UnRAR.exe - Command line RAR

info
MZ
PE
resources
strings
imports
foremost
version info
signature
hexdump
disasm
log
discuss
donate

filename	UnRAR.exe
size	384216 (0x5dcd8)
md5	2daab35e5b537ca4cb0c33571d9d0c5a

type	PE32 executable (console) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x100

Rich Header

lib id	version	times used
241	40116	11
243	40116	131
242	40116	24
199	41118	2
259	24123	22
261	24123	43
260	24123	20
147	30729	11
1	0	164
261	24215	53
255	24210	1
258	24215	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	7
TimeDateStamp	0x5de8b38e
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x102
Magic	0x10b
LinkerVersion	14.0
SizeOfCode	0x42a00
SizeOfInitializedData	0x2da00
SizeOfUninitializedData	0
AddressOfEntryPoint	0x30070
BaseOfCode	0x1000
BaseOfData	0x44000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	5.1
ImageVersion	0.0
SubsystemVersion	5.1
Reserved1	0
SizeOfImage	0x75000
SizeOfHeaders	0x400
CheckSum	0x6725c
Subsystem	3
DllCharacteristics	0x8140
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x429bf	0x42a00	R-X CODE
.rdata	0x44000	0xae7e	0xb000	R-- IDATA
.data	0x4f000	0x18248	0x2400	RW- IDATA
.gfids	0x68000	0xf0	0x200	R-- IDATA
.tls	0x69000	9	0x200	RW- IDATA
.rsrc	0x6a000	0x78e8	0x7a00	R-- IDATA
.reloc	0x72000	0x274c	0x2800	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x4e0a4	0x78
RESOURCE	0x6a000	0x78e8
EXCEPTION	0	0
SECURITY	0x5a800	0x34d8
BASERELOC	0x72000	0x274c
DEBUG	0x4c290	0x54
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0x4c344	0x18
LOAD_CONFIG	0x4c2e8	0x40
Bound_IAT	0	0
IAT	0x44000	0x258
Delay_IAT	0	0
CLR_Header	0	0

TLS

raw start	raw end	index	callbks	zero fill	flags
0x469000	0x469008	0x466b50	0x4442ac	0	0x300000

show previews

type	name	size
STRING	#188	112
STRING	#189	610
STRING	#190	82
STRING	#191	214
STRING	#192	706
STRING	#193	706
STRING	#194	742
STRING	#195	768
STRING	#196	736
STRING	#197	762
STRING	#198	770
STRING	#199	700
STRING	#200	838
STRING	#201	906
STRING	#202	684
STRING	#203	780
STRING	#204	848
STRING	#205	992
STRING	#206	764
STRING	#207	534
STRING	#208	384
STRING	#209	368
STRING	#210	422
STRING	#211	468
STRING	#212	336
STRING	#213	284
STRING	#214	390
STRING	#215	454
STRING	#216	528
STRING	#217	486
STRING	#218	410
STRING	#219	224
STRING	#220	346
STRING	#221	276
STRING	#222	132
STRING	#223	338
STRING	#224	238
STRING	#225	504
STRING	#226	520
STRING	#227	614
STRING	#228	636
STRING	#229	594
STRING	#230	400
STRING	#231	746
STRING	#232	588
STRING	#233	662
STRING	#234	498
STRING	#235	586
STRING	#236	262
VERSION	#1	696
MANIFEST	#1	1610

id	lang	string
3002	1033	_Yes_No
3004	1033	_Yes_No_All
3006	1033	_Yes_No_All_nEver_Quit
3008	1033	_Yes_No_All_nEver_Rename_Quit
3010	1033	_Continue_Quit
3012	1033	_Retry_Abort
3014	1033	RAR %s Copyright (c) 1993-%d Alexander Roshal %d %s %d
3016	1033	Registered to %s
3018	1033	Trial version Type 'rar -?' for help
3020	1033	Available license key is valid only for %s
3022	1033	UNRAR %s freeware Copyright (c) 1993-%d Alexander Roshal
3024	1033	beta
3026	1033	x86
3028	1033	x64
3030	1033	Jan
3032	1033	Feb
3034	1033	Mar
3036	1033	Apr
3038	1033	May
3040	1033	Jun
3042	1033	Jul
3044	1033	Aug
3046	1033	Sep
3048	1033	Oct
3050	1033	Nov
3052	1033	Dec
3054	1033	Usage: rar <command> -<switch 1> -<switch N> <archive> <files...>
3056	1033	Usage: unrar <command> -<switch 1> -<switch N> <archive> <files...>
3058	1033	<@listfiles...> <path_to_extract\>
3060	1033	<Commands>
3062	1033	a Add files to archive
3064	1033	c Add archive comment
3066	1033	ch Change archive parameters
3068	1033	cw Write archive comment to file
3070	1033	d Delete files from archive
3072	1033	e Extract files without archived paths
3074	1033	f Freshen files in archive
3076	1033	i[par]=<str> Find string in archives
3078	1033	k Lock archive
3080	1033	l[t[a],b] List archive contents [technical[all], bare]
3082	1033	m[f] Move to archive [files only]
3084	1033	p Print file to stdout
3086	1033	r Repair archive
3088	1033	rc Reconstruct missing volumes
3090	1033	rn Rename archived files
3092	1033	rr[N] Add data recovery record
3094	1033	rv[N] Create recovery volumes
3096	1033	s[name\|-] Convert archive to or from SFX
3098	1033	t Test archive files
3100	1033	u Update files in archive
3102	1033	v[t[a],b] Verbosely list archive contents [technical[all],bare]
3104	1033	x Extract files with full path
3106	1033	<Switches>
3108	1033	- Stop switches scanning
3110	1033	@[+] Disable [enable] file lists
3112	1033	ac Clear Archive attribute after compression or extraction
3114	1033	ad Append archive name to destination path
3116	1033	ag[format] Generate archive name using the current date
3118	1033	ai Ignore file attributes
3120	1033	ao Add files with Archive attribute set
3122	1033	ap<path> Set path inside archive
3124	1033	as Synchronize archive contents
3126	1033	c- Disable comments show
3128	1033	cfg- Disable read configuration
3130	1033	cl Convert names to lower case
3132	1033	cu Convert names to upper case
3134	1033	df Delete files after archiving
3136	1033	dh Open shared files
3138	1033	dr Delete files to Recycle Bin
3140	1033	ds Disable name sort for solid archive
3142	1033	dw Wipe files after archiving
3144	1033	e[+]<attr> Set file exclude and include attributes
3146	1033	ed Do not add empty directories
3148	1033	en Do not put 'end of archive' block
3150	1033	ep Exclude paths from names
3152	1033	ep1 Exclude base directory from names
3154	1033	ep2 Expand paths to full
3156	1033	ep3 Expand paths to full including the drive letter
3158	1033	f Freshen files
3160	1033	hp[password] Encrypt both file data and headers
3162	1033	ht[b\|c] Select hash type [BLAKE2,CRC32] for file checksum
3164	1033	id[c,d,p,q] Disable messages
3166	1033	ieml[addr] Send archive by email
3168	1033	ierr Send all messages to stderr
3170	1033	ilog[name] Log errors to file
3172	1033	inul Disable all messages
3174	1033	ioff[n] Turn PC off after completing an operation
3176	1033	isnd[-] Control notification sounds
3178	1033	iver Display the version number
3180	1033	k Lock archive
3182	1033	kb Keep broken extracted files
3184	1033	log[f][=name] Write names to log file
3186	1033	m<0..5> Set compression level (0-store...3-default...5-maximal)
3188	1033	ma[4\|5] Specify a version of archiving format
3190	1033	mc<par> Set advanced compression parameters
3192	1033	md<n>[k,m,g] Dictionary size in KB, MB or GB
3194	1033	ms[ext;ext] Specify file types to store
3196	1033	mt<threads> Set the number of threads
3198	1033	n<file> Additionally filter included files
3200	1033	n@ Read additional filter masks from stdin
3202	1033	n@<list> Read additional filter masks from list file
3204	1033	o[+\|-] Set the overwrite mode
3206	1033	oc Set NTFS Compressed attribute
3208	1033	oh Save hard links as the link instead of the file
3210	1033	oi[0-4][:min] Save identical files as references
3212	1033	ol[a] Process symbolic links as the link [absolute paths]
3214	1033	oni Allow potentially incompatible names
3216	1033	or Rename files automatically
3218	1033	os Save NTFS streams
3220	1033	ow Save or restore file owner and group
3222	1033	p[password] Set password
3224	1033	p- Do not query password
3226	1033	qo[-\|+] Add quick open information [none\|force]
3228	1033	r Recurse subdirectories
3230	1033	r- Disable recursion
3232	1033	r0 Recurse subdirectories for wildcard names only
3234	1033	ri<P>[:<S>] Set priority (0-default,1-min..15-max) and sleep time in ms
3236	1033	rr[N] Add data recovery record
3238	1033	rv[N] Create recovery volumes
3240	1033	s[<N>,v[-],e] Create solid archive
3242	1033	s- Disable solid archiving
3244	1033	sc<chr>[obj] Specify the character set
3246	1033	sfx[name] Create SFX archive
3248	1033	si[name] Read data from standard input (stdin)
3250	1033	sl<size> Process files with size less than specified
3252	1033	sm<size> Process files with size more than specified
3254	1033	t Test files after archiving
3256	1033	tk Keep original archive time
3258	1033	tl Set archive time to latest file
3260	1033	tn[mcao]<t> Process files newer than <t> time
3262	1033	to[mcao]<t> Process files older than <t> time
3264	1033	ta[mcao]<d> Process files modified after <d> YYYYMMDDHHMMSS date
3266	1033	tb[mcao]<d> Process files modified before <d> YYYYMMDDHHMMSS date
3268	1033	ts[m,c,a,p] Save or restore time (modification, creation, access, preserve)
3270	1033	u Update files
3272	1033	v Create volumes with size autodetection or list all volumes
3274	1033	v List all volumes
3276	1033	v<size>[k,b] Create volumes with size=<size>1000 [1024, *1]
3278	1033	vd Erase disk contents before creating volume
3280	1033	ver[n] File version control
3282	1033	vn Use the old style volume naming scheme
3284	1033	vp Pause before each volume
3286	1033	w<path> Assign work directory
3288	1033	x<file> Exclude specified file
3290	1033	x@ Read file names to exclude from stdin
3292	1033	x@<list> Exclude files listed in specified list file
3294	1033	y Assume Yes on all queries
3296	1033	z[file] Read archive comment from file
3298	1033	ERROR: Bad archive %s
3300	1033	Enter password (will not be echoed)
3302	1033	Enter password (will not be echoed) for %s:
3304	1033	Reenter password:
3306	1033	ERROR: Passwords do not match
3308	1033	Write error in the file %s
3310	1033	Read error in the file %s
3312	1033	Seek error in the file %s
3314	1033	Cannot close the file %s
3316	1033	Not enough memory
3318	1033	Corrupt archive - use 'Repair' command
3320	1033	Program aborted
3322	1033	Cannot rename %s to %s
3324	1033	Cannot find volume %s
3326	1033	User break
3328	1033	Create next volume ?
3330	1033	Disk full. Insert next
3332	1033	Creating %sarchive %s
3334	1033	Insert disk with %s
3336	1033	Testing archive %s
3338	1033	Extracting from %s
3340	1033	Converting %s
3342	1033	Convert archives to SFX
3344	1033	Removing SFX module
3346	1033	%s is not SFX archive
3348	1033	%s is not RAR archive
3350	1033	%s is not the first volume
3352	1033	%s - cannot convert to SFX archive with old format
3354	1033	Cannot create %s
3356	1033	Cannot open %s
3358	1033	Unknown method in %s
3360	1033	Unsupported archive format. Please update RAR to a newer version.
3362	1033	OK
3364	1033	Done
3366	1033	Locking archive
3368	1033	ERROR: Cannot modify old format archive
3370	1033	ERROR: Locked archive
3372	1033	ERROR: Cannot modify volume
3374	1033	Evaluation copy. Please register.
3376	1033	Creating %sarchive %s
3378	1033	Updating %sarchive %s
3380	1033	solid
3382	1033	Adding %-58s
3384	1033	Updating %-58s
3386	1033	... %-58s
3388	1033	Deleting files %s...
3390	1033	and directories
3392	1033	Deleting %-30s
3394	1033	deleted
3396	1033	NOT DELETED
3398	1033	Clearing attributes...
3400	1033	Deleting directory %-30s
3402	1033	WARNING: Cannot open %d %s
3404	1033	files
3406	1033	file
3408	1033	WARNING: No files
3410	1033	%s: encrypted
3412	1033	Analyzing archived files:
3414	1033	Repacking archived files:
3416	1033	%-20s - checksum error
3418	1033	Testing archive %s
3420	1033	Extracting from %s
3422	1033	%s - use current password ?
3424	1033	Creating %-56s
3426	1033	Skipping %-56s
3428	1033	Testing %-56s
3430	1033	Extracting %-56s
3432	1033	... %-56s
3434	1033	Cannot create directory %s
3436	1033	------ Printing %s
3438	1033	Checksum error in the encrypted file %s. Corrupt file or wrong password.
3440	1033	No files to extract
3442	1033	All OK
3444	1033	Total errors: %ld
3446	1033	Would you like to replace the existing file %s %6s bytes, modified on %s with a new one %6s bytes, modified on %s
3448	1033	Overwrite %s ?
3450	1033	Enter new name:
3452	1033	Corrupt header is found
3454	1033	Main archive header is corrupt
3456	1033	%s - the file header is corrupt
3458	1033	The data recovery header is corrupt
3460	1033	Reading comment from stdin
3462	1033	Reading comment from %s
3464	1033	Deleting comment from %s
3466	1033	Adding comment to %s
3468	1033	Adding file comments
3470	1033	Reading comment for %s : %s from stdin
3472	1033	The archive comment is corrupt
3474	1033	Press 'Enter' to continue or 'Q' to quit:
3476	1033	Write comment to %s
3478	1033	Comment is not present
3480	1033	Deleting from %s
3482	1033	Deleting %s
3484	1033	Erasing empty archive %s
3486	1033	No files to delete
3488	1033	-------- %2d %s %d, archive %s
3490	1033	ERROR: Path too long
3492	1033	Archive
3494	1033	Details
3496	1033	solid
3498	1033	SFX
3500	1033	volume
3502	1033	recovery record
3504	1033	lock
3506	1033	encrypted
3508	1033	encrypted headers
3510	1033	Attributes Size Date Time Name
3512	1033	Attributes Size Packed Ratio Date Time Checksum Name
3514	1033	Name
3516	1033	Type
3518	1033	File
3520	1033	Directory
3522	1033	Unix symbolic link
3524	1033	Windows symbolic link
3526	1033	NTFS junction point
3528	1033	Hard link
3530	1033	File reference
3532	1033	NTFS alternate data stream
3534	1033	Target
3536	1033	Size
3538	1033	Packed size
3540	1033	Ratio
3542	1033	mtime
3544	1033	ctime
3546	1033	atime
3548	1033	Attributes
3550	1033	Flags
3552	1033	Compression
3554	1033	Host OS
3556	1033	File version
3558	1033	Service
3560	1033	Unix Owner/Group data: %-14s %-14s
3562	1033	NTFS security data
3564	1033	NTFS stream: %s
3566	1033	Unknown subheader type: 0x%04x
3568	1033	Comment:
3570	1033	Yes
3572	1033	No
3574	1033	0 files
3576	1033	Reconstructing %s
3578	1033	Building %s
3580	1033	Cannot repair archive with old format
3582	1033	Found %s
3584	1033	The archive header is corrupt. Mark archive as solid ?
3586	1033	No files found
3588	1033	Unexpected end of archive
3590	1033	Reconstruct archive structure ?
3592	1033	Searching for recovery record
3594	1033	Analyzing file data
3596	1033	Data recovery record not found
3598	1033	Data recovery record found
3600	1033	Sector %ld (offsets %lX...%lX) damaged
3602	1033	- data recovered
3604	1033	- cannot recover data
3606	1033	Adding data recovery record
3608	1033	Erasing contents of drive %c:
3610	1033	WARNING: Cannot get %s owner and group
3612	1033	WARNING: Cannot get owner %s ID
3614	1033	WARNING: Cannot get group %s ID
3616	1033	ERROR: %s group and owner data are corrupt
3618	1033	WARNING: Cannot set %s owner and group
3620	1033	WARNING: Cannot read symbolic link %s
3622	1033	WARNING: Symbolic link %s already exists
3624	1033	Cannot create %s. Retry ?
3626	1033	%-20s : packed data checksum error in volume %s
3628	1033	%s is read-only
3630	1033	WARNING: Cannot get %s security data
3632	1033	WARNING: Cannot set %s security data
3634	1033	ERROR: %s security data are corrupt
3636	1033	WARNING: Unknown format of %s security data
3638	1033	ERROR: %s stream data are corrupt
3640	1033	WARNING: Unknown format of %s stream data
3642	1033	ERROR: Invalid file name %s
3644	1033	Processing archive %s
3646	1033	WARNING: Attempting to correct the invalid file name
3648	1033	WARNING: You need to start extraction from a previous volume to unpack %s
3650	1033	ERROR: Unknown option: %s
3652	1033	ERROR: Corrupt data header found, ignored
3654	1033	WARNING: Unknown data header format, ignored
3656	1033	ERROR: Corrupt %s data block
3658	1033	Data header type: %s
3660	1033	Cannot read contents of %s
3662	1033	%s is not volume
3664	1033	ERROR: %s and %s belong to different sets
3666	1033	%d volumes missing
3668	1033	%d recovery volumes found
3670	1033	Nothing to reconstruct
3672	1033	Reconstruction impossible
3674	1033	Reconstructing...
3676	1033	Creating %s
3678	1033	Renaming %s to %s
3680	1033	Write error: only NTFS file system supports files larger than 4 GB
3682	1033	WARNING: FAT32 file system does not support 4 GB or larger files
3684	1033	WARNING: Cannot change attributes of %s
3686	1033	ERROR: default SFX module does not support RAR %d.%d archives
3688	1033	Cannot change the header encryption mode in already encrypted archive
3690	1033	Cannot email the file %s
3692	1033	RAR SFX archive
3694	1033	<Commands>
3696	1033	-x Extract from archive (default)
3698	1033	-t Test archive files
3700	1033	-v Verbosely list contents of archive
3702	1033	Total number of usual and recovery volumes must not exceed %d
3704	1033	volume %d
3706	1033	Cannot delete %s
3708	1033	Cannot move some files and folders to Recycle Bin
3710	1033	Calculating the checksum
3712	1033	Too large SFX archive. Windows cannot run the executable file exceeding 4 GB.
3714	1033	Calculating checksums of all volumes.
3716	1033	ERROR: Not enough disk space for %s.
3718	1033	You may need a newer version of RAR.
3720	1033	Unknown encryption method in %s
3722	1033	The specified password is incorrect.
3724	1033	Incorrect password for %s
3726	1033	Corrupt %d bytes at %08x %08x
3728	1033	%u blocks are recovered, %u blocks are relocated
3730	1033	Recovery record is corrupt.
3732	1033	Testing the recovery record
3734	1033	Failed
3736	1033	%s switch is not supported for RAR %d.x archive format.
3738	1033	Searching for identical files
3740	1033	%d found.
3742	1033	Unknown extra field in %s.
3744	1033	Corrupt %s extra field in %s.
3746	1033	Cannot copy %s to %s.
3748	1033	You need to unpack the entire archive to create file reference entries.
3750	1033	Copying data
3752	1033	Cannot create symbolic link %s
3754	1033	Cannot create hard link %s
3756	1033	You need to unpack the link target first
3758	1033	You may need to run RAR as administrator
3760	1033	Not enough memory for %d MB compression dictionary, changed to %d MB.
3762	1033	Please use a smaller compression dictionary.

module_name	hint	function_name
KERNEL32.dll	221	DeviceIoControl
KERNEL32.dll	1130	SetFileTime
KERNEL32.dll	82	CloseHandle
KERNEL32.dll	129	CreateDirectoryW
KERNEL32.dll	1027	RemoveDirectoryW
KERNEL32.dll	143	CreateFileW
KERNEL32.dll	214	DeleteFileW
KERNEL32.dll	147	CreateHardLinkW
KERNEL32.dll	609	GetShortPathNameW
KERNEL32.dll	527	GetLongPathNameW
KERNEL32.dll	867	MoveFileW
KERNEL32.dll	960	ReadFile
KERNEL32.dll	343	FlushFileBuffers
KERNEL32.dll	1107	SetEndOfFile
KERNEL32.dll	1126	SetFilePointer
KERNEL32.dll	467	GetDriveTypeW
KERNEL32.dll	462	GetDiskFreeSpaceExW
KERNEL32.dll	1121	SetFileAttributesW
KERNEL32.dll	490	GetFileAttributesW
KERNEL32.dll	679	GetVolumeInformationW
KERNEL32.dll	285	ExpandEnvironmentStringsW
KERNEL32.dll	302	FindClose
KERNEL32.dll	313	FindFirstFileW
KERNEL32.dll	325	FindNextFileW
KERNEL32.dll	676	GetVersionExW
KERNEL32.dll	532	GetModuleFileNameW
KERNEL32.dll	447	GetCurrentDirectoryW
KERNEL32.dll	507	GetFullPathNameW
KERNEL32.dll	348	FoldStringW
KERNEL32.dll	1112	SetErrorMode
KERNEL32.dll	536	GetModuleHandleW
KERNEL32.dll	354	FreeLibrary
KERNEL32.dll	831	LoadLibraryW
KERNEL32.dll	830	LoadLibraryExW
KERNEL32.dll	581	GetProcAddress
KERNEL32.dll	449	GetCurrentProcessId
KERNEL32.dll	452	GetCurrentThread
KERNEL32.dll	448	GetCurrentProcess
KERNEL32.dll	1171	SetThreadExecutionState
KERNEL32.dll	133	CreateEventW
KERNEL32.dll	624	GetSystemDirectoryW
KERNEL32.dll	1149	SetPriorityClass
KERNEL32.dll	582	GetProcessAffinityMask
KERNEL32.dll	181	CreateThread
KERNEL32.dll	738	InitializeCriticalSection
KERNEL32.dll	238	EnterCriticalSection
KERNEL32.dll	825	LeaveCriticalSection
KERNEL32.dll	209	DeleteCriticalSection
KERNEL32.dll	1113	SetEvent
KERNEL32.dll	1039	ResetEvent
KERNEL32.dll	1022	ReleaseSemaphore
KERNEL32.dll	1273	WaitForSingleObject
KERNEL32.dll	174	CreateSemaphoreW
KERNEL32.dll	631	GetSystemTime
KERNEL32.dll	1214	SystemTimeToTzSpecificLocalTime
KERNEL32.dll	1232	TzSpecificLocalTimeToSystemTime
KERNEL32.dll	1213	SystemTimeToFileTime
KERNEL32.dll	292	FileTimeToLocalFileTime
KERNEL32.dll	838	LocalFileTimeToFileTime
KERNEL32.dll	293	FileTimeToSystemTime
KERNEL32.dll	370	GetCPInfo
KERNEL32.dll	766	IsDBCSLeadByte
KERNEL32.dll	871	MultiByteToWideChar
KERNEL32.dll	1297	WideCharToMultiByte
KERNEL32.dll	100	CompareStringW
KERNEL32.dll	724	HeapSize
KERNEL32.dll	1127	SetFilePointerEx
KERNEL32.dll	202	DecodePointer
KERNEL32.dll	586	GetProcessHeap
KERNEL32.dll	1110	SetEnvironmentVariableA
KERNEL32.dll	353	FreeEnvironmentStringsW
KERNEL32.dll	474	GetEnvironmentStringsW
KERNEL32.dll	567	GetOEMCP
KERNEL32.dll	778	IsValidCodePage
KERNEL32.dll	1069	SetConsoleCtrlHandler
KERNEL32.dll	350	FormatMessageW
KERNEL32.dll	1202	Sleep
KERNEL32.dll	1139	SetLastError
KERNEL32.dll	514	GetLastError
KERNEL32.dll	1316	WriteConsoleW
KERNEL32.dll	958	ReadConsoleW
KERNEL32.dll	1085	SetConsoleMode
KERNEL32.dll	428	GetConsoleMode
KERNEL32.dll	1317	WriteFile
KERNEL32.dll	612	GetStdHandle
KERNEL32.dll	499	GetFileType
KERNEL32.dll	1177	SetThreadPriority
KERNEL32.dll	391	GetCommandLineW
KERNEL32.dll	323	FindNextFileA
KERNEL32.dll	307	FindFirstFileExA
KERNEL32.dll	1159	SetStdHandle
KERNEL32.dll	410	GetConsoleCP
KERNEL32.dll	1235	UnhandledExceptionFilter
KERNEL32.dll	1189	SetUnhandledExceptionFilter
KERNEL32.dll	1216	TerminateProcess
KERNEL32.dll	772	IsProcessorFeaturePresent
KERNEL32.dll	1274	WaitForSingleObjectEx
KERNEL32.dll	768	IsDebuggerPresent
KERNEL32.dll	611	GetStartupInfoW
KERNEL32.dll	935	QueryPerformanceCounter
KERNEL32.dll	453	GetCurrentThreadId
KERNEL32.dll	633	GetSystemTimeAsFileTime
KERNEL32.dll	743	InitializeSListHead
KERNEL32.dll	234	EncodePointer
KERNEL32.dll	1048	RtlUnwind
KERNEL32.dll	945	RaiseException
KERNEL32.dll	739	InitializeCriticalSectionAndSpinCount
KERNEL32.dll	1221	TlsAlloc
KERNEL32.dll	1223	TlsGetValue
KERNEL32.dll	1224	TlsSetValue
KERNEL32.dll	1222	TlsFree
KERNEL32.dll	281	ExitProcess
KERNEL32.dll	535	GetModuleHandleExW
KERNEL32.dll	936	QueryPerformanceFrequency
KERNEL32.dll	531	GetModuleFileNameA
KERNEL32.dll	390	GetCommandLineA
KERNEL32.dll	360	GetACP
KERNEL32.dll	719	HeapFree
KERNEL32.dll	715	HeapAlloc
KERNEL32.dll	722	HeapReAlloc
KERNEL32.dll	617	GetStringTypeW
KERNEL32.dll	813	LCMapStringW
USER32.dll	46	CharLowerW
USER32.dll	60	CharUpperW
USER32.dll	525	MessageBeep
USER32.dll	245	ExitWindowsEx
USER32.dll	506	LoadStringW
USER32.dll	55	CharToOemBuffW
USER32.dll	546	OemToCharBuffA
USER32.dll	545	OemToCharA
USER32.dll	53	CharToOemA
ADVAPI32.dll	288	FreeSid
ADVAPI32.dll	32	AllocateAndInitializeSid
ADVAPI32.dll	622	RegQueryValueExW
ADVAPI32.dll	609	RegOpenKeyExW
ADVAPI32.dll	560	RegCloseKey
ADVAPI32.dll	407	LookupPrivilegeValueW
ADVAPI32.dll	682	SetFileSecurityW
ADVAPI32.dll	31	AdjustTokenPrivileges
ADVAPI32.dll	503	OpenProcessToken
ADVAPI32.dll	81	CheckTokenMembership
SHELL32.dll	223	SHGetSpecialFolderLocation
SHELL32.dll	215	SHGetPathFromIDListW
SHELL32.dll	207	SHGetMalloc
POWRPROF.dll	87	SetSuspendState

StringTable 040904E4

ProductName	WinRAR
CompanyName	Alexander Roshal
FileDescription	Command line RAR
FileVersion	5.80.0
ProductVersion	5.80.0
InternalName	Command line RAR
LegalCopyright	Copyright © Alexander Roshal 1993-2019

VS_FIXEDFILEINFO

FileVersion	5.80.0.0
ProductVersion	5.80.0.0
StrucVersion	0x10000
FileFlagsMask	0
FileFlags	0
FileOS	4
FileType	1
FileSubtype	0

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO RSA Code Signing CA

serial: 529E3F9FCF7D58D520D607AB74395002

Certificates (4)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
        Validity
            Not Before: Dec 21 00:00:00 2012 GMT
            Not After : Dec 30 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:b3:49:54:4b:97:1c:12:0a:d8:25:79:91:
                    22:57:2a:6f:dc:b8:26:c4:43:73:6b:c2:bf:2e:50:
                    5a:fb:14:c2:76:8e:43:01:25:43:b4:a1:e2:45:f4:
                    e8:b7:7b:c3:74:cc:22:d7:b4:94:00:02:f7:4d:ed:
                    bf:b4:b7:44:24:6b:cd:5f:45:3b:d1:44:ce:43:12:
                    73:17:82:8b:69:b4:2b:cb:99:1e:ac:72:1b:26:4d:
                    71:1f:b1:31:dd:fb:51:61:02:53:a6:aa:f5:49:2c:
                    05:78:45:a5:2f:89:ce:e7:99:e7:fe:8c:e2:57:3f:
                    3d:c6:92:dc:4a:f8:7b:33:e4:79:0a:fb:f0:75:88:
                    41:9c:ff:c5:03:51:99:aa:d7:6c:9f:93:69:87:65:
                    29:83:85:c2:60:14:c4:c8:c9:3b:14:da:c0:81:f0:
                    1f:0d:74:de:92:22:ab:ca:f7:fb:74:7c:27:e6:f7:
                    4a:1b:7f:a7:c3:9e:2d:ae:8a:ea:a6:e6:aa:27:16:
                    7d:61:f7:98:71:11:bc:e2:50:a1:4b:e5:5d:fa:e5:
                    0e:a7:2c:9f:aa:65:20:d3:d8:96:e8:c8:7c:a5:4e:
                    48:44:ff:19:e2:44:07:92:0b:d7:68:84:80:5d:6a:
                    78:64:45:cd:60:46:7e:54:c1:13:7c:c5:79:f1:c9:
                    c1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD
            Authority Information Access: 
                OCSP - URI:http://ocsp.thawte.com

            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.thawte.com/ThawteTimestampingCA.crl

            X509v3 Extended Key Usage: 
                Time Stamping
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-1
    Signature Algorithm: sha1WithRSAEncryption
         03:09:9b:8f:79:ef:7f:59:30:aa:ef:68:b5:fa:e3:09:1d:bb:
         4f:82:06:5d:37:5f:a6:52:9f:16:8d:ea:1c:92:09:44:6e:f5:
         6d:eb:58:7c:30:e8:f9:69:8d:23:73:0b:12:6f:47:a9:ae:39:
         11:f8:2a:b1:9b:b0:1a:c3:8e:eb:59:96:00:ad:ce:0c:4d:b2:
         d0:31:a6:08:5c:2a:7a:fc:e2:7a:1d:57:4c:a8:65:18:e9:79:
         40:62:25:96:6e:c7:c7:37:6a:83:21:08:8e:41:ea:dd:d9:57:
         3f:1d:77:49:87:2a:16:06:5e:a6:38:6a:22:12:a3:51:19:83:
         7e:b6

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Validity
            Not Before: Oct 18 00:00:00 2012 GMT
            Not After : Dec 29 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer - G4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:63:0b:39:44:b8:bb:23:a7:44:49:bb:0e:ff:
                    a1:f0:61:0a:53:93:b0:98:db:ad:2c:0f:4a:c5:6e:
                    ff:86:3c:53:55:0f:15:ce:04:3f:2b:fd:a9:96:96:
                    d9:be:61:79:0b:5b:c9:4c:86:76:e5:e0:43:4b:22:
                    95:ee:c2:2b:43:c1:9f:d8:68:b4:8e:40:4f:ee:85:
                    38:b9:11:c5:23:f2:64:58:f0:15:32:6f:4e:57:a1:
                    ae:88:a4:02:d7:2a:1e:cd:4b:e1:dd:63:d5:17:89:
                    32:5b:b0:5e:99:5a:a8:9d:28:50:0e:17:ee:96:db:
                    61:3b:45:51:1d:cf:12:56:0b:92:47:fc:ab:ae:f6:
                    66:3d:47:ac:70:72:e7:92:e7:5f:cd:10:b9:c4:83:
                    64:94:19:bd:25:80:e1:e8:d2:22:a5:d0:ba:02:7a:
                    a1:77:93:5b:65:c3:ee:17:74:bc:41:86:2a:dc:08:
                    4c:8c:92:8c:91:2d:9e:77:44:1f:68:d6:a8:74:77:
                    db:0e:5b:32:8b:56:8b:33:bd:d9:63:c8:49:9d:3a:
                    c5:c5:ea:33:0b:d2:f1:a3:1b:f4:8b:be:d9:b3:57:
                    8b:3b:de:04:a7:7a:22:b2:24:ae:2e:c7:70:c5:be:
                    4e:83:26:08:fb:0b:bd:a9:4f:99:08:e1:10:28:72:
                    aa:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                OCSP - URI:http://ts-ocsp.ws.symantec.com
                CA Issuers - URI:http://ts-aia.ws.symantec.com/tss-ca-g2.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ts-crl.ws.symantec.com/tss-ca-g2.crl

            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-2
            X509v3 Subject Key Identifier: 
                46:C6:69:A3:0E:4A:14:1E:D5:4C:DA:52:63:17:3F:5E:36:BC:0D:E6
            X509v3 Authority Key Identifier: 
                keyid:5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD

    Signature Algorithm: sha1WithRSAEncryption
         78:3b:b4:91:2a:00:4c:f0:8f:62:30:37:78:a3:84:27:07:6f:
         18:b2:de:25:dc:a0:d4:94:03:aa:86:4e:25:9f:9a:40:03:1c:
         dd:ce:e3:79:cb:21:68:06:da:b6:32:b4:6d:bf:f4:2c:26:63:
         33:e4:49:64:6d:0d:e6:c3:67:0e:f7:05:a4:35:6c:7c:89:16:
         c6:e9:b2:df:b2:e9:dd:20:c6:71:0f:cd:95:74:dc:b6:5c:de:
         bd:37:1f:43:78:e6:78:b5:cd:28:04:20:a3:aa:f1:4b:c4:88:
         29:91:0e:80:d1:11:fc:dd:5c:76:6e:4f:5e:0e:45:46:41:6e:
         0d:b0:ea:38:9a:b1:3a:da:09:71:10:fc:1c:79:b4:80:7b:ac:
         69:f4:fd:9c:b6:0c:16:2b:f1:7f:5b:09:3d:9b:5b:e2:16:ca:
         13:81:6d:00:2e:38:0d:a8:29:8f:2c:e1:b2:f4:5a:a9:01:af:
         15:9c:2c:2f:49:1b:db:22:bb:c3:fe:78:94:51:c3:86:b1:82:
         88:5d:f0:3d:b4:51:a1:79:33:2b:2e:7b:b9:dc:20:09:13:71:
         eb:6a:19:5b:cf:e8:a5:30:57:2c:89:49:3f:b9:cf:7f:c9:bf:
         3e:22:68:63:53:9a:bd:69:74:ac:c5:1d:3c:7f:92:e0:c3:bc:
         1c:d8:04:75

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:9e:3f:9f:cf:7d:58:d5:20:d6:07:ab:74:39:50:02
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Code Signing CA
        Validity
            Not Before: Jun  2 00:00:00 2017 GMT
            Not After : Jun  1 23:59:59 2020 GMT
        Subject: C=DE/postalCode=10117, ST=Berlin, L=Berlin/street=Marienstrasse 12, O=win.rar GmbH, CN=win.rar GmbH
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:6c:b4:9e:19:d5:67:74:56:09:42:7e:60:35:
                    9a:43:05:0d:1b:23:c8:e4:cb:ff:8b:36:70:92:08:
                    29:57:4b:99:81:a5:a9:04:d8:21:77:01:b9:be:66:
                    0a:c8:a2:d5:2e:bd:cc:22:23:0d:96:da:69:e6:1f:
                    f7:0f:9c:99:73:b1:e9:5f:bc:ba:ff:d6:3d:43:65:
                    92:57:a2:ac:a4:9c:46:c2:6d:53:56:a3:4c:c3:29:
                    f4:c7:59:a5:49:f3:0a:e2:13:41:88:46:51:d2:bc:
                    ea:2e:07:6c:f2:b9:34:5a:47:88:17:2b:1f:7f:d9:
                    5d:7f:1f:4b:78:ab:bc:ec:1c:97:9a:66:5b:c6:78:
                    a3:41:54:ef:2d:c2:2b:b0:6c:8e:c2:0b:06:22:01:
                    2c:74:be:92:c8:e1:93:f8:d8:cb:aa:57:5b:9a:6c:
                    e0:0e:d1:d6:a4:58:0f:1a:0e:4b:e5:a9:10:f7:06:
                    3e:4b:c1:11:c4:b7:a1:8e:8f:7b:bd:ca:e6:19:10:
                    ef:fa:5e:20:4f:34:69:34:df:65:57:1c:34:76:41:
                    e9:d9:86:c6:be:b1:8e:a2:d0:b7:c0:5a:01:7d:d4:
                    c4:0f:a3:cc:1e:58:11:8c:66:b7:cd:05:43:09:82:
                    04:39:95:b6:5a:ca:ee:f2:64:63:cb:87:b0:af:16:
                    c7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:29:91:60:FF:8A:4D:FA:EB:F9:A6:6A:B8:CF:F9:E6:4B:BD:49:CE:12

            X509v3 Subject Key Identifier: 
                B7:B9:31:84:AF:37:A0:11:C8:7A:C3:9D:A7:F8:86:63:7C:6E:06:0D
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                Code Signing
            Netscape Cert Type: 
                Object Signing
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.6449.1.2.1.3.2
                  CPS: https://secure.comodo.net/CPS

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.comodoca.com/COMODORSACodeSigningCA.crl

            Authority Information Access: 
                CA Issuers - URI:http://crt.comodoca.com/COMODORSACodeSigningCA.crt
                OCSP - URI:http://ocsp.comodoca.com

            X509v3 Subject Alternative Name: 
                email:info@win-rar.com
    Signature Algorithm: sha256WithRSAEncryption
         59:d3:91:0a:4e:a9:08:94:77:b9:95:0c:0f:4c:76:5a:b1:43:
         aa:d4:3f:70:e7:10:ce:84:44:61:e7:eb:86:76:b3:31:2e:c7:
         c6:79:04:85:9e:fe:e5:2d:db:ea:c9:54:a8:a8:f2:da:8b:23:
         ad:2c:d8:9f:b9:f4:a8:dc:49:0a:2c:e2:1d:a5:4f:42:75:ba:
         28:b8:e8:b1:40:65:98:4f:81:2a:fa:a9:04:2d:29:88:8f:c0:
         a7:f9:55:42:a2:cc:cc:f2:2b:95:a8:dd:59:6e:38:48:1c:06:
         b6:6f:8c:c8:02:f8:17:95:1e:ab:8d:7f:35:ab:e1:f0:6d:f6:
         81:75:5d:8b:8b:d3:15:a9:2b:21:fa:0b:37:39:42:58:f6:b8:
         fa:7e:c0:d3:6c:f3:ab:36:61:f5:bb:18:d0:d6:6f:e0:cf:b9:
         3d:0f:90:38:4d:07:7d:ca:be:aa:5a:d4:22:fe:2e:42:32:af:
         78:ee:26:39:ec:ca:f8:47:4b:c0:72:8e:03:4f:b3:45:a2:ee:
         58:07:b8:1b:ee:e7:ff:55:d2:f6:09:e3:7c:db:a4:ed:70:e0:
         4f:c1:12:0c:27:3b:86:2d:ed:96:ba:c1:01:78:b5:ee:99:e7:
         0e:f8:e3:14:1e:ea:3c:ae:5a:b6:f9:fd:60:d6:7a:c8:55:d4:
         97:59:70:9f

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
        Signature Algorithm: sha384WithRSAEncryption
        Issuer: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Certification Authority
        Validity
            Not Before: May  9 00:00:00 2013 GMT
            Not After : May  8 23:59:59 2028 GMT
        Subject: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Code Signing CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:98:90:63:77:91:34:7f:8a:d1:dd:e9:67:31:
                    11:eb:cc:1e:fd:31:1d:b3:b9:62:57:3f:93:bc:5b:
                    e3:9f:1e:24:32:11:27:6b:bc:51:91:a7:cf:9e:9e:
                    25:b3:5f:81:a8:18:0f:1d:1e:20:30:0e:fb:61:7b:
                    86:09:b3:e3:fd:a2:68:9d:1c:2c:9d:bf:72:e3:e4:
                    75:a0:e5:35:23:8e:c9:8a:ee:1a:0c:64:c7:d8:42:
                    a1:7b:b5:52:03:4b:3a:b0:8e:23:4b:4b:63:e0:22:
                    94:37:7b:d5:79:90:0a:14:18:51:2c:e6:fe:c1:12:
                    f0:1c:3f:61:61:0a:8c:a2:dc:f6:c3:30:aa:cd:28:
                    18:75:48:c1:79:5a:08:cd:bb:8c:55:8c:f7:d4:76:
                    90:3a:33:46:50:73:98:5c:f4:85:4a:6b:0f:80:dd:
                    5e:d6:bd:fd:a9:2f:c0:25:f5:f9:78:d7:8d:5f:10:
                    c2:44:55:3c:90:3c:31:46:cb:70:ae:07:a9:0a:e3:
                    af:c1:01:6f:90:1a:23:e2:5f:38:db:c6:08:5d:47:
                    b3:83:41:f0:2e:00:37:14:b9:12:aa:79:92:52:cd:
                    87:0f:7b:d8:62:29:a4:7e:30:bd:1b:b5:8c:72:b4:
                    48:f2:e3:e8:21:f9:5e:4c:62:79:8b:02:06:9f:7f:
                    d5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:BB:AF:7E:02:3D:FA:A6:F1:3C:84:8E:AD:EE:38:98:EC:D9:32:32:D4

            X509v3 Subject Key Identifier: 
                29:91:60:FF:8A:4D:FA:EB:F9:A6:6A:B8:CF:F9:E6:4B:BD:49:CE:12
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.comodoca.com/COMODORSACertificationAuthority.crl

            Authority Information Access: 
                CA Issuers - URI:http://crt.comodoca.com/COMODORSAAddTrustCA.crt
                OCSP - URI:http://ocsp.comodoca.com

    Signature Algorithm: sha384WithRSAEncryption
         02:3f:02:39:c3:ee:f8:ca:3b:89:de:0c:6d:4d:b1:f1:4e:92:
         4f:af:c2:38:2c:04:cc:c5:63:11:ab:09:63:af:ab:a2:d7:02:
         3f:cc:6f:19:c3:3d:d6:1a:08:94:ff:25:d8:a9:88:a7:2b:10:
         1a:e0:9b:b1:07:22:1a:51:1c:3a:d4:e1:e9:09:bf:e6:24:74:
         af:1e:7b:16:31:6e:23:ef:54:51:2d:52:02:e2:75:08:05:4c:
         f1:b7:51:e1:51:00:c6:87:f6:6c:ee:10:44:76:57:6a:f1:df:
         58:6b:21:aa:49:d4:7c:37:4e:bd:ff:b6:75:54:40:18:36:57:
         67:11:cd:4f:02:e4:fe:f3:da:fc:75:17:db:ec:b7:f7:65:09:
         23:49:1f:43:57:83:ea:7e:20:77:61:c8:4d:f2:bb:65:4d:a8:
         f7:85:45:07:af:7a:69:27:65:90:29:40:8b:df:7b:3a:51:39:
         8c:a8:1f:70:79:ad:6d:42:20:a2:cf:0c:6c:03:8c:4c:cd:73:
         07:94:e7:5a:8e:3a:04:ba:a2:a1:7c:1f:cb:63:3a:15:a7:d4:
         15:1b:a7:52:47:32:a9:f4:bf:64:47:d1:aa:1f:53:4e:32:30:
         73:c2:6f:b7:78:82:9d:5c:ff:46:bb:6b:22:1d:88:0b:f8:1b:
         aa:34:a6:fc:8c:f5:dd:7f:65:8c:8c:31:57:31:d0:36:ec:47:
         a1:cf:cb:8b:a8:ef:1c:18:58:c5:06:77:ca:4b:9b:51:af:4c:
         08:4a:7a:8f:e2:a3:52:e2:8e:8e:cc:26:e4:b2:d8:e5:38:c2:
         a8:ed:c6:81:9c:35:6b:a9:58:61:4a:0a:97:b4:4b:42:b6:55:
         9d:be:99:e7:70:6d:59:f8:6d:2a:0c:7f:19:60:5f:0c:9a:88:
         6c:30:ac:52:09:90:16:1b:ff:2b:9d:db:d0:20:ca:89:ea:28:
         7e:32:8e:19:df:7b:48:33:1e:d7:65:f8:ae:c9:f8:83:14:93:
         76:7d:64:d0:8e:ce:be:35:7d:ff:72:31:4d:9f:9e:bd:1e:6c:
         2f:a8:8f:0c:06:50:fb:8c:27:b3:76:c9:f4:e6:d7:c3:34:e2:
         8c:87:21:86:61:fe:bf:55:74:e1:21:77:03:0a:68:6c:bb:e4:
         c9:a9:e6:cf:59:25:eb:7c:ec:45:0e:79:66:68:e8:22:cd:b8:
         ef:98:85:4d:96:11:3c:09:8a:d0:7f:bc:28:28:13:fb:6a:ca:
         54:8d:92:5c:cd:c2:65:98:06:9e:ce:48:5b:d4:b5:37:93:46:
         41:7c:07:dd:cf:fa:43:ef:ba:67:61:ff:7d:49:e0:bb:30:7d:
         5c:80:e3:e6:16:39:4b:a7

pkcs7-signedData

SHA1: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15
- :

SHA1

a1 76 f3 41 8b e7 70 ea e5 e1 f1 8a c5 06 ef 40 |.v.A..p........@| f6 be 1a 19 |.... |

Certificates

Certificate #0
- 2
  - 7E:93:EB:FB:7C:C6:4E:59:EA:4B:9A:77:D4:06:FC:3B
  - RSA-SHA1: nil
  - Issuer
    - C: ZA
    - ST: Western Cape
    - L: Durbanville
    - O: Thawte
    - OU: Thawte Certification
    - CN: Thawte Timestamping CA
  - 2012-12-21 00:00:00 UTC: 2020-12-30 23:59:59 UTC
  - Subject
    - C: US
    - O: Symantec Corporation
    - CN: Symantec Time Stamping Services CA - G2
  - #5
    - rsaEncryption: nil
    - B1:AC:B3:49:54:4B:97:1C:12:0A:D8:25:79:91:22:57:
      2A:6F:DC:B8:26:C4:43:73:6B:C2:BF:2E:50:5A:FB:14:
      C2:76:8E:43:01:25:43:B4:A1:E2:45:F4:E8:B7:7B:C3:
      74:CC:22:D7:B4:94:00:02:F7:4D:ED:BF:B4:B7:44:24:
      6B:CD:5F:45:3B:D1:44:CE:43:12:73:17:82:8B:69:B4:
      2B:CB:99:1E:AC:72:1B:26:4D:71:1F:B1:31:DD:FB:51:
      61:02:53:A6:AA:F5:49:2C:05:78:45:A5:2F:89:CE:E7:
      99:E7:FE:8C:E2:57:3F:3D:C6:92:DC:4A:F8:7B:33:E4:
      79:0A:FB:F0:75:88:41:9C:FF:C5:03:51:99:AA:D7:6C:
      9F:93:69:87:65:29:83:85:C2:60:14:C4:C8:C9:3B:14:
      DA:C0:81:F0:1F:0D:74:DE:92:22:AB:CA:F7:FB:74:7C:
      27:E6:F7:4A:1B:7F:A7:C3:9E:2D:AE:8A:EA:A6:E6:AA:
      27:16:7D:61:F7:98:71:11:BC:E2:50:A1:4B:E5:5D:FA:
      E5:0E:A7:2C:9F:AA:65:20:D3:D8:96:E8:C8:7C:A5:4E:
      48:44:FF:19:E2:44:07:92:0B:D7:68:84:80:5D:6A:78:
      64:45:CD:60:46:7E:54:C1:13:7C:C5:79:F1:C9:C1:71: 0x010001
  - #6
    - subjectKeyIdentifier:
```
5f 9a f5 6e 5c cc cc 74  9a d4 dd 7d ef 3f db ec  |_..n\..t...}.?..|
4c 80 2e dd                                       |L...            |
```
    - authorityInfoAccess
      - OCSP: http://ocsp.thawte.com
    - basicConstraints
      - true
      - true: 0
    - crlDistributionPoints: http://crl.thawte.com/ThawteTimestampingCA.crl
    - extendedKeyUsage: timeStamping
    - keyUsage: true, 6
    - subjectAltName
      - CN: TimeStamp-2048-1
- RSA-SHA1:
```
03 09 9b 8f 79 ef 7f 59  30 aa ef 68 b5 fa e3 09  |....y..Y0..h....|
1d bb 4f 82 06 5d 37 5f  a6 52 9f 16 8d ea 1c 92  |..O..]7_.R......|
09 44 6e f5 6d eb 58 7c  30 e8 f9 69 8d 23 73 0b  |.Dn.m.X|0..i.#s.|
12 6f 47 a9 ae 39 11 f8  2a b1 9b b0 1a c3 8e eb  |.oG..9..*.......|
59 96 00 ad ce 0c 4d b2  d0 31 a6 08 5c 2a 7a fc  |Y.....M..1..\*z.|
e2 7a 1d 57 4c a8 65 18  e9 79 40 62 25 96 6e c7  |.z.WL.e..y@b%.n.|
c7 37 6a 83 21 08 8e 41  ea dd d9 57 3f 1d 77 49  |.7j.!..A...W?.wI|
87 2a 16 06 5e a6 38 6a  22 12 a3 51 19 83 7e b6  |.*..^.8j"..Q..~.|
```
Certificate #1
- 2
  - 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
  - RSA-SHA1: nil
  - Issuer
    - C: US
    - O: Symantec Corporation
    - CN: Symantec Time Stamping Services CA - G2
  - 2012-10-18 00:00:00 UTC: 2020-12-29 23:59:59 UTC
  - Subject
    - C: US
    - O: Symantec Corporation
    - CN: Symantec Time Stamping Services Signer - G4
  - #5
    - rsaEncryption: nil
    - A2:63:0B:39:44:B8:BB:23:A7:44:49:BB:0E:FF:A1:F0:
      61:0A:53:93:B0:98:DB:AD:2C:0F:4A:C5:6E:FF:86:3C:
      53:55:0F:15:CE:04:3F:2B:FD:A9:96:96:D9:BE:61:79:
      0B:5B:C9:4C:86:76:E5:E0:43:4B:22:95:EE:C2:2B:43:
      C1:9F:D8:68:B4:8E:40:4F:EE:85:38:B9:11:C5:23:F2:
      64:58:F0:15:32:6F:4E:57:A1:AE:88:A4:02:D7:2A:1E:
      CD:4B:E1:DD:63:D5:17:89:32:5B:B0:5E:99:5A:A8:9D:
      28:50:0E:17:EE:96:DB:61:3B:45:51:1D:CF:12:56:0B:
      92:47:FC:AB:AE:F6:66:3D:47:AC:70:72:E7:92:E7:5F:
      CD:10:B9:C4:83:64:94:19:BD:25:80:E1:E8:D2:22:A5:
      D0:BA:02:7A:A1:77:93:5B:65:C3:EE:17:74:BC:41:86:
      2A:DC:08:4C:8C:92:8C:91:2D:9E:77:44:1F:68:D6:A8:
      74:77:DB:0E:5B:32:8B:56:8B:33:BD:D9:63:C8:49:9D:
      3A:C5:C5:EA:33:0B:D2:F1:A3:1B:F4:8B:BE:D9:B3:57:
      8B:3B:DE:04:A7:7A:22:B2:24:AE:2E:C7:70:C5:BE:4E:
      83:26:08:FB:0B:BD:A9:4F:99:08:E1:10:28:72:AA:CD: 0x010001
  - X509v3 extensions
    - basicConstraints
      - true
      - nil
    - extendedKeyUsage: true, timeStamping
    - keyUsage: true, 0x80
    - authorityInfoAccess
      - #0
        OCSP: http://ts-ocsp.ws.symantec.com
        caIssuers: http://ts-aia.ws.symantec.com/tss-ca-g2.cer
    - crlDistributionPoints: http://ts-crl.ws.symantec.com/tss-ca-g2.crl
    - subjectAltName
      - CN: TimeStamp-2048-2
    - subjectKeyIdentifier:
```
46 c6 69 a3 0e 4a 14 1e  d5 4c da 52 63 17 3f 5e  |F.i..J...L.Rc.?^|
36 bc 0d e6                                       |6...            |
```
    - authorityKeyIdentifier:
```
5f 9a f5 6e 5c cc cc 74  9a d4 dd 7d ef 3f db ec  |_..n\..t...}.?..|
4c 80 2e dd                                       |L...            |
```
- RSA-SHA1:
```
78 3b b4 91 2a 00 4c f0  8f 62 30 37 78 a3 84 27  |x;..*.L..b07x..'|
07 6f 18 b2 de 25 dc a0  d4 94 03 aa 86 4e 25 9f  |.o...%.......N%.|
9a 40 03 1c dd ce e3 79  cb 21 68 06 da b6 32 b4  |.@.....y.!h...2.|
6d bf f4 2c 26 63 33 e4  49 64 6d 0d e6 c3 67 0e  |m..,&c3.Idm...g.|
f7 05 a4 35 6c 7c 89 16  c6 e9 b2 df b2 e9 dd 20  |...5l|......... |
c6 71 0f cd 95 74 dc b6  5c de bd 37 1f 43 78 e6  |.q...t..\..7.Cx.|
78 b5 cd 28 04 20 a3 aa  f1 4b c4 88 29 91 0e 80  |x..(. ...K..)...|
d1 11 fc dd 5c 76 6e 4f  5e 0e 45 46 41 6e 0d b0  |....\vnO^.EFAn..|
ea 38 9a b1 3a da 09 71  10 fc 1c 79 b4 80 7b ac  |.8..:..q...y..{.|
69 f4 fd 9c b6 0c 16 2b  f1 7f 5b 09 3d 9b 5b e2  |i......+..[.=.[.|
16 ca 13 81 6d 00 2e 38  0d a8 29 8f 2c e1 b2 f4  |....m..8..).,...|
5a a9 01 af 15 9c 2c 2f  49 1b db 22 bb c3 fe 78  |Z.....,/I.."...x|
94 51 c3 86 b1 82 88 5d  f0 3d b4 51 a1 79 33 2b  |.Q.....].=.Q.y3+|
2e 7b b9 dc 20 09 13 71  eb 6a 19 5b cf e8 a5 30  |.{.. ..q.j.[...0|
57 2c 89 49 3f b9 cf 7f  c9 bf 3e 22 68 63 53 9a  |W,.I?.....>"hcS.|
bd 69 74 ac c5 1d 3c 7f  92 e0 c3 bc 1c d8 04 75  |.it...<........u|
```
Certificate #2
- 2
  - 52:9E:3F:9F:CF:7D:58:D5:20:D6:07:AB:74:39:50:02
  - RSA-SHA256: nil
  - Issuer
    - C: GB
    - ST: Greater Manchester
    - L: Salford
    - O: COMODO CA Limited
    - CN: COMODO RSA Code Signing CA
  - 2017-06-02 00:00:00 UTC: 2020-06-01 23:59:59 UTC
  - Subject
    - C: DE
    - postalCode: 10117
    - ST: Berlin
    - L: Berlin
    - street: Marienstrasse 12
    - O: win.rar GmbH
    - CN: win.rar GmbH
  - #5
    - rsaEncryption: nil
    - DA:6C:B4:9E:19:D5:67:74:56:09:42:7E:60:35:9A:43:
      05:0D:1B:23:C8:E4:CB:FF:8B:36:70:92:08:29:57:4B:
      99:81:A5:A9:04:D8:21:77:01:B9:BE:66:0A:C8:A2:D5:
      2E:BD:CC:22:23:0D:96:DA:69:E6:1F:F7:0F:9C:99:73:
      B1:E9:5F:BC:BA:FF:D6:3D:43:65:92:57:A2:AC:A4:9C:
      46:C2:6D:53:56:A3:4C:C3:29:F4:C7:59:A5:49:F3:0A:
      E2:13:41:88:46:51:D2:BC:EA:2E:07:6C:F2:B9:34:5A:
      47:88:17:2B:1F:7F:D9:5D:7F:1F:4B:78:AB:BC:EC:1C:
      97:9A:66:5B:C6:78:A3:41:54:EF:2D:C2:2B:B0:6C:8E:
      C2:0B:06:22:01:2C:74:BE:92:C8:E1:93:F8:D8:CB:AA:
      57:5B:9A:6C:E0:0E:D1:D6:A4:58:0F:1A:0E:4B:E5:A9:
      10:F7:06:3E:4B:C1:11:C4:B7:A1:8E:8F:7B:BD:CA:E6:
      19:10:EF:FA:5E:20:4F:34:69:34:DF:65:57:1C:34:76:
      41:E9:D9:86:C6:BE:B1:8E:A2:D0:B7:C0:5A:01:7D:D4:
      C4:0F:A3:CC:1E:58:11:8C:66:B7:CD:05:43:09:82:04:
      39:95:B6:5A:CA:EE:F2:64:63:CB:87:B0:AF:16:C7:BB: 0x010001
  - #6
    - authorityKeyIdentifier:
```
29 91 60 ff 8a 4d fa eb  f9 a6 6a b8 cf f9 e6 4b  |).`..M....j....K|
bd 49 ce 12                                       |.I..            |
```
    - subjectKeyIdentifier:
```
b7 b9 31 84 af 37 a0 11  c8 7a c3 9d a7 f8 86 63  |..1..7...z.....c|
7c 6e 06 0d                                       ||n..            |
```
    - keyUsage: true, 0x80
    - basicConstraints
      - true
      - nil
    - extendedKeyUsage: codeSigning
    - nsCertType: 0x10
    - certificatePolicies
      - 1.3.6.1.4.1.6449.1.2.1.3.2
        id-qt-cps: https://secure.comodo.net/CPS
    - crlDistributionPoints: http://crl.comodoca.com/COMODORSACodeSigningCA.crl
    - authorityInfoAccess
      - #0
        caIssuers: http://crt.comodoca.com/COMODORSACodeSigningCA.crt
        OCSP: http://ocsp.comodoca.com
    - subjectAltName: info@win-rar.com
- RSA-SHA256:
```
59 d3 91 0a 4e a9 08 94  77 b9 95 0c 0f 4c 76 5a  |Y...N...w....LvZ|
b1 43 aa d4 3f 70 e7 10  ce 84 44 61 e7 eb 86 76  |.C..?p....Da...v|
b3 31 2e c7 c6 79 04 85  9e fe e5 2d db ea c9 54  |.1...y.....-...T|
a8 a8 f2 da 8b 23 ad 2c  d8 9f b9 f4 a8 dc 49 0a  |.....#.,......I.|
2c e2 1d a5 4f 42 75 ba  28 b8 e8 b1 40 65 98 4f  |,...OBu.(...@e.O|
81 2a fa a9 04 2d 29 88  8f c0 a7 f9 55 42 a2 cc  |.*...-).....UB..|
cc f2 2b 95 a8 dd 59 6e  38 48 1c 06 b6 6f 8c c8  |..+...Yn8H...o..|
02 f8 17 95 1e ab 8d 7f  35 ab e1 f0 6d f6 81 75  |........5...m..u|
5d 8b 8b d3 15 a9 2b 21  fa 0b 37 39 42 58 f6 b8  |].....+!..79BX..|
fa 7e c0 d3 6c f3 ab 36  61 f5 bb 18 d0 d6 6f e0  |.~..l..6a.....o.|
cf b9 3d 0f 90 38 4d 07  7d ca be aa 5a d4 22 fe  |..=..8M.}...Z.".|
2e 42 32 af 78 ee 26 39  ec ca f8 47 4b c0 72 8e  |.B2.x.&9...GK.r.|
03 4f b3 45 a2 ee 58 07  b8 1b ee e7 ff 55 d2 f6  |.O.E..X......U..|
09 e3 7c db a4 ed 70 e0  4f c1 12 0c 27 3b 86 2d  |..|...p.O...';.-|
ed 96 ba c1 01 78 b5 ee  99 e7 0e f8 e3 14 1e ea  |.....x..........|
3c ae 5a b6 f9 fd 60 d6  7a c8 55 d4 97 59 70 9f  |<.Z...`.z.U..Yp.|
```

Certificate #3

2
- 2E:7C:87:CC:0E:93:4A:52:FE:94:FD:1C:B7:CD:34:AF
- RSA-SHA384: nil
- Issuer
  - C: GB
  - ST: Greater Manchester
  - L: Salford
  - O: COMODO CA Limited
  - CN: COMODO RSA Certification Authority
- 2013-05-09 00:00:00 UTC: 2028-05-08 23:59:59 UTC
- Subject
  - C: GB
  - ST: Greater Manchester
  - L: Salford
  - O: COMODO CA Limited
  - CN: COMODO RSA Code Signing CA
- #5
  - rsaEncryption: nil
  - A6:98:90:63:77:91:34:7F:8A:D1:DD:E9:67:31:11:EB:
    CC:1E:FD:31:1D:B3:B9:62:57:3F:93:BC:5B:E3:9F:1E:
    24:32:11:27:6B:BC:51:91:A7:CF:9E:9E:25:B3:5F:81:
    A8:18:0F:1D:1E:20:30:0E:FB:61:7B:86:09:B3:E3:FD:
    A2:68:9D:1C:2C:9D:BF:72:E3:E4:75:A0:E5:35:23:8E:
    C9:8A:EE:1A:0C:64:C7:D8:42:A1:7B:B5:52:03:4B:3A:
    B0:8E:23:4B:4B:63:E0:22:94:37:7B:D5:79:90:0A:14:
    18:51:2C:E6:FE:C1:12:F0:1C:3F:61:61:0A:8C:A2:DC:
    F6:C3:30:AA:CD:28:18:75:48:C1:79:5A:08:CD:BB:8C:
    55:8C:F7:D4:76:90:3A:33:46:50:73:98:5C:F4:85:4A:
    6B:0F:80:DD:5E:D6:BD:FD:A9:2F:C0:25:F5:F9:78:D7:
    8D:5F:10:C2:44:55:3C:90:3C:31:46:CB:70:AE:07:A9:
    0A:E3:AF:C1:01:6F:90:1A:23:E2:5F:38:DB:C6:08:5D:
    47:B3:83:41:F0:2E:00:37:14:B9:12:AA:79:92:52:CD:
    87:0F:7B:D8:62:29:A4:7E:30:BD:1B:B5:8C:72:B4:48:
    F2:E3:E8:21:F9:5E:4C:62:79:8B:02:06:9F:7F:D5:0B: 0x010001
- #6
  - authorityKeyIdentifier:
```
bb af 7e 02 3d fa a6 f1  3c 84 8e ad ee 38 98 ec  |..~.=...<....8..|
d9 32 32 d4                                       |.22.            |
```
  - subjectKeyIdentifier:
```
29 91 60 ff 8a 4d fa eb  f9 a6 6a b8 cf f9 e6 4b  |).`..M....j....K|
bd 49 ce 12                                       |.I..            |
```
  - keyUsage: true, 0x86
  - basicConstraints
    - true
    - true: 0
  - extendedKeyUsage: codeSigning
  - certificatePolicies: anyPolicy
  - crlDistributionPoints: http://crl.comodoca.com/COMODORSACertificationAuthority.crl
  - authorityInfoAccess
    - #0
      - caIssuers: http://crt.comodoca.com/COMODORSAAddTrustCA.crt
      - OCSP: http://ocsp.comodoca.com

RSA-SHA384:

02 3f 02 39 c3 ee f8 ca  3b 89 de 0c 6d 4d b1 f1  |.?.9....;...mM..|
4e 92 4f af c2 38 2c 04  cc c5 63 11 ab 09 63 af  |N.O..8,...c...c.|
ab a2 d7 02 3f cc 6f 19  c3 3d d6 1a 08 94 ff 25  |....?.o..=.....%|
d8 a9 88 a7 2b 10 1a e0  9b b1 07 22 1a 51 1c 3a  |....+......".Q.:|
d4 e1 e9 09 bf e6 24 74  af 1e 7b 16 31 6e 23 ef  |......$t..{.1n#.|
54 51 2d 52 02 e2 75 08  05 4c f1 b7 51 e1 51 00  |TQ-R..u..L..Q.Q.|
c6 87 f6 6c ee 10 44 76  57 6a f1 df 58 6b 21 aa  |...l..DvWj..Xk!.|
49 d4 7c 37 4e bd ff b6  75 54 40 18 36 57 67 11  |I.|7N...uT@.6Wg.|
cd 4f 02 e4 fe f3 da fc  75 17 db ec b7 f7 65 09  |.O......u.....e.|
23 49 1f 43 57 83 ea 7e  20 77 61 c8 4d f2 bb 65  |#I.CW..~ wa.M..e|
4d a8 f7 85 45 07 af 7a  69 27 65 90 29 40 8b df  |M...E..zi'e.)@..|
7b 3a 51 39 8c a8 1f 70  79 ad 6d 42 20 a2 cf 0c  |{:Q9...py.mB ...|
6c 03 8c 4c cd 73 07 94  e7 5a 8e 3a 04 ba a2 a1  |l..L.s...Z.:....|
7c 1f cb 63 3a 15 a7 d4  15 1b a7 52 47 32 a9 f4  ||..c:......RG2..|
bf 64 47 d1 aa 1f 53 4e  32 30 73 c2 6f b7 78 82  |.dG...SN20s.o.x.|
9d 5c ff 46 bb 6b 22 1d  88 0b f8 1b aa 34 a6 fc  |.\.F.k"......4..|
8c f5 dd 7f 65 8c 8c 31  57 31 d0 36 ec 47 a1 cf  |....e..1W1.6.G..|
cb 8b a8 ef 1c 18 58 c5  06 77 ca 4b 9b 51 af 4c  |......X..w.K.Q.L|
08 4a 7a 8f e2 a3 52 e2  8e 8e cc 26 e4 b2 d8 e5  |.Jz...R....&....|
38 c2 a8 ed c6 81 9c 35  6b a9 58 61 4a 0a 97 b4  |8......5k.XaJ...|
4b 42 b6 55 9d be 99 e7  70 6d 59 f8 6d 2a 0c 7f  |KB.U....pmY.m*..|
19 60 5f 0c 9a 88 6c 30  ac 52 09 90 16 1b ff 2b  |.`_...l0.R.....+|
9d db d0 20 ca 89 ea 28  7e 32 8e 19 df 7b 48 33  |... ...(~2...{H3|
1e d7 65 f8 ae c9 f8 83  14 93 76 7d 64 d0 8e ce  |..e.......v}d...|
be 35 7d ff 72 31 4d 9f  9e bd 1e 6c 2f a8 8f 0c  |.5}.r1M....l/...|
06 50 fb 8c 27 b3 76 c9  f4 e6 d7 c3 34 e2 8c 87  |.P..'.v.....4...|
21 86 61 fe bf 55 74 e1  21 77 03 0a 68 6c bb e4  |!.a..Ut.!w..hl..|
c9 a9 e6 cf 59 25 eb 7c  ec 45 0e 79 66 68 e8 22  |....Y%.|.E.yfh."|
cd b8 ef 98 85 4d 96 11  3c 09 8a d0 7f bc 28 28  |.....M..<.....((|
13 fb 6a ca 54 8d 92 5c  cd c2 65 98 06 9e ce 48  |..j.T..\..e....H|
5b d4 b5 37 93 46 41 7c  07 dd cf fa 43 ef ba 67  |[..7.FA|....C..g|
61 ff 7d 49 e0 bb 30 7d  5c 80 e3 e6 16 39 4b a7  |a.}I..0}\....9K.|

Signer

1
unnamed
- #0
  - C: GB
  - ST: Greater Manchester
  - L: Salford
  - O: COMODO CA Limited
  - CN: COMODO RSA Code Signing CA
- 52:9E:3F:9F:CF:7D:58:D5:20:D6:07:AB:74:39:50:02
SHA1: nil

1.3.6.1.4.1.311.2.1.12
- nil
contentType: 1.3.6.1.4.1.311.2.1.4
1.3.6.1.4.1.311.2.1.11: msCodeInd

messageDigest:

fa e7 8d 43 ca c7 69 0d  30 f2 b1 27 8c aa 61 64  |...C..i.0..'..ad|
62 89 23 d4                                       |b.#.            |

rsaEncryption:

d2 fe 3d 30 13 ac 43 03  0c c5 ff 5c 2b dc 6c de  |..=0..C....\+.l.|
ca 46 ca aa 0b d7 6e a4  50 73 e5 3a a0 ba 79 58  |.F....n.Ps.:..yX|
44 1a 4d 83 a7 71 02 73  f0 34 a2 21 5f 2a a9 ed  |D.M..q.s.4.!_*..|
bc 6f c2 20 7f 52 20 58  14 49 9e 25 27 a9 25 a4  |.o. .R X.I.%'.%.|
9e 52 6a 47 48 bf 18 26  3b 56 ca 92 61 3a 1e 71  |.RjGH..&;V..a:.q|
ad 82 fa 36 a5 1a 0e 2c  04 05 4e 99 21 c5 47 a3  |...6...,..N.!.G.|
e7 f0 a0 ef 7e 71 4e 2e  2c 66 c7 58 ff 09 b3 05  |....~qN.,f.X....|
2b 65 ce 22 05 96 5f 38  75 9a 4e 5a d9 f0 76 e7  |+e.".._8u.NZ..v.|
ec b1 39 79 14 b0 74 07  43 8e 5a 3c f1 aa 0d 80  |..9y..t.C.Z<....|
67 fe 89 38 55 7a ce a5  2d f2 85 0c 2d 45 cf c7  |g..8Uz..-...-E..|
5c 4c 64 d1 d0 3e 08 10  d6 eb c2 18 e1 63 ad b7  |\Ld..>.......c..|
21 b3 9a 15 29 c1 65 42  e4 aa 24 51 43 79 e2 09  |!...).eB..$QCy..|
80 76 3c b4 e8 b0 14 49  81 37 c8 f0 0e 7b c3 2c  |.v<....I.7...{.,|
9a b9 d3 c0 be 5a ce ed  0c b7 d1 0a 6d ca 97 ed  |.....Z......m...|
f7 2f 43 df b7 21 ca e3  f5 c3 34 64 a4 35 08 f4  |./C..!....4d.5..|
c2 96 bf 23 c1 6c d3 8f  14 24 09 9b e8 f0 95 79  |...#.l...$.....y|

countersignature

unnamed
- #0
  - C: US
  - O: Symantec Corporation
  - CN: Symantec Time Stamping Services CA - G2
- 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
SHA1: nil

contentType: pkcs7-data
signingTime: 2019-12-05 07:37:44 UTC

messageDigest:

9d 1a df ac 9e 63 96 01  80 93 44 89 cc c6 4f 12  |.....c....D...O.|
eb c7 ba ae                                       |....            |

rsaEncryption:

49 ee cc a4 88 33 fe 85  90 a0 4f 95 1c 67 7d d1  |I....3....O..g}.|
ff 88 44 26 09 d1 83 91  19 d6 a8 89 dc 50 4e 8f  |..D&.........PN.|
ea 19 d4 94 bf 0a 55 32  02 9a 1b f1 df f6 16 67  |......U2.......g|
75 1a 2b 78 38 3e 57 0a  69 d3 a1 07 3f 42 af 6d  |u.+x8>W.i...?B.m|
90 7c 38 74 f5 53 21 2d  b4 80 9f ca db 6f af 3d  |.|8t.S!-.....o.=|
00 6c 49 71 f4 bd 84 de  b3 66 c4 fa 62 e2 31 27  |.lIq.....f..b.1'|
4b 6a f6 a9 d6 69 43 cd  66 f8 d1 55 30 16 91 16  |Kj...iC.f..U0...|
87 7d 4a 50 c1 2f 16 40  9f fc ea 40 d4 60 f1 a4  |.}JP./.@...@.`..|
88 73 a0 08 5f 01 b5 cd  5a 83 77 d1 ca 48 9d 84  |.s.._...Z.w..H..|
18 43 3a 46 98 5d da e8  d5 57 a4 1d 08 33 0d a8  |.C:F.]...W...3..|
44 42 6f bb 0d 42 d9 fd  5b 36 01 dd 9a 0b 44 ac  |DBo..B..[6....D.|
f5 bd bb 48 cb 0b e4 4f  17 68 95 9e d3 7d 15 35  |...H...O.h...}.5|
21 cd f4 d1 ba 08 d3 9b  74 5f 0a ef 3b 3b c9 d5  |!.......t_..;;..|
45 f4 13 f3 5f 06 6c 53  58 d2 94 82 4a 8b 3d 3e  |E..._.lSX...J.=>|
bb 44 c7 94 0e ac dd 57  f3 f9 6b 58 dc a9 ff 61  |.D.....W..kX...a|
41 64 ac 38 52 68 66 07  90 30 11 03 e1 94 88 bc  |Ad.8Rhf..0......|

1.3.6.1.4.1.311.2.4.1

pkcs7-signedData

SHA256: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15
- :

SHA256

6c f5 e4 b6 1f 87 c8 fa 40 9a 18 29 b7 38 19 d5 |l.......@..).8..| 20 e0 99 41 e1 a5 74 8f 58 f2 f0 15 9a e9 63 f5 | ..A..t.X.....c.|

Certificates

Certificate #0
- 2
  - 52:9E:3F:9F:CF:7D:58:D5:20:D6:07:AB:74:39:50:02
  - RSA-SHA256: nil
  - Issuer
    - C: GB
    - ST: Greater Manchester
    - L: Salford
    - O: COMODO CA Limited
    - CN: COMODO RSA Code Signing CA
  - 2017-06-02 00:00:00 UTC: 2020-06-01 23:59:59 UTC
  - Subject
    - C: DE
    - postalCode: 10117
    - ST: Berlin
    - L: Berlin
    - street: Marienstrasse 12
    - O: win.rar GmbH
    - CN: win.rar GmbH
  - #5
    - rsaEncryption: nil
    - DA:6C:B4:9E:19:D5:67:74:56:09:42:7E:60:35:9A:43:
      05:0D:1B:23:C8:E4:CB:FF:8B:36:70:92:08:29:57:4B:
      99:81:A5:A9:04:D8:21:77:01:B9:BE:66:0A:C8:A2:D5:
      2E:BD:CC:22:23:0D:96:DA:69:E6:1F:F7:0F:9C:99:73:
      B1:E9:5F:BC:BA:FF:D6:3D:43:65:92:57:A2:AC:A4:9C:
      46:C2:6D:53:56:A3:4C:C3:29:F4:C7:59:A5:49:F3:0A:
      E2:13:41:88:46:51:D2:BC:EA:2E:07:6C:F2:B9:34:5A:
      47:88:17:2B:1F:7F:D9:5D:7F:1F:4B:78:AB:BC:EC:1C:
      97:9A:66:5B:C6:78:A3:41:54:EF:2D:C2:2B:B0:6C:8E:
      C2:0B:06:22:01:2C:74:BE:92:C8:E1:93:F8:D8:CB:AA:
      57:5B:9A:6C:E0:0E:D1:D6:A4:58:0F:1A:0E:4B:E5:A9:
      10:F7:06:3E:4B:C1:11:C4:B7:A1:8E:8F:7B:BD:CA:E6:
      19:10:EF:FA:5E:20:4F:34:69:34:DF:65:57:1C:34:76:
      41:E9:D9:86:C6:BE:B1:8E:A2:D0:B7:C0:5A:01:7D:D4:
      C4:0F:A3:CC:1E:58:11:8C:66:B7:CD:05:43:09:82:04:
      39:95:B6:5A:CA:EE:F2:64:63:CB:87:B0:AF:16:C7:BB: 0x010001
  - #6
    - authorityKeyIdentifier:
```
29 91 60 ff 8a 4d fa eb  f9 a6 6a b8 cf f9 e6 4b  |).`..M....j....K|
bd 49 ce 12                                       |.I..            |
```
    - subjectKeyIdentifier:
```
b7 b9 31 84 af 37 a0 11  c8 7a c3 9d a7 f8 86 63  |..1..7...z.....c|
7c 6e 06 0d                                       ||n..            |
```
    - keyUsage: true, 0x80
    - basicConstraints
      - true
      - nil
    - extendedKeyUsage: codeSigning
    - nsCertType: 0x10
    - certificatePolicies
      - 1.3.6.1.4.1.6449.1.2.1.3.2
        id-qt-cps: https://secure.comodo.net/CPS
    - crlDistributionPoints: http://crl.comodoca.com/COMODORSACodeSigningCA.crl
    - authorityInfoAccess
      - #0
        caIssuers: http://crt.comodoca.com/COMODORSACodeSigningCA.crt
        OCSP: http://ocsp.comodoca.com
    - subjectAltName: info@win-rar.com
- RSA-SHA256:
```
59 d3 91 0a 4e a9 08 94  77 b9 95 0c 0f 4c 76 5a  |Y...N...w....LvZ|
b1 43 aa d4 3f 70 e7 10  ce 84 44 61 e7 eb 86 76  |.C..?p....Da...v|
b3 31 2e c7 c6 79 04 85  9e fe e5 2d db ea c9 54  |.1...y.....-...T|
a8 a8 f2 da 8b 23 ad 2c  d8 9f b9 f4 a8 dc 49 0a  |.....#.,......I.|
2c e2 1d a5 4f 42 75 ba  28 b8 e8 b1 40 65 98 4f  |,...OBu.(...@e.O|
81 2a fa a9 04 2d 29 88  8f c0 a7 f9 55 42 a2 cc  |.*...-).....UB..|
cc f2 2b 95 a8 dd 59 6e  38 48 1c 06 b6 6f 8c c8  |..+...Yn8H...o..|
02 f8 17 95 1e ab 8d 7f  35 ab e1 f0 6d f6 81 75  |........5...m..u|
5d 8b 8b d3 15 a9 2b 21  fa 0b 37 39 42 58 f6 b8  |].....+!..79BX..|
fa 7e c0 d3 6c f3 ab 36  61 f5 bb 18 d0 d6 6f e0  |.~..l..6a.....o.|
cf b9 3d 0f 90 38 4d 07  7d ca be aa 5a d4 22 fe  |..=..8M.}...Z.".|
2e 42 32 af 78 ee 26 39  ec ca f8 47 4b c0 72 8e  |.B2.x.&9...GK.r.|
03 4f b3 45 a2 ee 58 07  b8 1b ee e7 ff 55 d2 f6  |.O.E..X......U..|
09 e3 7c db a4 ed 70 e0  4f c1 12 0c 27 3b 86 2d  |..|...p.O...';.-|
ed 96 ba c1 01 78 b5 ee  99 e7 0e f8 e3 14 1e ea  |.....x..........|
3c ae 5a b6 f9 fd 60 d6  7a c8 55 d4 97 59 70 9f  |<.Z...`.z.U..Yp.|
```

Certificate #1

2
- 2E:7C:87:CC:0E:93:4A:52:FE:94:FD:1C:B7:CD:34:AF
- RSA-SHA384: nil
- Issuer
  - C: GB
  - ST: Greater Manchester
  - L: Salford
  - O: COMODO CA Limited
  - CN: COMODO RSA Certification Authority
- 2013-05-09 00:00:00 UTC: 2028-05-08 23:59:59 UTC
- Subject
  - C: GB
  - ST: Greater Manchester
  - L: Salford
  - O: COMODO CA Limited
  - CN: COMODO RSA Code Signing CA
- #5
  - rsaEncryption: nil
  - A6:98:90:63:77:91:34:7F:8A:D1:DD:E9:67:31:11:EB:
    CC:1E:FD:31:1D:B3:B9:62:57:3F:93:BC:5B:E3:9F:1E:
    24:32:11:27:6B:BC:51:91:A7:CF:9E:9E:25:B3:5F:81:
    A8:18:0F:1D:1E:20:30:0E:FB:61:7B:86:09:B3:E3:FD:
    A2:68:9D:1C:2C:9D:BF:72:E3:E4:75:A0:E5:35:23:8E:
    C9:8A:EE:1A:0C:64:C7:D8:42:A1:7B:B5:52:03:4B:3A:
    B0:8E:23:4B:4B:63:E0:22:94:37:7B:D5:79:90:0A:14:
    18:51:2C:E6:FE:C1:12:F0:1C:3F:61:61:0A:8C:A2:DC:
    F6:C3:30:AA:CD:28:18:75:48:C1:79:5A:08:CD:BB:8C:
    55:8C:F7:D4:76:90:3A:33:46:50:73:98:5C:F4:85:4A:
    6B:0F:80:DD:5E:D6:BD:FD:A9:2F:C0:25:F5:F9:78:D7:
    8D:5F:10:C2:44:55:3C:90:3C:31:46:CB:70:AE:07:A9:
    0A:E3:AF:C1:01:6F:90:1A:23:E2:5F:38:DB:C6:08:5D:
    47:B3:83:41:F0:2E:00:37:14:B9:12:AA:79:92:52:CD:
    87:0F:7B:D8:62:29:A4:7E:30:BD:1B:B5:8C:72:B4:48:
    F2:E3:E8:21:F9:5E:4C:62:79:8B:02:06:9F:7F:D5:0B: 0x010001
- #6
  - authorityKeyIdentifier:
```
bb af 7e 02 3d fa a6 f1  3c 84 8e ad ee 38 98 ec  |..~.=...<....8..|
d9 32 32 d4                                       |.22.            |
```
  - subjectKeyIdentifier:
```
29 91 60 ff 8a 4d fa eb  f9 a6 6a b8 cf f9 e6 4b  |).`..M....j....K|
bd 49 ce 12                                       |.I..            |
```
  - keyUsage: true, 0x86
  - basicConstraints
    - true
    - true: 0
  - extendedKeyUsage: codeSigning
  - certificatePolicies: anyPolicy
  - crlDistributionPoints: http://crl.comodoca.com/COMODORSACertificationAuthority.crl
  - authorityInfoAccess
    - #0
      - caIssuers: http://crt.comodoca.com/COMODORSAAddTrustCA.crt
      - OCSP: http://ocsp.comodoca.com

RSA-SHA384:

02 3f 02 39 c3 ee f8 ca  3b 89 de 0c 6d 4d b1 f1  |.?.9....;...mM..|
4e 92 4f af c2 38 2c 04  cc c5 63 11 ab 09 63 af  |N.O..8,...c...c.|
ab a2 d7 02 3f cc 6f 19  c3 3d d6 1a 08 94 ff 25  |....?.o..=.....%|
d8 a9 88 a7 2b 10 1a e0  9b b1 07 22 1a 51 1c 3a  |....+......".Q.:|
d4 e1 e9 09 bf e6 24 74  af 1e 7b 16 31 6e 23 ef  |......$t..{.1n#.|
54 51 2d 52 02 e2 75 08  05 4c f1 b7 51 e1 51 00  |TQ-R..u..L..Q.Q.|
c6 87 f6 6c ee 10 44 76  57 6a f1 df 58 6b 21 aa  |...l..DvWj..Xk!.|
49 d4 7c 37 4e bd ff b6  75 54 40 18 36 57 67 11  |I.|7N...uT@.6Wg.|
cd 4f 02 e4 fe f3 da fc  75 17 db ec b7 f7 65 09  |.O......u.....e.|
23 49 1f 43 57 83 ea 7e  20 77 61 c8 4d f2 bb 65  |#I.CW..~ wa.M..e|
4d a8 f7 85 45 07 af 7a  69 27 65 90 29 40 8b df  |M...E..zi'e.)@..|
7b 3a 51 39 8c a8 1f 70  79 ad 6d 42 20 a2 cf 0c  |{:Q9...py.mB ...|
6c 03 8c 4c cd 73 07 94  e7 5a 8e 3a 04 ba a2 a1  |l..L.s...Z.:....|
7c 1f cb 63 3a 15 a7 d4  15 1b a7 52 47 32 a9 f4  ||..c:......RG2..|
bf 64 47 d1 aa 1f 53 4e  32 30 73 c2 6f b7 78 82  |.dG...SN20s.o.x.|
9d 5c ff 46 bb 6b 22 1d  88 0b f8 1b aa 34 a6 fc  |.\.F.k"......4..|
8c f5 dd 7f 65 8c 8c 31  57 31 d0 36 ec 47 a1 cf  |....e..1W1.6.G..|
cb 8b a8 ef 1c 18 58 c5  06 77 ca 4b 9b 51 af 4c  |......X..w.K.Q.L|
08 4a 7a 8f e2 a3 52 e2  8e 8e cc 26 e4 b2 d8 e5  |.Jz...R....&....|
38 c2 a8 ed c6 81 9c 35  6b a9 58 61 4a 0a 97 b4  |8......5k.XaJ...|
4b 42 b6 55 9d be 99 e7  70 6d 59 f8 6d 2a 0c 7f  |KB.U....pmY.m*..|
19 60 5f 0c 9a 88 6c 30  ac 52 09 90 16 1b ff 2b  |.`_...l0.R.....+|
9d db d0 20 ca 89 ea 28  7e 32 8e 19 df 7b 48 33  |... ...(~2...{H3|
1e d7 65 f8 ae c9 f8 83  14 93 76 7d 64 d0 8e ce  |..e.......v}d...|
be 35 7d ff 72 31 4d 9f  9e bd 1e 6c 2f a8 8f 0c  |.5}.r1M....l/...|
06 50 fb 8c 27 b3 76 c9  f4 e6 d7 c3 34 e2 8c 87  |.P..'.v.....4...|
21 86 61 fe bf 55 74 e1  21 77 03 0a 68 6c bb e4  |!.a..Ut.!w..hl..|
c9 a9 e6 cf 59 25 eb 7c  ec 45 0e 79 66 68 e8 22  |....Y%.|.E.yfh."|
cd b8 ef 98 85 4d 96 11  3c 09 8a d0 7f bc 28 28  |.....M..<.....((|
13 fb 6a ca 54 8d 92 5c  cd c2 65 98 06 9e ce 48  |..j.T..\..e....H|
5b d4 b5 37 93 46 41 7c  07 dd cf fa 43 ef ba 67  |[..7.FA|....C..g|
61 ff 7d 49 e0 bb 30 7d  5c 80 e3 e6 16 39 4b a7  |a.}I..0}\....9K.|

Signer

1
unnamed
- #0
  - C: GB
  - ST: Greater Manchester
  - L: Salford
  - O: COMODO CA Limited
  - CN: COMODO RSA Code Signing CA
- 52:9E:3F:9F:CF:7D:58:D5:20:D6:07:AB:74:39:50:02
SHA256: nil

1.3.6.1.4.1.311.2.1.12
- nil
1.2.840.113549.1.9.25.4: 1
contentType: 1.3.6.1.4.1.311.2.1.4
1.3.6.1.4.1.311.2.1.11: msCodeInd

messageDigest:

01 a5 02 d3 98 ac 5d 02  14 19 ed 5d e9 96 80 9e  |......]....]....|
b4 dd 4c 96 94 1d c6 43  b5 2b 40 12 c5 86 70 f7  |..L....C.+@...p.|

rsaEncryption:

94 bd a3 fb d4 9e 77 9c  75 20 aa 17 03 c1 aa 20  |......w.u ..... |
66 6d 77 7c a4 fe dc c5  49 8c c0 34 cd 9c a7 c3  |fmw|....I..4....|
e6 c8 0d 44 06 37 87 e5  ca 72 3d 43 fc 13 bb 7e  |...D.7...r=C...~|
39 f5 bd a3 66 b4 4c 53  d6 29 e5 76 dc c9 01 3d  |9...f.LS.).v...=|
0c db d8 0c 28 7b 17 cf  5f 92 d0 d7 32 6d 57 fa  |....({.._...2mW.|
fc 4d f8 0a 07 29 ce 75  9a 4e d0 25 03 3d 24 9d  |.M...).u.N.%.=$.|
98 6a 57 3c 93 24 77 35  87 3a 6a 14 f6 5a cc b1  |.jW<.$w5.:j..Z..|
88 5a 77 d2 72 22 50 09  9a d8 fd 5d 67 d8 df c8  |.Zw.r"P....]g...|
11 b4 3d a3 3f d2 f6 22  c0 3e bd 1b 22 60 f9 2b  |..=.?..".>.."`.+|
38 41 59 af 77 0e 69 9f  39 f8 9d ad e3 fa ab 32  |8AY.w.i.9......2|
8d e1 97 7f 05 02 1b 8a  9b f0 90 7c 19 19 ca c5  |...........|....|
52 f6 1b 38 5c 92 14 09  aa 9d 1b 31 ca 8f 5e 9e  |R..8\......1..^.|
3b cd 75 ed 7c 92 d4 d0  30 65 64 a4 d7 e6 41 97  |;.u.|...0ed...A.|
7d ef c8 55 0e ad e8 22  0a 1e 29 63 d2 bd 50 6c  |}..U..."..)c..Pl|
ed 05 27 52 62 1f 26 3e  cc cd d9 b5 d2 b5 07 49  |..'Rb.&>.......I|
11 98 fa 70 bf 67 aa 08  ec d0 6f 20 19 46 29 b5  |...p.g....o .F).|

1.3.6.1.4.1.311.3.3.1
- pkcs7-signedData
  - 3
    - SHA256
    - id-smime-ct-TSTInfo
      - 1
        2.16.840.1.113733.1.7.23.3
        SHA256
        78 d7 a1 f9 ee aa 90 88 9b 0a 3c a3 72 d8 e6 b7 |x.........<.r...| 54 57 01 ee 93 b1 c2 99 98 0f 61 b0 0c 62 b4 4a |TW........a..b.J|
        DA:47:D3:25:9C:1C:59:77:BE:A3:BA:F4:E5:61:EC:26:
        76:3A:49:B2
        2019-12-05 07:37:51 UTC
        0x1E
        #5
        C: US
        O: Symantec Corporation
        OU: Symantec Trust Network
        CN: Symantec SHA256 TimeStamping Signer - G3
    - Certificates
      - Certificate #0
        2
        7B:05:B1:D4:49:68:51:44:F7:C9:89:D2:9C:19:9D:12
        RSA-SHA256: nil
        Issuer
        C: US
        O: VeriSign, Inc.
        OU: VeriSign Trust Network
        OU: (c) 2008 VeriSign, Inc. - For authorized use only
        CN: VeriSign Universal Root Certification Authority
        2016-01-12 00:00:00 UTC: 2031-01-11 23:59:59 UTC
        Subject
        C: US
        O: Symantec Corporation
        OU: Symantec Trust Network
        CN: Symantec SHA256 TimeStamping CA
        #5
        rsaEncryption: nil
        BB:59:9D:59:55:4F:9D:8C:72:5D:1A:81:A2:EB:55:F3:
        B0:01:AD:3C:71:AC:32:8F:05:6B:86:9A:27:00:32:97:
        6A:4D:C9:64:14:4B:29:BB:C2:D9:29:B9:2E:EC:63:B3:
        E1:CF:3F:0B:56:90:F8:62:1B:7E:EB:A6:07:E2:DE:7F:
        5E:6D:40:38:D4:91:06:E7:41:7C:79:1C:CB:CB:AD:1B:
        BF:D8:95:91:F3:F0:EE:6C:F8:AD:96:39:2E:7F:C1:27:
        B8:78:39:C5:84:A5:ED:ED:AF:87:8E:CE:8D:C7:6D:EA:
        D2:98:B5:3A:1F:1E:39:9D:C3:F4:9A:A8:F4:84:E1:C4:
        D1:7C:71:C6:06:29:B4:3F:E4:83:0D:26:C3:7B:08:3E:
        4D:F9:0A:B7:33:49:FF:CA:3B:D4:F5:B2:9B:4B:E1:88:
        99:1A:F5:C0:E9:33:14:D6:DF:C7:80:DB:91:EE:FE:BC:
        92:57:72:77:F4:CD:A8:CC:FE:09:F5:93:37:BE:95:88:
        6A:C5:DC:F4:B1:4B:D4:CE:E8:09:91:5F:B5:84:79:35:
        8A:78:AC:19:32:8F:23:C1:32:41:1B:59:0E:A9:3E:B1:
        CC:F9:D6:2B:EF:B7:D8:E4:D5:1D:6D:11:3A:92:F6:93:
        C9:9C:E3:48:EE:BB:53:0E:D4:36:97:86:78:C5:A1:37: 0x010001
        #6
        keyUsage: true, 6
        basicConstraints
        true
        true: 0
        certificatePolicies
        2.16.840.1.113733.1.7.23.3
        #0
        id-qt-cps: https://d.symcb.com/cps
        id-qt-unotice: https://d.symcb.com/rpa
        authorityInfoAccess
        OCSP: http://s.symcd.com
        crlDistributionPoints: http://s.symcb.com/universal-root.crl
        extendedKeyUsage: timeStamping
        subjectAltName
        CN: TimeStamp-2048-3
        subjectKeyIdentifier:
        af 63 d6 ca a3 4e 85 72 e0 a7 bc 41 f3 29 a2 38 |.c...N.r...A.).8| 7f 80 75 62 |..ub |
        authorityKeyIdentifier:
        b6 77 fa 69 48 47 9f 53 12 d5 c2 ea 07 32 76 07 |.w.iHG.S.....2v.| d1 97 07 19 |.... |
        RSA-SHA256:
        75 ea b0 2d d5 34 19 5c 32 45 fe 0e e1 d4 4f a6 |u..-.4.\2E....O.| 78 c1 6f d7 ea dd dc 4f f3 a1 c8 81 88 f7 a7 8f |x.o....O........| 15 e6 40 29 ad e6 5d f4 a2 d9 56 64 84 71 30 2a |..@)..]...Vd.q0*| dd 1e 61 17 66 20 56 06 98 19 8d 5d 71 f2 f8 97 |..a.f V....]q...| bc 09 fd 1c 91 47 c9 e2 e8 8d 03 fb cc 90 2f d6 |.....G......../.| 0a 6c 4e 33 ec d6 b4 93 c8 4c 90 63 48 39 40 21 |.lN3.....L.cH9@!| c4 dd d6 6e 89 98 3c b5 98 97 e8 a9 06 b7 09 c9 |...n..<.........| 8f 53 57 41 90 2f e1 1e 4d 4e dc ca 10 78 6c 42 |.SWA./..MN...xlB| 6e f0 b6 c5 f8 61 5c 52 f5 4e f6 6b 8d f7 4a 7a |n....a\R.N.k..Jz| be f3 cd fd 03 d7 d9 f6 03 a8 0f e3 53 f7 0a 75 |............S..u| ec c6 75 2e aa 66 85 04 99 b7 f8 06 57 e1 c6 0e |..u..f......W...| f6 e8 af da ec 9b 18 1f aa b9 e3 3a 00 bf ce 8a |...........:....| 94 cb 01 db 9e c7 38 bb 0f 52 ab d1 e3 94 03 60 |......8..R.....`| 0a 4d a0 fe 27 6d 14 32 fc 3f 97 40 e1 bf 99 89 |.M..'m.2.?.@....| db e4 39 14 bd da e4 d3 c3 ea 2b 5a b3 95 58 55 |..9.......+Z..XU| 04 7d c7 9a ec 23 03 8d 85 2a d2 ff ae a9 61 81 |.}...#...*....a.|
      - Certificate #1
        2
        7B:D4:E5:AF:BA:CC:07:3F:A1:01:23:04:22:41:4D:12
        RSA-SHA256: nil
        Issuer
        C: US
        O: Symantec Corporation
        OU: Symantec Trust Network
        CN: Symantec SHA256 TimeStamping CA
        2017-12-23 00:00:00 UTC: 2029-03-22 23:59:59 UTC
        Subject
        C: US
        O: Symantec Corporation
        OU: Symantec Trust Network
        CN: Symantec SHA256 TimeStamping Signer - G3
        #5
        rsaEncryption: nil
        AF:0E:8A:AA:F8:DC:BF:69:7B:54:17:71:47:09:BD:8D:
        3C:81:F8:74:15:77:67:90:9C:FD:DE:4E:02:9E:4B:76:
        F6:E5:36:3E:65:D5:24:20:6D:30:F9:DD:1D:83:E9:3F:
        27:4A:33:4E:6D:16:8A:E4:8D:40:8D:22:AA:BE:A7:0B:
        1B:D2:07:B6:3C:B5:1A:24:28:F8:1B:72:51:3D:C8:09:
        88:26:08:3A:F9:FA:43:23:75:47:70:0C:B3:5F:5B:8F:
        08:1D:72:48:57:65:4D:AF:02:3C:40:F7:F4:DD:32:38:
        93:3F:E5:2C:A6:F3:59:23:CB:80:DE:13:4D:F9:10:C9:
        AA:0A:18:6C:55:61:57:D1:F1:02:2C:C4:B5:AB:F2:6C:
        23:D2:9F:0D:0F:19:6C:AD:85:62:69:FD:4E:85:C1:8A:
        52:31:AB:5B:D8:C9:74:52:E3:57:6C:22:BF:55:7F:6F:
        CA:06:AB:3F:4A:B7:22:76:65:EC:EC:36:F2:96:95:81:
        26:2C:FD:BB:98:AA:01:38:D3:AF:25:40:9B:09:53:F0:
        29:57:85:58:5E:EA:85:48:41:21:87:E5:DE:B4:D3:26:
        B2:7B:40:53:58:79:8E:52:31:06:4D:94:03:45:C4:CE:
        3C:03:EC:B7:00:F2:3A:22:C5:B4:6F:E5:EF:B0:8A:9B: 0x010001
        X509v3 extensions
        basicConstraints
        true
        nil
        certificatePolicies
        2.16.840.1.113733.1.7.23.3
        #0
        id-qt-cps: https://d.symcb.com/cps
        id-qt-unotice: https://d.symcb.com/rpa
        crlDistributionPoints: http://ts-crl.ws.symantec.com/sha256-tss-ca.crl
        extendedKeyUsage: true, timeStamping
        keyUsage: true, 0x80
        authorityInfoAccess
        #0
        OCSP: http://ts-ocsp.ws.symantec.com
        caIssuers: http://ts-aia.ws.symantec.com/sha256-tss-ca.cer
        subjectAltName
        CN: TimeStamp-2048-6
        subjectKeyIdentifier:
        a5 13 01 a9 9f 85 cc 1b 6e 16 1e 5f 3b 31 aa 79 |........n.._;1.y| 36 00 7b 1d |6.{. |
        authorityKeyIdentifier:
        af 63 d6 ca a3 4e 85 72 e0 a7 bc 41 f3 29 a2 38 |.c...N.r...A.).8| 7f 80 75 62 |..ub |
        RSA-SHA256:
        46 9e af f0 b8 a2 5f a2 99 48 cf a8 27 4b 21 cd |F....._..H..'K!.| b2 b9 a6 72 70 63 2f e3 55 29 7b 39 46 4e e7 7e |...rpc/.U){9FN.~| 65 06 58 8b bc 57 8a 92 0d 08 d8 10 ba 36 24 fa |e.X..W.......6$.| 0a 7b fb 3b d3 62 bf 4a 94 15 e6 82 db 8a 54 6d |.{.;.b.J......Tm| ff 28 fe 67 cf 71 3f e6 33 09 d9 a2 59 10 f4 1e |.(.g.q?.3...Y...| 4a fe 65 cc de d4 6b e3 52 29 75 00 4a 2b a5 cc |J.e...k.R)u.J+..| cb 9b e8 a9 4d f7 b4 17 59 92 41 c3 b7 3f 86 e6 |....M...Y.A..?..| f6 c0 7f 44 3c 46 5c 17 5a e3 a4 3b d5 69 26 d5 |...D.z.".t..G....| 91 25 b2 1b 96 e9 85 08 e8 dd ea 74 60 6e 60 a5 |.%.........t`n`.| 56 7a 0d c8 44 58 dc e6 f9 48 14 9e e5 bf de 00 |Vz..DX...H......| bd 77 b1 98 14 72 14 24 df c7 11 2c 1f 00 3f c3 |.w...r.$...,..?.| 4b 14 c6 67 1c cc 1e 06 a3 90 5f 5c 54 8b 3e e3 |K..g......_\T.>.| 33 5b 82 0f c5 b7 86 02 4e 71 9f e9 66 45 3f 76 |3[......Nq..fE?v|
    - 1
      - unnamed
        #0
        C: US
        O: Symantec Corporation
        OU: Symantec Trust Network
        CN: Symantec SHA256 TimeStamping CA
        7B:D4:E5:AF:BA:CC:07:3F:A1:01:23:04:22:41:4D:12
      - SHA256
      - #2
        contentType: id-smime-ct-TSTInfo
        signingTime: 2019-12-05 07:37:51 UTC
        messageDigest:
        24 38 12 3e 95 6b 16 6e 27 62 46 a4 e7 16 ac f9 |$8.>.k.n'bF.....| a0 fc fd 58 52 d5 d3 fa f1 5f b1 92 e7 17 5b ca |...XR...._....[.|
        id-smime-aa-signingCertificateV2:
        c4 74 ce 76 00 7d 02 39 4e 0d a5 e4 de 7c 14 c6 |.t.v.}.9N....|..| 80 f9 e2 82 01 3c fe f6 53 ef 5d b7 1f df 61 f8 |.....<..S.]...a.|
      - rsaEncryption
      - 1a 63 09 49 90 d8 24 f4 9c 86 32 80 7a 18 e4 9d |.c.I..$...2.z...| 93 1c b6 fa ef 66 b1 e3 18 7c 3d 7d 35 6a 90 f0 |.....f...|=}5j..| 25 ee 2a ad fb ee 85 81 85 bb bd 0e f1 75 8d f0 |%.*..........u..| ac 81 d3 f5 05 1e 31 65 7a 04 1b b9 65 c8 0e 40 |......1ez...e..@| 12 13 ed a6 fc 9c 66 f5 8c ac 47 4f 3c 4a 6b 0a |......f...GO

show previews

offset	size	type	comment
0	370688	EXE	12/05/2019 07:36:46	#
15c1	15	HTM		#
5a800	13528	PKCS7	Authenticode Signature	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] can't find file_offset of VA 0x66b50

UnRAR.exe- Command line RAR

MZ Header

Rich Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

TLS

StringTable 040904E4

VS_FIXEDFILEINFO

Signers (1)

Certificates (4)

UnRAR.exe
- Command line RAR