MZ Header

Rich Header

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 041904b0

VS_FIXEDFILEINFO

Signers (1)

issuer: /C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./OU=http://certs.godaddy.com/repository//CN=Go Daddy Secure Certificate Authority - G2
serial: 4B1C92C0508AAE

Certificates (1)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21142039870605998 (0x4b1c92c0508aae)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., OU=http://certs.godaddy.com/repository/, CN=Go Daddy Secure Certificate Authority - G2
        Validity
            Not Before: Oct  6 14:44:29 2014 GMT
            Not After : Oct  6 14:44:29 2015 GMT
        Subject: C=DE, ST=Berlin, L=Berlin, O=Shareware.de SWV GmbH, CN=Shareware.de SWV GmbH
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b9:eb:60:ec:3e:7c:69:a2:4b:cb:31:c8:57:
                    9e:d4:5d:8a:65:dc:b7:e8:22:1e:65:8a:e7:d3:a9:
                    bf:c6:be:92:62:7a:ff:85:e8:dd:f4:5e:57:34:b7:
                    a7:f9:ad:a4:19:49:df:de:2f:88:24:c5:b0:8d:0c:
                    ee:8e:72:06:63:d9:14:8d:40:d5:c3:8f:98:d0:a5:
                    a8:f1:a7:1c:47:be:68:9a:33:76:a0:6c:b4:79:5f:
                    77:bb:bd:21:0c:c9:fa:d0:42:d9:06:57:ce:5d:33:
                    63:57:2d:59:ef:3d:a8:8f:fb:41:35:7f:c3:61:1c:
                    22:bb:13:69:40:02:b3:db:48:d5:cd:ba:a2:09:6e:
                    5a:2d:3a:e5:76:12:a4:cd:57:f5:fa:ae:55:2b:f5:
                    38:a3:af:89:30:90:c3:70:40:b0:8d:b2:f5:5f:e1:
                    c6:8d:44:8c:46:90:17:20:f4:b2:b9:8c:30:89:a3:
                    aa:ed:c2:31:2d:b3:41:7a:5c:d7:c6:fe:c8:c6:1f:
                    d8:5a:51:73:af:44:50:f0:03:30:48:4f:c5:a4:a2:
                    43:96:56:67:8c:34:de:30:62:8b:35:26:b4:0f:af:
                    8b:1f:5a:5c:32:fb:62:f1:6c:c5:ef:fa:8a:d2:ae:
                    a9:09:92:4e:07:02:12:c9:b6:84:99:21:38:58:6c:
                    19:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.godaddy.com/gdig2s5-0.crl

            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.114413.1.7.23.2
                  CPS: http://certificates.godaddy.com/repository/

            Authority Information Access: 
                OCSP - URI:http://ocsp.godaddy.com/
                CA Issuers - URI:http://certificates.godaddy.com/repository/gdig2.crt

            X509v3 Authority Key Identifier: 
                keyid:40:C2:BD:27:8E:CC:34:83:30:A2:33:D7:FB:6C:B3:F0:B4:2C:80:CE

            X509v3 Subject Key Identifier: 
                08:38:62:13:10:CD:DA:34:9B:ED:B8:63:3B:40:61:30:D9:DF:07:5B
    Signature Algorithm: sha256WithRSAEncryption
         04:2e:bb:fc:bc:50:4b:1e:7f:b6:a2:ff:aa:0b:af:4b:4f:0e:
         46:1d:a5:b1:57:ad:65:0d:31:d8:9c:9c:96:2f:69:3b:52:34:
         43:d1:87:2e:5e:e0:8d:ea:3d:09:b0:af:ae:cc:22:b9:66:97:
         04:37:4d:9c:e4:4f:86:76:a7:e6:d0:35:35:b3:6b:dc:07:fb:
         7a:e6:35:b1:fb:63:b1:16:8c:b6:42:c8:65:94:d5:6f:42:1c:
         20:f7:95:97:e1:18:a2:a4:36:7b:1d:26:06:f1:08:6a:aa:88:
         d6:01:77:bc:b1:94:45:0c:9c:f1:ef:9d:29:94:72:57:56:f6:
         25:46:8d:c9:59:56:88:78:d9:bb:aa:cd:ab:4f:42:41:5d:6b:
         4a:74:1b:9a:f4:23:f1:d2:65:18:51:0b:9b:8a:8d:fb:9a:f1:
         20:fd:07:26:c9:cb:44:9a:2c:a5:49:5f:65:de:c4:d6:cd:b9:
         ec:b8:ec:54:d0:15:b2:34:05:87:78:ae:9d:75:27:81:a1:55:
         bd:59:2e:bd:6f:15:c0:67:97:99:13:23:5b:3b:84:51:be:de:
         be:a0:f9:e0:6f:d4:b6:46:bd:ed:fc:28:fa:09:85:b6:01:96:
         94:0d:19:e9:4e:4a:fd:77:89:3b:86:1b:12:19:38:ce:62:c8:
         55:04:03:96
pkcs7-signedData
  • 1
    • SHA1: nil
    • 1.3.6.1.4.1.311.2.1.4
      • #0
        • 1.3.6.1.4.1.311.2.1.15
          • :
            00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
            00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |
        • SHA1
          • 16 32 00 93 b2 aa 6d ac  fc d7 17 b8 87 cd 93 66  |.2....m........f|
            86 90 8a ac                                       |....            |
    • Certificate #2
      • 2
        • 4B:1C:92:C0:50:8A:AE
        • RSA-SHA256: nil
        • Issuer
          • C: US
          • ST: Arizona
          • L: Scottsdale
          • O: GoDaddy.com, Inc.
          • OU: http://certs.godaddy.com/repository/
          • CN: Go Daddy Secure Certificate Authority - G2
        • 2014-10-06 14:44:29 UTC: 2015-10-06 14:44:29 UTC
        • Subject
          • C: DE
          • ST: Berlin
          • L: Berlin
          • O: Shareware.de SWV GmbH
          • CN: Shareware.de SWV GmbH
        • #5
          • rsaEncryption: nil
          • D2:B9:EB:60:EC:3E:7C:69:A2:4B:CB:31:C8:57:9E:D4:
            5D:8A:65:DC:B7:E8:22:1E:65:8A:E7:D3:A9:BF:C6:BE:
            92:62:7A:FF:85:E8:DD:F4:5E:57:34:B7:A7:F9:AD:A4:
            19:49:DF:DE:2F:88:24:C5:B0:8D:0C:EE:8E:72:06:63:
            D9:14:8D:40:D5:C3:8F:98:D0:A5:A8:F1:A7:1C:47:BE:
            68:9A:33:76:A0:6C:B4:79:5F:77:BB:BD:21:0C:C9:FA:
            D0:42:D9:06:57:CE:5D:33:63:57:2D:59:EF:3D:A8:8F:
            FB:41:35:7F:C3:61:1C:22:BB:13:69:40:02:B3:DB:48:
            D5:CD:BA:A2:09:6E:5A:2D:3A:E5:76:12:A4:CD:57:F5:
            FA:AE:55:2B:F5:38:A3:AF:89:30:90:C3:70:40:B0:8D:
            B2:F5:5F:E1:C6:8D:44:8C:46:90:17:20:F4:B2:B9:8C:
            30:89:A3:AA:ED:C2:31:2D:B3:41:7A:5C:D7:C6:FE:C8:
            C6:1F:D8:5A:51:73:AF:44:50:F0:03:30:48:4F:C5:A4:
            A2:43:96:56:67:8C:34:DE:30:62:8B:35:26:B4:0F:AF:
            8B:1F:5A:5C:32:FB:62:F1:6C:C5:EF:FA:8A:D2:AE:A9:
            09:92:4E:07:02:12:C9:B6:84:99:21:38:58:6C:19:89
            : 0x010001
        • X509v3 extensions
          • basicConstraints
            • true
            • nil
          • extendedKeyUsage: codeSigning
          • keyUsage: true, 0x80
          • crlDistributionPoints: http://crl.godaddy.com/gdig2s5-0.crl
          • certificatePolicies
            • 2.16.840.1.114413.1.7.23.2
              • id-qt-cps: http://certificates.godaddy.com/repository/
          • authorityInfoAccess
            • #0
              • OCSP: http://ocsp.godaddy.com/
              • caIssuers: http://certificates.godaddy.com/repository/gdig2.crt
          • authorityKeyIdentifier:
            40 c2 bd 27 8e cc 34 83  30 a2 33 d7 fb 6c b3 f0  |@..'..4.0.3..l..|
            b4 2c 80 ce                                       |.,..            |
          • subjectKeyIdentifier:
            08 38 62 13 10 cd da 34  9b ed b8 63 3b 40 61 30  |.8b....4...c;@a0|
            d9 df 07 5b                                       |...[            |
      • RSA-SHA256:
        04 2e bb fc bc 50 4b 1e  7f b6 a2 ff aa 0b af 4b  |.....PK........K|
        4f 0e 46 1d a5 b1 57 ad  65 0d 31 d8 9c 9c 96 2f  |O.F...W.e.1..../|
        69 3b 52 34 43 d1 87 2e  5e e0 8d ea 3d 09 b0 af  |i;R4C...^...=...|
        ae cc 22 b9 66 97 04 37  4d 9c e4 4f 86 76 a7 e6  |..".f..7M..O.v..|
        d0 35 35 b3 6b dc 07 fb  7a e6 35 b1 fb 63 b1 16  |.55.k...z.5..c..|
        8c b6 42 c8 65 94 d5 6f  42 1c 20 f7 95 97 e1 18  |..B.e..oB. .....|
        a2 a4 36 7b 1d 26 06 f1  08 6a aa 88 d6 01 77 bc  |..6{.&...j....w.|
        b1 94 45 0c 9c f1 ef 9d  29 94 72 57 56 f6 25 46  |..E.....).rWV.%F|
        8d c9 59 56 88 78 d9 bb  aa cd ab 4f 42 41 5d 6b  |..YV.x.....OBA]k|
        4a 74 1b 9a f4 23 f1 d2  65 18 51 0b 9b 8a 8d fb  |Jt...#..e.Q.....|
        9a f1 20 fd 07 26 c9 cb  44 9a 2c a5 49 5f 65 de  |.. ..&..D.,.I_e.|
        c4 d6 cd b9 ec b8 ec 54  d0 15 b2 34 05 87 78 ae  |.......T...4..x.|
        9d 75 27 81 a1 55 bd 59  2e bd 6f 15 c0 67 97 99  |.u'..U.Y..o..g..|
        13 23 5b 3b 84 51 be de  be a0 f9 e0 6f d4 b6 46  |.#[;.Q......o..F|
        bd ed fc 28 fa 09 85 b6  01 96 94 0d 19 e9 4e 4a  |...(..........NJ|
        fd 77 89 3b 86 1b 12 19  38 ce 62 c8 55 04 03 96  |.w.;....8.b.U...|
    • 1
      • unnamed
        • #0
          • C: US
          • ST: Arizona
          • L: Scottsdale
          • O: GoDaddy.com, Inc.
          • OU: http://certs.godaddy.com/repository/
          • CN: Go Daddy Secure Certificate Authority - G2
        • 4B:1C:92:C0:50:8A:AE
      • SHA1: nil
      • #2
        • contentType: 1.3.6.1.4.1.311.2.1.4
        • signingTime: 2014-10-12 16:21:15 UTC
        • 1.3.6.1.4.1.311.2.1.11: msCodeCom
        • messageDigest:
          5e d6 79 6f 00 ef d1 d0  c3 a6 c6 02 9d 15 a8 c0  |^.yo............|
          75 01 40 12                                       |u.@.            |
      • rsaEncryption:
        53 c1 ce 02 75 a3 50 7a  11 58 15 c4 07 1f 69 1d  |S...u.Pz.X....i.|
        da 36 0d d9 06 40 63 81  e1 c4 44 09 7b db c6 d0  |.6...@c...D.{...|
        21 7d 7b 4c 76 1f df 6e  53 4b 87 3a 83 d4 d9 4c  |!}{Lv..nSK.:...L|
        2d 2e ff a0 bb 43 b7 7e  d3 1a fc e1 a5 9b 31 99  |-....C.~......1.|
        34 0f 96 ef eb 42 f8 32  6c ef f8 2d 73 2a 07 7d  |4....B.2l..-s*.}|
        8c 2b 68 55 7c 73 b7 f8  49 88 d5 40 4c a7 75 9d  |.+hU|s..I..@L.u.|
        e7 65 d9 ce e3 92 09 05  34 9c da 9d 54 85 22 e6  |.e......4...T.".|
        c2 29 ad b4 ef a1 0b 5e  6c 70 c6 a0 d9 77 c6 c5  |.).....^lp...w..|
        e1 87 08 21 b1 a5 b8 14  eb 65 17 5a 35 20 06 ba  |...!.....e.Z5 ..|
        f4 80 88 f1 fd 96 33 4c  33 87 30 c0 63 27 18 3c  |......3L3.0.c'.<|
        37 57 45 54 fc be 71 fd  a0 11 f3 37 66 e8 05 9e  |7WET..q....7f...|
        c2 e3 1f fa 2d 7c eb c9  a5 4d 55 89 a3 fa d8 03  |....-|...MU.....|
        35 bb 21 bd f3 72 0e 7a  b2 74 e9 ba 64 10 eb 0f  |5.!..r.z.t..d...|
        f4 8b a1 ef b7 30 4f 85  1d 6e cf 56 b9 0b 20 0a  |.....0O..n.V.. .|
        60 dc 9d bd 86 0d 53 f6  81 06 04 93 12 21 20 f0  |`.....S......! .|
        3b 5e 6b 7f 2e 38 34 90  29 64 ea da f9 ab d5 83  |;^k..84.)d......|
offsetsizetypecomment
0587776EXE10/07/2014 12:44:42#
15c115HTM#
602e060500PNG(256 x 256)#
8f8002912BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

[?] ignoring invalid PEdump::BITMAPINFOHEADER