_N@Z
avgsysa.dll	1052	public: int __cdecl AvgBasEvent::Wait(int) __ptr64 ?Wait@AvgBasEvent@@QEAAHH@Z
avgsysa.dll	990	public: int __cdecl AvgBasEvent::Set(void) __ptr64 ?Set@AvgBasEvent@@QEAAHXZ
avgsysa.dll	769	int __cdecl AvgEnvironment::GetSessionIdForProcess(unsigned long & __ptr64, unsigned long) ?GetSessionIdForProcess@AvgEnvironment@@YAHAEAKK@Z
avgsysa.dll	435	char __cdecl AvgToASCIIUpper(char) ?AvgToASCIIUpper@@YADD@Z
avgsysa.dll	293	int __cdecl AvgFormatStringV(enum AvgCodePage, wchar_t * __ptr64, unsigned __int64, wchar_t const * __ptr64, unsigned __int64 * __ptr64, char * __ptr64) ?AvgFormatStringV@@YAHW4AvgCodePage@@PEA_W_KPEB_WPEA_KPEAD@Z
avgsysa.dll	843	public: int __cdecl AvgWinSecurityIdentifier::InitializeFromProcessToken(unsigned long, class AvgWinSecurityIdentifier const * __ptr64) __ptr64 ?InitializeFromProcessToken@AvgWinSecurityIdentifier@@QEAAHKPEBV1@@Z
avgsysa.dll	1036	public: static int __cdecl AvgBasThread::Sleep(int) ?Sleep@AvgBasThread@@SAHH@Z
avgsysa.dll	776	int __cdecl AvgEnvironment::GetSpecialFolder(enum AvgEnvironment::SpecialFolder, class IAvgString<wchar_t, 0> & __ptr64) ?GetSpecialFolder@AvgEnvironment@@YAHW4SpecialFolder@1@AEAV?$IAvgString@_W$0A@@@@Z
avgsysa.dll	717	int __cdecl AvgEnvironment::GetMaxPathLength(unsigned __int64 & __ptr64, wchar_t const * __ptr64) ?GetMaxPathLength@AvgEnvironment@@YAHAEA_KPEB_W@Z
avgsysa.dll	53	public: virtual __cdecl AvgBasSharedLibraryLoader::~AvgBasSharedLibraryLoader(void) __ptr64 ??1AvgBasSharedLibraryLoader@@UEAA@XZ
avgsysa.dll	921	public: int __cdecl AvgBasSharedLibraryLoader::Load(wchar_t const * __ptr64) __ptr64 ?Load@AvgBasSharedLibraryLoader@@QEAAHPEB_W@Z
avgsysa.dll	1047	public: virtual void __cdecl AvgBasSharedLibraryLoader::Unload(void) __ptr64 ?Unload@AvgBasSharedLibraryLoader@@UEAAXXZ
avgsysa.dll	148	public: int __cdecl AvgBasSharedLibraryLoader::AttachTo(char const * __ptr64, void * __ptr64 volatile * __ptr64) __ptr64 ?AttachTo@AvgBasSharedLibraryLoader@@QEAAHPEBDPECREAX@Z
avgsysa.dll	18	public: __cdecl AvgBasWinRegistryHandle::AvgBasWinRegistryHandle(enum AvgBasWinRegistryRootType) __ptr64 ??0AvgBasWinRegistryHandle@@QEAA@W4AvgBasWinRegistryRootType@@@Z
avgsysa.dll	59	public: __cdecl AvgBasWinRegistryHandle::~AvgBasWinRegistryHandle(void) __ptr64 ??1AvgBasWinRegistryHandle@@QEAA@XZ
avgsysa.dll	947	public: int __cdecl AvgBasWinRegistryHandle::OpenKeyIfExists(struct AvgStringRefBase<wchar_t, 0> const & __ptr64) __ptr64 ?OpenKeyIfExists@AvgBasWinRegistryHandle@@QEAAHAEBU?$AvgStringRefBase@_W$0A@@@@Z
avgsysa.dll	916	public: static bool __cdecl AvgBasWinRegistryHandle::IsWow64ViewModeSupported(void) ?IsWow64ViewModeSupported@AvgBasWinRegistryHandle@@SA_NXZ
avgsysa.dll	1035	public: int __cdecl AvgBasWinRegistryHandle::SetViewMode(class AvgFlags<enum AvgBasWinRegistryViewModeValues>) __ptr64 ?SetViewMode@AvgBasWinRegistryHandle@@QEAAHV?$AvgFlags@W4AvgBasWinRegistryViewModeValues@@@@@Z
avgsysa.dll	783	public: int __cdecl AvgBasWinRegistryHandle::GetStringValue(class IAvgString<wchar_t, 0> & __ptr64, struct AvgStringRefBase<wchar_t, 0> const & __ptr64) __ptr64 ?GetStringValue@AvgBasWinRegistryHandle@@QEAAHAEAV?$IAvgString@_W$0A@@@AEBU?$AvgStringRefBase@_W$0A@@@@Z
avgsysa.dll	498	public: void __cdecl AvgBasWinRegistryHandle::CloseKey(void) __ptr64 ?CloseKey@AvgBasWinRegistryHandle@@QEAAXXZ
avgsysa.dll	282	char * __ptr64 __cdecl AvgFindSubString(char * __ptr64, char const * __ptr64, unsigned __int64, unsigned __int64) ?AvgFindSubString@@YAPEADPEADPEBD_K2@Z
avgsysa.dll	176	int __cdecl AvgCompareSubString(char const * __ptr64, char const * __ptr64, unsigned __int64, unsigned __int64, unsigned __int64) ?AvgCompareSubString@@YAHPEBD0_K11@Z
avgsysa.dll	200	int __cdecl AvgConvertMb2Utf16String(wchar_t * __ptr64, unsigned __int64, char const * __ptr64, enum AvgCodePage, unsigned __int64 * __ptr64, unsigned __int64) ?AvgConvertMb2Utf16String@@YAHPEA_W_KPEBDW4AvgCodePage@@PEA_K1@Z
avgsysa.dll	307	int __cdecl AvgGetMb2Utf16StringSize(unsigned __int64 & __ptr64, char const * __ptr64, enum AvgCodePage, unsigned __int64) ?AvgGetMb2Utf16StringSize@@YAHAEA_KPEBDW4AvgCodePage@@_K@Z
avgsysa.dll	318	unsigned long __cdecl AvgGetTimestamp(void) ?AvgGetTimestamp@@YAKXZ
avgsysa.dll	336	void __cdecl AvgKernel32ForceInitialize(void) ?AvgKernel32ForceInitialize@@YAXXZ
avgsysa.dll	590	int __cdecl AvgBasFs::FileExists(wchar_t const * __ptr64) ?FileExists@AvgBasFs@@YAHPEB_W@Z
avgsysa.dll	860	public: bool __cdecl AvgBasCriticalSection::IsInitialized(void)const __ptr64 ?IsInitialized@AvgBasCriticalSection@@QEBA_NXZ
avgsysa.dll	969	public: void __cdecl AvgSpinLockLocker::Release(void) __ptr64 ?Release@AvgSpinLockLocker@@QEAAXXZ
avgsysa.dll	930	public: int __cdecl AvgSpinLockLocker::Lock(struct AvgSpinLock * __ptr64) __ptr64 ?Lock@AvgSpinLockLocker@@QEAAHPEAUAvgSpinLock@@@Z
avgsysa.dll	75	public: __cdecl AvgSpinLockLocker::~AvgSpinLockLocker(void) __ptr64 ??1AvgSpinLockLocker@@QEAA@XZ
avgsysa.dll	34	public: __cdecl AvgSpinLockLocker::AvgSpinLockLocker(struct AvgSpinLock * __ptr64, bool) __ptr64 ??0AvgSpinLockLocker@@QEAA@PEAUAvgSpinLock@@_N@Z
avgsysa.dll	800	public: wchar_t const * __ptr64 __cdecl AvgUtf16CharHeapBuffer::GetValue(void)const __ptr64 ?GetValue@AvgUtf16CharHeapBuffer@@QEBAPEB_WXZ
avgsysa.dll	774	public: unsigned __int64 __cdecl AvgUtf16CharHeapBuffer::GetSize(void)const __ptr64 ?GetSize@AvgUtf16CharHeapBuffer@@QEBA_KXZ
avgsysa.dll	259	int __cdecl AvgCopyString(wchar_t * __ptr64, unsigned __int64, wchar_t const * __ptr64, unsigned __int64) ?AvgCopyString@@YAHPEA_W_KPEB_W1@Z
avgsysa.dll	759	unsigned __int64 __cdecl AvgBasPath::GetRandomTempFileNameSize(void) ?GetRandomTempFileNameSize@AvgBasPath@@YA_KXZ
avgsysa.dll	758	int __cdecl AvgBasPath::GetRandomTempFileName(struct _AVG_UTF16CHAR_STR & __ptr64, unsigned __int64 * __ptr64) ?GetRandomTempFileName@AvgBasPath@@YAHAEAU_AVG_UTF16CHAR_STR@@PEA_K@Z
avgsysa.dll	684	int __cdecl AvgBasPath::GetFilenameExtension(struct _AVG_UTF16CHAR_STR & __ptr64, wchar_t const * __ptr64, unsigned __int64, unsigned __int64 * __ptr64) ?GetFilenameExtension@AvgBasPath@@YAHAEAU_AVG_UTF16CHAR_STR@@PEB_W_KPEA_K@Z
avgsysa.dll	690	int __cdecl AvgBasPath::GetFullPath(struct _AVG_UTF16CHAR_STR & __ptr64, wchar_t const * __ptr64, unsigned __int64, unsigned __int64 * __ptr64) ?GetFullPath@AvgBasPath@@YAHAEAU_AVG_UTF16CHAR_STR@@PEB_W_KPEA_K@Z
avgsysa.dll	786	int __cdecl AvgBasPath::GetTempDirPath(struct _AVG_UTF16CHAR_STR & __ptr64, unsigned __int64 * __ptr64) ?GetTempDirPath@AvgBasPath@@YAHAEAU_AVG_UTF16CHAR_STR@@PEA_K@Z
avgsysa.dll	659	int __cdecl AvgBasPath::GetDirectoryPathFromFilenamePath(struct _AVG_UTF16CHAR_STR & __ptr64, wchar_t const * __ptr64, unsigned __int64, unsigned __int64 * __ptr64) ?GetDirectoryPathFromFilenamePath@AvgBasPath@@YAHAEAU_AVG_UTF16CHAR_STR@@PEB_W_KPEA_K@Z
avgsysa.dll	683	int __cdecl AvgBasPath::GetFilename(struct _AVG_UTF16CHAR_STR & __ptr64, wchar_t const * __ptr64, unsigned __int64, unsigned __int64 * __ptr64) ?GetFilename@AvgBasPath@@YAHAEAU_AVG_UTF16CHAR_STR@@PEB_W_KPEA_K@Z
avgsysa.dll	720	int __cdecl AvgModule::GetModuleDirectory(void * __ptr64, struct _AVG_UTF16CHAR_STR & __ptr64, unsigned __int64 * __ptr64) ?GetModuleDirectory@AvgModule@@YAHPEAXAEAU_AVG_UTF16CHAR_STR@@PEA_K@Z
avgsysa.dll	745	int __cdecl AvgProcess::GetProcessName(unsigned long, struct _AVG_UTF16CHAR_STR & __ptr64, unsigned __int64 * __ptr64) ?GetProcessName@AvgProcess@@YAHKAEAU_AVG_UTF16CHAR_STR@@PEA_K@Z
avgsysa.dll	266	int __cdecl AvgCreateErrorCodeFromWin32(unsigned long) ?AvgCreateErrorCodeFromWin32@@YAHK@Z
avgsysa.dll	686	protected: class AvgBasWaitable * __ptr64 __cdecl AvgBasWaitable::GetForward(void)const __ptr64 ?GetForward@AvgBasWaitable@@IEBAPEAV1@XZ
avgsysa.dll	762	protected: enum AvgBasWaitableResourceType __cdecl AvgBasWaitable::GetResourceType(void)const __ptr64 ?GetResourceType@AvgBasWaitable@@IEBA?AW4AvgBasWaitableResourceType@@XZ
avgsysa.dll	788	public: int __cdecl AvgBasThread::GetThreadExitCode(int & __ptr64) __ptr64 ?GetThreadExitCode@AvgBasThread@@QEAAHAEAH@Z
avgsysa.dll	269	void __cdecl AvgDestroySysMini(void) ?AvgDestroySysMini@@YAXXZ
avgsysa.dll	321	int __cdecl AvgInitializeSysMini(void) ?AvgInitializeSysMini@@YAHXZ
avgsysa.dll	842	int __cdecl AvgEnvironment::InitializeEnvironment(void) ?InitializeEnvironment@AvgEnvironment@@YAHXZ
avgsysa.dll	566	void __cdecl AvgEnvironment::DestroyEnvironment(void) ?DestroyEnvironment@AvgEnvironment@@YAXXZ
avgsysa.dll	159	int __cdecl AvgBasGetStackFrameModulePath(class IAvgString<wchar_t, 0> & __ptr64, struct AvgBasStackFrameX64 const & __ptr64) ?AvgBasGetStackFrameModulePath@@YAHAEAV?$IAvgString@_W$0A@@@AEBUAvgBasStackFrameX64@@@Z
avgsysa.dll	171	void __cdecl AvgBufferXor(unsigned char * __ptr64, unsigned char const * __ptr64, unsigned __int64, unsigned char const * __ptr64, unsigned __int64, __int64) ?AvgBufferXor@@YAXPEAEPEBE_K12_J@Z
avgsysa.dll	403	int __cdecl AvgNtdll_RtlDosPathNameToNtPathName_T_EliminateDosDevice(wchar_t const * __ptr64, struct _UNICODE_STRING * __ptr64) ?AvgNtdll_RtlDosPathNameToNtPathName_T_EliminateDosDevice@@YAHPEB_WPEAU_UNICODE_STRING@@@Z
avgsysa.dll	472	int __cdecl AvgWinZwOpenFile(wchar_t const * __ptr64, void * __ptr64 * __ptr64, unsigned long, struct _IO_STATUS_BLOCK * __ptr64, unsigned long, unsigned long) ?AvgWinZwOpenFile@@YAHPEB_WPEAPEAXKPEAU_IO_STATUS_BLOCK@@KK@Z
avgsysa.dll	838	public: int __cdecl AvgWinSecurityIdentifier::Initialize(enum AvgWinSecurityIdentifier::WellKnownSidType, class AvgWinSecurityIdentifier const * __ptr64) __ptr64 ?Initialize@AvgWinSecurityIdentifier@@QEAAHW4WellKnownSidType@1@PEBV1@@Z
avgsysa.dll	768	public: int __cdecl AvgWinSecurityDescriptor::GetSecurityDescriptor(void * __ptr64 & __ptr64) __ptr64 ?GetSecurityDescriptor@AvgWinSecurityDescriptor@@QEAAHAEAPEAX@Z
avgsysa.dll	112	public: int __cdecl AvgWinSecurityDescriptor::AddDaclAce(class AvgWinAce const & __ptr64) __ptr64 ?AddDaclAce@AvgWinSecurityDescriptor@@QEAAHAEBVAvgWinAce@@@Z
avgsysa.dll	703	public: struct _AVG_UTF16CHAR_STR & __ptr64 __cdecl AvgUtf16CharHeapBuffer::GetInternal(void) __ptr64 ?GetInternal@AvgUtf16CharHeapBuffer@@QEAAAEAU_AVG_UTF16CHAR_STR@@XZ
avgsysa.dll	625	public: wchar_t * __ptr64 __cdecl AvgUtf16CharHeapBuffer::GetBuffer(void) __ptr64 ?GetBuffer@AvgUtf16CharHeapBuffer@@QEAAPEA_WXZ
avgsysa.dll	857	public: bool __cdecl AvgUtf16CharHeapBuffer::IsEmpty(void)const __ptr64 ?IsEmpty@AvgUtf16CharHeapBuffer@@QEBA_NXZ
avgsysa.dll	484	public: void __cdecl AvgUtf16CharHeapBuffer::Clear(void) __ptr64 ?Clear@AvgUtf16CharHeapBuffer@@QEAAXXZ
avgsysa.dll	977	public: int __cdecl AvgUtf16CharHeapBuffer::ReserveElements(unsigned __int64) __ptr64 ?ReserveElements@AvgUtf16CharHeapBuffer@@QEAAH_K@Z
avgsysa.dll	453	int __cdecl AvgWinConstructDllSearchPath(class AvgUtf16CharHeapBuffer & __ptr64, struct AvgStringRefBase<wchar_t, 0> const & __ptr64) ?AvgWinConstructDllSearchPath@@YAHAEAVAvgUtf16CharHeapBuffer@@AEBU?$AvgStringRefBase@_W$0A@@@@Z
avgsysa.dll	878	bool __cdecl AvgBasPath::IsPathRooted(wchar_t const * __ptr64, unsigned __int64) ?IsPathRooted@AvgBasPath@@YA_NPEB_W_K@Z
avgsysa.dll	413	long __cdecl AvgNtdll_ZwCancelIoFileEx(void * __ptr64, struct _IO_STATUS_BLOCK * __ptr64, struct _IO_STATUS_BLOCK * __ptr64) ?AvgNtdll_ZwCancelIoFileEx@@YAJPEAXPEAU_IO_STATUS_BLOCK@@1@Z
avgsysa.dll	911	bool __cdecl AvgEnvironment::OsInfo::IsWindowsVistaOrHigher(void) ?IsWindowsVistaOrHigher@OsInfo@AvgEnvironment@@YA_NXZ
avgsysa.dll	562	public: virtual int __cdecl AvgBasWaitable::Destroy(void) __ptr64 ?Destroy@AvgBasWaitable@@UEAAHXZ
ntdll.dll	809	RtlReleasePebLock
ntdll.dll	416	RtlAcquirePebLock
ntdll.dll	965	ZwAllocateVirtualMemory
ntdll.dll	1035	ZwFreeVirtualMemory
ntdll.dll	1218	ZwTerminateProcess
ntdll.dll	743	RtlLookupFunctionEntry
ntdll.dll	921	RtlVirtualUnwind
ntdll.dll	465	RtlCaptureContext
ntdll.dll	1180	ZwSetEvent
ntdll.dll	1000	ZwCreateSection
ntdll.dll	1229	ZwUnmapViewOfSection
ntdll.dll	1132	ZwQuerySystemInformation
ntdll.dll	1032	ZwFlushVirtualMemory
ntdll.dll	1062	ZwMapViewOfSection
ntdll.dll	1108	ZwQueryInformationFile
ntdll.dll	93	LdrLoadDll
ntdll.dll	88	LdrGetProcedureAddress
ntdll.dll	668	RtlInitAnsiString
ntdll.dll	107	LdrUnloadDll
ntdll.dll	1238	ZwWriteFile
ntdll.dll	1071	ZwOpenFile
ntdll.dll	1029	ZwFlushBuffersFile
ntdll.dll	1190	ZwSetInformationThread
ntdll.dll	1235	ZwWaitForSingleObject
ntdll.dll	621	RtlFreeUnicodeString
ntdll.dll	1185	ZwSetInformationFile
ntdll.dll	994	ZwCreateNamedPipeFile
ntdll.dll	1142	ZwReadFile
ntdll.dll	1036	ZwFsControlFile
ntdll.dll	517	RtlCreateUnicodeString
ntdll.dll	1137	ZwQueryVirtualMemory
ntdll.dll	447	RtlAllocateHeap
ntdll.dll	800	RtlReAllocateHeap
ntdll.dll	617	RtlFreeHeap
ntdll.dll	1017	ZwDeviceIoControlFile
ntdll.dll	761	RtlNtStatusToDosError
ntdll.dll	986	ZwCreateFile
ntdll.dll	971	ZwCancelIoFile
ntdll.dll	441	RtlAddVectoredExceptionHandler
ntdll.dll	815	RtlRemoveVectoredExceptionHandler
ntdll.dll	1233	ZwWaitForMultipleObjects
ntdll.dll	1019	ZwDuplicateObject
ntdll.dll	974	ZwClose
ntdll.dll	675	RtlInitUnicodeString
ntdll.dll	984	ZwCreateEvent
ntdll.dll	519	RtlCreateUserProcess
ntdll.dll	1166	ZwResumeThread
MSVCR110.dll	1529	memcpy
MSVCR110.dll	1528	memcmp
MSVCR110.dll	330	_CxxThrowException
MSVCR110.dll	408	__crtSetUnhandledExceptionFilter
MSVCR110.dll	289	public: void __cdecl type_info::_type_info_dtor_internal_method(void) __ptr64 ?_type_info_dtor_internal_method@type_info@@QEAAXXZ
MSVCR110.dll	534	_commode
MSVCR110.dll	621	_fmode
MSVCR110.dll	1263	_wcmdln
MSVCR110.dll	726	_initterm
MSVCR110.dll	727	_initterm_e
MSVCR110.dll	462	__setusermatherr
MSVCR110.dll	535	_configthreadlocale
MSVCR110.dll	519	_cexit
MSVCR110.dll	593	_exit
MSVCR110.dll	1432	exit
MSVCR110.dll	460	__set_app_type
MSVCR110.dll	482	__wgetmainargs
MSVCR110.dll	496	_amsg_exit
MSVCR110.dll	398	__crtGetShowWindowMode
MSVCR110.dll	348	_XcptFilter
MSVCR110.dll	313	void __cdecl terminate(void) ?terminate@@YAXXZ
MSVCR110.dll	358	__CxxFrameHandler3
MSVCR110.dll	1005	_onexit
MSVCR110.dll	352	__C_specific_handler
MSVCR110.dll	413	__dllonexit
MSVCR110.dll	518	_calloc_crt
MSVCR110.dll	1195	_unlock
MSVCR110.dll	838	_lock
MSVCR110.dll	1575	strchr
MSVCR110.dll	1527	memchr
MSVCR110.dll	1601	swprintf_s
MSVCR110.dll	1058	_set_invalid_parameter_handler
MSVCR110.dll	731	_invoke_watson
MSVCR110.dll	1518	malloc
MSVCR110.dll	1551	realloc
MSVCR110.dll	1459	free
MSVCR110.dll	113	void * __ptr64 __cdecl operator new(unsigned __int64) ??2@YAPEAX_K@Z
MSVCR110.dll	115	void __cdecl operator delete(void * __ptr64) ??3@YAXPEAX@Z
MSVCR110.dll	1017	_purecall
MSVCR110.dll	138	void __cdecl operator delete[](void * __ptr64) ??_V@YAXPEAX@Z
MSVCR110.dll	1531	memmove
MSVCR110.dll	1533	memset

StringTable 000004b0

CompanyName	AVG Technologies CZ, s.r.o.
FileDescription	AVG Online Shield Service
FileVersion	14.0.0.4302
InternalName	avgns
LegalCopyright	Copyright (C) 2013 AVG Technologies CZ, s.r.o.
OriginalFilename	avgns.exe
ProductName	AVG Internet Security
ProductVersion	14.0.0.4302
PrivateBuild	None
SpecialBuild	AvgVC10_2013_1125_214129(4302), SVNRev 2a7430a (release/SmallUpdate2014-02_beta)

VS_FIXEDFILEINFO

FileVersion	14.0.0.4302
ProductVersion	14.0.0.4302
StrucVersion	0x10000
FileFlagsMask	0x17
FileFlags	0
FileOS	4
FileType	1
FileSubtype	0

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https:\/\/www.verisign.com\/rpa (c)10/CN=VeriSign Class 3 Code Signing 2010 CA

serial: 4984489DEC6200DECEAD93D4732CABCA

Certificates (5)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
        Validity
            Not Before: Dec 21 00:00:00 2012 GMT
            Not After : Dec 30 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:b3:49:54:4b:97:1c:12:0a:d8:25:79:91:
                    22:57:2a:6f:dc:b8:26:c4:43:73:6b:c2:bf:2e:50:
                    5a:fb:14:c2:76:8e:43:01:25:43:b4:a1:e2:45:f4:
                    e8:b7:7b:c3:74:cc:22:d7:b4:94:00:02:f7:4d:ed:
                    bf:b4:b7:44:24:6b:cd:5f:45:3b:d1:44:ce:43:12:
                    73:17:82:8b:69:b4:2b:cb:99:1e:ac:72:1b:26:4d:
                    71:1f:b1:31:dd:fb:51:61:02:53:a6:aa:f5:49:2c:
                    05:78:45:a5:2f:89:ce:e7:99:e7:fe:8c:e2:57:3f:
                    3d:c6:92:dc:4a:f8:7b:33:e4:79:0a:fb:f0:75:88:
                    41:9c:ff:c5:03:51:99:aa:d7:6c:9f:93:69:87:65:
                    29:83:85:c2:60:14:c4:c8:c9:3b:14:da:c0:81:f0:
                    1f:0d:74:de:92:22:ab:ca:f7:fb:74:7c:27:e6:f7:
                    4a:1b:7f:a7:c3:9e:2d:ae:8a:ea:a6:e6:aa:27:16:
                    7d:61:f7:98:71:11:bc:e2:50:a1:4b:e5:5d:fa:e5:
                    0e:a7:2c:9f:aa:65:20:d3:d8:96:e8:c8:7c:a5:4e:
                    48:44:ff:19:e2:44:07:92:0b:d7:68:84:80:5d:6a:
                    78:64:45:cd:60:46:7e:54:c1:13:7c:c5:79:f1:c9:
                    c1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD
            Authority Information Access: 
                OCSP - URI:http://ocsp.thawte.com
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.thawte.com/ThawteTimestampingCA.crl
            X509v3 Extended Key Usage: 
                Time Stamping
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-1
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        03:09:9b:8f:79:ef:7f:59:30:aa:ef:68:b5:fa:e3:09:1d:bb:
        4f:82:06:5d:37:5f:a6:52:9f:16:8d:ea:1c:92:09:44:6e:f5:
        6d:eb:58:7c:30:e8:f9:69:8d:23:73:0b:12:6f:47:a9:ae:39:
        11:f8:2a:b1:9b:b0:1a:c3:8e:eb:59:96:00:ad:ce:0c:4d:b2:
        d0:31:a6:08:5c:2a:7a:fc:e2:7a:1d:57:4c:a8:65:18:e9:79:
        40:62:25:96:6e:c7:c7:37:6a:83:21:08:8e:41:ea:dd:d9:57:
        3f:1d:77:49:87:2a:16:06:5e:a6:38:6a:22:12:a3:51:19:83:
        7e:b6

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Validity
            Not Before: Oct 18 00:00:00 2012 GMT
            Not After : Dec 29 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer - G4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a2:63:0b:39:44:b8:bb:23:a7:44:49:bb:0e:ff:
                    a1:f0:61:0a:53:93:b0:98:db:ad:2c:0f:4a:c5:6e:
                    ff:86:3c:53:55:0f:15:ce:04:3f:2b:fd:a9:96:96:
                    d9:be:61:79:0b:5b:c9:4c:86:76:e5:e0:43:4b:22:
                    95:ee:c2:2b:43:c1:9f:d8:68:b4:8e:40:4f:ee:85:
                    38:b9:11:c5:23:f2:64:58:f0:15:32:6f:4e:57:a1:
                    ae:88:a4:02:d7:2a:1e:cd:4b:e1:dd:63:d5:17:89:
                    32:5b:b0:5e:99:5a:a8:9d:28:50:0e:17:ee:96:db:
                    61:3b:45:51:1d:cf:12:56:0b:92:47:fc:ab:ae:f6:
                    66:3d:47:ac:70:72:e7:92:e7:5f:cd:10:b9:c4:83:
                    64:94:19:bd:25:80:e1:e8:d2:22:a5:d0:ba:02:7a:
                    a1:77:93:5b:65:c3:ee:17:74:bc:41:86:2a:dc:08:
                    4c:8c:92:8c:91:2d:9e:77:44:1f:68:d6:a8:74:77:
                    db:0e:5b:32:8b:56:8b:33:bd:d9:63:c8:49:9d:3a:
                    c5:c5:ea:33:0b:d2:f1:a3:1b:f4:8b:be:d9:b3:57:
                    8b:3b:de:04:a7:7a:22:b2:24:ae:2e:c7:70:c5:be:
                    4e:83:26:08:fb:0b:bd:a9:4f:99:08:e1:10:28:72:
                    aa:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                OCSP - URI:http://ts-ocsp.ws.symantec.com
                CA Issuers - URI:http://ts-aia.ws.symantec.com/tss-ca-g2.cer
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://ts-crl.ws.symantec.com/tss-ca-g2.crl
            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-2
            X509v3 Subject Key Identifier: 
                46:C6:69:A3:0E:4A:14:1E:D5:4C:DA:52:63:17:3F:5E:36:BC:0D:E6
            X509v3 Authority Key Identifier: 
                5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        78:3b:b4:91:2a:00:4c:f0:8f:62:30:37:78:a3:84:27:07:6f:
        18:b2:de:25:dc:a0:d4:94:03:aa:86:4e:25:9f:9a:40:03:1c:
        dd:ce:e3:79:cb:21:68:06:da:b6:32:b4:6d:bf:f4:2c:26:63:
        33:e4:49:64:6d:0d:e6:c3:67:0e:f7:05:a4:35:6c:7c:89:16:
        c6:e9:b2:df:b2:e9:dd:20:c6:71:0f:cd:95:74:dc:b6:5c:de:
        bd:37:1f:43:78:e6:78:b5:cd:28:04:20:a3:aa:f1:4b:c4:88:
        29:91:0e:80:d1:11:fc:dd:5c:76:6e:4f:5e:0e:45:46:41:6e:
        0d:b0:ea:38:9a:b1:3a:da:09:71:10:fc:1c:79:b4:80:7b:ac:
        69:f4:fd:9c:b6:0c:16:2b:f1:7f:5b:09:3d:9b:5b:e2:16:ca:
        13:81:6d:00:2e:38:0d:a8:29:8f:2c:e1:b2:f4:5a:a9:01:af:
        15:9c:2c:2f:49:1b:db:22:bb:c3:fe:78:94:51:c3:86:b1:82:
        88:5d:f0:3d:b4:51:a1:79:33:2b:2e:7b:b9:dc:20:09:13:71:
        eb:6a:19:5b:cf:e8:a5:30:57:2c:89:49:3f:b9:cf:7f:c9:bf:
        3e:22:68:63:53:9a:bd:69:74:ac:c5:1d:3c:7f:92:e0:c3:bc:
        1c:d8:04:75

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority
        Validity
            Not Before: Nov  8 00:00:00 2006 GMT
            Not After : Nov  7 23:59:59 2021 GMT
        Subject: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:af:24:08:08:29:7a:35:9e:60:0c:aa:e7:4b:3b:
                    4e:dc:7c:bc:3c:45:1c:bb:2b:e0:fe:29:02:f9:57:
                    08:a3:64:85:15:27:f5:f1:ad:c8:31:89:5d:22:e8:
                    2a:aa:a6:42:b3:8f:f8:b9:55:b7:b1:b7:4b:b3:fe:
                    8f:7e:07:57:ec:ef:43:db:66:62:15:61:cf:60:0d:
                    a4:d8:de:f8:e0:c3:62:08:3d:54:13:eb:49:ca:59:
                    54:85:26:e5:2b:8f:1b:9f:eb:f5:a1:91:c2:33:49:
                    d8:43:63:6a:52:4b:d2:8f:e8:70:51:4d:d1:89:69:
                    7b:c7:70:f6:b3:dc:12:74:db:7b:5d:4b:56:d3:96:
                    bf:15:77:a1:b0:f4:a2:25:f2:af:1c:92:67:18:e5:
                    f4:06:04:ef:90:b9:e4:00:e4:dd:3a:b5:19:ff:02:
                    ba:f4:3c:ee:e0:8b:eb:37:8b:ec:f4:d7:ac:f2:f6:
                    f0:3d:af:dd:75:91:33:19:1d:1c:40:cb:74:24:19:
                    21:93:d9:14:fe:ac:2a:52:c7:8f:d5:04:49:e4:8d:
                    63:47:88:3c:69:83:cb:fe:47:bd:2b:7e:4f:c5:95:
                    ae:0e:9d:d4:d1:43:c0:67:73:e3:14:08:7e:e5:3f:
                    9f:73:b8:33:0a:cf:5d:3f:34:87:96:8a:ee:53:e8:
                    25:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.verisign.com/pca3.crl
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: https://www.verisign.com/cps
            X509v3 Subject Key Identifier: 
                7F:D3:65:A7:C2:DD:EC:BB:F0:30:09:F3:43:39:FA:02:AF:33:31:33
            1.3.6.1.5.5.7.1.12: 
                0_.].[0Y0W0U..image/gif0!0.0...+..............k...j.H.,{..0%.#http://logo.verisign.com/vslogo.gif
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication, Code Signing, Netscape Server Gated Crypto, 2.16.840.1.113733.1.8.1
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        13:02:dd:f8:e8:86:00:f2:5a:f8:f8:20:0c:59:88:62:07:ce:
        ce:f7:4e:f9:bb:59:a1:98:e5:e1:38:dd:4e:bc:66:18:d3:ad:
        eb:18:f2:0d:c9:6d:3e:4a:94:20:c3:3c:ba:bd:65:54:c6:af:
        44:b3:10:ad:2c:6b:3e:ab:d7:07:b6:b8:81:63:c5:f9:5e:2e:
        e5:2a:67:ce:cd:33:0c:2a:d7:89:56:03:23:1f:b3:be:e8:3a:
        08:59:b4:ec:45:35:f7:8a:5b:ff:66:cf:50:af:c6:6d:57:8d:
        19:78:b7:b9:a2:d1:57:ea:1f:9a:4b:af:ba:c9:8e:12:7e:c6:
        bd:ff

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:84:48:9d:ec:62:00:de:ce:ad:93:d4:73:2c:ab:ca
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https:\/\/www.verisign.com\/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA
        Validity
            Not Before: Jan  6 00:00:00 2012 GMT
            Not After : Jan  5 23:59:59 2015 GMT
        Subject: C=CZ, ST=Jihomoravsky kraj, L=Brno, O=AVG Technologies CZ, s.r.o., OU=Digital ID Class 3 - Microsoft Software Validation v2, CN=AVG Technologies CZ, s.r.o.
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:e2:14:e3:e1:0b:33:09:13:13:1a:14:20:69:8f:
                    87:d2:ea:d7:37:74:70:09:c1:bc:e2:05:20:b7:c4:
                    95:7d:1d:34:f1:61:6f:e8:f0:26:7e:db:12:84:95:
                    3a:8e:62:fa:aa:94:ca:47:2f:18:16:d2:22:9c:3e:
                    8b:cb:4d:39:22:2d:f9:36:35:59:80:e6:63:d6:2e:
                    32:44:6a:c5:53:b5:61:86:9a:02:3f:f5:12:37:18:
                    09:1f:1a:47:35:bd:09:66:56:74:5f:8b:9b:cb:5d:
                    d7:66:58:e8:27:f1:8b:fe:92:28:4a:92:b1:1d:9d:
                    8f:a5:de:04:41:51:a8:61:43:4f:7f:95:b0:34:15:
                    5a:2d:a0:a9:26:20:f7:8d:13:de:65:5c:d2:6a:f0:
                    a3:c2:ca:e5:a0:ed:0a:c5:2f:69:20:96:39:0f:d9:
                    5d:83:c6:e4:bb:a4:57:94:ff:ae:b2:20:74:c8:21:
                    88:60:6d:db:b6:80:bd:fd:eb:53:47:2f:fd:17:a9:
                    45:c1:41:8e:96:33:41:28:41:99:38:fb:18:80:44:
                    94:ae:23:58:56:66:da:b6:c0:ff:9b:3e:16:fb:f6:
                    d2:63:ee:5b:34:d3:a3:95:a9:ff:76:63:51:0f:f2:
                    4c:cb:34:9c:c5:69:fb:bc:c4:5c:be:88:60:fd:ba:
                    41:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://csc3-2010-crl.verisign.com/CSC3-2010.crl
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/rpa
            X509v3 Extended Key Usage: 
                Code Signing
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com
                CA Issuers - URI:http://csc3-2010-aia.verisign.com/CSC3-2010.cer
            X509v3 Authority Key Identifier: 
                CF:99:A9:EA:7B:26:F4:4B:C9:8E:8F:D7:F0:05:26:EF:E3:D2:A7:9D
            Netscape Cert Type: 
                Object Signing
            1.3.6.1.4.1.311.2.1.27: 
                0.......
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        9d:d0:21:8e:93:23:23:29:96:8a:ca:7d:1e:d0:e3:21:fe:67:
        3f:0e:ac:dd:0b:c6:90:45:fb:85:5d:61:09:3d:bc:2e:94:d8:
        f3:21:e0:a1:45:19:eb:c6:87:09:72:94:bb:9e:8d:c8:84:94:
        65:21:ed:22:35:70:85:e2:d8:66:ac:c3:41:3c:0f:6d:08:cd:
        f2:87:28:0a:e3:56:22:94:da:d5:47:f9:40:2c:cb:d2:05:93:
        5e:55:6b:ea:38:e9:4b:ca:20:75:40:db:ec:59:49:6e:bb:8c:
        0e:1c:d4:81:0e:31:de:85:70:bd:20:c1:63:4c:08:2d:94:6b:
        f8:4e:31:2b:0d:c3:96:9b:5f:b2:04:4d:02:d0:3b:9e:b8:a5:
        46:dc:b3:d1:a2:8b:2d:98:2f:ce:18:a5:74:6b:1f:39:b0:65:
        b5:63:77:c6:73:d3:d7:77:25:30:8f:78:53:04:9a:8a:05:e6:
        6f:2c:a2:6f:2f:b8:43:d7:37:48:f5:24:c2:19:b4:ec:49:69:
        61:ee:6c:72:fa:dc:59:83:4f:e8:ac:85:b5:12:48:c6:ab:ee:
        b6:46:1b:2b:66:87:b2:e7:9f:f3:2c:aa:c8:1f:e0:82:50:ba:
        86:e3:8e:5f:94:ea:76:87:56:6f:58:0e:fb:16:e4:5e:0c:72:
        91:94:ca:1b

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
        Validity
            Not Before: Feb  8 00:00:00 2010 GMT
            Not After : Feb  7 23:59:59 2020 GMT
        Subject: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https:\/\/www.verisign.com\/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:f5:23:4b:5e:a5:d7:8a:bb:32:e9:d4:57:f7:ef:
                    e4:c7:26:7e:ad:19:98:fe:a8:9d:7d:94:f6:36:6b:
                    10:d7:75:81:30:7f:04:68:7f:cb:2b:75:1e:cd:1d:
                    08:8c:df:69:94:a7:37:a3:9c:7b:80:e0:99:e1:ee:
                    37:4d:5f:ce:3b:14:ee:86:d4:d0:f5:27:35:bc:25:
                    0b:38:a7:8c:63:9d:17:a3:08:a5:ab:b0:fb:cd:6a:
                    62:82:4c:d5:21:da:1b:d9:f1:e3:84:3b:8a:2a:4f:
                    85:5b:90:01:4f:c9:a7:76:10:7f:27:03:7c:be:ae:
                    7e:7d:c1:dd:f9:05:bc:1b:48:9c:69:e7:c0:a4:3c:
                    3c:41:00:3e:df:96:e5:c5:e4:94:71:d6:55:01:c7:
                    00:26:4a:40:3c:b5:a1:26:a9:0c:a7:6d:80:8e:90:
                    25:7b:cf:bf:3f:1c:eb:2f:96:fa:e5:87:77:c6:b5:
                    56:b2:7a:3b:54:30:53:1b:df:62:34:ff:1e:d1:f4:
                    5a:93:28:85:e5:4c:17:4e:7e:5b:fd:a4:93:99:7f:
                    df:cd:ef:a4:75:ef:ef:15:f6:47:e7:f8:19:72:d8:
                    2e:34:1a:a6:b4:a7:4c:7e:bd:bb:4f:0c:3d:57:f1:
                    30:d6:a6:36:8e:d6:80:76:d7:19:2e:a5:cd:7e:34:
                    2d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/cps
                  User Notice:
                    Explicit Text: https://www.verisign.com/rpa
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            1.3.6.1.5.5.7.1.12: 
                0_.].[0Y0W0U..image/gif0!0.0...+..............k...j.H.,{..0%.#http://logo.verisign.com/vslogo.gif
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.verisign.com/pca3-g5.crl
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, Code Signing
            X509v3 Subject Alternative Name: 
                DirName:/CN=VeriSignMPKI-2-8
            X509v3 Subject Key Identifier: 
                CF:99:A9:EA:7B:26:F4:4B:C9:8E:8F:D7:F0:05:26:EF:E3:D2:A7:9D
            X509v3 Authority Key Identifier: 
                7F:D3:65:A7:C2:DD:EC:BB:F0:30:09:F3:43:39:FA:02:AF:33:31:33
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        56:22:e6:34:a4:c4:61:cb:48:b9:01:ad:56:a8:64:0f:d9:8c:
        91:c4:bb:cc:0c:e5:ad:7a:a0:22:7f:df:47:38:4a:2d:6c:d1:
        7f:71:1a:7c:ec:70:a9:b1:f0:4f:e4:0f:0c:53:fa:15:5e:fe:
        74:98:49:24:85:81:26:1c:91:14:47:b0:4c:63:8c:bb:a1:34:
        d4:c6:45:e8:0d:85:26:73:03:d0:a9:8c:64:6d:dc:71:92:e6:
        45:05:60:15:59:51:39:fc:58:14:6b:fe:d4:a4:ed:79:6b:08:
        0c:41:72:e7:37:22:06:09:be:23:e9:3f:44:9a:1e:e9:61:9d:
        cc:b1:90:5c:fc:3d:d2:8d:ac:42:3d:65:36:d4:b4:3d:40:28:
        8f:9b:10:cf:23:26:cc:4b:20:cb:90:1f:5d:8c:4c:34:ca:3c:
        d8:e5:37:d6:6f:a5:20:bd:34:eb:26:d9:ae:0d:e7:c5:9a:f7:
        a1:b4:21:91:33:6f:86:e8:58:bb:25:7c:74:0e:58:fe:75:1b:
        63:3f:ce:31:7c:9b:8f:1b:96:9e:c5:53:76:84:5b:9c:ad:91:
        fa:ac:ed:93:ba:5d:c8:21:53:c2:82:53:63:af:12:0d:50:87:
        11:1b:3d:54:52:96:8a:2c:9c:3d:92:1a:08:9a:05:2e:c7:93:
        a5:48:91:d3

pkcs7-signedData

1
- SHA1: nil
- 1.3.6.1.4.1.311.2.1.4
  - #0
    - 1.3.6.1.4.1.311.2.1.15
      - :
    - SHA1
      - 55 53 5e 3e ec 09 56 5b 29 85 78 ec 1c 64 00 a9 |US^>..V[).x..d..| 87 90 e9 95 |.... |
- Certificates
  - Certificate #0
    - 2
      - 7E:93:EB:FB:7C:C6:4E:59:EA:4B:9A:77:D4:06:FC:3B
      - RSA-SHA1: nil
      - Issuer
        C: ZA
        ST: Western Cape
        L: Durbanville
        O: Thawte
        OU: Thawte Certification
        CN: Thawte Timestamping CA
      - 2012-12-21 00:00:00 UTC: 2020-12-30 23:59:59 UTC
      - Subject
        C: US
        O: Symantec Corporation
        CN: Symantec Time Stamping Services CA - G2
      - #5
        rsaEncryption: nil
        B1:AC:B3:49:54:4B:97:1C:12:0A:D8:25:79:91:22:57:
        2A:6F:DC:B8:26:C4:43:73:6B:C2:BF:2E:50:5A:FB:14:
        C2:76:8E:43:01:25:43:B4:A1:E2:45:F4:E8:B7:7B:C3:
        74:CC:22:D7:B4:94:00:02:F7:4D:ED:BF:B4:B7:44:24:
        6B:CD:5F:45:3B:D1:44:CE:43:12:73:17:82:8B:69:B4:
        2B:CB:99:1E:AC:72:1B:26:4D:71:1F:B1:31:DD:FB:51:
        61:02:53:A6:AA:F5:49:2C:05:78:45:A5:2F:89:CE:E7:
        99:E7:FE:8C:E2:57:3F:3D:C6:92:DC:4A:F8:7B:33:E4:
        79:0A:FB:F0:75:88:41:9C:FF:C5:03:51:99:AA:D7:6C:
        9F:93:69:87:65:29:83:85:C2:60:14:C4:C8:C9:3B:14:
        DA:C0:81:F0:1F:0D:74:DE:92:22:AB:CA:F7:FB:74:7C:
        27:E6:F7:4A:1B:7F:A7:C3:9E:2D:AE:8A:EA:A6:E6:AA:
        27:16:7D:61:F7:98:71:11:BC:E2:50:A1:4B:E5:5D:FA:
        E5:0E:A7:2C:9F:AA:65:20:D3:D8:96:E8:C8:7C:A5:4E:
        48:44:FF:19:E2:44:07:92:0B:D7:68:84:80:5D:6A:78:
        64:45:CD:60:46:7E:54:C1:13:7C:C5:79:F1:C9:C1:71: 0x010001
      - #6
        subjectKeyIdentifier:
        5f 9a f5 6e 5c cc cc 74 9a d4 dd 7d ef 3f db ec |_..n\..t...}.?..| 4c 80 2e dd |L... |
        authorityInfoAccess
        OCSP: http://ocsp.thawte.com
        basicConstraints
        true
        true: 0
        crlDistributionPoints: http://crl.thawte.com/ThawteTimestampingCA.crl
        extendedKeyUsage: timeStamping
        keyUsage: true, 6
        subjectAltName
        CN: TimeStamp-2048-1
    - RSA-SHA1:
```
03 09 9b 8f 79 ef 7f 59  30 aa ef 68 b5 fa e3 09  |....y..Y0..h....|
1d bb 4f 82 06 5d 37 5f  a6 52 9f 16 8d ea 1c 92  |..O..]7_.R......|
09 44 6e f5 6d eb 58 7c  30 e8 f9 69 8d 23 73 0b  |.Dn.m.X|0..i.#s.|
12 6f 47 a9 ae 39 11 f8  2a b1 9b b0 1a c3 8e eb  |.oG..9..*.......|
59 96 00 ad ce 0c 4d b2  d0 31 a6 08 5c 2a 7a fc  |Y.....M..1..\*z.|
e2 7a 1d 57 4c a8 65 18  e9 79 40 62 25 96 6e c7  |.z.WL.e..y@b%.n.|
c7 37 6a 83 21 08 8e 41  ea dd d9 57 3f 1d 77 49  |.7j.!..A...W?.wI|
87 2a 16 06 5e a6 38 6a  22 12 a3 51 19 83 7e b6  |.*..^.8j"..Q..~.|
```
  - Certificate #1
    - 2
      - 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
      - RSA-SHA1: nil
      - Issuer
        C: US
        O: Symantec Corporation
        CN: Symantec Time Stamping Services CA - G2
      - 2012-10-18 00:00:00 UTC: 2020-12-29 23:59:59 UTC
      - Subject
        C: US
        O: Symantec Corporation
        CN: Symantec Time Stamping Services Signer - G4
      - #5
        rsaEncryption: nil
        A2:63:0B:39:44:B8:BB:23:A7:44:49:BB:0E:FF:A1:F0:
        61:0A:53:93:B0:98:DB:AD:2C:0F:4A:C5:6E:FF:86:3C:
        53:55:0F:15:CE:04:3F:2B:FD:A9:96:96:D9:BE:61:79:
        0B:5B:C9:4C:86:76:E5:E0:43:4B:22:95:EE:C2:2B:43:
        C1:9F:D8:68:B4:8E:40:4F:EE:85:38:B9:11:C5:23:F2:
        64:58:F0:15:32:6F:4E:57:A1:AE:88:A4:02:D7:2A:1E:
        CD:4B:E1:DD:63:D5:17:89:32:5B:B0:5E:99:5A:A8:9D:
        28:50:0E:17:EE:96:DB:61:3B:45:51:1D:CF:12:56:0B:
        92:47:FC:AB:AE:F6:66:3D:47:AC:70:72:E7:92:E7:5F:
        CD:10:B9:C4:83:64:94:19:BD:25:80:E1:E8:D2:22:A5:
        D0:BA:02:7A:A1:77:93:5B:65:C3:EE:17:74:BC:41:86:
        2A:DC:08:4C:8C:92:8C:91:2D:9E:77:44:1F:68:D6:A8:
        74:77:DB:0E:5B:32:8B:56:8B:33:BD:D9:63:C8:49:9D:
        3A:C5:C5:EA:33:0B:D2:F1:A3:1B:F4:8B:BE:D9:B3:57:
        8B:3B:DE:04:A7:7A:22:B2:24:AE:2E:C7:70:C5:BE:4E:
        83:26:08:FB:0B:BD:A9:4F:99:08:E1:10:28:72:AA:CD: 0x010001
      - X509v3 extensions
        basicConstraints
        true
        nil
        extendedKeyUsage: true, timeStamping
        keyUsage: true, 0x80
        authorityInfoAccess
        #0
        OCSP: http://ts-ocsp.ws.symantec.com
        caIssuers: http://ts-aia.ws.symantec.com/tss-ca-g2.cer
        crlDistributionPoints: http://ts-crl.ws.symantec.com/tss-ca-g2.crl
        subjectAltName
        CN: TimeStamp-2048-2
        subjectKeyIdentifier:
        46 c6 69 a3 0e 4a 14 1e d5 4c da 52 63 17 3f 5e |F.i..J...L.Rc.?^| 36 bc 0d e6 |6... |
        authorityKeyIdentifier:
        5f 9a f5 6e 5c cc cc 74 9a d4 dd 7d ef 3f db ec |_..n\..t...}.?..| 4c 80 2e dd |L... |
    - RSA-SHA1:
```
78 3b b4 91 2a 00 4c f0  8f 62 30 37 78 a3 84 27  |x;..*.L..b07x..'|
07 6f 18 b2 de 25 dc a0  d4 94 03 aa 86 4e 25 9f  |.o...%.......N%.|
9a 40 03 1c dd ce e3 79  cb 21 68 06 da b6 32 b4  |.@.....y.!h...2.|
6d bf f4 2c 26 63 33 e4  49 64 6d 0d e6 c3 67 0e  |m..,&c3.Idm...g.|
f7 05 a4 35 6c 7c 89 16  c6 e9 b2 df b2 e9 dd 20  |...5l|......... |
c6 71 0f cd 95 74 dc b6  5c de bd 37 1f 43 78 e6  |.q...t..\..7.Cx.|
78 b5 cd 28 04 20 a3 aa  f1 4b c4 88 29 91 0e 80  |x..(. ...K..)...|
d1 11 fc dd 5c 76 6e 4f  5e 0e 45 46 41 6e 0d b0  |....\vnO^.EFAn..|
ea 38 9a b1 3a da 09 71  10 fc 1c 79 b4 80 7b ac  |.8..:..q...y..{.|
69 f4 fd 9c b6 0c 16 2b  f1 7f 5b 09 3d 9b 5b e2  |i......+..[.=.[.|
16 ca 13 81 6d 00 2e 38  0d a8 29 8f 2c e1 b2 f4  |....m..8..).,...|
5a a9 01 af 15 9c 2c 2f  49 1b db 22 bb c3 fe 78  |Z.....,/I.."...x|
94 51 c3 86 b1 82 88 5d  f0 3d b4 51 a1 79 33 2b  |.Q.....].=.Q.y3+|
2e 7b b9 dc 20 09 13 71  eb 6a 19 5b cf e8 a5 30  |.{.. ..q.j.[...0|
57 2c 89 49 3f b9 cf 7f  c9 bf 3e 22 68 63 53 9a  |W,.I?.....>"hcS.|
bd 69 74 ac c5 1d 3c 7f  92 e0 c3 bc 1c d8 04 75  |.it...<........u|
```
  - Certificate #2
    - 2
      - 25:0C:E8:E0:30:61:2E:9F:2B:89:F7:05:4D:7C:F8:FD
      - RSA-SHA1: nil
      - Issuer
        C: US
        O: VeriSign, Inc.
        OU: Class 3 Public Primary Certification Authority
      - 2006-11-08 00:00:00 UTC: 2021-11-07 23:59:59 UTC
      - Subject
        C: US
        O: VeriSign, Inc.
        OU: VeriSign Trust Network
        OU: (c) 2006 VeriSign, Inc. - For authorized use only
        CN: VeriSign Class 3 Public Primary Certification Authority - G5
      - #5
        rsaEncryption: nil
        AF:24:08:08:29:7A:35:9E:60:0C:AA:E7:4B:3B:4E:DC:
        7C:BC:3C:45:1C:BB:2B:E0:FE:29:02:F9:57:08:A3:64:
        85:15:27:F5:F1:AD:C8:31:89:5D:22:E8:2A:AA:A6:42:
        B3:8F:F8:B9:55:B7:B1:B7:4B:B3:FE:8F:7E:07:57:EC:
        EF:43:DB:66:62:15:61:CF:60:0D:A4:D8:DE:F8:E0:C3:
        62:08:3D:54:13:EB:49:CA:59:54:85:26:E5:2B:8F:1B:
        9F:EB:F5:A1:91:C2:33:49:D8:43:63:6A:52:4B:D2:8F:
        E8:70:51:4D:D1:89:69:7B:C7:70:F6:B3:DC:12:74:DB:
        7B:5D:4B:56:D3:96:BF:15:77:A1:B0:F4:A2:25:F2:AF:
        1C:92:67:18:E5:F4:06:04:EF:90:B9:E4:00:E4:DD:3A:
        B5:19:FF:02:BA:F4:3C:EE:E0:8B:EB:37:8B:EC:F4:D7:
        AC:F2:F6:F0:3D:AF:DD:75:91:33:19:1D:1C:40:CB:74:
        24:19:21:93:D9:14:FE:AC:2A:52:C7:8F:D5:04:49:E4:
        8D:63:47:88:3C:69:83:CB:FE:47:BD:2B:7E:4F:C5:95:
        AE:0E:9D:D4:D1:43:C0:67:73:E3:14:08:7E:E5:3F:9F:
        73:B8:33:0A:CF:5D:3F:34:87:96:8A:EE:53:E8:25:15: 0x010001
      - X509v3 extensions
        basicConstraints: true, true
        crlDistributionPoints: http://crl.verisign.com/pca3.crl
        keyUsage: true, 6
        certificatePolicies
        anyPolicy
        id-qt-cps: https://www.verisign.com/cps
        subjectKeyIdentifier:
        7f d3 65 a7 c2 dd ec bb f0 30 09 f3 43 39 fa 02 |..e......0..C9..| af 33 31 33 |.313 |
        1.3.6.1.5.5.7.1.12
        image/gif
        SHA1:
        8f e5 d3 1a 86 ac 8d 8e 6b c3 cf 80 6a d4 48 18 |........k...j.H.| 2c 7b 19 2e |,{.. |
        http://logo.verisign.com/vslogo.gif
        authorityInfoAccess
        OCSP: http://ocsp.verisign.com
        extendedKeyUsage
        serverAuth: clientAuth, codeSigning, nsSGC, 2.16.840.1.113733.1.8.1
    - RSA-SHA1:
```
13 02 dd f8 e8 86 00 f2  5a f8 f8 20 0c 59 88 62  |........Z.. .Y.b|
07 ce ce f7 4e f9 bb 59  a1 98 e5 e1 38 dd 4e bc  |....N..Y....8.N.|
66 18 d3 ad eb 18 f2 0d  c9 6d 3e 4a 94 20 c3 3c  |f........m>J. .<|
ba bd 65 54 c6 af 44 b3  10 ad 2c 6b 3e ab d7 07  |..eT..D...,k>...|
b6 b8 81 63 c5 f9 5e 2e  e5 2a 67 ce cd 33 0c 2a  |...c..^..*g..3.*|
d7 89 56 03 23 1f b3 be  e8 3a 08 59 b4 ec 45 35  |..V.#....:.Y..E5|
f7 8a 5b ff 66 cf 50 af  c6 6d 57 8d 19 78 b7 b9  |..[.f.P..mW..x..|
a2 d1 57 ea 1f 9a 4b af  ba c9 8e 12 7e c6 bd ff  |..W...K.....~...|
```
  - Certificate #3
    - 2
      - 49:84:48:9D:EC:62:00:DE:CE:AD:93:D4:73:2C:AB:CA
      - RSA-SHA1: nil
      - Issuer
        C: US
        O: VeriSign, Inc.
        OU: VeriSign Trust Network
        OU: Terms of use at https://www.verisign.com/rpa (c)10
        CN: VeriSign Class 3 Code Signing 2010 CA
      - 2012-01-06 00:00:00 UTC: 2015-01-05 23:59:59 UTC
      - Subject
        C: CZ
        ST: Jihomoravsky kraj
        L: Brno
        O: AVG Technologies CZ, s.r.o.
        OU: Digital ID Class 3 - Microsoft Software Validation v2
        CN: AVG Technologies CZ, s.r.o.
      - #5
        rsaEncryption: nil
        E2:14:E3:E1:0B:33:09:13:13:1A:14:20:69:8F:87:D2:
        EA:D7:37:74:70:09:C1:BC:E2:05:20:B7:C4:95:7D:1D:
        34:F1:61:6F:E8:F0:26:7E:DB:12:84:95:3A:8E:62:FA:
        AA:94:CA:47:2F:18:16:D2:22:9C:3E:8B:CB:4D:39:22:
        2D:F9:36:35:59:80:E6:63:D6:2E:32:44:6A:C5:53:B5:
        61:86:9A:02:3F:F5:12:37:18:09:1F:1A:47:35:BD:09:
        66:56:74:5F:8B:9B:CB:5D:D7:66:58:E8:27:F1:8B:FE:
        92:28:4A:92:B1:1D:9D:8F:A5:DE:04:41:51:A8:61:43:
        4F:7F:95:B0:34:15:5A:2D:A0:A9:26:20:F7:8D:13:DE:
        65:5C:D2:6A:F0:A3:C2:CA:E5:A0:ED:0A:C5:2F:69:20:
        96:39:0F:D9:5D:83:C6:E4:BB:A4:57:94:FF:AE:B2:20:
        74:C8:21:88:60:6D:DB:B6:80:BD:FD:EB:53:47:2F:FD:
        17:A9:45:C1:41:8E:96:33:41:28:41:99:38:FB:18:80:
        44:94:AE:23:58:56:66:DA:B6:C0:FF:9B:3E:16:FB:F6:
        D2:63:EE:5B:34:D3:A3:95:A9:FF:76:63:51:0F:F2:4C:
        CB:34:9C:C5:69:FB:BC:C4:5C:BE:88:60:FD:BA:41:B3: 0x010001
      - X509v3 extensions
        basicConstraints
        nil
        keyUsage: true, 0x80
        crlDistributionPoints: http://csc3-2010-crl.verisign.com/CSC3-2010.crl
        certificatePolicies
        2.16.840.1.113733.1.7.23.3
        id-qt-cps: https://www.verisign.com/rpa
        extendedKeyUsage: codeSigning
        authorityInfoAccess
        #0
        OCSP: http://ocsp.verisign.com
        caIssuers: http://csc3-2010-aia.verisign.com/CSC3-2010.cer
        authorityKeyIdentifier:
        cf 99 a9 ea 7b 26 f4 4b c9 8e 8f d7 f0 05 26 ef |....{&.K......&.| e3 d2 a7 9d |.... |
        nsCertType: 0x10
        1.3.6.1.4.1.311.2.1.27
        false: true
    - RSA-SHA1:
```
9d d0 21 8e 93 23 23 29  96 8a ca 7d 1e d0 e3 21  |..!..##)...}...!|
fe 67 3f 0e ac dd 0b c6  90 45 fb 85 5d 61 09 3d  |.g?......E..]a.=|
bc 2e 94 d8 f3 21 e0 a1  45 19 eb c6 87 09 72 94  |.....!..E.....r.|
bb 9e 8d c8 84 94 65 21  ed 22 35 70 85 e2 d8 66  |......e!."5p...f|
ac c3 41 3c 0f 6d 08 cd  f2 87 28 0a e3 56 22 94  |..A<.m....(..V".|
da d5 47 f9 40 2c cb d2  05 93 5e 55 6b ea 38 e9  |..G.@,....^Uk.8.|
4b ca 20 75 40 db ec 59  49 6e bb 8c 0e 1c d4 81  |K. u@..YIn......|
0e 31 de 85 70 bd 20 c1  63 4c 08 2d 94 6b f8 4e  |.1..p. .cL.-.k.N|
31 2b 0d c3 96 9b 5f b2  04 4d 02 d0 3b 9e b8 a5  |1+...._..M..;...|
46 dc b3 d1 a2 8b 2d 98  2f ce 18 a5 74 6b 1f 39  |F.....-./...tk.9|
b0 65 b5 63 77 c6 73 d3  d7 77 25 30 8f 78 53 04  |.e.cw.s..w%0.xS.|
9a 8a 05 e6 6f 2c a2 6f  2f b8 43 d7 37 48 f5 24  |....o,.o/.C.7H.$|
c2 19 b4 ec 49 69 61 ee  6c 72 fa dc 59 83 4f e8  |....Iia.lr..Y.O.|
ac 85 b5 12 48 c6 ab ee  b6 46 1b 2b 66 87 b2 e7  |....H....F.+f...|
9f f3 2c aa c8 1f e0 82  50 ba 86 e3 8e 5f 94 ea  |..,.....P...._..|
76 87 56 6f 58 0e fb 16  e4 5e 0c 72 91 94 ca 1b  |v.VoX....^.r....|
```
  - Certificate #4
    - 2
      - 52:00:E5:AA:25:56:FC:1A:86:ED:96:C9:D4:4B:33:C7
      - RSA-SHA1: nil
      - Issuer
        C: US
        O: VeriSign, Inc.
        OU: VeriSign Trust Network
        OU: (c) 2006 VeriSign, Inc. - For authorized use only
        CN: VeriSign Class 3 Public Primary Certification Authority - G5
      - 2010-02-08 00:00:00 UTC: 2020-02-07 23:59:59 UTC
      - Subject
        C: US
        O: VeriSign, Inc.
        OU: VeriSign Trust Network
        OU: Terms of use at https://www.verisign.com/rpa (c)10
        CN: VeriSign Class 3 Code Signing 2010 CA
      - #5
        rsaEncryption: nil
        F5:23:4B:5E:A5:D7:8A:BB:32:E9:D4:57:F7:EF:E4:C7:
        26:7E:AD:19:98:FE:A8:9D:7D:94:F6:36:6B:10:D7:75:
        81:30:7F:04:68:7F:CB:2B:75:1E:CD:1D:08:8C:DF:69:
        94:A7:37:A3:9C:7B:80:E0:99:E1:EE:37:4D:5F:CE:3B:
        14:EE:86:D4:D0:F5:27:35:BC:25:0B:38:A7:8C:63:9D:
        17:A3:08:A5:AB:B0:FB:CD:6A:62:82:4C:D5:21:DA:1B:
        D9:F1:E3:84:3B:8A:2A:4F:85:5B:90:01:4F:C9:A7:76:
        10:7F:27:03:7C:BE:AE:7E:7D:C1:DD:F9:05:BC:1B:48:
        9C:69:E7:C0:A4:3C:3C:41:00:3E:DF:96:E5:C5:E4:94:
        71:D6:55:01:C7:00:26:4A:40:3C:B5:A1:26:A9:0C:A7:
        6D:80:8E:90:25:7B:CF:BF:3F:1C:EB:2F:96:FA:E5:87:
        77:C6:B5:56:B2:7A:3B:54:30:53:1B:DF:62:34:FF:1E:
        D1:F4:5A:93:28:85:E5:4C:17:4E:7E:5B:FD:A4:93:99:
        7F:DF:CD:EF:A4:75:EF:EF:15:F6:47:E7:F8:19:72:D8:
        2E:34:1A:A6:B4:A7:4C:7E:BD:BB:4F:0C:3D:57:F1:30:
        D6:A6:36:8E:D6:80:76:D7:19:2E:A5:CD:7E:34:2D:89: 0x010001
      - X509v3 extensions
        basicConstraints
        true
        true: 0
        certificatePolicies
        2.16.840.1.113733.1.7.23.3
        #0
        id-qt-cps: https://www.verisign.com/cps
        id-qt-unotice: https://www.verisign.com/rpa
        keyUsage: true, 6
        1.3.6.1.5.5.7.1.12
        image/gif
        SHA1:
        8f e5 d3 1a 86 ac 8d 8e 6b c3 cf 80 6a d4 48 18 |........k...j.H.| 2c 7b 19 2e |,{.. |
        http://logo.verisign.com/vslogo.gif
        crlDistributionPoints: http://crl.verisign.com/pca3-g5.crl
        authorityInfoAccess
        OCSP: http://ocsp.verisign.com
        extendedKeyUsage
        clientAuth: codeSigning
        subjectAltName
        CN: VeriSignMPKI-2-8
        subjectKeyIdentifier:
        cf 99 a9 ea 7b 26 f4 4b c9 8e 8f d7 f0 05 26 ef |....{&.K......&.| e3 d2 a7 9d |.... |
        authorityKeyIdentifier:
        7f d3 65 a7 c2 dd ec bb f0 30 09 f3 43 39 fa 02 |..e......0..C9..| af 33 31 33 |.313 |
    - RSA-SHA1:
```
56 22 e6 34 a4 c4 61 cb  48 b9 01 ad 56 a8 64 0f  |V".4..a.H...V.d.|
d9 8c 91 c4 bb cc 0c e5  ad 7a a0 22 7f df 47 38  |.........z."..G8|
4a 2d 6c d1 7f 71 1a 7c  ec 70 a9 b1 f0 4f e4 0f  |J-l..q.|.p...O..|
0c 53 fa 15 5e fe 74 98  49 24 85 81 26 1c 91 14  |.S..^.t.I$..&...|
47 b0 4c 63 8c bb a1 34  d4 c6 45 e8 0d 85 26 73  |G.Lc...4..E...&s|
03 d0 a9 8c 64 6d dc 71  92 e6 45 05 60 15 59 51  |....dm.q..E.`.YQ|
39 fc 58 14 6b fe d4 a4  ed 79 6b 08 0c 41 72 e7  |9.X.k....yk..Ar.|
37 22 06 09 be 23 e9 3f  44 9a 1e e9 61 9d cc b1  |7"...#.?D...a...|
90 5c fc 3d d2 8d ac 42  3d 65 36 d4 b4 3d 40 28  |.\.=...B=e6..=@(|
8f 9b 10 cf 23 26 cc 4b  20 cb 90 1f 5d 8c 4c 34  |....#&.K ...].L4|
ca 3c d8 e5 37 d6 6f a5  20 bd 34 eb 26 d9 ae 0d  |.<..7.o. .4.&...|
e7 c5 9a f7 a1 b4 21 91  33 6f 86 e8 58 bb 25 7c  |......!.3o..X.%||
74 0e 58 fe 75 1b 63 3f  ce 31 7c 9b 8f 1b 96 9e  |t.X.u.c?.1|.....|
c5 53 76 84 5b 9c ad 91  fa ac ed 93 ba 5d c8 21  |.Sv.[........].!|
53 c2 82 53 63 af 12 0d  50 87 11 1b 3d 54 52 96  |S..Sc...P...=TR.|
8a 2c 9c 3d 92 1a 08 9a  05 2e c7 93 a5 48 91 d3  |.,.=.........H..|
```
- Signer
  - 1
  - unnamed
    - #0
      - C: US
      - O: VeriSign, Inc.
      - OU: VeriSign Trust Network
      - OU: Terms of use at https://www.verisign.com/rpa (c)10
      - CN: VeriSign Class 3 Code Signing 2010 CA
    - 49:84:48:9D:EC:62:00:DE:CE:AD:93:D4:73:2C:AB:CA
  - SHA1: nil
  - #3
    - contentType: 1.3.6.1.4.1.311.2.1.4
    - 1.3.6.1.4.1.311.2.1.11: msCodeInd
    - messageDigest:
```
8f da e6 6b cb e5 22 8c  2d a2 00 64 99 7c 7e 02  |...k..".-..d.|~.|
a4 4e 32 1e                                       |.N2.            |
```
    - 1.3.6.1.4.1.311.2.1.12: http://www.avg.com/
  - rsaEncryption:
```
55 22 aa 80 e7 ef 83 cf  73 34 cc c8 34 97 3e 02  |U"......s4..4.>.|
44 0a 38 41 e4 24 ef 24  63 c9 45 38 44 92 31 bb  |D.8A.$.$c.E8D.1.|
79 af d4 59 10 46 37 70  af 5e cd 05 e9 47 3b 8f  |y..Y.F7p.^...G;.|
b6 64 bf 22 df 81 a7 97  ef 1b ac 08 b9 55 98 3b  |.d.".........U.;|
86 8e b6 8b 5d 68 20 8f  dc 69 83 26 88 2f df 7c  |....]h ..i.&./.||
ea 03 cf ff 57 46 f3 5e  e8 52 f7 65 de a5 76 e7  |....WF.^.R.e..v.|
8f b9 29 9b a6 cf cb 7a  34 66 0a 4c ae 1c ae 0a  |..)....z4f.L....|
61 b7 63 e6 62 fa b0 ac  65 69 33 75 6c 37 85 ce  |a.c.b...ei3ul7..|
1b 7b 0e 1a 8b 1f 59 0e  ce e4 5c 60 1d f3 f6 f7  |.{....Y...\`....|
70 f7 4d db 59 48 58 86  c0 d1 aa 98 d7 23 24 5b  |p.M.YHX......#$[|
ef 05 cf 47 ae 68 28 c1  e8 42 1e a9 0c c5 24 9f  |...G.h(..B....$.|
a2 6c 22 e3 13 97 40 c2  6d b0 3b 6d 7d 24 79 39  |.l"...@.m.;m}$y9|
3e 06 dc bf c2 49 15 d0  1c 68 11 f3 09 81 76 6b  |>....I...h....vk|
a9 61 90 c3 76 b5 d3 e8  dd bc f1 a3 0f 64 b1 ca  |.a..v........d..|
3d 4b 37 05 1e a0 9c bd  21 cf fb 69 f4 53 fc 0b  |=K7.....!..i.S..|
42 96 14 a5 41 b5 6a 22  b2 00 11 1c 2a d4 8b a5  |B...A.j"....*...|
```
  - countersignature
    - 1
      - unnamed
        #0
        C: US
        O: Symantec Corporation
        CN: Symantec Time Stamping Services CA - G2
        0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
      - SHA1: nil
      - #2
        contentType: pkcs7-data
        signingTime: 2013-11-25 20:58:20 UTC
        messageDigest:
        b6 a5 99 52 96 27 ac 3e 65 fd e5 89 83 1b 77 19 |...R.'.>e.....w.| c0 0b 78 3e |..x> |
      - rsaEncryption:
        55 5f c7 5a 1b b5 25 f0 78 d1 cf 77 30 32 f7 e8 |U_.Z..%.x..w02..| f1 3c fb 9b 90 4a 3e 6c d2 15 1e f2 d9 16 49 9b |.<...J>l......I.| b2 d7 ca e4 a1 f7 18 23 c7 aa b1 cb 39 4d 62 ca |.......#....9Mb.| ff 10 6e a1 f3 3d 42 2d 0e 29 06 12 e3 f4 2d 68 |..n..=B-.)....-h| 75 a1 13 82 2f 86 71 8e 5c bd c3 99 37 0e db ab |u.../.q.\...7...| 14 09 cd f3 b2 dd d9 a9 b9 6c fb 38 05 ec a1 17 |.........l.8....| 76 36 8b 99 52 89 4f e0 3a 79 54 43 42 51 5b be |v6..R.O.:yTCBQ[.| 1a 50 76 ea 7c 0f 6a 4c 3b 88 2e f6 a3 d4 58 65 |.Pv.|.jL;.....Xe| 89 eb dc 50 f9 6f 07 e9 8a 0e bc 85 e4 ed c1 c0 |...P.o..........| 1c 04 49 e4 b5 f0 aa ab 60 60 f6 1d 7e d0 6c d0 |..I.....``..~.l.| 1c f9 63 1c e1 dd cb dd 89 cf 71 64 34 1a cd 81 |..c.......qd4...| f8 7a c3 f0 95 19 6a be 41 2b a8 74 6e 5c f8 aa |.z....j.A+.tn\..| 3d c6 03 90 a6 94 12 5b af 07 93 a2 52 41 0e 88 |=......[....RA..| 42 21 31 bf 39 4a 01 83 3a aa 61 59 32 04 c2 60 |B!1.9J..:.aY2..`| 9e 90 f5 06 00 40 ef e4 a4 96 bd fa 9e 40 a2 50 |.....@.......@.P| 3e 2a ad fc 11 ac 34 4b 08 6d f5 83 56 ca 6f 0b |>*....4K.m..V.o.|

show previews

offset	size	type	comment
15c1	15	HTM		#
15d0	1060928	BIN	overlay data past EOF	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] can't find file_offset of VA 0xfc848

avgnsa.exe-

MZ Header

Rich Header

DOS stub

PE Header

Sections

Data Directory

TLS

StringTable 000004b0

VS_FIXEDFILEINFO

Signers (1)

Certificates (5)

avgnsa.exe
-