filenameweb_ntasetup.exe
size43867672 (0x29d5e18)
md5f0e22791046b1ab50657c2648b91c460
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf8

Rich Header

lib idversiontimes used
1272913
14729931
1180473
109782137
123507272
2891784
3787552
10358
25921021
11978255
617351

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections4
TimeDateStamp0x4ab84bb7
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10f
Magic0x10b
LinkerVersion6.0
SizeOfCode0x65a00
SizeOfInitializedData0x5e200
SizeOfUninitializedData0
AddressOfEntryPoint0x3d484
BaseOfCode0x1000
BaseOfData0x67000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion5.0
Reserved10
SizeOfImage0xc9000
SizeOfHeaders0x400
CheckSum0x29d7d6a
Subsystem2
DllCharacteristics0x8000
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v6.0

Sections

namevavsizeraw sizeflags
.text0x10000x658330x65a00R-X CODE
.rdata0x670000xe1760xe200R-- IDATA
.data0x760000x92b40x7800RW- IDATA
.rsrc0x800000x487100x48800R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x735380x104
RESOURCE0x800000x48710
EXCEPTION00
SECURITY0x29d4f100xf08
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x670000x544
Delay_IAT00
CLR_Header00
typenamesizecp
GIFIDR_GIF1260021252
BITMAP#103824641252
BITMAP#1055070041252
BITMAP#10551145641252
BITMAP#1055346641252
BITMAP#10650259921252
BITMAP#10651736081252
ICON#116401252
ICON#27441252
ICON#32961252
ICON#437521252
ICON#522161252
ICON#613841252
ICON#796401252
ICON#842641252
ICON#911281252
ICON#107441252
ICON#117441252
DIALOG#1035101252
DIALOG#1056621252
DIALOG#1067361252
DIALOG#1071001252
DIALOG#108661252
DIALOG#1092301252
DIALOG#1192921252
DIALOG#1212301252
DIALOG#1256301252
DIALOG#1269841252
DIALOG#1273861252
DIALOG#1285401252
DIALOG#1295061252
DIALOG#1305461252
DIALOG#1311401252
DIALOG#1329721252
DIALOG#10003601252
DIALOG#10014901252
DIALOG#10082781252
DIALOG#10262381252
DIALOG#10344681252
DIALOG#30034921252
DIALOG#30046961252
STRING#693521252
STRING#705741252
STRING#718881252
STRING#725941252
STRING#735001252
STRING#7616441252
STRING#1018701252
STRING#1026381252
STRING#10313041252
STRING#10421781252
STRING#1055741252
STRING#1079541252
STRING#1083001252
STRING#113741252
STRING#1142181252
STRING#1152721252
STRING#1165221252
STRING#1171861252
STRING#1181681252
STRING#1192981252
STRING#12010581252
STRING#12614741252
STRING#134641252
STRING#13522901252
STRING#1386441252
GROUP_ICON#1001321252
GROUP_ICON#112201252
GROUP_ICON#217201252
VERSION#116641252
MANIFEST#111431252
idlangstring
11001033Setup Initialization Error
11011033%s
11021033%1 Setup is preparing the %2, which will guide you through the program setup process. Please wait.
11031033Checking Operating System Version
11041033Checking Windows(R) Installer Version
11051033Configuring Windows Installer
11061033Configuring %s
11071033Setup has completed configuring the Windows Installer on your system. The system needs to be restarted in order to continue with the installation. Please click Restart to reboot the system.
11081033%s
11251033Choose Setup Language
11261033Select the language for this installation from the choices below.
11271033The installer must restart your system to complete configuring the Windows Installer service. Click Yes to restart now or No if you plan to restart later.
11281033This setup will perform an upgrade of '%s'. Do you want to continue?
11291033A later version of '%s' is already installed on this machine. The setup cannot continue.
11301033OK
11311033Cancel
11321033Password:
11331033Install
11341033&Next >
11501033Setup has detected an incompatible version of Windows. Please click OK and verify that the target system is running either Windows 95 (or later version), or Windows NT 4.0 Service Pack 6 (or later version), before relaunching the installation
11511033Error writing to the temporary location
11521033Error extracting %s to the temporary location
11531033Error reading setup initialization file
11541033Installer not found in %s
11551033File %s not found
11561033Internal error in Windows Installer
11581033Error populating strings. Verify that all strings in Setup.ini are valid.
12001033Restart
12011033Setup needs %lu KB free disk space in %s. Please free up some space and try again
12021033You do not have sufficient privileges to complete this installation for all users of the machine. Log on as administrator and then retry this installation
12031033Command line parameters:
12041033/L language ID
12051033/S Hide intialization dialog. For silent mode use: /S /v/qn.
12061033/V parameters to MsiExec.exe
12071033Windows(R) Installer %s found. This is an older version of the Windows(R) Installer. Click OK to continue.
12081033ANSI code page for %s is not installed on the system and therefore setup cannot run in the selected language. Run the setup and select another language.
12101033Setup requires Windows Installer version %s or higher to install the Microsoft .NET Framework version 2.0. Please install the Windows Installer version %s or higher and try again.
16041033This setup does not contain the Windows Installer engine (%s) required to run the installation on this operating system.
16071033Unable to install %s Scripting Runtime.
16081033Unable to create InstallDriver instance, Return code: %d
16091033Please specify a location to save the installation package.
16111033Unable to extract the file %s.
16121033Extracting files.
16131033Downloading file %s.
16141033An error occurred while downloading the file %s. What would you like to do?
16151033hr
16161033min
16171033sec
16181033MB
16191033KB
16201033/sec
16211033Failed to verify signature of file %s.
16221033Estimated time remaining:
16231033%d %s of %d %s downloaded at %01d.%01d %s%s
16241033Preparing to Install...
16251033Get help for this installation.
16261033Help
16271033Unable to save file: %s
16281033Failed to complete installation.
16291033Invalid command line.
16301033/UA<url to InstMsiA.exe>
16311033/UW<url to InstMsiW.exe>
16321033/UM<url to msi package>
16331033/US<url to IsScript.msi>
16341033Setup Initialization Error, failed to clone the process.
16351033The file %s already exists. Would you like to replace it?
16421033Could not verify signature. You need Internet Explorer 3.02 or later with Authenticode update.
16431033Setup requires a newer version of WinInet.dll. You may need to install Internet Explorer 3.02 or later.
16441033You do not have sufficient privileges to complete this installation. Log on as administrator and then retry this installation
16451033Error installing Microsoft(R) .NET Framework, Return Code: %d
16461033%s optionally uses the Microsoft (R) .NET %s Framework. Would you like to install it now?
16481033Setup has detected an incompatible version of Windows. Please click OK and verify that the target system is running either Windows 95 (or later version), or Windows NT 4.0 Service Pack 3 (or later version), before relaunching the installation
16491033%s optionally uses the Visual J# Redistributable Package. Would you like to install it now?
16501033(This will also install the .NET Framework.)
16511033Setup has detected an incompatible version of Windows. Please click OK and verify that the target system is running Windows 2000 Service Pack 3 (or later version), before relaunching the installation
16521033%s requires the following items to be installed on your computer. Click Install to begin installing these requirements.
16531033Installing %s
16541033Would you like to cancel the setup after %s has finished installing?
16551033The files for installation requirement %s could not be found. The installation will now stop. This is probably due to a failed, or canceled download.
16561033The installation of %s appears to have failed. Do you want to continue the installation?
16571033Succeeded
16581033Installing
16591033Pending
16601033Installed
16611033Status
16621033Requirement
16631033Failed
16641033Extracting
16651033Downloading
16661033Skipped
16671033The installation of %s has failed. Setup will now exit.
16681033The installation of %s requires a reboot. Click Yes to restart now or No if you plan to restart later.
16691033%1 optionally uses %2. Would you like to install it now?
16711033Downloading file %2 of %3: %1
17021033This installation lets you install multiple instances of the product. Select the instance you would like to install, and then click Next to continue:
17031033&Install a new instance
17041033&Maintain or upgrade an existing instance
17051033Default
17061033Instance ID
17071033Product Name
17081033Location
17101033This installation lets you patch multiple instances of the product. Select an option below to specify how you would like to apply this patch, and then click Next to continue.
17111033Patch &all of the existing instances
17121033&Patch an existing instance
17131033This installation requires Windows Installer version 4.5 or newer. Setup will now exit.
17141033Decompressing
17151033Version
18041033Choose Setup Language
18121033Select the language for the installation from the choices below.
18131033&OK
18151033InstallShield Wizard
18221033Cancel
18341033&Next >
18351033< &Back
18371033Do you wish to install %s?
18381033Authenticity Verified
18391033The identity of this software publisher was verified by %s.
18401033Caution: %s affirms this software is safe. You should only continue if you trust %s to make this assertion.
18411033&Always trust software published by %s.
18421033This software has not been altered since publication by %s. To install %s, click OK.
18541033InstallShield
18651033Preparing Setup
18661033Please wait while the InstallShield Wizard prepares the setup.
18721033Finish
18731033Transfer rate:
18741033Estimated time left:
18801033/s
18871033%s - InstallShield Wizard
18881033Exit Setup
18891033Are you sure you want to cancel the setup?
19011033&Install a new instance of this application.
19031033Existing Installed Instances Detected
19041033Select the appropriate application instance to maintain or update.
19051033Setup has detected one or more instances of this application already installed on your system.
19061033&Maintain or update the instance of this application selected below:
19071033Setup has detected one or more instances of this application already installed on your system. You can maintain or update an existing instance or install a completely new instance.
19081033Select the instance of the application you want to &maintain or update below:
19091033Display Name
19101033Install Location
20011033%s Setup is preparing the InstallShield Wizard, which will guide you through the rest of the setup process. Please wait.
20021033Error Code:
20031033Error Information:
20041033An error (%s) has occurred while running the setup.
20051033Please make sure you have finished any previous setup and closed other applications. If the error still occurs, please contact your vendor: %s.
20061033&Detail
20071033&Report
20081033There is not enough space to initialize the setup. Please free up at least %ld KB on your %s drive before you run the setup.
20091033A user with administrator rights installed this application. You need to have similar privileges to modify or uninstall it.
20101033Another instance of this setup is already running. Please wait for the other instance to finish and then try again.
21431033Security Warning
21441033Do you want to run this setup?
21461033The origin and integrity of this application could not be verified. You should continue only if you can identify the publisher as someone you trust and are certain this application hasn't been altered since publication.
21471033I &do not trust this setup
21481033I &understand the security risk and wish to continue
21511033The origin and integrity of this application could not be verified because it was not signed by the publisher. You should continue only if you can identify the publisher as someone you trust and are certain this application hasn't been altered since publication.
21521033The origin and integrity of this application could not be verified. The certificate used to sign the software has expired or is invalid or untrusted. You should continue only if you can identify the publisher as someone you trust and are certain this application hasn't been altered since publication.
21531033The software is corrupted or has been altered since it was published. You should not continue this setup.
21541033This setup was created with a BETA VERSION of %s
21551033This Setup was created with an EVALUATION VERSION of %s
21561033Please enter the password
21941033InstallShield Setup Player V16
21951033The path to the installation contains unsupported characters. Try moving the installation to a location that does not have special characters, and then try relaunching it.
21961033This setup requires administrative privileges that appear to be unavailable. Would you like to try again?
module_namehintordfunction_name
COMCTL32.dll17
VERSION.dll1GetFileVersionInfoSizeA
VERSION.dll10VerQueryValueA
VERSION.dllGetFileVersionInfoA
KERNEL32.dll923lstrcpynA
KERNEL32.dll917lstrcmpiA
KERNEL32.dll328GetFileAttributesA
KERNEL32.dll911lstrcatA
KERNEL32.dll193FindClose
KERNEL32.dll197FindFirstFileA
KERNEL32.dll529IsBadReadPtr
KERNEL32.dll837UnmapViewOfFile
KERNEL32.dll580MapViewOfFile
KERNEL32.dll424GetSystemInfo
KERNEL32.dll75CreateFileMappingA
KERNEL32.dll861VirtualQuery
KERNEL32.dll50CompareStringA
KERNEL32.dll66CreateDirectoryA
KERNEL32.dll51CompareStringW
KERNEL32.dll301GetCurrentDirectoryA
KERNEL32.dll174ExpandEnvironmentStringsA
KERNEL32.dll751SetFileAttributesA
KERNEL32.dll183FileTimeToLocalFileTime
KERNEL32.dll335GetFileTime
KERNEL32.dll501HeapFree
KERNEL32.dll495HeapAlloc
KERNEL32.dll395GetProcessHeap
KERNEL32.dll533IsDBCSLeadByte
KERNEL32.dll587MoveFileExA
KERNEL32.dll393GetProcAddress
KERNEL32.dll359GetModuleHandleA
KERNEL32.dll357GetModuleFileNameA
KERNEL32.dll886WriteFile
KERNEL32.dll926lstrlenA
KERNEL32.dll809Sleep
KERNEL32.dll44CloseHandle
KERNEL32.dll92CreateProcessA
KERNEL32.dll927lstrlenW
KERNEL32.dll317GetDriveTypeA
KERNEL32.dll213FindResourceExA
KERNEL32.dll383GetPrivateProfileIntA
KERNEL32.dll333GetFileSize
KERNEL32.dll753SetFilePointer
KERNEL32.dll70CreateEventA
KERNEL32.dll639QueryPerformanceFrequency
KERNEL32.dll669ReleaseMutex
KERNEL32.dll420GetSystemDefaultLangID
KERNEL32.dll87CreateMutexA
KERNEL32.dll747SetErrorMode
KERNEL32.dll558LoadLibraryA
KERNEL32.dll229FreeLibrary
KERNEL32.dll313GetDiskFreeSpaceA
KERNEL32.dll847VerLanguageNameA
KERNEL32.dll656ReadFile
KERNEL32.dll446GetTickCount
KERNEL32.dll253GetCommandLineA
KERNEL32.dll172ExitThread
KERNEL32.dll101CreateThread
KERNEL32.dll324GetExitCodeProcess
KERNEL32.dll231FreeResource
KERNEL32.dll592MulDiv
KERNEL32.dll389GetPrivateProfileStringA
KERNEL32.dll386GetPrivateProfileSectionNamesA
KERNEL32.dll219FlushFileBuffers
KERNEL32.dll780SetStdHandle
KERNEL32.dll526IsBadCodePtr
KERNEL32.dll336GetFileType
KERNEL32.dll414GetStdHandle
KERNEL32.dll762SetHandleCount
KERNEL32.dll321GetEnvironmentStringsW
KERNEL32.dll319GetEnvironmentStrings
KERNEL32.dll228FreeEnvironmentStringsW
KERNEL32.dll227FreeEnvironmentStringsA
KERNEL32.dll834UnhandledExceptionFilter
KERNEL32.dll532IsBadWritePtr
KERNEL32.dll853VirtualAlloc
KERNEL32.dll856VirtualFree
KERNEL32.dll349GetLocaleInfoA
KERNEL32.dll466GetWindowsDirectoryA
KERNEL32.dll518InterlockedDecrement
KERNEL32.dll568LocalFree
KERNEL32.dll522InterlockedIncrement
KERNEL32.dll224FormatMessageA
KERNEL32.dll438GetTempPathA
KERNEL32.dll456GetVersionExA
KERNEL32.dll74CreateFileA
KERNEL32.dll478GlobalFree
KERNEL32.dll212FindResourceA
KERNEL32.dll563LoadResource
KERNEL32.dll808SizeofResource
KERNEL32.dll471GlobalAlloc
KERNEL32.dll577LockResource
KERNEL32.dll482GlobalLock
KERNEL32.dll489GlobalUnlock
KERNEL32.dll422GetSystemDirectoryA
KERNEL32.dll740SetCurrentDirectoryA
KERNEL32.dll869WaitForSingleObject
KERNEL32.dll171ExitProcess
KERNEL32.dll303GetCurrentProcess
KERNEL32.dll920lstrcpyA
KERNEL32.dll136DuplicateHandle
KERNEL32.dll440GetThreadContext
KERNEL32.dll860VirtualProtectEx
KERNEL32.dll895WriteProcessMemory
KERNEL32.dll220FlushInstructionCache
KERNEL32.dll788SetThreadContext
KERNEL32.dll684ResumeThread
KERNEL32.dll346GetLastError
KERNEL32.dll766SetLastError
KERNEL32.dll120DeleteFileA
KERNEL32.dll671RemoveDirectoryA
KERNEL32.dll593MultiByteToWideChar
KERNEL32.dll873WideCharToMultiByte
KERNEL32.dll497HeapCreate
KERNEL32.dll499HeapDestroy
KERNEL32.dll322GetEnvironmentVariableA
KERNEL32.dll418GetStringTypeW
KERNEL32.dll415GetStringTypeA
KERNEL32.dll797SetUnhandledExceptionFilter
KERNEL32.dll206FindNextFileA
KERNEL32.dll507HeapSize
KERNEL32.dll545LCMapStringW
KERNEL32.dll544LCMapStringA
KERNEL32.dll824TlsGetValue
KERNEL32.dll914lstrcmpA
KERNEL32.dll814SystemTimeToFileTime
KERNEL32.dll638QueryPerformanceCounter
KERNEL32.dll748SetEvent
KERNEL32.dll681ResetEvent
KERNEL32.dll693SearchPathA
KERNEL32.dll859VirtualProtect
KERNEL32.dll305GetCurrentThread
KERNEL32.dll139EnterCriticalSection
KERNEL32.dll557LeaveCriticalSection
KERNEL32.dll455GetVersion
KERNEL32.dll304GetCurrentProcessId
KERNEL32.dll514InitializeCriticalSection
KERNEL32.dll822TlsAlloc
KERNEL32.dll825TlsSetValue
KERNEL32.dll306GetCurrentThreadId
KERNEL32.dll380GetOEMCP
KERNEL32.dll235GetACP
KERNEL32.dll241GetCPInfo
KERNEL32.dll412GetStartupInfoA
KERNEL32.dll505HeapReAlloc
KERNEL32.dll643RaiseException
KERNEL32.dll689RtlUnwind
KERNEL32.dll118DeleteCriticalSection
KERNEL32.dll519InterlockedExchange
KERNEL32.dll436GetTempFileNameA
KERNEL32.dll609OpenProcess
KERNEL32.dll49CompareFileTime
KERNEL32.dll400GetProcessTimes
KERNEL32.dll817TerminateProcess
KERNEL32.dll348GetLocalTime
KERNEL32.dll447GetTimeFormatA
KERNEL32.dll307GetDateFormatA
USER32.dll52CharUpperA
USER32.dll155DialogBoxIndirectParamA
USER32.dll719WaitForInputIdle
USER32.dll579SetActiveWindow
USER32.dll599SetForegroundWindow
USER32.dll640SetWindowLongA
USER32.dll646SetWindowTextA
USER32.dll571SendMessageA
USER32.dll273GetDlgItem
USER32.dll443LoadIconA
USER32.dll198EndDialog
USER32.dll489MoveWindow
USER32.dll372GetWindowRect
USER32.dll728wsprintfA
USER32.dll476MessageBoxA
USER32.dll598SetFocus
USER32.dll13BeginPaint
USER32.dll456LoadStringA
USER32.dll226FillRect
USER32.dll200EndPaint
USER32.dll314GetMessageA
USER32.dll142DefWindowProcA
USER32.dll362GetWindow
USER32.dll665SystemParametersInfoA
USER32.dll349GetSystemMetrics
USER32.dll471MapWindowPoints
USER32.dll330GetPropA
USER32.dll194EnableMenuItem
USER32.dll618SetPropA
USER32.dll556RemovePropA
USER32.dll346GetSysColor
USER32.dll445LoadImageA
USER32.dll268GetDC
USER32.dll554ReleaseDC
USER32.dll85CreateDialogParamA
USER32.dll325GetParent
USER32.dll375GetWindowTextA
USER32.dll431IsWindowVisible
USER32.dll82CreateDialogIndirectParamA
USER32.dll270GetDesktopWindow
USER32.dll225ExitWindowsEx
USER32.dll535RegisterClassExA
USER32.dll403InvalidateRect
USER32.dll402IntersectRect
USER32.dll203EnumChildWindows
USER32.dll364GetWindowDC
USER32.dll275GetDlgItemTextA
USER32.dll96CreateWindowExA
USER32.dll699UpdateWindow
USER32.dll182DrawIcon
USER32.dll466MapDialogRect
USER32.dll252GetClassNameA
USER32.dll27CallWindowProcA
USER32.dll179DrawFocusRect
USER32.dll394InflateRect
USER32.dll188DrawTextA
USER32.dll74CopyRect
USER32.dll255GetClientRect
USER32.dll428IsWindowEnabled
USER32.dll228FindWindowExA
USER32.dll417IsDialogMessageA
USER32.dll509PeekMessageA
USER32.dll490MsgWaitForMultipleObjects
USER32.dll682TranslateMessage
USER32.dll161DispatchMessageA
USER32.dll196EnableWindow
USER32.dll658ShowWindow
USER32.dll566SendDlgItemMessageA
USER32.dll511PostMessageA
USER32.dll561ScreenToClient
USER32.dll643SetWindowPos
USER32.dll427IsWindow
USER32.dll153DestroyWindow
USER32.dll366GetWindowLongA
USER32.dll595SetDlgItemTextA
GDI32.dll532SetBkMode
GDI32.dll570SetTextColor
GDI32.dll588TextOutA
GDI32.dll510RestoreDC
GDI32.dll531SetBkColor
GDI32.dll80CreateSolidBrush
GDI32.dll592UnrealizeObject
GDI32.dll525SelectPalette
GDI32.dll497RealizePalette
GDI32.dll18BitBlt
GDI32.dll45CreateCompatibleDC
GDI32.dll524SelectObject
GDI32.dll361GetDIBColorTable
GDI32.dll425GetSystemPaletteEntries
GDI32.dll69CreatePalette
GDI32.dll140DeleteDC
GDI32.dll63CreateHalftonePalette
GDI32.dll363GetDeviceCaps
GDI32.dll590TranslateCharsetInfo
GDI32.dll405GetObjectA
GDI32.dll58CreateFontIndirectA
GDI32.dll143DeleteObject
GDI32.dll142DeleteMetaFile
GDI32.dll44CreateCompatibleBitmap
GDI32.dll46CreateDCA
GDI32.dll421GetStockObject
GDI32.dll436GetTextExtentPoint32A
GDI32.dll70CreatePatternBrush
GDI32.dll51CreateDIBitmap
GDI32.dll555SetMetaFileBitsEx
GDI32.dll566SetStretchBltMode
GDI32.dll522SelectClipRgn
GDI32.dll75CreateRectRgn
GDI32.dll559SetPixel
GDI32.dll475PatBlt
GDI32.dll480PlayMetaFile
GDI32.dll583StretchBlt
GDI32.dll39CreateBitmap
GDI32.dll572SetViewportExtEx
GDI32.dll573SetViewportOrgEx
GDI32.dll576SetWindowExtEx
GDI32.dll577SetWindowOrgEx
GDI32.dll553SetMapMode
GDI32.dll517SaveDC
ADVAPI32.dll559SetSecurityDescriptorGroup
ADVAPI32.dll460RegCreateKeyExA
ADVAPI32.dll429OpenThreadToken
ADVAPI32.dll279GetTokenInformation
ADVAPI32.dll29AllocateAndInitializeSid
ADVAPI32.dll214EqualSid
ADVAPI32.dll223FreeSid
ADVAPI32.dll424OpenProcessToken
ADVAPI32.dll331LookupPrivilegeValueA
ADVAPI32.dll28AdjustTokenPrivileges
ADVAPI32.dll480RegOpenKeyA
ADVAPI32.dll468RegEnumKeyA
ADVAPI32.dll469RegEnumKeyExA
ADVAPI32.dll463RegDeleteKeyA
ADVAPI32.dll472RegEnumValueA
ADVAPI32.dll491RegQueryValueExA
ADVAPI32.dll465RegDeleteValueA
ADVAPI32.dll304InitializeSecurityDescriptor
ADVAPI32.dll560SetSecurityDescriptorOwner
ADVAPI32.dll504RegSetValueExA
ADVAPI32.dll558SetSecurityDescriptorDacl
ADVAPI32.dll481RegOpenKeyExA
ADVAPI32.dll456RegCloseKey
SHELL32.dll154ShellExecuteExA
SHELL32.dll101SHGetMalloc
SHELL32.dll109SHGetSpecialFolderLocation
SHELL32.dll106SHGetPathFromIDListA
ole32.dll57CoInitialize
ole32.dll101CoUninitialize
ole32.dll59CoInitializeSecurity
OLEAUT32.dll12
OLEAUT32.dll9
OLEAUT32.dll200
OLEAUT32.dll7
OLEAUT32.dll4
OLEAUT32.dll2
OLEAUT32.dll6
OLEAUT32.dll5
LZ32.dll9LZOpenFileA
LZ32.dll5LZCopy
LZ32.dll3LZClose
msi.dll87
msi.dll168
msi.dll8
msi.dll136
msi.dll141
RPCRT4.dll484UuidToStringA
RPCRT4.dll466RpcStringFreeA
RPCRT4.dll476UuidCreate

StringTable 040904B0

CompanyNameAcresso Software Inc.
FileDescriptionInstallScript Setup Launcher
FileVersion16.0.400
InternalNameSetup
LegalCopyrightCopyright (C) 2009 Acresso Software Inc. and/or InstallShield Co. Inc. All Rights Reserved.
OriginalFilenameSetup.exe
ProductNameInstallShield
ProductVersion16.0
Internal Build Number92881

VS_FIXEDFILEINFO

FileVersion16.0.0.400
ProductVersion16.0.0.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS4
FileType2
FileSubtype0

Signers (1)

issuer: /C=JP/O=Japanese Government/OU=ApplicationCA
serial: 353838

Certificates (3)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA
        Validity
            Not Before: Jun 15 00:00:00 2007 GMT
            Not After : Jun 14 23:59:59 2012 GMT
        Subject: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (1024 bit)
                Modulus:
                    00:c4:b5:f2:52:15:bc:88:86:60:29:16:4a:5b:2f:
                    4b:91:6b:87:91:f3:35:54:58:35:ea:d1:36:5e:62:
                    4d:52:51:34:71:c2:7b:66:1d:89:c8:dd:2a:c4:6a:
                    0a:f6:37:d9:98:74:91:f6:92:ae:b0:b5:76:96:f1:
                    a9:4a:63:45:47:2e:6b:0b:92:4e:4b:2b:8c:ee:58:
                    4a:8b:d4:07:e4:1a:2c:f8:82:aa:58:d9:cd:42:f3:
                    2d:c0:75:de:8d:ab:c7:8e:1d:9a:6c:4c:08:95:1e:
                    de:db:ef:67:e1:72:c2:49:c2:9e:60:3c:e1:e2:be:
                    16:a3:63:78:69:14:7b:ad:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com

            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.verisign.com/tss-ca.crl

            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation
            X509v3 Subject Alternative Name: 
                DirName:/CN=TSA1-2
    Signature Algorithm: sha1WithRSAEncryption
         50:c5:4b:c8:24:80:df:e4:0d:24:c2:de:1a:b1:a1:02:a1:a6:
         82:2d:0c:83:15:81:37:0a:82:0e:2c:b0:5a:17:61:b5:d8:05:
         fe:88:db:f1:91:91:b3:56:1a:40:a6:eb:92:be:38:39:b0:75:
         36:74:3a:98:4f:e4:37:ba:99:89:ca:95:42:1d:b0:b9:c7:a0:
         8d:57:e0:fa:d5:64:04:42:35:4e:01:d1:33:a2:17:c8:4d:aa:
         27:c7:f2:e1:86:4c:02:38:4d:83:78:c6:fc:53:e0:eb:e0:06:
         87:dd:a4:96:9e:5e:0c:98:e2:a5:be:bf:82:85:c3:60:e1:df:
         ad:28:d8:c7:a5:4b:64:da:c7:1b:5b:bd:ac:39:08:d5:38:22:
         a1:33:8b:2f:8a:9a:eb:bc:07:21:3f:44:41:09:07:b5:65:1c:
         24:bc:48:d3:44:80:eb:a1:cf:c9:02:b4:14:cf:54:c7:16:a3:
         80:5c:f9:79:3e:5d:72:7d:88:17:9e:2c:43:a2:ca:53:ce:7d:
         3d:f6:2a:3a:b8:4f:94:00:a5:6d:0a:83:5d:f9:5e:53:f4:18:
         b3:57:0f:70:c3:fb:f5:ad:95:a0:0e:17:de:c4:16:80:60:c9:
         0f:2b:6e:86:04:f1:eb:f4:78:27:d1:05:c5:ee:34:5b:5e:b9:
         49:32:f2:33
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
        Validity
            Not Before: Dec  4 00:00:00 2003 GMT
            Not After : Dec  3 23:59:59 2013 GMT
        Subject: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ca:b2:a4:cc:cd:20:af:0a:7d:89:ac:87:75:
                    f0:b4:4e:f1:df:c1:0f:bf:67:61:bd:a3:64:1c:da:
                    bb:f9:ca:33:ab:84:30:89:58:7e:8c:db:6b:dd:36:
                    9e:0f:bf:d1:ec:78:f2:77:a6:7e:6f:3c:bf:93:af:
                    0d:ba:68:f4:6c:94:ca:bd:52:2d:ab:48:3d:f5:b6:
                    d5:5d:5f:1b:02:9f:fa:2f:6b:1e:a4:f7:a3:9a:a6:
                    1a:c8:02:e1:7f:4c:52:e3:0e:60:ec:40:1c:7e:b9:
                    0d:de:3f:c7:b4:df:87:bd:5f:7a:6a:31:2e:03:99:
                    81:13:a8:47:20:ce:31:73:0d:57:2d:cd:78:34:33:
                    95:12:99:12:b9:de:68:2f:aa:e6:e3:c2:8a:8c:2a:
                    c3:8b:21:87:66:bd:83:58:57:6f:75:bf:3c:aa:26:
                    87:5d:ca:10:15:3c:9f:84:ea:54:c1:0a:6e:c4:fe:
                    c5:4a:dd:b9:07:11:97:22:7c:db:3e:27:d1:1e:78:
                    ec:9f:31:c9:f1:e6:22:19:db:c4:b3:47:43:9a:1a:
                    5f:a0:1e:90:e4:5e:f5:ee:7c:f1:7d:ab:62:01:8f:
                    f5:4d:0b:de:d0:22:56:a8:95:cd:ae:88:76:ae:ee:
                    ba:0d:f3:e4:4d:d9:a0:fb:68:a0:ae:14:3b:b3:87:
                    c1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com

            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.verisign.com/ThawteTimestampingCA.crl

            X509v3 Extended Key Usage: 
                Time Stamping
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=TSA2048-1-53
    Signature Algorithm: sha1WithRSAEncryption
         4a:6b:f9:ea:58:c2:44:1c:31:89:79:99:2b:96:bf:82:ac:01:
         d6:1c:4c:cd:b0:8a:58:6e:df:08:29:a3:5e:c8:ca:93:13:e7:
         04:52:0d:ef:47:27:2f:00:38:b0:e4:c9:93:4e:9a:d4:22:62:
         15:f7:3f:37:21:4f:70:31:80:f1:8b:38:87:b3:e8:e8:97:00:
         fe:cf:55:96:4e:24:d2:a9:27:4e:7a:ae:b7:61:41:f3:2a:ce:
         e7:c9:d9:5e:dd:bb:2b:85:3e:b5:9d:b5:d9:e1:57:ff:be:b4:
         c5:7e:f5:cf:0c:9e:f0:97:fe:2b:d3:3b:52:1b:1b:38:27:f7:
         3f:4a
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3487800 (0x353838)
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=JP, O=Japanese Government, OU=ApplicationCA
        Validity
            Not Before: Sep 30 15:00:00 2010 GMT
            Not After : Sep 30 14:59:59 2013 GMT
        Subject: C=JP, O=Japanese Government, OU=Ministry of Finance, CN=National Tax Agency(e-Tax)
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (1024 bit)
                Modulus:
                    00:bd:ab:08:40:cf:42:98:cb:d7:71:37:4c:52:74:
                    8d:a4:f4:83:3d:a2:dc:47:0e:c4:6f:ab:4c:5b:ca:
                    3f:dd:c2:d7:ac:69:df:79:17:e6:44:a4:85:2f:3f:
                    1d:e8:4c:62:13:fc:e3:04:40:70:c6:f2:19:cb:be:
                    ee:16:59:48:e7:8c:a6:73:ad:87:b9:eb:41:58:ed:
                    66:29:0a:75:67:15:73:75:d6:40:e1:81:a6:28:3f:
                    e9:f5:2c:90:89:b7:43:b5:8c:78:73:ff:5f:3e:0b:
                    4b:39:08:96:47:90:cb:e2:8c:9c:20:39:85:d5:dd:
                    b5:e8:43:00:40:8d:69:c2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:54:5A:CB:26:3F:71:CC:94:46:0D:96:53:EA:6B:48:D0:93:FE:42:75

            X509v3 Subject Key Identifier: 
                79:39:4A:12:27:38:F1:CD:69:D9:D1:3F:92:52:16:91:FE:C6:09:35
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 Certificate Policies: 
                Policy: 0.2.440.100145.8.4.1.1.20
                  CPS: http://www.gpki.go.jp/apca/cpcps/index.html

            X509v3 Issuer Alternative Name: 
                DirName:/C=JP/O=\xE6\x97\xA5\xE6\x9C\xAC\xE5\x9B\xBD\xE6\x94\xBF\xE5\xBA\x9C/OU=\xE3\x82\xA2\xE3\x83\x97\xE3\x83\xAA\xE3\x82\xB1\xE3\x83\xBC\xE3\x82\xB7\xE3\x83\xA7\xE3\x83\xB3CA
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://dir.gpki.go.jp/ApplicationCA.crl
                  URI:http://dir.gpki.hq.admix.go.jp/ApplicationCA.crl

    Signature Algorithm: sha1WithRSAEncryption
         85:6c:49:ca:b5:a1:f8:18:6a:bb:4d:b1:46:3d:23:74:3f:3c:
         04:ba:ce:91:ab:60:b5:10:f1:be:09:24:eb:73:17:78:ff:81:
         89:7f:10:f3:ef:1c:87:82:e7:c7:45:ea:d0:15:bb:56:30:c0:
         43:34:03:bd:ec:a9:d9:1d:5e:1e:42:83:ee:45:ca:48:89:00:
         09:63:a1:0b:7a:d7:9e:44:3e:20:74:99:c8:55:92:8e:cf:b9:
         08:fb:8c:77:b1:0b:81:33:55:e7:f0:c1:f6:ff:8c:f4:67:50:
         e3:df:d6:cc:e1:cd:e3:41:b1:65:3e:96:f2:83:3f:b4:1f:fb:
         ec:53:90:09:d7:f4:c1:99:16:63:80:41:bf:c4:2f:a2:10:7c:
         ef:43:14:89:5d:9c:45:6a:02:8c:5c:b4:69:aa:03:4b:13:20:
         32:34:1b:b7:d1:b9:3a:1c:cb:95:44:e2:11:6a:cf:20:b3:84:
         a9:6e:c6:90:2b:88:19:06:12:99:36:6a:e0:a1:d8:c5:c5:74:
         47:af:aa:80:19:17:a0:d4:2a:4c:25:8c:89:b1:7e:e3:b4:60:
         59:61:fd:81:83:e1:ff:e0:60:90:63:75:01:de:5a:5a:d1:36:
         00:fc:e7:2b:6a:e6:2d:dd:a8:46:bc:94:0c:94:34:ce:76:c4:
         ba:16:88:a3
pkcs7-signedData
  • 1
    • SHA1: nil
    • 1.3.6.1.4.1.311.2.1.4
      • #0
        • 1.3.6.1.4.1.311.2.1.15
          • : 
            00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |
        • SHA1
          • 8a e6 bf c7 2f cd 3e ef  92 b3 cc 28 92 be 19 eb  |..../.>....(....|
83 85 e1 d7                                       |....            |
    • Certificates
      • Certificate #0
        • 2
          • 38:25:D7:FA:F8:61:AF:9E:F4:90:E7:26:B5:D6:5A:D5
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • O: VeriSign, Inc.
            • CN: VeriSign Time Stamping Services CA
          • 2007-06-15 00:00:00 UTC: 2012-06-14 23:59:59 UTC
          • Subject
            • C: US
            • O: VeriSign, Inc.
            • CN: VeriSign Time Stamping Services Signer - G2
          • #5
            • rsaEncryption: nil
            • C4:B5:F2:52:15:BC:88:86:60:29:16:4A:5B:2F:4B:91:
              6B:87:91:F3:35:54:58:35:EA:D1:36:5E:62:4D:52:51:
              34:71:C2:7B:66:1D:89:C8:DD:2A:C4:6A:0A:F6:37:D9:
              98:74:91:F6:92:AE:B0:B5:76:96:F1:A9:4A:63:45:47:
              2E:6B:0B:92:4E:4B:2B:8C:EE:58:4A:8B:D4:07:E4:1A:
              2C:F8:82:AA:58:D9:CD:42:F3:2D:C0:75:DE:8D:AB:C7:
              8E:1D:9A:6C:4C:08:95:1E:DE:DB:EF:67:E1:72:C2:49:
              C2:9E:60:3C:E1:E2:BE:16:A3:63:78:69:14:7B:AD:2D              : 0x010001
          • X509v3 extensions
            • authorityInfoAccess
              • OCSP: http://ocsp.verisign.com
            • basicConstraints
              • true
              • nil
            • crlDistributionPoints: http://crl.verisign.com/tss-ca.crl
            • extendedKeyUsage: true, timeStamping
            • keyUsage: true, 0xc0
            • subjectAltName
              • CN: TSA1-2
        • RSA-SHA1: 
          50 c5 4b c8 24 80 df e4  0d 24 c2 de 1a b1 a1 02  |P.K.$....$......|
a1 a6 82 2d 0c 83 15 81  37 0a 82 0e 2c b0 5a 17  |...-....7...,.Z.|
61 b5 d8 05 fe 88 db f1  91 91 b3 56 1a 40 a6 eb  |a..........V.@..|
92 be 38 39 b0 75 36 74  3a 98 4f e4 37 ba 99 89  |..89.u6t:.O.7...|
ca 95 42 1d b0 b9 c7 a0  8d 57 e0 fa d5 64 04 42  |..B......W...d.B|
35 4e 01 d1 33 a2 17 c8  4d aa 27 c7 f2 e1 86 4c  |5N..3...M.'....L|
02 38 4d 83 78 c6 fc 53  e0 eb e0 06 87 dd a4 96  |.8M.x..S........|
9e 5e 0c 98 e2 a5 be bf  82 85 c3 60 e1 df ad 28  |.^.........`...(|
d8 c7 a5 4b 64 da c7 1b  5b bd ac 39 08 d5 38 22  |...Kd...[..9..8"|
a1 33 8b 2f 8a 9a eb bc  07 21 3f 44 41 09 07 b5  |.3./.....!?DA...|
65 1c 24 bc 48 d3 44 80  eb a1 cf c9 02 b4 14 cf  |e.$.H.D.........|
54 c7 16 a3 80 5c f9 79  3e 5d 72 7d 88 17 9e 2c  |T....\.y>]r}...,|
43 a2 ca 53 ce 7d 3d f6  2a 3a b8 4f 94 00 a5 6d  |C..S.}=.*:.O...m|
0a 83 5d f9 5e 53 f4 18  b3 57 0f 70 c3 fb f5 ad  |..].^S...W.p....|
95 a0 0e 17 de c4 16 80  60 c9 0f 2b 6e 86 04 f1  |........`..+n...|
eb f4 78 27 d1 05 c5 ee  34 5b 5e b9 49 32 f2 33  |..x'....4[^.I2.3|
      • Certificate #1
        • 2
          • 47:BF:19:95:DF:8D:52:46:43:F7:DB:6D:48:0D:31:A4
          • RSA-SHA1: nil
          • Issuer
            • C: ZA
            • ST: Western Cape
            • L: Durbanville
            • O: Thawte
            • OU: Thawte Certification
            • CN: Thawte Timestamping CA
          • 2003-12-04 00:00:00 UTC: 2013-12-03 23:59:59 UTC
          • Subject
            • C: US
            • O: VeriSign, Inc.
            • CN: VeriSign Time Stamping Services CA
          • #5
            • rsaEncryption: nil
            • A9:CA:B2:A4:CC:CD:20:AF:0A:7D:89:AC:87:75:F0:B4:
              4E:F1:DF:C1:0F:BF:67:61:BD:A3:64:1C:DA:BB:F9:CA:
              33:AB:84:30:89:58:7E:8C:DB:6B:DD:36:9E:0F:BF:D1:
              EC:78:F2:77:A6:7E:6F:3C:BF:93:AF:0D:BA:68:F4:6C:
              94:CA:BD:52:2D:AB:48:3D:F5:B6:D5:5D:5F:1B:02:9F:
              FA:2F:6B:1E:A4:F7:A3:9A:A6:1A:C8:02:E1:7F:4C:52:
              E3:0E:60:EC:40:1C:7E:B9:0D:DE:3F:C7:B4:DF:87:BD:
              5F:7A:6A:31:2E:03:99:81:13:A8:47:20:CE:31:73:0D:
              57:2D:CD:78:34:33:95:12:99:12:B9:DE:68:2F:AA:E6:
              E3:C2:8A:8C:2A:C3:8B:21:87:66:BD:83:58:57:6F:75:
              BF:3C:AA:26:87:5D:CA:10:15:3C:9F:84:EA:54:C1:0A:
              6E:C4:FE:C5:4A:DD:B9:07:11:97:22:7C:DB:3E:27:D1:
              1E:78:EC:9F:31:C9:F1:E6:22:19:DB:C4:B3:47:43:9A:
              1A:5F:A0:1E:90:E4:5E:F5:EE:7C:F1:7D:AB:62:01:8F:
              F5:4D:0B:DE:D0:22:56:A8:95:CD:AE:88:76:AE:EE:BA:
              0D:F3:E4:4D:D9:A0:FB:68:A0:AE:14:3B:B3:87:C1:BB              : 0x010001
          • X509v3 extensions
            • authorityInfoAccess
              • OCSP: http://ocsp.verisign.com
            • basicConstraints
              • true
              • true: 0
            • crlDistributionPoints: http://crl.verisign.com/ThawteTimestampingCA.crl
            • extendedKeyUsage: timeStamping
            • keyUsage: true, 6
            • subjectAltName
              • CN: TSA2048-1-53
        • RSA-SHA1: 
          4a 6b f9 ea 58 c2 44 1c  31 89 79 99 2b 96 bf 82  |Jk..X.D.1.y.+...|
ac 01 d6 1c 4c cd b0 8a  58 6e df 08 29 a3 5e c8  |....L...Xn..).^.|
ca 93 13 e7 04 52 0d ef  47 27 2f 00 38 b0 e4 c9  |.....R..G'/.8...|
93 4e 9a d4 22 62 15 f7  3f 37 21 4f 70 31 80 f1  |.N.."b..?7!Op1..|
8b 38 87 b3 e8 e8 97 00  fe cf 55 96 4e 24 d2 a9  |.8........U.N$..|
27 4e 7a ae b7 61 41 f3  2a ce e7 c9 d9 5e dd bb  |'Nz..aA.*....^..|
2b 85 3e b5 9d b5 d9 e1  57 ff be b4 c5 7e f5 cf  |+.>.....W....~..|
0c 9e f0 97 fe 2b d3 3b  52 1b 1b 38 27 f7 3f 4a  |.....+.;R..8'.?J|
      • Certificate #2
        • 2
          • 0x353838
          • RSA-SHA1: nil
          • Issuer
            • C: JP
            • O: Japanese Government
            • OU: ApplicationCA
          • 2010-09-30 15:00:00 UTC: 2013-09-30 14:59:59 UTC
          • Subject
            • C: JP
            • O: Japanese Government
            • OU: Ministry of Finance
            • CN: National Tax Agency(e-Tax)
          • #5
            • rsaEncryption: nil
            • BD:AB:08:40:CF:42:98:CB:D7:71:37:4C:52:74:8D:A4:
              F4:83:3D:A2:DC:47:0E:C4:6F:AB:4C:5B:CA:3F:DD:C2:
              D7:AC:69:DF:79:17:E6:44:A4:85:2F:3F:1D:E8:4C:62:
              13:FC:E3:04:40:70:C6:F2:19:CB:BE:EE:16:59:48:E7:
              8C:A6:73:AD:87:B9:EB:41:58:ED:66:29:0A:75:67:15:
              73:75:D6:40:E1:81:A6:28:3F:E9:F5:2C:90:89:B7:43:
              B5:8C:78:73:FF:5F:3E:0B:4B:39:08:96:47:90:CB:E2:
              8C:9C:20:39:85:D5:DD:B5:E8:43:00:40:8D:69:C2:5D              : 0x010001
          • #6
            • authorityKeyIdentifier: 
              54 5a cb 26 3f 71 cc 94  46 0d 96 53 ea 6b 48 d0  |TZ.&?q..F..S.kH.|
93 fe 42 75                                       |..Bu            |
            • subjectKeyIdentifier: 
              79 39 4a 12 27 38 f1 cd  69 d9 d1 3f 92 52 16 91  |y9J.'8..i..?.R..|
fe c6 09 35                                       |...5            |
            • keyUsage: true, 0x80
            • extendedKeyUsage: codeSigning
            • certificatePolicies
              • 0.2.440.100145.8.4.1.1.20
                • id-qt-cps: http://www.gpki.go.jp/apca/cpcps/index.html
            • issuerAltName
              • #0
                • C: JP
                • O: 
                  e6 97 a5 e6 9c ac e5 9b  bd e6 94 bf e5 ba 9c     |............... |
                • OU: 
                  e3 82 a2 e3 83 97 e3 83  aa e3 82 b1 e3 83 bc e3  |................|
82 b7 e3 83 a7 e3 83 b3  43 41                    |........CA      |
            • crlDistributionPoints
              • http://dir.gpki.go.jp/ApplicationCA.crl: http://dir.gpki.hq.admix.go.jp/ApplicationCA.crl
        • RSA-SHA1: 
          85 6c 49 ca b5 a1 f8 18  6a bb 4d b1 46 3d 23 74  |.lI.....j.M.F=#t|
3f 3c 04 ba ce 91 ab 60  b5 10 f1 be 09 24 eb 73  |?<.....`.....$.s|
17 78 ff 81 89 7f 10 f3  ef 1c 87 82 e7 c7 45 ea  |.x............E.|
d0 15 bb 56 30 c0 43 34  03 bd ec a9 d9 1d 5e 1e  |...V0.C4......^.|
42 83 ee 45 ca 48 89 00  09 63 a1 0b 7a d7 9e 44  |B..E.H...c..z..D|
3e 20 74 99 c8 55 92 8e  cf b9 08 fb 8c 77 b1 0b  |> t..U.......w..|
81 33 55 e7 f0 c1 f6 ff  8c f4 67 50 e3 df d6 cc  |.3U.......gP....|
e1 cd e3 41 b1 65 3e 96  f2 83 3f b4 1f fb ec 53  |...A.e>...?....S|
90 09 d7 f4 c1 99 16 63  80 41 bf c4 2f a2 10 7c  |.......c.A../..||
ef 43 14 89 5d 9c 45 6a  02 8c 5c b4 69 aa 03 4b  |.C..].Ej..\.i..K|
13 20 32 34 1b b7 d1 b9  3a 1c cb 95 44 e2 11 6a  |. 24....:...D..j|
cf 20 b3 84 a9 6e c6 90  2b 88 19 06 12 99 36 6a  |. ...n..+.....6j|
e0 a1 d8 c5 c5 74 47 af  aa 80 19 17 a0 d4 2a 4c  |.....tG.......*L|
25 8c 89 b1 7e e3 b4 60  59 61 fd 81 83 e1 ff e0  |%...~..`Ya......|
60 90 63 75 01 de 5a 5a  d1 36 00 fc e7 2b 6a e6  |`.cu..ZZ.6...+j.|
2d dd a8 46 bc 94 0c 94  34 ce 76 c4 ba 16 88 a3  |-..F....4.v.....|
    • Signer
      • 1
      • unnamed
        • #0
          • C: JP
          • O: Japanese Government
          • OU: ApplicationCA
        • 0x353838
      • SHA1: nil
      • #3
        • 1.3.6.1.4.1.311.2.1.12
          • nil
        • contentType: 1.3.6.1.4.1.311.2.1.4
        • 1.3.6.1.4.1.311.2.1.11: msCodeInd
        • messageDigest: 
          96 95 64 88 5f a2 67 52  de 6c 66 ef 3b dd 2b 09  |..d._.gR.lf.;.+.|
b4 04 af ad                                       |....            |
      • rsaEncryption: 
        6e bf c7 a3 76 92 a0 87  05 2f 0b 24 80 16 d2 0b  |n...v..../.$....|
74 4f 63 79 20 b7 12 35  86 96 0e b7 90 ba 31 3c  |tOcy ..5......1<|
16 e4 bd 70 fe da d2 0d  05 d2 c9 3e f6 88 bf 66  |...p.......>...f|
1d 70 1a ff 44 2d 39 a7  32 94 a9 4e 4d ba ad bc  |.p..D-9.2..NM...|
39 27 58 b7 6c 50 3b 00  82 8d 95 89 34 cb 53 1a  |9'X.lP;.....4.S.|
1a 16 7e 6d 51 4b 45 17  b9 3a 30 e0 9f 69 6c 52  |..~mQKE..:0..ilR|
aa 9e d7 04 8c ee 11 e5  0a 2a 62 13 55 75 1f 3c  |.........*b.Uu.<|
ac a2 30 46 d7 be dc a7  0d 1c 28 99 53 73 fb 91  |..0F......(.Ss..|
      • countersignature
        • 1
          • unnamed
            • #0
              • C: US
              • O: VeriSign, Inc.
              • CN: VeriSign Time Stamping Services CA
            • 38:25:D7:FA:F8:61:AF:9E:F4:90:E7:26:B5:D6:5A:D5
          • SHA1: nil
          • #2
            • contentType: pkcs7-data
            • signingTime: 2011-11-28 04:32:26 UTC
            • messageDigest: 
              9a f8 39 bf b9 66 a3 06  c4 16 5c e6 c4 3f 68 67  |..9..f....\..?hg|
b3 0d 11 96                                       |....            |
          • rsaEncryption: 
            92 64 ea d2 9d c8 8d 2a  f3 5d 18 0a d3 ee 77 b5  |.d.....*.]....w.|
80 29 91 0b 71 4c e3 61  07 f9 fb 87 b6 08 b6 29  |.)..qL.a.......)|
fe 47 f3 5e 74 ec ff 58  c7 21 8a 1e 99 ab 1a 05  |.G.^t..X.!......|
fb a2 11 7e 4e 1d 96 5f  25 2c 66 e3 cf d4 89 0b  |...~N.._%,f.....|
e8 55 6a cf 77 7c f8 f7  10 03 ca 6b 2e 3e 75 7b  |.Uj.w|.....k.>u{|
a2 9b 12 f0 f7 a9 91 8a  0d d0 39 d8 1e 6f 90 62  |..........9..o.b|
93 2b 58 6e ae d5 08 52  60 e0 a1 eb db 95 eb 5a  |.+Xn...R`......Z|
59 d6 e6 6b 60 29 2c 55  a3 0d 24 1a c6 ff c7 19  |Y..k`),U..$.....|
offsetsizetypecomment
0802816EXE09/22/2009 03:59:51#
15c115HTM#
7b60c8638GIF(0 x 18759)#
f587808074PNG(110 x 95)#
282bd65577024DLL09/22/2009 03:58:40#
28b8d80802816EXE09/22/2009 03:59:51#
293438c8638GIF(0 x 18759)#
297cd80364696BINoverlay data past EOF#
Scanning the drive for archives:
1 file, 43867672 bytes (42 MiB)


--
Type = PE
Physical Size = 43867672
CPU = x86
Characteristics = Executable 32-bit NoRelocs NoLineNums NoLocalSyms
Created = 2009-09-22 03:59:51
Headers Size = 1024
Checksum = 43875690
Name = Setup.exe                                        
Image Size = 823296
Section Alignment = 4096
File Alignment = 512
Code Size = 416256
Initialized Data Size = 385536
Uninitialized Data Size = 0
Linker Version = 6.0
OS Version = 4.0
Image Version = 0.0
Subsystem Version = 5.0
Subsystem = Windows GUI
DLL Characteristics = TerminalServerAware
Stack Reserve = 1048576
Stack Commit = 4096
Heap Reserve = 1048576
Heap Commit = 4096
Image Base = 4194304
Comment = FileVersion: 16.0.0.400
FileVersion: 16.0.400                                        
ProductVersion: 16.0.0.0
ProductVersion: 16.0                                        
CompanyName: Acresso Software Inc.                                        
FileDescription: InstallScript Setup Launcher                                        
InternalName: Setup                                        
LegalCopyright: Copyright (C) 2009 Acresso Software Inc. and/or InstallShield Co. Inc. All Rights Reserved.                                        
OriginalFilename: Setup.exe                                        
ProductName: InstallShield                                        
Internal Build Number: 92881                                        
----
Path = [0]
Size = 43061008
Packed Size = 43061008
Virtual Size = 43061008
Offset = 802816
--
Path = [0]
Type = gzip
WARNINGS:
There are data after the end of archive
Offset = 7285784
Physical Size = 211801
Tail Size = 35563423
Headers Size = 27
Streams = 1

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
2002-05-29 15:58:01 .....       903289       211801  libiconv-1.8.tar
------------------- ----- ------------ ------------  ------------------------
2002-05-29 15:58:01             903289       211801  1 files

Warnings: 1
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable







everything is OK