comments powered byDisqus

MZ Header

Rich Header

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Packer / Compiler

Sections

Data Directory

Signers (1)

issuer: /C=US/O=thawte, Inc./CN=thawte SHA256 Code Signing CA
serial: 285E23F43D6CA57A1D3D11700B017A1B

Certificates (2)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:a0:b7:36:95:dd:b1:af:c2:3b:2b:9a:18:ee:54:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2006 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA
        Validity
            Not Before: Dec 10 00:00:00 2013 GMT
            Not After : Dec  9 23:59:59 2023 GMT
        Subject: C=US, O=thawte, Inc., CN=thawte SHA256 Code Signing CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:9b:55:02:4c:17:05:e9:d0:66:c3:fc:28:ad:d3:
                    c0:fe:ef:e0:e9:7e:d4:1e:f6:aa:1b:91:46:fd:f5:
                    16:ed:98:07:53:fa:ba:87:1b:7d:9e:1f:01:27:ab:
                    b9:d2:67:ca:b7:10:25:53:f4:e3:be:9b:90:b8:ed:
                    23:5c:42:ef:64:25:58:e5:88:22:1a:be:f5:c7:ae:
                    f5:be:8a:b1:11:11:93:1a:22:a9:74:69:c1:74:b6:
                    68:87:a7:83:30:f9:64:f1:b1:e3:38:3e:f4:d6:c1:
                    fc:12:fe:73:57:17:35:57:8a:dd:50:8d:03:f8:66:
                    cd:ca:76:83:13:c8:d7:0e:71:1d:e4:63:c9:ba:17:
                    f8:d1:b9:e4:88:d2:2c:28:c8:21:20:0d:41:b7:0b:
                    e2:2f:c2:80:e6:88:7b:53:6c:c3:44:63:81:7f:68:
                    47:8c:2b:2a:cf:5b:f4:8c:49:61:ba:69:85:fd:6b:
                    00:78:05:26:69:13:30:80:38:4e:f1:5a:55:c9:c5:
                    50:d6:aa:38:89:47:43:5c:fe:4d:73:a5:49:c5:93:
                    69:fe:77:96:9a:af:f3:8c:0e:57:ba:33:d9:0e:c6:
                    42:d3:03:77:c4:bb:39:ad:91:f9:f3:f7:96:5c:3a:
                    64:a6:ed:27:57:c1:e8:40:f3:53:f2:be:29:34:fe:
                    5f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access: 
                OCSP - URI:http://t2.symcb.com

            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://t1.symcb.com/ThawtePCA.crl

            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, Code Signing
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=SymantecPKI-1-568
            X509v3 Subject Key Identifier: 
                57:86:9B:54:B8:BE:A6:29:8A:E4:F6:C2:E2:13:18:89:85:CD:DC:B7
            X509v3 Authority Key Identifier: 
                keyid:7B:5B:45:CF:AF:CE:CB:7A:FD:31:92:1A:6A:B6:F3:46:EB:57:48:50

    Signature Algorithm: sha256WithRSAEncryption
         24:3b:f5:d7:a0:36:13:c7:43:fe:f0:09:87:68:d1:98:31:6e:
         12:e4:3f:1e:1f:96:7b:6b:4c:1e:87:9e:8b:c5:6c:a3:b1:0c:
         7b:50:92:d5:81:9c:b1:8f:2c:29:b7:ee:f9:91:05:b9:8e:41:
         f1:2c:f6:d0:59:2d:98:e0:b9:ea:80:01:47:40:95:b8:3d:9d:
         03:bd:79:bb:35:b6:ad:9c:4c:27:f6:67:45:10:c9:c5:bc:87:
         4e:55:7b:d2:87:bb:dd:dc:30:ef:c6:d4:6c:cc:99:35:6d:1c:
         e0:60:d3:cd:68:8f:29:59:4b:89:96:08:46:c9:8e:fc:75:4f:
         c5:dc:09:cc:4e:27:8b:44:cd:07:bc:ac:04:e0:b5:33:a5:87:
         9f:f4:dd:73:0c:91:ea:12:81:6f:e3:75:f0:1e:b5:93:6c:44:
         17:d5:3e:97:c9:bd:07:2c:56:77:1f:85:dd:46:e8:bf:de:2c:
         81:94:a3:f7:e5:b7:a7:c1:37:9f:75:ca:55:77:4d:5e:36:29:
         ca:85:d8:45:41:72:57:75:c0:79:5b:fa:34:10:06:6d:64:20:
         42:b7:3a:c8:1f:1d:46:64:02:5f:c6:47:be:f0:c4:3a:28:54:
         da:f6:1e:4f:9a:a2:19:43:a4:6f:49:f8:fc:5e:42:20:28:84:
         8b:47:20:6e

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:5e:23:f4:3d:6c:a5:7a:1d:3d:11:70:0b:01:7a:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=thawte, Inc., CN=thawte SHA256 Code Signing CA
        Validity
            Not Before: Mar  3 00:00:00 2016 GMT
            Not After : Feb 28 23:59:59 2017 GMT
        Subject: C=US, ST=Nevada, L=Incline Village, O=Cloud Software, CN=Cloud Software
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ab:71:79:57:ca:5f:f5:ab:9c:00:4c:47:ce:32:
                    23:f3:be:36:13:52:d7:fb:d8:a1:d5:3c:5f:39:99:
                    02:ea:75:76:f1:5b:29:e5:6c:66:56:f7:ce:68:96:
                    db:3a:0f:8e:36:fc:f2:09:d6:c5:eb:13:37:ed:b7:
                    31:95:59:62:4b:12:d6:16:7a:cc:3c:80:c1:e2:8c:
                    43:fc:50:db:ef:bf:e5:59:17:18:be:33:c9:2f:ba:
                    2e:ed:3d:52:c3:b8:5f:5a:13:02:62:3e:e4:c8:e8:
                    52:e3:a5:ee:05:1e:b0:29:e0:1e:38:97:d3:c5:dc:
                    b3:ed:8d:a3:75:e7:6b:51:01:d6:fa:85:bd:43:6a:
                    58:7b:93:05:bd:cd:75:62:c8:f2:74:14:d5:b9:e3:
                    32:81:2f:2d:99:b9:66:d3:9b:10:d3:14:31:2d:f6:
                    31:f4:da:f6:f4:25:19:49:c4:a5:ab:10:40:42:04:
                    f9:de:1f:09:83:d8:75:90:a0:6e:8d:2b:c1:6e:21:
                    ac:a0:3a:5c:58:de:d1:bb:af:18:65:35:02:42:e5:
                    61:f9:db:16:84:80:13:19:9f:bd:2d:37:c7:ac:f0:
                    bc:85:0c:1d:c0:1f:2a:98:e8:53:8e:17:40:34:76:
                    00:5a:51:af:59:19:36:6c:eb:a8:17:cf:db:92:b9:
                    92:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Authority Key Identifier: 
                keyid:57:86:9B:54:B8:BE:A6:29:8A:E4:F6:C2:E2:13:18:89:85:CD:DC:B7

            X509v3 Subject Key Identifier: 
                85:84:A1:6E:FA:F6:BA:A1:39:E6:84:C1:0F:D3:64:73:E4:1B:96:95
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://tl.symcb.com/tl.crl

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.4.1
                  CPS: https://www.thawte.com/cps
                  User Notice:
                    Explicit Text: https://www.thawte.com/repository

            2.5.29.4: 
                0.0.0..
+.....7.......
            Authority Information Access: 
                OCSP - URI:http://tl.symcd.com
                CA Issuers - URI:http://tl.symcb.com/tl.crt

            Netscape Cert Type: 
                Object Signing
    Signature Algorithm: sha256WithRSAEncryption
         5f:b6:03:6a:4d:1b:4e:8e:a0:41:81:ed:69:a5:b4:4d:6f:0f:
         3d:69:6c:a1:5f:7e:bd:6c:d2:35:af:3b:61:07:ce:67:74:8a:
         58:76:c2:c1:02:ed:b4:b3:2f:bd:06:32:88:b8:a0:25:15:2f:
         df:3a:e2:8e:10:6d:5b:d2:4a:27:b9:3e:10:61:76:2a:df:53:
         3d:aa:e1:fe:40:0e:04:3b:22:8a:7a:79:27:a6:ad:7d:fb:15:
         c6:9a:e0:21:04:1d:89:01:cd:dd:55:24:9d:21:54:dc:44:21:
         8c:6a:a9:e7:06:0f:f7:69:b4:83:ec:d5:95:36:c0:f4:65:30:
         7c:1c:8a:25:e7:26:8a:e7:33:cf:56:1b:a7:c4:23:39:29:fd:
         b2:86:42:e1:4f:98:80:cb:71:4a:cc:da:94:6f:c4:59:7e:fc:
         c8:7f:aa:2c:56:92:49:7a:78:d2:46:56:74:2e:c7:e2:5c:5d:
         9f:78:5f:76:91:b6:06:53:ab:c8:cd:65:b0:12:00:60:e9:7e:
         5d:3a:04:bf:93:5b:22:0e:e3:1f:10:9e:89:89:e0:e5:b9:ef:
         cd:eb:69:d1:bc:f9:18:75:ca:6b:fd:36:d7:31:13:6a:30:9d:
         ae:20:dd:43:9a:cc:25:7b:3d:f6:02:e2:2b:af:66:0c:1c:0e:
         36:b0:e2:d5
pkcs7-signedData
  • 1
    • SHA1: nil
    • 1.3.6.1.4.1.311.2.1.4
      • #0
        • 1.3.6.1.4.1.311.2.1.15
          • :
            00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
            00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |
        • SHA1
          • 5b 38 d5 6d ad 71 e0 4b  13 2e 45 9e 69 99 09 24  |[8.m.q.K..E.i..$|
            58 38 1b 58                                       |X8.X            |
    • Certificates
      • Certificate #0
        • 2
          • 71:A0:B7:36:95:DD:B1:AF:C2:3B:2B:9A:18:EE:54:CB
          • RSA-SHA256: nil
          • Issuer
            • C: US
            • O: thawte, Inc.
            • OU: Certification Services Division
            • OU: (c) 2006 thawte, Inc. - For authorized use only
            • CN: thawte Primary Root CA
          • 2013-12-10 00:00:00 UTC: 2023-12-09 23:59:59 UTC
          • Subject
            • C: US
            • O: thawte, Inc.
            • CN: thawte SHA256 Code Signing CA
          • #5
            • rsaEncryption: nil
            • 9B:55:02:4C:17:05:E9:D0:66:C3:FC:28:AD:D3:C0:FE:
              EF:E0:E9:7E:D4:1E:F6:AA:1B:91:46:FD:F5:16:ED:98:
              07:53:FA:BA:87:1B:7D:9E:1F:01:27:AB:B9:D2:67:CA:
              B7:10:25:53:F4:E3:BE:9B:90:B8:ED:23:5C:42:EF:64:
              25:58:E5:88:22:1A:BE:F5:C7:AE:F5:BE:8A:B1:11:11:
              93:1A:22:A9:74:69:C1:74:B6:68:87:A7:83:30:F9:64:
              F1:B1:E3:38:3E:F4:D6:C1:FC:12:FE:73:57:17:35:57:
              8A:DD:50:8D:03:F8:66:CD:CA:76:83:13:C8:D7:0E:71:
              1D:E4:63:C9:BA:17:F8:D1:B9:E4:88:D2:2C:28:C8:21:
              20:0D:41:B7:0B:E2:2F:C2:80:E6:88:7B:53:6C:C3:44:
              63:81:7F:68:47:8C:2B:2A:CF:5B:F4:8C:49:61:BA:69:
              85:FD:6B:00:78:05:26:69:13:30:80:38:4E:F1:5A:55:
              C9:C5:50:D6:AA:38:89:47:43:5C:FE:4D:73:A5:49:C5:
              93:69:FE:77:96:9A:AF:F3:8C:0E:57:BA:33:D9:0E:C6:
              42:D3:03:77:C4:BB:39:AD:91:F9:F3:F7:96:5C:3A:64:
              A6:ED:27:57:C1:E8:40:F3:53:F2:BE:29:34:FE:5F:F9
              : 0x010001
          • X509v3 extensions
            • authorityInfoAccess
              • OCSP: http://t2.symcb.com
            • basicConstraints
              • true
              • true: 0
            • crlDistributionPoints: http://t1.symcb.com/ThawtePCA.crl
            • extendedKeyUsage
              • clientAuth: codeSigning
            • keyUsage: true, 6
            • subjectAltName
              • CN: SymantecPKI-1-568
            • subjectKeyIdentifier:
              57 86 9b 54 b8 be a6 29  8a e4 f6 c2 e2 13 18 89  |W..T...)........|
              85 cd dc b7                                       |....            |
            • authorityKeyIdentifier:
              7b 5b 45 cf af ce cb 7a  fd 31 92 1a 6a b6 f3 46  |{[E....z.1..j..F|
              eb 57 48 50                                       |.WHP            |
        • RSA-SHA256:
          24 3b f5 d7 a0 36 13 c7  43 fe f0 09 87 68 d1 98  |$;...6..C....h..|
          31 6e 12 e4 3f 1e 1f 96  7b 6b 4c 1e 87 9e 8b c5  |1n..?...{kL.....|
          6c a3 b1 0c 7b 50 92 d5  81 9c b1 8f 2c 29 b7 ee  |l...{P......,)..|
          f9 91 05 b9 8e 41 f1 2c  f6 d0 59 2d 98 e0 b9 ea  |.....A.,..Y-....|
          80 01 47 40 95 b8 3d 9d  03 bd 79 bb 35 b6 ad 9c  |..G@..=...y.5...|
          4c 27 f6 67 45 10 c9 c5  bc 87 4e 55 7b d2 87 bb  |L'.gE.....NU{...|
          dd dc 30 ef c6 d4 6c cc  99 35 6d 1c e0 60 d3 cd  |..0...l..5m..`..|
          68 8f 29 59 4b 89 96 08  46 c9 8e fc 75 4f c5 dc  |h.)YK...F...uO..|
          09 cc 4e 27 8b 44 cd 07  bc ac 04 e0 b5 33 a5 87  |..N'.D.......3..|
          9f f4 dd 73 0c 91 ea 12  81 6f e3 75 f0 1e b5 93  |...s.....o.u....|
          6c 44 17 d5 3e 97 c9 bd  07 2c 56 77 1f 85 dd 46  |lD..>....,Vw...F|
          e8 bf de 2c 81 94 a3 f7  e5 b7 a7 c1 37 9f 75 ca  |...,........7.u.|
          55 77 4d 5e 36 29 ca 85  d8 45 41 72 57 75 c0 79  |UwM^6)...EArWu.y|
          5b fa 34 10 06 6d 64 20  42 b7 3a c8 1f 1d 46 64  |[.4..md B.:...Fd|
          02 5f c6 47 be f0 c4 3a  28 54 da f6 1e 4f 9a a2  |._.G...:(T...O..|
          19 43 a4 6f 49 f8 fc 5e  42 20 28 84 8b 47 20 6e  |.C.oI..^B (..G n|
      • Certificate #1
        • 2
          • 28:5E:23:F4:3D:6C:A5:7A:1D:3D:11:70:0B:01:7A:1B
          • RSA-SHA256: nil
          • Issuer
            • C: US
            • O: thawte, Inc.
            • CN: thawte SHA256 Code Signing CA
          • 2016-03-03 00:00:00 UTC: 2017-02-28 23:59:59 UTC
          • Subject
            • C: US
            • ST: Nevada
            • L: Incline Village
            • O: Cloud Software
            • CN: Cloud Software
          • #5
            • rsaEncryption: nil
            • AB:71:79:57:CA:5F:F5:AB:9C:00:4C:47:CE:32:23:F3:
              BE:36:13:52:D7:FB:D8:A1:D5:3C:5F:39:99:02:EA:75:
              76:F1:5B:29:E5:6C:66:56:F7:CE:68:96:DB:3A:0F:8E:
              36:FC:F2:09:D6:C5:EB:13:37:ED:B7:31:95:59:62:4B:
              12:D6:16:7A:CC:3C:80:C1:E2:8C:43:FC:50:DB:EF:BF:
              E5:59:17:18:BE:33:C9:2F:BA:2E:ED:3D:52:C3:B8:5F:
              5A:13:02:62:3E:E4:C8:E8:52:E3:A5:EE:05:1E:B0:29:
              E0:1E:38:97:D3:C5:DC:B3:ED:8D:A3:75:E7:6B:51:01:
              D6:FA:85:BD:43:6A:58:7B:93:05:BD:CD:75:62:C8:F2:
              74:14:D5:B9:E3:32:81:2F:2D:99:B9:66:D3:9B:10:D3:
              14:31:2D:F6:31:F4:DA:F6:F4:25:19:49:C4:A5:AB:10:
              40:42:04:F9:DE:1F:09:83:D8:75:90:A0:6E:8D:2B:C1:
              6E:21:AC:A0:3A:5C:58:DE:D1:BB:AF:18:65:35:02:42:
              E5:61:F9:DB:16:84:80:13:19:9F:BD:2D:37:C7:AC:F0:
              BC:85:0C:1D:C0:1F:2A:98:E8:53:8E:17:40:34:76:00:
              5A:51:AF:59:19:36:6C:EB:A8:17:CF:DB:92:B9:92:09
              : 0x010001
          • X509v3 extensions
            • basicConstraints
              • nil
            • authorityKeyIdentifier:
              57 86 9b 54 b8 be a6 29  8a e4 f6 c2 e2 13 18 89  |W..T...)........|
              85 cd dc b7                                       |....            |
            • subjectKeyIdentifier:
              85 84 a1 6e fa f6 ba a1  39 e6 84 c1 0f d3 64 73  |...n....9.....ds|
              e4 1b 96 95                                       |....            |
            • crlDistributionPoints: http://tl.symcb.com/tl.crl
            • keyUsage: true, 0x80
            • extendedKeyUsage: codeSigning
            • certificatePolicies
              • 2.23.140.1.4.1
                • #0
                  • id-qt-cps: https://www.thawte.com/cps
                  • id-qt-unotice: https://www.thawte.com/repository
            • 2.5.29.4
              • msCodeCom: 0x80
            • authorityInfoAccess
              • #0
                • OCSP: http://tl.symcd.com
                • caIssuers: http://tl.symcb.com/tl.crt
            • nsCertType: 0x10
        • RSA-SHA256:
          5f b6 03 6a 4d 1b 4e 8e  a0 41 81 ed 69 a5 b4 4d  |_..jM.N..A..i..M|
          6f 0f 3d 69 6c a1 5f 7e  bd 6c d2 35 af 3b 61 07  |o.=il._~.l.5.;a.|
          ce 67 74 8a 58 76 c2 c1  02 ed b4 b3 2f bd 06 32  |.gt.Xv....../..2|
          88 b8 a0 25 15 2f df 3a  e2 8e 10 6d 5b d2 4a 27  |...%./.:...m[.J'|
          b9 3e 10 61 76 2a df 53  3d aa e1 fe 40 0e 04 3b  |.>.av*.S=...@..;|
          22 8a 7a 79 27 a6 ad 7d  fb 15 c6 9a e0 21 04 1d  |".zy'..}.....!..|
          89 01 cd dd 55 24 9d 21  54 dc 44 21 8c 6a a9 e7  |....U$.!T.D!.j..|
          06 0f f7 69 b4 83 ec d5  95 36 c0 f4 65 30 7c 1c  |...i.....6..e0|.|
          8a 25 e7 26 8a e7 33 cf  56 1b a7 c4 23 39 29 fd  |.%.&..3.V...#9).|
          b2 86 42 e1 4f 98 80 cb  71 4a cc da 94 6f c4 59  |..B.O...qJ...o.Y|
          7e fc c8 7f aa 2c 56 92  49 7a 78 d2 46 56 74 2e  |~....,V.Izx.FVt.|
          c7 e2 5c 5d 9f 78 5f 76  91 b6 06 53 ab c8 cd 65  |..\].x_v...S...e|
          b0 12 00 60 e9 7e 5d 3a  04 bf 93 5b 22 0e e3 1f  |...`.~]:...["...|
          10 9e 89 89 e0 e5 b9 ef  cd eb 69 d1 bc f9 18 75  |..........i....u|
          ca 6b fd 36 d7 31 13 6a  30 9d ae 20 dd 43 9a cc  |.k.6.1.j0.. .C..|
          25 7b 3d f6 02 e2 2b af  66 0c 1c 0e 36 b0 e2 d5  |%{=...+.f...6...|
    • 1
      • unnamed
        • #0
          • C: US
          • O: thawte, Inc.
          • CN: thawte SHA256 Code Signing CA
        • 28:5E:23:F4:3D:6C:A5:7A:1D:3D:11:70:0B:01:7A:1B
      • SHA1: nil
      • #2
        • 1.3.6.1.4.1.311.2.1.12
          • nil
        • contentType: 1.3.6.1.4.1.311.2.1.4
        • 1.3.6.1.4.1.311.2.1.11: msCodeCom
        • messageDigest:
          e4 4b 9a 43 3a 60 19 4d  df 43 71 45 6a ce 59 f4  |.K.C:`.M.CqEj.Y.|
          af 03 61 ef                                       |..a.            |
      • rsaEncryption:
        13 69 d5 c4 64 92 b5 95  b2 26 8c 11 d3 19 d1 05  |.i..d....&......|
        6a 40 4f da f1 ce e9 e5  58 05 93 c3 41 c8 71 04  |j@O.....X...A.q.|
        a6 55 79 07 42 25 c9 cb  e8 67 13 ea 85 ce 62 1d  |.Uy.B%...g....b.|
        dc 92 bb 93 d2 42 29 69  1c 8f 97 2c a4 30 a9 33  |.....B)i...,.0.3|
        83 41 2f 68 81 ec e1 8b  3d f9 f5 bf 63 a2 91 ee  |.A/h....=...c...|
        5e 7e 3e 92 90 12 96 45  05 7d 0f 09 f2 b1 bc 75  |^~>....E.}.....u|
        21 c2 ca bd 8c 89 57 82  b1 93 32 1f 0b 31 f2 a0  |!.....W...2..1..|
        d8 ff d4 f9 ec fb 4c fc  42 95 7a 96 a1 ca 90 c8  |......L.B.z.....|
        6a bb 6b 40 3e 1c 8c c1  c5 df 10 54 8b 2c d2 ce  |j.k@>......T.,..|
        9c f0 13 e0 61 aa 9e bc  ae 58 1e 7c 25 57 a4 c2  |....a....X.|%W..|
        4a f1 66 91 e9 ea 6f 4f  d4 df 66 59 4f d7 6c 47  |J.f...oO..fYO.lG|
        5b 87 66 d3 e8 91 79 73  09 d8 3b 27 4e c1 4d 0e  |[.f...ys..;'N.M.|
        3e e8 c4 05 ed 69 54 7b  d5 ad 8a a9 44 80 19 e2  |>....iT{....D...|
        0e 40 df f0 7e 8b 7a 3e  a4 cd bb d2 16 11 76 79  |.@..~.z>......vy|
        9a 4d b7 d9 26 ce 06 15  ee e3 27 20 ab 42 f8 64  |.M..&.....' .B.d|
        ed 1d 2c 99 58 49 53 d7  d4 86 47 4c e5 03 f0 a3  |..,.XIS...GL....|
offsetsizetypecomment
050176EXE02/24/2012 19:19:59#
c400791568BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

[?] can't find file_offset of VA 0x7a000