filenamemain (NeoSpy stalkerware - Keylogger binary 13).exe
size2765944 (0x2a3478)
md5f7fd9db34d69035016aa0aedb6fbf7e2
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x50
blocks_in_file2
num_relocs0
header_paragraphs4
min_extra_paragraphs0xf
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0x1a
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x100

DOS stub

00000000: ba 10 00 0e 1f b4 09 cd  21 b8 01 4c cd 21 90 90  |........!..L.!..|
00000010: 54 68 69 73 20 70 72 6f  67 72 61 6d 20 6d 75 73  |This program mus|
00000020: 74 20 62 65 20 72 75 6e  20 75 6e 64 65 72 20 57  |t be run under W|
00000030: 69 6e 33 32 0d 0a 24 37  00 00 00 00 00 00 00 00  |in32..$7........|
00000040: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
000000c0:

PE Header

SignaturePE
Machine0x14c
NumberOfSections0xa
TimeDateStamp0x5e31ae95
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x818e
Magic0x10b
LinkerVersion2.25
SizeOfCode0x20f000
SizeOfInitializedData0x92800
SizeOfUninitializedData0
AddressOfEntryPoint0x2104d0
BaseOfCode0x1000
BaseOfData0x211000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.0
ImageVersion0.0
SubsystemVersion5.0
Reserved10
SizeOfImage0x330000
SizeOfHeaders0x400
CheckSum0x2a45c7
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x4000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v6.0 DLL

Sections

namevavsizeraw sizeflags
.text0x10000x20c78c0x20c800R-X CODE
.itext0x20e0000x26c80x2800R-X CODE
.data0x2110000x105880x10600RW- IDATA
.bss0x2220000x872b80RW-
.idata0x2aa0000x3fd60x4000RW- IDATA
.didata0x2ae0000x3260x400RW- IDATA
.tls0x2af0000x400RW-
.rdata0x2b00000x180x200R-- IDATA
.reloc0x2b10000x2e7f00x2e800R-- IDATA DISCARDABLE
.rsrc0x2e00000x4f4000x4f400R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x2aa0000x3fd6
RESOURCE0x2e00000x4f400
EXCEPTION00
SECURITY0x2a1c000x1878
BASERELOC0x2b10000x2e7f0
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS0x2b00000x18
LOAD_CONFIG00
Bound_IAT00
IAT0x2aabac0x9b8
Delay_IAT0x2ae0000x326
CLR_Header00

TLS

raw
start		raw
end		indexcallbkszero
fill		flags
0x6af0000x6af0400x611a000x6b001000
typenamesizecp
UNICODEDATACASE292470
UNICODEDATACATEGORIES324450
UNICODEDATACOMBINING17040
UNICODEDATACOMPOSITION449250
UNICODEDATADECOMPOSITION542230
UNICODEDATANUMBERS53170
CURSOR#13080
CURSOR#23080
CURSOR#33080
CURSOR#43080
CURSOR#53080
CURSOR#63080
CURSOR#73080
CURSOR#83080
CURSOR#93080
BITMAPBBABORT4640
BITMAPBBALL4840
BITMAPBBCANCEL4640
BITMAPBBCLOSE4640
BITMAPBBHELP4640
BITMAPBBIGNORE4640
BITMAPBBNO4640
BITMAPBBOK4640
BITMAPBBRETRY4640
BITMAPBBYES4640
BITMAPCDROM1920
BITMAPCLOSEDFOLDER2240
BITMAPCURRENTFOLDER2240
BITMAPEXECUTABLE2240
BITMAPFLOPPY1920
BITMAPHARD1920
BITMAPKNOWNFILE2240
BITMAPNETWORK1920
BITMAPOPENFOLDER2240
BITMAPRAM1920
BITMAPUNKNOWNFILE2240
ICON#111280
ICON#242640
ICON#396400
ICON#4169360
STRING#40403560
STRING#404111360
STRING#404213560
STRING#40439640
STRING#404411320
STRING#404511560
STRING#404611640
STRING#40476080
STRING#404811040
STRING#404913800
STRING#405028520
STRING#405115400
STRING#40528800
STRING#405339160
STRING#405428320
STRING#405526040
STRING#405623360
STRING#405718080
STRING#405811240
STRING#405921800
STRING#406021440
STRING#406121240
STRING#406220240
STRING#406324720
STRING#406424360
STRING#406510480
STRING#40666160
STRING#40674360
STRING#40682880
STRING#40692720
STRING#40704840
STRING#407110320
STRING#40728600
STRING#407313000
STRING#407411680
STRING#40759960
STRING#40768800
STRING#40779120
STRING#40786360
STRING#407910200
STRING#40807040
STRING#40811880
STRING#40822520
STRING#40835080
STRING#408410480
STRING#408510040
STRING#40868560
STRING#408711040
STRING#40889160
STRING#408910240
STRING#40906600
STRING#40911920
STRING#40921560
STRING#40938680
STRING#409411960
STRING#40957880
STRING#40967400
RCDATACHARTABLE335120
RCDATADVCLAL160
RCDATAPACKAGEINFO42600
RCDATATNEOSHFMODULE5090
GROUP_CURSORJVDRAGCURSOR200
GROUP_CURSORJVHANDCURSOR200
GROUP_CURSOR#32761200
GROUP_CURSOR#32762200
GROUP_CURSOR#32763200
GROUP_CURSOR#32764200
GROUP_CURSOR#32765200
GROUP_CURSOR#32766200
GROUP_CURSOR#32767200
GROUP_ICONMAINICON620
VERSION#16760
MANIFEST#113100
idlangstring
646240Cannot access field '%s' in a filter
646250Untitled Application
646260Cannot update, %s is not owned by %s
646270The transaction isolation level must be dirty read for local databases
646400Database name missing
646410Session name missing
646420Cannot perform this operation on an open database
646430Cannot perform this operation on a closed database
646440Database handle owned by a different session
646450Cannot perform this operation on an active session
646460Error creating cursor handle
646470ReferenceTableName not specified for field '%s'
646480No value for parameter '%s'
646490Cannot connect to database '%s'
646500An error occurred while attempting to initialize the Borland Database Engine (error $%.4x)
6465100009
646520BDE error $%.4x
646530Missing DataSetField property
646540Not in cached update mode
646550Invalid alias name %s
646560Execute not supported
646570Field '%s' is not the correct type of calculated field to be used in an aggregate, use an internalcalc
646580Operation not allowed on a unidirectional dataset
646590Unassigned variant value
646600Record not found
646610BCD overflow
646620%s is not a valid BCD value
646630Invalid format type for BCD
646640Could not parse SQL TimeStamp string
646650Invalid SQL date/time values
646660Cannot enable AutoSessionName property with more than one session on a form or data-module
646670Cannot add a session to the form or data-module while session '%s' has AutoSessionName enabled
646680Cannot modify SessionName while AutoSessionName is enabled
646690Duplicate database name '%s'
646700Duplicate session name '%s'
646710Invalid session name %s
646720Incorrectly formed filter expression
646730nothing
646740Type mismatch in expression
646750Operation cannot mix aggregate value with record-varying value
646760Arithmetic in filter expressions not supported
646770Expression is not an aggregate expression
646780Constant is not correct type %s
646790Aggregate expressions not allowed in filters
646800IN predicate list may not be empty
646810Invalid use of keyword
646820False
646830True
646840Parameter '%s' not found
646850Unable to load bind parameters
646860Field '%s' is of an unsupported type
646870SQL not supported
646880Dataset not in edit or insert mode
646890Cannot perform this operation on a closed dataset
646900Cannot perform this operation on an empty dataset
646910Cannot modify a read-only dataset
646920Nested dataset must inherit from %s
646930Filter expression incorrectly terminated
646940Unterminated field name
646950Unterminated string constant
646960Invalid filter expression character: '%s'
646970'(' expected but %s found
646980')' expected but %s found
646990')' or ',' expected but %s found
647000Expression expected but %s found
647010Field '%s' cannot be used in a filter expression
647020NULL only allowed with '=' and '<>'
647030Constant out of range
647040Size mismatch for field '%s', expecting: %d actual: %d
647050Invalid variant type or size for field '%s'
647060Value of field '%s' is out of range
647070Field '%s' must have a value
647080Field '%s' has no dataset
647090Field '%s' cannot be a calculated or lookup field
647100Field '%s' cannot be modified
647110Field '%s' is not indexed and cannot be modified
647120Duplicate index name '%s'
647130No index for fields '%s'
647140Index '%s' not found
647150Duplicate name '%s' in %s
647160Circular datalinks are not allowed
647170Lookup information for field '%s' is incomplete
647180DataSource cannot be changed
647190Cannot perform this operation on an open dataset
647200JPEG error #%d
647210JPEG Image File
647220Invalid field size
647230Invalid FieldKind
647240Field '%s' is of an unknown type
647250Field name missing
647260Duplicate field name '%s'
647270Field '%s' not found
647280Cannot access field '%s' as type %s
647290Invalid value for field '%s'
647300%g is not a valid value for field '%s'. The allowed range is %g to %g
647310%s is not a valid value for field '%s'. The allowed range is %s to %s
647320'%s' is not a valid integer value for field '%s'
647330'%s' is not a valid boolean value for field '%s'
647340'%s' is not a valid floating point value for field '%s'
647350Type mismatch for field '%s', expecting: %s actual: %s
647360Invalid image dimensions
647370Image has no DIB
647380Invalid stream operation
647390Color not in color table
647400Invalid Bits Per Pixel value
647410Color table is empty
647420Image is empty
647430Invalid reduction method
647440GIF Image
647450Loading...
647460Saving...
647470Converting...
647480Rendering...
647490Copying...
647500Optimizing...
647510Cannot change the size of a JPEG image
647520Failed to allocate memory for GIF DIB
647530Decoder bit buffer under-run
647540Circular decoder table entry
647550Invalid Image trailer
647560Internal error: Extension Instance does not match Extension Label
647570Unsupported Application Extension block size
647580Unknown GIF block type
647590Object type not supported for operation
647600Invalid GIF data
647610Image height too small for contained frames
647620Image width too small for contained frames
647630Failed to store GIF on clipboard
647640Image exceeds Logical Screen size
647650No global or local color table defined
647660Invalid pixel coordinates
647670Unsupported PixelFormat
647680The "Portable Network Graphics" could not be created because invalid image type parameters have being provided.
647690'%s' is not a valid property value
647700OLE control activation failed
647710Could not obtain OLE control window handle
647720License information for %s is invalid
647730License information for %s not found. You cannot use this control in design mode
647740Unable to retrieve a pointer to a running object registered with OLE for %s/%s
647750Premature end of data
647760Color table overflow
647770Invalid color index
647780Unsupported GIF version
647790Invalid GIF signature
647800Invalid number of colors specified in Screen Descriptor
647810Invalid number of colors specified in Image Descriptor
647820Unknown extension type
647830Invalid extension introducer
647840This "Portable Network Graphics" image is not supported or it might be invalid. (IHDR chunk is not the first)
647850This "Portable Network Graphics" image is not supported because either it's width or height exceeds the maximum size, which is 65535 pixels length.
647860There is no such palette entry.
647870This "Portable Network Graphics" image contains an unknown critical part which could not be decoded.
647880This "Portable Network Graphics" image is encoded with an unknown compression scheme which could not be decoded.
647890This "Portable Network Graphics" image uses an unknown interlace scheme which could not be decoded.
647900The chunks must be compatible to be assigned.
647910This "Portable Network Graphics" image is invalid because the decoder found an unexpected end of the file.
647920This "Portable Network Graphics" image contains no data.
647930The program tried to add a existent critical chunk to the current image which is not allowed.
647940It's not allowed to add a new chunk because the current image is invalid.
647950The png image could not be loaded from the resource ID.
647960Some operation could not be performed because the system is out of resources. Close some windows and try again.
647970Setting bit transparency color is not allowed for png images containing alpha value for each pixel (COLOR_RGBALPHA and COLOR_GRAYSCALEALPHA)
647980This operation is not valid because the current image contains no valid header.
647990The new size provided for image resizing is invalid.
648000Accept Loop
648010Accept Error
648020Accept Failed
648030Accept Exit
648040Connect Loop
648050Connect Error
648060Connect Failed
648070Connect Exit
648080Handshake Start
648090Handshake Done
648100This "Portable Network Graphics" image is not valid because it contains invalid pieces of data (crc error)
648110The "Portable Network Graphics" image could not be loaded because one of its main piece of data (ihdr) might be corrupted
648120This "Portable Network Graphics" image is invalid because it has missing image parts.
648130Could not decompress the image because it contains invalid compressed data. Description:
648140The "Portable Network Graphics" image contains an invalid palette.
648150The file being read is not a valid "Portable Network Graphics" image because it contains an invalid header. This file may be corrupted, try obtaining it again
648160Unknown error
648170SSPI %s returns error #%d(0x%x): %s
648180SSPI interface has failed to initialise properly
648190No PSecPkgInfo specified
648200No credential handle acquired
648210Can not change credentials after handle aquired. Use Release first
648220Unknown credentials use
648230Do AcquireCredentialsHandle first
648240CompleteAuthToken is not supported
648250Failed to load %s.
648260Mode has not been set.
648270Could not load SSL library.
648280SSL status: "%s"
648290%s Alert
648300%s Read Alert
648310%s Write Alert
648320The smartcard certificate used for authentication was not trusted. Please contact your system administrator.
648330The smartcard certificate used for authentication has expired. Please contact your system administrator.
648340The Kerberos subsystem encountered an error. A service for user protocol request was made against a domain controller which does not support service for user.
648350An attempt was made by this server to make a Kerberos constrained delegation request for a target outside of the server's realm. This is not supported, and indicates a misconfiguration on this server's allowed to delegate to list. Please contact your administrator.
648360The revocation status of the domain controller certificate used for smartcard authentication could not be determined. There is additional information in the system event log. Please contact your system administrator.
648370An untrusted certificate authority was detected while processing the domain controller certificate used for authentication. There is additional information in the system event log. Please contact your system administrator.
648380The domain controller certificate used for smartcard logon has expired. Please contact your system administrator with the contents of your system event log.
648390The domain controller certificate used for smartcard logon has been revoked. Please contact your system administrator with the contents of your system event log.
648400A signature operation must be performed before the user can authenticate.
648410One or more of the parameters passed to the function was invalid.
648420Client policy does not allow credential delegation to target server.
648430Client policy does not allow credential delegation to target server with NLTM only authentication.
648440The recipient rejected the renegotiation request.
648450The required security context does not exist.
648460The PKU2U protocol encountered an error while attempting to utilize the associated certificates.
648470The identity of the server computer could not be verified.
648480The client certificate does not contain a valid UPN, or does not match the client name in the logon request. Please contact your administrator.
648490Smartcard logon is required and was not used.
648500A system shutdown is in progress.
648510An invalid request was sent to the KDC.
648520The KDC was unable to generate a referral for the service requested.
648530The encryption type requested is not supported by the KDC.
648540An unsupported preauthentication mechanism was presented to the Kerberos package.
648550The requested operation cannot be completed. The computer must be trusted for delegation and the current user account must be configured to allow delegation.
648560Client's supplied SSPI channel bindings were incorrect.
648570The received certificate was mapped to multiple accounts.
648580SEC_E_NO_KERB_KEY
648590The certificate is not valid for the requested usage.
648600The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you.
648610The smartcard certificate used for authentication has been revoked. Please contact your system administrator. There may be additional information in the event log.
648620An untrusted certificate authority was detected While processing the smartcard certificate used for authentication. Please contact your system administrator.
648630The revocation status of the smartcard certificate used for authentication could not be determined. Please contact your system administrator.
648640An unknown error occurred while processing the certificate.
648650The received certificate has expired.
648660The specified data could not be encrypted.
648670The specified data could not be decrypted.
648680The client and server cannot communicate, because they do not possess a common algorithm.
648690The security context could not be established due to a failure in the requested quality of service (e.g. mutual authentication or delegation).
648700A security context was deleted before the context was completed. This is considered a logon failure.
648710The client is trying to negotiate a context and the server requires user-to-user but didn't send a TGT reply.
648720Unable to accomplish the requested task because the local machine does not have any IP addresses.
648730The supplied credential handle does not match the credential associated with the security context.
648740The crypto system or checksum function is invalid because a required function is unavailable.
648750The number of maximum ticket referrals has been exceeded.
648760The local machine must be a Kerberos KDC (domain controller) and it is not.
648770The other end of the security negotiation is requires strong crypto but it is not supported on the local machine.
648780The KDC reply contained more than one principal name.
648790Expected to find PA data for a hint of what etype to use, but it was not found.
648800The function completed successfully, but must be called again to complete the context
648810The function completed successfully, but CompleteToken must be called
648820The function completed successfully, but both CompleteToken and this function must be called to complete the context
648830The logon was completed, but no network authority was available. The logon was made using locally known information
648840The requested security package does not exist
648850The context has expired and can no longer be used.
648860The supplied message is incomplete. The signature was not verified.
648870The credentials supplied were not complete, and could not be verified. The context could not be initialized.
648880The buffers supplied to a function was too small.
648890The credentials supplied were not complete, and could not be verified. Additional information can be returned from the context.
648900The context data must be renegotiated with the peer.
648910The target principal name is incorrect.
648920There is no LSA mode context associated with this context.
648930The clocks on the client and server machines are skewed.
648940The certificate chain was issued by an untrusted authority.
648950The message received was unexpected or badly formatted.
648960The function requested is not supported
648970The specified target is unknown or unreachable
648980The Local Security Authority cannot be contacted
648990The requested security package does not exist
649000The caller is not the owner of the desired credentials
649010The security package failed to initialize, and cannot be installed
649020The token supplied to the function is invalid
649030The security package is not able to marshall the logon buffer, so the logon attempt has failed
649040The per-message Quality of Protection is not supported by the security package
649050The security context does not allow impersonation of the client
649060The logon attempt failed
649070The credentials supplied to the package were not recognized
649080No credentials are available in the security package
649090The message or signature supplied for verification has been altered
649100The message supplied for verification is out of sequence
649110No authority could be contacted for authentication.
64912064-Byte Prefetching
649130128-Byte Prefetching
649140CPUID leaf 2 does not report cache descriptor information, use CPUID leaf 4 to query cache parameters
649150Windows 8.1
649160Windows Server 2012 R2
649170Invalid MMF name "%s"
649180The MMF named "%s" cannot be created empty
649190Win32 error: %s (%u)%s%s
649200OLE error %.8x
649210Method '%s' not supported by automation object
649220Variant does not reference an automation object
649230Dispatch methods do not support more than 64 parameters
649240DCOM not installed
649250Successfull API call
649260Not enough memory is available to complete this request
649270The handle specified is invalid
649280Shared 2nd-Level TLB: 4 KByte pages, 4-way associative, 512 entries
6492903rd-level cache: 512 KByte, 4-way set associative, 64 byte line size
6493003rd-level cache: 1 MByte, 4-way set associative, 64 byte line size
6493103rd-level cache: 2 MByte, 4-way set associative, 64 byte line size
6493203rd-level cache: 1 MByte, 8-way set associative, 64 byte line size
6493303rd-level cache: 2 MByte, 8-way set associative, 64 byte line size
6493403rd-level cache: 4 MByte, 8-way set associative, 64 byte line size
6493503rd-level cache: 1.5 MByte, 12-way set associative, 64 byte line size
6493603rd-level cache: 3 MByte, 12-way set associative, 64 byte line size
6493703rd-level cache: 6 MByte, 12-way set associative, 64 byte line size
6493803rd-level cache: 2 MByte, 16-way set associative, 64 byte line size
6493903rd-level cache: 4 MByte, 16-way set associative, 64 byte line size
6494003rd-level cache: 8 MByte, 16-way set associative, 64 byte line size
6494103rd-level cache: 12 MByte, 24-way set associative, 64 byte line size
6494203rd-level cache: 18 MByte, 24-way set associative, 64 byte line size
6494303rd-level cache: 24 MByte, 24-way set associative, 64 byte line size
6494402nd-level cache: 2 MBytes, 8-way set associative, 64 byte line size
6494502nd-level cache: 512 KBytes, 2-way set associative, 64 byte line size
6494602nd-level cache: 512 KBytes, 8-way set associative, 64 byte line size
6494702nd-level cache: 256 KBytes, 8-way associative, 32 byte line size
6494802nd-level cache: 512 KBytes, 8-way associative, 32 byte line size
6494902nd-level cache: 1 MBytes, 8-way associative, 32 byte line size
6495002nd-level cache: 2 MBytes, 8-way associative, 32 byte line size
6495102nd-level cache: 512 KByte, 4-way set associative, 64 byte line size
6495202nd-level cache: 1 MByte, 8-way set associative, 64 byte line size
649530Instruction TLB: 4 KByte pages, 4-way set associative, 128 entries
649540Instruction TLB: 2 MByte pages, 4-way, 8 entries or 4 MByte pages, 4-way, 4 entries
649550Instruction TLB: 4 KByte pages, 4-way set associative, 64 entries
649560Data TLB: 4 KByte pages, 4-way set associative, 128 entries
649570Data TLB1: 4 KByte pages, 4-way set associative, 256 entries
649580Data TLB1: 4 KByte pages, 4-way set associative, 64 entries
649590Data TLB: 4 KByte and 4 MByte pages, 4-way set associative, 8 entries
649600Data TLB: 4 KByte and 4 MByte pages, 128 Entries
649610Data TLB: 4 KByte and 4 MByte pages, 256 Entries
6496201st-level data cache: 16 KByte, 8-way set associative, 64 byte line size
6496301st-level data cache: 8 KBytes, 4-way set associative, 64 byte line size
6496401st-level data cache: 16 KBytes, 4-way set associative, 64 byte line size
6496501st-level data cache: 32 KBytes, 4-way set associative, 64 byte line size
649660Trace cache: 12 K-Ops, 8-way set associative
649670Trace cache: 16 K-Ops, 8-way set associative
649680Trace cache: 32 K-Ops, 8-way set associative
649690Trace cache: 64 K-Ops, 8-way set associative
649700Instruction TLB: 2M/4M pages, fully associative, 8 entries
6497102nd-level cache: 1 MBytes, 4-way set associative, 64 bytes line size
6497202nd-level cache: 128 KBytes, 8-way set associative, 64 bytes line size, 2 lines per sector
6497302nd-level cache: 256 KBytes, 8-way set associative, 64 bytes line size, 2 lines per sector
6497402nd-level cache: 512 KBytes, 8-way set associative, 64 bytes line size, 2 lines per sector
6497502nd-level cache: 1 MBytes, 8-way set associative, 64 bytes line size, 2 lines per sector
6497602nd-level cache: 4 MBytes, 16-way set associative, 64 byte line size
6497703rd-level cache: 6MByte, 12-way set associative, 64 byte line size
6497803rd-level cache: 8MByte, 16-way set associative, 64 byte line size
6497903rd-level cache: 12MByte, 12-way set associative, 64 byte line size
6498003rd-level cache: 16MByte, 16-way set associative, 64 byte line size
6498102nd-level cache: 6MByte, 24-way set associative, 64 byte line size
649820Instruction TLB: 4 KByte pages, 32 Entries
649830Instruction TLB: 4 KByte and 2 MByte or 4 MByte pages, 64 Entries
649840Instruction TLB: 4 KByte and 2 MByte or 4 MByte pages, 128 Entries
649850Instruction TLB: 4 KByte and 2 MByte or 4 MByte pages, 256 Entries
649860Instruction TLB: 2-MByte or 4-MByte pages, fully associative, 7 entries
649870Data TLB0: 4 MByte pages, 4-way set associative, 16 entries
649880Data TLB0: 4 KByte pages, 4-way associative, 16 entries
649890Data TLB0: 4 KByte pages, fully associative, 16 entries
649900Data TLB0: 2 MByte or 4 MByte pages, 4-way set associative, 32 entries
649910Data TLB: 4 KByte and 4 MByte pages, 64 Entries
6499201st level instruction cache: 32 KBytes, 8-way set associative, 64 byte line size
6499302nd-level cache: 128 KBytes, 4-way set associative, sectored cache, 64-byte line size
6499402nd-level cache: 192 KBytes, 6-way set associative, sectored cache, 64-byte line size
6499502nd-level cache: 128 KBytes, 2-way set associative, sectored cache, 64-byte line size
6499602nd-level cache: 256 KBytes, 4-way set associative, sectored cache, 64-byte line size
6499702nd-level cache: 384 KBytes, 6-way set associative, sectored cache, 64-byte line size
6499802nd-level cache: 512 KBytes, 4-way set associative, sectored cache, 64-byte line size
649990No 2nd-level cache or, if processor contains a valid 2nd-level cache, no 3rd-level cache
6500002nd-level cache: 128 KBytes, 4-way set associative, 32 byte line size
6500102nd-level cache: 256 KBytes, 4-way set associative, 32 byte line size
6500202nd-level cache: 512 KBytes, 4-way set associative, 32 byte line size
6500302nd-level cache: 1 MBytes, 4-way set associative, 32 byte line size
6500402nd-level cache: 2 MBytes, 4-way set associative, 32 byte line size
6500503rd-level cache: 4 MBytes, 4-way set associative, 64 byte line size
6500603rd-level cache: 8 MBytes, 4-way set associative, 64 byte line size
6500703rd-level cache: 8 MByte, 8-way set associative, 64 byte line size
650080Data TLB: 4 MByte pages, 4-way set associative, 8 entries
650090Data TLB1: 4 MByte pages, 4-way set associative, 32 entries
6501001st level instruction cache: 8 KBytes, 4-way set associative, 32 byte line size
6501101st level instruction cache: 16 KBytes, 4-way set associative, 32 byte line size
6501201st level instruction cache: 32 KBytes, 4-way set associative, 64 byte line size
6501301st level data cache: 8 KBytes, 2-way set associative, 32 byte line size
650140Instruction TLB: 4 MByte pages, 4-way set associative, 4 entries
6501501st level data cache: 16 KBytes, 4-way set associative, 32 byte line size
6501601st level data cache: 16 KBytes, 4-way set associative, 64 byte line size
6501701st level data cache: 24 KBytes, 6-way set associative, 64 byte line size
6501802nd level cache: 256 KBytes, 8-way set associative, 64 byte line size
6501903rd level cache: 512 KBytes, 4-way set associative, 64 byte line size, 2 lines per sector
6502003rd level cache: 1 MBytes, 8-way set associative, 64 byte line size, 2 lines per sector
6502103rd level cache: 2 MBytes, 8-way set associative, 64 byte line size, 2 lines per sector
6502203rd level cache: 4 MBytes, 8-way set associative, 64 byte line size, 2 lines per sector
6502301st level data cache: 32 KBytes, 8-way set associative, 64 byte line size
650240Gradient Active Caption
650250Gradient Inactive Caption
650260Hot Light
650270Menu Bar
650280Menu Highlight
650290Failed to get ANSI replacement character
650300Unable to open key "%s\%s" for read
650310Unable to open key "%s\%s" and access value "%s"
650320"%s\%s\%s" is of wrong kind or size
650330"%s" does not match RootKey
650340Failed to create mutex
650350Failed to open mutex
650360Null descriptor
650370Instruction TLB: 4 KByte pages, 4-way set associative, 32 entries
650380Instruction TLB: 4 MByte pages, 4-way set associative, 2 entries
650390Data TLB: 4 KByte pages, 4-way set associative, 64 entries
650400Active window title bar text
650410Active window border
650420Inactive window border
650430Application workspace
650440Selection background
650450Selection text
650460Button face
650470Button shadow
650480Dimmed text
650490Button text
650500Inactive window title bar text
650510Button highlight
650520Dark shadow 3D elements
650530Highlight 3D elements
650540Tooltip text
650550Tooltip background
650560Rose
650570Tan
650580Light Yellow
650590Light Green
650600Light Turquoise
650610Pale Blue
650620Lavender
650630Scrollbar
650640Desktop background
650650Active window title bar
650660Inactive window title bar
650670Menu background
650680Window background
650690Window frame
650700Menu text
650710Window text
650720Dark Red
650730Orange
650740Dark Yellow
650750Blue Gray
650760Gray 50%
650770Light Orange
650780Sea Green
650790Light Blue
650800Violet
650810Gray 40%
650820Pink
650830Gold
650840Bright Green
650850Turquoise
650860Plum
650870Gray 25%
650880Yellow
650890Blue
650900Fuchsia
650910Aqua
650920White
650930Money green
650940Sky blue
650950Cream
650960Medium gray
650970Brown
650980Olive Green
650990Dark Green
651000Dark Teal
651010Dark Blue
651020Indigo
651030Gray 80%
651040Buffer start position is invalid.
651050Cannot change a connected IOHandler.
651060No IOHandler of type %s is installed.
651070Reply Code is not valid: %s
651080Reply Code already exists: %s
651090Black
651100Maroon
651110Green
651120Olive green
651130Navy blue
651140Purple
651150Teal
651160Gray
651170Silver
651180Red
651190Lime
651200Not Connected
651210Object type not supported.
651220No data to read.
651230Read timed out.
651240Max line read attempts exceeded.
651250Max line length exceeded.
651260Set LargeStream to True to send streams greater than 2GB
651270Data is too large for stream
651280Connect timed out.
651290Cannot call TerminateAndWaitFor on FreeAndTerminate threads
651300Already connected.
651310Maximum number of line allowed exceeded
651320The IOHandler already has a different Intercept assigned
651330Transparent proxy cannot bind.
651340UDP Not supported by this proxy.
651350Buffer terminator must be specified.
651360Unknown socks error.
651370Socks server did not respond.
651380Invalid socks authentication method.
651390Authentication error to socks server.
651400General SOCKS server failure.
651410Connection not allowed by ruleset.
651420Network unreachable.
651430Host unreachable.
651440Connection refused.
651450TTL expired.
651460Command not supported.
651470Address type not supported.
651480%d: Circular links are not allowed
651490Not enough data in buffer. (%d/%d)
651500Too much data in buffer.
651510File "%s" not found
651520Could not load DH Parameters.
651530Error getting SSL method.
651540Error setting File Descriptor for SSL
651550Error binding data to SSL socket.
651560EOF was observed that violates the protocol
651570Message decoder not found
651580Message encoder not found
651590Unrecognized UUE encoding scheme.
651600SSL IOHandler is required for this setting
651610This value can not be set while the client is connected.
651620SSL is not available on this server.
651630Could not encode header data using charset "%s"
651640UDP is not support in this SOCKS version.
651650Request rejected or failed.
651660Request rejected because SOCKS server cannot connect.
651670Request rejected because the client program and identd report different user-ids.
651680Encoding text
651690Encoding attachment
651700Message parts cannot be used in a message which has a ContentTransferEncoding value.
651710Unsupported hash algorithm. This implementation supports only MD5 encoding.
651720No FTP list parsers have been registered.
651730TIdMessagePart can not be created. Use descendant classes.
651740Error saving attachment.
651750Attachment %s is blocked.
651760Error accepting connection with SSL.
651770Error connecting with SSL.
651780SetCipher failed.
651790Error creating SSL session.
651800Error creating SSL context.
651810Could not load root certificate.
651820Could not load certificate.
651830Could not load key, check password.
651840Can not bind in port range (%d - %d)
651850Connection Closed Gracefully.
651860Could not bind socket. Address and port are already in use.
651870Invalid Port Range (%d - %d)
651880%s is not a valid service.
651890%s is not a valid IPv6 address
651900The requested IPVersion / Address family is not supported.
651910Not all bytes sent.
651920Package Size Too Big.
651930Set Size Exceeded.
651940End of stream: Class %s at %d
651950Algorithm %s not permitted in FIPS mode
651960Extension is empty
651970Mimetype is empty
651980Extension already exits
651990Cannot load message from file %s
652000Socket is already connected.
652010Socket is not connected.
652020Cannot send or receive after socket is closed.
652030Too many references, cannot splice.
652040Connection timed out.
652050Connection refused.
652060Too many levels of symbolic links.
652070File name too long.
652080Host is down.
652090No route to host.
652100Directory not empty
652110Host not found.
652120Stack Class is undefined.
652130Stack already created.
652140Only one TIdAntiFreeze can exist per application.
652150Cannot change IPVersion when connected
652160Message too long.
652170Protocol wrong type for socket.
652180Bad protocol option.
652190Protocol not supported.
652200Socket type not supported.
652210Operation not supported on socket.
652220Protocol family not supported.
652230Address family not supported by protocol family.
652240Address already in use.
652250Cannot assign requested address.
652260Network is down.
652270Network is unreachable.
652280Net dropped connection or reset.
652290Software caused connection abort.
652300Connection reset by peer.
652310No buffer space available.
652320Connected.
652330Disconnecting.
652340Disconnected.
652350%s
652360Socket Error # %d %s
652370Interrupted system call.
652380Bad file number.
652390Access denied.
652400Buffer fault.
652410Invalid argument.
652420Too many open files.
652430Operation would block.
652440Operation now in progress.
652450Operation already in progress.
652460Socket operation on non-socket.
652470Destination address required.
652480 - Dock zone has no control
652490Error loading dock zone from the stream. Expecting version %d, but found %d.
652500Invalid buffer size for decryption
652510Stream read error
652520Stream write error
652530Invalid source array
652540Invalid destination array
652550Character index out of bounds (%d)
652560Invalid count (%d)
652570Invalid destination index (%d)
652580Invalid codepage (%d)
652590Failed attempting to retrieve time zone information.
652600Error on call to Winsock2 library function %s
652610Error on loading Winsock2 library (%s)
652620Resolving hostname %s.
652630Connecting to %s.
652640Down
652650Ins
652660Del
652670Shift+
652680Ctrl+
652690Alt+
652700All
652710Invalid clipboard format
652720Clipboard does not support Icons
652730Cannot open clipboard: %s
652740Operation not supported on selected printer
652750There is no default printer currently selected
652760Menu '%s' is already being used by another form
652770Docked control must have a name
652780Error removing control from dock tree
652790 - Dock zone not found
652800&All
652810N&o to All
652820Yes to &All
652830&Close
652840BkSp
652850Tab
652860Esc
652870Enter
652880Space
652890PgUp
652900PgDn
652910End
652920Home
652930Left
652940Up
652950Right
652960Enhanced Metafiles
652970Icons
652980Bitmaps
652990TIFF Images
653000Warning
653010Error
653020Information
653030Confirm
653040&Yes
653050&No
653060OK
653070Cancel
653080&Help
653090&Abort
653100&Retry
653110&Ignore
653120OK
653130Cancel
653140&Yes
653150&No
653160&Help
653170&Close
653180&Ignore
653190&Retry
653200Abort
653210&All
653220Cannot drag a form
653230An error returned from DDE ($0%x)
653240DDE Error - conversation not established ($0%x)
653250Error occurred when DDE ran out of memory ($0%x)
653260Unable to connect DDE conversation
653270Metafiles
653280Parent given is not a parent of '%s'
653290Cannot hide an MDI Child Form
653300Cannot change Visible in OnShow or OnHide
653310Cannot make a visible window modal
653320Menu index out of range
653330Menu inserted twice
653340Sub-menu is not in menu
653350Not enough timers available
653360Printer is not currently printing
653370Printing in progress
653380Printer index out of range
653390Printer selected is not valid
653400%s on %s
653410GroupIndex cannot be less than a previous menu item's GroupIndex
653420Cannot create form. No MDI forms are currently active
653430A control cannot have itself as its parent
653440Cannot change the size of a WIC Image
653450Invalid operation on TOleGraphic
653460Unknown picture file extension (.%s)
653470Unsupported clipboard format
653480Out of system resources
653490Canvas does not allow drawing
653500Invalid image size
653510Invalid ImageList
653520Unable to Replace Image
653530Invalid ImageList Index
653540Failed to read ImageList data from stream
653550Failed to write ImageList data to stream
653560Error creating window device context
653570Error creating window class
653580Cannot focus a disabled or invisible window
653590Control '%s' has no parent window
653600''%s'' is not a valid time
653610Invalid argument to time encode
653620No context-sensitive help installed
653630No help found for context
653640Unable to open Index
653650Unable to open Search
653660Unable to find a Table of Contents
653670No topic-based help system installed
653680No help found for %s
653690Bitmap image is not valid
653700Icon image is not valid
653710Metafile is not valid
653720Invalid pixel format
653730Invalid image
653740Scan line index out of range
653750Cannot change the size of an icon
653760%s not in a class registration group
653770Property %s does not exist
653780Stream write error
653790Thread creation error: %s
653800Thread Error: %s (%d)
653810Cannot terminate an externally created thread
653820Cannot wait for an externally created thread
653830Cannot call Start on a running or suspended thread
653840Parameter %s cannot be a negative value
653850Input buffer exceeded for %s = %d, %s = %d
653860The specified file was not found
653870No help viewer that supports filters
653880Invalid Timeout value: %s
653890''%s'' is not a valid date
653900''%s'' is not a valid date and time
653910''%s'' is not a valid integer value
653920Invalid property value
653930Invalid data type for '%s'
653940List capacity out of bounds (%d)
653950List count out of bounds (%d)
653960List index out of bounds (%d)
653970Out of memory while expanding memory stream
653980%s has not been registered as a COM class
653990Error reading %s%s%s: %s
654000Stream read error
654010Property is read-only
654020Failed to create key %s
654030Failed to get data for '%s'
654040Failed to set data for '%s'
654050Resource %s not found
654060%s.Seek not implemented
654070Operation not allowed on sorted list
654080Can't write to a read-only resource stream
654090CheckSynchronize called from thread $%x, which is NOT the main thread
654100Class %s not found
654110A class named %s already exists
654120List does not allow duplicates ($0%x)
654130A component named %s already exists
654140String list does not allow duplicates
654150Cannot create file "%s". %s
654160Cannot open file "%s". %s
654170Invalid file name - %s
654180Invalid stream format
654190''%s'' is not a valid component name
654200Invalid property value
654210Invalid property element: %s
654220Invalid property path
654230Invalid property type: %s
654240Tuesday
654250Wednesday
654260Thursday
654270Friday
654280Saturday
654290Unable to create directory
654300Invalid source array
654310Invalid destination array
654320Character index out of bounds (%d)
654330Start index out of bounds (%d)
654340Invalid count (%d)
654350Invalid destination index (%d)
654360Invalid code page
654370Ancestor for '%s' not found
654380Cannot assign a %s to a %s
654390Bits index out of range
654400June
654410July
654420August
654430September
654440October
654450November
654460December
654470Sun
654480Mon
654490Tue
654500Wed
654510Thu
654520Fri
654530Sat
654540Sunday
654550Monday
654560Feb
654570Mar
654580Apr
654590May
654600Jun
654610Jul
654620Aug
654630Sep
654640Oct
654650Nov
654660Dec
654670January
654680February
654690March
654700April
654710May
654720Invalid variant type
654730Operation not supported
654740Unexpected variant error
654750External exception %x
654760Assertion failed
654770Interface not supported
654780Exception in safecall method
654790Object lock not owned
654800Monitor support function not initialized
654810%s (%s, line %d)
654820Abstract Error
654830Access violation at address %p in module '%s'. %s of address %p
654840System Error. Code: %d. %s
654850A call to an OS function failed
654860Application is not licensed to use this feature
654870Jan
654880Format string too long
654890Error creating variant or safe array
654900Variant or safe array index out of bounds
654910Variant or safe array is locked
654920Invalid variant type conversion
654930Invalid variant operation
654940Invalid NULL variant operation
654950Invalid variant operation (%s%.8x) %s
654960Custom variant type (%s%.4x) is out of range
654970Custom variant type (%s%.4x) already used by %s
654980Custom variant type (%s%.4x) is not usable
654990Too many custom variant types have been registered
655000Could not convert variant of type (%s) into type (%s)
655010Overflow while converting variant of type (%s) into type (%s)
655020Variant overflow
655030Invalid argument
655040Floating point underflow
655050Invalid pointer operation
655060Invalid class typecast
655070Access violation at address %p. %s of address %p
655080Access violation
655090Stack overflow
655100Control-C hit
655110Privileged instruction
655120Operation aborted
655130Exception %s in module %s at %p. %s%s
655140Application Error
655150Format '%s' invalid or incompatible with argument
655160No argument for format '%s'
655170Variant method calls not supported
655180Read
655190Write
655200'%s' is not a valid floating point value
655210'%d.%d' is not a valid timestamp
655220Invalid argument to date encode
655230Out of memory
655240I/O error %d
655250Too many open files
655260File access denied
655270Read beyond end of file
655280Disk full
655290Invalid numeric input
655300Division by zero
655310Range check error
655320Integer overflow
655330Invalid floating point operation
655340Floating point division by zero
655350Floating point overflow
module_namehintordfunction_name
oleaut32.dllSysFreeString
oleaut32.dllSysReAllocStringLen
oleaut32.dllSysAllocStringLen
advapi32.dllRegQueryValueExW
advapi32.dllRegOpenKeyExW
advapi32.dllRegCloseKey
user32.dllLoadStringW
user32.dllMessageBoxA
user32.dllCharNextW
kernel32.dlllstrcmpiA
kernel32.dllLoadLibraryA
kernel32.dllLocalFree
kernel32.dllLocalAlloc
kernel32.dllGetACP
kernel32.dllSleep
kernel32.dllVirtualFree
kernel32.dllVirtualAlloc
kernel32.dllGetSystemInfo
kernel32.dllGetTickCount
kernel32.dllQueryPerformanceCounter
kernel32.dllGetVersion
kernel32.dllGetCurrentThreadId
kernel32.dllVirtualQuery
kernel32.dllWideCharToMultiByte
kernel32.dllMultiByteToWideChar
kernel32.dlllstrlenW
kernel32.dlllstrcpynW
kernel32.dllLoadLibraryExW
kernel32.dllIsValidLocale
kernel32.dllGetSystemDefaultUILanguage
kernel32.dllGetStartupInfoA
kernel32.dllGetProcAddress
kernel32.dllGetModuleHandleW
kernel32.dllGetModuleFileNameW
kernel32.dllGetUserDefaultUILanguage
kernel32.dllGetLocaleInfoW
kernel32.dllGetLastError
kernel32.dllGetCommandLineW
kernel32.dllFreeLibrary
kernel32.dllFindFirstFileW
kernel32.dllFindClose
kernel32.dllExitProcess
kernel32.dllExitThread
kernel32.dllCreateThread
kernel32.dllCompareStringW
kernel32.dllWriteFile
kernel32.dllUnhandledExceptionFilter
kernel32.dllRtlUnwind
kernel32.dllRaiseException
kernel32.dllGetStdHandle
kernel32.dllDeleteCriticalSection
kernel32.dllLeaveCriticalSection
kernel32.dllEnterCriticalSection
kernel32.dllInitializeCriticalSection
kernel32.dllCloseHandle
kernel32.dllTlsSetValue
kernel32.dllTlsGetValue
kernel32.dllLocalAlloc
kernel32.dllGetModuleHandleW
user32.dllCreateWindowExW
user32.dllWindowFromPoint
user32.dllWaitMessage
user32.dllUpdateWindow
user32.dllUnregisterClassW
user32.dllUnhookWindowsHookEx
user32.dllTranslateMessage
user32.dllTranslateMDISysAccel
user32.dllTrackPopupMenu
user32.dllSystemParametersInfoW
user32.dllShowWindow
user32.dllShowScrollBar
user32.dllShowOwnedPopups
user32.dllSetWindowsHookExW
user32.dllSetWindowTextW
user32.dllSetWindowPos
user32.dllSetWindowPlacement
user32.dllSetWindowLongW
user32.dllSetTimer
user32.dllSetScrollRange
user32.dllSetScrollPos
user32.dllSetScrollInfo
user32.dllSetRect
user32.dllSetPropW
user32.dllSetParent
user32.dllSetMenuItemInfoW
user32.dllSetMenu
user32.dllSetForegroundWindow
user32.dllSetFocus
user32.dllSetCursorPos
user32.dllSetCursor
user32.dllSetClipboardData
user32.dllSetClassLongW
user32.dllSetCapture
user32.dllSetActiveWindow
user32.dllSendMessageTimeoutW
user32.dllSendMessageA
user32.dllSendMessageW
user32.dllScrollWindow
user32.dllScreenToClient
user32.dllRemovePropW
user32.dllRemoveMenu
user32.dllReleaseDC
user32.dllReleaseCapture
user32.dllRegisterWindowMessageW
user32.dllRegisterClipboardFormatW
user32.dllRegisterClassW
user32.dllRedrawWindow
user32.dllPostQuitMessage
user32.dllPostMessageW
user32.dllPeekMessageA
user32.dllPeekMessageW
user32.dllOpenClipboard
user32.dllOffsetRect
user32.dllOemToCharBuffA
user32.dllOemToCharA
user32.dllMsgWaitForMultipleObjectsEx
user32.dllMsgWaitForMultipleObjects
user32.dllMessageBoxW
user32.dllMapWindowPoints
user32.dllMapVirtualKeyW
user32.dllLoadStringW
user32.dllLoadKeyboardLayoutW
user32.dllLoadIconW
user32.dllLoadCursorW
user32.dllLoadBitmapW
user32.dllKillTimer
user32.dllIsZoomed
user32.dllIsWindowVisible
user32.dllIsWindowUnicode
user32.dllIsWindowEnabled
user32.dllIsWindow
user32.dllIsIconic
user32.dllIsDialogMessageA
user32.dllIsDialogMessageW
user32.dllIsClipboardFormatAvailable
user32.dllIsChild
user32.dllInvalidateRect
user32.dllIntersectRect
user32.dllInsertMenuItemW
user32.dllInsertMenuW
user32.dllInflateRect
user32.dllGetWindowThreadProcessId
user32.dllGetWindowTextW
user32.dllGetWindowRect
user32.dllGetWindowPlacement
user32.dllGetWindowLongW
user32.dllGetWindowDC
user32.dllGetTopWindow
user32.dllGetSystemMetrics
user32.dllGetSystemMenu
user32.dllGetSysColorBrush
user32.dllGetSysColor
user32.dllGetSubMenu
user32.dllGetScrollRange
user32.dllGetScrollPos
user32.dllGetScrollInfo
user32.dllGetPropW
user32.dllGetParent
user32.dllGetWindow
user32.dllGetMessageTime
user32.dllGetMessagePos
user32.dllGetMessageExtraInfo
user32.dllGetMenuStringW
user32.dllGetMenuState
user32.dllGetMenuItemInfoW
user32.dllGetMenuItemID
user32.dllGetMenuItemCount
user32.dllGetMenu
user32.dllGetLastActivePopup
user32.dllGetKeyboardState
user32.dllGetKeyboardLayoutNameW
user32.dllGetKeyboardLayoutList
user32.dllGetKeyboardLayout
user32.dllGetKeyState
user32.dllGetKeyNameTextW
user32.dllGetIconInfo
user32.dllGetForegroundWindow
user32.dllGetFocus
user32.dllGetDesktopWindow
user32.dllGetDCEx
user32.dllGetDC
user32.dllGetCursorPos
user32.dllGetCursor
user32.dllGetClipboardData
user32.dllGetClientRect
user32.dllGetClassLongW
user32.dllGetClassInfoW
user32.dllGetCapture
user32.dllGetActiveWindow
user32.dllFrameRect
user32.dllFindWindowExW
user32.dllFindWindowW
user32.dllFillRect
user32.dllEqualRect
user32.dllEnumWindows
user32.dllEnumThreadWindows
user32.dllEnumClipboardFormats
user32.dllEnumChildWindows
user32.dllEndPaint
user32.dllEnableWindow
user32.dllEnableScrollBar
user32.dllEnableMenuItem
user32.dllEmptyClipboard
user32.dllDrawTextExW
user32.dllDrawTextW
user32.dllDrawMenuBar
user32.dllDrawIconEx
user32.dllDrawIcon
user32.dllDrawFrameControl
user32.dllDrawFocusRect
user32.dllDrawEdge
user32.dllDispatchMessageA
user32.dllDispatchMessageW
user32.dllDestroyWindow
user32.dllDestroyMenu
user32.dllDestroyIcon
user32.dllDestroyCursor
user32.dllDeleteMenu
user32.dllDefWindowProcW
user32.dllDefMDIChildProcW
user32.dllDefFrameProcW
user32.dllCreatePopupMenu
user32.dllCreateMenu
user32.dllCreateIcon
user32.dllCreateAcceleratorTableW
user32.dllCountClipboardFormats
user32.dllCopyImage
user32.dllCopyIcon
user32.dllCloseClipboard
user32.dllClientToScreen
user32.dllCheckMenuItem
user32.dllCharUpperBuffW
user32.dllCharNextW
user32.dllCharLowerBuffW
user32.dllCharLowerW
user32.dllCallWindowProcW
user32.dllCallNextHookEx
user32.dllBeginPaint
user32.dllCharLowerBuffA
user32.dllCharUpperBuffA
user32.dllCharToOemBuffA
user32.dllCharToOemA
user32.dllAdjustWindowRectEx
user32.dllActivateKeyboardLayout
msimg32.dllAlphaBlend
gdi32.dllUnrealizeObject
gdi32.dllStretchDIBits
gdi32.dllStretchBlt
gdi32.dllStartPage
gdi32.dllStartDocW
gdi32.dllSetWindowOrgEx
gdi32.dllSetWinMetaFileBits
gdi32.dllSetViewportOrgEx
gdi32.dllSetTextColor
gdi32.dllSetStretchBltMode
gdi32.dllSetROP2
gdi32.dllSetPixel
gdi32.dllSetMapMode
gdi32.dllSetEnhMetaFileBits
gdi32.dllSetDIBits
gdi32.dllSetDIBColorTable
gdi32.dllSetBrushOrgEx
gdi32.dllSetBkMode
gdi32.dllSetBkColor
gdi32.dllSetAbortProc
gdi32.dllSelectPalette
gdi32.dllSelectObject
gdi32.dllSaveDC
gdi32.dllRoundRect
gdi32.dllRestoreDC
gdi32.dllResizePalette
gdi32.dllRectangle
gdi32.dllRectVisible
gdi32.dllRealizePalette
gdi32.dllPolyline
gdi32.dllPolygon
gdi32.dllPolyBezierTo
gdi32.dllPolyBezier
gdi32.dllPlayEnhMetaFile
gdi32.dllPie
gdi32.dllPatBlt
gdi32.dllMoveToEx
gdi32.dllMaskBlt
gdi32.dllLineTo
gdi32.dllLPtoDP
gdi32.dllIntersectClipRect
gdi32.dllGetWindowOrgEx
gdi32.dllGetWinMetaFileBits
gdi32.dllGetTextMetricsW
gdi32.dllGetTextExtentPoint32W
gdi32.dllGetSystemPaletteEntries
gdi32.dllGetStockObject
gdi32.dllGetRgnBox
gdi32.dllGetPixel
gdi32.dllGetPaletteEntries
gdi32.dllGetObjectType
gdi32.dllGetObjectW
gdi32.dllGetNearestPaletteIndex
gdi32.dllGetEnhMetaFilePaletteEntries
gdi32.dllGetEnhMetaFileHeader
gdi32.dllGetEnhMetaFileDescriptionW
gdi32.dllGetEnhMetaFileBits
gdi32.dllGetDeviceCaps
gdi32.dllGetDIBits
gdi32.dllGetDIBColorTable
gdi32.dllGetDCOrgEx
gdi32.dllGetCurrentPositionEx
gdi32.dllGetClipBox
gdi32.dllGetBrushOrgEx
gdi32.dllGetBitmapBits
gdi32.dllGdiFlush
gdi32.dllFrameRgn
gdi32.dllExtTextOutW
gdi32.dllExtFloodFill
gdi32.dllExcludeClipRect
gdi32.dllEnumFontsW
gdi32.dllEnumFontFamiliesExW
gdi32.dllEndPage
gdi32.dllEndDoc
gdi32.dllEllipse
gdi32.dllDeleteObject
gdi32.dllDeleteEnhMetaFile
gdi32.dllDeleteDC
gdi32.dllCreateSolidBrush
gdi32.dllCreateRectRgn
gdi32.dllCreatePenIndirect
gdi32.dllCreatePalette
gdi32.dllCreateICW
gdi32.dllCreateHalftonePalette
gdi32.dllCreateFontIndirectW
gdi32.dllCreateEnhMetaFileW
gdi32.dllCreateDIBitmap
gdi32.dllCreateDIBSection
gdi32.dllCreateDCW
gdi32.dllCreateCompatibleDC
gdi32.dllCreateCompatibleBitmap
gdi32.dllCreateBrushIndirect
gdi32.dllCreateBitmap
gdi32.dllCopyEnhMetaFileW
gdi32.dllCloseEnhMetaFile
gdi32.dllChord
gdi32.dllBitBlt
gdi32.dllArc
gdi32.dllAbortDoc
version.dllVerQueryValueW
version.dllGetFileVersionInfoSizeW
version.dllGetFileVersionInfoW
kernel32.dlllstrlenW
kernel32.dlllstrcpyW
kernel32.dllWriteFile
kernel32.dllWinExec
kernel32.dllWideCharToMultiByte
kernel32.dllWaitForSingleObjectEx
kernel32.dllWaitForSingleObject
kernel32.dllWaitForMultipleObjectsEx
kernel32.dllVirtualQueryEx
kernel32.dllVirtualQuery
kernel32.dllVirtualFree
kernel32.dllVirtualAlloc
kernel32.dllUnmapViewOfFile
kernel32.dllTryEnterCriticalSection
kernel32.dllSystemTimeToTzSpecificLocalTime
kernel32.dllSystemTimeToFileTime
kernel32.dllSwitchToThread
kernel32.dllSuspendThread
kernel32.dllSleep
kernel32.dllSizeofResource
kernel32.dllSignalObjectAndWait
kernel32.dllSetThreadPriority
kernel32.dllSetThreadLocale
kernel32.dllSetLastError
kernel32.dllSetFilePointer
kernel32.dllSetEvent
kernel32.dllSetErrorMode
kernel32.dllSetEndOfFile
kernel32.dllSearchPathA
kernel32.dllResumeThread
kernel32.dllResetEvent
kernel32.dllReleaseMutex
kernel32.dllReadFile
kernel32.dllReadDirectoryChangesW
kernel32.dllRaiseException
kernel32.dllIsDebuggerPresent
kernel32.dllOpenProcess
kernel32.dllOpenMutexW
kernel32.dllOpenFileMappingW
kernel32.dllMultiByteToWideChar
kernel32.dllMulDiv
kernel32.dllMoveFileW
kernel32.dllMapViewOfFile
kernel32.dllLockResource
kernel32.dllLoadResource
kernel32.dllLoadLibraryA
kernel32.dllLoadLibraryW
kernel32.dllLeaveCriticalSection
kernel32.dllIsDBCSLeadByte
kernel32.dllInitializeCriticalSection
kernel32.dllGlobalUnlock
kernel32.dllGlobalSize
kernel32.dllGlobalHandle
kernel32.dllGlobalLock
kernel32.dllGlobalFree
kernel32.dllGlobalFindAtomW
kernel32.dllGlobalDeleteAtom
kernel32.dllGlobalAlloc
kernel32.dllGlobalAddAtomW
kernel32.dllGetWindowsDirectoryW
kernel32.dllGetVolumeInformationW
kernel32.dllGetVersionExW
kernel32.dllGetVersion
kernel32.dllGetUserDefaultLCID
kernel32.dllGetTimeZoneInformation
kernel32.dllGetTickCount
kernel32.dllGetThreadPriority
kernel32.dllGetThreadLocale
kernel32.dllGetTempPathW
kernel32.dllGetSystemInfo
kernel32.dllGetSystemDirectoryW
kernel32.dllGetStringTypeExA
kernel32.dllGetStringTypeExW
kernel32.dllGetStdHandle
kernel32.dllGetProcAddress
kernel32.dllGetModuleHandleA
kernel32.dllGetModuleHandleW
kernel32.dllGetModuleFileNameW
kernel32.dllGetLocaleInfoW
kernel32.dllGetLocalTime
kernel32.dllGetLastError
kernel32.dllGetFullPathNameW
kernel32.dllGetFileSize
kernel32.dllGetFileAttributesW
kernel32.dllGetExitCodeThread
kernel32.dllGetEnvironmentVariableW
kernel32.dllGetDriveTypeW
kernel32.dllGetDiskFreeSpaceW
kernel32.dllGetDateFormatW
kernel32.dllGetCurrentThreadId
kernel32.dllGetCurrentThread
kernel32.dllGetCurrentProcessId
kernel32.dllGetCurrentProcess
kernel32.dllGetCurrentDirectoryA
kernel32.dllGetComputerNameW
kernel32.dllGetCPInfo
kernel32.dllGetACP
kernel32.dllFreeResource
kernel32.dllInterlockedIncrement
kernel32.dllInterlockedExchangeAdd
kernel32.dllInterlockedExchange
kernel32.dllInterlockedDecrement
kernel32.dllInterlockedCompareExchange
kernel32.dllFreeLibrary
kernel32.dllFormatMessageW
kernel32.dllFindResourceW
kernel32.dllFindNextFileW
kernel32.dllFindFirstFileA
kernel32.dllFindFirstFileW
kernel32.dllFindClose
kernel32.dllFileTimeToSystemTime
kernel32.dllFileTimeToLocalFileTime
kernel32.dllFileTimeToDosDateTime
kernel32.dllFatalAppExitA
kernel32.dllExitProcess
kernel32.dllEnumCalendarInfoW
kernel32.dllEnterCriticalSection
kernel32.dllDuplicateHandle
kernel32.dllDeleteFileW
kernel32.dllDeleteCriticalSection
kernel32.dllCreateThread
kernel32.dllCreateMutexA
kernel32.dllCreateFileMappingW
kernel32.dllCreateFileW
kernel32.dllCreateEventW
kernel32.dllCreateDirectoryW
kernel32.dllCopyFileW
kernel32.dllCompareStringA
kernel32.dllCompareStringW
kernel32.dllCloseHandle
advapi32.dllRegUnLoadKeyW
advapi32.dllRegSetValueExW
advapi32.dllRegSaveKeyW
advapi32.dllRegRestoreKeyW
advapi32.dllRegReplaceKeyW
advapi32.dllRegQueryValueExA
advapi32.dllRegQueryValueExW
advapi32.dllRegQueryInfoKeyW
advapi32.dllRegOpenKeyExA
advapi32.dllRegOpenKeyExW
advapi32.dllRegLoadKeyW
advapi32.dllRegFlushKey
advapi32.dllRegEnumValueW
advapi32.dllRegEnumKeyExW
advapi32.dllRegDeleteValueW
advapi32.dllRegDeleteKeyW
advapi32.dllRegCreateKeyExW
advapi32.dllRegConnectRegistryW
advapi32.dllRegCloseKey
advapi32.dllGetUserNameW
oleaut32.dllGetErrorInfo
oleaut32.dllGetActiveObject
oleaut32.dllSysFreeString
ole32.dllCreateStreamOnHGlobal
ole32.dllOleRegEnumVerbs
ole32.dllIsAccelerator
ole32.dllOleDraw
ole32.dllOleSetMenuDescriptor
ole32.dllOleUninitialize
ole32.dllOleInitialize
ole32.dllCoTaskMemFree
ole32.dllProgIDFromCLSID
ole32.dllCLSIDFromString
ole32.dllStringFromCLSID
ole32.dllCoCreateInstance
ole32.dllCoGetClassObject
ole32.dllCoUninitialize
ole32.dllCoInitialize
ole32.dllIsEqualGUID
kernel32.dllSleep
ole32.dllIsEqualGUID
oleaut32.dllSafeArrayPtrOfIndex
oleaut32.dllSafeArrayPutElement
oleaut32.dllSafeArrayGetElement
oleaut32.dllSafeArrayUnaccessData
oleaut32.dllSafeArrayAccessData
oleaut32.dllSafeArrayGetUBound
oleaut32.dllSafeArrayGetLBound
oleaut32.dllSafeArrayCreate
oleaut32.dllVariantChangeType
oleaut32.dllVariantCopyInd
oleaut32.dllVariantCopy
oleaut32.dllVariantClear
oleaut32.dllVariantInit
comctl32.dllInitializeFlatSB
comctl32.dllFlatSB_SetScrollProp
comctl32.dllFlatSB_SetScrollPos
comctl32.dllFlatSB_SetScrollInfo
comctl32.dllFlatSB_GetScrollPos
comctl32.dllFlatSB_GetScrollInfo
comctl32.dll_TrackMouseEvent
comctl32.dllImageList_GetImageInfo
comctl32.dllImageList_SetIconSize
comctl32.dllImageList_GetIconSize
comctl32.dllImageList_Write
comctl32.dllImageList_Read
comctl32.dllImageList_GetDragImage
comctl32.dllImageList_DragShowNolock
comctl32.dllImageList_DragMove
comctl32.dllImageList_DragLeave
comctl32.dllImageList_DragEnter
comctl32.dllImageList_EndDrag
comctl32.dllImageList_BeginDrag
comctl32.dllImageList_Copy
comctl32.dllImageList_LoadImageW
comctl32.dllImageList_GetIcon
comctl32.dllImageList_Remove
comctl32.dllImageList_DrawEx
comctl32.dllImageList_Replace
comctl32.dllImageList_Draw
comctl32.dllImageList_SetOverlayImage
comctl32.dllImageList_GetBkColor
comctl32.dllImageList_SetBkColor
comctl32.dllImageList_ReplaceIcon
comctl32.dllImageList_Add
comctl32.dllImageList_SetImageCount
comctl32.dllImageList_GetImageCount
comctl32.dllImageList_Destroy
comctl32.dllImageList_Create
shell32.dllSHGetSpecialFolderLocation
shell32.dllSHGetPathFromIDListW
shell32.dllSHGetMalloc
winspool.drvOpenPrinterW
winspool.drvEnumPrintersW
winspool.drvDocumentPropertiesW
winspool.drvClosePrinter
winspool.drvGetDefaultPrinterW
user32.dllDdeCmpStringHandles
user32.dllDdeFreeStringHandle
user32.dllDdeQueryStringA
user32.dllDdeCreateStringHandleA
user32.dllDdeGetLastError
user32.dllDdeFreeDataHandle
user32.dllDdeUnaccessData
user32.dllDdeAccessData
user32.dllDdeCreateDataHandle
user32.dllDdeClientTransaction
user32.dllDdeNameService
user32.dllDdePostAdvise
user32.dllDdeSetUserHandle
user32.dllDdeQueryConvInfo
user32.dllDdeDisconnect
user32.dllDdeConnect
user32.dllDdeUninitialize
user32.dllDdeInitializeA
kernel32.dllGetVersionExW
kernel32.dllCreateMutexW
winmm.dlltimeGetTime
shell32.dllSHILCreateFromPath
shell32.dllSHChangeNotifyDeregister
shell32.dllSHChangeNotifyRegister

StringTable 040904E4

CompanyNameMCsoft
FileDescriptionUser Activity Monitor
FileVersion5.9.48.60
InternalName
LegalCopyright
LegalTrademarks
OriginalFilename
ProductName
ProductVersion5.9
Comments

VS_FIXEDFILEINFO

FileVersion5.9.48.60
ProductVersion5.9.48.60
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS4
FileType1
FileSubtype0

Signers (1)

issuer: /C=BE/O=GlobalSign nv-sa/CN=GlobalSign CodeSigning CA - SHA256 - G3
serial: 551A07B88D6A1CBD021DFFCD

Certificates (2)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: OU=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign
        Validity
            Not Before: Jun 15 00:00:00 2016 GMT
            Not After : Jun 15 00:00:00 2024 GMT
        Subject: C=BE, O=GlobalSign nv-sa, CN=GlobalSign CodeSigning CA - SHA256 - G3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:8d:85:55:23:a9:1f:53:af:c9:ed:36:c2:29:b5:
                    6e:d8:f9:42:f5:21:8b:87:f0:43:a1:2f:c0:3f:97:
                    e3:18:47:d4:96:4e:88:ab:c6:63:e9:b6:49:15:85:
                    f1:d9:9b:7b:1b:fd:d8:4a:cc:6d:4e:86:40:17:cd:
                    7b:ba:47:28:b5:d6:14:40:0c:86:ee:1e:4b:33:f3:
                    2c:55:ee:21:8c:da:b6:c1:fe:b0:4e:3a:ae:51:9f:
                    a5:14:e3:10:e6:93:ca:fa:f9:5d:b1:90:87:ef:f8:
                    35:2d:fc:a2:5c:26:ee:7b:15:8b:1f:d9:c3:a1:97:
                    35:41:b3:30:fd:72:13:ad:91:97:3a:ce:72:9d:06:
                    0a:75:3c:1f:98:e3:cb:18:2f:8c:9f:08:4a:91:0a:
                    d9:d9:35:d9:83:92:76:62:5e:df:83:ae:e4:d6:01:
                    4e:cc:f3:3c:70:61:58:37:1f:14:e3:6a:a0:af:6b:
                    f4:d9:d2:6c:2c:19:30:5d:a0:6f:52:df:d1:9c:c9:
                    e0:0d:d9:75:11:65:96:d9:43:b4:a7:90:39:ae:47:
                    1c:54:cb:b1:95:6e:25:de:8e:f1:12:1c:f0:d7:6e:
                    e7:14:4d:b3:1a:65:d6:84:4a:57:ee:04:af:62:38:
                    c5:10:9b:43:8e:52:b8:3e:b6:ae:9e:2c:97:ff:8e:
                    74:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                Code Signing, OCSP Signing
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Subject Key Identifier: 
                0F:3A:E7:AC:94:91:74:2D:96:02:73:83:AD:9C:2E:49:3F:19:AA:54
            X509v3 Authority Key Identifier: 
                8F:F0:4B:7F:A8:2E:45:24:AE:4D:50:FA:63:9A:8B:DE:E2:DD:1B:BC
            Authority Information Access: 
                OCSP - URI:http://ocsp2.globalsign.com/rootr3
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.globalsign.com/root-r3.crl
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.4146.1.50
                Policy: 2.23.140.1.4.1
                Policy: 1.3.6.1.4.1.4146.1.95
                  CPS: https://www.globalsign.com/repository/
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        15:84:28:0c:ed:a1:c3:19:82:db:63:27:41:d7:cc:63:7d:d6:
        bc:cf:36:9b:cf:d2:5d:4c:02:8b:58:1a:16:08:7a:b1:98:99:
        7f:d8:33:8a:5c:9e:62:0a:9a:ea:90:c2:c5:63:04:0b:e8:87:
        58:06:00:07:82:59:c3:a8:94:32:d9:e0:14:4d:a0:d5:23:e0:
        c7:dd:ba:f0:69:e2:4a:45:65:2d:4d:49:90:78:66:32:0e:b0:
        68:c0:b0:88:b0:8e:ed:5c:06:f8:5c:10:48:3f:23:73:ba:3b:
        53:84:52:80:cd:f0:b3:15:c8:11:0a:8b:05:78:46:59:08:d4:
        be:b7:ff:4b:f5:9c:6a:4c:9c:76:a2:11:85:45:8c:d4:37:ee:
        50:dd:e1:33:34:a9:a1:1f:3a:0b:f1:56:44:8a:6f:b3:33:d0:
        b1:8e:d1:0c:60:07:ee:32:c2:f0:24:6f:bf:af:fb:81:01:76:
        67:c4:a3:e8:e0:ab:dc:33:55:28:e3:67:47:3c:eb:6a:a4:df:
        94:e9:f4:a6:c0:81:d1:52:98:51:a6:d6:02:b7:3c:ea:4a:ef:
        d0:ba:65:d2:37:83:53:4b:7e:67:7c:8c:40:f6:07:1c:b0:af:
        04:06:dc:f8:6c:46:88:72:9c:eb:4e:9d:c3:b0:b9:54:a3:b9:
        4e:97:ca:14

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:1a:07:b8:8d:6a:1c:bd:02:1d:ff:cd
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign CodeSigning CA - SHA256 - G3
        Validity
            Not Before: Apr  3 12:53:04 2018 GMT
            Not After : Jul 19 13:56:45 2020 GMT
        Subject: C=RU, ST=Perm Krai, L=Perm, O=MCsoft, CN=MCsoft
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c0:43:f9:83:60:c7:4e:4c:e2:ff:5c:86:cd:fb:
                    bc:d9:15:ad:d0:33:bd:3c:15:71:82:38:5b:54:1f:
                    ec:05:1c:c2:33:85:92:1a:c8:cb:2e:fe:7d:8e:76:
                    48:f3:ab:22:c6:23:50:d6:ff:46:6e:cd:9c:08:be:
                    20:02:aa:0a:30:8a:a4:63:62:db:17:b3:9d:8f:ca:
                    b0:e4:50:e4:8d:d6:86:48:ab:8d:ac:90:86:00:9f:
                    8a:bc:7a:6d:bb:55:91:43:0c:21:9f:ee:fd:41:81:
                    dc:35:05:8d:5d:ee:52:fc:15:e7:7a:e8:e8:6c:2a:
                    19:64:85:f6:2b:f0:6c:ad:55:ff:6c:76:96:85:6b:
                    0f:cb:1a:d7:7f:bf:90:51:b3:03:bf:ad:a2:66:45:
                    af:35:59:8f:f0:33:89:c5:5f:c4:df:a7:7e:79:31:
                    70:b6:d4:f4:7a:53:e3:5a:d8:89:6d:cf:2f:db:a9:
                    c5:9e:77:f7:dd:f6:91:d1:10:9e:bd:1b:8b:d3:9a:
                    02:07:f2:2a:27:59:c6:33:1b:e4:da:e2:12:ef:0c:
                    87:67:ea:ef:bc:61:67:81:d6:73:38:dd:a7:80:93:
                    f4:89:db:ff:4d:1b:be:12:b3:eb:64:ca:dc:80:ff:
                    e2:1a:5e:a3:3b:c5:df:11:03:4a:d9:eb:25:b8:e4:
                    41:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:http://secure.globalsign.com/cacert/gscodesignsha2g3ocsp.crt
                OCSP - URI:http://ocsp2.globalsign.com/gscodesignsha2g3
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.4146.1.50
                  CPS: https://www.globalsign.com/repository/
                Policy: 2.23.140.1.4.1
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.globalsign.com/gscodesignsha2g3.crl
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 Subject Key Identifier: 
                E9:F0:B9:E1:E2:A1:FF:AE:88:35:68:CA:1D:D9:58:FB:CC:63:67:7D
            X509v3 Authority Key Identifier: 
                0F:3A:E7:AC:94:91:74:2D:96:02:73:83:AD:9C:2E:49:3F:19:AA:54
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        2a:ab:ab:b8:b5:f9:95:1c:16:75:40:3e:5d:e4:9c:62:b8:ef:
        16:f4:f4:43:54:60:f2:ce:21:fc:8c:c8:1d:20:79:52:e6:7b:
        89:78:f3:96:ee:00:cf:28:8c:8b:8c:a5:4c:66:db:78:97:0f:
        32:27:b1:b1:eb:a1:9c:de:86:36:cb:f7:55:2f:3c:76:fb:3d:
        b1:79:45:e4:0a:5d:58:2b:2a:dd:aa:9f:f0:13:8d:35:5c:d5:
        6b:3c:f8:e3:ce:3c:49:70:37:67:21:b7:16:37:f5:45:b4:82:
        70:2b:d0:a1:72:a7:e9:a0:df:76:98:6f:c3:3d:40:35:fc:60:
        0d:27:cc:d5:e4:e5:2c:89:f7:a9:46:2e:1b:e3:32:41:04:ae:
        10:42:ba:76:c8:7d:89:a0:48:45:02:c6:b9:15:b3:c2:c0:75:
        03:72:80:cd:c4:81:60:14:02:60:a9:2b:61:88:ef:8f:57:8e:
        f0:45:db:51:0c:17:32:e7:c1:13:d8:e1:49:f2:85:71:b1:8f:
        e0:4d:5d:af:63:62:95:a9:5d:42:08:1a:ed:25:ab:16:2c:e6:
        f0:88:72:b1:05:90:da:35:74:46:fb:49:2c:04:9f:68:9f:02:
        93:67:51:db:80:bd:cb:07:a0:e5:c1:7a:e1:1c:66:4f:e4:58:
        31:dc:51:2c
pkcs7-signedData
  • 1
    • SHA1: nil
    • 1.3.6.1.4.1.311.2.1.4
      • #0
        • 1.3.6.1.4.1.311.2.1.15
          • :
        • SHA1
          • f8 ae 6e 42 23 8c e3 0d  55 c5 4b 2e f7 0a 1b 02  |..nB#...U.K.....|
ea 61 18 97                                       |.a..            |
    • unnamed
      • #0
        • 2
          • 48:1B:6A:07:26:D2:E8:3F:26:02:D4:82:5A:CD
          • RSA-SHA256: nil
          • #2
            • OU: GlobalSign Root CA - R3
            • O: GlobalSign
            • CN: GlobalSign
          • 2016-06-15 00:00:00 UTC: 2024-06-15 00:00:00 UTC
          • Subject
            • C: BE
            • O: GlobalSign nv-sa
            • CN: GlobalSign CodeSigning CA - SHA256 - G3
          • #5
            • rsaEncryption: nil
            • 8D:85:55:23:A9:1F:53:AF:C9:ED:36:C2:29:B5:6E:D8:
              F9:42:F5:21:8B:87:F0:43:A1:2F:C0:3F:97:E3:18:47:
              D4:96:4E:88:AB:C6:63:E9:B6:49:15:85:F1:D9:9B:7B:
              1B:FD:D8:4A:CC:6D:4E:86:40:17:CD:7B:BA:47:28:B5:
              D6:14:40:0C:86:EE:1E:4B:33:F3:2C:55:EE:21:8C:DA:
              B6:C1:FE:B0:4E:3A:AE:51:9F:A5:14:E3:10:E6:93:CA:
              FA:F9:5D:B1:90:87:EF:F8:35:2D:FC:A2:5C:26:EE:7B:
              15:8B:1F:D9:C3:A1:97:35:41:B3:30:FD:72:13:AD:91:
              97:3A:CE:72:9D:06:0A:75:3C:1F:98:E3:CB:18:2F:8C:
              9F:08:4A:91:0A:D9:D9:35:D9:83:92:76:62:5E:DF:83:
              AE:E4:D6:01:4E:CC:F3:3C:70:61:58:37:1F:14:E3:6A:
              A0:AF:6B:F4:D9:D2:6C:2C:19:30:5D:A0:6F:52:DF:D1:
              9C:C9:E0:0D:D9:75:11:65:96:D9:43:B4:A7:90:39:AE:
              47:1C:54:CB:B1:95:6E:25:DE:8E:F1:12:1C:F0:D7:6E:
              E7:14:4D:B3:1A:65:D6:84:4A:57:EE:04:AF:62:38:C5:
              10:9B:43:8E:52:B8:3E:B6:AE:9E:2C:97:FF:8E:74:EF              : 0x010001
          • #6
            • keyUsage: true, 6
            • extendedKeyUsage
              • codeSigning: OCSPSigning
            • basicConstraints
              • true
              • true: 0
            • subjectKeyIdentifier: 
              0f 3a e7 ac 94 91 74 2d  96 02 73 83 ad 9c 2e 49  |.:....t-..s....I|
3f 19 aa 54                                       |?..T            |
            • authorityKeyIdentifier: 
              8f f0 4b 7f a8 2e 45 24  ae 4d 50 fa 63 9a 8b de  |..K...E$.MP.c...|
e2 dd 1b bc                                       |....            |
            • authorityInfoAccess
              • OCSP: http://ocsp2.globalsign.com/rootr3
            • crlDistributionPoints: http://crl.globalsign.com/root-r3.crl
            • certificatePolicies
              • 1.3.6.1.4.1.4146.1.50
                • 2.23.140.1.4.1
                • 1.3.6.1.4.1.4146.1.95
                  • id-qt-cps: https://www.globalsign.com/repository/
        • RSA-SHA256: 
          15 84 28 0c ed a1 c3 19  82 db 63 27 41 d7 cc 63  |..(.......c'A..c|
7d d6 bc cf 36 9b cf d2  5d 4c 02 8b 58 1a 16 08  |}...6...]L..X...|
7a b1 98 99 7f d8 33 8a  5c 9e 62 0a 9a ea 90 c2  |z.....3.\.b.....|
c5 63 04 0b e8 87 58 06  00 07 82 59 c3 a8 94 32  |.c....X....Y...2|
d9 e0 14 4d a0 d5 23 e0  c7 dd ba f0 69 e2 4a 45  |...M..#.....i.JE|
65 2d 4d 49 90 78 66 32  0e b0 68 c0 b0 88 b0 8e  |e-MI.xf2..h.....|
ed 5c 06 f8 5c 10 48 3f  23 73 ba 3b 53 84 52 80  |.\..\.H?#s.;S.R.|
cd f0 b3 15 c8 11 0a 8b  05 78 46 59 08 d4 be b7  |.........xFY....|
ff 4b f5 9c 6a 4c 9c 76  a2 11 85 45 8c d4 37 ee  |.K..jL.v...E..7.|
50 dd e1 33 34 a9 a1 1f  3a 0b f1 56 44 8a 6f b3  |P..34...:..VD.o.|
33 d0 b1 8e d1 0c 60 07  ee 32 c2 f0 24 6f bf af  |3.....`..2..$o..|
fb 81 01 76 67 c4 a3 e8  e0 ab dc 33 55 28 e3 67  |...vg......3U(.g|
47 3c eb 6a a4 df 94 e9  f4 a6 c0 81 d1 52 98 51  |G<.j.........R.Q|
a6 d6 02 b7 3c ea 4a ef  d0 ba 65 d2 37 83 53 4b  |....<.J...e.7.SK|
7e 67 7c 8c 40 f6 07 1c  b0 af 04 06 dc f8 6c 46  |~g|.@.........lF|
88 72 9c eb 4e 9d c3 b0  b9 54 a3 b9 4e 97 ca 14  |.r..N....T..N...|
      • Certificate #1
        • 2
          • 55:1A:07:B8:8D:6A:1C:BD:02:1D:FF:CD
          • RSA-SHA256: nil
          • Issuer
            • C: BE
            • O: GlobalSign nv-sa
            • CN: GlobalSign CodeSigning CA - SHA256 - G3
          • 2018-04-03 12:53:04 UTC: 2020-07-19 13:56:45 UTC
          • Subject
            • C: RU
            • ST: Perm Krai
            • L: Perm
            • O: MCsoft
            • CN: MCsoft
          • #5
            • rsaEncryption: nil
            • C0:43:F9:83:60:C7:4E:4C:E2:FF:5C:86:CD:FB:BC:D9:
              15:AD:D0:33:BD:3C:15:71:82:38:5B:54:1F:EC:05:1C:
              C2:33:85:92:1A:C8:CB:2E:FE:7D:8E:76:48:F3:AB:22:
              C6:23:50:D6:FF:46:6E:CD:9C:08:BE:20:02:AA:0A:30:
              8A:A4:63:62:DB:17:B3:9D:8F:CA:B0:E4:50:E4:8D:D6:
              86:48:AB:8D:AC:90:86:00:9F:8A:BC:7A:6D:BB:55:91:
              43:0C:21:9F:EE:FD:41:81:DC:35:05:8D:5D:EE:52:FC:
              15:E7:7A:E8:E8:6C:2A:19:64:85:F6:2B:F0:6C:AD:55:
              FF:6C:76:96:85:6B:0F:CB:1A:D7:7F:BF:90:51:B3:03:
              BF:AD:A2:66:45:AF:35:59:8F:F0:33:89:C5:5F:C4:DF:
              A7:7E:79:31:70:B6:D4:F4:7A:53:E3:5A:D8:89:6D:CF:
              2F:DB:A9:C5:9E:77:F7:DD:F6:91:D1:10:9E:BD:1B:8B:
              D3:9A:02:07:F2:2A:27:59:C6:33:1B:E4:DA:E2:12:EF:
              0C:87:67:EA:EF:BC:61:67:81:D6:73:38:DD:A7:80:93:
              F4:89:DB:FF:4D:1B:BE:12:B3:EB:64:CA:DC:80:FF:E2:
              1A:5E:A3:3B:C5:DF:11:03:4A:D9:EB:25:B8:E4:41:D5              : 0x010001
          • #6
            • keyUsage: true, 0x80
            • authorityInfoAccess
              • #0
                • caIssuers: http://secure.globalsign.com/cacert/gscodesignsha2g3ocsp.crt
                • OCSP: http://ocsp2.globalsign.com/gscodesignsha2g3
            • certificatePolicies
              • #0
                • 1.3.6.1.4.1.4146.1.50
                  • id-qt-cps: https://www.globalsign.com/repository/
                • 2.23.140.1.4.1
            • basicConstraints
              • nil
            • crlDistributionPoints: http://crl.globalsign.com/gscodesignsha2g3.crl
            • extendedKeyUsage: codeSigning
            • subjectKeyIdentifier: 
              e9 f0 b9 e1 e2 a1 ff ae  88 35 68 ca 1d d9 58 fb  |.........5h...X.|
cc 63 67 7d                                       |.cg}            |
            • authorityKeyIdentifier: 
              0f 3a e7 ac 94 91 74 2d  96 02 73 83 ad 9c 2e 49  |.:....t-..s....I|
3f 19 aa 54                                       |?..T            |
        • RSA-SHA256: 
          2a ab ab b8 b5 f9 95 1c  16 75 40 3e 5d e4 9c 62  |*........u@>]..b|
b8 ef 16 f4 f4 43 54 60  f2 ce 21 fc 8c c8 1d 20  |.....CT`..!.... |
79 52 e6 7b 89 78 f3 96  ee 00 cf 28 8c 8b 8c a5  |yR.{.x.....(....|
4c 66 db 78 97 0f 32 27  b1 b1 eb a1 9c de 86 36  |Lf.x..2'.......6|
cb f7 55 2f 3c 76 fb 3d  b1 79 45 e4 0a 5d 58 2b  |..U/
    • Signer
      • 1
      • unnamed
        • #0
          • C: BE
          • O: GlobalSign nv-sa
          • CN: GlobalSign CodeSigning CA - SHA256 - G3
        • 55:1A:07:B8:8D:6A:1C:BD:02:1D:FF:CD
      • SHA1: nil
      • #3
        • 1.3.6.1.4.1.311.2.1.12
          • nil
        • contentType: 1.3.6.1.4.1.311.2.1.4
        • 1.3.6.1.4.1.311.2.1.11: msCodeInd
        • messageDigest: 
          d8 a7 80 fd 27 f6 e0 3a  7c 2d ca a8 74 4e e2 31  |....'..:|-..tN.1|
8b 75 52 38                                       |.uR8            |
      • rsaEncryption: 
        a3 1a 7b 55 eb ad 7e e9  76 43 9f 7b fb a4 37 97  |..{U..~.vC.{..7.|
e7 0b 9b d3 69 54 36 6e  b9 7a 19 81 69 da 95 4f  |....iT6n.z..i..O|
5d a8 1d b6 1d 52 42 41  7c 9d 04 88 a8 ad 7a 1a  |]....RBA|.....z.|
d9 9e 80 53 c0 c2 a1 b6  8c 71 d4 32 97 bf fc 35  |...S.....q.2...5|
f6 c7 13 42 be 25 dc c2  cf c8 f7 cf 96 1a 99 89  |...B.%..........|
d4 d7 ff f2 2d b8 82 37  43 53 4b 26 a5 b5 24 59  |....-..7CSK&..$Y|
31 ae a4 67 1a 97 0b 71  e7 f5 b1 59 74 0a 44 a7  |1..g...q...Yt.D.|
5c 59 2e ea fd a4 f3 23  9d a0 31 a0 46 cf 73 7f  |\Y.....#..1.F.s.|
dc 0a c9 ce 70 9f bc ec  17 81 bd 7c 1f 0d ea aa  |....p......|....|
73 d5 d3 9d 64 b6 92 df  4e c1 a5 41 5c c6 1b fb  |s...d...N..A\...|
85 69 96 05 c5 17 0a 36  a5 d4 49 32 f7 0a 42 1f  |.i.....6..I2..B.|
05 16 1c 11 86 74 5d e1  87 37 77 9c 12 a6 93 30  |.....t]..7w....0|
f8 21 71 79 4d cf 32 0a  5e b3 80 20 ed 09 66 8b  |.!qyM.2.^.. ..f.|
5f 34 e6 70 ab 3c 96 da  39 90 a6 dc 89 cb 9f 0e  |_4.p.<..9.......|
1b 16 e9 7b de bb 1c ba  8d 44 27 b2 ac 9e 99 3a  |...{.....D'....:|
91 8f fc 06 ee 2d 01 fc  65 2f e1 a1 0b 91 6b c2  |.....-..e/....k.|
      • 1.3.6.1.4.1.311.3.3.1
        • pkcs7-signedData
          • 3
            • SHA256: nil
            • id-smime-ct-TSTInfo
              • 1
                • 1.3.6.1.4.1.4146.2.3
                • SHA256
                  • 27 19 80 82 66 53 0b 92  95 ec 91 5d 5e ac aa 03  |'...fS.....]^...|
ac 79 97 fd 09 80 80 03  91 57 75 fb 78 c2 4d da  |.y.......Wu.x.M.|
                • 5A:D4:C8:63:A1:A5:E8:FD:67:A7:02:C6:4D:E6:20:3B:
                  8F:AC:52:42
                • 2020-01-29 16:11:02 UTC
                • CN: GlobalSign TSA for Advanced - G2
            • unnamed
              • Certificate #0
                • 2
                  • 0C:A7:CF:5D:07:07:24:AC:89:E7:9A:3A
                  • RSA-SHA256: nil
                  • Issuer
                    • C: BE
                    • O: GlobalSign nv-sa
                    • CN: GlobalSign Timestamping CA - SHA256 - G2
                  • 2018-02-19 00:00:00 UTC: 2029-03-18 10:00:00 UTC
                  • CN: GlobalSign TSA for Advanced - G2
                  • #5
                    • rsaEncryption: nil
                    • B7:C7:92:8A:28:D8:F3:91:CB:50:0D:5D:EB:29:44:C1:
                      82:59:A5:CA:64:CE:BD:83:B5:51:E5:94:CC:6E:80:9A:
                      17:6C:DC:FF:62:E6:36:43:5E:01:C2:0C:64:8D:CA:77:
                      9E:F6:5D:77:45:B9:5E:C8:24:EB:41:37:11:66:37:AC:
                      C8:CD:74:9B:CC:B3:EF:4C:E2:7F:1B:CE:73:BE:C9:96:
                      9D:35:1E:7C:F7:54:F7:6C:EC:A0:12:D6:AE:99:9D:63:
                      C4:78:5F:59:A9:2E:22:F5:C3:27:D8:B2:5B:45:63:27:
                      90:FF:8C:B1:3D:A9:B4:F3:0E:C0:F1:20:65:06:89:9D:
                      03:1C:A3:B0:52:41:85:34:EB:BC:CB:CE:54:F6:12:FE:
                      B3:01:89:4A:A6:FA:54:C5:1F:FB:D3:1C:C0:E3:BF:97:
                      E3:3F:D0:1B:F9:40:C7:1B:D5:EB:26:7C:43:30:C7:70:
                      F2:78:11:AA:85:4E:A5:0E:0D:00:4A:3A:11:77:A3:CA:
                      23:01:80:9E:C8:93:56:5D:46:CC:8A:D8:D2:AA:0A:84:
                      85:B2:89:5B:D5:32:CE:41:7B:18:4E:54:CA:AB:D1:52:
                      5E:12:D3:24:9E:56:F3:0C:8F:DD:BD:92:8E:79:D5:41:
                      89:C3:A3:A0:E5:91:FC:C7:67:9D:87:33:CE:71:32:73                      : 0x010001
                  • #6
                    • keyUsage: true, 0x80
                    • certificatePolicies
                      • 1.3.6.1.4.1.4146.1.30
                        • id-qt-cps: https://www.globalsign.com/repository/
                    • basicConstraints
                      • nil
                    • extendedKeyUsage: true, timeStamping
                    • crlDistributionPoints: http://crl.globalsign.com/gs/gstimestampingsha2g2.crl
                    • authorityInfoAccess
                      • #0
                        • caIssuers: http://secure.globalsign.com/cacert/gstimestampingsha2g2.crt
                        • OCSP: http://ocsp2.globalsign.com/gstimestampingsha2g2
                    • subjectKeyIdentifier: 
                      2d 6e 6e d1 8d e5 03 80  ee e7 63 e9 a7 d9 da 0b  |-nn.......c.....|
3c 57 22 3d                                       |
                    • authorityKeyIdentifier: 
                      92 21 a7 4a 95 5d 64 b0  9b b4 1e e6 00 37 47 e6  |.!.J.]d......7G.|
9d 41 2b 4c                                       |.A+L            |
                • RSA-SHA256: 
                  8d fd 1d 1f 8f 88 d3 65  f8 b5 5c 46 e9 a7 d3 b6  |.......e..\F....|
3f 4a cb 43 05 c2 07 0d  c3 5e 03 84 23 37 a8 7a  |?J.C.....^..#7.z|
8c 97 23 ff 27 9c 84 7d  61 eb 5c 4b 57 3e 9b f4  |..#.'..}a.\KW>..|
44 db 80 58 f7 b6 65 de  8f 12 0a 5f a7 87 74 b7  |D..X..e...._..t.|
da 14 40 87 51 ec 9f 4a  47 55 f0 17 e8 18 3e 71  |..@.Q..JGU....>q|
20 31 e6 28 22 ab 4e f6  ae 9c 6b c2 e7 44 fb 68  | 1.(".N...k..D.h|
0d 20 7f 53 3f 94 1b a1  86 82 4e 32 16 10 5a 3f  |. .S?.....N2..Z?|
89 58 c1 d0 b4 db b6 90  fb 8d 32 e9 a1 4b 46 50  |.X........2..KFP|
37 b6 c3 3a e9 29 24 12  92 5a 4e 2b b9 b6 0a 7a  |7..:.)$..ZN+...z|
36 8c 97 c0 ef 89 7c 33  de 31 e1 a1 97 e4 e7 45  |6.....|3.1.....E|
ad 61 52 fd 5a 89 d3 54  7e 8a 4d 5b 89 7b 0e 96  |.aR.Z..T~.M[.{..|
77 d1 f2 3c 38 1b da f9  a5 61 20 65 02 bc c5 ad  |w..<8....a e....|
d7 0c 62 10 28 2c dd b6  e3 a8 61 00 ac 08 26 a3  |..b.(,....a...&.|
8d 85 d0 64 c9 36 90 1e  8a 52 c9 87 8d 35 a5 5d  |...d.6...R...5.]|
48 91 fc 93 a6 a5 65 f1  ec f9 3a dc a5 2c 9e 04  |H.....e...:..,..|
6d 62 33 fe de fa 9f c5  ce af 95 f3 51 a8 f2 ce  |mb3.........Q...|
              • #1
                • 2
                  • 04:00:00:00:00:01:31:89:C6:50:04
                  • RSA-SHA256: nil
                  • #2
                    • OU: GlobalSign Root CA - R3
                    • O: GlobalSign
                    • CN: GlobalSign
                  • 2011-08-02 10:00:00 UTC: 2029-03-29 10:00:00 UTC
                  • Subject
                    • C: BE
                    • O: GlobalSign nv-sa
                    • CN: GlobalSign Timestamping CA - SHA256 - G2
                  • #5
                    • rsaEncryption: nil
                    • AA:9B:8E:C3:AB:11:51:25:01:B6:96:94:E2:4F:D8:C1:
                      08:F6:46:23:D9:45:C5:95:97:5B:AB:1A:BF:D2:6C:57:
                      C9:33:06:1F:A0:0F:C6:3C:7E:53:48:7A:BF:9D:87:9E:
                      AF:EE:C3:8C:47:E1:42:EC:E3:E3:A1:4A:6C:0C:17:C4:
                      A6:C1:B9:CD:5B:F1:1E:44:89:8E:FE:0B:DE:21:58:13:
                      EE:4D:C8:C5:67:0B:1C:B2:B3:F1:34:76:91:A2:CB:07:
                      6D:37:C5:A0:47:26:02:15:A4:90:91:A9:79:9E:D7:EB:
                      57:9D:2B:7C:22:D8:14:D7:F1:07:1E:78:22:36:6B:77:
                      79:AF:AF:F9:7F:8E:4E:E1:B5:08:31:FD:EA:ED:4B:71:
                      62:8C:23:F1:03:39:8F:44:79:B6:76:03:57:9E:AD:2F:
                      08:46:DC:D2:8C:BC:F4:8E:74:CE:C8:68:69:51:76:11:
                      8B:0F:5D:24:5B:19:54:3D:26:CC:40:8D:82:27:1B:59:
                      20:7D:59:F6:93:80:8E:F8:2A:38:FD:6B:A0:40:65:1F:
                      57:76:CC:5B:8E:04:4F:2C:A8:DB:84:50:13:4F:C6:DC:
                      8B:B9:F8:DD:69:4C:88:EB:9C:7B:30:26:FC:7A:58:BB:
                      59:BC:14:72:92:81:57:B7:76:C9:D8:80:0A:80:6E:09                      : 0x010001
                  • #6
                    • keyUsage: true, 6
                    • basicConstraints
                      • true
                      • true: 0
                    • subjectKeyIdentifier: 
                      92 21 a7 4a 95 5d 64 b0  9b b4 1e e6 00 37 47 e6  |.!.J.]d......7G.|
9d 41 2b 4c                                       |.A+L            |
                    • certificatePolicies
                      • anyPolicy
                        • id-qt-cps: https://www.globalsign.com/repository/
                    • crlDistributionPoints: http://crl.globalsign.net/root-r3.crl
                    • authorityKeyIdentifier: 
                      8f f0 4b 7f a8 2e 45 24  ae 4d 50 fa 63 9a 8b de  |..K...E$.MP.c...|
e2 dd 1b bc                                       |....            |
                • RSA-SHA256: 
                  04 56 82 4a 7c d0 ce c9  bf 36 66 d1 be 35 9e 93  |.V.J|....6f..5..|
6c 97 e8 06 ce 31 18 59  f9 6c 41 5f 80 2e c0 42  |l....1.Y.lA_...B|
25 b8 18 c7 fc d4 b1 37  c4 68 a0 cf 28 6a 03 74  |%......7.h..(j.t|
4b 63 97 85 77 61 3b d7  2f e3 f5 bd 33 a2 92 7d  |Kc..wa;./...3..}|
11 1f 9e 8a 6c ef 2c b0  f4 62 8d 36 73 d1 16 36  |....l.,..b.6s..6|
f1 bc 5e ec b4 80 98 78  fc d2 76 79 e8 e1 21 94  |..^....x..vy..!.|
e0 1f c4 a2 e1 aa 67 db  b3 9c 73 e5 40 22 cf 39  |......g...s.@".9|
ce db e6 77 95 a7 bb b2  cb f6 19 86 9d 9f c8 d4  |...w............|
98 05 b2 71 6f 4e 75 ae  f1 3d 64 6a 3b 5e 4e 46  |...qoNu..=dj;^NF|
a6 2a 5d 08 92 f1 a3 f3  1d 74 bf 62 0d 23 8c 5c  |.*]......t.b.#.\|
2a 38 95 d2 c0 d5 cd cf  88 da 1f 28 b5 ba 81 69  |*8.........(...i|
64 2a b5 a6 a2 d5 73 af  dc 46 db 04 ae 91 d7 6e  |d*....s..F.....n|
c5 98 ba d4 47 c4 56 74  80 47 78 58 8c be ef 2b  |....G.Vt.GxX...+|
fd ec 6c bf d1 94 f7 bf  50 e0 7b e0 90 fd 20 18  |..l.....P.{... .|
78 18 22 5d 08 2e 8c 1c  a0 97 f3 1d 99 7d a3 9d  |x."].........}..|
91 d3 06 44 4e 04 6e 7a  1c 20 e3 36 f0 b6 50 b9  |...DN.nz. .6..P.|
            • 1
              • unnamed
                • #0
                  • C: BE
                  • O: GlobalSign nv-sa
                  • CN: GlobalSign Timestamping CA - SHA256 - G2
                • 0C:A7:CF:5D:07:07:24:AC:89:E7:9A:3A
              • SHA256: nil
              • #2
                • contentType: id-smime-ct-TSTInfo
                • signingTime: 2020-01-29 16:11:02 UTC
                • messageDigest: 
                  5d f0 03 3e 19 e5 9a b3  b9 5b b5 eb 9c 40 31 97  |]..>.....[...@1.|
be ca df ec 14 b4 e1 cb  09 8b 54 2d 3a 5c 60 a2  |..........T-:\`.|
                • id-smime-aa-signingCertificate
                  • 05 7a e7 2a af f6 d6 37  72 b4 9f 6a 23 6f 26 49  |.z.*...7r..j#o&I|
cd a9                                             |..              |
                    • unnamed
                      • #0
                        • C: BE
                        • O: GlobalSign nv-sa
                        • CN: GlobalSign Timestamping CA - SHA256 - G2
                      • 0C:A7:CF:5D:07:07:24:AC:89:E7:9A:3A
              • rsaEncryption: 
                3a 82 78 c2 fe 0a cd 46  f9 d4 c3 6d 3b e1 ae d3  |:.x....F...m;...|
52 29 72 d4 34 4c a2 bf  4d a6 57 d5 98 88 b7 83  |R)r.4L..M.W.....|
0b 51 a6 f6 7a 6e 1e ed  0e 7c 21 5d 10 1e 84 2c  |.Q..zn...|!]...,|
45 8f cd aa bc 40 9e 11  a5 e2 39 7b fc bb 93 65  |E....@....9{...e|
9d 22 f3 4d 08 31 b8 be  04 4a b0 9d 19 c3 a0 cc  |.".M.1...J......|
82 8a c2 83 09 71 41 a9  16 6e 08 6b 72 78 3e 77  |.....qA..n.krx>w|
56 e3 af 8f 73 84 ba e9  69 9e 43 09 52 c9 10 db  |V...s...i.C.R...|
c0 83 13 82 2d a9 93 dc  a3 06 40 db 26 3e 21 1d  |....-.....@.&>!.|
99 e3 23 39 36 f4 ee 76  ce f2 55 af 4b c2 87 68  |..#96..v..U.K..h|
38 35 54 28 fd 70 45 97  00 05 74 b6 ab 24 ee 6f  |85T(.pE...t..$.o|
ec bf aa 51 39 f4 de b9  7d 5f 38 50 ae 59 d0 65  |...Q9...}_8P.Y.e|
49 01 dc 05 c4 f0 7c 1e  d5 94 a3 db 36 c0 4d 42  |I.....|.....6.MB|
43 de 4b 1d d2 ac 71 57  a9 00 8e 08 69 63 b5 95  |C.K...qW....ic..|
8c b2 ce 1b a6 b6 97 bf  bb 36 42 26 84 41 6a 6c  |.........6B&.Ajl|
56 b1 12 4e 0a ab 49 58  48 0c c2 db aa eb 5d 23  |V..N..IXH.....]#|
61 9c 60 d1 a6 73 28 b8  36 ce 98 e6 fa f3 d7 f7  |a.`..s(.6.......|
offsetsizetypecomment
02759680EXE01/29/2020 16:11:01#
15c115HTM#
2a1c006264PKCS7Authenticode Signature#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK