comments powered byDisqus

MZ Header

Rich Header

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Sections

Data Directory

StringTable 040904B0

StringTable 040904B0

VS_FIXEDFILEINFO

VS_FIXEDFILEINFO

Signers (1)

issuer: /CN=\x00W\x00U\x00S\x00!
serial: -2B6C4CE9A4047047B2B1AD41051B986B

Certificates (1)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
             (Negative)2b:6c:4c:e9:a4:04:70:47:b2:b1:ad:41:05:1b:98:6b
    Signature Algorithm: sha1WithRSA
        Issuer: CN=\x00W\x00U\x00S\x00!
        Validity
            Not Before: Jul  1 08:00:00 2014 GMT
            Not After : Jan  1 08:00:00 2088 GMT
        Subject: CN=\x00W\x00U\x00S\x00!
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ab:57:00:aa:90:aa:de:a5:2c:1e:92:b3:32:c3:
                    74:33:28:60:41:7c:eb:98:76:89:53:97:f5:e0:f5:
                    7d:14:83:d6:01:54:59:1b:f5:1f:dc:dc:a4:19:81:
                    17:f8:74:18:14:ea:6c:94:03:ce:10:ea:f5:1d:37:
                    9b:19:20:d4:cc:e3:e9:c6:8f:33:93:4a:85:e4:44:
                    d0:d7:6d:c2:27:15:4d:3e:e3:cb:4b:84:0f:d7:d3:
                    97:18:ee:28:e8:20:c1:51:d0:20:f2:e0:59:46:01:
                    b3:c4:63:9a:e4:d3:83:fd:e0:65:86:a2:d6:12:3a:
                    ca:35:9c:a0:cf:4a:d5:a8:29:db:a3:8c:68:9b:ab:
                    ca:52:a5:93:e9:72:a1:31:25:6a:03:93:c2:6d:2b:
                    23:f7:78:07:c4:c5:15:52:d4:fa:61:17:5b:25:57:
                    94:bf:5e:49:21:53:5e:f5:fb:be:00:2d:09:7d:f2:
                    1a:8d:93:54:8d:82:ea:75:9e:e8:03:ae:89:5c:49:
                    a0:c7:64:92:5e:22:8e:3d:fe:13:f4:e6:0b:89:5e:
                    60:f3:7e:d9:27:94:c2:37:c2:04:a7:a6:bc:47:c1:
                    12:c9:c9:cb:8d:e1:f2:0c:cb:bb:0f:79:22:95:12:
                    ed:ce:44:83:b4:1c:47:1a:dc:33:8e:88:8e:d5:db:
                    82:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            2.5.29.1: 
                0;..\..k..5.nG ..s....0.1.0...U.....W.U.S.!......[...MNR...g.
    Signature Algorithm: sha1WithRSA
         34:5c:8c:64:ec:b5:bf:c3:b5:67:e2:a1:31:31:7b:79:fd:76:
         a3:50:a8:61:a4:fd:73:c6:b7:e2:8c:e5:11:42:14:4f:17:b6:
         8c:db:e1:9f:cf:b7:92:85:d7:31:70:5f:0d:b9:8e:72:45:ac:
         b8:9b:d8:ae:4d:cb:07:d9:d1:f5:64:a4:98:35:f1:cc:d0:03:
         19:8c:ba:32:01:3f:24:fd:e0:e2:e9:53:ed:6d:ea:5f:0f:e9:
         69:6b:c7:d2:a7:f5:3a:5a:74:fa:9e:5a:e1:64:48:f3:e3:fa:
         46:01:e0:34:aa:78:ab:60:82:fd:d9:09:01:5e:a1:79:a1:d1:
         aa:fd:b2:a0:3b:de:8b:45:34:2d:56:8e:14:d4:ce:02:c2:7c:
         a3:35:d6:f4:df:fc:2b:b0:5b:48:ea:37:0c:17:39:6b:f6:d6:
         5e:7c:45:7b:52:b7:04:4d:59:7b:e5:e8:bd:8d:49:84:e6:a3:
         b9:8c:8f:1c:36:cd:0a:3f:07:0c:9c:3f:28:f5:72:5c:c5:65:
         ef:98:83:4f:32:f2:24:49:6f:98:98:7f:a2:bc:be:a3:d0:88:
         67:d5:92:4a:4e:be:76:6c:9d:a4:07:fb:49:b8:b4:e3:80:dc:
         ec:a3:76:d3:4c:b1:95:21:f2:6e:0f:fc:fa:55:32:9c:cd:67:
         3c:23:fb:07
pkcs7-signedData
  • 1
    • SHA1: nil
    • 1.3.6.1.4.1.311.2.1.4
      • #0
        • 1.3.6.1.4.1.311.2.1.15
          • :
        • SHA1
          • 22 6a a1 b1 42 62 ed d9  d3 83 e8 3e 9f d9 5e 4c  |"j..Bb.....>..^L|
            5c 53 b4 57                                       |\S.W            |
    • #2
      • 2
        • -57719131853525794810908100208052901995
        • RSA-SHA1-2: nil
        • CN:
          00 57 00 55 00 53 00 21                           |.W.U.S.!        |
        • 2014-07-01 08:00:00 UTC: 2088-01-01 08:00:00 UTC
        • CN:
          00 57 00 55 00 53 00 21                           |.W.U.S.!        |
        • #5
          • rsaEncryption: nil
          • AB:57:00:AA:90:AA:DE:A5:2C:1E:92:B3:32:C3:74:33:
            28:60:41:7C:EB:98:76:89:53:97:F5:E0:F5:7D:14:83:
            D6:01:54:59:1B:F5:1F:DC:DC:A4:19:81:17:F8:74:18:
            14:EA:6C:94:03:CE:10:EA:F5:1D:37:9B:19:20:D4:CC:
            E3:E9:C6:8F:33:93:4A:85:E4:44:D0:D7:6D:C2:27:15:
            4D:3E:E3:CB:4B:84:0F:D7:D3:97:18:EE:28:E8:20:C1:
            51:D0:20:F2:E0:59:46:01:B3:C4:63:9A:E4:D3:83:FD:
            E0:65:86:A2:D6:12:3A:CA:35:9C:A0:CF:4A:D5:A8:29:
            DB:A3:8C:68:9B:AB:CA:52:A5:93:E9:72:A1:31:25:6A:
            03:93:C2:6D:2B:23:F7:78:07:C4:C5:15:52:D4:FA:61:
            17:5B:25:57:94:BF:5E:49:21:53:5E:F5:FB:BE:00:2D:
            09:7D:F2:1A:8D:93:54:8D:82:EA:75:9E:E8:03:AE:89:
            5C:49:A0:C7:64:92:5E:22:8E:3D:FE:13:F4:E6:0B:89:
            5E:60:F3:7E:D9:27:94:C2:37:C2:04:A7:A6:BC:47:C1:
            12:C9:C9:CB:8D:E1:F2:0C:CB:BB:0F:79:22:95:12:ED:
            CE:44:83:B4:1C:47:1A:DC:33:8E:88:8E:D5:DB:82:87
            : 0x010001
        • 2.5.29.1
          • 5c ac 04 6b ce fd 35 e2  6e 47 20 d0 fd 73 d7 cf  |\..k..5.nG ..s..|
            • CN:
              00 57 00 55 00 53 00 21                           |.W.U.S.!        |
            • d4 93 b3 16 5b fb 8f b8  4d 4e 52 be fa e4 67 95  |....[...MNR...g.|
      • RSA-SHA1-2:
        34 5c 8c 64 ec b5 bf c3  b5 67 e2 a1 31 31 7b 79  |4\.d.....g..11{y|
        fd 76 a3 50 a8 61 a4 fd  73 c6 b7 e2 8c e5 11 42  |.v.P.a..s......B|
        14 4f 17 b6 8c db e1 9f  cf b7 92 85 d7 31 70 5f  |.O...........1p_|
        0d b9 8e 72 45 ac b8 9b  d8 ae 4d cb 07 d9 d1 f5  |...rE.....M.....|
        64 a4 98 35 f1 cc d0 03  19 8c ba 32 01 3f 24 fd  |d..5.......2.?$.|
        e0 e2 e9 53 ed 6d ea 5f  0f e9 69 6b c7 d2 a7 f5  |...S.m._..ik....|
        3a 5a 74 fa 9e 5a e1 64  48 f3 e3 fa 46 01 e0 34  |:Zt..Z.dH...F..4|
        aa 78 ab 60 82 fd d9 09  01 5e a1 79 a1 d1 aa fd  |.x.`.....^.y....|
        b2 a0 3b de 8b 45 34 2d  56 8e 14 d4 ce 02 c2 7c  |..;..E4-V......||
        a3 35 d6 f4 df fc 2b b0  5b 48 ea 37 0c 17 39 6b  |.5....+.[H.7..9k|
        f6 d6 5e 7c 45 7b 52 b7  04 4d 59 7b e5 e8 bd 8d  |..^|E{R..MY{....|
        49 84 e6 a3 b9 8c 8f 1c  36 cd 0a 3f 07 0c 9c 3f  |I.......6..?...?|
        28 f5 72 5c c5 65 ef 98  83 4f 32 f2 24 49 6f 98  |(.r\.e...O2.$Io.|
        98 7f a2 bc be a3 d0 88  67 d5 92 4a 4e be 76 6c  |........g..JN.vl|
        9d a4 07 fb 49 b8 b4 e3  80 dc ec a3 76 d3 4c b1  |....I.......v.L.|
        95 21 f2 6e 0f fc fa 55  32 9c cd 67 3c 23 fb 07  |.!.n...U2..g<#..|
    • 1
      • #0
        • CN:
          00 57 00 55 00 53 00 21                           |.W.U.S.!        |
        • -57719131853525794810908100208052901995
      • SHA1: nil
      • #2
        • 1.3.6.1.4.1.311.2.1.12
          • nil
        • contentType: 1.3.6.1.4.1.311.2.1.4
        • messageDigest:
          05 c1 c5 77 d2 65 21 fc  7c 50 cf cd a8 6f 1d 60  |...w.e!.|P...o.`|
          a9 0d a1 e7                                       |....            |
      • rsaEncryption:
        64 96 f1 cf 8e 39 6e dd  1b 04 de 22 5c 5d a6 27  |d....9n...."\].'|
        8c 69 1b bc c2 a8 1f a6  75 0c 06 24 73 f3 e5 43  |.i......u..$s..C|
        f1 53 5a 86 ff fa a2 8f  d8 56 e9 86 2e e5 d2 1d  |.SZ......V......|
        30 b7 0f 7f f5 9f 9a ca  66 46 c1 b9 9e 04 d6 04  |0.......fF......|
        79 a2 57 5a 9a 40 b8 bf  39 24 15 10 1f 41 1e 1e  |y.WZ.@..9$...A..|
        1a 34 4c 99 36 73 f3 1b  75 9d 74 cb 2e f8 59 64  |.4L.6s..u.t...Yd|
        81 f3 05 9b 43 ac b3 92  d5 e1 33 8c e3 e3 db fc  |....C.....3.....|
        8e 06 ed 71 f5 5a 6f e6  20 a0 cb 4d a5 50 37 23  |...q.Zo. ..M.P7#|
        fa fe f6 05 f1 19 31 5a  9a a5 33 1b f8 34 1d 85  |......1Z..3..4..|
        61 06 57 dc 1f 6c c6 d9  42 c3 3c c2 1d a5 f4 ce  |a.W..l..B.<.....|
        04 c5 32 c4 75 9d b5 2a  48 1e 31 c6 7c 6f 27 bf  |..2.u..*H.1.|o'.|
        4c a7 e1 20 2d dd 99 e3  64 01 28 2a 17 20 1a d3  |L.. -...d.(*. ..|
        7a 23 69 2c e9 55 f6 44  46 08 ec 25 c0 47 61 1f  |z#i,.U.DF..%.Ga.|
        8f 37 1a 2f 60 bc 20 7f  92 64 58 35 9d 05 07 b2  |.7./`. ..dX5....|
        2d 92 63 39 00 89 4e 4e  9c bb b1 79 1c cb 24 50  |-.c9..NN...y..$P|
        c4 9d 1b 67 35 8f ff 6c  1d cd 62 0d 83 ca 45 28  |...g5..l..b...E(|
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

everything is OK