MZ Header

Rich Header

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Packer / Compiler

Sections

Data Directory

TLS

StringTable 040904b0

VS_FIXEDFILEINFO

Signers (1)

issuer: /C=US/O=thawte, Inc./CN=thawte SHA256 Code Signing CA
serial: 694E215B8DF6F177F50012FEBD09BDA6

Certificates (4)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
        Validity
            Not Before: Dec 21 00:00:00 2012 GMT
            Not After : Dec 30 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:b3:49:54:4b:97:1c:12:0a:d8:25:79:91:
                    22:57:2a:6f:dc:b8:26:c4:43:73:6b:c2:bf:2e:50:
                    5a:fb:14:c2:76:8e:43:01:25:43:b4:a1:e2:45:f4:
                    e8:b7:7b:c3:74:cc:22:d7:b4:94:00:02:f7:4d:ed:
                    bf:b4:b7:44:24:6b:cd:5f:45:3b:d1:44:ce:43:12:
                    73:17:82:8b:69:b4:2b:cb:99:1e:ac:72:1b:26:4d:
                    71:1f:b1:31:dd:fb:51:61:02:53:a6:aa:f5:49:2c:
                    05:78:45:a5:2f:89:ce:e7:99:e7:fe:8c:e2:57:3f:
                    3d:c6:92:dc:4a:f8:7b:33:e4:79:0a:fb:f0:75:88:
                    41:9c:ff:c5:03:51:99:aa:d7:6c:9f:93:69:87:65:
                    29:83:85:c2:60:14:c4:c8:c9:3b:14:da:c0:81:f0:
                    1f:0d:74:de:92:22:ab:ca:f7:fb:74:7c:27:e6:f7:
                    4a:1b:7f:a7:c3:9e:2d:ae:8a:ea:a6:e6:aa:27:16:
                    7d:61:f7:98:71:11:bc:e2:50:a1:4b:e5:5d:fa:e5:
                    0e:a7:2c:9f:aa:65:20:d3:d8:96:e8:c8:7c:a5:4e:
                    48:44:ff:19:e2:44:07:92:0b:d7:68:84:80:5d:6a:
                    78:64:45:cd:60:46:7e:54:c1:13:7c:c5:79:f1:c9:
                    c1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD
            Authority Information Access: 
                OCSP - URI:http://ocsp.thawte.com
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.thawte.com/ThawteTimestampingCA.crl
            X509v3 Extended Key Usage: 
                Time Stamping
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-1
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        03:09:9b:8f:79:ef:7f:59:30:aa:ef:68:b5:fa:e3:09:1d:bb:
        4f:82:06:5d:37:5f:a6:52:9f:16:8d:ea:1c:92:09:44:6e:f5:
        6d:eb:58:7c:30:e8:f9:69:8d:23:73:0b:12:6f:47:a9:ae:39:
        11:f8:2a:b1:9b:b0:1a:c3:8e:eb:59:96:00:ad:ce:0c:4d:b2:
        d0:31:a6:08:5c:2a:7a:fc:e2:7a:1d:57:4c:a8:65:18:e9:79:
        40:62:25:96:6e:c7:c7:37:6a:83:21:08:8e:41:ea:dd:d9:57:
        3f:1d:77:49:87:2a:16:06:5e:a6:38:6a:22:12:a3:51:19:83:
        7e:b6

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:a0:b7:36:95:dd:b1:af:c2:3b:2b:9a:18:ee:54:cb
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2006 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA
        Validity
            Not Before: Dec 10 00:00:00 2013 GMT
            Not After : Dec  9 23:59:59 2023 GMT
        Subject: C=US, O=thawte, Inc., CN=thawte SHA256 Code Signing CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:9b:55:02:4c:17:05:e9:d0:66:c3:fc:28:ad:d3:
                    c0:fe:ef:e0:e9:7e:d4:1e:f6:aa:1b:91:46:fd:f5:
                    16:ed:98:07:53:fa:ba:87:1b:7d:9e:1f:01:27:ab:
                    b9:d2:67:ca:b7:10:25:53:f4:e3:be:9b:90:b8:ed:
                    23:5c:42:ef:64:25:58:e5:88:22:1a:be:f5:c7:ae:
                    f5:be:8a:b1:11:11:93:1a:22:a9:74:69:c1:74:b6:
                    68:87:a7:83:30:f9:64:f1:b1:e3:38:3e:f4:d6:c1:
                    fc:12:fe:73:57:17:35:57:8a:dd:50:8d:03:f8:66:
                    cd:ca:76:83:13:c8:d7:0e:71:1d:e4:63:c9:ba:17:
                    f8:d1:b9:e4:88:d2:2c:28:c8:21:20:0d:41:b7:0b:
                    e2:2f:c2:80:e6:88:7b:53:6c:c3:44:63:81:7f:68:
                    47:8c:2b:2a:cf:5b:f4:8c:49:61:ba:69:85:fd:6b:
                    00:78:05:26:69:13:30:80:38:4e:f1:5a:55:c9:c5:
                    50:d6:aa:38:89:47:43:5c:fe:4d:73:a5:49:c5:93:
                    69:fe:77:96:9a:af:f3:8c:0e:57:ba:33:d9:0e:c6:
                    42:d3:03:77:c4:bb:39:ad:91:f9:f3:f7:96:5c:3a:
                    64:a6:ed:27:57:c1:e8:40:f3:53:f2:be:29:34:fe:
                    5f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access: 
                OCSP - URI:http://t2.symcb.com
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://t1.symcb.com/ThawtePCA.crl
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, Code Signing
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=SymantecPKI-1-568
            X509v3 Subject Key Identifier: 
                57:86:9B:54:B8:BE:A6:29:8A:E4:F6:C2:E2:13:18:89:85:CD:DC:B7
            X509v3 Authority Key Identifier: 
                7B:5B:45:CF:AF:CE:CB:7A:FD:31:92:1A:6A:B6:F3:46:EB:57:48:50
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        24:3b:f5:d7:a0:36:13:c7:43:fe:f0:09:87:68:d1:98:31:6e:
        12:e4:3f:1e:1f:96:7b:6b:4c:1e:87:9e:8b:c5:6c:a3:b1:0c:
        7b:50:92:d5:81:9c:b1:8f:2c:29:b7:ee:f9:91:05:b9:8e:41:
        f1:2c:f6:d0:59:2d:98:e0:b9:ea:80:01:47:40:95:b8:3d:9d:
        03:bd:79:bb:35:b6:ad:9c:4c:27:f6:67:45:10:c9:c5:bc:87:
        4e:55:7b:d2:87:bb:dd:dc:30:ef:c6:d4:6c:cc:99:35:6d:1c:
        e0:60:d3:cd:68:8f:29:59:4b:89:96:08:46:c9:8e:fc:75:4f:
        c5:dc:09:cc:4e:27:8b:44:cd:07:bc:ac:04:e0:b5:33:a5:87:
        9f:f4:dd:73:0c:91:ea:12:81:6f:e3:75:f0:1e:b5:93:6c:44:
        17:d5:3e:97:c9:bd:07:2c:56:77:1f:85:dd:46:e8:bf:de:2c:
        81:94:a3:f7:e5:b7:a7:c1:37:9f:75:ca:55:77:4d:5e:36:29:
        ca:85:d8:45:41:72:57:75:c0:79:5b:fa:34:10:06:6d:64:20:
        42:b7:3a:c8:1f:1d:46:64:02:5f:c6:47:be:f0:c4:3a:28:54:
        da:f6:1e:4f:9a:a2:19:43:a4:6f:49:f8:fc:5e:42:20:28:84:
        8b:47:20:6e

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Validity
            Not Before: Oct 18 00:00:00 2012 GMT
            Not After : Dec 29 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer - G4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a2:63:0b:39:44:b8:bb:23:a7:44:49:bb:0e:ff:
                    a1:f0:61:0a:53:93:b0:98:db:ad:2c:0f:4a:c5:6e:
                    ff:86:3c:53:55:0f:15:ce:04:3f:2b:fd:a9:96:96:
                    d9:be:61:79:0b:5b:c9:4c:86:76:e5:e0:43:4b:22:
                    95:ee:c2:2b:43:c1:9f:d8:68:b4:8e:40:4f:ee:85:
                    38:b9:11:c5:23:f2:64:58:f0:15:32:6f:4e:57:a1:
                    ae:88:a4:02:d7:2a:1e:cd:4b:e1:dd:63:d5:17:89:
                    32:5b:b0:5e:99:5a:a8:9d:28:50:0e:17:ee:96:db:
                    61:3b:45:51:1d:cf:12:56:0b:92:47:fc:ab:ae:f6:
                    66:3d:47:ac:70:72:e7:92:e7:5f:cd:10:b9:c4:83:
                    64:94:19:bd:25:80:e1:e8:d2:22:a5:d0:ba:02:7a:
                    a1:77:93:5b:65:c3:ee:17:74:bc:41:86:2a:dc:08:
                    4c:8c:92:8c:91:2d:9e:77:44:1f:68:d6:a8:74:77:
                    db:0e:5b:32:8b:56:8b:33:bd:d9:63:c8:49:9d:3a:
                    c5:c5:ea:33:0b:d2:f1:a3:1b:f4:8b:be:d9:b3:57:
                    8b:3b:de:04:a7:7a:22:b2:24:ae:2e:c7:70:c5:be:
                    4e:83:26:08:fb:0b:bd:a9:4f:99:08:e1:10:28:72:
                    aa:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                OCSP - URI:http://ts-ocsp.ws.symantec.com
                CA Issuers - URI:http://ts-aia.ws.symantec.com/tss-ca-g2.cer
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://ts-crl.ws.symantec.com/tss-ca-g2.crl
            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-2
            X509v3 Subject Key Identifier: 
                46:C6:69:A3:0E:4A:14:1E:D5:4C:DA:52:63:17:3F:5E:36:BC:0D:E6
            X509v3 Authority Key Identifier: 
                5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        78:3b:b4:91:2a:00:4c:f0:8f:62:30:37:78:a3:84:27:07:6f:
        18:b2:de:25:dc:a0:d4:94:03:aa:86:4e:25:9f:9a:40:03:1c:
        dd:ce:e3:79:cb:21:68:06:da:b6:32:b4:6d:bf:f4:2c:26:63:
        33:e4:49:64:6d:0d:e6:c3:67:0e:f7:05:a4:35:6c:7c:89:16:
        c6:e9:b2:df:b2:e9:dd:20:c6:71:0f:cd:95:74:dc:b6:5c:de:
        bd:37:1f:43:78:e6:78:b5:cd:28:04:20:a3:aa:f1:4b:c4:88:
        29:91:0e:80:d1:11:fc:dd:5c:76:6e:4f:5e:0e:45:46:41:6e:
        0d:b0:ea:38:9a:b1:3a:da:09:71:10:fc:1c:79:b4:80:7b:ac:
        69:f4:fd:9c:b6:0c:16:2b:f1:7f:5b:09:3d:9b:5b:e2:16:ca:
        13:81:6d:00:2e:38:0d:a8:29:8f:2c:e1:b2:f4:5a:a9:01:af:
        15:9c:2c:2f:49:1b:db:22:bb:c3:fe:78:94:51:c3:86:b1:82:
        88:5d:f0:3d:b4:51:a1:79:33:2b:2e:7b:b9:dc:20:09:13:71:
        eb:6a:19:5b:cf:e8:a5:30:57:2c:89:49:3f:b9:cf:7f:c9:bf:
        3e:22:68:63:53:9a:bd:69:74:ac:c5:1d:3c:7f:92:e0:c3:bc:
        1c:d8:04:75

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:4e:21:5b:8d:f6:f1:77:f5:00:12:fe:bd:09:bd:a6
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=thawte, Inc., CN=thawte SHA256 Code Signing CA
        Validity
            Not Before: Oct 11 00:00:00 2016 GMT
            Not After : Oct 11 23:59:59 2019 GMT
        Subject: C=US, ST=California, L=San Mateo, O=Roblox Corporation, CN=Roblox Corporation
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ab:d8:81:5d:23:27:90:2a:5f:52:ff:ac:8b:ee:
                    ad:59:06:f9:8a:b1:19:57:58:ed:24:02:56:19:50:
                    b9:63:58:12:33:96:33:06:4a:d6:81:1e:7b:fc:23:
                    02:ed:c4:e7:c8:f1:62:b8:7a:34:56:e5:44:1b:03:
                    92:c2:d3:e3:2a:12:55:db:40:1c:fb:f8:24:17:2e:
                    b4:35:d3:f6:38:90:b7:3e:b6:c8:83:c6:a8:d6:7d:
                    27:e1:21:23:c6:e4:1e:a1:26:6a:c7:7c:3c:cc:66:
                    98:77:61:51:a5:1d:a9:17:59:bc:e9:62:39:65:cf:
                    30:23:07:e8:aa:0b:e0:e3:b9:1e:e2:73:f9:ba:0d:
                    f4:05:9d:47:0d:ae:b6:81:92:86:17:e8:ed:5e:c8:
                    6b:e7:10:df:f1:04:c9:d1:78:ff:36:a4:1a:ca:3a:
                    53:df:d8:d2:dd:43:ed:c5:d8:41:c3:e7:db:3f:b8:
                    fd:33:fe:67:92:17:0e:e6:43:0a:1a:e1:75:a7:47:
                    16:47:97:25:60:05:9d:12:55:42:13:8b:1c:56:95:
                    81:86:50:91:e3:9e:ab:72:53:dc:ce:a3:03:a8:0e:
                    33:e2:f4:5b:d8:34:61:7c:11:fa:74:cd:5f:d6:79:
                    06:3b:47:eb:f2:5f:2e:7c:a6:0b:37:0c:8c:4b:f9:
                    19:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Authority Key Identifier: 
                57:86:9B:54:B8:BE:A6:29:8A:E4:F6:C2:E2:13:18:89:85:CD:DC:B7
            X509v3 Subject Key Identifier: 
                F2:3E:67:AB:B5:C6:26:F4:26:17:0D:21:14:75:4A:5D:A4:53:9C:4A
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://tl.symcb.com/tl.crl
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.4.1
                  CPS: https://www.thawte.com/cps
                  User Notice:
                    Explicit Text: https://www.thawte.com/repository
            Authority Information Access: 
                OCSP - URI:http://tl.symcd.com
                CA Issuers - URI:http://tl.symcb.com/tl.crt
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        57:81:47:ac:28:34:ca:73:ec:2a:e1:b1:0e:90:de:96:87:b9:
        3b:47:b9:16:4b:d0:7b:70:d0:46:be:15:82:3a:43:5d:19:9a:
        d0:87:72:83:2b:90:87:dd:c1:2c:c1:e2:8a:43:e8:94:0a:50:
        cc:9a:c8:26:8b:b6:aa:4a:f4:7e:e2:f6:b9:e1:54:ae:25:a5:
        7a:4c:b8:3a:e1:6a:eb:50:96:bc:f8:5a:f3:b6:01:d4:55:ef:
        8e:70:ec:d2:1d:de:c8:57:4f:57:06:73:bf:ce:2d:12:1f:98:
        17:37:41:3e:09:3e:3c:8b:d3:a3:14:f4:f9:6a:30:93:96:29:
        aa:f2:31:83:94:06:db:00:18:b8:cf:96:85:e0:d7:c9:48:5a:
        bf:18:bb:f1:e2:06:00:24:b9:78:5b:8c:9b:24:c1:ff:86:48:
        16:14:3b:d0:fb:d0:83:b7:e2:c8:5c:2e:40:89:f4:d2:7d:dc:
        f2:8b:ae:c4:37:ba:ff:22:71:ab:11:d9:96:ec:e3:f7:62:95:
        8f:64:e5:34:da:7e:84:00:ce:40:2d:e3:06:e8:f8:19:ef:8e:
        6e:c6:fb:a7:1c:eb:a8:f8:a1:65:92:98:12:32:b7:33:68:92:
        eb:df:e9:22:e7:9a:23:c9:79:09:a2:a2:08:dc:f2:e0:1e:d8:
        b9:5a:d3:49
pkcs7-signedData
  • 1
    • SHA1: nil
    • 1.3.6.1.4.1.311.2.1.4
      • #0
        • 1.3.6.1.4.1.311.2.1.15
          • :
        • SHA1
          • 2a 15 12 d3 19 c1 c3 c3  2c 77 04 12 35 1a 3b d5  |*.......,w..5.;.|
            ef 20 b3 49                                       |. .I            |
    • Certificates
      • Certificate #0
        • 2
          • 7E:93:EB:FB:7C:C6:4E:59:EA:4B:9A:77:D4:06:FC:3B
          • RSA-SHA1: nil
          • Issuer
            • C: ZA
            • ST: Western Cape
            • L: Durbanville
            • O: Thawte
            • OU: Thawte Certification
            • CN: Thawte Timestamping CA
          • 2012-12-21 00:00:00 UTC: 2020-12-30 23:59:59 UTC
          • Subject
            • C: US
            • O: Symantec Corporation
            • CN: Symantec Time Stamping Services CA - G2
          • #5
            • rsaEncryption: nil
            • B1:AC:B3:49:54:4B:97:1C:12:0A:D8:25:79:91:22:57:
              2A:6F:DC:B8:26:C4:43:73:6B:C2:BF:2E:50:5A:FB:14:
              C2:76:8E:43:01:25:43:B4:A1:E2:45:F4:E8:B7:7B:C3:
              74:CC:22:D7:B4:94:00:02:F7:4D:ED:BF:B4:B7:44:24:
              6B:CD:5F:45:3B:D1:44:CE:43:12:73:17:82:8B:69:B4:
              2B:CB:99:1E:AC:72:1B:26:4D:71:1F:B1:31:DD:FB:51:
              61:02:53:A6:AA:F5:49:2C:05:78:45:A5:2F:89:CE:E7:
              99:E7:FE:8C:E2:57:3F:3D:C6:92:DC:4A:F8:7B:33:E4:
              79:0A:FB:F0:75:88:41:9C:FF:C5:03:51:99:AA:D7:6C:
              9F:93:69:87:65:29:83:85:C2:60:14:C4:C8:C9:3B:14:
              DA:C0:81:F0:1F:0D:74:DE:92:22:AB:CA:F7:FB:74:7C:
              27:E6:F7:4A:1B:7F:A7:C3:9E:2D:AE:8A:EA:A6:E6:AA:
              27:16:7D:61:F7:98:71:11:BC:E2:50:A1:4B:E5:5D:FA:
              E5:0E:A7:2C:9F:AA:65:20:D3:D8:96:E8:C8:7C:A5:4E:
              48:44:FF:19:E2:44:07:92:0B:D7:68:84:80:5D:6A:78:
              64:45:CD:60:46:7E:54:C1:13:7C:C5:79:F1:C9:C1:71
              : 0x010001
          • #6
            • subjectKeyIdentifier:
              5f 9a f5 6e 5c cc cc 74  9a d4 dd 7d ef 3f db ec  |_..n\..t...}.?..|
              4c 80 2e dd                                       |L...            |
            • authorityInfoAccess
              • OCSP: http://ocsp.thawte.com
            • basicConstraints
              • true
              • true: 0
            • crlDistributionPoints: http://crl.thawte.com/ThawteTimestampingCA.crl
            • extendedKeyUsage: timeStamping
            • keyUsage: true, 6
            • subjectAltName
              • CN: TimeStamp-2048-1
        • RSA-SHA1:
          03 09 9b 8f 79 ef 7f 59  30 aa ef 68 b5 fa e3 09  |....y..Y0..h....|
          1d bb 4f 82 06 5d 37 5f  a6 52 9f 16 8d ea 1c 92  |..O..]7_.R......|
          09 44 6e f5 6d eb 58 7c  30 e8 f9 69 8d 23 73 0b  |.Dn.m.X|0..i.#s.|
          12 6f 47 a9 ae 39 11 f8  2a b1 9b b0 1a c3 8e eb  |.oG..9..*.......|
          59 96 00 ad ce 0c 4d b2  d0 31 a6 08 5c 2a 7a fc  |Y.....M..1..\*z.|
          e2 7a 1d 57 4c a8 65 18  e9 79 40 62 25 96 6e c7  |.z.WL.e..y@b%.n.|
          c7 37 6a 83 21 08 8e 41  ea dd d9 57 3f 1d 77 49  |.7j.!..A...W?.wI|
          87 2a 16 06 5e a6 38 6a  22 12 a3 51 19 83 7e b6  |.*..^.8j"..Q..~.|
      • Certificate #1
        • 2
          • 71:A0:B7:36:95:DD:B1:AF:C2:3B:2B:9A:18:EE:54:CB
          • RSA-SHA256: nil
          • Issuer
            • C: US
            • O: thawte, Inc.
            • OU: Certification Services Division
            • OU: (c) 2006 thawte, Inc. - For authorized use only
            • CN: thawte Primary Root CA
          • 2013-12-10 00:00:00 UTC: 2023-12-09 23:59:59 UTC
          • Subject
            • C: US
            • O: thawte, Inc.
            • CN: thawte SHA256 Code Signing CA
          • #5
            • rsaEncryption: nil
            • 9B:55:02:4C:17:05:E9:D0:66:C3:FC:28:AD:D3:C0:FE:
              EF:E0:E9:7E:D4:1E:F6:AA:1B:91:46:FD:F5:16:ED:98:
              07:53:FA:BA:87:1B:7D:9E:1F:01:27:AB:B9:D2:67:CA:
              B7:10:25:53:F4:E3:BE:9B:90:B8:ED:23:5C:42:EF:64:
              25:58:E5:88:22:1A:BE:F5:C7:AE:F5:BE:8A:B1:11:11:
              93:1A:22:A9:74:69:C1:74:B6:68:87:A7:83:30:F9:64:
              F1:B1:E3:38:3E:F4:D6:C1:FC:12:FE:73:57:17:35:57:
              8A:DD:50:8D:03:F8:66:CD:CA:76:83:13:C8:D7:0E:71:
              1D:E4:63:C9:BA:17:F8:D1:B9:E4:88:D2:2C:28:C8:21:
              20:0D:41:B7:0B:E2:2F:C2:80:E6:88:7B:53:6C:C3:44:
              63:81:7F:68:47:8C:2B:2A:CF:5B:F4:8C:49:61:BA:69:
              85:FD:6B:00:78:05:26:69:13:30:80:38:4E:F1:5A:55:
              C9:C5:50:D6:AA:38:89:47:43:5C:FE:4D:73:A5:49:C5:
              93:69:FE:77:96:9A:AF:F3:8C:0E:57:BA:33:D9:0E:C6:
              42:D3:03:77:C4:BB:39:AD:91:F9:F3:F7:96:5C:3A:64:
              A6:ED:27:57:C1:E8:40:F3:53:F2:BE:29:34:FE:5F:F9
              : 0x010001
          • X509v3 extensions
            • authorityInfoAccess
              • OCSP: http://t2.symcb.com
            • basicConstraints
              • true
              • true: 0
            • crlDistributionPoints: http://t1.symcb.com/ThawtePCA.crl
            • extendedKeyUsage
              • clientAuth: codeSigning
            • keyUsage: true, 6
            • subjectAltName
              • CN: SymantecPKI-1-568
            • subjectKeyIdentifier:
              57 86 9b 54 b8 be a6 29  8a e4 f6 c2 e2 13 18 89  |W..T...)........|
              85 cd dc b7                                       |....            |
            • authorityKeyIdentifier:
              7b 5b 45 cf af ce cb 7a  fd 31 92 1a 6a b6 f3 46  |{[E....z.1..j..F|
              eb 57 48 50                                       |.WHP            |
        • RSA-SHA256:
          24 3b f5 d7 a0 36 13 c7  43 fe f0 09 87 68 d1 98  |$;...6..C....h..|
          31 6e 12 e4 3f 1e 1f 96  7b 6b 4c 1e 87 9e 8b c5  |1n..?...{kL.....|
          6c a3 b1 0c 7b 50 92 d5  81 9c b1 8f 2c 29 b7 ee  |l...{P......,)..|
          f9 91 05 b9 8e 41 f1 2c  f6 d0 59 2d 98 e0 b9 ea  |.....A.,..Y-....|
          80 01 47 40 95 b8 3d 9d  03 bd 79 bb 35 b6 ad 9c  |..G@..=...y.5...|
          4c 27 f6 67 45 10 c9 c5  bc 87 4e 55 7b d2 87 bb  |L'.gE.....NU{...|
          dd dc 30 ef c6 d4 6c cc  99 35 6d 1c e0 60 d3 cd  |..0...l..5m..`..|
          68 8f 29 59 4b 89 96 08  46 c9 8e fc 75 4f c5 dc  |h.)YK...F...uO..|
          09 cc 4e 27 8b 44 cd 07  bc ac 04 e0 b5 33 a5 87  |..N'.D.......3..|
          9f f4 dd 73 0c 91 ea 12  81 6f e3 75 f0 1e b5 93  |...s.....o.u....|
          6c 44 17 d5 3e 97 c9 bd  07 2c 56 77 1f 85 dd 46  |lD..>....,Vw...F|
          e8 bf de 2c 81 94 a3 f7  e5 b7 a7 c1 37 9f 75 ca  |...,........7.u.|
          55 77 4d 5e 36 29 ca 85  d8 45 41 72 57 75 c0 79  |UwM^6)...EArWu.y|
          5b fa 34 10 06 6d 64 20  42 b7 3a c8 1f 1d 46 64  |[.4..md B.:...Fd|
          02 5f c6 47 be f0 c4 3a  28 54 da f6 1e 4f 9a a2  |._.G...:(T...O..|
          19 43 a4 6f 49 f8 fc 5e  42 20 28 84 8b 47 20 6e  |.C.oI..^B (..G n|
      • Certificate #2
        • 2
          • 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • O: Symantec Corporation
            • CN: Symantec Time Stamping Services CA - G2
          • 2012-10-18 00:00:00 UTC: 2020-12-29 23:59:59 UTC
          • Subject
            • C: US
            • O: Symantec Corporation
            • CN: Symantec Time Stamping Services Signer - G4
          • #5
            • rsaEncryption: nil
            • A2:63:0B:39:44:B8:BB:23:A7:44:49:BB:0E:FF:A1:F0:
              61:0A:53:93:B0:98:DB:AD:2C:0F:4A:C5:6E:FF:86:3C:
              53:55:0F:15:CE:04:3F:2B:FD:A9:96:96:D9:BE:61:79:
              0B:5B:C9:4C:86:76:E5:E0:43:4B:22:95:EE:C2:2B:43:
              C1:9F:D8:68:B4:8E:40:4F:EE:85:38:B9:11:C5:23:F2:
              64:58:F0:15:32:6F:4E:57:A1:AE:88:A4:02:D7:2A:1E:
              CD:4B:E1:DD:63:D5:17:89:32:5B:B0:5E:99:5A:A8:9D:
              28:50:0E:17:EE:96:DB:61:3B:45:51:1D:CF:12:56:0B:
              92:47:FC:AB:AE:F6:66:3D:47:AC:70:72:E7:92:E7:5F:
              CD:10:B9:C4:83:64:94:19:BD:25:80:E1:E8:D2:22:A5:
              D0:BA:02:7A:A1:77:93:5B:65:C3:EE:17:74:BC:41:86:
              2A:DC:08:4C:8C:92:8C:91:2D:9E:77:44:1F:68:D6:A8:
              74:77:DB:0E:5B:32:8B:56:8B:33:BD:D9:63:C8:49:9D:
              3A:C5:C5:EA:33:0B:D2:F1:A3:1B:F4:8B:BE:D9:B3:57:
              8B:3B:DE:04:A7:7A:22:B2:24:AE:2E:C7:70:C5:BE:4E:
              83:26:08:FB:0B:BD:A9:4F:99:08:E1:10:28:72:AA:CD
              : 0x010001
          • X509v3 extensions
            • basicConstraints
              • true
              • nil
            • extendedKeyUsage: true, timeStamping
            • keyUsage: true, 0x80
            • authorityInfoAccess
              • #0
                • OCSP: http://ts-ocsp.ws.symantec.com
                • caIssuers: http://ts-aia.ws.symantec.com/tss-ca-g2.cer
            • crlDistributionPoints: http://ts-crl.ws.symantec.com/tss-ca-g2.crl
            • subjectAltName
              • CN: TimeStamp-2048-2
            • subjectKeyIdentifier:
              46 c6 69 a3 0e 4a 14 1e  d5 4c da 52 63 17 3f 5e  |F.i..J...L.Rc.?^|
              36 bc 0d e6                                       |6...            |
            • authorityKeyIdentifier:
              5f 9a f5 6e 5c cc cc 74  9a d4 dd 7d ef 3f db ec  |_..n\..t...}.?..|
              4c 80 2e dd                                       |L...            |
        • RSA-SHA1:
          78 3b b4 91 2a 00 4c f0  8f 62 30 37 78 a3 84 27  |x;..*.L..b07x..'|
          07 6f 18 b2 de 25 dc a0  d4 94 03 aa 86 4e 25 9f  |.o...%.......N%.|
          9a 40 03 1c dd ce e3 79  cb 21 68 06 da b6 32 b4  |.@.....y.!h...2.|
          6d bf f4 2c 26 63 33 e4  49 64 6d 0d e6 c3 67 0e  |m..,&c3.Idm...g.|
          f7 05 a4 35 6c 7c 89 16  c6 e9 b2 df b2 e9 dd 20  |...5l|......... |
          c6 71 0f cd 95 74 dc b6  5c de bd 37 1f 43 78 e6  |.q...t..\..7.Cx.|
          78 b5 cd 28 04 20 a3 aa  f1 4b c4 88 29 91 0e 80  |x..(. ...K..)...|
          d1 11 fc dd 5c 76 6e 4f  5e 0e 45 46 41 6e 0d b0  |....\vnO^.EFAn..|
          ea 38 9a b1 3a da 09 71  10 fc 1c 79 b4 80 7b ac  |.8..:..q...y..{.|
          69 f4 fd 9c b6 0c 16 2b  f1 7f 5b 09 3d 9b 5b e2  |i......+..[.=.[.|
          16 ca 13 81 6d 00 2e 38  0d a8 29 8f 2c e1 b2 f4  |....m..8..).,...|
          5a a9 01 af 15 9c 2c 2f  49 1b db 22 bb c3 fe 78  |Z.....,/I.."...x|
          94 51 c3 86 b1 82 88 5d  f0 3d b4 51 a1 79 33 2b  |.Q.....].=.Q.y3+|
          2e 7b b9 dc 20 09 13 71  eb 6a 19 5b cf e8 a5 30  |.{.. ..q.j.[...0|
          57 2c 89 49 3f b9 cf 7f  c9 bf 3e 22 68 63 53 9a  |W,.I?.....>"hcS.|
          bd 69 74 ac c5 1d 3c 7f  92 e0 c3 bc 1c d8 04 75  |.it...<........u|
      • Certificate #3
        • 2
          • 69:4E:21:5B:8D:F6:F1:77:F5:00:12:FE:BD:09:BD:A6
          • RSA-SHA256: nil
          • Issuer
            • C: US
            • O: thawte, Inc.
            • CN: thawte SHA256 Code Signing CA
          • 2016-10-11 00:00:00 UTC: 2019-10-11 23:59:59 UTC
          • Subject
            • C: US
            • ST: California
            • L: San Mateo
            • O: Roblox Corporation
            • CN: Roblox Corporation
          • #5
            • rsaEncryption: nil
            • AB:D8:81:5D:23:27:90:2A:5F:52:FF:AC:8B:EE:AD:59:
              06:F9:8A:B1:19:57:58:ED:24:02:56:19:50:B9:63:58:
              12:33:96:33:06:4A:D6:81:1E:7B:FC:23:02:ED:C4:E7:
              C8:F1:62:B8:7A:34:56:E5:44:1B:03:92:C2:D3:E3:2A:
              12:55:DB:40:1C:FB:F8:24:17:2E:B4:35:D3:F6:38:90:
              B7:3E:B6:C8:83:C6:A8:D6:7D:27:E1:21:23:C6:E4:1E:
              A1:26:6A:C7:7C:3C:CC:66:98:77:61:51:A5:1D:A9:17:
              59:BC:E9:62:39:65:CF:30:23:07:E8:AA:0B:E0:E3:B9:
              1E:E2:73:F9:BA:0D:F4:05:9D:47:0D:AE:B6:81:92:86:
              17:E8:ED:5E:C8:6B:E7:10:DF:F1:04:C9:D1:78:FF:36:
              A4:1A:CA:3A:53:DF:D8:D2:DD:43:ED:C5:D8:41:C3:E7:
              DB:3F:B8:FD:33:FE:67:92:17:0E:E6:43:0A:1A:E1:75:
              A7:47:16:47:97:25:60:05:9D:12:55:42:13:8B:1C:56:
              95:81:86:50:91:E3:9E:AB:72:53:DC:CE:A3:03:A8:0E:
              33:E2:F4:5B:D8:34:61:7C:11:FA:74:CD:5F:D6:79:06:
              3B:47:EB:F2:5F:2E:7C:A6:0B:37:0C:8C:4B:F9:19:DB
              : 0x010001
          • X509v3 extensions
            • basicConstraints
              • nil
            • authorityKeyIdentifier:
              57 86 9b 54 b8 be a6 29  8a e4 f6 c2 e2 13 18 89  |W..T...)........|
              85 cd dc b7                                       |....            |
            • subjectKeyIdentifier:
              f2 3e 67 ab b5 c6 26 f4  26 17 0d 21 14 75 4a 5d  |.>g...&.&..!.uJ]|
              a4 53 9c 4a                                       |.S.J            |
            • crlDistributionPoints: http://tl.symcb.com/tl.crl
            • keyUsage: true, 0x80
            • extendedKeyUsage: codeSigning
            • certificatePolicies
              • 2.23.140.1.4.1
                • #0
                  • id-qt-cps: https://www.thawte.com/cps
                  • id-qt-unotice: https://www.thawte.com/repository
            • authorityInfoAccess
              • #0
                • OCSP: http://tl.symcd.com
                • caIssuers: http://tl.symcb.com/tl.crt
        • RSA-SHA256:
          57 81 47 ac 28 34 ca 73  ec 2a e1 b1 0e 90 de 96  |W.G.(4.s.*......|
          87 b9 3b 47 b9 16 4b d0  7b 70 d0 46 be 15 82 3a  |..;G..K.{p.F...:|
          43 5d 19 9a d0 87 72 83  2b 90 87 dd c1 2c c1 e2  |C]....r.+....,..|
          8a 43 e8 94 0a 50 cc 9a  c8 26 8b b6 aa 4a f4 7e  |.C...P...&...J.~|
          e2 f6 b9 e1 54 ae 25 a5  7a 4c b8 3a e1 6a eb 50  |....T.%.zL.:.j.P|
          96 bc f8 5a f3 b6 01 d4  55 ef 8e 70 ec d2 1d de  |...Z....U..p....|
          c8 57 4f 57 06 73 bf ce  2d 12 1f 98 17 37 41 3e  |.WOW.s..-....7A>|
          09 3e 3c 8b d3 a3 14 f4  f9 6a 30 93 96 29 aa f2  |.><......j0..)..|
          31 83 94 06 db 00 18 b8  cf 96 85 e0 d7 c9 48 5a  |1.............HZ|
          bf 18 bb f1 e2 06 00 24  b9 78 5b 8c 9b 24 c1 ff  |.......$.x[..$..|
          86 48 16 14 3b d0 fb d0  83 b7 e2 c8 5c 2e 40 89  |.H..;.......\.@.|
          f4 d2 7d dc f2 8b ae c4  37 ba ff 22 71 ab 11 d9  |..}.....7.."q...|
          96 ec e3 f7 62 95 8f 64  e5 34 da 7e 84 00 ce 40  |....b..d.4.~...@|
          2d e3 06 e8 f8 19 ef 8e  6e c6 fb a7 1c eb a8 f8  |-.......n.......|
          a1 65 92 98 12 32 b7 33  68 92 eb df e9 22 e7 9a  |.e...2.3h...."..|
          23 c9 79 09 a2 a2 08 dc  f2 e0 1e d8 b9 5a d3 49  |#.y..........Z.I|
    • Signer
      • 1
      • unnamed
        • #0
          • C: US
          • O: thawte, Inc.
          • CN: thawte SHA256 Code Signing CA
        • 69:4E:21:5B:8D:F6:F1:77:F5:00:12:FE:BD:09:BD:A6
      • SHA1: nil
      • #3
        • contentType: 1.3.6.1.4.1.311.2.1.4
        • 1.3.6.1.4.1.311.2.1.11: msCodeInd
        • messageDigest:
          67 db b6 5a 0c 0e 9a 80  6a 4f 15 e7 8b 7c f0 20  |g..Z....jO...|. |
          43 bb 93 65                                       |C..e            |
        • 1.3.6.1.4.1.311.2.1.12
          • 00 52 00 6f 00 62 00 6c  00 6f 00 78 00 20 00 41  |.R.o.b.l.o.x. .A|
            00 70 00 70 00 6c 00 69  00 63 00 61 00 74 00 69  |.p.p.l.i.c.a.t.i|
            00 6f 00 6e                                       |.o.n            |
            : http://www.localhost/
      • rsaEncryption:
        3b c9 c3 51 b3 21 f2 10  c2 ce 67 a4 01 7a 43 9a  |;..Q.!....g..zC.|
        a6 b3 49 58 9e 0f b7 9a  75 bc ee e9 ac f4 5d fb  |..IX....u.....].|
        74 08 37 fc 74 d5 19 2c  c4 3e 03 13 6b a5 7b 6e  |t.7.t..,.>..k.{n|
        b6 ec 19 3e 69 3d 00 3a  87 cf a3 03 6f 04 b7 f6  |...>i=.:....o...|
        50 49 2e 6f 15 aa bf d3  17 35 85 47 85 57 49 eb  |PI.o.....5.G.WI.|
        a8 f8 88 ba 1c cc 83 b7  a1 81 cf 87 e3 d9 23 89  |..............#.|
        c7 82 98 71 b4 92 3d 28  8e a3 07 7d c2 a1 c9 03  |...q..=(...}....|
        1d 32 3a f5 c6 6d 35 74  a4 3d 2a 33 f4 c6 e5 5a  |.2:..m5t.=*3...Z|
        2b eb 6d 0e e1 f2 18 7a  5f c8 48 28 36 a2 de 27  |+.m....z_.H(6..'|
        f6 e4 bc bc 68 99 2e 0b  bf 2f 14 24 28 6d 04 6f  |....h..../.$(m.o|
        2b 83 1a 8b e2 92 79 ee  9e a3 15 9a 14 d1 d7 85  |+.....y.........|
        77 c3 7a ed 74 dc 9f 95  dc 14 76 95 39 df e4 db  |w.z.t.....v.9...|
        bd fe f6 30 b2 95 b2 a4  ba 62 c4 f4 01 49 6d 29  |...0.....b...Im)|
        d4 ed 6e 35 84 a0 96 a4  a6 38 29 1e 8b 52 0b d8  |..n5.....8)..R..|
        97 b7 47 e1 3b 1b b1 55  2b 1d 61 34 10 9a 94 56  |..G.;..U+.a4...V|
        e9 20 bf 00 51 59 bd 6a  75 a3 7a 1e b5 e5 e1 71  |. ..QY.ju.z....q|
      • countersignature
        • 1
          • unnamed
            • #0
              • C: US
              • O: Symantec Corporation
              • CN: Symantec Time Stamping Services CA - G2
            • 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
          • SHA1: nil
          • #2
            • contentType: pkcs7-data
            • signingTime: 2017-10-21 00:09:21 UTC
            • messageDigest:
              ea b3 3d 7a cc 07 ae 2f  8c 1d e1 38 d0 f8 72 7b  |..=z.../...8..r{|
              01 c8 6c 9c                                       |..l.            |
          • rsaEncryption:
            2d a4 a7 79 59 06 fa cd  37 d3 f3 f8 92 33 d3 ff  |-..yY...7....3..|
            bf 98 60 92 6f df 44 61  ba eb 43 4a 72 95 d8 f7  |..`.o.Da..CJr...|
            e6 47 a5 9f 48 5a 7e 18  62 c5 ec 6f 53 d1 51 b9  |.G..HZ~.b..oS.Q.|
            5f 83 d5 6a aa 23 6b 29  7c 95 0d 25 94 b7 0e 21  |_..j.#k)|..%...!|
            73 a0 10 c7 ff 84 80 aa  ab 3f 85 14 02 28 6d 3b  |s........?...(m;|
            bd b9 40 b9 51 e4 39 ce  71 16 9d 27 6a 90 29 44  |..@.Q.9.q..'j.)D|
            e8 d6 77 1a 6b 79 42 bc  e3 51 ab 2d b4 b1 e5 a4  |..w.kyB..Q.-....|
            93 df a8 af db 00 8d 65  b5 f4 bb 7f a2 d0 54 4e  |.......e......TN|
            1a 97 8c af c0 a0 c0 36  cf 02 c4 34 55 20 2b 92  |.......6...4U +.|
            8a c4 4c 35 27 62 fa ed  2e 9e 90 f7 a3 90 d8 c4  |..L5'b..........|
            72 81 3d fe cc ff 83 05  0c c7 e9 ba eb ec 17 c0  |r.=.............|
            9b 4e c1 de e6 9c 1c f3  36 35 9e 9a 43 eb 89 64  |.N......65..C..d|
            ac 23 22 1d 10 a1 ab 53  b9 6c 56 c7 70 1a 4f ce  |.#"....S.lV.p.O.|
            b1 57 d5 8e 87 a7 3e e2  e5 e2 43 c6 76 3d 45 8a  |.W....>...C.v=E.|
            d2 e9 c8 30 81 f7 17 93  40 e2 8f c6 a8 93 40 82  |...0....@.....@.|
            6f a5 9b 71 3f d0 4b 19  f8 10 77 08 a9 ee ac 67  |o..q?.K...w....g|
offsetsizetypecomment
15c115HTM#
f3f7b0118384HTM#
1b641fc7216PNG(256 x 256)#
1b65e2c8852BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

[?] ignoring invalid PEdump::BITMAPINFOHEADER

[?] can't find file_offset of VA 0x14bfe48