KMSpico Portable[.]zip

resource	yara_rule
static1/unpack001/driver/tap-windows-9.21.0.exe	nsis_installer_1
static1/unpack001/driver/tap-windows-9.21.0.exe	nsis_installer_2

KMSpico Portable.zip

.zip

Auto (Run as Admin).cmd

.cmd .vbs

AutoPico.exe

.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

37:b2:14:67:87:fc:1a:45:4e:82:ce:c5:25:ec:e9:b0
Certificate

Issuer

CN=@ByELDI Certificate Authority

Not Before

09-08-2015 22:41

Not After

09-08-2045 22:41

Subject

CN=@ByELDI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

44:0f:ec:e1:e0:e0:e4:95:42:ea:bc:3a:4a:36:e0:3d
Certificate

Issuer

CN=@ByELDI Certificate Authority

Not Before

09-08-2015 22:41

Not After

09-08-2045 22:41

Subject

CN=@ByELDI Certificate Authority

Key Usages

KeyUsageDigitalSignature

KeyUsageContentCommitment

KeyUsageCertSign

KeyUsageCRLSign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

be:2e:82:0d:d1:5e:af:95:d2:9d:99:e2:9f:f4:6c:2d:9a:40:13:ad
Signer

Actual PE Digest

be:2e:82:0d:d1:5e:af:95:d2:9d:99:e2:9f:f4:6c:2d:9a:40:13:ad

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=@ByELDI

01-11-2015 02:46
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 714KB - Virtual size: 713KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

DevComponents.DotNetBar2.dll

.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LINE_NUMS_STRIPPED

IMAGE_FILE_LOCAL_SYMS_STRIPPED

IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.textxc
Size: 5.2MB - Virtual size: 5.2MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.datax
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 86B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

DisableSmartScreen.reg

KMSELDI.exe

.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

37:b2:14:67:87:fc:1a:45:4e:82:ce:c5:25:ec:e9:b0
Certificate

Issuer

CN=@ByELDI Certificate Authority

Not Before

09-08-2015 22:41

Not After

09-08-2045 22:41

Subject

CN=@ByELDI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

44:0f:ec:e1:e0:e0:e4:95:42:ea:bc:3a:4a:36:e0:3d
Certificate

Issuer

CN=@ByELDI Certificate Authority

Not Before

09-08-2015 22:41

Not After

09-08-2045 22:41

Subject

CN=@ByELDI Certificate Authority

Key Usages

KeyUsageDigitalSignature

KeyUsageContentCommitment

KeyUsageCertSign

KeyUsageCRLSign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

99:6f:6e:6d:3f:7b:80:25:95:61:f4:18:3f:a5:14:34:89:eb:5e:c7
Signer

Actual PE Digest

99:6f:6e:6d:3f:7b:80:25:95:61:f4:18:3f:a5:14:34:89:eb:5e:c7

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=@ByELDI

01-11-2015 02:46
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 878KB - Virtual size: 877KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

ReadMe KMSpico Portable.txt

RemoveWaterMark.cmd

Uninstall/EnableSmartScreen.cmd

Uninstall/EnableSmartScreen.reg

Uninstall/Remove_ScheduleTask.cmd

Uninstall/Restore_Watermark.cmd

Vestris.ResourceLib.dll

.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

cert/installAll.cmd

cert/kmscert2010/Access/AccessVLReg32.reg

cert/kmscert2010/Access/AccessVLReg64.reg

cert/kmscert2010/Access/AccessVLRegWOW.reg

cert/kmscert2010/Access/Access_KMS_Client.OOB.xrm-ms

cert/kmscert2010/Access/Access_KMS_Client.PL.xrm-ms

cert/kmscert2010/Access/Access_KMS_Client.PPDLIC.xrm-ms

cert/kmscert2010/Access/Access_KMS_Client.RAC_Priv.xrm-ms

cert/kmscert2010/Access/Access_KMS_Client.RAC_Pub.xrm-ms

cert/kmscert2010/Excel/ExcelVLReg32.reg

cert/kmscert2010/Excel/ExcelVLReg64.reg

cert/kmscert2010/Excel/ExcelVLRegWOW.reg

cert/kmscert2010/Excel/Excel_KMS_Client.OOB.xrm-ms

cert/kmscert2010/Excel/Excel_KMS_Client.PL.xrm-ms

cert/kmscert2010/Excel/Excel_KMS_Client.PPDLIC.xrm-ms

cert/kmscert2010/Excel/Excel_KMS_Client.RAC_Priv.xrm-ms

cert/kmscert2010/Excel/Excel_KMS_Client.RAC_Pub.xrm-ms

cert/kmscert2010/Groove/GrooveVLReg32.reg

cert/kmscert2010/Groove/GrooveVLReg64.reg

cert/kmscert2010/Groove/GrooveVLRegWOW.reg

cert/kmscert2010/Groove/Groove_KMS_Client.OOB.xrm-ms

cert/kmscert2010/Groove/Groove_KMS_Client.PL.xrm-ms

cert/kmscert2010/Groove/Groove_KMS_Client.PPDLIC.xrm-ms

cert/kmscert2010/Groove/Groove_KMS_Client.RAC_Priv.xrm-ms

cert/kmscert2010/Groove/Groove_KMS_Client.RAC_Pub.xrm-ms

cert/kmscert2010/InfoPath/InfoPathVLReg32.reg

cert/kmscert2010/InfoPath/InfoPathVLReg64.reg

cert/kmscert2010/InfoPath/InfoPathVLRegWOW.reg

cert/kmscert2010/InfoPath/InfoPath_KMS_Client.OOB.xrm-ms

cert/kmscert2010/InfoPath/InfoPath_KMS_Client.PL.xrm-ms

cert/kmscert2010/InfoPath/InfoPath_KMS_Client.PPDLIC.xrm-ms

cert/kmscert2010/InfoPath/InfoPath_KMS_Client.RAC_Priv.xrm-ms

cert/kmscert2010/InfoPath/InfoPath_KMS_Client.RAC_Pub.xrm-ms

cert/kmscert2010/OneNote/OneNoteVLReg32.reg

cert/kmscert2010/OneNote/OneNoteVLReg64.reg

cert/kmscert2010/OneNote/OneNoteVLRegWOW.reg

cert/kmscert2010/OneNote/OneNote_KMS_Client.OOB.xrm-ms

cert/kmscert2010/OneNote/OneNote_KMS_Client.PL.xrm-ms

cert/kmscert2010/OneNote/OneNote_KMS_Client.PPDLIC.xrm-ms

cert/kmscert2010/OneNote/OneNote_KMS_Client.RAC_Priv.xrm-ms

cert/kmscert2010/OneNote/OneNote_KMS_Client.RAC_Pub.xrm-ms

cert/kmscert2010/Outlook/OutlookVLReg32.reg

cert/kmscert2010/Outlook/OutlookVLReg64.reg

cert/kmscert2010/Outlook/OutlookVLRegWOW.reg

cert/kmscert2010/Outlook/Outlook_KMS_Client.OOB.xrm-ms

cert/kmscert2010/Outlook/Outlook_KMS_Client.PL.xrm-ms

cert/kmscert2010/Outlook/Outlook_KMS_Client.PPDLIC.xrm-ms

cert/kmscert2010/Outlook/Outlook_KMS_Client.RAC_Priv.xrm-ms

cert/kmscert2010/Outlook/Outlook_KMS_Client.RAC_Pub.xrm-ms

cert/kmscert2010/PowerPoint/PowerPointVLReg32.reg

cert/kmscert2010/PowerPoint/PowerPointVLReg64.reg

cert/kmscert2010/PowerPoint/PowerPointVLRegWOW.reg

cert/kmscert2010/PowerPoint/PowerPoint_KMS_Client.OOB.xrm-ms

cert/kmscert2010/PowerPoint/PowerPoint_KMS_Client.PL.xrm-ms

cert/kmscert2010/PowerPoint/PowerPoint_KMS_Client.PPDLIC.xrm-ms

cert/kmscert2010/PowerPoint/PowerPoint_KMS_Client.RAC_Priv.xrm-ms

cert/kmscert2010/PowerPoint/PowerPoint_KMS_Client.RAC_Pub.xrm-ms

cert/kmscert2010/ProPlus/ProPlusVLReg32.reg

cert/kmscert2010/ProPlus/ProPlusVLReg64.reg

cert/kmscert2010/ProPlus/ProPlusVLRegWOW.reg

cert/kmscert2010/ProPlus/ProPlus_KMS_Client.OOB.xrm-ms

cert/kmscert2010/ProPlus/ProPlus_KMS_Client.PL.xrm-ms

cert/kmscert2010/ProPlus/ProPlus_KMS_Client.PPDLIC.xrm-ms

cert/kmscert2010/ProPlus/ProPlus_KMS_Client.RAC_Priv.xrm-ms

cert/kmscert2010/ProPlus/ProPlus_KMS_Client.RAC_Pub.xrm-ms

cert/kmscert2010/ProjectPro/ProjectProVLReg32.reg

cert/kmscert2010/ProjectPro/ProjectProVLReg64.reg

cert/kmscert2010/ProjectPro/ProjectProVLRegWOW.reg

cert/kmscert2010/ProjectPro/ProjectPro_KMS_Client.OOB.xrm-ms

cert/kmscert2010/ProjectPro/ProjectPro_KMS_Client.PL.xrm-ms

cert/kmscert2010/ProjectPro/ProjectPro_KMS_Client.PPDLIC.xrm-ms

cert/kmscert2010/ProjectPro/ProjectPro_KMS_Client.RAC_Priv.xrm-ms

cert/kmscert2010/ProjectPro/ProjectPro_KMS_Client.RAC_Pub.xrm-ms

cert/kmscert2010/ProjectStd/ProjectStdVLReg32.reg

cert/kmscert2010/ProjectStd/ProjectStdVLReg64.reg

cert/kmscert2010/ProjectStd/ProjectStdVLRegWOW.reg

cert/kmscert2010/ProjectStd/ProjectStd_KMS_Client.OOB.xrm-ms

cert/kmscert2010/ProjectStd/ProjectStd_KMS_Client.PL.xrm-ms

cert/kmscert2010/ProjectStd/ProjectStd_KMS_Client.PPDLIC.xrm-ms

cert/kmscert2010/ProjectStd/ProjectStd_KMS_Client.RAC_Priv.xrm-ms

cert/kmscert2010/ProjectStd/ProjectStd_KMS_Client.RAC_Pub.xrm-ms

cert/kmscert2010/Publisher/PublisherVLReg32.reg

cert/kmscert2010/Publisher/PublisherVLReg64.reg

cert/kmscert2010/Publisher/PublisherVLRegWOW.reg

cert/kmscert2010/Publisher/Publisher_KMS_Client.OOB.xrm-ms

cert/kmscert2010/Publisher/Publisher_KMS_Client.PL.xrm-ms

cert/kmscert2010/Publisher/Publisher_KMS_Client.PPDLIC.xrm-ms

cert/kmscert2010/Publisher/Publisher_KMS_Client.RAC_Priv.xrm-ms

cert/kmscert2010/Publisher/Publisher_KMS_Client.RAC_Pub.xrm-ms

cert/kmscert2010/SmallBusBasics/SmallBusBasicsVLReg32.reg

cert/kmscert2010/SmallBusBasics/SmallBusBasicsVLReg64.reg

cert/kmscert2010/SmallBusBasics/SmallBusBasicsVLRegWOW.reg

cert/kmscert2010/SmallBusBasics/SmallBusBasics_KMS_Client.OOB.xrm-ms

cert/kmscert2010/SmallBusBasics/SmallBusBasics_KMS_Client.PL.xrm-ms

cert/kmscert2010/SmallBusBasics/SmallBusBasics_KMS_Client.PPDLIC.xrm-ms

cert/kmscert2010/SmallBusBasics/SmallBusBasics_KMS_Client.RAC_Priv.xrm-ms

cert/kmscert2010/SmallBusBasics/SmallBusBasics_KMS_Client.RAC_Pub.xrm-ms

cert/kmscert2010/Standard/StandardVLReg32.reg

cert/kmscert2010/Standard/StandardVLReg64.reg

cert/kmscert2010/Standard/StandardVLRegWOW.reg

cert/kmscert2010/Standard/Standard_KMS_Client.OOB.xrm-ms

cert/kmscert2010/Standard/Standard_KMS_Client.PL.xrm-ms

cert/kmscert2010/Standard/Standard_KMS_Client.PPDLIC.xrm-ms

cert/kmscert2010/Standard/Standard_KMS_Client.RAC_Priv.xrm-ms

cert/kmscert2010/Standard/Standard_KMS_Client.RAC_Pub.xrm-ms

cert/kmscert2010/Visio/VisioPrem_KMS_Client.OOB.xrm-ms

cert/kmscert2010/Visio/VisioPrem_KMS_Client.PL.xrm-ms

cert/kmscert2010/Visio/VisioPrem_KMS_Client.PPDLIC.xrm-ms

cert/kmscert2010/Visio/VisioPrem_KMS_Client.RAC_Priv.xrm-ms

cert/kmscert2010/Visio/VisioPrem_KMS_Client.RAC_Pub.xrm-ms

cert/kmscert2010/Visio/VisioPro_KMS_Client.OOB.xrm-ms

cert/kmscert2010/Visio/VisioPro_KMS_Client.PL.xrm-ms

cert/kmscert2010/Visio/VisioPro_KMS_Client.PPDLIC.xrm-ms

cert/kmscert2010/Visio/VisioPro_KMS_Client.RAC_Priv.xrm-ms

cert/kmscert2010/Visio/VisioPro_KMS_Client.RAC_Pub.xrm-ms

cert/kmscert2010/Visio/VisioStd_KMS_Client.OOB.xrm-ms

cert/kmscert2010/Visio/VisioStd_KMS_Client.PL.xrm-ms

cert/kmscert2010/Visio/VisioStd_KMS_Client.PPDLIC.xrm-ms

cert/kmscert2010/Visio/VisioStd_KMS_Client.RAC_Priv.xrm-ms

cert/kmscert2010/Visio/VisioStd_KMS_Client.RAC_Pub.xrm-ms

cert/kmscert2010/Visio/VisioVLReg32.reg

cert/kmscert2010/Visio/VisioVLReg64.reg

cert/kmscert2010/Visio/VisioVLRegWOW.reg

cert/kmscert2010/Word/WordVLReg32.reg

cert/kmscert2010/Word/WordVLReg64.reg

cert/kmscert2010/Word/WordVLRegWOW.reg

cert/kmscert2010/Word/Word_KMS_Client.OOB.xrm-ms

cert/kmscert2010/Word/Word_KMS_Client.PL.xrm-ms

cert/kmscert2010/Word/Word_KMS_Client.PPDLIC.xrm-ms

cert/kmscert2010/Word/Word_KMS_Client.RAC_Priv.xrm-ms

cert/kmscert2010/Word/Word_KMS_Client.RAC_Pub.xrm-ms

cert/kmscert2013/Access/AccessVL_KMS_Client_OOB.xrm-ms

cert/kmscert2013/Access/AccessVL_KMS_Client_PL.xrm-ms

cert/kmscert2013/Access/AccessVL_KMS_Client_PPDLIC.xrm-ms

cert/kmscert2013/Excel/LicenseSetData._F7461D52_7C2B_43B2_8744_EA958E0BD09A.OOB.xrm-ms

cert/kmscert2013/Excel/LicenseSetData._F7461D52_7C2B_43B2_8744_EA958E0BD09A.PL.xrm-ms

cert/kmscert2013/Excel/LicenseSetData._F7461D52_7C2B_43B2_8744_EA958E0BD09A.PPDLIC.xrm-ms

cert/kmscert2013/InfoPath/LicenseSetData._A30B8040_D68A_423F_B0B5_9CE292EA5A8F.OOB.xrm-ms

cert/kmscert2013/InfoPath/LicenseSetData._A30B8040_D68A_423F_B0B5_9CE292EA5A8F.PL.xrm-ms

cert/kmscert2013/InfoPath/LicenseSetData._A30B8040_D68A_423F_B0B5_9CE292EA5A8F.PPDLIC.xrm-ms

cert/kmscert2013/Licenses.sl.ISSUANCE.CLIENT_BRIDGE_OFFICE.xrm-ms

cert/kmscert2013/Licenses.sl.ISSUANCE.CLIENT_ROOT.xrm-ms

cert/kmscert2013/Licenses.sl.ISSUANCE.CLIENT_ROOT_BRIDGE_TEST.xrm-ms

cert/kmscert2013/Licenses.sl.ISSUANCE.CLIENT_STIL.xrm-ms

cert/kmscert2013/Licenses.sl.ISSUANCE.CLIENT_UL.xrm-ms

cert/kmscert2013/Licenses.sl.ISSUANCE.CLIENT_UL_OOB.xrm-ms

cert/kmscert2013/Lync/LicenseSetData._1B9F11E3_C85C_4E1B_BB29_879AD2C909E3.OOB.xrm-ms

cert/kmscert2013/Lync/LicenseSetData._1B9F11E3_C85C_4E1B_BB29_879AD2C909E3.PL.xrm-ms

cert/kmscert2013/Lync/LicenseSetData._1B9F11E3_C85C_4E1B_BB29_879AD2C909E3.PPDLIC.xrm-ms

cert/kmscert2013/OneNote/LicenseSetData._EFE1F3E6_AEA2_4144_A208_32AA872B6545.OOB.xrm-ms

cert/kmscert2013/OneNote/LicenseSetData._EFE1F3E6_AEA2_4144_A208_32AA872B6545.PL.xrm-ms

cert/kmscert2013/OneNote/LicenseSetData._EFE1F3E6_AEA2_4144_A208_32AA872B6545.PPDLIC.xrm-ms

cert/kmscert2013/Outlook/LicenseSetData._771C3AFA_50C5_443F_B151_FF2546D863A0.OOB.xrm-ms

cert/kmscert2013/Outlook/LicenseSetData._771C3AFA_50C5_443F_B151_FF2546D863A0.PL.xrm-ms

cert/kmscert2013/Outlook/LicenseSetData._771C3AFA_50C5_443F_B151_FF2546D863A0.PPDLIC.xrm-ms

cert/kmscert2013/PowerPoint/LicenseSetData._8C762649_97D1_4953_AD27_B7E2C25B972E.OOB.xrm-ms

cert/kmscert2013/PowerPoint/LicenseSetData._8C762649_97D1_4953_AD27_B7E2C25B972E.PL.xrm-ms

cert/kmscert2013/PowerPoint/LicenseSetData._8C762649_97D1_4953_AD27_B7E2C25B972E.PPDLIC.xrm-ms

cert/kmscert2013/ProPlus/LicenseSetData._B322DA9C_A2E2_4058_9E4E_F59A6970BD69.OOB.xrm-ms

cert/kmscert2013/ProPlus/LicenseSetData._B322DA9C_A2E2_4058_9E4E_F59A6970BD69.PL.xrm-ms

cert/kmscert2013/ProPlus/LicenseSetData._B322DA9C_A2E2_4058_9E4E_F59A6970BD69.PPDLIC.xrm-ms

cert/kmscert2013/ProPlus/proplus.reg

cert/kmscert2013/ProjectPro/LicenseSetData._4A5D124A_E620_44BA_B6FF_658961B33B9A.OOB.xrm-ms

cert/kmscert2013/ProjectPro/LicenseSetData._4A5D124A_E620_44BA_B6FF_658961B33B9A.PL.xrm-ms

cert/kmscert2013/ProjectPro/LicenseSetData._4A5D124A_E620_44BA_B6FF_658961B33B9A.PPDLIC.xrm-ms

cert/kmscert2013/ProjectStd/LicenseSetData._427A28D1_D17C_4ABF_B717_32C780BA6F07.OOB.xrm-ms

cert/kmscert2013/ProjectStd/LicenseSetData._427A28D1_D17C_4ABF_B717_32C780BA6F07.PL.xrm-ms

cert/kmscert2013/ProjectStd/LicenseSetData._427A28D1_D17C_4ABF_B717_32C780BA6F07.PPDLIC.xrm-ms

cert/kmscert2013/Publisher/LicenseSetData._00C79FF1_6850_443D_BF61_71CDE0DE305F.OOB.xrm-ms

cert/kmscert2013/Publisher/LicenseSetData._00C79FF1_6850_443D_BF61_71CDE0DE305F.PL.xrm-ms

cert/kmscert2013/Publisher/LicenseSetData._00C79FF1_6850_443D_BF61_71CDE0DE305F.PPDLIC.xrm-ms

cert/kmscert2013/Standard/LicenseSetData._B13AFB38_CD79_4AE5_9F7F_EED058D750CA.OOB.xrm-ms

cert/kmscert2013/Standard/LicenseSetData._B13AFB38_CD79_4AE5_9F7F_EED058D750CA.PL.xrm-ms

cert/kmscert2013/Standard/LicenseSetData._B13AFB38_CD79_4AE5_9F7F_EED058D750CA.PPDLIC.xrm-ms

cert/kmscert2013/VisioPro/LicenseSetData._E13AC10E_75D0_4AFF_A0CD_764982CF541C.OOB.xrm-ms

cert/kmscert2013/VisioPro/LicenseSetData._E13AC10E_75D0_4AFF_A0CD_764982CF541C.PL.xrm-ms

cert/kmscert2013/VisioPro/LicenseSetData._E13AC10E_75D0_4AFF_A0CD_764982CF541C.PPDLIC.xrm-ms

cert/kmscert2013/VisioPro/visio.reg

cert/kmscert2013/VisioStd/LicenseSetData._AC4EFAF0_F81F_4F61_BDF7_EA32B02AB117.OOB.xrm-ms

cert/kmscert2013/VisioStd/LicenseSetData._AC4EFAF0_F81F_4F61_BDF7_EA32B02AB117.PL.xrm-ms

cert/kmscert2013/VisioStd/LicenseSetData._AC4EFAF0_F81F_4F61_BDF7_EA32B02AB117.PPDLIC.xrm-ms

cert/kmscert2013/Word/LicenseSetData._D9F5B1C6_5386_495A_88F9_9AD6B41AC9B3.OOB.xrm-ms

cert/kmscert2013/Word/LicenseSetData._D9F5B1C6_5386_495A_88F9_9AD6B41AC9B3.PL.xrm-ms

cert/kmscert2013/Word/LicenseSetData._D9F5B1C6_5386_495A_88F9_9AD6B41AC9B3.PPDLIC.xrm-ms

cert/kmscert2013/pkeyconfig-office.xrm-ms

cert/kmscert2016/Access/AccessVL_KMS_Client-ppd.xrm-ms

cert/kmscert2016/Access/AccessVL_KMS_Client-ul-oob.xrm-ms

cert/kmscert2016/Access/AccessVL_KMS_Client-ul.xrm-ms

cert/kmscert2016/Excel/ExcelVL_KMS_Client-ppd.xrm-ms

cert/kmscert2016/Excel/ExcelVL_KMS_Client-ul-oob.xrm-ms

cert/kmscert2016/Excel/ExcelVL_KMS_Client-ul.xrm-ms

cert/kmscert2016/Mondo/MondoVL_KMS_Client-ppd.xrm-ms

cert/kmscert2016/Mondo/MondoVL_KMS_Client-ul-oob.xrm-ms

cert/kmscert2016/Mondo/MondoVL_KMS_Client-ul.xrm-ms

cert/kmscert2016/OneNote/OneNoteVL_KMS_Client-ppd.xrm-ms

cert/kmscert2016/OneNote/OneNoteVL_KMS_Client-ul-oob.xrm-ms

cert/kmscert2016/OneNote/OneNoteVL_KMS_Client-ul.xrm-ms

cert/kmscert2016/Outlook/OutlookVL_KMS_Client-ppd.xrm-ms

cert/kmscert2016/Outlook/OutlookVL_KMS_Client-ul-oob.xrm-ms

cert/kmscert2016/Outlook/OutlookVL_KMS_Client-ul.xrm-ms

cert/kmscert2016/PowerPoint/PowerPointVL_KMS_Client-ppd.xrm-ms

cert/kmscert2016/PowerPoint/PowerPointVL_KMS_Client-ul-oob.xrm-ms

cert/kmscert2016/PowerPoint/PowerPointVL_KMS_Client-ul.xrm-ms

cert/kmscert2016/ProPlus/ProPlusVL_KMS_Client-ppd.xrm-ms

cert/kmscert2016/ProPlus/ProPlusVL_KMS_Client-ul-oob.xrm-ms

cert/kmscert2016/ProPlus/ProPlusVL_KMS_Client-ul.xrm-ms

cert/kmscert2016/ProjectPro/ProjectProVL_KMS_Client-ppd.xrm-ms

cert/kmscert2016/ProjectPro/ProjectProVL_KMS_Client-ul-oob.xrm-ms

cert/kmscert2016/ProjectPro/ProjectProVL_KMS_Client-ul.xrm-ms

cert/kmscert2016/ProjectStd/ProjectStdVL_KMS_Client-ppd.xrm-ms

cert/kmscert2016/ProjectStd/ProjectStdVL_KMS_Client-ul-oob.xrm-ms

cert/kmscert2016/ProjectStd/ProjectStdVL_KMS_Client-ul.xrm-ms

cert/kmscert2016/Publisher/PublisherVL_KMS_Client-ppd.xrm-ms

cert/kmscert2016/Publisher/PublisherVL_KMS_Client-ul-oob.xrm-ms

cert/kmscert2016/Publisher/PublisherVL_KMS_Client-ul.xrm-ms

cert/kmscert2016/SkypeforBusiness/SkypeforBusinessVL_KMS_Client-ppd.xrm-ms

cert/kmscert2016/SkypeforBusiness/SkypeforBusinessVL_KMS_Client-ul-oob.xrm-ms

cert/kmscert2016/SkypeforBusiness/SkypeforBusinessVL_KMS_Client-ul.xrm-ms

cert/kmscert2016/Standard/StandardVL_KMS_Client-ppd.xrm-ms

cert/kmscert2016/Standard/StandardVL_KMS_Client-ul-oob.xrm-ms

cert/kmscert2016/Standard/StandardVL_KMS_Client-ul.xrm-ms

cert/kmscert2016/VisioPro/VisioProVL_KMS_Client-ppd.xrm-ms

cert/kmscert2016/VisioPro/VisioProVL_KMS_Client-ul-oob.xrm-ms

cert/kmscert2016/VisioPro/VisioProVL_KMS_Client-ul.xrm-ms

cert/kmscert2016/VisioStd/VisioStdVL_KMS_Client-ppd.xrm-ms

cert/kmscert2016/VisioStd/VisioStdVL_KMS_Client-ul-oob.xrm-ms

cert/kmscert2016/VisioStd/VisioStdVL_KMS_Client-ul.xrm-ms

cert/kmscert2016/Word/WordVL_KMS_Client-ppd.xrm-ms

cert/kmscert2016/Word/WordVL_KMS_Client-ul-oob.xrm-ms

cert/kmscert2016/Word/WordVL_KMS_Client-ul.xrm-ms

cert/kmscert2016/client-issuance-bridge-office.xrm-ms

cert/kmscert2016/client-issuance-root-bridge-test.xrm-ms

cert/kmscert2016/client-issuance-root.xrm-ms

cert/kmscert2016/client-issuance-stil.xrm-ms

cert/kmscert2016/client-issuance-ul-oob.xrm-ms

cert/kmscert2016/client-issuance-ul.xrm-ms

cert/kmscert2016/pkeyconfig-office.xrm-ms

cert/kmscertW10/Core/Core-Volume-GVLK-1-ul-oob-rtm.xrm-ms

cert/kmscertW10/Core/Core-Volume-GVLK-1-ul-rtm.xrm-ms

cert/kmscertW10/Education/Education-Volume-GVLK-1-ul-oob-rtm.xrm-ms

cert/kmscertW10/Education/Education-Volume-GVLK-1-ul-rtm.xrm-ms

cert/kmscertW10/Enterprise/Enterprise-Volume-GVLK-1-ul-oob-rtm.xrm-ms

cert/kmscertW10/Enterprise/Enterprise-Volume-GVLK-1-ul-rtm.xrm-ms

cert/kmscertW10/EnterpriseS/EnterpriseS-Volume-GVLK-1-ul-oob-rtm.xrm-ms

cert/kmscertW10/EnterpriseS/EnterpriseS-Volume-GVLK-1-ul-rtm.xrm-ms

cert/kmscertW10/EnterpriseS/EnterpriseS-Volume-GVLK-2-ul-oob.xrm-ms

cert/kmscertW10/EnterpriseS/EnterpriseS-Volume-GVLK-2-ul.xrm-ms

cert/kmscertW10/Professional/Professional-Volume-GVLK-1-ul-oob-rtm.xrm-ms

cert/kmscertW10/Professional/Professional-Volume-GVLK-1-ul-rtm.xrm-ms

cert/kmscertW10/pkeyconfig.xrm-ms

cert/kmscertW6/Business/Security-Licensing-SLC-Component-SKU-Business-VL-BYPASS-RAC-private.xrm-ms

cert/kmscertW6/Business/Security-Licensing-SLC-Component-SKU-Business-VL-BYPASS-RAC-public.xrm-ms

cert/kmscertW6/Business/Security-Licensing-SLC-Component-SKU-Business-VL-BYPASS-ul-oob.xrm-ms

cert/kmscertW6/Business/Security-Licensing-SLC-Component-SKU-Business-VL-BYPASS-ul.xrm-ms

cert/kmscertW6/Business/Security-Licensing-SLC-Component-SKU-Business-VL-KMS-pl.xrm-ms

cert/kmscertW6/Business/Security-Licensing-SLC-Component-SKU-Business-VL-KMS-ul-oob.xrm-ms

cert/kmscertW6/Business/Security-Licensing-SLC-Component-SKU-Business-VL-KMS-ul-phn.xrm-ms

cert/kmscertW6/Business/Security-Licensing-SLC-Component-SKU-Business-VL-KMS1-pl.xrm-ms

cert/kmscertW6/Business/Security-Licensing-SLC-Component-SKU-Business-VL-KMS1-ul-oob.xrm-ms

cert/kmscertW6/Business/Security-Licensing-SLC-Component-SKU-Business-VL-KMS1-ul-phn.xrm-ms

cert/kmscertW6/Business/Security-Licensing-SLC-Component-SKU-Business-ul-oob.xrm-ms

cert/kmscertW6/Business/Security-Licensing-SLC-Component-SKU-Business-ul-phn.xrm-ms

cert/kmscertW6/BusinessN/Security-Licensing-SLC-Component-SKU-BusinessN-VL-BYPASS-RAC-private.xrm-ms

cert/kmscertW6/BusinessN/Security-Licensing-SLC-Component-SKU-BusinessN-VL-BYPASS-RAC-public.xrm-ms

cert/kmscertW6/BusinessN/Security-Licensing-SLC-Component-SKU-BusinessN-VL-BYPASS-ul-oob.xrm-ms

cert/kmscertW6/BusinessN/Security-Licensing-SLC-Component-SKU-BusinessN-VL-BYPASS-ul.xrm-ms

cert/kmscertW6/BusinessN/Security-Licensing-SLC-Component-SKU-BusinessN-VL-KMS-pl.xrm-ms

cert/kmscertW6/BusinessN/Security-Licensing-SLC-Component-SKU-BusinessN-VL-KMS-ul-oob.xrm-ms

cert/kmscertW6/BusinessN/Security-Licensing-SLC-Component-SKU-BusinessN-VL-KMS-ul-phn.xrm-ms

cert/kmscertW6/BusinessN/Security-Licensing-SLC-Component-SKU-BusinessN-VL-KMS1-pl.xrm-ms

cert/kmscertW6/BusinessN/Security-Licensing-SLC-Component-SKU-BusinessN-VL-KMS1-ul-oob.xrm-ms

cert/kmscertW6/BusinessN/Security-Licensing-SLC-Component-SKU-BusinessN-VL-KMS1-ul-phn.xrm-ms

cert/kmscertW6/BusinessN/Security-Licensing-SLC-Component-SKU-BusinessN-ul-oob.xrm-ms

cert/kmscertW6/BusinessN/Security-Licensing-SLC-Component-SKU-BusinessN-ul-phn.xrm-ms

cert/kmscertW6/Enterprise/Security-Licensing-SLC-Component-SKU-Enterprise-VL-BYPASS-RAC-private.xrm-ms

cert/kmscertW6/Enterprise/Security-Licensing-SLC-Component-SKU-Enterprise-VL-BYPASS-RAC-public.xrm-ms

cert/kmscertW6/Enterprise/Security-Licensing-SLC-Component-SKU-Enterprise-VL-BYPASS-ul-oob.xrm-ms

cert/kmscertW6/Enterprise/Security-Licensing-SLC-Component-SKU-Enterprise-VL-BYPASS-ul.xrm-ms

cert/kmscertW6/Enterprise/Security-Licensing-SLC-Component-SKU-Enterprise-VL-KMS-pl.xrm-ms

cert/kmscertW6/Enterprise/Security-Licensing-SLC-Component-SKU-Enterprise-VL-KMS-ul-oob.xrm-ms

cert/kmscertW6/Enterprise/Security-Licensing-SLC-Component-SKU-Enterprise-VL-KMS-ul-phn.xrm-ms

cert/kmscertW6/Enterprise/Security-Licensing-SLC-Component-SKU-Enterprise-VL-KMS1-pl.xrm-ms

cert/kmscertW6/Enterprise/Security-Licensing-SLC-Component-SKU-Enterprise-VL-KMS1-ul-oob.xrm-ms

cert/kmscertW6/Enterprise/Security-Licensing-SLC-Component-SKU-Enterprise-VL-KMS1-ul-phn.xrm-ms

cert/kmscertW6/Enterprise/Security-Licensing-SLC-Component-SKU-Enterprise-ul-oob.xrm-ms

cert/kmscertW6/Enterprise/Security-Licensing-SLC-Component-SKU-Enterprise-ul-phn.xrm-ms

cert/kmscertW6/pkeyconfig.xrm-ms

cert/kmscertW7/Embedded/Security-SPP-Component-SKU-Embedded-VLBA-ul-oob.xrm-ms

cert/kmscertW7/Embedded/Security-SPP-Component-SKU-Embedded-VLBA-ul.xrm-ms

cert/kmscertW7/Embedded/Security-SPP-Component-SKU-Embedded-pl.xrm-ms

cert/kmscertW7/Embedded/Security-SPP-Component-SKU-Embedded-ul-oob.xrm-ms

cert/kmscertW7/Embedded/Security-SPP-Component-SKU-Embedded-ul-phn.xrm-ms

cert/kmscertW7/Embedded/pkeyconfig-embedded.xrm-ms

cert/kmscertW7/Professional/Security-SPP-Component-SKU-Professional-VL-BYPASS-RAC-private.xrm-ms

cert/kmscertW7/Professional/Security-SPP-Component-SKU-Professional-VL-BYPASS-RAC-public.xrm-ms

cert/kmscertW7/Professional/Security-SPP-Component-SKU-Professional-VL-BYPASS-ul-oob.xrm-ms

cert/kmscertW7/Professional/Security-SPP-Component-SKU-Professional-VL-BYPASS-ul.xrm-ms

cert/kmscertW7/Professional/Security-SPP-Component-SKU-Professional-VLKMS1-pl.xrm-ms

cert/kmscertW7/Professional/Security-SPP-Component-SKU-Professional-VLKMS1-ul-oob.xrm-ms

cert/kmscertW7/Professional/Security-SPP-Component-SKU-Professional-VLKMS1-ul-phn.xrm-ms

cert/kmscertW7/Professional/Security-SPP-Component-SKU-Professional-ul-oob.xrm-ms

cert/kmscertW7/Professional/Security-SPP-Component-SKU-Professional-ul-phn.xrm-ms

cert/kmscertW7/Professional/pkeyconfig.xrm-ms

cert/kmscertW8/Core/Core-Volume-GVLK-1-ul-oob-rtm.xrm-ms

cert/kmscertW8/Core/Core-Volume-GVLK-1-ul-rtm.xrm-ms

cert/kmscertW8/CoreN/CoreN-Volume-GVLK-1-ul-oob-rtm.xrm-ms

cert/kmscertW8/CoreN/CoreN-Volume-GVLK-1-ul-rtm.xrm-ms

cert/kmscertW8/CoreSingleLanguage/CoreSingleLanguage-Volume-GVLK-1-ul-oob-rtm.xrm-ms

cert/kmscertW8/CoreSingleLanguage/CoreSingleLanguage-Volume-GVLK-1-ul-rtm.xrm-ms

cert/kmscertW8/Enterprise/Enterprise-Volume-GVLK-1-ul-oob-rtm.xrm-ms

cert/kmscertW8/Enterprise/Enterprise-Volume-GVLK-1-ul-rtm.xrm-ms

cert/kmscertW8/EnterpriseN/EnterpriseN-Volume-GVLK-1-ul-oob-rtm.xrm-ms

cert/kmscertW8/EnterpriseN/EnterpriseN-Volume-GVLK-1-ul-rtm.xrm-ms

cert/kmscertW8/Professional/Professional-Volume-GVLK-1-ul-oob-rtm.xrm-ms

cert/kmscertW8/Professional/Professional-Volume-GVLK-1-ul-rtm.xrm-ms

cert/kmscertW8/ProfessionalN/ProfessionalN-Volume-GVLK-1-ul-oob-rtm.xrm-ms

cert/kmscertW8/ProfessionalN/ProfessionalN-Volume-GVLK-1-ul-rtm.xrm-ms

cert/kmscertW8/ProfessionalWMC/ProfessionalWMC-Volume-GVLK-1-ul-oob-rtm.xrm-ms

cert/kmscertW8/ProfessionalWMC/ProfessionalWMC-Volume-GVLK-1-ul-rtm.xrm-ms

cert/kmscertW8/pkeyconfig.xrm-ms

cert/kmscertW81/Core/Core-Volume-GVLK-1-ul-oob-rtm.xrm-ms

cert/kmscertW81/Core/Core-Volume-GVLK-1-ul-rtm.xrm-ms

cert/kmscertW81/CoreConnectedSingleLanguage/CoreConnectedSingleLanguage-Volume-GVLK-1-ul-oob-rtm.xrm-ms

cert/kmscertW81/CoreConnectedSingleLanguage/CoreConnectedSingleLanguage-Volume-GVLK-1-ul-rtm.xrm-ms

cert/kmscertW81/EmbeddedIndustry/EmbeddedIndustry-Volume-GVLK-1-ul-oob-rtm.xrm-ms

cert/kmscertW81/EmbeddedIndustry/EmbeddedIndustry-Volume-GVLK-1-ul-rtm.xrm-ms

cert/kmscertW81/Enterprise/Enterprise-Volume-GVLK-1-ul-oob-rtm.xrm-ms

cert/kmscertW81/Enterprise/Enterprise-Volume-GVLK-1-ul-rtm.xrm-ms

cert/kmscertW81/Professional/Professional-Volume-GVLK-1-ul-oob-rtm.xrm-ms

cert/kmscertW81/Professional/Professional-Volume-GVLK-1-ul-rtm.xrm-ms

cert/kmscertW81/ProfessionalWMC/ProfessionalWMC-Volume-GVLK-1-ul-oob-rtm.xrm-ms

cert/kmscertW81/ProfessionalWMC/ProfessionalWMC-Volume-GVLK-1-ul-rtm.xrm-ms

cert/kmscertW81/ServerDatacenter/ServerDatacenter-Volume-GVLK-1-ul-oob-rtm.xrm-ms

cert/kmscertW81/ServerDatacenter/ServerDatacenter-Volume-GVLK-1-ul-rtm.xrm-ms

cert/kmscertW81/ServerStandard/ServerStandard-Volume-GVLK-1-ul-oob-rtm.xrm-ms

cert/kmscertW81/ServerStandard/ServerStandard-Volume-GVLK-1-ul-rtm.xrm-ms

cert/kmscertW81/pkeyconfig.xrm-ms

driver/OpenVPN.cer

driver/UnInstallDriver.cmd

driver/tap-windows-9.21.0.exe

.exe windows x86

7fa974366048f9c551ef45714595665e

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

03:39:14:24:ea:27:7b:64:5e:ee:9b:d7:c0:63:82:24
Certificate

Issuer

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-08-2013 00:00

Not After

02-09-2016 12:00

Subject

CN=OpenVPN Technologies\, Inc.,O=OpenVPN Technologies\, Inc.,L=Pleasanton,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

02:c4:d1:e5:8a:4a:68:0c:56:8d:a3:04:7e:7e:4d:5f
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11-02-2011 12:00

Not After

10-02-2026 12:00

Subject

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

4a:1c:cb:e7:60:c0:1f:fc:33:9a:7f:b3:12:14:88:9b:72:91:39:3c
Signer

Actual PE Digest

4a:1c:cb:e7:60:c0:1f:fc:33:9a:7f:b3:12:14:88:9b:72:91:39:3c

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=OpenVPN Technologies\, Inc.,O=OpenVPN Technologies\, Inc.,L=Pleasanton,ST=California,C=US

08-04-2014 13:33
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LINE_NUMS_STRIPPED

IMAGE_FILE_LOCAL_SYMS_STRIPPED

IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime

SearchPathA

GetShortPathNameA

GetFullPathNameA

MoveFileA

SetCurrentDirectoryA

GetFileAttributesA

GetLastError

CreateDirectoryA

SetFileAttributesA

Sleep

GetTickCount

GetFileSize

GetModuleFileNameA

GetCurrentProcess

CopyFileA

ExitProcess

GetWindowsDirectoryA

SetFileTime

GetCommandLineA

SetErrorMode

LoadLibraryA

lstrcpynA

GetDiskFreeSpaceA

GlobalUnlock

GlobalLock

CreateThread

CreateProcessA

RemoveDirectoryA

CreateFileA

GetTempFileNameA

lstrlenA

lstrcatA

GetSystemDirectoryA

GetVersion

CloseHandle

lstrcmpiA

lstrcmpA

ExpandEnvironmentStringsA

GlobalFree

GlobalAlloc

WaitForSingleObject

GetExitCodeProcess

GetModuleHandleA

LoadLibraryExA

GetProcAddress

FreeLibrary

MultiByteToWideChar

WritePrivateProfileStringA

GetPrivateProfileStringA

WriteFile

ReadFile

MulDiv

SetFilePointer

FindClose

FindNextFileA

FindFirstFileA

DeleteFileA

GetTempPathA

user32

EndDialog

ScreenToClient

GetWindowRect

EnableMenuItem

GetSystemMenu

SetClassLongA

IsWindowEnabled

SetWindowPos

GetSysColor

GetWindowLongA

SetCursor

LoadCursorA

CheckDlgButton

GetMessagePos

LoadBitmapA

CallWindowProcA

IsWindowVisible

CloseClipboard

SetClipboardData

EmptyClipboard

RegisterClassA

TrackPopupMenu

AppendMenuA

CreatePopupMenu

GetSystemMetrics

SetDlgItemTextA

GetDlgItemTextA

MessageBoxIndirectA

CharPrevA

DispatchMessageA

PeekMessageA

DestroyWindow

CreateDialogParamA

SetTimer

SetWindowTextA

PostQuitMessage

SetForegroundWindow

wsprintfA

SendMessageTimeoutA

FindWindowExA

SystemParametersInfoA

CreateWindowExA

GetClassInfoA

DialogBoxParamA

CharNextA

OpenClipboard

ExitWindowsEx

IsWindow

GetDlgItem

SetWindowLongA

LoadImageA

GetDC

EnableWindow

InvalidateRect

SendMessageA

DefWindowProcA

BeginPaint

GetClientRect

FillRect

DrawTextA

EndPaint

ShowWindow

gdi32

SetBkColor

GetDeviceCaps

DeleteObject

CreateBrushIndirect

CreateFontIndirectA

SetBkMode

SetTextColor

SelectObject

shell32

SHGetPathFromIDListA

SHBrowseForFolderA

SHGetFileInfoA

ShellExecuteA

SHFileOperationA

SHGetSpecialFolderLocation

advapi32

RegQueryValueExA

RegSetValueExA

RegEnumKeyA

RegEnumValueA

RegOpenKeyExA

RegDeleteKeyA

RegDeleteValueA

RegCloseKey

RegCreateKeyExA

comctl32

ImageList_AddMasked

ImageList_Destroy

ord17

ImageList_Create

ole32

CoTaskMemFree

OleInitialize

OleUninitialize

CoCreateInstance

version

GetFileVersionInfoSizeA

GetFileVersionInfoA

VerQueryValueA

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

logs/KMSELDI.log

sounds/affirmative.mp3

sounds/begin.mp3

sounds/complete.mp3

sounds/diagnostic.mp3

sounds/enterauthorizationcode.mp3

sounds/incomingtransmission.mp3

sounds/inputfailed.mp3

sounds/inputok.mp3

sounds/processing.mp3

sounds/transfer.mp3

sounds/verified.mp3

sounds/warning.mp3

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

37:b2:14:67:87:fc:1a:45:4e:82:ce:c5:25:ec:e9:b0Certificate

Extended Key Usages

Key Usages

44:0f:ec:e1:e0:e0:e4:95:42:ea:bc:3a:4a:36:e0:3dCertificate

Key Usages

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

be:2e:82:0d:d1:5e:af:95:d2:9d:99:e2:9f:f4:6c:2d:9a:40:13:adSigner

Signature Validations

Verification

01-11-2015 02:46 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 714KB - Virtual size: 713KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.textxc Size: 5.2MB - Virtual size: 5.2MB

.datax Size: 4KB - Virtual size: 2KB

.idata Size: 4KB - Virtual size: 86B

.reloc Size: 4KB - Virtual size: 12B

.rsrc Size: 4KB - Virtual size: 1KB

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

37:b2:14:67:87:fc:1a:45:4e:82:ce:c5:25:ec:e9:b0Certificate

Extended Key Usages

Key Usages

44:0f:ec:e1:e0:e0:e4:95:42:ea:bc:3a:4a:36:e0:3dCertificate

Key Usages

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

99:6f:6e:6d:3f:7b:80:25:95:61:f4:18:3f:a5:14:34:89:eb:5e:c7Signer

Signature Validations

Verification

01-11-2015 02:46 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 878KB - Virtual size: 877KB

.rsrc Size: 20KB - Virtual size: 20KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 76KB - Virtual size: 73KB

.rsrc Size: 4KB - Virtual size: 1008B

.reloc Size: 4KB - Virtual size: 12B

7fa974366048f9c551ef45714595665e

37:b2:14:67:87:fc:1a:45:4e:82:ce:c5:25:ec:e9:b0
Certificate

44:0f:ec:e1:e0:e0:e4:95:42:ea:bc:3a:4a:36:e0:3d
Certificate

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

be:2e:82:0d:d1:5e:af:95:d2:9d:99:e2:9f:f4:6c:2d:9a:40:13:ad
Signer

01-11-2015 02:46
Valid: false

.text
Size: 714KB - Virtual size: 713KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 512B - Virtual size: 12B

.textxc
Size: 5.2MB - Virtual size: 5.2MB

.datax
Size: 4KB - Virtual size: 2KB

.idata
Size: 4KB - Virtual size: 86B

.reloc
Size: 4KB - Virtual size: 12B

.rsrc
Size: 4KB - Virtual size: 1KB

37:b2:14:67:87:fc:1a:45:4e:82:ce:c5:25:ec:e9:b0
Certificate

44:0f:ec:e1:e0:e0:e4:95:42:ea:bc:3a:4a:36:e0:3d
Certificate

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

99:6f:6e:6d:3f:7b:80:25:95:61:f4:18:3f:a5:14:34:89:eb:5e:c7
Signer

01-11-2015 02:46
Valid: false

.text
Size: 878KB - Virtual size: 877KB

.rsrc
Size: 20KB - Virtual size: 20KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 76KB - Virtual size: 73KB

.rsrc
Size: 4KB - Virtual size: 1008B

.reloc
Size: 4KB - Virtual size: 12B

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

61:20:4d:b4:00:00:00:00:00:27
Certificate

03:39:14:24:ea:27:7b:64:5e:ee:9b:d7:c0:63:82:24
Certificate

02:c4:d1:e5:8a:4a:68:0c:56:8d:a3:04:7e:7e:4d:5f
Certificate

4a:1c:cb:e7:60:c0:1f:fc:33:9a:7f:b3:12:14:88:9b:72:91:39:3c
Signer

08-04-2014 13:33
Valid: false

.text
Size: 22KB - Virtual size: 22KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 1024B - Virtual size: 107KB

.ndata
Size: - Virtual size: 44KB

.rsrc
Size: 27KB - Virtual size: 27KB