MZ Header

Rich Header

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Sections

Data Directory

StringTable 040904b0

VS_FIXEDFILEINFO

Signers (1)

issuer: /C=US/O=Symantec Corporation/OU=Symantec Trust Network/CN=Symantec Class 3 Extended Validation Code Signing CA - G2
serial: 1ADF23CAA56922E36D21DAB89674B0CF

Certificates (2)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:1a:32:cb:75:9c:97:b8:cf:ac:11:8d:d5:12:7f:49
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
        Validity
            Not Before: Mar  4 00:00:00 2014 GMT
            Not After : Mar  3 23:59:59 2024 GMT
        Subject: C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Extended Validation Code Signing CA - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d0:18:02:ee:ed:a2:8d:08:58:63:0f:26:d7:dd:
                    22:7b:88:f6:e4:c7:ec:3b:26:18:78:d3:c7:a4:20:
                    53:8d:83:7c:a5:3f:7e:a5:c8:2b:47:df:0d:f5:a6:
                    d9:c3:1d:25:93:60:cf:7c:dc:ea:03:2c:be:78:7f:
                    5c:48:6d:a7:02:d9:49:f8:a1:eb:eb:9a:61:7c:9f:
                    c0:26:d6:dc:15:d8:b8:10:7c:20:ba:5e:f4:28:f6:
                    a8:ea:a7:5c:7c:c6:9c:90:90:34:3c:b6:22:ac:fe:
                    ba:0c:3a:1e:d6:5e:84:b6:5b:f0:a3:81:70:78:8a:
                    8d:46:52:7b:fc:db:49:f3:29:13:11:74:4f:8d:16:
                    b3:c2:e3:a0:2d:c7:03:04:9d:cc:c3:72:e1:0e:0c:
                    fb:02:8e:f1:26:17:7b:6e:ae:f8:b7:33:8b:a6:61:
                    4b:45:df:f2:25:44:c7:f7:b0:98:23:36:dc:28:79:
                    0a:e8:9b:72:88:a8:d8:e8:ae:7b:7f:0a:64:45:a5:
                    f0:57:92:9a:77:06:45:1e:eb:9f:e8:66:f3:7a:7d:
                    92:81:5f:00:2d:1e:b8:f6:56:13:5a:62:0d:b7:47:
                    a1:8f:72:ef:83:5e:82:e0:94:98:e1:ac:a5:ad:86:
                    37:e0:a7:d3:ba:b1:3e:7a:eb:45:a8:f1:c1:44:7d:
                    e2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://s.symcb.com/pca3-g5.crl
            X509v3 Extended Key Usage: critical
                Code Signing
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                OCSP - URI:http://s.symcd.com
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: https://d.symcb.com/cps
                  User Notice:
                    Explicit Text: https://d.symcb.com/rpa
            X509v3 Subject Alternative Name: 
                DirName:/CN=SymantecPKI-1-629
            X509v3 Subject Key Identifier: 
                16:66:DE:4A:34:E3:50:A7:11:86:03:B1:6C:A9:C6:AC:CD:59:6E:9B
            X509v3 Authority Key Identifier: 
                7F:D3:65:A7:C2:DD:EC:BB:F0:30:09:F3:43:39:FA:02:AF:33:31:33
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        3f:5b:19:f3:fa:13:d5:75:38:2a:5a:ee:9f:5a:a0:4c:a9:1d:
        c5:cc:94:ee:de:15:fe:f5:10:6e:a4:1b:a5:64:83:54:18:58:
        c4:0b:28:a1:85:c3:4e:74:e5:ff:89:7c:fe:d5:ed:3c:ba:71:
        9f:56:02:26:8f:16:2a:88:fe:b0:a3:27:22:ce:4b:e2:38:8e:
        00:a6:3a:86:5f:9d:e5:3e:a8:de:64:49:41:74:41:21:fd:07:
        c8:84:17:da:1d:65:30:82:cb:26:4f:39:d6:04:27:a4:81:b1:
        4b:49:c3:23:8b:7e:02:32:18:27:b7:ab:0b:f3:18:72:b6:a4:
        ee:67:06:6f:38:a6:58:8d:e0:f1:7e:5d:a4:60:c6:a8:e5:50:
        5f:e0:e8:ba:e2:8f:99:58:b6:b5:a0:a8:76:f1:a2:f1:1c:88:
        41:72:7e:52:97:9b:0a:36:99:8d:50:f7:01:eb:3c:e7:f0:22:
        6a:e5:35:8c:63:36:8a:1a:b1:d9:67:66:5f:97:1a:ef:a8:20:
        9d:f0:2f:ba:6c:ce:d9:94:85:00:f1:58:f1:7d:c9:7c:22:b5:
        07:5d:02:c6:e6:0b:bf:ab:93:93:ff:27:18:8e:33:36:7e:57:
        34:f1:c3:af:04:c1:84:f1:56:b3:e8:87:83:36:f8:d3:0a:31:
        dc:6e:2c:6d

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:df:23:ca:a5:69:22:e3:6d:21:da:b8:96:74:b0:cf
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Extended Validation Code Signing CA - G2
        Validity
            Not Before: Apr 25 00:00:00 2016 GMT
            Not After : Apr 25 23:59:59 2019 GMT
        Subject: jurisdictionC=TW/businessCategory=Private Organization/serialNumber=28112364, C=TW, ST=Taiwan, L=Hsinchu, O=SUNPLUS INNOVATION TECHNOLOGY INC., CN=SUNPLUS INNOVATION TECHNOLOGY INC.
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:bd:d7:04:c1:3a:b4:80:03:23:af:76:eb:26:dd:
                    6c:be:4f:fb:a9:73:93:df:0c:5f:71:07:96:8e:65:
                    36:2b:3b:38:1d:0c:34:97:42:3b:9b:86:d7:5b:3b:
                    35:51:ca:91:68:94:a6:59:95:b2:8a:b1:87:0e:9f:
                    9e:85:07:26:b7:3b:5a:24:14:eb:b7:be:13:08:55:
                    91:36:a2:28:8f:be:7c:7c:14:fc:12:b7:6d:71:db:
                    39:d1:50:0b:64:20:90:e6:1e:c8:f9:28:0d:b3:48:
                    1d:55:c4:c7:68:7c:6a:f3:4c:1f:1c:50:5f:cf:0c:
                    42:e9:5d:30:61:c9:5e:03:4c:34:d7:a3:3f:76:b3:
                    28:5e:ed:00:43:3d:0d:13:34:5a:f9:b9:89:fc:2f:
                    55:5b:b7:25:7e:71:55:94:d5:5e:10:64:d5:c9:57:
                    e6:d6:e2:a9:78:6e:c9:2a:5a:cf:20:34:9f:36:a9:
                    f6:ef:43:8a:23:95:46:42:af:7e:6f:3f:77:6f:17:
                    db:d0:8e:76:94:03:d0:20:ba:21:ef:a6:99:e8:85:
                    27:fc:22:8d:99:63:e8:4a:a0:51:06:f9:8e:57:d5:
                    a2:6e:ab:16:2f:28:87:da:59:49:31:11:a0:93:4c:
                    dd:6f:90:c8:3f:b2:8d:49:ea:5a:a4:2d:6d:ce:59:
                    42:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Alternative Name: 
                othername: Permanent Identifier::<unsupported>
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://sw.symcb.com/sw.crl
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.3
                  CPS: https://d.symcb.com/cps
                  User Notice:
                    Explicit Text: https://d.symcb.com/rpa
            X509v3 Extended Key Usage: critical
                Code Signing
            X509v3 Authority Key Identifier: 
                16:66:DE:4A:34:E3:50:A7:11:86:03:B1:6C:A9:C6:AC:CD:59:6E:9B
            X509v3 Subject Key Identifier: 
                DF:0B:69:45:4A:E1:8F:DF:3C:6D:E1:6F:66:30:A2:16:05:D6:E6:5A
            Authority Information Access: 
                OCSP - URI:http://sw.symcd.com
                CA Issuers - URI:http://sw1.symcb.com/sw.crt
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        46:f5:c8:65:9e:63:6a:4b:ed:ba:c9:83:76:d7:51:3b:0a:59:
        ac:be:e2:5e:76:fd:74:09:42:6e:47:f2:bc:32:70:56:55:3c:
        f6:d5:cd:f4:6e:46:fe:a4:20:de:c7:fb:be:76:e4:30:46:5e:
        26:e0:47:f3:59:64:2d:de:0d:73:41:cf:8d:9d:a6:86:ef:8d:
        8a:7f:01:e6:89:0b:8b:f0:a3:d6:76:e2:c2:62:90:75:ee:5e:
        c7:51:95:a5:8e:8b:7f:0a:e1:17:33:b0:63:38:3d:a5:05:02:
        ff:ab:c7:19:0c:16:dd:cb:15:4a:d1:a0:77:0c:9a:99:07:fa:
        48:49:d9:1e:72:84:8d:f5:e4:c8:fc:7e:cb:34:c2:3d:d7:08:
        aa:b3:a0:39:13:53:d2:19:b4:a5:7e:6a:2a:f5:87:82:81:01:
        58:89:d2:27:31:05:1c:40:c8:ef:db:4c:41:69:e3:e5:a8:d0:
        15:ba:0f:a7:b0:06:ab:c6:48:65:5b:e8:67:95:55:ef:56:6f:
        69:48:8d:f0:9f:06:46:7a:88:2f:b1:79:43:8c:38:39:6a:bd:
        18:9e:a1:c2:9e:f4:f2:bd:40:ce:0b:8a:71:77:6f:de:8f:cf:
        4c:7b:23:dc:a0:6f:e0:96:c1:93:1e:72:e0:ad:d2:f1:17:9a:
        be:3d:38:ad

undefined method `first' for #

offsetsizetypecomment
0645120DLL03/29/2018 08:20:11#
15c115HTM#
9d80015904PKCS7Authenticode Signature#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

everything is OK