comments powered byDisqus

MZ Header

Rich Header

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Packer / Compiler

Sections

Data Directory

Signers (1)

issuer: /C=ZA/O=Thawte Consulting (Pty) Ltd./CN=Thawte Code Signing CA
serial: 44E79D6CC8653FD7BE4DF0EBB7DDB7DC

Certificates (3)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1 (0x1)
    Signature Algorithm: md5WithRSAEncryption
        Issuer: C=ZA, ST=Western Cape, L=Cape Town, O=Thawte Consulting cc, OU=Certification Services Division, CN=Thawte Premium Server CA/emailAddress=premium-server@thawte.com
        Validity
            Not Before: Aug  1 00:00:00 1996 GMT
            Not After : Dec 31 23:59:59 2020 GMT
        Subject: C=ZA, ST=Western Cape, L=Cape Town, O=Thawte Consulting cc, OU=Certification Services Division, CN=Thawte Premium Server CA/emailAddress=premium-server@thawte.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:d2:36:36:6a:8b:d7:c2:5b:9e:da:81:41:62:8f:
                    38:ee:49:04:55:d6:d0:ef:1c:1b:95:16:47:ef:18:
                    48:35:3a:52:f4:2b:6a:06:8f:3b:2f:ea:56:e3:af:
                    86:8d:9e:17:f7:9e:b4:65:75:02:4d:ef:cb:09:a2:
                    21:51:d8:9b:d0:67:d0:ba:0d:92:06:14:73:d4:93:
                    cb:97:2a:00:9c:5c:4e:0c:bc:fa:15:52:fc:f2:44:
                    6e:da:11:4a:6e:08:9f:2f:2d:e3:f9:aa:3a:86:73:
                    b6:46:53:58:c8:89:05:bd:83:11:b8:73:3f:aa:07:
                    8d:f4:42:4d:e7:40:9d:1c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: md5WithRSAEncryption
         26:48:2c:16:c2:58:fa:e8:16:74:0c:aa:aa:5f:54:3f:f2:d7:
         c9:78:60:5e:5e:6e:37:63:22:77:36:7e:b2:17:c4:34:b9:f5:
         08:85:fc:c9:01:38:ff:4d:be:f2:16:42:43:e7:bb:5a:46:fb:
         c1:c6:11:1f:f1:4a:b0:28:46:c9:c3:c4:42:7d:bc:fa:ab:59:
         6e:d5:b7:51:88:11:e3:a4:85:19:6b:82:4c:a4:0c:12:ad:e9:
         a4:ae:3f:f1:c3:49:65:9a:8c:c5:c8:3e:25:b7:94:99:bb:92:
         32:71:07:f0:86:5e:ed:50:27:a6:0d:a6:23:f9:bb:cb:a6:07:
         14:42

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:e7:9d:6c:c8:65:3f:d7:be:4d:f0:eb:b7:dd:b7:dc
    Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=ZA, O=Thawte Consulting (Pty) Ltd., CN=Thawte Code Signing CA
        Validity
            Not Before: Dec 23 00:00:00 2009 GMT
            Not After : Feb 21 23:59:59 2012 GMT
        Subject: C=KR, ST=Seoul, L=Gangnam-gu, O=NCsoft Corp., OU=System Operation Team, CN=NCsoft Corp.
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:c3:ca:e7:8a:3e:65:4a:d8:13:f7:dc:81:8a:cb:
                    af:c1:d4:a6:98:2e:c9:b6:7e:79:5a:71:59:f0:b4:
                    c8:6d:af:12:2d:f6:69:9d:89:3b:ae:eb:42:b4:88:
                    21:a9:bd:3e:04:e2:7f:3b:34:a4:28:2c:7e:73:96:
                    20:27:39:18:23:fe:80:1e:52:fb:37:d6:21:e7:ff:
                    ca:96:8c:6a:5c:06:81:00:d6:cb:c0:e2:a3:af:10:
                    41:94:35:69:22:4b:a2:66:22:07:25:fb:7a:a9:5e:
                    d7:57:e3:df:3f:e5:99:76:b5:b6:1c:15:90:63:3b:
                    71:b5:6b:72:25:ab:d5:3e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.thawte.com/ThawteCodeSigningCA.crl

            X509v3 Extended Key Usage: 
                Code Signing, Microsoft Commercial Code Signing
            2.5.29.4: 
                0.0.0..
+.....7.......
            Authority Information Access: 
                OCSP - URI:http://ocsp.thawte.com

            Netscape Cert Type: 
                Object Signing
    Signature Algorithm: sha1WithRSAEncryption
         0c:a1:2e:25:47:96:f8:53:ac:1e:c6:76:e0:37:52:9f:ba:fd:
         f1:60:53:e9:40:2d:42:a4:62:15:07:6d:b1:2f:7d:86:cd:9b:
         e3:39:37:69:83:83:0a:a6:15:b4:2b:ba:dc:65:d6:70:50:61:
         b4:a9:2c:e6:85:47:ca:88:a0:3f:f6:16:50:b1:84:4d:2d:08:
         c3:65:02:ce:4e:ba:c8:54:ca:f2:a8:79:61:57:95:be:54:d3:
         66:b7:00:99:a9:33:ba:0c:d1:d0:e2:47:e0:29:7f:bb:21:ea:
         39:b0:4e:c9:f5:4c:72:e2:8e:9b:bf:10:e3:66:fc:69:89:66:
         72:5d

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=ZA, ST=Western Cape, L=Cape Town, O=Thawte Consulting cc, OU=Certification Services Division, CN=Thawte Premium Server CA/emailAddress=premium-server@thawte.com
        Validity
            Not Before: Aug  6 00:00:00 2003 GMT
            Not After : Aug  5 23:59:59 2013 GMT
        Subject: C=ZA, O=Thawte Consulting (Pty) Ltd., CN=Thawte Code Signing CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:c6:b8:b9:27:60:af:0b:e3:91:69:65:db:7e:8d:
                    ed:91:e6:aa:f1:be:d5:ed:fe:6d:d4:2c:7f:d1:70:
                    77:fb:26:99:57:b4:dd:3f:30:b8:dc:21:ea:68:8d:
                    81:92:fc:2e:4b:91:35:84:20:f2:da:4a:ba:b4:fc:
                    e6:da:88:f2:20:c5:21:92:09:47:95:a0:09:1c:a6:
                    79:be:b1:4c:1d:fc:f1:8a:6e:54:d2:69:a1:f1:4c:
                    93:3a:41:fe:7d:d4:64:7b:63:45:f7:60:60:1d:31:
                    1d:a4:e9:d3:0f:8b:fb:6e:26:24:b3:a8:ff:e5:e5:
                    90:d4:b4:c2:dc:50:60:ae:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.thawte.com/ThawtePremiumServerCA.crl

            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, Code Signing
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=PrivateLabel2-144
    Signature Algorithm: sha1WithRSAEncryption
         76:b2:9c:ee:13:9f:1b:f6:2d:34:92:94:45:73:34:dc:8e:6b:
         2e:5c:fc:4c:7d:89:eb:c3:68:f1:d7:99:0f:2e:1d:17:c8:b5:
         16:8b:be:cd:8a:05:06:f2:19:49:3a:03:5b:05:c9:20:8e:6d:
         52:e1:76:81:a0:c3:65:8a:22:67:e4:1c:53:53:37:46:bf:bc:
         d7:2f:eb:7b:9e:d0:14:45:6c:40:21:08:e2:5d:75:76:66:30:
         1e:f4:df:82:8a:2f:bd:f3:a2:0c:bf:1d:db:9f:14:a2:9a:72:
         37:4d:b0:77:48:e8:4a:3f:09:ce:55:19:2c:ef:e6:07:24:e1:
         af:ec
pkcs7-signedData
  • 1
    • MD5: nil
    • 1.3.6.1.4.1.311.2.1.4
      • #0
        • 1.3.6.1.4.1.311.2.1.15
          • :
            00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
            00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |
        • MD5
          • cd dc 1f dd d5 f8 43 16  c6 65 f6 ae a5 5c aa dd  |......C..e...\..|
    • Certificates
      • Certificate #0
        • 2
          • 1
          • RSA-MD5: nil
          • Issuer
            • C: ZA
            • ST: Western Cape
            • L: Cape Town
            • O: Thawte Consulting cc
            • OU: Certification Services Division
            • CN: Thawte Premium Server CA
            • emailAddress: premium-server@thawte.com
          • 1996-08-01 00:00:00 UTC: 2020-12-31 23:59:59 UTC
          • Subject
            • C: ZA
            • ST: Western Cape
            • L: Cape Town
            • O: Thawte Consulting cc
            • OU: Certification Services Division
            • CN: Thawte Premium Server CA
            • emailAddress: premium-server@thawte.com
          • #5
            • rsaEncryption: nil
            • D2:36:36:6A:8B:D7:C2:5B:9E:DA:81:41:62:8F:38:EE:
              49:04:55:D6:D0:EF:1C:1B:95:16:47:EF:18:48:35:3A:
              52:F4:2B:6A:06:8F:3B:2F:EA:56:E3:AF:86:8D:9E:17:
              F7:9E:B4:65:75:02:4D:EF:CB:09:A2:21:51:D8:9B:D0:
              67:D0:BA:0D:92:06:14:73:D4:93:CB:97:2A:00:9C:5C:
              4E:0C:BC:FA:15:52:FC:F2:44:6E:DA:11:4A:6E:08:9F:
              2F:2D:E3:F9:AA:3A:86:73:B6:46:53:58:C8:89:05:BD:
              83:11:B8:73:3F:AA:07:8D:F4:42:4D:E7:40:9D:1C:37
              : 0x010001
          • basicConstraints: true, true
        • RSA-MD5:
          26 48 2c 16 c2 58 fa e8  16 74 0c aa aa 5f 54 3f  |&H,..X...t..._T?|
          f2 d7 c9 78 60 5e 5e 6e  37 63 22 77 36 7e b2 17  |...x`^^n7c"w6~..|
          c4 34 b9 f5 08 85 fc c9  01 38 ff 4d be f2 16 42  |.4.......8.M...B|
          43 e7 bb 5a 46 fb c1 c6  11 1f f1 4a b0 28 46 c9  |C..ZF......J.(F.|
          c3 c4 42 7d bc fa ab 59  6e d5 b7 51 88 11 e3 a4  |..B}...Yn..Q....|
          85 19 6b 82 4c a4 0c 12  ad e9 a4 ae 3f f1 c3 49  |..k.L.......?..I|
          65 9a 8c c5 c8 3e 25 b7  94 99 bb 92 32 71 07 f0  |e....>%.....2q..|
          86 5e ed 50 27 a6 0d a6  23 f9 bb cb a6 07 14 42  |.^.P'...#......B|
      • Certificate #1
        • 2
          • 44:E7:9D:6C:C8:65:3F:D7:BE:4D:F0:EB:B7:DD:B7:DC
          • RSA-SHA1: nil
          • Issuer
            • C: ZA
            • O: Thawte Consulting (Pty) Ltd.
            • CN: Thawte Code Signing CA
          • 2009-12-23 00:00:00 UTC: 2012-02-21 23:59:59 UTC
          • Subject
            • C: KR
            • ST: Seoul
            • L: Gangnam-gu
            • O: NCsoft Corp.
            • OU: System Operation Team
            • CN: NCsoft Corp.
          • #5
            • rsaEncryption: nil
            • C3:CA:E7:8A:3E:65:4A:D8:13:F7:DC:81:8A:CB:AF:C1:
              D4:A6:98:2E:C9:B6:7E:79:5A:71:59:F0:B4:C8:6D:AF:
              12:2D:F6:69:9D:89:3B:AE:EB:42:B4:88:21:A9:BD:3E:
              04:E2:7F:3B:34:A4:28:2C:7E:73:96:20:27:39:18:23:
              FE:80:1E:52:FB:37:D6:21:E7:FF:CA:96:8C:6A:5C:06:
              81:00:D6:CB:C0:E2:A3:AF:10:41:94:35:69:22:4B:A2:
              66:22:07:25:FB:7A:A9:5E:D7:57:E3:DF:3F:E5:99:76:
              B5:B6:1C:15:90:63:3B:71:B5:6B:72:25:AB:D5:3E:A9
              : 0x010001
          • X509v3 extensions
            • basicConstraints
              • true
              • nil
            • crlDistributionPoints: http://crl.thawte.com/ThawteCodeSigningCA.crl
            • extendedKeyUsage
              • codeSigning: msCodeCom
            • 2.5.29.4
              • msCodeCom: 0x80
            • authorityInfoAccess
              • OCSP: http://ocsp.thawte.com
            • nsCertType: 0x10
        • RSA-SHA1:
          0c a1 2e 25 47 96 f8 53  ac 1e c6 76 e0 37 52 9f  |...%G..S...v.7R.|
          ba fd f1 60 53 e9 40 2d  42 a4 62 15 07 6d b1 2f  |...`S.@-B.b..m./|
          7d 86 cd 9b e3 39 37 69  83 83 0a a6 15 b4 2b ba  |}....97i......+.|
          dc 65 d6 70 50 61 b4 a9  2c e6 85 47 ca 88 a0 3f  |.e.pPa..,..G...?|
          f6 16 50 b1 84 4d 2d 08  c3 65 02 ce 4e ba c8 54  |..P..M-..e..N..T|
          ca f2 a8 79 61 57 95 be  54 d3 66 b7 00 99 a9 33  |...yaW..T.f....3|
          ba 0c d1 d0 e2 47 e0 29  7f bb 21 ea 39 b0 4e c9  |.....G.)..!.9.N.|
          f5 4c 72 e2 8e 9b bf 10  e3 66 fc 69 89 66 72 5d  |.Lr......f.i.fr]|
      • Certificate #2
        • 2
          • 0x0A
          • RSA-SHA1: nil
          • Issuer
            • C: ZA
            • ST: Western Cape
            • L: Cape Town
            • O: Thawte Consulting cc
            • OU: Certification Services Division
            • CN: Thawte Premium Server CA
            • emailAddress: premium-server@thawte.com
          • 2003-08-06 00:00:00 UTC: 2013-08-05 23:59:59 UTC
          • Subject
            • C: ZA
            • O: Thawte Consulting (Pty) Ltd.
            • CN: Thawte Code Signing CA
          • #5
            • rsaEncryption: nil
            • C6:B8:B9:27:60:AF:0B:E3:91:69:65:DB:7E:8D:ED:91:
              E6:AA:F1:BE:D5:ED:FE:6D:D4:2C:7F:D1:70:77:FB:26:
              99:57:B4:DD:3F:30:B8:DC:21:EA:68:8D:81:92:FC:2E:
              4B:91:35:84:20:F2:DA:4A:BA:B4:FC:E6:DA:88:F2:20:
              C5:21:92:09:47:95:A0:09:1C:A6:79:BE:B1:4C:1D:FC:
              F1:8A:6E:54:D2:69:A1:F1:4C:93:3A:41:FE:7D:D4:64:
              7B:63:45:F7:60:60:1D:31:1D:A4:E9:D3:0F:8B:FB:6E:
              26:24:B3:A8:FF:E5:E5:90:D4:B4:C2:DC:50:60:AE:59
              : 0x010001
          • X509v3 extensions
            • basicConstraints
              • true
              • true: 0
            • crlDistributionPoints: http://crl.thawte.com/ThawtePremiumServerCA.crl
            • extendedKeyUsage
              • clientAuth: codeSigning
            • keyUsage: true, 6
            • subjectAltName
              • CN: PrivateLabel2-144
        • RSA-SHA1:
          76 b2 9c ee 13 9f 1b f6  2d 34 92 94 45 73 34 dc  |v.......-4..Es4.|
          8e 6b 2e 5c fc 4c 7d 89  eb c3 68 f1 d7 99 0f 2e  |.k.\.L}...h.....|
          1d 17 c8 b5 16 8b be cd  8a 05 06 f2 19 49 3a 03  |.............I:.|
          5b 05 c9 20 8e 6d 52 e1  76 81 a0 c3 65 8a 22 67  |[.. .mR.v...e."g|
          e4 1c 53 53 37 46 bf bc  d7 2f eb 7b 9e d0 14 45  |..SS7F.../.{...E|
          6c 40 21 08 e2 5d 75 76  66 30 1e f4 df 82 8a 2f  |l@!..]uvf0...../|
          bd f3 a2 0c bf 1d db 9f  14 a2 9a 72 37 4d b0 77  |...........r7M.w|
          48 e8 4a 3f 09 ce 55 19  2c ef e6 07 24 e1 af ec  |H.J?..U.,...$...|
    • 1
      • unnamed
        • #0
          • C: ZA
          • O: Thawte Consulting (Pty) Ltd.
          • CN: Thawte Code Signing CA
        • 44:E7:9D:6C:C8:65:3F:D7:BE:4D:F0:EB:B7:DD:B7:DC
      • MD5: nil
      • #2
        • 1.3.6.1.4.1.311.2.1.12
          • nil
        • contentType: 1.3.6.1.4.1.311.2.1.4
        • 1.3.6.1.4.1.311.2.1.11: msCodeCom
        • messageDigest:
          89 3c 09 70 b0 3e 99 f1  2a fe 64 fd 16 78 c6 4b  |.<.p.>..*.d..x.K|
      • rsaEncryption:
        39 f0 bb ad cd 53 ce 50  00 2b 69 68 d4 db 58 1a  |9....S.P.+ih..X.|
        f8 c7 ca 02 4d e5 d6 6a  06 43 05 04 f9 a9 fa 91  |....M..j.C......|
        e1 74 72 54 34 41 cf 18  89 fe ab 74 fb 0c b1 82  |.trT4A.....t....|
        fa 7d f2 a3 4c 57 76 f2  94 b5 40 70 ea 31 61 cd  |.}..LWv...@p.1a.|
        a5 8e cb 8d 24 90 5d 96  aa 3f 7c 5f e0 b0 53 ae  |....$.]..?|_..S.|
        64 6f c3 76 5b b3 5a dc  d9 08 8f 6f 82 0c 57 3f  |do.v[.Z....o..W?|
        7e 40 54 56 3a 11 63 72  4b 57 15 1c 9c ad ed 2d  |~@TV:.crKW.....-|
        cc 83 a2 e7 4c 94 e2 c6  36 ae 03 9f 4d aa 9b 1b  |....L...6...M...|
offsetsizetypecomment
0950272DLL04/27/2011 11:25:57#
e80003032PKCS7Authenticode Signature#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

[?] NumberOfNames too big (2806), limiting to 2048