MZ Header

Rich Header

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 040904E4

VS_FIXEDFILEINFO

Signers (1)

issuer: /C=US/O=Thawte, Inc./CN=Thawte Code Signing CA - G2
serial: 232CE5297F2941A352148152A936FB93

Certificates (2)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:2c:e5:29:7f:29:41:a3:52:14:81:52:a9:36:fb:93
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=Thawte, Inc., CN=Thawte Code Signing CA - G2
        Validity
            Not Before: Sep 12 00:00:00 2013 GMT
            Not After : Sep 12 23:59:59 2014 GMT
        Subject: C=IL, ST=Israel, L=Tel Aviv, O=Bundlore Limited, CN=Bundlore Limited
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9c:3b:b0:6a:92:dc:a9:36:b8:d0:a0:34:e7:
                    e8:0f:5d:a1:c8:a7:8d:57:1f:71:a0:b8:eb:6d:aa:
                    cc:a3:0f:89:51:04:36:ff:28:ee:d1:75:01:47:66:
                    de:86:9e:09:3e:f0:b9:56:db:23:4e:96:ee:6e:59:
                    1a:64:53:7e:f8:0a:89:86:e9:c7:7c:0e:ba:ad:ca:
                    1b:67:08:e9:b2:3f:3e:76:56:e4:7a:66:aa:74:31:
                    63:a2:b8:f8:cd:ff:53:64:a8:5b:30:df:da:08:05:
                    51:1a:75:a0:57:85:e2:0c:96:07:54:ea:3a:0c:85:
                    c2:33:15:33:84:48:6d:50:0d:bc:cc:0e:a6:15:cb:
                    6b:c2:d3:3e:1a:26:6e:2e:ab:8e:38:c8:36:0c:3d:
                    0d:c7:8e:f4:d0:04:a4:03:28:39:d9:fe:e8:7c:2e:
                    20:8c:94:17:1f:01:82:25:54:13:38:51:38:ae:77:
                    1f:2f:ab:3a:f0:19:69:c8:53:07:ab:81:04:84:1c:
                    42:1b:55:1e:b7:56:1c:7b:ea:ca:1f:c7:e0:be:b2:
                    b4:c4:12:6d:e7:6b:cf:d0:c7:2c:c2:b9:c1:6f:ff:
                    f8:94:a9:66:10:b8:2a:c9:30:7e:65:8f:9b:25:fb:
                    48:f1:a8:99:68:3d:1c:24:aa:0e:3a:09:12:b6:f0:
                    8a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://cs-g2-crl.thawte.com/ThawteCSG2.crl

            X509v3 Extended Key Usage: 
                Code Signing, Microsoft Commercial Code Signing
            2.5.29.4: 
                0.0.0..
+.....7.......
            Authority Information Access: 
                OCSP - URI:http://ocsp.thawte.com

            Netscape Cert Type: 
                Object Signing
    Signature Algorithm: sha1WithRSAEncryption
         0c:7b:9e:21:d6:3a:cf:dc:ce:59:a3:3b:e2:8f:0d:b7:ad:6a:
         a5:80:f4:d3:2c:6c:f8:3b:c3:31:eb:29:e2:25:bb:7b:19:93:
         f8:df:b4:42:5a:e8:b4:25:ab:30:9e:81:47:1a:b1:26:75:6f:
         83:92:69:a0:00:ff:df:9e:49:20:a3:48:b2:9a:e7:aa:54:21:
         39:1f:a3:42:fa:99:d3:ae:32:98:80:1d:9b:87:d2:a6:52:7f:
         6a:54:77:2c:f0:2f:d9:03:34:75:a7:35:3d:cd:e0:5a:9b:2a:
         2d:c1:9b:94:9b:32:73:ba:24:f0:02:57:db:a1:c4:b6:57:21:
         d1:b5:67:d4:02:ca:6a:1b:15:28:38:7d:34:9f:5c:ad:c9:05:
         48:40:67:7f:86:cb:28:b9:7f:38:ac:f1:8e:2c:de:fb:3f:8a:
         8f:81:9f:b8:f1:20:67:e0:47:f4:3d:4f:46:2d:2a:1b:7b:1d:
         8f:18:06:6f:7e:c9:6f:ce:4b:7d:91:b5:8c:9d:c7:94:73:fa:
         be:24:62:9a:60:7f:12:34:51:01:c6:73:60:39:ce:6d:79:72:
         c0:70:55:dc:75:de:b3:76:b2:15:5c:29:09:24:f3:c4:94:cd:
         a3:c7:06:c6:96:0b:c3:19:d5:25:2a:01:0b:43:44:5c:5a:40:
         b8:7c:64:f3

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:97:4d:78:73:a5:bc:ab:0d:2f:b3:70:19:2f:ce:5e
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2006 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA
        Validity
            Not Before: Feb  8 00:00:00 2010 GMT
            Not After : Feb  7 23:59:59 2020 GMT
        Subject: C=US, O=Thawte, Inc., CN=Thawte Code Signing CA - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8b:cf:75:5b:9f:25:da:7e:39:b0:93:db:38:
                    d3:a9:23:d0:82:fa:e9:24:7e:5c:0b:8e:83:f8:e6:
                    7a:59:e6:a3:c5:98:a7:99:d2:44:ff:00:a6:a5:39:
                    04:8a:da:29:88:ea:db:a2:f3:1c:99:15:26:c2:b1:
                    f4:fc:e1:0c:47:a9:09:11:06:0a:20:92:b9:c7:a0:
                    04:8c:5c:94:19:ab:5b:25:2c:1d:62:7e:70:0d:ce:
                    61:6c:dd:2b:82:c9:ce:5d:48:5f:f7:c2:be:bc:41:
                    23:1e:4f:29:5d:d7:4f:bc:f4:c5:2a:fc:63:e6:7c:
                    26:4e:99:a7:79:41:9e:10:4a:7a:79:c9:c6:86:f7:
                    86:95:d2:26:ce:3c:18:2a:d6:7c:ce:af:cd:ad:bb:
                    f7:82:2c:70:26:37:45:e5:0f:47:22:c6:01:28:bd:
                    2e:83:5c:6a:a4:47:c1:e7:d0:d8:6b:81:46:3f:21:
                    17:f5:07:c5:43:5a:a6:67:2c:b8:7b:60:11:b5:83:
                    ee:f5:74:0a:72:71:44:3d:58:fe:e8:1a:ab:38:c3:
                    59:db:7f:6e:38:7d:76:c7:72:69:98:36:96:57:d3:
                    66:1c:d2:54:91:04:2e:54:19:b0:dc:3d:b5:22:5e:
                    86:d5:2a:7e:20:df:5d:e6:7a:b1:65:fe:c5:02:4e:
                    31:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.thawte.com/ThawtePCA.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                OCSP - URI:http://ocsp.thawte.com

            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, Code Signing
            X509v3 Subject Alternative Name: 
                DirName:/CN=VeriSignMPKI-2-10
            X509v3 Subject Key Identifier: 
                D4:0D:65:3F:7A:BD:34:C6:FE:47:E7:4C:0D:C0:BD:F2:DE:15:AB:71
            X509v3 Authority Key Identifier: 
                keyid:7B:5B:45:CF:AF:CE:CB:7A:FD:31:92:1A:6A:B6:F3:46:EB:57:48:50

    Signature Algorithm: sha1WithRSAEncryption
         56:fe:53:5c:e1:c7:9e:bc:a7:ed:7e:53:6d:6a:14:4b:51:8c:
         40:5e:80:5f:aa:a4:e8:2f:ef:38:c8:04:c9:ca:3e:cf:df:3a:
         58:4e:b0:d4:b6:63:c5:29:57:fa:02:05:9a:45:4d:68:db:2a:
         1b:d4:34:3d:9f:00:c3:5a:cb:95:49:a5:6e:e1:b0:c5:fc:41:
         4d:41:4a:6f:d3:77:c8:d7:38:8d:e4:19:de:18:f3:1f:15:65:
         83:6d:45:0c:53:f9:0a:9a:2e:a5:5d:bf:6f:32:81:18:92:19:
         6a:55:00:ad:63:1c:52:06:7e:55:d9:29:68:ae:4a:7c:18:9a:
         79:88:6b:23:23:d8:27:38:2a:29:87:76:ca:fb:c7:b6:62:23:
         1f:ed:7a:56:4c:dd:9c:32:5b:f5:3d:0c:46:18:95:3b:2a:23:
         68:83:64:41:d9:00:6d:0f:19:24:15:68:72:bd:c5:71:67:6e:
         ac:4c:db:90:eb:51:a5:1a:62:07:d0:be:6a:00:47:3c:72:2f:
         ec:4f:61:3e:73:85:ce:5a:0a:b7:ba:c0:1c:13:75:e3:22:39:
         28:dd:6d:1d:09:46:9d:4f:ba:e8:40:81:91:c6:a4:ce:94:72:
         1b:01:cf:2a:6e:15:67:95:89:ae:7d:b7:b7:cd:f9:0a:3d:75:
         b6:6b:3c:25
pkcs7-signedData
  • 1
    • SHA1: nil
    • 1.3.6.1.4.1.311.2.1.4
      • #0
        • 1.3.6.1.4.1.311.2.1.15
          • :
            00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
            00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |
        • SHA1
          • 01 0f 3c 6e 88 05 ef 56  20 c6 45 78 27 da a6 e4  |..
    • Certificates
      • Certificate #0
        • 2
          • 23:2C:E5:29:7F:29:41:A3:52:14:81:52:A9:36:FB:93
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • O: Thawte, Inc.
            • CN: Thawte Code Signing CA - G2
          • 2013-09-12 00:00:00 UTC: 2014-09-12 23:59:59 UTC
          • Subject
            • C: IL
            • ST: Israel
            • L: Tel Aviv
            • O: Bundlore Limited
            • CN: Bundlore Limited
          • #5
            • rsaEncryption: nil
            • D6:9C:3B:B0:6A:92:DC:A9:36:B8:D0:A0:34:E7:E8:0F:
              5D:A1:C8:A7:8D:57:1F:71:A0:B8:EB:6D:AA:CC:A3:0F:
              89:51:04:36:FF:28:EE:D1:75:01:47:66:DE:86:9E:09:
              3E:F0:B9:56:DB:23:4E:96:EE:6E:59:1A:64:53:7E:F8:
              0A:89:86:E9:C7:7C:0E:BA:AD:CA:1B:67:08:E9:B2:3F:
              3E:76:56:E4:7A:66:AA:74:31:63:A2:B8:F8:CD:FF:53:
              64:A8:5B:30:DF:DA:08:05:51:1A:75:A0:57:85:E2:0C:
              96:07:54:EA:3A:0C:85:C2:33:15:33:84:48:6D:50:0D:
              BC:CC:0E:A6:15:CB:6B:C2:D3:3E:1A:26:6E:2E:AB:8E:
              38:C8:36:0C:3D:0D:C7:8E:F4:D0:04:A4:03:28:39:D9:
              FE:E8:7C:2E:20:8C:94:17:1F:01:82:25:54:13:38:51:
              38:AE:77:1F:2F:AB:3A:F0:19:69:C8:53:07:AB:81:04:
              84:1C:42:1B:55:1E:B7:56:1C:7B:EA:CA:1F:C7:E0:BE:
              B2:B4:C4:12:6D:E7:6B:CF:D0:C7:2C:C2:B9:C1:6F:FF:
              F8:94:A9:66:10:B8:2A:C9:30:7E:65:8F:9B:25:FB:48:
              F1:A8:99:68:3D:1C:24:AA:0E:3A:09:12:B6:F0:8A:0B
              : 0x010001
          • X509v3 extensions
            • basicConstraints
              • true
              • nil
            • crlDistributionPoints: http://cs-g2-crl.thawte.com/ThawteCSG2.crl
            • extendedKeyUsage
              • codeSigning: msCodeCom
            • 2.5.29.4
              • msCodeCom: 0x80
            • authorityInfoAccess
              • OCSP: http://ocsp.thawte.com
            • nsCertType: 0x10
        • RSA-SHA1:
          0c 7b 9e 21 d6 3a cf dc  ce 59 a3 3b e2 8f 0d b7  |.{.!.:...Y.;....|
          ad 6a a5 80 f4 d3 2c 6c  f8 3b c3 31 eb 29 e2 25  |.j....,l.;.1.).%|
          bb 7b 19 93 f8 df b4 42  5a e8 b4 25 ab 30 9e 81  |.{.....BZ..%.0..|
          47 1a b1 26 75 6f 83 92  69 a0 00 ff df 9e 49 20  |G..&uo..i.....I |
          a3 48 b2 9a e7 aa 54 21  39 1f a3 42 fa 99 d3 ae  |.H....T!9..B....|
          32 98 80 1d 9b 87 d2 a6  52 7f 6a 54 77 2c f0 2f  |2.......R.jTw,./|
          d9 03 34 75 a7 35 3d cd  e0 5a 9b 2a 2d c1 9b 94  |..4u.5=..Z.*-...|
          9b 32 73 ba 24 f0 02 57  db a1 c4 b6 57 21 d1 b5  |.2s.$..W....W!..|
          67 d4 02 ca 6a 1b 15 28  38 7d 34 9f 5c ad c9 05  |g...j..(8}4.\...|
          48 40 67 7f 86 cb 28 b9  7f 38 ac f1 8e 2c de fb  |H@g...(..8...,..|
          3f 8a 8f 81 9f b8 f1 20  67 e0 47 f4 3d 4f 46 2d  |?...... g.G.=OF-|
          2a 1b 7b 1d 8f 18 06 6f  7e c9 6f ce 4b 7d 91 b5  |*.{....o~.o.K}..|
          8c 9d c7 94 73 fa be 24  62 9a 60 7f 12 34 51 01  |....s..$b.`..4Q.|
          c6 73 60 39 ce 6d 79 72  c0 70 55 dc 75 de b3 76  |.s`9.myr.pU.u..v|
          b2 15 5c 29 09 24 f3 c4  94 cd a3 c7 06 c6 96 0b  |..\).$..........|
          c3 19 d5 25 2a 01 0b 43  44 5c 5a 40 b8 7c 64 f3  |...%*..CD\Z@.|d.|
      • Certificate #1
        • 2
          • 47:97:4D:78:73:A5:BC:AB:0D:2F:B3:70:19:2F:CE:5E
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • O: thawte, Inc.
            • OU: Certification Services Division
            • OU: (c) 2006 thawte, Inc. - For authorized use only
            • CN: thawte Primary Root CA
          • 2010-02-08 00:00:00 UTC: 2020-02-07 23:59:59 UTC
          • Subject
            • C: US
            • O: Thawte, Inc.
            • CN: Thawte Code Signing CA - G2
          • #5
            • rsaEncryption: nil
            • B7:8B:CF:75:5B:9F:25:DA:7E:39:B0:93:DB:38:D3:A9:
              23:D0:82:FA:E9:24:7E:5C:0B:8E:83:F8:E6:7A:59:E6:
              A3:C5:98:A7:99:D2:44:FF:00:A6:A5:39:04:8A:DA:29:
              88:EA:DB:A2:F3:1C:99:15:26:C2:B1:F4:FC:E1:0C:47:
              A9:09:11:06:0A:20:92:B9:C7:A0:04:8C:5C:94:19:AB:
              5B:25:2C:1D:62:7E:70:0D:CE:61:6C:DD:2B:82:C9:CE:
              5D:48:5F:F7:C2:BE:BC:41:23:1E:4F:29:5D:D7:4F:BC:
              F4:C5:2A:FC:63:E6:7C:26:4E:99:A7:79:41:9E:10:4A:
              7A:79:C9:C6:86:F7:86:95:D2:26:CE:3C:18:2A:D6:7C:
              CE:AF:CD:AD:BB:F7:82:2C:70:26:37:45:E5:0F:47:22:
              C6:01:28:BD:2E:83:5C:6A:A4:47:C1:E7:D0:D8:6B:81:
              46:3F:21:17:F5:07:C5:43:5A:A6:67:2C:B8:7B:60:11:
              B5:83:EE:F5:74:0A:72:71:44:3D:58:FE:E8:1A:AB:38:
              C3:59:DB:7F:6E:38:7D:76:C7:72:69:98:36:96:57:D3:
              66:1C:D2:54:91:04:2E:54:19:B0:DC:3D:B5:22:5E:86:
              D5:2A:7E:20:DF:5D:E6:7A:B1:65:FE:C5:02:4E:31:2D
              : 0x010001
          • X509v3 extensions
            • basicConstraints
              • true
              • true: 0
            • crlDistributionPoints: http://crl.thawte.com/ThawtePCA.crl
            • keyUsage: true, 6
            • authorityInfoAccess
              • OCSP: http://ocsp.thawte.com
            • extendedKeyUsage
              • clientAuth: codeSigning
            • subjectAltName
              • CN: VeriSignMPKI-2-10
            • subjectKeyIdentifier:
              d4 0d 65 3f 7a bd 34 c6  fe 47 e7 4c 0d c0 bd f2  |..e?z.4..G.L....|
              de 15 ab 71                                       |...q            |
            • authorityKeyIdentifier:
              7b 5b 45 cf af ce cb 7a  fd 31 92 1a 6a b6 f3 46  |{[E....z.1..j..F|
              eb 57 48 50                                       |.WHP            |
        • RSA-SHA1:
          56 fe 53 5c e1 c7 9e bc  a7 ed 7e 53 6d 6a 14 4b  |V.S\......~Smj.K|
          51 8c 40 5e 80 5f aa a4  e8 2f ef 38 c8 04 c9 ca  |Q.@^._.../.8....|
          3e cf df 3a 58 4e b0 d4  b6 63 c5 29 57 fa 02 05  |>..:XN...c.)W...|
          9a 45 4d 68 db 2a 1b d4  34 3d 9f 00 c3 5a cb 95  |.EMh.*..4=...Z..|
          49 a5 6e e1 b0 c5 fc 41  4d 41 4a 6f d3 77 c8 d7  |I.n....AMAJo.w..|
          38 8d e4 19 de 18 f3 1f  15 65 83 6d 45 0c 53 f9  |8........e.mE.S.|
          0a 9a 2e a5 5d bf 6f 32  81 18 92 19 6a 55 00 ad  |....].o2....jU..|
          63 1c 52 06 7e 55 d9 29  68 ae 4a 7c 18 9a 79 88  |c.R.~U.)h.J|..y.|
          6b 23 23 d8 27 38 2a 29  87 76 ca fb c7 b6 62 23  |k##.'8*).v....b#|
          1f ed 7a 56 4c dd 9c 32  5b f5 3d 0c 46 18 95 3b  |..zVL..2[.=.F..;|
          2a 23 68 83 64 41 d9 00  6d 0f 19 24 15 68 72 bd  |*#h.dA..m..$.hr.|
          c5 71 67 6e ac 4c db 90  eb 51 a5 1a 62 07 d0 be  |.qgn.L...Q..b...|
          6a 00 47 3c 72 2f ec 4f  61 3e 73 85 ce 5a 0a b7  |j.Gs..Z..|
          ba c0 1c 13 75 e3 22 39  28 dd 6d 1d 09 46 9d 4f  |....u."9(.m..F.O|
          ba e8 40 81 91 c6 a4 ce  94 72 1b 01 cf 2a 6e 15  |..@......r...*n.|
          67 95 89 ae 7d b7 b7 cd  f9 0a 3d 75 b6 6b 3c 25  |g...}.....=u.k<%|
    • 1
      • unnamed
        • #0
          • C: US
          • O: Thawte, Inc.
          • CN: Thawte Code Signing CA - G2
        • 23:2C:E5:29:7F:29:41:A3:52:14:81:52:A9:36:FB:93
      • SHA1: nil
      • #2
        • contentType: 1.3.6.1.4.1.311.2.1.4
        • 1.3.6.1.4.1.311.2.1.11: msCodeCom
        • 1.3.6.1.4.1.311.2.1.12:
          00 53 00 65 00 74 00 75  00 70                    |.S.e.t.u.p      |
        • messageDigest:
          a5 c9 d0 67 27 6b de d1  59 e3 ef fa a2 2a 7e 81  |...g'k..Y....*~.|
          0a 63 20 1b                                       |.c .            |
      • rsaEncryption:
        7f 76 17 2b 2f 47 65 2f  d9 c7 7b 76 4a 3d ab 62  |.v.+/Ge/..{vJ=.b|
        ff 7d 2f ce de 64 74 55  b4 3d 4c 0e fa d2 ad 34  |.}/..dtU.=L....4|
        36 b4 01 37 bb 98 bf 8d  8c 19 8d 6c 05 7c 30 5f  |6..7.......l.|0_|
        89 bb 1d 8c 3d bc 31 4f  40 43 02 2b f0 45 2b 3e  |....=.1O@C.+.E+>|
        88 f9 3e b0 bb 07 b5 55  eb 8f 1e 88 6b 9d fe c2  |..>....U....k...|
        41 92 b4 20 6c d0 51 bc  78 a6 2d ce a6 6a 9e 5d  |A.. l.Q.x.-..j.]|
        60 24 7b 5a 9c f0 62 48  0b ea 0d 4f 75 19 35 d6  |`${Z..bH...Ou.5.|
        57 b3 48 75 72 00 81 7a  85 5a 89 11 ec 77 1d 6b  |W.Hur..z.Z...w.k|
        d9 d4 11 a7 34 aa df 52  5c 9e 7c 5b b0 61 72 4a  |....4..R\.|[.arJ|
        2b 7a 32 ce cf 7d 8e 0f  2d 4d 9d 2f 0c 3d af 80  |+z2..}..-M./.=..|
        33 e5 25 8f fb 35 40 4b  45 64 a0 6b 99 f4 8f 12  |3.%..5@KEd.k....|
        a4 db 5b 70 f4 9c e8 db  a4 61 c4 14 b0 ff 1b f8  |..[p.....a......|
        da 36 04 69 13 c3 9a bc  6b aa 22 99 f5 17 2a c9  |.6.i....k."...*.|
        25 c4 8d dc b9 18 8f f8  0f 85 e1 cd 9e e9 fb a4  |%...............|
        44 30 1f 11 39 21 f7 c7  87 d3 5a 3d 0b c3 29 f9  |D0..9!....Z=..).|
        4b d7 d5 22 68 f0 6a 9f  4c 10 d7 28 a9 3e ea f3  |K.."h.j.L..(.>..|
offsetsizetypecomment
0192512EXE02/12/2014 18:41:16#
15c115HTM#
2f0003936PKCS7Authenticode Signature#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

everything is OK