MZ Header

Rich Header

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 000004e4

VS_FIXEDFILEINFO

Signers (1)

issuer: /C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa (c)10/CN=VeriSign Class 3 Code Signing 2010 CA
serial: 071A760107B4DE793CD48C0EDA1DF0B5

Certificates (2)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:1a:76:01:07:b4:de:79:3c:d4:8c:0e:da:1d:f0:b5
    Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA
        Validity
            Not Before: Aug  5 00:00:00 2011 GMT
            Not After : Aug  4 23:59:59 2013 GMT
        Subject: C=US, ST=California, L=San Francisco, O=CBS Interactive, OU=Digital ID Class 3 - Microsoft Software Validation v2, CN=CBS Interactive
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ad:05:9b:45:a8:29:5e:12:6d:ca:51:be:22:29:
                    51:6d:10:fb:e6:b7:b5:d5:cc:c2:36:d1:5a:f7:60:
                    c4:37:1e:52:27:57:9c:de:08:46:55:aa:7f:c7:49:
                    9e:50:0d:69:cf:25:3a:06:80:0f:3c:66:41:2f:65:
                    5b:ea:95:c1:d2:80:62:e9:59:aa:71:42:b6:7d:3c:
                    7e:83:ac:04:72:22:e4:b7:3f:9e:e3:5b:c3:03:09:
                    8b:c4:bc:e9:ae:9b:77:a5:6c:3b:ca:0b:74:71:a8:
                    24:5d:c2:01:d5:8e:a2:f4:08:28:fe:82:15:d9:e6:
                    eb:33:85:b3:40:c0:00:80:79:f6:5f:88:d6:88:7b:
                    80:12:b8:3f:33:f6:17:bb:8b:3b:5f:bc:40:6d:ed:
                    d9:e4:bf:24:92:42:2d:fa:aa:e8:69:6e:08:12:23:
                    22:d3:29:29:d1:20:f2:89:0f:7e:fc:a9:54:c4:d4:
                    dc:3b:42:d2:b9:51:1e:1c:a6:1e:02:f9:cc:cd:08:
                    67:95:6c:9b:8f:1c:32:0b:60:86:54:0a:58:26:13:
                    cd:53:96:97:18:cc:da:75:4e:97:7c:86:f4:1e:d4:
                    a5:87:89:16:e9:e9:66:6a:d3:57:0d:09:50:a5:46:
                    f7:5e:d1:e9:70:a7:fa:90:63:02:55:0a:80:89:c5:
                    22:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://csc3-2010-crl.verisign.com/CSC3-2010.crl

            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/rpa

            X509v3 Extended Key Usage: 
                Code Signing
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com
                CA Issuers - URI:http://csc3-2010-aia.verisign.com/CSC3-2010.cer

            X509v3 Authority Key Identifier: 
                keyid:CF:99:A9:EA:7B:26:F4:4B:C9:8E:8F:D7:F0:05:26:EF:E3:D2:A7:9D

            Netscape Cert Type: 
                Object Signing
            1.3.6.1.4.1.311.2.1.27: 
                0.......
    Signature Algorithm: sha1WithRSAEncryption
         95:d0:63:ae:f8:6c:75:c4:aa:81:14:2c:31:e3:51:cd:6e:16:
         1d:2a:25:93:7b:47:77:96:ed:20:55:06:82:4d:c2:f9:ee:1b:
         aa:c6:72:91:87:04:fd:e4:cb:a0:0b:51:5b:9b:9b:20:28:f0:
         5e:98:de:25:a9:19:72:d5:71:2d:12:e5:f2:0d:be:57:58:f9:
         19:bd:1c:be:cf:fb:22:a2:f8:12:9e:2e:df:66:ab:bf:62:be:
         81:cf:c8:f7:07:b8:ff:18:10:b9:47:17:d4:e7:b9:2f:ec:c1:
         f5:1f:f8:66:85:58:d7:ce:db:5d:f7:63:61:44:39:b0:89:eb:
         21:a5:49:9b:da:e8:f5:bb:75:64:c5:23:ec:c1:a1:df:a9:4b:
         1a:82:33:79:92:69:e9:37:0a:41:c0:2a:71:31:9d:2b:54:87:
         da:52:11:a3:fe:04:2d:8d:e3:58:d8:07:4d:c3:36:d1:18:7b:
         c8:42:b1:05:99:79:b7:43:1e:32:e2:b1:25:8e:07:38:d9:44:
         9e:a4:4e:f7:a1:7b:7a:ee:b3:12:6f:c3:f6:c7:69:bd:fc:3a:
         a3:77:5f:db:66:5a:fb:ba:b0:80:14:4a:fe:bc:55:42:a7:4d:
         ca:a3:88:4c:9f:d2:ec:19:55:57:f9:b2:a2:c7:c7:f1:53:5c:
         f0:0b:63:27

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
    Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
        Validity
            Not Before: Feb  8 00:00:00 2010 GMT
            Not After : Feb  7 23:59:59 2020 GMT
        Subject: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:f5:23:4b:5e:a5:d7:8a:bb:32:e9:d4:57:f7:ef:
                    e4:c7:26:7e:ad:19:98:fe:a8:9d:7d:94:f6:36:6b:
                    10:d7:75:81:30:7f:04:68:7f:cb:2b:75:1e:cd:1d:
                    08:8c:df:69:94:a7:37:a3:9c:7b:80:e0:99:e1:ee:
                    37:4d:5f:ce:3b:14:ee:86:d4:d0:f5:27:35:bc:25:
                    0b:38:a7:8c:63:9d:17:a3:08:a5:ab:b0:fb:cd:6a:
                    62:82:4c:d5:21:da:1b:d9:f1:e3:84:3b:8a:2a:4f:
                    85:5b:90:01:4f:c9:a7:76:10:7f:27:03:7c:be:ae:
                    7e:7d:c1:dd:f9:05:bc:1b:48:9c:69:e7:c0:a4:3c:
                    3c:41:00:3e:df:96:e5:c5:e4:94:71:d6:55:01:c7:
                    00:26:4a:40:3c:b5:a1:26:a9:0c:a7:6d:80:8e:90:
                    25:7b:cf:bf:3f:1c:eb:2f:96:fa:e5:87:77:c6:b5:
                    56:b2:7a:3b:54:30:53:1b:df:62:34:ff:1e:d1:f4:
                    5a:93:28:85:e5:4c:17:4e:7e:5b:fd:a4:93:99:7f:
                    df:cd:ef:a4:75:ef:ef:15:f6:47:e7:f8:19:72:d8:
                    2e:34:1a:a6:b4:a7:4c:7e:bd:bb:4f:0c:3d:57:f1:
                    30:d6:a6:36:8e:d6:80:76:d7:19:2e:a5:cd:7e:34:
                    2d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/cps
                  User Notice:
                    Explicit Text: https://www.verisign.com/rpa

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            1.3.6.1.5.5.7.1.12: 
                0_.].[0Y0W0U..image/gif0!0.0...+..............k...j.H.,{..0%.#http://logo.verisign.com/vslogo.gif
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.verisign.com/pca3-g5.crl

            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com

            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, Code Signing
            X509v3 Subject Alternative Name: 
                DirName:/CN=VeriSignMPKI-2-8
            X509v3 Subject Key Identifier: 
                CF:99:A9:EA:7B:26:F4:4B:C9:8E:8F:D7:F0:05:26:EF:E3:D2:A7:9D
            X509v3 Authority Key Identifier: 
                keyid:7F:D3:65:A7:C2:DD:EC:BB:F0:30:09:F3:43:39:FA:02:AF:33:31:33

    Signature Algorithm: sha1WithRSAEncryption
         56:22:e6:34:a4:c4:61:cb:48:b9:01:ad:56:a8:64:0f:d9:8c:
         91:c4:bb:cc:0c:e5:ad:7a:a0:22:7f:df:47:38:4a:2d:6c:d1:
         7f:71:1a:7c:ec:70:a9:b1:f0:4f:e4:0f:0c:53:fa:15:5e:fe:
         74:98:49:24:85:81:26:1c:91:14:47:b0:4c:63:8c:bb:a1:34:
         d4:c6:45:e8:0d:85:26:73:03:d0:a9:8c:64:6d:dc:71:92:e6:
         45:05:60:15:59:51:39:fc:58:14:6b:fe:d4:a4:ed:79:6b:08:
         0c:41:72:e7:37:22:06:09:be:23:e9:3f:44:9a:1e:e9:61:9d:
         cc:b1:90:5c:fc:3d:d2:8d:ac:42:3d:65:36:d4:b4:3d:40:28:
         8f:9b:10:cf:23:26:cc:4b:20:cb:90:1f:5d:8c:4c:34:ca:3c:
         d8:e5:37:d6:6f:a5:20:bd:34:eb:26:d9:ae:0d:e7:c5:9a:f7:
         a1:b4:21:91:33:6f:86:e8:58:bb:25:7c:74:0e:58:fe:75:1b:
         63:3f:ce:31:7c:9b:8f:1b:96:9e:c5:53:76:84:5b:9c:ad:91:
         fa:ac:ed:93:ba:5d:c8:21:53:c2:82:53:63:af:12:0d:50:87:
         11:1b:3d:54:52:96:8a:2c:9c:3d:92:1a:08:9a:05:2e:c7:93:
         a5:48:91:d3
pkcs7-signedData
  • 1
    • SHA1: nil
    • 1.3.6.1.4.1.311.2.1.4
      • #0
        • 1.3.6.1.4.1.311.2.1.15
          • :
            00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
            00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |
        • SHA1
          • 46 ed 90 90 42 1e 90 98  96 25 9c 67 98 ee f4 68  |F...B....%.g...h|
            2e 1c 54 21                                       |..T!            |
    • Certificates
      • Certificate #0
        • 2
          • 07:1A:76:01:07:B4:DE:79:3C:D4:8C:0E:DA:1D:F0:B5
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • O: VeriSign, Inc.
            • OU: VeriSign Trust Network
            • OU: Terms of use at https://www.verisign.com/rpa (c)10
            • CN: VeriSign Class 3 Code Signing 2010 CA
          • 2011-08-05 00:00:00 UTC: 2013-08-04 23:59:59 UTC
          • Subject
            • C: US
            • ST: California
            • L: San Francisco
            • O: CBS Interactive
            • OU: Digital ID Class 3 - Microsoft Software Validation v2
            • CN: CBS Interactive
          • #5
            • rsaEncryption: nil
            • AD:05:9B:45:A8:29:5E:12:6D:CA:51:BE:22:29:51:6D:
              10:FB:E6:B7:B5:D5:CC:C2:36:D1:5A:F7:60:C4:37:1E:
              52:27:57:9C:DE:08:46:55:AA:7F:C7:49:9E:50:0D:69:
              CF:25:3A:06:80:0F:3C:66:41:2F:65:5B:EA:95:C1:D2:
              80:62:E9:59:AA:71:42:B6:7D:3C:7E:83:AC:04:72:22:
              E4:B7:3F:9E:E3:5B:C3:03:09:8B:C4:BC:E9:AE:9B:77:
              A5:6C:3B:CA:0B:74:71:A8:24:5D:C2:01:D5:8E:A2:F4:
              08:28:FE:82:15:D9:E6:EB:33:85:B3:40:C0:00:80:79:
              F6:5F:88:D6:88:7B:80:12:B8:3F:33:F6:17:BB:8B:3B:
              5F:BC:40:6D:ED:D9:E4:BF:24:92:42:2D:FA:AA:E8:69:
              6E:08:12:23:22:D3:29:29:D1:20:F2:89:0F:7E:FC:A9:
              54:C4:D4:DC:3B:42:D2:B9:51:1E:1C:A6:1E:02:F9:CC:
              CD:08:67:95:6C:9B:8F:1C:32:0B:60:86:54:0A:58:26:
              13:CD:53:96:97:18:CC:DA:75:4E:97:7C:86:F4:1E:D4:
              A5:87:89:16:E9:E9:66:6A:D3:57:0D:09:50:A5:46:F7:
              5E:D1:E9:70:A7:FA:90:63:02:55:0A:80:89:C5:22:7F
              : 0x010001
          • X509v3 extensions
            • basicConstraints
              • nil
            • keyUsage: true, 0x80
            • crlDistributionPoints: http://csc3-2010-crl.verisign.com/CSC3-2010.crl
            • certificatePolicies
              • 2.16.840.1.113733.1.7.23.3
                • id-qt-cps: https://www.verisign.com/rpa
            • extendedKeyUsage: codeSigning
            • authorityInfoAccess
              • #0
                • OCSP: http://ocsp.verisign.com
                • caIssuers: http://csc3-2010-aia.verisign.com/CSC3-2010.cer
            • authorityKeyIdentifier:
              cf 99 a9 ea 7b 26 f4 4b  c9 8e 8f d7 f0 05 26 ef  |....{&.K......&.|
              e3 d2 a7 9d                                       |....            |
            • nsCertType: 0x10
            • 1.3.6.1.4.1.311.2.1.27
              • false: true
        • RSA-SHA1:
          95 d0 63 ae f8 6c 75 c4  aa 81 14 2c 31 e3 51 cd  |..c..lu....,1.Q.|
          6e 16 1d 2a 25 93 7b 47  77 96 ed 20 55 06 82 4d  |n..*%.{Gw.. U..M|
          c2 f9 ee 1b aa c6 72 91  87 04 fd e4 cb a0 0b 51  |......r........Q|
          5b 9b 9b 20 28 f0 5e 98  de 25 a9 19 72 d5 71 2d  |[.. (.^..%..r.q-|
          12 e5 f2 0d be 57 58 f9  19 bd 1c be cf fb 22 a2  |.....WX.......".|
          f8 12 9e 2e df 66 ab bf  62 be 81 cf c8 f7 07 b8  |.....f..b.......|
          ff 18 10 b9 47 17 d4 e7  b9 2f ec c1 f5 1f f8 66  |....G..../.....f|
          85 58 d7 ce db 5d f7 63  61 44 39 b0 89 eb 21 a5  |.X...].caD9...!.|
          49 9b da e8 f5 bb 75 64  c5 23 ec c1 a1 df a9 4b  |I.....ud.#.....K|
          1a 82 33 79 92 69 e9 37  0a 41 c0 2a 71 31 9d 2b  |..3y.i.7.A.*q1.+|
          54 87 da 52 11 a3 fe 04  2d 8d e3 58 d8 07 4d c3  |T..R....-..X..M.|
          36 d1 18 7b c8 42 b1 05  99 79 b7 43 1e 32 e2 b1  |6..{.B...y.C.2..|
          25 8e 07 38 d9 44 9e a4  4e f7 a1 7b 7a ee b3 12  |%..8.D..N..{z...|
          6f c3 f6 c7 69 bd fc 3a  a3 77 5f db 66 5a fb ba  |o...i..:.w_.fZ..|
          b0 80 14 4a fe bc 55 42  a7 4d ca a3 88 4c 9f d2  |...J..UB.M...L..|
          ec 19 55 57 f9 b2 a2 c7  c7 f1 53 5c f0 0b 63 27  |..UW......S\..c'|
      • Certificate #1
        • 2
          • 52:00:E5:AA:25:56:FC:1A:86:ED:96:C9:D4:4B:33:C7
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • O: VeriSign, Inc.
            • OU: VeriSign Trust Network
            • OU: (c) 2006 VeriSign, Inc. - For authorized use only
            • CN: VeriSign Class 3 Public Primary Certification Authority - G5
          • 2010-02-08 00:00:00 UTC: 2020-02-07 23:59:59 UTC
          • Subject
            • C: US
            • O: VeriSign, Inc.
            • OU: VeriSign Trust Network
            • OU: Terms of use at https://www.verisign.com/rpa (c)10
            • CN: VeriSign Class 3 Code Signing 2010 CA
          • #5
            • rsaEncryption: nil
            • F5:23:4B:5E:A5:D7:8A:BB:32:E9:D4:57:F7:EF:E4:C7:
              26:7E:AD:19:98:FE:A8:9D:7D:94:F6:36:6B:10:D7:75:
              81:30:7F:04:68:7F:CB:2B:75:1E:CD:1D:08:8C:DF:69:
              94:A7:37:A3:9C:7B:80:E0:99:E1:EE:37:4D:5F:CE:3B:
              14:EE:86:D4:D0:F5:27:35:BC:25:0B:38:A7:8C:63:9D:
              17:A3:08:A5:AB:B0:FB:CD:6A:62:82:4C:D5:21:DA:1B:
              D9:F1:E3:84:3B:8A:2A:4F:85:5B:90:01:4F:C9:A7:76:
              10:7F:27:03:7C:BE:AE:7E:7D:C1:DD:F9:05:BC:1B:48:
              9C:69:E7:C0:A4:3C:3C:41:00:3E:DF:96:E5:C5:E4:94:
              71:D6:55:01:C7:00:26:4A:40:3C:B5:A1:26:A9:0C:A7:
              6D:80:8E:90:25:7B:CF:BF:3F:1C:EB:2F:96:FA:E5:87:
              77:C6:B5:56:B2:7A:3B:54:30:53:1B:DF:62:34:FF:1E:
              D1:F4:5A:93:28:85:E5:4C:17:4E:7E:5B:FD:A4:93:99:
              7F:DF:CD:EF:A4:75:EF:EF:15:F6:47:E7:F8:19:72:D8:
              2E:34:1A:A6:B4:A7:4C:7E:BD:BB:4F:0C:3D:57:F1:30:
              D6:A6:36:8E:D6:80:76:D7:19:2E:A5:CD:7E:34:2D:89
              : 0x010001
          • X509v3 extensions
            • basicConstraints
              • true
              • true: 0
            • certificatePolicies
              • 2.16.840.1.113733.1.7.23.3
                • #0
                  • id-qt-cps: https://www.verisign.com/cps
                  • id-qt-unotice: https://www.verisign.com/rpa
            • keyUsage: true, 6
            • 1.3.6.1.5.5.7.1.12
              • image/gif
                • SHA1:
                  8f e5 d3 1a 86 ac 8d 8e  6b c3 cf 80 6a d4 48 18  |........k...j.H.|
                  2c 7b 19 2e                                       |,{..            |
                • http://logo.verisign.com/vslogo.gif
            • crlDistributionPoints: http://crl.verisign.com/pca3-g5.crl
            • authorityInfoAccess
              • OCSP: http://ocsp.verisign.com
            • extendedKeyUsage
              • clientAuth: codeSigning
            • subjectAltName
              • CN: VeriSignMPKI-2-8
            • subjectKeyIdentifier:
              cf 99 a9 ea 7b 26 f4 4b  c9 8e 8f d7 f0 05 26 ef  |....{&.K......&.|
              e3 d2 a7 9d                                       |....            |
            • authorityKeyIdentifier:
              7f d3 65 a7 c2 dd ec bb  f0 30 09 f3 43 39 fa 02  |..e......0..C9..|
              af 33 31 33                                       |.313            |
        • RSA-SHA1:
          56 22 e6 34 a4 c4 61 cb  48 b9 01 ad 56 a8 64 0f  |V".4..a.H...V.d.|
          d9 8c 91 c4 bb cc 0c e5  ad 7a a0 22 7f df 47 38  |.........z."..G8|
          4a 2d 6c d1 7f 71 1a 7c  ec 70 a9 b1 f0 4f e4 0f  |J-l..q.|.p...O..|
          0c 53 fa 15 5e fe 74 98  49 24 85 81 26 1c 91 14  |.S..^.t.I$..&...|
          47 b0 4c 63 8c bb a1 34  d4 c6 45 e8 0d 85 26 73  |G.Lc...4..E...&s|
          03 d0 a9 8c 64 6d dc 71  92 e6 45 05 60 15 59 51  |....dm.q..E.`.YQ|
          39 fc 58 14 6b fe d4 a4  ed 79 6b 08 0c 41 72 e7  |9.X.k....yk..Ar.|
          37 22 06 09 be 23 e9 3f  44 9a 1e e9 61 9d cc b1  |7"...#.?D...a...|
          90 5c fc 3d d2 8d ac 42  3d 65 36 d4 b4 3d 40 28  |.\.=...B=e6..=@(|
          8f 9b 10 cf 23 26 cc 4b  20 cb 90 1f 5d 8c 4c 34  |....#&.K ...].L4|
          ca 3c d8 e5 37 d6 6f a5  20 bd 34 eb 26 d9 ae 0d  |.<..7.o. .4.&...|
          e7 c5 9a f7 a1 b4 21 91  33 6f 86 e8 58 bb 25 7c  |......!.3o..X.%||
          74 0e 58 fe 75 1b 63 3f  ce 31 7c 9b 8f 1b 96 9e  |t.X.u.c?.1|.....|
          c5 53 76 84 5b 9c ad 91  fa ac ed 93 ba 5d c8 21  |.Sv.[........].!|
          53 c2 82 53 63 af 12 0d  50 87 11 1b 3d 54 52 96  |S..Sc...P...=TR.|
          8a 2c 9c 3d 92 1a 08 9a  05 2e c7 93 a5 48 91 d3  |.,.=.........H..|
    • Signer
      • 1
      • unnamed
        • #0
          • C: US
          • O: VeriSign, Inc.
          • OU: VeriSign Trust Network
          • OU: Terms of use at https://www.verisign.com/rpa (c)10
          • CN: VeriSign Class 3 Code Signing 2010 CA
        • 07:1A:76:01:07:B4:DE:79:3C:D4:8C:0E:DA:1D:F0:B5
      • SHA1: nil
      • #3
        • contentType: 1.3.6.1.4.1.311.2.1.4
        • 1.3.6.1.4.1.311.2.1.11: msCodeInd
        • messageDigest:
          53 8b b1 d7 53 87 f9 e2  e3 dd b9 f3 c5 fa 16 6c  |S...S..........l|
          2c 0c fe ca                                       |,...            |
        • 1.3.6.1.4.1.311.2.1.12
          • 00 43 00 42 00 53 00 20  00 49 00 6e 00 74 00 65  |.C.B.S. .I.n.t.e|
            00 72 00 61 00 63 00 74  00 69 00 76 00 65 00 20  |.r.a.c.t.i.v.e. |
            00 44 00 6f 00 77 00 6e  00 6c 00 6f 00 61 00 64  |.D.o.w.n.l.o.a.d|
            00 20 00 4d 00 61 00 6e  00 61 00 67 00 65 00 72  |. .M.a.n.a.g.e.r|
            : http://download.cnet.com
      • rsaEncryption:
        61 bb eb dc dc a1 83 2b  f1 38 bc bf e4 3f 6d ea  |a......+.8...?m.|
        28 04 02 04 8d 6e 28 e1  ff 39 ab 5d ac fc 41 d5  |(....n(..9.]..A.|
        00 b9 f0 10 27 f7 0a a5  85 f9 54 51 4f ad b6 10  |....'.....TQO...|
        b6 15 bd f8 bd f0 e1 1c  84 fe 20 1f 9e c4 94 dd  |.......... .....|
        e7 cf 0a 19 4a 53 ea 2c  ff 00 cf a6 a7 44 2f 80  |....JS.,.....D/.|
        f2 37 bd 81 c6 98 d6 df  99 6a d9 09 14 d5 b9 b3  |.7.......j......|
        6a 24 1e e0 b7 f7 c9 2f  55 1f 75 50 0f ea 33 33  |j$...../U.uP..33|
        8c f6 39 e6 3b 75 67 4d  9f 76 47 3a 2f 5f b3 ab  |..9.;ugM.vG:/_..|
        00 3e cb a3 01 d8 96 e3  e8 3e 11 17 fe 60 b4 93  |.>.......>...`..|
        e0 49 91 61 6b f7 cb 36  94 2d 02 c2 35 3f 5b cc  |.I.ak..6.-..5?[.|
        93 cc a5 c2 d7 22 87 e8  ae 5b 03 41 e0 c7 02 0b  |....."...[.A....|
        a2 02 97 9a cb 47 66 92  1d ed e0 5b 35 10 9b db  |.....Gf....[5...|
        ea dc 59 01 b9 77 4a d2  a9 9d 6c 32 35 ab df 78  |..Y..wJ...l25..x|
        1b c0 18 7f 27 41 7c 3d  fc d4 65 3c c3 b9 7e 6a  |....'A|=..e<..~j|
        c9 2e 26 28 a4 02 b8 0f  31 93 fc 14 71 74 b4 64  |..&(....1...qt.d|
        b9 ca ff 37 1c b0 64 22  53 95 13 f4 b9 8a 0d 44  |...7..d"S......D|
offsetsizetypecomment
038400EXE06/22/2012 18:07:51#
9600549240BINoverlay data past EOF#
Path = [0]
Size = 515216
Packed Size = 515216
Offset = 68608
--
Path = [0]
Type = Nsis
Method = LZMA:23
Solid = +

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
2012-07-06 18:25:54 .....       163920       512133  $PLUGINSDIR/lua51.dll
2012-04-01 06:44:50 .....        11264               $PLUGINSDIR/LuaXml_lib.dll
                    .....         6144               $PLUGINSDIR/version.dll
                    .....        20480               $PLUGINSDIR/LuaBridge.dll
                    .....         4608               $PLUGINSDIR/UACInfo.dll
                    .....        10240               $PLUGINSDIR/$PLUGINSDIR/System.dll
2012-06-24 20:51:16 .....         4372               $PLUGINSDIR/definitions.lua
2012-07-15 03:13:32 .....        40113               $PLUGINSDIR/utils.lua
2012-04-01 06:44:50 .....         2520               $PLUGINSDIR/LuaSocket/lua/socket/$PLUGINSDIR/LuaSocket/lua/mime.lua
2012-06-22 03:59:24 .....         4194               $PLUGINSDIR/LuaSocket/lua/socket/$PLUGINSDIR/LuaSocket/lua/socket.lua
2012-04-01 06:44:50 .....         8469               $PLUGINSDIR/LuaSocket/lua/socket/$PLUGINSDIR/LuaSocket/lua/ltn12.lua
2012-05-30 18:14:56 .....        12683               $PLUGINSDIR/LuaSocket/lua/socket/$PLUGINSDIR/LuaSocket/lua/socket/http.lua
2012-05-21 17:58:30 .....         9594               $PLUGINSDIR/LuaSocket/lua/socket/$PLUGINSDIR/LuaSocket/lua/socket/ftp.lua
2012-04-01 06:44:50 .....         3731               $PLUGINSDIR/LuaSocket/lua/socket/$PLUGINSDIR/LuaSocket/lua/socket/tp.lua
2012-04-01 06:44:50 .....         8212               $PLUGINSDIR/LuaSocket/lua/socket/$PLUGINSDIR/LuaSocket/lua/socket/smtp.lua
2012-04-01 06:44:50 .....        10826               $PLUGINSDIR/LuaSocket/lua/socket/$PLUGINSDIR/LuaSocket/lua/socket/url.lua
2012-04-01 06:44:50 .....        81920               $PLUGINSDIR/LuaSocket/lua/socket/$PLUGINSDIR/LuaSocket/socket/core.dll
2012-04-01 06:44:50 .....        53248               $PLUGINSDIR/LuaSocket/lua/socket/$PLUGINSDIR/LuaSocket/mime/core.dll
2012-04-01 06:44:50 .....         4053               $PLUGINSDIR/LuaSocket/lua/socket/$PLUGINSDIR/LuaXml.lua
2012-07-17 00:30:58 .....        18590               $PLUGINSDIR/LuaSocket/lua/socket/$PLUGINSDIR/json.lua
2012-04-01 06:44:50 .....       293888               $PLUGINSDIR/LuaSocket/lua/socket/$PLUGINSDIR/luacom.dll
2012-04-01 06:44:50 .....         1784               $PLUGINSDIR/LuaSocket/lua/socket/$PLUGINSDIR/extension.tlb
2012-08-03 23:09:08 .....        96643               $PLUGINSDIR/LuaSocket/lua/socket/$PLUGINSDIR/GuiInit.lua
2012-07-22 03:58:16 .....        10943               $PLUGINSDIR/LuaSocket/lua/socket/$PLUGINSDIR/DownloadList.lua
2012-04-01 06:44:50 .....          912               $PLUGINSDIR/LuaSocket/lua/socket/$PLUGINSDIR/Events.lua
2012-07-22 03:55:54 .....         7942               $PLUGINSDIR/LuaSocket/lua/socket/$PLUGINSDIR/DownloadThread.lua
2012-08-04 05:31:12 .....        29272               $PLUGINSDIR/LuaSocket/lua/socket/$PLUGINSDIR/IntegratedOffer.lua
2012-07-16 20:02:56 .....         4046               $PLUGINSDIR/LuaSocket/lua/socket/$PLUGINSDIR/BrowserControl.lua
2012-04-01 06:44:50 .....       170095               $PLUGINSDIR/download.com/$PLUGINSDIR/res/jquery.js
2012-08-04 05:21:40 .....        40346               $PLUGINSDIR/download.com/$PLUGINSDIR/res/common.js
2012-04-01 06:44:50 .....         1593               $PLUGINSDIR/download.com/$PLUGINSDIR/res/common.css
2012-04-19 07:12:50 .....        39823               $PLUGINSDIR/download.com/$PLUGINSDIR/res/knockout.js
2012-07-26 20:35:46 .....         2442               $PLUGINSDIR/download.com/accept.gif
2012-05-17 04:51:04 .....        24665               $PLUGINSDIR/download.com/bg.gif
2012-04-16 22:54:44 .....         1352               $PLUGINSDIR/download.com/cancel.gif
2012-04-16 22:54:44 .....         1331               $PLUGINSDIR/download.com/close.gif
2012-07-26 20:35:48 .....         2419               $PLUGINSDIR/download.com/decline.gif
2012-07-04 00:19:08 .....         2175               $PLUGINSDIR/download.com/headicon.png
2012-07-16 07:56:52 .....         1528               $PLUGINSDIR/download.com/iconCheck.png
2012-04-16 22:54:54 .....         1610               $PLUGINSDIR/download.com/installNow.gif
2012-07-09 20:16:14 .....         2580               $PLUGINSDIR/download.com/installOpen.gif
2012-04-19 18:10:52 .....         1255               $PLUGINSDIR/download.com/later.gif
2012-06-24 06:38:22 .....         6100               $PLUGINSDIR/download.com/loading.gif
2012-04-19 20:05:40 .....         1390               $PLUGINSDIR/download.com/nextStep.gif
2012-04-19 06:10:02 .....        28808               $PLUGINSDIR/download.com/outer.har
2012-04-18 22:12:06 .....          769               $PLUGINSDIR/download.com/progress.gif
2012-04-19 06:10:56 .....        10688               $PLUGINSDIR/download.com/progress.har
2012-04-18 22:12:06 .....          517               $PLUGINSDIR/download.com/progressPause.gif
2012-04-18 22:12:06 .....          511               $PLUGINSDIR/download.com/progressPlay.gif
2012-04-16 22:55:08 .....          616               $PLUGINSDIR/download.com/step1of4.png
2012-08-06 22:35:50 .....         2050               $_OUTDIR/$PLUGINSDIR/__localxml.xml
2012-07-23 05:04:44 .....         4728               $_OUTDIR/$PLUGINSDIR/AdvancedTests.lua
                    .....        25600               $PLUGINSDIR/$PLUGINSDIR/FloatingProgress.dll
2012-04-01 06:44:50 .....         4096               $PLUGINSDIR/$2/$PLUGINSDIR/un.package.exe
                    .....        43008               $PLUGINSDIR/$PLUGINSDIR/customNsWeb.dll
                    .....         4096               $PLUGINSDIR/$PLUGINSDIR/ButtonEvent.dll
                    .....         5120               $PLUGINSDIR/$PLUGINSDIR/CustomBrandingURL.dll
2012-08-06 22:35:50 .....        46775               $PLUGINSDIR/$PLUGINSDIR/SkinDownloadDotCom.html.pack
                    .....         9728               $PLUGINSDIR/$PLUGINSDIR/nsDialogs.dll
                    .....         5120               $PLUGINSDIR/$PLUGINSDIR/NotifyIcon.dll
                    .....        40960               $R5/$PLUGINSDIR/nsisunz.dll
                    .....                            $[163]/$PLUGINSDIR/nsis7z.dll
------------------- ----- ------------ ------------  ------------------------
                               1458505       512133  62 files, 0 folders
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

[?] can't find file_offset of VA 0x27000