MZ Header

Rich Header

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 041904e3

VS_FIXEDFILEINFO

Signers (1)

issuer: /C=ZA/O=Thawte Consulting (Pty) Ltd./CN=Thawte Code Signing CA
serial: 18187BCC2DAF1EDD44A2F454900EC5DC

Certificates (4)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=ZA, ST=Western Cape, L=Cape Town, O=Thawte Consulting cc, OU=Certification Services Division, CN=Thawte Premium Server CA/emailAddress=premium-server@thawte.com
        Validity
            Not Before: Aug  6 00:00:00 2003 GMT
            Not After : Aug  5 23:59:59 2013 GMT
        Subject: C=ZA, O=Thawte Consulting (Pty) Ltd., CN=Thawte Code Signing CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (1024 bit)
                Modulus:
                    00:c6:b8:b9:27:60:af:0b:e3:91:69:65:db:7e:8d:
                    ed:91:e6:aa:f1:be:d5:ed:fe:6d:d4:2c:7f:d1:70:
                    77:fb:26:99:57:b4:dd:3f:30:b8:dc:21:ea:68:8d:
                    81:92:fc:2e:4b:91:35:84:20:f2:da:4a:ba:b4:fc:
                    e6:da:88:f2:20:c5:21:92:09:47:95:a0:09:1c:a6:
                    79:be:b1:4c:1d:fc:f1:8a:6e:54:d2:69:a1:f1:4c:
                    93:3a:41:fe:7d:d4:64:7b:63:45:f7:60:60:1d:31:
                    1d:a4:e9:d3:0f:8b:fb:6e:26:24:b3:a8:ff:e5:e5:
                    90:d4:b4:c2:dc:50:60:ae:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.thawte.com/ThawtePremiumServerCA.crl

            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, Code Signing
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=PrivateLabel2-144
    Signature Algorithm: sha1WithRSAEncryption
         76:b2:9c:ee:13:9f:1b:f6:2d:34:92:94:45:73:34:dc:8e:6b:
         2e:5c:fc:4c:7d:89:eb:c3:68:f1:d7:99:0f:2e:1d:17:c8:b5:
         16:8b:be:cd:8a:05:06:f2:19:49:3a:03:5b:05:c9:20:8e:6d:
         52:e1:76:81:a0:c3:65:8a:22:67:e4:1c:53:53:37:46:bf:bc:
         d7:2f:eb:7b:9e:d0:14:45:6c:40:21:08:e2:5d:75:76:66:30:
         1e:f4:df:82:8a:2f:bd:f3:a2:0c:bf:1d:db:9f:14:a2:9a:72:
         37:4d:b0:77:48:e8:4a:3f:09:ce:55:19:2c:ef:e6:07:24:e1:
         af:ec

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA
        Validity
            Not Before: Jun 15 00:00:00 2007 GMT
            Not After : Jun 14 23:59:59 2012 GMT
        Subject: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (1024 bit)
                Modulus:
                    00:c4:b5:f2:52:15:bc:88:86:60:29:16:4a:5b:2f:
                    4b:91:6b:87:91:f3:35:54:58:35:ea:d1:36:5e:62:
                    4d:52:51:34:71:c2:7b:66:1d:89:c8:dd:2a:c4:6a:
                    0a:f6:37:d9:98:74:91:f6:92:ae:b0:b5:76:96:f1:
                    a9:4a:63:45:47:2e:6b:0b:92:4e:4b:2b:8c:ee:58:
                    4a:8b:d4:07:e4:1a:2c:f8:82:aa:58:d9:cd:42:f3:
                    2d:c0:75:de:8d:ab:c7:8e:1d:9a:6c:4c:08:95:1e:
                    de:db:ef:67:e1:72:c2:49:c2:9e:60:3c:e1:e2:be:
                    16:a3:63:78:69:14:7b:ad:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com

            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.verisign.com/tss-ca.crl

            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation
            X509v3 Subject Alternative Name: 
                DirName:/CN=TSA1-2
    Signature Algorithm: sha1WithRSAEncryption
         50:c5:4b:c8:24:80:df:e4:0d:24:c2:de:1a:b1:a1:02:a1:a6:
         82:2d:0c:83:15:81:37:0a:82:0e:2c:b0:5a:17:61:b5:d8:05:
         fe:88:db:f1:91:91:b3:56:1a:40:a6:eb:92:be:38:39:b0:75:
         36:74:3a:98:4f:e4:37:ba:99:89:ca:95:42:1d:b0:b9:c7:a0:
         8d:57:e0:fa:d5:64:04:42:35:4e:01:d1:33:a2:17:c8:4d:aa:
         27:c7:f2:e1:86:4c:02:38:4d:83:78:c6:fc:53:e0:eb:e0:06:
         87:dd:a4:96:9e:5e:0c:98:e2:a5:be:bf:82:85:c3:60:e1:df:
         ad:28:d8:c7:a5:4b:64:da:c7:1b:5b:bd:ac:39:08:d5:38:22:
         a1:33:8b:2f:8a:9a:eb:bc:07:21:3f:44:41:09:07:b5:65:1c:
         24:bc:48:d3:44:80:eb:a1:cf:c9:02:b4:14:cf:54:c7:16:a3:
         80:5c:f9:79:3e:5d:72:7d:88:17:9e:2c:43:a2:ca:53:ce:7d:
         3d:f6:2a:3a:b8:4f:94:00:a5:6d:0a:83:5d:f9:5e:53:f4:18:
         b3:57:0f:70:c3:fb:f5:ad:95:a0:0e:17:de:c4:16:80:60:c9:
         0f:2b:6e:86:04:f1:eb:f4:78:27:d1:05:c5:ee:34:5b:5e:b9:
         49:32:f2:33

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:18:7b:cc:2d:af:1e:dd:44:a2:f4:54:90:0e:c5:dc
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=ZA, O=Thawte Consulting (Pty) Ltd., CN=Thawte Code Signing CA
        Validity
            Not Before: Jan 11 00:00:00 2010 GMT
            Not After : Jan 11 23:59:59 2012 GMT
        Subject: C=RU, ST=Moscow region, L=Moscow, O=LLC Mail.Ru, OU=Secure Application Development, CN=LLC Mail.Ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1c:68:9d:ee:3b:e4:ff:f0:f7:ae:9e:47:b5:
                    5a:bc:8e:a8:e4:1f:1c:06:53:08:3e:dd:6c:4f:f2:
                    d1:90:a5:1e:86:bc:eb:af:36:96:90:be:e8:31:4a:
                    7b:b6:c7:a1:ee:35:3b:20:03:f6:fa:db:37:51:14:
                    fd:9b:b2:ac:49:ae:0d:29:f6:0f:0b:3f:d9:c4:b1:
                    a0:b4:47:8f:fe:2c:53:a8:5e:42:86:62:8f:9f:1c:
                    06:57:9e:7d:fc:f9:21:b9:1d:d1:0d:a3:73:e0:65:
                    a7:0f:07:8d:b3:68:62:f8:53:c4:a2:f9:0b:e5:b3:
                    b3:46:2f:c6:56:de:16:2b:de:77:9d:f5:15:9f:2a:
                    24:84:1f:3e:e8:7a:ad:ed:75:62:d3:e3:4a:dc:74:
                    a4:6c:4b:0f:a5:90:c7:b8:01:14:e7:6f:e9:b1:3f:
                    81:51:26:94:3e:a6:bd:cc:58:2e:74:ba:07:67:a9:
                    a5:d6:c5:1d:f4:18:47:a0:86:25:12:4c:7c:9d:13:
                    21:46:5e:6e:0f:1a:b7:c4:e5:01:f0:75:87:98:80:
                    ea:0f:64:f7:fd:c4:46:34:56:9c:15:05:83:e5:36:
                    0a:3b:b8:21:55:48:c4:b5:da:2d:3d:15:e1:d6:4c:
                    c0:d9:c7:6a:fc:95:7c:90:4d:d1:07:1e:bd:ba:e8:
                    6c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.thawte.com/ThawteCodeSigningCA.crl

            X509v3 Extended Key Usage: 
                Code Signing, Microsoft Commercial Code Signing
            2.5.29.4: 
                0.0.0..
+.....7.......
            Authority Information Access: 
                OCSP - URI:http://ocsp.thawte.com

            Netscape Cert Type: 
                Object Signing
    Signature Algorithm: sha1WithRSAEncryption
         c6:a7:55:8a:7b:fb:51:bb:39:1a:cc:35:8f:fa:0d:69:01:78:
         18:24:7e:f1:0d:4b:2c:d2:dd:2f:60:c6:8a:59:1f:ab:b5:36:
         4a:31:cf:48:92:3b:ec:3b:ca:0e:88:95:d5:c9:c8:56:23:72:
         f1:af:e2:8e:01:e6:f0:2b:35:4d:be:88:9d:04:43:b3:34:10:
         7c:3a:93:3b:b4:51:9c:de:96:de:b9:53:69:64:b1:52:be:23:
         e6:9c:bb:32:95:2d:5f:01:ae:55:89:ff:ad:53:29:c0:95:5c:
         55:b4:04:72:08:b6:57:fa:a7:0d:6b:7a:d6:3d:cb:49:8e:5e:
         c4:24

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
        Validity
            Not Before: Dec  4 00:00:00 2003 GMT
            Not After : Dec  3 23:59:59 2013 GMT
        Subject: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ca:b2:a4:cc:cd:20:af:0a:7d:89:ac:87:75:
                    f0:b4:4e:f1:df:c1:0f:bf:67:61:bd:a3:64:1c:da:
                    bb:f9:ca:33:ab:84:30:89:58:7e:8c:db:6b:dd:36:
                    9e:0f:bf:d1:ec:78:f2:77:a6:7e:6f:3c:bf:93:af:
                    0d:ba:68:f4:6c:94:ca:bd:52:2d:ab:48:3d:f5:b6:
                    d5:5d:5f:1b:02:9f:fa:2f:6b:1e:a4:f7:a3:9a:a6:
                    1a:c8:02:e1:7f:4c:52:e3:0e:60:ec:40:1c:7e:b9:
                    0d:de:3f:c7:b4:df:87:bd:5f:7a:6a:31:2e:03:99:
                    81:13:a8:47:20:ce:31:73:0d:57:2d:cd:78:34:33:
                    95:12:99:12:b9:de:68:2f:aa:e6:e3:c2:8a:8c:2a:
                    c3:8b:21:87:66:bd:83:58:57:6f:75:bf:3c:aa:26:
                    87:5d:ca:10:15:3c:9f:84:ea:54:c1:0a:6e:c4:fe:
                    c5:4a:dd:b9:07:11:97:22:7c:db:3e:27:d1:1e:78:
                    ec:9f:31:c9:f1:e6:22:19:db:c4:b3:47:43:9a:1a:
                    5f:a0:1e:90:e4:5e:f5:ee:7c:f1:7d:ab:62:01:8f:
                    f5:4d:0b:de:d0:22:56:a8:95:cd:ae:88:76:ae:ee:
                    ba:0d:f3:e4:4d:d9:a0:fb:68:a0:ae:14:3b:b3:87:
                    c1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com

            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.verisign.com/ThawteTimestampingCA.crl

            X509v3 Extended Key Usage: 
                Time Stamping
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=TSA2048-1-53
    Signature Algorithm: sha1WithRSAEncryption
         4a:6b:f9:ea:58:c2:44:1c:31:89:79:99:2b:96:bf:82:ac:01:
         d6:1c:4c:cd:b0:8a:58:6e:df:08:29:a3:5e:c8:ca:93:13:e7:
         04:52:0d:ef:47:27:2f:00:38:b0:e4:c9:93:4e:9a:d4:22:62:
         15:f7:3f:37:21:4f:70:31:80:f1:8b:38:87:b3:e8:e8:97:00:
         fe:cf:55:96:4e:24:d2:a9:27:4e:7a:ae:b7:61:41:f3:2a:ce:
         e7:c9:d9:5e:dd:bb:2b:85:3e:b5:9d:b5:d9:e1:57:ff:be:b4:
         c5:7e:f5:cf:0c:9e:f0:97:fe:2b:d3:3b:52:1b:1b:38:27:f7:
         3f:4a
pkcs7-signedData
  • 1
    • SHA1: nil
    • 1.3.6.1.4.1.311.2.1.4
      • #0
        • 1.3.6.1.4.1.311.2.1.15
          • :
            00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
            00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |
        • SHA1
          • 81 6f ff 07 e7 71 59 51  c0 04 c8 db 1d b4 c7 d3  |.o...qYQ........|
            f5 fc c2 fa                                       |....            |
    • Certificates
      • Certificate #0
        • 2
          • 0x0A
          • RSA-SHA1: nil
          • Issuer
            • C: ZA
            • ST: Western Cape
            • L: Cape Town
            • O: Thawte Consulting cc
            • OU: Certification Services Division
            • CN: Thawte Premium Server CA
            • emailAddress: premium-server@thawte.com
          • 2003-08-06 00:00:00 UTC: 2013-08-05 23:59:59 UTC
          • Subject
            • C: ZA
            • O: Thawte Consulting (Pty) Ltd.
            • CN: Thawte Code Signing CA
          • #5
            • rsaEncryption: nil
            • C6:B8:B9:27:60:AF:0B:E3:91:69:65:DB:7E:8D:ED:91:
              E6:AA:F1:BE:D5:ED:FE:6D:D4:2C:7F:D1:70:77:FB:26:
              99:57:B4:DD:3F:30:B8:DC:21:EA:68:8D:81:92:FC:2E:
              4B:91:35:84:20:F2:DA:4A:BA:B4:FC:E6:DA:88:F2:20:
              C5:21:92:09:47:95:A0:09:1C:A6:79:BE:B1:4C:1D:FC:
              F1:8A:6E:54:D2:69:A1:F1:4C:93:3A:41:FE:7D:D4:64:
              7B:63:45:F7:60:60:1D:31:1D:A4:E9:D3:0F:8B:FB:6E:
              26:24:B3:A8:FF:E5:E5:90:D4:B4:C2:DC:50:60:AE:59
              : 0x010001
          • X509v3 extensions
            • basicConstraints
              • true
              • true: 0
            • crlDistributionPoints: http://crl.thawte.com/ThawtePremiumServerCA.crl
            • extendedKeyUsage
              • clientAuth: codeSigning
            • keyUsage: true, 6
            • subjectAltName
              • CN: PrivateLabel2-144
        • RSA-SHA1:
          76 b2 9c ee 13 9f 1b f6  2d 34 92 94 45 73 34 dc  |v.......-4..Es4.|
          8e 6b 2e 5c fc 4c 7d 89  eb c3 68 f1 d7 99 0f 2e  |.k.\.L}...h.....|
          1d 17 c8 b5 16 8b be cd  8a 05 06 f2 19 49 3a 03  |.............I:.|
          5b 05 c9 20 8e 6d 52 e1  76 81 a0 c3 65 8a 22 67  |[.. .mR.v...e."g|
          e4 1c 53 53 37 46 bf bc  d7 2f eb 7b 9e d0 14 45  |..SS7F.../.{...E|
          6c 40 21 08 e2 5d 75 76  66 30 1e f4 df 82 8a 2f  |l@!..]uvf0...../|
          bd f3 a2 0c bf 1d db 9f  14 a2 9a 72 37 4d b0 77  |...........r7M.w|
          48 e8 4a 3f 09 ce 55 19  2c ef e6 07 24 e1 af ec  |H.J?..U.,...$...|
      • Certificate #1
        • 2
          • 38:25:D7:FA:F8:61:AF:9E:F4:90:E7:26:B5:D6:5A:D5
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • O: VeriSign, Inc.
            • CN: VeriSign Time Stamping Services CA
          • 2007-06-15 00:00:00 UTC: 2012-06-14 23:59:59 UTC
          • Subject
            • C: US
            • O: VeriSign, Inc.
            • CN: VeriSign Time Stamping Services Signer - G2
          • #5
            • rsaEncryption: nil
            • C4:B5:F2:52:15:BC:88:86:60:29:16:4A:5B:2F:4B:91:
              6B:87:91:F3:35:54:58:35:EA:D1:36:5E:62:4D:52:51:
              34:71:C2:7B:66:1D:89:C8:DD:2A:C4:6A:0A:F6:37:D9:
              98:74:91:F6:92:AE:B0:B5:76:96:F1:A9:4A:63:45:47:
              2E:6B:0B:92:4E:4B:2B:8C:EE:58:4A:8B:D4:07:E4:1A:
              2C:F8:82:AA:58:D9:CD:42:F3:2D:C0:75:DE:8D:AB:C7:
              8E:1D:9A:6C:4C:08:95:1E:DE:DB:EF:67:E1:72:C2:49:
              C2:9E:60:3C:E1:E2:BE:16:A3:63:78:69:14:7B:AD:2D
              : 0x010001
          • X509v3 extensions
            • authorityInfoAccess
              • OCSP: http://ocsp.verisign.com
            • basicConstraints
              • true
              • nil
            • crlDistributionPoints: http://crl.verisign.com/tss-ca.crl
            • extendedKeyUsage: true, timeStamping
            • keyUsage: true, 0xc0
            • subjectAltName
              • CN: TSA1-2
        • RSA-SHA1:
          50 c5 4b c8 24 80 df e4  0d 24 c2 de 1a b1 a1 02  |P.K.$....$......|
          a1 a6 82 2d 0c 83 15 81  37 0a 82 0e 2c b0 5a 17  |...-....7...,.Z.|
          61 b5 d8 05 fe 88 db f1  91 91 b3 56 1a 40 a6 eb  |a..........V.@..|
          92 be 38 39 b0 75 36 74  3a 98 4f e4 37 ba 99 89  |..89.u6t:.O.7...|
          ca 95 42 1d b0 b9 c7 a0  8d 57 e0 fa d5 64 04 42  |..B......W...d.B|
          35 4e 01 d1 33 a2 17 c8  4d aa 27 c7 f2 e1 86 4c  |5N..3...M.'....L|
          02 38 4d 83 78 c6 fc 53  e0 eb e0 06 87 dd a4 96  |.8M.x..S........|
          9e 5e 0c 98 e2 a5 be bf  82 85 c3 60 e1 df ad 28  |.^.........`...(|
          d8 c7 a5 4b 64 da c7 1b  5b bd ac 39 08 d5 38 22  |...Kd...[..9..8"|
          a1 33 8b 2f 8a 9a eb bc  07 21 3f 44 41 09 07 b5  |.3./.....!?DA...|
          65 1c 24 bc 48 d3 44 80  eb a1 cf c9 02 b4 14 cf  |e.$.H.D.........|
          54 c7 16 a3 80 5c f9 79  3e 5d 72 7d 88 17 9e 2c  |T....\.y>]r}...,|
          43 a2 ca 53 ce 7d 3d f6  2a 3a b8 4f 94 00 a5 6d  |C..S.}=.*:.O...m|
          0a 83 5d f9 5e 53 f4 18  b3 57 0f 70 c3 fb f5 ad  |..].^S...W.p....|
          95 a0 0e 17 de c4 16 80  60 c9 0f 2b 6e 86 04 f1  |........`..+n...|
          eb f4 78 27 d1 05 c5 ee  34 5b 5e b9 49 32 f2 33  |..x'....4[^.I2.3|
      • Certificate #2
        • 2
          • 18:18:7B:CC:2D:AF:1E:DD:44:A2:F4:54:90:0E:C5:DC
          • RSA-SHA1: nil
          • Issuer
            • C: ZA
            • O: Thawte Consulting (Pty) Ltd.
            • CN: Thawte Code Signing CA
          • 2010-01-11 00:00:00 UTC: 2012-01-11 23:59:59 UTC
          • Subject
            • C: RU
            • ST: Moscow region
            • L: Moscow
            • O: LLC Mail.Ru
            • OU: Secure Application Development
            • CN: LLC Mail.Ru
          • #5
            • rsaEncryption: nil
            • C9:1C:68:9D:EE:3B:E4:FF:F0:F7:AE:9E:47:B5:5A:BC:
              8E:A8:E4:1F:1C:06:53:08:3E:DD:6C:4F:F2:D1:90:A5:
              1E:86:BC:EB:AF:36:96:90:BE:E8:31:4A:7B:B6:C7:A1:
              EE:35:3B:20:03:F6:FA:DB:37:51:14:FD:9B:B2:AC:49:
              AE:0D:29:F6:0F:0B:3F:D9:C4:B1:A0:B4:47:8F:FE:2C:
              53:A8:5E:42:86:62:8F:9F:1C:06:57:9E:7D:FC:F9:21:
              B9:1D:D1:0D:A3:73:E0:65:A7:0F:07:8D:B3:68:62:F8:
              53:C4:A2:F9:0B:E5:B3:B3:46:2F:C6:56:DE:16:2B:DE:
              77:9D:F5:15:9F:2A:24:84:1F:3E:E8:7A:AD:ED:75:62:
              D3:E3:4A:DC:74:A4:6C:4B:0F:A5:90:C7:B8:01:14:E7:
              6F:E9:B1:3F:81:51:26:94:3E:A6:BD:CC:58:2E:74:BA:
              07:67:A9:A5:D6:C5:1D:F4:18:47:A0:86:25:12:4C:7C:
              9D:13:21:46:5E:6E:0F:1A:B7:C4:E5:01:F0:75:87:98:
              80:EA:0F:64:F7:FD:C4:46:34:56:9C:15:05:83:E5:36:
              0A:3B:B8:21:55:48:C4:B5:DA:2D:3D:15:E1:D6:4C:C0:
              D9:C7:6A:FC:95:7C:90:4D:D1:07:1E:BD:BA:E8:6C:B5
              : 0x010001
          • X509v3 extensions
            • basicConstraints
              • true
              • nil
            • crlDistributionPoints: http://crl.thawte.com/ThawteCodeSigningCA.crl
            • extendedKeyUsage
              • codeSigning: msCodeCom
            • 2.5.29.4
              • msCodeCom: 0x80
            • authorityInfoAccess
              • OCSP: http://ocsp.thawte.com
            • nsCertType: 0x10
        • RSA-SHA1:
          c6 a7 55 8a 7b fb 51 bb  39 1a cc 35 8f fa 0d 69  |..U.{.Q.9..5...i|
          01 78 18 24 7e f1 0d 4b  2c d2 dd 2f 60 c6 8a 59  |.x.$~..K,../`..Y|
          1f ab b5 36 4a 31 cf 48  92 3b ec 3b ca 0e 88 95  |...6J1.H.;.;....|
          d5 c9 c8 56 23 72 f1 af  e2 8e 01 e6 f0 2b 35 4d  |...V#r.......+5M|
          be 88 9d 04 43 b3 34 10  7c 3a 93 3b b4 51 9c de  |....C.4.|:.;.Q..|
          96 de b9 53 69 64 b1 52  be 23 e6 9c bb 32 95 2d  |...Sid.R.#...2.-|
          5f 01 ae 55 89 ff ad 53  29 c0 95 5c 55 b4 04 72  |_..U...S)..\U..r|
          08 b6 57 fa a7 0d 6b 7a  d6 3d cb 49 8e 5e c4 24  |..W...kz.=.I.^.$|
      • Certificate #3
        • 2
          • 47:BF:19:95:DF:8D:52:46:43:F7:DB:6D:48:0D:31:A4
          • RSA-SHA1: nil
          • Issuer
            • C: ZA
            • ST: Western Cape
            • L: Durbanville
            • O: Thawte
            • OU: Thawte Certification
            • CN: Thawte Timestamping CA
          • 2003-12-04 00:00:00 UTC: 2013-12-03 23:59:59 UTC
          • Subject
            • C: US
            • O: VeriSign, Inc.
            • CN: VeriSign Time Stamping Services CA
          • #5
            • rsaEncryption: nil
            • A9:CA:B2:A4:CC:CD:20:AF:0A:7D:89:AC:87:75:F0:B4:
              4E:F1:DF:C1:0F:BF:67:61:BD:A3:64:1C:DA:BB:F9:CA:
              33:AB:84:30:89:58:7E:8C:DB:6B:DD:36:9E:0F:BF:D1:
              EC:78:F2:77:A6:7E:6F:3C:BF:93:AF:0D:BA:68:F4:6C:
              94:CA:BD:52:2D:AB:48:3D:F5:B6:D5:5D:5F:1B:02:9F:
              FA:2F:6B:1E:A4:F7:A3:9A:A6:1A:C8:02:E1:7F:4C:52:
              E3:0E:60:EC:40:1C:7E:B9:0D:DE:3F:C7:B4:DF:87:BD:
              5F:7A:6A:31:2E:03:99:81:13:A8:47:20:CE:31:73:0D:
              57:2D:CD:78:34:33:95:12:99:12:B9:DE:68:2F:AA:E6:
              E3:C2:8A:8C:2A:C3:8B:21:87:66:BD:83:58:57:6F:75:
              BF:3C:AA:26:87:5D:CA:10:15:3C:9F:84:EA:54:C1:0A:
              6E:C4:FE:C5:4A:DD:B9:07:11:97:22:7C:DB:3E:27:D1:
              1E:78:EC:9F:31:C9:F1:E6:22:19:DB:C4:B3:47:43:9A:
              1A:5F:A0:1E:90:E4:5E:F5:EE:7C:F1:7D:AB:62:01:8F:
              F5:4D:0B:DE:D0:22:56:A8:95:CD:AE:88:76:AE:EE:BA:
              0D:F3:E4:4D:D9:A0:FB:68:A0:AE:14:3B:B3:87:C1:BB
              : 0x010001
          • X509v3 extensions
            • authorityInfoAccess
              • OCSP: http://ocsp.verisign.com
            • basicConstraints
              • true
              • true: 0
            • crlDistributionPoints: http://crl.verisign.com/ThawteTimestampingCA.crl
            • extendedKeyUsage: timeStamping
            • keyUsage: true, 6
            • subjectAltName
              • CN: TSA2048-1-53
        • RSA-SHA1:
          4a 6b f9 ea 58 c2 44 1c  31 89 79 99 2b 96 bf 82  |Jk..X.D.1.y.+...|
          ac 01 d6 1c 4c cd b0 8a  58 6e df 08 29 a3 5e c8  |....L...Xn..).^.|
          ca 93 13 e7 04 52 0d ef  47 27 2f 00 38 b0 e4 c9  |.....R..G'/.8...|
          93 4e 9a d4 22 62 15 f7  3f 37 21 4f 70 31 80 f1  |.N.."b..?7!Op1..|
          8b 38 87 b3 e8 e8 97 00  fe cf 55 96 4e 24 d2 a9  |.8........U.N$..|
          27 4e 7a ae b7 61 41 f3  2a ce e7 c9 d9 5e dd bb  |'Nz..aA.*....^..|
          2b 85 3e b5 9d b5 d9 e1  57 ff be b4 c5 7e f5 cf  |+.>.....W....~..|
          0c 9e f0 97 fe 2b d3 3b  52 1b 1b 38 27 f7 3f 4a  |.....+.;R..8'.?J|
    • 1
      • unnamed
        • #0
          • C: ZA
          • O: Thawte Consulting (Pty) Ltd.
          • CN: Thawte Code Signing CA
        • 18:18:7B:CC:2D:AF:1E:DD:44:A2:F4:54:90:0E:C5:DC
      • SHA1: nil
      • #2
        • contentType: 1.3.6.1.4.1.311.2.1.4
        • 1.3.6.1.4.1.311.2.1.11: msCodeCom
        • messageDigest:
          3c 9d c0 24 49 80 8e 77  0e 4c 01 9c 54 ff b0 2a  |<..$I..w.L..T..*|
          3e 5a 38 79                                       |>Z8y            |
        • 1.3.6.1.4.1.311.2.1.12
          • 00 68 00 74 00 74 00 70  00 3a 00 2f 00 2f 00 73  |.h.t.t.p.:././.s|
            00 70 00 75 00 74 00 6e  00 69 00 6b 00 2e 00 6d  |.p.u.t.n.i.k...m|
            00 61 00 69 00 6c 00 2e  00 72 00 75              |.a.i.l...r.u    |
            : http://sputnik.mail.ru
      • rsaEncryption:
        13 d0 f4 03 1d 84 05 90  cf 23 38 45 87 b4 bc 49  |.........#8E...I|
        98 f5 59 00 e2 66 4c 4f  48 1a d3 0c 7f c4 c1 e2  |..Y..fLOH.......|
        e0 80 58 8e 7a bc 32 3d  d3 dd 54 a7 0d f1 c1 cf  |..X.z.2=..T.....|
        ce 14 4d 21 4d e2 6b 6b  4c 70 f6 2a 7a 33 21 52  |..M!M.kkLp.*z3!R|
        06 c0 e3 9a 41 f2 76 7a  6f 0e 08 b2 db a3 92 a1  |....A.vzo.......|
        54 12 79 08 d9 c3 96 e7  2b d1 a3 ca bc 66 de d5  |T.y.....+....f..|
        3d 57 a2 d4 c2 40 81 c1  98 b9 f5 0f 36 dc cd 95  |=W...@......6...|
        71 38 41 ee 67 e0 df c1  ce 31 cc e3 07 c8 a0 4f  |q8A.g....1.....O|
        0f bb 7c 7f 24 ba 60 65  d4 9e bc 95 6d 04 1c 28  |..|.$.`e....m..(|
        34 3e f9 4f 34 a1 18 24  91 a5 8c 60 e8 e2 d6 b3  |4>.O4..$...`....|
        7d fe 11 a2 2f 4a 38 d1  1f ce ab d3 bf 4c ce 94  |}.../J8......L..|
        31 28 33 2e dc 4e ac 76  84 4d d5 93 c5 a6 9f 18  |1(3..N.v.M......|
        c6 d3 e3 0d 55 63 6c 0f  18 00 ab 76 ef 98 fa e9  |....Ucl....v....|
        4a 53 23 1e d9 d0 49 2f  84 09 10 63 2c 5a ab 5e  |JS#...I/...c,Z.^|
        88 f0 da ca 91 fb c3 01  7e db 65 43 82 4e b3 cd  |........~.eC.N..|
        57 02 5f 2e ae 51 d9 8e  31 68 31 1c 9c cd 06 72  |W._..Q..1h1....r|
      • countersignature
        • 1
          • unnamed
            • #0
              • C: US
              • O: VeriSign, Inc.
              • CN: VeriSign Time Stamping Services CA
            • 38:25:D7:FA:F8:61:AF:9E:F4:90:E7:26:B5:D6:5A:D5
          • SHA1: nil
          • #2
            • contentType: pkcs7-data
            • signingTime: 2011-04-20 15:18:49 UTC
            • messageDigest:
              2e d7 96 37 e9 27 d0 42  d1 76 04 60 aa 6d 4a e5  |...7.'.B.v.`.mJ.|
              01 85 06 96                                       |....            |
          • rsaEncryption:
            47 bc 55 77 56 d4 27 74  7a f5 7e 69 16 89 fb 4d  |G.UwV.'tz.~i...M|
            0c c0 3a 59 c3 12 74 52  2a 2e b6 27 95 55 1a 08  |..:Y..tR*..'.U..|
            9e 20 c9 5c a6 c1 77 15  08 57 f1 07 40 6a 1d c2  |. .\..w..W..@j..|
            e8 72 43 d2 42 95 93 6c  d8 9e 07 f2 b5 49 2b 8a  |.rC.B..l.....I+.|
            e0 c3 8f dc 1d f1 85 ab  be a4 ad 93 f7 e8 44 b4  |..............D.|
            be 7c 1f 5b 74 2e bf 46  93 ec f6 f6 06 32 d3 8f  |.|.[t..F.....2..|
            a1 c4 c9 b1 3d dd e9 85  c7 bf fe a3 02 e1 c6 64  |....=..........d|
            97 e4 b8 70 cf 8b 24 d5  3a d8 7a 7d b1 1e 33 98  |...p..$.:.z}..3.|
offsetsizetypecomment
03784192EXE04/20/2011 15:15:30#
15c115HTM#
39be004816PKCS7Authenticode Signature#
Scanning the drive for archives:
1 file, 3789008 bytes (3701 KiB)


--
Type = PE
Physical Size = 3789008
CPU = x86
Characteristics = Executable 32-bit NoRelocs
Created = 2011-04-20 15:15:30
Headers Size = 1024
Checksum = 3792709
Name = MailRuSputnik.exe
Image Size = 3805184
Section Alignment = 4096
File Alignment = 512
Code Size = 1101824
Initialized Data Size = 2681344
Uninitialized Data Size = 0
Linker Version = 9.0
OS Version = 5.0
Image Version = 0.0
Subsystem Version = 5.0
Subsystem = Windows GUI
DLL Characteristics = TerminalServerAware
Stack Reserve = 1048576
Stack Commit = 4096
Heap Reserve = 1048576
Heap Commit = 4096
Image Base = 4194304
Comment = FileVersion: 2.4.0.270
FileVersion: 2, 4, 0, 270
ProductVersion: 2.4.0.270
ProductVersion: 2, 4, 0, 270
FileDescription: MailRuSputnik Module
InternalName: MailRuSputnik
LegalCopyright: Copyright © 2005 - 2011
OriginalFilename: MailRuSputnik.exe
ProductName: MailRuSputnik Installer Module
----
Path = .rsrc/1049/BIN/IDR_MAILRUSPUTNIKDLL
Size = 1054353
Packed Size = 1054353
--
Path = .rsrc/1049/BIN/IDR_MAILRUSPUTNIKDLL
Type = 7z
Physical Size = 1054353
Headers Size = 199
Method = LZMA:1536k
Solid = -
Blocks = 2

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
2011-04-06 09:35:33 ....A      1488592       515618  MailRuSputnik_Odnk.dll
2011-04-20 15:13:42 ....A      1546960       538536  MailRuSputnik.dll
------------------- ----- ------------ ------------  ------------------------
2011-04-20 15:13:42            3035552      1054154  2 files
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

everything is OK