MZ Header

Rich Header

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Sections

Data Directory

StringTable 000004b0

VS_FIXEDFILEINFO

Signers (1)

issuer: /C=BE/O=GlobalSign nv-sa/CN=GlobalSign CodeSigning CA - SHA256 - G2
serial: 112142DDCC2002CF859ECEA5A2AB1AE0C5A9

Certificates (3)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:00:00:00:00:01:31:89:c6:37:e8
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: OU=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign
        Validity
            Not Before: Aug  2 10:00:00 2011 GMT
            Not After : Aug  2 10:00:00 2019 GMT
        Subject: C=BE, O=GlobalSign nv-sa, CN=GlobalSign CodeSigning CA - SHA256 - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ef:d1:9f:29:e9:d8:d3:82:76:3c:62:a0:d2:
                    49:d6:16:1e:f1:cf:f0:d0:ba:48:43:03:2d:a7:1d:
                    f2:01:34:49:a4:10:e9:62:13:f4:13:f4:16:83:b5:
                    d5:57:42:48:86:2b:95:58:87:ea:28:04:74:cb:72:
                    11:0f:61:26:e1:fa:1c:61:15:c7:28:9b:4d:0b:82:
                    0f:26:2b:90:3a:96:ed:a4:d0:6b:29:9c:f5:61:88:
                    e6:a4:57:6f:ee:f4:70:d0:8d:17:de:e6:66:76:5f:
                    74:1e:5e:0c:53:38:5d:90:f4:df:30:2d:1b:13:d1:
                    79:98:54:1a:4b:38:04:f4:07:c4:23:03:d3:92:cb:
                    f7:80:5d:aa:9c:56:06:44:2d:41:4c:48:b4:2d:ec:
                    35:92:9a:c6:95:d7:f5:ce:90:31:e2:76:b3:61:b8:
                    f1:75:57:42:ac:3b:ce:2b:c8:90:49:e8:b7:26:cf:
                    bb:0c:89:cb:d0:c3:a3:6a:a1:c9:d5:e3:9c:53:2b:
                    57:26:fe:56:9a:76:fd:61:46:a2:60:ec:29:46:47:
                    f2:cd:e0:82:62:c6:04:5a:e7:ed:4e:40:5c:48:06:
                    7d:9d:5f:e7:74:c9:9e:84:65:0d:5b:de:dc:d3:24:
                    1c:b4:14:11:eb:ab:bf:c4:1f:a4:ba:99:d0:17:58:
                    35:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Subject Key Identifier: 
                19:4A:B8:5A:E4:4D:31:A5:14:E5:5E:EC:2F:A3:1C:FA:80:8C:32:6B
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: https://www.globalsign.com/repository/

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.globalsign.net/root-r3.crl

            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 Authority Key Identifier: 
                keyid:8F:F0:4B:7F:A8:2E:45:24:AE:4D:50:FA:63:9A:8B:DE:E2:DD:1B:BC

    Signature Algorithm: sha256WithRSAEncryption
         79:b0:69:34:e2:05:87:f6:fe:d4:60:2c:2f:86:79:34:03:e0:
         b1:07:93:0c:84:5c:f9:e4:dc:6c:cf:6e:b5:ec:0a:5c:ba:0b:
         d0:68:31:2e:3f:64:bd:0f:82:6b:66:77:81:7f:c6:29:a5:17:
         d8:f0:89:4d:83:24:11:f6:6e:fe:9d:e1:48:0a:28:a0:e2:7b:
         24:80:a4:ec:c2:9a:00:d7:b0:6d:6c:cd:88:d5:15:78:cf:13:
         f9:88:a5:73:4d:c1:36:2b:dc:cb:ce:db:7e:7c:d2:8b:ef:2f:
         bd:b3:4f:4d:3a:ad:bb:62:6e:28:93:c4:0c:cb:d9:e6:ca:e0:
         11:02:94:03:b0:bd:3f:94:28:56:90:1e:53:c2:27:d5:c9:3c:
         cd:1a:63:1e:82:59:15:b6:40:ca:a7:81:aa:c3:55:af:33:d1:
         b5:75:e8:09:ea:47:08:48:22:fb:5d:1b:f3:2c:7a:69:7e:c5:
         d7:5a:5e:56:33:3c:ad:57:e8:93:25:42:c3:d2:5e:71:3b:4a:
         1c:54:ed:a9:55:ac:28:05:c7:c4:6c:5d:dc:3c:93:f6:69:3c:
         82:51:ce:1a:15:3d:5e:01:73:ff:40:a2:ea:b4:ae:d3:8e:fa:
         ee:5d:6c:47:c7:41:f5:d4:56:57:f2:18:37:32:d6:d4:cc:4b:
         f6:71:e0:76

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:00:00:00:00:01:25:07:1d:f9:af
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA
        Validity
            Not Before: Nov 18 10:00:00 2009 GMT
            Not After : Mar 18 10:00:00 2019 GMT
        Subject: OU=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:25:76:90:79:06:78:22:16:f5:c0:83:b6:84:
                    ca:28:9e:fd:05:76:11:c5:ad:88:72:fc:46:02:43:
                    c7:b2:8a:9d:04:5f:24:cb:2e:4b:e1:60:82:46:e1:
                    52:ab:0c:81:47:70:6c:dd:64:d1:eb:f5:2c:a3:0f:
                    82:3d:0c:2b:ae:97:d7:b6:14:86:10:79:bb:3b:13:
                    80:77:8c:08:e1:49:d2:6a:62:2f:1f:5e:fa:96:68:
                    df:89:27:95:38:9f:06:d7:3e:c9:cb:26:59:0d:73:
                    de:b0:c8:e9:26:0e:83:15:c6:ef:5b:8b:d2:04:60:
                    ca:49:a6:28:f6:69:3b:f6:cb:c8:28:91:e5:9d:8a:
                    61:57:37:ac:74:14:dc:74:e0:3a:ee:72:2f:2e:9c:
                    fb:d0:bb:bf:f5:3d:00:e1:06:33:e8:82:2b:ae:53:
                    a6:3a:16:73:8c:dd:41:0e:20:3a:c0:b4:a7:a1:e9:
                    b2:4f:90:2e:32:60:e9:57:cb:b9:04:92:68:68:e5:
                    38:26:60:75:b2:9f:77:ff:91:14:ef:ae:20:49:fc:
                    ad:40:15:48:d1:02:31:61:19:5e:b8:97:ef:ad:77:
                    b7:64:9a:7a:bf:5f:c1:13:ef:9b:62:fb:0d:6c:e0:
                    54:69:16:a9:03:da:6e:e9:83:93:71:76:c6:69:85:
                    82:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier: 
                8F:F0:4B:7F:A8:2E:45:24:AE:4D:50:FA:63:9A:8B:DE:E2:DD:1B:BC
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: http://www.globalsign.net/repository/

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.globalsign.net/root.crl

            Authority Information Access: 
                OCSP - URI:http://ocsp.globalsign.com/ExtendedSSLSHA256CACross

            X509v3 Authority Key Identifier: 
                keyid:60:7B:66:1A:45:0D:97:CA:89:50:2F:7D:04:CD:34:A8:FF:FC:FD:4B

    Signature Algorithm: sha256WithRSAEncryption
         42:52:a9:7e:a2:cf:5b:3b:cb:4b:dd:ba:f8:57:59:d3:24:a4:
         77:72:ef:62:44:37:82:ed:06:ee:04:d5:16:5f:24:a3:14:dc:
         6c:54:05:6a:b0:9b:3d:da:81:39:da:ad:28:db:95:6f:81:83:
         f5:cd:62:b1:45:24:b1:dd:29:e5:08:54:95:95:8c:f0:1d:06:
         5f:1a:d6:46:3f:13:40:17:48:11:16:9b:47:4d:d1:3a:b5:0f:
         57:1c:92:30:d0:f8:b2:25:3b:0a:cd:f6:87:f9:c7:b2:57:d3:
         3f:7d:a5:8c:14:ce:9c:a8:c7:9f:46:93:da:59:fa:79:5d:65:
         20:35:44:5a:4f:c1:90:9d:c1:54:92:56:dc:34:c8:f5:c1:03:
         d0:5d:c0:59:48:9c:00:fc:95:a0:f1:d1:76:f7:16:36:c8:13:
         92:7f:2d:2b:c0:b8:80:f1:26:26:1f:41:4d:52:bf:1e:97:bb:
         01:82:08:e7:15:f6:c1:d5:34:2a:cc:f5:e4:c3:87:7a:57:81:
         e1:d6:d7:42:86:62:01:77:e2:a9:c4:7a:86:f4:04:38:7a:07:
         6a:7d:00:ec:73:f7:a8:0b:34:78:c5:9e:b3:ef:b8:38:40:0e:
         8c:33:53:c8:75:ec:5f:3e:ea:75:5e:ff:82:0e:74:15:dc:19:
         05:f3:ba:31

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:21:42:dd:cc:20:02:cf:85:9e:ce:a5:a2:ab:1a:e0:c5:a9
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign CodeSigning CA - SHA256 - G2
        Validity
            Not Before: Aug  1 10:37:54 2014 GMT
            Not After : Aug  1 10:37:54 2017 GMT
        Subject: C=BE, L=Sint-Agatha-Berchem, O=Didier Stevens Labs, CN=Didier Stevens Labs/emailAddress=didier@didierstevenslabs.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:44:fb:4b:44:89:c3:6b:e6:fc:2d:6b:f6:a1:
                    7c:cb:21:af:ab:fb:56:5c:f6:c3:7e:be:8a:ce:8e:
                    6b:58:ac:ac:88:25:84:71:f5:c2:85:7c:87:41:14:
                    a9:8c:75:68:0a:5c:9c:38:f0:94:23:05:65:84:37:
                    26:3f:67:9a:e0:9d:40:8d:48:7d:71:58:39:bf:3b:
                    f9:0b:53:c6:26:52:2f:1f:5c:92:7e:dc:d2:c2:44:
                    d6:b8:00:5d:ab:72:f9:de:45:fb:93:47:b3:6c:a2:
                    7e:38:1a:af:35:b1:23:a2:a5:1d:8f:ff:91:66:9d:
                    43:3e:9f:0d:21:af:da:c0:a7:24:66:78:27:a0:0b:
                    58:84:12:38:24:97:1f:80:3b:18:da:b4:75:5a:8d:
                    74:96:27:a1:80:cc:ca:c2:e8:be:63:13:2d:d8:d9:
                    52:70:0a:50:34:86:6b:f5:8b:fe:49:66:67:7c:c9:
                    99:75:53:c9:c6:60:4d:25:34:e0:2b:18:8c:39:e0:
                    80:68:b9:84:1e:e8:de:ae:d1:a2:cf:56:08:30:92:
                    81:15:2c:f4:b1:14:f5:55:67:e3:95:63:a3:6c:4a:
                    9e:df:fd:b5:4b:10:80:f1:3e:1b:83:d2:10:06:02:
                    28:91:12:00:e7:64:6b:10:e1:8b:03:1d:bb:95:11:
                    32:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.4146.1.50
                  CPS: https://www.globalsign.com/repository/

            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.globalsign.com/gs/gscodesignsha2g2.crl

            Authority Information Access: 
                CA Issuers - URI:http://secure.globalsign.com/cacert/gscodesignsha2g2.crt
                OCSP - URI:http://ocsp2.globalsign.com/gscodesignsha2g2

            X509v3 Subject Key Identifier: 
                B8:38:A0:36:8E:06:9D:12:30:B0:99:34:4F:1A:DD:05:8B:0F:E9:1C
            X509v3 Authority Key Identifier: 
                keyid:19:4A:B8:5A:E4:4D:31:A5:14:E5:5E:EC:2F:A3:1C:FA:80:8C:32:6B

    Signature Algorithm: sha256WithRSAEncryption
         5a:78:91:b0:44:d2:90:e7:2a:b3:55:8b:a2:8e:bc:79:5b:90:
         a1:ea:7c:43:5d:eb:41:0d:94:c0:ab:55:d5:fc:9b:4b:7b:5e:
         ba:c5:af:5b:88:18:9b:0a:5a:f2:b3:c0:5c:91:b7:3e:78:d9:
         b4:b5:73:9f:a7:5e:c6:d4:0c:cc:38:08:47:49:b7:e0:aa:15:
         df:78:66:2a:87:d3:8c:e4:c1:ce:06:67:f3:f8:1a:8f:e4:d8:
         0b:ef:80:36:0b:3d:f3:f4:8e:75:95:e1:e8:9e:88:c9:7a:68:
         9d:a6:b2:96:b2:ea:39:0f:ce:41:df:83:f0:ce:51:6a:60:ac:
         18:cf:d5:7c:09:8e:54:db:dc:60:ab:a1:df:d6:67:a7:f7:40:
         6a:ec:00:4d:26:79:ab:4a:1d:93:31:63:af:e0:9a:90:dc:4e:
         46:7b:9a:0b:e4:af:cd:7d:f7:3b:17:16:69:a6:a1:51:3a:c4:
         4f:56:da:76:14:b5:59:ad:96:db:c7:fa:56:cf:4f:9a:22:dd:
         f4:b1:18:c5:4b:bd:33:3f:a7:6c:67:3a:81:76:d7:c2:6d:ba:
         d3:a7:9f:37:b6:a6:68:18:d1:0f:65:b0:f2:09:46:10:b1:70:
         53:7c:38:90:4b:63:2e:96:f5:68:22:3b:20:db:3a:79:b1:d5:
         be:b9:ea:45
pkcs7-signedData
  • 1
    • SHA256: nil
    • 1.3.6.1.4.1.311.2.1.4
      • #0
        • 1.3.6.1.4.1.311.2.1.15
          • :
        • SHA256
          • db 85 97 46 4a 17 80 b6  94 e4 f5 bf b9 fb ac eb  |...FJ...........|
            e4 21 8b b5 55 96 92 61  c7 04 37 06 ba f7 cb d4  |.!..U..a..7.....|
    • unnamed
      • #0
        • 2
          • 04:00:00:00:00:01:31:89:C6:37:E8
          • RSA-SHA256: nil
          • #2
            • OU: GlobalSign Root CA - R3
            • O: GlobalSign
            • CN: GlobalSign
          • 2011-08-02 10:00:00 UTC: 2019-08-02 10:00:00 UTC
          • Subject
            • C: BE
            • O: GlobalSign nv-sa
            • CN: GlobalSign CodeSigning CA - SHA256 - G2
          • #5
            • rsaEncryption: nil
            • A3:EF:D1:9F:29:E9:D8:D3:82:76:3C:62:A0:D2:49:D6:
              16:1E:F1:CF:F0:D0:BA:48:43:03:2D:A7:1D:F2:01:34:
              49:A4:10:E9:62:13:F4:13:F4:16:83:B5:D5:57:42:48:
              86:2B:95:58:87:EA:28:04:74:CB:72:11:0F:61:26:E1:
              FA:1C:61:15:C7:28:9B:4D:0B:82:0F:26:2B:90:3A:96:
              ED:A4:D0:6B:29:9C:F5:61:88:E6:A4:57:6F:EE:F4:70:
              D0:8D:17:DE:E6:66:76:5F:74:1E:5E:0C:53:38:5D:90:
              F4:DF:30:2D:1B:13:D1:79:98:54:1A:4B:38:04:F4:07:
              C4:23:03:D3:92:CB:F7:80:5D:AA:9C:56:06:44:2D:41:
              4C:48:B4:2D:EC:35:92:9A:C6:95:D7:F5:CE:90:31:E2:
              76:B3:61:B8:F1:75:57:42:AC:3B:CE:2B:C8:90:49:E8:
              B7:26:CF:BB:0C:89:CB:D0:C3:A3:6A:A1:C9:D5:E3:9C:
              53:2B:57:26:FE:56:9A:76:FD:61:46:A2:60:EC:29:46:
              47:F2:CD:E0:82:62:C6:04:5A:E7:ED:4E:40:5C:48:06:
              7D:9D:5F:E7:74:C9:9E:84:65:0D:5B:DE:DC:D3:24:1C:
              B4:14:11:EB:AB:BF:C4:1F:A4:BA:99:D0:17:58:35:CD
              : 0x010001
          • #6
            • keyUsage: true, 6
            • basicConstraints
              • true
              • true: 0
            • subjectKeyIdentifier:
              19 4a b8 5a e4 4d 31 a5  14 e5 5e ec 2f a3 1c fa  |.J.Z.M1...^./...|
              80 8c 32 6b                                       |..2k            |
            • certificatePolicies
              • anyPolicy
                • id-qt-cps: https://www.globalsign.com/repository/
            • crlDistributionPoints: http://crl.globalsign.net/root-r3.crl
            • extendedKeyUsage: codeSigning
            • authorityKeyIdentifier:
              8f f0 4b 7f a8 2e 45 24  ae 4d 50 fa 63 9a 8b de  |..K...E$.MP.c...|
              e2 dd 1b bc                                       |....            |
        • RSA-SHA256:
          79 b0 69 34 e2 05 87 f6  fe d4 60 2c 2f 86 79 34  |y.i4......`,/.y4|
          03 e0 b1 07 93 0c 84 5c  f9 e4 dc 6c cf 6e b5 ec  |.......\...l.n..|
          0a 5c ba 0b d0 68 31 2e  3f 64 bd 0f 82 6b 66 77  |.\...h1.?d...kfw|
          81 7f c6 29 a5 17 d8 f0  89 4d 83 24 11 f6 6e fe  |...).....M.$..n.|
          9d e1 48 0a 28 a0 e2 7b  24 80 a4 ec c2 9a 00 d7  |..H.(..{$.......|
          b0 6d 6c cd 88 d5 15 78  cf 13 f9 88 a5 73 4d c1  |.ml....x.....sM.|
          36 2b dc cb ce db 7e 7c  d2 8b ef 2f bd b3 4f 4d  |6+....~|.../..OM|
          3a ad bb 62 6e 28 93 c4  0c cb d9 e6 ca e0 11 02  |:..bn(..........|
          94 03 b0 bd 3f 94 28 56  90 1e 53 c2 27 d5 c9 3c  |....?.(V..S.'..<|
          cd 1a 63 1e 82 59 15 b6  40 ca a7 81 aa c3 55 af  |..c..Y..@.....U.|
          33 d1 b5 75 e8 09 ea 47  08 48 22 fb 5d 1b f3 2c  |3..u...G.H".]..,|
          7a 69 7e c5 d7 5a 5e 56  33 3c ad 57 e8 93 25 42  |zi~..Z^V3<.W..%B|
          c3 d2 5e 71 3b 4a 1c 54  ed a9 55 ac 28 05 c7 c4  |..^q;J.T..U.(...|
          6c 5d dc 3c 93 f6 69 3c  82 51 ce 1a 15 3d 5e 01  |l].<..i<.Q...=^.|
          73 ff 40 a2 ea b4 ae d3  8e fa ee 5d 6c 47 c7 41  |s.@........]lG.A|
          f5 d4 56 57 f2 18 37 32  d6 d4 cc 4b f6 71 e0 76  |..VW..72...K.q.v|
      • Certificate #1
        • 2
          • 04:00:00:00:00:01:25:07:1D:F9:AF
          • RSA-SHA256: nil
          • Issuer
            • C: BE
            • O: GlobalSign nv-sa
            • OU: Root CA
            • CN: GlobalSign Root CA
          • 2009-11-18 10:00:00 UTC: 2019-03-18 10:00:00 UTC
          • #4
            • OU: GlobalSign Root CA - R3
            • O: GlobalSign
            • CN: GlobalSign
          • #5
            • rsaEncryption: nil
            • CC:25:76:90:79:06:78:22:16:F5:C0:83:B6:84:CA:28:
              9E:FD:05:76:11:C5:AD:88:72:FC:46:02:43:C7:B2:8A:
              9D:04:5F:24:CB:2E:4B:E1:60:82:46:E1:52:AB:0C:81:
              47:70:6C:DD:64:D1:EB:F5:2C:A3:0F:82:3D:0C:2B:AE:
              97:D7:B6:14:86:10:79:BB:3B:13:80:77:8C:08:E1:49:
              D2:6A:62:2F:1F:5E:FA:96:68:DF:89:27:95:38:9F:06:
              D7:3E:C9:CB:26:59:0D:73:DE:B0:C8:E9:26:0E:83:15:
              C6:EF:5B:8B:D2:04:60:CA:49:A6:28:F6:69:3B:F6:CB:
              C8:28:91:E5:9D:8A:61:57:37:AC:74:14:DC:74:E0:3A:
              EE:72:2F:2E:9C:FB:D0:BB:BF:F5:3D:00:E1:06:33:E8:
              82:2B:AE:53:A6:3A:16:73:8C:DD:41:0E:20:3A:C0:B4:
              A7:A1:E9:B2:4F:90:2E:32:60:E9:57:CB:B9:04:92:68:
              68:E5:38:26:60:75:B2:9F:77:FF:91:14:EF:AE:20:49:
              FC:AD:40:15:48:D1:02:31:61:19:5E:B8:97:EF:AD:77:
              B7:64:9A:7A:BF:5F:C1:13:EF:9B:62:FB:0D:6C:E0:54:
              69:16:A9:03:DA:6E:E9:83:93:71:76:C6:69:85:82:17
              : 0x010001
          • #6
            • keyUsage: true, 6
            • basicConstraints: true, true
            • subjectKeyIdentifier:
              8f f0 4b 7f a8 2e 45 24  ae 4d 50 fa 63 9a 8b de  |..K...E$.MP.c...|
              e2 dd 1b bc                                       |....            |
            • certificatePolicies
              • anyPolicy
                • id-qt-cps: http://www.globalsign.net/repository/
            • crlDistributionPoints: http://crl.globalsign.net/root.crl
            • authorityInfoAccess
              • OCSP: http://ocsp.globalsign.com/ExtendedSSLSHA256CACross
            • authorityKeyIdentifier:
              60 7b 66 1a 45 0d 97 ca  89 50 2f 7d 04 cd 34 a8  |`{f.E....P/}..4.|
              ff fc fd 4b                                       |...K            |
        • RSA-SHA256:
          42 52 a9 7e a2 cf 5b 3b  cb 4b dd ba f8 57 59 d3  |BR.~..[;.K...WY.|
          24 a4 77 72 ef 62 44 37  82 ed 06 ee 04 d5 16 5f  |$.wr.bD7......._|
          24 a3 14 dc 6c 54 05 6a  b0 9b 3d da 81 39 da ad  |$...lT.j..=..9..|
          28 db 95 6f 81 83 f5 cd  62 b1 45 24 b1 dd 29 e5  |(..o....b.E$..).|
          08 54 95 95 8c f0 1d 06  5f 1a d6 46 3f 13 40 17  |.T......_..F?.@.|
          48 11 16 9b 47 4d d1 3a  b5 0f 57 1c 92 30 d0 f8  |H...GM.:..W..0..|
          b2 25 3b 0a cd f6 87 f9  c7 b2 57 d3 3f 7d a5 8c  |.%;.......W.?}..|
          14 ce 9c a8 c7 9f 46 93  da 59 fa 79 5d 65 20 35  |......F..Y.y]e 5|
          44 5a 4f c1 90 9d c1 54  92 56 dc 34 c8 f5 c1 03  |DZO....T.V.4....|
          d0 5d c0 59 48 9c 00 fc  95 a0 f1 d1 76 f7 16 36  |.].YH.......v..6|
          c8 13 92 7f 2d 2b c0 b8  80 f1 26 26 1f 41 4d 52  |....-+....&&.AMR|
          bf 1e 97 bb 01 82 08 e7  15 f6 c1 d5 34 2a cc f5  |............4*..|
          e4 c3 87 7a 57 81 e1 d6  d7 42 86 62 01 77 e2 a9  |...zW....B.b.w..|
          c4 7a 86 f4 04 38 7a 07  6a 7d 00 ec 73 f7 a8 0b  |.z...8z.j}..s...|
          34 78 c5 9e b3 ef b8 38  40 0e 8c 33 53 c8 75 ec  |4x.....8@..3S.u.|
          5f 3e ea 75 5e ff 82 0e  74 15 dc 19 05 f3 ba 31  |_>.u^...t......1|
      • Certificate #2
        • 2
          • 11:21:42:DD:CC:20:02:CF:85:9E:CE:A5:A2:AB:1A:E0:
            C5:A9
          • RSA-SHA256: nil
          • Issuer
            • C: BE
            • O: GlobalSign nv-sa
            • CN: GlobalSign CodeSigning CA - SHA256 - G2
          • 2014-08-01 10:37:54 UTC: 2017-08-01 10:37:54 UTC
          • Subject
            • C: BE
            • L: Sint-Agatha-Berchem
            • O: Didier Stevens Labs
            • CN: Didier Stevens Labs
            • emailAddress: didier@didierstevenslabs.com
          • #5
            • rsaEncryption: nil
            • A4:44:FB:4B:44:89:C3:6B:E6:FC:2D:6B:F6:A1:7C:CB:
              21:AF:AB:FB:56:5C:F6:C3:7E:BE:8A:CE:8E:6B:58:AC:
              AC:88:25:84:71:F5:C2:85:7C:87:41:14:A9:8C:75:68:
              0A:5C:9C:38:F0:94:23:05:65:84:37:26:3F:67:9A:E0:
              9D:40:8D:48:7D:71:58:39:BF:3B:F9:0B:53:C6:26:52:
              2F:1F:5C:92:7E:DC:D2:C2:44:D6:B8:00:5D:AB:72:F9:
              DE:45:FB:93:47:B3:6C:A2:7E:38:1A:AF:35:B1:23:A2:
              A5:1D:8F:FF:91:66:9D:43:3E:9F:0D:21:AF:DA:C0:A7:
              24:66:78:27:A0:0B:58:84:12:38:24:97:1F:80:3B:18:
              DA:B4:75:5A:8D:74:96:27:A1:80:CC:CA:C2:E8:BE:63:
              13:2D:D8:D9:52:70:0A:50:34:86:6B:F5:8B:FE:49:66:
              67:7C:C9:99:75:53:C9:C6:60:4D:25:34:E0:2B:18:8C:
              39:E0:80:68:B9:84:1E:E8:DE:AE:D1:A2:CF:56:08:30:
              92:81:15:2C:F4:B1:14:F5:55:67:E3:95:63:A3:6C:4A:
              9E:DF:FD:B5:4B:10:80:F1:3E:1B:83:D2:10:06:02:28:
              91:12:00:E7:64:6B:10:E1:8B:03:1D:BB:95:11:32:E9
              : 0x010001
          • #6
            • keyUsage: true, 0x80
            • certificatePolicies
              • 1.3.6.1.4.1.4146.1.50
                • id-qt-cps: https://www.globalsign.com/repository/
            • basicConstraints
              • nil
            • extendedKeyUsage: codeSigning
            • crlDistributionPoints: http://crl.globalsign.com/gs/gscodesignsha2g2.crl
            • authorityInfoAccess
              • #0
                • caIssuers: http://secure.globalsign.com/cacert/gscodesignsha2g2.crt
                • OCSP: http://ocsp2.globalsign.com/gscodesignsha2g2
            • subjectKeyIdentifier:
              b8 38 a0 36 8e 06 9d 12  30 b0 99 34 4f 1a dd 05  |.8.6....0..4O...|
              8b 0f e9 1c                                       |....            |
            • authorityKeyIdentifier:
              19 4a b8 5a e4 4d 31 a5  14 e5 5e ec 2f a3 1c fa  |.J.Z.M1...^./...|
              80 8c 32 6b                                       |..2k            |
        • RSA-SHA256:
          5a 78 91 b0 44 d2 90 e7  2a b3 55 8b a2 8e bc 79  |Zx..D...*.U....y|
          5b 90 a1 ea 7c 43 5d eb  41 0d 94 c0 ab 55 d5 fc  |[...|C].A....U..|
          9b 4b 7b 5e ba c5 af 5b  88 18 9b 0a 5a f2 b3 c0  |.K{^...[....Z...|
          5c 91 b7 3e 78 d9 b4 b5  73 9f a7 5e c6 d4 0c cc  |\..>x...s..^....|
          38 08 47 49 b7 e0 aa 15  df 78 66 2a 87 d3 8c e4  |8.GI.....xf*....|
          c1 ce 06 67 f3 f8 1a 8f  e4 d8 0b ef 80 36 0b 3d  |...g.........6.=|
          f3 f4 8e 75 95 e1 e8 9e  88 c9 7a 68 9d a6 b2 96  |...u......zh....|
          b2 ea 39 0f ce 41 df 83  f0 ce 51 6a 60 ac 18 cf  |..9..A....Qj`...|
          d5 7c 09 8e 54 db dc 60  ab a1 df d6 67 a7 f7 40  |.|..T..`....g..@|
          6a ec 00 4d 26 79 ab 4a  1d 93 31 63 af e0 9a 90  |j..M&y.J..1c....|
          dc 4e 46 7b 9a 0b e4 af  cd 7d f7 3b 17 16 69 a6  |.NF{.....}.;..i.|
          a1 51 3a c4 4f 56 da 76  14 b5 59 ad 96 db c7 fa  |.Q:.OV.v..Y.....|
          56 cf 4f 9a 22 dd f4 b1  18 c5 4b bd 33 3f a7 6c  |V.O.".....K.3?.l|
          67 3a 81 76 d7 c2 6d ba  d3 a7 9f 37 b6 a6 68 18  |g:.v..m....7..h.|
          d1 0f 65 b0 f2 09 46 10  b1 70 53 7c 38 90 4b 63  |..e...F..pS|8.Kc|
          2e 96 f5 68 22 3b 20 db  3a 79 b1 d5 be b9 ea 45  |...h"; .:y.....E|
    • Signer
      • 1
      • unnamed
        • #0
          • C: BE
          • O: GlobalSign nv-sa
          • CN: GlobalSign CodeSigning CA - SHA256 - G2
        • 11:21:42:DD:CC:20:02:CF:85:9E:CE:A5:A2:AB:1A:E0:
          C5:A9
      • SHA256: nil
      • #3
        • 1.3.6.1.4.1.311.2.1.12
          • nil
        • contentType: 1.3.6.1.4.1.311.2.1.4
        • 1.3.6.1.4.1.311.2.1.11: msCodeInd
        • messageDigest:
          f5 7f 96 08 76 e5 86 d7  3d f9 e3 a8 bf 95 61 1d  |....v...=.....a.|
          a9 49 eb 12 b0 68 89 0e  bf 30 cd 06 23 03 d5 65  |.I...h...0..#..e|
      • rsaEncryption:
        8c b2 f3 b3 11 10 23 85  b2 bb 4f 0a 52 15 0f f4  |......#...O.R...|
        06 b6 be 00 ad 59 39 e6  73 25 eb d6 26 66 e5 81  |.....Y9.s%..&f..|
        ab e7 66 4e b5 02 87 06  10 8e 84 68 cb 4d 8f 80  |..fN.......h.M..|
        fd e3 ea 30 84 de bf 93  36 e4 ff 74 87 07 c8 19  |...0....6..t....|
        07 61 2f 67 81 f3 25 19  88 56 ce 87 69 7b b4 68  |.a/g..%..V..i{.h|
        48 76 5a ce 61 db be bd  e5 5c 7a 2a 7b 88 d6 d5  |HvZ.a....\z*{...|
        c9 44 63 3d 3f 03 24 46  f3 0a d6 5b 6e b3 37 e4  |.Dc=?.$F...[n.7.|
        0b ef 6d 1a 8c a8 bb e6  08 fc 73 9f f5 da 19 d7  |..m.......s.....|
        da 1a f6 a4 c2 6e 4a a9  99 e5 8c 2a 99 76 36 80  |.....nJ....*.v6.|
        09 42 a9 32 bd 0e 4c 66  69 21 d1 34 dc e4 f3 ff  |.B.2..Lfi!.4....|
        ab 82 84 50 f9 a0 f2 5c  f6 67 12 6a 7c 39 c4 a9  |...P...\.g.j|9..|
        43 5e 2f 9b 0f 00 45 7e  8c 78 3a be d3 8c e5 d3  |C^/...E~.x:.....|
        ce 01 4f 49 5d 49 bd e2  a0 5f 02 e8 d5 65 24 4a  |..OI]I..._...e$J|
        0f fe 01 f0 92 4c eb 42  b0 05 3d b3 fc dd 83 af  |.....L.B..=.....|
        c3 4e 8d 2d 50 e2 61 8c  8b 0b c8 4e 37 24 20 73  |.N.-P.a....N7$ s|
        4f f7 27 8e dd 12 d5 8e  61 5b 9e 8c f8 67 49 aa  |O.'.....a[...gI.|
      • 1.3.6.1.4.1.311.3.3.1
        • pkcs7-signedData
          • 3
            • SHA1: nil
            • id-smime-ct-TSTInfo
              • 1
                • 1.3.6.1.4.1.4146.2.2
                • SHA1
                  • 88 bd 5b cc 8b 7f e0 72  37 2c ec f8 cc 47 79 4c  |..[....r7,...GyL|
                    d9 b7 e9 0a                                       |....            |
                • 2F:52:49:4D:44:92:86:7A:6F:8E:2A:1F:E6:B7:77:B6:
                  77:40:D8:38
                • 2014-09-01 19:07:49 UTC
                • Subject
                  • C: SG
                  • O: GMO GlobalSign Pte Ltd
                  • CN: GlobalSign TSA for Standard - G1
            • Certificates
              • Certificate #0
                • 2
                  • 11:21:22:31:90:C8:F2:13:3F:6F:93:C7:23:14:F0:92:
                    E6:5C
                  • RSA-SHA1: nil
                  • Issuer
                    • C: BE
                    • O: GlobalSign nv-sa
                    • CN: GlobalSign Timestamping CA - G2
                  • 2013-08-23 00:00:00 UTC: 2024-09-23 00:00:00 UTC
                  • Subject
                    • C: SG
                    • O: GMO GlobalSign Pte Ltd
                    • CN: GlobalSign TSA for Standard - G1
                  • #5
                    • rsaEncryption: nil
                    • A4:B6:C2:4C:45:0E:E2:B0:6C:25:9E:82:77:74:0F:4D:
                      C4:79:A1:E7:4D:37:53:78:34:6F:86:CA:BB:A4:32:B4:
                      2D:C1:2A:AA:63:FB:F5:6B:FF:B8:29:59:89:11:3F:DB:
                      7A:3A:38:C2:8E:29:81:23:D4:33:0D:20:A5:E4:14:31:
                      64:8C:FE:A8:6C:E5:12:3F:D8:9C:98:96:9E:85:BD:DE:
                      EF:86:C0:1A:BE:CB:D3:8D:B5:52:E7:25:DA:2D:02:71:
                      72:24:F7:AC:DE:63:C4:6B:39:E6:34:F4:42:C9:1E:EB:
                      2C:F5:14:4C:99:78:7D:DB:CF:F4:8A:A3:88:5A:A1:E4:
                      38:79:BA:3F:89:3E:11:D9:8E:52:EE:CE:27:99:E0:EC:
                      58:A8:1E:B2:14:F8:68:BA:6F:2D:00:D4:92:09:40:1A:
                      D9:02:E6:9C:25:5A:D0:B8:D3:72:DF:0E:6C:A9:FD:F5:
                      9D:DD:A0:83:1B:7A:81:98:40:50:F1:60:B6:30:6B:25:
                      95:DB:BA:DC:81:DE:FA:8F:8C:C3:58:B2:0F:2E:F5:B0:
                      98:37:01:CE:0A:1D:F7:F1:BC:AB:9B:40:AD:74:8F:70:
                      94:25:9F:0B:CA:B4:FF:CE:35:97:00:7B:D9:5A:81:69:
                      C2:DA:C9:A1:75:BA:1E:CE:C4:17:35:1B:B1:CB:CB:4D
                      : 0x010001
                  • #6
                    • keyUsage: true, 0x80
                    • certificatePolicies
                      • 1.3.6.1.4.1.4146.1.30
                        • id-qt-cps: https://www.globalsign.com/repository/
                    • basicConstraints
                      • nil
                    • extendedKeyUsage: true, timeStamping
                    • crlDistributionPoints: http://crl.globalsign.com/gs/gstimestampingg2.crl
                    • authorityInfoAccess
                      • caIssuers: http://secure.globalsign.com/cacert/gstimestampingg2.crt
                    • subjectKeyIdentifier:
                      4f 35 41 b5 f9 4a 92 ce  48 29 50 4b 03 2c b3 77  |O5A..J..H)PK.,.w|
                      fa 2a 40 b4                                       |.*@.            |
                    • authorityKeyIdentifier:
                      46 d8 3e ff dc e3 be ff  83 e6 f4 85 9b b0 dd 6a  |F.>............j|
                      d6 14 a9 c1                                       |....            |
                • RSA-SHA1:
                  90 7c 32 f8 95 17 07 2c  ca d9 cc ca 31 0d a3 18  |.|2....,....1...|
                  b1 c6 d7 89 14 26 70 7d  c7 30 9c bd 93 bb a3 48  |.....&p}.0.....H|
                  e9 20 ee 85 0a 64 b6 24  7a bf c7 4d 5d a7 60 8e  |. ...d.$z..M].`.|
                  aa ed a4 26 7e 9e cb ab  23 27 16 51 2d 98 fc 23  |...&~...#'.Q-..#|
                  5a 6c a3 8d ea 72 98 cb  25 5d eb 3c 8a c9 10 ff  |Zl...r..%].<....|
                  2d 3e d7 eb 9f 98 1d 82  99 a3 63 a2 56 da 5d 50  |->........c.V.]P|
                  d3 d7 36 f5 31 98 00 37  43 77 e2 10 ad 04 f1 3c  |..6.1..7Cw.....<|
                  97 55 90 cb b6 40 ae f5  20 07 4a 4e e2 e8 57 ad  |.U...@.. .JN..W.|
                  6e 4c 73 5a 8c 6f da 7f  e5 52 57 52 eb 99 42 4d  |nLsZ.o...RWR..BM|
                  d7 eb 75 4c 75 f3 12 3c  94 ca a2 6a 76 3b 72 ff  |..uLu..<...jv;r.|
                  18 58 30 af 8b 8a 73 1b  dc 3b ec a8 5c 1e 0a c4  |.X0...s..;..\...|
                  29 bd 7f 47 39 c6 a2 b3  26 80 9c b6 86 da c5 bf  |)..G9...&.......|
                  dd 64 d4 70 7e f1 48 33  34 de fb 99 1f d7 28 24  |.d.p~.H34.....($|
                  ef b2 5e 1d 9d ea 0e 02  ef 0f b5 13 d1 bc 9a 38  |..^............8|
                  cd 83 55 04 94 d0 22 67  2d 2e c2 32 11 ce a5 7f  |..U..."g-..2....|
                  7d aa c0 be 39 7c 10 2c  c1 ea 80 42 9c 98 37 8c  |}...9|.,...B..7.|
              • Certificate #1
                • 2
                  • 04:00:00:00:00:01:2F:4E:E1:52:D7
                  • RSA-SHA1: nil
                  • Issuer
                    • C: BE
                    • O: GlobalSign nv-sa
                    • OU: Root CA
                    • CN: GlobalSign Root CA
                  • 2011-04-13 10:00:00 UTC: 2028-01-28 12:00:00 UTC
                  • Subject
                    • C: BE
                    • O: GlobalSign nv-sa
                    • CN: GlobalSign Timestamping CA - G2
                  • #5
                    • rsaEncryption: nil
                    • 94:EF:65:F8:B5:57:9F:A0:53:0D:34:06:EB:09:1F:B7:
                      47:18:6A:CB:F0:5B:E4:FF:27:A5:34:D1:F7:89:1A:BF:
                      9E:B1:CD:12:41:6E:66:D4:81:A0:85:8B:64:5A:46:2F:
                      99:A0:8D:77:B1:E2:BC:5C:DD:22:D7:6A:67:D0:BB:E8:
                      CA:74:DE:8B:4F:0D:B0:52:E5:90:5B:EB:47:0E:F1:E7:
                      9F:9C:0B:90:65:3E:17:96:30:45:72:6D:39:A1:17:36:
                      CA:B9:A0:8C:1B:4F:08:19:F6:81:31:AD:61:16:A4:62:
                      E6:B4:40:9E:C3:FC:FB:95:F6:FB:B5:2E:95:81:98:E0:
                      EF:C5:EB:D8:02:59:78:77:F7:AA:E3:52:6B:50:91:29:
                      C5:FC:F7:CD:93:65:D2:60:61:22:F2:06:FB:32:DD:16:
                      51:FA:0E:FD:8A:30:F0:17:09:A7:BB:F3:04:AE:AB:90:
                      E7:6C:DF:7A:A9:F4:EF:C4:62:27:5F:6F:99:6D:38:74:
                      AA:11:8B:DA:DF:C7:14:4C:E9:85:B2:EC:C2:7D:4A:26:
                      8F:E7:56:BA:A6:E0:CF:92:53:80:74:F4:03:EC:68:B2:
                      60:BC:84:20:00:83:1B:A1:EE:B4:74:05:C1:29:8E:62:
                      D0:47:B1:FA:F0:53:CC:18:F9:2E:3B:F9:70:7E:B4:25
                      : 0x010001
                  • #6
                    • keyUsage: true, 6
                    • basicConstraints
                      • true
                      • true: 0
                    • subjectKeyIdentifier:
                      46 d8 3e ff dc e3 be ff  83 e6 f4 85 9b b0 dd 6a  |F.>............j|
                      d6 14 a9 c1                                       |....            |
                    • certificatePolicies
                      • anyPolicy
                        • id-qt-cps: https://www.globalsign.com/repository/
                    • crlDistributionPoints: http://crl.globalsign.net/root.crl
                    • authorityKeyIdentifier:
                      60 7b 66 1a 45 0d 97 ca  89 50 2f 7d 04 cd 34 a8  |`{f.E....P/}..4.|
                      ff fc fd 4b                                       |...K            |
                • RSA-SHA1:
                  4e 5e 56 90 1e 46 b4 d9  49 31 f3 bb 17 39 28 1b  |N^V..F..I1...9(.|
                  c2 16 dd fd 41 dc 09 05  04 9b 6f b2 a2 9a d6 99  |....A.....o.....|
                  2e 40 99 00 55 b5 ea 3f  a5 20 76 d3 86 34 d4 17  |.@..U..?. v..4..|
                  cc 55 3a c7 82 ee ef a8  ba bc d8 06 9f 15 50 df  |.U:...........P.|
                  cd 16 7b 52 3a 02 d7 19  1a fd af f0 78 5c e0 4b  |..{R:.......x\.K|
                  c5 18 df 3a 24 1e da ac  b8 a9 58 04 02 07 30 db  |...:$.....X...0.|
                  b0 12 5e fe 31 be f0 04  48 f4 f0 70 f8 3a 5e 56  |..^.1...H..p.:^V|
                  83 cf 3d fb 0d bc f4 c5  ed 97 9d b9 d4 db a5 27  |..=............'|
                  84 e3 38 9b 8b a7 35 86  44 20 a4 3b 6d a4 6a 0b  |..8...5.D .;m.j.|
                  a1 83 fd 28 eb da ef 28  f6 cc 88 5d fb 0a 3b 00  |...(...(...]..;.|
                  ab e0 21 eb e2 2f 35 6c  0f 8e 34 45 97 eb a2 f7  |..!../5l..4E....|
                  99 33 35 7e cb 9a 8a bb  45 4d e7 3f 9f c2 d9 8a  |.35~....EM.?....|
                  fa 65 b2 6e c7 7e 65 ff  e8 92 e1 2c 31 a2 f7 b0  |.e.n.~e....,1...|
                  27 36 48 8f 26 6f 3b ee  4d 76 1f 79 c3 e5 7f 96  |'6H.&o;.Mv.y....|
                  35 bc 2d 0e cc 01 b0 8e  7f ff 51 80 80 a7 92 d4  |5.-.......Q.....|
                  b3 44 46 64 8c 87 4f 16  63 07 31 4b 63 b0 df f3  |.DFd..O.c.1Kc...|
            • 1
              • unnamed
                • #0
                  • C: BE
                  • O: GlobalSign nv-sa
                  • CN: GlobalSign Timestamping CA - G2
                • 11:21:22:31:90:C8:F2:13:3F:6F:93:C7:23:14:F0:92:
                  E6:5C
              • SHA1: nil
              • #2
                • contentType: id-smime-ct-TSTInfo
                • signingTime: 2014-09-01 19:07:49 UTC
                • messageDigest:
                  e4 50 b9 fa 29 7f 02 cf  49 ae 54 55 68 1a 08 2c  |.P..)...I.TUh..,|
                  db 81 70 9e                                       |..p.            |
                • id-smime-aa-signingCertificate
                  • 49 63 c7 14 21 93 35 d0  4e 7a f0 39 ed 43 97 e5  |Ic..!.5.Nz.9.C..|
                    a9 bc 55 3f                                       |..U?            |
                    • unnamed
                      • #0
                        • C: BE
                        • O: GlobalSign nv-sa
                        • CN: GlobalSign Timestamping CA - G2
                      • 11:21:22:31:90:C8:F2:13:3F:6F:93:C7:23:14:F0:92:
                        E6:5C
              • rsaEncryption:
                7b 55 d9 a2 aa fa d2 22  7b 55 8a c2 06 cc 8a 53  |{U....."{U.....S|
                3b 95 11 c5 25 23 f1 1a  ca 67 44 aa 35 fa c3 3c  |;...%#...gD.5..<|
                4d 86 41 4b af 1e 7b 16  77 ff a0 cd e5 9e a5 4e  |M.AK..{.w......N|
                a8 0b 43 97 8b 66 f8 fc  21 33 7b b3 1a 0c 9f 46  |..C..f..!3{....F|
                4c f1 be 04 55 0a 20 82  39 13 c0 46 44 eb 25 d2  |L...U. .9..FD.%.|
                b4 8b 87 5d d5 3b aa f1  37 5a c1 a6 2d e1 a5 5f  |...].;..7Z..-.._|
                7f 74 23 02 d3 f8 c9 fe  e5 db 0a ee ae 03 3e 7e  |.t#...........>~|
                96 c1 46 c4 7c 33 da fe  cb 15 eb b6 9b c8 52 09  |..F.|3........R.|
                16 5a 0c 2f 43 9f 6e 0d  8f d2 80 1d 4d 62 90 fa  |.Z./C.n.....Mb..|
                b3 b6 f2 a6 d7 ce 95 3a  55 dd ee 11 86 37 ad 23  |.......:U....7.#|
                16 e3 8e 38 59 f4 6f 86  f5 09 46 96 0c d4 af c0  |...8Y.o...F.....|
                d3 f7 f8 6c 90 a3 0b d5  87 7c 2d 42 ad 2e 14 4f  |...l.....|-B...O|
                a0 37 e1 2e 7e c8 85 71  c5 44 d2 61 5b d2 3d 28  |.7..~..q.D.a[.=(|
                dd a1 c9 f1 08 1a 23 46  d5 f8 93 82 37 87 99 4f  |......#F....7..O|
                98 7c bb b7 17 75 9c bf  9a e4 8b f5 fe 0f 08 73  |.|...u.........s|
                97 a0 e0 8f 5f 4d 8d 22  ab 81 00 eb e7 f1 39 88  |...._M."......9.|
offsetsizetypecomment
15c115HTM#
15d096488BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

everything is OK