filenameOmega A.dll
size18439112 (0x1195bc8)
md5e98f7c65cb0e076dc2c922dc8c9f98b5
typePE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x130

Rich Header

lib idversiontimes used
1530771
150204133
13221022110
13121022216
109507275
00497
1255072755
9530772
131307291
13230729308
1235072739
10508
13821022115
1492102269
146210221
148210221
145210221

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections0x14
TimeDateStamp0x5704a874
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x2102
Magic0x10b
LinkerVersion9.0
SizeOfCode0x82a716
SizeOfInitializedData0x11594c7
SizeOfUninitializedData0
AddressOfEntryPoint0x141e870
BaseOfCode0x1000
BaseOfData0x82c000
ImageBase0x10000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.0
ImageVersion0.0
SubsystemVersion5.0
Reserved10
SizeOfImage0x1994000
SizeOfHeaders0x600
CheckSum0x11a24b1
Subsystem2
DllCharacteristics0x100
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000x82928c0x829400R-X CODE
.text10x82b0000x1500x200R-X CODE
.rdata0x82c0000x3186b70x318800R-- IDATA
.data0xb450000x80f0000x1ee00RW- IDATA
.tls0x135400090x200RW- IDATA
.data10x13550000xa480xc00RW- IDATA
.trace0x13560000x1780x200R-- IDATA
dummy10x135700060x200RW- IDATA
dummy20x13580000xc0x200RW- IDATA
.mfrt0x13590000xc0x200R-- IDATA
.rsrc0x135a0000x3c80x400R-- IDATA
.oldrel0x135b0000x630860x63200R-- IDATA DISCARDABLE
.reloc320x13bf0000x5e76c0x5e800R-- IDATA
.text0010x141e0000x133a0x1400R-X CODE
.rdata010x14200000x64e0x800R-- IDATA
.data0010x14210000x25800x200RW- IDATA
.tls00010x142400020x200RW- IDATA
.rsrc0010x14250000x59c0x600R-- IDATA
.reloc0x14260000x1d40x200R-- IDATA DISCARDABLE
.guard0x14270000x56c32f0x56c400RW- IDATA

Data Directory

typevasize
EXPORT0xb445200x197
IMPORT0x142032c0x64
RESOURCE0x135a0000x3c8
EXCEPTION00
SECURITY0x11932000x29c8
BASERELOC0x14260000x164
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS0x14202600x18
LOAD_CONFIG00
Bound_IAT00
IAT0x14200000x84
Delay_IAT00
CLR_Header00

TLS

raw
start		raw
end		indexcallbkszero
fill		flags
0x113540000x113540080x10b6dd280x1142008c00
typenamesizecp
VERSION#14601252
MANIFEST#23461252
module_namehintordfunction_name
PSAPI.DLL4EnumProcessModules
PSAPI.DLL17GetModuleInformation
KERNEL32.dll195DeleteFileW
KERNEL32.dll1045SetUnhandledExceptionFilter
KERNEL32.dll1086UnhandledExceptionFilter
KERNEL32.dll601GetTempFileNameW
KERNEL32.dll669HeapAlloc
KERNEL32.dll425GetCurrentProcess
KERNEL32.dll673HeapFree
KERNEL32.dll505GetModuleHandleW
KERNEL32.dll1111VirtualFree
KERNEL32.dll547GetProcessHeap
KERNEL32.dll1165WriteFile
KERNEL32.dll127CreateFileW
KERNEL32.dll603GetTempPathW
KERNEL32.dll486GetLastError
KERNEL32.dll1108VirtualAlloc
KERNEL32.dll67CloseHandle
KERNEL32.dll721IsDebuggerPresent
KERNEL32.dll451GetEnvironmentVariableW
KERNEL32.dll332FreeLibrary
KERNEL32.dll756LoadLibraryW
KERNEL32.dll1069TerminateProcess
KERNEL32.dll501GetModuleFileNameW
KERNEL32.dll544GetProcAddress
KERNEL32.dll914RtlUnwind
USER32.dll284GetDesktopWindow
USER32.dll776wsprintfW
SHELL32.dll291Shell_NotifyIconW
ordentry_vafunction_name
10xb57374?__pace_fusion_license_callback_0xc0ccf499_AuthCBFnPtr_mfort6317_@@3PAP6A_K_K@ZA
20x605e_ACFCanUnloadNow@4
30x601f_ACFGetClassFactory@16
40x60fa_ACFGetSDKVersion@4
50x5fe3_ACFRegisterComponent@12
60x5fab_ACFRegisterPlugin@8
70x60c6_ACFShutdown@4
80x6092_ACFStartup@4
90xa3cf4VSTPluginMain
100xa3cf4main
110x1535fapxpiMain
module_nameOmegaA.dll
flags0
timestamp2016-04-06 06:04:55
version0.0
ordinal_base1
nFunctions11
nNames11
Names(11)0xb44574
Functions(11)0xb44548
NameOrdinals(11)0xb445a0

StringTable 040904E4

CompanyNameKush
FileDescriptionOmegaA
FileVersion1.0.0
ProductNameOmegaA
ProductVersion1.0.0

VS_FIXEDFILEINFO

FileVersion0.9.5.0
ProductVersion0.0.0.0
StrucVersion0x10000
FileFlagsMask0
FileFlags0
FileOS0
FileType0
FileSubtype0

Signers (1)

issuer: /CN=PhonoXone/C=DK
serial: 01

Certificates (3)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1 (0x1)
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: CN=PhonoXone, C=DK
        Validity
            Not Before: Feb 17 10:22:14 2015 GMT
            Not After : Apr 17 10:22:14 2034 GMT
        Subject: CN=PhonoXone, C=DK
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:be:7a:71:3c:76:fa:9b:c2:bc:b0:9c:04:3a:cb:
                    e6:43:86:75:0f:33:e0:7d:4a:cf:6f:1f:4f:57:cb:
                    c0:a1:29:14:f4:e9:37:e2:51:1d:47:69:2c:76:1e:
                    72:55:e3:d2:bf:4b:7d:38:e5:c8:f9:2f:39:bb:be:
                    57:2b:35:43:ab:05:ed:c3:3f:d2:09:84:f2:1d:91:
                    9b:6b:70:fa:c3:f6:0b:31:97:a3:88:ae:12:e5:d9:
                    48:1c:31:74:e4:68:1e:79:e8:99:94:a2:90:27:91:
                    17:18:f2:05:70:ec:b5:04:30:97:64:5f:74:ab:9f:
                    2e:c0:f3:07:1e:3f:d3:bd:1e:b2:3d:78:b5:3a:0a:
                    2a:ba:e8:8b:c4:98:35:f7:9b:a4:38:c9:eb:f0:70:
                    b7:8f:54:9a:ef:de:f3:12:45:e7:05:aa:57:e7:9f:
                    a2:1f:8e:15:e6:06:f0:23:d4:67:7c:1b:20:b3:27:
                    7a:67:71:5b:80:3f:17:0c:fa:1b:1b:71:6f:aa:13:
                    11:c5:32:ce:5d:f7:57:b4:25:f3:f5:9e:41:e2:ba:
                    b4:44:0f:fc:2d:a1:b5:31:ef:9f:68:b5:02:50:1e:
                    e2:52:a5:ad:76:f0:1e:33:a6:3e:62:af:d2:a3:52:
                    7a:73:25:fd:5d:9b:1a:7c:a4:59:b4:d5:f2:fc:c7:
                    5a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage: critical
                Code Signing
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        86:35:9d:61:4e:6a:b2:25:8b:d3:46:04:e1:0e:bc:f6:02:b1:
        24:34:41:d8:41:eb:67:49:ea:8a:f5:84:12:04:05:f1:c7:91:
        bc:97:d7:77:26:59:1d:1a:4a:53:10:6d:be:14:13:06:91:80:
        8d:d5:e2:ab:90:6c:dc:7d:bb:01:a8:2f:45:f1:81:19:df:fd:
        48:86:d2:68:54:6d:24:a7:d1:96:28:a1:fd:68:07:54:5d:3b:
        e9:65:77:8f:33:2f:9d:59:4d:05:ce:8f:5a:3e:73:83:84:ae:
        1e:6b:6c:29:5a:4e:49:83:4f:8f:fc:d8:60:da:48:86:e6:6a:
        fb:6c:fd:d1:c3:e0:17:c6:94:0e:95:56:25:71:6f:1d:b0:d6:
        ef:2f:9a:5f:04:25:59:e8:fc:d3:9a:f7:2d:07:68:c2:57:44:
        bf:24:bc:cf:0c:b2:94:58:10:b8:29:49:c6:71:35:e5:88:90:
        80:56:25:00:33:8b:eb:e2:57:9f:98:d9:ae:76:38:19:c5:93:
        41:c8:ee:e9:71:cf:6e:0a:2a:c7:c6:a0:1d:b1:fc:1c:06:56:
        bd:08:1e:f3:ba:45:87:b0:7e:2e:c4:49:6b:31:e4:b1:fc:45:
        5d:dd:de:10:89:75:05:ed:19:8e:fe:c2:f3:ac:5c:9c:82:17:
        73:79:cd:48

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
        Validity
            Not Before: Dec 21 00:00:00 2012 GMT
            Not After : Dec 30 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:b3:49:54:4b:97:1c:12:0a:d8:25:79:91:
                    22:57:2a:6f:dc:b8:26:c4:43:73:6b:c2:bf:2e:50:
                    5a:fb:14:c2:76:8e:43:01:25:43:b4:a1:e2:45:f4:
                    e8:b7:7b:c3:74:cc:22:d7:b4:94:00:02:f7:4d:ed:
                    bf:b4:b7:44:24:6b:cd:5f:45:3b:d1:44:ce:43:12:
                    73:17:82:8b:69:b4:2b:cb:99:1e:ac:72:1b:26:4d:
                    71:1f:b1:31:dd:fb:51:61:02:53:a6:aa:f5:49:2c:
                    05:78:45:a5:2f:89:ce:e7:99:e7:fe:8c:e2:57:3f:
                    3d:c6:92:dc:4a:f8:7b:33:e4:79:0a:fb:f0:75:88:
                    41:9c:ff:c5:03:51:99:aa:d7:6c:9f:93:69:87:65:
                    29:83:85:c2:60:14:c4:c8:c9:3b:14:da:c0:81:f0:
                    1f:0d:74:de:92:22:ab:ca:f7:fb:74:7c:27:e6:f7:
                    4a:1b:7f:a7:c3:9e:2d:ae:8a:ea:a6:e6:aa:27:16:
                    7d:61:f7:98:71:11:bc:e2:50:a1:4b:e5:5d:fa:e5:
                    0e:a7:2c:9f:aa:65:20:d3:d8:96:e8:c8:7c:a5:4e:
                    48:44:ff:19:e2:44:07:92:0b:d7:68:84:80:5d:6a:
                    78:64:45:cd:60:46:7e:54:c1:13:7c:c5:79:f1:c9:
                    c1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD
            Authority Information Access: 
                OCSP - URI:http://ocsp.thawte.com
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.thawte.com/ThawteTimestampingCA.crl
            X509v3 Extended Key Usage: 
                Time Stamping
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-1
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        03:09:9b:8f:79:ef:7f:59:30:aa:ef:68:b5:fa:e3:09:1d:bb:
        4f:82:06:5d:37:5f:a6:52:9f:16:8d:ea:1c:92:09:44:6e:f5:
        6d:eb:58:7c:30:e8:f9:69:8d:23:73:0b:12:6f:47:a9:ae:39:
        11:f8:2a:b1:9b:b0:1a:c3:8e:eb:59:96:00:ad:ce:0c:4d:b2:
        d0:31:a6:08:5c:2a:7a:fc:e2:7a:1d:57:4c:a8:65:18:e9:79:
        40:62:25:96:6e:c7:c7:37:6a:83:21:08:8e:41:ea:dd:d9:57:
        3f:1d:77:49:87:2a:16:06:5e:a6:38:6a:22:12:a3:51:19:83:
        7e:b6

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Validity
            Not Before: Oct 18 00:00:00 2012 GMT
            Not After : Dec 29 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer - G4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a2:63:0b:39:44:b8:bb:23:a7:44:49:bb:0e:ff:
                    a1:f0:61:0a:53:93:b0:98:db:ad:2c:0f:4a:c5:6e:
                    ff:86:3c:53:55:0f:15:ce:04:3f:2b:fd:a9:96:96:
                    d9:be:61:79:0b:5b:c9:4c:86:76:e5:e0:43:4b:22:
                    95:ee:c2:2b:43:c1:9f:d8:68:b4:8e:40:4f:ee:85:
                    38:b9:11:c5:23:f2:64:58:f0:15:32:6f:4e:57:a1:
                    ae:88:a4:02:d7:2a:1e:cd:4b:e1:dd:63:d5:17:89:
                    32:5b:b0:5e:99:5a:a8:9d:28:50:0e:17:ee:96:db:
                    61:3b:45:51:1d:cf:12:56:0b:92:47:fc:ab:ae:f6:
                    66:3d:47:ac:70:72:e7:92:e7:5f:cd:10:b9:c4:83:
                    64:94:19:bd:25:80:e1:e8:d2:22:a5:d0:ba:02:7a:
                    a1:77:93:5b:65:c3:ee:17:74:bc:41:86:2a:dc:08:
                    4c:8c:92:8c:91:2d:9e:77:44:1f:68:d6:a8:74:77:
                    db:0e:5b:32:8b:56:8b:33:bd:d9:63:c8:49:9d:3a:
                    c5:c5:ea:33:0b:d2:f1:a3:1b:f4:8b:be:d9:b3:57:
                    8b:3b:de:04:a7:7a:22:b2:24:ae:2e:c7:70:c5:be:
                    4e:83:26:08:fb:0b:bd:a9:4f:99:08:e1:10:28:72:
                    aa:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                OCSP - URI:http://ts-ocsp.ws.symantec.com
                CA Issuers - URI:http://ts-aia.ws.symantec.com/tss-ca-g2.cer
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://ts-crl.ws.symantec.com/tss-ca-g2.crl
            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-2
            X509v3 Subject Key Identifier: 
                46:C6:69:A3:0E:4A:14:1E:D5:4C:DA:52:63:17:3F:5E:36:BC:0D:E6
            X509v3 Authority Key Identifier: 
                5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        78:3b:b4:91:2a:00:4c:f0:8f:62:30:37:78:a3:84:27:07:6f:
        18:b2:de:25:dc:a0:d4:94:03:aa:86:4e:25:9f:9a:40:03:1c:
        dd:ce:e3:79:cb:21:68:06:da:b6:32:b4:6d:bf:f4:2c:26:63:
        33:e4:49:64:6d:0d:e6:c3:67:0e:f7:05:a4:35:6c:7c:89:16:
        c6:e9:b2:df:b2:e9:dd:20:c6:71:0f:cd:95:74:dc:b6:5c:de:
        bd:37:1f:43:78:e6:78:b5:cd:28:04:20:a3:aa:f1:4b:c4:88:
        29:91:0e:80:d1:11:fc:dd:5c:76:6e:4f:5e:0e:45:46:41:6e:
        0d:b0:ea:38:9a:b1:3a:da:09:71:10:fc:1c:79:b4:80:7b:ac:
        69:f4:fd:9c:b6:0c:16:2b:f1:7f:5b:09:3d:9b:5b:e2:16:ca:
        13:81:6d:00:2e:38:0d:a8:29:8f:2c:e1:b2:f4:5a:a9:01:af:
        15:9c:2c:2f:49:1b:db:22:bb:c3:fe:78:94:51:c3:86:b1:82:
        88:5d:f0:3d:b4:51:a1:79:33:2b:2e:7b:b9:dc:20:09:13:71:
        eb:6a:19:5b:cf:e8:a5:30:57:2c:89:49:3f:b9:cf:7f:c9:bf:
        3e:22:68:63:53:9a:bd:69:74:ac:c5:1d:3c:7f:92:e0:c3:bc:
        1c:d8:04:75

No certificates in

undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
pkcs7-signedData
  • 1
    • SHA1: nil
    • 1.3.6.1.4.1.311.2.1.4
      • #0
        • 1.3.6.1.4.1.311.2.1.15
          • :
        • SHA1
          • f3 74 5b 16 27 3d 26 ec  75 a2 28 97 80 21 86 dd  |.t[.'=&.u.(..!..|
f7 48 6e 7c                                       |.Hn|            |
    • unnamed
      • #0
        • 2
          • 1
          • RSA-SHA1
          • #2
            • CN: PhonoXone
            • C: DK
          • 2015-02-17 10:22:14 UTC: 2034-04-17 10:22:14 UTC
          • #4
            • CN: PhonoXone
            • C: DK
          • #5
            • rsaEncryption: nil
            • BE:7A:71:3C:76:FA:9B:C2:BC:B0:9C:04:3A:CB:E6:43:
              86:75:0F:33:E0:7D:4A:CF:6F:1F:4F:57:CB:C0:A1:29:
              14:F4:E9:37:E2:51:1D:47:69:2C:76:1E:72:55:E3:D2:
              BF:4B:7D:38:E5:C8:F9:2F:39:BB:BE:57:2B:35:43:AB:
              05:ED:C3:3F:D2:09:84:F2:1D:91:9B:6B:70:FA:C3:F6:
              0B:31:97:A3:88:AE:12:E5:D9:48:1C:31:74:E4:68:1E:
              79:E8:99:94:A2:90:27:91:17:18:F2:05:70:EC:B5:04:
              30:97:64:5F:74:AB:9F:2E:C0:F3:07:1E:3F:D3:BD:1E:
              B2:3D:78:B5:3A:0A:2A:BA:E8:8B:C4:98:35:F7:9B:A4:
              38:C9:EB:F0:70:B7:8F:54:9A:EF:DE:F3:12:45:E7:05:
              AA:57:E7:9F:A2:1F:8E:15:E6:06:F0:23:D4:67:7C:1B:
              20:B3:27:7A:67:71:5B:80:3F:17:0C:FA:1B:1B:71:6F:
              AA:13:11:C5:32:CE:5D:F7:57:B4:25:F3:F5:9E:41:E2:
              BA:B4:44:0F:FC:2D:A1:B5:31:EF:9F:68:B5:02:50:1E:
              E2:52:A5:AD:76:F0:1E:33:A6:3E:62:AF:D2:A3:52:7A:
              73:25:FD:5D:9B:1A:7C:A4:59:B4:D5:F2:FC:C7:5A:5F              : 0x010001
          • #6
            • keyUsage: true, 0x80
            • extendedKeyUsage: true, codeSigning
        • RSA-SHA1: 
          86 35 9d 61 4e 6a b2 25  8b d3 46 04 e1 0e bc f6  |.5.aNj.%..F.....|
02 b1 24 34 41 d8 41 eb  67 49 ea 8a f5 84 12 04  |..$4A.A.gI......|
05 f1 c7 91 bc 97 d7 77  26 59 1d 1a 4a 53 10 6d  |.......w&Y..JS.m|
be 14 13 06 91 80 8d d5  e2 ab 90 6c dc 7d bb 01  |...........l.}..|
a8 2f 45 f1 81 19 df fd  48 86 d2 68 54 6d 24 a7  |./E.....H..hTm$.|
d1 96 28 a1 fd 68 07 54  5d 3b e9 65 77 8f 33 2f  |..(..h.T];.ew.3/|
9d 59 4d 05 ce 8f 5a 3e  73 83 84 ae 1e 6b 6c 29  |.YM...Z>s....kl)|
5a 4e 49 83 4f 8f fc d8  60 da 48 86 e6 6a fb 6c  |ZNI.O...`.H..j.l|
fd d1 c3 e0 17 c6 94 0e  95 56 25 71 6f 1d b0 d6  |.........V%qo...|
ef 2f 9a 5f 04 25 59 e8  fc d3 9a f7 2d 07 68 c2  |./._.%Y.....-.h.|
57 44 bf 24 bc cf 0c b2  94 58 10 b8 29 49 c6 71  |WD.$.....X..)I.q|
35 e5 88 90 80 56 25 00  33 8b eb e2 57 9f 98 d9  |5....V%.3...W...|
ae 76 38 19 c5 93 41 c8  ee e9 71 cf 6e 0a 2a c7  |.v8...A...q.n.*.|
c6 a0 1d b1 fc 1c 06 56  bd 08 1e f3 ba 45 87 b0  |.......V.....E..|
7e 2e c4 49 6b 31 e4 b1  fc 45 5d dd de 10 89 75  |~..Ik1...E]....u|
05 ed 19 8e fe c2 f3 ac  5c 9c 82 17 73 79 cd 48  |........\...sy.H|
      • Certificate #1
        • 2
          • 7E:93:EB:FB:7C:C6:4E:59:EA:4B:9A:77:D4:06:FC:3B
          • RSA-SHA1: nil
          • Issuer
            • C: ZA
            • ST: Western Cape
            • L: Durbanville
            • O: Thawte
            • OU: Thawte Certification
            • CN: Thawte Timestamping CA
          • 2012-12-21 00:00:00 UTC: 2020-12-30 23:59:59 UTC
          • Subject
            • C: US
            • O: Symantec Corporation
            • CN: Symantec Time Stamping Services CA - G2
          • #5
            • rsaEncryption: nil
            • B1:AC:B3:49:54:4B:97:1C:12:0A:D8:25:79:91:22:57:
              2A:6F:DC:B8:26:C4:43:73:6B:C2:BF:2E:50:5A:FB:14:
              C2:76:8E:43:01:25:43:B4:A1:E2:45:F4:E8:B7:7B:C3:
              74:CC:22:D7:B4:94:00:02:F7:4D:ED:BF:B4:B7:44:24:
              6B:CD:5F:45:3B:D1:44:CE:43:12:73:17:82:8B:69:B4:
              2B:CB:99:1E:AC:72:1B:26:4D:71:1F:B1:31:DD:FB:51:
              61:02:53:A6:AA:F5:49:2C:05:78:45:A5:2F:89:CE:E7:
              99:E7:FE:8C:E2:57:3F:3D:C6:92:DC:4A:F8:7B:33:E4:
              79:0A:FB:F0:75:88:41:9C:FF:C5:03:51:99:AA:D7:6C:
              9F:93:69:87:65:29:83:85:C2:60:14:C4:C8:C9:3B:14:
              DA:C0:81:F0:1F:0D:74:DE:92:22:AB:CA:F7:FB:74:7C:
              27:E6:F7:4A:1B:7F:A7:C3:9E:2D:AE:8A:EA:A6:E6:AA:
              27:16:7D:61:F7:98:71:11:BC:E2:50:A1:4B:E5:5D:FA:
              E5:0E:A7:2C:9F:AA:65:20:D3:D8:96:E8:C8:7C:A5:4E:
              48:44:FF:19:E2:44:07:92:0B:D7:68:84:80:5D:6A:78:
              64:45:CD:60:46:7E:54:C1:13:7C:C5:79:F1:C9:C1:71              : 0x010001
          • #6
            • subjectKeyIdentifier: 
              5f 9a f5 6e 5c cc cc 74  9a d4 dd 7d ef 3f db ec  |_..n\..t...}.?..|
4c 80 2e dd                                       |L...            |
            • authorityInfoAccess
              • OCSP: http://ocsp.thawte.com
            • basicConstraints
              • true
              • true: 0
            • crlDistributionPoints: http://crl.thawte.com/ThawteTimestampingCA.crl
            • extendedKeyUsage: timeStamping
            • keyUsage: true, 6
            • subjectAltName
              • CN: TimeStamp-2048-1
        • RSA-SHA1: 
          03 09 9b 8f 79 ef 7f 59  30 aa ef 68 b5 fa e3 09  |....y..Y0..h....|
1d bb 4f 82 06 5d 37 5f  a6 52 9f 16 8d ea 1c 92  |..O..]7_.R......|
09 44 6e f5 6d eb 58 7c  30 e8 f9 69 8d 23 73 0b  |.Dn.m.X|0..i.#s.|
12 6f 47 a9 ae 39 11 f8  2a b1 9b b0 1a c3 8e eb  |.oG..9..*.......|
59 96 00 ad ce 0c 4d b2  d0 31 a6 08 5c 2a 7a fc  |Y.....M..1..\*z.|
e2 7a 1d 57 4c a8 65 18  e9 79 40 62 25 96 6e c7  |.z.WL.e..y@b%.n.|
c7 37 6a 83 21 08 8e 41  ea dd d9 57 3f 1d 77 49  |.7j.!..A...W?.wI|
87 2a 16 06 5e a6 38 6a  22 12 a3 51 19 83 7e b6  |.*..^.8j"..Q..~.|
      • Certificate #2
        • 2
          • 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • O: Symantec Corporation
            • CN: Symantec Time Stamping Services CA - G2
          • 2012-10-18 00:00:00 UTC: 2020-12-29 23:59:59 UTC
          • Subject
            • C: US
            • O: Symantec Corporation
            • CN: Symantec Time Stamping Services Signer - G4
          • #5
            • rsaEncryption: nil
            • A2:63:0B:39:44:B8:BB:23:A7:44:49:BB:0E:FF:A1:F0:
              61:0A:53:93:B0:98:DB:AD:2C:0F:4A:C5:6E:FF:86:3C:
              53:55:0F:15:CE:04:3F:2B:FD:A9:96:96:D9:BE:61:79:
              0B:5B:C9:4C:86:76:E5:E0:43:4B:22:95:EE:C2:2B:43:
              C1:9F:D8:68:B4:8E:40:4F:EE:85:38:B9:11:C5:23:F2:
              64:58:F0:15:32:6F:4E:57:A1:AE:88:A4:02:D7:2A:1E:
              CD:4B:E1:DD:63:D5:17:89:32:5B:B0:5E:99:5A:A8:9D:
              28:50:0E:17:EE:96:DB:61:3B:45:51:1D:CF:12:56:0B:
              92:47:FC:AB:AE:F6:66:3D:47:AC:70:72:E7:92:E7:5F:
              CD:10:B9:C4:83:64:94:19:BD:25:80:E1:E8:D2:22:A5:
              D0:BA:02:7A:A1:77:93:5B:65:C3:EE:17:74:BC:41:86:
              2A:DC:08:4C:8C:92:8C:91:2D:9E:77:44:1F:68:D6:A8:
              74:77:DB:0E:5B:32:8B:56:8B:33:BD:D9:63:C8:49:9D:
              3A:C5:C5:EA:33:0B:D2:F1:A3:1B:F4:8B:BE:D9:B3:57:
              8B:3B:DE:04:A7:7A:22:B2:24:AE:2E:C7:70:C5:BE:4E:
              83:26:08:FB:0B:BD:A9:4F:99:08:E1:10:28:72:AA:CD              : 0x010001
          • X509v3 extensions
            • basicConstraints
              • true
              • nil
            • extendedKeyUsage: true, timeStamping
            • keyUsage: true, 0x80
            • authorityInfoAccess
              • #0
                • OCSP: http://ts-ocsp.ws.symantec.com
                • caIssuers: http://ts-aia.ws.symantec.com/tss-ca-g2.cer
            • crlDistributionPoints: http://ts-crl.ws.symantec.com/tss-ca-g2.crl
            • subjectAltName
              • CN: TimeStamp-2048-2
            • subjectKeyIdentifier: 
              46 c6 69 a3 0e 4a 14 1e  d5 4c da 52 63 17 3f 5e  |F.i..J...L.Rc.?^|
36 bc 0d e6                                       |6...            |
            • authorityKeyIdentifier: 
              5f 9a f5 6e 5c cc cc 74  9a d4 dd 7d ef 3f db ec  |_..n\..t...}.?..|
4c 80 2e dd                                       |L...            |
        • RSA-SHA1: 
          78 3b b4 91 2a 00 4c f0  8f 62 30 37 78 a3 84 27  |x;..*.L..b07x..'|
07 6f 18 b2 de 25 dc a0  d4 94 03 aa 86 4e 25 9f  |.o...%.......N%.|
9a 40 03 1c dd ce e3 79  cb 21 68 06 da b6 32 b4  |.@.....y.!h...2.|
6d bf f4 2c 26 63 33 e4  49 64 6d 0d e6 c3 67 0e  |m..,&c3.Idm...g.|
f7 05 a4 35 6c 7c 89 16  c6 e9 b2 df b2 e9 dd 20  |...5l|......... |
c6 71 0f cd 95 74 dc b6  5c de bd 37 1f 43 78 e6  |.q...t..\..7.Cx.|
78 b5 cd 28 04 20 a3 aa  f1 4b c4 88 29 91 0e 80  |x..(. ...K..)...|
d1 11 fc dd 5c 76 6e 4f  5e 0e 45 46 41 6e 0d b0  |....\vnO^.EFAn..|
ea 38 9a b1 3a da 09 71  10 fc 1c 79 b4 80 7b ac  |.8..:..q...y..{.|
69 f4 fd 9c b6 0c 16 2b  f1 7f 5b 09 3d 9b 5b e2  |i......+..[.=.[.|
16 ca 13 81 6d 00 2e 38  0d a8 29 8f 2c e1 b2 f4  |....m..8..).,...|
5a a9 01 af 15 9c 2c 2f  49 1b db 22 bb c3 fe 78  |Z.....,/I.."...x|
94 51 c3 86 b1 82 88 5d  f0 3d b4 51 a1 79 33 2b  |.Q.....].=.Q.y3+|
2e 7b b9 dc 20 09 13 71  eb 6a 19 5b cf e8 a5 30  |.{.. ..q.j.[...0|
57 2c 89 49 3f b9 cf 7f  c9 bf 3e 22 68 63 53 9a  |W,.I?.....>"hcS.|
bd 69 74 ac c5 1d 3c 7f  92 e0 c3 bc 1c d8 04 75  |.it...<........u|
    • 1
      • unnamed
        • #0
          • CN: PhonoXone
          • C: DK
        • 1
      • SHA1: nil
      • #2
        • 1.3.6.1.4.1.311.2.1.12
          • nil
        • contentType: 1.3.6.1.4.1.311.2.1.4
        • messageDigest: 
          32 6f 6b 33 6f 6f ae 03  ac 8d 44 25 20 69 05 97  |2ok3oo....D% i..|
e8 ef be 4f                                       |...O            |
      • rsaEncryption: 
        91 49 58 9d 37 53 ec c5  e9 2f 7e fe 58 7b 98 bd  |.IX.7S.../~.X{..|
be ff a1 7b bf 86 df fd  2e 07 05 72 c5 e6 a0 43  |...{.......r...C|
b9 8d 99 79 78 f6 6d 4d  4d 64 1a b9 eb b3 87 a7  |...yx.mMMd......|
aa 9b 0b 48 60 10 66 53  45 17 82 74 76 8d 72 33  |...H`.fSE..tv.r3|
4c fd 3d 20 79 3f 42 78  5b 83 62 7d a7 5b 0c 88  |L.= y?Bx[.b}.[..|
35 ea 4e cb 3f 47 bd 67  36 ea 57 14 29 71 0e 3c  |5.N.?G.g6.W.)q.<|
bb 97 77 0f 00 f4 1a 17  ff d8 ad 76 20 e9 b4 bf  |..w........v ...|
3d 90 93 c5 31 ff 5d 22  07 bc ab 14 36 77 3b 70  |=...1.]"....6w;p|
71 d6 8c 14 82 40 a8 05  f2 42 43 87 6f ee 4b 49  |q....@...BC.o.KI|
d3 5c 4a af 9b d4 f6 7e  1d d6 da a1 2d e2 ee a2  |.\J....~....-...|
8c 04 41 4d 4f 5c 7e ba  a9 e7 5a 15 a2 12 10 be  |..AMO\~...Z.....|
7d 86 36 63 75 89 aa 60  98 4f 4c 78 65 72 04 fb  |}.6cu..`.OLxer..|
fa 1b 98 23 15 f5 3f b7  f1 1e f8 1e d4 3c 88 19  |...#..?......<..|
2c c0 7d c0 19 c8 a7 3b  a1 c2 10 de ef bf 78 b5  |,.}....;......x.|
ee 58 b0 fb a8 ff dd b3  18 9b 8c b1 89 5b ba 9c  |.X...........[..|
d4 ce 76 bc 3e c3 27 c9  3f 4b 7a 1e a9 8c b6 df  |..v.>.'.?Kz.....|
      • countersignature
        • 1
          • unnamed
            • #0
              • C: US
              • O: Symantec Corporation
              • CN: Symantec Time Stamping Services CA - G2
            • 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
          • SHA1: nil
          • #2
            • contentType: pkcs7-data
            • signingTime: 2016-04-06 06:10:56 UTC
            • messageDigest: 
              33 13 07 a7 9a 9e de 1c  84 d5 18 de 70 d9 2d 1f  |3...........p.-.|
1f 6b a7 11                                       |.k..            |
          • rsaEncryption: 
            01 07 8b dd 7e 68 65 77  a1 80 32 55 7e 20 02 2b  |....~hew..2U~ .+|
01 18 da cc 0d 06 05 f2  e8 db df af d8 f1 95 55  |...............U|
77 c4 ad b5 55 12 dc 37  30 00 62 ed 8f 7d 37 89  |w...U..70.b..}7.|
02 13 b3 fb 55 9b 3a 6c  26 02 f3 8a be 78 7d cc  |....U.:l&....x}.|
8f 75 fe 14 e6 d8 d9 12  21 d3 87 a6 5f 2c db d0  |.u......!..._,..|
e8 d3 4d 15 dc 5a e9 fd  b4 40 1a 43 34 3c f9 90  |..M..Z...@.C4<..|
d6 4a 9c 1f 31 fe 98 7e  f9 ac 66 28 28 1e 6c 3f  |.J..1..~..f((.l?|
72 9e 56 68 f2 33 98 8c  7c e3 d5 64 28 04 7b 02  |r.Vh.3..|..d(.{.|
21 be 03 9d fe 4a e8 47  fc da a8 dd f5 5d 12 f9  |!....J.G.....]..|
c6 c0 66 ad 28 b0 1e d8  c9 68 39 42 c0 0c e3 57  |..f.(....h9B...W|
c2 fa b5 43 41 08 5b e8  22 db ad 1f bf 9b 37 7e  |...CA.[.".....7~|
a9 88 35 e4 13 a7 c8 24  ea 53 a8 ea 7c 25 88 20  |..5....$.S..|%. |
cc fd 1d 7a 95 5d 40 0b  46 bb 77 e8 04 87 2d 9d  |...z.]@.F.w...-.|
c6 81 0b cc c2 f2 bb fc  b4 14 34 ac 76 0a 3f e0  |..........4.v.?.|
83 58 79 6a 77 8a 8f 56  39 e1 1e b4 45 86 82 2b  |.Xyjw..V9...E..+|
0c 14 98 8b b9 56 2f 14  eb 34 19 10 68 a0 9e ff  |.....V/..4..h...|

Cannot call to_der on

undefined method `type' for nil:NilClass
offsetsizetypecomment
15c115HTM#
92ef0352612PNG(30 x 2244)#
93bc8732473PNG(100 x 150)#
943b60201157PNG(565 x 244)#
974f9432315PNG(100 x 150)#
aed74c6905GIF(0 x 18759)#
af0a3099GIF(16 x 16)#
af0a936967605BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] can't find file_offset of VA 0xb6dd28
[!] Could not parse the PKCS7: no start line
[!] PEdump::WIN_CERTIFICATE: too small length 0
[!] Could not parse the PKCS7: no start line
[!] PEdump::WIN_CERTIFICATE: too small length 0
[!] Could not parse the PKCS7: no start line
[!] PEdump::WIN_CERTIFICATE: too small length 0
[!] Could not parse the PKCS7: no start line
[!] PEdump::WIN_CERTIFICATE: too small length 0
[!] Could not parse the PKCS7: no start line
[!] PEdump::WIN_CERTIFICATE: too small length 0
[!] Could not parse the PKCS7: no start line
[!] PEdump::WIN_CERTIFICATE: too small length 0