PetaCity.exe

info
MZ
PE
resources
imports
exports
foremost
version info
signature
hexdump
disasm
log
discuss
donate

filename	PetaCity.exe
size	2226928 (0x21faf0)
md5	82bb07be7bef7e198307001312b864b6

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x130

Rich Header

lib id	version	times used
11	8966	16
150	20413	5
149	30729	11
131	30729	21
147	30729	6
132	30729	6
0	0	2
93	4035	4
110	50727	1
123	50727	22
147	21022	3
1	0	445
96	3077	188
138	30729	333
146	30729	1
148	21022	1
145	30729	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	6
TimeDateStamp	0x52c4cf87
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x10f
Magic	0x10b
LinkerVersion	9.0
SizeOfCode	0x1ad200
SizeOfInitializedData	0xaa000
SizeOfUninitializedData	0
AddressOfEntryPoint	0x4ae000
BaseOfCode	0x1000
BaseOfData	0x1af000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	5.0
ImageVersion	0.0
SubsystemVersion	5.0
Reserved1	0
SizeOfImage	0x4af000
SizeOfHeaders	0x400
CheckSum	0x2292c3
Subsystem	2
DllCharacteristics	0x8000
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
	0x1000	0x231000	0xc6600	RWX IDATA
.rsrc	0x232000	0x5a13c	0x33000	RW- IDATA
.idata	0x28d000	0x1000	0x200	RW- IDATA
	0x28e000	0xfc000	0x200	RWX IDATA
utrxytpn	0x38a000	0x124000	0x123800	RWX IDATA
vdffsgjg	0x4ae000	0x1000	0x200	RWX IDATA

Data Directory

type	va	size
EXPORT	0x453b54	0x51
IMPORT	0x28d06d	0x95
RESOURCE	0x232000	0x5a13c
EXCEPTION	0	0
SECURITY	0x21e400	0x16f0
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
ICON	#1	1384	1252
ICON	#2	1384	1252
ICON	#3	2216	1252
ICON	#4	3240	1252
ICON	#5	3752	1252
ICON	#6	7336	1252
ICON	#7	5672	1252
ICON	#8	12840	1252
ICON	#9	50524	1252
ICON	#10	67624	1252
ICON	#11	16936	1252
ICON	#12	9640	1252
ICON	#13	4264	1252
ICON	#14	48600	1252
ICON	#15	51240	1252
ICON	#16	12840	1252
ICON	#17	7336	1252
ICON	#18	3240	1252
ICON	#19	24701	1252
ICON	#20	19496	1252
ICON	#21	5672	1252
ICON	#22	3752	1252
ICON	#23	2216	1252
GROUP_ICON	#128	118	1252
GROUP_ICON	#129	216	1252
VERSION	#1	692	1252
MANIFEST	#1	609	1252

module_name	hint	ord	function_name
kernel32.dll			lstrcpy
comctl32.dll			InitCommonControls

ord	entry_va	function_name
1	0x34280	SetMasterDatabase

module_name	PetaCity.exe
flags	0
timestamp	2014-01-02 02:30:42
version	0.0
ordinal_base	1
nFunctions	1
nNames	1
Names(1)	0x453b80
Functions(1)	0x453b7c
NameOrdinals(1)	0x453b84

VS_FIXEDFILEINFO

dwSignature	0xfeef04
FileVersion	0.256.2305.7168
ProductVersion	0.256.16129.7168
StrucVersion	0x9000100
FileFlagsMask	0
FileFlags	0x4000000
FileOS	0x1000000
FileType	0
FileSubtype	0

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=BE/O=GlobalSign nv-sa/CN=GlobalSign CodeSigning CA - G2

serial: 1121CD62D4BEF9D9068A3489210E7D4CC5C0

Certificates (4)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
        Validity
            Not Before: Dec 21 00:00:00 2012 GMT
            Not After : Dec 30 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:b3:49:54:4b:97:1c:12:0a:d8:25:79:91:
                    22:57:2a:6f:dc:b8:26:c4:43:73:6b:c2:bf:2e:50:
                    5a:fb:14:c2:76:8e:43:01:25:43:b4:a1:e2:45:f4:
                    e8:b7:7b:c3:74:cc:22:d7:b4:94:00:02:f7:4d:ed:
                    bf:b4:b7:44:24:6b:cd:5f:45:3b:d1:44:ce:43:12:
                    73:17:82:8b:69:b4:2b:cb:99:1e:ac:72:1b:26:4d:
                    71:1f:b1:31:dd:fb:51:61:02:53:a6:aa:f5:49:2c:
                    05:78:45:a5:2f:89:ce:e7:99:e7:fe:8c:e2:57:3f:
                    3d:c6:92:dc:4a:f8:7b:33:e4:79:0a:fb:f0:75:88:
                    41:9c:ff:c5:03:51:99:aa:d7:6c:9f:93:69:87:65:
                    29:83:85:c2:60:14:c4:c8:c9:3b:14:da:c0:81:f0:
                    1f:0d:74:de:92:22:ab:ca:f7:fb:74:7c:27:e6:f7:
                    4a:1b:7f:a7:c3:9e:2d:ae:8a:ea:a6:e6:aa:27:16:
                    7d:61:f7:98:71:11:bc:e2:50:a1:4b:e5:5d:fa:e5:
                    0e:a7:2c:9f:aa:65:20:d3:d8:96:e8:c8:7c:a5:4e:
                    48:44:ff:19:e2:44:07:92:0b:d7:68:84:80:5d:6a:
                    78:64:45:cd:60:46:7e:54:c1:13:7c:c5:79:f1:c9:
                    c1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD
            Authority Information Access: 
                OCSP - URI:http://ocsp.thawte.com

            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.thawte.com/ThawteTimestampingCA.crl

            X509v3 Extended Key Usage: 
                Time Stamping
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-1
    Signature Algorithm: sha1WithRSAEncryption
         03:09:9b:8f:79:ef:7f:59:30:aa:ef:68:b5:fa:e3:09:1d:bb:
         4f:82:06:5d:37:5f:a6:52:9f:16:8d:ea:1c:92:09:44:6e:f5:
         6d:eb:58:7c:30:e8:f9:69:8d:23:73:0b:12:6f:47:a9:ae:39:
         11:f8:2a:b1:9b:b0:1a:c3:8e:eb:59:96:00:ad:ce:0c:4d:b2:
         d0:31:a6:08:5c:2a:7a:fc:e2:7a:1d:57:4c:a8:65:18:e9:79:
         40:62:25:96:6e:c7:c7:37:6a:83:21:08:8e:41:ea:dd:d9:57:
         3f:1d:77:49:87:2a:16:06:5e:a6:38:6a:22:12:a3:51:19:83:
         7e:b6

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:00:00:00:00:01:2f:4e:e1:35:5c
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA
        Validity
            Not Before: Apr 13 10:00:00 2011 GMT
            Not After : Apr 13 10:00:00 2019 GMT
        Subject: C=BE, O=GlobalSign nv-sa, CN=GlobalSign CodeSigning CA - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4f:14:e7:10:be:d7:26:72:ab:36:97:ef:53:
                    bf:42:84:5e:58:d1:8a:28:fc:43:46:6f:7e:28:44:
                    50:0b:75:5d:00:d7:3c:0a:44:9e:20:6a:a4:f7:45:
                    4a:37:60:a3:6e:3f:12:fa:6d:fa:b6:46:c3:6a:a3:
                    b8:0c:27:28:02:57:28:d1:50:f7:61:39:55:b8:c3:
                    e1:25:86:52:3c:bf:05:1d:d7:b3:9a:f8:9a:24:31:
                    49:d5:a2:a9:e2:d3:91:ab:3e:3c:73:ef:f6:29:f1:
                    c8:35:d0:30:7b:7f:4e:92:a5:06:8f:87:e2:ce:f5:
                    c1:63:66:ac:18:69:2a:c1:5e:bb:5a:e8:6e:95:ff:
                    3b:80:62:9d:99:c7:c7:2f:66:d5:fd:62:1a:82:55:
                    5a:c6:fa:40:77:8e:c9:30:3c:1b:f0:f2:35:b8:6c:
                    59:9c:fd:e9:d6:ca:b4:40:1e:f7:04:ca:d1:67:a9:
                    74:e3:a5:08:54:d9:83:35:3b:8e:8c:23:0c:75:b6:
                    de:86:4a:9e:1a:3e:0a:50:49:38:9c:d2:a8:90:bf:
                    98:fa:c8:8c:2b:27:11:7e:2a:fb:ce:de:a9:ae:38:
                    93:22:fa:a6:ec:fb:5c:61:76:c3:44:d6:cc:0c:7e:
                    2f:6d:06:80:a2:74:40:bb:b7:1f:f4:3b:d7:73:54:
                    1f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Subject Key Identifier: 
                08:6E:D8:B6:9C:8A:BF:ED:3E:D7:C3:74:5D:CC:80:1F:A8:2F:50:7A
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: https://www.globalsign.com/repository/

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.globalsign.net/root.crl

            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 Authority Key Identifier: 
                keyid:60:7B:66:1A:45:0D:97:CA:89:50:2F:7D:04:CD:34:A8:FF:FC:FD:4B

    Signature Algorithm: sha1WithRSAEncryption
         22:5c:c5:dd:3d:f4:0b:70:d8:e3:f5:e7:c5:8e:09:01:bb:b1:
         96:36:5c:5a:07:ad:c7:a8:44:49:51:25:7a:ae:0d:a4:19:3b:
         92:9c:cf:b9:42:26:bb:3b:6c:97:e7:c7:ce:11:6d:68:91:da:
         8d:6d:f1:53:4d:54:38:8c:61:f3:c8:82:76:69:be:81:32:0b:
         31:c3:6c:c9:9e:20:0a:58:2f:f0:48:fe:7e:48:07:aa:d7:43:
         58:94:73:54:04:31:a9:78:0d:3b:8c:b0:70:c1:3d:7e:d7:bd:
         2f:2a:c3:e2:f5:8f:0c:90:dc:6b:a5:c8:be:68:5e:5d:6d:f8:
         78:d2:be:49:95:1e:15:78:08:91:fb:34:c8:be:84:ad:bc:e0:
         c6:dd:18:db:f3:ca:f0:7b:c2:14:3c:18:b8:03:ba:95:3e:21:
         1e:3f:60:69:7a:7f:6a:03:9e:8d:4a:f9:f0:28:2c:30:84:5e:
         ec:26:72:42:b1:6d:cb:64:c3:12:8c:d6:84:4b:67:41:7c:b1:
         03:17:78:09:e3:ad:a8:b6:96:2d:a4:7e:80:03:4f:88:f7:c1:
         6b:5a:46:15:cd:2c:19:8b:d8:70:9c:e5:2d:49:88:60:72:a8:
         a4:19:52:70:43:5e:da:d6:46:03:b0:68:0e:24:ef:4a:f6:0b:
         25:24:ef:24

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Validity
            Not Before: Oct 18 00:00:00 2012 GMT
            Not After : Dec 29 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer - G4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:63:0b:39:44:b8:bb:23:a7:44:49:bb:0e:ff:
                    a1:f0:61:0a:53:93:b0:98:db:ad:2c:0f:4a:c5:6e:
                    ff:86:3c:53:55:0f:15:ce:04:3f:2b:fd:a9:96:96:
                    d9:be:61:79:0b:5b:c9:4c:86:76:e5:e0:43:4b:22:
                    95:ee:c2:2b:43:c1:9f:d8:68:b4:8e:40:4f:ee:85:
                    38:b9:11:c5:23:f2:64:58:f0:15:32:6f:4e:57:a1:
                    ae:88:a4:02:d7:2a:1e:cd:4b:e1:dd:63:d5:17:89:
                    32:5b:b0:5e:99:5a:a8:9d:28:50:0e:17:ee:96:db:
                    61:3b:45:51:1d:cf:12:56:0b:92:47:fc:ab:ae:f6:
                    66:3d:47:ac:70:72:e7:92:e7:5f:cd:10:b9:c4:83:
                    64:94:19:bd:25:80:e1:e8:d2:22:a5:d0:ba:02:7a:
                    a1:77:93:5b:65:c3:ee:17:74:bc:41:86:2a:dc:08:
                    4c:8c:92:8c:91:2d:9e:77:44:1f:68:d6:a8:74:77:
                    db:0e:5b:32:8b:56:8b:33:bd:d9:63:c8:49:9d:3a:
                    c5:c5:ea:33:0b:d2:f1:a3:1b:f4:8b:be:d9:b3:57:
                    8b:3b:de:04:a7:7a:22:b2:24:ae:2e:c7:70:c5:be:
                    4e:83:26:08:fb:0b:bd:a9:4f:99:08:e1:10:28:72:
                    aa:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                OCSP - URI:http://ts-ocsp.ws.symantec.com
                CA Issuers - URI:http://ts-aia.ws.symantec.com/tss-ca-g2.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ts-crl.ws.symantec.com/tss-ca-g2.crl

            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-2
            X509v3 Subject Key Identifier: 
                46:C6:69:A3:0E:4A:14:1E:D5:4C:DA:52:63:17:3F:5E:36:BC:0D:E6
            X509v3 Authority Key Identifier: 
                keyid:5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD

    Signature Algorithm: sha1WithRSAEncryption
         78:3b:b4:91:2a:00:4c:f0:8f:62:30:37:78:a3:84:27:07:6f:
         18:b2:de:25:dc:a0:d4:94:03:aa:86:4e:25:9f:9a:40:03:1c:
         dd:ce:e3:79:cb:21:68:06:da:b6:32:b4:6d:bf:f4:2c:26:63:
         33:e4:49:64:6d:0d:e6:c3:67:0e:f7:05:a4:35:6c:7c:89:16:
         c6:e9:b2:df:b2:e9:dd:20:c6:71:0f:cd:95:74:dc:b6:5c:de:
         bd:37:1f:43:78:e6:78:b5:cd:28:04:20:a3:aa:f1:4b:c4:88:
         29:91:0e:80:d1:11:fc:dd:5c:76:6e:4f:5e:0e:45:46:41:6e:
         0d:b0:ea:38:9a:b1:3a:da:09:71:10:fc:1c:79:b4:80:7b:ac:
         69:f4:fd:9c:b6:0c:16:2b:f1:7f:5b:09:3d:9b:5b:e2:16:ca:
         13:81:6d:00:2e:38:0d:a8:29:8f:2c:e1:b2:f4:5a:a9:01:af:
         15:9c:2c:2f:49:1b:db:22:bb:c3:fe:78:94:51:c3:86:b1:82:
         88:5d:f0:3d:b4:51:a1:79:33:2b:2e:7b:b9:dc:20:09:13:71:
         eb:6a:19:5b:cf:e8:a5:30:57:2c:89:49:3f:b9:cf:7f:c9:bf:
         3e:22:68:63:53:9a:bd:69:74:ac:c5:1d:3c:7f:92:e0:c3:bc:
         1c:d8:04:75

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:21:cd:62:d4:be:f9:d9:06:8a:34:89:21:0e:7d:4c:c5:c0
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign CodeSigning CA - G2
        Validity
            Not Before: Nov 21 08:25:37 2013 GMT
            Not After : Nov 21 08:25:37 2016 GMT
        Subject: C=VN, ST=Hanoi, L=Hanoi, O=Cong ty Co phan Phat trien Dich vu Hoc tap & Giai tri Truc tuyen, OU=IT Department, CN=Cong ty Co phan Phat trien Dich vu Hoc tap & Giai tri Truc tuyen
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:da:5f:b6:9e:b2:11:7a:01:a6:29:47:e0:7e:
                    2f:bf:43:2d:4d:13:2a:b3:84:68:91:40:8c:bd:1d:
                    85:5e:3a:0a:1f:27:ea:10:1a:c3:06:89:46:ed:88:
                    6d:24:dd:81:94:f0:f0:86:a9:c0:07:95:71:dd:b0:
                    05:f8:6d:5a:71:ae:a5:8a:f4:05:bf:37:ea:01:3c:
                    f9:3e:0b:f5:ae:92:98:05:a4:d3:07:1e:c2:59:01:
                    15:4b:77:5b:f3:65:30:be:2c:1d:f3:d0:a8:e1:0a:
                    e6:4e:79:5f:9d:41:27:cc:5d:50:e8:5d:da:86:7e:
                    e9:46:47:d9:56:5a:05:2b:63:2c:6a:ca:ea:94:d2:
                    db:05:b1:fd:a6:90:e5:81:3e:55:d4:e4:0e:4f:96:
                    7e:bb:b6:61:c7:1b:fa:53:92:91:49:26:b6:1f:10:
                    95:18:16:3d:a5:74:f7:a8:61:13:c7:0e:2d:6d:0b:
                    be:18:fe:80:88:5c:da:49:a4:38:1e:3b:f9:86:5e:
                    2d:e9:30:3a:41:4e:99:36:a3:5c:de:e6:89:e0:a3:
                    ac:71:4a:7f:78:09:5c:9a:fa:7d:36:57:98:55:db:
                    8b:a7:90:39:fe:15:d5:14:c1:ae:03:28:ca:d8:ee:
                    cb:bf:d6:4e:f8:4b:2d:51:00:02:94:f6:bf:17:7f:
                    a8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.4146.1.50
                  CPS: https://www.globalsign.com/repository/

            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.globalsign.com/gs/gscodesigng2.crl

            Authority Information Access: 
                CA Issuers - URI:http://secure.globalsign.com/cacert/gscodesigng2.crt
                OCSP - URI:http://ocsp2.globalsign.com/gscodesigng2

            X509v3 Subject Key Identifier: 
                7D:43:1F:F6:6E:60:AF:FE:E1:DF:F3:B3:53:FF:B5:90:A7:BB:3F:88
            X509v3 Authority Key Identifier: 
                keyid:08:6E:D8:B6:9C:8A:BF:ED:3E:D7:C3:74:5D:CC:80:1F:A8:2F:50:7A

    Signature Algorithm: sha1WithRSAEncryption
         6a:50:07:cf:d9:da:e6:a6:23:5d:34:24:8b:ef:d4:e6:47:c7:
         34:9a:c0:91:99:eb:f0:2f:ef:33:00:da:ae:1d:9d:6f:34:33:
         43:15:74:da:75:e6:0a:e8:03:64:e3:70:f5:3f:5f:9a:95:ff:
         83:36:18:5c:a4:d9:00:c5:41:48:06:98:f9:9f:c3:e9:52:a6:
         ef:3c:fb:6f:db:11:e8:05:82:3a:25:d8:6b:bf:9e:aa:03:0c:
         20:c6:04:a4:8c:3d:cd:b9:8c:5f:55:da:a6:f8:51:4d:1e:ce:
         5d:92:49:52:4a:ff:79:8c:82:d9:19:f5:2e:a0:a4:aa:92:a5:
         47:84:89:e8:26:98:43:44:f1:20:f8:96:88:23:5b:1b:fb:6c:
         c7:20:be:dc:47:32:5f:fc:7d:5e:bd:5a:1c:21:4a:7b:2d:50:
         f0:e6:90:e2:34:dc:4f:aa:12:4a:60:3e:81:79:b1:17:74:65:
         4c:5b:41:78:2b:fe:e0:dc:c1:d5:be:91:b2:3d:2d:12:b5:13:
         39:b7:c1:37:36:7f:0f:59:d0:bf:49:4f:a9:f2:12:78:b7:74:
         9d:1e:66:38:f9:c3:99:49:f7:b9:9e:02:f5:bf:46:3a:1e:d5:
         df:8b:88:25:b9:4e:69:cd:3b:51:bb:e9:e0:51:51:3d:bb:df:
         52:4c:1e:89

pkcs7-signedData

MD5: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15

00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |

MD5

25 54 18 97 d2 9d fb d9 ea 8e ee 11 e6 a3 0f 35 |%T.............5|

Certificates
- Certificate #0
  - 2
    - 7E:93:EB:FB:7C:C6:4E:59:EA:4B:9A:77:D4:06:FC:3B
    - RSA-SHA1: nil
    - Issuer
      - C: ZA
      - ST: Western Cape
      - L: Durbanville
      - O: Thawte
      - OU: Thawte Certification
      - CN: Thawte Timestamping CA
    - 2012-12-21 00:00:00 UTC: 2020-12-30 23:59:59 UTC
    - Subject
      - C: US
      - O: Symantec Corporation
      - CN: Symantec Time Stamping Services CA - G2
    - #5
      - rsaEncryption: nil
      - B1:AC:B3:49:54:4B:97:1C:12:0A:D8:25:79:91:22:57:
        2A:6F:DC:B8:26:C4:43:73:6B:C2:BF:2E:50:5A:FB:14:
        C2:76:8E:43:01:25:43:B4:A1:E2:45:F4:E8:B7:7B:C3:
        74:CC:22:D7:B4:94:00:02:F7:4D:ED:BF:B4:B7:44:24:
        6B:CD:5F:45:3B:D1:44:CE:43:12:73:17:82:8B:69:B4:
        2B:CB:99:1E:AC:72:1B:26:4D:71:1F:B1:31:DD:FB:51:
        61:02:53:A6:AA:F5:49:2C:05:78:45:A5:2F:89:CE:E7:
        99:E7:FE:8C:E2:57:3F:3D:C6:92:DC:4A:F8:7B:33:E4:
        79:0A:FB:F0:75:88:41:9C:FF:C5:03:51:99:AA:D7:6C:
        9F:93:69:87:65:29:83:85:C2:60:14:C4:C8:C9:3B:14:
        DA:C0:81:F0:1F:0D:74:DE:92:22:AB:CA:F7:FB:74:7C:
        27:E6:F7:4A:1B:7F:A7:C3:9E:2D:AE:8A:EA:A6:E6:AA:
        27:16:7D:61:F7:98:71:11:BC:E2:50:A1:4B:E5:5D:FA:
        E5:0E:A7:2C:9F:AA:65:20:D3:D8:96:E8:C8:7C:A5:4E:
        48:44:FF:19:E2:44:07:92:0B:D7:68:84:80:5D:6A:78:
        64:45:CD:60:46:7E:54:C1:13:7C:C5:79:F1:C9:C1:71: 0x010001
    - #6
      - subjectKeyIdentifier:
        5f 9a f5 6e 5c cc cc 74 9a d4 dd 7d ef 3f db ec |_..n\..t...}.?..| 4c 80 2e dd |L... |
      - authorityInfoAccess
        OCSP: http://ocsp.thawte.com
      - basicConstraints
        true
        true: 0
      - crlDistributionPoints: http://crl.thawte.com/ThawteTimestampingCA.crl
      - extendedKeyUsage: timeStamping
      - keyUsage: true, 6
      - subjectAltName
        CN: TimeStamp-2048-1
  - RSA-SHA1:
```
03 09 9b 8f 79 ef 7f 59  30 aa ef 68 b5 fa e3 09  |....y..Y0..h....|
1d bb 4f 82 06 5d 37 5f  a6 52 9f 16 8d ea 1c 92  |..O..]7_.R......|
09 44 6e f5 6d eb 58 7c  30 e8 f9 69 8d 23 73 0b  |.Dn.m.X|0..i.#s.|
12 6f 47 a9 ae 39 11 f8  2a b1 9b b0 1a c3 8e eb  |.oG..9..*.......|
59 96 00 ad ce 0c 4d b2  d0 31 a6 08 5c 2a 7a fc  |Y.....M..1..\*z.|
e2 7a 1d 57 4c a8 65 18  e9 79 40 62 25 96 6e c7  |.z.WL.e..y@b%.n.|
c7 37 6a 83 21 08 8e 41  ea dd d9 57 3f 1d 77 49  |.7j.!..A...W?.wI|
87 2a 16 06 5e a6 38 6a  22 12 a3 51 19 83 7e b6  |.*..^.8j"..Q..~.|
```
- Certificate #1
  - 2
    - 04:00:00:00:00:01:2F:4E:E1:35:5C
    - RSA-SHA1: nil
    - Issuer
      - C: BE
      - O: GlobalSign nv-sa
      - OU: Root CA
      - CN: GlobalSign Root CA
    - 2011-04-13 10:00:00 UTC: 2019-04-13 10:00:00 UTC
    - Subject
      - C: BE
      - O: GlobalSign nv-sa
      - CN: GlobalSign CodeSigning CA - G2
    - #5
      - rsaEncryption: nil
      - B2:4F:14:E7:10:BE:D7:26:72:AB:36:97:EF:53:BF:42:
        84:5E:58:D1:8A:28:FC:43:46:6F:7E:28:44:50:0B:75:
        5D:00:D7:3C:0A:44:9E:20:6A:A4:F7:45:4A:37:60:A3:
        6E:3F:12:FA:6D:FA:B6:46:C3:6A:A3:B8:0C:27:28:02:
        57:28:D1:50:F7:61:39:55:B8:C3:E1:25:86:52:3C:BF:
        05:1D:D7:B3:9A:F8:9A:24:31:49:D5:A2:A9:E2:D3:91:
        AB:3E:3C:73:EF:F6:29:F1:C8:35:D0:30:7B:7F:4E:92:
        A5:06:8F:87:E2:CE:F5:C1:63:66:AC:18:69:2A:C1:5E:
        BB:5A:E8:6E:95:FF:3B:80:62:9D:99:C7:C7:2F:66:D5:
        FD:62:1A:82:55:5A:C6:FA:40:77:8E:C9:30:3C:1B:F0:
        F2:35:B8:6C:59:9C:FD:E9:D6:CA:B4:40:1E:F7:04:CA:
        D1:67:A9:74:E3:A5:08:54:D9:83:35:3B:8E:8C:23:0C:
        75:B6:DE:86:4A:9E:1A:3E:0A:50:49:38:9C:D2:A8:90:
        BF:98:FA:C8:8C:2B:27:11:7E:2A:FB:CE:DE:A9:AE:38:
        93:22:FA:A6:EC:FB:5C:61:76:C3:44:D6:CC:0C:7E:2F:
        6D:06:80:A2:74:40:BB:B7:1F:F4:3B:D7:73:54:1F:F3: 0x010001
    - #6
      - keyUsage: true, 6
      - basicConstraints
        true
        true: 0
      - subjectKeyIdentifier:
        08 6e d8 b6 9c 8a bf ed 3e d7 c3 74 5d cc 80 1f |.n......>..t]...| a8 2f 50 7a |./Pz |
      - certificatePolicies
        anyPolicy
        id-qt-cps: https://www.globalsign.com/repository/
      - crlDistributionPoints: http://crl.globalsign.net/root.crl
      - extendedKeyUsage: codeSigning
      - authorityKeyIdentifier:
        60 7b 66 1a 45 0d 97 ca 89 50 2f 7d 04 cd 34 a8 |`{f.E....P/}..4.| ff fc fd 4b |...K |
  - RSA-SHA1:
```
22 5c c5 dd 3d f4 0b 70  d8 e3 f5 e7 c5 8e 09 01  |"\..=..p........|
bb b1 96 36 5c 5a 07 ad  c7 a8 44 49 51 25 7a ae  |...6\Z....DIQ%z.|
0d a4 19 3b 92 9c cf b9  42 26 bb 3b 6c 97 e7 c7  |...;....B&.;l...|
ce 11 6d 68 91 da 8d 6d  f1 53 4d 54 38 8c 61 f3  |..mh...m.SMT8.a.|
c8 82 76 69 be 81 32 0b  31 c3 6c c9 9e 20 0a 58  |..vi..2.1.l.. .X|
2f f0 48 fe 7e 48 07 aa  d7 43 58 94 73 54 04 31  |/.H.~H...CX.sT.1|
a9 78 0d 3b 8c b0 70 c1  3d 7e d7 bd 2f 2a c3 e2  |.x.;..p.=~../*..|
f5 8f 0c 90 dc 6b a5 c8  be 68 5e 5d 6d f8 78 d2  |.....k...h^]m.x.|
be 49 95 1e 15 78 08 91  fb 34 c8 be 84 ad bc e0  |.I...x...4......|
c6 dd 18 db f3 ca f0 7b  c2 14 3c 18 b8 03 ba 95  |.......{..<.....|
3e 21 1e 3f 60 69 7a 7f  6a 03 9e 8d 4a f9 f0 28  |>!.?`iz.j...J..(|
2c 30 84 5e ec 26 72 42  b1 6d cb 64 c3 12 8c d6  |,0.^.&rB.m.d....|
84 4b 67 41 7c b1 03 17  78 09 e3 ad a8 b6 96 2d  |.KgA|...x......-|
a4 7e 80 03 4f 88 f7 c1  6b 5a 46 15 cd 2c 19 8b  |.~..O...kZF..,..|
d8 70 9c e5 2d 49 88 60  72 a8 a4 19 52 70 43 5e  |.p..-I.`r...RpC^|
da d6 46 03 b0 68 0e 24  ef 4a f6 0b 25 24 ef 24  |..F..h.$.J..%$.$|
```
- Certificate #2
  - 2
    - 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - O: Symantec Corporation
      - CN: Symantec Time Stamping Services CA - G2
    - 2012-10-18 00:00:00 UTC: 2020-12-29 23:59:59 UTC
    - Subject
      - C: US
      - O: Symantec Corporation
      - CN: Symantec Time Stamping Services Signer - G4
    - #5
      - rsaEncryption: nil
      - A2:63:0B:39:44:B8:BB:23:A7:44:49:BB:0E:FF:A1:F0:
        61:0A:53:93:B0:98:DB:AD:2C:0F:4A:C5:6E:FF:86:3C:
        53:55:0F:15:CE:04:3F:2B:FD:A9:96:96:D9:BE:61:79:
        0B:5B:C9:4C:86:76:E5:E0:43:4B:22:95:EE:C2:2B:43:
        C1:9F:D8:68:B4:8E:40:4F:EE:85:38:B9:11:C5:23:F2:
        64:58:F0:15:32:6F:4E:57:A1:AE:88:A4:02:D7:2A:1E:
        CD:4B:E1:DD:63:D5:17:89:32:5B:B0:5E:99:5A:A8:9D:
        28:50:0E:17:EE:96:DB:61:3B:45:51:1D:CF:12:56:0B:
        92:47:FC:AB:AE:F6:66:3D:47:AC:70:72:E7:92:E7:5F:
        CD:10:B9:C4:83:64:94:19:BD:25:80:E1:E8:D2:22:A5:
        D0:BA:02:7A:A1:77:93:5B:65:C3:EE:17:74:BC:41:86:
        2A:DC:08:4C:8C:92:8C:91:2D:9E:77:44:1F:68:D6:A8:
        74:77:DB:0E:5B:32:8B:56:8B:33:BD:D9:63:C8:49:9D:
        3A:C5:C5:EA:33:0B:D2:F1:A3:1B:F4:8B:BE:D9:B3:57:
        8B:3B:DE:04:A7:7A:22:B2:24:AE:2E:C7:70:C5:BE:4E:
        83:26:08:FB:0B:BD:A9:4F:99:08:E1:10:28:72:AA:CD: 0x010001
    - X509v3 extensions
      - basicConstraints
        true
        nil
      - extendedKeyUsage: true, timeStamping
      - keyUsage: true, 0x80
      - authorityInfoAccess
        #0
        OCSP: http://ts-ocsp.ws.symantec.com
        caIssuers: http://ts-aia.ws.symantec.com/tss-ca-g2.cer
      - crlDistributionPoints: http://ts-crl.ws.symantec.com/tss-ca-g2.crl
      - subjectAltName
        CN: TimeStamp-2048-2
      - subjectKeyIdentifier:
        46 c6 69 a3 0e 4a 14 1e d5 4c da 52 63 17 3f 5e |F.i..J...L.Rc.?^| 36 bc 0d e6 |6... |
      - authorityKeyIdentifier:
        5f 9a f5 6e 5c cc cc 74 9a d4 dd 7d ef 3f db ec |_..n\..t...}.?..| 4c 80 2e dd |L... |
  - RSA-SHA1:
```
78 3b b4 91 2a 00 4c f0  8f 62 30 37 78 a3 84 27  |x;..*.L..b07x..'|
07 6f 18 b2 de 25 dc a0  d4 94 03 aa 86 4e 25 9f  |.o...%.......N%.|
9a 40 03 1c dd ce e3 79  cb 21 68 06 da b6 32 b4  |.@.....y.!h...2.|
6d bf f4 2c 26 63 33 e4  49 64 6d 0d e6 c3 67 0e  |m..,&c3.Idm...g.|
f7 05 a4 35 6c 7c 89 16  c6 e9 b2 df b2 e9 dd 20  |...5l|......... |
c6 71 0f cd 95 74 dc b6  5c de bd 37 1f 43 78 e6  |.q...t..\..7.Cx.|
78 b5 cd 28 04 20 a3 aa  f1 4b c4 88 29 91 0e 80  |x..(. ...K..)...|
d1 11 fc dd 5c 76 6e 4f  5e 0e 45 46 41 6e 0d b0  |....\vnO^.EFAn..|
ea 38 9a b1 3a da 09 71  10 fc 1c 79 b4 80 7b ac  |.8..:..q...y..{.|
69 f4 fd 9c b6 0c 16 2b  f1 7f 5b 09 3d 9b 5b e2  |i......+..[.=.[.|
16 ca 13 81 6d 00 2e 38  0d a8 29 8f 2c e1 b2 f4  |....m..8..).,...|
5a a9 01 af 15 9c 2c 2f  49 1b db 22 bb c3 fe 78  |Z.....,/I.."...x|
94 51 c3 86 b1 82 88 5d  f0 3d b4 51 a1 79 33 2b  |.Q.....].=.Q.y3+|
2e 7b b9 dc 20 09 13 71  eb 6a 19 5b cf e8 a5 30  |.{.. ..q.j.[...0|
57 2c 89 49 3f b9 cf 7f  c9 bf 3e 22 68 63 53 9a  |W,.I?.....>"hcS.|
bd 69 74 ac c5 1d 3c 7f  92 e0 c3 bc 1c d8 04 75  |.it...<........u|
```
- Certificate #3
  - 2
    - 11:21:CD:62:D4:BE:F9:D9:06:8A:34:89:21:0E:7D:4C:
      C5:C0
    - RSA-SHA1: nil
    - Issuer
      - C: BE
      - O: GlobalSign nv-sa
      - CN: GlobalSign CodeSigning CA - G2
    - 2013-11-21 08:25:37 UTC: 2016-11-21 08:25:37 UTC
    - Subject
      - C: VN
      - ST: Hanoi
      - L: Hanoi
      - O: Cong ty Co phan Phat trien Dich vu Hoc tap & Giai tri Truc tuyen
      - OU: IT Department
      - CN: Cong ty Co phan Phat trien Dich vu Hoc tap & Giai tri Truc tuyen
    - #5
      - rsaEncryption: nil
      - AA:DA:5F:B6:9E:B2:11:7A:01:A6:29:47:E0:7E:2F:BF:
        43:2D:4D:13:2A:B3:84:68:91:40:8C:BD:1D:85:5E:3A:
        0A:1F:27:EA:10:1A:C3:06:89:46:ED:88:6D:24:DD:81:
        94:F0:F0:86:A9:C0:07:95:71:DD:B0:05:F8:6D:5A:71:
        AE:A5:8A:F4:05:BF:37:EA:01:3C:F9:3E:0B:F5:AE:92:
        98:05:A4:D3:07:1E:C2:59:01:15:4B:77:5B:F3:65:30:
        BE:2C:1D:F3:D0:A8:E1:0A:E6:4E:79:5F:9D:41:27:CC:
        5D:50:E8:5D:DA:86:7E:E9:46:47:D9:56:5A:05:2B:63:
        2C:6A:CA:EA:94:D2:DB:05:B1:FD:A6:90:E5:81:3E:55:
        D4:E4:0E:4F:96:7E:BB:B6:61:C7:1B:FA:53:92:91:49:
        26:B6:1F:10:95:18:16:3D:A5:74:F7:A8:61:13:C7:0E:
        2D:6D:0B:BE:18:FE:80:88:5C:DA:49:A4:38:1E:3B:F9:
        86:5E:2D:E9:30:3A:41:4E:99:36:A3:5C:DE:E6:89:E0:
        A3:AC:71:4A:7F:78:09:5C:9A:FA:7D:36:57:98:55:DB:
        8B:A7:90:39:FE:15:D5:14:C1:AE:03:28:CA:D8:EE:CB:
        BF:D6:4E:F8:4B:2D:51:00:02:94:F6:BF:17:7F:A8:EF: 0x010001
    - #6
      - keyUsage: true, 0x80
      - certificatePolicies
        1.3.6.1.4.1.4146.1.50
        id-qt-cps: https://www.globalsign.com/repository/
      - basicConstraints
        nil
      - extendedKeyUsage: codeSigning
      - crlDistributionPoints: http://crl.globalsign.com/gs/gscodesigng2.crl
      - authorityInfoAccess
        #0
        caIssuers: http://secure.globalsign.com/cacert/gscodesigng2.crt
        OCSP: http://ocsp2.globalsign.com/gscodesigng2
      - subjectKeyIdentifier:
        7d 43 1f f6 6e 60 af fe e1 df f3 b3 53 ff b5 90 |}C..n`......S...| a7 bb 3f 88 |..?. |
      - authorityKeyIdentifier:
        08 6e d8 b6 9c 8a bf ed 3e d7 c3 74 5d cc 80 1f |.n......>..t]...| a8 2f 50 7a |./Pz |
  - RSA-SHA1:
```
6a 50 07 cf d9 da e6 a6  23 5d 34 24 8b ef d4 e6  |jP......#]4$....|
47 c7 34 9a c0 91 99 eb  f0 2f ef 33 00 da ae 1d  |G.4....../.3....|
9d 6f 34 33 43 15 74 da  75 e6 0a e8 03 64 e3 70  |.o43C.t.u....d.p|
f5 3f 5f 9a 95 ff 83 36  18 5c a4 d9 00 c5 41 48  |.?_....6.\....AH|
06 98 f9 9f c3 e9 52 a6  ef 3c fb 6f db 11 e8 05  |......R..<.o....|
82 3a 25 d8 6b bf 9e aa  03 0c 20 c6 04 a4 8c 3d  |.:%.k..... ....=|
cd b9 8c 5f 55 da a6 f8  51 4d 1e ce 5d 92 49 52  |..._U...QM..].IR|
4a ff 79 8c 82 d9 19 f5  2e a0 a4 aa 92 a5 47 84  |J.y...........G.|
89 e8 26 98 43 44 f1 20  f8 96 88 23 5b 1b fb 6c  |..&.CD. ...#[..l|
c7 20 be dc 47 32 5f fc  7d 5e bd 5a 1c 21 4a 7b  |. ..G2_.}^.Z.!J{|
2d 50 f0 e6 90 e2 34 dc  4f aa 12 4a 60 3e 81 79  |-P....4.O..J`>.y|
b1 17 74 65 4c 5b 41 78  2b fe e0 dc c1 d5 be 91  |..teL[Ax+.......|
b2 3d 2d 12 b5 13 39 b7  c1 37 36 7f 0f 59 d0 bf  |.=-...9..76..Y..|
49 4f a9 f2 12 78 b7 74  9d 1e 66 38 f9 c3 99 49  |IO...x.t..f8...I|
f7 b9 9e 02 f5 bf 46 3a  1e d5 df 8b 88 25 b9 4e  |......F:.....%.N|
69 cd 3b 51 bb e9 e0 51  51 3d bb df 52 4c 1e 89  |i.;Q...QQ=..RL..|
```

Signer

1
unnamed
- #0
  - C: BE
  - O: GlobalSign nv-sa
  - CN: GlobalSign CodeSigning CA - G2
- 11:21:CD:62:D4:BE:F9:D9:06:8A:34:89:21:0E:7D:4C:
  C5:C0
MD5: nil

contentType: 1.3.6.1.4.1.311.2.1.4
1.3.6.1.4.1.311.2.1.11: msCodeInd

messageDigest:

aa 52 6a a8 a4 c9 06 a3  c0 1a 5c ab 96 a6 16 dd  |.Rj.......\.....|

1.3.6.1.4.1.311.2.1.12

00 4e 00 65 00 74 00 32 00 65 |.N.e.t.2.e |
: http://peta.ongame.vn

rsaEncryption:

2a cc 1d af 15 f2 41 70  18 a6 cc 24 81 e1 4a e0  |*.....Ap...$..J.|
a6 c3 fd 5c d6 69 06 71  43 85 b7 ab c4 5a ea fb  |...\.i.qC....Z..|
73 16 09 c9 b7 c7 57 7f  73 0e ad 54 b6 63 72 2d  |s.....W.s..T.cr-|
28 12 53 e6 38 ed 32 2a  6d df d3 83 8c 73 e7 5e  |(.S.8.2*m....s.^|
9a 90 fa 63 07 33 22 ba  6c b8 67 98 73 0a c3 34  |...c.3".l.g.s..4|
65 cf e2 c6 88 ee 65 a0  42 04 59 fe 69 4a ee 77  |e.....e.B.Y.iJ.w|
bf a3 ac d1 73 85 29 71  ae ce 44 0e 62 fa 12 d9  |....s.)q..D.b...|
16 af 8d 42 c3 26 0a 2c  83 e9 69 b7 3b 04 71 f1  |...B.&.,..i.;.q.|
ef 90 5c b8 48 c0 91 f7  ee f9 01 af a4 01 f1 95  |..\.H...........|
2b 80 19 7b 21 76 40 a1  04 24 f0 24 aa 4f 89 e4  |+..{!v@..$.$.O..|
7e 22 0c cf 77 7b ac f2  ac 00 c1 68 c4 50 11 41  |~"..w{.....h.P.A|
f5 f6 07 4d 43 bb 02 a5  df 3b 1d 02 ab 83 9f 9f  |...MC....;......|
da cc ad 82 77 dc b2 ae  91 f0 1b ab 18 46 b9 57  |....w........F.W|
68 87 2a 56 6f 13 56 88  3c 6b 76 5b 3b fd 76 15  |h.*Vo.V.countersignature1unnamed#0C: US
O: Symantec Corporation
CN: Symantec Time Stamping Services CA - G2
0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
SHA1: nil
#2contentType: pkcs7-data
signingTime: 2014-01-02 02:34:47 UTC
messageDigest: e7 d0 db de 1d 36 81 06  19 e8 9b 23 17 23 3e 1e  |.....6.....#.#>.|
bb cc f4 49                                       |...I            |
rsaEncryption: 40 8b 1d c6 a6 55 e7 91  91 44 86 02 5d 41 05 18  |@....U...D..]A..|
e6 7f 08 bc 19 30 5d 6f  90 4d b1 37 8d 95 04 92  |.....0]o.M.7....|
21 28 aa b9 ce 40 28 06  60 09 df fb 4f 97 b8 20  |!(...@(.`...O.. |
c2 ef 74 8c 77 d0 82 90  50 a0 dc 80 5b 94 68 41  |..t.w...P...[.hA|
49 33 1f 41 45 f4 5b 30  db ad d0 24 cc 80 c2 a3  |I3.AE.[0...$....|
0f ad 0a 0a bc e7 b8 7b  0b 4d 1b e4 33 91 2b c8  |.......{.M..3.+.|
32 52 c6 95 6e e3 af 21  e6 db dc 8b 28 68 97 b4  |2R..n..!....(h..|
ca 28 e4 bf 9d f2 e9 0f  76 ec 9d ee 3e f6 52 b9  |.(......v...>.R.|
75 c7 17 d9 51 da 41 fd  37 0b d2 d4 8d 7c 36 62  |u...Q.A.7....|6b|
12 57 07 c9 7e b7 8d 43  49 79 d0 43 5b d6 84 a6  |.W..~..CIy.C[...|
9a 1c a4 c5 5a 47 28 53  72 81 ba 46 6f a7 e6 b7  |....ZG(Sr..Fo...|
03 f4 65 7f f1 21 21 3f  d9 a6 c4 6e 44 eb 9a 5a  |..e..!!?...nD..Z|
45 bf 0f a4 05 16 c0 cb  ce 54 ad ed a4 46 b0 bf  |E........T...F..|
d3 7e 8c f0 6e 6c d7 fd  7d 97 4b e6 39 55 b2 4e  |.~..nl..}.K.9U.N|
4b 16 2b c4 53 38 30 50  21 59 93 05 c2 8b 5e 20  |K.+.S80P!Y....^ |
c8 6c 9f ed 67 e7 5c 18  12 3b e0 8c f5 e2 06 1d  |.l..g.\..;......|

show previews

offset	size	type	comment
0	2221056	EXE	01/02/2014 02:31:35	#
15c1	15	HTM		#
1cd968	50524	PNG	(256 x 256)	#
1f1f64	48600	PNG	(256 x 256)	#
2100dc	24701	PNG	(256 x 256)	#
21e400	5872	PKCS7	Authenticode Signature	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] ignoring invalid PEdump::BITMAPINFOHEADER

[?] invalid VS_VERSIONINFO child type "\x00t\x00r\x00i"