ieaspinstallclient_demo.exe

info
MZ
PE
resources
strings
imports
foremost
7zip
version info
signature
hexdump
disasm
log
discuss
donate

filename	ieaspinstallclient_demo.exe
size	481816 (0x75a18)
md5	be3d47915df32f1bafaf50b56de07f40

type	PE32 executable (GUI) Intel 80386, for MS Windows, InstallShield self-extracting archive
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xe0

Rich Header

lib id	version	times used
28	9178	21
11	8047	8
14	7299	20
10	8047	73
25	9210	15
1	0	187
11	8966	10
6	1735	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	4
TimeDateStamp	0x3d4a2e3e
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x10f
Magic	0x10b
LinkerVersion	6.0
SizeOfCode	0x13000
SizeOfInitializedData	0x36000
SizeOfUninitializedData	0
AddressOfEntryPoint	0x8af7
BaseOfCode	0x1000
BaseOfData	0x14000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x1000
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x4a000
SizeOfHeaders	0x1000
CheckSum	0x7a998
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

Armadillo v4.x

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x12436	0x13000	R-X CODE
.rdata	0x14000	0x19b2	0x2000	R-- IDATA
.data	0x16000	0x6e64	0x4000	RW- IDATA
.rsrc	0x1d000	0x2caa8	0x2d000	R-- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x14968	0xa0
RESOURCE	0x1d000	0x2caa8
EXCEPTION	0	0
SECURITY	0x745c0	0x1458
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x14000	0x304
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size
BITMAP	#118	154530
BITMAP	#132	14564
ICON	#1	296
ICON	#2	1384
ICON	#3	744
ICON	#4	2216
DIALOG	IDD_WIZ97SHEET	410
DIALOG	#1000	146
DIALOG	#1001	190
DIALOG	#1002	214
DIALOG	#1003	174
DIALOG	#1004	626
DIALOG	#1005	226
DIALOG	#1006	144
DIALOG	#1007	240
DIALOG	#1009	98
STRING	#1	1586
STRING	#3	424
STRING	#4	282
STRING	#19	186
STRING	#20	870
STRING	#21	152
STRING	#376	88
GROUP_ICON	#103	62
VERSION	#1	1640

id	lang	string
1	1033	PackageForTheWeb Error
2	1033	This self extracting executable file appears to have been corrupted and cannot be executed. You should obtain a new copy of this file to insure that it will execute correctly.
3	1033	Unable to open the self-extracting executable file. The file is locked or in use by another process. The installation will terminate.
4	1033	PackageForTheWeb
5	1033	Unable to access the source file!
6	1033	Unable to create the cabinet file!
7	1033	Unable to access the specified path.
8	1033	Unable to create the specified output folder. Bad path name.
9	1033	Unable to start the decompression process!
10	1033	The EXE file has been corrupted. Unable to continue.
12	1033	Unable to execute the specified command line!
13	1033	This program is used internally by PackageFromTheWeb. It should not be executed directly.
14	1033	Bad or missing header information!
32	1033	Do you wish to cancel the installation?
34	1033	Insufficient disk space to open the package!
35	1033	Security error! Invalid password.
37	1033	Unpacking '%s'...
38	1033	Memory allocation failure!
44	1033	General failure reading this package.
48	1033	Unable to initialize the extension DLL.
49	1033	Error Executing the Specified Program
50	1033	Unpacking %s...
52	1033	The specified drive does not exist
300	1033	No error
301	1033	Missing cabinet file!
302	1033	Input file is not a cabinet.
303	1033	Bad cabinet version.
304	1033	Corrupt cabinet file!
305	1033	Memory allocation failure!
306	1033	Invalid file compression type!
307	1033	CRC failure.
308	1033	System error during decompression
310	1033	Incorrect cabinet file selected
311	1033	The package decompression has been cancelled.
312	1033	Unable to create the specified output folder!
313	1033	Unable to compute required disk space
314	1033	There is not enough space on drive %s to extract this package.
315	1033	MB
316	1033	KB
317	1033	bytes
318	1033	There is not enough space on drive %s to extract this package
319	1033	version
324	1033	Please free up %.2f %s and click Retry
328	1033	12,MS Shell Dlg
329	1033	&Finish
6001	1033	8,MS Shell Dlg
6002	1033	8,MS Shell Dlg

module_name	hint	ord	function_name
KERNEL32.dll	393		GetProcAddress
KERNEL32.dll	224		FormatMessageA
KERNEL32.dll	120		DeleteFileA
KERNEL32.dll	592		MulDiv
KERNEL32.dll	533		IsDBCSLeadByte
KERNEL32.dll	324		GetExitCodeProcess
KERNEL32.dll	92		CreateProcessA
KERNEL32.dll	436		GetTempFileNameA
KERNEL32.dll	419		GetSystemDefaultLCID
KERNEL32.dll	869		WaitForSingleObject
KERNEL32.dll	50		CompareStringA
KERNEL32.dll	809		Sleep
KERNEL32.dll	757		SetFileTime
KERNEL32.dll	566		LocalFileTimeToFileTime
KERNEL32.dll	132		DosDateTimeToFileTime
KERNEL32.dll	229		FreeLibrary
KERNEL32.dll	671		RemoveDirectoryA
KERNEL32.dll	206		FindNextFileA
KERNEL32.dll	889		WritePrivateProfileSectionA
KERNEL32.dll	412		GetStartupInfoA
KERNEL32.dll	886		WriteFile
KERNEL32.dll	656		ReadFile
KERNEL32.dll	751		SetFileAttributesA
KERNEL32.dll	568		LocalFree
KERNEL32.dll	564		LocalAlloc
KERNEL32.dll	577		LockResource
KERNEL32.dll	563		LoadResource
KERNEL32.dll	212		FindResourceA
KERNEL32.dll	808		SizeofResource
KERNEL32.dll	359		GetModuleHandleA
KERNEL32.dll	478		GlobalFree
KERNEL32.dll	489		GlobalUnlock
KERNEL32.dll	482		GlobalLock
KERNEL32.dll	471		GlobalAlloc
KERNEL32.dll	593		MultiByteToWideChar
KERNEL32.dll	917		lstrcmpiA
KERNEL32.dll	313		GetDiskFreeSpaceA
KERNEL32.dll	495		HeapAlloc
KERNEL32.dll	395		GetProcessHeap
KERNEL32.dll	501		HeapFree
KERNEL32.dll	923		lstrcpynA
KERNEL32.dll	171		ExitProcess
KERNEL32.dll	74		CreateFileA
KERNEL32.dll	75		CreateFileMappingA
KERNEL32.dll	580		MapViewOfFile
KERNEL32.dll	837		UnmapViewOfFile
KERNEL32.dll	66		CreateDirectoryA
KERNEL32.dll	753		SetFilePointer
KERNEL32.dll	333		GetFileSize
KERNEL32.dll	193		FindClose
KERNEL32.dll	346		GetLastError
KERNEL32.dll	197		FindFirstFileA
KERNEL32.dll	926		lstrlenA
KERNEL32.dll	328		GetFileAttributesA
KERNEL32.dll	389		GetPrivateProfileStringA
KERNEL32.dll	422		GetSystemDirectoryA
KERNEL32.dll	466		GetWindowsDirectoryA
KERNEL32.dll	911		lstrcatA
KERNEL32.dll	357		GetModuleFileNameA
KERNEL32.dll	438		GetTempPathA
KERNEL32.dll	920		lstrcpyA
KERNEL32.dll	385		GetPrivateProfileSectionA
KERNEL32.dll	558		LoadLibraryA
KERNEL32.dll	587		MoveFileExA
KERNEL32.dll	891		WritePrivateProfileStringA
KERNEL32.dll	410		GetShortPathNameA
KERNEL32.dll	219		FlushFileBuffers
KERNEL32.dll	526		IsBadCodePtr
KERNEL32.dll	44		CloseHandle
KERNEL32.dll	780		SetStdHandle
KERNEL32.dll	797		SetUnhandledExceptionFilter
KERNEL32.dll	545		LCMapStringW
KERNEL32.dll	544		LCMapStringA
KERNEL32.dll	336		GetFileType
KERNEL32.dll	414		GetStdHandle
KERNEL32.dll	762		SetHandleCount
KERNEL32.dll	321		GetEnvironmentStringsW
KERNEL32.dll	319		GetEnvironmentStrings
KERNEL32.dll	873		WideCharToMultiByte
KERNEL32.dll	228		FreeEnvironmentStringsW
KERNEL32.dll	227		FreeEnvironmentStringsA
KERNEL32.dll	834		UnhandledExceptionFilter
KERNEL32.dll	303		GetCurrentProcess
KERNEL32.dll	817		TerminateProcess
KERNEL32.dll	418		GetStringTypeW
KERNEL32.dll	415		GetStringTypeA
KERNEL32.dll	380		GetOEMCP
KERNEL32.dll	235		GetACP
KERNEL32.dll	241		GetCPInfo
KERNEL32.dll	532		IsBadWritePtr
KERNEL32.dll	505		HeapReAlloc
KERNEL32.dll	853		VirtualAlloc
KERNEL32.dll	856		VirtualFree
KERNEL32.dll	497		HeapCreate
KERNEL32.dll	499		HeapDestroy
KERNEL32.dll	456		GetVersionExA
KERNEL32.dll	322		GetEnvironmentVariableA
KERNEL32.dll	455		GetVersion
KERNEL32.dll	253		GetCommandLineA
KERNEL32.dll	689		RtlUnwind
KERNEL32.dll	529		IsBadReadPtr
USER32.dll	598		SetFocus
USER32.dll	511		PostMessageA
USER32.dll	273		GetDlgItem
USER32.dll	566		SendDlgItemMessageA
USER32.dll	325		GetParent
USER32.dll	268		GetDC
USER32.dll	445		LoadImageA
USER32.dll	476		MessageBoxA
USER32.dll	728		wsprintfA
USER32.dll	59		CheckRadioButton
USER32.dll	196		EnableWindow
USER32.dll	419		IsDlgButtonChecked
USER32.dll	275		GetDlgItemTextA
USER32.dll	56		CheckDlgButton
USER32.dll	595		SetDlgItemTextA
USER32.dll	554		ReleaseDC
USER32.dll	366		GetWindowLongA
USER32.dll	646		SetWindowTextA
USER32.dll	42		CharNextA
USER32.dll	270		GetDesktopWindow
USER32.dll	375		GetWindowTextA
USER32.dll	362		GetWindow
USER32.dll	153		DestroyWindow
USER32.dll	85		CreateDialogParamA
USER32.dll	346		GetSysColor
USER32.dll	347		GetSysColorBrush
USER32.dll	226		FillRect
USER32.dll	13		BeginPaint
USER32.dll	188		DrawTextA
USER32.dll	200		EndPaint
USER32.dll	255		GetClientRect
USER32.dll	561		ScreenToClient
USER32.dll	489		MoveWindow
USER32.dll	614		SetParent
USER32.dll	466		MapDialogRect
USER32.dll	323		GetNextDlgTabItem
USER32.dll	372		GetWindowRect
USER32.dll	82		CreateDialogIndirectParamA
USER32.dll	427		IsWindow
USER32.dll	403		InvalidateRect
USER32.dll	428		IsWindowEnabled
USER32.dll	658		ShowWindow
USER32.dll	699		UpdateWindow
USER32.dll	417		IsDialogMessageA
USER32.dll	643		SetWindowPos
USER32.dll	235		GetActiveWindow
USER32.dll	579		SetActiveWindow
USER32.dll	640		SetWindowLongA
USER32.dll	456		LoadStringA
USER32.dll	443		LoadIconA
USER32.dll	161		DispatchMessageA
USER32.dll	571		SendMessageA
USER32.dll	682		TranslateMessage
USER32.dll	509		PeekMessageA
GDI32.dll	58		CreateFontIndirectA
GDI32.dll	497		RealizePalette
GDI32.dll	525		SelectPalette
GDI32.dll	69		CreatePalette
GDI32.dll	405		GetObjectA
GDI32.dll	421		GetStockObject
GDI32.dll	51		CreateDIBitmap
GDI32.dll	438		GetTextExtentPointA
GDI32.dll	524		SelectObject
GDI32.dll	202		EnumFontFamiliesExA
GDI32.dll	140		DeleteDC
GDI32.dll	18		BitBlt
GDI32.dll	588		TextOutA
GDI32.dll	532		SetBkMode
GDI32.dll	531		SetBkColor
GDI32.dll	45		CreateCompatibleDC
GDI32.dll	80		CreateSolidBrush
GDI32.dll	570		SetTextColor
GDI32.dll	143		DeleteObject
GDI32.dll	363		GetDeviceCaps
ADVAPI32.dll	456		RegCloseKey
ADVAPI32.dll	491		RegQueryValueExA
ADVAPI32.dll	481		RegOpenKeyExA
SHELL32.dll	152		ShellExecuteA
SHELL32.dll	64		SHBrowseForFolderA
SHELL32.dll	106		SHGetPathFromIDListA
SHELL32.dll	101		SHGetMalloc
LZ32.dll	9		LZOpenFileA
LZ32.dll	5		LZCopy
LZ32.dll	3		LZClose
COMCTL32.dll		17

StringTable 040904b0

Comments
CompanyName	AVACODE LTD
FileDescription
InternalName	stub32
OriginalFilename	stub32i.exe
FileVersion	240204
LegalCopyright	Copyright (c) 2000-2004 Avacode Ltd. All Rights Reserved
ProductName	ImageWriter
ProductVersion	240204

VS_FIXEDFILEINFO

FileVersion	4.1.100.1332
ProductVersion	4.1.0.0
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	1
FileSubtype	0

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa (c)01/CN=VeriSign Class 3 Code Signing 2001 CA

serial: 292B18155AB195EC6E355893686AF113

Certificates (4)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:78:4c:eb:cf:5a:6b:23:6e:a7:da:e5:f5:37:ca:b8
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority
        Validity
            Not Before: Dec  3 00:00:00 2001 GMT
            Not After : Dec  2 23:59:59 2011 GMT
        Subject: O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)01, CN=VeriSign Class 3 Code Signing 2001 CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (1024 bit)
                Modulus:
                    00:c4:11:eb:75:ed:e7:98:84:9b:70:97:76:62:b1:
                    62:c1:de:73:3f:51:a6:bf:a0:d1:29:8e:8f:ec:1c:
                    17:da:e3:83:89:03:62:29:d2:10:58:ed:dd:65:09:
                    3c:e2:c4:c7:67:17:8b:ad:dc:5d:4d:c5:5e:67:18:
                    96:41:36:44:ba:f8:44:11:2f:b3:9f:7e:78:7f:b2:
                    2a:16:1e:6c:c8:05:00:d9:09:23:6c:28:cd:05:cc:
                    1e:db:6e:65:6a:d1:8f:02:e9:0c:1d:6e:87:6f:65:
                    ac:87:dd:06:46:8b:a0:5d:b5:62:4b:14:fb:2e:ed:
                    2c:8c:bc:40:c0:de:4e:6c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/rpa

            X509v3 CRL Distribution Points: 

                CRL Issuer:
                  URI:http://crl.verisign.com/pca3.1.1.crl

            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, Code Signing
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Netscape Cert Type: 
                Object Signing CA
            X509v3 Subject Alternative Name: 
                DirName:/CN=Class3CA1-12
            X509v3 Subject Key Identifier: 
                35:2B:F4:64:73:90:9C:03:6D:03:0D:67:60:6B:DD:0B:10:3C:BB:61
    Signature Algorithm: sha1WithRSAEncryption
         65:6a:25:b1:ef:c2:35:d7:f1:2b:b3:f4:d9:fd:19:c2:2d:8a:
         ea:2b:4f:2e:22:bc:72:40:4b:c1:9e:7e:c2:97:9a:f5:a4:30:
         ad:1f:1f:c8:4e:3e:75:a7:30:36:f4:d5:41:96:44:9b:b9:ad:
         6b:6c:35:e4:be:7b:c0:ee:a8:f4:79:e6:e7:3f:0b:dd:a9:ef:
         72:9d:da:4a:3d:28:7f:45:28:c0:3b:fa:20:2e:d7:57:d6:8e:
         b9:db:29:5e:d2:99:fc:0d:47:20:32:d2:e3:ec:5e:79:3e:2c:
         bb:fa:6f:2b:99:8e:1f:e6:43:9e:80:fb:56:af:b3:b3:44:23:
         68:64

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
        Validity
            Not Before: Dec  4 00:00:00 2003 GMT
            Not After : Dec  3 23:59:59 2013 GMT
        Subject: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ca:b2:a4:cc:cd:20:af:0a:7d:89:ac:87:75:
                    f0:b4:4e:f1:df:c1:0f:bf:67:61:bd:a3:64:1c:da:
                    bb:f9:ca:33:ab:84:30:89:58:7e:8c:db:6b:dd:36:
                    9e:0f:bf:d1:ec:78:f2:77:a6:7e:6f:3c:bf:93:af:
                    0d:ba:68:f4:6c:94:ca:bd:52:2d:ab:48:3d:f5:b6:
                    d5:5d:5f:1b:02:9f:fa:2f:6b:1e:a4:f7:a3:9a:a6:
                    1a:c8:02:e1:7f:4c:52:e3:0e:60:ec:40:1c:7e:b9:
                    0d:de:3f:c7:b4:df:87:bd:5f:7a:6a:31:2e:03:99:
                    81:13:a8:47:20:ce:31:73:0d:57:2d:cd:78:34:33:
                    95:12:99:12:b9:de:68:2f:aa:e6:e3:c2:8a:8c:2a:
                    c3:8b:21:87:66:bd:83:58:57:6f:75:bf:3c:aa:26:
                    87:5d:ca:10:15:3c:9f:84:ea:54:c1:0a:6e:c4:fe:
                    c5:4a:dd:b9:07:11:97:22:7c:db:3e:27:d1:1e:78:
                    ec:9f:31:c9:f1:e6:22:19:db:c4:b3:47:43:9a:1a:
                    5f:a0:1e:90:e4:5e:f5:ee:7c:f1:7d:ab:62:01:8f:
                    f5:4d:0b:de:d0:22:56:a8:95:cd:ae:88:76:ae:ee:
                    ba:0d:f3:e4:4d:d9:a0:fb:68:a0:ae:14:3b:b3:87:
                    c1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com

            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.verisign.com/ThawteTimestampingCA.crl

            X509v3 Extended Key Usage: 
                Time Stamping
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=TSA2048-1-53
    Signature Algorithm: sha1WithRSAEncryption
         4a:6b:f9:ea:58:c2:44:1c:31:89:79:99:2b:96:bf:82:ac:01:
         d6:1c:4c:cd:b0:8a:58:6e:df:08:29:a3:5e:c8:ca:93:13:e7:
         04:52:0d:ef:47:27:2f:00:38:b0:e4:c9:93:4e:9a:d4:22:62:
         15:f7:3f:37:21:4f:70:31:80:f1:8b:38:87:b3:e8:e8:97:00:
         fe:cf:55:96:4e:24:d2:a9:27:4e:7a:ae:b7:61:41:f3:2a:ce:
         e7:c9:d9:5e:dd:bb:2b:85:3e:b5:9d:b5:d9:e1:57:ff:be:b4:
         c5:7e:f5:cf:0c:9e:f0:97:fe:2b:d3:3b:52:1b:1b:38:27:f7:
         3f:4a

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA
        Validity
            Not Before: Dec  4 00:00:00 2003 GMT
            Not After : Dec  3 23:59:59 2008 GMT
        Subject: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:50:28:48:dd:d3:68:7a:84:18:44:66:75:5d:
                    7e:c4:b8:9f:63:26:ff:3d:43:9c:7c:11:38:10:25:
                    55:73:d9:75:27:69:fd:4e:b9:20:5c:d3:0a:f9:a0:
                    1b:2a:ed:55:56:21:61:d8:1e:db:e4:bc:33:6b:c7:
                    ef:dd:a3:37:65:8e:1b:93:0c:b6:53:1e:5c:7c:66:
                    35:5f:05:8a:45:fe:76:4e:df:53:80:a2:81:20:9d:
                    ae:88:5c:a2:08:f7:e5:30:f9:ee:22:37:4c:42:0a:
                    ce:df:c6:1f:c4:d6:55:e9:81:3f:b5:52:a3:2c:aa:
                    01:7a:f2:a2:aa:8d:35:fe:9f:e6:5d:6a:05:9f:3d:
                    6b:e3:bf:96:c0:fe:cc:60:f9:40:e7:07:a0:44:eb:
                    81:51:6e:a5:2a:f2:b6:8a:10:28:ed:8f:dc:06:a0:
                    86:50:9a:7b:4a:08:0d:30:1d:ca:10:9e:6b:f7:e9:
                    58:ae:04:a9:40:99:b2:28:e8:8f:16:ac:3c:e3:53:
                    6f:4b:d3:35:9d:b5:6f:64:1d:b3:96:2c:bb:3d:e7:
                    79:eb:6d:7a:f9:16:e6:26:ad:af:ef:99:53:b7:40:
                    2c:95:b8:79:aa:fe:d4:52:ab:29:74:7e:42:ec:39:
                    1e:a2:6a:16:e6:59:bb:24:68:d8:00:80:43:10:87:
                    80:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com

            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.verisign.com/tss-ca.crl

            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation
            X509v3 Subject Alternative Name: 
                DirName:/CN=TSA2048-1-54
    Signature Algorithm: sha1WithRSAEncryption
         87:78:70:da:4e:52:01:20:5b:e0:79:c9:82:30:c4:fd:b9:19:
         96:bd:91:00:c3:bd:cd:cd:c6:f4:0e:d8:ff:f9:4d:c0:33:62:
         30:11:c5:f5:74:1b:d4:92:de:5f:9c:20:13:b1:7c:45:be:50:
         cd:83:e7:80:17:83:a7:27:93:67:13:46:fb:ca:b8:98:41:03:
         cc:9b:51:5b:05:8b:7f:a8:6f:f3:1b:50:1b:24:2e:f2:69:8d:
         6c:22:f7:bb:ca:16:95:ed:0c:74:c0:68:77:d9:eb:99:62:87:
         c1:73:90:f8:89:74:7a:23:ab:a3:98:7b:97:b1:f7:8f:29:71:
         4d:2e:75:1b:48:41:da:f0:b5:0d:20:54:d6:77:a0:97:82:63:
         69:fd:09:cf:8a:f0:75:bb:09:9b:d9:f9:11:55:26:9a:61:32:
         be:7a:02:b0:7b:86:be:a2:c3:8b:22:2c:78:d1:35:76:bc:92:
         73:5c:f9:b9:e6:4c:15:0a:23:cc:e4:d2:d4:34:2e:49:40:15:
         3c:0f:60:7a:24:c6:a5:66:ef:96:cf:70:eb:3e:e7:f4:0d:7e:
         dc:d1:7c:a3:76:71:69:c1:9c:4f:47:30:35:21:b1:a2:af:1a:
         62:3c:2b:d9:8e:aa:2a:07:7b:d8:18:b3:5c:7b:e2:9d:a5:6f:
         fe:3c:89:ad

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:2b:18:15:5a:b1:95:ec:6e:35:58:93:68:6a:f1:13
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)01, CN=VeriSign Class 3 Code Signing 2001 CA
        Validity
            Not Before: Mar 20 00:00:00 2003 GMT
            Not After : Apr  7 23:59:59 2004 GMT
        Subject: C=FI, ST=Pohjois-Karjala, L=Joensuu, O=Blancco Ltd., OU=Digital ID Class 3 - Microsoft Software Validation v2, OU=WHQ, CN=Blancco Ltd.
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (1024 bit)
                Modulus:
                    00:b0:c1:df:f7:75:78:5f:4d:3e:28:82:38:ef:13:
                    34:4f:02:3e:79:1a:51:e7:ff:eb:7c:cf:42:39:3e:
                    67:1f:03:e6:9b:7a:1a:02:36:11:53:d4:6b:a1:48:
                    09:21:de:ea:d7:a6:5c:32:6c:0c:f9:40:72:a3:7a:
                    1b:02:6b:cb:c1:9d:d6:25:a2:7a:a9:10:a0:9d:88:
                    cf:f4:b6:ba:23:82:30:40:4b:35:9a:5a:2f:f1:0b:
                    55:e9:11:16:76:19:46:09:13:9f:0e:19:e7:c4:a0:
                    c4:81:d1:64:d7:a8:7b:d4:64:4a:3a:ef:c6:ba:46:
                    75:b1:2d:7f:d6:e5:c6:c0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.verisign.com/Class3CodeSigning2001.crl

            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/rpa

            X509v3 Extended Key Usage: 
                Code Signing
            Authority Information Access: 
                OCSP - URI:https://ocsp.verisign.com

            X509v3 Authority Key Identifier: 
                keyid:35:2B:F4:64:73:90:9C:03:6D:03:0D:67:60:6B:DD:0B:10:3C:BB:61

            Netscape Cert Type: 
                Object Signing
            1.3.6.1.4.1.311.2.1.27: 
                0.......
    Signature Algorithm: sha1WithRSAEncryption
         5b:d2:df:07:81:64:25:e6:6e:61:9b:47:8f:f9:03:c6:36:ee:
         c9:9f:b7:8d:ad:7b:a8:c2:33:2e:1f:8e:cc:66:f2:d4:aa:3f:
         07:b9:7a:95:c6:22:1b:4a:88:90:86:b0:86:43:3e:81:47:b9:
         39:ae:f3:0b:df:01:cf:72:5c:5d:fc:46:53:9d:3b:30:98:16:
         eb:c4:13:19:8c:0e:ff:4e:7e:15:a1:36:63:58:75:3a:bd:f1:
         0b:12:b3:f8:60:77:60:bd:52:82:fb:ef:7c:6c:53:c5:e5:d7:
         76:0f:8d:e5:61:e6:94:ba:67:8d:72:de:c8:ef:4a:ff:cb:71:
         c1:ab

pkcs7-signedData

1
- MD5: nil
- 1.3.6.1.4.1.311.2.1.4
  - #0
    - 1.3.6.1.4.1.311.2.1.15
      - :
        00 3c 00 3c 00 3c 00 4f 00 62 00 73 00 6f 00 6c |.<.<.<.O.b.s.o.l| 00 65 00 74 00 65 00 3e 00 3e 00 3e |.e.t.e.>.>.> |
    - MD5
      - 5d 13 7f d1 b6 5d 8d 6a a1 9b 97 51 6e 0e d6 5c |]....].j...Qn..\|
- unnamed
  - Certificate #0
    - 2
      - 71:78:4C:EB:CF:5A:6B:23:6E:A7:DA:E5:F5:37:CA:B8
      - RSA-SHA1: nil
      - Issuer
        C: US
        O: VeriSign, Inc.
        OU: Class 3 Public Primary Certification Authority
      - 2001-12-03 00:00:00 UTC: 2011-12-02 23:59:59 UTC
      - #4
        O: VeriSign, Inc.
        OU: VeriSign Trust Network
        OU: Terms of use at https://www.verisign.com/rpa (c)01
        CN: VeriSign Class 3 Code Signing 2001 CA
      - #5
        rsaEncryption: nil
        C4:11:EB:75:ED:E7:98:84:9B:70:97:76:62:B1:62:C1:
        DE:73:3F:51:A6:BF:A0:D1:29:8E:8F:EC:1C:17:DA:E3:
        83:89:03:62:29:D2:10:58:ED:DD:65:09:3C:E2:C4:C7:
        67:17:8B:AD:DC:5D:4D:C5:5E:67:18:96:41:36:44:BA:
        F8:44:11:2F:B3:9F:7E:78:7F:B2:2A:16:1E:6C:C8:05:
        00:D9:09:23:6C:28:CD:05:CC:1E:DB:6E:65:6A:D1:8F:
        02:E9:0C:1D:6E:87:6F:65:AC:87:DD:06:46:8B:A0:5D:
        B5:62:4B:14:FB:2E:ED:2C:8C:BC:40:C0:DE:4E:6C:35: 0x010001
      - X509v3 extensions
        basicConstraints
        true
        true: 0
        certificatePolicies
        2.16.840.1.113733.1.7.23.3
        id-qt-cps: https://www.verisign.com/rpa
        crlDistributionPoints: http://crl.verisign.com/pca3.1.1.crl
        extendedKeyUsage
        clientAuth: codeSigning
        keyUsage: true, 6
        nsCertType: 1
        subjectAltName
        CN: Class3CA1-12
        subjectKeyIdentifier:
        35 2b f4 64 73 90 9c 03 6d 03 0d 67 60 6b dd 0b |5+.ds...m..g`k..| 10 3c bb 61 |.<.a |
    - RSA-SHA1:
```
65 6a 25 b1 ef c2 35 d7  f1 2b b3 f4 d9 fd 19 c2  |ej%...5..+......|
2d 8a ea 2b 4f 2e 22 bc  72 40 4b c1 9e 7e c2 97  |-..+O.".r@K..~..|
9a f5 a4 30 ad 1f 1f c8  4e 3e 75 a7 30 36 f4 d5  |...0....N>u.06..|
41 96 44 9b b9 ad 6b 6c  35 e4 be 7b c0 ee a8 f4  |A.D...kl5..{....|
79 e6 e7 3f 0b dd a9 ef  72 9d da 4a 3d 28 7f 45  |y..?....r..J=(.E|
28 c0 3b fa 20 2e d7 57  d6 8e b9 db 29 5e d2 99  |(.;. ..W....)^..|
fc 0d 47 20 32 d2 e3 ec  5e 79 3e 2c bb fa 6f 2b  |..G 2...^y>,..o+|
99 8e 1f e6 43 9e 80 fb  56 af b3 b3 44 23 68 64  |....C...V...D#hd|
```
  - Certificate #1
    - 2
      - 47:BF:19:95:DF:8D:52:46:43:F7:DB:6D:48:0D:31:A4
      - RSA-SHA1: nil
      - Issuer
        C: ZA
        ST: Western Cape
        L: Durbanville
        O: Thawte
        OU: Thawte Certification
        CN: Thawte Timestamping CA
      - 2003-12-04 00:00:00 UTC: 2013-12-03 23:59:59 UTC
      - Subject
        C: US
        O: VeriSign, Inc.
        CN: VeriSign Time Stamping Services CA
      - #5
        rsaEncryption: nil
        A9:CA:B2:A4:CC:CD:20:AF:0A:7D:89:AC:87:75:F0:B4:
        4E:F1:DF:C1:0F:BF:67:61:BD:A3:64:1C:DA:BB:F9:CA:
        33:AB:84:30:89:58:7E:8C:DB:6B:DD:36:9E:0F:BF:D1:
        EC:78:F2:77:A6:7E:6F:3C:BF:93:AF:0D:BA:68:F4:6C:
        94:CA:BD:52:2D:AB:48:3D:F5:B6:D5:5D:5F:1B:02:9F:
        FA:2F:6B:1E:A4:F7:A3:9A:A6:1A:C8:02:E1:7F:4C:52:
        E3:0E:60:EC:40:1C:7E:B9:0D:DE:3F:C7:B4:DF:87:BD:
        5F:7A:6A:31:2E:03:99:81:13:A8:47:20:CE:31:73:0D:
        57:2D:CD:78:34:33:95:12:99:12:B9:DE:68:2F:AA:E6:
        E3:C2:8A:8C:2A:C3:8B:21:87:66:BD:83:58:57:6F:75:
        BF:3C:AA:26:87:5D:CA:10:15:3C:9F:84:EA:54:C1:0A:
        6E:C4:FE:C5:4A:DD:B9:07:11:97:22:7C:DB:3E:27:D1:
        1E:78:EC:9F:31:C9:F1:E6:22:19:DB:C4:B3:47:43:9A:
        1A:5F:A0:1E:90:E4:5E:F5:EE:7C:F1:7D:AB:62:01:8F:
        F5:4D:0B:DE:D0:22:56:A8:95:CD:AE:88:76:AE:EE:BA:
        0D:F3:E4:4D:D9:A0:FB:68:A0:AE:14:3B:B3:87:C1:BB: 0x010001
      - X509v3 extensions
        authorityInfoAccess
        OCSP: http://ocsp.verisign.com
        basicConstraints
        true
        true: 0
        crlDistributionPoints: http://crl.verisign.com/ThawteTimestampingCA.crl
        extendedKeyUsage: timeStamping
        keyUsage: true, 6
        subjectAltName
        CN: TSA2048-1-53
    - RSA-SHA1:
```
4a 6b f9 ea 58 c2 44 1c  31 89 79 99 2b 96 bf 82  |Jk..X.D.1.y.+...|
ac 01 d6 1c 4c cd b0 8a  58 6e df 08 29 a3 5e c8  |....L...Xn..).^.|
ca 93 13 e7 04 52 0d ef  47 27 2f 00 38 b0 e4 c9  |.....R..G'/.8...|
93 4e 9a d4 22 62 15 f7  3f 37 21 4f 70 31 80 f1  |.N.."b..?7!Op1..|
8b 38 87 b3 e8 e8 97 00  fe cf 55 96 4e 24 d2 a9  |.8........U.N$..|
27 4e 7a ae b7 61 41 f3  2a ce e7 c9 d9 5e dd bb  |'Nz..aA.*....^..|
2b 85 3e b5 9d b5 d9 e1  57 ff be b4 c5 7e f5 cf  |+.>.....W....~..|
0c 9e f0 97 fe 2b d3 3b  52 1b 1b 38 27 f7 3f 4a  |.....+.;R..8'.?J|
```
  - Certificate #2
    - 2
      - 0D:E9:2B:F0:D4:D8:29:88:18:32:05:09:5E:9A:76:88
      - RSA-SHA1: nil
      - Issuer
        C: US
        O: VeriSign, Inc.
        CN: VeriSign Time Stamping Services CA
      - 2003-12-04 00:00:00 UTC: 2008-12-03 23:59:59 UTC
      - Subject
        C: US
        O: VeriSign, Inc.
        CN: VeriSign Time Stamping Services Signer
      - #5
        rsaEncryption: nil
        B2:50:28:48:DD:D3:68:7A:84:18:44:66:75:5D:7E:C4:
        B8:9F:63:26:FF:3D:43:9C:7C:11:38:10:25:55:73:D9:
        75:27:69:FD:4E:B9:20:5C:D3:0A:F9:A0:1B:2A:ED:55:
        56:21:61:D8:1E:DB:E4:BC:33:6B:C7:EF:DD:A3:37:65:
        8E:1B:93:0C:B6:53:1E:5C:7C:66:35:5F:05:8A:45:FE:
        76:4E:DF:53:80:A2:81:20:9D:AE:88:5C:A2:08:F7:E5:
        30:F9:EE:22:37:4C:42:0A:CE:DF:C6:1F:C4:D6:55:E9:
        81:3F:B5:52:A3:2C:AA:01:7A:F2:A2:AA:8D:35:FE:9F:
        E6:5D:6A:05:9F:3D:6B:E3:BF:96:C0:FE:CC:60:F9:40:
        E7:07:A0:44:EB:81:51:6E:A5:2A:F2:B6:8A:10:28:ED:
        8F:DC:06:A0:86:50:9A:7B:4A:08:0D:30:1D:CA:10:9E:
        6B:F7:E9:58:AE:04:A9:40:99:B2:28:E8:8F:16:AC:3C:
        E3:53:6F:4B:D3:35:9D:B5:6F:64:1D:B3:96:2C:BB:3D:
        E7:79:EB:6D:7A:F9:16:E6:26:AD:AF:EF:99:53:B7:40:
        2C:95:B8:79:AA:FE:D4:52:AB:29:74:7E:42:EC:39:1E:
        A2:6A:16:E6:59:BB:24:68:D8:00:80:43:10:87:80:6B: 0x010001
      - X509v3 extensions
        authorityInfoAccess
        OCSP: http://ocsp.verisign.com
        basicConstraints
        true
        nil
        crlDistributionPoints: http://crl.verisign.com/tss-ca.crl
        extendedKeyUsage: true, timeStamping
        keyUsage: true, 0xc0
        subjectAltName
        CN: TSA2048-1-54
    - RSA-SHA1:
```
87 78 70 da 4e 52 01 20  5b e0 79 c9 82 30 c4 fd  |.xp.NR. [.y..0..|
b9 19 96 bd 91 00 c3 bd  cd cd c6 f4 0e d8 ff f9  |................|
4d c0 33 62 30 11 c5 f5  74 1b d4 92 de 5f 9c 20  |M.3b0...t...._. |
13 b1 7c 45 be 50 cd 83  e7 80 17 83 a7 27 93 67  |..|E.P.......'.g|
13 46 fb ca b8 98 41 03  cc 9b 51 5b 05 8b 7f a8  |.F....A...Q[....|
6f f3 1b 50 1b 24 2e f2  69 8d 6c 22 f7 bb ca 16  |o..P.$..i.l"....|
95 ed 0c 74 c0 68 77 d9  eb 99 62 87 c1 73 90 f8  |...t.hw...b..s..|
89 74 7a 23 ab a3 98 7b  97 b1 f7 8f 29 71 4d 2e  |.tz#...{....)qM.|
75 1b 48 41 da f0 b5 0d  20 54 d6 77 a0 97 82 63  |u.HA.... T.w...c|
69 fd 09 cf 8a f0 75 bb  09 9b d9 f9 11 55 26 9a  |i.....u......U&.|
61 32 be 7a 02 b0 7b 86  be a2 c3 8b 22 2c 78 d1  |a2.z..{.....",x.|
35 76 bc 92 73 5c f9 b9  e6 4c 15 0a 23 cc e4 d2  |5v..s\...L..#...|
d4 34 2e 49 40 15 3c 0f  60 7a 24 c6 a5 66 ef 96  |.4.I@.<.`z$..f..|
cf 70 eb 3e e7 f4 0d 7e  dc d1 7c a3 76 71 69 c1  |.p.>...~..|.vqi.|
9c 4f 47 30 35 21 b1 a2  af 1a 62 3c 2b d9 8e aa  |.OG05!....b<+...|
2a 07 7b d8 18 b3 5c 7b  e2 9d a5 6f fe 3c 89 ad  |*.{...\{...o.<..|
```
  - #3
    - 2
      - 29:2B:18:15:5A:B1:95:EC:6E:35:58:93:68:6A:F1:13
      - RSA-SHA1: nil
      - #2
        O: VeriSign, Inc.
        OU: VeriSign Trust Network
        OU: Terms of use at https://www.verisign.com/rpa (c)01
        CN: VeriSign Class 3 Code Signing 2001 CA
      - 2003-03-20 00:00:00 UTC: 2004-04-07 23:59:59 UTC
      - Subject
        C: FI
        ST: Pohjois-Karjala
        L: Joensuu
        O: Blancco Ltd.
        OU: Digital ID Class 3 - Microsoft Software Validation v2
        OU: WHQ
        CN: Blancco Ltd.
      - #5
        rsaEncryption: nil
        B0:C1:DF:F7:75:78:5F:4D:3E:28:82:38:EF:13:34:4F:
        02:3E:79:1A:51:E7:FF:EB:7C:CF:42:39:3E:67:1F:03:
        E6:9B:7A:1A:02:36:11:53:D4:6B:A1:48:09:21:DE:EA:
        D7:A6:5C:32:6C:0C:F9:40:72:A3:7A:1B:02:6B:CB:C1:
        9D:D6:25:A2:7A:A9:10:A0:9D:88:CF:F4:B6:BA:23:82:
        30:40:4B:35:9A:5A:2F:F1:0B:55:E9:11:16:76:19:46:
        09:13:9F:0E:19:E7:C4:A0:C4:81:D1:64:D7:A8:7B:D4:
        64:4A:3A:EF:C6:BA:46:75:B1:2D:7F:D6:E5:C6:C0:EF: 0x010001
      - X509v3 extensions
        basicConstraints
        nil
        keyUsage: true, 0x80
        crlDistributionPoints: http://crl.verisign.com/Class3CodeSigning2001.crl
        certificatePolicies
        2.16.840.1.113733.1.7.23.3
        id-qt-cps: https://www.verisign.com/rpa
        extendedKeyUsage: codeSigning
        authorityInfoAccess
        OCSP: https://ocsp.verisign.com
        authorityKeyIdentifier:
        35 2b f4 64 73 90 9c 03 6d 03 0d 67 60 6b dd 0b |5+.ds...m..g`k..| 10 3c bb 61 |.<.a |
        nsCertType: 0x10
        1.3.6.1.4.1.311.2.1.27
        false: true
    - RSA-SHA1:
```
5b d2 df 07 81 64 25 e6  6e 61 9b 47 8f f9 03 c6  |[....d%.na.G....|
36 ee c9 9f b7 8d ad 7b  a8 c2 33 2e 1f 8e cc 66  |6......{..3....f|
f2 d4 aa 3f 07 b9 7a 95  c6 22 1b 4a 88 90 86 b0  |...?..z..".J....|
86 43 3e 81 47 b9 39 ae  f3 0b df 01 cf 72 5c 5d  |.C>.G.9......r\]|
fc 46 53 9d 3b 30 98 16  eb c4 13 19 8c 0e ff 4e  |.FS.;0.........N|
7e 15 a1 36 63 58 75 3a  bd f1 0b 12 b3 f8 60 77  |~..6cXu:......`w|
60 bd 52 82 fb ef 7c 6c  53 c5 e5 d7 76 0f 8d e5  |`.R...|lS...v...|
61 e6 94 ba 67 8d 72 de  c8 ef 4a ff cb 71 c1 ab  |a...g.r...J..q..|
```
- 1
  - unnamed
    - #0
      - O: VeriSign, Inc.
      - OU: VeriSign Trust Network
      - OU: Terms of use at https://www.verisign.com/rpa (c)01
      - CN: VeriSign Class 3 Code Signing 2001 CA
    - 29:2B:18:15:5A:B1:95:EC:6E:35:58:93:68:6A:F1:13
  - MD5: nil
  - #2
    - contentType: 1.3.6.1.4.1.311.2.1.4
    - 1.3.6.1.4.1.311.2.1.11: msCodeInd
    - messageDigest:
```
c3 15 82 a7 76 7e dd 1b  62 f6 1b 79 ff b8 cd 6d  |....v~..b..y...m|
```
    - 1.3.6.1.4.1.311.2.1.12
      - 00 49 00 6d 00 61 00 67 00 65 00 57 00 72 00 69 |.I.m.a.g.e.W.r.i| 00 74 00 65 00 72 |.t.e.r |
        : http://www.blancco.com/
  - rsaEncryption:
```
83 c7 63 a5 c2 bd 83 82  c0 ee 53 ee c7 3c b9 7f  |..c.......S..<..|
ed 14 82 c1 24 c6 07 8f  16 eb 34 36 80 52 cb e8  |....$.....46.R..|
51 cb 41 35 82 a8 51 b4  db da 93 cc b2 d6 ad 3b  |Q.A5..Q........;|
84 36 69 d0 4d 47 91 be  ab f0 ff ef 02 7c 99 e0  |.6i.MG.......|..|
35 ae d3 4a 7c a5 61 7b  27 89 ea 22 eb 05 dc a8  |5..J|.a{'.."....|
98 26 b0 0d 22 fb 17 75  29 24 01 4f f7 49 23 38  |.&.."..u)$.O.I#8|
82 60 28 0c 90 0c f6 9f  71 08 8f 46 19 b0 43 e7  |.`(.....q..F..C.|
34 b9 d8 79 45 fa eb f8  2e 91 aa f5 64 bf 28 1b  |4..yE.......d.(.|
```
  - countersignature
    - 1
      - unnamed
        #0
        C: US
        O: VeriSign, Inc.
        CN: VeriSign Time Stamping Services CA
        0D:E9:2B:F0:D4:D8:29:88:18:32:05:09:5E:9A:76:88
      - MD5: nil
      - #2
        contentType: pkcs7-data
        signingTime: 2004-02-24 12:21:29 UTC
        messageDigest:
        65 b3 e6 5e 8b 5e 9c 58 7e fe 5f ee 83 18 3b f0 |e..^.^.X~._...;.|
      - rsaEncryption:
        8a ea 63 59 9a 23 3a 6c 9e ca 87 95 ec a3 f7 05 |..cY.#:l........| c6 37 98 e7 7f 6c 29 91 e2 3f 0a 4d 44 de 65 ad |.7...l)..?.MD.e.| 65 6d 18 64 7c bc d8 15 d7 84 47 e3 f6 bb 1b 25 |em.d|.....G....%| cb e9 6f bf 4a 5b 57 bf 1c 30 07 46 bd bf af a6 |..o.J[W..0.F....| 04 87 d4 4a 93 6e 01 7d cd 17 47 72 ed 64 cb 62 |...J.n.}..Gr.d.b| eb 53 5d 83 7e f5 4e f8 a1 08 b4 4b d2 6b 73 19 |.S].~.N....K.ks.| af 71 2c 56 48 0a ff ed 4f f8 e1 da 9d 50 a2 d9 |.q,VH...O....P..| ec 4e ca 06 9a 7d 4f 0a 6d fc c2 19 f2 bb 90 97 |.N...}O.m.......| 71 fc 7f bc 5e ea 44 a6 8c 27 63 7c 7d 4d 4d 86 |q...^.D..'c|}MM.| a9 f3 0f d2 93 14 11 c7 8d e5 90 14 15 63 9e 60 |.............c.`| 5c e0 4a 27 1f f7 2d 7b d2 91 75 ec 04 c5 70 ad |\.J'..-{..u...p.| f6 a9 62 b5 e3 95 4e 9a ee 9d e7 b0 1b f5 85 27 |..b...N........'| c5 a0 07 6a 34 35 12 75 00 43 e8 d7 c1 2f 3b 08 |...j45.u.C.../;.| 41 f1 8d 4b 3a e4 a3 54 a3 40 88 a7 a9 71 fe 89 |A..K:..T.@...q..| db dc b9 0d 7f 0f b2 dc 11 f2 37 08 14 cc c5 e9 |..........7.....| 7f f3 bc cf bf 06 8a 30 7b e3 c9 43 b5 47 ff db |.......0{..C.G..|

show previews

offset	size	type	comment
0	290816	EXE	08/02/2002 07:01:18	#
15c1	15	HTM		#
47000	191000	BIN	overlay data past EOF	#

Scanning the drive for archives:
1 file, 481816 bytes (471 KiB)


--
Type = PE
Physical Size = 481816
CPU = x86
Characteristics = Executable 32-bit NoRelocs NoLineNums NoLocalSyms
Created = 2002-08-02 07:01:18
Headers Size = 4096
Checksum = 502168
Name = stub32i.exe                                                 
Image Size = 303104
Section Alignment = 4096
File Alignment = 4096
Code Size = 77824
Initialized Data Size = 221184
Uninitialized Data Size = 0
Linker Version = 6.0
OS Version = 4.0
Image Version = 0.0
Subsystem Version = 4.0
Subsystem = Windows GUI
Stack Reserve = 1048576
Stack Commit = 4096
Heap Reserve = 1048576
Heap Commit = 4096
Image Base = 4194304
Comment = FileVersion: 4.1.100.1332
FileVersion: 240204                                                      
ProductVersion: 4.1.0.0
ProductVersion: 240204                                                      
Comments:                                                             
CompanyName: AVACODE LTD                                                 
FileDescription:                                                             
InternalName: stub32                                                      
OriginalFilename: stub32i.exe                                                 
LegalCopyright: Copyright (c) 2000-2004 Avacode Ltd. All Rights Reserved    
ProductName: ImageWriter                                                 
----
Path = [0]
Size = 185792
Packed Size = 185792
Virtual Size = 185792
Offset = 290816
--
Path = [0]
Type = Cab
Offset = 5599
Physical Size = 180188
Tail Size = 5
Method = MSZip
Blocks = 1
Volumes = 1
Volume Index = 0
ID = 12345

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
2004-02-24 11:33:38 ....A           34               iw.def
2004-02-24 13:49:42 ....A       536576               ImageWriter.exe
------------------- ----- ------------ ------------  ------------------------
2004-02-24 13:49:42             536610       481816  2 files

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

ieaspinstallclient_demo.exe- stub32i.exe

MZ Header

Rich Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 040904b0

VS_FIXEDFILEINFO

Signers (1)

Certificates (4)

ieaspinstallclient_demo.exe
- stub32i.exe