filename | Recuva.exe | |
---|---|---|
size | 1469248 (0x166b40) | |
md5 | e26ebbf5b1fe277c8fcafbebb9585ec2 | |
type | PE32 executable (GUI) Intel 80386, for MS Windows | |
mimetype | application/x-dosexec | |
clamav | OK | |
virustotal | → scan with virustotal.com | |
histogram |
MZ Header
signature | MZ |
bytes_in_last_block | 0x90 |
blocks_in_file | 3 |
num_relocs | 0 |
header_paragraphs | 4 |
min_extra_paragraphs | 0 |
max_extra_paragraphs | 0xffff |
ss | 0 |
sp | 0xb8 |
checksum | 0 |
ip | 0 |
cs | 0 |
reloc_table_offset | 0x40 |
overlay_number | 0 |
reserved0 | 0 |
oem_id | 0 |
oem_info | 0 |
reserved2 | 0 |
reserved3 | 0 |
reserved4 | 0 |
reserved5 | 0 |
reserved6 | 0 |
lfanew | 0x110 |
Rich Header
lib id | version | times used |
---|---|---|
126 | 50327 | 3 |
125 | 50727 | 40 |
109 | 50727 | 206 |
147 | 30729 | 29 |
1 | 0 | 340 |
110 | 50727 | 111 |
126 | 50727 | 113 |
131 | 30729 | 119 |
114 | 50727 | 310 |
124 | 50727 | 1 |
0 | 0 | 1 |
120 | 50727 | 1 |
DOS stub
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
PE Header
Packer / Compiler
Sections
name | va | vsize | raw size | flags | |
---|---|---|---|---|---|
.text | 0x1000 | 0xf9007 | 0xf9200 | R-X CODE | |
.rdata | 0xfb000 | 0x38af4 | 0x38c00 | R-- IDATA | |
.data | 0x134000 | 0x10a0c | 0xda00 | RW- IDATA | |
.tls | 0x145000 | 2 | 0x200 | RW- IDATA | |
.rsrc | 0x146000 | 0x254b4 | 0x25600 | R-- IDATA |
Data Directory
TLS
raw start | raw end | index | callbks | zero fill | flags | |
---|---|---|---|---|---|---|
0x545000 | 0x545001 | 0x541c70 | 0x4fb928 | 0 | 0 |
id | lang | string |
---|---|---|
100 | 1033 | 1033 |
102 | 1033 | Select drive |
103 | 1033 | &Scan |
104 | 1033 | Find |
105 | 1033 | &Options... |
106 | 1033 | &Recover... |
107 | 1033 | Check for updates... |
108 | 1033 | &View mode |
109 | 1033 | Show files found in &hidden system directories |
110 | 1033 | Show &zero byte files |
111 | 1033 | &Restore folder structure |
113 | 1033 | For more information please visit: |
114 | 1033 | Recover &Highlighted... |
115 | 1033 | &Recover Checked... |
116 | 1033 | &Check Highlighted |
117 | 1033 | &Uncheck Highlighted |
118 | 1033 | Highlight &Folder |
120 | 1033 | Click here to visit the Recuva website at www.piriform.com/recuva |
121 | 1033 | Size: %1 - Status: %2 |
122 | 1033 | Options |
123 | 1033 | Options |
124 | 1033 | About |
125 | 1033 | List View |
126 | 1033 | Tree View |
127 | 1033 | Status bar |
129 | 1033 | Path |
130 | 1033 | Size |
131 | 1033 | Last Modified |
132 | 1033 | State |
133 | 1033 | Comment |
134 | 1033 | Filename |
135 | 1033 | Removable Disk |
136 | 1033 | Local Disk |
137 | 1033 | Current progress: %1%, %2 files found |
138 | 1033 | Filename or path |
139 | 1033 | Excellent |
140 | 1033 | Poor |
141 | 1033 | Very poor |
142 | 1033 | Unrecoverable |
143 | 1033 | This file is overwritten with "%1", %2 first overwritten clusters of %3 are: |
144 | 1033 | No overwritten clusters detected. |
145 | 1033 | Searching... |
146 | 1033 | Do you want to restore to the same drive? (This can reduce the chance of a successful recovery.) |
147 | 1033 | Warning |
148 | 1033 | NTFS, %1. cluster size: %2. file record size: %3. |
149 | 1033 | %1, %2. cluster size: %3. |
150 | 1033 | Found %1 files (%2 ignored) in %3 sec. |
151 | 1033 | Unknown |
152 | 1033 | Current progress: %1%, %2 files recovered |
153 | 1033 | Searching for deleted files |
154 | 1033 | Recovering files |
155 | 1033 | Click here to check for updates to Recuva online |
156 | 1033 | Operation completed |
157 | 1033 | Operation aborted |
158 | 1033 | Recovered %1 files in %2 sec. |
159 | 1033 | Select location for recovery |
160 | 1033 | This application requires Administrator permissions to run properly, you may continue to use the application but scanning drives will be prohibited. Please contact your network administrator to get Administrator rights added to your account |
161 | 1033 | Unable to open drive |
162 | 1033 | Unable to read boot sector |
163 | 1033 | Unable to determine file system type |
164 | 1033 | Invalid data run detected |
165 | 1033 | Invalid MFT record detected |
166 | 1033 | Unable to read MFT |
167 | 1033 | Invalid file record detected |
168 | 1033 | Canceled by user |
169 | 1033 | Error reading file allocation table |
170 | 1033 | Read operation failed |
171 | 1033 | Unable to recover encrypted file. |
172 | 1033 | Unable to recover a file of zero size. |
173 | 1033 | Invalid clusters range |
176 | 1033 | File is resident in the MFT |
177 | 1033 | Cannot erase completely sparse file data (nothing to erase) |
178 | 1033 | Cannot erase zero byte file data (nothing to erase) |
179 | 1033 | Cannot perform secure overwriting in Windows 2000 with cluster size greater than 4096 |
180 | 1033 | Unable to overwrite non-deleted file |
181 | 1033 | Unable to overwrite special file type |
182 | 1033 | The device is not ready |
201 | 1033 | %1 bytes |
202 | 1033 | %1 KB |
203 | 1033 | %1 MB |
204 | 1033 | %1 GB |
210 | 1033 | Cancel |
211 | 1033 | &Language: |
212 | 1033 | Processing... |
213 | 1033 | OK |
214 | 1033 | The following files were not recovered (%1 total): |
215 | 1033 | Reason |
216 | 1033 | Enable &Deep Scan |
217 | 1033 | No files were found. Would you like to scan again with Deep Scan enabled? Note this can take over an hour on a large drive. |
218 | 1033 | No files were found |
220 | 1033 | Preview |
221 | 1033 | Info |
222 | 1033 | Header |
223 | 1033 | Creation time |
224 | 1033 | Last modification time |
225 | 1033 | Last access time |
226 | 1033 | %1 cluster(s) allocated at offset %2 |
228 | 1033 | No preview available |
229 | 1033 | No file selected |
230 | 1033 | This file is overwritten with "%1" |
231 | 1033 | %1 file cluster(s) overwritten |
240 | 1033 | Unknown folder |
241 | 1033 | A new version of Recuva (%1) is available for download. Would you like to visit the website to download it? |
242 | 1033 | New version available |
243 | 1033 | A&utomatically check for updates to Recuva |
244 | 1033 | Click here to visit the Piriform website at Piriform.com |
245 | 1033 | Overwrite files |
246 | 1033 | Current progress: %1%, %2 files overwritten |
247 | 1033 | Overwritten %1 files in %2 sec. |
248 | 1033 | The following files were not overwritten (%1 total): |
249 | 1033 | Wiping free space |
250 | 1033 | Current progress: %1%, %2 clusters wiped |
251 | 1033 | Secure Overwrite Highlighted |
252 | 1033 | Secure Overwrite Checked |
253 | 1033 | The following directories were not wiped (%1 total): |
254 | 1033 | Overwritten |
255 | 1033 | Not overwritten |
256 | 1033 | Status |
260 | 1033 | Save all settings to &INI file |
262 | 1033 | Simple Overwrite (1 pass) |
263 | 1033 | DOD 5220.22-M (3 passes) |
264 | 1033 | NSA (7 passes) |
265 | 1033 | Gutmann (35 passes) |
270 | 1033 | Secure overwrite |
271 | 1033 | Are you sure you want to overwrite these %1 file(s)? Clicking Yes will mean they are gone forever. |
272 | 1033 | Wipe MFT |
273 | 1033 | Secure &overwriting |
280 | 1033 | Advanced |
281 | 1033 | Show &securely overwritten files |
282 | 1033 | (All drives) |
283 | 1033 | Pictures |
284 | 1033 | Music |
285 | 1033 | Documents |
286 | 1033 | Video |
290 | 1033 | Stage %1 of %2 |
291 | 1033 | Scanning drive for deleted files |
292 | 1033 | Analyzing file contents |
293 | 1033 | Scan |
294 | 1033 | Current progress %1%, analyzing %2 of %3 files |
295 | 1033 | Current progress: %1% |
296 | 1033 | Found %1 files in %2 sec. |
297 | 1033 | Scanning %1 of %2 drives |
298 | 1033 | No files were found, would you like to start the wizard again? |
299 | 1033 | &Start |
300 | 1033 | Recuva Wizard |
301 | 1033 | Welcome to the Recuva Wizard |
302 | 1033 | This wizard will help you recover your deleted files. Just answer a few simple questions and Recuva does the rest. |
303 | 1033 | If you don't want to use this wizard, simply press Cancel and you will have access to the advanced features of Recuva. |
304 | 1033 | &Do not show this Wizard on startup. |
305 | 1033 | File type |
306 | 1033 | What sort of files are you trying to recover? |
307 | 1033 | &Pictures |
308 | 1033 | Show only files of common image formats, such as digital camera photos. |
309 | 1033 | &Music |
310 | 1033 | Show only files of common audio formats, like MP3 player files. |
311 | 1033 | &Documents |
312 | 1033 | Show only files of common office document formats, such as Word and Excel files. |
313 | 1033 | &Video |
314 | 1033 | Show only video files, like digital camera recordings. |
315 | 1033 | &Other |
316 | 1033 | Show all files. |
317 | 1033 | File location |
318 | 1033 | Where were the files? |
319 | 1033 | On my &media card or iPod |
320 | 1033 | Search any removable drives (except CDs and floppies) for deleted files. |
321 | 1033 | In My &Documents |
322 | 1033 | Search user documents folders. |
323 | 1033 | In the Recycle &Bin |
324 | 1033 | Search for files deleted from the Recycle Bin. |
325 | 1033 | In a &specific location |
326 | 1033 | B&rowse... |
327 | 1033 | &I'm not sure |
328 | 1033 | Search everywhere on this computer. |
329 | 1033 | Thank you, Recuva is now ready to search for your files |
330 | 1033 | After the search is complete you will see a list of the files Recuva has found. Simply check the files you would like to recover and click the Recover button. |
331 | 1033 | Click Start to begin the search. |
332 | 1033 | No media cards or iPods were detected, please insert a card and press Retry. |
333 | 1033 | Select location |
334 | 1033 | Select the files you want to Recover by ticking the boxes and then pressing Recover. For the best results, restore the files to a different drive. |
335 | 1033 | Switch to advanced mode |
336 | 1033 | Thumbnails View |
337 | 1033 | Show &Wizard at startup |
338 | 1033 | Check this box if previous scans have failed to find your files. Note that this may take over an hour on a large drive. |
340 | 1033 | &Deep Scan (increases scan time) |
341 | 1033 | Compressed |
342 | 1033 | S&can for non-deleted files (for recovery from damaged or reformatted disks) |
350 | 1033 | Information about Recuva can be found at |
351 | 1033 | Information about other Piriform products can be found at |
355 | 1033 | General |
356 | 1033 | Actions |
357 | 1033 | Interface |
358 | 1033 | Scanning |
359 | 1033 | Recovering |
360 | 1033 | Version |
361 | 1033 | &Run Wizard... |
362 | 1033 | Failed to scan the following drives: |
363 | 1033 | Not deleted |
364 | 1033 | < &Back |
365 | 1033 | &Next > |
370 | 1033 | Estimated time left: %1 |
371 | 1033 | %1 second |
372 | 1033 | %1 seconds |
373 | 1033 | %1 minute |
374 | 1033 | %1 minutes |
375 | 1033 | %1 hour |
376 | 1033 | %1 hours |
377 | 1033 | %1 day |
378 | 1033 | %1 days |
379 | 1033 | Calculating time left... |
380 | 1033 | View mode |
381 | 1033 | Emails |
382 | 1033 | &Emails |
383 | 1033 | Show only emails from Thunderbird, Outlook Express and Windows Mail. |
384 | 1033 | English version translated by Piriform. |
385 | 1033 | Incomplete results. |
386 | 1033 | &Compressed |
387 | 1033 | Show only compressed files. |
388 | 1033 | Copy Image to Clipboard |
389 | 1033 | Online Help |
390 | 1033 | Recuva Online Help |
391 | 1033 | The path does not exist |
392 | 1033 | Scan Contents... |
393 | 1033 | Search String: |
394 | 1033 | File Mask: |
395 | 1033 | Search file contents |
396 | 1033 | Searching file contents for matching string |
397 | 1033 | Scan Files |
398 | 1033 | Select file mask |
399 | 1033 | Maximum path length exceeded |
400 | 1033 | Error |
401 | 1033 | File Contents |
402 | 1033 | Save List to Text File... |
module_name | hint | ord | function_name |
---|---|---|---|
WININET.dll | 107 | InternetCloseHandle | |
WININET.dll | 159 | InternetReadFile | |
WININET.dll | 153 | InternetOpenUrlW | |
WININET.dll | 154 | InternetOpenW | |
KERNEL32.dll | 1110 | SetEnvironmentVariableA | |
KERNEL32.dll | 136 | CreateFileA | |
KERNEL32.dll | 432 | GetConsoleOutputCP | |
KERNEL32.dll | 1306 | WriteConsoleA | |
KERNEL32.dll | 343 | FlushFileBuffers | |
KERNEL32.dll | 1159 | SetStdHandle | |
KERNEL32.dll | 428 | GetConsoleMode | |
KERNEL32.dll | 410 | GetConsoleCP | |
KERNEL32.dll | 780 | IsValidLocale | |
KERNEL32.dll | 269 | EnumSystemLocalesA | |
KERNEL32.dll | 667 | GetUserDefaultLCID | |
KERNEL32.dll | 614 | GetStringTypeA | |
KERNEL32.dll | 935 | QueryPerformanceCounter | |
KERNEL32.dll | 610 | GetStartupInfoA | |
KERNEL32.dll | 499 | GetFileType | |
KERNEL32.dll | 1135 | SetHandleCount | |
KERNEL32.dll | 390 | GetCommandLineA | |
KERNEL32.dll | 472 | GetEnvironmentStrings | |
KERNEL32.dll | 352 | FreeEnvironmentStringsA | |
KERNEL32.dll | 567 | GetOEMCP | |
KERNEL32.dll | 531 | GetModuleFileNameA | |
KERNEL32.dll | 612 | GetStdHandle | |
KERNEL32.dll | 811 | LCMapStringA | |
KERNEL32.dll | 1048 | RtlUnwind | |
KERNEL32.dll | 664 | GetTimeZoneInformation | |
KERNEL32.dll | 454 | GetDateFormatA | |
KERNEL32.dll | 661 | GetTimeFormatA | |
KERNEL32.dll | 717 | HeapCreate | |
KERNEL32.dll | 768 | IsDebuggerPresent | |
KERNEL32.dll | 1235 | UnhandledExceptionFilter | |
KERNEL32.dll | 1216 | TerminateProcess | |
KERNEL32.dll | 191 | CreateWaitableTimerA | |
KERNEL32.dll | 1196 | SetWaitableTimer | |
KERNEL32.dll | 1202 | Sleep | |
KERNEL32.dll | 652 | GetThreadLocale | |
KERNEL32.dll | 360 | GetACP | |
KERNEL32.dll | 772 | IsProcessorFeaturePresent | |
KERNEL32.dll | 349 | FormatMessageA | |
KERNEL32.dll | 722 | HeapReAlloc | |
KERNEL32.dll | 718 | HeapDestroy | |
KERNEL32.dll | 281 | ExitProcess | |
KERNEL32.dll | 1272 | WaitForMultipleObjectsEx | |
KERNEL32.dll | 291 | FileTimeToDosDateTime | |
KERNEL32.dll | 838 | LocalFileTimeToFileTime | |
KERNEL32.dll | 228 | DosDateTimeToFileTime | |
KERNEL32.dll | 960 | ReadFile | |
KERNEL32.dll | 1112 | SetErrorMode | |
KERNEL32.dll | 199 | DebugBreak | |
KERNEL32.dll | 1130 | SetFileTime | |
KERNEL32.dll | 221 | DeviceIoControl | |
KERNEL32.dll | 1107 | SetEndOfFile | |
KERNEL32.dll | 1126 | SetFilePointer | |
KERNEL32.dll | 496 | GetFileSize | |
KERNEL32.dll | 943 | QueueUserAPC | |
KERNEL32.dll | 282 | ExitThread | |
KERNEL32.dll | 1205 | SleepEx | |
KERNEL32.dll | 1260 | VirtualFree | |
KERNEL32.dll | 1257 | VirtualAlloc | |
KERNEL32.dll | 745 | InterlockedCompareExchange | |
KERNEL32.dll | 292 | FileTimeToLocalFileTime | |
KERNEL32.dll | 1043 | ResumeThread | |
KERNEL32.dll | 181 | CreateThread | |
KERNEL32.dll | 884 | OpenEventA | |
KERNEL32.dll | 449 | GetCurrentProcessId | |
KERNEL32.dll | 631 | GetSystemTime | |
KERNEL32.dll | 1189 | SetUnhandledExceptionFilter | |
KERNEL32.dll | 516 | GetLocaleInfoA | |
KERNEL32.dll | 1223 | TlsGetValue | |
KERNEL32.dll | 1224 | TlsSetValue | |
KERNEL32.dll | 703 | GlobalMemoryStatus | |
KERNEL32.dll | 627 | GetSystemInfo | |
KERNEL32.dll | 675 | GetVersionExA | |
KERNEL32.dll | 840 | LocalFree | |
KERNEL32.dll | 1222 | TlsFree | |
KERNEL32.dll | 1221 | TlsAlloc | |
KERNEL32.dll | 21 | AreFileApisANSI | |
KERNEL32.dll | 836 | LocalAlloc | |
KERNEL32.dll | 1201 | SizeofResource | |
KERNEL32.dll | 533 | GetModuleHandleA | |
KERNEL32.dll | 97 | CompareStringA | |
KERNEL32.dll | 828 | LoadLibraryA | |
KERNEL32.dll | 1263 | VirtualProtect | |
KERNEL32.dll | 293 | FileTimeToSystemTime | |
KERNEL32.dll | 852 | LockResource | |
KERNEL32.dll | 833 | LoadResource | |
KERNEL32.dll | 1213 | SystemTimeToFileTime | |
KERNEL32.dll | 1357 | lstrlenA | |
KERNEL32.dll | 96 | CompareFileTime | |
KERNEL32.dll | 1039 | ResetEvent | |
KERNEL32.dll | 1271 | WaitForMultipleObjects | |
KERNEL32.dll | 659 | GetTickCount | |
KERNEL32.dll | 1273 | WaitForSingleObject | |
KERNEL32.dll | 633 | GetSystemTimeAsFileTime | |
KERNEL32.dll | 748 | InterlockedExchange | |
KERNEL32.dll | 709 | GlobalUnlock | |
KERNEL32.dll | 698 | GlobalFree | |
KERNEL32.dll | 691 | GlobalAlloc | |
KERNEL32.dll | 302 | FindClose | |
KERNEL32.dll | 705 | GlobalReAlloc | |
KERNEL32.dll | 702 | GlobalLock | |
KERNEL32.dll | 1317 | WriteFile | |
KERNEL32.dll | 870 | MulDiv | |
KERNEL32.dll | 521 | GetLogicalDrives | |
KERNEL32.dll | 719 | HeapFree | |
KERNEL32.dll | 715 | HeapAlloc | |
KERNEL32.dll | 130 | CreateEventA | |
KERNEL32.dll | 1113 | SetEvent | |
KERNEL32.dll | 354 | FreeLibrary | |
KERNEL32.dll | 1345 | lstrcmpA | |
KERNEL32.dll | 515 | GetLocalTime | |
KERNEL32.dll | 586 | GetProcessHeap | |
KERNEL32.dll | 448 | GetCurrentProcess | |
KERNEL32.dll | 82 | CloseHandle | |
KERNEL32.dll | 945 | RaiseException | |
KERNEL32.dll | 391 | GetCommandLineW | |
KERNEL32.dll | 344 | FlushInstructionCache | |
KERNEL32.dll | 747 | InterlockedDecrement | |
KERNEL32.dll | 751 | InterlockedIncrement | |
KERNEL32.dll | 453 | GetCurrentThreadId | |
KERNEL32.dll | 209 | DeleteCriticalSection | |
KERNEL32.dll | 514 | GetLastError | |
KERNEL32.dll | 738 | InitializeCriticalSection | |
KERNEL32.dll | 1139 | SetLastError | |
KERNEL32.dll | 825 | LeaveCriticalSection | |
KERNEL32.dll | 238 | EnterCriticalSection | |
KERNEL32.dll | 724 | HeapSize | |
USER32.dll | 163 | DestroyIcon | |
USER32.dll | 242 | EnumWindows | |
USER32.dll | 764 | TranslateMessage | |
USER32.dll | 166 | DestroyWindow | |
USER32.dll | 773 | UnregisterClassA | |
USER32.dll | 200 | DrawIconEx | |
USER32.dll | 162 | DestroyCursor | |
USER32.dll | 689 | SetScrollPos | |
USER32.dll | 161 | DestroyCaret | |
USER32.dll | 642 | SetCaretPos | |
USER32.dll | 89 | CreateCaret | |
USER32.dll | 73 | CloseClipboard | |
USER32.dll | 646 | SetClipboardData | |
USER32.dll | 425 | HideCaret | |
USER32.dll | 729 | ShowCaret | |
USER32.dll | 213 | EmptyClipboard | |
USER32.dll | 84 | CopyImage | |
USER32.dll | 44 | CharLowerBuffA | |
USER32.dll | 550 | OpenClipboard | |
USER32.dll | 373 | GetScrollInfo | |
USER32.dll | 690 | SetScrollRange | |
USER32.dll | 189 | DragDetect | |
USER32.dll | 317 | GetKeyState | |
USER32.dll | 64 | CheckMenuRadioItem | |
USER32.dll | 107 | CreatePopupMenu | |
USER32.dll | 158 | DeleteMenu | |
USER32.dll | 214 | EnableMenuItem | |
USER32.dll | 338 | GetMenuItemID | |
USER32.dll | 337 | GetMenuItemCount | |
USER32.dll | 742 | SubtractRect | |
USER32.dll | 671 | SetMenuInfo | |
USER32.dll | 336 | GetMenuInfo | |
USER32.dll | 516 | MapDialogRect | |
USER32.dll | 462 | IsDlgButtonChecked | |
USER32.dll | 539 | MoveWindow | |
USER32.dll | 513 | LookupIconIdFromDirectoryEx | |
USER32.dll | 102 | CreateIconFromResourceEx | |
USER32.dll | 378 | GetSubMenu | |
USER32.dll | 757 | TrackMouseEvent | |
USER32.dll | 758 | TrackPopupMenu | |
USER32.dll | 466 | IsMenu | |
USER32.dll | 198 | DrawFrameControl | |
USER32.dll | 536 | MonitorFromPoint | |
USER32.dll | 540 | MsgWaitForMultipleObjects | |
USER32.dll | 85 | CopyRect | |
USER32.dll | 549 | OffsetRect | |
USER32.dll | 288 | GetCursorPos | |
USER32.dll | 709 | SetWindowPlacement | |
USER32.dll | 411 | GetWindowPlacement | |
USER32.dll | 567 | PostQuitMessage | |
USER32.dll | 812 | WindowFromPoint | |
USER32.dll | 398 | GetWindow | |
USER32.dll | 648 | SetCursor | |
USER32.dll | 295 | GetDlgItem | |
USER32.dll | 586 | RedrawWindow | |
USER32.dll | 256 | GetActiveWindow | |
USER32.dll | 480 | IsWindowVisible | |
USER32.dll | 687 | SetRectEmpty | |
USER32.dll | 218 | EndDialog | |
USER32.dll | 525 | MessageBeep | |
USER32.dll | 223 | EnumChildWindows | |
USER32.dll | 164 | DestroyMenu | |
USER32.dll | 521 | MapWindowPoints | |
USER32.dll | 621 | ScreenToClient | |
USER32.dll | 347 | GetMessagePos | |
USER32.dll | 613 | ReleaseDC | |
USER32.dll | 289 | GetDC | |
USER32.dll | 402 | GetWindowDC | |
USER32.dll | 246 | FillRect | |
USER32.dll | 612 | ReleaseCapture | |
USER32.dll | 3 | AdjustWindowRectEx | |
USER32.dll | 276 | GetClientRect | |
USER32.dll | 14 | BeginPaint | |
USER32.dll | 71 | ClientToScreen | |
USER32.dll | 331 | GetMenu | |
USER32.dll | 284 | GetComboBoxInfo | |
USER32.dll | 220 | EndPaint | |
USER32.dll | 412 | GetWindowRect | |
USER32.dll | 356 | GetParent | |
USER32.dll | 710 | SetWindowPos | |
USER32.dll | 294 | GetDlgCtrlID | |
USER32.dll | 476 | IsWindowEnabled | |
USER32.dll | 195 | DrawEdge | |
USER32.dll | 735 | ShowWindow | |
USER32.dll | 379 | GetSysColor | |
USER32.dll | 437 | InflateRect | |
USER32.dll | 483 | KillTimer | |
USER32.dll | 382 | GetSystemMetrics | |
USER32.dll | 380 | GetSysColorBrush | |
USER32.dll | 446 | InvalidateRect | |
USER32.dll | 196 | DrawFocusRect | |
USER32.dll | 300 | GetFocus | |
USER32.dll | 658 | SetFocus | |
USER32.dll | 785 | UpdateWindow | |
USER32.dll | 475 | IsWindow | |
USER32.dll | 640 | SetCapture | |
USER32.dll | 264 | GetCapture | |
USER32.dll | 686 | SetRect | |
USER32.dll | 699 | SetTimer | |
USER32.dll | 576 | PtInRect | |
GDI32.dll | 599 | Polyline | |
GDI32.dll | 457 | GetDIBColorTable | |
GDI32.dll | 691 | StretchBlt | |
GDI32.dll | 598 | Polygon | |
GDI32.dll | 74 | CreatePatternBrush | |
GDI32.dll | 41 | CreateBitmap | |
GDI32.dll | 582 | PatBlt | |
GDI32.dll | 19 | BitBlt | |
GDI32.dll | 638 | SetBkColor | |
GDI32.dll | 48 | CreateCompatibleDC | |
GDI32.dll | 47 | CreateCompatibleBitmap | |
GDI32.dll | 681 | SetViewportOrgEx | |
GDI32.dll | 75 | CreatePen | |
GDI32.dll | 525 | GetStockObject | |
GDI32.dll | 566 | LineTo | |
GDI32.dll | 570 | MoveToEx | |
GDI32.dll | 678 | SetTextColor | |
GDI32.dll | 639 | SetBkMode | |
GDI32.dll | 631 | SelectObject | |
GDI32.dll | 230 | DeleteObject | |
GDI32.dll | 227 | DeleteDC | |
GDI32.dll | 448 | GetClipBox | |
GDI32.dll | 305 | ExcludeClipRect | |
GDI32.dll | 34 | CombineRgn | |
GDI32.dll | 80 | CreateRectRgnIndirect | |
GDI32.dll | 696 | TextOutA | |
GDI32.dll | 624 | SaveDC | |
GDI32.dll | 617 | RestoreDC | |
GDI32.dll | 648 | SetDIBits | |
GDI32.dll | 54 | CreateDIBitmap | |
GDI32.dll | 674 | SetStretchBltMode | |
GDI32.dll | 53 | CreateDIBSection | |
GDI32.dll | 459 | GetDeviceCaps | |
ADVAPI32.dll | 560 | RegCloseKey | |
ADVAPI32.dll | 288 | FreeSid | |
ADVAPI32.dll | 32 | AllocateAndInitializeSid | |
SHELL32.dll | 225 | SHGetSpecialFolderPathW | |
SHELL32.dll | 25 | ||
SHELL32.dll | 182 | SHGetDesktopFolder | |
SHELL32.dll | 6 | CommandLineToArgvW | |
SHELL32.dll | 223 | SHGetSpecialFolderLocation | |
ole32.dll | 103 | CoTaskMemAlloc | |
ole32.dll | 63 | CoInitializeEx | |
ole32.dll | 373 | StgOpenStorageOnILockBytes | |
ole32.dll | 143 | FreePropVariantArray | |
ole32.dll | 6 | CLSIDFromProgID | |
ole32.dll | 62 | CoInitialize | |
ole32.dll | 105 | CoTaskMemRealloc | |
ole32.dll | 16 | CoCreateInstance | |
ole32.dll | 108 | CoUninitialize | |
ole32.dll | 104 | CoTaskMemFree | |
OLEAUT32.dll | 112 | ||
OLEAUT32.dll | 2 | ||
OLEAUT32.dll | 4 | ||
OLEAUT32.dll | 277 | ||
OLEAUT32.dll | 6 | ||
OLEAUT32.dll | 161 | ||
OLEAUT32.dll | 7 | ||
OLEAUT32.dll | 162 | ||
SHLWAPI.dll | 50 | PathAddExtensionW | |
SHLWAPI.dll | 137 | PathRemoveExtensionW | |
SHLWAPI.dll | 149 | PathStripPathW | |
SHLWAPI.dll | 71 | PathFindExtensionW | |
SHLWAPI.dll | 139 | PathRemoveFileSpecW | |
SHLWAPI.dll | 69 | PathFileExistsW | |
SHLWAPI.dll | 52 | PathAppendW | |
SHLWAPI.dll | 58 | PathCombineW | |
SHLWAPI.dll | 72 | PathFindFileNameA | |
SHLWAPI.dll | 151 | PathStripToRootW | |
SHLWAPI.dll | 48 | PathAddBackslashW | |
SHLWAPI.dll | 299 | StrFormatByteSizeW | |
COMCTL32.dll | 146 | _TrackMouseEvent | |
COMCTL32.dll | 84 | ImageList_Destroy | |
COMCTL32.dll | 99 | ImageList_GetIconSize | |
COMCTL32.dll | 83 | ImageList_Create | |
COMCTL32.dll | 90 | ImageList_Draw | |
COMCTL32.dll | 133 | PropertySheetW | |
COMCTL32.dll | 49 | DestroyPropertySheetPage | |
COMCTL32.dll | 9 | CreatePropertySheetPageW | |
COMCTL32.dll | 77 | ImageList_Add | |
COMCTL32.dll | 98 | ImageList_GetIcon | |
COMCTL32.dll | 105 | ImageList_LoadImageW | |
COMCTL32.dll | 111 | ImageList_ReplaceIcon | |
COMCTL32.dll | 123 | InitCommonControlsEx | |
MSIMG32.dll | AlphaBlend | ||
MSIMG32.dll | 3 | TransparentBlt | |
CRYPT32.dll | 182 | CryptMsgGetParam | |
CRYPT32.dll | 191 | CryptQueryObject | |
CRYPT32.dll | 64 | CertFreeCertificateContext | |
CRYPT32.dll | 75 | CertGetNameStringW | |
CRYPT32.dll | 53 | CertFindCertificateInStore | |
CRYPT32.dll | 130 | CryptDecodeObject | |
CRYPT32.dll | 175 | CryptMsgClose | |
CRYPT32.dll | 18 | CertCloseStore | |
WINTRUST.dll | 115 | WinVerifyTrust | |
WS2_32.dll | 115 | ||
WS2_32.dll | 116 |
StringTable 040904b0
CompanyName | Piriform Ltd |
FileDescription | Recuva |
FileVersion | 1, 42, 0, 544 |
InternalName | Recuva |
LegalCopyright | Copyright 2006-2011 Piriform Ltd |
OriginalFilename | Recuva.exe |
ProductName | Recuva |
ProductVersion | 1, 42, 0, 544 |
VS_FIXEDFILEINFO
FileVersion | 1.42.0.544 |
ProductVersion | 1.42.0.544 |
StrucVersion | 0x10000 |
FileFlagsMask | 0x3f |
FileFlags | 0 |
FileOS | 4 |
FileType | 1 |
FileSubtype | 0 |
Signers (1)
issuer: /C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa (c)10/CN=VeriSign Class 3 Code Signing 2010 CA
serial: 741D340793306ACA84FAB3ABBB1567CE
Certificates (4)
Certificate: Data: Version: 3 (0x2) Serial Number: 38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5 Signature Algorithm: sha1WithRSAEncryption Issuer: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA Validity Not Before: Jun 15 00:00:00 2007 GMT Not After : Jun 14 23:59:59 2012 GMT Subject: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer - G2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (1024 bit) Modulus: 00:c4:b5:f2:52:15:bc:88:86:60:29:16:4a:5b:2f: 4b:91:6b:87:91:f3:35:54:58:35:ea:d1:36:5e:62: 4d:52:51:34:71:c2:7b:66:1d:89:c8:dd:2a:c4:6a: 0a:f6:37:d9:98:74:91:f6:92:ae:b0:b5:76:96:f1: a9:4a:63:45:47:2e:6b:0b:92:4e:4b:2b:8c:ee:58: 4a:8b:d4:07:e4:1a:2c:f8:82:aa:58:d9:cd:42:f3: 2d:c0:75:de:8d:ab:c7:8e:1d:9a:6c:4c:08:95:1e: de:db:ef:67:e1:72:c2:49:c2:9e:60:3c:e1:e2:be: 16:a3:63:78:69:14:7b:ad:2d Exponent: 65537 (0x10001) X509v3 extensions: Authority Information Access: OCSP - URI:http://ocsp.verisign.com X509v3 Basic Constraints: critical CA:FALSE X509v3 CRL Distribution Points: Full Name: URI:http://crl.verisign.com/tss-ca.crl X509v3 Extended Key Usage: critical Time Stamping X509v3 Key Usage: critical Digital Signature, Non Repudiation X509v3 Subject Alternative Name: DirName:/CN=TSA1-2 Signature Algorithm: sha1WithRSAEncryption 50:c5:4b:c8:24:80:df:e4:0d:24:c2:de:1a:b1:a1:02:a1:a6: 82:2d:0c:83:15:81:37:0a:82:0e:2c:b0:5a:17:61:b5:d8:05: fe:88:db:f1:91:91:b3:56:1a:40:a6:eb:92:be:38:39:b0:75: 36:74:3a:98:4f:e4:37:ba:99:89:ca:95:42:1d:b0:b9:c7:a0: 8d:57:e0:fa:d5:64:04:42:35:4e:01:d1:33:a2:17:c8:4d:aa: 27:c7:f2:e1:86:4c:02:38:4d:83:78:c6:fc:53:e0:eb:e0:06: 87:dd:a4:96:9e:5e:0c:98:e2:a5:be:bf:82:85:c3:60:e1:df: ad:28:d8:c7:a5:4b:64:da:c7:1b:5b:bd:ac:39:08:d5:38:22: a1:33:8b:2f:8a:9a:eb:bc:07:21:3f:44:41:09:07:b5:65:1c: 24:bc:48:d3:44:80:eb:a1:cf:c9:02:b4:14:cf:54:c7:16:a3: 80:5c:f9:79:3e:5d:72:7d:88:17:9e:2c:43:a2:ca:53:ce:7d: 3d:f6:2a:3a:b8:4f:94:00:a5:6d:0a:83:5d:f9:5e:53:f4:18: b3:57:0f:70:c3:fb:f5:ad:95:a0:0e:17:de:c4:16:80:60:c9: 0f:2b:6e:86:04:f1:eb:f4:78:27:d1:05:c5:ee:34:5b:5e:b9: 49:32:f2:33
Certificate: Data: Version: 3 (0x2) Serial Number: 47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4 Signature Algorithm: sha1WithRSAEncryption Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA Validity Not Before: Dec 4 00:00:00 2003 GMT Not After : Dec 3 23:59:59 2013 GMT Subject: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ca:b2:a4:cc:cd:20:af:0a:7d:89:ac:87:75: f0:b4:4e:f1:df:c1:0f:bf:67:61:bd:a3:64:1c:da: bb:f9:ca:33:ab:84:30:89:58:7e:8c:db:6b:dd:36: 9e:0f:bf:d1:ec:78:f2:77:a6:7e:6f:3c:bf:93:af: 0d:ba:68:f4:6c:94:ca:bd:52:2d:ab:48:3d:f5:b6: d5:5d:5f:1b:02:9f:fa:2f:6b:1e:a4:f7:a3:9a:a6: 1a:c8:02:e1:7f:4c:52:e3:0e:60:ec:40:1c:7e:b9: 0d:de:3f:c7:b4:df:87:bd:5f:7a:6a:31:2e:03:99: 81:13:a8:47:20:ce:31:73:0d:57:2d:cd:78:34:33: 95:12:99:12:b9:de:68:2f:aa:e6:e3:c2:8a:8c:2a: c3:8b:21:87:66:bd:83:58:57:6f:75:bf:3c:aa:26: 87:5d:ca:10:15:3c:9f:84:ea:54:c1:0a:6e:c4:fe: c5:4a:dd:b9:07:11:97:22:7c:db:3e:27:d1:1e:78: ec:9f:31:c9:f1:e6:22:19:db:c4:b3:47:43:9a:1a: 5f:a0:1e:90:e4:5e:f5:ee:7c:f1:7d:ab:62:01:8f: f5:4d:0b:de:d0:22:56:a8:95:cd:ae:88:76:ae:ee: ba:0d:f3:e4:4d:d9:a0:fb:68:a0:ae:14:3b:b3:87: c1:bb Exponent: 65537 (0x10001) X509v3 extensions: Authority Information Access: OCSP - URI:http://ocsp.verisign.com X509v3 Basic Constraints: critical CA:TRUE, pathlen:0 X509v3 CRL Distribution Points: Full Name: URI:http://crl.verisign.com/ThawteTimestampingCA.crl X509v3 Extended Key Usage: Time Stamping X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Subject Alternative Name: DirName:/CN=TSA2048-1-53 Signature Algorithm: sha1WithRSAEncryption 4a:6b:f9:ea:58:c2:44:1c:31:89:79:99:2b:96:bf:82:ac:01: d6:1c:4c:cd:b0:8a:58:6e:df:08:29:a3:5e:c8:ca:93:13:e7: 04:52:0d:ef:47:27:2f:00:38:b0:e4:c9:93:4e:9a:d4:22:62: 15:f7:3f:37:21:4f:70:31:80:f1:8b:38:87:b3:e8:e8:97:00: fe:cf:55:96:4e:24:d2:a9:27:4e:7a:ae:b7:61:41:f3:2a:ce: e7:c9:d9:5e:dd:bb:2b:85:3e:b5:9d:b5:d9:e1:57:ff:be:b4: c5:7e:f5:cf:0c:9e:f0:97:fe:2b:d3:3b:52:1b:1b:38:27:f7: 3f:4a
Certificate: Data: Version: 3 (0x2) Serial Number: 74:1d:34:07:93:30:6a:ca:84:fa:b3:ab:bb:15:67:ce Signature Algorithm: sha1WithRSAEncryption Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA Validity Not Before: Jul 6 00:00:00 2011 GMT Not After : Aug 22 23:59:59 2013 GMT Subject: C=GB, ST=London, L=London, O=Piriform Ltd, OU=Digital ID Class 3 - Microsoft Software Validation v2, CN=Piriform Ltd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:43:68:52:51:19:f1:0a:e7:79:76:9f:f5:50: 6b:fa:df:6f:bf:c3:02:d9:05:e4:c5:fd:d0:2d:34: 7a:04:d5:c2:d8:4d:37:45:a2:72:a7:f4:52:9f:96: 65:a7:d3:89:7e:e4:25:7c:66:d3:2f:07:90:7d:f4: f8:de:47:af:ee:ed:b5:99:99:11:8b:8d:74:7f:d2: ca:df:6e:59:7c:cd:b3:2b:4b:c1:86:a5:fc:9a:31: 85:8d:c1:ff:95:08:03:92:1d:ad:d9:21:e0:49:69: 0b:93:65:2f:f5:80:11:46:b5:30:b9:ec:68:d5:4a: 68:11:03:52:6d:6d:71:06:97:47:19:25:74:4e:3b: ec:f2:a5:5c:7e:ad:8a:b5:d1:9d:19:93:10:41:cb: db:2e:88:70:03:18:db:65:8b:99:29:1d:5e:09:48: 9f:2d:7a:0e:c6:fc:56:88:b3:c2:d8:05:b8:e5:5c: bb:f9:9c:72:94:d0:00:03:25:60:1c:90:00:54:ca: 24:a5:87:f5:78:fd:a1:c6:dc:c3:fa:ef:90:29:68: ac:67:e0:39:b9:67:b9:b2:25:af:4c:66:e1:5c:e7: 1f:b1:fb:bd:af:db:d3:77:bf:2e:21:ce:f5:66:46: 5b:cf:fe:f3:4c:44:ea:48:51:65:26:6a:bd:99:85: e1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: CA:FALSE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:http://csc3-2010-crl.verisign.com/CSC3-2010.crl X509v3 Certificate Policies: Policy: 2.16.840.1.113733.1.7.23.3 CPS: https://www.verisign.com/rpa X509v3 Extended Key Usage: Code Signing Authority Information Access: OCSP - URI:http://ocsp.verisign.com CA Issuers - URI:http://csc3-2010-aia.verisign.com/CSC3-2010.cer X509v3 Authority Key Identifier: keyid:CF:99:A9:EA:7B:26:F4:4B:C9:8E:8F:D7:F0:05:26:EF:E3:D2:A7:9D Netscape Cert Type: Object Signing 1.3.6.1.4.1.311.2.1.27: 0....... Signature Algorithm: sha1WithRSAEncryption c2:7c:65:46:69:02:3e:27:9f:df:2b:e8:71:55:f4:21:b3:66: de:44:39:04:5d:8c:c1:2c:fd:b3:99:02:ca:d0:a1:c5:9b:29: 69:42:7a:93:ff:6c:de:8a:92:06:cf:ce:c5:39:dd:ce:c9:ed: 51:af:43:f4:ae:25:45:58:48:98:1e:e4:89:ec:82:c7:7f:7c: 35:de:d3:17:07:59:a7:51:9c:40:03:8b:8d:a6:e9:b2:8f:1a: 6b:6b:74:1c:cd:63:37:3b:30:6c:99:b6:aa:9c:b1:1d:00:68: 3a:3c:b5:71:f8:f4:4e:dc:2f:a9:be:c0:51:00:37:d7:7f:4e: c4:91:44:34:36:93:0c:85:f0:52:d4:92:d7:91:2a:7a:68:74: cb:b4:b6:64:dd:0e:89:67:44:3f:32:0a:fb:d7:b8:c0:b1:11: e7:36:e8:32:21:8a:48:b5:e9:54:7f:94:c2:21:6b:3f:c6:71: c8:cf:c3:db:a1:3f:d1:fe:06:cc:fc:74:36:e0:38:da:a4:94: 99:e0:73:9d:15:11:32:7d:f1:2b:96:ff:cd:47:5b:2f:9a:6b: a6:e2:21:7a:a8:bb:4a:b5:29:a0:3f:12:be:91:4c:ca:4e:33: 13:f3:77:4b:84:9e:f1:68:4e:6f:f1:e4:4b:72:8d:aa:c6:db: f3:82:e2:83
Certificate: Data: Version: 3 (0x2) Serial Number: 52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7 Signature Algorithm: sha1WithRSAEncryption Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5 Validity Not Before: Feb 8 00:00:00 2010 GMT Not After : Feb 7 23:59:59 2020 GMT Subject: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:23:4b:5e:a5:d7:8a:bb:32:e9:d4:57:f7:ef: e4:c7:26:7e:ad:19:98:fe:a8:9d:7d:94:f6:36:6b: 10:d7:75:81:30:7f:04:68:7f:cb:2b:75:1e:cd:1d: 08:8c:df:69:94:a7:37:a3:9c:7b:80:e0:99:e1:ee: 37:4d:5f:ce:3b:14:ee:86:d4:d0:f5:27:35:bc:25: 0b:38:a7:8c:63:9d:17:a3:08:a5:ab:b0:fb:cd:6a: 62:82:4c:d5:21:da:1b:d9:f1:e3:84:3b:8a:2a:4f: 85:5b:90:01:4f:c9:a7:76:10:7f:27:03:7c:be:ae: 7e:7d:c1:dd:f9:05:bc:1b:48:9c:69:e7:c0:a4:3c: 3c:41:00:3e:df:96:e5:c5:e4:94:71:d6:55:01:c7: 00:26:4a:40:3c:b5:a1:26:a9:0c:a7:6d:80:8e:90: 25:7b:cf:bf:3f:1c:eb:2f:96:fa:e5:87:77:c6:b5: 56:b2:7a:3b:54:30:53:1b:df:62:34:ff:1e:d1:f4: 5a:93:28:85:e5:4c:17:4e:7e:5b:fd:a4:93:99:7f: df:cd:ef:a4:75:ef:ef:15:f6:47:e7:f8:19:72:d8: 2e:34:1a:a6:b4:a7:4c:7e:bd:bb:4f:0c:3d:57:f1: 30:d6:a6:36:8e:d6:80:76:d7:19:2e:a5:cd:7e:34: 2d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE, pathlen:0 X509v3 Certificate Policies: Policy: 2.16.840.1.113733.1.7.23.3 CPS: https://www.verisign.com/cps User Notice: Explicit Text: https://www.verisign.com/rpa X509v3 Key Usage: critical Certificate Sign, CRL Sign 1.3.6.1.5.5.7.1.12: 0_.].[0Y0W0U..image/gif0!0.0...+..............k...j.H.,{..0%.#http://logo.verisign.com/vslogo.gif X509v3 CRL Distribution Points: Full Name: URI:http://crl.verisign.com/pca3-g5.crl Authority Information Access: OCSP - URI:http://ocsp.verisign.com X509v3 Extended Key Usage: TLS Web Client Authentication, Code Signing X509v3 Subject Alternative Name: DirName:/CN=VeriSignMPKI-2-8 X509v3 Subject Key Identifier: CF:99:A9:EA:7B:26:F4:4B:C9:8E:8F:D7:F0:05:26:EF:E3:D2:A7:9D X509v3 Authority Key Identifier: keyid:7F:D3:65:A7:C2:DD:EC:BB:F0:30:09:F3:43:39:FA:02:AF:33:31:33 Signature Algorithm: sha1WithRSAEncryption 56:22:e6:34:a4:c4:61:cb:48:b9:01:ad:56:a8:64:0f:d9:8c: 91:c4:bb:cc:0c:e5:ad:7a:a0:22:7f:df:47:38:4a:2d:6c:d1: 7f:71:1a:7c:ec:70:a9:b1:f0:4f:e4:0f:0c:53:fa:15:5e:fe: 74:98:49:24:85:81:26:1c:91:14:47:b0:4c:63:8c:bb:a1:34: d4:c6:45:e8:0d:85:26:73:03:d0:a9:8c:64:6d:dc:71:92:e6: 45:05:60:15:59:51:39:fc:58:14:6b:fe:d4:a4:ed:79:6b:08: 0c:41:72:e7:37:22:06:09:be:23:e9:3f:44:9a:1e:e9:61:9d: cc:b1:90:5c:fc:3d:d2:8d:ac:42:3d:65:36:d4:b4:3d:40:28: 8f:9b:10:cf:23:26:cc:4b:20:cb:90:1f:5d:8c:4c:34:ca:3c: d8:e5:37:d6:6f:a5:20:bd:34:eb:26:d9:ae:0d:e7:c5:9a:f7: a1:b4:21:91:33:6f:86:e8:58:bb:25:7c:74:0e:58:fe:75:1b: 63:3f:ce:31:7c:9b:8f:1b:96:9e:c5:53:76:84:5b:9c:ad:91: fa:ac:ed:93:ba:5d:c8:21:53:c2:82:53:63:af:12:0d:50:87: 11:1b:3d:54:52:96:8a:2c:9c:3d:92:1a:08:9a:05:2e:c7:93: a5:48:91:d3
pkcs7-signedData
- 1
- SHA1: nil
- 1.3.6.1.4.1.311.2.1.4
- #0
- 1.3.6.1.4.1.311.2.1.15
- :
00 3c 00 3c 00 3c 00 4f 00 62 00 73 00 6f 00 6c |.<.<.<.O.b.s.o.l| 00 65 00 74 00 65 00 3e 00 3e 00 3e |.e.t.e.>.>.> |
- :
- SHA1
32 1e 2e 0c 31 a5 4d 0d 98 d7 12 2d 17 85 d7 1a |2...1.M....-....| 93 5c 2a 4e |.\*N |
- 1.3.6.1.4.1.311.2.1.15
- #0
- Certificates
- Certificate #0
- 2
- 38:25:D7:FA:F8:61:AF:9E:F4:90:E7:26:B5:D6:5A:D5
- RSA-SHA1: nil
- Issuer
- C: US
- O: VeriSign, Inc.
- CN: VeriSign Time Stamping Services CA
- 2007-06-15 00:00:00 UTC: 2012-06-14 23:59:59 UTC
- Subject
- C: US
- O: VeriSign, Inc.
- CN: VeriSign Time Stamping Services Signer - G2
- #5
- rsaEncryption: nil
- C4:B5:F2:52:15:BC:88:86:60:29:16:4A:5B:2F:4B:91:
6B:87:91:F3:35:54:58:35:EA:D1:36:5E:62:4D:52:51:
34:71:C2:7B:66:1D:89:C8:DD:2A:C4:6A:0A:F6:37:D9:
98:74:91:F6:92:AE:B0:B5:76:96:F1:A9:4A:63:45:47:
2E:6B:0B:92:4E:4B:2B:8C:EE:58:4A:8B:D4:07:E4:1A:
2C:F8:82:AA:58:D9:CD:42:F3:2D:C0:75:DE:8D:AB:C7:
8E:1D:9A:6C:4C:08:95:1E:DE:DB:EF:67:E1:72:C2:49:
C2:9E:60:3C:E1:E2:BE:16:A3:63:78:69:14:7B:AD:2D: 0x010001
- X509v3 extensions
- authorityInfoAccess
- OCSP: http://ocsp.verisign.com
- basicConstraints
- true
- nil
- crlDistributionPoints: http://crl.verisign.com/tss-ca.crl
- extendedKeyUsage: true, timeStamping
- keyUsage: true, 0xc0
- subjectAltName
- CN: TSA1-2
- authorityInfoAccess
- RSA-SHA1:
50 c5 4b c8 24 80 df e4 0d 24 c2 de 1a b1 a1 02 |P.K.$....$......| a1 a6 82 2d 0c 83 15 81 37 0a 82 0e 2c b0 5a 17 |...-....7...,.Z.| 61 b5 d8 05 fe 88 db f1 91 91 b3 56 1a 40 a6 eb |a..........V.@..| 92 be 38 39 b0 75 36 74 3a 98 4f e4 37 ba 99 89 |..89.u6t:.O.7...| ca 95 42 1d b0 b9 c7 a0 8d 57 e0 fa d5 64 04 42 |..B......W...d.B| 35 4e 01 d1 33 a2 17 c8 4d aa 27 c7 f2 e1 86 4c |5N..3...M.'....L| 02 38 4d 83 78 c6 fc 53 e0 eb e0 06 87 dd a4 96 |.8M.x..S........| 9e 5e 0c 98 e2 a5 be bf 82 85 c3 60 e1 df ad 28 |.^.........`...(| d8 c7 a5 4b 64 da c7 1b 5b bd ac 39 08 d5 38 22 |...Kd...[..9..8"| a1 33 8b 2f 8a 9a eb bc 07 21 3f 44 41 09 07 b5 |.3./.....!?DA...| 65 1c 24 bc 48 d3 44 80 eb a1 cf c9 02 b4 14 cf |e.$.H.D.........| 54 c7 16 a3 80 5c f9 79 3e 5d 72 7d 88 17 9e 2c |T....\.y>]r}...,| 43 a2 ca 53 ce 7d 3d f6 2a 3a b8 4f 94 00 a5 6d |C..S.}=.*:.O...m| 0a 83 5d f9 5e 53 f4 18 b3 57 0f 70 c3 fb f5 ad |..].^S...W.p....| 95 a0 0e 17 de c4 16 80 60 c9 0f 2b 6e 86 04 f1 |........`..+n...| eb f4 78 27 d1 05 c5 ee 34 5b 5e b9 49 32 f2 33 |..x'....4[^.I2.3|
- 2
- Certificate #1
- 2
- 47:BF:19:95:DF:8D:52:46:43:F7:DB:6D:48:0D:31:A4
- RSA-SHA1: nil
- Issuer
- C: ZA
- ST: Western Cape
- L: Durbanville
- O: Thawte
- OU: Thawte Certification
- CN: Thawte Timestamping CA
- 2003-12-04 00:00:00 UTC: 2013-12-03 23:59:59 UTC
- Subject
- C: US
- O: VeriSign, Inc.
- CN: VeriSign Time Stamping Services CA
- #5
- rsaEncryption: nil
- A9:CA:B2:A4:CC:CD:20:AF:0A:7D:89:AC:87:75:F0:B4:
4E:F1:DF:C1:0F:BF:67:61:BD:A3:64:1C:DA:BB:F9:CA:
33:AB:84:30:89:58:7E:8C:DB:6B:DD:36:9E:0F:BF:D1:
EC:78:F2:77:A6:7E:6F:3C:BF:93:AF:0D:BA:68:F4:6C:
94:CA:BD:52:2D:AB:48:3D:F5:B6:D5:5D:5F:1B:02:9F:
FA:2F:6B:1E:A4:F7:A3:9A:A6:1A:C8:02:E1:7F:4C:52:
E3:0E:60:EC:40:1C:7E:B9:0D:DE:3F:C7:B4:DF:87:BD:
5F:7A:6A:31:2E:03:99:81:13:A8:47:20:CE:31:73:0D:
57:2D:CD:78:34:33:95:12:99:12:B9:DE:68:2F:AA:E6:
E3:C2:8A:8C:2A:C3:8B:21:87:66:BD:83:58:57:6F:75:
BF:3C:AA:26:87:5D:CA:10:15:3C:9F:84:EA:54:C1:0A:
6E:C4:FE:C5:4A:DD:B9:07:11:97:22:7C:DB:3E:27:D1:
1E:78:EC:9F:31:C9:F1:E6:22:19:DB:C4:B3:47:43:9A:
1A:5F:A0:1E:90:E4:5E:F5:EE:7C:F1:7D:AB:62:01:8F:
F5:4D:0B:DE:D0:22:56:A8:95:CD:AE:88:76:AE:EE:BA:
0D:F3:E4:4D:D9:A0:FB:68:A0:AE:14:3B:B3:87:C1:BB: 0x010001
- X509v3 extensions
- authorityInfoAccess
- OCSP: http://ocsp.verisign.com
- basicConstraints
- true
- true: 0
- crlDistributionPoints: http://crl.verisign.com/ThawteTimestampingCA.crl
- extendedKeyUsage: timeStamping
- keyUsage: true, 6
- subjectAltName
- CN: TSA2048-1-53
- authorityInfoAccess
- RSA-SHA1:
4a 6b f9 ea 58 c2 44 1c 31 89 79 99 2b 96 bf 82 |Jk..X.D.1.y.+...| ac 01 d6 1c 4c cd b0 8a 58 6e df 08 29 a3 5e c8 |....L...Xn..).^.| ca 93 13 e7 04 52 0d ef 47 27 2f 00 38 b0 e4 c9 |.....R..G'/.8...| 93 4e 9a d4 22 62 15 f7 3f 37 21 4f 70 31 80 f1 |.N.."b..?7!Op1..| 8b 38 87 b3 e8 e8 97 00 fe cf 55 96 4e 24 d2 a9 |.8........U.N$..| 27 4e 7a ae b7 61 41 f3 2a ce e7 c9 d9 5e dd bb |'Nz..aA.*....^..| 2b 85 3e b5 9d b5 d9 e1 57 ff be b4 c5 7e f5 cf |+.>.....W....~..| 0c 9e f0 97 fe 2b d3 3b 52 1b 1b 38 27 f7 3f 4a |.....+.;R..8'.?J|
- 2
- Certificate #2
- 2
- 74:1D:34:07:93:30:6A:CA:84:FA:B3:AB:BB:15:67:CE
- RSA-SHA1: nil
- Issuer
- C: US
- O: VeriSign, Inc.
- OU: VeriSign Trust Network
- OU: Terms of use at https://www.verisign.com/rpa (c)10
- CN: VeriSign Class 3 Code Signing 2010 CA
- 2011-07-06 00:00:00 UTC: 2013-08-22 23:59:59 UTC
- Subject
- C: GB
- ST: London
- L: London
- O: Piriform Ltd
- OU: Digital ID Class 3 - Microsoft Software Validation v2
- CN: Piriform Ltd
- #5
- rsaEncryption: nil
- CA:43:68:52:51:19:F1:0A:E7:79:76:9F:F5:50:6B:FA:
DF:6F:BF:C3:02:D9:05:E4:C5:FD:D0:2D:34:7A:04:D5:
C2:D8:4D:37:45:A2:72:A7:F4:52:9F:96:65:A7:D3:89:
7E:E4:25:7C:66:D3:2F:07:90:7D:F4:F8:DE:47:AF:EE:
ED:B5:99:99:11:8B:8D:74:7F:D2:CA:DF:6E:59:7C:CD:
B3:2B:4B:C1:86:A5:FC:9A:31:85:8D:C1:FF:95:08:03:
92:1D:AD:D9:21:E0:49:69:0B:93:65:2F:F5:80:11:46:
B5:30:B9:EC:68:D5:4A:68:11:03:52:6D:6D:71:06:97:
47:19:25:74:4E:3B:EC:F2:A5:5C:7E:AD:8A:B5:D1:9D:
19:93:10:41:CB:DB:2E:88:70:03:18:DB:65:8B:99:29:
1D:5E:09:48:9F:2D:7A:0E:C6:FC:56:88:B3:C2:D8:05:
B8:E5:5C:BB:F9:9C:72:94:D0:00:03:25:60:1C:90:00:
54:CA:24:A5:87:F5:78:FD:A1:C6:DC:C3:FA:EF:90:29:
68:AC:67:E0:39:B9:67:B9:B2:25:AF:4C:66:E1:5C:E7:
1F:B1:FB:BD:AF:DB:D3:77:BF:2E:21:CE:F5:66:46:5B:
CF:FE:F3:4C:44:EA:48:51:65:26:6A:BD:99:85:E1:55: 0x010001
- X509v3 extensions
- basicConstraints
- nil
- keyUsage: true, 0x80
- crlDistributionPoints: http://csc3-2010-crl.verisign.com/CSC3-2010.crl
- certificatePolicies
- 2.16.840.1.113733.1.7.23.3
- id-qt-cps: https://www.verisign.com/rpa
- 2.16.840.1.113733.1.7.23.3
- extendedKeyUsage: codeSigning
- authorityInfoAccess
- #0
- OCSP: http://ocsp.verisign.com
- caIssuers: http://csc3-2010-aia.verisign.com/CSC3-2010.cer
- #0
- authorityKeyIdentifier:
cf 99 a9 ea 7b 26 f4 4b c9 8e 8f d7 f0 05 26 ef |....{&.K......&.| e3 d2 a7 9d |.... |
- nsCertType: 0x10
- 1.3.6.1.4.1.311.2.1.27
- false: true
- basicConstraints
- RSA-SHA1:
c2 7c 65 46 69 02 3e 27 9f df 2b e8 71 55 f4 21 |.|eFi.>'..+.qU.!| b3 66 de 44 39 04 5d 8c c1 2c fd b3 99 02 ca d0 |.f.D9.]..,......| a1 c5 9b 29 69 42 7a 93 ff 6c de 8a 92 06 cf ce |...)iBz..l......| c5 39 dd ce c9 ed 51 af 43 f4 ae 25 45 58 48 98 |.9....Q.C..%EXH.| 1e e4 89 ec 82 c7 7f 7c 35 de d3 17 07 59 a7 51 |.......|5....Y.Q| 9c 40 03 8b 8d a6 e9 b2 8f 1a 6b 6b 74 1c cd 63 |.@........kkt..c| 37 3b 30 6c 99 b6 aa 9c b1 1d 00 68 3a 3c b5 71 |7;0l.......h:<.q| f8 f4 4e dc 2f a9 be c0 51 00 37 d7 7f 4e c4 91 |..N./...Q.7..N..| 44 34 36 93 0c 85 f0 52 d4 92 d7 91 2a 7a 68 74 |D46....R....*zht| cb b4 b6 64 dd 0e 89 67 44 3f 32 0a fb d7 b8 c0 |...d...gD?2.....| b1 11 e7 36 e8 32 21 8a 48 b5 e9 54 7f 94 c2 21 |...6.2!.H..T...!| 6b 3f c6 71 c8 cf c3 db a1 3f d1 fe 06 cc fc 74 |k?.q.....?.....t| 36 e0 38 da a4 94 99 e0 73 9d 15 11 32 7d f1 2b |6.8.....s...2}.+| 96 ff cd 47 5b 2f 9a 6b a6 e2 21 7a a8 bb 4a b5 |...G[/.k..!z..J.| 29 a0 3f 12 be 91 4c ca 4e 33 13 f3 77 4b 84 9e |).?...L.N3..wK..| f1 68 4e 6f f1 e4 4b 72 8d aa c6 db f3 82 e2 83 |.hNo..Kr........|
- 2
- Certificate #3
- 2
- 52:00:E5:AA:25:56:FC:1A:86:ED:96:C9:D4:4B:33:C7
- RSA-SHA1: nil
- Issuer
- C: US
- O: VeriSign, Inc.
- OU: VeriSign Trust Network
- OU: (c) 2006 VeriSign, Inc. - For authorized use only
- CN: VeriSign Class 3 Public Primary Certification Authority - G5
- 2010-02-08 00:00:00 UTC: 2020-02-07 23:59:59 UTC
- Subject
- C: US
- O: VeriSign, Inc.
- OU: VeriSign Trust Network
- OU: Terms of use at https://www.verisign.com/rpa (c)10
- CN: VeriSign Class 3 Code Signing 2010 CA
- #5
- rsaEncryption: nil
- F5:23:4B:5E:A5:D7:8A:BB:32:E9:D4:57:F7:EF:E4:C7:
26:7E:AD:19:98:FE:A8:9D:7D:94:F6:36:6B:10:D7:75:
81:30:7F:04:68:7F:CB:2B:75:1E:CD:1D:08:8C:DF:69:
94:A7:37:A3:9C:7B:80:E0:99:E1:EE:37:4D:5F:CE:3B:
14:EE:86:D4:D0:F5:27:35:BC:25:0B:38:A7:8C:63:9D:
17:A3:08:A5:AB:B0:FB:CD:6A:62:82:4C:D5:21:DA:1B:
D9:F1:E3:84:3B:8A:2A:4F:85:5B:90:01:4F:C9:A7:76:
10:7F:27:03:7C:BE:AE:7E:7D:C1:DD:F9:05:BC:1B:48:
9C:69:E7:C0:A4:3C:3C:41:00:3E:DF:96:E5:C5:E4:94:
71:D6:55:01:C7:00:26:4A:40:3C:B5:A1:26:A9:0C:A7:
6D:80:8E:90:25:7B:CF:BF:3F:1C:EB:2F:96:FA:E5:87:
77:C6:B5:56:B2:7A:3B:54:30:53:1B:DF:62:34:FF:1E:
D1:F4:5A:93:28:85:E5:4C:17:4E:7E:5B:FD:A4:93:99:
7F:DF:CD:EF:A4:75:EF:EF:15:F6:47:E7:F8:19:72:D8:
2E:34:1A:A6:B4:A7:4C:7E:BD:BB:4F:0C:3D:57:F1:30:
D6:A6:36:8E:D6:80:76:D7:19:2E:A5:CD:7E:34:2D:89: 0x010001
- X509v3 extensions
- basicConstraints
- true
- true: 0
- certificatePolicies
- 2.16.840.1.113733.1.7.23.3
- #0
- id-qt-cps: https://www.verisign.com/cps
- id-qt-unotice: https://www.verisign.com/rpa
- #0
- 2.16.840.1.113733.1.7.23.3
- keyUsage: true, 6
- 1.3.6.1.5.5.7.1.12
- image/gif
- SHA1:
8f e5 d3 1a 86 ac 8d 8e 6b c3 cf 80 6a d4 48 18 |........k...j.H.| 2c 7b 19 2e |,{.. |
- http://logo.verisign.com/vslogo.gif
- SHA1:
- image/gif
- crlDistributionPoints: http://crl.verisign.com/pca3-g5.crl
- authorityInfoAccess
- OCSP: http://ocsp.verisign.com
- extendedKeyUsage
- clientAuth: codeSigning
- subjectAltName
- CN: VeriSignMPKI-2-8
- subjectKeyIdentifier:
cf 99 a9 ea 7b 26 f4 4b c9 8e 8f d7 f0 05 26 ef |....{&.K......&.| e3 d2 a7 9d |.... |
- authorityKeyIdentifier:
7f d3 65 a7 c2 dd ec bb f0 30 09 f3 43 39 fa 02 |..e......0..C9..| af 33 31 33 |.313 |
- basicConstraints
- RSA-SHA1:
56 22 e6 34 a4 c4 61 cb 48 b9 01 ad 56 a8 64 0f |V".4..a.H...V.d.| d9 8c 91 c4 bb cc 0c e5 ad 7a a0 22 7f df 47 38 |.........z."..G8| 4a 2d 6c d1 7f 71 1a 7c ec 70 a9 b1 f0 4f e4 0f |J-l..q.|.p...O..| 0c 53 fa 15 5e fe 74 98 49 24 85 81 26 1c 91 14 |.S..^.t.I$..&...| 47 b0 4c 63 8c bb a1 34 d4 c6 45 e8 0d 85 26 73 |G.Lc...4..E...&s| 03 d0 a9 8c 64 6d dc 71 92 e6 45 05 60 15 59 51 |....dm.q..E.`.YQ| 39 fc 58 14 6b fe d4 a4 ed 79 6b 08 0c 41 72 e7 |9.X.k....yk..Ar.| 37 22 06 09 be 23 e9 3f 44 9a 1e e9 61 9d cc b1 |7"...#.?D...a...| 90 5c fc 3d d2 8d ac 42 3d 65 36 d4 b4 3d 40 28 |.\.=...B=e6..=@(| 8f 9b 10 cf 23 26 cc 4b 20 cb 90 1f 5d 8c 4c 34 |....#&.K ...].L4| ca 3c d8 e5 37 d6 6f a5 20 bd 34 eb 26 d9 ae 0d |.<..7.o. .4.&...| e7 c5 9a f7 a1 b4 21 91 33 6f 86 e8 58 bb 25 7c |......!.3o..X.%|| 74 0e 58 fe 75 1b 63 3f ce 31 7c 9b 8f 1b 96 9e |t.X.u.c?.1|.....| c5 53 76 84 5b 9c ad 91 fa ac ed 93 ba 5d c8 21 |.Sv.[........].!| 53 c2 82 53 63 af 12 0d 50 87 11 1b 3d 54 52 96 |S..Sc...P...=TR.| 8a 2c 9c 3d 92 1a 08 9a 05 2e c7 93 a5 48 91 d3 |.,.=.........H..|
- 2
- Certificate #0
- Signer
- 1
- unnamed
- #0
- C: US
- O: VeriSign, Inc.
- OU: VeriSign Trust Network
- OU: Terms of use at https://www.verisign.com/rpa (c)10
- CN: VeriSign Class 3 Code Signing 2010 CA
- 74:1D:34:07:93:30:6A:CA:84:FA:B3:AB:BB:15:67:CE
- #0
- SHA1: nil
- #3
- 1.3.6.1.4.1.311.2.1.12
- nil
- contentType: 1.3.6.1.4.1.311.2.1.4
- 1.3.6.1.4.1.311.2.1.11: msCodeInd
- messageDigest:
47 18 9b 33 7d 0e a4 9c d4 8c d1 97 53 f1 ca 39 |G..3}.......S..9| 33 23 20 77 |3# w |
- 1.3.6.1.4.1.311.2.1.12
- rsaEncryption:
4d ab 63 35 3c 4a 25 ec d7 5f ec e4 ee 3e 72 d0 |M.c5
r.| fb 04 3b 76 5b 72 ac d7 53 e4 19 de f9 fe 9b 48 |..;v[r..S......H| 43 b1 89 22 6c e4 f8 4b 27 23 3f 70 9a 9c db 08 |C.."l..K'#?p....| ae e5 f7 95 db 83 0d 9e 97 e9 27 72 bc 1f e8 11 |..........'r....| 67 21 75 e6 9b 85 47 a1 67 18 40 bc 62 95 c3 f8 |g!u...G.g.@.b...| b8 d5 70 28 77 b4 c0 dc 3c a2 06 76 3c d0 d9 f7 |..p(w...<..v<...| 1d b5 d1 79 a8 47 46 ad 7e 15 e6 9c b6 ec 40 30 |...y.GF.~.....@0| aa 61 05 ff a9 c2 82 83 48 29 9a 7c 0a 5d b5 de |.a......H).|.]..| d9 45 ce a6 97 93 35 ea 78 64 32 3a 5a 46 06 a9 |.E....5.xd2:ZF..| b8 95 c0 61 a3 88 cf 89 50 1c 76 e3 b2 0a 92 0c |...a....P.v.....| 32 41 e1 1b b3 fa 99 04 12 22 a8 7f e6 21 ca 05 |2A......."...!..| 0d da e1 c2 01 5c 9c 48 74 1a fc 07 99 1e f1 fa |.....\.Ht.......| d9 14 e0 26 33 5a dd 1f 0c a4 1d 64 5d 6a e6 ee |...&3Z.....d]j..| 05 ab ca 3a 80 e3 7b 33 13 d4 de 5f e4 4d 2b 90 |...:..{3..._.M+.| 58 4b be 49 28 95 21 20 da 21 99 ab 74 91 02 80 |XK.I(.! .!..t...| 80 23 ca a2 e5 05 2e 00 fd 44 d1 99 ed 90 75 a7 |.#.......D....u.| - countersignature
- 1
- unnamed
- #0
- C: US
- O: VeriSign, Inc.
- CN: VeriSign Time Stamping Services CA
- 38:25:D7:FA:F8:61:AF:9E:F4:90:E7:26:B5:D6:5A:D5
- #0
- SHA1: nil
- #2
- contentType: pkcs7-data
- signingTime: 2011-12-01 12:34:43 UTC
- messageDigest:
b6 e2 a7 d9 73 96 97 4d f3 06 bf 79 e9 87 99 aa |....s..M...y....| 18 2b c8 20 |.+. |
- rsaEncryption:
9c a6 90 6a e9 82 9a 96 a8 25 df a7 4c 05 c2 3e |...j.....%..L..>| c7 65 25 0f 12 10 82 ee 02 af 42 ba 22 94 6b 48 |.e%.......B.".kH| 93 fe ce d8 10 1e 64 3e 6d d6 fd 79 de 7e 38 53 |......d>m..y.~8S| c3 1d 0e 04 66 21 d3 d1 7a ec e0 e1 ca fa 83 a6 |....f!..z.......| c8 26 3c 6b 7d 66 75 6a 41 d4 48 e1 3c 61 44 78 |.&
- unnamed
- 1
offset | size | type | comment | |
---|---|---|---|---|
0 | 1463296 | EXE | 12/01/2011 11:18:05 | # |
15c1 | 15 | HTM | # | |
1469ac | 56193 | PNG | (256 x 256) | # |
15d714 | 724 | PNG | (16 x 16) | # |
15d9e8 | 716 | PNG | (16 x 16) | # |
15dcb4 | 722 | PNG | (16 x 16) | # |
15df88 | 20449 | PNG | (164 x 314) | # |
162f6c | 4127 | PNG | (45 x 58) | # |
163f8c | 2834 | PNG | (45 x 58) | # |
164aa0 | 696 | PNG | (16 x 16) | # |
165400 | 5952 | PKCS7 | Authenticode Signature | # |
Please donate some bucks to keep this site up and running: | |
Ko-fi | |
---|---|
Yandex.Money | |
Thank you! |
[?] ignoring invalid PEdump::BITMAPINFOHEADER
[?] can't find file_offset of VA 0x141c70