MZ Header

Rich Header

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Packer / Compiler

Sections

Data Directory

Signers (1)

issuer: /C=US/O=VeriSign Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa (c)2011/CN=VeriSign Class 3 Code Signing 2011-2 CA
serial: 6106862C000000000002

Certificates (3)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
        Validity
            Not Before: Dec 21 00:00:00 2012 GMT
            Not After : Dec 30 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:b3:49:54:4b:97:1c:12:0a:d8:25:79:91:
                    22:57:2a:6f:dc:b8:26:c4:43:73:6b:c2:bf:2e:50:
                    5a:fb:14:c2:76:8e:43:01:25:43:b4:a1:e2:45:f4:
                    e8:b7:7b:c3:74:cc:22:d7:b4:94:00:02:f7:4d:ed:
                    bf:b4:b7:44:24:6b:cd:5f:45:3b:d1:44:ce:43:12:
                    73:17:82:8b:69:b4:2b:cb:99:1e:ac:72:1b:26:4d:
                    71:1f:b1:31:dd:fb:51:61:02:53:a6:aa:f5:49:2c:
                    05:78:45:a5:2f:89:ce:e7:99:e7:fe:8c:e2:57:3f:
                    3d:c6:92:dc:4a:f8:7b:33:e4:79:0a:fb:f0:75:88:
                    41:9c:ff:c5:03:51:99:aa:d7:6c:9f:93:69:87:65:
                    29:83:85:c2:60:14:c4:c8:c9:3b:14:da:c0:81:f0:
                    1f:0d:74:de:92:22:ab:ca:f7:fb:74:7c:27:e6:f7:
                    4a:1b:7f:a7:c3:9e:2d:ae:8a:ea:a6:e6:aa:27:16:
                    7d:61:f7:98:71:11:bc:e2:50:a1:4b:e5:5d:fa:e5:
                    0e:a7:2c:9f:aa:65:20:d3:d8:96:e8:c8:7c:a5:4e:
                    48:44:ff:19:e2:44:07:92:0b:d7:68:84:80:5d:6a:
                    78:64:45:cd:60:46:7e:54:c1:13:7c:c5:79:f1:c9:
                    c1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD
            Authority Information Access: 
                OCSP - URI:http://ocsp.thawte.com

            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.thawte.com/ThawteTimestampingCA.crl

            X509v3 Extended Key Usage: 
                Time Stamping
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-1
    Signature Algorithm: sha1WithRSAEncryption
         03:09:9b:8f:79:ef:7f:59:30:aa:ef:68:b5:fa:e3:09:1d:bb:
         4f:82:06:5d:37:5f:a6:52:9f:16:8d:ea:1c:92:09:44:6e:f5:
         6d:eb:58:7c:30:e8:f9:69:8d:23:73:0b:12:6f:47:a9:ae:39:
         11:f8:2a:b1:9b:b0:1a:c3:8e:eb:59:96:00:ad:ce:0c:4d:b2:
         d0:31:a6:08:5c:2a:7a:fc:e2:7a:1d:57:4c:a8:65:18:e9:79:
         40:62:25:96:6e:c7:c7:37:6a:83:21:08:8e:41:ea:dd:d9:57:
         3f:1d:77:49:87:2a:16:06:5e:a6:38:6a:22:12:a3:51:19:83:
         7e:b6

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Validity
            Not Before: Oct 18 00:00:00 2012 GMT
            Not After : Dec 29 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer - G4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:63:0b:39:44:b8:bb:23:a7:44:49:bb:0e:ff:
                    a1:f0:61:0a:53:93:b0:98:db:ad:2c:0f:4a:c5:6e:
                    ff:86:3c:53:55:0f:15:ce:04:3f:2b:fd:a9:96:96:
                    d9:be:61:79:0b:5b:c9:4c:86:76:e5:e0:43:4b:22:
                    95:ee:c2:2b:43:c1:9f:d8:68:b4:8e:40:4f:ee:85:
                    38:b9:11:c5:23:f2:64:58:f0:15:32:6f:4e:57:a1:
                    ae:88:a4:02:d7:2a:1e:cd:4b:e1:dd:63:d5:17:89:
                    32:5b:b0:5e:99:5a:a8:9d:28:50:0e:17:ee:96:db:
                    61:3b:45:51:1d:cf:12:56:0b:92:47:fc:ab:ae:f6:
                    66:3d:47:ac:70:72:e7:92:e7:5f:cd:10:b9:c4:83:
                    64:94:19:bd:25:80:e1:e8:d2:22:a5:d0:ba:02:7a:
                    a1:77:93:5b:65:c3:ee:17:74:bc:41:86:2a:dc:08:
                    4c:8c:92:8c:91:2d:9e:77:44:1f:68:d6:a8:74:77:
                    db:0e:5b:32:8b:56:8b:33:bd:d9:63:c8:49:9d:3a:
                    c5:c5:ea:33:0b:d2:f1:a3:1b:f4:8b:be:d9:b3:57:
                    8b:3b:de:04:a7:7a:22:b2:24:ae:2e:c7:70:c5:be:
                    4e:83:26:08:fb:0b:bd:a9:4f:99:08:e1:10:28:72:
                    aa:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                OCSP - URI:http://ts-ocsp.ws.symantec.com
                CA Issuers - URI:http://ts-aia.ws.symantec.com/tss-ca-g2.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ts-crl.ws.symantec.com/tss-ca-g2.crl

            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-2
            X509v3 Subject Key Identifier: 
                46:C6:69:A3:0E:4A:14:1E:D5:4C:DA:52:63:17:3F:5E:36:BC:0D:E6
            X509v3 Authority Key Identifier: 
                keyid:5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD

    Signature Algorithm: sha1WithRSAEncryption
         78:3b:b4:91:2a:00:4c:f0:8f:62:30:37:78:a3:84:27:07:6f:
         18:b2:de:25:dc:a0:d4:94:03:aa:86:4e:25:9f:9a:40:03:1c:
         dd:ce:e3:79:cb:21:68:06:da:b6:32:b4:6d:bf:f4:2c:26:63:
         33:e4:49:64:6d:0d:e6:c3:67:0e:f7:05:a4:35:6c:7c:89:16:
         c6:e9:b2:df:b2:e9:dd:20:c6:71:0f:cd:95:74:dc:b6:5c:de:
         bd:37:1f:43:78:e6:78:b5:cd:28:04:20:a3:aa:f1:4b:c4:88:
         29:91:0e:80:d1:11:fc:dd:5c:76:6e:4f:5e:0e:45:46:41:6e:
         0d:b0:ea:38:9a:b1:3a:da:09:71:10:fc:1c:79:b4:80:7b:ac:
         69:f4:fd:9c:b6:0c:16:2b:f1:7f:5b:09:3d:9b:5b:e2:16:ca:
         13:81:6d:00:2e:38:0d:a8:29:8f:2c:e1:b2:f4:5a:a9:01:af:
         15:9c:2c:2f:49:1b:db:22:bb:c3:fe:78:94:51:c3:86:b1:82:
         88:5d:f0:3d:b4:51:a1:79:33:2b:2e:7b:b9:dc:20:09:13:71:
         eb:6a:19:5b:cf:e8:a5:30:57:2c:89:49:3f:b9:cf:7f:c9:bf:
         3e:22:68:63:53:9a:bd:69:74:ac:c5:1d:3c:7f:92:e0:c3:bc:
         1c:d8:04:75

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:06:86:2c:00:00:00:00:00:02
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)2011, CN=VeriSign Class 3 Code Signing 2011-2 CA
        Validity
            Not Before: Nov 17 05:06:51 2011 GMT
            Not After : Nov 17 05:01:08 2511 GMT
        Subject: C=CN, ST=Beijing, L=Beijing, O=360.cn, OU=Digital ID Class 3 - Microsoft Software Validation v2, CN=360.cn
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (4096 bit)
                Modulus:
                    00:a7:89:00:72:60:eb:14:92:35:bd:55:2f:64:d9:
                    05:15:a6:6b:3b:1f:0f:a0:c6:bc:38:64:42:31:55:
                    29:7f:40:6a:18:29:c7:0c:f0:4a:e6:f9:47:e3:94:
                    76:8a:63:25:c6:4d:93:be:dc:45:de:d9:5d:2f:00:
                    4e:d1:12:49:fc:d3:b3:7d:3b:f1:f7:f0:6b:62:86:
                    bd:12:03:56:77:d3:91:22:05:80:75:12:22:cc:fd:
                    09:97:08:93:08:b3:9f:fe:2e:8b:86:38:26:6f:c9:
                    75:44:eb:e6:89:66:a5:b3:96:74:35:90:a7:75:27:
                    c0:38:c2:d9:c1:eb:1d:f3:a6:7d:46:cb:8e:ff:d5:
                    c8:a7:d9:b2:5b:a1:3e:ec:d9:a3:a0:98:88:62:c9:
                    49:c5:fc:94:e4:8d:d4:69:24:ec:cd:40:3a:9e:33:
                    15:e9:70:10:12:68:bc:a9:54:30:6b:1c:34:e0:a5:
                    34:21:c6:92:b5:83:10:ed:fd:0c:a0:e4:87:05:7a:
                    d4:ad:46:4f:6a:86:27:a9:77:2c:0b:d0:8f:6d:bb:
                    30:d9:bb:f1:d3:41:66:3d:83:c9:15:a6:ef:03:50:
                    fb:d7:5e:fb:27:63:1b:41:8c:8c:15:a3:77:2d:64:
                    ba:fd:5f:cc:d4:39:bb:3f:50:5b:d3:ed:fe:85:c2:
                    34:ca:9a:8b:a5:05:e3:73:fd:8e:aa:36:ec:a6:82:
                    8a:cf:ef:71:39:12:f8:99:c7:3c:1b:c9:13:08:94:
                    e3:32:9f:6f:3a:2a:fd:95:63:9e:e6:c8:ff:04:67:
                    6c:d3:a5:ec:20:1c:fd:39:3a:d2:51:77:28:72:60:
                    ce:76:8d:de:30:ec:6c:e1:43:54:eb:08:16:21:2e:
                    7f:bf:56:22:5b:0c:17:45:40:8a:e0:72:11:c6:e2:
                    25:5e:fa:98:61:a4:65:10:65:a0:5c:90:5c:7e:56:
                    aa:ba:63:05:ce:96:f0:a4:8b:10:41:08:3a:34:c2:
                    ec:40:e2:b5:51:1f:b8:76:ff:7a:b7:bf:03:4c:b1:
                    55:8f:24:17:22:69:cd:bc:42:0b:fa:16:2b:74:29:
                    02:e1:04:df:89:ca:0f:47:f1:d9:6c:61:bf:ec:a9:
                    38:5c:fa:3d:49:be:a6:33:d9:3f:18:b0:0b:8f:0b:
                    51:90:47:21:15:9f:75:6e:b1:79:ed:3f:05:e2:ab:
                    b3:c5:c9:6f:cf:05:36:de:2c:28:51:6e:50:e8:f3:
                    93:c5:f1:2b:5a:b4:c3:03:af:fe:a6:32:8c:6e:0a:
                    ee:ff:87:2e:f7:5c:7a:53:1e:37:cf:8d:d7:cc:f3:
                    5b:ba:18:78:e3:93:5c:bc:c6:35:ed:f8:0f:8c:79:
                    6e:69:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment
            S/MIME Capabilities: 
                050...*.H........0...*.H........0...+....0
..*.H....
            X509v3 Subject Key Identifier: 
                60:5E:5E:65:6D:A3:EB:35:47:03:83:93:82:29:DD:3C:75:CA:FE:70
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 Authority Key Identifier: 
                keyid:C5:C1:72:A0:D5:04:08:CB:62:C1:FF:18:24:78:DF:E3:76:6F:D8:C1

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://billgates-serve/CertEnroll/VeriSign%20Class%203%20Code%20Signing%202011-2%20CA.crl
                  URI:file://\\billgates-serve\CertEnroll\VeriSign Class 3 Code Signing 2011-2 CA.crl

            Authority Information Access: 
                CA Issuers - URI:http://billgates-serve/CertEnroll/billgates-serve_VeriSign%20Class%203%20Code%20Signing%202011-2%20CA.crt
                CA Issuers - URI:file://\\billgates-serve\CertEnroll\billgates-serve_VeriSign Class 3 Code Signing 2011-2 CA.crt

    Signature Algorithm: sha1WithRSAEncryption
         0b:3b:b3:b4:6d:c5:8b:4f:f4:b9:51:ea:d1:bd:91:2f:8a:3b:
         50:cb:cf:48:30:8d:f7:15:a2:de:2a:f1:59:00:f7:b6:29:7f:
         62:b1:e3:89:d2:ba:48:de:6e:63:84:22:cb:90:d5:b0:c9:a1:
         2a:1c:60:be:9f:05:66:8f:65:45:97:1c:41:02:b1:d5:cd:2c:
         94:6c:e5:f7:8b:fb:3c:7f:bb:28:af:62:c6:c6:3c:44:d5:eb:
         c1:ef:d4:f2:a5:d8:09:c3:61:0a:03:5c:e0:85:a9:cb:9b:c6:
         44:f9:ba:84:b2:08:c4:84:d5:65:b4:8e:c4:78:4c:49:93:ea:
         b3:7a:60:03:0e:45:ef:e2:3a:ce:5a:7e:db:e4:2c:9d:d9:9d:
         e9:5d:dc:46:c5:43:f1:70:90:6e:46:6e:a7:1f:11:fd:f5:f0:
         58:20:29:04:39:61:57:1b:19:7d:bf:73:cb:0a:84:56:ef:72:
         52:be:36:b9:4a:fd:03:13:88:9e:75:8a:a4:b3:19:1e:63:2f:
         bd:05:64:2b:f9:e5:03:7b:91:d9:e6:bf:0c:d6:a4:5c:98:e7:
         08:cf:10:b0:51:13:61:5c:8c:a9:bb:f9:d9:7d:d3:08:f3:80:
         a2:dd:7d:06:4d:f6:df:44:b0:04:02:fc:4b:e1:6c:05:81:2f:
         b6:e5:99:a8:e1:89:2a:0a:10:11:dc:df:22:f1:82:81:fa:17:
         7c:11:64:fc:21:86:d4:b9:46:c3:f4:f8:f3:0a:76:c3:35:a9:
         71:2c:22:74:50:b5:75:e7:25:6b:09:e7:47:d1:fc:9b:43:94:
         0e:84:ec:56:42:f1:69:f7:43:e8:c7:06:34:ef:da:cb:f4:99:
         5b:c9:f1:4a:9d:57:d3:07:b7:3c:ef:91:5a:2a:25:87:08:e8:
         7e:50:e4:ef:26:f3:fa:cd:ba:53:ba:7b:91:90:76:ea:0a:b7:
         34:ff:21:ca:0d:9e:8a:24:37:aa:5f:13:ca:8c:a2:5d:9d:af:
         ea:d5:be:ce:bb:ae:e4:cc:bb:c7:92:50:ba:d8:52:91:0f:a4:
         98:a0:b4:9b:cf:43:fd:c6:a2:f1:0f:3d:b1:61:96:5f:ce:fe:
         4b:a7:c5:4f:64:67:75:78:84:33:f0:d9:f2:20:fb:a3:99:00:
         24:03:c9:50:a8:a2:12:a4:2d:3f:75:25:4f:b9:52:8c:0c:62:
         c3:1f:8b:dd:df:37:da:81:44:25:9b:c1:56:0d:11:16:91:27:
         34:d2:39:5c:19:2d:b5:a6:45:54:07:a0:e5:66:49:cf:3d:03:
         dd:03:44:e8:c3:9c:0c:4a:ff:06:2c:02:71:d4:58:02:00:86:
         3c:42:6d:f0:16:e8:24:ae
pkcs7-signedData
  • 1
    • SHA1: nil
    • 1.3.6.1.4.1.311.2.1.4
      • #0
        • 1.3.6.1.4.1.311.2.1.15
          • :
        • SHA1
          • 53 7c 4e 7c cd e0 62 9b  9f 56 f8 a4 61 a4 7c 5a  |S|N|..b..V..a.|Z|
            be ed 05 fb                                       |....            |
    • Certificates
      • Certificate #0
        • 2
          • 7E:93:EB:FB:7C:C6:4E:59:EA:4B:9A:77:D4:06:FC:3B
          • RSA-SHA1: nil
          • Issuer
            • C: ZA
            • ST: Western Cape
            • L: Durbanville
            • O: Thawte
            • OU: Thawte Certification
            • CN: Thawte Timestamping CA
          • 2012-12-21 00:00:00 UTC: 2020-12-30 23:59:59 UTC
          • Subject
            • C: US
            • O: Symantec Corporation
            • CN: Symantec Time Stamping Services CA - G2
          • #5
            • rsaEncryption: nil
            • B1:AC:B3:49:54:4B:97:1C:12:0A:D8:25:79:91:22:57:
              2A:6F:DC:B8:26:C4:43:73:6B:C2:BF:2E:50:5A:FB:14:
              C2:76:8E:43:01:25:43:B4:A1:E2:45:F4:E8:B7:7B:C3:
              74:CC:22:D7:B4:94:00:02:F7:4D:ED:BF:B4:B7:44:24:
              6B:CD:5F:45:3B:D1:44:CE:43:12:73:17:82:8B:69:B4:
              2B:CB:99:1E:AC:72:1B:26:4D:71:1F:B1:31:DD:FB:51:
              61:02:53:A6:AA:F5:49:2C:05:78:45:A5:2F:89:CE:E7:
              99:E7:FE:8C:E2:57:3F:3D:C6:92:DC:4A:F8:7B:33:E4:
              79:0A:FB:F0:75:88:41:9C:FF:C5:03:51:99:AA:D7:6C:
              9F:93:69:87:65:29:83:85:C2:60:14:C4:C8:C9:3B:14:
              DA:C0:81:F0:1F:0D:74:DE:92:22:AB:CA:F7:FB:74:7C:
              27:E6:F7:4A:1B:7F:A7:C3:9E:2D:AE:8A:EA:A6:E6:AA:
              27:16:7D:61:F7:98:71:11:BC:E2:50:A1:4B:E5:5D:FA:
              E5:0E:A7:2C:9F:AA:65:20:D3:D8:96:E8:C8:7C:A5:4E:
              48:44:FF:19:E2:44:07:92:0B:D7:68:84:80:5D:6A:78:
              64:45:CD:60:46:7E:54:C1:13:7C:C5:79:F1:C9:C1:71
              : 0x010001
          • #6
            • subjectKeyIdentifier:
              5f 9a f5 6e 5c cc cc 74  9a d4 dd 7d ef 3f db ec  |_..n\..t...}.?..|
              4c 80 2e dd                                       |L...            |
            • authorityInfoAccess
              • OCSP: http://ocsp.thawte.com
            • basicConstraints
              • true
              • true: 0
            • crlDistributionPoints: http://crl.thawte.com/ThawteTimestampingCA.crl
            • extendedKeyUsage: timeStamping
            • keyUsage: true, 6
            • subjectAltName
              • CN: TimeStamp-2048-1
        • RSA-SHA1:
          03 09 9b 8f 79 ef 7f 59  30 aa ef 68 b5 fa e3 09  |....y..Y0..h....|
          1d bb 4f 82 06 5d 37 5f  a6 52 9f 16 8d ea 1c 92  |..O..]7_.R......|
          09 44 6e f5 6d eb 58 7c  30 e8 f9 69 8d 23 73 0b  |.Dn.m.X|0..i.#s.|
          12 6f 47 a9 ae 39 11 f8  2a b1 9b b0 1a c3 8e eb  |.oG..9..*.......|
          59 96 00 ad ce 0c 4d b2  d0 31 a6 08 5c 2a 7a fc  |Y.....M..1..\*z.|
          e2 7a 1d 57 4c a8 65 18  e9 79 40 62 25 96 6e c7  |.z.WL.e..y@b%.n.|
          c7 37 6a 83 21 08 8e 41  ea dd d9 57 3f 1d 77 49  |.7j.!..A...W?.wI|
          87 2a 16 06 5e a6 38 6a  22 12 a3 51 19 83 7e b6  |.*..^.8j"..Q..~.|
      • Certificate #1
        • 2
          • 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • O: Symantec Corporation
            • CN: Symantec Time Stamping Services CA - G2
          • 2012-10-18 00:00:00 UTC: 2020-12-29 23:59:59 UTC
          • Subject
            • C: US
            • O: Symantec Corporation
            • CN: Symantec Time Stamping Services Signer - G4
          • #5
            • rsaEncryption: nil
            • A2:63:0B:39:44:B8:BB:23:A7:44:49:BB:0E:FF:A1:F0:
              61:0A:53:93:B0:98:DB:AD:2C:0F:4A:C5:6E:FF:86:3C:
              53:55:0F:15:CE:04:3F:2B:FD:A9:96:96:D9:BE:61:79:
              0B:5B:C9:4C:86:76:E5:E0:43:4B:22:95:EE:C2:2B:43:
              C1:9F:D8:68:B4:8E:40:4F:EE:85:38:B9:11:C5:23:F2:
              64:58:F0:15:32:6F:4E:57:A1:AE:88:A4:02:D7:2A:1E:
              CD:4B:E1:DD:63:D5:17:89:32:5B:B0:5E:99:5A:A8:9D:
              28:50:0E:17:EE:96:DB:61:3B:45:51:1D:CF:12:56:0B:
              92:47:FC:AB:AE:F6:66:3D:47:AC:70:72:E7:92:E7:5F:
              CD:10:B9:C4:83:64:94:19:BD:25:80:E1:E8:D2:22:A5:
              D0:BA:02:7A:A1:77:93:5B:65:C3:EE:17:74:BC:41:86:
              2A:DC:08:4C:8C:92:8C:91:2D:9E:77:44:1F:68:D6:A8:
              74:77:DB:0E:5B:32:8B:56:8B:33:BD:D9:63:C8:49:9D:
              3A:C5:C5:EA:33:0B:D2:F1:A3:1B:F4:8B:BE:D9:B3:57:
              8B:3B:DE:04:A7:7A:22:B2:24:AE:2E:C7:70:C5:BE:4E:
              83:26:08:FB:0B:BD:A9:4F:99:08:E1:10:28:72:AA:CD
              : 0x010001
          • X509v3 extensions
            • basicConstraints
              • true
              • nil
            • extendedKeyUsage: true, timeStamping
            • keyUsage: true, 0x80
            • authorityInfoAccess
              • #0
                • OCSP: http://ts-ocsp.ws.symantec.com
                • caIssuers: http://ts-aia.ws.symantec.com/tss-ca-g2.cer
            • crlDistributionPoints: http://ts-crl.ws.symantec.com/tss-ca-g2.crl
            • subjectAltName
              • CN: TimeStamp-2048-2
            • subjectKeyIdentifier:
              46 c6 69 a3 0e 4a 14 1e  d5 4c da 52 63 17 3f 5e  |F.i..J...L.Rc.?^|
              36 bc 0d e6                                       |6...            |
            • authorityKeyIdentifier:
              5f 9a f5 6e 5c cc cc 74  9a d4 dd 7d ef 3f db ec  |_..n\..t...}.?..|
              4c 80 2e dd                                       |L...            |
        • RSA-SHA1:
          78 3b b4 91 2a 00 4c f0  8f 62 30 37 78 a3 84 27  |x;..*.L..b07x..'|
          07 6f 18 b2 de 25 dc a0  d4 94 03 aa 86 4e 25 9f  |.o...%.......N%.|
          9a 40 03 1c dd ce e3 79  cb 21 68 06 da b6 32 b4  |.@.....y.!h...2.|
          6d bf f4 2c 26 63 33 e4  49 64 6d 0d e6 c3 67 0e  |m..,&c3.Idm...g.|
          f7 05 a4 35 6c 7c 89 16  c6 e9 b2 df b2 e9 dd 20  |...5l|......... |
          c6 71 0f cd 95 74 dc b6  5c de bd 37 1f 43 78 e6  |.q...t..\..7.Cx.|
          78 b5 cd 28 04 20 a3 aa  f1 4b c4 88 29 91 0e 80  |x..(. ...K..)...|
          d1 11 fc dd 5c 76 6e 4f  5e 0e 45 46 41 6e 0d b0  |....\vnO^.EFAn..|
          ea 38 9a b1 3a da 09 71  10 fc 1c 79 b4 80 7b ac  |.8..:..q...y..{.|
          69 f4 fd 9c b6 0c 16 2b  f1 7f 5b 09 3d 9b 5b e2  |i......+..[.=.[.|
          16 ca 13 81 6d 00 2e 38  0d a8 29 8f 2c e1 b2 f4  |....m..8..).,...|
          5a a9 01 af 15 9c 2c 2f  49 1b db 22 bb c3 fe 78  |Z.....,/I.."...x|
          94 51 c3 86 b1 82 88 5d  f0 3d b4 51 a1 79 33 2b  |.Q.....].=.Q.y3+|
          2e 7b b9 dc 20 09 13 71  eb 6a 19 5b cf e8 a5 30  |.{.. ..q.j.[...0|
          57 2c 89 49 3f b9 cf 7f  c9 bf 3e 22 68 63 53 9a  |W,.I?.....>"hcS.|
          bd 69 74 ac c5 1d 3c 7f  92 e0 c3 bc 1c d8 04 75  |.it...<........u|
      • Certificate #2
        • 2
          • 61:06:86:2C:00:00:00:00:00:02
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • O: VeriSign Inc.
            • OU: VeriSign Trust Network
            • OU: Terms of use at https://www.verisign.com/rpa (c)2011
            • CN: VeriSign Class 3 Code Signing 2011-2 CA
          • 2011-11-17 05:06:51 UTC: 2511-11-17 05:01:08 UTC
          • Subject
            • C: CN
            • ST: Beijing
            • L: Beijing
            • O: 360.cn
            • OU: Digital ID Class 3 - Microsoft Software Validation v2
            • CN: 360.cn
          • #5
            • rsaEncryption: nil
            • A7:89:00:72:60:EB:14:92:35:BD:55:2F:64:D9:05:15:
              A6:6B:3B:1F:0F:A0:C6:BC:38:64:42:31:55:29:7F:40:
              6A:18:29:C7:0C:F0:4A:E6:F9:47:E3:94:76:8A:63:25:
              C6:4D:93:BE:DC:45:DE:D9:5D:2F:00:4E:D1:12:49:FC:
              D3:B3:7D:3B:F1:F7:F0:6B:62:86:BD:12:03:56:77:D3:
              91:22:05:80:75:12:22:CC:FD:09:97:08:93:08:B3:9F:
              FE:2E:8B:86:38:26:6F:C9:75:44:EB:E6:89:66:A5:B3:
              96:74:35:90:A7:75:27:C0:38:C2:D9:C1:EB:1D:F3:A6:
              7D:46:CB:8E:FF:D5:C8:A7:D9:B2:5B:A1:3E:EC:D9:A3:
              A0:98:88:62:C9:49:C5:FC:94:E4:8D:D4:69:24:EC:CD:
              40:3A:9E:33:15:E9:70:10:12:68:BC:A9:54:30:6B:1C:
              34:E0:A5:34:21:C6:92:B5:83:10:ED:FD:0C:A0:E4:87:
              05:7A:D4:AD:46:4F:6A:86:27:A9:77:2C:0B:D0:8F:6D:
              BB:30:D9:BB:F1:D3:41:66:3D:83:C9:15:A6:EF:03:50:
              FB:D7:5E:FB:27:63:1B:41:8C:8C:15:A3:77:2D:64:BA:
              FD:5F:CC:D4:39:BB:3F:50:5B:D3:ED:FE:85:C2:34:CA:
              9A:8B:A5:05:E3:73:FD:8E:AA:36:EC:A6:82:8A:CF:EF:
              71:39:12:F8:99:C7:3C:1B:C9:13:08:94:E3:32:9F:6F:
              3A:2A:FD:95:63:9E:E6:C8:FF:04:67:6C:D3:A5:EC:20:
              1C:FD:39:3A:D2:51:77:28:72:60:CE:76:8D:DE:30:EC:
              6C:E1:43:54:EB:08:16:21:2E:7F:BF:56:22:5B:0C:17:
              45:40:8A:E0:72:11:C6:E2:25:5E:FA:98:61:A4:65:10:
              65:A0:5C:90:5C:7E:56:AA:BA:63:05:CE:96:F0:A4:8B:
              10:41:08:3A:34:C2:EC:40:E2:B5:51:1F:B8:76:FF:7A:
              B7:BF:03:4C:B1:55:8F:24:17:22:69:CD:BC:42:0B:FA:
              16:2B:74:29:02:E1:04:DF:89:CA:0F:47:F1:D9:6C:61:
              BF:EC:A9:38:5C:FA:3D:49:BE:A6:33:D9:3F:18:B0:0B:
              8F:0B:51:90:47:21:15:9F:75:6E:B1:79:ED:3F:05:E2:
              AB:B3:C5:C9:6F:CF:05:36:DE:2C:28:51:6E:50:E8:F3:
              93:C5:F1:2B:5A:B4:C3:03:AF:FE:A6:32:8C:6E:0A:EE:
              FF:87:2E:F7:5C:7A:53:1E:37:CF:8D:D7:CC:F3:5B:BA:
              18:78:E3:93:5C:BC:C6:35:ED:F8:0F:8C:79:6E:69:41
              : 0x010001
          • #6
            • keyUsage: true, 0xf0
            • SMIME-CAPS
              • #0
                • RC2-CBC: 0x80
                • RC4: 0x80
                • DES-CBC
                • DES-EDE3-CBC
            • subjectKeyIdentifier:
              60 5e 5e 65 6d a3 eb 35  47 03 83 93 82 29 dd 3c  |`^^em..5G....).<|
              75 ca fe 70                                       |u..p            |
            • extendedKeyUsage: codeSigning
            • authorityKeyIdentifier:
              c5 c1 72 a0 d5 04 08 cb  62 c1 ff 18 24 78 df e3  |..r.....b...$x..|
              76 6f d8 c1                                       |vo..            |
            • crlDistributionPoints
              • http://billgates-serve/CertEnroll/VeriSign%20Class%203%20Code%20Signing%202011-2%20CA.crl: file://\\billgates-serve\CertEnroll\VeriSign Class 3 Code Signing 2011-2 CA.crl
            • authorityInfoAccess
              • #0
                • caIssuers: http://billgates-serve/CertEnroll/billgates-serve_VeriSign%20Class%203%20Code%20Signing%202011-2%20CA.crt
                • caIssuers: file://\\billgates-serve\CertEnroll\billgates-serve_VeriSign Class 3 Code Signing 2011-2 CA.crt
        • RSA-SHA1:
          0b 3b b3 b4 6d c5 8b 4f  f4 b9 51 ea d1 bd 91 2f  |.;..m..O..Q..../|
          8a 3b 50 cb cf 48 30 8d  f7 15 a2 de 2a f1 59 00  |.;P..H0.....*.Y.|
          f7 b6 29 7f 62 b1 e3 89  d2 ba 48 de 6e 63 84 22  |..).b.....H.nc."|
          cb 90 d5 b0 c9 a1 2a 1c  60 be 9f 05 66 8f 65 45  |......*.`...f.eE|
          97 1c 41 02 b1 d5 cd 2c  94 6c e5 f7 8b fb 3c 7f  |..A....,.l....<.|
          bb 28 af 62 c6 c6 3c 44  d5 eb c1 ef d4 f2 a5 d8  |.(.b..
    • Signer
      • 1
      • unnamed
        • #0
          • C: US
          • O: VeriSign Inc.
          • OU: VeriSign Trust Network
          • OU: Terms of use at https://www.verisign.com/rpa (c)2011
          • CN: VeriSign Class 3 Code Signing 2011-2 CA
        • 61:06:86:2C:00:00:00:00:00:02
      • SHA1: nil
      • #3
        • 1.3.6.1.4.1.311.2.1.12
          • nil
        • contentType: 1.3.6.1.4.1.311.2.1.4
        • 1.3.6.1.4.1.311.2.1.11: msCodeInd
        • messageDigest:
          e4 c4 88 27 6d 7b 0c f5  37 b5 04 7f 9e 3d a8 bd  |...'m{..7....=..|
          74 8b 45 0f                                       |t.E.            |
      • rsaEncryption:
        85 40 d8 af 33 2d f3 bb  29 8e 1a 4b 9a 81 e8 9e  |.@..3-..)..K....|
        35 9a 86 00 79 de 04 65  5f cf 53 5a 2c 89 78 11  |5...y..e_.SZ,.x.|
        5b 90 a9 76 d8 2d 0f a4  66 c0 82 16 d4 64 b9 f5  |[..v.-..f....d..|
        aa c1 c7 b2 b1 03 a3 5d  37 39 3c 15 69 14 10 05  |.......]79<.i...|
        d2 1f 8f fa a1 6c cf e3  36 b4 9f 3a cb c7 2d 4b  |.....l..6..:..-K|
        70 55 ac b2 4c 6d 58 a4  c3 fe 09 a0 dc 4d 79 9b  |pU..LmX......My.|
        19 f1 c6 21 8e 22 ec f7  06 88 4c 01 ba 66 a8 2d  |...!."....L..f.-|
        76 8d bd cb 44 5f 27 8b  6c 4b 08 b0 36 44 64 31  |v...D_'.lK..6Dd1|
        ac 25 89 2a 68 38 a7 11  a4 7c d3 dc 83 e1 81 33  |.%.*h8...|.....3|
        39 b6 24 71 ef 32 6b 44  e5 02 e2 66 a1 b6 f3 81  |9.$q.2kD...f....|
        ed 38 8c 13 ac 6f 32 92  6d 49 3c 2a ad 8d 2e 6f  |.8...o2.mI<*...o|
        7e b1 f5 45 2c 6b ff 12  14 91 14 68 4b a1 41 7c  |~..E,k.....hK.A||
        db 7c 55 6e 04 1c 3e bc  44 3e 85 7c 10 8e 71 1b  |.|Un..>.D>.|..q.|
        d1 41 07 74 d6 83 bb e7  b1 a7 d4 95 b7 ce 05 aa  |.A.t............|
        1b a6 ac 8d 0b c7 78 af  d2 0e 77 e9 47 e9 74 9c  |......x...w.G.t.|
        46 c2 33 e8 a8 23 00 20  2a a9 39 27 63 06 3f 2f  |F.3..#. *.9'c.?/|
        dc 55 ce 86 d9 13 1c 03  79 0a c1 48 e8 cf 98 42  |.U......y..H...B|
        a8 5b ac 93 64 8d 2c 22  f5 8d 09 a0 4e d1 19 a7  |.[..d.,"....N...|
        28 e6 c4 23 0d 56 99 c6  37 38 ef bd 0e af 07 78  |(..#.V..78.....x|
        83 a0 48 11 7e 3d 4b a5  3f de 97 ac ea 8f 52 77  |..H.~=K.?.....Rw|
        16 0a 95 b3 ab 2f 67 3f  cc f6 bd 65 cd f9 97 29  |...../g?...e...)|
        7d 94 b5 37 28 43 78 da  f6 e7 29 54 25 cd e3 37  |}..7(Cx...)T%..7|
        6d 3c 53 8b 9f af 2d 3b  08 b2 dc 25 86 31 5c 66  |m..|
        42 f4 91 b0 bf 28 19 e5  1a 78 c1 ff a4 2a 14 7c  |B....(...x...*.||
        40 73 1f 73 25 68 14 d3  85 27 b9 8a f3 b7 98 7f  |@s.s%h...'......|
        4d 11 e0 ce b3 5c 12 04  4a 22 9f b8 44 cc b2 1b  |M....\..J"..D...|
        b0 68 0b 49 00 c7 b9 bb  38 12 90 89 5d dc f8 12  |.h.I....8...]...|
        43 c6 5f 8e db ad da ae  84 f1 24 ac 9a 62 99 91  |C._.......$..b..|
        06 5e f1 93 1d 08 90 44  9a 8e 59 c3 5b 1e c6 35  |.^.....D..Y.[..5|
      • countersignature
        • 1
          • unnamed
            • #0
              • C: US
              • O: Symantec Corporation
              • CN: Symantec Time Stamping Services CA - G2
            • 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
          • SHA1: nil
          • #2
            • contentType: pkcs7-data
            • signingTime: 2014-12-04 01:59:03 UTC
            • messageDigest:
              9d 69 3d ce 63 08 b2 2b  5c 64 fb 5e b8 0c 1a 26  |.i=.c..+\d.^...&|
              13 40 86 9a                                       |.@..            |
          • rsaEncryption:
            4a da 54 82 3d 6d 30 b1  b3 e3 60 cb 6e 87 f6 32  |J.T.=m0...`.n..2|
            0c 1f d5 ed 37 16 84 72  39 05 67 64 5c ad 55 30  |....7..r9.gd\.U0|
            fd c8 de fe 42 58 ac 33  e8 1a 06 d3 85 44 a0 67  |....BX.3.....D.g|
            93 8a d6 47 07 3e b0 2d  1a 25 fb 36 89 b4 1f bb  |...G.>.-.%.6....|
            39 04 3e 90 fb bc 42 30  6c 72 52 9e 3d ca 59 3a  |9.>...B0lrR.=.Y:|
            91 b8 f4 e7 59 01 b3 ea  0f 78 0a 6e 94 75 7a 20  |....Y....x.n.uz |
            51 0f 9f da fb 8a ac da  62 be ca 94 16 a7 04 0e  |Q.......b.......|
            45 ba 7c c3 a9 b9 02 4d  37 0c 76 dc 28 a5 4f cc  |E.|....M7.v.(.O.|
            c4 bf b1 e5 b6 cc 15 71  03 7b 38 df db 8f bb a0  |.......q.{8.....|
            48 25 0b 79 78 2e 5d 77  ae dc 07 63 53 2f ff 53  |H%.yx.]w...cS/.S|
            0f 8b 8e 53 29 13 49 f3  4d 25 df 37 89 92 76 34  |...S).I.M%.7..v4|
            2e f6 c1 27 f4 d9 2b 6c  ac 15 4d 44 03 3d 0a 2d  |...'..+l..MD.=.-|
            cd 6f 41 c7 06 fd 66 a5  05 d9 51 18 d7 2a dd 05  |.oA...f...Q..*..|
            f8 f7 29 a3 bd 28 43 29  50 dc 1e f6 92 5b c5 03  |..)..(C)P....[..|
            26 d5 88 a4 90 36 74 b8  1e 94 48 5b d0 fa 6c 14  |&....6t...H[..l.|
            d4 53 86 89 db 34 4b bc  0b 33 4a f7 92 69 a4 c7  |.S...4K..3J..i..|
offsetsizetypecomment
0176128EXE03/29/2014 08:38:37#
15c115HTM#
bec454901PNG(256 x 256)#
1953c54901PNG(256 x 256)#
2b0005840PKCS7Authenticode Signature#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

[?] ignoring invalid PEdump::BITMAPINFOHEADER