filenameEvincePortable.exe
size152184 (0x25278)
md59388a4dd7d953f0229b8777ff0948808
typePE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xe0

Rich Header

lib idversiontimes used
109507273
1235072717
10168
1313072911
148210221
145307291

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x4e1471b8
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x103
Magic0x10b
LinkerVersion9.0
SizeOfCode0x6400
SizeOfInitializedData0x69400
SizeOfUninitializedData0x4200
AddressOfEntryPoint0x354b
BaseOfCode0x1000
BaseOfData0x8000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.0
ImageVersion6.0
SubsystemVersion5.0
Reserved10
SizeOfImage0x1b0000
SizeOfHeaders0x400
CheckSum0x2ed05
Subsystem2
DllCharacteristics0x8400
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

Nullsoft install system v2.x

Sections

namevavsizeraw sizeflags
.text0x10000x63a20x6400R-X CODE
.rdata0x80000x18f20x1a00R-- IDATA
.data0xa0000x6669c0x200RW- IDATA
.ndata0x710000x1350000RW- UDATA
.rsrc0x1a60000x9c880x9e00R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x8a180xb4
RESOURCE0x1a60000x9c88
EXCEPTION00
SECURITY0x241c80x10b0
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x80000x2c0
Delay_IAT00
CLR_Header00
typenamesizecp
ICON#1111110
ICON#296400
ICON#342640
ICON#437520
ICON#522160
ICON#613840
ICON#711280
DIALOG#1052560
DIALOG#1062480
DIALOG#111960
DIALOG#2052560
DIALOG#2062480
DIALOG#211960
DIALOG#3052480
DIALOG#3062400
DIALOG#311880
DIALOG#4052360
DIALOG#4062280
DIALOG#411760
DIALOG#5052400
DIALOG#5062320
DIALOG#511800
GROUP_ICON#1031040
VERSION#112960
MANIFEST#19570
module_namehintordfunction_name
KERNEL32.dll995SetFileTime
KERNEL32.dll81CompareFileTime
KERNEL32.dll919SearchPathW
KERNEL32.dll568GetShortPathNameW
KERNEL32.dll479GetFullPathNameW
KERNEL32.dll790MoveFileW
KERNEL32.dll967SetCurrentDirectoryW
KERNEL32.dll462GetFileAttributesW
KERNEL32.dll486GetLastError
KERNEL32.dll113CreateDirectoryW
KERNEL32.dll986SetFileAttributesW
KERNEL32.dll1057Sleep
KERNEL32.dll614GetTickCount
KERNEL32.dll127CreateFileW
KERNEL32.dll468GetFileSize
KERNEL32.dll501GetModuleFileNameW
KERNEL32.dll425GetCurrentProcess
KERNEL32.dll101CopyFileW
KERNEL32.dll260ExitProcess
KERNEL32.dll641GetWindowsDirectoryW
KERNEL32.dll603GetTempPathW
KERNEL32.dll368GetCommandLineW
KERNEL32.dll978SetErrorMode
KERNEL32.dll67CloseHandle
KERNEL32.dll1206lstrlenW
KERNEL32.dll1203lstrcpynW
KERNEL32.dll439GetDiskFreeSpaceW
KERNEL32.dll663GlobalUnlock
KERNEL32.dll656GlobalLock
KERNEL32.dll163CreateThread
KERNEL32.dll756LoadLibraryW
KERNEL32.dll151CreateProcessW
KERNEL32.dll1196lstrcmpiA
KERNEL32.dll601GetTempFileNameW
KERNEL32.dll1191lstrcatW
KERNEL32.dll544GetProcAddress
KERNEL32.dll753LoadLibraryA
KERNEL32.dll502GetModuleHandleA
KERNEL32.dll819OpenProcess
KERNEL32.dll1200lstrcpyW
KERNEL32.dll630GetVersionExW
KERNEL32.dll582GetSystemDirectoryW
KERNEL32.dll628GetVersion
KERNEL32.dll1199lstrcpyA
KERNEL32.dll896RemoveDirectoryW
KERNEL32.dll1197lstrcmpiW
KERNEL32.dll1194lstrcmpW
KERNEL32.dll264ExpandEnvironmentStringsW
KERNEL32.dll645GlobalAlloc
KERNEL32.dll1124WaitForSingleObject
KERNEL32.dll453GetExitCodeProcess
KERNEL32.dll652GlobalFree
KERNEL32.dll505GetModuleHandleW
KERNEL32.dll755LoadLibraryExW
KERNEL32.dll332FreeLibrary
KERNEL32.dll1171WritePrivateProfileStringW
KERNEL32.dll541GetPrivateProfileStringW
KERNEL32.dll1146WideCharToMultiByte
KERNEL32.dll793MulDiv
KERNEL32.dll1205lstrlenA
KERNEL32.dll1165WriteFile
KERNEL32.dll872ReadFile
KERNEL32.dll794MultiByteToWideChar
KERNEL32.dll991SetFilePointer
KERNEL32.dll281FindClose
KERNEL32.dll304FindNextFileW
KERNEL32.dll292FindFirstFileW
KERNEL32.dll195DeleteFileW
KERNEL32.dll1202lstrcpynA
USER32.dll596ScreenToClient
USER32.dll332GetMessagePos
USER32.dll29CallWindowProcW
USER32.dll458IsWindowVisible
USER32.dll465LoadBitmapW
USER32.dll71CloseClipboard
USER32.dll621SetClipboardData
USER32.dll206EmptyClipboard
USER32.dll527OpenClipboard
USER32.dll719TrackPopupMenu
USER32.dll392GetWindowRect
USER32.dll10AppendMenuW
USER32.dll101CreatePopupMenu
USER32.dll367GetSystemMetrics
USER32.dll211EndDialog
USER32.dll207EnableMenuItem
USER32.dll366GetSystemMenu
USER32.dll619SetClassLongW
USER32.dll454IsWindowEnabled
USER32.dll679SetWindowPos
USER32.dll166DialogBoxParamW
USER32.dll60CheckDlgButton
USER32.dll104CreateWindowExW
USER32.dll709SystemParametersInfoW
USER32.dll566RegisterClassW
USER32.dll631SetDlgItemTextW
USER32.dll290GetDlgItemTextW
USER32.dll508MessageBoxIndirectW
USER32.dll45CharNextA
USER32.dll58CharUpperW
USER32.dll50CharPrevW
USER32.dll169DispatchMessageW
USER32.dll540PeekMessageW
USER32.dll775wsprintfA
USER32.dll160DestroyWindow
USER32.dll93CreateDialogParamW
USER32.dll670SetTimer
USER32.dll684SetWindowTextW
USER32.dll544PostQuitMessage
USER32.dll634SetForegroundWindow
USER32.dll696ShowWindow
USER32.dll776wsprintfW
USER32.dll610SendMessageTimeoutW
USER32.dll469LoadCursorW
USER32.dll624SetCursor
USER32.dll386GetWindowLongW
USER32.dll364GetSysColor
USER32.dll47CharNextW
USER32.dll263GetClassInfoW
USER32.dll238ExitWindowsEx
USER32.dll242FindWindowExW
USER32.dll287GetDlgItem
USER32.dll677SetWindowLongW
USER32.dll473LoadImageW
USER32.dll282GetDC
USER32.dll209EnableWindow
USER32.dll426InvalidateRect
USER32.dll611SendMessageW
USER32.dll150DefWindowProcW
USER32.dll14BeginPaint
USER32.dll269GetClientRect
USER32.dll239FillRect
USER32.dll200DrawTextW
USER32.dll213EndPaint
USER32.dll453IsWindow
GDI32.dll613SetBkColor
GDI32.dll437GetDeviceCaps
GDI32.dll208DeleteObject
GDI32.dll42CreateBrushIndirect
GDI32.dll62CreateFontIndirectW
GDI32.dll614SetBkMode
GDI32.dll653SetTextColor
GDI32.dll606SelectObject
SHELL32.dll120SHBrowseForFolderW
SHELL32.dll209SHGetPathFromIDListW
SHELL32.dll186SHGetFileInfoW
SHELL32.dll280ShellExecuteW
SHELL32.dll169SHFileOperationW
SHELL32.dll216SHGetSpecialFolderLocation
ADVAPI32.dll586RegEnumKeyW
ADVAPI32.dll603RegOpenKeyExW
ADVAPI32.dll554RegCloseKey
ADVAPI32.dll574RegDeleteKeyW
ADVAPI32.dll578RegDeleteValueW
ADVAPI32.dll563RegCreateKeyExW
ADVAPI32.dll632RegSetValueExW
ADVAPI32.dll616RegQueryValueExW
ADVAPI32.dll588RegEnumValueW
COMCTL32.dll79ImageList_AddMasked
COMCTL32.dll84ImageList_Destroy
COMCTL32.dll17
COMCTL32.dll83ImageList_Create
ole32.dll103CoTaskMemFree
ole32.dll244OleInitialize
ole32.dll267OleUninitialize
ole32.dll16CoCreateInstance
VERSION.dll4GetFileVersionInfoSizeW
VERSION.dll5GetFileVersionInfoW
VERSION.dll13VerQueryValueW

StringTable 000004e6

CommentsA build of the PortableApps.com Launcher for Evince Portable, allowing it to be run from a removable drive. For additional details, visit PortableApps.com
CompanyNamePortableApps.com
FileDescriptionEvince Portable (PortableApps.com Launcher)
FileVersion2.1.2.0
InternalNamePortableApps.com Launcher
LegalCopyrightPortableApps.com
LegalTrademarksPortableApps.com is a Trademark of Rare Ideas, LLC.
OriginalFilenameEvincePortable.exe
ProductNameEvince Portable
ProductVersion2.1.2.0

VS_FIXEDFILEINFO

FileVersion2.1.2.0
ProductVersion2.1.2.0
StrucVersion0
FileFlagsMask0
FileFlags0
FileOS4
FileType1
FileSubtype0

Signers (1)

issuer: /C=US/ST=UT/L=Salt Lake City/O=The USERTRUST Network/OU=http://www.usertrust.com/CN=UTN-USERFirst-Object
serial: F834CE8642C3F3FBC05BAA2BF87E94F9

Certificates (3)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA
        Validity
            Not Before: Jun 15 00:00:00 2007 GMT
            Not After : Jun 14 23:59:59 2012 GMT
        Subject: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (1024 bit)
                Modulus:
                    00:c4:b5:f2:52:15:bc:88:86:60:29:16:4a:5b:2f:
                    4b:91:6b:87:91:f3:35:54:58:35:ea:d1:36:5e:62:
                    4d:52:51:34:71:c2:7b:66:1d:89:c8:dd:2a:c4:6a:
                    0a:f6:37:d9:98:74:91:f6:92:ae:b0:b5:76:96:f1:
                    a9:4a:63:45:47:2e:6b:0b:92:4e:4b:2b:8c:ee:58:
                    4a:8b:d4:07:e4:1a:2c:f8:82:aa:58:d9:cd:42:f3:
                    2d:c0:75:de:8d:ab:c7:8e:1d:9a:6c:4c:08:95:1e:
                    de:db:ef:67:e1:72:c2:49:c2:9e:60:3c:e1:e2:be:
                    16:a3:63:78:69:14:7b:ad:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com

            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.verisign.com/tss-ca.crl

            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation
            X509v3 Subject Alternative Name: 
                DirName:/CN=TSA1-2
    Signature Algorithm: sha1WithRSAEncryption
         50:c5:4b:c8:24:80:df:e4:0d:24:c2:de:1a:b1:a1:02:a1:a6:
         82:2d:0c:83:15:81:37:0a:82:0e:2c:b0:5a:17:61:b5:d8:05:
         fe:88:db:f1:91:91:b3:56:1a:40:a6:eb:92:be:38:39:b0:75:
         36:74:3a:98:4f:e4:37:ba:99:89:ca:95:42:1d:b0:b9:c7:a0:
         8d:57:e0:fa:d5:64:04:42:35:4e:01:d1:33:a2:17:c8:4d:aa:
         27:c7:f2:e1:86:4c:02:38:4d:83:78:c6:fc:53:e0:eb:e0:06:
         87:dd:a4:96:9e:5e:0c:98:e2:a5:be:bf:82:85:c3:60:e1:df:
         ad:28:d8:c7:a5:4b:64:da:c7:1b:5b:bd:ac:39:08:d5:38:22:
         a1:33:8b:2f:8a:9a:eb:bc:07:21:3f:44:41:09:07:b5:65:1c:
         24:bc:48:d3:44:80:eb:a1:cf:c9:02:b4:14:cf:54:c7:16:a3:
         80:5c:f9:79:3e:5d:72:7d:88:17:9e:2c:43:a2:ca:53:ce:7d:
         3d:f6:2a:3a:b8:4f:94:00:a5:6d:0a:83:5d:f9:5e:53:f4:18:
         b3:57:0f:70:c3:fb:f5:ad:95:a0:0e:17:de:c4:16:80:60:c9:
         0f:2b:6e:86:04:f1:eb:f4:78:27:d1:05:c5:ee:34:5b:5e:b9:
         49:32:f2:33
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
        Validity
            Not Before: Dec  4 00:00:00 2003 GMT
            Not After : Dec  3 23:59:59 2013 GMT
        Subject: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ca:b2:a4:cc:cd:20:af:0a:7d:89:ac:87:75:
                    f0:b4:4e:f1:df:c1:0f:bf:67:61:bd:a3:64:1c:da:
                    bb:f9:ca:33:ab:84:30:89:58:7e:8c:db:6b:dd:36:
                    9e:0f:bf:d1:ec:78:f2:77:a6:7e:6f:3c:bf:93:af:
                    0d:ba:68:f4:6c:94:ca:bd:52:2d:ab:48:3d:f5:b6:
                    d5:5d:5f:1b:02:9f:fa:2f:6b:1e:a4:f7:a3:9a:a6:
                    1a:c8:02:e1:7f:4c:52:e3:0e:60:ec:40:1c:7e:b9:
                    0d:de:3f:c7:b4:df:87:bd:5f:7a:6a:31:2e:03:99:
                    81:13:a8:47:20:ce:31:73:0d:57:2d:cd:78:34:33:
                    95:12:99:12:b9:de:68:2f:aa:e6:e3:c2:8a:8c:2a:
                    c3:8b:21:87:66:bd:83:58:57:6f:75:bf:3c:aa:26:
                    87:5d:ca:10:15:3c:9f:84:ea:54:c1:0a:6e:c4:fe:
                    c5:4a:dd:b9:07:11:97:22:7c:db:3e:27:d1:1e:78:
                    ec:9f:31:c9:f1:e6:22:19:db:c4:b3:47:43:9a:1a:
                    5f:a0:1e:90:e4:5e:f5:ee:7c:f1:7d:ab:62:01:8f:
                    f5:4d:0b:de:d0:22:56:a8:95:cd:ae:88:76:ae:ee:
                    ba:0d:f3:e4:4d:d9:a0:fb:68:a0:ae:14:3b:b3:87:
                    c1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com

            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.verisign.com/ThawteTimestampingCA.crl

            X509v3 Extended Key Usage: 
                Time Stamping
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=TSA2048-1-53
    Signature Algorithm: sha1WithRSAEncryption
         4a:6b:f9:ea:58:c2:44:1c:31:89:79:99:2b:96:bf:82:ac:01:
         d6:1c:4c:cd:b0:8a:58:6e:df:08:29:a3:5e:c8:ca:93:13:e7:
         04:52:0d:ef:47:27:2f:00:38:b0:e4:c9:93:4e:9a:d4:22:62:
         15:f7:3f:37:21:4f:70:31:80:f1:8b:38:87:b3:e8:e8:97:00:
         fe:cf:55:96:4e:24:d2:a9:27:4e:7a:ae:b7:61:41:f3:2a:ce:
         e7:c9:d9:5e:dd:bb:2b:85:3e:b5:9d:b5:d9:e1:57:ff:be:b4:
         c5:7e:f5:cf:0c:9e:f0:97:fe:2b:d3:3b:52:1b:1b:38:27:f7:
         3f:4a
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f8:34:ce:86:42:c3:f3:fb:c0:5b:aa:2b:f8:7e:94:f9
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Object
        Validity
            Not Before: Feb 15 00:00:00 2011 GMT
            Not After : Feb 15 23:59:59 2012 GMT
        Subject: C=US/postalCode=10009, ST=NY, L=New York/street=PO Box 227, O=Rare Ideas, LLC, CN=Rare Ideas, LLC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0b:d6:1b:86:7a:98:c2:dc:00:61:bf:44:8f:
                    3d:92:98:9e:0f:9a:d5:f5:7f:40:f1:74:80:e6:7c:
                    dd:d0:75:15:14:bd:3d:aa:8a:97:b4:a7:ab:e9:4b:
                    84:0a:8f:f8:38:ef:db:9b:e0:ec:54:1f:14:d7:ad:
                    91:c9:d2:ea:05:58:5d:4b:e9:ef:5a:ca:05:a4:9d:
                    a3:74:fa:65:6a:22:a3:54:93:aa:38:4a:ad:4b:d6:
                    20:6c:ab:36:67:a5:30:52:13:f2:aa:62:2f:4d:90:
                    1a:e1:4e:f9:e4:12:e5:5e:e3:82:4f:9d:75:dd:22:
                    58:a7:90:69:bd:5b:02:ee:cf:50:7c:fb:64:aa:e1:
                    6b:7f:d1:f7:cd:21:a4:51:d0:48:d9:79:d6:44:c4:
                    4a:2b:6d:bc:6a:9a:d3:0e:14:ac:55:49:6a:cc:a1:
                    21:f7:53:4b:74:76:ba:2f:88:d2:53:ad:f4:89:11:
                    7e:59:ff:12:d1:dc:e7:f7:03:73:03:89:bb:e2:35:
                    8f:2e:56:6a:5c:88:10:dc:4c:7f:f9:66:44:6d:4f:
                    40:c6:0c:36:40:66:08:9d:19:11:da:3e:e5:04:2a:
                    66:de:0f:e1:63:8d:32:00:58:fc:d6:ba:5e:b2:cf:
                    65:17:c4:b8:f3:0e:8c:3d:88:30:5f:e1:06:4a:9e:
                    dc:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:DA:ED:64:74:14:9C:14:3C:AB:DD:99:A9:BD:5B:28:4D:8B:3C:C9:D8

            X509v3 Subject Key Identifier: 
                FA:D9:68:F8:C7:85:F8:EA:B5:45:69:43:95:18:3E:F5:84:51:7B:39
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                Code Signing
            Netscape Cert Type: 
                Object Signing
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.6449.1.2.1.3.2
                  CPS: https://secure.comodo.net/CPS

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.usertrust.com/UTN-USERFirst-Object.crl

            Authority Information Access: 
                OCSP - URI:http://ocsp.comodoca.com

    Signature Algorithm: sha1WithRSAEncryption
         c0:54:5e:3f:e6:62:f6:46:4e:6a:11:4c:d5:3f:e5:16:ed:c9:
         e1:82:3f:85:a3:b5:72:58:70:5d:37:cb:ad:30:1b:1a:dc:34:
         8b:03:f6:38:3f:c3:be:3d:67:e6:44:99:7b:f1:04:b8:5d:cb:
         79:e3:54:6f:9f:da:b7:11:0b:bc:f0:75:d2:de:23:c7:da:dd:
         6d:70:1c:01:9b:5d:21:4c:42:e6:b9:97:bd:a7:1f:8d:cf:bb:
         eb:76:47:92:bc:6f:a8:05:9e:b9:9d:9b:96:3e:ce:5d:6b:b6:
         7e:9d:b7:77:d9:0d:8c:60:f6:e6:09:d9:0d:3f:24:93:84:48:
         35:99:eb:f7:34:74:ab:ce:6a:11:a3:56:e8:5c:c0:6f:61:ea:
         2d:01:43:cd:47:65:bd:5d:66:9e:cf:95:76:c8:a7:3b:ea:36:
         a9:e0:f5:f6:ce:87:0b:a3:86:23:ad:3c:51:0f:0e:c3:10:b9:
         47:9c:2c:9b:ae:a1:70:fa:67:3e:7c:91:a7:46:3d:cc:61:47:
         54:df:48:35:6d:f9:3d:4a:69:33:40:8a:ba:d5:f0:27:a9:b7:
         73:1a:db:23:7f:27:57:61:ae:bc:3b:51:06:5a:bf:d7:27:82:
         4b:c8:cc:4f:fb:a4:f6:5b:cf:1d:69:5b:0d:d3:b4:da:80:d4:
         36:c8:93:c7
pkcs7-signedData
  • 1
    • SHA1: nil
    • 1.3.6.1.4.1.311.2.1.4
      • #0
        • 1.3.6.1.4.1.311.2.1.15
          • : 
            00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |
        • SHA1
          • ae bd 3e bc f8 15 ad f3  81 41 15 7c 74 ac 53 7d  |..>......A.|t.S}|
93 fb fc 9f                                       |....            |
    • Certificates
      • Certificate #0
        • 2
          • 38:25:D7:FA:F8:61:AF:9E:F4:90:E7:26:B5:D6:5A:D5
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • O: VeriSign, Inc.
            • CN: VeriSign Time Stamping Services CA
          • 2007-06-15 00:00:00 UTC: 2012-06-14 23:59:59 UTC
          • Subject
            • C: US
            • O: VeriSign, Inc.
            • CN: VeriSign Time Stamping Services Signer - G2
          • #5
            • rsaEncryption: nil
            • C4:B5:F2:52:15:BC:88:86:60:29:16:4A:5B:2F:4B:91:
              6B:87:91:F3:35:54:58:35:EA:D1:36:5E:62:4D:52:51:
              34:71:C2:7B:66:1D:89:C8:DD:2A:C4:6A:0A:F6:37:D9:
              98:74:91:F6:92:AE:B0:B5:76:96:F1:A9:4A:63:45:47:
              2E:6B:0B:92:4E:4B:2B:8C:EE:58:4A:8B:D4:07:E4:1A:
              2C:F8:82:AA:58:D9:CD:42:F3:2D:C0:75:DE:8D:AB:C7:
              8E:1D:9A:6C:4C:08:95:1E:DE:DB:EF:67:E1:72:C2:49:
              C2:9E:60:3C:E1:E2:BE:16:A3:63:78:69:14:7B:AD:2D              : 0x010001
          • X509v3 extensions
            • authorityInfoAccess
              • OCSP: http://ocsp.verisign.com
            • basicConstraints
              • true
              • nil
            • crlDistributionPoints: http://crl.verisign.com/tss-ca.crl
            • extendedKeyUsage: true, timeStamping
            • keyUsage: true, 0xc0
            • subjectAltName
              • CN: TSA1-2
        • RSA-SHA1: 
          50 c5 4b c8 24 80 df e4  0d 24 c2 de 1a b1 a1 02  |P.K.$....$......|
a1 a6 82 2d 0c 83 15 81  37 0a 82 0e 2c b0 5a 17  |...-....7...,.Z.|
61 b5 d8 05 fe 88 db f1  91 91 b3 56 1a 40 a6 eb  |a..........V.@..|
92 be 38 39 b0 75 36 74  3a 98 4f e4 37 ba 99 89  |..89.u6t:.O.7...|
ca 95 42 1d b0 b9 c7 a0  8d 57 e0 fa d5 64 04 42  |..B......W...d.B|
35 4e 01 d1 33 a2 17 c8  4d aa 27 c7 f2 e1 86 4c  |5N..3...M.'....L|
02 38 4d 83 78 c6 fc 53  e0 eb e0 06 87 dd a4 96  |.8M.x..S........|
9e 5e 0c 98 e2 a5 be bf  82 85 c3 60 e1 df ad 28  |.^.........`...(|
d8 c7 a5 4b 64 da c7 1b  5b bd ac 39 08 d5 38 22  |...Kd...[..9..8"|
a1 33 8b 2f 8a 9a eb bc  07 21 3f 44 41 09 07 b5  |.3./.....!?DA...|
65 1c 24 bc 48 d3 44 80  eb a1 cf c9 02 b4 14 cf  |e.$.H.D.........|
54 c7 16 a3 80 5c f9 79  3e 5d 72 7d 88 17 9e 2c  |T....\.y>]r}...,|
43 a2 ca 53 ce 7d 3d f6  2a 3a b8 4f 94 00 a5 6d  |C..S.}=.*:.O...m|
0a 83 5d f9 5e 53 f4 18  b3 57 0f 70 c3 fb f5 ad  |..].^S...W.p....|
95 a0 0e 17 de c4 16 80  60 c9 0f 2b 6e 86 04 f1  |........`..+n...|
eb f4 78 27 d1 05 c5 ee  34 5b 5e b9 49 32 f2 33  |..x'....4[^.I2.3|
      • Certificate #1
        • 2
          • 47:BF:19:95:DF:8D:52:46:43:F7:DB:6D:48:0D:31:A4
          • RSA-SHA1: nil
          • Issuer
            • C: ZA
            • ST: Western Cape
            • L: Durbanville
            • O: Thawte
            • OU: Thawte Certification
            • CN: Thawte Timestamping CA
          • 2003-12-04 00:00:00 UTC: 2013-12-03 23:59:59 UTC
          • Subject
            • C: US
            • O: VeriSign, Inc.
            • CN: VeriSign Time Stamping Services CA
          • #5
            • rsaEncryption: nil
            • A9:CA:B2:A4:CC:CD:20:AF:0A:7D:89:AC:87:75:F0:B4:
              4E:F1:DF:C1:0F:BF:67:61:BD:A3:64:1C:DA:BB:F9:CA:
              33:AB:84:30:89:58:7E:8C:DB:6B:DD:36:9E:0F:BF:D1:
              EC:78:F2:77:A6:7E:6F:3C:BF:93:AF:0D:BA:68:F4:6C:
              94:CA:BD:52:2D:AB:48:3D:F5:B6:D5:5D:5F:1B:02:9F:
              FA:2F:6B:1E:A4:F7:A3:9A:A6:1A:C8:02:E1:7F:4C:52:
              E3:0E:60:EC:40:1C:7E:B9:0D:DE:3F:C7:B4:DF:87:BD:
              5F:7A:6A:31:2E:03:99:81:13:A8:47:20:CE:31:73:0D:
              57:2D:CD:78:34:33:95:12:99:12:B9:DE:68:2F:AA:E6:
              E3:C2:8A:8C:2A:C3:8B:21:87:66:BD:83:58:57:6F:75:
              BF:3C:AA:26:87:5D:CA:10:15:3C:9F:84:EA:54:C1:0A:
              6E:C4:FE:C5:4A:DD:B9:07:11:97:22:7C:DB:3E:27:D1:
              1E:78:EC:9F:31:C9:F1:E6:22:19:DB:C4:B3:47:43:9A:
              1A:5F:A0:1E:90:E4:5E:F5:EE:7C:F1:7D:AB:62:01:8F:
              F5:4D:0B:DE:D0:22:56:A8:95:CD:AE:88:76:AE:EE:BA:
              0D:F3:E4:4D:D9:A0:FB:68:A0:AE:14:3B:B3:87:C1:BB              : 0x010001
          • X509v3 extensions
            • authorityInfoAccess
              • OCSP: http://ocsp.verisign.com
            • basicConstraints
              • true
              • true: 0
            • crlDistributionPoints: http://crl.verisign.com/ThawteTimestampingCA.crl
            • extendedKeyUsage: timeStamping
            • keyUsage: true, 6
            • subjectAltName
              • CN: TSA2048-1-53
        • RSA-SHA1: 
          4a 6b f9 ea 58 c2 44 1c  31 89 79 99 2b 96 bf 82  |Jk..X.D.1.y.+...|
ac 01 d6 1c 4c cd b0 8a  58 6e df 08 29 a3 5e c8  |....L...Xn..).^.|
ca 93 13 e7 04 52 0d ef  47 27 2f 00 38 b0 e4 c9  |.....R..G'/.8...|
93 4e 9a d4 22 62 15 f7  3f 37 21 4f 70 31 80 f1  |.N.."b..?7!Op1..|
8b 38 87 b3 e8 e8 97 00  fe cf 55 96 4e 24 d2 a9  |.8........U.N$..|
27 4e 7a ae b7 61 41 f3  2a ce e7 c9 d9 5e dd bb  |'Nz..aA.*....^..|
2b 85 3e b5 9d b5 d9 e1  57 ff be b4 c5 7e f5 cf  |+.>.....W....~..|
0c 9e f0 97 fe 2b d3 3b  52 1b 1b 38 27 f7 3f 4a  |.....+.;R..8'.?J|
      • Certificate #2
        • 2
          • F8:34:CE:86:42:C3:F3:FB:C0:5B:AA:2B:F8:7E:94:F9
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • ST: UT
            • L: Salt Lake City
            • O: The USERTRUST Network
            • OU: http://www.usertrust.com
            • CN: UTN-USERFirst-Object
          • 2011-02-15 00:00:00 UTC: 2012-02-15 23:59:59 UTC
          • Subject
            • C: US
            • postalCode: 10009
            • ST: NY
            • L: New York
            • street: PO Box 227
            • O: Rare Ideas, LLC
            • CN: Rare Ideas, LLC
          • #5
            • rsaEncryption: nil
            • B6:0B:D6:1B:86:7A:98:C2:DC:00:61:BF:44:8F:3D:92:
              98:9E:0F:9A:D5:F5:7F:40:F1:74:80:E6:7C:DD:D0:75:
              15:14:BD:3D:AA:8A:97:B4:A7:AB:E9:4B:84:0A:8F:F8:
              38:EF:DB:9B:E0:EC:54:1F:14:D7:AD:91:C9:D2:EA:05:
              58:5D:4B:E9:EF:5A:CA:05:A4:9D:A3:74:FA:65:6A:22:
              A3:54:93:AA:38:4A:AD:4B:D6:20:6C:AB:36:67:A5:30:
              52:13:F2:AA:62:2F:4D:90:1A:E1:4E:F9:E4:12:E5:5E:
              E3:82:4F:9D:75:DD:22:58:A7:90:69:BD:5B:02:EE:CF:
              50:7C:FB:64:AA:E1:6B:7F:D1:F7:CD:21:A4:51:D0:48:
              D9:79:D6:44:C4:4A:2B:6D:BC:6A:9A:D3:0E:14:AC:55:
              49:6A:CC:A1:21:F7:53:4B:74:76:BA:2F:88:D2:53:AD:
              F4:89:11:7E:59:FF:12:D1:DC:E7:F7:03:73:03:89:BB:
              E2:35:8F:2E:56:6A:5C:88:10:DC:4C:7F:F9:66:44:6D:
              4F:40:C6:0C:36:40:66:08:9D:19:11:DA:3E:E5:04:2A:
              66:DE:0F:E1:63:8D:32:00:58:FC:D6:BA:5E:B2:CF:65:
              17:C4:B8:F3:0E:8C:3D:88:30:5F:E1:06:4A:9E:DC:83              : 0x010001
          • #6
            • authorityKeyIdentifier: 
              da ed 64 74 14 9c 14 3c  ab dd 99 a9 bd 5b 28 4d  |..dt...<.....[(M|
8b 3c c9 d8                                       |.<..            |
            • subjectKeyIdentifier: 
              fa d9 68 f8 c7 85 f8 ea  b5 45 69 43 95 18 3e f5  |..h......EiC..>.|
84 51 7b 39                                       |.Q{9            |
            • keyUsage: true, 0x80
            • basicConstraints
              • true
              • nil
            • extendedKeyUsage: codeSigning
            • nsCertType: 0x10
            • certificatePolicies
              • 1.3.6.1.4.1.6449.1.2.1.3.2
                • id-qt-cps: https://secure.comodo.net/CPS
            • crlDistributionPoints: http://crl.usertrust.com/UTN-USERFirst-Object.crl
            • authorityInfoAccess
              • OCSP: http://ocsp.comodoca.com
        • RSA-SHA1: 
          c0 54 5e 3f e6 62 f6 46  4e 6a 11 4c d5 3f e5 16  |.T^?.b.FNj.L.?..|
ed c9 e1 82 3f 85 a3 b5  72 58 70 5d 37 cb ad 30  |....?...rXp]7..0|
1b 1a dc 34 8b 03 f6 38  3f c3 be 3d 67 e6 44 99  |...4...8?..=g.D.|
7b f1 04 b8 5d cb 79 e3  54 6f 9f da b7 11 0b bc  |{...].y.To......|
f0 75 d2 de 23 c7 da dd  6d 70 1c 01 9b 5d 21 4c  |.u..#...mp...]!L|
42 e6 b9 97 bd a7 1f 8d  cf bb eb 76 47 92 bc 6f  |B..........vG..o|
a8 05 9e b9 9d 9b 96 3e  ce 5d 6b b6 7e 9d b7 77  |.......>.]k.~..w|
d9 0d 8c 60 f6 e6 09 d9  0d 3f 24 93 84 48 35 99  |...`.....?$..H5.|
eb f7 34 74 ab ce 6a 11  a3 56 e8 5c c0 6f 61 ea  |..4t..j..V.\.oa.|
2d 01 43 cd 47 65 bd 5d  66 9e cf 95 76 c8 a7 3b  |-.C.Ge.]f...v..;|
ea 36 a9 e0 f5 f6 ce 87  0b a3 86 23 ad 3c 51 0f  |.6.........#.|.|
a7 46 3d cc 61 47 54 df  48 35 6d f9 3d 4a 69 33  |.F=.aGT.H5m.=Ji3|
40 8a ba d5 f0 27 a9 b7  73 1a db 23 7f 27 57 61  |@....'..s..#.'Wa|
ae bc 3b 51 06 5a bf d7  27 82 4b c8 cc 4f fb a4  |..;Q.Z..'.K..O..|
f6 5b cf 1d 69 5b 0d d3  b4 da 80 d4 36 c8 93 c7  |.[..i[......6...|
    • Signer
      • 1
      • unnamed
        • #0
          • C: US
          • ST: UT
          • L: Salt Lake City
          • O: The USERTRUST Network
          • OU: http://www.usertrust.com
          • CN: UTN-USERFirst-Object
        • F8:34:CE:86:42:C3:F3:FB:C0:5B:AA:2B:F8:7E:94:F9
      • SHA1: nil
      • #3
        • 1.3.6.1.4.1.311.2.1.12
          • nil
        • contentType: 1.3.6.1.4.1.311.2.1.4
        • 1.3.6.1.4.1.311.2.1.11: msCodeInd
        • messageDigest: 
          9b 39 16 12 a7 c4 1a ed  54 7d 1a 1a 28 d9 fa 36  |.9......T}..(..6|
31 0b 9a 82                                       |1...            |
      • rsaEncryption: 
        a3 44 7b 0d 29 42 7d a2  f0 38 a4 48 cc 4f 00 fe  |.D{.)B}..8.H.O..|
3b 28 b0 6e 09 49 bf fa  ee 57 44 4d 72 11 d5 a5  |;(.n.I...WDMr...|
29 8f 13 9f 92 33 9b 42  8e df 24 e2 ac 79 01 95  |)....3.B..$..y..|
2d b3 85 d4 f0 ce 4f d1  39 1a bd a5 0f 39 14 e1  |-.....O.9....9..|
ec 8b 16 0c 73 76 9f e9  77 8c bf 5b e3 f3 19 fc  |....sv..w..[....|
65 74 6f 0b d8 8b 7d eb  95 15 c4 d7 fa a7 0e 59  |eto...}........Y|
4b aa 81 10 8c d9 8d 9e  fa 9c 87 d4 43 41 28 23  |K...........CA(#|
63 aa 2b 45 38 c1 40 8d  cd f5 39 b8 d2 8d 9b b0  |c.+E8.@...9.....|
e2 3a 11 76 af ae ca 1b  42 57 8f 1c 93 de 15 83  |.:.v....BW......|
bf 6d da 59 fc 69 f4 2d  ae c1 df 3d 98 28 20 67  |.m.Y.i.-...=.( g|
91 b9 22 06 09 e1 62 3a  3d 17 e0 a1 c7 a7 e1 c3  |.."...b:=.......|
75 5f ee 6d 9a 99 f7 a1  6b 91 24 43 bc f5 57 03  |u_.m....k.$C..W.|
7d 27 22 5d 1e 25 ea 6f  c0 56 f1 b8 f5 51 99 43  |}'"].%.o.V...Q.C|
d6 39 4d 8c e5 2d b6 d5  38 79 af 01 25 ab bc cd  |.9M..-..8y..%...|
36 71 b5 7d 49 b0 24 87  23 85 ee e0 a3 88 b9 0c  |6q.}I.$.#.......|
98 c0 ad 0e 24 45 da 70  45 19 43 98 1e 07 d5 f2  |....$E.pE.C.....|
      • countersignature
        • 1
          • unnamed
            • #0
              • C: US
              • O: VeriSign, Inc.
              • CN: VeriSign Time Stamping Services CA
            • 38:25:D7:FA:F8:61:AF:9E:F4:90:E7:26:B5:D6:5A:D5
          • SHA1: nil
          • #2
            • contentType: pkcs7-data
            • signingTime: 2011-10-15 18:57:25 UTC
            • messageDigest: 
              e4 b3 f6 00 86 61 81 16  bd b5 46 97 ae 69 4c 44  |.....a....F..iLD|
f6 38 f9 4d                                       |.8.M            |
          • rsaEncryption: 
            42 0a 95 a6 f4 5d 04 fd  18 3f 15 75 25 1c c7 83  |B....]...?.u%...|
b0 80 f3 f2 ee 4b 83 a7  a1 6e 61 49 76 8c b5 b3  |.....K...naIv...|
38 a2 a8 7d e6 d4 43 77  e4 6a 3e b0 74 0d 09 0f  |8..}..Cw.j>.t...|
c9 06 c6 b2 a3 7a 1f fe  2c 53 07 68 a3 4b ed 08  |.....z..,S.h.K..|
25 58 7c 41 dc b7 44 6c  87 39 20 5a 77 c2 08 01  |%X|A..Dl.9 Zw...|
55 3c 30 cf 09 eb e6 8a  8b 05 08 b4 f5 d0 9f 8a  |U<0.............|
14 87 3a 1b 22 7e 72 c5  5b 92 41 90 50 30 45 f3  |..:."~r.[.A.P0E.|
dd 78 2c 68 89 61 0a d8  9e 87 70 65 5c 8a 25 9a  |.x,h.a....pe\.%.|
offsetsizetypecomment
074240EXE07/06/2011 14:31:20#
15c115HTM#
893811111PNG(256 x 256)#
1220077944BINoverlay data past EOF#
Scanning the drive for archives:
1 file, 152184 bytes (149 KiB)


--
Type = PE
Physical Size = 152184
CPU = x86
Characteristics = Executable 32-bit NoRelocs
Created = 2011-07-06 14:31:20
Headers Size = 1024
Checksum = 191749
Name = EvincePortable.exe
Image Size = 1769472
Section Alignment = 4096
File Alignment = 512
Code Size = 25600
Initialized Data Size = 431104
Uninitialized Data Size = 16896
Linker Version = 9.0
OS Version = 5.0
Image Version = 6.0
Subsystem Version = 5.0
Subsystem = Windows GUI
DLL Characteristics = NoSEH TerminalServerAware
Stack Reserve = 1048576
Stack Commit = 4096
Heap Reserve = 1048576
Heap Commit = 4096
Image Base = 4194304
Comment = FileVersion: 2.1.2.0
ProductVersion: 2.1.2.0
Comments: A build of the PortableApps.com Launcher for Evince Portable, allowing it to be run from a removable drive.  For additional details, visit PortableApps.com
CompanyName: PortableApps.com
FileDescription: Evince Portable (PortableApps.com Launcher)
InternalName: PortableApps.com Launcher
LegalCopyright: PortableApps.com
LegalTrademarks: PortableApps.com is a Trademark of Rare Ideas, LLC.
OriginalFilename: EvincePortable.exe
ProductName: Evince Portable
----
Path = [0]
Size = 73672
Packed Size = 73672
Virtual Size = 73672
Offset = 74240
--
Path = [0]
Type = Nsis
Physical Size = 73667
Tail Size = 5
Method = LZMA:25
Solid = +
Headers Size = 273872
Embedded Stub Size = 0
SubType = NSIS-Park-1 Unicode

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
                    .....        11776        73663  $PLUGINSDIR/newtextreplace.dll
                    .....        11264               $PLUGINSDIR/System.dll
                    .....        13312               $PLUGINSDIR/UAC.dll
                    .....         7168               $PLUGINSDIR/MoreInfo.dll
                    .....         8704               $PLUGINSDIR/newadvsplash.dll
                    .....        29696               $PLUGINSDIR/registry.dll
                    .....         6144               $PLUGINSDIR/nsExec.dll
                    .....                            $PLUGINSDIR/execDos.dll
------------------- ----- ------------ ------------  ------------------------
                                 88064        73663  8 files
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable







[?] ignoring invalid PEdump::BITMAPINFOHEADER