MZ Header

Rich Header

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 040904B0

VS_FIXEDFILEINFO

Signers (1)

issuer: /C=US/ST=Washington/L=Redmond/O=Microsoft Corporation/CN=Microsoft Windows PCA 2010
serial: 3300000202E1725F5F497473E7000000000202

Certificates (2)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:00:00:02:02:e1:72:5f:5f:49:74:73:e7:00:00:00:00:02:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Windows PCA 2010
        Validity
            Not Before: May 14 17:41:24 2015 GMT
            Not After : Aug  1 17:41:24 2016 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Windows
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:cd:10:18:75:d7:dc:81:2a:c3:9d:73:e3:a4:c9:
                    37:0a:ba:33:33:3f:55:5b:59:5a:41:d3:7d:47:33:
                    ee:4b:f1:57:4a:02:0a:10:99:ed:16:dd:9b:fa:b7:
                    d0:61:a8:bc:6d:8f:7a:e5:33:6e:1d:ef:8c:14:46:
                    f9:f5:e9:64:8d:6b:96:9c:10:0a:ac:04:f7:c4:7b:
                    f3:48:87:98:f3:65:f1:3d:29:7e:5f:8a:8a:e8:4b:
                    f3:b9:89:d3:aa:a7:62:25:62:19:ad:b6:6d:68:51:
                    8e:e3:49:19:66:9a:c8:13:f9:54:0b:8a:ca:2e:81:
                    e7:43:f2:23:47:14:0f:de:45:2d:61:8d:cb:85:10:
                    e9:da:71:c6:bb:a2:9f:86:f9:f0:6b:89:e8:53:9d:
                    aa:aa:df:c4:e1:63:1b:7f:d0:36:5d:76:4e:4e:a3:
                    6e:90:89:b3:cf:6f:15:a5:6d:da:72:cc:89:30:50:
                    7c:89:d8:db:f7:2d:b6:8f:dc:2b:34:43:72:ca:4e:
                    85:12:81:55:41:30:39:10:f8:a9:dd:23:66:18:d6:
                    df:83:42:99:c2:90:f2:07:55:68:3c:05:42:fe:c8:
                    5e:07:a4:39:b1:a2:e7:ba:61:d2:bb:95:6f:b4:44:
                    74:a9:cd:a5:79:aa:34:ef:09:82:43:ad:72:b0:88:
                    4d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Extended Key Usage: 
                Code Signing, 1.3.6.1.4.1.311.10.3.6, 1.3.6.1.4.1.311.10.3.13, 1.3.6.1.4.1.311.10.3.27
            X509v3 Subject Key Identifier: 
                DF:7E:3A:09:4D:F8:AC:00:FB:6F:97:B4:0F:1F:5D:7A:A4:21:E3:ED
            X509v3 Subject Alternative Name: 
                DirName:/OU=MOPR/serialNumber=55016+4726859f-8e03-4fd0-bca5-e1326c98e38a
            X509v3 Authority Key Identifier: 
                keyid:D1:4F:A9:8A:07:08:CE:F4:24:18:98:E5:00:FF:F3:D6:79:1D:37:BC

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/MicWinPCA_2010-07-06.crl

            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicWinPCA_2010-07-06.crt

            X509v3 Basic Constraints: critical
                CA:FALSE
    Signature Algorithm: sha256WithRSAEncryption
         46:08:7f:57:34:bf:74:61:61:a0:38:a9:64:a2:17:5a:cc:57:
         2b:d2:e8:9b:37:13:a5:2b:3e:94:4f:c8:d9:c6:c5:de:c5:b9:
         4a:0e:ce:4b:45:29:94:da:d8:6b:1a:9a:06:1a:6f:a5:02:a8:
         57:ad:48:c0:a4:7c:18:bf:f1:c8:e5:d1:1e:03:f6:f3:37:49:
         0d:a5:24:79:2f:9f:18:7e:55:36:e9:ee:a9:27:a9:66:c0:45:
         6c:4b:8f:ee:7b:31:90:cb:da:6b:a5:5b:be:34:89:1c:48:43:
         75:ef:4a:5c:7a:d6:7e:3a:60:e3:6c:a3:0b:1c:44:c7:1d:b4:
         08:7a:94:ee:6c:bb:c5:a7:dd:81:77:9e:09:93:3d:f4:fc:ea:
         01:ea:38:d2:17:7b:13:fc:63:18:2b:56:42:ca:ef:92:ea:1b:
         62:04:51:de:f2:c9:67:5c:5e:c1:7c:29:c0:96:3c:8e:ec:48:
         64:87:f4:30:ce:40:82:59:9f:6d:5c:c2:a5:1c:e9:bb:85:39:
         e1:e0:0f:ff:35:6f:af:ea:bd:4e:8f:1d:74:24:f2:fb:85:11:
         ea:f4:4a:45:4e:b4:d5:20:5e:49:bd:c9:12:11:7d:39:62:f4:
         f8:35:58:7f:d9:d9:de:d4:7a:f2:22:89:d3:52:de:6c:ef:bc:
         1c:29:96:10

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:0c:6a:19:00:00:00:00:00:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2010
        Validity
            Not Before: Jul  6 20:40:23 2010 GMT
            Not After : Jul  6 20:50:23 2025 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Windows PCA 2010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c0:79:bb:3a:b1:f0:0f:84:b8:ad:64:2a:75:16:
                    73:d0:bb:07:f6:3e:0d:9d:14:e4:b1:9f:c1:c8:94:
                    b0:38:7c:1f:d0:33:55:f5:ba:23:66:f5:2e:28:48:
                    53:c7:16:83:ba:f5:51:ac:7e:ac:e0:26:7f:0f:74:
                    fc:59:95:dc:c9:c6:a2:f7:52:70:5a:2c:1d:94:ab:
                    19:bf:af:95:7d:af:66:a1:6f:9b:62:6e:6d:4b:bc:
                    2f:35:6c:de:a4:6a:63:5a:5f:fb:f3:0d:4d:61:cc:
                    0a:7e:31:eb:6c:0a:d0:4d:97:0f:fd:7f:38:46:e6:
                    8a:c7:73:69:76:55:69:96:4c:e4:d8:f0:34:eb:ba:
                    b1:1f:ce:29:7e:c4:4f:9d:13:15:ab:13:1b:72:58:
                    62:56:6c:8a:81:a3:64:77:98:46:65:29:9d:83:14:
                    a5:4c:08:a0:83:d7:23:1f:f3:5f:df:6f:2c:cf:da:
                    16:d8:0e:72:04:28:d8:6b:3e:f8:13:b1:7c:a2:17:
                    79:4f:7e:dc:3a:e4:9d:70:27:6b:bf:db:fc:1e:c7:
                    07:d8:c0:be:0b:93:1e:28:e0:73:6d:d2:54:e9:28:
                    4c:bf:6b:5d:9f:ff:5d:33:12:37:95:25:61:34:6a:
                    42:cb:7c:9d:3a:bb:88:59:e1:a3:42:6d:3a:50:5b:
                    48:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            1.3.6.1.4.1.311.21.1: 
                ...
            X509v3 Subject Key Identifier: 
                D1:4F:A9:8A:07:08:CE:F4:24:18:98:E5:00:FF:F3:D6:79:1D:37:BC
            1.3.6.1.4.1.311.20.2: 
                .
.S.u.b.C.A
            X509v3 Key Usage: 
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                keyid:D5:F6:56:CB:8F:E8:A2:5C:62:68:D1:3D:94:90:5B:D7:CE:9A:18:C4

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl

            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt

            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.311.46.3
                  CPS: http://www.microsoft.com/PKI/docs/CPS/default.htm
                  User Notice:
                    Explicit Text:  

    Signature Algorithm: sha256WithRSAEncryption
         2e:41:a6:86:b5:06:6f:f0:80:85:fa:3b:ca:17:e9:c9:fa:e4:
         39:c2:94:70:c3:64:94:c3:d8:56:a6:90:8e:fe:e4:9a:f4:6d:
         f5:6f:8e:53:8d:5a:a8:f3:ae:db:46:6c:be:7f:1d:54:56:1b:
         3c:1d:71:c4:51:15:54:7e:bf:ee:a5:95:42:33:fd:0d:90:24:
         24:e3:f9:dc:96:ca:fc:b8:ac:bf:f4:c2:39:56:b8:bb:ed:73:
         b3:17:dd:7e:86:50:23:8b:56:24:ca:bb:a6:1d:9a:87:2f:27:
         85:e7:a1:b6:0a:9c:0d:1b:8c:f3:00:62:41:ba:48:74:87:82:
         fd:50:c9:f4:87:29:c3:03:aa:2b:df:1a:29:79:e8:12:24:9a:
         86:ed:d0:2e:d3:40:81:f5:07:5f:33:06:54:5d:40:b5:f7:b1:
         62:fd:4d:48:f7:6e:41:47:52:1c:bb:1b:c2:57:3a:a8:99:56:
         93:d4:c6:de:26:a8:60:75:86:bb:ec:62:a6:f0:1d:04:45:df:
         3e:a7:84:d1:5b:44:23:63:25:36:77:6f:ae:5b:dc:22:d5:14:
         23:6a:41:7f:d0:42:a6:db:ef:25:7b:04:e3:d2:96:37:62:06:
         af:f8:1b:0f:8e:b3:39:9a:bb:89:f5:35:06:e5:a4:5b:c3:8c:
         9e:37:5f:53:d1:a3:37:fd:a4:4f:e8:1b:0e:6b:76:e4:b8:8f:
         b0:c2:ea:fd:75:f7:2c:41:b7:9c:a3:e1:1e:05:fe:97:92:cb:
         7f:59:03:6d:a8:4e:8d:4e:80:17:d4:d5:72:f6:56:e4:48:9f:
         a3:23:ba:06:a0:c0:8e:d1:88:4f:93:20:f2:70:5f:d8:6b:72:
         a3:20:49:fc:77:0c:5d:c5:c7:e1:02:0f:38:42:10:0e:db:02:
         ae:9a:37:1d:50:80:29:1e:a4:a7:d9:c6:9a:25:55:fd:40:ca:
         ad:64:10:e8:31:f9:12:54:79:1a:f2:0e:d8:d6:ab:1e:33:fe:
         02:e7:26:6d:61:49:8f:f1:25:c2:8b:74:99:df:f9:93:1a:90:
         1c:ee:dd:94:33:0e:42:50:db:7f:50:f8:9f:62:82:ec:a6:82:
         16:7c:66:bc:ec:99:b0:c1:58:5d:a8:b0:9a:61:14:91:d1:99:
         2f:49:e4:3e:81:99:d6:e6:ef:ca:e3:fd:3e:ee:ec:09:86:03:
         07:0d:1b:0d:7c:eb:f4:5a:c9:95:cf:87:12:0a:5d:ec:c5:02:
         92:cd:05:99:72:ca:7d:f1:2a:10:18:38:e4:31:a3:28:b4:e6:
         4c:c5:52:a3:9c:6a:c7:7d:c0:71:09:04:0d:70:de:02:3f:87:
         ee:56:a1:ec:eb:b5:4c:85

undefined method `first' for #

offsetsizetypecomment
0606208DLL10/07/2015 05:58:29#
9400014104PKCS7Authenticode Signature#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

everything is OK