MZ Header

Rich Header

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 040904b0

VS_FIXEDFILEINFO

Signers (1)

issuer: /C=US/ST=Washington/L=Redmond/O=Microsoft Corporation/CN=Microsoft Windows Third Party Component CA 2012
serial: 6103186B000000000005

Certificates (2)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:03:18:6b:00:00:00:00:00:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Windows Third Party Component CA 2012
        Validity
            Not Before: May 14 21:48:47 2012 GMT
            Not After : Aug 14 21:58:47 2013 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=AOC, CN=Microsoft Windows 3rd party Component
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ef:37:d2:a6:87:50:f0:2d:67:60:1c:a6:50:49:
                    69:86:33:10:8e:f2:33:8e:cd:b8:d6:bc:ca:5e:9f:
                    a0:c8:1f:b4:2a:c9:15:c8:b5:b3:29:2b:98:93:8f:
                    0d:7a:7d:40:0c:50:5a:83:c6:53:a0:ac:98:51:89:
                    03:51:5d:a2:52:cc:7a:6b:1c:06:ba:1e:dc:5f:c2:
                    8c:5e:59:74:82:3e:f0:2d:94:75:2c:a1:ae:5f:41:
                    2f:91:ee:bb:e6:17:ac:0b:55:6d:44:17:a3:ea:5e:
                    37:9c:84:e2:00:cf:ca:64:46:01:12:5e:71:4a:18:
                    ce:b1:d6:76:88:51:31:dd:72:51:3d:4b:5d:2b:8a:
                    8e:4a:70:39:5f:5a:c0:b6:80:bb:e1:0a:b5:f9:9e:
                    82:a0:16:db:ba:90:9e:34:82:4b:c5:53:60:ab:32:
                    c2:62:2c:59:6d:45:74:c7:fe:2d:68:d0:78:5e:d4:
                    7a:3b:09:45:8d:51:b2:26:1f:59:0a:f6:ad:b8:e7:
                    22:3e:72:59:47:e1:f9:6e:a2:9f:70:7e:d3:bb:20:
                    39:b4:de:d9:47:9c:1f:01:8f:16:64:93:10:fd:ac:
                    b3:1a:a1:59:0e:c9:45:91:f8:71:aa:42:15:8e:63:
                    a7:9e:35:eb:22:b0:b9:1f:91:01:12:a6:f2:59:a5:
                    86:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 Subject Key Identifier: 
                DA:84:E0:D5:4D:7D:A5:8E:FB:FE:7B:E9:6D:8B:86:4C:E9:B2:71:2C
            X509v3 Authority Key Identifier: 
                keyid:61:71:A7:87:AF:FF:69:D5:21:76:4F:52:93:28:00:BE:79:12:AB:84

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://www.microsoft.com/pkiops/crl/Microsoft%20Windows%20Third%20Party%20Component%20CA%202012.crl

            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pkiops/certs/Microsoft%20Windows%20Third%20Party%20Component%20CA%202012.crt

            X509v3 Basic Constraints: critical
                CA:FALSE
    Signature Algorithm: sha256WithRSAEncryption
         49:34:ea:48:2d:87:ee:69:62:5f:d8:72:a3:3f:10:fe:cd:32:
         ff:73:1b:82:f2:8c:a6:cf:d3:1b:0d:19:75:2e:40:3a:92:cd:
         0c:97:20:ea:1d:98:08:f7:2f:56:a4:c9:0f:0f:08:73:c4:8a:
         84:d0:3c:b8:00:cf:4f:16:55:c9:5f:c9:80:ca:a0:45:ef:73:
         bd:b1:4c:4d:ee:2c:cc:a5:78:20:72:2c:f8:0a:4f:c5:21:10:
         ab:89:a1:6e:ea:b9:03:46:96:99:c8:41:5e:0f:0b:92:8f:05:
         c4:48:2e:1a:b7:5d:db:fd:da:26:35:3d:bc:d8:15:bb:33:04:
         ca:61:0e:6a:1e:76:29:a4:9f:6b:93:d0:89:67:fc:10:ac:87:
         d6:06:71:55:5c:43:09:4a:62:c0:b4:49:fa:99:88:b6:60:5f:
         b4:76:4a:ca:7f:01:c8:23:bc:79:c0:ce:b6:53:d2:ae:6b:7a:
         0c:d8:ed:41:ad:61:59:7c:4c:4b:bd:20:c0:69:8e:27:15:3a:
         19:b5:da:7e:11:81:53:46:c8:c5:78:aa:ea:dd:8d:f5:19:18:
         ed:f2:cd:64:c7:3c:5b:33:9e:9f:69:7f:02:61:d9:54:86:73:
         5a:28:22:eb:76:ba:e0:ee:1f:ef:c3:33:20:03:67:e9:a8:86:
         1f:46:72:e8

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:0b:aa:c1:00:00:00:00:00:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2010
        Validity
            Not Before: Apr 18 23:48:38 2012 GMT
            Not After : Apr 18 23:58:38 2027 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Windows Third Party Component CA 2012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a3:9c:30:84:09:a7:63:2e:cf:0a:47:f0:ea:24:
                    f9:a3:30:20:0f:5e:57:31:26:81:9a:31:07:b2:50:
                    d4:ce:67:09:08:65:0a:5a:a5:4b:ae:d5:ed:10:2e:
                    e7:a5:99:b5:9f:68:2f:98:8b:58:02:ac:20:b4:29:
                    c4:71:bd:28:1c:a5:fd:3c:9b:64:e4:c5:eb:df:61:
                    25:bc:f0:ee:68:bf:d1:a7:cb:7e:2a:02:81:4e:64:
                    5c:0c:53:86:79:57:19:37:61:b7:98:f9:0c:a0:4e:
                    22:59:9b:f9:1b:2d:67:3c:27:3c:56:90:66:e3:fd:
                    7f:65:7d:0f:86:bd:35:47:e8:8a:cc:f4:da:8e:e9:
                    6a:4e:ab:a7:55:ec:a2:89:1e:d5:33:45:53:cb:f9:
                    9e:77:bd:cd:2c:f9:05:b8:7f:74:01:1d:e8:fb:18:
                    e1:43:d1:0d:e9:aa:dc:37:6f:bd:fe:b8:0f:ed:1d:
                    4d:01:46:4e:0a:ac:fc:82:e8:ec:56:83:13:8e:3a:
                    01:ed:14:64:74:ea:64:b2:66:10:b6:68:6d:c8:70:
                    00:7d:50:48:2e:3d:43:ee:e0:24:95:c6:cd:8e:c7:
                    fd:b8:e4:95:cf:dd:7e:fb:95:5e:a1:01:cd:43:b1:
                    07:d7:a4:30:ee:9b:86:1a:2a:6e:c1:0b:59:a2:74:
                    6f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            1.3.6.1.4.1.311.21.1: 
                ...
            X509v3 Subject Key Identifier: 
                61:71:A7:87:AF:FF:69:D5:21:76:4F:52:93:28:00:BE:79:12:AB:84
            1.3.6.1.4.1.311.20.2: 
                .
.S.u.b.C.A
            X509v3 Key Usage: 
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                keyid:D5:F6:56:CB:8F:E8:A2:5C:62:68:D1:3D:94:90:5B:D7:CE:9A:18:C4

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl

            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt

    Signature Algorithm: sha256WithRSAEncryption
         5a:8a:67:da:cc:d5:fd:0d:26:41:77:bf:0a:46:78:b4:b3:de:
         12:69:2b:77:23:c2:65:2f:01:5f:d2:03:f4:61:ba:50:9d:2e:
         8c:39:72:f3:6c:3e:6a:b1:1e:76:6d:ec:b7:f3:82:dc:cc:bb:
         c5:69:70:28:73:66:17:3f:54:eb:ee:01:16:48:c4:46:d9:1b:
         80:ae:81:3a:8d:0f:79:6d:68:b0:9e:ea:2d:3f:39:d3:ca:38:
         7e:bd:5e:7c:08:6e:19:dc:c6:c2:f4:38:33:68:61:e2:52:47:
         83:e1:00:01:56:d2:ba:cb:87:82:05:31:0a:41:8b:4e:e7:7f:
         5f:5f:ed:5f:d3:39:2d:45:eb:a2:13:bf:fd:1e:c2:98:41:71:
         61:16:5f:c8:0a:70:25:7c:59:69:31:24:e4:71:e7:0a:bb:04:
         17:f7:9f:72:1e:c9:d2:bb:1a:be:3d:02:fe:09:0c:b2:43:b4:
         59:1a:99:53:93:96:21:5f:e0:d6:b7:26:01:42:95:36:ac:27:
         fd:be:f4:85:77:68:3d:18:bd:f4:be:98:88:22:11:86:52:16:
         f3:45:ec:03:97:10:70:87:a3:70:43:71:3c:db:c9:86:03:17:
         0c:f5:73:5b:c6:7d:e1:5c:64:ed:d7:c5:48:d7:ed:32:e2:d1:
         aa:d3:cf:a7:f6:57:4e:61:f9:77:eb:67:f2:88:b3:de:00:da:
         03:8f:d0:8a:34:37:3e:1d:d8:62:b8:d2:b1:f3:e1:2f:8b:72:
         3b:81:96:7c:6f:fc:ec:66:76:72:60:1b:24:f2:a0:89:6d:5b:
         6d:00:2e:ef:28:dd:86:87:05:c2:b4:b9:e5:be:64:c2:2a:f2:
         4a:15:5c:98:e2:c4:27:85:ff:52:e3:62:7e:0f:b2:02:0b:d7:
         66:c7:0a:b2:d3:3d:20:04:14:50:32:59:83:0a:7d:9b:ed:5a:
         38:12:01:52:ba:2f:5e:20:72:8e:4a:f1:fd:e7:71:02:8c:3b:
         e1:07:be:c9:73:f4:dd:47:d8:b4:ef:b4:a4:b3:30:b9:89:3e:
         76:ca:b9:00:98:56:7e:ab:ea:8a:b8:a5:d0:38:ab:69:77:13:
         0b:14:2f:e9:aa:41:1f:f7:ba:bd:3a:2b:34:8a:ee:0a:ab:63:
         e6:63:f7:88:24:8e:20:0d:2b:3b:9d:e3:c2:49:52:ac:9f:1f:
         0e:39:3b:5d:d4:6e:50:6a:e6:7d:52:3a:aa:7c:33:15:29:0d:
         26:5e:01:58:a7:4e:a9:3d:7a:84:6f:74:3f:60:9f:e4:32:4f:
         36:00:af:6d:71:d3:3e:a6:46:65:5f:81:74:f1:fe:c1:71:da:
         4c:a0:41:5a:82:dd:f1:1f

undefined method `first' for #

offsetsizetypecomment
0671232EXE05/17/2012 23:33:58#
2692016249PNG(256 x 256)#
a3e008424PKCS7Authenticode Signature#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

[?] ignoring invalid PEdump::BITMAPINFOHEADER