| filename | rs2client.exe | |
|---|---|---|
| size | 7027856 (0x6b3c90) | |
| md5 | e071d613439ce538c6335088b1cd087d | |
| type | PE32+ executable (GUI) x86-64, for MS Windows | |
| mimetype | application/x-dosexec | |
| clamav | OK | |
| virustotal | → scan with virustotal.com | |
| histogram | ||
MZ Header
| signature | MZ |
| bytes_in_last_block | 0x90 |
| blocks_in_file | 3 |
| num_relocs | 0 |
| header_paragraphs | 4 |
| min_extra_paragraphs | 0 |
| max_extra_paragraphs | 0xffff |
| ss | 0 |
| sp | 0xb8 |
| checksum | 0 |
| ip | 0 |
| cs | 0 |
| reloc_table_offset | 0x40 |
| overlay_number | 0 |
| reserved0 | 0 |
| oem_id | 0 |
| oem_info | 0 |
| reserved2 | 0 |
| reserved3 | 0 |
| reserved4 | 0 |
| reserved5 | 0 |
| reserved6 | 0 |
| lfanew | 0x118 |
Rich Header
| lib id | version | times used |
|---|---|---|
| 260 | 26213 | 45 |
| 259 | 26213 | 30 |
| 261 | 26213 | 207 |
| 199 | 41118 | 3 |
| 259 | 26706 | 19 |
| 260 | 26706 | 38 |
| 261 | 26706 | 127 |
| 262 | 26213 | 1 |
| 257 | 26213 | 29 |
| 1 | 0 | 398 |
| 265 | 27035 | 115 |
| 256 | 27035 | 1 |
| 255 | 27035 | 1 |
| 151 | 0 | 1 |
| 258 | 27035 | 1 |
DOS stub
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
PE Header
Sections
Data Directory
TLS
| raw start | raw end | index | callbks | zero fill | flags | |
|---|---|---|---|---|---|---|
| 0x1405b8d40 | 0x1405c8bb8 | 0x14064e388 | 0x14050c750 | 0 | 0x500000 |
| type | name | size | cp | |
|---|---|---|---|---|
| ICON | #1 | 1128 | 0 | |
| ICON | #2 | 2440 | 0 | |
| ICON | #3 | 4264 | 0 | |
| ICON | #4 | 9640 | 0 | |
| ICON | #5 | 36447 | 0 | |
| GROUP_ICON | #31337 | 76 | 0 | |
| VERSION | #1 | 784 | 0 | |
| MANIFEST | #1 | 381 | 0 |
| module_name | hint | ord | function_name |
|---|---|---|---|
| KERNEL32.dll | 195 | CreateFileA | |
| KERNEL32.dll | 1511 | WaitForSingleObjectEx | |
| KERNEL32.dll | 275 | DeleteFileA | |
| KERNEL32.dll | 278 | DeleteFileW | |
| KERNEL32.dll | 853 | HeapReAlloc | |
| KERNEL32.dll | 134 | CloseHandle | |
| KERNEL32.dll | 746 | GetSystemInfo | |
| KERNEL32.dll | 846 | HeapAlloc | |
| KERNEL32.dll | 847 | HeapCompact | |
| KERNEL32.dll | 849 | HeapDestroy | |
| KERNEL32.dll | 1469 | UnlockFile | |
| KERNEL32.dll | 978 | LocalFree | |
| KERNEL32.dll | 989 | LockFileEx | |
| KERNEL32.dll | 594 | GetFileSize | |
| KERNEL32.dll | 542 | GetCurrentProcessId | |
| KERNEL32.dll | 699 | GetProcessHeap | |
| KERNEL32.dll | 1430 | SystemTimeToFileTime | |
| KERNEL32.dll | 1549 | WideCharToMultiByte | |
| KERNEL32.dll | 752 | GetSystemTimeAsFileTime | |
| KERNEL32.dll | 750 | GetSystemTime | |
| KERNEL32.dll | 200 | CreateFileMappingW | |
| KERNEL32.dll | 993 | MapViewOfFile | |
| KERNEL32.dll | 1104 | QueryPerformanceCounter | |
| KERNEL32.dll | 782 | GetTickCount | |
| KERNEL32.dll | 421 | FlushFileBuffers | |
| KERNEL32.dll | 693 | GetProcAddress | |
| KERNEL32.dll | 1213 | RemoveDirectoryW | |
| KERNEL32.dll | 390 | FindFirstFileW | |
| KERNEL32.dll | 402 | FindNextFileW | |
| KERNEL32.dll | 379 | FindClose | |
| KERNEL32.dll | 1343 | SetLastError | |
| KERNEL32.dll | 1488 | VerSetConditionMask | |
| KERNEL32.dll | 1491 | VerifyVersionInfoA | |
| KERNEL32.dll | 742 | GetSystemDirectoryA | |
| KERNEL32.dll | 783 | GetTickCount64 | |
| KERNEL32.dll | 595 | GetFileSizeEx | |
| KERNEL32.dll | 273 | DeleteCriticalSection | |
| KERNEL32.dll | 873 | InitializeCriticalSectionEx | |
| KERNEL32.dll | 309 | EnterCriticalSection | |
| KERNEL32.dll | 960 | LeaveCriticalSection | |
| KERNEL32.dll | 1422 | SleepEx | |
| KERNEL32.dll | 359 | ExpandEnvironmentStringsA | |
| KERNEL32.dll | 1387 | SetThreadPriority | |
| KERNEL32.dll | 219 | CreateNamedPipeA | |
| KERNEL32.dll | 156 | ConnectNamedPipe | |
| KERNEL32.dll | 973 | LocalAlloc | |
| KERNEL32.dll | 242 | CreateThread | |
| KERNEL32.dll | 525 | GetConsoleWindow | |
| KERNEL32.dll | 356 | ExitProcess | |
| KERNEL32.dll | 541 | GetCurrentProcess | |
| KERNEL32.dll | 835 | GlobalMemoryStatusEx | |
| KERNEL32.dll | 638 | GetModuleHandleW | |
| KERNEL32.dll | 709 | GetProcessTimes | |
| KERNEL32.dll | 1236 | RtlCaptureStackBackTrace | |
| KERNEL32.dll | 1235 | RtlCaptureContext | |
| KERNEL32.dll | 545 | GetCurrentThread | |
| KERNEL32.dll | 1390 | SetThreadStackGuarantee | |
| KERNEL32.dll | 1403 | SetUnhandledExceptionFilter | |
| KERNEL32.dll | 1302 | SetCurrentDirectoryA | |
| KERNEL32.dll | 186 | CreateDirectoryW | |
| KERNEL32.dll | 1006 | MoveFileW | |
| KERNEL32.dll | 173 | CopyFileW | |
| KERNEL32.dll | 546 | GetCurrentThreadId | |
| KERNEL32.dll | 424 | FlushViewOfFile | |
| KERNEL32.dll | 1314 | SetEnvironmentVariableW | |
| KERNEL32.dll | 432 | FreeEnvironmentStringsW | |
| KERNEL32.dll | 574 | GetEnvironmentStringsW | |
| KERNEL32.dll | 477 | GetCommandLineW | |
| KERNEL32.dll | 476 | GetCommandLineA | |
| KERNEL32.dll | 670 | GetOEMCP | |
| KERNEL32.dll | 440 | GetACP | |
| KERNEL32.dll | 910 | IsValidCodePage | |
| KERNEL32.dll | 385 | FindFirstFileExW | |
| KERNEL32.dll | 1367 | SetStdHandle | |
| KERNEL32.dll | 535 | GetCurrentDirectoryW | |
| KERNEL32.dll | 789 | GetTimeZoneInformation | |
| KERNEL32.dll | 615 | GetLastError | |
| KERNEL32.dll | 795 | GetUserDefaultLCID | |
| KERNEL32.dll | 912 | IsValidLocale | |
| KERNEL32.dll | 787 | GetTimeFormatW | |
| KERNEL32.dll | 552 | GetDateFormatW | |
| KERNEL32.dll | 729 | GetStdHandle | |
| KERNEL32.dll | 496 | GetConsoleCP | |
| KERNEL32.dll | 1140 | ReadConsoleW | |
| KERNEL32.dll | 514 | GetConsoleMode | |
| KERNEL32.dll | 1329 | SetFilePointerEx | |
| KERNEL32.dll | 368 | FileTimeToSystemTime | |
| KERNEL32.dll | 1431 | SystemTimeToTzSpecificLocalTime | |
| KERNEL32.dll | 1061 | PeekNamedPipe | |
| KERNEL32.dll | 597 | GetFileType | |
| KERNEL32.dll | 590 | GetFileInformationByHandle | |
| KERNEL32.dll | 566 | GetDriveTypeW | |
| KERNEL32.dll | 357 | ExitThread | |
| KERNEL32.dll | 1248 | RtlUnwindEx | |
| KERNEL32.dll | 967 | LoadLibraryW | |
| KERNEL32.dll | 1478 | UnregisterWaitEx | |
| KERNEL32.dll | 1094 | QueryDepthSList | |
| KERNEL32.dll | 880 | InterlockedFlushSList | |
| KERNEL32.dll | 882 | InterlockedPushEntrySList | |
| KERNEL32.dll | 881 | InterlockedPopEntrySList | |
| KERNEL32.dll | 1208 | ReleaseSemaphore | |
| KERNEL32.dll | 1496 | VirtualFree | |
| KERNEL32.dll | 1493 | VirtualAlloc | |
| KERNEL32.dll | 804 | GetVersionExW | |
| KERNEL32.dll | 966 | LoadLibraryExW | |
| KERNEL32.dll | 434 | FreeLibraryAndExitThread | |
| KERNEL32.dll | 780 | GetThreadTimes | |
| KERNEL32.dll | 1477 | UnregisterWait | |
| KERNEL32.dll | 1197 | RegisterWaitForSingleObject | |
| KERNEL32.dll | 1376 | SetThreadAffinityMask | |
| KERNEL32.dll | 694 | GetProcessAffinityMask | |
| KERNEL32.dll | 656 | GetNumaHighestNodeNumber | |
| KERNEL32.dll | 557 | GetDiskFreeSpaceA | |
| KERNEL32.dll | 429 | FormatMessageW | |
| KERNEL32.dll | 764 | GetTempPathA | |
| KERNEL32.dll | 1419 | Sleep | |
| KERNEL32.dll | 1010 | MultiByteToWideChar | |
| KERNEL32.dll | 855 | HeapSize | |
| KERNEL32.dll | 858 | HeapValidate | |
| KERNEL32.dll | 1471 | UnmapViewOfFile | |
| KERNEL32.dll | 588 | GetFileAttributesW | |
| KERNEL32.dll | 203 | CreateFileW | |
| KERNEL32.dll | 1510 | WaitForSingleObject | |
| KERNEL32.dll | 218 | CreateMutexW | |
| KERNEL32.dll | 765 | GetTempPathW | |
| KERNEL32.dll | 1052 | OutputDebugStringW | |
| KERNEL32.dll | 585 | GetFileAttributesExW | |
| KERNEL32.dll | 1568 | WriteConsoleW | |
| KERNEL32.dll | 283 | DeleteTimerQueueTimer | |
| KERNEL32.dll | 120 | ChangeTimerQueueTimer | |
| KERNEL32.dll | 250 | CreateTimerQueueTimer | |
| KERNEL32.dll | 623 | GetLogicalProcessorInformation | |
| KERNEL32.dll | 776 | GetThreadPriority | |
| KERNEL32.dll | 1417 | SignalObjectAndWait | |
| KERNEL32.dll | 249 | CreateTimerQueue | |
| KERNEL32.dll | 1434 | TerminateProcess | |
| KERNEL32.dll | 876 | InitializeSListHead | |
| KERNEL32.dll | 727 | GetStartupInfoW | |
| KERNEL32.dll | 1468 | UnhandledExceptionFilter | |
| KERNEL32.dll | 898 | IsDebuggerPresent | |
| KERNEL32.dll | 1249 | RtlVirtualUnwind | |
| KERNEL32.dll | 1242 | RtlLookupFunctionEntry | |
| KERNEL32.dll | 1226 | ResetEvent | |
| KERNEL32.dll | 1316 | SetEvent | |
| KERNEL32.dll | 455 | GetCPInfo | |
| KERNEL32.dll | 734 | GetStringTypeW | |
| KERNEL32.dll | 619 | GetLocaleInfoW | |
| KERNEL32.dll | 948 | LCMapStringW | |
| KERNEL32.dll | 155 | CompareStringW | |
| KERNEL32.dll | 1453 | TlsFree | |
| KERNEL32.dll | 1455 | TlsSetValue | |
| KERNEL32.dll | 1454 | TlsGetValue | |
| KERNEL32.dll | 1452 | TlsAlloc | |
| KERNEL32.dll | 1247 | RtlUnwind | |
| KERNEL32.dll | 191 | CreateEventW | |
| KERNEL32.dll | 872 | InitializeCriticalSectionAndSpinCount | |
| KERNEL32.dll | 637 | GetModuleHandleExW | |
| KERNEL32.dll | 905 | IsProcessorFeaturePresent | |
| KERNEL32.dll | 266 | DecodePointer | |
| KERNEL32.dll | 305 | EncodePointer | |
| KERNEL32.dll | 1244 | RtlPcToFileHeader | |
| KERNEL32.dll | 1105 | QueryPerformanceFrequency | |
| KERNEL32.dll | 651 | GetNativeSystemInfo | |
| KERNEL32.dll | 580 | GetExitCodeThread | |
| KERNEL32.dll | 1429 | SwitchToThread | |
| KERNEL32.dll | 303 | DuplicateHandle | |
| KERNEL32.dll | 1461 | TryEnterCriticalSection | |
| KERNEL32.dll | 965 | LoadLibraryExA | |
| KERNEL32.dll | 1501 | VirtualQuery | |
| KERNEL32.dll | 1499 | VirtualProtect | |
| KERNEL32.dll | 1126 | RaiseException | |
| KERNEL32.dll | 1470 | UnlockFileEx | |
| KERNEL32.dll | 1310 | SetEndOfFile | |
| KERNEL32.dll | 605 | GetFullPathNameA | |
| KERNEL32.dll | 1328 | SetFilePointer | |
| KERNEL32.dll | 988 | LockFile | |
| KERNEL32.dll | 1051 | OutputDebugStringA | |
| KERNEL32.dll | 560 | GetDiskFreeSpaceW | |
| KERNEL32.dll | 1569 | WriteFile | |
| KERNEL32.dll | 608 | GetFullPathNameW | |
| KERNEL32.dll | 850 | HeapFree | |
| KERNEL32.dll | 848 | HeapCreate | |
| KERNEL32.dll | 1143 | ReadFile | |
| KERNEL32.dll | 35 | AreFileApisANSI | |
| KERNEL32.dll | 829 | GlobalFree | |
| KERNEL32.dll | 822 | GlobalAlloc | |
| KERNEL32.dll | 840 | GlobalUnlock | |
| KERNEL32.dll | 833 | GlobalLock | |
| KERNEL32.dll | 633 | GetModuleFileNameA | |
| KERNEL32.dll | 798 | GetUserDefaultUILanguage | |
| KERNEL32.dll | 433 | FreeLibrary | |
| KERNEL32.dll | 583 | GetFileAttributesA | |
| KERNEL32.dll | 964 | LoadLibraryA | |
| KERNEL32.dll | 428 | FormatMessageA | |
| KERNEL32.dll | 1315 | SetErrorMode | |
| KERNEL32.dll | 634 | GetModuleFileNameW | |
| KERNEL32.dll | 345 | EnumSystemLocalesW | |
| KERNEL32.dll | 635 | GetModuleHandleA | |
| dbghelp.dll | 99 | SymFunctionTableAccess64 | |
| dbghelp.dll | 125 | SymGetModuleBase64 | |
| dbghelp.dll | 43 | StackWalk64 | |
| dbghelp.dll | 190 | SymSetOptions | |
| dbghelp.dll | 162 | SymInitialize | |
| dbghelp.dll | 107 | SymGetLineFromAddr64 | |
| dbghelp.dll | 88 | SymFromAddr | |
| dbghelp.dll | 51 | SymCleanup | |
| OPENGL32.dll | 345 | wglCreateContext | |
| OPENGL32.dll | 347 | wglDeleteContext | |
| OPENGL32.dll | 342 | glViewport | |
| OPENGL32.dll | 79 | glEnable | |
| OPENGL32.dll | 70 | glDisable | |
| OPENGL32.dll | 258 | glScissor | |
| OPENGL32.dll | 18 | glClearColor | |
| OPENGL32.dll | 16 | glClear | |
| OPENGL32.dll | 19 | glClearDepth | |
| OPENGL32.dll | 21 | glClearStencil | |
| OPENGL32.dll | 68 | glDepthMask | |
| OPENGL32.dll | 67 | glDepthFunc | |
| OPENGL32.dll | 262 | glStencilMask | |
| OPENGL32.dll | 63 | glCullFace | |
| OPENGL32.dll | 208 | glPolygonOffset | |
| OPENGL32.dll | 207 | glPolygonMode | |
| OPENGL32.dll | 55 | glColorMask | |
| OPENGL32.dll | 72 | glDrawArrays | |
| OPENGL32.dll | 74 | glDrawElements | |
| OPENGL32.dll | 62 | glCopyTexSubImage2D | |
| OPENGL32.dll | 244 | glReadPixels | |
| OPENGL32.dll | 162 | glLineWidth | |
| OPENGL32.dll | 202 | glPixelStorei | |
| OPENGL32.dll | 110 | glGetFloatv | |
| OPENGL32.dll | 73 | glDrawBuffer | |
| OPENGL32.dll | 243 | glReadBuffer | |
| OPENGL32.dll | 97 | glFlush | |
| OPENGL32.dll | 96 | glFinish | |
| OPENGL32.dll | 311 | glTexParameteri | |
| OPENGL32.dll | 308 | glTexImage2D | |
| OPENGL32.dll | 314 | glTexSubImage2D | |
| OPENGL32.dll | 309 | glTexParameterf | |
| OPENGL32.dll | 152 | glIsTexture | |
| OPENGL32.dll | 355 | wglGetProcAddress | |
| OPENGL32.dll | 350 | wglGetCurrentContext | |
| OPENGL32.dll | 351 | wglGetCurrentDC | |
| OPENGL32.dll | 66 | glDeleteTextures | |
| OPENGL32.dll | 111 | glGetIntegerv | |
| OPENGL32.dll | 11 | glBindTexture | |
| OPENGL32.dll | 130 | glGetTexImage | |
| OPENGL32.dll | 105 | glGenTextures | |
| OPENGL32.dll | 109 | glGetError | |
| OPENGL32.dll | 356 | wglMakeCurrent | |
| OPENGL32.dll | 124 | glGetString | |
| CRYPT32.dll | 18 | CertCloseStore | |
| CRYPT32.dll | 53 | CertFindCertificateInStore | |
| CRYPT32.dll | 222 | CryptStringToBinaryA | |
| CRYPT32.dll | 64 | CertFreeCertificateContext | |
| CRYPT32.dll | 89 | CertOpenStore | |
| CRYPT32.dll | 197 | CryptQueryObject | |
| CRYPT32.dll | 61 | CertFreeCertificateChain | |
| CRYPT32.dll | 62 | CertFreeCertificateChainEngine | |
| CRYPT32.dll | 69 | CertGetCertificateChain | |
| CRYPT32.dll | 27 | CertCreateCertificateChainEngine | |
| CRYPT32.dll | 74 | CertGetNameStringA | |
| CRYPT32.dll | 4 | CertAddCertificateContextToStore | |
| IPHLPAPI.DLL | 147 | Icmp6CreateFile | |
| IPHLPAPI.DLL | 149 | Icmp6SendEcho2 | |
| WS2_32.dll | 12 | ||
| WS2_32.dll | 164 | freeaddrinfo | |
| WS2_32.dll | 165 | getaddrinfo | |
| WS2_32.dll | 181 | inet_ntop | |
| WS2_32.dll | 15 | ||
| WS2_32.dll | 23 | ||
| WS2_32.dll | 21 | ||
| WS2_32.dll | 111 | ||
| WS2_32.dll | 4 | ||
| WS2_32.dll | 16 | ||
| WS2_32.dll | 115 | ||
| WS2_32.dll | 3 | ||
| WS2_32.dll | 18 | ||
| WS2_32.dll | 10 | ||
| WS2_32.dll | 116 | ||
| WS2_32.dll | 112 | ||
| WS2_32.dll | 151 | ||
| WS2_32.dll | 9 | ||
| WS2_32.dll | 58 | WSAIoctl | |
| WS2_32.dll | 2 | ||
| WS2_32.dll | 6 | ||
| WS2_32.dll | 7 | ||
| WS2_32.dll | 5 | ||
| WS2_32.dll | 19 | ||
| bcrypt.dll | 2 | BCryptCloseAlgorithmProvider | |
| bcrypt.dll | 29 | BCryptGenRandom | |
| bcrypt.dll | 39 | BCryptOpenAlgorithmProvider | |
| d3d9.dll | 10 | Direct3DCreate9 | |
| USER32.dll | 177 | DestroyMenu | |
| USER32.dll | 839 | SetMenu | |
| USER32.dll | 112 | CreateMenu | |
| USER32.dll | 11 | AppendMenuW | |
| USER32.dll | 770 | ReleaseDC | |
| USER32.dll | 321 | GetDC | |
| USER32.dll | 809 | SetClipboardData | |
| USER32.dll | 231 | EmptyClipboard | |
| USER32.dll | 78 | CloseClipboard | |
| USER32.dll | 309 | GetClipboardData | |
| USER32.dll | 745 | RegisterDeviceNotificationA | |
| USER32.dll | 653 | MessageBoxA | |
| USER32.dll | 187 | DispatchMessageA | |
| USER32.dll | 943 | TranslateMessage | |
| USER32.dll | 690 | PeekMessageA | |
| USER32.dll | 953 | UnregisterClassA | |
| USER32.dll | 739 | RegisterClassExA | |
| USER32.dll | 165 | DefWindowProcA | |
| USER32.dll | 490 | GetWindowRect | |
| USER32.dll | 482 | GetWindowLongPtrW | |
| USER32.dll | 306 | GetClientRect | |
| USER32.dll | 590 | LoadCursorA | |
| USER32.dll | 116 | CreateWindowExA | |
| USER32.dll | 180 | DestroyWindow | |
| USER32.dll | 890 | SetWindowLongPtrA | |
| USER32.dll | 813 | SetCursor | |
| USER32.dll | 677 | OpenClipboard | |
| USER32.dll | 449 | GetSystemMetrics | |
| USER32.dll | 480 | GetWindowLongA | |
| USER32.dll | 908 | ShowScrollBar | |
| USER32.dll | 666 | MoveWindow | |
| USER32.dll | 829 | SetForegroundWindow | |
| USER32.dll | 911 | ShowWindow | |
| USER32.dll | 828 | SetFocus | |
| USER32.dll | 864 | SetScrollPos | |
| USER32.dll | 594 | LoadIconA | |
| USER32.dll | 30 | CallNextHookEx | |
| USER32.dll | 76 | ClientToScreen | |
| USER32.dll | 902 | SetWindowsHookExA | |
| USER32.dll | 948 | UnhookWindowsHookEx | |
| USER32.dll | 439 | GetScrollPos | |
| USER32.dll | 2 | AdjustWindowRect | |
| USER32.dll | 969 | UpdateWindow | |
| USER32.dll | 664 | MonitorFromRect | |
| USER32.dll | 538 | IntersectRect | |
| USER32.dll | 386 | GetMessageA | |
| USER32.dll | 863 | SetScrollInfo | |
| USER32.dll | 898 | SetWindowTextA | |
| USER32.dll | 889 | SetWindowLongA | |
| USER32.dll | 488 | GetWindowPlacement | |
| USER32.dll | 254 | EnumDisplaySettingsA | |
| USER32.dll | 358 | GetKeyboardLayout | |
| USER32.dll | 174 | DestroyCursor | |
| USER32.dll | 894 | SetWindowPos | |
| USER32.dll | 109 | CreateIconIndirect | |
| USER32.dll | 694 | PostMessageA | |
| USER32.dll | 340 | GetFocus | |
| USER32.dll | 665 | MonitorFromWindow | |
| USER32.dll | 391 | GetMonitorInfoA | |
| USER32.dll | 891 | SetWindowLongPtrW | |
| USER32.dll | 801 | SetCapture | |
| USER32.dll | 769 | ReleaseCapture | |
| GDI32.dll | 56 | CreateDIBitmap | |
| GDI32.dll | 923 | SwapBuffers | |
| GDI32.dll | 896 | SetPixelFormat | |
| GDI32.dll | 696 | GetStockObject | |
| GDI32.dll | 381 | DeleteObject | |
| GDI32.dll | 25 | ChoosePixelFormat | |
| SHELL32.dll | 343 | SHGetFolderPathW | |
| SHELL32.dll | 434 | ShellExecuteA | |
| ole32.dll | 43 | CoCreateInstance | |
| ole32.dll | 97 | CoInitializeEx | |
| ADVAPI32.dll | 32 | AllocateAndInitializeSid | |
| ADVAPI32.dll | 308 | FreeSid | |
| ADVAPI32.dll | 744 | SetSecurityDescriptorDacl | |
| ADVAPI32.dll | 399 | InitializeSecurityDescriptor | |
| ADVAPI32.dll | 727 | SetEntriesInAclA | |
| ADVAPI32.dll | 603 | RegCloseKey | |
| ADVAPI32.dll | 193 | CryptAcquireContextA | |
| ADVAPI32.dll | 210 | CryptGenRandom | |
| ADVAPI32.dll | 220 | CryptReleaseContext | |
| ADVAPI32.dll | 196 | CryptCreateHash | |
| ADVAPI32.dll | 217 | CryptHashData | |
| ADVAPI32.dll | 213 | CryptGetHashParam | |
| ADVAPI32.dll | 199 | CryptDestroyHash | |
| ADVAPI32.dll | 651 | RegOpenKeyExA | |
| ADVAPI32.dll | 658 | RegQueryInfoKeyA | |
| ADVAPI32.dll | 633 | RegEnumKeyExA | |
| ADVAPI32.dll | 664 | RegQueryValueExA |
StringTable 080904b0
| CompanyName | Jagex Ltd. |
| FileDescription | RuneScape Client |
| FileVersion | 913-2 |
| InternalName | RuneScape |
| LegalCopyright | Copyright © 1999-2019 Jagex Ltd. - All rights reserved. |
| OriginalFilename | rs2client.exe |
| ProductName | RuneScape Client |
| ProductVersion | 913-2 |
VS_FIXEDFILEINFO
| FileVersion | 913.2.0.0 |
| ProductVersion | 913.2.0.0 |
| StrucVersion | 0x10000 |
| FileFlagsMask | 0x3f |
| FileFlags | 0 |
| FileOS | 4 |
| FileType | 1 |
| FileSubtype | 0 |
Signers (1)
issuer: /C=US/O=thawte, Inc./CN=thawte SHA256 Code Signing CA
serial: 1BAE90F0162276EB826F201D9B3453
Certificates (2)
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:a0:b7:36:95:dd:b1:af:c2:3b:2b:9a:18:ee:54:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2006 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA
Validity
Not Before: Dec 10 00:00:00 2013 GMT
Not After : Dec 9 23:59:59 2023 GMT
Subject: C=US, O=thawte, Inc., CN=thawte SHA256 Code Signing CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:9b:55:02:4c:17:05:e9:d0:66:c3:fc:28:ad:d3:
c0:fe:ef:e0:e9:7e:d4:1e:f6:aa:1b:91:46:fd:f5:
16:ed:98:07:53:fa:ba:87:1b:7d:9e:1f:01:27:ab:
b9:d2:67:ca:b7:10:25:53:f4:e3:be:9b:90:b8:ed:
23:5c:42:ef:64:25:58:e5:88:22:1a:be:f5:c7:ae:
f5:be:8a:b1:11:11:93:1a:22:a9:74:69:c1:74:b6:
68:87:a7:83:30:f9:64:f1:b1:e3:38:3e:f4:d6:c1:
fc:12:fe:73:57:17:35:57:8a:dd:50:8d:03:f8:66:
cd:ca:76:83:13:c8:d7:0e:71:1d:e4:63:c9:ba:17:
f8:d1:b9:e4:88:d2:2c:28:c8:21:20:0d:41:b7:0b:
e2:2f:c2:80:e6:88:7b:53:6c:c3:44:63:81:7f:68:
47:8c:2b:2a:cf:5b:f4:8c:49:61:ba:69:85:fd:6b:
00:78:05:26:69:13:30:80:38:4e:f1:5a:55:c9:c5:
50:d6:aa:38:89:47:43:5c:fe:4d:73:a5:49:c5:93:
69:fe:77:96:9a:af:f3:8c:0e:57:ba:33:d9:0e:c6:
42:d3:03:77:c4:bb:39:ad:91:f9:f3:f7:96:5c:3a:
64:a6:ed:27:57:c1:e8:40:f3:53:f2:be:29:34:fe:
5f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
Authority Information Access:
OCSP - URI:http://t2.symcb.com
X509v3 Basic Constraints: critical
CA:TRUE, pathlen:0
X509v3 CRL Distribution Points:
Full Name:
URI:http://t1.symcb.com/ThawtePCA.crl
X509v3 Extended Key Usage:
TLS Web Client Authentication, Code Signing
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Subject Alternative Name:
DirName:/CN=SymantecPKI-1-568
X509v3 Subject Key Identifier:
57:86:9B:54:B8:BE:A6:29:8A:E4:F6:C2:E2:13:18:89:85:CD:DC:B7
X509v3 Authority Key Identifier:
7B:5B:45:CF:AF:CE:CB:7A:FD:31:92:1A:6A:B6:F3:46:EB:57:48:50
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
24:3b:f5:d7:a0:36:13:c7:43:fe:f0:09:87:68:d1:98:31:6e:
12:e4:3f:1e:1f:96:7b:6b:4c:1e:87:9e:8b:c5:6c:a3:b1:0c:
7b:50:92:d5:81:9c:b1:8f:2c:29:b7:ee:f9:91:05:b9:8e:41:
f1:2c:f6:d0:59:2d:98:e0:b9:ea:80:01:47:40:95:b8:3d:9d:
03:bd:79:bb:35:b6:ad:9c:4c:27:f6:67:45:10:c9:c5:bc:87:
4e:55:7b:d2:87:bb:dd:dc:30:ef:c6:d4:6c:cc:99:35:6d:1c:
e0:60:d3:cd:68:8f:29:59:4b:89:96:08:46:c9:8e:fc:75:4f:
c5:dc:09:cc:4e:27:8b:44:cd:07:bc:ac:04:e0:b5:33:a5:87:
9f:f4:dd:73:0c:91:ea:12:81:6f:e3:75:f0:1e:b5:93:6c:44:
17:d5:3e:97:c9:bd:07:2c:56:77:1f:85:dd:46:e8:bf:de:2c:
81:94:a3:f7:e5:b7:a7:c1:37:9f:75:ca:55:77:4d:5e:36:29:
ca:85:d8:45:41:72:57:75:c0:79:5b:fa:34:10:06:6d:64:20:
42:b7:3a:c8:1f:1d:46:64:02:5f:c6:47:be:f0:c4:3a:28:54:
da:f6:1e:4f:9a:a2:19:43:a4:6f:49:f8:fc:5e:42:20:28:84:
8b:47:20:6e
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:ae:90:f0:16:22:76:eb:82:6f:20:1d:9b:34:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, O=thawte, Inc., CN=thawte SHA256 Code Signing CA
Validity
Not Before: Aug 14 00:00:00 2018 GMT
Not After : Nov 3 23:59:59 2021 GMT
Subject: C=GB, ST=Cambridgeshire, L=Cambridge, O=Jagex Ltd, CN=Jagex Ltd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:89:d1:20:26:2d:31:8f:b8:61:13:20:8c:75:71:
f1:37:7d:60:c8:74:bd:23:09:b3:ad:d6:b6:6b:5d:
01:96:32:a5:e8:31:a2:4a:26:b5:51:62:7f:cd:a2:
7c:f2:17:14:0a:32:05:79:4b:b4:07:95:99:4d:73:
a3:b4:bc:b1:86:94:92:7d:51:63:8c:db:9c:08:c1:
59:2c:9d:0d:3d:25:39:e7:86:62:ad:c1:da:9c:2c:
63:fa:b0:f1:68:78:9d:18:16:ac:7f:2a:c4:ba:38:
61:ad:c9:bd:1f:8a:75:83:28:59:a0:cb:39:28:66:
f1:71:dc:09:a0:2c:8d:bf:da:c8:1e:24:27:26:18:
33:64:ba:86:fe:b4:44:e0:91:fb:a6:36:a2:8d:4e:
75:f5:92:fc:89:9a:73:ee:84:52:60:83:35:2f:3c:
0c:65:c0:6c:3b:83:7b:d5:c1:cb:bd:9a:44:8b:d0:
7a:c0:4c:52:d9:6e:ff:a3:50:84:22:a5:ef:b4:41:
ed:c4:41:4f:e5:75:9a:58:8f:ed:a0:b5:01:31:d5:
d8:a0:ab:15:12:11:ec:ff:39:0d:ae:38:cc:19:75:
d0:01:c4:ba:28:e1:c7:83:44:be:b5:91:06:9a:cd:
f4:49:8f:fa:f6:6b:5e:7e:34:1c:79:be:58:c0:f8:
c6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints:
CA:FALSE
X509v3 Authority Key Identifier:
57:86:9B:54:B8:BE:A6:29:8A:E4:F6:C2:E2:13:18:89:85:CD:DC:B7
X509v3 Subject Key Identifier:
ED:AA:16:B5:F9:F2:49:6A:3F:C6:51:F7:A6:47:0C:C8:9F:5C:2D:DC
X509v3 CRL Distribution Points:
Full Name:
URI:http://tl.symcb.com/tl.crl
X509v3 Key Usage: critical
Digital Signature
X509v3 Extended Key Usage:
Code Signing
X509v3 Certificate Policies:
Policy: 2.23.140.1.4.1
CPS: https://www.thawte.com/cps
User Notice:
Explicit Text: https://www.thawte.com/repository
Authority Information Access:
OCSP - URI:http://tl.symcd.com
CA Issuers - URI:http://tl.symcb.com/tl.crt
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
96:85:d9:4d:dd:d6:a5:a3:5e:33:04:95:11:87:70:ad:21:31:
9a:91:b0:45:e8:df:d3:e3:14:84:54:d5:2d:21:a2:52:30:75:
87:55:70:8c:9c:21:1a:cd:12:97:f0:2f:c0:6a:ba:13:b8:9d:
5c:79:47:57:25:cd:42:20:d8:c8:00:15:f3:e6:b5:69:91:63:
d0:94:fb:a5:d4:f7:d6:c8:46:08:20:81:2a:d0:f8:c8:13:26:
a9:9d:62:03:1e:c6:6e:f8:7b:43:20:7b:51:a3:26:b7:7b:da:
77:01:cf:7e:e7:b3:2c:89:72:d2:5f:d0:f7:8e:e7:8c:2d:a9:
19:db:44:b2:d0:92:d6:a7:69:7b:5a:43:23:53:6e:d6:8b:74:
31:a5:9d:ec:c3:ba:de:53:31:81:3c:b8:46:8d:c6:c0:06:4a:
86:08:75:e6:f8:ba:93:22:b2:fa:8f:70:a8:d5:f4:9e:4c:68:
b8:de:c8:8f:74:ff:89:23:a5:ca:d7:e9:9c:99:31:57:e9:99:
2d:c7:5e:54:0e:46:09:ce:7d:20:a9:79:b3:80:d4:00:60:db:
2c:89:04:7c:4e:66:d7:8e:5b:de:84:3c:1c:56:6c:bf:b9:15:
bc:99:62:a3:96:a9:0c:59:12:55:2e:81:dc:fa:37:54:86:8b:
00:a4:4f:f9
pkcs7-signedData
- 1
- SHA256: nil
- 1.3.6.1.4.1.311.2.1.4
- #0
- 1.3.6.1.4.1.311.2.1.15
- :
- SHA256
ba 38 4f ea bf 28 90 69 04 a5 16 45 8c 47 e3 ee |.8O..(.i...E.G..| a7 37 61 ed 94 be fd 21 06 60 e9 f5 9b bd 1c cb |.7a....!.`......|
- 1.3.6.1.4.1.311.2.1.15
- #0
- Certificates
- Certificate #0
- 2
- 71:A0:B7:36:95:DD:B1:AF:C2:3B:2B:9A:18:EE:54:CB
- RSA-SHA256: nil
- Issuer
- C: US
- O: thawte, Inc.
- OU: Certification Services Division
- OU: (c) 2006 thawte, Inc. - For authorized use only
- CN: thawte Primary Root CA
- 2013-12-10 00:00:00 UTC: 2023-12-09 23:59:59 UTC
- Subject
- C: US
- O: thawte, Inc.
- CN: thawte SHA256 Code Signing CA
- #5
- rsaEncryption: nil
- 9B:55:02:4C:17:05:E9:D0:66:C3:FC:28:AD:D3:C0:FE:
EF:E0:E9:7E:D4:1E:F6:AA:1B:91:46:FD:F5:16:ED:98:
07:53:FA:BA:87:1B:7D:9E:1F:01:27:AB:B9:D2:67:CA:
B7:10:25:53:F4:E3:BE:9B:90:B8:ED:23:5C:42:EF:64:
25:58:E5:88:22:1A:BE:F5:C7:AE:F5:BE:8A:B1:11:11:
93:1A:22:A9:74:69:C1:74:B6:68:87:A7:83:30:F9:64:
F1:B1:E3:38:3E:F4:D6:C1:FC:12:FE:73:57:17:35:57:
8A:DD:50:8D:03:F8:66:CD:CA:76:83:13:C8:D7:0E:71:
1D:E4:63:C9:BA:17:F8:D1:B9:E4:88:D2:2C:28:C8:21:
20:0D:41:B7:0B:E2:2F:C2:80:E6:88:7B:53:6C:C3:44:
63:81:7F:68:47:8C:2B:2A:CF:5B:F4:8C:49:61:BA:69:
85:FD:6B:00:78:05:26:69:13:30:80:38:4E:F1:5A:55:
C9:C5:50:D6:AA:38:89:47:43:5C:FE:4D:73:A5:49:C5:
93:69:FE:77:96:9A:AF:F3:8C:0E:57:BA:33:D9:0E:C6:
42:D3:03:77:C4:BB:39:AD:91:F9:F3:F7:96:5C:3A:64:
A6:ED:27:57:C1:E8:40:F3:53:F2:BE:29:34:FE:5F:F9: 0x010001
- X509v3 extensions
- authorityInfoAccess
- OCSP: http://t2.symcb.com
- basicConstraints
- true
- true: 0
- crlDistributionPoints: http://t1.symcb.com/ThawtePCA.crl
- extendedKeyUsage
- clientAuth: codeSigning
- keyUsage: true, 6
- subjectAltName
- CN: SymantecPKI-1-568
- subjectKeyIdentifier:
57 86 9b 54 b8 be a6 29 8a e4 f6 c2 e2 13 18 89 |W..T...)........| 85 cd dc b7 |.... |
- authorityKeyIdentifier:
7b 5b 45 cf af ce cb 7a fd 31 92 1a 6a b6 f3 46 |{[E....z.1..j..F| eb 57 48 50 |.WHP |
- authorityInfoAccess
- RSA-SHA256:
24 3b f5 d7 a0 36 13 c7 43 fe f0 09 87 68 d1 98 |$;...6..C....h..| 31 6e 12 e4 3f 1e 1f 96 7b 6b 4c 1e 87 9e 8b c5 |1n..?...{kL.....| 6c a3 b1 0c 7b 50 92 d5 81 9c b1 8f 2c 29 b7 ee |l...{P......,)..| f9 91 05 b9 8e 41 f1 2c f6 d0 59 2d 98 e0 b9 ea |.....A.,..Y-....| 80 01 47 40 95 b8 3d 9d 03 bd 79 bb 35 b6 ad 9c |..G@..=...y.5...| 4c 27 f6 67 45 10 c9 c5 bc 87 4e 55 7b d2 87 bb |L'.gE.....NU{...| dd dc 30 ef c6 d4 6c cc 99 35 6d 1c e0 60 d3 cd |..0...l..5m..`..| 68 8f 29 59 4b 89 96 08 46 c9 8e fc 75 4f c5 dc |h.)YK...F...uO..| 09 cc 4e 27 8b 44 cd 07 bc ac 04 e0 b5 33 a5 87 |..N'.D.......3..| 9f f4 dd 73 0c 91 ea 12 81 6f e3 75 f0 1e b5 93 |...s.....o.u....| 6c 44 17 d5 3e 97 c9 bd 07 2c 56 77 1f 85 dd 46 |lD..>....,Vw...F| e8 bf de 2c 81 94 a3 f7 e5 b7 a7 c1 37 9f 75 ca |...,........7.u.| 55 77 4d 5e 36 29 ca 85 d8 45 41 72 57 75 c0 79 |UwM^6)...EArWu.y| 5b fa 34 10 06 6d 64 20 42 b7 3a c8 1f 1d 46 64 |[.4..md B.:...Fd| 02 5f c6 47 be f0 c4 3a 28 54 da f6 1e 4f 9a a2 |._.G...:(T...O..| 19 43 a4 6f 49 f8 fc 5e 42 20 28 84 8b 47 20 6e |.C.oI..^B (..G n|
- 2
- Certificate #1
- 2
- 1B:AE:90:F0:16:22:76:EB:82:6F:20:1D:9B:34:53
- RSA-SHA256: nil
- Issuer
- C: US
- O: thawte, Inc.
- CN: thawte SHA256 Code Signing CA
- 2018-08-14 00:00:00 UTC: 2021-11-03 23:59:59 UTC
- Subject
- C: GB
- ST: Cambridgeshire
- L: Cambridge
- O: Jagex Ltd
- CN: Jagex Ltd
- #5
- rsaEncryption: nil
- 89:D1:20:26:2D:31:8F:B8:61:13:20:8C:75:71:F1:37:
7D:60:C8:74:BD:23:09:B3:AD:D6:B6:6B:5D:01:96:32:
A5:E8:31:A2:4A:26:B5:51:62:7F:CD:A2:7C:F2:17:14:
0A:32:05:79:4B:B4:07:95:99:4D:73:A3:B4:BC:B1:86:
94:92:7D:51:63:8C:DB:9C:08:C1:59:2C:9D:0D:3D:25:
39:E7:86:62:AD:C1:DA:9C:2C:63:FA:B0:F1:68:78:9D:
18:16:AC:7F:2A:C4:BA:38:61:AD:C9:BD:1F:8A:75:83:
28:59:A0:CB:39:28:66:F1:71:DC:09:A0:2C:8D:BF:DA:
C8:1E:24:27:26:18:33:64:BA:86:FE:B4:44:E0:91:FB:
A6:36:A2:8D:4E:75:F5:92:FC:89:9A:73:EE:84:52:60:
83:35:2F:3C:0C:65:C0:6C:3B:83:7B:D5:C1:CB:BD:9A:
44:8B:D0:7A:C0:4C:52:D9:6E:FF:A3:50:84:22:A5:EF:
B4:41:ED:C4:41:4F:E5:75:9A:58:8F:ED:A0:B5:01:31:
D5:D8:A0:AB:15:12:11:EC:FF:39:0D:AE:38:CC:19:75:
D0:01:C4:BA:28:E1:C7:83:44:BE:B5:91:06:9A:CD:F4:
49:8F:FA:F6:6B:5E:7E:34:1C:79:BE:58:C0:F8:C6:BB: 0x010001
- X509v3 extensions
- basicConstraints
- nil
- authorityKeyIdentifier:
57 86 9b 54 b8 be a6 29 8a e4 f6 c2 e2 13 18 89 |W..T...)........| 85 cd dc b7 |.... |
- subjectKeyIdentifier:
ed aa 16 b5 f9 f2 49 6a 3f c6 51 f7 a6 47 0c c8 |......Ij?.Q..G..| 9f 5c 2d dc |.\-. |
- crlDistributionPoints: http://tl.symcb.com/tl.crl
- keyUsage: true, 0x80
- extendedKeyUsage: codeSigning
- certificatePolicies
- 2.23.140.1.4.1
- #0
- id-qt-cps: https://www.thawte.com/cps
- id-qt-unotice: https://www.thawte.com/repository
- #0
- 2.23.140.1.4.1
- authorityInfoAccess
- #0
- OCSP: http://tl.symcd.com
- caIssuers: http://tl.symcb.com/tl.crt
- #0
- basicConstraints
- RSA-SHA256:
96 85 d9 4d dd d6 a5 a3 5e 33 04 95 11 87 70 ad |...M....^3....p.| 21 31 9a 91 b0 45 e8 df d3 e3 14 84 54 d5 2d 21 |!1...E......T.-!| a2 52 30 75 87 55 70 8c 9c 21 1a cd 12 97 f0 2f |.R0u.Up..!...../| c0 6a ba 13 b8 9d 5c 79 47 57 25 cd 42 20 d8 c8 |.j....\yGW%.B ..| 00 15 f3 e6 b5 69 91 63 d0 94 fb a5 d4 f7 d6 c8 |.....i.c........| 46 08 20 81 2a d0 f8 c8 13 26 a9 9d 62 03 1e c6 |F. .*....&..b...| 6e f8 7b 43 20 7b 51 a3 26 b7 7b da 77 01 cf 7e |n.{C {Q.&.{.w..~| e7 b3 2c 89 72 d2 5f d0 f7 8e e7 8c 2d a9 19 db |..,.r._.....-...| 44 b2 d0 92 d6 a7 69 7b 5a 43 23 53 6e d6 8b 74 |D.....i{ZC#Sn..t| 31 a5 9d ec c3 ba de 53 31 81 3c b8 46 8d c6 c0 |1......S1.<.F...| 06 4a 86 08 75 e6 f8 ba 93 22 b2 fa 8f 70 a8 d5 |.J..u...."...p..| f4 9e 4c 68 b8 de c8 8f 74 ff 89 23 a5 ca d7 e9 |..Lh....t..#....| 9c 99 31 57 e9 99 2d c7 5e 54 0e 46 09 ce 7d 20 |..1W..-.^T.F..} | a9 79 b3 80 d4 00 60 db 2c 89 04 7c 4e 66 d7 8e |.y....`.,..|Nf..| 5b de 84 3c 1c 56 6c bf b9 15 bc 99 62 a3 96 a9 |[..<.Vl.....b...| 0c 59 12 55 2e 81 dc fa 37 54 86 8b 00 a4 4f f9 |.Y.U....7T....O.|
- 2
- Certificate #0
- Signer
- 1
- unnamed
- #0
- C: US
- O: thawte, Inc.
- CN: thawte SHA256 Code Signing CA
- 1B:AE:90:F0:16:22:76:EB:82:6F:20:1D:9B:34:53
- #0
- SHA256: nil
- #3
- contentType: 1.3.6.1.4.1.311.2.1.4
- 1.3.6.1.4.1.311.2.1.11: msCodeInd
- messageDigest:
40 f7 ec 9a 3b b5 58 94 69 18 eb 80 d5 0e 0f 6f |@...;.X.i......o| 8a 99 3a 95 c3 3c a5 4e a0 91 22 f5 96 7b 54 0a |..:..<.N.."..{T.| - 1.3.6.1.4.1.311.2.1.12
00 52 00 75 00 6e 00 65 00 53 00 63 00 61 00 70 |.R.u.n.e.S.c.a.p| 00 65 |.e |
: http://www.runescape.com
- rsaEncryption:
15 96 6e 30 d8 17 d1 1c 3e 91 ac 35 78 35 39 a4 |..n0....>..5x59.| 8a a5 51 2b b0 9e 03 ce ea 2c 4b 49 31 ee bf ee |..Q+.....,KI1...| b3 2e 28 c1 cb f5 ee 99 2f f0 97 a7 fc 68 d7 f6 |..(...../....h..| a3 18 3f 56 dd 50 a3 dc 81 b2 34 9d 69 27 b8 8c |..?V.P....4.i'..| d5 97 05 b0 ea d2 20 93 73 82 6a e6 2f d7 0b 16 |...... .s.j./...| 20 c4 fc dc 89 ee f5 fe f1 0d f8 39 0b 2e 49 d9 | ..........9..I.| bd b4 96 a5 eb 3b 19 ff 84 42 99 a4 f6 f1 3f 40 |.....;...B....?@| 8c 6c 01 8e 2d cc 49 dd c6 c5 ce 1b fe dc 4e 92 |.l..-.I.......N.| c6 0c 1a ef 8c 71 dc 2f 4d f6 4a 2b 5d a0 8f 3a |.....q./M.J+]..:| 26 46 13 73 01 36 7a aa ac a6 71 0c a4 b7 40 92 |&F.s.6z...q...@.| 8f f6 7d 1f e1 9b dd 85 6e 0a b8 f6 cf f3 c6 f3 |..}.....n.......| df 44 06 1f f0 53 3c b0 67 9d 22 18 5f 71 32 aa |.D...S<.g."._q2.| 80 a7 64 80 32 58 e2 2d c5 7b f5 b1 9b 52 f1 10 |..d.2X.-.{...R..| df d9 32 bf 73 6f 19 5e 98 10 06 23 97 86 67 f3 |..2.so.^...#..g.| 93 e4 d7 9d ed c6 45 d8 2a 6f 00 2d 7a 38 64 30 |......E.*o.-z8d0| 38 1e 88 1d e4 6f f5 04 19 6a e1 0c fc 01 9a dc |8....o...j......| - 1.3.6.1.4.1.311.3.3.1
- pkcs7-signedData
- 3
- SHA256: nil
- id-smime-ct-TSTInfo
- 1
- 1.3.6.1.4.1.4146.2.3
- SHA256
59 ad 78 1b eb 88 08 6b 43 4c 73 b7 12 80 92 17 |Y.x....kCLs.....| 93 5b 70 90 02 8a 1e 43 05 bc 14 da 34 eb 53 f8 |.[p....C....4.S.|
- 41:9B:F9:60:FD:E1:9E:E0:5D:3E:D3:01:72:48:33:DB:
C6:31:D3:62 - 2020-06-29 16:29:55 UTC
- CN: GlobalSign TSA for Advanced - G2
- 1
- unnamed
- Certificate #0
- 2
- 0C:A7:CF:5D:07:07:24:AC:89:E7:9A:3A
- RSA-SHA256: nil
- Issuer
- C: BE
- O: GlobalSign nv-sa
- CN: GlobalSign Timestamping CA - SHA256 - G2
- 2018-02-19 00:00:00 UTC: 2029-03-18 10:00:00 UTC
- CN: GlobalSign TSA for Advanced - G2
- #5
- rsaEncryption: nil
- B7:C7:92:8A:28:D8:F3:91:CB:50:0D:5D:EB:29:44:C1:
82:59:A5:CA:64:CE:BD:83:B5:51:E5:94:CC:6E:80:9A:
17:6C:DC:FF:62:E6:36:43:5E:01:C2:0C:64:8D:CA:77:
9E:F6:5D:77:45:B9:5E:C8:24:EB:41:37:11:66:37:AC:
C8:CD:74:9B:CC:B3:EF:4C:E2:7F:1B:CE:73:BE:C9:96:
9D:35:1E:7C:F7:54:F7:6C:EC:A0:12:D6:AE:99:9D:63:
C4:78:5F:59:A9:2E:22:F5:C3:27:D8:B2:5B:45:63:27:
90:FF:8C:B1:3D:A9:B4:F3:0E:C0:F1:20:65:06:89:9D:
03:1C:A3:B0:52:41:85:34:EB:BC:CB:CE:54:F6:12:FE:
B3:01:89:4A:A6:FA:54:C5:1F:FB:D3:1C:C0:E3:BF:97:
E3:3F:D0:1B:F9:40:C7:1B:D5:EB:26:7C:43:30:C7:70:
F2:78:11:AA:85:4E:A5:0E:0D:00:4A:3A:11:77:A3:CA:
23:01:80:9E:C8:93:56:5D:46:CC:8A:D8:D2:AA:0A:84:
85:B2:89:5B:D5:32:CE:41:7B:18:4E:54:CA:AB:D1:52:
5E:12:D3:24:9E:56:F3:0C:8F:DD:BD:92:8E:79:D5:41:
89:C3:A3:A0:E5:91:FC:C7:67:9D:87:33:CE:71:32:73: 0x010001
- #6
- keyUsage: true, 0x80
- certificatePolicies
- 1.3.6.1.4.1.4146.1.30
- id-qt-cps: https://www.globalsign.com/repository/
- 1.3.6.1.4.1.4146.1.30
- basicConstraints
- nil
- extendedKeyUsage: true, timeStamping
- crlDistributionPoints: http://crl.globalsign.com/gs/gstimestampingsha2g2.crl
- authorityInfoAccess
- #0
- caIssuers: http://secure.globalsign.com/cacert/gstimestampingsha2g2.crt
- OCSP: http://ocsp2.globalsign.com/gstimestampingsha2g2
- #0
- subjectKeyIdentifier:
2d 6e 6e d1 8d e5 03 80 ee e7 63 e9 a7 d9 da 0b |-nn.......c.....| 3c 57 22 3d |
- authorityKeyIdentifier:
92 21 a7 4a 95 5d 64 b0 9b b4 1e e6 00 37 47 e6 |.!.J.]d......7G.| 9d 41 2b 4c |.A+L |
- authorityKeyIdentifier:
- RSA-SHA256:
8d fd 1d 1f 8f 88 d3 65 f8 b5 5c 46 e9 a7 d3 b6 |.......e..\F....| 3f 4a cb 43 05 c2 07 0d c3 5e 03 84 23 37 a8 7a |?J.C.....^..#7.z| 8c 97 23 ff 27 9c 84 7d 61 eb 5c 4b 57 3e 9b f4 |..#.'..}a.\KW>..| 44 db 80 58 f7 b6 65 de 8f 12 0a 5f a7 87 74 b7 |D..X..e...._..t.| da 14 40 87 51 ec 9f 4a 47 55 f0 17 e8 18 3e 71 |..@.Q..JGU....>q| 20 31 e6 28 22 ab 4e f6 ae 9c 6b c2 e7 44 fb 68 | 1.(".N...k..D.h| 0d 20 7f 53 3f 94 1b a1 86 82 4e 32 16 10 5a 3f |. .S?.....N2..Z?| 89 58 c1 d0 b4 db b6 90 fb 8d 32 e9 a1 4b 46 50 |.X........2..KFP| 37 b6 c3 3a e9 29 24 12 92 5a 4e 2b b9 b6 0a 7a |7..:.)$..ZN+...z| 36 8c 97 c0 ef 89 7c 33 de 31 e1 a1 97 e4 e7 45 |6.....|3.1.....E| ad 61 52 fd 5a 89 d3 54 7e 8a 4d 5b 89 7b 0e 96 |.aR.Z..T~.M[.{..| 77 d1 f2 3c 38 1b da f9 a5 61 20 65 02 bc c5 ad |w..<8....a e....| d7 0c 62 10 28 2c dd b6 e3 a8 61 00 ac 08 26 a3 |..b.(,....a...&.| 8d 85 d0 64 c9 36 90 1e 8a 52 c9 87 8d 35 a5 5d |...d.6...R...5.]| 48 91 fc 93 a6 a5 65 f1 ec f9 3a dc a5 2c 9e 04 |H.....e...:..,..| 6d 62 33 fe de fa 9f c5 ce af 95 f3 51 a8 f2 ce |mb3.........Q...|
- 2
- #1
- 2
- 04:00:00:00:00:01:31:89:C6:50:04
- RSA-SHA256: nil
- #2
- OU: GlobalSign Root CA - R3
- O: GlobalSign
- CN: GlobalSign
- 2011-08-02 10:00:00 UTC: 2029-03-29 10:00:00 UTC
- Subject
- C: BE
- O: GlobalSign nv-sa
- CN: GlobalSign Timestamping CA - SHA256 - G2
- #5
- rsaEncryption: nil
- AA:9B:8E:C3:AB:11:51:25:01:B6:96:94:E2:4F:D8:C1:
08:F6:46:23:D9:45:C5:95:97:5B:AB:1A:BF:D2:6C:57:
C9:33:06:1F:A0:0F:C6:3C:7E:53:48:7A:BF:9D:87:9E:
AF:EE:C3:8C:47:E1:42:EC:E3:E3:A1:4A:6C:0C:17:C4:
A6:C1:B9:CD:5B:F1:1E:44:89:8E:FE:0B:DE:21:58:13:
EE:4D:C8:C5:67:0B:1C:B2:B3:F1:34:76:91:A2:CB:07:
6D:37:C5:A0:47:26:02:15:A4:90:91:A9:79:9E:D7:EB:
57:9D:2B:7C:22:D8:14:D7:F1:07:1E:78:22:36:6B:77:
79:AF:AF:F9:7F:8E:4E:E1:B5:08:31:FD:EA:ED:4B:71:
62:8C:23:F1:03:39:8F:44:79:B6:76:03:57:9E:AD:2F:
08:46:DC:D2:8C:BC:F4:8E:74:CE:C8:68:69:51:76:11:
8B:0F:5D:24:5B:19:54:3D:26:CC:40:8D:82:27:1B:59:
20:7D:59:F6:93:80:8E:F8:2A:38:FD:6B:A0:40:65:1F:
57:76:CC:5B:8E:04:4F:2C:A8:DB:84:50:13:4F:C6:DC:
8B:B9:F8:DD:69:4C:88:EB:9C:7B:30:26:FC:7A:58:BB:
59:BC:14:72:92:81:57:B7:76:C9:D8:80:0A:80:6E:09: 0x010001
- #6
- keyUsage: true, 6
- basicConstraints
- true
- true: 0
- subjectKeyIdentifier:
92 21 a7 4a 95 5d 64 b0 9b b4 1e e6 00 37 47 e6 |.!.J.]d......7G.| 9d 41 2b 4c |.A+L |
- certificatePolicies
- anyPolicy
- id-qt-cps: https://www.globalsign.com/repository/
- anyPolicy
- crlDistributionPoints: http://crl.globalsign.net/root-r3.crl
- authorityKeyIdentifier:
8f f0 4b 7f a8 2e 45 24 ae 4d 50 fa 63 9a 8b de |..K...E$.MP.c...| e2 dd 1b bc |.... |
- RSA-SHA256:
04 56 82 4a 7c d0 ce c9 bf 36 66 d1 be 35 9e 93 |.V.J|....6f..5..| 6c 97 e8 06 ce 31 18 59 f9 6c 41 5f 80 2e c0 42 |l....1.Y.lA_...B| 25 b8 18 c7 fc d4 b1 37 c4 68 a0 cf 28 6a 03 74 |%......7.h..(j.t| 4b 63 97 85 77 61 3b d7 2f e3 f5 bd 33 a2 92 7d |Kc..wa;./...3..}| 11 1f 9e 8a 6c ef 2c b0 f4 62 8d 36 73 d1 16 36 |....l.,..b.6s..6| f1 bc 5e ec b4 80 98 78 fc d2 76 79 e8 e1 21 94 |..^....x..vy..!.| e0 1f c4 a2 e1 aa 67 db b3 9c 73 e5 40 22 cf 39 |......g...s.@".9| ce db e6 77 95 a7 bb b2 cb f6 19 86 9d 9f c8 d4 |...w............| 98 05 b2 71 6f 4e 75 ae f1 3d 64 6a 3b 5e 4e 46 |...qoNu..=dj;^NF| a6 2a 5d 08 92 f1 a3 f3 1d 74 bf 62 0d 23 8c 5c |.*]......t.b.#.\| 2a 38 95 d2 c0 d5 cd cf 88 da 1f 28 b5 ba 81 69 |*8.........(...i| 64 2a b5 a6 a2 d5 73 af dc 46 db 04 ae 91 d7 6e |d*....s..F.....n| c5 98 ba d4 47 c4 56 74 80 47 78 58 8c be ef 2b |....G.Vt.GxX...+| fd ec 6c bf d1 94 f7 bf 50 e0 7b e0 90 fd 20 18 |..l.....P.{... .| 78 18 22 5d 08 2e 8c 1c a0 97 f3 1d 99 7d a3 9d |x."].........}..| 91 d3 06 44 4e 04 6e 7a 1c 20 e3 36 f0 b6 50 b9 |...DN.nz. .6..P.|
- 2
- Certificate #0
- 1
- unnamed
- #0
- C: BE
- O: GlobalSign nv-sa
- CN: GlobalSign Timestamping CA - SHA256 - G2
- 0C:A7:CF:5D:07:07:24:AC:89:E7:9A:3A
- #0
- SHA256: nil
- #2
- contentType: id-smime-ct-TSTInfo
- signingTime: 2020-06-29 16:29:55 UTC
- messageDigest:
47 17 83 4f 87 eb 5e 62 bc 64 3d f7 9a b9 e1 32 |G..O..^b.d=....2| c7 88 ac 36 40 91 da c8 28 22 f9 6d 13 de 4b e9 |...6@...(".m..K.| - id-smime-aa-signingCertificate
05 7a e7 2a af f6 d6 37 72 b4 9f 6a 23 6f 26 49 |.z.*...7r..j#o&I| cd a9 |.. |
- unnamed
- #0
- C: BE
- O: GlobalSign nv-sa
- CN: GlobalSign Timestamping CA - SHA256 - G2
- 0C:A7:CF:5D:07:07:24:AC:89:E7:9A:3A
- #0
- unnamed
- rsaEncryption:
69 a7 9d 59 f5 c2 5a 6f 4d 1a ad 76 9a 2c fc ad |i..Y..ZoM..v.,..| 74 26 97 e9 35 ce e5 b3 04 dd cd a1 5a f1 58 47 |t&..5.......Z.XG| 80 f0 bb 52 9e 04 ef f0 0d 53 fa 9d a8 3d 5a 64 |...R.....S...=Zd| 7d ed 18 08 1d 8d 11 bf 9f ae db e6 2c 00 59 bf |}...........,.Y.| 13 f4 d3 eb 48 47 ab f7 4c 00 85 0e 49 08 14 49 |....HG..L...I..I| 87 75 3f bf fc c3 38 a9 e6 c8 7d fa b8 ce ba ba |.u?...8...}.....| a5 91 24 89 12 8e 8d b7 7b a7 92 ad 00 a6 5f 80 |..$.....{....._.| 0e c9 9c 88 ff 4a 30 c0 85 48 23 a2 87 34 a0 7c |.....J0..H#..4.|| 9e f2 ce 98 f9 d2 d1 79 78 d8 13 39 9e ba 69 3c |.......yx..9..i<| b2 ce 23 40 ff 5b e4 89 b3 6c 9f ee a1 a0 15 46 |..#@.[...l.....F| 8f de 83 09 fa 0a 8b 27 5b 53 ad 72 0a 64 8f e5 |.......'[S.r.d..| dc 7c 46 b0 71 e6 fa 12 e9 8d d7 64 e1 5a e6 b1 |.|F.q......d.Z..| 6c 2f 0f 49 f2 96 ab b0 c2 f0 4d 0c bc 3b 2c f4 |l/.I......M..;,.| fb 1b 76 de 5a ba 10 20 ba f7 76 84 09 31 20 4c |..v.Z.. ..v..1 L| 7f 33 7d 85 67 87 29 ed 78 79 a6 57 55 d3 78 66 |.3}.g.).xy.WU.xf| 55 b7 79 21 6e d2 9d 1c d6 55 6c a6 24 61 c9 4a |U.y!n....Ul.$a.J|
- unnamed
- 3
- pkcs7-signedData
 |
| Please donate some bucks to keep this site up and running: | |
| Ko-fi | |
|---|---|
| Yandex.Money | |
| Thank you! | |
[?] ignoring invalid PEdump::BITMAPINFOHEADER
[?] can't find file_offset of VA 0x64e388