MZ Header

Rich Header

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Packer / Compiler

Sections

Data Directory

TLS

StringTable 040904b0

VS_FIXEDFILEINFO

Signers (1)

issuer: /C=US/O=Thawte, Inc./CN=Thawte Code Signing CA - G2
serial: 1C09DBBC732D4B58F7A88EBACF323417

Certificates (4)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
    Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA
        Validity
            Not Before: May  1 00:00:00 2012 GMT
            Not After : Dec 31 23:59:59 2012 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer - G3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:a9:59:66:74:da:3d:8a:7d:7a:d8:fc:f5:80:44:
                    7b:fe:47:6a:14:55:4e:50:47:0b:ec:d3:ed:ce:f6:
                    38:f7:4f:69:b9:b1:f0:b6:78:82:0a:8c:76:16:67:
                    e2:02:ad:b7:0d:a5:8a:f6:03:fc:66:d3:fc:08:2d:
                    cc:b5:73:59:7b:89:dc:33:6e:66:5a:5e:52:37:b4:
                    62:d1:92:59:35:14:8b:45:ac:59:b2:4d:24:a2:98:
                    94:68:42:72:9f:3a:68:e2:6b:8b:9e:22:2d:f4:98:
                    4e:9a:c6:af:b3:e4:a0:ab:3c:28:bf:23:e1:d7:72:
                    a4:f2:10:53:67:ae:77:af:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.verisign.com/tss-ca.crl

            X509v3 Extended Key Usage: critical
                Time Stamping
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Subject Alternative Name: 
                DirName:/CN=TSA1-3
            X509v3 Subject Key Identifier: 
                B4:B7:F1:89:49:26:60:E7:65:EA:73:AE:DC:D3:38:CD:BF:57:92:6F
    Signature Algorithm: sha1WithRSAEncryption
         1e:98:aa:27:b7:78:b5:08:b5:c9:72:6d:b7:df:c0:0e:98:a6:
         35:c4:88:c9:d2:f6:6d:f1:4b:1a:fb:d5:f9:2d:99:00:9e:d1:
         e7:9b:8b:e1:3f:bd:39:80:0c:66:cd:07:bc:5c:98:54:a6:94:
         ba:10:d1:4e:8b:ab:f5:6f:65:cc:67:09:a2:80:7c:52:e8:0e:
         03:d6:6b:7a:c6:05:18:ec:c8:ac:42:7c:07:2c:a7:3d:08:66:
         dc:00:ed:fd:94:1d:73:f2:72:98:93:b1:11:d6:8f:ef:8e:ea:
         ac:f4:96:51:0c:d0:8d:df:31:52:4f:5e:af:7d:a7:4a:75:e6:
         4e:ce:2b:9f:29:2b:e7:cf:5d:9f:03:7e:6e:27:7b:23:ad:62:
         29:66:af:92:e8:2c:ce:bd:9c:7f:dc:cd:17:3c:43:c2:09:3f:
         75:45:c7:9e:e4:d7:60:7f:97:c6:e4:aa:c7:69:f5:fc:cd:74:
         ac:2c:b0:48:c1:50:4e:70:56:1e:b5:35:d3:8e:be:b1:ed:ac:
         bd:fe:0c:ec:85:7d:d5:bb:85:66:44:19:5d:9f:93:eb:82:ba:
         63:9e:d3:7c:61:ff:c8:1b:d9:23:58:7f:30:a3:66:a1:39:26:
         5e:92:c3:3c:cb:37:32:fa:f5:a3:8d:dc:d5:b0:a3:e9:25:36:
         55:d7:81:fa

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
    Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
        Validity
            Not Before: Dec  4 00:00:00 2003 GMT
            Not After : Dec  3 23:59:59 2013 GMT
        Subject: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a9:ca:b2:a4:cc:cd:20:af:0a:7d:89:ac:87:75:
                    f0:b4:4e:f1:df:c1:0f:bf:67:61:bd:a3:64:1c:da:
                    bb:f9:ca:33:ab:84:30:89:58:7e:8c:db:6b:dd:36:
                    9e:0f:bf:d1:ec:78:f2:77:a6:7e:6f:3c:bf:93:af:
                    0d:ba:68:f4:6c:94:ca:bd:52:2d:ab:48:3d:f5:b6:
                    d5:5d:5f:1b:02:9f:fa:2f:6b:1e:a4:f7:a3:9a:a6:
                    1a:c8:02:e1:7f:4c:52:e3:0e:60:ec:40:1c:7e:b9:
                    0d:de:3f:c7:b4:df:87:bd:5f:7a:6a:31:2e:03:99:
                    81:13:a8:47:20:ce:31:73:0d:57:2d:cd:78:34:33:
                    95:12:99:12:b9:de:68:2f:aa:e6:e3:c2:8a:8c:2a:
                    c3:8b:21:87:66:bd:83:58:57:6f:75:bf:3c:aa:26:
                    87:5d:ca:10:15:3c:9f:84:ea:54:c1:0a:6e:c4:fe:
                    c5:4a:dd:b9:07:11:97:22:7c:db:3e:27:d1:1e:78:
                    ec:9f:31:c9:f1:e6:22:19:db:c4:b3:47:43:9a:1a:
                    5f:a0:1e:90:e4:5e:f5:ee:7c:f1:7d:ab:62:01:8f:
                    f5:4d:0b:de:d0:22:56:a8:95:cd:ae:88:76:ae:ee:
                    ba:0d:f3:e4:4d:d9:a0:fb:68:a0:ae:14:3b:b3:87:
                    c1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com

            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.verisign.com/ThawteTimestampingCA.crl

            X509v3 Extended Key Usage: 
                Time Stamping
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=TSA2048-1-53
    Signature Algorithm: sha1WithRSAEncryption
         4a:6b:f9:ea:58:c2:44:1c:31:89:79:99:2b:96:bf:82:ac:01:
         d6:1c:4c:cd:b0:8a:58:6e:df:08:29:a3:5e:c8:ca:93:13:e7:
         04:52:0d:ef:47:27:2f:00:38:b0:e4:c9:93:4e:9a:d4:22:62:
         15:f7:3f:37:21:4f:70:31:80:f1:8b:38:87:b3:e8:e8:97:00:
         fe:cf:55:96:4e:24:d2:a9:27:4e:7a:ae:b7:61:41:f3:2a:ce:
         e7:c9:d9:5e:dd:bb:2b:85:3e:b5:9d:b5:d9:e1:57:ff:be:b4:
         c5:7e:f5:cf:0c:9e:f0:97:fe:2b:d3:3b:52:1b:1b:38:27:f7:
         3f:4a

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:09:db:bc:73:2d:4b:58:f7:a8:8e:ba:cf:32:34:17
    Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=Thawte, Inc., CN=Thawte Code Signing CA - G2
        Validity
            Not Before: Dec  9 00:00:00 2011 GMT
            Not After : Feb  6 23:59:59 2014 GMT
        Subject: C=RU, ST=Moscow, L=Moscow, O=LLC Mail.Ru, CN=LLC Mail.Ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c9:1c:68:9d:ee:3b:e4:ff:f0:f7:ae:9e:47:b5:
                    5a:bc:8e:a8:e4:1f:1c:06:53:08:3e:dd:6c:4f:f2:
                    d1:90:a5:1e:86:bc:eb:af:36:96:90:be:e8:31:4a:
                    7b:b6:c7:a1:ee:35:3b:20:03:f6:fa:db:37:51:14:
                    fd:9b:b2:ac:49:ae:0d:29:f6:0f:0b:3f:d9:c4:b1:
                    a0:b4:47:8f:fe:2c:53:a8:5e:42:86:62:8f:9f:1c:
                    06:57:9e:7d:fc:f9:21:b9:1d:d1:0d:a3:73:e0:65:
                    a7:0f:07:8d:b3:68:62:f8:53:c4:a2:f9:0b:e5:b3:
                    b3:46:2f:c6:56:de:16:2b:de:77:9d:f5:15:9f:2a:
                    24:84:1f:3e:e8:7a:ad:ed:75:62:d3:e3:4a:dc:74:
                    a4:6c:4b:0f:a5:90:c7:b8:01:14:e7:6f:e9:b1:3f:
                    81:51:26:94:3e:a6:bd:cc:58:2e:74:ba:07:67:a9:
                    a5:d6:c5:1d:f4:18:47:a0:86:25:12:4c:7c:9d:13:
                    21:46:5e:6e:0f:1a:b7:c4:e5:01:f0:75:87:98:80:
                    ea:0f:64:f7:fd:c4:46:34:56:9c:15:05:83:e5:36:
                    0a:3b:b8:21:55:48:c4:b5:da:2d:3d:15:e1:d6:4c:
                    c0:d9:c7:6a:fc:95:7c:90:4d:d1:07:1e:bd:ba:e8:
                    6c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://cs-g2-crl.thawte.com/ThawteCSG2.crl

            X509v3 Extended Key Usage: 
                Code Signing, Microsoft Commercial Code Signing
            2.5.29.4: 
                0.0.0..
+.....7.......
            Authority Information Access: 
                OCSP - URI:http://ocsp.thawte.com

            Netscape Cert Type: 
                Object Signing
    Signature Algorithm: sha1WithRSAEncryption
         5f:85:ee:34:0a:1d:94:49:eb:98:c1:f3:48:95:52:64:87:a2:
         7d:a0:fd:3d:98:e7:9c:22:8c:06:ae:3b:c9:1d:8b:33:e4:ca:
         da:1d:df:9f:b7:3f:8a:85:7a:0d:07:12:dc:25:c7:73:74:4b:
         b7:7f:42:af:46:b6:0b:f8:22:e6:4b:62:88:1f:17:34:95:27:
         2e:f1:72:27:71:78:40:df:0d:b2:7c:b7:67:56:a7:b2:f9:86:
         70:68:37:c4:e8:9c:2e:95:a8:51:20:b1:fd:b0:9b:a6:8c:03:
         22:7f:9c:7f:06:d9:cb:08:13:d0:b2:23:d2:e5:c4:bf:4b:ba:
         20:af:75:69:62:d5:16:c4:a2:2d:85:f7:01:20:d3:b1:62:40:
         1f:99:bd:e0:41:fc:7b:63:9a:a7:e6:67:be:9a:d9:d9:e8:0a:
         eb:da:19:91:3a:e8:22:ea:e8:38:78:b8:df:00:97:fc:03:ef:
         10:94:3a:fd:2b:33:dc:62:d8:cc:17:99:15:13:d4:14:e9:0b:
         0b:1c:03:05:77:a4:00:4d:5c:6f:89:ff:b7:9b:72:3d:7a:d7:
         9a:00:3b:4e:be:ce:ab:6c:a8:6e:23:54:02:8e:e6:29:8c:05:
         79:c9:14:11:5e:a4:c6:b3:57:7b:08:21:04:88:d3:2d:dd:13:
         9e:86:38:d3

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:97:4d:78:73:a5:bc:ab:0d:2f:b3:70:19:2f:ce:5e
    Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2006 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA
        Validity
            Not Before: Feb  8 00:00:00 2010 GMT
            Not After : Feb  7 23:59:59 2020 GMT
        Subject: C=US, O=Thawte, Inc., CN=Thawte Code Signing CA - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b7:8b:cf:75:5b:9f:25:da:7e:39:b0:93:db:38:
                    d3:a9:23:d0:82:fa:e9:24:7e:5c:0b:8e:83:f8:e6:
                    7a:59:e6:a3:c5:98:a7:99:d2:44:ff:00:a6:a5:39:
                    04:8a:da:29:88:ea:db:a2:f3:1c:99:15:26:c2:b1:
                    f4:fc:e1:0c:47:a9:09:11:06:0a:20:92:b9:c7:a0:
                    04:8c:5c:94:19:ab:5b:25:2c:1d:62:7e:70:0d:ce:
                    61:6c:dd:2b:82:c9:ce:5d:48:5f:f7:c2:be:bc:41:
                    23:1e:4f:29:5d:d7:4f:bc:f4:c5:2a:fc:63:e6:7c:
                    26:4e:99:a7:79:41:9e:10:4a:7a:79:c9:c6:86:f7:
                    86:95:d2:26:ce:3c:18:2a:d6:7c:ce:af:cd:ad:bb:
                    f7:82:2c:70:26:37:45:e5:0f:47:22:c6:01:28:bd:
                    2e:83:5c:6a:a4:47:c1:e7:d0:d8:6b:81:46:3f:21:
                    17:f5:07:c5:43:5a:a6:67:2c:b8:7b:60:11:b5:83:
                    ee:f5:74:0a:72:71:44:3d:58:fe:e8:1a:ab:38:c3:
                    59:db:7f:6e:38:7d:76:c7:72:69:98:36:96:57:d3:
                    66:1c:d2:54:91:04:2e:54:19:b0:dc:3d:b5:22:5e:
                    86:d5:2a:7e:20:df:5d:e6:7a:b1:65:fe:c5:02:4e:
                    31:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.thawte.com/ThawtePCA.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                OCSP - URI:http://ocsp.thawte.com

            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, Code Signing
            X509v3 Subject Alternative Name: 
                DirName:/CN=VeriSignMPKI-2-10
            X509v3 Subject Key Identifier: 
                D4:0D:65:3F:7A:BD:34:C6:FE:47:E7:4C:0D:C0:BD:F2:DE:15:AB:71
            X509v3 Authority Key Identifier: 
                keyid:7B:5B:45:CF:AF:CE:CB:7A:FD:31:92:1A:6A:B6:F3:46:EB:57:48:50

    Signature Algorithm: sha1WithRSAEncryption
         56:fe:53:5c:e1:c7:9e:bc:a7:ed:7e:53:6d:6a:14:4b:51:8c:
         40:5e:80:5f:aa:a4:e8:2f:ef:38:c8:04:c9:ca:3e:cf:df:3a:
         58:4e:b0:d4:b6:63:c5:29:57:fa:02:05:9a:45:4d:68:db:2a:
         1b:d4:34:3d:9f:00:c3:5a:cb:95:49:a5:6e:e1:b0:c5:fc:41:
         4d:41:4a:6f:d3:77:c8:d7:38:8d:e4:19:de:18:f3:1f:15:65:
         83:6d:45:0c:53:f9:0a:9a:2e:a5:5d:bf:6f:32:81:18:92:19:
         6a:55:00:ad:63:1c:52:06:7e:55:d9:29:68:ae:4a:7c:18:9a:
         79:88:6b:23:23:d8:27:38:2a:29:87:76:ca:fb:c7:b6:62:23:
         1f:ed:7a:56:4c:dd:9c:32:5b:f5:3d:0c:46:18:95:3b:2a:23:
         68:83:64:41:d9:00:6d:0f:19:24:15:68:72:bd:c5:71:67:6e:
         ac:4c:db:90:eb:51:a5:1a:62:07:d0:be:6a:00:47:3c:72:2f:
         ec:4f:61:3e:73:85:ce:5a:0a:b7:ba:c0:1c:13:75:e3:22:39:
         28:dd:6d:1d:09:46:9d:4f:ba:e8:40:81:91:c6:a4:ce:94:72:
         1b:01:cf:2a:6e:15:67:95:89:ae:7d:b7:b7:cd:f9:0a:3d:75:
         b6:6b:3c:25
pkcs7-signedData
  • 1
    • SHA1: nil
    • 1.3.6.1.4.1.311.2.1.4
      • #0
        • 1.3.6.1.4.1.311.2.1.15
          • :
            00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
            00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |
        • SHA1
          • 9e 19 90 b2 69 c9 92 6e  54 fa a3 73 af ad a0 e3  |....i..nT..s....|
            6f 5c 51 46                                       |o\QF            |
    • Certificates
      • Certificate #0
        • 2
          • 79:A2:A5:85:F9:D1:15:42:13:D9:B8:3E:F6:B6:8D:ED
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • O: VeriSign, Inc.
            • CN: VeriSign Time Stamping Services CA
          • 2012-05-01 00:00:00 UTC: 2012-12-31 23:59:59 UTC
          • Subject
            • C: US
            • O: Symantec Corporation
            • CN: Symantec Time Stamping Services Signer - G3
          • #5
            • rsaEncryption: nil
            • A9:59:66:74:DA:3D:8A:7D:7A:D8:FC:F5:80:44:7B:FE:
              47:6A:14:55:4E:50:47:0B:EC:D3:ED:CE:F6:38:F7:4F:
              69:B9:B1:F0:B6:78:82:0A:8C:76:16:67:E2:02:AD:B7:
              0D:A5:8A:F6:03:FC:66:D3:FC:08:2D:CC:B5:73:59:7B:
              89:DC:33:6E:66:5A:5E:52:37:B4:62:D1:92:59:35:14:
              8B:45:AC:59:B2:4D:24:A2:98:94:68:42:72:9F:3A:68:
              E2:6B:8B:9E:22:2D:F4:98:4E:9A:C6:AF:B3:E4:A0:AB:
              3C:28:BF:23:E1:D7:72:A4:F2:10:53:67:AE:77:AF:51
              : 0x010001
          • X509v3 extensions
            • basicConstraints
              • true
              • nil
            • crlDistributionPoints: http://crl.verisign.com/tss-ca.crl
            • extendedKeyUsage: true, timeStamping
            • authorityInfoAccess
              • OCSP: http://ocsp.verisign.com
            • keyUsage: true, 0x80
            • subjectAltName
              • CN: TSA1-3
            • subjectKeyIdentifier:
              b4 b7 f1 89 49 26 60 e7  65 ea 73 ae dc d3 38 cd  |....I&`.e.s...8.|
              bf 57 92 6f                                       |.W.o            |
        • RSA-SHA1:
          1e 98 aa 27 b7 78 b5 08  b5 c9 72 6d b7 df c0 0e  |...'.x....rm....|
          98 a6 35 c4 88 c9 d2 f6  6d f1 4b 1a fb d5 f9 2d  |..5.....m.K....-|
          99 00 9e d1 e7 9b 8b e1  3f bd 39 80 0c 66 cd 07  |........?.9..f..|
          bc 5c 98 54 a6 94 ba 10  d1 4e 8b ab f5 6f 65 cc  |.\.T.....N...oe.|
          67 09 a2 80 7c 52 e8 0e  03 d6 6b 7a c6 05 18 ec  |g...|R....kz....|
          c8 ac 42 7c 07 2c a7 3d  08 66 dc 00 ed fd 94 1d  |..B|.,.=.f......|
          73 f2 72 98 93 b1 11 d6  8f ef 8e ea ac f4 96 51  |s.r............Q|
          0c d0 8d df 31 52 4f 5e  af 7d a7 4a 75 e6 4e ce  |....1RO^.}.Ju.N.|
          2b 9f 29 2b e7 cf 5d 9f  03 7e 6e 27 7b 23 ad 62  |+.)+..]..~n'{#.b|
          29 66 af 92 e8 2c ce bd  9c 7f dc cd 17 3c 43 c2  |)f...,.......
      • Certificate #1
        • 2
          • 47:BF:19:95:DF:8D:52:46:43:F7:DB:6D:48:0D:31:A4
          • RSA-SHA1: nil
          • Issuer
            • C: ZA
            • ST: Western Cape
            • L: Durbanville
            • O: Thawte
            • OU: Thawte Certification
            • CN: Thawte Timestamping CA
          • 2003-12-04 00:00:00 UTC: 2013-12-03 23:59:59 UTC
          • Subject
            • C: US
            • O: VeriSign, Inc.
            • CN: VeriSign Time Stamping Services CA
          • #5
            • rsaEncryption: nil
            • A9:CA:B2:A4:CC:CD:20:AF:0A:7D:89:AC:87:75:F0:B4:
              4E:F1:DF:C1:0F:BF:67:61:BD:A3:64:1C:DA:BB:F9:CA:
              33:AB:84:30:89:58:7E:8C:DB:6B:DD:36:9E:0F:BF:D1:
              EC:78:F2:77:A6:7E:6F:3C:BF:93:AF:0D:BA:68:F4:6C:
              94:CA:BD:52:2D:AB:48:3D:F5:B6:D5:5D:5F:1B:02:9F:
              FA:2F:6B:1E:A4:F7:A3:9A:A6:1A:C8:02:E1:7F:4C:52:
              E3:0E:60:EC:40:1C:7E:B9:0D:DE:3F:C7:B4:DF:87:BD:
              5F:7A:6A:31:2E:03:99:81:13:A8:47:20:CE:31:73:0D:
              57:2D:CD:78:34:33:95:12:99:12:B9:DE:68:2F:AA:E6:
              E3:C2:8A:8C:2A:C3:8B:21:87:66:BD:83:58:57:6F:75:
              BF:3C:AA:26:87:5D:CA:10:15:3C:9F:84:EA:54:C1:0A:
              6E:C4:FE:C5:4A:DD:B9:07:11:97:22:7C:DB:3E:27:D1:
              1E:78:EC:9F:31:C9:F1:E6:22:19:DB:C4:B3:47:43:9A:
              1A:5F:A0:1E:90:E4:5E:F5:EE:7C:F1:7D:AB:62:01:8F:
              F5:4D:0B:DE:D0:22:56:A8:95:CD:AE:88:76:AE:EE:BA:
              0D:F3:E4:4D:D9:A0:FB:68:A0:AE:14:3B:B3:87:C1:BB
              : 0x010001
          • X509v3 extensions
            • authorityInfoAccess
              • OCSP: http://ocsp.verisign.com
            • basicConstraints
              • true
              • true: 0
            • crlDistributionPoints: http://crl.verisign.com/ThawteTimestampingCA.crl
            • extendedKeyUsage: timeStamping
            • keyUsage: true, 6
            • subjectAltName
              • CN: TSA2048-1-53
        • RSA-SHA1:
          4a 6b f9 ea 58 c2 44 1c  31 89 79 99 2b 96 bf 82  |Jk..X.D.1.y.+...|
          ac 01 d6 1c 4c cd b0 8a  58 6e df 08 29 a3 5e c8  |....L...Xn..).^.|
          ca 93 13 e7 04 52 0d ef  47 27 2f 00 38 b0 e4 c9  |.....R..G'/.8...|
          93 4e 9a d4 22 62 15 f7  3f 37 21 4f 70 31 80 f1  |.N.."b..?7!Op1..|
          8b 38 87 b3 e8 e8 97 00  fe cf 55 96 4e 24 d2 a9  |.8........U.N$..|
          27 4e 7a ae b7 61 41 f3  2a ce e7 c9 d9 5e dd bb  |'Nz..aA.*....^..|
          2b 85 3e b5 9d b5 d9 e1  57 ff be b4 c5 7e f5 cf  |+.>.....W....~..|
          0c 9e f0 97 fe 2b d3 3b  52 1b 1b 38 27 f7 3f 4a  |.....+.;R..8'.?J|
      • Certificate #2
        • 2
          • 1C:09:DB:BC:73:2D:4B:58:F7:A8:8E:BA:CF:32:34:17
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • O: Thawte, Inc.
            • CN: Thawte Code Signing CA - G2
          • 2011-12-09 00:00:00 UTC: 2014-02-06 23:59:59 UTC
          • Subject
            • C: RU
            • ST: Moscow
            • L: Moscow
            • O: LLC Mail.Ru
            • CN: LLC Mail.Ru
          • #5
            • rsaEncryption: nil
            • C9:1C:68:9D:EE:3B:E4:FF:F0:F7:AE:9E:47:B5:5A:BC:
              8E:A8:E4:1F:1C:06:53:08:3E:DD:6C:4F:F2:D1:90:A5:
              1E:86:BC:EB:AF:36:96:90:BE:E8:31:4A:7B:B6:C7:A1:
              EE:35:3B:20:03:F6:FA:DB:37:51:14:FD:9B:B2:AC:49:
              AE:0D:29:F6:0F:0B:3F:D9:C4:B1:A0:B4:47:8F:FE:2C:
              53:A8:5E:42:86:62:8F:9F:1C:06:57:9E:7D:FC:F9:21:
              B9:1D:D1:0D:A3:73:E0:65:A7:0F:07:8D:B3:68:62:F8:
              53:C4:A2:F9:0B:E5:B3:B3:46:2F:C6:56:DE:16:2B:DE:
              77:9D:F5:15:9F:2A:24:84:1F:3E:E8:7A:AD:ED:75:62:
              D3:E3:4A:DC:74:A4:6C:4B:0F:A5:90:C7:B8:01:14:E7:
              6F:E9:B1:3F:81:51:26:94:3E:A6:BD:CC:58:2E:74:BA:
              07:67:A9:A5:D6:C5:1D:F4:18:47:A0:86:25:12:4C:7C:
              9D:13:21:46:5E:6E:0F:1A:B7:C4:E5:01:F0:75:87:98:
              80:EA:0F:64:F7:FD:C4:46:34:56:9C:15:05:83:E5:36:
              0A:3B:B8:21:55:48:C4:B5:DA:2D:3D:15:E1:D6:4C:C0:
              D9:C7:6A:FC:95:7C:90:4D:D1:07:1E:BD:BA:E8:6C:B5
              : 0x010001
          • X509v3 extensions
            • basicConstraints
              • true
              • nil
            • crlDistributionPoints: http://cs-g2-crl.thawte.com/ThawteCSG2.crl
            • extendedKeyUsage
              • codeSigning: msCodeCom
            • 2.5.29.4
              • msCodeCom: 0x80
            • authorityInfoAccess
              • OCSP: http://ocsp.thawte.com
            • nsCertType: 0x10
        • RSA-SHA1:
          5f 85 ee 34 0a 1d 94 49  eb 98 c1 f3 48 95 52 64  |_..4...I....H.Rd|
          87 a2 7d a0 fd 3d 98 e7  9c 22 8c 06 ae 3b c9 1d  |..}..=..."...;..|
          8b 33 e4 ca da 1d df 9f  b7 3f 8a 85 7a 0d 07 12  |.3.......?..z...|
          dc 25 c7 73 74 4b b7 7f  42 af 46 b6 0b f8 22 e6  |.%.stK..B.F...".|
          4b 62 88 1f 17 34 95 27  2e f1 72 27 71 78 40 df  |Kb...4.'..r'qx@.|
          0d b2 7c b7 67 56 a7 b2  f9 86 70 68 37 c4 e8 9c  |..|.gV....ph7...|
          2e 95 a8 51 20 b1 fd b0  9b a6 8c 03 22 7f 9c 7f  |...Q ......."...|
          06 d9 cb 08 13 d0 b2 23  d2 e5 c4 bf 4b ba 20 af  |.......#....K. .|
          75 69 62 d5 16 c4 a2 2d  85 f7 01 20 d3 b1 62 40  |uib....-... ..b@|
          1f 99 bd e0 41 fc 7b 63  9a a7 e6 67 be 9a d9 d9  |....A.{c...g....|
          e8 0a eb da 19 91 3a e8  22 ea e8 38 78 b8 df 00  |......:."..8x...|
          97 fc 03 ef 10 94 3a fd  2b 33 dc 62 d8 cc 17 99  |......:.+3.b....|
          15 13 d4 14 e9 0b 0b 1c  03 05 77 a4 00 4d 5c 6f  |..........w..M\o|
          89 ff b7 9b 72 3d 7a d7  9a 00 3b 4e be ce ab 6c  |....r=z...;N...l|
          a8 6e 23 54 02 8e e6 29  8c 05 79 c9 14 11 5e a4  |.n#T...)..y...^.|
          c6 b3 57 7b 08 21 04 88  d3 2d dd 13 9e 86 38 d3  |..W{.!...-....8.|
      • Certificate #3
        • 2
          • 47:97:4D:78:73:A5:BC:AB:0D:2F:B3:70:19:2F:CE:5E
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • O: thawte, Inc.
            • OU: Certification Services Division
            • OU: (c) 2006 thawte, Inc. - For authorized use only
            • CN: thawte Primary Root CA
          • 2010-02-08 00:00:00 UTC: 2020-02-07 23:59:59 UTC
          • Subject
            • C: US
            • O: Thawte, Inc.
            • CN: Thawte Code Signing CA - G2
          • #5
            • rsaEncryption: nil
            • B7:8B:CF:75:5B:9F:25:DA:7E:39:B0:93:DB:38:D3:A9:
              23:D0:82:FA:E9:24:7E:5C:0B:8E:83:F8:E6:7A:59:E6:
              A3:C5:98:A7:99:D2:44:FF:00:A6:A5:39:04:8A:DA:29:
              88:EA:DB:A2:F3:1C:99:15:26:C2:B1:F4:FC:E1:0C:47:
              A9:09:11:06:0A:20:92:B9:C7:A0:04:8C:5C:94:19:AB:
              5B:25:2C:1D:62:7E:70:0D:CE:61:6C:DD:2B:82:C9:CE:
              5D:48:5F:F7:C2:BE:BC:41:23:1E:4F:29:5D:D7:4F:BC:
              F4:C5:2A:FC:63:E6:7C:26:4E:99:A7:79:41:9E:10:4A:
              7A:79:C9:C6:86:F7:86:95:D2:26:CE:3C:18:2A:D6:7C:
              CE:AF:CD:AD:BB:F7:82:2C:70:26:37:45:E5:0F:47:22:
              C6:01:28:BD:2E:83:5C:6A:A4:47:C1:E7:D0:D8:6B:81:
              46:3F:21:17:F5:07:C5:43:5A:A6:67:2C:B8:7B:60:11:
              B5:83:EE:F5:74:0A:72:71:44:3D:58:FE:E8:1A:AB:38:
              C3:59:DB:7F:6E:38:7D:76:C7:72:69:98:36:96:57:D3:
              66:1C:D2:54:91:04:2E:54:19:B0:DC:3D:B5:22:5E:86:
              D5:2A:7E:20:DF:5D:E6:7A:B1:65:FE:C5:02:4E:31:2D
              : 0x010001
          • X509v3 extensions
            • basicConstraints
              • true
              • true: 0
            • crlDistributionPoints: http://crl.thawte.com/ThawtePCA.crl
            • keyUsage: true, 6
            • authorityInfoAccess
              • OCSP: http://ocsp.thawte.com
            • extendedKeyUsage
              • clientAuth: codeSigning
            • subjectAltName
              • CN: VeriSignMPKI-2-10
            • subjectKeyIdentifier:
              d4 0d 65 3f 7a bd 34 c6  fe 47 e7 4c 0d c0 bd f2  |..e?z.4..G.L....|
              de 15 ab 71                                       |...q            |
            • authorityKeyIdentifier:
              7b 5b 45 cf af ce cb 7a  fd 31 92 1a 6a b6 f3 46  |{[E....z.1..j..F|
              eb 57 48 50                                       |.WHP            |
        • RSA-SHA1:
          56 fe 53 5c e1 c7 9e bc  a7 ed 7e 53 6d 6a 14 4b  |V.S\......~Smj.K|
          51 8c 40 5e 80 5f aa a4  e8 2f ef 38 c8 04 c9 ca  |Q.@^._.../.8....|
          3e cf df 3a 58 4e b0 d4  b6 63 c5 29 57 fa 02 05  |>..:XN...c.)W...|
          9a 45 4d 68 db 2a 1b d4  34 3d 9f 00 c3 5a cb 95  |.EMh.*..4=...Z..|
          49 a5 6e e1 b0 c5 fc 41  4d 41 4a 6f d3 77 c8 d7  |I.n....AMAJo.w..|
          38 8d e4 19 de 18 f3 1f  15 65 83 6d 45 0c 53 f9  |8........e.mE.S.|
          0a 9a 2e a5 5d bf 6f 32  81 18 92 19 6a 55 00 ad  |....].o2....jU..|
          63 1c 52 06 7e 55 d9 29  68 ae 4a 7c 18 9a 79 88  |c.R.~U.)h.J|..y.|
          6b 23 23 d8 27 38 2a 29  87 76 ca fb c7 b6 62 23  |k##.'8*).v....b#|
          1f ed 7a 56 4c dd 9c 32  5b f5 3d 0c 46 18 95 3b  |..zVL..2[.=.F..;|
          2a 23 68 83 64 41 d9 00  6d 0f 19 24 15 68 72 bd  |*#h.dA..m..$.hr.|
          c5 71 67 6e ac 4c db 90  eb 51 a5 1a 62 07 d0 be  |.qgn.L...Q..b...|
          6a 00 47 3c 72 2f ec 4f  61 3e 73 85 ce 5a 0a b7  |j.Gs..Z..|
          ba c0 1c 13 75 e3 22 39  28 dd 6d 1d 09 46 9d 4f  |....u."9(.m..F.O|
          ba e8 40 81 91 c6 a4 ce  94 72 1b 01 cf 2a 6e 15  |..@......r...*n.|
          67 95 89 ae 7d b7 b7 cd  f9 0a 3d 75 b6 6b 3c 25  |g...}.....=u.k<%|
    • 1
      • unnamed
        • #0
          • C: US
          • O: Thawte, Inc.
          • CN: Thawte Code Signing CA - G2
        • 1C:09:DB:BC:73:2D:4B:58:F7:A8:8E:BA:CF:32:34:17
      • SHA1: nil
      • #2
        • contentType: 1.3.6.1.4.1.311.2.1.4
        • 1.3.6.1.4.1.311.2.1.11: msCodeCom
        • messageDigest:
          23 b0 ce a7 f0 b8 76 7c  40 30 f6 4e 7f f8 37 95  |#.....v|@0.N..7.|
          2d 69 69 da                                       |-ii.            |
        • 1.3.6.1.4.1.311.2.1.12:
          00 68 00 74 00 74 00 70  00 3a 00 2f 00 2f 00 6d  |.h.t.t.p.:././.m|
          00 61 00 69 00 6c 00 2e  00 72 00 75              |.a.i.l...r.u    |
      • rsaEncryption:
        21 08 86 3f b2 65 0f d6  0a 83 69 e9 d2 d1 b7 08  |!..?.e....i.....|
        e5 36 4a 25 52 29 44 a8  50 4f 93 3d d9 bd 62 ce  |.6J%R)D.PO.=..b.|
        bb 82 67 f3 62 24 67 f5  7f 1b 15 c6 9d 62 6f 52  |..g.b$g......boR|
        24 7f 08 b3 4f b2 fe b5  a6 03 9c f3 b4 f7 23 9c  |$...O.........#.|
        41 5c c4 b3 08 30 35 61  43 4f ef 9b 96 ac 8a 39  |A\...05aCO.....9|
        f0 17 de 5f de d0 29 e6  38 20 18 f8 62 f8 a6 70  |..._..).8 ..b..p|
        24 56 ad fe 68 17 d3 e3  9e ce 4c 57 27 4a 96 12  |$V..h.....LW'J..|
        90 da 62 63 e0 e6 fe bf  73 cb eb c9 1a 33 5c 47  |..bc....s....3\G|
        4f 3c 14 7d 78 b1 c2 c6  25 44 25 82 5d 10 b1 ff  |O<.}x...%D%.]...|
        44 db a5 de 53 23 df 63  0c 5a d9 0b 1e 33 cf 5b  |D...S#.c.Z...3.[|
        b3 6e 45 5d c3 ab 71 40  82 aa cb 77 1f a0 fc 69  |.nE]..q@...w...i|
        4a 04 4d b9 60 17 6e 8c  f2 ed 93 b6 d3 91 a1 73  |J.M.`.n........s|
        d8 d0 89 5d 29 6c 3a a3  25 f5 d1 56 04 36 4b de  |...])l:.%..V.6K.|
        d9 85 5b 0d 24 e7 2b f2  1c b6 19 f6 45 31 c3 4a  |..[.$.+.....E1.J|
        59 5e 94 01 70 a5 65 23  b1 09 6b 37 1c 67 40 3b  |Y^..p.e#..k7.g@;|
        7d bb 65 09 e3 59 75 ff  a4 a8 c7 29 44 0a 53 63  |}.e..Yu....)D.Sc|
      • countersignature
        • 1
          • unnamed
            • #0
              • C: US
              • O: VeriSign, Inc.
              • CN: VeriSign Time Stamping Services CA
            • 79:A2:A5:85:F9:D1:15:42:13:D9:B8:3E:F6:B6:8D:ED
          • SHA1: nil
          • #2
            • contentType: pkcs7-data
            • signingTime: 2012-10-18 03:08:31 UTC
            • messageDigest:
              e9 b8 04 64 09 f2 f6 c5  be 39 0a ce c4 93 2a ee  |...d.....9....*.|
              33 ca 74 29                                       |3.t)            |
          • rsaEncryption:
            13 a0 5b 24 a9 ce 60 65  f6 88 bf 41 e7 72 b6 10  |..[$..`e...A.r..|
            42 79 96 c9 bd 7d 69 b8  50 ae 64 dd 9a 57 6e 4a  |By...}i.P.d..WnJ|
            b5 1e cd 78 dd 26 f9 2e  fc 92 65 6e 4a ee 7b 65  |...x.&....enJ.{e|
            e7 c9 b5 d6 f7 53 8e d2  70 91 32 66 50 51 3b 01  |.....S..p.2fPQ;.|
            b1 05 ea 03 f0 9e c0 d7  a1 21 fb d6 11 55 4f 6f  |.........!...UOo|
            c4 3f 28 c1 20 82 df 77  5f 69 03 b9 13 86 29 bc  |.?(. ..w_i....).|
            e4 ab cf 2d ac 8b 9f f2  2c 71 c9 60 0b 65 be 7b  |...-....,q.`.e.{|
            43 67 10 05 5a a4 4e 44  f9 dc 72 a6 45 49 e2 50  |Cg..Z.ND..r.EI.P|
offsetsizetypecomment
46799431744EXE05/25/2012 09:55:08#
470a0c36780PNG(180 x 145)#
4799b83383GIF(220 x 90)#
47a6f0463PNG(151 x 11)#
47a8c0307PNG(57 x 11)#
47a9f427727PNG(610 x 342)#
481644190PNG(7 x 4)#
481704188PNG(7 x 4)#
4817c0157328BINoverlay data past EOF#
Path = .rsrc/1049/BIN/EXE_SPUTNIK
Size = 3119490
Packed Size = 3119490
--
Path = .rsrc/1049/BIN/EXE_SPUTNIK
Type = 7z
Method = LZMA
Solid = -
Blocks = 1
Physical Size = 3119490
Headers Size = 136

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
2012-10-16 15:42:10 ....A      4669032      3119354  MailRuSputnik.exe
------------------- ----- ------------ ------------  ------------------------
                               4669032      3119354  1 files, 0 folders
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

[?] can't find file_offset of VA 0xc82c8