MZ Header

Rich Header

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Sections

Data Directory

VS_FIXEDFILEINFO

Signers (1)

issuer: /C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa (c)09/CN=VeriSign Class 3 Code Signing 2009-2 CA
serial: 61BA7137F92180F6BC4CA2F8DDB339C8

Certificates (2)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
    Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority
        Validity
            Not Before: May 21 00:00:00 2009 GMT
            Not After : May 20 23:59:59 2019 GMT
        Subject: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009-2 CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:be:67:1d:b4:60:aa:10:49:6f:56:17:7c:66:c9:
                    5e:86:0d:d5:f1:ac:a7:71:83:8e:8b:89:f8:88:04:
                    89:15:06:ba:2d:84:21:95:e4:d1:9c:50:4c:fb:d2:
                    22:bd:da:f2:b2:35:3b:1e:8f:c3:09:fb:fc:13:2e:
                    5a:bf:89:7c:3d:3b:25:1e:f6:f3:58:7b:9c:f4:01:
                    b5:c6:0a:b8:80:ce:be:27:74:61:67:27:4d:6a:e5:
                    ec:81:61:58:79:a3:e0:17:10:12:15:27:b0:e1:4d:
                    34:7f:2b:47:20:44:b9:de:66:24:66:8a:cd:4f:ba:
                    1f:c5:38:c8:54:90:e1:72:f6:19:66:75:6a:b9:49:
                    68:cf:38:79:0d:aa:30:a8:db:2c:60:48:9e:d7:aa:
                    14:01:a9:83:d7:38:91:30:39:13:96:03:3a:7c:40:
                    54:b6:ad:e0:2f:1b:83:dc:a8:11:52:3e:02:b3:d7:
                    2b:fd:21:b6:a7:5c:a3:0f:0b:a9:a6:10:50:0e:34:
                    2e:4d:a7:ce:c9:5e:25:d4:8c:bc:f3:6e:7c:29:bc:
                    01:5d:fc:31:87:5a:d5:8c:85:67:58:88:19:a0:bf:
                    35:f0:ea:2b:a3:21:e7:90:f6:83:e5:a8:ed:60:78:
                    5e:7b:60:83:fd:57:0b:5d:41:0d:63:54:60:d6:43:
                    21:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/cps
                  User Notice:
                    Explicit Text: https://www.verisign.com/rpa

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            1.3.6.1.5.5.7.1.12: 
                0_.].[0Y0W0U..image/gif0!0.0...+..............k...j.H.,{..0%.#http://logo.verisign.com/vslogo.gif
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, Code Signing
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.verisign.com/pca3.crl

            X509v3 Subject Alternative Name: 
                DirName:/CN=Class3CA2048-1-55
            X509v3 Subject Key Identifier: 
                97:D0:6B:A8:26:70:C8:A1:3F:94:1F:08:2D:C4:35:9B:A4:A1:1E:F2
    Signature Algorithm: sha1WithRSAEncryption
         8b:03:c0:dd:94:d8:41:a2:61:69:b0:15:a8:78:c7:30:c6:90:
         3c:7e:42:f7:24:b6:e4:83:73:17:04:7f:04:10:9c:a1:e2:fa:
         81:2f:eb:c0:ca:44:e7:72:e0:50:b6:55:10:20:83:6e:96:92:
         e4:9a:51:6a:b4:37:31:dc:a5:2d:eb:8c:00:c7:1d:4f:e7:4d:
         32:ba:85:f8:4e:be:fa:67:55:65:f0:6a:be:7a:ca:64:38:1a:
         10:10:78:45:76:31:f3:86:7a:03:0f:60:c2:b3:5d:9d:f6:8b:
         66:76:82:1b:59:e1:83:e5:bd:49:a5:38:56:e5:de:41:77:0e:
         58:0f

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:ba:71:37:f9:21:80:f6:bc:4c:a2:f8:dd:b3:39:c8
    Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009-2 CA
        Validity
            Not Before: Jul 15 00:00:00 2009 GMT
            Not After : Aug 29 23:59:59 2012 GMT
        Subject: C=AU, ST=Victoria, L=Melbourne, O=Beepa Pty Ltd, OU=Digital ID Class 3 - Microsoft Software Validation v2, OU=Development, CN=Beepa Pty Ltd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:ed:0a:bf:46:9b:e2:1c:fa:32:6b:35:72:53:c4:
                    8e:5a:94:97:2d:61:32:ca:f2:45:53:04:72:34:ce:
                    f4:4e:7d:02:27:9c:aa:01:18:c9:72:e3:b3:59:b9:
                    db:de:33:f3:cd:ae:26:7d:98:14:80:32:24:6c:cf:
                    68:9b:1a:4e:e1:42:28:6e:3f:76:1c:42:4e:a6:57:
                    b1:d7:42:40:91:c2:1c:87:fd:eb:63:c2:9e:39:6f:
                    d1:43:f3:d6:f5:01:bc:dc:84:8d:79:0a:2c:45:66:
                    ff:da:f3:8a:68:3a:44:9a:65:3f:37:6f:c4:e9:ef:
                    d6:1c:25:cc:3e:bd:3d:f2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://csc3-2009-2-crl.verisign.com/CSC3-2009-2.crl

            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/rpa

            X509v3 Extended Key Usage: 
                Code Signing
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com
                CA Issuers - URI:http://csc3-2009-2-aia.verisign.com/CSC3-2009-2.cer

            X509v3 Authority Key Identifier: 
                keyid:97:D0:6B:A8:26:70:C8:A1:3F:94:1F:08:2D:C4:35:9B:A4:A1:1E:F2

            Netscape Cert Type: 
                Object Signing
            1.3.6.1.4.1.311.2.1.27: 
                0.......
    Signature Algorithm: sha1WithRSAEncryption
         45:90:93:41:c1:2a:7b:87:9e:c5:2f:27:df:49:fb:23:0f:ce:
         ca:69:4e:32:7d:37:57:4c:14:49:8d:99:09:f7:f2:f7:59:27:
         81:9e:4d:53:fe:a4:5e:1c:3e:0f:42:4a:e9:74:81:08:16:8b:
         79:ba:8c:9d:12:a2:42:16:33:71:fb:dc:b6:e9:42:2a:23:2b:
         2b:d0:8f:1a:e3:b6:a9:26:41:03:05:4f:2d:3c:c6:9a:d1:26:
         f6:ac:68:12:66:f1:94:9f:fb:38:77:dd:16:d1:bf:1b:ec:ec:
         13:7e:8a:5c:9a:e9:94:6f:53:e1:a3:90:38:8a:c0:f7:7a:b6:
         41:5a:99:0d:6d:a4:db:bc:a8:38:a2:52:a3:52:ec:ad:79:81:
         67:fe:89:12:78:09:ff:fc:02:50:a6:44:b2:ca:0a:87:5d:ee:
         6e:5c:37:a7:39:5a:5a:c5:fa:43:10:5c:6d:77:7f:42:c2:5c:
         83:2e:25:0b:6e:f8:46:f0:5c:66:89:fa:cc:6b:84:af:fd:2f:
         80:e9:a3:7a:d4:1f:61:d8:95:6a:1e:b9:e4:36:2e:d5:47:09:
         04:8e:e0:5a:a8:61:cd:a7:c7:89:22:3d:de:61:ab:4c:e6:dc:
         85:b2:81:33:fe:6d:55:ab:fe:d3:bf:c0:30:90:03:e2:e5:d6:
         01:da:9e:7e
pkcs7-signedData
  • 1
    • SHA1: nil
    • 1.3.6.1.4.1.311.2.1.4
      • #0
        • 1.3.6.1.4.1.311.2.1.15
          • :
            00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
            00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |
        • SHA1
          • 27 72 78 b5 98 c1 86 c1  1c 2c de 2e 73 ec bd a1  |'rx......,..s...|
            a0 4d e7 89                                       |.M..            |
    • Certificates
      • Certificate #0
        • 2
          • 65:52:26:E1:B2:2E:18:E1:59:0F:29:85:AC:22:E7:5C
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • O: VeriSign, Inc.
            • OU: Class 3 Public Primary Certification Authority
          • 2009-05-21 00:00:00 UTC: 2019-05-20 23:59:59 UTC
          • Subject
            • C: US
            • O: VeriSign, Inc.
            • OU: VeriSign Trust Network
            • OU: Terms of use at https://www.verisign.com/rpa (c)09
            • CN: VeriSign Class 3 Code Signing 2009-2 CA
          • #5
            • rsaEncryption: nil
            • BE:67:1D:B4:60:AA:10:49:6F:56:17:7C:66:C9:5E:86:
              0D:D5:F1:AC:A7:71:83:8E:8B:89:F8:88:04:89:15:06:
              BA:2D:84:21:95:E4:D1:9C:50:4C:FB:D2:22:BD:DA:F2:
              B2:35:3B:1E:8F:C3:09:FB:FC:13:2E:5A:BF:89:7C:3D:
              3B:25:1E:F6:F3:58:7B:9C:F4:01:B5:C6:0A:B8:80:CE:
              BE:27:74:61:67:27:4D:6A:E5:EC:81:61:58:79:A3:E0:
              17:10:12:15:27:B0:E1:4D:34:7F:2B:47:20:44:B9:DE:
              66:24:66:8A:CD:4F:BA:1F:C5:38:C8:54:90:E1:72:F6:
              19:66:75:6A:B9:49:68:CF:38:79:0D:AA:30:A8:DB:2C:
              60:48:9E:D7:AA:14:01:A9:83:D7:38:91:30:39:13:96:
              03:3A:7C:40:54:B6:AD:E0:2F:1B:83:DC:A8:11:52:3E:
              02:B3:D7:2B:FD:21:B6:A7:5C:A3:0F:0B:A9:A6:10:50:
              0E:34:2E:4D:A7:CE:C9:5E:25:D4:8C:BC:F3:6E:7C:29:
              BC:01:5D:FC:31:87:5A:D5:8C:85:67:58:88:19:A0:BF:
              35:F0:EA:2B:A3:21:E7:90:F6:83:E5:A8:ED:60:78:5E:
              7B:60:83:FD:57:0B:5D:41:0D:63:54:60:D6:43:21:EF
              : 0x010001
          • X509v3 extensions
            • basicConstraints
              • true
              • true: 0
            • certificatePolicies
              • 2.16.840.1.113733.1.7.23.3
                • #0
                  • id-qt-cps: https://www.verisign.com/cps
                  • id-qt-unotice: https://www.verisign.com/rpa
            • keyUsage: true, 6
            • 1.3.6.1.5.5.7.1.12
              • image/gif
                • SHA1:
                  8f e5 d3 1a 86 ac 8d 8e  6b c3 cf 80 6a d4 48 18  |........k...j.H.|
                  2c 7b 19 2e                                       |,{..            |
                • http://logo.verisign.com/vslogo.gif
            • extendedKeyUsage
              • clientAuth: codeSigning
            • authorityInfoAccess
              • OCSP: http://ocsp.verisign.com
            • crlDistributionPoints: http://crl.verisign.com/pca3.crl
            • subjectAltName
              • CN: Class3CA2048-1-55
            • subjectKeyIdentifier:
              97 d0 6b a8 26 70 c8 a1  3f 94 1f 08 2d c4 35 9b  |..k.&p..?...-.5.|
              a4 a1 1e f2                                       |....            |
        • RSA-SHA1:
          8b 03 c0 dd 94 d8 41 a2  61 69 b0 15 a8 78 c7 30  |......A.ai...x.0|
          c6 90 3c 7e 42 f7 24 b6  e4 83 73 17 04 7f 04 10  |..<~B.$...s.....|
          9c a1 e2 fa 81 2f eb c0  ca 44 e7 72 e0 50 b6 55  |...../...D.r.P.U|
          10 20 83 6e 96 92 e4 9a  51 6a b4 37 31 dc a5 2d  |. .n....Qj.71..-|
          eb 8c 00 c7 1d 4f e7 4d  32 ba 85 f8 4e be fa 67  |.....O.M2...N..g|
          55 65 f0 6a be 7a ca 64  38 1a 10 10 78 45 76 31  |Ue.j.z.d8...xEv1|
          f3 86 7a 03 0f 60 c2 b3  5d 9d f6 8b 66 76 82 1b  |..z..`..]...fv..|
          59 e1 83 e5 bd 49 a5 38  56 e5 de 41 77 0e 58 0f  |Y....I.8V..Aw.X.|
      • Certificate #1
        • 2
          • 61:BA:71:37:F9:21:80:F6:BC:4C:A2:F8:DD:B3:39:C8
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • O: VeriSign, Inc.
            • OU: VeriSign Trust Network
            • OU: Terms of use at https://www.verisign.com/rpa (c)09
            • CN: VeriSign Class 3 Code Signing 2009-2 CA
          • 2009-07-15 00:00:00 UTC: 2012-08-29 23:59:59 UTC
          • Subject
            • C: AU
            • ST: Victoria
            • L: Melbourne
            • O: Beepa Pty Ltd
            • OU: Digital ID Class 3 - Microsoft Software Validation v2
            • OU: Development
            • CN: Beepa Pty Ltd
          • #5
            • rsaEncryption: nil
            • ED:0A:BF:46:9B:E2:1C:FA:32:6B:35:72:53:C4:8E:5A:
              94:97:2D:61:32:CA:F2:45:53:04:72:34:CE:F4:4E:7D:
              02:27:9C:AA:01:18:C9:72:E3:B3:59:B9:DB:DE:33:F3:
              CD:AE:26:7D:98:14:80:32:24:6C:CF:68:9B:1A:4E:E1:
              42:28:6E:3F:76:1C:42:4E:A6:57:B1:D7:42:40:91:C2:
              1C:87:FD:EB:63:C2:9E:39:6F:D1:43:F3:D6:F5:01:BC:
              DC:84:8D:79:0A:2C:45:66:FF:DA:F3:8A:68:3A:44:9A:
              65:3F:37:6F:C4:E9:EF:D6:1C:25:CC:3E:BD:3D:F2:CF
              : 0x010001
          • X509v3 extensions
            • basicConstraints
              • nil
            • keyUsage: true, 0x80
            • crlDistributionPoints: http://csc3-2009-2-crl.verisign.com/CSC3-2009-2.crl
            • certificatePolicies
              • 2.16.840.1.113733.1.7.23.3
                • id-qt-cps: https://www.verisign.com/rpa
            • extendedKeyUsage: codeSigning
            • authorityInfoAccess
              • #0
                • OCSP: http://ocsp.verisign.com
                • caIssuers: http://csc3-2009-2-aia.verisign.com/CSC3-2009-2.cer
            • authorityKeyIdentifier:
              97 d0 6b a8 26 70 c8 a1  3f 94 1f 08 2d c4 35 9b  |..k.&p..?...-.5.|
              a4 a1 1e f2                                       |....            |
            • nsCertType: 0x10
            • 1.3.6.1.4.1.311.2.1.27
              • false: true
        • RSA-SHA1:
          45 90 93 41 c1 2a 7b 87  9e c5 2f 27 df 49 fb 23  |E..A.*{.../'.I.#|
          0f ce ca 69 4e 32 7d 37  57 4c 14 49 8d 99 09 f7  |...iN2}7WL.I....|
          f2 f7 59 27 81 9e 4d 53  fe a4 5e 1c 3e 0f 42 4a  |..Y'..MS..^.>.BJ|
          e9 74 81 08 16 8b 79 ba  8c 9d 12 a2 42 16 33 71  |.t....y.....B.3q|
          fb dc b6 e9 42 2a 23 2b  2b d0 8f 1a e3 b6 a9 26  |....B*#++......&|
          41 03 05 4f 2d 3c c6 9a  d1 26 f6 ac 68 12 66 f1  |A..O-<...&..h.f.|
          94 9f fb 38 77 dd 16 d1  bf 1b ec ec 13 7e 8a 5c  |...8w........~.\|
          9a e9 94 6f 53 e1 a3 90  38 8a c0 f7 7a b6 41 5a  |...oS...8...z.AZ|
          99 0d 6d a4 db bc a8 38  a2 52 a3 52 ec ad 79 81  |..m....8.R.R..y.|
          67 fe 89 12 78 09 ff fc  02 50 a6 44 b2 ca 0a 87  |g...x....P.D....|
          5d ee 6e 5c 37 a7 39 5a  5a c5 fa 43 10 5c 6d 77  |].n\7.9ZZ..C.\mw|
          7f 42 c2 5c 83 2e 25 0b  6e f8 46 f0 5c 66 89 fa  |.B.\..%.n.F.\f..|
          cc 6b 84 af fd 2f 80 e9  a3 7a d4 1f 61 d8 95 6a  |.k.../...z..a..j|
          1e b9 e4 36 2e d5 47 09  04 8e e0 5a a8 61 cd a7  |...6..G....Z.a..|
          c7 89 22 3d de 61 ab 4c  e6 dc 85 b2 81 33 fe 6d  |.."=.a.L.....3.m|
          55 ab fe d3 bf c0 30 90  03 e2 e5 d6 01 da 9e 7e  |U.....0........~|
    • Signer
      • 1
      • unnamed
        • #0
          • C: US
          • O: VeriSign, Inc.
          • OU: VeriSign Trust Network
          • OU: Terms of use at https://www.verisign.com/rpa (c)09
          • CN: VeriSign Class 3 Code Signing 2009-2 CA
        • 61:BA:71:37:F9:21:80:F6:BC:4C:A2:F8:DD:B3:39:C8
      • SHA1: nil
      • #3
        • contentType: 1.3.6.1.4.1.311.2.1.4
        • 1.3.6.1.4.1.311.2.1.11: msCodeInd
        • messageDigest:
          03 4e 26 9d 82 b0 c8 e1  6e c7 63 63 0e 70 73 69  |.N&.....n.cc.psi|
          f8 48 b3 fe                                       |.H..            |
        • 1.3.6.1.4.1.311.2.1.12
          • 00 46 00 52 00 41 00 50  00 53                    |.F.R.A.P.S      |
            : http://www.fraps.com
      • rsaEncryption:
        ac 8e 11 38 5a e8 24 75  92 d8 81 a9 0b d4 95 99  |...8Z.$u........|
        54 76 30 0f 09 2f ee 23  1d 7c cb 2e 54 ba 2f 7a  |Tv0../.#.|..T./z|
        b0 0b be 66 dd 74 9d 48  d9 8c d2 34 15 26 08 c9  |...f.t.H...4.&..|
        37 56 9c 6c c1 fd a4 dc  09 e5 a6 e3 56 59 bf 26  |7V.l........VY.&|
        66 62 aa 33 cd 46 ed 7b  91 76 d9 83 f9 3c d7 91  |fb.3.F.{.v...<..|
        b0 93 08 84 e0 b3 20 f9  c2 4a 4b f8 22 83 b1 6d  |...... ..JK."..m|
        22 d8 26 e1 af 04 76 8b  f6 33 20 5c c8 7f 77 3b  |".&...v..3 \..w;|
        a6 5a 27 fd 5b b1 81 b4  12 cf d4 8e a7 f3 56 c4  |.Z'.[.........V.|
offsetsizetypecomment
02520064EXE07/31/2011 06:50:43#
242c2410928PNG(256 x 256)#
24738c36215PNG(256 x 256)#
2674003248PKCS7Authenticode Signature#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

[?] can't find file_offset of VA 0x1c8a20

[?] can't find file_offset of VA 0x25e0ec

[?] can't find file_offset of VA 0x2f37b8

[?] can't find file_offset of VA 0x2f49b4

[?] can't find file_offset of VA 0x2f5bb0

[?] can't find file_offset of VA 0x2f5eec

[?] can't find file_offset of VA 0x2f6228

[?] can't find file_offset of VA 0x2f7424

[?] can't find file_offset of VA 0x2f8620

[?] can't find file_offset of VA 0x2f927c

[?] can't find file_offset of VA 0x2f9ed8

[?] can't find file_offset of VA 0x2fa214

[?] can't find file_offset of VA 0x2fa550

[?] can't find file_offset of VA 0x2fb74c

[?] can't find file_offset of VA 0x2fc948

[?] can't find file_offset of VA 0x303ae4

[?] can't find file_offset of VA 0x30ac80

[?] can't find file_offset of VA 0x3f4758

[?] can't find file_offset of VA 0x4de230

[?] can't find file_offset of VA 0x5c7d08

[?] can't find file_offset of VA 0x6b17e0

[?] can't find file_offset of VA 0x6b342c

[?] can't find file_offset of VA 0x6b5078

[?] can't find file_offset of VA 0x6b55b4

[?] can't find file_offset of VA 0x6b5af0

[?] can't find file_offset of VA 0x6b773c

[?] can't find file_offset of VA 0x6b9388

[?] can't find file_offset of VA 0x6ba6d8

[?] can't find file_offset of VA 0x6bba28

[?] can't find file_offset of VA 0x6bbf64

[?] can't find file_offset of VA 0x6bc4a0

[?] can't find file_offset of VA 0x6c76b0

[?] can't find file_offset of VA 0x6d28c0

[?] can't find file_offset of VA 0x6d450c

[?] can't find file_offset of VA 0x6d6158

[?] can't find file_offset of VA 0x6d7354

[?] can't find file_offset of VA 0x6d8fa0

[?] can't find file_offset of VA 0x6da19c

[?] ignoring invalid PEdump::BITMAPINFOHEADER

[?] can't find file_offset of VA 0x6ffba0

[?] can't find file_offset of VA 0x6ffc54

[?] can't find file_offset of VA 0x6fff78

[?] can't find file_offset of VA 0x700374

[?] can't find file_offset of VA 0x700a04

[?] invalid VS_VERSIONINFO child type "\x00t\x00r\x00i"