MZ Header

Rich Header

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 000004b0

VS_FIXEDFILEINFO

Signers (1)

issuer: /C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa (c)10/CN=VeriSign Class 3 Code Signing 2010 CA
serial: 741D340793306ACA84FAB3ABBB1567CE

Certificates (4)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA
        Validity
            Not Before: May  1 00:00:00 2012 GMT
            Not After : Dec 31 23:59:59 2012 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer - G3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (1024 bit)
                Modulus:
                    00:a9:59:66:74:da:3d:8a:7d:7a:d8:fc:f5:80:44:
                    7b:fe:47:6a:14:55:4e:50:47:0b:ec:d3:ed:ce:f6:
                    38:f7:4f:69:b9:b1:f0:b6:78:82:0a:8c:76:16:67:
                    e2:02:ad:b7:0d:a5:8a:f6:03:fc:66:d3:fc:08:2d:
                    cc:b5:73:59:7b:89:dc:33:6e:66:5a:5e:52:37:b4:
                    62:d1:92:59:35:14:8b:45:ac:59:b2:4d:24:a2:98:
                    94:68:42:72:9f:3a:68:e2:6b:8b:9e:22:2d:f4:98:
                    4e:9a:c6:af:b3:e4:a0:ab:3c:28:bf:23:e1:d7:72:
                    a4:f2:10:53:67:ae:77:af:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.verisign.com/tss-ca.crl

            X509v3 Extended Key Usage: critical
                Time Stamping
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Subject Alternative Name: 
                DirName:/CN=TSA1-3
            X509v3 Subject Key Identifier: 
                B4:B7:F1:89:49:26:60:E7:65:EA:73:AE:DC:D3:38:CD:BF:57:92:6F
    Signature Algorithm: sha1WithRSAEncryption
         1e:98:aa:27:b7:78:b5:08:b5:c9:72:6d:b7:df:c0:0e:98:a6:
         35:c4:88:c9:d2:f6:6d:f1:4b:1a:fb:d5:f9:2d:99:00:9e:d1:
         e7:9b:8b:e1:3f:bd:39:80:0c:66:cd:07:bc:5c:98:54:a6:94:
         ba:10:d1:4e:8b:ab:f5:6f:65:cc:67:09:a2:80:7c:52:e8:0e:
         03:d6:6b:7a:c6:05:18:ec:c8:ac:42:7c:07:2c:a7:3d:08:66:
         dc:00:ed:fd:94:1d:73:f2:72:98:93:b1:11:d6:8f:ef:8e:ea:
         ac:f4:96:51:0c:d0:8d:df:31:52:4f:5e:af:7d:a7:4a:75:e6:
         4e:ce:2b:9f:29:2b:e7:cf:5d:9f:03:7e:6e:27:7b:23:ad:62:
         29:66:af:92:e8:2c:ce:bd:9c:7f:dc:cd:17:3c:43:c2:09:3f:
         75:45:c7:9e:e4:d7:60:7f:97:c6:e4:aa:c7:69:f5:fc:cd:74:
         ac:2c:b0:48:c1:50:4e:70:56:1e:b5:35:d3:8e:be:b1:ed:ac:
         bd:fe:0c:ec:85:7d:d5:bb:85:66:44:19:5d:9f:93:eb:82:ba:
         63:9e:d3:7c:61:ff:c8:1b:d9:23:58:7f:30:a3:66:a1:39:26:
         5e:92:c3:3c:cb:37:32:fa:f5:a3:8d:dc:d5:b0:a3:e9:25:36:
         55:d7:81:fa

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
        Validity
            Not Before: Dec  4 00:00:00 2003 GMT
            Not After : Dec  3 23:59:59 2013 GMT
        Subject: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ca:b2:a4:cc:cd:20:af:0a:7d:89:ac:87:75:
                    f0:b4:4e:f1:df:c1:0f:bf:67:61:bd:a3:64:1c:da:
                    bb:f9:ca:33:ab:84:30:89:58:7e:8c:db:6b:dd:36:
                    9e:0f:bf:d1:ec:78:f2:77:a6:7e:6f:3c:bf:93:af:
                    0d:ba:68:f4:6c:94:ca:bd:52:2d:ab:48:3d:f5:b6:
                    d5:5d:5f:1b:02:9f:fa:2f:6b:1e:a4:f7:a3:9a:a6:
                    1a:c8:02:e1:7f:4c:52:e3:0e:60:ec:40:1c:7e:b9:
                    0d:de:3f:c7:b4:df:87:bd:5f:7a:6a:31:2e:03:99:
                    81:13:a8:47:20:ce:31:73:0d:57:2d:cd:78:34:33:
                    95:12:99:12:b9:de:68:2f:aa:e6:e3:c2:8a:8c:2a:
                    c3:8b:21:87:66:bd:83:58:57:6f:75:bf:3c:aa:26:
                    87:5d:ca:10:15:3c:9f:84:ea:54:c1:0a:6e:c4:fe:
                    c5:4a:dd:b9:07:11:97:22:7c:db:3e:27:d1:1e:78:
                    ec:9f:31:c9:f1:e6:22:19:db:c4:b3:47:43:9a:1a:
                    5f:a0:1e:90:e4:5e:f5:ee:7c:f1:7d:ab:62:01:8f:
                    f5:4d:0b:de:d0:22:56:a8:95:cd:ae:88:76:ae:ee:
                    ba:0d:f3:e4:4d:d9:a0:fb:68:a0:ae:14:3b:b3:87:
                    c1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com

            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.verisign.com/ThawteTimestampingCA.crl

            X509v3 Extended Key Usage: 
                Time Stamping
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=TSA2048-1-53
    Signature Algorithm: sha1WithRSAEncryption
         4a:6b:f9:ea:58:c2:44:1c:31:89:79:99:2b:96:bf:82:ac:01:
         d6:1c:4c:cd:b0:8a:58:6e:df:08:29:a3:5e:c8:ca:93:13:e7:
         04:52:0d:ef:47:27:2f:00:38:b0:e4:c9:93:4e:9a:d4:22:62:
         15:f7:3f:37:21:4f:70:31:80:f1:8b:38:87:b3:e8:e8:97:00:
         fe:cf:55:96:4e:24:d2:a9:27:4e:7a:ae:b7:61:41:f3:2a:ce:
         e7:c9:d9:5e:dd:bb:2b:85:3e:b5:9d:b5:d9:e1:57:ff:be:b4:
         c5:7e:f5:cf:0c:9e:f0:97:fe:2b:d3:3b:52:1b:1b:38:27:f7:
         3f:4a

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:1d:34:07:93:30:6a:ca:84:fa:b3:ab:bb:15:67:ce
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA
        Validity
            Not Before: Jul  6 00:00:00 2011 GMT
            Not After : Aug 22 23:59:59 2013 GMT
        Subject: C=GB, ST=London, L=London, O=Piriform Ltd, OU=Digital ID Class 3 - Microsoft Software Validation v2, CN=Piriform Ltd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:43:68:52:51:19:f1:0a:e7:79:76:9f:f5:50:
                    6b:fa:df:6f:bf:c3:02:d9:05:e4:c5:fd:d0:2d:34:
                    7a:04:d5:c2:d8:4d:37:45:a2:72:a7:f4:52:9f:96:
                    65:a7:d3:89:7e:e4:25:7c:66:d3:2f:07:90:7d:f4:
                    f8:de:47:af:ee:ed:b5:99:99:11:8b:8d:74:7f:d2:
                    ca:df:6e:59:7c:cd:b3:2b:4b:c1:86:a5:fc:9a:31:
                    85:8d:c1:ff:95:08:03:92:1d:ad:d9:21:e0:49:69:
                    0b:93:65:2f:f5:80:11:46:b5:30:b9:ec:68:d5:4a:
                    68:11:03:52:6d:6d:71:06:97:47:19:25:74:4e:3b:
                    ec:f2:a5:5c:7e:ad:8a:b5:d1:9d:19:93:10:41:cb:
                    db:2e:88:70:03:18:db:65:8b:99:29:1d:5e:09:48:
                    9f:2d:7a:0e:c6:fc:56:88:b3:c2:d8:05:b8:e5:5c:
                    bb:f9:9c:72:94:d0:00:03:25:60:1c:90:00:54:ca:
                    24:a5:87:f5:78:fd:a1:c6:dc:c3:fa:ef:90:29:68:
                    ac:67:e0:39:b9:67:b9:b2:25:af:4c:66:e1:5c:e7:
                    1f:b1:fb:bd:af:db:d3:77:bf:2e:21:ce:f5:66:46:
                    5b:cf:fe:f3:4c:44:ea:48:51:65:26:6a:bd:99:85:
                    e1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://csc3-2010-crl.verisign.com/CSC3-2010.crl

            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/rpa

            X509v3 Extended Key Usage: 
                Code Signing
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com
                CA Issuers - URI:http://csc3-2010-aia.verisign.com/CSC3-2010.cer

            X509v3 Authority Key Identifier: 
                keyid:CF:99:A9:EA:7B:26:F4:4B:C9:8E:8F:D7:F0:05:26:EF:E3:D2:A7:9D

            Netscape Cert Type: 
                Object Signing
            1.3.6.1.4.1.311.2.1.27: 
                0.......
    Signature Algorithm: sha1WithRSAEncryption
         c2:7c:65:46:69:02:3e:27:9f:df:2b:e8:71:55:f4:21:b3:66:
         de:44:39:04:5d:8c:c1:2c:fd:b3:99:02:ca:d0:a1:c5:9b:29:
         69:42:7a:93:ff:6c:de:8a:92:06:cf:ce:c5:39:dd:ce:c9:ed:
         51:af:43:f4:ae:25:45:58:48:98:1e:e4:89:ec:82:c7:7f:7c:
         35:de:d3:17:07:59:a7:51:9c:40:03:8b:8d:a6:e9:b2:8f:1a:
         6b:6b:74:1c:cd:63:37:3b:30:6c:99:b6:aa:9c:b1:1d:00:68:
         3a:3c:b5:71:f8:f4:4e:dc:2f:a9:be:c0:51:00:37:d7:7f:4e:
         c4:91:44:34:36:93:0c:85:f0:52:d4:92:d7:91:2a:7a:68:74:
         cb:b4:b6:64:dd:0e:89:67:44:3f:32:0a:fb:d7:b8:c0:b1:11:
         e7:36:e8:32:21:8a:48:b5:e9:54:7f:94:c2:21:6b:3f:c6:71:
         c8:cf:c3:db:a1:3f:d1:fe:06:cc:fc:74:36:e0:38:da:a4:94:
         99:e0:73:9d:15:11:32:7d:f1:2b:96:ff:cd:47:5b:2f:9a:6b:
         a6:e2:21:7a:a8:bb:4a:b5:29:a0:3f:12:be:91:4c:ca:4e:33:
         13:f3:77:4b:84:9e:f1:68:4e:6f:f1:e4:4b:72:8d:aa:c6:db:
         f3:82:e2:83

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
        Validity
            Not Before: Feb  8 00:00:00 2010 GMT
            Not After : Feb  7 23:59:59 2020 GMT
        Subject: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:23:4b:5e:a5:d7:8a:bb:32:e9:d4:57:f7:ef:
                    e4:c7:26:7e:ad:19:98:fe:a8:9d:7d:94:f6:36:6b:
                    10:d7:75:81:30:7f:04:68:7f:cb:2b:75:1e:cd:1d:
                    08:8c:df:69:94:a7:37:a3:9c:7b:80:e0:99:e1:ee:
                    37:4d:5f:ce:3b:14:ee:86:d4:d0:f5:27:35:bc:25:
                    0b:38:a7:8c:63:9d:17:a3:08:a5:ab:b0:fb:cd:6a:
                    62:82:4c:d5:21:da:1b:d9:f1:e3:84:3b:8a:2a:4f:
                    85:5b:90:01:4f:c9:a7:76:10:7f:27:03:7c:be:ae:
                    7e:7d:c1:dd:f9:05:bc:1b:48:9c:69:e7:c0:a4:3c:
                    3c:41:00:3e:df:96:e5:c5:e4:94:71:d6:55:01:c7:
                    00:26:4a:40:3c:b5:a1:26:a9:0c:a7:6d:80:8e:90:
                    25:7b:cf:bf:3f:1c:eb:2f:96:fa:e5:87:77:c6:b5:
                    56:b2:7a:3b:54:30:53:1b:df:62:34:ff:1e:d1:f4:
                    5a:93:28:85:e5:4c:17:4e:7e:5b:fd:a4:93:99:7f:
                    df:cd:ef:a4:75:ef:ef:15:f6:47:e7:f8:19:72:d8:
                    2e:34:1a:a6:b4:a7:4c:7e:bd:bb:4f:0c:3d:57:f1:
                    30:d6:a6:36:8e:d6:80:76:d7:19:2e:a5:cd:7e:34:
                    2d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/cps
                  User Notice:
                    Explicit Text: https://www.verisign.com/rpa

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            1.3.6.1.5.5.7.1.12: 
                0_.].[0Y0W0U..image/gif0!0.0...+..............k...j.H.,{..0%.#http://logo.verisign.com/vslogo.gif
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.verisign.com/pca3-g5.crl

            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com

            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, Code Signing
            X509v3 Subject Alternative Name: 
                DirName:/CN=VeriSignMPKI-2-8
            X509v3 Subject Key Identifier: 
                CF:99:A9:EA:7B:26:F4:4B:C9:8E:8F:D7:F0:05:26:EF:E3:D2:A7:9D
            X509v3 Authority Key Identifier: 
                keyid:7F:D3:65:A7:C2:DD:EC:BB:F0:30:09:F3:43:39:FA:02:AF:33:31:33

    Signature Algorithm: sha1WithRSAEncryption
         56:22:e6:34:a4:c4:61:cb:48:b9:01:ad:56:a8:64:0f:d9:8c:
         91:c4:bb:cc:0c:e5:ad:7a:a0:22:7f:df:47:38:4a:2d:6c:d1:
         7f:71:1a:7c:ec:70:a9:b1:f0:4f:e4:0f:0c:53:fa:15:5e:fe:
         74:98:49:24:85:81:26:1c:91:14:47:b0:4c:63:8c:bb:a1:34:
         d4:c6:45:e8:0d:85:26:73:03:d0:a9:8c:64:6d:dc:71:92:e6:
         45:05:60:15:59:51:39:fc:58:14:6b:fe:d4:a4:ed:79:6b:08:
         0c:41:72:e7:37:22:06:09:be:23:e9:3f:44:9a:1e:e9:61:9d:
         cc:b1:90:5c:fc:3d:d2:8d:ac:42:3d:65:36:d4:b4:3d:40:28:
         8f:9b:10:cf:23:26:cc:4b:20:cb:90:1f:5d:8c:4c:34:ca:3c:
         d8:e5:37:d6:6f:a5:20:bd:34:eb:26:d9:ae:0d:e7:c5:9a:f7:
         a1:b4:21:91:33:6f:86:e8:58:bb:25:7c:74:0e:58:fe:75:1b:
         63:3f:ce:31:7c:9b:8f:1b:96:9e:c5:53:76:84:5b:9c:ad:91:
         fa:ac:ed:93:ba:5d:c8:21:53:c2:82:53:63:af:12:0d:50:87:
         11:1b:3d:54:52:96:8a:2c:9c:3d:92:1a:08:9a:05:2e:c7:93:
         a5:48:91:d3
pkcs7-signedData
  • 1
    • SHA1: nil
    • 1.3.6.1.4.1.311.2.1.4
      • #0
        • 1.3.6.1.4.1.311.2.1.15
          • :
            00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
            00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |
        • SHA1
          • 94 b0 9e 16 06 21 2a f9  86 85 40 7c bf 3d df 4d  |.....!*...@|.=.M|
            41 bf 65 f4                                       |A.e.            |
    • Certificates
      • Certificate #0
        • 2
          • 79:A2:A5:85:F9:D1:15:42:13:D9:B8:3E:F6:B6:8D:ED
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • O: VeriSign, Inc.
            • CN: VeriSign Time Stamping Services CA
          • 2012-05-01 00:00:00 UTC: 2012-12-31 23:59:59 UTC
          • Subject
            • C: US
            • O: Symantec Corporation
            • CN: Symantec Time Stamping Services Signer - G3
          • #5
            • rsaEncryption: nil
            • A9:59:66:74:DA:3D:8A:7D:7A:D8:FC:F5:80:44:7B:FE:
              47:6A:14:55:4E:50:47:0B:EC:D3:ED:CE:F6:38:F7:4F:
              69:B9:B1:F0:B6:78:82:0A:8C:76:16:67:E2:02:AD:B7:
              0D:A5:8A:F6:03:FC:66:D3:FC:08:2D:CC:B5:73:59:7B:
              89:DC:33:6E:66:5A:5E:52:37:B4:62:D1:92:59:35:14:
              8B:45:AC:59:B2:4D:24:A2:98:94:68:42:72:9F:3A:68:
              E2:6B:8B:9E:22:2D:F4:98:4E:9A:C6:AF:B3:E4:A0:AB:
              3C:28:BF:23:E1:D7:72:A4:F2:10:53:67:AE:77:AF:51
              : 0x010001
          • X509v3 extensions
            • basicConstraints
              • true
              • nil
            • crlDistributionPoints: http://crl.verisign.com/tss-ca.crl
            • extendedKeyUsage: true, timeStamping
            • authorityInfoAccess
              • OCSP: http://ocsp.verisign.com
            • keyUsage: true, 0x80
            • subjectAltName
              • CN: TSA1-3
            • subjectKeyIdentifier:
              b4 b7 f1 89 49 26 60 e7  65 ea 73 ae dc d3 38 cd  |....I&`.e.s...8.|
              bf 57 92 6f                                       |.W.o            |
        • RSA-SHA1:
          1e 98 aa 27 b7 78 b5 08  b5 c9 72 6d b7 df c0 0e  |...'.x....rm....|
          98 a6 35 c4 88 c9 d2 f6  6d f1 4b 1a fb d5 f9 2d  |..5.....m.K....-|
          99 00 9e d1 e7 9b 8b e1  3f bd 39 80 0c 66 cd 07  |........?.9..f..|
          bc 5c 98 54 a6 94 ba 10  d1 4e 8b ab f5 6f 65 cc  |.\.T.....N...oe.|
          67 09 a2 80 7c 52 e8 0e  03 d6 6b 7a c6 05 18 ec  |g...|R....kz....|
          c8 ac 42 7c 07 2c a7 3d  08 66 dc 00 ed fd 94 1d  |..B|.,.=.f......|
          73 f2 72 98 93 b1 11 d6  8f ef 8e ea ac f4 96 51  |s.r............Q|
          0c d0 8d df 31 52 4f 5e  af 7d a7 4a 75 e6 4e ce  |....1RO^.}.Ju.N.|
          2b 9f 29 2b e7 cf 5d 9f  03 7e 6e 27 7b 23 ad 62  |+.)+..]..~n'{#.b|
          29 66 af 92 e8 2c ce bd  9c 7f dc cd 17 3c 43 c2  |)f...,.......
      • Certificate #1
        • 2
          • 47:BF:19:95:DF:8D:52:46:43:F7:DB:6D:48:0D:31:A4
          • RSA-SHA1: nil
          • Issuer
            • C: ZA
            • ST: Western Cape
            • L: Durbanville
            • O: Thawte
            • OU: Thawte Certification
            • CN: Thawte Timestamping CA
          • 2003-12-04 00:00:00 UTC: 2013-12-03 23:59:59 UTC
          • Subject
            • C: US
            • O: VeriSign, Inc.
            • CN: VeriSign Time Stamping Services CA
          • #5
            • rsaEncryption: nil
            • A9:CA:B2:A4:CC:CD:20:AF:0A:7D:89:AC:87:75:F0:B4:
              4E:F1:DF:C1:0F:BF:67:61:BD:A3:64:1C:DA:BB:F9:CA:
              33:AB:84:30:89:58:7E:8C:DB:6B:DD:36:9E:0F:BF:D1:
              EC:78:F2:77:A6:7E:6F:3C:BF:93:AF:0D:BA:68:F4:6C:
              94:CA:BD:52:2D:AB:48:3D:F5:B6:D5:5D:5F:1B:02:9F:
              FA:2F:6B:1E:A4:F7:A3:9A:A6:1A:C8:02:E1:7F:4C:52:
              E3:0E:60:EC:40:1C:7E:B9:0D:DE:3F:C7:B4:DF:87:BD:
              5F:7A:6A:31:2E:03:99:81:13:A8:47:20:CE:31:73:0D:
              57:2D:CD:78:34:33:95:12:99:12:B9:DE:68:2F:AA:E6:
              E3:C2:8A:8C:2A:C3:8B:21:87:66:BD:83:58:57:6F:75:
              BF:3C:AA:26:87:5D:CA:10:15:3C:9F:84:EA:54:C1:0A:
              6E:C4:FE:C5:4A:DD:B9:07:11:97:22:7C:DB:3E:27:D1:
              1E:78:EC:9F:31:C9:F1:E6:22:19:DB:C4:B3:47:43:9A:
              1A:5F:A0:1E:90:E4:5E:F5:EE:7C:F1:7D:AB:62:01:8F:
              F5:4D:0B:DE:D0:22:56:A8:95:CD:AE:88:76:AE:EE:BA:
              0D:F3:E4:4D:D9:A0:FB:68:A0:AE:14:3B:B3:87:C1:BB
              : 0x010001
          • X509v3 extensions
            • authorityInfoAccess
              • OCSP: http://ocsp.verisign.com
            • basicConstraints
              • true
              • true: 0
            • crlDistributionPoints: http://crl.verisign.com/ThawteTimestampingCA.crl
            • extendedKeyUsage: timeStamping
            • keyUsage: true, 6
            • subjectAltName
              • CN: TSA2048-1-53
        • RSA-SHA1:
          4a 6b f9 ea 58 c2 44 1c  31 89 79 99 2b 96 bf 82  |Jk..X.D.1.y.+...|
          ac 01 d6 1c 4c cd b0 8a  58 6e df 08 29 a3 5e c8  |....L...Xn..).^.|
          ca 93 13 e7 04 52 0d ef  47 27 2f 00 38 b0 e4 c9  |.....R..G'/.8...|
          93 4e 9a d4 22 62 15 f7  3f 37 21 4f 70 31 80 f1  |.N.."b..?7!Op1..|
          8b 38 87 b3 e8 e8 97 00  fe cf 55 96 4e 24 d2 a9  |.8........U.N$..|
          27 4e 7a ae b7 61 41 f3  2a ce e7 c9 d9 5e dd bb  |'Nz..aA.*....^..|
          2b 85 3e b5 9d b5 d9 e1  57 ff be b4 c5 7e f5 cf  |+.>.....W....~..|
          0c 9e f0 97 fe 2b d3 3b  52 1b 1b 38 27 f7 3f 4a  |.....+.;R..8'.?J|
      • Certificate #2
        • 2
          • 74:1D:34:07:93:30:6A:CA:84:FA:B3:AB:BB:15:67:CE
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • O: VeriSign, Inc.
            • OU: VeriSign Trust Network
            • OU: Terms of use at https://www.verisign.com/rpa (c)10
            • CN: VeriSign Class 3 Code Signing 2010 CA
          • 2011-07-06 00:00:00 UTC: 2013-08-22 23:59:59 UTC
          • Subject
            • C: GB
            • ST: London
            • L: London
            • O: Piriform Ltd
            • OU: Digital ID Class 3 - Microsoft Software Validation v2
            • CN: Piriform Ltd
          • #5
            • rsaEncryption: nil
            • CA:43:68:52:51:19:F1:0A:E7:79:76:9F:F5:50:6B:FA:
              DF:6F:BF:C3:02:D9:05:E4:C5:FD:D0:2D:34:7A:04:D5:
              C2:D8:4D:37:45:A2:72:A7:F4:52:9F:96:65:A7:D3:89:
              7E:E4:25:7C:66:D3:2F:07:90:7D:F4:F8:DE:47:AF:EE:
              ED:B5:99:99:11:8B:8D:74:7F:D2:CA:DF:6E:59:7C:CD:
              B3:2B:4B:C1:86:A5:FC:9A:31:85:8D:C1:FF:95:08:03:
              92:1D:AD:D9:21:E0:49:69:0B:93:65:2F:F5:80:11:46:
              B5:30:B9:EC:68:D5:4A:68:11:03:52:6D:6D:71:06:97:
              47:19:25:74:4E:3B:EC:F2:A5:5C:7E:AD:8A:B5:D1:9D:
              19:93:10:41:CB:DB:2E:88:70:03:18:DB:65:8B:99:29:
              1D:5E:09:48:9F:2D:7A:0E:C6:FC:56:88:B3:C2:D8:05:
              B8:E5:5C:BB:F9:9C:72:94:D0:00:03:25:60:1C:90:00:
              54:CA:24:A5:87:F5:78:FD:A1:C6:DC:C3:FA:EF:90:29:
              68:AC:67:E0:39:B9:67:B9:B2:25:AF:4C:66:E1:5C:E7:
              1F:B1:FB:BD:AF:DB:D3:77:BF:2E:21:CE:F5:66:46:5B:
              CF:FE:F3:4C:44:EA:48:51:65:26:6A:BD:99:85:E1:55
              : 0x010001
          • X509v3 extensions
            • basicConstraints
              • nil
            • keyUsage: true, 0x80
            • crlDistributionPoints: http://csc3-2010-crl.verisign.com/CSC3-2010.crl
            • certificatePolicies
              • 2.16.840.1.113733.1.7.23.3
                • id-qt-cps: https://www.verisign.com/rpa
            • extendedKeyUsage: codeSigning
            • authorityInfoAccess
              • #0
                • OCSP: http://ocsp.verisign.com
                • caIssuers: http://csc3-2010-aia.verisign.com/CSC3-2010.cer
            • authorityKeyIdentifier:
              cf 99 a9 ea 7b 26 f4 4b  c9 8e 8f d7 f0 05 26 ef  |....{&.K......&.|
              e3 d2 a7 9d                                       |....            |
            • nsCertType: 0x10
            • 1.3.6.1.4.1.311.2.1.27
              • false: true
        • RSA-SHA1:
          c2 7c 65 46 69 02 3e 27  9f df 2b e8 71 55 f4 21  |.|eFi.>'..+.qU.!|
          b3 66 de 44 39 04 5d 8c  c1 2c fd b3 99 02 ca d0  |.f.D9.]..,......|
          a1 c5 9b 29 69 42 7a 93  ff 6c de 8a 92 06 cf ce  |...)iBz..l......|
          c5 39 dd ce c9 ed 51 af  43 f4 ae 25 45 58 48 98  |.9....Q.C..%EXH.|
          1e e4 89 ec 82 c7 7f 7c  35 de d3 17 07 59 a7 51  |.......|5....Y.Q|
          9c 40 03 8b 8d a6 e9 b2  8f 1a 6b 6b 74 1c cd 63  |.@........kkt..c|
          37 3b 30 6c 99 b6 aa 9c  b1 1d 00 68 3a 3c b5 71  |7;0l.......h:<.q|
          f8 f4 4e dc 2f a9 be c0  51 00 37 d7 7f 4e c4 91  |..N./...Q.7..N..|
          44 34 36 93 0c 85 f0 52  d4 92 d7 91 2a 7a 68 74  |D46....R....*zht|
          cb b4 b6 64 dd 0e 89 67  44 3f 32 0a fb d7 b8 c0  |...d...gD?2.....|
          b1 11 e7 36 e8 32 21 8a  48 b5 e9 54 7f 94 c2 21  |...6.2!.H..T...!|
          6b 3f c6 71 c8 cf c3 db  a1 3f d1 fe 06 cc fc 74  |k?.q.....?.....t|
          36 e0 38 da a4 94 99 e0  73 9d 15 11 32 7d f1 2b  |6.8.....s...2}.+|
          96 ff cd 47 5b 2f 9a 6b  a6 e2 21 7a a8 bb 4a b5  |...G[/.k..!z..J.|
          29 a0 3f 12 be 91 4c ca  4e 33 13 f3 77 4b 84 9e  |).?...L.N3..wK..|
          f1 68 4e 6f f1 e4 4b 72  8d aa c6 db f3 82 e2 83  |.hNo..Kr........|
      • Certificate #3
        • 2
          • 52:00:E5:AA:25:56:FC:1A:86:ED:96:C9:D4:4B:33:C7
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • O: VeriSign, Inc.
            • OU: VeriSign Trust Network
            • OU: (c) 2006 VeriSign, Inc. - For authorized use only
            • CN: VeriSign Class 3 Public Primary Certification Authority - G5
          • 2010-02-08 00:00:00 UTC: 2020-02-07 23:59:59 UTC
          • Subject
            • C: US
            • O: VeriSign, Inc.
            • OU: VeriSign Trust Network
            • OU: Terms of use at https://www.verisign.com/rpa (c)10
            • CN: VeriSign Class 3 Code Signing 2010 CA
          • #5
            • rsaEncryption: nil
            • F5:23:4B:5E:A5:D7:8A:BB:32:E9:D4:57:F7:EF:E4:C7:
              26:7E:AD:19:98:FE:A8:9D:7D:94:F6:36:6B:10:D7:75:
              81:30:7F:04:68:7F:CB:2B:75:1E:CD:1D:08:8C:DF:69:
              94:A7:37:A3:9C:7B:80:E0:99:E1:EE:37:4D:5F:CE:3B:
              14:EE:86:D4:D0:F5:27:35:BC:25:0B:38:A7:8C:63:9D:
              17:A3:08:A5:AB:B0:FB:CD:6A:62:82:4C:D5:21:DA:1B:
              D9:F1:E3:84:3B:8A:2A:4F:85:5B:90:01:4F:C9:A7:76:
              10:7F:27:03:7C:BE:AE:7E:7D:C1:DD:F9:05:BC:1B:48:
              9C:69:E7:C0:A4:3C:3C:41:00:3E:DF:96:E5:C5:E4:94:
              71:D6:55:01:C7:00:26:4A:40:3C:B5:A1:26:A9:0C:A7:
              6D:80:8E:90:25:7B:CF:BF:3F:1C:EB:2F:96:FA:E5:87:
              77:C6:B5:56:B2:7A:3B:54:30:53:1B:DF:62:34:FF:1E:
              D1:F4:5A:93:28:85:E5:4C:17:4E:7E:5B:FD:A4:93:99:
              7F:DF:CD:EF:A4:75:EF:EF:15:F6:47:E7:F8:19:72:D8:
              2E:34:1A:A6:B4:A7:4C:7E:BD:BB:4F:0C:3D:57:F1:30:
              D6:A6:36:8E:D6:80:76:D7:19:2E:A5:CD:7E:34:2D:89
              : 0x010001
          • X509v3 extensions
            • basicConstraints
              • true
              • true: 0
            • certificatePolicies
              • 2.16.840.1.113733.1.7.23.3
                • #0
                  • id-qt-cps: https://www.verisign.com/cps
                  • id-qt-unotice: https://www.verisign.com/rpa
            • keyUsage: true, 6
            • 1.3.6.1.5.5.7.1.12
              • image/gif
                • SHA1:
                  8f e5 d3 1a 86 ac 8d 8e  6b c3 cf 80 6a d4 48 18  |........k...j.H.|
                  2c 7b 19 2e                                       |,{..            |
                • http://logo.verisign.com/vslogo.gif
            • crlDistributionPoints: http://crl.verisign.com/pca3-g5.crl
            • authorityInfoAccess
              • OCSP: http://ocsp.verisign.com
            • extendedKeyUsage
              • clientAuth: codeSigning
            • subjectAltName
              • CN: VeriSignMPKI-2-8
            • subjectKeyIdentifier:
              cf 99 a9 ea 7b 26 f4 4b  c9 8e 8f d7 f0 05 26 ef  |....{&.K......&.|
              e3 d2 a7 9d                                       |....            |
            • authorityKeyIdentifier:
              7f d3 65 a7 c2 dd ec bb  f0 30 09 f3 43 39 fa 02  |..e......0..C9..|
              af 33 31 33                                       |.313            |
        • RSA-SHA1:
          56 22 e6 34 a4 c4 61 cb  48 b9 01 ad 56 a8 64 0f  |V".4..a.H...V.d.|
          d9 8c 91 c4 bb cc 0c e5  ad 7a a0 22 7f df 47 38  |.........z."..G8|
          4a 2d 6c d1 7f 71 1a 7c  ec 70 a9 b1 f0 4f e4 0f  |J-l..q.|.p...O..|
          0c 53 fa 15 5e fe 74 98  49 24 85 81 26 1c 91 14  |.S..^.t.I$..&...|
          47 b0 4c 63 8c bb a1 34  d4 c6 45 e8 0d 85 26 73  |G.Lc...4..E...&s|
          03 d0 a9 8c 64 6d dc 71  92 e6 45 05 60 15 59 51  |....dm.q..E.`.YQ|
          39 fc 58 14 6b fe d4 a4  ed 79 6b 08 0c 41 72 e7  |9.X.k....yk..Ar.|
          37 22 06 09 be 23 e9 3f  44 9a 1e e9 61 9d cc b1  |7"...#.?D...a...|
          90 5c fc 3d d2 8d ac 42  3d 65 36 d4 b4 3d 40 28  |.\.=...B=e6..=@(|
          8f 9b 10 cf 23 26 cc 4b  20 cb 90 1f 5d 8c 4c 34  |....#&.K ...].L4|
          ca 3c d8 e5 37 d6 6f a5  20 bd 34 eb 26 d9 ae 0d  |.<..7.o. .4.&...|
          e7 c5 9a f7 a1 b4 21 91  33 6f 86 e8 58 bb 25 7c  |......!.3o..X.%||
          74 0e 58 fe 75 1b 63 3f  ce 31 7c 9b 8f 1b 96 9e  |t.X.u.c?.1|.....|
          c5 53 76 84 5b 9c ad 91  fa ac ed 93 ba 5d c8 21  |.Sv.[........].!|
          53 c2 82 53 63 af 12 0d  50 87 11 1b 3d 54 52 96  |S..Sc...P...=TR.|
          8a 2c 9c 3d 92 1a 08 9a  05 2e c7 93 a5 48 91 d3  |.,.=.........H..|
    • Signer
      • 1
      • unnamed
        • #0
          • C: US
          • O: VeriSign, Inc.
          • OU: VeriSign Trust Network
          • OU: Terms of use at https://www.verisign.com/rpa (c)10
          • CN: VeriSign Class 3 Code Signing 2010 CA
        • 74:1D:34:07:93:30:6A:CA:84:FA:B3:AB:BB:15:67:CE
      • SHA1: nil
      • #3
        • 1.3.6.1.4.1.311.2.1.12
          • nil
        • contentType: 1.3.6.1.4.1.311.2.1.4
        • 1.3.6.1.4.1.311.2.1.11: msCodeInd
        • messageDigest:
          a2 fe 3f c7 ad c8 96 74  df 15 e1 cc 8f 36 62 d1  |..?....t.....6b.|
          9c d0 97 5c                                       |...\            |
      • rsaEncryption:
        91 65 fc 31 75 2d 84 80  b5 69 13 24 d1 b4 11 10  |.e.1u-...i.$....|
        62 8f a4 f6 5c 0d 55 a5  0b ea 03 05 dd 37 e7 ec  |b...\.U......7..|
        9d 48 c9 8a 09 8b b7 92  86 d0 bb 4c e2 6f 77 49  |.H.........L.owI|
        e2 bf 20 40 b1 fd c7 03  5c cb 75 26 14 07 0a 08  |.. @....\.u&....|
        10 67 50 ae 9e 15 26 08  07 39 6e 40 ff fb 2a 42  |.gP...&..9n@..*B|
        fa fd 03 71 85 e2 c3 66  1a 70 f5 d1 73 ef a4 e0  |...q...f.p..s...|
        13 58 f4 48 23 8e 91 f8  a4 cf d9 71 1f 58 2e 7f  |.X.H#......q.X..|
        25 90 ba 15 41 cc a4 ff  07 88 de 2f d3 3d bb 88  |%...A....../.=..|
        e8 b5 f6 58 66 eb 4f ea  2d 92 13 ea 68 f9 81 f0  |...Xf.O.-...h...|
        1c dc 38 8b 28 76 7d ce  c6 5c eb 36 cb 3a 66 23  |..8.(v}..\.6.:f#|
        92 c5 d9 39 db 0a 57 63  04 aa d8 af 7d ed 6f c4  |...9..Wc....}.o.|
        1a bc e0 3f 75 b3 fb cb  27 5b 09 b9 78 54 04 dd  |...?u...'[..xT..|
        36 3f ec cb 5a 5c 73 c4  9a 3e 1f b7 23 11 49 60  |6?..Z\s..>..#.I`|
        fd 8c 29 2e 4b c3 4c 1d  61 6b 14 89 2e 0e 50 7a  |..).K.L.ak....Pz|
        74 c4 37 85 16 b2 8f 75  cb 9b 63 c9 a0 ad 92 49  |t.7....u..c....I|
        89 e1 70 d2 4c 5e 87 7d  62 4d e6 65 1e e6 e3 76  |..p.L^.}bM.e...v|
      • countersignature
        • 1
          • unnamed
            • #0
              • C: US
              • O: VeriSign, Inc.
              • CN: VeriSign Time Stamping Services CA
            • 79:A2:A5:85:F9:D1:15:42:13:D9:B8:3E:F6:B6:8D:ED
          • SHA1: nil
          • #2
            • contentType: pkcs7-data
            • signingTime: 2012-10-24 20:21:58 UTC
            • messageDigest:
              6f 05 77 96 4c 7f ac ca  19 c0 9e 68 6b e0 c9 cb  |o.w.L......hk...|
              40 b8 37 3a                                       |@.7:            |
          • rsaEncryption:
            25 f9 ff 01 7e 54 5c 07  e7 be 23 da 06 89 d8 c4  |%...~T\...#.....|
            75 a2 06 44 bf 8f 98 3e  0e bb 71 bd 5e ed c3 8a  |u..D...>..q.^...|
            b7 11 bf 80 a8 12 51 cb  91 a4 e2 9a 85 41 d2 05  |......Q......A..|
            07 bd 2e db 13 83 4e b0  c7 dc f6 6e bf ee 92 f2  |......N....n....|
            a6 87 ca 7c d0 e8 d4 c2  2d 5a 4b 94 50 a8 d3 98  |...|....-ZK.P...|
            46 4c 53 36 91 e8 b0 43  a1 8c 63 97 52 e5 b0 15  |FLS6...C..c.R...|
            cc f3 0f 3c 95 82 c4 ec  2d a2 db 73 e9 6e 72 25  |...<....-..s.nr%|
            90 44 4a 6e 07 a5 33 3b  3e 9f 6f bd b8 4c 3e 64  |.DJn..3;>.o..L>d|
offsetsizetypecomment
050176EXE02/24/2012 19:19:59#
15c115HTM#
c4003960368BINoverlay data past EOF#
Scanning the drive for archives:
1 file, 4010544 bytes (3917 KiB)


--
Type = PE
Physical Size = 4010544
CPU = x86
Characteristics = Executable 32-bit
Created = 2012-02-24 19:19:59
Headers Size = 1024
Checksum = 4036168
Image Size = 3289088
Section Alignment = 4096
File Alignment = 512
Code Size = 28672
Initialized Data Size = 445952
Uninitialized Data Size = 16896
Linker Version = 10.0
OS Version = 5.0
Image Version = 6.0
Subsystem Version = 5.0
Subsystem = Windows GUI
DLL Characteristics = Relocated NX-Compatible NoSEH TerminalServerAware
Stack Reserve = 1048576
Stack Commit = 4096
Heap Reserve = 1048576
Heap Commit = 4096
Image Base = 4194304
----
Path = [0]
Size = 3954384
Packed Size = 3954384
Virtual Size = 3954384
Offset = 50176
--
Path = [0]
Type = Nsis
Offset = 35840
Physical Size = 3918543
Tail Size = 1
Method = LZMA:23
Solid = +
Headers Size = 423480
Embedded Stub Size = 0
SubType = NSIS-Park-3 Unicode log

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
                    .....        11264      3918539  $PLUGINSDIR/System.dll
                    .....        43012               $PLUGINSDIR/nsDialogs.dll
                    .....         5632               $PLUGINSDIR/execDos.dll
                    .....        24064               $PLUGINSDIR/inetc.dll
2009-11-26 18:02:50 .....         9884               $PLUGINSDIR/modern-wizard.bmp
2012-10-17 17:56:32 .....         2500               $PLUGINSDIR/modern-header.bmp
                    .....         5120               $PLUGINSDIR/LangDLL.dll
                    .....         6144               $PLUGINSDIR/nsExec.dll
2011-07-04 13:52:16 .....       267864               $PLUGINSDIR/g/PRFB-IEToolbar.exe
2011-07-04 13:52:22 .....       582768               $PLUGINSDIR/g/PRFB-Chrome.exe
2012-10-24 20:17:36 .....      3157856               CCleaner.exe
2012-10-24 20:17:36 .....      5435744               CCleaner64.exe
2012-10-24 21:53:58 .....        35840               Lang/lang-1031.dll
2012-10-24 21:54:24 .....        22528               Lang/lang-1041.dll
2012-10-24 21:54:40 .....        33792               Lang/lang-1049.dll
2012-10-24 21:53:56 .....        35840               Lang/lang-1053.dll
2012-10-24 21:54:26 .....        20992               Lang/lang-1042.dll
2012-10-24 21:54:32 .....        34304               Lang/lang-1044.dll
2012-10-24 21:54:24 .....        45056               Lang/lang-1040.dll
2012-10-24 21:54:34 .....        39424               Lang/lang-2070.dll
2012-10-24 21:54:10 .....        39424               Lang/lang-1043.dll
2012-10-24 21:54:14 .....        49152               Lang/lang-1036.dll
2012-10-24 21:54:42 .....        39424               Lang/lang-1034.dll
2012-10-24 21:54:32 .....        45056               Lang/lang-1045.dll
2012-10-24 21:54:06 .....        18432               Lang/lang-1028.dll
2012-10-24 21:54:10 .....        34816               Lang/lang-1030.dll
2012-10-24 21:54:12 .....        36352               Lang/lang-1035.dll
2012-10-24 21:54:36 .....        38912               Lang/lang-1046.dll
2012-10-24 21:54:22 .....        36864               Lang/lang-1038.dll
2012-10-24 21:54:08 .....        33280               Lang/lang-1029.dll
2012-10-24 21:54:04 .....        17920               Lang/lang-2052.dll
2012-10-24 21:54:00 .....        39424               Lang/lang-1027.dll
2012-10-24 21:54:20 .....        29696               Lang/lang-1037.dll
2012-10-24 21:54:18 .....        49152               Lang/lang-1032.dll
2012-10-24 21:54:44 .....        34304               Lang/lang-1055.dll
2012-10-24 21:54:02 .....        31232               Lang/lang-1025.dll
2012-10-24 21:54:38 .....        34816               Lang/lang-1048.dll
2012-10-24 21:54:16 .....        34304               Lang/lang-1110.dll
2012-10-24 21:54:28 .....        35328               Lang/lang-1063.dll
2012-10-24 21:53:54 .....        34816               Lang/lang-1052.dll
2012-10-24 21:54:46 .....        36352               Lang/lang-3098.dll
2012-10-24 21:54:48 .....        36864               Lang/lang-2074.dll
2012-10-24 21:53:54 .....        33792               Lang/lang-1051.dll
2012-10-24 21:54:50 .....        45056               Lang/lang-1071.dll
2012-10-24 21:54:52 .....        34816               Lang/lang-5146.dll
2012-10-24 21:54:52 .....        45056               Lang/lang-1026.dll
2012-10-24 21:54:58 .....        45056               Lang/lang-1050.dll
2012-10-24 21:55:02 .....        32768               Lang/lang-1066.dll
2012-10-24 21:54:56 .....        34816               Lang/lang-1058.dll
2012-10-24 21:55:00 .....        34304               Lang/lang-1061.dll
2012-10-24 21:54:54 .....        34816               Lang/lang-1065.dll
2012-10-24 21:55:04 .....        32256               Lang/lang-1067.dll
2012-10-24 21:55:06 .....        36352               Lang/lang-1079.dll
2012-10-24 21:55:06 .....        38912               Lang/lang-9999.dll
2012-10-24 21:55:12 .....        33792               Lang/lang-1068.dll
2012-10-24 21:55:14 .....        36352               Lang/lang-1060.dll
2012-10-24 21:55:16 .....        36352               Lang/lang-1059.dll
2012-10-24 21:55:20 .....        31744               Lang/lang-1087.dll
2012-10-24 21:55:10 .....        36352               Lang/lang-1062.dll
2012-10-24 21:55:24 .....        36352               Lang/lang-1102.dll
2012-10-24 21:55:26 .....        36864               Lang/lang-1057.dll
2012-10-24 21:55:30 .....        32256               Lang/lang-1092.dll
2012-10-24 20:18:52 .....       158192               uninst.exe
                    .....         4096               $PLUGINSDIR/UserInfo.dll
2012-10-22 17:08:52 .....        73344               $PLUGINSDIR/g/gtapi_signed.dll
2012-10-22 20:11:26 .....        64000               $PLUGINSDIR/g/gcapi_dll.dll
2010-10-14 19:44:32 .....         1458               $PLUGINSDIR/g/gtb/toolbar.html
2010-10-14 19:50:44 .....         1494               $PLUGINSDIR/g/gtb/toolbar.html
2010-10-14 19:50:44 .....         1263               $PLUGINSDIR/g/gtb/toolbar.html
2010-10-14 19:50:44 .....         1215               $PLUGINSDIR/g/gtb/toolbar.html
2010-10-14 19:50:44 .....         1282               $PLUGINSDIR/g/gtb/toolbar.html
2010-10-14 19:50:44 .....         1242               $PLUGINSDIR/g/gtb/toolbar.html
2010-10-14 19:50:44 .....         1277               $PLUGINSDIR/g/gtb/toolbar.html
2010-10-14 19:50:44 .....         1538               $PLUGINSDIR/g/gtb/toolbar.html
2010-10-14 19:50:44 .....         1272               $PLUGINSDIR/g/gtb/toolbar.html
2010-10-14 19:50:44 .....         1259               $PLUGINSDIR/g/gtb/toolbar.html
2010-10-14 19:50:44 .....         1333               $PLUGINSDIR/g/gtb/toolbar.html
2010-10-18 18:17:54 .....         1176               $PLUGINSDIR/g/gtb/toolbar.html
2010-10-14 19:50:44 .....         1298               $PLUGINSDIR/g/gtb/toolbar.html
2010-10-14 19:50:46 .....         1238               $PLUGINSDIR/g/gtb/toolbar.html
2010-10-14 19:50:46 .....         1354               $PLUGINSDIR/g/gtb/toolbar.html
2010-10-14 19:50:46 .....         1237               $PLUGINSDIR/g/gtb/toolbar.html
2010-10-14 19:50:46 .....         1273               $PLUGINSDIR/g/gtb/toolbar.html
2010-10-14 19:50:46 .....         1216               $PLUGINSDIR/g/gtb/toolbar.html
2010-10-14 19:50:46 .....         1375               $PLUGINSDIR/g/gtb/toolbar.html
2010-10-14 19:50:46 .....         1326               $PLUGINSDIR/g/gtb/toolbar.html
2010-10-14 19:50:46 .....         1324               $PLUGINSDIR/g/gtb/toolbar.html
2010-10-14 19:50:46 .....         1604               $PLUGINSDIR/g/gtb/toolbar.html
2010-10-14 19:50:46 .....         1247               $PLUGINSDIR/g/gtb/toolbar.html
2010-10-14 19:50:46 .....         1325               $PLUGINSDIR/g/gtb/toolbar.html
2010-10-14 19:50:46 .....         1235               $PLUGINSDIR/g/gtb/toolbar.html
2010-10-14 19:50:46 .....         1306               $PLUGINSDIR/g/gtb/toolbar.html
2010-10-14 19:50:46 .....         1629               $PLUGINSDIR/g/gtb/toolbar.html
2010-10-14 19:50:46 .....         1232               $PLUGINSDIR/g/gtb/toolbar.html
2010-10-14 19:50:46 .....         1284               $PLUGINSDIR/g/gtb/toolbar.html
2010-10-14 19:50:46 .....         1393               $PLUGINSDIR/g/gtb/toolbar.html
2010-10-14 19:50:46 .....         1153               $PLUGINSDIR/g/gtb/toolbar.html
2010-10-14 19:50:46 .....         1321               $PLUGINSDIR/g/gtb/toolbar.html
2010-10-14 19:50:46 .....         1473               $PLUGINSDIR/g/gtb/toolbar.html
2010-10-14 15:18:44 .....         5329               $PLUGINSDIR/g/gtb/toolbar-screenshot.jpg
2011-07-04 14:03:28 .....         2938               $PLUGINSDIR/g/gc/Chromeoffer.html
2011-07-04 14:03:28 .....         3105               $PLUGINSDIR/g/gc/Chromeoffer.html
2011-07-04 14:03:28 .....         2890               $PLUGINSDIR/g/gc/Chromeoffer.html
2011-07-04 14:03:28 .....         2884               $PLUGINSDIR/g/gc/Chromeoffer.html
2011-07-04 14:03:28 .....         2947               $PLUGINSDIR/g/gc/Chromeoffer.html
2011-07-04 14:03:28 .....         2887               $PLUGINSDIR/g/gc/Chromeoffer.html
2011-07-04 14:03:28 .....         2895               $PLUGINSDIR/g/gc/Chromeoffer.html
2011-07-04 14:03:28 .....         3193               $PLUGINSDIR/g/gc/Chromeoffer.html
2011-07-04 14:03:28 .....         2917               $PLUGINSDIR/g/gc/Chromeoffer.html
2011-07-04 14:03:28 .....         2853               $PLUGINSDIR/g/gc/Chromeoffer.html
2011-07-04 14:03:28 .....         2940               $PLUGINSDIR/g/gc/Chromeoffer.html
2011-07-04 14:03:30 .....         2843               $PLUGINSDIR/g/gc/Chromeoffer.html
2011-07-04 14:03:28 .....         2925               $PLUGINSDIR/g/gc/Chromeoffer.html
2011-07-04 14:03:28 .....         2896               $PLUGINSDIR/g/gc/Chromeoffer.html
2011-07-04 14:03:28 .....         3050               $PLUGINSDIR/g/gc/Chromeoffer.html
2011-07-04 14:03:28 .....         2980               $PLUGINSDIR/g/gc/Chromeoffer.html
2011-07-04 14:03:28 .....         2895               $PLUGINSDIR/g/gc/Chromeoffer.html
2011-07-04 14:03:28 .....         2843               $PLUGINSDIR/g/gc/Chromeoffer.html
2011-07-04 14:03:28 .....         2928               $PLUGINSDIR/g/gc/Chromeoffer.html
2011-07-04 14:03:28 .....         2891               $PLUGINSDIR/g/gc/Chromeoffer.html
2011-07-04 14:03:28 .....         2911               $PLUGINSDIR/g/gc/Chromeoffer.html
2011-07-04 14:03:28 .....         3102               $PLUGINSDIR/g/gc/Chromeoffer.html
2011-07-04 14:03:30 .....         2879               $PLUGINSDIR/g/gc/Chromeoffer.html
2011-07-04 14:03:30 .....         2956               $PLUGINSDIR/g/gc/Chromeoffer.html
2011-07-04 14:03:30 .....         2866               $PLUGINSDIR/g/gc/Chromeoffer.html
2011-07-04 14:03:30 .....         2900               $PLUGINSDIR/g/gc/Chromeoffer.html
2011-07-04 14:03:30 .....         3125               $PLUGINSDIR/g/gc/Chromeoffer.html
2011-07-04 14:03:30 .....         2866               $PLUGINSDIR/g/gc/Chromeoffer.html
2011-07-04 14:03:30 .....         2885               $PLUGINSDIR/g/gc/Chromeoffer.html
2011-07-04 14:03:30 .....         2986               $PLUGINSDIR/g/gc/Chromeoffer.html
2011-07-04 14:03:30 .....         2838               $PLUGINSDIR/g/gc/Chromeoffer.html
2011-07-04 14:03:30 .....         2908               $PLUGINSDIR/g/gc/Chromeoffer.html
2011-07-04 14:03:30 .....         3046               $PLUGINSDIR/g/gc/Chromeoffer.html
2011-06-29 19:03:12 .....         1834               $PLUGINSDIR/g/gc/chrome-48.png
2010-10-14 15:18:36 .....        16996               $PLUGINSDIR/g/gc/chrome-offer-CCleaner-ss.jpg
2012-08-31 15:11:24 .....       139264               $PLUGINSDIR/g/pfWWW.dll
                    .....                            $PLUGINSDIR/ButtonEvent.dll
------------------- ----- ------------ ------------  ------------------------
2012-10-24 21:55:30           11937287      3918539  137 files
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

[?] can't find file_offset of VA 0x7a000