| filename | Recuva.exe | |
|---|---|---|
| size | 1469248 (0x166b40) | |
| md5 | e26ebbf5b1fe277c8fcafbebb9585ec2 | |
| type | PE32 executable (GUI) Intel 80386, for MS Windows | |
| mimetype | application/x-dosexec | |
| clamav | OK | |
| virustotal | → scan with virustotal.com | |
| histogram | ||
MZ Header
| signature | MZ |
| bytes_in_last_block | 0x90 |
| blocks_in_file | 3 |
| num_relocs | 0 |
| header_paragraphs | 4 |
| min_extra_paragraphs | 0 |
| max_extra_paragraphs | 0xffff |
| ss | 0 |
| sp | 0xb8 |
| checksum | 0 |
| ip | 0 |
| cs | 0 |
| reloc_table_offset | 0x40 |
| overlay_number | 0 |
| reserved0 | 0 |
| oem_id | 0 |
| oem_info | 0 |
| reserved2 | 0 |
| reserved3 | 0 |
| reserved4 | 0 |
| reserved5 | 0 |
| reserved6 | 0 |
| lfanew | 0x110 |
Rich Header
| lib id | version | times used |
|---|---|---|
| 126 | 50327 | 3 |
| 125 | 50727 | 40 |
| 109 | 50727 | 206 |
| 147 | 30729 | 29 |
| 1 | 0 | 340 |
| 110 | 50727 | 111 |
| 126 | 50727 | 113 |
| 131 | 30729 | 119 |
| 114 | 50727 | 310 |
| 124 | 50727 | 1 |
| 0 | 0 | 1 |
| 120 | 50727 | 1 |
DOS stub
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
PE Header
Packer / Compiler
Sections
| name | va | vsize | raw size | flags | |
|---|---|---|---|---|---|
| .text | 0x1000 | 0xf9007 | 0xf9200 | R-X CODE | |
| .rdata | 0xfb000 | 0x38af4 | 0x38c00 | R-- IDATA | |
| .data | 0x134000 | 0x10a0c | 0xda00 | RW- IDATA | |
| .tls | 0x145000 | 2 | 0x200 | RW- IDATA | |
| .rsrc | 0x146000 | 0x254b4 | 0x25600 | R-- IDATA |
Data Directory
TLS
| raw start | raw end | index | callbks | zero fill | flags | |
|---|---|---|---|---|---|---|
| 0x545000 | 0x545001 | 0x541c70 | 0x4fb928 | 0 | 0 |
| id | lang | string |
|---|---|---|
| 100 | 1033 | 1033 |
| 102 | 1033 | Select drive |
| 103 | 1033 | &Scan |
| 104 | 1033 | Find |
| 105 | 1033 | &Options... |
| 106 | 1033 | &Recover... |
| 107 | 1033 | Check for updates... |
| 108 | 1033 | &View mode |
| 109 | 1033 | Show files found in &hidden system directories |
| 110 | 1033 | Show &zero byte files |
| 111 | 1033 | &Restore folder structure |
| 113 | 1033 | For more information please visit: |
| 114 | 1033 | Recover &Highlighted... |
| 115 | 1033 | &Recover Checked... |
| 116 | 1033 | &Check Highlighted |
| 117 | 1033 | &Uncheck Highlighted |
| 118 | 1033 | Highlight &Folder |
| 120 | 1033 | Click here to visit the Recuva website at www.piriform.com/recuva |
| 121 | 1033 | Size: %1 - Status: %2 |
| 122 | 1033 | Options |
| 123 | 1033 | Options |
| 124 | 1033 | About |
| 125 | 1033 | List View |
| 126 | 1033 | Tree View |
| 127 | 1033 | Status bar |
| 129 | 1033 | Path |
| 130 | 1033 | Size |
| 131 | 1033 | Last Modified |
| 132 | 1033 | State |
| 133 | 1033 | Comment |
| 134 | 1033 | Filename |
| 135 | 1033 | Removable Disk |
| 136 | 1033 | Local Disk |
| 137 | 1033 | Current progress: %1%, %2 files found |
| 138 | 1033 | Filename or path |
| 139 | 1033 | Excellent |
| 140 | 1033 | Poor |
| 141 | 1033 | Very poor |
| 142 | 1033 | Unrecoverable |
| 143 | 1033 | This file is overwritten with "%1", %2 first overwritten clusters of %3 are: |
| 144 | 1033 | No overwritten clusters detected. |
| 145 | 1033 | Searching... |
| 146 | 1033 | Do you want to restore to the same drive? (This can reduce the chance of a successful recovery.) |
| 147 | 1033 | Warning |
| 148 | 1033 | NTFS, %1. cluster size: %2. file record size: %3. |
| 149 | 1033 | %1, %2. cluster size: %3. |
| 150 | 1033 | Found %1 files (%2 ignored) in %3 sec. |
| 151 | 1033 | Unknown |
| 152 | 1033 | Current progress: %1%, %2 files recovered |
| 153 | 1033 | Searching for deleted files |
| 154 | 1033 | Recovering files |
| 155 | 1033 | Click here to check for updates to Recuva online |
| 156 | 1033 | Operation completed |
| 157 | 1033 | Operation aborted |
| 158 | 1033 | Recovered %1 files in %2 sec. |
| 159 | 1033 | Select location for recovery |
| 160 | 1033 | This application requires Administrator permissions to run properly, you may continue to use the application but scanning drives will be prohibited. Please contact your network administrator to get Administrator rights added to your account |
| 161 | 1033 | Unable to open drive |
| 162 | 1033 | Unable to read boot sector |
| 163 | 1033 | Unable to determine file system type |
| 164 | 1033 | Invalid data run detected |
| 165 | 1033 | Invalid MFT record detected |
| 166 | 1033 | Unable to read MFT |
| 167 | 1033 | Invalid file record detected |
| 168 | 1033 | Canceled by user |
| 169 | 1033 | Error reading file allocation table |
| 170 | 1033 | Read operation failed |
| 171 | 1033 | Unable to recover encrypted file. |
| 172 | 1033 | Unable to recover a file of zero size. |
| 173 | 1033 | Invalid clusters range |
| 176 | 1033 | File is resident in the MFT |
| 177 | 1033 | Cannot erase completely sparse file data (nothing to erase) |
| 178 | 1033 | Cannot erase zero byte file data (nothing to erase) |
| 179 | 1033 | Cannot perform secure overwriting in Windows 2000 with cluster size greater than 4096 |
| 180 | 1033 | Unable to overwrite non-deleted file |
| 181 | 1033 | Unable to overwrite special file type |
| 182 | 1033 | The device is not ready |
| 201 | 1033 | %1 bytes |
| 202 | 1033 | %1 KB |
| 203 | 1033 | %1 MB |
| 204 | 1033 | %1 GB |
| 210 | 1033 | Cancel |
| 211 | 1033 | &Language: |
| 212 | 1033 | Processing... |
| 213 | 1033 | OK |
| 214 | 1033 | The following files were not recovered (%1 total): |
| 215 | 1033 | Reason |
| 216 | 1033 | Enable &Deep Scan |
| 217 | 1033 | No files were found. Would you like to scan again with Deep Scan enabled? Note this can take over an hour on a large drive. |
| 218 | 1033 | No files were found |
| 220 | 1033 | Preview |
| 221 | 1033 | Info |
| 222 | 1033 | Header |
| 223 | 1033 | Creation time |
| 224 | 1033 | Last modification time |
| 225 | 1033 | Last access time |
| 226 | 1033 | %1 cluster(s) allocated at offset %2 |
| 228 | 1033 | No preview available |
| 229 | 1033 | No file selected |
| 230 | 1033 | This file is overwritten with "%1" |
| 231 | 1033 | %1 file cluster(s) overwritten |
| 240 | 1033 | Unknown folder |
| 241 | 1033 | A new version of Recuva (%1) is available for download. Would you like to visit the website to download it? |
| 242 | 1033 | New version available |
| 243 | 1033 | A&utomatically check for updates to Recuva |
| 244 | 1033 | Click here to visit the Piriform website at Piriform.com |
| 245 | 1033 | Overwrite files |
| 246 | 1033 | Current progress: %1%, %2 files overwritten |
| 247 | 1033 | Overwritten %1 files in %2 sec. |
| 248 | 1033 | The following files were not overwritten (%1 total): |
| 249 | 1033 | Wiping free space |
| 250 | 1033 | Current progress: %1%, %2 clusters wiped |
| 251 | 1033 | Secure Overwrite Highlighted |
| 252 | 1033 | Secure Overwrite Checked |
| 253 | 1033 | The following directories were not wiped (%1 total): |
| 254 | 1033 | Overwritten |
| 255 | 1033 | Not overwritten |
| 256 | 1033 | Status |
| 260 | 1033 | Save all settings to &INI file |
| 262 | 1033 | Simple Overwrite (1 pass) |
| 263 | 1033 | DOD 5220.22-M (3 passes) |
| 264 | 1033 | NSA (7 passes) |
| 265 | 1033 | Gutmann (35 passes) |
| 270 | 1033 | Secure overwrite |
| 271 | 1033 | Are you sure you want to overwrite these %1 file(s)? Clicking Yes will mean they are gone forever. |
| 272 | 1033 | Wipe MFT |
| 273 | 1033 | Secure &overwriting |
| 280 | 1033 | Advanced |
| 281 | 1033 | Show &securely overwritten files |
| 282 | 1033 | (All drives) |
| 283 | 1033 | Pictures |
| 284 | 1033 | Music |
| 285 | 1033 | Documents |
| 286 | 1033 | Video |
| 290 | 1033 | Stage %1 of %2 |
| 291 | 1033 | Scanning drive for deleted files |
| 292 | 1033 | Analyzing file contents |
| 293 | 1033 | Scan |
| 294 | 1033 | Current progress %1%, analyzing %2 of %3 files |
| 295 | 1033 | Current progress: %1% |
| 296 | 1033 | Found %1 files in %2 sec. |
| 297 | 1033 | Scanning %1 of %2 drives |
| 298 | 1033 | No files were found, would you like to start the wizard again? |
| 299 | 1033 | &Start |
| 300 | 1033 | Recuva Wizard |
| 301 | 1033 | Welcome to the Recuva Wizard |
| 302 | 1033 | This wizard will help you recover your deleted files. Just answer a few simple questions and Recuva does the rest. |
| 303 | 1033 | If you don't want to use this wizard, simply press Cancel and you will have access to the advanced features of Recuva. |
| 304 | 1033 | &Do not show this Wizard on startup. |
| 305 | 1033 | File type |
| 306 | 1033 | What sort of files are you trying to recover? |
| 307 | 1033 | &Pictures |
| 308 | 1033 | Show only files of common image formats, such as digital camera photos. |
| 309 | 1033 | &Music |
| 310 | 1033 | Show only files of common audio formats, like MP3 player files. |
| 311 | 1033 | &Documents |
| 312 | 1033 | Show only files of common office document formats, such as Word and Excel files. |
| 313 | 1033 | &Video |
| 314 | 1033 | Show only video files, like digital camera recordings. |
| 315 | 1033 | &Other |
| 316 | 1033 | Show all files. |
| 317 | 1033 | File location |
| 318 | 1033 | Where were the files? |
| 319 | 1033 | On my &media card or iPod |
| 320 | 1033 | Search any removable drives (except CDs and floppies) for deleted files. |
| 321 | 1033 | In My &Documents |
| 322 | 1033 | Search user documents folders. |
| 323 | 1033 | In the Recycle &Bin |
| 324 | 1033 | Search for files deleted from the Recycle Bin. |
| 325 | 1033 | In a &specific location |
| 326 | 1033 | B&rowse... |
| 327 | 1033 | &I'm not sure |
| 328 | 1033 | Search everywhere on this computer. |
| 329 | 1033 | Thank you, Recuva is now ready to search for your files |
| 330 | 1033 | After the search is complete you will see a list of the files Recuva has found. Simply check the files you would like to recover and click the Recover button. |
| 331 | 1033 | Click Start to begin the search. |
| 332 | 1033 | No media cards or iPods were detected, please insert a card and press Retry. |
| 333 | 1033 | Select location |
| 334 | 1033 | Select the files you want to Recover by ticking the boxes and then pressing Recover. For the best results, restore the files to a different drive. |
| 335 | 1033 | Switch to advanced mode |
| 336 | 1033 | Thumbnails View |
| 337 | 1033 | Show &Wizard at startup |
| 338 | 1033 | Check this box if previous scans have failed to find your files. Note that this may take over an hour on a large drive. |
| 340 | 1033 | &Deep Scan (increases scan time) |
| 341 | 1033 | Compressed |
| 342 | 1033 | S&can for non-deleted files (for recovery from damaged or reformatted disks) |
| 350 | 1033 | Information about Recuva can be found at |
| 351 | 1033 | Information about other Piriform products can be found at |
| 355 | 1033 | General |
| 356 | 1033 | Actions |
| 357 | 1033 | Interface |
| 358 | 1033 | Scanning |
| 359 | 1033 | Recovering |
| 360 | 1033 | Version |
| 361 | 1033 | &Run Wizard... |
| 362 | 1033 | Failed to scan the following drives: |
| 363 | 1033 | Not deleted |
| 364 | 1033 | < &Back |
| 365 | 1033 | &Next > |
| 370 | 1033 | Estimated time left: %1 |
| 371 | 1033 | %1 second |
| 372 | 1033 | %1 seconds |
| 373 | 1033 | %1 minute |
| 374 | 1033 | %1 minutes |
| 375 | 1033 | %1 hour |
| 376 | 1033 | %1 hours |
| 377 | 1033 | %1 day |
| 378 | 1033 | %1 days |
| 379 | 1033 | Calculating time left... |
| 380 | 1033 | View mode |
| 381 | 1033 | Emails |
| 382 | 1033 | &Emails |
| 383 | 1033 | Show only emails from Thunderbird, Outlook Express and Windows Mail. |
| 384 | 1033 | English version translated by Piriform. |
| 385 | 1033 | Incomplete results. |
| 386 | 1033 | &Compressed |
| 387 | 1033 | Show only compressed files. |
| 388 | 1033 | Copy Image to Clipboard |
| 389 | 1033 | Online Help |
| 390 | 1033 | Recuva Online Help |
| 391 | 1033 | The path does not exist |
| 392 | 1033 | Scan Contents... |
| 393 | 1033 | Search String: |
| 394 | 1033 | File Mask: |
| 395 | 1033 | Search file contents |
| 396 | 1033 | Searching file contents for matching string |
| 397 | 1033 | Scan Files |
| 398 | 1033 | Select file mask |
| 399 | 1033 | Maximum path length exceeded |
| 400 | 1033 | Error |
| 401 | 1033 | File Contents |
| 402 | 1033 | Save List to Text File... |
| module_name | hint | ord | function_name |
|---|---|---|---|
| WININET.dll | 107 | InternetCloseHandle | |
| WININET.dll | 159 | InternetReadFile | |
| WININET.dll | 153 | InternetOpenUrlW | |
| WININET.dll | 154 | InternetOpenW | |
| KERNEL32.dll | 1110 | SetEnvironmentVariableA | |
| KERNEL32.dll | 136 | CreateFileA | |
| KERNEL32.dll | 432 | GetConsoleOutputCP | |
| KERNEL32.dll | 1306 | WriteConsoleA | |
| KERNEL32.dll | 343 | FlushFileBuffers | |
| KERNEL32.dll | 1159 | SetStdHandle | |
| KERNEL32.dll | 428 | GetConsoleMode | |
| KERNEL32.dll | 410 | GetConsoleCP | |
| KERNEL32.dll | 780 | IsValidLocale | |
| KERNEL32.dll | 269 | EnumSystemLocalesA | |
| KERNEL32.dll | 667 | GetUserDefaultLCID | |
| KERNEL32.dll | 614 | GetStringTypeA | |
| KERNEL32.dll | 935 | QueryPerformanceCounter | |
| KERNEL32.dll | 610 | GetStartupInfoA | |
| KERNEL32.dll | 499 | GetFileType | |
| KERNEL32.dll | 1135 | SetHandleCount | |
| KERNEL32.dll | 390 | GetCommandLineA | |
| KERNEL32.dll | 472 | GetEnvironmentStrings | |
| KERNEL32.dll | 352 | FreeEnvironmentStringsA | |
| KERNEL32.dll | 567 | GetOEMCP | |
| KERNEL32.dll | 531 | GetModuleFileNameA | |
| KERNEL32.dll | 612 | GetStdHandle | |
| KERNEL32.dll | 811 | LCMapStringA | |
| KERNEL32.dll | 1048 | RtlUnwind | |
| KERNEL32.dll | 664 | GetTimeZoneInformation | |
| KERNEL32.dll | 454 | GetDateFormatA | |
| KERNEL32.dll | 661 | GetTimeFormatA | |
| KERNEL32.dll | 717 | HeapCreate | |
| KERNEL32.dll | 768 | IsDebuggerPresent | |
| KERNEL32.dll | 1235 | UnhandledExceptionFilter | |
| KERNEL32.dll | 1216 | TerminateProcess | |
| KERNEL32.dll | 191 | CreateWaitableTimerA | |
| KERNEL32.dll | 1196 | SetWaitableTimer | |
| KERNEL32.dll | 1202 | Sleep | |
| KERNEL32.dll | 652 | GetThreadLocale | |
| KERNEL32.dll | 360 | GetACP | |
| KERNEL32.dll | 772 | IsProcessorFeaturePresent | |
| KERNEL32.dll | 349 | FormatMessageA | |
| KERNEL32.dll | 722 | HeapReAlloc | |
| KERNEL32.dll | 718 | HeapDestroy | |
| KERNEL32.dll | 281 | ExitProcess | |
| KERNEL32.dll | 1272 | WaitForMultipleObjectsEx | |
| KERNEL32.dll | 291 | FileTimeToDosDateTime | |
| KERNEL32.dll | 838 | LocalFileTimeToFileTime | |
| KERNEL32.dll | 228 | DosDateTimeToFileTime | |
| KERNEL32.dll | 960 | ReadFile | |
| KERNEL32.dll | 1112 | SetErrorMode | |
| KERNEL32.dll | 199 | DebugBreak | |
| KERNEL32.dll | 1130 | SetFileTime | |
| KERNEL32.dll | 221 | DeviceIoControl | |
| KERNEL32.dll | 1107 | SetEndOfFile | |
| KERNEL32.dll | 1126 | SetFilePointer | |
| KERNEL32.dll | 496 | GetFileSize | |
| KERNEL32.dll | 943 | QueueUserAPC | |
| KERNEL32.dll | 282 | ExitThread | |
| KERNEL32.dll | 1205 | SleepEx | |
| KERNEL32.dll | 1260 | VirtualFree | |
| KERNEL32.dll | 1257 | VirtualAlloc | |
| KERNEL32.dll | 745 | InterlockedCompareExchange | |
| KERNEL32.dll | 292 | FileTimeToLocalFileTime | |
| KERNEL32.dll | 1043 | ResumeThread | |
| KERNEL32.dll | 181 | CreateThread | |
| KERNEL32.dll | 884 | OpenEventA | |
| KERNEL32.dll | 449 | GetCurrentProcessId | |
| KERNEL32.dll | 631 | GetSystemTime | |
| KERNEL32.dll | 1189 | SetUnhandledExceptionFilter | |
| KERNEL32.dll | 516 | GetLocaleInfoA | |
| KERNEL32.dll | 1223 | TlsGetValue | |
| KERNEL32.dll | 1224 | TlsSetValue | |
| KERNEL32.dll | 703 | GlobalMemoryStatus | |
| KERNEL32.dll | 627 | GetSystemInfo | |
| KERNEL32.dll | 675 | GetVersionExA | |
| KERNEL32.dll | 840 | LocalFree | |
| KERNEL32.dll | 1222 | TlsFree | |
| KERNEL32.dll | 1221 | TlsAlloc | |
| KERNEL32.dll | 21 | AreFileApisANSI | |
| KERNEL32.dll | 836 | LocalAlloc | |
| KERNEL32.dll | 1201 | SizeofResource | |
| KERNEL32.dll | 533 | GetModuleHandleA | |
| KERNEL32.dll | 97 | CompareStringA | |
| KERNEL32.dll | 828 | LoadLibraryA | |
| KERNEL32.dll | 1263 | VirtualProtect | |
| KERNEL32.dll | 293 | FileTimeToSystemTime | |
| KERNEL32.dll | 852 | LockResource | |
| KERNEL32.dll | 833 | LoadResource | |
| KERNEL32.dll | 1213 | SystemTimeToFileTime | |
| KERNEL32.dll | 1357 | lstrlenA | |
| KERNEL32.dll | 96 | CompareFileTime | |
| KERNEL32.dll | 1039 | ResetEvent | |
| KERNEL32.dll | 1271 | WaitForMultipleObjects | |
| KERNEL32.dll | 659 | GetTickCount | |
| KERNEL32.dll | 1273 | WaitForSingleObject | |
| KERNEL32.dll | 633 | GetSystemTimeAsFileTime | |
| KERNEL32.dll | 748 | InterlockedExchange | |
| KERNEL32.dll | 709 | GlobalUnlock | |
| KERNEL32.dll | 698 | GlobalFree | |
| KERNEL32.dll | 691 | GlobalAlloc | |
| KERNEL32.dll | 302 | FindClose | |
| KERNEL32.dll | 705 | GlobalReAlloc | |
| KERNEL32.dll | 702 | GlobalLock | |
| KERNEL32.dll | 1317 | WriteFile | |
| KERNEL32.dll | 870 | MulDiv | |
| KERNEL32.dll | 521 | GetLogicalDrives | |
| KERNEL32.dll | 719 | HeapFree | |
| KERNEL32.dll | 715 | HeapAlloc | |
| KERNEL32.dll | 130 | CreateEventA | |
| KERNEL32.dll | 1113 | SetEvent | |
| KERNEL32.dll | 354 | FreeLibrary | |
| KERNEL32.dll | 1345 | lstrcmpA | |
| KERNEL32.dll | 515 | GetLocalTime | |
| KERNEL32.dll | 586 | GetProcessHeap | |
| KERNEL32.dll | 448 | GetCurrentProcess | |
| KERNEL32.dll | 82 | CloseHandle | |
| KERNEL32.dll | 945 | RaiseException | |
| KERNEL32.dll | 391 | GetCommandLineW | |
| KERNEL32.dll | 344 | FlushInstructionCache | |
| KERNEL32.dll | 747 | InterlockedDecrement | |
| KERNEL32.dll | 751 | InterlockedIncrement | |
| KERNEL32.dll | 453 | GetCurrentThreadId | |
| KERNEL32.dll | 209 | DeleteCriticalSection | |
| KERNEL32.dll | 514 | GetLastError | |
| KERNEL32.dll | 738 | InitializeCriticalSection | |
| KERNEL32.dll | 1139 | SetLastError | |
| KERNEL32.dll | 825 | LeaveCriticalSection | |
| KERNEL32.dll | 238 | EnterCriticalSection | |
| KERNEL32.dll | 724 | HeapSize | |
| USER32.dll | 163 | DestroyIcon | |
| USER32.dll | 242 | EnumWindows | |
| USER32.dll | 764 | TranslateMessage | |
| USER32.dll | 166 | DestroyWindow | |
| USER32.dll | 773 | UnregisterClassA | |
| USER32.dll | 200 | DrawIconEx | |
| USER32.dll | 162 | DestroyCursor | |
| USER32.dll | 689 | SetScrollPos | |
| USER32.dll | 161 | DestroyCaret | |
| USER32.dll | 642 | SetCaretPos | |
| USER32.dll | 89 | CreateCaret | |
| USER32.dll | 73 | CloseClipboard | |
| USER32.dll | 646 | SetClipboardData | |
| USER32.dll | 425 | HideCaret | |
| USER32.dll | 729 | ShowCaret | |
| USER32.dll | 213 | EmptyClipboard | |
| USER32.dll | 84 | CopyImage | |
| USER32.dll | 44 | CharLowerBuffA | |
| USER32.dll | 550 | OpenClipboard | |
| USER32.dll | 373 | GetScrollInfo | |
| USER32.dll | 690 | SetScrollRange | |
| USER32.dll | 189 | DragDetect | |
| USER32.dll | 317 | GetKeyState | |
| USER32.dll | 64 | CheckMenuRadioItem | |
| USER32.dll | 107 | CreatePopupMenu | |
| USER32.dll | 158 | DeleteMenu | |
| USER32.dll | 214 | EnableMenuItem | |
| USER32.dll | 338 | GetMenuItemID | |
| USER32.dll | 337 | GetMenuItemCount | |
| USER32.dll | 742 | SubtractRect | |
| USER32.dll | 671 | SetMenuInfo | |
| USER32.dll | 336 | GetMenuInfo | |
| USER32.dll | 516 | MapDialogRect | |
| USER32.dll | 462 | IsDlgButtonChecked | |
| USER32.dll | 539 | MoveWindow | |
| USER32.dll | 513 | LookupIconIdFromDirectoryEx | |
| USER32.dll | 102 | CreateIconFromResourceEx | |
| USER32.dll | 378 | GetSubMenu | |
| USER32.dll | 757 | TrackMouseEvent | |
| USER32.dll | 758 | TrackPopupMenu | |
| USER32.dll | 466 | IsMenu | |
| USER32.dll | 198 | DrawFrameControl | |
| USER32.dll | 536 | MonitorFromPoint | |
| USER32.dll | 540 | MsgWaitForMultipleObjects | |
| USER32.dll | 85 | CopyRect | |
| USER32.dll | 549 | OffsetRect | |
| USER32.dll | 288 | GetCursorPos | |
| USER32.dll | 709 | SetWindowPlacement | |
| USER32.dll | 411 | GetWindowPlacement | |
| USER32.dll | 567 | PostQuitMessage | |
| USER32.dll | 812 | WindowFromPoint | |
| USER32.dll | 398 | GetWindow | |
| USER32.dll | 648 | SetCursor | |
| USER32.dll | 295 | GetDlgItem | |
| USER32.dll | 586 | RedrawWindow | |
| USER32.dll | 256 | GetActiveWindow | |
| USER32.dll | 480 | IsWindowVisible | |
| USER32.dll | 687 | SetRectEmpty | |
| USER32.dll | 218 | EndDialog | |
| USER32.dll | 525 | MessageBeep | |
| USER32.dll | 223 | EnumChildWindows | |
| USER32.dll | 164 | DestroyMenu | |
| USER32.dll | 521 | MapWindowPoints | |
| USER32.dll | 621 | ScreenToClient | |
| USER32.dll | 347 | GetMessagePos | |
| USER32.dll | 613 | ReleaseDC | |
| USER32.dll | 289 | GetDC | |
| USER32.dll | 402 | GetWindowDC | |
| USER32.dll | 246 | FillRect | |
| USER32.dll | 612 | ReleaseCapture | |
| USER32.dll | 3 | AdjustWindowRectEx | |
| USER32.dll | 276 | GetClientRect | |
| USER32.dll | 14 | BeginPaint | |
| USER32.dll | 71 | ClientToScreen | |
| USER32.dll | 331 | GetMenu | |
| USER32.dll | 284 | GetComboBoxInfo | |
| USER32.dll | 220 | EndPaint | |
| USER32.dll | 412 | GetWindowRect | |
| USER32.dll | 356 | GetParent | |
| USER32.dll | 710 | SetWindowPos | |
| USER32.dll | 294 | GetDlgCtrlID | |
| USER32.dll | 476 | IsWindowEnabled | |
| USER32.dll | 195 | DrawEdge | |
| USER32.dll | 735 | ShowWindow | |
| USER32.dll | 379 | GetSysColor | |
| USER32.dll | 437 | InflateRect | |
| USER32.dll | 483 | KillTimer | |
| USER32.dll | 382 | GetSystemMetrics | |
| USER32.dll | 380 | GetSysColorBrush | |
| USER32.dll | 446 | InvalidateRect | |
| USER32.dll | 196 | DrawFocusRect | |
| USER32.dll | 300 | GetFocus | |
| USER32.dll | 658 | SetFocus | |
| USER32.dll | 785 | UpdateWindow | |
| USER32.dll | 475 | IsWindow | |
| USER32.dll | 640 | SetCapture | |
| USER32.dll | 264 | GetCapture | |
| USER32.dll | 686 | SetRect | |
| USER32.dll | 699 | SetTimer | |
| USER32.dll | 576 | PtInRect | |
| GDI32.dll | 599 | Polyline | |
| GDI32.dll | 457 | GetDIBColorTable | |
| GDI32.dll | 691 | StretchBlt | |
| GDI32.dll | 598 | Polygon | |
| GDI32.dll | 74 | CreatePatternBrush | |
| GDI32.dll | 41 | CreateBitmap | |
| GDI32.dll | 582 | PatBlt | |
| GDI32.dll | 19 | BitBlt | |
| GDI32.dll | 638 | SetBkColor | |
| GDI32.dll | 48 | CreateCompatibleDC | |
| GDI32.dll | 47 | CreateCompatibleBitmap | |
| GDI32.dll | 681 | SetViewportOrgEx | |
| GDI32.dll | 75 | CreatePen | |
| GDI32.dll | 525 | GetStockObject | |
| GDI32.dll | 566 | LineTo | |
| GDI32.dll | 570 | MoveToEx | |
| GDI32.dll | 678 | SetTextColor | |
| GDI32.dll | 639 | SetBkMode | |
| GDI32.dll | 631 | SelectObject | |
| GDI32.dll | 230 | DeleteObject | |
| GDI32.dll | 227 | DeleteDC | |
| GDI32.dll | 448 | GetClipBox | |
| GDI32.dll | 305 | ExcludeClipRect | |
| GDI32.dll | 34 | CombineRgn | |
| GDI32.dll | 80 | CreateRectRgnIndirect | |
| GDI32.dll | 696 | TextOutA | |
| GDI32.dll | 624 | SaveDC | |
| GDI32.dll | 617 | RestoreDC | |
| GDI32.dll | 648 | SetDIBits | |
| GDI32.dll | 54 | CreateDIBitmap | |
| GDI32.dll | 674 | SetStretchBltMode | |
| GDI32.dll | 53 | CreateDIBSection | |
| GDI32.dll | 459 | GetDeviceCaps | |
| ADVAPI32.dll | 560 | RegCloseKey | |
| ADVAPI32.dll | 288 | FreeSid | |
| ADVAPI32.dll | 32 | AllocateAndInitializeSid | |
| SHELL32.dll | 225 | SHGetSpecialFolderPathW | |
| SHELL32.dll | 25 | ||
| SHELL32.dll | 182 | SHGetDesktopFolder | |
| SHELL32.dll | 6 | CommandLineToArgvW | |
| SHELL32.dll | 223 | SHGetSpecialFolderLocation | |
| ole32.dll | 103 | CoTaskMemAlloc | |
| ole32.dll | 63 | CoInitializeEx | |
| ole32.dll | 373 | StgOpenStorageOnILockBytes | |
| ole32.dll | 143 | FreePropVariantArray | |
| ole32.dll | 6 | CLSIDFromProgID | |
| ole32.dll | 62 | CoInitialize | |
| ole32.dll | 105 | CoTaskMemRealloc | |
| ole32.dll | 16 | CoCreateInstance | |
| ole32.dll | 108 | CoUninitialize | |
| ole32.dll | 104 | CoTaskMemFree | |
| OLEAUT32.dll | 112 | ||
| OLEAUT32.dll | 2 | ||
| OLEAUT32.dll | 4 | ||
| OLEAUT32.dll | 277 | ||
| OLEAUT32.dll | 6 | ||
| OLEAUT32.dll | 161 | ||
| OLEAUT32.dll | 7 | ||
| OLEAUT32.dll | 162 | ||
| SHLWAPI.dll | 50 | PathAddExtensionW | |
| SHLWAPI.dll | 137 | PathRemoveExtensionW | |
| SHLWAPI.dll | 149 | PathStripPathW | |
| SHLWAPI.dll | 71 | PathFindExtensionW | |
| SHLWAPI.dll | 139 | PathRemoveFileSpecW | |
| SHLWAPI.dll | 69 | PathFileExistsW | |
| SHLWAPI.dll | 52 | PathAppendW | |
| SHLWAPI.dll | 58 | PathCombineW | |
| SHLWAPI.dll | 72 | PathFindFileNameA | |
| SHLWAPI.dll | 151 | PathStripToRootW | |
| SHLWAPI.dll | 48 | PathAddBackslashW | |
| SHLWAPI.dll | 299 | StrFormatByteSizeW | |
| COMCTL32.dll | 146 | _TrackMouseEvent | |
| COMCTL32.dll | 84 | ImageList_Destroy | |
| COMCTL32.dll | 99 | ImageList_GetIconSize | |
| COMCTL32.dll | 83 | ImageList_Create | |
| COMCTL32.dll | 90 | ImageList_Draw | |
| COMCTL32.dll | 133 | PropertySheetW | |
| COMCTL32.dll | 49 | DestroyPropertySheetPage | |
| COMCTL32.dll | 9 | CreatePropertySheetPageW | |
| COMCTL32.dll | 77 | ImageList_Add | |
| COMCTL32.dll | 98 | ImageList_GetIcon | |
| COMCTL32.dll | 105 | ImageList_LoadImageW | |
| COMCTL32.dll | 111 | ImageList_ReplaceIcon | |
| COMCTL32.dll | 123 | InitCommonControlsEx | |
| MSIMG32.dll | AlphaBlend | ||
| MSIMG32.dll | 3 | TransparentBlt | |
| CRYPT32.dll | 182 | CryptMsgGetParam | |
| CRYPT32.dll | 191 | CryptQueryObject | |
| CRYPT32.dll | 64 | CertFreeCertificateContext | |
| CRYPT32.dll | 75 | CertGetNameStringW | |
| CRYPT32.dll | 53 | CertFindCertificateInStore | |
| CRYPT32.dll | 130 | CryptDecodeObject | |
| CRYPT32.dll | 175 | CryptMsgClose | |
| CRYPT32.dll | 18 | CertCloseStore | |
| WINTRUST.dll | 115 | WinVerifyTrust | |
| WS2_32.dll | 115 | ||
| WS2_32.dll | 116 |
StringTable 040904b0
| CompanyName | Piriform Ltd |
| FileDescription | Recuva |
| FileVersion | 1, 42, 0, 544 |
| InternalName | Recuva |
| LegalCopyright | Copyright 2006-2011 Piriform Ltd |
| OriginalFilename | Recuva.exe |
| ProductName | Recuva |
| ProductVersion | 1, 42, 0, 544 |
VS_FIXEDFILEINFO
| FileVersion | 1.42.0.544 |
| ProductVersion | 1.42.0.544 |
| StrucVersion | 0x10000 |
| FileFlagsMask | 0x3f |
| FileFlags | 0 |
| FileOS | 4 |
| FileType | 1 |
| FileSubtype | 0 |
Signers (1)
issuer: /C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https:\/\/www.verisign.com\/rpa (c)10/CN=VeriSign Class 3 Code Signing 2010 CA
serial: 741D340793306ACA84FAB3ABBB1567CE
Certificates (4)
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Signature Algorithm: sha1WithRSAEncryption
Issuer: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA
Validity
Not Before: Jun 15 00:00:00 2007 GMT
Not After : Jun 14 23:59:59 2012 GMT
Subject: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer - G2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (1024 bit)
Modulus:
00:c4:b5:f2:52:15:bc:88:86:60:29:16:4a:5b:2f:
4b:91:6b:87:91:f3:35:54:58:35:ea:d1:36:5e:62:
4d:52:51:34:71:c2:7b:66:1d:89:c8:dd:2a:c4:6a:
0a:f6:37:d9:98:74:91:f6:92:ae:b0:b5:76:96:f1:
a9:4a:63:45:47:2e:6b:0b:92:4e:4b:2b:8c:ee:58:
4a:8b:d4:07:e4:1a:2c:f8:82:aa:58:d9:cd:42:f3:
2d:c0:75:de:8d:ab:c7:8e:1d:9a:6c:4c:08:95:1e:
de:db:ef:67:e1:72:c2:49:c2:9e:60:3c:e1:e2:be:
16:a3:63:78:69:14:7b:ad:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
Authority Information Access:
OCSP - URI:http://ocsp.verisign.com
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 CRL Distribution Points:
Full Name:
URI:http://crl.verisign.com/tss-ca.crl
X509v3 Extended Key Usage: critical
Time Stamping
X509v3 Key Usage: critical
Digital Signature, Non Repudiation
X509v3 Subject Alternative Name:
DirName:/CN=TSA1-2
Signature Algorithm: sha1WithRSAEncryption
Signature Value:
50:c5:4b:c8:24:80:df:e4:0d:24:c2:de:1a:b1:a1:02:a1:a6:
82:2d:0c:83:15:81:37:0a:82:0e:2c:b0:5a:17:61:b5:d8:05:
fe:88:db:f1:91:91:b3:56:1a:40:a6:eb:92:be:38:39:b0:75:
36:74:3a:98:4f:e4:37:ba:99:89:ca:95:42:1d:b0:b9:c7:a0:
8d:57:e0:fa:d5:64:04:42:35:4e:01:d1:33:a2:17:c8:4d:aa:
27:c7:f2:e1:86:4c:02:38:4d:83:78:c6:fc:53:e0:eb:e0:06:
87:dd:a4:96:9e:5e:0c:98:e2:a5:be:bf:82:85:c3:60:e1:df:
ad:28:d8:c7:a5:4b:64:da:c7:1b:5b:bd:ac:39:08:d5:38:22:
a1:33:8b:2f:8a:9a:eb:bc:07:21:3f:44:41:09:07:b5:65:1c:
24:bc:48:d3:44:80:eb:a1:cf:c9:02:b4:14:cf:54:c7:16:a3:
80:5c:f9:79:3e:5d:72:7d:88:17:9e:2c:43:a2:ca:53:ce:7d:
3d:f6:2a:3a:b8:4f:94:00:a5:6d:0a:83:5d:f9:5e:53:f4:18:
b3:57:0f:70:c3:fb:f5:ad:95:a0:0e:17:de:c4:16:80:60:c9:
0f:2b:6e:86:04:f1:eb:f4:78:27:d1:05:c5:ee:34:5b:5e:b9:
49:32:f2:33
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Signature Algorithm: sha1WithRSAEncryption
Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
Validity
Not Before: Dec 4 00:00:00 2003 GMT
Not After : Dec 3 23:59:59 2013 GMT
Subject: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:a9:ca:b2:a4:cc:cd:20:af:0a:7d:89:ac:87:75:
f0:b4:4e:f1:df:c1:0f:bf:67:61:bd:a3:64:1c:da:
bb:f9:ca:33:ab:84:30:89:58:7e:8c:db:6b:dd:36:
9e:0f:bf:d1:ec:78:f2:77:a6:7e:6f:3c:bf:93:af:
0d:ba:68:f4:6c:94:ca:bd:52:2d:ab:48:3d:f5:b6:
d5:5d:5f:1b:02:9f:fa:2f:6b:1e:a4:f7:a3:9a:a6:
1a:c8:02:e1:7f:4c:52:e3:0e:60:ec:40:1c:7e:b9:
0d:de:3f:c7:b4:df:87:bd:5f:7a:6a:31:2e:03:99:
81:13:a8:47:20:ce:31:73:0d:57:2d:cd:78:34:33:
95:12:99:12:b9:de:68:2f:aa:e6:e3:c2:8a:8c:2a:
c3:8b:21:87:66:bd:83:58:57:6f:75:bf:3c:aa:26:
87:5d:ca:10:15:3c:9f:84:ea:54:c1:0a:6e:c4:fe:
c5:4a:dd:b9:07:11:97:22:7c:db:3e:27:d1:1e:78:
ec:9f:31:c9:f1:e6:22:19:db:c4:b3:47:43:9a:1a:
5f:a0:1e:90:e4:5e:f5:ee:7c:f1:7d:ab:62:01:8f:
f5:4d:0b:de:d0:22:56:a8:95:cd:ae:88:76:ae:ee:
ba:0d:f3:e4:4d:d9:a0:fb:68:a0:ae:14:3b:b3:87:
c1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
Authority Information Access:
OCSP - URI:http://ocsp.verisign.com
X509v3 Basic Constraints: critical
CA:TRUE, pathlen:0
X509v3 CRL Distribution Points:
Full Name:
URI:http://crl.verisign.com/ThawteTimestampingCA.crl
X509v3 Extended Key Usage:
Time Stamping
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Subject Alternative Name:
DirName:/CN=TSA2048-1-53
Signature Algorithm: sha1WithRSAEncryption
Signature Value:
4a:6b:f9:ea:58:c2:44:1c:31:89:79:99:2b:96:bf:82:ac:01:
d6:1c:4c:cd:b0:8a:58:6e:df:08:29:a3:5e:c8:ca:93:13:e7:
04:52:0d:ef:47:27:2f:00:38:b0:e4:c9:93:4e:9a:d4:22:62:
15:f7:3f:37:21:4f:70:31:80:f1:8b:38:87:b3:e8:e8:97:00:
fe:cf:55:96:4e:24:d2:a9:27:4e:7a:ae:b7:61:41:f3:2a:ce:
e7:c9:d9:5e:dd:bb:2b:85:3e:b5:9d:b5:d9:e1:57:ff:be:b4:
c5:7e:f5:cf:0c:9e:f0:97:fe:2b:d3:3b:52:1b:1b:38:27:f7:
3f:4a
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:1d:34:07:93:30:6a:ca:84:fa:b3:ab:bb:15:67:ce
Signature Algorithm: sha1WithRSAEncryption
Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https:\/\/www.verisign.com\/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA
Validity
Not Before: Jul 6 00:00:00 2011 GMT
Not After : Aug 22 23:59:59 2013 GMT
Subject: C=GB, ST=London, L=London, O=Piriform Ltd, OU=Digital ID Class 3 - Microsoft Software Validation v2, CN=Piriform Ltd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:ca:43:68:52:51:19:f1:0a:e7:79:76:9f:f5:50:
6b:fa:df:6f:bf:c3:02:d9:05:e4:c5:fd:d0:2d:34:
7a:04:d5:c2:d8:4d:37:45:a2:72:a7:f4:52:9f:96:
65:a7:d3:89:7e:e4:25:7c:66:d3:2f:07:90:7d:f4:
f8:de:47:af:ee:ed:b5:99:99:11:8b:8d:74:7f:d2:
ca:df:6e:59:7c:cd:b3:2b:4b:c1:86:a5:fc:9a:31:
85:8d:c1:ff:95:08:03:92:1d:ad:d9:21:e0:49:69:
0b:93:65:2f:f5:80:11:46:b5:30:b9:ec:68:d5:4a:
68:11:03:52:6d:6d:71:06:97:47:19:25:74:4e:3b:
ec:f2:a5:5c:7e:ad:8a:b5:d1:9d:19:93:10:41:cb:
db:2e:88:70:03:18:db:65:8b:99:29:1d:5e:09:48:
9f:2d:7a:0e:c6:fc:56:88:b3:c2:d8:05:b8:e5:5c:
bb:f9:9c:72:94:d0:00:03:25:60:1c:90:00:54:ca:
24:a5:87:f5:78:fd:a1:c6:dc:c3:fa:ef:90:29:68:
ac:67:e0:39:b9:67:b9:b2:25:af:4c:66:e1:5c:e7:
1f:b1:fb:bd:af:db:d3:77:bf:2e:21:ce:f5:66:46:
5b:cf:fe:f3:4c:44:ea:48:51:65:26:6a:bd:99:85:
e1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints:
CA:FALSE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:http://csc3-2010-crl.verisign.com/CSC3-2010.crl
X509v3 Certificate Policies:
Policy: 2.16.840.1.113733.1.7.23.3
CPS: https://www.verisign.com/rpa
X509v3 Extended Key Usage:
Code Signing
Authority Information Access:
OCSP - URI:http://ocsp.verisign.com
CA Issuers - URI:http://csc3-2010-aia.verisign.com/CSC3-2010.cer
X509v3 Authority Key Identifier:
CF:99:A9:EA:7B:26:F4:4B:C9:8E:8F:D7:F0:05:26:EF:E3:D2:A7:9D
Netscape Cert Type:
Object Signing
1.3.6.1.4.1.311.2.1.27:
0.......
Signature Algorithm: sha1WithRSAEncryption
Signature Value:
c2:7c:65:46:69:02:3e:27:9f:df:2b:e8:71:55:f4:21:b3:66:
de:44:39:04:5d:8c:c1:2c:fd:b3:99:02:ca:d0:a1:c5:9b:29:
69:42:7a:93:ff:6c:de:8a:92:06:cf:ce:c5:39:dd:ce:c9:ed:
51:af:43:f4:ae:25:45:58:48:98:1e:e4:89:ec:82:c7:7f:7c:
35:de:d3:17:07:59:a7:51:9c:40:03:8b:8d:a6:e9:b2:8f:1a:
6b:6b:74:1c:cd:63:37:3b:30:6c:99:b6:aa:9c:b1:1d:00:68:
3a:3c:b5:71:f8:f4:4e:dc:2f:a9:be:c0:51:00:37:d7:7f:4e:
c4:91:44:34:36:93:0c:85:f0:52:d4:92:d7:91:2a:7a:68:74:
cb:b4:b6:64:dd:0e:89:67:44:3f:32:0a:fb:d7:b8:c0:b1:11:
e7:36:e8:32:21:8a:48:b5:e9:54:7f:94:c2:21:6b:3f:c6:71:
c8:cf:c3:db:a1:3f:d1:fe:06:cc:fc:74:36:e0:38:da:a4:94:
99:e0:73:9d:15:11:32:7d:f1:2b:96:ff:cd:47:5b:2f:9a:6b:
a6:e2:21:7a:a8:bb:4a:b5:29:a0:3f:12:be:91:4c:ca:4e:33:
13:f3:77:4b:84:9e:f1:68:4e:6f:f1:e4:4b:72:8d:aa:c6:db:
f3:82:e2:83
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Signature Algorithm: sha1WithRSAEncryption
Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
Validity
Not Before: Feb 8 00:00:00 2010 GMT
Not After : Feb 7 23:59:59 2020 GMT
Subject: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https:\/\/www.verisign.com\/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:f5:23:4b:5e:a5:d7:8a:bb:32:e9:d4:57:f7:ef:
e4:c7:26:7e:ad:19:98:fe:a8:9d:7d:94:f6:36:6b:
10:d7:75:81:30:7f:04:68:7f:cb:2b:75:1e:cd:1d:
08:8c:df:69:94:a7:37:a3:9c:7b:80:e0:99:e1:ee:
37:4d:5f:ce:3b:14:ee:86:d4:d0:f5:27:35:bc:25:
0b:38:a7:8c:63:9d:17:a3:08:a5:ab:b0:fb:cd:6a:
62:82:4c:d5:21:da:1b:d9:f1:e3:84:3b:8a:2a:4f:
85:5b:90:01:4f:c9:a7:76:10:7f:27:03:7c:be:ae:
7e:7d:c1:dd:f9:05:bc:1b:48:9c:69:e7:c0:a4:3c:
3c:41:00:3e:df:96:e5:c5:e4:94:71:d6:55:01:c7:
00:26:4a:40:3c:b5:a1:26:a9:0c:a7:6d:80:8e:90:
25:7b:cf:bf:3f:1c:eb:2f:96:fa:e5:87:77:c6:b5:
56:b2:7a:3b:54:30:53:1b:df:62:34:ff:1e:d1:f4:
5a:93:28:85:e5:4c:17:4e:7e:5b:fd:a4:93:99:7f:
df:cd:ef:a4:75:ef:ef:15:f6:47:e7:f8:19:72:d8:
2e:34:1a:a6:b4:a7:4c:7e:bd:bb:4f:0c:3d:57:f1:
30:d6:a6:36:8e:d6:80:76:d7:19:2e:a5:cd:7e:34:
2d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE, pathlen:0
X509v3 Certificate Policies:
Policy: 2.16.840.1.113733.1.7.23.3
CPS: https://www.verisign.com/cps
User Notice:
Explicit Text: https://www.verisign.com/rpa
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
1.3.6.1.5.5.7.1.12:
0_.].[0Y0W0U..image/gif0!0.0...+..............k...j.H.,{..0%.#http://logo.verisign.com/vslogo.gif
X509v3 CRL Distribution Points:
Full Name:
URI:http://crl.verisign.com/pca3-g5.crl
Authority Information Access:
OCSP - URI:http://ocsp.verisign.com
X509v3 Extended Key Usage:
TLS Web Client Authentication, Code Signing
X509v3 Subject Alternative Name:
DirName:/CN=VeriSignMPKI-2-8
X509v3 Subject Key Identifier:
CF:99:A9:EA:7B:26:F4:4B:C9:8E:8F:D7:F0:05:26:EF:E3:D2:A7:9D
X509v3 Authority Key Identifier:
7F:D3:65:A7:C2:DD:EC:BB:F0:30:09:F3:43:39:FA:02:AF:33:31:33
Signature Algorithm: sha1WithRSAEncryption
Signature Value:
56:22:e6:34:a4:c4:61:cb:48:b9:01:ad:56:a8:64:0f:d9:8c:
91:c4:bb:cc:0c:e5:ad:7a:a0:22:7f:df:47:38:4a:2d:6c:d1:
7f:71:1a:7c:ec:70:a9:b1:f0:4f:e4:0f:0c:53:fa:15:5e:fe:
74:98:49:24:85:81:26:1c:91:14:47:b0:4c:63:8c:bb:a1:34:
d4:c6:45:e8:0d:85:26:73:03:d0:a9:8c:64:6d:dc:71:92:e6:
45:05:60:15:59:51:39:fc:58:14:6b:fe:d4:a4:ed:79:6b:08:
0c:41:72:e7:37:22:06:09:be:23:e9:3f:44:9a:1e:e9:61:9d:
cc:b1:90:5c:fc:3d:d2:8d:ac:42:3d:65:36:d4:b4:3d:40:28:
8f:9b:10:cf:23:26:cc:4b:20:cb:90:1f:5d:8c:4c:34:ca:3c:
d8:e5:37:d6:6f:a5:20:bd:34:eb:26:d9:ae:0d:e7:c5:9a:f7:
a1:b4:21:91:33:6f:86:e8:58:bb:25:7c:74:0e:58:fe:75:1b:
63:3f:ce:31:7c:9b:8f:1b:96:9e:c5:53:76:84:5b:9c:ad:91:
fa:ac:ed:93:ba:5d:c8:21:53:c2:82:53:63:af:12:0d:50:87:
11:1b:3d:54:52:96:8a:2c:9c:3d:92:1a:08:9a:05:2e:c7:93:
a5:48:91:d3
pkcs7-signedData
- 1
- SHA1: nil
- 1.3.6.1.4.1.311.2.1.4
- #0
- 1.3.6.1.4.1.311.2.1.15
- :
00 3c 00 3c 00 3c 00 4f 00 62 00 73 00 6f 00 6c |.<.<.<.O.b.s.o.l| 00 65 00 74 00 65 00 3e 00 3e 00 3e |.e.t.e.>.>.> |
- :
- SHA1
32 1e 2e 0c 31 a5 4d 0d 98 d7 12 2d 17 85 d7 1a |2...1.M....-....| 93 5c 2a 4e |.\*N |
- 1.3.6.1.4.1.311.2.1.15
- #0
- Certificates
- Certificate #0
- 2
- 38:25:D7:FA:F8:61:AF:9E:F4:90:E7:26:B5:D6:5A:D5
- RSA-SHA1: nil
- Issuer
- C: US
- O: VeriSign, Inc.
- CN: VeriSign Time Stamping Services CA
- 2007-06-15 00:00:00 UTC: 2012-06-14 23:59:59 UTC
- Subject
- C: US
- O: VeriSign, Inc.
- CN: VeriSign Time Stamping Services Signer - G2
- #5
- rsaEncryption: nil
- C4:B5:F2:52:15:BC:88:86:60:29:16:4A:5B:2F:4B:91:
6B:87:91:F3:35:54:58:35:EA:D1:36:5E:62:4D:52:51:
34:71:C2:7B:66:1D:89:C8:DD:2A:C4:6A:0A:F6:37:D9:
98:74:91:F6:92:AE:B0:B5:76:96:F1:A9:4A:63:45:47:
2E:6B:0B:92:4E:4B:2B:8C:EE:58:4A:8B:D4:07:E4:1A:
2C:F8:82:AA:58:D9:CD:42:F3:2D:C0:75:DE:8D:AB:C7:
8E:1D:9A:6C:4C:08:95:1E:DE:DB:EF:67:E1:72:C2:49:
C2:9E:60:3C:E1:E2:BE:16:A3:63:78:69:14:7B:AD:2D: 0x010001
- X509v3 extensions
- authorityInfoAccess
- OCSP: http://ocsp.verisign.com
- basicConstraints
- true
- nil
- crlDistributionPoints: http://crl.verisign.com/tss-ca.crl
- extendedKeyUsage: true, timeStamping
- keyUsage: true, 0xc0
- subjectAltName
- CN: TSA1-2
- authorityInfoAccess
- RSA-SHA1:
50 c5 4b c8 24 80 df e4 0d 24 c2 de 1a b1 a1 02 |P.K.$....$......| a1 a6 82 2d 0c 83 15 81 37 0a 82 0e 2c b0 5a 17 |...-....7...,.Z.| 61 b5 d8 05 fe 88 db f1 91 91 b3 56 1a 40 a6 eb |a..........V.@..| 92 be 38 39 b0 75 36 74 3a 98 4f e4 37 ba 99 89 |..89.u6t:.O.7...| ca 95 42 1d b0 b9 c7 a0 8d 57 e0 fa d5 64 04 42 |..B......W...d.B| 35 4e 01 d1 33 a2 17 c8 4d aa 27 c7 f2 e1 86 4c |5N..3...M.'....L| 02 38 4d 83 78 c6 fc 53 e0 eb e0 06 87 dd a4 96 |.8M.x..S........| 9e 5e 0c 98 e2 a5 be bf 82 85 c3 60 e1 df ad 28 |.^.........`...(| d8 c7 a5 4b 64 da c7 1b 5b bd ac 39 08 d5 38 22 |...Kd...[..9..8"| a1 33 8b 2f 8a 9a eb bc 07 21 3f 44 41 09 07 b5 |.3./.....!?DA...| 65 1c 24 bc 48 d3 44 80 eb a1 cf c9 02 b4 14 cf |e.$.H.D.........| 54 c7 16 a3 80 5c f9 79 3e 5d 72 7d 88 17 9e 2c |T....\.y>]r}...,| 43 a2 ca 53 ce 7d 3d f6 2a 3a b8 4f 94 00 a5 6d |C..S.}=.*:.O...m| 0a 83 5d f9 5e 53 f4 18 b3 57 0f 70 c3 fb f5 ad |..].^S...W.p....| 95 a0 0e 17 de c4 16 80 60 c9 0f 2b 6e 86 04 f1 |........`..+n...| eb f4 78 27 d1 05 c5 ee 34 5b 5e b9 49 32 f2 33 |..x'....4[^.I2.3|
- 2
- Certificate #1
- 2
- 47:BF:19:95:DF:8D:52:46:43:F7:DB:6D:48:0D:31:A4
- RSA-SHA1: nil
- Issuer
- C: ZA
- ST: Western Cape
- L: Durbanville
- O: Thawte
- OU: Thawte Certification
- CN: Thawte Timestamping CA
- 2003-12-04 00:00:00 UTC: 2013-12-03 23:59:59 UTC
- Subject
- C: US
- O: VeriSign, Inc.
- CN: VeriSign Time Stamping Services CA
- #5
- rsaEncryption: nil
- A9:CA:B2:A4:CC:CD:20:AF:0A:7D:89:AC:87:75:F0:B4:
4E:F1:DF:C1:0F:BF:67:61:BD:A3:64:1C:DA:BB:F9:CA:
33:AB:84:30:89:58:7E:8C:DB:6B:DD:36:9E:0F:BF:D1:
EC:78:F2:77:A6:7E:6F:3C:BF:93:AF:0D:BA:68:F4:6C:
94:CA:BD:52:2D:AB:48:3D:F5:B6:D5:5D:5F:1B:02:9F:
FA:2F:6B:1E:A4:F7:A3:9A:A6:1A:C8:02:E1:7F:4C:52:
E3:0E:60:EC:40:1C:7E:B9:0D:DE:3F:C7:B4:DF:87:BD:
5F:7A:6A:31:2E:03:99:81:13:A8:47:20:CE:31:73:0D:
57:2D:CD:78:34:33:95:12:99:12:B9:DE:68:2F:AA:E6:
E3:C2:8A:8C:2A:C3:8B:21:87:66:BD:83:58:57:6F:75:
BF:3C:AA:26:87:5D:CA:10:15:3C:9F:84:EA:54:C1:0A:
6E:C4:FE:C5:4A:DD:B9:07:11:97:22:7C:DB:3E:27:D1:
1E:78:EC:9F:31:C9:F1:E6:22:19:DB:C4:B3:47:43:9A:
1A:5F:A0:1E:90:E4:5E:F5:EE:7C:F1:7D:AB:62:01:8F:
F5:4D:0B:DE:D0:22:56:A8:95:CD:AE:88:76:AE:EE:BA:
0D:F3:E4:4D:D9:A0:FB:68:A0:AE:14:3B:B3:87:C1:BB: 0x010001
- X509v3 extensions
- authorityInfoAccess
- OCSP: http://ocsp.verisign.com
- basicConstraints
- true
- true: 0
- crlDistributionPoints: http://crl.verisign.com/ThawteTimestampingCA.crl
- extendedKeyUsage: timeStamping
- keyUsage: true, 6
- subjectAltName
- CN: TSA2048-1-53
- authorityInfoAccess
- RSA-SHA1:
4a 6b f9 ea 58 c2 44 1c 31 89 79 99 2b 96 bf 82 |Jk..X.D.1.y.+...| ac 01 d6 1c 4c cd b0 8a 58 6e df 08 29 a3 5e c8 |....L...Xn..).^.| ca 93 13 e7 04 52 0d ef 47 27 2f 00 38 b0 e4 c9 |.....R..G'/.8...| 93 4e 9a d4 22 62 15 f7 3f 37 21 4f 70 31 80 f1 |.N.."b..?7!Op1..| 8b 38 87 b3 e8 e8 97 00 fe cf 55 96 4e 24 d2 a9 |.8........U.N$..| 27 4e 7a ae b7 61 41 f3 2a ce e7 c9 d9 5e dd bb |'Nz..aA.*....^..| 2b 85 3e b5 9d b5 d9 e1 57 ff be b4 c5 7e f5 cf |+.>.....W....~..| 0c 9e f0 97 fe 2b d3 3b 52 1b 1b 38 27 f7 3f 4a |.....+.;R..8'.?J|
- 2
- Certificate #2
- 2
- 74:1D:34:07:93:30:6A:CA:84:FA:B3:AB:BB:15:67:CE
- RSA-SHA1: nil
- Issuer
- C: US
- O: VeriSign, Inc.
- OU: VeriSign Trust Network
- OU: Terms of use at https://www.verisign.com/rpa (c)10
- CN: VeriSign Class 3 Code Signing 2010 CA
- 2011-07-06 00:00:00 UTC: 2013-08-22 23:59:59 UTC
- Subject
- C: GB
- ST: London
- L: London
- O: Piriform Ltd
- OU: Digital ID Class 3 - Microsoft Software Validation v2
- CN: Piriform Ltd
- #5
- rsaEncryption: nil
- CA:43:68:52:51:19:F1:0A:E7:79:76:9F:F5:50:6B:FA:
DF:6F:BF:C3:02:D9:05:E4:C5:FD:D0:2D:34:7A:04:D5:
C2:D8:4D:37:45:A2:72:A7:F4:52:9F:96:65:A7:D3:89:
7E:E4:25:7C:66:D3:2F:07:90:7D:F4:F8:DE:47:AF:EE:
ED:B5:99:99:11:8B:8D:74:7F:D2:CA:DF:6E:59:7C:CD:
B3:2B:4B:C1:86:A5:FC:9A:31:85:8D:C1:FF:95:08:03:
92:1D:AD:D9:21:E0:49:69:0B:93:65:2F:F5:80:11:46:
B5:30:B9:EC:68:D5:4A:68:11:03:52:6D:6D:71:06:97:
47:19:25:74:4E:3B:EC:F2:A5:5C:7E:AD:8A:B5:D1:9D:
19:93:10:41:CB:DB:2E:88:70:03:18:DB:65:8B:99:29:
1D:5E:09:48:9F:2D:7A:0E:C6:FC:56:88:B3:C2:D8:05:
B8:E5:5C:BB:F9:9C:72:94:D0:00:03:25:60:1C:90:00:
54:CA:24:A5:87:F5:78:FD:A1:C6:DC:C3:FA:EF:90:29:
68:AC:67:E0:39:B9:67:B9:B2:25:AF:4C:66:E1:5C:E7:
1F:B1:FB:BD:AF:DB:D3:77:BF:2E:21:CE:F5:66:46:5B:
CF:FE:F3:4C:44:EA:48:51:65:26:6A:BD:99:85:E1:55: 0x010001
- X509v3 extensions
- basicConstraints
- nil
- keyUsage: true, 0x80
- crlDistributionPoints: http://csc3-2010-crl.verisign.com/CSC3-2010.crl
- certificatePolicies
- 2.16.840.1.113733.1.7.23.3
- id-qt-cps: https://www.verisign.com/rpa
- 2.16.840.1.113733.1.7.23.3
- extendedKeyUsage: codeSigning
- authorityInfoAccess
- #0
- OCSP: http://ocsp.verisign.com
- caIssuers: http://csc3-2010-aia.verisign.com/CSC3-2010.cer
- #0
- authorityKeyIdentifier:
cf 99 a9 ea 7b 26 f4 4b c9 8e 8f d7 f0 05 26 ef |....{&.K......&.| e3 d2 a7 9d |.... | - nsCertType: 0x10
- 1.3.6.1.4.1.311.2.1.27
- false: true
- basicConstraints
- RSA-SHA1:
c2 7c 65 46 69 02 3e 27 9f df 2b e8 71 55 f4 21 |.|eFi.>'..+.qU.!| b3 66 de 44 39 04 5d 8c c1 2c fd b3 99 02 ca d0 |.f.D9.]..,......| a1 c5 9b 29 69 42 7a 93 ff 6c de 8a 92 06 cf ce |...)iBz..l......| c5 39 dd ce c9 ed 51 af 43 f4 ae 25 45 58 48 98 |.9....Q.C..%EXH.| 1e e4 89 ec 82 c7 7f 7c 35 de d3 17 07 59 a7 51 |.......|5....Y.Q| 9c 40 03 8b 8d a6 e9 b2 8f 1a 6b 6b 74 1c cd 63 |.@........kkt..c| 37 3b 30 6c 99 b6 aa 9c b1 1d 00 68 3a 3c b5 71 |7;0l.......h:<.q| f8 f4 4e dc 2f a9 be c0 51 00 37 d7 7f 4e c4 91 |..N./...Q.7..N..| 44 34 36 93 0c 85 f0 52 d4 92 d7 91 2a 7a 68 74 |D46....R....*zht| cb b4 b6 64 dd 0e 89 67 44 3f 32 0a fb d7 b8 c0 |...d...gD?2.....| b1 11 e7 36 e8 32 21 8a 48 b5 e9 54 7f 94 c2 21 |...6.2!.H..T...!| 6b 3f c6 71 c8 cf c3 db a1 3f d1 fe 06 cc fc 74 |k?.q.....?.....t| 36 e0 38 da a4 94 99 e0 73 9d 15 11 32 7d f1 2b |6.8.....s...2}.+| 96 ff cd 47 5b 2f 9a 6b a6 e2 21 7a a8 bb 4a b5 |...G[/.k..!z..J.| 29 a0 3f 12 be 91 4c ca 4e 33 13 f3 77 4b 84 9e |).?...L.N3..wK..| f1 68 4e 6f f1 e4 4b 72 8d aa c6 db f3 82 e2 83 |.hNo..Kr........|
- 2
- Certificate #3
- 2
- 52:00:E5:AA:25:56:FC:1A:86:ED:96:C9:D4:4B:33:C7
- RSA-SHA1: nil
- Issuer
- C: US
- O: VeriSign, Inc.
- OU: VeriSign Trust Network
- OU: (c) 2006 VeriSign, Inc. - For authorized use only
- CN: VeriSign Class 3 Public Primary Certification Authority - G5
- 2010-02-08 00:00:00 UTC: 2020-02-07 23:59:59 UTC
- Subject
- C: US
- O: VeriSign, Inc.
- OU: VeriSign Trust Network
- OU: Terms of use at https://www.verisign.com/rpa (c)10
- CN: VeriSign Class 3 Code Signing 2010 CA
- #5
- rsaEncryption: nil
- F5:23:4B:5E:A5:D7:8A:BB:32:E9:D4:57:F7:EF:E4:C7:
26:7E:AD:19:98:FE:A8:9D:7D:94:F6:36:6B:10:D7:75:
81:30:7F:04:68:7F:CB:2B:75:1E:CD:1D:08:8C:DF:69:
94:A7:37:A3:9C:7B:80:E0:99:E1:EE:37:4D:5F:CE:3B:
14:EE:86:D4:D0:F5:27:35:BC:25:0B:38:A7:8C:63:9D:
17:A3:08:A5:AB:B0:FB:CD:6A:62:82:4C:D5:21:DA:1B:
D9:F1:E3:84:3B:8A:2A:4F:85:5B:90:01:4F:C9:A7:76:
10:7F:27:03:7C:BE:AE:7E:7D:C1:DD:F9:05:BC:1B:48:
9C:69:E7:C0:A4:3C:3C:41:00:3E:DF:96:E5:C5:E4:94:
71:D6:55:01:C7:00:26:4A:40:3C:B5:A1:26:A9:0C:A7:
6D:80:8E:90:25:7B:CF:BF:3F:1C:EB:2F:96:FA:E5:87:
77:C6:B5:56:B2:7A:3B:54:30:53:1B:DF:62:34:FF:1E:
D1:F4:5A:93:28:85:E5:4C:17:4E:7E:5B:FD:A4:93:99:
7F:DF:CD:EF:A4:75:EF:EF:15:F6:47:E7:F8:19:72:D8:
2E:34:1A:A6:B4:A7:4C:7E:BD:BB:4F:0C:3D:57:F1:30:
D6:A6:36:8E:D6:80:76:D7:19:2E:A5:CD:7E:34:2D:89: 0x010001
- X509v3 extensions
- basicConstraints
- true
- true: 0
- certificatePolicies
- 2.16.840.1.113733.1.7.23.3
- #0
- id-qt-cps: https://www.verisign.com/cps
- id-qt-unotice: https://www.verisign.com/rpa
- #0
- 2.16.840.1.113733.1.7.23.3
- keyUsage: true, 6
- 1.3.6.1.5.5.7.1.12
- image/gif
- SHA1:
8f e5 d3 1a 86 ac 8d 8e 6b c3 cf 80 6a d4 48 18 |........k...j.H.| 2c 7b 19 2e |,{.. | - http://logo.verisign.com/vslogo.gif
- SHA1:
- image/gif
- crlDistributionPoints: http://crl.verisign.com/pca3-g5.crl
- authorityInfoAccess
- OCSP: http://ocsp.verisign.com
- extendedKeyUsage
- clientAuth: codeSigning
- subjectAltName
- CN: VeriSignMPKI-2-8
- subjectKeyIdentifier:
cf 99 a9 ea 7b 26 f4 4b c9 8e 8f d7 f0 05 26 ef |....{&.K......&.| e3 d2 a7 9d |.... | - authorityKeyIdentifier:
7f d3 65 a7 c2 dd ec bb f0 30 09 f3 43 39 fa 02 |..e......0..C9..| af 33 31 33 |.313 |
- basicConstraints
- RSA-SHA1:
56 22 e6 34 a4 c4 61 cb 48 b9 01 ad 56 a8 64 0f |V".4..a.H...V.d.| d9 8c 91 c4 bb cc 0c e5 ad 7a a0 22 7f df 47 38 |.........z."..G8| 4a 2d 6c d1 7f 71 1a 7c ec 70 a9 b1 f0 4f e4 0f |J-l..q.|.p...O..| 0c 53 fa 15 5e fe 74 98 49 24 85 81 26 1c 91 14 |.S..^.t.I$..&...| 47 b0 4c 63 8c bb a1 34 d4 c6 45 e8 0d 85 26 73 |G.Lc...4..E...&s| 03 d0 a9 8c 64 6d dc 71 92 e6 45 05 60 15 59 51 |....dm.q..E.`.YQ| 39 fc 58 14 6b fe d4 a4 ed 79 6b 08 0c 41 72 e7 |9.X.k....yk..Ar.| 37 22 06 09 be 23 e9 3f 44 9a 1e e9 61 9d cc b1 |7"...#.?D...a...| 90 5c fc 3d d2 8d ac 42 3d 65 36 d4 b4 3d 40 28 |.\.=...B=e6..=@(| 8f 9b 10 cf 23 26 cc 4b 20 cb 90 1f 5d 8c 4c 34 |....#&.K ...].L4| ca 3c d8 e5 37 d6 6f a5 20 bd 34 eb 26 d9 ae 0d |.<..7.o. .4.&...| e7 c5 9a f7 a1 b4 21 91 33 6f 86 e8 58 bb 25 7c |......!.3o..X.%|| 74 0e 58 fe 75 1b 63 3f ce 31 7c 9b 8f 1b 96 9e |t.X.u.c?.1|.....| c5 53 76 84 5b 9c ad 91 fa ac ed 93 ba 5d c8 21 |.Sv.[........].!| 53 c2 82 53 63 af 12 0d 50 87 11 1b 3d 54 52 96 |S..Sc...P...=TR.| 8a 2c 9c 3d 92 1a 08 9a 05 2e c7 93 a5 48 91 d3 |.,.=.........H..|
- 2
- Certificate #0
- Signer
- 1
- unnamed
- #0
- C: US
- O: VeriSign, Inc.
- OU: VeriSign Trust Network
- OU: Terms of use at https://www.verisign.com/rpa (c)10
- CN: VeriSign Class 3 Code Signing 2010 CA
- 74:1D:34:07:93:30:6A:CA:84:FA:B3:AB:BB:15:67:CE
- #0
- SHA1: nil
- #3
- 1.3.6.1.4.1.311.2.1.12
- nil
- contentType: 1.3.6.1.4.1.311.2.1.4
- 1.3.6.1.4.1.311.2.1.11: msCodeInd
- messageDigest:
47 18 9b 33 7d 0e a4 9c d4 8c d1 97 53 f1 ca 39 |G..3}.......S..9| 33 23 20 77 |3# w |
- 1.3.6.1.4.1.311.2.1.12
- rsaEncryption:
4d ab 63 35 3c 4a 25 ec d7 5f ec e4 ee 3e 72 d0 |M.c5
r.| fb 04 3b 76 5b 72 ac d7 53 e4 19 de f9 fe 9b 48 |..;v[r..S......H| 43 b1 89 22 6c e4 f8 4b 27 23 3f 70 9a 9c db 08 |C.."l..K'#?p....| ae e5 f7 95 db 83 0d 9e 97 e9 27 72 bc 1f e8 11 |..........'r....| 67 21 75 e6 9b 85 47 a1 67 18 40 bc 62 95 c3 f8 |g!u...G.g.@.b...| b8 d5 70 28 77 b4 c0 dc 3c a2 06 76 3c d0 d9 f7 |..p(w...<..v<...| 1d b5 d1 79 a8 47 46 ad 7e 15 e6 9c b6 ec 40 30 |...y.GF.~.....@0| aa 61 05 ff a9 c2 82 83 48 29 9a 7c 0a 5d b5 de |.a......H).|.]..| d9 45 ce a6 97 93 35 ea 78 64 32 3a 5a 46 06 a9 |.E....5.xd2:ZF..| b8 95 c0 61 a3 88 cf 89 50 1c 76 e3 b2 0a 92 0c |...a....P.v.....| 32 41 e1 1b b3 fa 99 04 12 22 a8 7f e6 21 ca 05 |2A......."...!..| 0d da e1 c2 01 5c 9c 48 74 1a fc 07 99 1e f1 fa |.....\.Ht.......| d9 14 e0 26 33 5a dd 1f 0c a4 1d 64 5d 6a e6 ee |...&3Z.....d]j..| 05 ab ca 3a 80 e3 7b 33 13 d4 de 5f e4 4d 2b 90 |...:..{3..._.M+.| 58 4b be 49 28 95 21 20 da 21 99 ab 74 91 02 80 |XK.I(.! .!..t...| 80 23 ca a2 e5 05 2e 00 fd 44 d1 99 ed 90 75 a7 |.#.......D....u.| - countersignature
- 1
- unnamed
- #0
- C: US
- O: VeriSign, Inc.
- CN: VeriSign Time Stamping Services CA
- 38:25:D7:FA:F8:61:AF:9E:F4:90:E7:26:B5:D6:5A:D5
- #0
- SHA1: nil
- #2
- contentType: pkcs7-data
- signingTime: 2011-12-01 12:34:43 UTC
- messageDigest:
b6 e2 a7 d9 73 96 97 4d f3 06 bf 79 e9 87 99 aa |....s..M...y....| 18 2b c8 20 |.+. |
- rsaEncryption:
9c a6 90 6a e9 82 9a 96 a8 25 df a7 4c 05 c2 3e |...j.....%..L..>| c7 65 25 0f 12 10 82 ee 02 af 42 ba 22 94 6b 48 |.e%.......B.".kH| 93 fe ce d8 10 1e 64 3e 6d d6 fd 79 de 7e 38 53 |......d>m..y.~8S| c3 1d 0e 04 66 21 d3 d1 7a ec e0 e1 ca fa 83 a6 |....f!..z.......| c8 26 3c 6b 7d 66 75 6a 41 d4 48 e1 3c 61 44 78 |.&
- unnamed
- 1
| offset | size | type | comment | |
|---|---|---|---|---|
| 0 | 1463296 | EXE | 12/01/2011 11:18:05 | # |
| 15c1 | 15 | HTM | # | |
| 1469ac | 56193 | PNG | (256 x 256) | # |
| 15d714 | 724 | PNG | (16 x 16) | # |
| 15d9e8 | 716 | PNG | (16 x 16) | # |
| 15dcb4 | 722 | PNG | (16 x 16) | # |
| 15df88 | 20449 | PNG | (164 x 314) | # |
| 162f6c | 4127 | PNG | (45 x 58) | # |
| 163f8c | 2834 | PNG | (45 x 58) | # |
| 164aa0 | 696 | PNG | (16 x 16) | # |
| 165400 | 5952 | PKCS7 | Authenticode Signature | # |
![]() |
| Please donate some bucks to keep this site up and running: | |
| Ko-fi | |
|---|---|
| Yandex.Money | |
| Thank you! | |
[?] ignoring invalid PEdump::BITMAPINFOHEADER
[?] can't find file_offset of VA 0x141c70
offset:( 0x )