upd-pcl5-x64-6.1.0.20062.exe

info
MZ
PE
resources
strings
imports
exports
foremost
7zip
signature
hexdump
disasm
log
discuss
donate

filename	upd-pcl5-x64-6.1.0.20062.exe
size	19786968 (0x12decd8)
md5	7cc935b12a16541804eeecec3be4de66

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	scan pending
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xf8

Rich Header

lib id	version	times used
125	50727	19
109	50727	112
1	0	198
93	4035	13
110	50727	61
122	50727	1
124	50727	1
0	0	2
120	50727	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	5
TimeDateStamp	0x4aef3fa7
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x103
Magic	0x10b
LinkerVersion	8.0
SizeOfCode	0x12000
SizeOfInitializedData	0xb000
SizeOfUninitializedData	0
AddressOfEntryPoint	0xa79e
BaseOfCode	0x1000
BaseOfData	0x13000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x1000
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x12ea000
SizeOfHeaders	0x1000
CheckSum	0x12dfd90
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x7d00
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x7d00
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x11ff5	0x12000	R-X CODE
.rdata	0x13000	0x3742	0x4000	R-- IDATA
.data	0x17000	0xe744	0x2000	RW- IDATA
.rsrc	0x26000	0x446c	0x5000	R-- IDATA
_winzip_	0x2b000	0x12bf000	0x12bf000	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0x16710	0x32
IMPORT	0x15844	0x8c
RESOURCE	0x26000	0x446c
EXCEPTION	0	0
SECURITY	0x12dd000	0x1cd8
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0x14e48	0x40
Bound_IAT	0	0
IAT	0x13000	0x2b8
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
WZ_MANIFEST	ADMIN_MANIFEST	1503	1252
ICON	#1	4264	1252
DIALOG	#100	638	1252
DIALOG	#400	402	1252
STRING	#63	764	1252
STRING	#64	366	1252
STRING	#65	2330	1252
STRING	#66	2176	1252
STRING	#67	1278	1252
STRING	#126	1304	1252
STRING	#127	110	1252
GROUP_ICON	#1	34	1252
MANIFEST	#1	1492	1252

id	lang	string
1000	1033	This is an incomplete self-extractor; please re-create the file and try again.
1001	1033	Please insert disk %d in drive %s.
1002	1033	Please insert last disk of set in drive %s.
1003	1033	No disk or invalid disk in drive. Please insert disk number %d.
1004	1033	The disk in the drive appears to be missing or has an incorrect label. Insert disk number %d.
1005	1033	No password specified
1006	1033	Incorrect password specified
1007	1033	NOAUTO
1008	1033	Setup
1013	1033	AUTO
1014	1033	This 32-bit self-extracting Zip file requires Windows 95, 98, NT, 2000 or XP.
1021	1033	Abort unzip operation?
1022	1033	File %s is in use by the system. Skipping ...
1023	1033	Unzip Aborted
1024	1033	Error %d running command %s
1025	1033	Error changing to "Unzip To" folder
1026	1033	File %s already exists. Overwrite file?
1027	1033	No folder specified.
1028	1033	\TEMP
1029	1033	This file is intended for use under Windows 95, 98, NT, 2000, XP or a system with compatible long filename support. On the version of Windows you are currently running, any long filenames will probably be truncated and improper operation may result. Continue anyway?
1030	1033	TEMP=
1031	1033	%d file(s) unzipped successfully
1032	1033	To unzip all files in %s to the specified folder press the Unzip button.
1033	1033	WinZip
1034	1033	extensions
1035	1033	When &done unzipping open:
1037	1033	This copy of WinZip Self-Extractor is NOT LICENSED for distribution. Any distribution of this file is prohibited and is a violation of US Copyright law and international treaty. The registered version does not display this message.
1038	1033	WinZip not found on your system. WinZip is an award-winning Windows archive utility that brings the convenience of Windows to the use of Zip files. WinZip features built-in ZIP and UNZIP and an easy to use drag-and-drop interface. Fully functional evaluation versions of WinZip are available from the WinZip web site: http://www.winzip.com
1039	1033	Can't create output file: %s
1040	1033	Unsupported compression method
1041	1033	ZIP damaged: file %s: Bad CRC. Possible cause: file transfer error.
1042	1033	Invalid ZIP header. Possible cause: file transfer error.
1043	1033	Could not create "%s" - unzip operation cancelled.
1044	1033	Error in folder name specified on the command line.
1045	1033	Unzipping %s
1046	1033	Error writing to %s. Possible cause: disk full.
1047	1033	Error reading %s. Possible cause: bad disk or file transfer error.
1048	1033	I/O error on file. Possible cause: file transfer error.
1049	1033	To unzip all files in %s press the "Unzip" button. Files will be unzipped to the folder specified in the "Unzip To Folder" field. This folder will be created if it does not exist. You can also unzip this file with a standard zip utility like WinZip.
1050	1033	Zip file is damaged, truncated, or has been changed since it was created. If you downloaded this file, try downloading again.
1051	1033	%s %s
1052	1033	Licensed to %s
1053	1033	NOT LICENSED FOR DISTRIBUTION OF ANY KIND
1055	1033	This self-extracting Zip file was created by a registered user of WinZip Self-Extractor %s (%s) WinZip(R) Self-Extractor is Copyright(c) 1995-2009 by WinZip International LLC (www.winzip.com)
1056	1033	This self-extracting Zip file was created by an unregistered user of WinZip Self-Extractor %s (%s) WinZip(R) Self-Extractor is Copyright(c) 1995-2009 by WinZip International LLC (www.winzip.com)
1057	1033	Drive %s is not a valid drive, unzip operation cancelled.
1058	1033	Cannot use command file %s Windows does not have a program associated to run with it.
1059	1033	TMP=
1060	1033	Unzip to Folder:
1061	1033	TEMP
1062	1033	Zip file contains filenames longer than are allowed by Windows. WinZip Self-Extractor cannot process this Zip file.
1063	1033	this self-extractor file
1064	1033	The selected folder contains unsupported characters, please choose a different folder.
1069	1033	Invalid command line parameter (%s).
2000	1033	WinZip Self-Extractor
2001	1033	Please save the file %s (created on your desktop) and inform WinZip Computing. Internet: support@winzip.com Web: http://www.winzip.com Postal mail: P.O. Box 540, Mansfield, CT 06268 USA
2002	1033	WinZip Self-Extractor header corrupt. Possible cause: bad disk or file transfer error
2003	1033	not enough memory
2004	1033	WinZip internal error in file %s line %d
2005	1033	Current date/time: %02d/%02d/%04d %02d:%02d
2006	1033	Module name = %s
2007	1033	Operating System Version %d.%02d
2008	1033	Windows NT
2009	1033	Win32s
2010	1033	Windows 95/98
2011	1033	Version %d.%d
2012	1033	Memory in use = %ld%%
2013	1033	Total physical memory = %ld Kbytes
2014	1033	Physical memory available = %ld Kbytes
2015	1033	Total virtual memory = %ld Kbytes
2016	1033	Virtual memory available = %ld Kbytes

module_name	hint	ord	function_name
SHELL32.dll	188		SHGetPathFromIDListA
SHELL32.dll	195		SHGetSpecialFolderLocation
SHELL32.dll	263		ShellExecuteA
SHELL32.dll	52		FindExecutableA
SHELL32.dll	121		SHBrowseForFolderA
SHELL32.dll	183		SHGetMalloc
USER32.dll	255		GetClientRect
USER32.dll	620		SetRect
USER32.dll	200		EndPaint
USER32.dll	442		LoadCursorA
USER32.dll	296		GetLastActivePopup
USER32.dll	437		KillTimer
USER32.dll	658		ShowWindow
USER32.dll	514		PostMessageA
USER32.dll	571		SendMessageA
USER32.dll	196		EnableWindow
USER32.dll	634		SetTimer
USER32.dll	646		SetWindowTextA
USER32.dll	599		SetForegroundWindow
USER32.dll	579		SetActiveWindow
USER32.dll	595		SetDlgItemTextA
USER32.dll	289		GetKeyState
USER32.dll	53		CharUpperBuffA
USER32.dll	512		PeekMessageA
USER32.dll	346		GetSysColor
USER32.dll	161		DispatchMessageA
USER32.dll	325		GetParent
USER32.dll	566		SendDlgItemMessageA
USER32.dll	273		GetDlgItem
USER32.dll	403		InvalidateRect
USER32.dll	700		UpdateWindow
USER32.dll	459		LoadStringA
USER32.dll	479		MessageBoxA
USER32.dll	158		DialogBoxParamA
USER32.dll	366		GetWindowLongA
USER32.dll	640		SetWindowLongA
USER32.dll	275		GetDlgItemTextA
USER32.dll	198		EndDialog
USER32.dll	372		GetWindowRect
USER32.dll	349		GetSystemMetrics
USER32.dll	643		SetWindowPos
USER32.dll	589		SetCursor
USER32.dll	42		CharNextA
USER32.dll	13		BeginPaint
USER32.dll	648		SetWindowWord
USER32.dll	380		GetWindowWord
USER32.dll	142		DefWindowProcA
USER32.dll	534		RegisterClassA
USER32.dll	682		TranslateMessage
KERNEL32.dll	372		GetLocaleInfoA
KERNEL32.dll	445		GetStringTypeW
KERNEL32.dll	442		GetStringTypeA
KERNEL32.dll	458		GetSystemTimeAsFileTime
KERNEL32.dll	323		GetCurrentProcessId
KERNEL32.dll	479		GetTickCount
KERNEL32.dll	675		QueryPerformanceCounter
KERNEL32.dll	358		GetFileType
KERNEL32.dll	804		SetHandleCount
KERNEL32.dll	343		GetEnvironmentStringsW
KERNEL32.dll	247		FreeEnvironmentStringsW
KERNEL32.dll	341		GetEnvironmentStrings
KERNEL32.dll	246		FreeEnvironmentStringsA
KERNEL32.dll	581		LCMapStringW
KERNEL32.dll	580		LCMapStringA
KERNEL32.dll	441		GetStdHandle
KERNEL32.dll	530		HeapCreate
KERNEL32.dll	532		HeapDestroy
KERNEL32.dll	897		VirtualAlloc
KERNEL32.dll	899		VirtualFree
KERNEL32.dll	152		EnterCriticalSection
KERNEL32.dll	593		LeaveCriticalSection
KERNEL32.dll	129		DeleteCriticalSection
KERNEL32.dll	540		HeapSize
KERNEL32.dll	854		Sleep
KERNEL32.dll	326		GetCurrentThreadId
KERNEL32.dll	808		SetLastError
KERNEL32.dll	868		TlsFree
KERNEL32.dll	870		TlsSetValue
KERNEL32.dll	489		GetVersionExA
KERNEL32.dll	206		FindClose
KERNEL32.dll	210		FindFirstFileA
KERNEL32.dll	320		GetCurrentDirectoryA
KERNEL32.dll	778		SetCurrentDirectoryA
KERNEL32.dll	75		CreateDirectoryA
KERNEL32.dll	799		SetFileTime
KERNEL32.dll	602		LocalFileTimeToFileTime
KERNEL32.dll	143		DosDateTimeToFileTime
KERNEL32.dll	600		LocalAlloc
KERNEL32.dll	339		GetDriveTypeA
KERNEL32.dll	344		GetEnvironmentVariableA
KERNEL32.dll	795		SetFilePointer
KERNEL32.dll	83		CreateFileA
KERNEL32.dll	499		GetWindowsDirectoryA
KERNEL32.dll	511		GlobalFree
KERNEL32.dll	522		GlobalUnlock
KERNEL32.dll	514		GlobalHandle
KERNEL32.dll	950		_lclose
KERNEL32.dll	952		_llseek
KERNEL32.dll	954		_lread
KERNEL32.dll	953		_lopen
KERNEL32.dll	515		GlobalLock
KERNEL32.dll	504		GlobalAlloc
KERNEL32.dll	516		GlobalMemoryStatus
KERNEL32.dll	488		GetVersion
KERNEL32.dll	381		GetModuleFileNameA
KERNEL32.dll	932		WriteFile
KERNEL32.dll	456		GetSystemTime
KERNEL32.dll	604		LocalFree
KERNEL32.dll	185		ExitProcess
KERNEL32.dll	243		FormatMessageA
KERNEL32.dll	369		GetLastError
KERNEL32.dll	383		GetModuleHandleA
KERNEL32.dll	491		GetVolumeInformationA
KERNEL32.dll	916		WideCharToMultiByte
KERNEL32.dll	102		CreateProcessA
KERNEL32.dll	963		lstrcmpiA
KERNEL32.dll	789		SetErrorMode
KERNEL32.dll	629		MultiByteToWideChar
KERNEL32.dll	371		GetLocalTime
KERNEL32.dll	972		lstrlenA
KERNEL32.dll	86		CreateFileW
KERNEL32.dll	693		ReadFile
KERNEL32.dll	290		GetConsoleCP
KERNEL32.dll	307		GetConsoleMode
KERNEL32.dll	594		LoadLibraryA
KERNEL32.dll	547		InitializeCriticalSection
KERNEL32.dll	823		SetStdHandle
KERNEL32.dll	921		WriteConsoleA
KERNEL32.dll	309		GetConsoleOutputCP
KERNEL32.dll	238		FlushFileBuffers
KERNEL32.dll	931		WriteConsoleW
KERNEL32.dll	52		CloseHandle
KERNEL32.dll	727		RtlUnwind
KERNEL32.dll	528		HeapAlloc
KERNEL32.dll	534		HeapFree
KERNEL32.dll	538		HeapReAlloc
KERNEL32.dll	679		RaiseException
KERNEL32.dll	862		TerminateProcess
KERNEL32.dll	322		GetCurrentProcess
KERNEL32.dll	878		UnhandledExceptionFilter
KERNEL32.dll	842		SetUnhandledExceptionFilter
KERNEL32.dll	569		IsDebuggerPresent
KERNEL32.dll	272		GetCommandLineA
KERNEL32.dll	419		GetProcessHeap
KERNEL32.dll	439		GetStartupInfoA
KERNEL32.dll	260		GetCPInfo
KERNEL32.dll	556		InterlockedIncrement
KERNEL32.dll	552		InterlockedDecrement
KERNEL32.dll	253		GetACP
KERNEL32.dll	403		GetOEMCP
KERNEL32.dll	575		IsValidCodePage
KERNEL32.dll	416		GetProcAddress
KERNEL32.dll	869		TlsGetValue
KERNEL32.dll	867		TlsAlloc
GDI32.dll	572		SetTextColor
GDI32.dll	570		SetTextAlign
GDI32.dll	332		GetBkColor
GDI32.dll	436		GetTextExtentPoint32A
GDI32.dll	221		ExtTextOutA
GDI32.dll	46		CreateDCA
GDI32.dll	363		GetDeviceCaps
GDI32.dll	58		CreateFontIndirectA
GDI32.dll	140		DeleteDC
GDI32.dll	526		SelectObject
GDI32.dll	143		DeleteObject
GDI32.dll	533		SetBkColor
ADVAPI32.dll	502		RegQueryValueA
COMCTL32.dll		17

ord	entry_va	function_name

module_name	ST32E.SFX
flags	0
timestamp	2009-11-02 20:23:03
version	0.0
ordinal_base	1
nFunctions	0
nNames	0
Names(0)	0
Functions(0)	0
NameOrdinals(0)	0

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO Code Signing CA 2

serial: 6E8596F5C55F6B0751356A7B2861DB52

Certificates (5)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:00:00:00:00:01:2f:4e:e1:52:d7
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA
        Validity
            Not Before: Apr 13 10:00:00 2011 GMT
            Not After : Jan 28 12:00:00 2028 GMT
        Subject: C=BE, O=GlobalSign nv-sa, CN=GlobalSign Timestamping CA - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:94:ef:65:f8:b5:57:9f:a0:53:0d:34:06:eb:09:
                    1f:b7:47:18:6a:cb:f0:5b:e4:ff:27:a5:34:d1:f7:
                    89:1a:bf:9e:b1:cd:12:41:6e:66:d4:81:a0:85:8b:
                    64:5a:46:2f:99:a0:8d:77:b1:e2:bc:5c:dd:22:d7:
                    6a:67:d0:bb:e8:ca:74:de:8b:4f:0d:b0:52:e5:90:
                    5b:eb:47:0e:f1:e7:9f:9c:0b:90:65:3e:17:96:30:
                    45:72:6d:39:a1:17:36:ca:b9:a0:8c:1b:4f:08:19:
                    f6:81:31:ad:61:16:a4:62:e6:b4:40:9e:c3:fc:fb:
                    95:f6:fb:b5:2e:95:81:98:e0:ef:c5:eb:d8:02:59:
                    78:77:f7:aa:e3:52:6b:50:91:29:c5:fc:f7:cd:93:
                    65:d2:60:61:22:f2:06:fb:32:dd:16:51:fa:0e:fd:
                    8a:30:f0:17:09:a7:bb:f3:04:ae:ab:90:e7:6c:df:
                    7a:a9:f4:ef:c4:62:27:5f:6f:99:6d:38:74:aa:11:
                    8b:da:df:c7:14:4c:e9:85:b2:ec:c2:7d:4a:26:8f:
                    e7:56:ba:a6:e0:cf:92:53:80:74:f4:03:ec:68:b2:
                    60:bc:84:20:00:83:1b:a1:ee:b4:74:05:c1:29:8e:
                    62:d0:47:b1:fa:f0:53:cc:18:f9:2e:3b:f9:70:7e:
                    b4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Subject Key Identifier: 
                46:D8:3E:FF:DC:E3:BE:FF:83:E6:F4:85:9B:B0:DD:6A:D6:14:A9:C1
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: https://www.globalsign.com/repository/
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.globalsign.net/root.crl
            X509v3 Authority Key Identifier: 
                60:7B:66:1A:45:0D:97:CA:89:50:2F:7D:04:CD:34:A8:FF:FC:FD:4B
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        4e:5e:56:90:1e:46:b4:d9:49:31:f3:bb:17:39:28:1b:c2:16:
        dd:fd:41:dc:09:05:04:9b:6f:b2:a2:9a:d6:99:2e:40:99:00:
        55:b5:ea:3f:a5:20:76:d3:86:34:d4:17:cc:55:3a:c7:82:ee:
        ef:a8:ba:bc:d8:06:9f:15:50:df:cd:16:7b:52:3a:02:d7:19:
        1a:fd:af:f0:78:5c:e0:4b:c5:18:df:3a:24:1e:da:ac:b8:a9:
        58:04:02:07:30:db:b0:12:5e:fe:31:be:f0:04:48:f4:f0:70:
        f8:3a:5e:56:83:cf:3d:fb:0d:bc:f4:c5:ed:97:9d:b9:d4:db:
        a5:27:84:e3:38:9b:8b:a7:35:86:44:20:a4:3b:6d:a4:6a:0b:
        a1:83:fd:28:eb:da:ef:28:f6:cc:88:5d:fb:0a:3b:00:ab:e0:
        21:eb:e2:2f:35:6c:0f:8e:34:45:97:eb:a2:f7:99:33:35:7e:
        cb:9a:8a:bb:45:4d:e7:3f:9f:c2:d9:8a:fa:65:b2:6e:c7:7e:
        65:ff:e8:92:e1:2c:31:a2:f7:b0:27:36:48:8f:26:6f:3b:ee:
        4d:76:1f:79:c3:e5:7f:96:35:bc:2d:0e:cc:01:b0:8e:7f:ff:
        51:80:80:a7:92:d4:b3:44:46:64:8c:87:4f:16:63:07:31:4b:
        63:b0:df:f3

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=SE, O=AddTrust AB, OU=AddTrust External TTP Network, CN=AddTrust External CA Root
        Validity
            Not Before: Jun  7 08:09:10 2005 GMT
            Not After : May 30 10:48:38 2020 GMT
        Subject: C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http:\/\/www.usertrust.com, CN=UTN-USERFirst-Object
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ce:aa:81:3f:a3:a3:61:78:aa:31:00:55:95:11:
                    9e:27:0f:1f:1c:df:3a:9b:82:68:30:c0:4a:61:1d:
                    f1:2f:0e:fa:be:79:f7:a5:23:ef:55:51:96:84:cd:
                    db:e3:b9:6e:3e:31:d8:0a:20:67:c7:f4:d9:bf:94:
                    eb:47:04:3e:02:ce:2a:a2:5d:87:04:09:f6:30:9d:
                    18:8a:97:b2:aa:1c:fc:41:d2:a1:36:cb:fb:3d:91:
                    ba:e7:d9:70:35:fa:e4:e7:90:c3:9b:a3:9b:d3:3c:
                    f5:12:99:77:b1:b7:09:e0:68:e6:1c:b8:f3:94:63:
                    88:6a:6a:fe:0b:76:c9:be:f4:22:e4:67:b9:ab:1a:
                    5e:77:c1:85:07:dd:0d:6c:bf:ee:06:c7:77:6a:41:
                    9e:a7:0f:d7:fb:ee:94:17:b7:fc:85:be:a4:ab:c4:
                    1c:31:dd:d7:b6:d1:e4:f0:ef:df:16:8f:b2:52:93:
                    d7:a1:d4:89:a1:07:2e:bf:e1:01:12:42:1e:1a:e1:
                    d8:95:34:db:64:79:28:ff:ba:2e:11:c2:e5:e8:5b:
                    92:48:fb:47:0b:c2:6c:da:ad:32:83:41:f3:a5:e5:
                    41:70:fd:65:90:6d:fa:fa:51:c4:f9:bd:96:2b:19:
                    04:2c:d3:6d:a7:dc:f0:7f:6f:83:65:e2:6a:ab:87:
                    86:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                AD:BD:98:7A:34:B4:26:F7:FA:C4:26:54:EF:03:BD:E0:24:CB:54:1A
            X509v3 Subject Key Identifier: 
                DA:ED:64:74:14:9C:14:3C:AB:DD:99:A9:BD:5B:28:4D:8B:3C:C9:D8
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.usertrust.com/AddTrustExternalCARoot.crl
            Authority Information Access: 
                OCSP - URI:http://ocsp.usertrust.com
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        4d:42:2f:a6:c1:8a:eb:07:80:90:58:46:8c:f8:19:39:66:2a:
        3c:5a:2c:6d:cf:d4:d9:87:55:8d:79:0b:12:88:7b:40:8f:d5:
        c7:f8:4b:8d:55:16:63:ad:b7:57:dc:3b:2b:bd:d3:c1:4f:1e:
        03:87:4b:44:9b:e3:e2:40:45:26:f3:26:49:2b:6a:84:f1:54:
        7a:d4:42:da:fc:d3:6a:bb:66:7e:ca:9e:ea:e9:bb:dc:07:c7:
        c3:92:4e:83:3c:81:49:9f:92:d5:32:09:ea:49:2e:a1:11:71:
        9a:36:d2:c5:4e:68:b6:cb:0e:1b:25:16:af:6c:de:5d:76:d8:
        1f:72:b1:93:26:86:17:db:18:de:af:45:e9:df:fb:98:af:14:
        18:ed:a4:5e:f6:89:94:45:f0:55:04:4a:dd:ff:27:dd:06:4a:
        40:f6:b4:bc:f1:e4:0f:99:02:bb:fd:5d:0e:2e:28:c1:be:3b:
        5f:1a:3f:97:10:84:bc:16:3e:d8:a3:9c:63:1d:66:cb:5c:5f:
        da:3e:f3:0f:0a:09:35:22:db:db:c0:3f:00:f9:e6:0d:5d:67:
        d1:fd:a0:1e:03:2b:d9:40:f7:be:cc:87:66:54:80:a6:a3:b8:
        f5:19:62:d5:d2:26:b1:98:26:ee:9a:cb:44:a7:45:5a:81:95:
        15:1a:f5:51

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:21:06:a0:81:d3:3f:d8:7a:e5:82:4c:c1:6b:52:09:4e:03
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign Timestamping CA - G2
        Validity
            Not Before: Feb  3 00:00:00 2015 GMT
            Not After : Mar  3 00:00:00 2026 GMT
        Subject: C=SG, O=GMO GlobalSign Pte Ltd, CN=GlobalSign TSA for MS Authenticode - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b0:17:ae:a2:d3:b6:04:30:56:1e:58:0f:b1:ed:
                    55:a4:d6:54:cb:d8:f6:73:3a:ec:5d:5e:ab:25:fd:
                    36:a5:fa:84:c3:61:40:c5:46:b5:59:52:3b:42:a2:
                    2e:5f:13:62:10:a9:5b:e6:73:d6:92:25:b1:7d:23:
                    e3:06:b3:87:3a:0e:43:f0:d7:00:89:53:a2:11:31:
                    52:28:6e:5d:40:72:3c:f2:09:77:a7:49:92:97:d4:
                    6c:90:a0:76:a7:fd:b8:dc:b3:9d:f2:07:60:2c:4f:
                    58:98:00:6b:d3:15:54:e0:fa:dd:ff:80:2c:5f:18:
                    a6:98:ff:d4:ab:ec:a1:45:59:b2:2e:6f:62:5d:e0:
                    d9:19:ac:8b:57:9c:a8:26:2b:d9:17:a5:10:d2:47:
                    08:1a:70:2c:33:8b:7f:68:80:2a:b5:a1:5d:6b:dd:
                    8d:02:02:29:03:aa:7c:37:bb:bb:29:4e:3d:53:93:
                    b3:a6:fa:8f:d2:58:93:15:4c:b9:2d:ab:80:a3:a3:
                    25:fb:af:f7:08:64:b0:7a:44:0f:5c:10:d7:5f:61:
                    37:aa:4e:6b:d3:d2:53:25:9d:82:73:fa:2c:f9:72:
                    b0:a9:19:39:2a:50:fa:a9:d0:3c:3a:ca:e8:5b:ef:
                    f5:5f:51:f4:f9:0a:d9:97:35:de:6a:85:e6:23:04:
                    42:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.4146.1.30
                  CPS: https://www.globalsign.com/repository/
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.globalsign.com/gs/gstimestampingg2.crl
            Authority Information Access: 
                CA Issuers - URI:http://secure.globalsign.com/cacert/gstimestampingg2.crt
            X509v3 Subject Key Identifier: 
                D4:A2:84:4A:38:5A:18:7F:BA:4F:30:50:BD:9D:D5:7A:87:D6:09:F7
            X509v3 Authority Key Identifier: 
                46:D8:3E:FF:DC:E3:BE:FF:83:E6:F4:85:9B:B0:DD:6A:D6:14:A9:C1
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        80:32:dc:07:8d:1c:a0:9c:9d:3c:2a:e8:3d:21:8b:59:a1:4d:
        7e:cc:44:ce:03:be:7e:aa:bc:c4:e6:7b:73:bb:4b:f1:88:da:
        90:4e:75:37:28:38:63:b9:d7:2b:0f:54:a9:56:ce:77:39:97:
        30:73:cd:9b:d9:d9:05:45:1c:8d:a4:b8:03:5d:4f:d9:1c:2e:
        98:e0:e9:88:e6:ec:d7:05:7e:56:2a:7b:f7:16:5b:a3:ad:8f:
        97:25:12:84:1b:b2:5c:63:4a:0a:d2:ef:10:54:47:82:84:35:
        69:28:9c:0c:e4:1f:14:16:24:fa:75:dc:74:72:6e:4e:ca:e3:
        6a:43:af:cf:7d:36:48:d1:bd:e9:06:91:2c:2f:a6:c8:71:fd:
        cf:bd:d8:9d:21:98:fc:af:db:de:22:8c:af:a7:f3:77:ef:9d:
        dc:a3:70:4b:44:1a:f0:78:85:1e:f2:a5:8c:39:b5:dc:88:1c:
        37:ed:ad:14:f5:07:0b:26:bd:be:6d:02:5e:b1:b8:b0:58:6c:
        85:3a:0d:f6:ff:5a:27:0c:c5:de:53:e7:54:3c:56:4c:c9:4e:
        4c:30:f6:f2:5c:fb:1a:8c:c2:82:be:ad:59:91:f6:1b:4d:55:
        7b:cf:5b:01:dc:fd:7a:d3:6f:23:5c:32:47:9b:01:f3:c1:51:
        14:46:8a:9b

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http:\/\/www.usertrust.com, CN=UTN-USERFirst-Object
        Validity
            Not Before: Aug 24 00:00:00 2011 GMT
            Not After : May 30 10:48:38 2020 GMT
        Subject: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Code Signing CA 2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:cb:f8:e7:a7:e8:f1:97:28:40:68:80:37:d2:c8:
                    3f:8e:92:8a:92:37:87:47:80:ea:4c:99:cf:6e:f9:
                    15:47:bd:ee:75:f4:44:ac:d0:c3:d4:4d:f7:19:c0:
                    d3:3c:4d:c1:47:b9:59:65:16:93:8c:d9:0a:84:9b:
                    9f:e8:f6:6a:63:58:fe:5f:dc:d1:7f:4b:51:9f:00:
                    1c:00:87:54:20:07:57:a0:82:c9:2f:98:af:33:8a:
                    bb:7b:80:22:25:6a:6c:af:c2:2c:6c:79:13:bd:a3:
                    2a:48:d6:b5:8e:61:55:e9:6b:e8:3d:80:bf:14:03:
                    85:18:8e:7e:4c:e9:c2:19:88:73:92:72:cd:fa:ff:
                    50:4d:cb:2c:a6:7b:1a:73:b1:00:90:2c:d9:32:e2:
                    fb:fd:ac:95:42:36:ec:34:c5:13:53:68:b2:c1:9f:
                    40:9f:da:7b:c8:9d:62:6c:93:a2:42:d7:79:9f:97:
                    4f:31:5b:50:21:a1:ab:af:d9:1c:b2:ce:75:be:5b:
                    2c:56:00:24:8d:11:c1:75:1f:f0:fe:d2:95:fe:f0:
                    e1:31:23:18:67:c0:5b:13:fd:5a:98:94:94:ff:ff:
                    59:02:1f:00:ac:e6:f1:f2:fa:3a:73:b3:1d:42:fc:
                    54:75:cf:51:31:2f:e3:db:81:d9:77:23:2a:4f:59:
                    ce:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                DA:ED:64:74:14:9C:14:3C:AB:DD:99:A9:BD:5B:28:4D:8B:3C:C9:D8
            X509v3 Subject Key Identifier: 
                1E:C5:B1:2C:7D:87:DA:02:68:7C:25:BC:0C:07:84:3F:B6:CF:DE:F1
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.usertrust.com/UTN-USERFirst-Object.crl
            Authority Information Access: 
                CA Issuers - URI:http://crt.usertrust.com/UTNAddTrustObject_CA.crt
                OCSP - URI:http://ocsp.usertrust.com
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        95:89:77:93:68:01:5e:7c:d9:2d:37:07:90:5d:5a:42:5e:0c:
        64:b4:36:b5:0f:f6:ab:d5:39:27:de:22:46:a4:49:1c:66:4b:
        46:19:59:2e:79:49:03:f6:9c:92:df:6d:50:35:5c:0c:91:2e:
        60:03:59:d0:f1:64:f7:69:09:f6:7e:fe:eb:34:b3:6d:b1:bf:
        66:9c:a3:ba:31:78:b9:87:35:61:3d:92:31:1b:ef:f4:e8:9e:
        d6:ac:45:fa:0c:36:3c:80:67:bb:bd:ef:2e:c2:90:e1:3d:71:
        2f:3b:c1:b0:58:7e:45:c3:52:71:03:07:f6:f3:39:4d:8b:36:
        21:1b:01:df:d9:da:5e:2b:eb:0e:97:80:1e:44:1c:50:88:f5:
        c6:12:33:4a:a8:4d:a5:8d:2f:94:0c:7b:c6:bf:9a:2c:c3:32:
        cd:bd:8c:27:26:f0:e1:30:03:50:06:82:bc:f4:3b:b3:83:75:
        06:c6:ef:ba:ee:d3:80:f8:52:c6:ac:cb:79:f2:38:9e:7b:b0:
        92:58:42:91:05:c8:96:21:ad:b9:4b:16:81:14:69:f1:37:b0:
        fe:34:f7:dc:b0:df:97:f5:43:10:9b:76:8f:b4:65:f5:e8:9f:
        13:b7:1e:ac:6f:c4:69:8a:5f:ba:3c:61:7e:5e:49:86:23:13:
        2e:af:15:48

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:85:96:f5:c5:5f:6b:07:51:35:6a:7b:28:61:db:52
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Code Signing CA 2
        Validity
            Not Before: Jul 24 00:00:00 2015 GMT
            Not After : Dec 31 23:59:59 2015 GMT
        Subject: C=US/postalCode=94304, ST=CA, L=Palo Alto/street=3000 Hanover Street, O=Hewlett-Packard Company, OU=HP Cyber Security, CN=Hewlett-Packard Company
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:bd:70:7a:17:f1:a2:dd:85:1c:08:70:37:56:4f:
                    3f:8e:ef:76:28:5a:f8:5e:73:01:c9:25:1e:2e:92:
                    75:55:67:ff:73:c3:56:70:52:bc:dc:99:e7:96:30:
                    e1:bd:60:19:74:22:71:e6:a8:10:98:24:32:83:59:
                    c7:68:d7:55:34:ae:5b:e8:08:03:3f:3c:da:bc:26:
                    62:31:0e:34:d1:ac:f8:27:73:68:44:d9:79:62:5f:
                    f9:7f:d2:64:05:b3:46:39:1b:f6:f3:fd:67:5d:f8:
                    ed:3a:dc:dd:4d:80:82:d1:82:37:0c:86:35:68:f0:
                    96:7f:2d:90:89:05:a6:30:56:47:3d:08:57:db:6d:
                    38:ca:b7:c3:0b:fd:e9:a9:5b:96:78:92:67:4b:08:
                    8d:bd:aa:9c:a0:f5:a5:6b:ac:ac:46:b9:4a:22:88:
                    80:89:ff:ef:c8:1d:1e:8c:6b:ca:52:81:a9:32:bc:
                    42:4a:f2:ca:29:62:7a:c0:35:e1:4e:3b:80:2f:dc:
                    6d:bd:6d:0d:72:34:2d:14:c5:56:72:25:c9:62:36:
                    49:bb:9c:73:83:d9:31:41:4f:9e:49:2d:20:d6:f5:
                    b7:c4:a4:e2:5c:62:c5:4c:25:ba:f3:ad:d9:11:d3:
                    bc:41:8a:15:6c:1b:58:3f:41:b9:35:ea:b4:cb:6c:
                    61:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                1E:C5:B1:2C:7D:87:DA:02:68:7C:25:BC:0C:07:84:3F:B6:CF:DE:F1
            X509v3 Subject Key Identifier: 
                C2:F8:78:A0:CB:E9:F8:0C:6E:DC:0A:AC:A6:4D:A6:57:F0:0C:87:16
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                Code Signing
            Netscape Cert Type: 
                Object Signing
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.6449.1.2.1.3.2
                  CPS: https://secure.comodo.net/CPS
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.comodoca.com/COMODOCodeSigningCA2.crl
            Authority Information Access: 
                CA Issuers - URI:http://crt.comodoca.com/COMODOCodeSigningCA2.crt
                OCSP - URI:http://ocsp.comodoca.com
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        3f:cb:87:83:38:62:30:ed:2a:d2:7d:a4:df:35:e3:05:15:88:
        1c:d7:c7:a9:f2:eb:5d:29:c1:e2:e7:c2:93:28:6f:7b:47:a7:
        fd:b3:7f:1d:97:64:97:38:37:75:a5:c4:75:8f:8a:02:2c:e3:
        12:fc:0e:08:ca:60:24:88:f6:7d:7e:74:c6:13:31:5e:d8:ad:
        52:0b:db:7d:b4:2f:cd:56:9e:7a:4c:fe:aa:d4:8e:88:bf:b5:
        a8:f7:80:08:76:9c:c6:a6:13:4b:07:48:c8:1e:9c:52:31:6e:
        2e:b2:05:fc:7d:8e:a1:d8:4c:d4:aa:5d:8f:da:68:1d:34:c3:
        68:39:25:3b:b2:87:a2:b5:e4:3e:52:ff:b6:a5:5e:6f:25:ae:
        7f:f1:d8:fd:76:a3:36:29:53:a8:fc:a6:9b:a0:3c:59:79:fa:
        59:41:ec:e9:13:db:12:9e:e8:2c:bc:1d:0f:89:d9:55:4e:aa:
        00:9c:43:5d:f9:b3:06:ce:17:97:64:0e:91:24:df:14:d8:9e:
        4e:d9:85:20:12:d7:55:f7:00:32:04:fc:70:13:8d:50:39:23:
        04:aa:08:38:55:09:16:8c:cc:cd:fe:5a:4a:b8:a9:7a:17:ec:
        44:b4:01:f6:13:82:3e:ce:52:63:a4:03:af:23:fb:cf:5d:b6:
        45:92:42:e8

pkcs7-signedData

SHA1: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15
- :

SHA1

a2 5e 14 4a 27 ff 25 d1 b8 43 ed ac 21 8a 49 6b |.^.J'.%..C..!.Ik| 80 18 07 0c |.... |

Certificates
- Certificate #0
  - 2
    - 04:00:00:00:00:01:2F:4E:E1:52:D7
    - RSA-SHA1: nil
    - Issuer
      - C: BE
      - O: GlobalSign nv-sa
      - OU: Root CA
      - CN: GlobalSign Root CA
    - 2011-04-13 10:00:00 UTC: 2028-01-28 12:00:00 UTC
    - Subject
      - C: BE
      - O: GlobalSign nv-sa
      - CN: GlobalSign Timestamping CA - G2
    - #5
      - rsaEncryption: nil
      - 94:EF:65:F8:B5:57:9F:A0:53:0D:34:06:EB:09:1F:B7:
        47:18:6A:CB:F0:5B:E4:FF:27:A5:34:D1:F7:89:1A:BF:
        9E:B1:CD:12:41:6E:66:D4:81:A0:85:8B:64:5A:46:2F:
        99:A0:8D:77:B1:E2:BC:5C:DD:22:D7:6A:67:D0:BB:E8:
        CA:74:DE:8B:4F:0D:B0:52:E5:90:5B:EB:47:0E:F1:E7:
        9F:9C:0B:90:65:3E:17:96:30:45:72:6D:39:A1:17:36:
        CA:B9:A0:8C:1B:4F:08:19:F6:81:31:AD:61:16:A4:62:
        E6:B4:40:9E:C3:FC:FB:95:F6:FB:B5:2E:95:81:98:E0:
        EF:C5:EB:D8:02:59:78:77:F7:AA:E3:52:6B:50:91:29:
        C5:FC:F7:CD:93:65:D2:60:61:22:F2:06:FB:32:DD:16:
        51:FA:0E:FD:8A:30:F0:17:09:A7:BB:F3:04:AE:AB:90:
        E7:6C:DF:7A:A9:F4:EF:C4:62:27:5F:6F:99:6D:38:74:
        AA:11:8B:DA:DF:C7:14:4C:E9:85:B2:EC:C2:7D:4A:26:
        8F:E7:56:BA:A6:E0:CF:92:53:80:74:F4:03:EC:68:B2:
        60:BC:84:20:00:83:1B:A1:EE:B4:74:05:C1:29:8E:62:
        D0:47:B1:FA:F0:53:CC:18:F9:2E:3B:F9:70:7E:B4:25: 0x010001
    - #6
      - keyUsage: true, 6
      - basicConstraints
        true
        true: 0
      - subjectKeyIdentifier:
        46 d8 3e ff dc e3 be ff 83 e6 f4 85 9b b0 dd 6a |F.>............j| d6 14 a9 c1 |.... |
      - certificatePolicies
        anyPolicy
        id-qt-cps: https://www.globalsign.com/repository/
      - crlDistributionPoints: http://crl.globalsign.net/root.crl
      - authorityKeyIdentifier:
        60 7b 66 1a 45 0d 97 ca 89 50 2f 7d 04 cd 34 a8 |`{f.E....P/}..4.| ff fc fd 4b |...K |
  - RSA-SHA1:
```
4e 5e 56 90 1e 46 b4 d9  49 31 f3 bb 17 39 28 1b  |N^V..F..I1...9(.|
c2 16 dd fd 41 dc 09 05  04 9b 6f b2 a2 9a d6 99  |....A.....o.....|
2e 40 99 00 55 b5 ea 3f  a5 20 76 d3 86 34 d4 17  |.@..U..?. v..4..|
cc 55 3a c7 82 ee ef a8  ba bc d8 06 9f 15 50 df  |.U:...........P.|
cd 16 7b 52 3a 02 d7 19  1a fd af f0 78 5c e0 4b  |..{R:.......x\.K|
c5 18 df 3a 24 1e da ac  b8 a9 58 04 02 07 30 db  |...:$.....X...0.|
b0 12 5e fe 31 be f0 04  48 f4 f0 70 f8 3a 5e 56  |..^.1...H..p.:^V|
83 cf 3d fb 0d bc f4 c5  ed 97 9d b9 d4 db a5 27  |..=............'|
84 e3 38 9b 8b a7 35 86  44 20 a4 3b 6d a4 6a 0b  |..8...5.D .;m.j.|
a1 83 fd 28 eb da ef 28  f6 cc 88 5d fb 0a 3b 00  |...(...(...]..;.|
ab e0 21 eb e2 2f 35 6c  0f 8e 34 45 97 eb a2 f7  |..!../5l..4E....|
99 33 35 7e cb 9a 8a bb  45 4d e7 3f 9f c2 d9 8a  |.35~....EM.?....|
fa 65 b2 6e c7 7e 65 ff  e8 92 e1 2c 31 a2 f7 b0  |.e.n.~e....,1...|
27 36 48 8f 26 6f 3b ee  4d 76 1f 79 c3 e5 7f 96  |'6H.&o;.Mv.y....|
35 bc 2d 0e cc 01 b0 8e  7f ff 51 80 80 a7 92 d4  |5.-.......Q.....|
b3 44 46 64 8c 87 4f 16  63 07 31 4b 63 b0 df f3  |.DFd..O.c.1Kc...|
```
- Certificate #1
  - 2
    - 42:1A:F2:94:09:84:19:1F:52:0A:4B:C6:24:26:A7:4B
    - RSA-SHA1: nil
    - Issuer
      - C: SE
      - O: AddTrust AB
      - OU: AddTrust External TTP Network
      - CN: AddTrust External CA Root
    - 2005-06-07 08:09:10 UTC: 2020-05-30 10:48:38 UTC
    - Subject
      - C: US
      - ST: UT
      - L: Salt Lake City
      - O: The USERTRUST Network
      - OU: http://www.usertrust.com
      - CN: UTN-USERFirst-Object
    - #5
      - rsaEncryption: nil
      - CE:AA:81:3F:A3:A3:61:78:AA:31:00:55:95:11:9E:27:
        0F:1F:1C:DF:3A:9B:82:68:30:C0:4A:61:1D:F1:2F:0E:
        FA:BE:79:F7:A5:23:EF:55:51:96:84:CD:DB:E3:B9:6E:
        3E:31:D8:0A:20:67:C7:F4:D9:BF:94:EB:47:04:3E:02:
        CE:2A:A2:5D:87:04:09:F6:30:9D:18:8A:97:B2:AA:1C:
        FC:41:D2:A1:36:CB:FB:3D:91:BA:E7:D9:70:35:FA:E4:
        E7:90:C3:9B:A3:9B:D3:3C:F5:12:99:77:B1:B7:09:E0:
        68:E6:1C:B8:F3:94:63:88:6A:6A:FE:0B:76:C9:BE:F4:
        22:E4:67:B9:AB:1A:5E:77:C1:85:07:DD:0D:6C:BF:EE:
        06:C7:77:6A:41:9E:A7:0F:D7:FB:EE:94:17:B7:FC:85:
        BE:A4:AB:C4:1C:31:DD:D7:B6:D1:E4:F0:EF:DF:16:8F:
        B2:52:93:D7:A1:D4:89:A1:07:2E:BF:E1:01:12:42:1E:
        1A:E1:D8:95:34:DB:64:79:28:FF:BA:2E:11:C2:E5:E8:
        5B:92:48:FB:47:0B:C2:6C:DA:AD:32:83:41:F3:A5:E5:
        41:70:FD:65:90:6D:FA:FA:51:C4:F9:BD:96:2B:19:04:
        2C:D3:6D:A7:DC:F0:7F:6F:83:65:E2:6A:AB:87:86:75: 0x010001
    - #6
      - authorityKeyIdentifier:
        ad bd 98 7a 34 b4 26 f7 fa c4 26 54 ef 03 bd e0 |...z4.&...&T....| 24 cb 54 1a |$.T. |
      - subjectKeyIdentifier:
        da ed 64 74 14 9c 14 3c ab dd 99 a9 bd 5b 28 4d |..dt...<.....[(M| 8b 3c c9 d8 |.<.. |
      - keyUsage: true, 6
      - basicConstraints: true, true
      - certificatePolicies: anyPolicy
      - crlDistributionPoints: http://crl.usertrust.com/AddTrustExternalCARoot.crl
      - authorityInfoAccess
        OCSP: http://ocsp.usertrust.com
  - RSA-SHA1:
```
4d 42 2f a6 c1 8a eb 07  80 90 58 46 8c f8 19 39  |MB/.......XF...9|
66 2a 3c 5a 2c 6d cf d4  d9 87 55 8d 79 0b 12 88  |f*...|
63 1d 66 cb 5c 5f da 3e  f3 0f 0a 09 35 22 db db  |c.f.\_.>....5"..|
c0 3f 00 f9 e6 0d 5d 67  d1 fd a0 1e 03 2b d9 40  |.?....]g.....+.@|
f7 be cc 87 66 54 80 a6  a3 b8 f5 19 62 d5 d2 26  |....fT......b..&|
b1 98 26 ee 9a cb 44 a7  45 5a 81 95 15 1a f5 51  |..&...D.EZ.....Q|
```
- Certificate #2
  - 2
    - 11:21:06:A0:81:D3:3F:D8:7A:E5:82:4C:C1:6B:52:09:
      4E:03
    - RSA-SHA1: nil
    - Issuer
      - C: BE
      - O: GlobalSign nv-sa
      - CN: GlobalSign Timestamping CA - G2
    - 2015-02-03 00:00:00 UTC: 2026-03-03 00:00:00 UTC
    - Subject
      - C: SG
      - O: GMO GlobalSign Pte Ltd
      - CN: GlobalSign TSA for MS Authenticode - G2
    - #5
      - rsaEncryption: nil
      - B0:17:AE:A2:D3:B6:04:30:56:1E:58:0F:B1:ED:55:A4:
        D6:54:CB:D8:F6:73:3A:EC:5D:5E:AB:25:FD:36:A5:FA:
        84:C3:61:40:C5:46:B5:59:52:3B:42:A2:2E:5F:13:62:
        10:A9:5B:E6:73:D6:92:25:B1:7D:23:E3:06:B3:87:3A:
        0E:43:F0:D7:00:89:53:A2:11:31:52:28:6E:5D:40:72:
        3C:F2:09:77:A7:49:92:97:D4:6C:90:A0:76:A7:FD:B8:
        DC:B3:9D:F2:07:60:2C:4F:58:98:00:6B:D3:15:54:E0:
        FA:DD:FF:80:2C:5F:18:A6:98:FF:D4:AB:EC:A1:45:59:
        B2:2E:6F:62:5D:E0:D9:19:AC:8B:57:9C:A8:26:2B:D9:
        17:A5:10:D2:47:08:1A:70:2C:33:8B:7F:68:80:2A:B5:
        A1:5D:6B:DD:8D:02:02:29:03:AA:7C:37:BB:BB:29:4E:
        3D:53:93:B3:A6:FA:8F:D2:58:93:15:4C:B9:2D:AB:80:
        A3:A3:25:FB:AF:F7:08:64:B0:7A:44:0F:5C:10:D7:5F:
        61:37:AA:4E:6B:D3:D2:53:25:9D:82:73:FA:2C:F9:72:
        B0:A9:19:39:2A:50:FA:A9:D0:3C:3A:CA:E8:5B:EF:F5:
        5F:51:F4:F9:0A:D9:97:35:DE:6A:85:E6:23:04:42:AF: 0x010001
    - #6
      - keyUsage: true, 0x80
      - certificatePolicies
        1.3.6.1.4.1.4146.1.30
        id-qt-cps: https://www.globalsign.com/repository/
      - basicConstraints
        nil
      - extendedKeyUsage: true, timeStamping
      - crlDistributionPoints: http://crl.globalsign.com/gs/gstimestampingg2.crl
      - authorityInfoAccess
        caIssuers: http://secure.globalsign.com/cacert/gstimestampingg2.crt
      - subjectKeyIdentifier:
        d4 a2 84 4a 38 5a 18 7f ba 4f 30 50 bd 9d d5 7a |...J8Z...O0P...z| 87 d6 09 f7 |.... |
      - authorityKeyIdentifier:
        46 d8 3e ff dc e3 be ff 83 e6 f4 85 9b b0 dd 6a |F.>............j| d6 14 a9 c1 |.... |
  - RSA-SHA1:
```
80 32 dc 07 8d 1c a0 9c  9d 3c 2a e8 3d 21 8b 59  |.2.......<*.=!.Y|
a1 4d 7e cc 44 ce 03 be  7e aa bc c4 e6 7b 73 bb  |.M~.D...~....{s.|
4b f1 88 da 90 4e 75 37  28 38 63 b9 d7 2b 0f 54  |K....Nu7(8c..+.T|
a9 56 ce 77 39 97 30 73  cd 9b d9 d9 05 45 1c 8d  |.V.w9.0s.....E..|
a4 b8 03 5d 4f d9 1c 2e  98 e0 e9 88 e6 ec d7 05  |...]O...........|
7e 56 2a 7b f7 16 5b a3  ad 8f 97 25 12 84 1b b2  |~V*{..[....%....|
5c 63 4a 0a d2 ef 10 54  47 82 84 35 69 28 9c 0c  |\cJ....TG..5i(..|
e4 1f 14 16 24 fa 75 dc  74 72 6e 4e ca e3 6a 43  |....$.u.trnN..jC|
af cf 7d 36 48 d1 bd e9  06 91 2c 2f a6 c8 71 fd  |..}6H.....,/..q.|
cf bd d8 9d 21 98 fc af  db de 22 8c af a7 f3 77  |....!....."....w|
ef 9d dc a3 70 4b 44 1a  f0 78 85 1e f2 a5 8c 39  |....pKD..x.....9|
b5 dc 88 1c 37 ed ad 14  f5 07 0b 26 bd be 6d 02  |....7......&..m.|
5e b1 b8 b0 58 6c 85 3a  0d f6 ff 5a 27 0c c5 de  |^...Xl.:...Z'...|
53 e7 54 3c 56 4c c9 4e  4c 30 f6 f2 5c fb 1a 8c  |S.T
```
- Certificate #3
  - 2
    - 10:70:9D:4F:F5:54:08:D7:30:60:01:D8:EA:91:75:BB
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - ST: UT
      - L: Salt Lake City
      - O: The USERTRUST Network
      - OU: http://www.usertrust.com
      - CN: UTN-USERFirst-Object
    - 2011-08-24 00:00:00 UTC: 2020-05-30 10:48:38 UTC
    - Subject
      - C: GB
      - ST: Greater Manchester
      - L: Salford
      - O: COMODO CA Limited
      - CN: COMODO Code Signing CA 2
    - #5
      - rsaEncryption: nil
      - CB:F8:E7:A7:E8:F1:97:28:40:68:80:37:D2:C8:3F:8E:
        92:8A:92:37:87:47:80:EA:4C:99:CF:6E:F9:15:47:BD:
        EE:75:F4:44:AC:D0:C3:D4:4D:F7:19:C0:D3:3C:4D:C1:
        47:B9:59:65:16:93:8C:D9:0A:84:9B:9F:E8:F6:6A:63:
        58:FE:5F:DC:D1:7F:4B:51:9F:00:1C:00:87:54:20:07:
        57:A0:82:C9:2F:98:AF:33:8A:BB:7B:80:22:25:6A:6C:
        AF:C2:2C:6C:79:13:BD:A3:2A:48:D6:B5:8E:61:55:E9:
        6B:E8:3D:80:BF:14:03:85:18:8E:7E:4C:E9:C2:19:88:
        73:92:72:CD:FA:FF:50:4D:CB:2C:A6:7B:1A:73:B1:00:
        90:2C:D9:32:E2:FB:FD:AC:95:42:36:EC:34:C5:13:53:
        68:B2:C1:9F:40:9F:DA:7B:C8:9D:62:6C:93:A2:42:D7:
        79:9F:97:4F:31:5B:50:21:A1:AB:AF:D9:1C:B2:CE:75:
        BE:5B:2C:56:00:24:8D:11:C1:75:1F:F0:FE:D2:95:FE:
        F0:E1:31:23:18:67:C0:5B:13:FD:5A:98:94:94:FF:FF:
        59:02:1F:00:AC:E6:F1:F2:FA:3A:73:B3:1D:42:FC:54:
        75:CF:51:31:2F:E3:DB:81:D9:77:23:2A:4F:59:CE:23: 0x010001
    - #6
      - authorityKeyIdentifier:
        da ed 64 74 14 9c 14 3c ab dd 99 a9 bd 5b 28 4d |..dt...<.....[(M| 8b 3c c9 d8 |.<.. |
      - subjectKeyIdentifier:
        1e c5 b1 2c 7d 87 da 02 68 7c 25 bc 0c 07 84 3f |...,}...h|%....?| b6 cf de f1 |.... |
      - keyUsage: true, 6
      - basicConstraints
        true
        true: 0
      - extendedKeyUsage: codeSigning
      - certificatePolicies: anyPolicy
      - crlDistributionPoints: http://crl.usertrust.com/UTN-USERFirst-Object.crl
      - authorityInfoAccess
        #0
        caIssuers: http://crt.usertrust.com/UTNAddTrustObject_CA.crt
        OCSP: http://ocsp.usertrust.com
  - RSA-SHA1:
```
95 89 77 93 68 01 5e 7c  d9 2d 37 07 90 5d 5a 42  |..w.h.^|.-7..]ZB|
5e 0c 64 b4 36 b5 0f f6  ab d5 39 27 de 22 46 a4  |^.d.6.....9'."F.|
49 1c 66 4b 46 19 59 2e  79 49 03 f6 9c 92 df 6d  |I.fKF.Y.yI.....m|
50 35 5c 0c 91 2e 60 03  59 d0 f1 64 f7 69 09 f6  |P5\...`.Y..d.i..|
7e fe eb 34 b3 6d b1 bf  66 9c a3 ba 31 78 b9 87  |~..4.m..f...1x..|
35 61 3d 92 31 1b ef f4  e8 9e d6 ac 45 fa 0c 36  |5a=.1.......E..6|
3c 80 67 bb bd ef 2e c2  90 e1 3d 71 2f 3b c1 b0  |<.g.......=q/;..|
58 7e 45 c3 52 71 03 07  f6 f3 39 4d 8b 36 21 1b  |X~E.Rq....9M.6!.|
01 df d9 da 5e 2b eb 0e  97 80 1e 44 1c 50 88 f5  |....^+.....D.P..|
c6 12 33 4a a8 4d a5 8d  2f 94 0c 7b c6 bf 9a 2c  |..3J.M../..{...,|
c3 32 cd bd 8c 27 26 f0  e1 30 03 50 06 82 bc f4  |.2...'&..0.P....|
3b b3 83 75 06 c6 ef ba  ee d3 80 f8 52 c6 ac cb  |;..u........R...|
79 f2 38 9e 7b b0 92 58  42 91 05 c8 96 21 ad b9  |y.8.{..XB....!..|
4b 16 81 14 69 f1 37 b0  fe 34 f7 dc b0 df 97 f5  |K...i.7..4......|
43 10 9b 76 8f b4 65 f5  e8 9f 13 b7 1e ac 6f c4  |C..v..e.......o.|
69 8a 5f ba 3c 61 7e 5e  49 86 23 13 2e af 15 48  |i._.
```
- Certificate #4
  - 2
    - 6E:85:96:F5:C5:5F:6B:07:51:35:6A:7B:28:61:DB:52
    - RSA-SHA1: nil
    - Issuer
      - C: GB
      - ST: Greater Manchester
      - L: Salford
      - O: COMODO CA Limited
      - CN: COMODO Code Signing CA 2
    - 2015-07-24 00:00:00 UTC: 2015-12-31 23:59:59 UTC
    - Subject
      - C: US
      - postalCode: 94304
      - ST: CA
      - L: Palo Alto
      - street: 3000 Hanover Street
      - O: Hewlett-Packard Company
      - OU: HP Cyber Security
      - CN: Hewlett-Packard Company
    - #5
      - rsaEncryption: nil
      - BD:70:7A:17:F1:A2:DD:85:1C:08:70:37:56:4F:3F:8E:
        EF:76:28:5A:F8:5E:73:01:C9:25:1E:2E:92:75:55:67:
        FF:73:C3:56:70:52:BC:DC:99:E7:96:30:E1:BD:60:19:
        74:22:71:E6:A8:10:98:24:32:83:59:C7:68:D7:55:34:
        AE:5B:E8:08:03:3F:3C:DA:BC:26:62:31:0E:34:D1:AC:
        F8:27:73:68:44:D9:79:62:5F:F9:7F:D2:64:05:B3:46:
        39:1B:F6:F3:FD:67:5D:F8:ED:3A:DC:DD:4D:80:82:D1:
        82:37:0C:86:35:68:F0:96:7F:2D:90:89:05:A6:30:56:
        47:3D:08:57:DB:6D:38:CA:B7:C3:0B:FD:E9:A9:5B:96:
        78:92:67:4B:08:8D:BD:AA:9C:A0:F5:A5:6B:AC:AC:46:
        B9:4A:22:88:80:89:FF:EF:C8:1D:1E:8C:6B:CA:52:81:
        A9:32:BC:42:4A:F2:CA:29:62:7A:C0:35:E1:4E:3B:80:
        2F:DC:6D:BD:6D:0D:72:34:2D:14:C5:56:72:25:C9:62:
        36:49:BB:9C:73:83:D9:31:41:4F:9E:49:2D:20:D6:F5:
        B7:C4:A4:E2:5C:62:C5:4C:25:BA:F3:AD:D9:11:D3:BC:
        41:8A:15:6C:1B:58:3F:41:B9:35:EA:B4:CB:6C:61:AD: 0x010001
    - #6
      - authorityKeyIdentifier:
        1e c5 b1 2c 7d 87 da 02 68 7c 25 bc 0c 07 84 3f |...,}...h|%....?| b6 cf de f1 |.... |
      - subjectKeyIdentifier:
        c2 f8 78 a0 cb e9 f8 0c 6e dc 0a ac a6 4d a6 57 |..x.....n....M.W| f0 0c 87 16 |.... |
      - keyUsage: true, 0x80
      - basicConstraints
        true
        nil
      - extendedKeyUsage: codeSigning
      - nsCertType: 0x10
      - certificatePolicies
        1.3.6.1.4.1.6449.1.2.1.3.2
        id-qt-cps: https://secure.comodo.net/CPS
      - crlDistributionPoints: http://crl.comodoca.com/COMODOCodeSigningCA2.crl
      - authorityInfoAccess
        #0
        caIssuers: http://crt.comodoca.com/COMODOCodeSigningCA2.crt
        OCSP: http://ocsp.comodoca.com
  - RSA-SHA1:
```
3f cb 87 83 38 62 30 ed  2a d2 7d a4 df 35 e3 05  |?...8b0.*.}..5..|
15 88 1c d7 c7 a9 f2 eb  5d 29 c1 e2 e7 c2 93 28  |........]).....(|
6f 7b 47 a7 fd b3 7f 1d  97 64 97 38 37 75 a5 c4  |o{G......d.87u..|
75 8f 8a 02 2c e3 12 fc  0e 08 ca 60 24 88 f6 7d  |u...,......`$..}|
7e 74 c6 13 31 5e d8 ad  52 0b db 7d b4 2f cd 56  |~t..1^..R..}./.V|
9e 7a 4c fe aa d4 8e 88  bf b5 a8 f7 80 08 76 9c  |.zL...........v.|
c6 a6 13 4b 07 48 c8 1e  9c 52 31 6e 2e b2 05 fc  |...K.H...R1n....|
7d 8e a1 d8 4c d4 aa 5d  8f da 68 1d 34 c3 68 39  |}...L..]..h.4.h9|
25 3b b2 87 a2 b5 e4 3e  52 ff b6 a5 5e 6f 25 ae  |%;.....>R...^o%.|
7f f1 d8 fd 76 a3 36 29  53 a8 fc a6 9b a0 3c 59  |....v.6)S......Rc...#..].E.B.|
```

Signer

1
unnamed
- #0
  - C: GB
  - ST: Greater Manchester
  - L: Salford
  - O: COMODO CA Limited
  - CN: COMODO Code Signing CA 2
- 6E:85:96:F5:C5:5F:6B:07:51:35:6A:7B:28:61:DB:52
SHA1: nil

1.3.6.1.4.1.311.2.1.12
- nil
contentType: 1.3.6.1.4.1.311.2.1.4
1.3.6.1.4.1.311.2.1.11: msCodeInd

messageDigest:

85 a1 26 5b 9a 95 5d f8  93 7e a9 1b 7b d3 67 29  |..&[..]..~..{.g)|
83 66 05 fc                                       |.f..            |

rsaEncryption:

8d 8c 5b bb 6b 40 6b 31  03 28 18 07 40 e1 09 01  |..[.k@k1.(..@...|
1b d8 f9 b7 6e 33 3f 39  e3 f1 90 2d d5 83 8a 67  |....n3?9...-...g|
6e f6 85 ba 7a 06 13 c2  89 ce 9a a7 f6 51 0d 3d  |n...z........Q.=|
4c aa 15 46 2e f9 19 8b  cd b8 ec 7c c2 a1 fa c6  |L..F.......|....|
4d 39 42 72 3f fa db 33  0c 8b 0e 02 e1 80 83 23  |M9Br?..3.......#|
dc ff d6 b3 59 8b d7 ca  aa 0a 8a c5 59 ad 0f 95  |....Y.......Y...|
2e 16 c6 f8 40 7c 45 5d  b9 01 b4 d4 53 fa 47 ee  |....@|E]....S.G.|
a5 60 db da 9e 7b e6 e5  24 f6 70 a6 ec 33 f1 52  |.`...{..$.p..3.R|
b4 41 82 de 84 54 ec 21  b1 1b 8d dc cc dd c6 c8  |.A...T.!........|
c2 53 5f 09 4c f9 58 09  0f ca ff 11 09 e8 10 98  |.S_.L.X.........|
81 2a d1 8a 78 d4 9e 89  01 2c 62 6c 20 65 90 c7  |.*..x....,bl e..|
b0 aa 7a 37 b0 d4 00 29  6d 15 97 82 a8 6b f3 63  |..z7...)m....k.c|
3a de 7d 78 c9 00 21 82  bf 4a f0 44 34 94 bc 14  |:.}x..!..J.D4...|
7d 7b b9 6a 78 ae 2e 7a  4f 93 fd 7a 5a 5a 76 2b  |}{.jx..zO..zZZv+|
23 24 0f 4d c5 7e 2d 71  42 e8 f2 73 90 00 c3 05  |#$.M.~-qB..s....|
76 c2 ca 23 c1 72 aa ef  75 54 04 51 97 43 ab 26  |v..#.r..uT.Q.C.&|

countersignature

unnamed
- #0
  - C: BE
  - O: GlobalSign nv-sa
  - CN: GlobalSign Timestamping CA - G2
- 11:21:06:A0:81:D3:3F:D8:7A:E5:82:4C:C1:6B:52:09:
  4E:03
SHA1: nil

contentType: pkcs7-data
signingTime: 2015-10-28 17:31:21 UTC

messageDigest:

7f af 62 11 e0 12 0c e6  fe 92 14 77 61 97 7e b1  |..b........wa.~.|
76 72 28 dd                                       |vr(.            |

id-smime-aa-signingCertificate
- b3 63 08 b4 d4 cd ed 4f cf bd 66 b9 55 fa e3 bf |.c.....O..f.U...| b1 2c 29 e6 |.,). |
  - unnamed
    - #0
      - C: BE
      - O: GlobalSign nv-sa
      - CN: GlobalSign Timestamping CA - G2
    - 11:21:06:A0:81:D3:3F:D8:7A:E5:82:4C:C1:6B:52:09:
      4E:03

rsaEncryption:

aa 44 52 56 f8 da 02 bf  b2 fb 40 95 af 62 be 1c  |.DRV......@..b..|
0f c7 34 49 e2 19 0e 55  ea 05 91 74 ba 79 6a c9  |..4I...U...t.yj.|
e6 75 9e d6 3e 21 89 de  1e f9 c5 c7 07 cd 0f 69  |.u..>!.........i|
81 45 be 0d 56 ae d1 2c  d7 e5 2e a8 20 c1 42 a1  |.E..V..,.... .B.|
62 7c 4c ca 65 d0 17 d6  0c 1c d2 79 94 95 41 30  |b|L.e......y..A0|
ab ee dd 41 82 71 17 de  e2 9a d9 db 49 43 82 d5  |...A.q......IC..|
50 45 ed 95 72 46 3e 98  03 72 8a 44 e7 f1 67 78  |PE..rF>..r.D..gx|
a7 70 14 bd a8 1e 58 8b  4c cb 66 60 d3 f7 6c 97  |.p....X.L.f`..l.|
2c 51 d5 e6 db fc db cc  8d 7d e2 c2 e3 ec fc 34  |,Q.......}.....4|
5d 74 6b 83 ca 1d 4c 4d  75 62 c1 08 37 63 43 30  |]tk...LMub..7cC0|
84 aa d0 8d 41 f8 95 39  b1 83 7d 9e 0c 55 fc 65  |....A..9..}..U.e|
f9 e6 48 1c 9b 42 e6 d8  53 bc 44 d0 6f 48 9a ef  |..H..B..S.D.oH..|
a2 ec e4 c7 fd f7 8d 8e  f5 da db 68 bb 2e a6 e8  |...........h....|
27 69 23 41 41 3f 46 7b  dd f2 70 ad b1 34 95 61  |'i#AA?F{..p..4.a|
aa cf 1f f6 58 e9 4b 86  21 34 41 e5 84 44 f7 26  |....X.K.!4A..D.&|
82 c6 8b 96 be f0 30 1c  0f ea ed e3 d6 b5 c8 be  |......0.........|

show previews

offset	size	type	comment
15c1	15	HTM		#
1e0a1	19655613	ZIP		#
12dcc5e	8314	BIN	overlay data past EOF	#

Scanning the drive for archives:
1 file, 19786968 bytes (19 MiB)


--
Type = PE
Physical Size = 19786968
CPU = x86
Characteristics = Executable 32-bit NoRelocs
Created = 2009-11-02 20:23:03
Headers Size = 4096
Checksum = 19791248
Image Size = 19832832
Section Alignment = 4096
File Alignment = 4096
Code Size = 73728
Initialized Data Size = 45056
Uninitialized Data Size = 0
Linker Version = 8.0
OS Version = 4.0
Image Version = 0.0
Subsystem Version = 4.0
Subsystem = Windows GUI
Stack Reserve = 32000
Stack Commit = 4096
Heap Reserve = 32000
Heap Commit = 4096
Image Base = 4194304
----
Path = _winzip_
Size = 19656704
Packed Size = 19656704
Virtual Size = 19656704
Characteristics = InitializedData Discardable Read
Offset = 122880
Virtual Address = 0x2B000
--
Path = _winzip_
Type = zip
WARNINGS:
There are data after the end of archive
Offset = -122880
Physical Size = 19778654
Tail Size = 930
Embedded Stub Size = 123041

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
2015-10-27 23:32:24 ....A       524048       183717  Drivers/Dot4/AMD64/winxp/difxapi.dll
2015-10-27 23:32:26 ....A       568592       240384  Drivers/Dot4/AMD64/winxp/hppldcoi.dll
2015-10-27 23:32:28 ....A       202512        98423  Drivers/Dot4/AMD64/winxp/HPZid412.sys
2015-10-27 23:32:28 ....A        72480        33525  Drivers/Dot4/AMD64/winxp/HPZipr12.sys
2015-10-27 23:32:28 ....A        44816        23381  Drivers/Dot4/AMD64/winxp/HPZisc12.sys
2015-10-27 23:32:30 ....A        65808        31704  Drivers/Dot4/AMD64/winxp/HPZius12.sys
2015-10-27 23:32:36 ....A      4118800       945071  hpbcfgre.dll
2015-10-27 23:31:20 ....A       310794        30389  hpbuio170l.cat
2015-10-27 23:12:12 .....        30683         2154  hpbuio170l.inf
2015-10-27 23:31:20 ....A       309870        30243  hpbuio170le.cat
2015-10-27 23:12:12 .....        47869         2208  hpbuio170le.inf
2015-10-27 23:32:38 ....A      1055504       463425  hpbuio32.dll
2015-10-27 23:32:42 ....A      1347344       545553  hpbuio64.dll
2015-10-27 23:32:44 ....A       625400       266246  hpbuiodm64.dll
2015-10-27 23:12:14 .....       347217        24014  hpcpu180.cfg
2015-10-27 23:12:14 .....     14687979     14665650  hpcu180t.cab
2015-10-27 23:31:22 ....A       354263        36121  hpcu180t.cat
2015-10-27 23:12:16 .....       165573        10646  hpcu180t.inf
2015-10-27 23:32:44 ....A        29240        15991  hpfx64bulk.sys
2015-10-27 23:32:46 ....A        39992        21838  hpfx64gen.sys
2015-10-27 23:32:46 ....A       143632        69670  hpmco180.dll
2015-10-27 23:31:24 ....A       310796        30427  hpmews02.cat
2015-10-27 23:12:16 .....          648          374  hpmews02.dat
2015-10-27 23:32:46 ....A       249616       114455  hpmews02.dll
2015-10-27 23:12:16 .....         7950         1463  hpmews02.inf
2015-10-27 23:31:24 ....A       309400        30132  hpmldm02.cat
2015-10-27 23:12:16 .....          665          379  hpmldm02.dat
2015-10-27 23:32:48 ....A       250128       114476  hpmldm02.dll
2015-10-27 23:12:16 .....         3650         1070  hpmldm02.inf
2015-10-27 23:12:16 .....         1165          236  hpmprein.config
2015-10-27 23:32:50 ....A       568592       240383  hpmprein.dll
2015-10-27 23:32:50 ....A        30776        16773  hppdbulkio.sys
2015-10-27 23:32:52 ....A        40504        21881  hppdgenio.sys
2015-10-27 23:31:24 ....A       309399        30098  hppewnd.cat
2015-10-27 23:12:16 .....         3004          547  hppewnd.inf
2015-10-27 23:31:28 ....A       309401        30114  hppfaxnd.cat
2015-10-27 23:12:16 .....         5151          661  hppfaxnd.inf
2015-10-27 23:12:16 .....         5740         1310  hppldcoi.config
2015-10-27 23:31:28 ....A       309398        30119  hppscnd.cat
2015-10-27 23:12:16 .....        13377          912  hppscnd.inf
2015-10-27 23:31:30 ....A       310325        30333  hpzid4v4.cat
2015-10-27 23:12:18 .....       140956         9254  hpzid4vp.inf
2015-10-27 23:31:32 ....A       310787        30422  hpzipa23.cat
2015-10-27 23:12:18 .....       134914         9599  hpzipa23.inf
2015-10-27 23:31:32 ....A       309864        30237  hpzipr23.cat
2015-10-27 23:12:18 .....        71248         6203  hpzipr23.inf
2015-10-27 23:31:34 ....A       311251        30486  hpzius23.cat
2015-10-27 23:12:18 .....       226518        13132  hpzius23.inf
2015-10-27 23:32:56 ....A      3294480       526726  Install.dll
2015-10-27 23:32:58 ....A       349456       158073  Install.exe
2015-10-27 23:12:18 .....        12497        10422  p5a4arww.cab
2015-10-27 23:12:18 .....        12497        10426  p5a4bgww.cab
2015-10-27 23:12:18 .....        12293        10226  p5a4caww.cab
2015-10-27 23:12:18 .....        13177        11119  p5a4csww.cab
2015-10-27 23:12:18 .....        12497        10422  p5a4daww.cab
2015-10-27 23:12:18 .....        13371        11304  p5a4deww.cab
2015-10-27 23:12:18 .....        12497        10423  p5a4elww.cab
2015-10-27 23:12:18 .....        12497        10424  p5a4enww.cab
2015-10-27 23:12:18 .....        12293        10228  p5a4esww.cab
2015-10-27 23:12:18 .....        12497        10423  p5a4etww.cab
2015-10-27 23:12:18 .....        12497        10425  p5a4fiww.cab
2015-10-27 23:12:18 .....        13277        11216  p5a4frww.cab
2015-10-27 23:12:18 .....        12497        10422  p5a4heww.cab
2015-10-27 23:12:18 .....        12497        10424  p5a4hrww.cab
2015-10-27 23:12:18 .....        13123        11063  p5a4huww.cab
2015-10-27 23:12:18 .....        12497        10421  p5a4idww.cab
2015-10-27 23:12:18 .....        12351        10289  p5a4itww.cab
2015-10-27 23:12:18 .....        12121        10050  p5a4jaww.cab
2015-10-27 23:12:18 .....        12497        10422  p5a4kkww.cab
2015-10-27 23:12:18 .....        11769         9697  p5a4koww.cab
2015-10-27 23:12:18 .....        12497        10420  p5a4ltww.cab
2015-10-27 23:12:18 .....        12497        10423  p5a4lvww.cab
2015-10-27 23:12:18 .....        12503        10429  p5a4nlww.cab
2015-10-27 23:12:20 .....        12497        10424  p5a4noww.cab
2015-10-27 23:12:20 .....        13263        11198  p5a4plww.cab
2015-10-27 23:12:20 .....        12909        10839  p5a4ptww.cab
2015-10-27 23:12:20 .....        12497        10418  p5a4roww.cab
2015-10-27 23:12:20 .....        12367        10300  p5a4ruww.cab
2015-10-27 23:12:20 .....        12497        10423  p5a4skww.cab
2015-10-27 23:12:20 .....        12497        10422  p5a4slww.cab
2015-10-27 23:12:20 .....        12497        10424  p5a4srww.cab
2015-10-27 23:12:20 .....        12243        10175  p5a4svww.cab
2015-10-27 23:12:20 .....        12497        10427  p5a4thww.cab
2015-10-27 23:12:20 .....        12833        10769  p5a4trww.cab
2015-10-27 23:12:20 .....        12497        10419  p5a4ukww.cab
2015-10-27 23:12:20 .....        12497        10422  p5a4viww.cab
2015-10-27 23:12:20 .....        11391         9320  p5a4zhcn.cab
2015-10-27 23:12:20 .....        10813         8731  p5a4zhtw.cab
------------------- ----- ------------ ------------  ------------------------
2015-10-27 23:32:58           33756109     19646457  88 files

Warnings: 1

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] can't find file_offset of VA 0x0