MZ Header

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 000004b0

VS_FIXEDFILEINFO

Signers (1)

issuer: /C=US/O=Symantec Corporation/OU=Windows Phone Enterprise Applications/CN=Symantec Enterprise Mobile CA for Microsoft
serial: 01DD

Certificates (2)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 477 (0x1dd)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Symantec Corporation, OU=Windows Phone Enterprise Applications, CN=Symantec Enterprise Mobile CA for Microsoft
        Validity
            Not Before: Jul 14 22:09:57 2013 GMT
            Not After : Jul 18 04:05:10 2014 GMT
        Subject: OU=metaquark GmbH, CN=metaquark GmbH/UID=8686702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b2:33:5d:8b:67:19:d6:bf:c5:19:54:23:59:
                    95:69:6d:65:77:1f:4b:5b:26:3f:7e:cd:08:ad:3c:
                    4f:b0:08:ac:7d:40:6a:cd:cc:08:0a:bd:a1:da:34:
                    ab:14:ab:40:f5:9d:97:8b:16:0b:19:20:bc:99:21:
                    ae:ba:25:5e:67:e8:38:a0:99:eb:74:ee:e7:cf:7e:
                    95:ea:4b:cc:89:42:51:eb:53:66:8b:d7:f9:27:da:
                    21:4b:bf:60:e2:7a:7a:6a:e4:e5:69:43:29:36:38:
                    92:a2:85:5b:b8:3e:2b:50:ba:90:14:61:ef:2e:4d:
                    f2:fc:ef:8c:05:3c:e0:36:49:b5:ff:df:cb:43:72:
                    db:4c:1e:8e:fe:58:a7:65:7e:e7:bb:a6:ff:e2:ab:
                    94:30:b9:83:ba:a4:83:b3:df:7c:3a:26:93:75:82:
                    91:5d:ea:b4:2b:c3:ba:92:e4:ba:7e:68:41:3f:a3:
                    cb:d8:bc:31:8b:bd:a2:86:79:96:e2:f9:94:0d:31:
                    31:70:75:b0:59:aa:a2:17:37:64:5b:3c:54:e0:f8:
                    37:14:07:5c:c9:3c:59:97:40:d3:21:16:9e:9d:d8:
                    9d:bb:d4:cd:3c:42:01:84:3d:e7:c8:13:85:83:50:
                    92:42:c0:26:26:5d:eb:21:96:d0:a2:82:58:43:b8:
                    1c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:5C:2A:64:1B:59:12:0E:EA:70:80:21:14:38:52:AD:08:C9:E9:96:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage: 
                Code Signing, 2.16.840.1.113733.1.8.52.1
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.geotrust.com/crls/msftentmobileca.crl

            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                16:11:04:83:63:1E:B3:A1:A6:4D:43:BC:7B:17:8E:62:79:DF:D4:D4
    Signature Algorithm: sha256WithRSAEncryption
         53:bc:8b:7b:c4:d8:69:4f:cd:5c:e2:ff:ab:2e:a7:39:de:df:
         c0:85:65:76:81:fd:43:e6:15:5f:b5:de:ff:5c:38:75:14:c0:
         ed:20:9a:fe:62:4f:bf:6b:97:48:83:6a:db:0a:1b:89:4b:18:
         97:67:7f:70:c1:69:db:81:cb:33:5b:10:a4:bd:8f:4e:58:1d:
         67:fb:40:4b:af:89:16:a7:b7:ad:27:6b:77:5b:97:bf:81:a9:
         8a:6c:cd:99:fe:31:0b:e6:80:9b:79:4f:8a:21:28:92:ba:ef:
         ab:4f:46:dc:80:3e:33:f3:46:76:96:68:d8:59:c4:08:9d:97:
         8b:9f:22:d2:83:de:14:e4:a3:9f:c6:94:a8:68:de:67:0c:25:
         bb:79:4a:0b:a2:9b:e1:9c:5c:37:98:3d:0c:d2:ce:fa:e4:d3:
         67:3a:8e:f0:d8:09:54:5a:9b:9a:f5:0b:ea:dd:15:8e:ab:9a:
         e8:6e:dd:ec:f5:a0:e7:8d:bb:75:e8:18:8a:e6:79:b3:a9:c5:
         32:47:45:2c:a2:18:46:a6:69:95:ab:dc:f5:6f:4a:d5:e6:47:
         bc:c0:d5:0c:be:66:bd:32:50:e8:31:28:8b:4d:5d:a8:f7:e3:
         d5:fd:be:17:06:f0:39:71:2f:a8:e2:b4:10:55:59:57:fb:f6:
         d2:7e:62:39

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:e7:19:f0:28:ff:1b:1e:1d:27:97:b9:93:69:5b:6c
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Symantec Corporation, CN=Symantec Enterprise Mobile Root for Microsoft
        Validity
            Not Before: Mar 15 00:00:00 2012 GMT
            Not After : Mar 14 23:59:59 2027 GMT
        Subject: C=US, O=Symantec Corporation, OU=Windows Phone Enterprise Applications, CN=Symantec Enterprise Mobile CA for Microsoft
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:69:49:4c:dd:42:90:98:fe:aa:c8:6e:e9:dc:
                    7e:67:f2:dd:73:82:8a:5a:40:2f:b5:e5:e0:57:0a:
                    21:96:79:13:f3:47:7e:18:57:1c:e8:f3:44:58:62:
                    2d:2b:7f:42:ad:3b:d7:e4:e5:e9:bd:ed:e2:f8:73:
                    34:0e:85:43:cc:ab:ec:2d:f6:dd:0b:0c:37:f4:06:
                    94:bb:f5:85:be:0a:f1:d5:a6:4d:c1:87:20:de:e8:
                    b8:ff:2e:20:51:21:fe:84:73:e1:06:73:5b:1a:ff:
                    ff:39:43:9c:88:a8:e4:dd:d4:d4:00:6c:07:19:d7:
                    1f:46:f7:6e:64:75:72:a7:de:3e:93:e7:b8:f9:6b:
                    ee:72:3c:1c:7d:cd:9e:09:b0:1b:e6:fa:c0:33:26:
                    be:37:ef:27:21:93:e8:e9:c2:93:79:04:b2:d6:17:
                    61:8a:9c:41:57:95:c2:58:3d:b7:a8:23:22:1f:16:
                    a9:30:d5:a2:4f:4e:0b:ab:93:45:c9:81:52:16:66:
                    3d:d3:30:7b:70:fa:b9:38:b4:7d:74:6f:43:5e:96:
                    94:59:17:06:bf:e3:cb:15:7c:ba:b9:a0:f1:ca:7e:
                    2e:12:91:1e:9f:af:86:c0:7e:30:9d:ba:02:6b:f1:
                    bc:b8:ca:2f:f0:a9:81:05:da:7d:d3:d9:bf:b6:a5:
                    d9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.geotrust.com/crls/msftentmobilerootca.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier: 
                5C:2A:64:1B:59:12:0E:EA:70:80:21:14:38:52:AD:08:C9:E9:96:80
            X509v3 Authority Key Identifier: 
                keyid:4D:EC:DF:26:06:DC:24:10:C0:B6:99:F4:D7:39:C7:6F:19:F8:26:28

    Signature Algorithm: sha256WithRSAEncryption
         96:07:48:01:96:78:92:1d:4e:c4:f3:b3:b7:6b:0a:82:88:0d:
         e1:a2:d8:54:ca:e7:31:9f:86:20:18:d7:ca:23:44:c3:f3:b0:
         2b:da:5d:15:46:a4:5a:5a:cb:e1:aa:d8:4c:0d:74:1a:29:b2:
         0c:f5:db:53:65:77:80:19:4a:a6:09:97:1f:4d:08:b5:40:94:
         df:72:7b:10:ca:a2:4d:d6:1b:d9:d3:c9:9d:b7:12:93:04:0f:
         f6:b7:0a:c3:82:ef:de:88:61:69:a6:ba:5f:32:92:6f:c1:5e:
         1b:0e:3b:e2:fd:4b:98:05:d3:fa:23:17:df:3d:51:0a:cf:a0:
         49:b6:1d:92:bc:09:64:ce:4f:9b:46:09:36:47:48:de:9b:4d:
         20:00:d2:2b:e4:76:2d:21:39:03:e5:3d:81:fe:af:fe:e8:ce:
         40:f2:b0:03:c7:56:2a:ea:59:b3:cc:e9:88:83:b5:ca:5b:5b:
         02:13:cd:62:3b:72:e7:3f:e7:12:50:b0:7a:5d:80:8d:e9:dd:
         ca:9c:1c:de:51:be:47:2f:2f:07:a2:c5:90:8f:84:1d:10:47:
         21:93:c7:e4:c2:c2:89:16:9f:e6:f2:e9:f1:1f:c0:6b:d3:7f:
         9d:33:17:4b:81:a6:5f:f0:8f:fc:d4:77:da:bb:48:34:e6:3d:
         38:fa:f6:82
pkcs7-signedData
  • 1
    • SHA1: nil
    • 1.3.6.1.4.1.311.2.1.4
      • #0
        • 1.3.6.1.4.1.311.2.1.15
          • :
        • SHA1
          • bb d7 4f 89 e3 6e 1b ae  0b 59 f2 cb 62 30 0f ab  |..O..n...Y..b0..|
            21 6a 1c 07                                       |!j..            |
    • Certificates
      • Certificate #0
        • 2
          • 0x01DD
          • RSA-SHA256: nil
          • Issuer
            • C: US
            • O: Symantec Corporation
            • OU: Windows Phone Enterprise Applications
            • CN: Symantec Enterprise Mobile CA for Microsoft
          • 2013-07-14 22:09:57 UTC: 2014-07-18 04:05:10 UTC
          • #4
            • OU: metaquark GmbH
            • CN: metaquark GmbH
            • UID: 8686702
          • #5
            • rsaEncryption: nil
            • B0:B2:33:5D:8B:67:19:D6:BF:C5:19:54:23:59:95:69:
              6D:65:77:1F:4B:5B:26:3F:7E:CD:08:AD:3C:4F:B0:08:
              AC:7D:40:6A:CD:CC:08:0A:BD:A1:DA:34:AB:14:AB:40:
              F5:9D:97:8B:16:0B:19:20:BC:99:21:AE:BA:25:5E:67:
              E8:38:A0:99:EB:74:EE:E7:CF:7E:95:EA:4B:CC:89:42:
              51:EB:53:66:8B:D7:F9:27:DA:21:4B:BF:60:E2:7A:7A:
              6A:E4:E5:69:43:29:36:38:92:A2:85:5B:B8:3E:2B:50:
              BA:90:14:61:EF:2E:4D:F2:FC:EF:8C:05:3C:E0:36:49:
              B5:FF:DF:CB:43:72:DB:4C:1E:8E:FE:58:A7:65:7E:E7:
              BB:A6:FF:E2:AB:94:30:B9:83:BA:A4:83:B3:DF:7C:3A:
              26:93:75:82:91:5D:EA:B4:2B:C3:BA:92:E4:BA:7E:68:
              41:3F:A3:CB:D8:BC:31:8B:BD:A2:86:79:96:E2:F9:94:
              0D:31:31:70:75:B0:59:AA:A2:17:37:64:5B:3C:54:E0:
              F8:37:14:07:5C:C9:3C:59:97:40:D3:21:16:9E:9D:D8:
              9D:BB:D4:CD:3C:42:01:84:3D:E7:C8:13:85:83:50:92:
              42:C0:26:26:5D:EB:21:96:D0:A2:82:58:43:B8:1C:AF
              : 0x010001
          • #6
            • authorityKeyIdentifier:
              5c 2a 64 1b 59 12 0e ea  70 80 21 14 38 52 ad 08  |\*d.Y...p.!.8R..|
              c9 e9 96 80                                       |....            |
            • keyUsage: true, 0x80
            • extendedKeyUsage
              • codeSigning: 2.16.840.1.113733.1.8.52.1
            • crlDistributionPoints: http://crl.geotrust.com/crls/msftentmobileca.crl
            • basicConstraints
              • true
              • nil
            • subjectKeyIdentifier:
              16 11 04 83 63 1e b3 a1  a6 4d 43 bc 7b 17 8e 62  |....c....MC.{..b|
              79 df d4 d4                                       |y...            |
        • RSA-SHA256:
          53 bc 8b 7b c4 d8 69 4f  cd 5c e2 ff ab 2e a7 39  |S..{..iO.\.....9|
          de df c0 85 65 76 81 fd  43 e6 15 5f b5 de ff 5c  |....ev..C.._...\|
          38 75 14 c0 ed 20 9a fe  62 4f bf 6b 97 48 83 6a  |8u... ..bO.k.H.j|
          db 0a 1b 89 4b 18 97 67  7f 70 c1 69 db 81 cb 33  |....K..g.p.i...3|
          5b 10 a4 bd 8f 4e 58 1d  67 fb 40 4b af 89 16 a7  |[....NX.g.@K....|
          b7 ad 27 6b 77 5b 97 bf  81 a9 8a 6c cd 99 fe 31  |..'kw[.....l...1|
          0b e6 80 9b 79 4f 8a 21  28 92 ba ef ab 4f 46 dc  |....yO.!(....OF.|
          80 3e 33 f3 46 76 96 68  d8 59 c4 08 9d 97 8b 9f  |.>3.Fv.h.Y......|
          22 d2 83 de 14 e4 a3 9f  c6 94 a8 68 de 67 0c 25  |"..........h.g.%|
          bb 79 4a 0b a2 9b e1 9c  5c 37 98 3d 0c d2 ce fa  |.yJ.....\7.=....|
          e4 d3 67 3a 8e f0 d8 09  54 5a 9b 9a f5 0b ea dd  |..g:....TZ......|
          15 8e ab 9a e8 6e dd ec  f5 a0 e7 8d bb 75 e8 18  |.....n.......u..|
          8a e6 79 b3 a9 c5 32 47  45 2c a2 18 46 a6 69 95  |..y...2GE,..F.i.|
          ab dc f5 6f 4a d5 e6 47  bc c0 d5 0c be 66 bd 32  |...oJ..G.....f.2|
          50 e8 31 28 8b 4d 5d a8  f7 e3 d5 fd be 17 06 f0  |P.1(.M].........|
          39 71 2f a8 e2 b4 10 55  59 57 fb f6 d2 7e 62 39  |9q/....UYW...~b9|
      • Certificate #1
        • 2
          • 25:E7:19:F0:28:FF:1B:1E:1D:27:97:B9:93:69:5B:6C
          • RSA-SHA256: nil
          • Issuer
            • C: US
            • O: Symantec Corporation
            • CN: Symantec Enterprise Mobile Root for Microsoft
          • 2012-03-15 00:00:00 UTC: 2027-03-14 23:59:59 UTC
          • Subject
            • C: US
            • O: Symantec Corporation
            • OU: Windows Phone Enterprise Applications
            • CN: Symantec Enterprise Mobile CA for Microsoft
          • #5
            • rsaEncryption: nil
            • B2:69:49:4C:DD:42:90:98:FE:AA:C8:6E:E9:DC:7E:67:
              F2:DD:73:82:8A:5A:40:2F:B5:E5:E0:57:0A:21:96:79:
              13:F3:47:7E:18:57:1C:E8:F3:44:58:62:2D:2B:7F:42:
              AD:3B:D7:E4:E5:E9:BD:ED:E2:F8:73:34:0E:85:43:CC:
              AB:EC:2D:F6:DD:0B:0C:37:F4:06:94:BB:F5:85:BE:0A:
              F1:D5:A6:4D:C1:87:20:DE:E8:B8:FF:2E:20:51:21:FE:
              84:73:E1:06:73:5B:1A:FF:FF:39:43:9C:88:A8:E4:DD:
              D4:D4:00:6C:07:19:D7:1F:46:F7:6E:64:75:72:A7:DE:
              3E:93:E7:B8:F9:6B:EE:72:3C:1C:7D:CD:9E:09:B0:1B:
              E6:FA:C0:33:26:BE:37:EF:27:21:93:E8:E9:C2:93:79:
              04:B2:D6:17:61:8A:9C:41:57:95:C2:58:3D:B7:A8:23:
              22:1F:16:A9:30:D5:A2:4F:4E:0B:AB:93:45:C9:81:52:
              16:66:3D:D3:30:7B:70:FA:B9:38:B4:7D:74:6F:43:5E:
              96:94:59:17:06:BF:E3:CB:15:7C:BA:B9:A0:F1:CA:7E:
              2E:12:91:1E:9F:AF:86:C0:7E:30:9D:BA:02:6B:F1:BC:
              B8:CA:2F:F0:A9:81:05:DA:7D:D3:D9:BF:B6:A5:D9:25
              : 0x010001
          • X509v3 extensions
            • basicConstraints
              • true
              • true: 0
            • crlDistributionPoints: http://crl.geotrust.com/crls/msftentmobilerootca.crl
            • keyUsage: true, 6
            • subjectKeyIdentifier:
              5c 2a 64 1b 59 12 0e ea  70 80 21 14 38 52 ad 08  |\*d.Y...p.!.8R..|
              c9 e9 96 80                                       |....            |
            • authorityKeyIdentifier:
              4d ec df 26 06 dc 24 10  c0 b6 99 f4 d7 39 c7 6f  |M..&..$......9.o|
              19 f8 26 28                                       |..&(            |
        • RSA-SHA256:
          96 07 48 01 96 78 92 1d  4e c4 f3 b3 b7 6b 0a 82  |..H..x..N....k..|
          88 0d e1 a2 d8 54 ca e7  31 9f 86 20 18 d7 ca 23  |.....T..1.. ...#|
          44 c3 f3 b0 2b da 5d 15  46 a4 5a 5a cb e1 aa d8  |D...+.].F.ZZ....|
          4c 0d 74 1a 29 b2 0c f5  db 53 65 77 80 19 4a a6  |L.t.)....Sew..J.|
          09 97 1f 4d 08 b5 40 94  df 72 7b 10 ca a2 4d d6  |...M..@..r{...M.|
          1b d9 d3 c9 9d b7 12 93  04 0f f6 b7 0a c3 82 ef  |................|
          de 88 61 69 a6 ba 5f 32  92 6f c1 5e 1b 0e 3b e2  |..ai.._2.o.^..;.|
          fd 4b 98 05 d3 fa 23 17  df 3d 51 0a cf a0 49 b6  |.K....#..=Q...I.|
          1d 92 bc 09 64 ce 4f 9b  46 09 36 47 48 de 9b 4d  |....d.O.F.6GH..M|
          20 00 d2 2b e4 76 2d 21  39 03 e5 3d 81 fe af fe  | ..+.v-!9..=....|
          e8 ce 40 f2 b0 03 c7 56  2a ea 59 b3 cc e9 88 83  |..@....V*.Y.....|
          b5 ca 5b 5b 02 13 cd 62  3b 72 e7 3f e7 12 50 b0  |..[[...b;r.?..P.|
          7a 5d 80 8d e9 dd ca 9c  1c de 51 be 47 2f 2f 07  |z]........Q.G//.|
          a2 c5 90 8f 84 1d 10 47  21 93 c7 e4 c2 c2 89 16  |.......G!.......|
          9f e6 f2 e9 f1 1f c0 6b  d3 7f 9d 33 17 4b 81 a6  |.......k...3.K..|
          5f f0 8f fc d4 77 da bb  48 34 e6 3d 38 fa f6 82  |_....w..H4.=8...|
    • Signer
      • 1
      • unnamed
        • #0
          • C: US
          • O: Symantec Corporation
          • OU: Windows Phone Enterprise Applications
          • CN: Symantec Enterprise Mobile CA for Microsoft
        • 0x01DD
      • SHA1: nil
      • #3
        • 1.3.6.1.4.1.311.2.1.12
          • nil
        • contentType: 1.3.6.1.4.1.311.2.1.4
        • 1.3.6.1.4.1.311.2.1.11: msCodeInd
        • messageDigest:
          38 5b c2 77 f3 fa e0 c6  2e a3 55 05 f6 f1 8c e3  |8[.w......U.....|
          66 09 2e d5                                       |f...            |
      • rsaEncryption:
        43 ae c8 67 59 9c e0 69  4a cd 21 16 de 32 f5 35  |C..gY..iJ.!..2.5|
        79 1f da 76 25 5a bf fd  e5 bc 98 04 1b 65 4d 08  |y..v%Z.......eM.|
        2b f8 d5 60 8c d2 32 e0  73 00 0f 8d 7d ea 16 f9  |+..`..2.s...}...|
        54 b8 c0 ee 96 bb 54 ac  c0 f4 8f 66 7f f9 64 8d  |T.....T....f..d.|
        1d 45 a8 c9 7a b1 fc 48  25 64 7d 4c 2f 88 03 5f  |.E..z..H%d}L/.._|
        2d ef ca 47 e2 3a fa fb  6a cc 46 55 64 2e 68 5a  |-..G.:..j.FUd.hZ|
        19 ac a7 bf b6 89 a8 f8  51 a1 37 14 23 55 22 a6  |........Q.7.#U".|
        64 e1 b0 00 4b 20 10 b8  d4 e9 0a 7a 1a 2f 81 5c  |d...K .....z./.\|
        8c d8 0f 8a 20 d7 ca ef  f4 c4 f2 32 ca de 50 c9  |.... ......2..P.|
        93 48 29 bb ca 09 6d 06  b7 44 4f 9c 92 f8 78 97  |.H)...m..DO...x.|
        20 a4 9a 30 a6 f0 43 43  5a f8 3b 9f 6f de 93 f5  | ..0..CCZ.;.o...|
        1a a9 4a 5c c5 c7 fa 26  f7 79 87 fb 7b 60 0f 94  |..J\...&.y..{`..|
        d8 ce 59 12 6a b3 d4 df  b8 bc 0a de cd 20 e2 8c  |..Y.j........ ..|
        be 16 37 78 38 1c 41 19  1f 1d 5a 82 2d 90 82 55  |..7x8.A...Z.-..U|
        3d 25 c8 4e 69 d2 17 f9  f1 53 17 a7 a4 8e 5f 97  |=%.Ni....S...._.|
        8a de 92 75 3f 63 2f b7  f8 58 6d ea 1a 87 fc cc  |...u?c/..Xm.....|
offsetsizetypecomment
0182784DLL03/28/2014 10:08:44#
15c115HTM#
2ca002840PKCS7Authenticode Signature#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

everything is OK