MZ Header

Rich Header

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Sections

Data Directory

TLS

StringTable 080904b0

VS_FIXEDFILEINFO

Signers (1)

issuer: /C=US/O=thawte, Inc./CN=thawte SHA256 Code Signing CA
serial: 1BAE90F0162276EB826F201D9B3453

Certificates (2)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:a0:b7:36:95:dd:b1:af:c2:3b:2b:9a:18:ee:54:cb
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2006 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA
        Validity
            Not Before: Dec 10 00:00:00 2013 GMT
            Not After : Dec  9 23:59:59 2023 GMT
        Subject: C=US, O=thawte, Inc., CN=thawte SHA256 Code Signing CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:55:02:4c:17:05:e9:d0:66:c3:fc:28:ad:d3:
                    c0:fe:ef:e0:e9:7e:d4:1e:f6:aa:1b:91:46:fd:f5:
                    16:ed:98:07:53:fa:ba:87:1b:7d:9e:1f:01:27:ab:
                    b9:d2:67:ca:b7:10:25:53:f4:e3:be:9b:90:b8:ed:
                    23:5c:42:ef:64:25:58:e5:88:22:1a:be:f5:c7:ae:
                    f5:be:8a:b1:11:11:93:1a:22:a9:74:69:c1:74:b6:
                    68:87:a7:83:30:f9:64:f1:b1:e3:38:3e:f4:d6:c1:
                    fc:12:fe:73:57:17:35:57:8a:dd:50:8d:03:f8:66:
                    cd:ca:76:83:13:c8:d7:0e:71:1d:e4:63:c9:ba:17:
                    f8:d1:b9:e4:88:d2:2c:28:c8:21:20:0d:41:b7:0b:
                    e2:2f:c2:80:e6:88:7b:53:6c:c3:44:63:81:7f:68:
                    47:8c:2b:2a:cf:5b:f4:8c:49:61:ba:69:85:fd:6b:
                    00:78:05:26:69:13:30:80:38:4e:f1:5a:55:c9:c5:
                    50:d6:aa:38:89:47:43:5c:fe:4d:73:a5:49:c5:93:
                    69:fe:77:96:9a:af:f3:8c:0e:57:ba:33:d9:0e:c6:
                    42:d3:03:77:c4:bb:39:ad:91:f9:f3:f7:96:5c:3a:
                    64:a6:ed:27:57:c1:e8:40:f3:53:f2:be:29:34:fe:
                    5f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access: 
                OCSP - URI:http://t2.symcb.com

            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://t1.symcb.com/ThawtePCA.crl

            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, Code Signing
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=SymantecPKI-1-568
            X509v3 Subject Key Identifier: 
                57:86:9B:54:B8:BE:A6:29:8A:E4:F6:C2:E2:13:18:89:85:CD:DC:B7
            X509v3 Authority Key Identifier: 
                keyid:7B:5B:45:CF:AF:CE:CB:7A:FD:31:92:1A:6A:B6:F3:46:EB:57:48:50

    Signature Algorithm: sha256WithRSAEncryption
         24:3b:f5:d7:a0:36:13:c7:43:fe:f0:09:87:68:d1:98:31:6e:
         12:e4:3f:1e:1f:96:7b:6b:4c:1e:87:9e:8b:c5:6c:a3:b1:0c:
         7b:50:92:d5:81:9c:b1:8f:2c:29:b7:ee:f9:91:05:b9:8e:41:
         f1:2c:f6:d0:59:2d:98:e0:b9:ea:80:01:47:40:95:b8:3d:9d:
         03:bd:79:bb:35:b6:ad:9c:4c:27:f6:67:45:10:c9:c5:bc:87:
         4e:55:7b:d2:87:bb:dd:dc:30:ef:c6:d4:6c:cc:99:35:6d:1c:
         e0:60:d3:cd:68:8f:29:59:4b:89:96:08:46:c9:8e:fc:75:4f:
         c5:dc:09:cc:4e:27:8b:44:cd:07:bc:ac:04:e0:b5:33:a5:87:
         9f:f4:dd:73:0c:91:ea:12:81:6f:e3:75:f0:1e:b5:93:6c:44:
         17:d5:3e:97:c9:bd:07:2c:56:77:1f:85:dd:46:e8:bf:de:2c:
         81:94:a3:f7:e5:b7:a7:c1:37:9f:75:ca:55:77:4d:5e:36:29:
         ca:85:d8:45:41:72:57:75:c0:79:5b:fa:34:10:06:6d:64:20:
         42:b7:3a:c8:1f:1d:46:64:02:5f:c6:47:be:f0:c4:3a:28:54:
         da:f6:1e:4f:9a:a2:19:43:a4:6f:49:f8:fc:5e:42:20:28:84:
         8b:47:20:6e

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:ae:90:f0:16:22:76:eb:82:6f:20:1d:9b:34:53
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=thawte, Inc., CN=thawte SHA256 Code Signing CA
        Validity
            Not Before: Aug 14 00:00:00 2018 GMT
            Not After : Nov  3 23:59:59 2021 GMT
        Subject: C=GB, ST=Cambridgeshire, L=Cambridge, O=Jagex Ltd, CN=Jagex Ltd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d1:20:26:2d:31:8f:b8:61:13:20:8c:75:71:
                    f1:37:7d:60:c8:74:bd:23:09:b3:ad:d6:b6:6b:5d:
                    01:96:32:a5:e8:31:a2:4a:26:b5:51:62:7f:cd:a2:
                    7c:f2:17:14:0a:32:05:79:4b:b4:07:95:99:4d:73:
                    a3:b4:bc:b1:86:94:92:7d:51:63:8c:db:9c:08:c1:
                    59:2c:9d:0d:3d:25:39:e7:86:62:ad:c1:da:9c:2c:
                    63:fa:b0:f1:68:78:9d:18:16:ac:7f:2a:c4:ba:38:
                    61:ad:c9:bd:1f:8a:75:83:28:59:a0:cb:39:28:66:
                    f1:71:dc:09:a0:2c:8d:bf:da:c8:1e:24:27:26:18:
                    33:64:ba:86:fe:b4:44:e0:91:fb:a6:36:a2:8d:4e:
                    75:f5:92:fc:89:9a:73:ee:84:52:60:83:35:2f:3c:
                    0c:65:c0:6c:3b:83:7b:d5:c1:cb:bd:9a:44:8b:d0:
                    7a:c0:4c:52:d9:6e:ff:a3:50:84:22:a5:ef:b4:41:
                    ed:c4:41:4f:e5:75:9a:58:8f:ed:a0:b5:01:31:d5:
                    d8:a0:ab:15:12:11:ec:ff:39:0d:ae:38:cc:19:75:
                    d0:01:c4:ba:28:e1:c7:83:44:be:b5:91:06:9a:cd:
                    f4:49:8f:fa:f6:6b:5e:7e:34:1c:79:be:58:c0:f8:
                    c6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Authority Key Identifier: 
                keyid:57:86:9B:54:B8:BE:A6:29:8A:E4:F6:C2:E2:13:18:89:85:CD:DC:B7

            X509v3 Subject Key Identifier: 
                ED:AA:16:B5:F9:F2:49:6A:3F:C6:51:F7:A6:47:0C:C8:9F:5C:2D:DC
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://tl.symcb.com/tl.crl

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.4.1
                  CPS: https://www.thawte.com/cps
                  User Notice:
                    Explicit Text: https://www.thawte.com/repository

            Authority Information Access: 
                OCSP - URI:http://tl.symcd.com
                CA Issuers - URI:http://tl.symcb.com/tl.crt

    Signature Algorithm: sha256WithRSAEncryption
         96:85:d9:4d:dd:d6:a5:a3:5e:33:04:95:11:87:70:ad:21:31:
         9a:91:b0:45:e8:df:d3:e3:14:84:54:d5:2d:21:a2:52:30:75:
         87:55:70:8c:9c:21:1a:cd:12:97:f0:2f:c0:6a:ba:13:b8:9d:
         5c:79:47:57:25:cd:42:20:d8:c8:00:15:f3:e6:b5:69:91:63:
         d0:94:fb:a5:d4:f7:d6:c8:46:08:20:81:2a:d0:f8:c8:13:26:
         a9:9d:62:03:1e:c6:6e:f8:7b:43:20:7b:51:a3:26:b7:7b:da:
         77:01:cf:7e:e7:b3:2c:89:72:d2:5f:d0:f7:8e:e7:8c:2d:a9:
         19:db:44:b2:d0:92:d6:a7:69:7b:5a:43:23:53:6e:d6:8b:74:
         31:a5:9d:ec:c3:ba:de:53:31:81:3c:b8:46:8d:c6:c0:06:4a:
         86:08:75:e6:f8:ba:93:22:b2:fa:8f:70:a8:d5:f4:9e:4c:68:
         b8:de:c8:8f:74:ff:89:23:a5:ca:d7:e9:9c:99:31:57:e9:99:
         2d:c7:5e:54:0e:46:09:ce:7d:20:a9:79:b3:80:d4:00:60:db:
         2c:89:04:7c:4e:66:d7:8e:5b:de:84:3c:1c:56:6c:bf:b9:15:
         bc:99:62:a3:96:a9:0c:59:12:55:2e:81:dc:fa:37:54:86:8b:
         00:a4:4f:f9
pkcs7-signedData
  • 1
    • SHA256: nil
    • 1.3.6.1.4.1.311.2.1.4
      • #0
        • 1.3.6.1.4.1.311.2.1.15
          • :
        • SHA256
          • ba 38 4f ea bf 28 90 69  04 a5 16 45 8c 47 e3 ee  |.8O..(.i...E.G..|
            a7 37 61 ed 94 be fd 21  06 60 e9 f5 9b bd 1c cb  |.7a....!.`......|
    • Certificates
      • Certificate #0
        • 2
          • 71:A0:B7:36:95:DD:B1:AF:C2:3B:2B:9A:18:EE:54:CB
          • RSA-SHA256: nil
          • Issuer
            • C: US
            • O: thawte, Inc.
            • OU: Certification Services Division
            • OU: (c) 2006 thawte, Inc. - For authorized use only
            • CN: thawte Primary Root CA
          • 2013-12-10 00:00:00 UTC: 2023-12-09 23:59:59 UTC
          • Subject
            • C: US
            • O: thawte, Inc.
            • CN: thawte SHA256 Code Signing CA
          • #5
            • rsaEncryption: nil
            • 9B:55:02:4C:17:05:E9:D0:66:C3:FC:28:AD:D3:C0:FE:
              EF:E0:E9:7E:D4:1E:F6:AA:1B:91:46:FD:F5:16:ED:98:
              07:53:FA:BA:87:1B:7D:9E:1F:01:27:AB:B9:D2:67:CA:
              B7:10:25:53:F4:E3:BE:9B:90:B8:ED:23:5C:42:EF:64:
              25:58:E5:88:22:1A:BE:F5:C7:AE:F5:BE:8A:B1:11:11:
              93:1A:22:A9:74:69:C1:74:B6:68:87:A7:83:30:F9:64:
              F1:B1:E3:38:3E:F4:D6:C1:FC:12:FE:73:57:17:35:57:
              8A:DD:50:8D:03:F8:66:CD:CA:76:83:13:C8:D7:0E:71:
              1D:E4:63:C9:BA:17:F8:D1:B9:E4:88:D2:2C:28:C8:21:
              20:0D:41:B7:0B:E2:2F:C2:80:E6:88:7B:53:6C:C3:44:
              63:81:7F:68:47:8C:2B:2A:CF:5B:F4:8C:49:61:BA:69:
              85:FD:6B:00:78:05:26:69:13:30:80:38:4E:F1:5A:55:
              C9:C5:50:D6:AA:38:89:47:43:5C:FE:4D:73:A5:49:C5:
              93:69:FE:77:96:9A:AF:F3:8C:0E:57:BA:33:D9:0E:C6:
              42:D3:03:77:C4:BB:39:AD:91:F9:F3:F7:96:5C:3A:64:
              A6:ED:27:57:C1:E8:40:F3:53:F2:BE:29:34:FE:5F:F9
              : 0x010001
          • X509v3 extensions
            • authorityInfoAccess
              • OCSP: http://t2.symcb.com
            • basicConstraints
              • true
              • true: 0
            • crlDistributionPoints: http://t1.symcb.com/ThawtePCA.crl
            • extendedKeyUsage
              • clientAuth: codeSigning
            • keyUsage: true, 6
            • subjectAltName
              • CN: SymantecPKI-1-568
            • subjectKeyIdentifier:
              57 86 9b 54 b8 be a6 29  8a e4 f6 c2 e2 13 18 89  |W..T...)........|
              85 cd dc b7                                       |....            |
            • authorityKeyIdentifier:
              7b 5b 45 cf af ce cb 7a  fd 31 92 1a 6a b6 f3 46  |{[E....z.1..j..F|
              eb 57 48 50                                       |.WHP            |
        • RSA-SHA256:
          24 3b f5 d7 a0 36 13 c7  43 fe f0 09 87 68 d1 98  |$;...6..C....h..|
          31 6e 12 e4 3f 1e 1f 96  7b 6b 4c 1e 87 9e 8b c5  |1n..?...{kL.....|
          6c a3 b1 0c 7b 50 92 d5  81 9c b1 8f 2c 29 b7 ee  |l...{P......,)..|
          f9 91 05 b9 8e 41 f1 2c  f6 d0 59 2d 98 e0 b9 ea  |.....A.,..Y-....|
          80 01 47 40 95 b8 3d 9d  03 bd 79 bb 35 b6 ad 9c  |..G@..=...y.5...|
          4c 27 f6 67 45 10 c9 c5  bc 87 4e 55 7b d2 87 bb  |L'.gE.....NU{...|
          dd dc 30 ef c6 d4 6c cc  99 35 6d 1c e0 60 d3 cd  |..0...l..5m..`..|
          68 8f 29 59 4b 89 96 08  46 c9 8e fc 75 4f c5 dc  |h.)YK...F...uO..|
          09 cc 4e 27 8b 44 cd 07  bc ac 04 e0 b5 33 a5 87  |..N'.D.......3..|
          9f f4 dd 73 0c 91 ea 12  81 6f e3 75 f0 1e b5 93  |...s.....o.u....|
          6c 44 17 d5 3e 97 c9 bd  07 2c 56 77 1f 85 dd 46  |lD..>....,Vw...F|
          e8 bf de 2c 81 94 a3 f7  e5 b7 a7 c1 37 9f 75 ca  |...,........7.u.|
          55 77 4d 5e 36 29 ca 85  d8 45 41 72 57 75 c0 79  |UwM^6)...EArWu.y|
          5b fa 34 10 06 6d 64 20  42 b7 3a c8 1f 1d 46 64  |[.4..md B.:...Fd|
          02 5f c6 47 be f0 c4 3a  28 54 da f6 1e 4f 9a a2  |._.G...:(T...O..|
          19 43 a4 6f 49 f8 fc 5e  42 20 28 84 8b 47 20 6e  |.C.oI..^B (..G n|
      • Certificate #1
        • 2
          • 1B:AE:90:F0:16:22:76:EB:82:6F:20:1D:9B:34:53
          • RSA-SHA256: nil
          • Issuer
            • C: US
            • O: thawte, Inc.
            • CN: thawte SHA256 Code Signing CA
          • 2018-08-14 00:00:00 UTC: 2021-11-03 23:59:59 UTC
          • Subject
            • C: GB
            • ST: Cambridgeshire
            • L: Cambridge
            • O: Jagex Ltd
            • CN: Jagex Ltd
          • #5
            • rsaEncryption: nil
            • 89:D1:20:26:2D:31:8F:B8:61:13:20:8C:75:71:F1:37:
              7D:60:C8:74:BD:23:09:B3:AD:D6:B6:6B:5D:01:96:32:
              A5:E8:31:A2:4A:26:B5:51:62:7F:CD:A2:7C:F2:17:14:
              0A:32:05:79:4B:B4:07:95:99:4D:73:A3:B4:BC:B1:86:
              94:92:7D:51:63:8C:DB:9C:08:C1:59:2C:9D:0D:3D:25:
              39:E7:86:62:AD:C1:DA:9C:2C:63:FA:B0:F1:68:78:9D:
              18:16:AC:7F:2A:C4:BA:38:61:AD:C9:BD:1F:8A:75:83:
              28:59:A0:CB:39:28:66:F1:71:DC:09:A0:2C:8D:BF:DA:
              C8:1E:24:27:26:18:33:64:BA:86:FE:B4:44:E0:91:FB:
              A6:36:A2:8D:4E:75:F5:92:FC:89:9A:73:EE:84:52:60:
              83:35:2F:3C:0C:65:C0:6C:3B:83:7B:D5:C1:CB:BD:9A:
              44:8B:D0:7A:C0:4C:52:D9:6E:FF:A3:50:84:22:A5:EF:
              B4:41:ED:C4:41:4F:E5:75:9A:58:8F:ED:A0:B5:01:31:
              D5:D8:A0:AB:15:12:11:EC:FF:39:0D:AE:38:CC:19:75:
              D0:01:C4:BA:28:E1:C7:83:44:BE:B5:91:06:9A:CD:F4:
              49:8F:FA:F6:6B:5E:7E:34:1C:79:BE:58:C0:F8:C6:BB
              : 0x010001
          • X509v3 extensions
            • basicConstraints
              • nil
            • authorityKeyIdentifier:
              57 86 9b 54 b8 be a6 29  8a e4 f6 c2 e2 13 18 89  |W..T...)........|
              85 cd dc b7                                       |....            |
            • subjectKeyIdentifier:
              ed aa 16 b5 f9 f2 49 6a  3f c6 51 f7 a6 47 0c c8  |......Ij?.Q..G..|
              9f 5c 2d dc                                       |.\-.            |
            • crlDistributionPoints: http://tl.symcb.com/tl.crl
            • keyUsage: true, 0x80
            • extendedKeyUsage: codeSigning
            • certificatePolicies
              • 2.23.140.1.4.1
                • #0
                  • id-qt-cps: https://www.thawte.com/cps
                  • id-qt-unotice: https://www.thawte.com/repository
            • authorityInfoAccess
              • #0
                • OCSP: http://tl.symcd.com
                • caIssuers: http://tl.symcb.com/tl.crt
        • RSA-SHA256:
          96 85 d9 4d dd d6 a5 a3  5e 33 04 95 11 87 70 ad  |...M....^3....p.|
          21 31 9a 91 b0 45 e8 df  d3 e3 14 84 54 d5 2d 21  |!1...E......T.-!|
          a2 52 30 75 87 55 70 8c  9c 21 1a cd 12 97 f0 2f  |.R0u.Up..!...../|
          c0 6a ba 13 b8 9d 5c 79  47 57 25 cd 42 20 d8 c8  |.j....\yGW%.B ..|
          00 15 f3 e6 b5 69 91 63  d0 94 fb a5 d4 f7 d6 c8  |.....i.c........|
          46 08 20 81 2a d0 f8 c8  13 26 a9 9d 62 03 1e c6  |F. .*....&..b...|
          6e f8 7b 43 20 7b 51 a3  26 b7 7b da 77 01 cf 7e  |n.{C {Q.&.{.w..~|
          e7 b3 2c 89 72 d2 5f d0  f7 8e e7 8c 2d a9 19 db  |..,.r._.....-...|
          44 b2 d0 92 d6 a7 69 7b  5a 43 23 53 6e d6 8b 74  |D.....i{ZC#Sn..t|
          31 a5 9d ec c3 ba de 53  31 81 3c b8 46 8d c6 c0  |1......S1.<.F...|
          06 4a 86 08 75 e6 f8 ba  93 22 b2 fa 8f 70 a8 d5  |.J..u...."...p..|
          f4 9e 4c 68 b8 de c8 8f  74 ff 89 23 a5 ca d7 e9  |..Lh....t..#....|
          9c 99 31 57 e9 99 2d c7  5e 54 0e 46 09 ce 7d 20  |..1W..-.^T.F..} |
          a9 79 b3 80 d4 00 60 db  2c 89 04 7c 4e 66 d7 8e  |.y....`.,..|Nf..|
          5b de 84 3c 1c 56 6c bf  b9 15 bc 99 62 a3 96 a9  |[..<.Vl.....b...|
          0c 59 12 55 2e 81 dc fa  37 54 86 8b 00 a4 4f f9  |.Y.U....7T....O.|
    • Signer
      • 1
      • unnamed
        • #0
          • C: US
          • O: thawte, Inc.
          • CN: thawte SHA256 Code Signing CA
        • 1B:AE:90:F0:16:22:76:EB:82:6F:20:1D:9B:34:53
      • SHA256: nil
      • #3
        • contentType: 1.3.6.1.4.1.311.2.1.4
        • 1.3.6.1.4.1.311.2.1.11: msCodeInd
        • messageDigest:
          40 f7 ec 9a 3b b5 58 94  69 18 eb 80 d5 0e 0f 6f  |@...;.X.i......o|
          8a 99 3a 95 c3 3c a5 4e  a0 91 22 f5 96 7b 54 0a  |..:..<.N.."..{T.|
        • 1.3.6.1.4.1.311.2.1.12
          • 00 52 00 75 00 6e 00 65  00 53 00 63 00 61 00 70  |.R.u.n.e.S.c.a.p|
            00 65                                             |.e              |
            : http://www.runescape.com
      • rsaEncryption:
        15 96 6e 30 d8 17 d1 1c  3e 91 ac 35 78 35 39 a4  |..n0....>..5x59.|
        8a a5 51 2b b0 9e 03 ce  ea 2c 4b 49 31 ee bf ee  |..Q+.....,KI1...|
        b3 2e 28 c1 cb f5 ee 99  2f f0 97 a7 fc 68 d7 f6  |..(...../....h..|
        a3 18 3f 56 dd 50 a3 dc  81 b2 34 9d 69 27 b8 8c  |..?V.P....4.i'..|
        d5 97 05 b0 ea d2 20 93  73 82 6a e6 2f d7 0b 16  |...... .s.j./...|
        20 c4 fc dc 89 ee f5 fe  f1 0d f8 39 0b 2e 49 d9  | ..........9..I.|
        bd b4 96 a5 eb 3b 19 ff  84 42 99 a4 f6 f1 3f 40  |.....;...B....?@|
        8c 6c 01 8e 2d cc 49 dd  c6 c5 ce 1b fe dc 4e 92  |.l..-.I.......N.|
        c6 0c 1a ef 8c 71 dc 2f  4d f6 4a 2b 5d a0 8f 3a  |.....q./M.J+]..:|
        26 46 13 73 01 36 7a aa  ac a6 71 0c a4 b7 40 92  |&F.s.6z...q...@.|
        8f f6 7d 1f e1 9b dd 85  6e 0a b8 f6 cf f3 c6 f3  |..}.....n.......|
        df 44 06 1f f0 53 3c b0  67 9d 22 18 5f 71 32 aa  |.D...S<.g."._q2.|
        80 a7 64 80 32 58 e2 2d  c5 7b f5 b1 9b 52 f1 10  |..d.2X.-.{...R..|
        df d9 32 bf 73 6f 19 5e  98 10 06 23 97 86 67 f3  |..2.so.^...#..g.|
        93 e4 d7 9d ed c6 45 d8  2a 6f 00 2d 7a 38 64 30  |......E.*o.-z8d0|
        38 1e 88 1d e4 6f f5 04  19 6a e1 0c fc 01 9a dc  |8....o...j......|
      • 1.3.6.1.4.1.311.3.3.1
        • pkcs7-signedData
          • 3
            • SHA256: nil
            • id-smime-ct-TSTInfo
              • 1
                • 1.3.6.1.4.1.4146.2.3
                • SHA256
                  • 59 ad 78 1b eb 88 08 6b  43 4c 73 b7 12 80 92 17  |Y.x....kCLs.....|
                    93 5b 70 90 02 8a 1e 43  05 bc 14 da 34 eb 53 f8  |.[p....C....4.S.|
                • 41:9B:F9:60:FD:E1:9E:E0:5D:3E:D3:01:72:48:33:DB:
                  C6:31:D3:62
                • 2020-06-29 16:29:55 UTC
                • CN: GlobalSign TSA for Advanced - G2
            • unnamed
              • Certificate #0
                • 2
                  • 0C:A7:CF:5D:07:07:24:AC:89:E7:9A:3A
                  • RSA-SHA256: nil
                  • Issuer
                    • C: BE
                    • O: GlobalSign nv-sa
                    • CN: GlobalSign Timestamping CA - SHA256 - G2
                  • 2018-02-19 00:00:00 UTC: 2029-03-18 10:00:00 UTC
                  • CN: GlobalSign TSA for Advanced - G2
                  • #5
                    • rsaEncryption: nil
                    • B7:C7:92:8A:28:D8:F3:91:CB:50:0D:5D:EB:29:44:C1:
                      82:59:A5:CA:64:CE:BD:83:B5:51:E5:94:CC:6E:80:9A:
                      17:6C:DC:FF:62:E6:36:43:5E:01:C2:0C:64:8D:CA:77:
                      9E:F6:5D:77:45:B9:5E:C8:24:EB:41:37:11:66:37:AC:
                      C8:CD:74:9B:CC:B3:EF:4C:E2:7F:1B:CE:73:BE:C9:96:
                      9D:35:1E:7C:F7:54:F7:6C:EC:A0:12:D6:AE:99:9D:63:
                      C4:78:5F:59:A9:2E:22:F5:C3:27:D8:B2:5B:45:63:27:
                      90:FF:8C:B1:3D:A9:B4:F3:0E:C0:F1:20:65:06:89:9D:
                      03:1C:A3:B0:52:41:85:34:EB:BC:CB:CE:54:F6:12:FE:
                      B3:01:89:4A:A6:FA:54:C5:1F:FB:D3:1C:C0:E3:BF:97:
                      E3:3F:D0:1B:F9:40:C7:1B:D5:EB:26:7C:43:30:C7:70:
                      F2:78:11:AA:85:4E:A5:0E:0D:00:4A:3A:11:77:A3:CA:
                      23:01:80:9E:C8:93:56:5D:46:CC:8A:D8:D2:AA:0A:84:
                      85:B2:89:5B:D5:32:CE:41:7B:18:4E:54:CA:AB:D1:52:
                      5E:12:D3:24:9E:56:F3:0C:8F:DD:BD:92:8E:79:D5:41:
                      89:C3:A3:A0:E5:91:FC:C7:67:9D:87:33:CE:71:32:73
                      : 0x010001
                  • #6
                    • keyUsage: true, 0x80
                    • certificatePolicies
                      • 1.3.6.1.4.1.4146.1.30
                        • id-qt-cps: https://www.globalsign.com/repository/
                    • basicConstraints
                      • nil
                    • extendedKeyUsage: true, timeStamping
                    • crlDistributionPoints: http://crl.globalsign.com/gs/gstimestampingsha2g2.crl
                    • authorityInfoAccess
                      • #0
                        • caIssuers: http://secure.globalsign.com/cacert/gstimestampingsha2g2.crt
                        • OCSP: http://ocsp2.globalsign.com/gstimestampingsha2g2
                    • subjectKeyIdentifier:
                      2d 6e 6e d1 8d e5 03 80  ee e7 63 e9 a7 d9 da 0b  |-nn.......c.....|
                      3c 57 22 3d                                       |
                    • authorityKeyIdentifier:
                      92 21 a7 4a 95 5d 64 b0  9b b4 1e e6 00 37 47 e6  |.!.J.]d......7G.|
                      9d 41 2b 4c                                       |.A+L            |
                • RSA-SHA256:
                  8d fd 1d 1f 8f 88 d3 65  f8 b5 5c 46 e9 a7 d3 b6  |.......e..\F....|
                  3f 4a cb 43 05 c2 07 0d  c3 5e 03 84 23 37 a8 7a  |?J.C.....^..#7.z|
                  8c 97 23 ff 27 9c 84 7d  61 eb 5c 4b 57 3e 9b f4  |..#.'..}a.\KW>..|
                  44 db 80 58 f7 b6 65 de  8f 12 0a 5f a7 87 74 b7  |D..X..e...._..t.|
                  da 14 40 87 51 ec 9f 4a  47 55 f0 17 e8 18 3e 71  |..@.Q..JGU....>q|
                  20 31 e6 28 22 ab 4e f6  ae 9c 6b c2 e7 44 fb 68  | 1.(".N...k..D.h|
                  0d 20 7f 53 3f 94 1b a1  86 82 4e 32 16 10 5a 3f  |. .S?.....N2..Z?|
                  89 58 c1 d0 b4 db b6 90  fb 8d 32 e9 a1 4b 46 50  |.X........2..KFP|
                  37 b6 c3 3a e9 29 24 12  92 5a 4e 2b b9 b6 0a 7a  |7..:.)$..ZN+...z|
                  36 8c 97 c0 ef 89 7c 33  de 31 e1 a1 97 e4 e7 45  |6.....|3.1.....E|
                  ad 61 52 fd 5a 89 d3 54  7e 8a 4d 5b 89 7b 0e 96  |.aR.Z..T~.M[.{..|
                  77 d1 f2 3c 38 1b da f9  a5 61 20 65 02 bc c5 ad  |w..<8....a e....|
                  d7 0c 62 10 28 2c dd b6  e3 a8 61 00 ac 08 26 a3  |..b.(,....a...&.|
                  8d 85 d0 64 c9 36 90 1e  8a 52 c9 87 8d 35 a5 5d  |...d.6...R...5.]|
                  48 91 fc 93 a6 a5 65 f1  ec f9 3a dc a5 2c 9e 04  |H.....e...:..,..|
                  6d 62 33 fe de fa 9f c5  ce af 95 f3 51 a8 f2 ce  |mb3.........Q...|
              • #1
                • 2
                  • 04:00:00:00:00:01:31:89:C6:50:04
                  • RSA-SHA256: nil
                  • #2
                    • OU: GlobalSign Root CA - R3
                    • O: GlobalSign
                    • CN: GlobalSign
                  • 2011-08-02 10:00:00 UTC: 2029-03-29 10:00:00 UTC
                  • Subject
                    • C: BE
                    • O: GlobalSign nv-sa
                    • CN: GlobalSign Timestamping CA - SHA256 - G2
                  • #5
                    • rsaEncryption: nil
                    • AA:9B:8E:C3:AB:11:51:25:01:B6:96:94:E2:4F:D8:C1:
                      08:F6:46:23:D9:45:C5:95:97:5B:AB:1A:BF:D2:6C:57:
                      C9:33:06:1F:A0:0F:C6:3C:7E:53:48:7A:BF:9D:87:9E:
                      AF:EE:C3:8C:47:E1:42:EC:E3:E3:A1:4A:6C:0C:17:C4:
                      A6:C1:B9:CD:5B:F1:1E:44:89:8E:FE:0B:DE:21:58:13:
                      EE:4D:C8:C5:67:0B:1C:B2:B3:F1:34:76:91:A2:CB:07:
                      6D:37:C5:A0:47:26:02:15:A4:90:91:A9:79:9E:D7:EB:
                      57:9D:2B:7C:22:D8:14:D7:F1:07:1E:78:22:36:6B:77:
                      79:AF:AF:F9:7F:8E:4E:E1:B5:08:31:FD:EA:ED:4B:71:
                      62:8C:23:F1:03:39:8F:44:79:B6:76:03:57:9E:AD:2F:
                      08:46:DC:D2:8C:BC:F4:8E:74:CE:C8:68:69:51:76:11:
                      8B:0F:5D:24:5B:19:54:3D:26:CC:40:8D:82:27:1B:59:
                      20:7D:59:F6:93:80:8E:F8:2A:38:FD:6B:A0:40:65:1F:
                      57:76:CC:5B:8E:04:4F:2C:A8:DB:84:50:13:4F:C6:DC:
                      8B:B9:F8:DD:69:4C:88:EB:9C:7B:30:26:FC:7A:58:BB:
                      59:BC:14:72:92:81:57:B7:76:C9:D8:80:0A:80:6E:09
                      : 0x010001
                  • #6
                    • keyUsage: true, 6
                    • basicConstraints
                      • true
                      • true: 0
                    • subjectKeyIdentifier:
                      92 21 a7 4a 95 5d 64 b0  9b b4 1e e6 00 37 47 e6  |.!.J.]d......7G.|
                      9d 41 2b 4c                                       |.A+L            |
                    • certificatePolicies
                      • anyPolicy
                        • id-qt-cps: https://www.globalsign.com/repository/
                    • crlDistributionPoints: http://crl.globalsign.net/root-r3.crl
                    • authorityKeyIdentifier:
                      8f f0 4b 7f a8 2e 45 24  ae 4d 50 fa 63 9a 8b de  |..K...E$.MP.c...|
                      e2 dd 1b bc                                       |....            |
                • RSA-SHA256:
                  04 56 82 4a 7c d0 ce c9  bf 36 66 d1 be 35 9e 93  |.V.J|....6f..5..|
                  6c 97 e8 06 ce 31 18 59  f9 6c 41 5f 80 2e c0 42  |l....1.Y.lA_...B|
                  25 b8 18 c7 fc d4 b1 37  c4 68 a0 cf 28 6a 03 74  |%......7.h..(j.t|
                  4b 63 97 85 77 61 3b d7  2f e3 f5 bd 33 a2 92 7d  |Kc..wa;./...3..}|
                  11 1f 9e 8a 6c ef 2c b0  f4 62 8d 36 73 d1 16 36  |....l.,..b.6s..6|
                  f1 bc 5e ec b4 80 98 78  fc d2 76 79 e8 e1 21 94  |..^....x..vy..!.|
                  e0 1f c4 a2 e1 aa 67 db  b3 9c 73 e5 40 22 cf 39  |......g...s.@".9|
                  ce db e6 77 95 a7 bb b2  cb f6 19 86 9d 9f c8 d4  |...w............|
                  98 05 b2 71 6f 4e 75 ae  f1 3d 64 6a 3b 5e 4e 46  |...qoNu..=dj;^NF|
                  a6 2a 5d 08 92 f1 a3 f3  1d 74 bf 62 0d 23 8c 5c  |.*]......t.b.#.\|
                  2a 38 95 d2 c0 d5 cd cf  88 da 1f 28 b5 ba 81 69  |*8.........(...i|
                  64 2a b5 a6 a2 d5 73 af  dc 46 db 04 ae 91 d7 6e  |d*....s..F.....n|
                  c5 98 ba d4 47 c4 56 74  80 47 78 58 8c be ef 2b  |....G.Vt.GxX...+|
                  fd ec 6c bf d1 94 f7 bf  50 e0 7b e0 90 fd 20 18  |..l.....P.{... .|
                  78 18 22 5d 08 2e 8c 1c  a0 97 f3 1d 99 7d a3 9d  |x."].........}..|
                  91 d3 06 44 4e 04 6e 7a  1c 20 e3 36 f0 b6 50 b9  |...DN.nz. .6..P.|
            • 1
              • unnamed
                • #0
                  • C: BE
                  • O: GlobalSign nv-sa
                  • CN: GlobalSign Timestamping CA - SHA256 - G2
                • 0C:A7:CF:5D:07:07:24:AC:89:E7:9A:3A
              • SHA256: nil
              • #2
                • contentType: id-smime-ct-TSTInfo
                • signingTime: 2020-06-29 16:29:55 UTC
                • messageDigest:
                  47 17 83 4f 87 eb 5e 62  bc 64 3d f7 9a b9 e1 32  |G..O..^b.d=....2|
                  c7 88 ac 36 40 91 da c8  28 22 f9 6d 13 de 4b e9  |...6@...(".m..K.|
                • id-smime-aa-signingCertificate
                  • 05 7a e7 2a af f6 d6 37  72 b4 9f 6a 23 6f 26 49  |.z.*...7r..j#o&I|
                    cd a9                                             |..              |
                    • unnamed
                      • #0
                        • C: BE
                        • O: GlobalSign nv-sa
                        • CN: GlobalSign Timestamping CA - SHA256 - G2
                      • 0C:A7:CF:5D:07:07:24:AC:89:E7:9A:3A
              • rsaEncryption:
                69 a7 9d 59 f5 c2 5a 6f  4d 1a ad 76 9a 2c fc ad  |i..Y..ZoM..v.,..|
                74 26 97 e9 35 ce e5 b3  04 dd cd a1 5a f1 58 47  |t&..5.......Z.XG|
                80 f0 bb 52 9e 04 ef f0  0d 53 fa 9d a8 3d 5a 64  |...R.....S...=Zd|
                7d ed 18 08 1d 8d 11 bf  9f ae db e6 2c 00 59 bf  |}...........,.Y.|
                13 f4 d3 eb 48 47 ab f7  4c 00 85 0e 49 08 14 49  |....HG..L...I..I|
                87 75 3f bf fc c3 38 a9  e6 c8 7d fa b8 ce ba ba  |.u?...8...}.....|
                a5 91 24 89 12 8e 8d b7  7b a7 92 ad 00 a6 5f 80  |..$.....{....._.|
                0e c9 9c 88 ff 4a 30 c0  85 48 23 a2 87 34 a0 7c  |.....J0..H#..4.||
                9e f2 ce 98 f9 d2 d1 79  78 d8 13 39 9e ba 69 3c  |.......yx..9..i<|
                b2 ce 23 40 ff 5b e4 89  b3 6c 9f ee a1 a0 15 46  |..#@.[...l.....F|
                8f de 83 09 fa 0a 8b 27  5b 53 ad 72 0a 64 8f e5  |.......'[S.r.d..|
                dc 7c 46 b0 71 e6 fa 12  e9 8d d7 64 e1 5a e6 b1  |.|F.q......d.Z..|
                6c 2f 0f 49 f2 96 ab b0  c2 f0 4d 0c bc 3b 2c f4  |l/.I......M..;,.|
                fb 1b 76 de 5a ba 10 20  ba f7 76 84 09 31 20 4c  |..v.Z.. ..v..1 L|
                7f 33 7d 85 67 87 29 ed  78 79 a6 57 55 d3 78 66  |.3}.g.).xy.WU.xf|
                55 b7 79 21 6e d2 9d 1c  d6 55 6c a6 24 61 c9 4a  |U.y!n....Ul.$a.J|
offsetsizetypecomment
15c115HTM#
6a103036447PNG(256 x 256)#
6a9e8f40449BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

[?] ignoring invalid PEdump::BITMAPINFOHEADER

[?] can't find file_offset of VA 0x64e388